hanoman 0.2.2 → 0.2.4

package/dist/server.js

@@ -4834,7 +4834,10 @@ var init_entities = __esm({
       //
       // LOKAL per mesin: `setting` TIDAK ada di FIELDS sync (server/src/services/sync.ts), jadi dua
       // mesin dengan versi hanoman berbeda tak bisa saling menimpa definisi bolak-balik.
-      builtinAgents: external_exports.record(external_exports.string(), external_exports.string()).default({})
+      builtinAgents: external_exports.record(external_exports.string(), external_exports.string()).default({}),
+      // SPEC-950 · marker safety policy lokal. Terpisah dari fingerprint konten agar policy sekali
+      // jalan tidak membuat seed memperlakukan konfigurasi operator sebagai bawaan.
+      builtinAgentPolicies: external_exports.record(external_exports.string(), external_exports.string()).default({})
     });
     zNotification = external_exports.object({
       id: external_exports.string(),
@@ -4996,6 +4999,15 @@ var init_agent = __esm({
 });
 
 // ../shared/src/custom-agent.ts
+function validateCreateWorkspacePolicy(value, ctx) {
+  if (value.workspacePolicy === "isolated-worktree" && value.runtime !== "claude") {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["workspacePolicy"],
+      message: "isolated-worktree hanya tersedia untuk Claude Code"
+    });
+  }
+}
 function mentionsOf(v) {
   if (!Array.isArray(v)) return [];
   const out4 = [];
@@ -5005,6 +5017,21 @@ function mentionsOf(v) {
 function runtimeOf(v) {
   return typeof v === "string" && AGENT_RUNTIMES.includes(v) ? v : null;
 }
+function activationOf(v) {
+  return typeof v === "string" && AGENT_ACTIVATIONS.includes(v) ? v : "always";
+}
+function workspacePolicyOf(v) {
+  return typeof v === "string" && AGENT_WORKSPACE_POLICIES.includes(v) ? v : "inherit";
+}
+function effortOf(v) {
+  return typeof v === "string" && AGENT_EFFORTS.includes(v) ? v : null;
+}
+function maxTurnsOf(v) {
+  return typeof v === "number" && Number.isInteger(v) && v >= 1 && v <= 200 ? v : null;
+}
+function timeoutSecondsOf(v) {
+  return typeof v === "number" && Number.isInteger(v) && v >= 30 && v <= 3600 ? v : null;
+}
 function toolsOf(v) {
   if (!Array.isArray(v)) return null;
   const out4 = [];
@@ -5048,7 +5075,7 @@ function effectiveAgents(globals, project) {
   for (const a of project) byName.set(a.name, a);
   return [...byName.values()].filter((a) => a.enabled).sort((x, y) => x.name.localeCompare(y.name));
 }
-var AGENT_RUNTIMES, zAgentRuntime, AGENT_RUNTIME_LABELS, AGENT_NAME_RE, DEFAULT_AGENT_TOOLS, MENTION_TOOL, MENTION_MAX_HOPS, GLOBAL_SCOPE, zCustomAgent, zCreateCustomAgent, zUpdateCustomAgent, customAgentId;
+var AGENT_RUNTIMES, zAgentRuntime, AGENT_RUNTIME_LABELS, AGENT_ACTIVATIONS, zAgentActivation, AGENT_EFFORTS, zAgentEffort, AGENT_WORKSPACE_POLICIES, zAgentWorkspacePolicy, AGENT_NAME_RE, DEFAULT_AGENT_TOOLS, MENTION_TOOL, MENTION_MAX_HOPS, GLOBAL_SCOPE, zCustomAgent, zCreateCustomAgentFields, zCreateCustomAgent, zUpdateCustomAgent, customAgentId, AGENT_DISPOSITIONS;
 var init_custom_agent = __esm({
   "../shared/src/custom-agent.ts"() {
     "use strict";
@@ -5059,6 +5086,12 @@ var init_custom_agent = __esm({
       claude: "Claude Code",
       codex: "Codex CLI"
     };
+    AGENT_ACTIVATIONS = ["always", "smart"];
+    zAgentActivation = external_exports.enum(AGENT_ACTIVATIONS);
+    AGENT_EFFORTS = ["ultra", "max", "xhigh", "high", "medium", "low", "ultracode"];
+    zAgentEffort = external_exports.enum(AGENT_EFFORTS);
+    AGENT_WORKSPACE_POLICIES = ["inherit", "read-only", "isolated-worktree"];
+    zAgentWorkspacePolicy = external_exports.enum(AGENT_WORKSPACE_POLICIES);
     AGENT_NAME_RE = /^[a-z][a-z0-9-]{1,39}$/;
     DEFAULT_AGENT_TOOLS = [
       "Read",
@@ -5083,11 +5116,16 @@ var init_custom_agent = __esm({
       model: external_exports.string().nullable(),
       mentions: external_exports.array(external_exports.string()).nullable(),
       runtime: external_exports.enum(AGENT_RUNTIMES).nullable(),
+      activation: zAgentActivation.default("always"),
+      effort: zAgentEffort.nullable().default(null),
+      workspacePolicy: zAgentWorkspacePolicy.default("inherit"),
+      maxTurns: external_exports.number().int().min(1).max(200).nullable().default(null),
+      timeoutSeconds: external_exports.number().int().min(30).max(3600).nullable().default(null),
       enabled: external_exports.boolean(),
       createdAt: external_exports.string(),
       updatedAt: external_exports.string()
     });
-    zCreateCustomAgent = external_exports.object({
+    zCreateCustomAgentFields = external_exports.object({
       projectId: external_exports.string().nullable().optional(),
       name: external_exports.string().regex(AGENT_NAME_RE),
       description: external_exports.string().trim().min(1).max(500),
@@ -5097,10 +5135,31 @@ var init_custom_agent = __esm({
       mentions: external_exports.array(external_exports.string()).nullable().optional(),
       // SPEC-484 · ADR-0101 · PENYARING mesin sesi, bukan pemilih proses. null/absen = ikut sesi induk.
       runtime: external_exports.enum(AGENT_RUNTIMES).nullable().optional(),
+      activation: zAgentActivation.optional(),
+      effort: zAgentEffort.nullable().optional(),
+      workspacePolicy: zAgentWorkspacePolicy.optional(),
+      maxTurns: external_exports.number().int().min(1).max(200).nullable().optional(),
+      timeoutSeconds: external_exports.number().int().min(30).max(3600).nullable().optional(),
       enabled: external_exports.boolean().optional()
     });
-    zUpdateCustomAgent = zCreateCustomAgent.omit({ name: true, projectId: true }).partial();
+    zCreateCustomAgent = zCreateCustomAgentFields.superRefine(validateCreateWorkspacePolicy);
+    zUpdateCustomAgent = zCreateCustomAgentFields.omit({ name: true, projectId: true }).partial().superRefine((value, ctx) => {
+      if (value.workspacePolicy === "isolated-worktree" && value.runtime !== void 0 && value.runtime !== "claude") {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["workspacePolicy"],
+          message: "isolated-worktree hanya tersedia untuk Claude Code"
+        });
+      }
+    });
     customAgentId = (projectId, name2) => `${projectId ?? GLOBAL_SCOPE}:${name2}`;
+    AGENT_DISPOSITIONS = [
+      "pending",
+      "accepted",
+      "partial",
+      "rejected",
+      "false-positive"
+    ];
   }
 });
 
@@ -5115,6 +5174,12 @@ var init_builtin_agents = __esm({
         description: "Gunakan saat perlu tahu DI MANA sesuatu dikerjakan di basis kode, atau bagaimana sebuah alur data mengalir, sebelum menyentuh kode. Ia menyapu banyak berkas dan mengembalikan peta ringkas berisi jangkar path:baris \u2014 bukan isi berkas. Panggil dia alih-alih membaca belasan berkas sendiri.",
         tools: ["Read", "Glob", "Grep"],
         enabledByDefault: true,
+        activation: "smart",
+        effort: "low",
+        workspacePolicy: "read-only",
+        maxTurns: null,
+        timeoutSeconds: null,
+        models: { claude: "haiku", codex: "gpt-5.6-terra" },
         instructions: [
           "Kamu navigator basis kode. Tugasmu MENJAWAB, bukan menyalin.",
           "",
@@ -5141,6 +5206,12 @@ var init_builtin_agents = __esm({
         description: "Gunakan saat ada bug, test merah, atau perilaku tak terduga yang belum jelas sebabnya. Ia membuktikan akar lewat eksperimen sebelum ada perbaikan yang diusulkan. Jangan panggil dia untuk memperbaiki \u2014 dia mendiagnosis.",
         tools: ["Read", "Glob", "Grep", "Bash"],
         enabledByDefault: false,
+        activation: "smart",
+        effort: "high",
+        workspacePolicy: "read-only",
+        maxTurns: null,
+        timeoutSeconds: null,
+        models: { claude: "sonnet", codex: "gpt-5.6" },
         instructions: [
           "Kamu diagnostikus. Kamu TIDAK memperbaiki kode \u2014 kamu membuktikan sebabnya.",
           "",
@@ -5170,7 +5241,13 @@ var init_builtin_agents = __esm({
         name: "qa-verifier",
         description: "Gunakan SEBELUM menyatakan pekerjaan selesai atau test hijau. Ia menjalankan test yang tersentuh perubahan, memisahkan gagal palsu dari regresi, dan membuktikan bahwa test yang lulus itu benar-benar menguji perubahannya.",
         tools: ["Read", "Glob", "Grep", "Bash"],
-        enabledByDefault: true,
+        enabledByDefault: false,
+        activation: "smart",
+        effort: "medium",
+        workspacePolicy: "isolated-worktree",
+        maxTurns: 40,
+        timeoutSeconds: 900,
+        models: { claude: "sonnet", codex: "gpt-5.6-terra" },
         instructions: [
           "Kamu gerbang terakhir sebelum sesuatu diumumkan hijau. Tugasmu MERAGUKAN kehijauan itu.",
           "",
@@ -5182,18 +5259,18 @@ var init_builtin_agents = __esm({
           "   paralelisme antar-berkas test, sisa proses/soket/port dari run sebelumnya, variabel",
           "   lingkungan yang bocor dari shell, dan test yang memang sudah merah SEBELUM perubahan.",
           "   Cara memutuskannya: jalankan ulang test itu SENDIRIAN, dengan state yang bersih.",
-          "4. UJI RELEVANSI \u2014 langkah yang hampir tak pernah dilakukan siapa pun, dan tanpa ini 'hijau'",
-          "   tak berarti apa-apa: siapkan pohon kerja terpisah di commit SEBELUM perubahan",
-          "   (`git worktree add --detach <dir> <base-sha>`), pasang test barunya di sana, jalankan,",
-          "   dan tuntut test itu MERAH. Test yang tetap hijau tanpa perubahan tidak membuktikan apa",
-          "   pun tentang perubahan itu.",
-          "5. Bersihkan pohon kerja sementara (`git worktree remove`).",
+          "4. UJI RELEVANSI hanya di worktree sementara dari `baseSha`, tidak pernah di worktree",
+          "   parent: buat worktree terpisah, pasang patch test di sana, jalankan, dan tuntut test",
+          "   itu MERAH. Bila `baseSha` atau patch test tidak tersedia, laporkan `belum terbukti`;",
+          "   jangan mencoba eksperimen kontrol di source parent.",
+          "5. Bersihkan worktree sementara milikmu. Laporkan secara eksplisit bila cleanup gagal.",
           "",
           "Larangan keras:",
           "- JANGAN `git stash` untuk apa pun. Tumpukan stash milik REPO, bukan pohon kerja \u2014 sesi lain",
           "  bisa mem-pop stash milikmu, dan kamu bisa mem-pop milik mereka. Isolasi memakai",
           "  `git worktree add`, titik.",
           "- JANGAN mengubah test agar lulus. Bila test-nya yang salah, itu temuan, bukan pekerjaan.",
+          "- JANGAN mengubah satu byte pun di worktree parent, termasuk berkas probe sementara.",
           "",
           "Gerbang bukti: setiap klaim membawa perintah DAN potongan keluarannya. Tanpa keluaran, tanpa",
           "klaim. 'Semua test lulus' tanpa keluaran adalah kegagalanmu, bukan laporan.",
@@ -5208,6 +5285,12 @@ var init_builtin_agents = __esm({
         description: "Gunakan saat test yang ada hanya menguji jalur mulus dan kamu ingin batas-batas kontrak benar-benar tertutup. Ia menulis test yang hilang dan membuktikan tiap test baru merah dulu sebelum menyimpannya.",
         tools: ["Read", "Glob", "Grep", "Bash", "Write", "Edit"],
         enabledByDefault: false,
+        activation: "smart",
+        effort: "high",
+        workspacePolicy: "isolated-worktree",
+        maxTurns: null,
+        timeoutSeconds: null,
+        models: { claude: "sonnet", codex: "gpt-5.6" },
         instructions: [
           "Kamu penambal jalur bahagia. Cakupan yang terlihat baik bukan urusanmu \u2014 kontrak yang tak",
           "pernah diuji itu urusanmu.",
@@ -5240,6 +5323,12 @@ var init_builtin_agents = __esm({
         description: "Gunakan sesudah perubahan selesai untuk menemukan tempat LAIN yang seharusnya ikut berubah tapi tidak: daftar kolom, cermin tipe antar-paket, enum kembar, dokumen kontrak, tabel konstanta. Ia mencari kegagalan senyap \u2014 yang tak memunculkan satu pun error.",
         tools: ["Read", "Glob", "Grep", "Bash"],
         enabledByDefault: true,
+        activation: "smart",
+        effort: "medium",
+        workspacePolicy: "read-only",
+        maxTurns: null,
+        timeoutSeconds: null,
+        models: { claude: "sonnet", codex: "gpt-5.6-terra" },
         instructions: [
           "Kamu pencari cermin yang hanyut. Kelas bug yang kamu buru punya satu ciri: TIDAK ADA yang",
           "error. Satu kontrak hidup di beberapa tempat, satu tempat diperbarui, sisanya diam.",
@@ -5272,6 +5361,12 @@ var init_builtin_agents = __esm({
         description: "Gunakan sebelum menutup pekerjaan untuk mengadu apa yang DIMINTA dengan apa yang benar-benar ada di diff. Ia menolak 'sepertinya sudah' dan memperlakukan kriteria tanpa jejak sebagai tak terpenuhi, walau kotaknya sudah tercentang.",
         tools: ["Read", "Glob", "Grep", "Bash"],
         enabledByDefault: false,
+        activation: "smart",
+        effort: "high",
+        workspacePolicy: "read-only",
+        maxTurns: null,
+        timeoutSeconds: null,
+        models: { claude: "sonnet", codex: "gpt-5.6-terra" },
         instructions: [
           "Kamu pengadu janji. Kamu tak menilai bagus atau tidaknya kode \u2014 kamu menilai apakah yang",
           "diminta benar-benar ada.",
@@ -5300,6 +5395,12 @@ var init_builtin_agents = __esm({
         description: "Gunakan sebelum menggabungkan perubahan yang menyentuh route, handler, job, CLI, atau apa pun yang menerima input dari luar. Ia menelusuri jalur konkret dari input tak terpercaya sampai ke tempat ia melukai, dan menolak melaporkan kekhawatiran yang tak bisa ia buktikan jalurnya.",
         tools: ["Read", "Glob", "Grep", "Bash"],
         enabledByDefault: true,
+        activation: "smart",
+        effort: "high",
+        workspacePolicy: "read-only",
+        maxTurns: null,
+        timeoutSeconds: null,
+        models: { claude: "sonnet", codex: "gpt-5.6" },
         instructions: [
           "Kamu penelusur sumber-ke-sink. Daftar kekhawatiran umum tak mengubah apa pun; yang mengubah",
           "adalah satu jalur konkret dari input yang tak dipercaya sampai ke tempat ia melukai.",
@@ -5334,6 +5435,12 @@ var init_builtin_agents = __esm({
         description: "Gunakan saat diff menambah atau menaikkan versi dependensi. Ia memeriksa advisory, lisensi, tanda pemeliharaan, dan \u2014 yang paling sering terlewat \u2014 apakah fungsinya sudah tersedia tanpa dependensi baru itu.",
         tools: ["Read", "Glob", "Grep", "Bash", "WebSearch", "WebFetch"],
         enabledByDefault: false,
+        activation: "smart",
+        effort: "medium",
+        workspacePolicy: "read-only",
+        maxTurns: null,
+        timeoutSeconds: null,
+        models: { claude: "haiku", codex: "gpt-5.6-terra" },
         instructions: [
           "Kamu gerbang rantai pasok. Satu dependensi masuk lewat satu baris diff dan tak pernah",
           "diperiksa lagi seumur hidup proyek \u2014 pemeriksaan itu terjadi sekarang atau tidak sama sekali.",
@@ -5372,12 +5479,23 @@ function modelsForRuntime(rt) {
   if (rt === "codex") return codex2;
   return [...claude, ...codex2];
 }
+function effortsForRuntimeModel(runtime, model) {
+  if (runtime === "claude" || !runtime && model && MODELS.some((entry) => entry.id === model)) {
+    return [...EFFORTS];
+  }
+  const codexModel2 = model ? CODEX_MODELS.find((entry) => entry.id === model) : void 0;
+  if (runtime === "codex" || codexModel2) {
+    return [...codexModel2?.efforts ?? codexCommonEfforts()];
+  }
+  const codex2 = new Set(codexCommonEfforts());
+  return EFFORTS.filter((effort) => codex2.has(effort));
+}
 function expandTools(tools, catalogIds) {
   if (tools === null) return null;
   if (!tools.includes(ALL_TOOLS)) return tools;
   return catalogIds.filter((id) => id !== ALL_TOOLS);
 }
-var ALL_TOOLS, ALL_TOOLS_ENTRY, BUILTIN_AGENT_TOOLS, mcpToolEntry;
+var ALL_TOOLS, ALL_TOOLS_ENTRY, BUILTIN_AGENT_TOOLS, mcpToolEntry, codexCommonEfforts;
 var init_agent_catalog = __esm({
   "../shared/src/agent-catalog.ts"() {
     "use strict";
@@ -5399,6 +5517,10 @@ var init_agent_catalog = __esm({
       label: `${server} \u2014 semua tool`,
       group: "mcp"
     });
+    codexCommonEfforts = () => {
+      const first = CODEX_MODELS[0]?.efforts ?? [];
+      return first.filter((effort) => CODEX_MODELS.every((model) => model.efforts.includes(effort)));
+    };
   }
 });
 
@@ -6679,6 +6801,8 @@ var init_api = __esm({
       leadFlowCancel: (id) => `${API}/lead/flows/${encodeURIComponent(id)}/cancel`,
       // SPEC-450 · ADR-0094 · katalog custom agent. `?projectId=` → himpunan EFEKTIF (global+project).
       customAgents: `${API}/custom-agents`,
+      customAgentMetrics: `${API}/custom-agents/metrics`,
+      customAgentInvocation: (id) => `${API}/custom-agents/invocations/${encodeURIComponent(id)}`,
       // SPEC-484 · ADR-0101 · sumber daftar tools/model/runtime untuk form (mention dari `customAgents`).
       customAgentCatalog: `${API}/custom-agents/catalog`,
       // SPEC-481 · ADR-0100 · webhook keluar (cookie-only)
@@ -12321,8 +12445,8 @@ var init_git = __esm({
       // di dalam repo induk, yang menjawab "true" untuk pertanyaan pertama. cwd yang tak ada membuat
       // spawnSync gagal (`status` null), dan itu sudah tertangkap `!== 0`.
       worktreeAlive: (path) => {
-        const inside = spawnSync("git", ["rev-parse", "--is-inside-work-tree"], { cwd: path, encoding: "utf8" });
-        if (inside.status !== 0 || inside.stdout.trim() !== "true") return false;
+        const inside2 = spawnSync("git", ["rev-parse", "--is-inside-work-tree"], { cwd: path, encoding: "utf8" });
+        if (inside2.status !== 0 || inside2.stdout.trim() !== "true") return false;
         const top = spawnSync("git", ["rev-parse", "--show-toplevel"], { cwd: path, encoding: "utf8" });
         return top.status === 0 && samePath(top.stdout.trim(), path);
       },
@@ -12353,17 +12477,27 @@ var init_git = __esm({
 });
 
 // ../runner/src/settings.ts
-var EVENT_HOOK_COMMAND, guardSettings;
+var EVENT_SPOOL_SCRIPT, EVENT_HOOK_COMMAND, guardSettings;
 var init_settings2 = __esm({
   "../runner/src/settings.ts"() {
     "use strict";
+    EVENT_SPOOL_SCRIPT = [
+      'const fs=require("node:fs"),p=require("node:path"),c=require("node:crypto")',
+      'let d=""',
+      'process.stdin.setEncoding("utf8")',
+      'process.stdin.on("data",x=>d+=x)',
+      'process.stdin.on("end",()=>{let t="";try{const n=Date.now()+"-"+process.pid+"-"+c.randomUUID();t=p.join(process.env.HANOMAN_EVENT_DIR,n+".tmp");const f=p.join(process.env.HANOMAN_EVENT_DIR,n+".json");fs.writeFileSync(t,d,{flag:"wx",mode:0o600});fs.renameSync(t,f)}catch{if(t)try{fs.rmSync(t,{force:true})}catch{}}})'
+    ].join(";");
     EVENT_HOOK_COMMAND = [
+      'if [ -n "${HANOMAN_EVENT_DIR:-}" ]; then',
+      `node -e '${EVENT_SPOOL_SCRIPT}' >/dev/null 2>&1;`,
+      "else",
       'curl -sS -m 2 -X POST "$HANOMAN_EVENT_URL"',
       "-H 'content-type: application/json'",
       '-H "authorization: Bearer $HANOMAN_EVENT_TOKEN"',
       '-H "x-hanoman-session: $HANOMAN_SESSION_ID"',
       '${HANOMAN_EVENT_HOST:+-H "host: $HANOMAN_EVENT_HOST"}',
-      "--data-binary @- >/dev/null 2>&1; exit 0"
+      "--data-binary @- >/dev/null 2>&1; fi; exit 0"
     ].join(" ");
     guardSettings = (decisionFile, goal, eventHook) => {
       const hooks2 = {};
@@ -12380,6 +12514,8 @@ var init_settings2 = __esm({
           matcher: "AskUserQuestion",
           hooks: [{ type: "command", command: EVENT_HOOK_COMMAND }]
         }];
+        hooks2.SubagentStart = [{ hooks: [{ type: "command", command: EVENT_HOOK_COMMAND }] }];
+        hooks2.SubagentStop = [{ hooks: [{ type: "command", command: EVENT_HOOK_COMMAND }] }];
       }
       if (goal) hooks2.Stop = [{ hooks: [{ type: "prompt", prompt: goal }] }];
       return { hooks: hooks2 };
@@ -12458,6 +12594,10 @@ function codexHookArgs(o) {
   const args = [];
   if (stop.length) args.push("-c", `hooks.Stop=${group(stop)}`);
   if (submit.length) args.push("-c", `hooks.UserPromptSubmit=${group(submit)}`);
+  if (o.eventHook) {
+    args.push("-c", `hooks.SubagentStart=${group([EVENT_HOOK_COMMAND])}`);
+    args.push("-c", `hooks.SubagentStop=${group([EVENT_HOOK_COMMAND])}`);
+  }
   return args;
 }
 function codexGoalScript(o) {
@@ -12554,9 +12694,12 @@ var init_agent_cli = __esm({
 // ../runner/src/custom-agents.ts
 function agentPromptOf(def2, roster) {
   const can = liveMentions(def2, roster);
+  const instructions = def2.timeoutSeconds ? `${def2.instructions}
+
+Batas waktu Hanoman untuk pekerjaan ini ${def2.timeoutSeconds} detik. Prioritaskan putusan dan bukti sebelum batas itu.` : def2.instructions;
   if (can.length === 0) {
     return [
-      def2.instructions,
+      instructions,
       "",
       "---",
       "Kamu TIDAK boleh mendelegasikan ke agen lain. Selesaikan sendiri lalu laporkan hasilnya.",
@@ -12566,7 +12709,7 @@ function agentPromptOf(def2, roster) {
   }
   const list2 = can.map((m) => `@${m}`).join(", ");
   return [
-    def2.instructions,
+    instructions,
     "",
     "---",
     `Kamu boleh mendelegasikan HANYA ke: ${list2}. Panggil lewat ${MENTION_TOOL} dengan nama agennya.`,
@@ -12576,44 +12719,37 @@ function agentPromptOf(def2, roster) {
     CODE_STYLE_CLAUSE
   ].join("\n");
 }
-function renderAgentsJson(defs) {
+function renderAgentsJson(defs, options2 = {}) {
   if (defs.length === 0) return "";
   const out4 = {};
   for (const d of defs) {
+    const resolvedTools = resolveTools({ tools: d.tools, mentions: d.mentions });
+    const readOnly = d.workspacePolicy === "read-only";
     out4[d.name] = {
       description: d.description,
       prompt: agentPromptOf(d, defs),
-      tools: resolveTools({ tools: d.tools, mentions: d.mentions }),
-      ...d.model ? { model: d.model } : {}
+      tools: readOnly ? resolvedTools.filter((tool) => READ_ONLY_TOOLS.has(tool)) : resolvedTools,
+      ...d.model ? { model: d.model } : {},
+      ...d.effort ? { effort: d.effort } : {},
+      ...typeof d.maxTurns === "number" ? { maxTurns: d.maxTurns } : {},
+      ...d.workspacePolicy === "isolated-worktree" ? { isolation: "worktree" } : {},
+      ...readOnly ? { permissionMode: "plan" } : {},
+      ...readOnly && options2.readOnlyHookCommand ? {
+        hooks: {
+          PreToolUse: [{
+            hooks: [{
+              type: "command",
+              command: options2.readOnlyHookCommand,
+              timeout: 5
+            }]
+          }]
+        }
+      } : {}
     };
   }
   return JSON.stringify(out4);
 }
-function agentRosterBlock(defs) {
-  if (defs.length === 0) return "";
-  const lines2 = [
-    "",
-    "## Custom agent hanoman",
-    "",
-    "Peran berikut tersedia untuk sesi ini. Saat sebuah tugas cocok dengan salah satunya, ADOPSI",
-    "perannya (baca instruksinya, kerjakan dengan sudut pandang itu) lalu kembali ke peranmu sendiri.",
-    "Jangan melahirkan proses agen baru.",
-    ""
-  ];
-  for (const d of defs) {
-    const can = liveMentions(d, defs);
-    lines2.push(`### @${d.name} \u2014 ${d.description}`);
-    lines2.push("");
-    lines2.push(d.instructions);
-    lines2.push("");
-    lines2.push(
-      can.length ? `Boleh berkonsultasi ke: ${can.map((m) => `@${m}`).join(", ")} (maks ${MENTION_MAX_HOPS} hop berantai).` : "Tidak boleh berkonsultasi ke peran lain."
-    );
-    lines2.push("");
-  }
-  return lines2.join("\n");
-}
-function agentDelegationClause(defs) {
+function agentDelegationClause(defs, runtime = "claude") {
   if (defs.length === 0) return "";
   return [
     "",
@@ -12625,35 +12761,343 @@ function agentDelegationClause(defs) {
     "",
     ...defs.map((d) => `- **${d.name}** \u2014 ${d.description}`),
     "",
-    `Panggil lewat tool ${MENTION_TOOL} dengan nama agennya. Mereka tak bisa mendelegasikan lagi,`,
+    runtime === "codex" ? "Panggil target bernama persis lewat `spawn_agent`." : `Panggil lewat tool ${MENTION_TOOL} dengan nama agennya.`,
+    "Mereka tak bisa mendelegasikan lagi,",
     "jadi tak ada rantai panggilan yang perlu kamu jaga. Laporan mereka adalah MASUKAN \u2014 kamu yang",
     "memutuskan, dan kamu yang bertanggung jawab atas hasilnya.",
     ""
   ].join("\n");
 }
-var liveMentions;
+var liveMentions, READ_ONLY_TOOLS;
 var init_custom_agents = __esm({
   "../runner/src/custom-agents.ts"() {
     "use strict";
     init_src();
     init_code_style();
     liveMentions = (def2, roster) => {
+      if (def2.workspacePolicy === "read-only") return [];
       const names = new Set(roster.map((r) => r.name));
       return def2.mentions.filter((m) => names.has(m) && m !== def2.name);
     };
+    READ_ONLY_TOOLS = /* @__PURE__ */ new Set(["Read", "Glob", "Grep", "Bash", "WebFetch", "WebSearch"]);
+  }
+});
+
+// ../runner/src/agent-readonly.ts
+import { chmodSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+function denyReadOnly(detail) {
+  return { allowed: false, reason: `Hanoman read-only policy: ${detail}` };
+}
+function tokenizeReadOnlyCommand(command) {
+  const tokens = [];
+  let token = "";
+  let quote2 = "";
+  let escaped = false;
+  let active = false;
+  for (let index = 0; index < command.length; index++) {
+    const char = command[index];
+    if (escaped) {
+      token += char;
+      escaped = false;
+      active = true;
+      continue;
+    }
+    if (quote2) {
+      if (char === quote2) quote2 = "";
+      else if (char === "\\" && quote2 === '"') escaped = true;
+      else token += char;
+      active = true;
+      continue;
+    }
+    if (char === "'" || char === '"') {
+      quote2 = char;
+      active = true;
+    } else if (char === "\\") {
+      escaped = true;
+      active = true;
+    } else if (/\s/.test(char)) {
+      if (active) {
+        tokens.push(token);
+        token = "";
+        active = false;
+      }
+    } else {
+      token += char;
+      active = true;
+    }
+  }
+  if (quote2 || escaped) return null;
+  if (active) tokens.push(token);
+  return tokens;
+}
+function evaluateReadOnlyPayload(payload, policy, environment) {
+  if (!payload || typeof payload !== "object") return denyReadOnly("payload hook tidak sah");
+  const event = payload;
+  const tool = typeof event.tool_name === "string" ? event.tool_name : typeof event.toolName === "string" ? event.toolName : "";
+  if (!tool) return denyReadOnly("nama tool tidak tersedia");
+  if (policy.directTools.includes(tool)) return { allowed: true };
+  if (policy.deniedTools.includes(tool) || tool.startsWith("mcp__")) {
+    return denyReadOnly(`tool ${tool} dapat mengubah state`);
+  }
+  if (!policy.shellTools.includes(tool)) return denyReadOnly(`tool ${tool} tidak terbukti read-only`);
+  const rawInput = event.tool_input;
+  const input = rawInput && typeof rawInput === "object" ? rawInput : {};
+  const command = typeof input.command === "string" ? input.command : typeof input.cmd === "string" ? input.cmd : "";
+  const trimmed = command.trim();
+  if (!trimmed) return denyReadOnly("perintah shell kosong atau tidak dikenal");
+  if (/\r|\n|;|&&|\|\||\||[<>]|\$|`/.test(trimmed)) {
+    return denyReadOnly("operator shell yang dapat merangkai atau menulis dilarang");
+  }
+  const tokens = tokenizeReadOnlyCommand(trimmed);
+  if (!tokens?.length) return denyReadOnly("perintah shell tidak dapat diparse dengan aman");
+  const first = tokens[0] ?? "";
+  const commandName = first.split("/").pop() ?? "";
+  if (first !== commandName) {
+    return denyReadOnly("executable ber-path tidak diizinkan; gunakan command allowlist dari PATH");
+  }
+  if (commandName === "git") {
+    const subcommand = tokens[1] ?? "";
+    if (!policy.gitCommands.includes(subcommand)) {
+      return denyReadOnly(`git ${subcommand || "<kosong>"} bukan operasi baca yang diizinkan`);
+    }
+    const args = tokens.slice(2);
+    if (args.some((arg) => arg === "--output" || arg.startsWith("--output=") || arg === "--ext-diff" || arg === "--textconv")) {
+      return denyReadOnly("opsi git dapat menulis atau menjalankan helper eksternal");
+    }
+    if (subcommand !== "status" && (!args.includes("--no-ext-diff") || !args.includes("--no-textconv"))) {
+      return denyReadOnly("git diff/show/log wajib menonaktifkan helper eksternal dan textconv");
+    }
+    return { allowed: true };
+  }
+  if (!policy.shellCommands.includes(commandName)) {
+    return denyReadOnly(`perintah ${commandName || "<kosong>"} tidak terbukti read-only`);
+  }
+  if (commandName === "rg" && environment.RIPGREP_CONFIG_PATH?.trim()) {
+    return denyReadOnly("RIPGREP_CONFIG_PATH dapat menyuntikkan preprocessor eksternal");
+  }
+  if (commandName === "rg" && tokens.slice(1).some((arg) => arg === "--pre" || arg.startsWith("--pre=") || arg === "--pre-glob" || arg.startsWith("--pre-glob=") || arg === "--hostname-bin" || arg.startsWith("--hostname-bin="))) {
+    return denyReadOnly("opsi rg dapat menjalankan helper eksternal");
+  }
+  if (commandName === "sed") {
+    const quiet = tokens[1] === "-n" || tokens[1] === "--quiet" || tokens[1] === "--silent";
+    const printOnly = /^\d+(?:,\d+)?p$/.test(tokens[2] ?? "");
+    const files = tokens.slice(3);
+    if (!quiet || !printOnly || files.length === 0 || files.some((arg) => arg.startsWith("-"))) {
+      return denyReadOnly("hanya sed -n '<baris>[,<baris>]p' <berkas> yang diizinkan");
+    }
+  }
+  return { allowed: true };
+}
+function readOnlyHookSource() {
+  return [
+    '"use strict";',
+    `const denyReadOnly = ${denyReadOnly.toString()};`,
+    `const tokenizeReadOnlyCommand = ${tokenizeReadOnlyCommand.toString()};`,
+    `const evaluate = ${evaluateReadOnlyPayload.toString()};`,
+    `const policy = ${JSON.stringify(POLICY)};`,
+    "let input = '';",
+    "process.stdin.setEncoding('utf8');",
+    "process.stdin.on('data', chunk => { input += chunk; });",
+    "process.stdin.on('end', () => {",
+    "  let payload;",
+    "  try { payload = JSON.parse(input); } catch { payload = null; }",
+    "  const decision = evaluate(payload, policy, process.env);",
+    "  if (!decision.allowed) { process.stderr.write(decision.reason + '\\n'); process.exitCode = 2; }",
+    "});",
+    "process.stdin.resume();",
+    ""
+  ].join("\n");
+}
+function writeReadOnlyHook(dir2) {
+  const path = join(dir2, "custom-agent-readonly.cjs");
+  writeFileSync(path, readOnlyHookSource(), { mode: 384 });
+  chmodSync(path, 384);
+  return { path, command: `node ${shellQuote(path)}` };
+}
+var POLICY, shellQuote;
+var init_agent_readonly = __esm({
+  "../runner/src/agent-readonly.ts"() {
+    "use strict";
+    POLICY = {
+      directTools: ["Read", "Glob", "Grep", "WebFetch", "WebSearch"],
+      shellTools: ["Bash", "local_shell", "exec_command"],
+      deniedTools: ["Write", "Edit", "Task", "apply_patch", "spawn_agent"],
+      shellCommands: ["rg", "sed", "head", "tail", "wc", "ls"],
+      gitCommands: ["diff", "show", "status", "log"]
+    };
+    shellQuote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+  }
+});
+
+// ../runner/src/runtime-profile.ts
+function resolveHardening(env) {
+  if (env.HANOMAN_HARDENING === "1") return true;
+  return env.HANOMAN_SESSION_SANDBOX === "podman" || filled(env.HANOMAN_PUBLIC_ORIGINS) || filled(env.HANOMAN_TRUST_PROXY);
+}
+function resolveDeployment(env) {
+  if (resolveHardening(env)) return "public";
+  return env.HANOMAN_DEPLOYMENT === "public" ? "public" : "local";
+}
+var filled;
+var init_runtime_profile = __esm({
+  "../runner/src/runtime-profile.ts"() {
+    "use strict";
+    filled = (v) => !!v && v.trim() !== "";
+  }
+});
+
+// ../runner/src/codex-agent-config.ts
+import { chmodSync as chmodSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join2 } from "node:path";
+function codexNativeAgentsSupported(version) {
+  const parsed = version ? /(\d+)\.(\d+)\.(\d+)/.exec(version)?.[0] : null;
+  return parsed ? cmpVersion(parsed, CODEX_NATIVE_AGENTS_MIN_CLIENT) >= 0 : false;
+}
+function codexNativeVersionProbe(env, codexBin3 = env.HANOMAN_CODEX_BIN ?? "codex") {
+  const sandbox = env.HANOMAN_SESSION_SANDBOX ?? (resolveHardening(env) ? "required" : "off");
+  if (sandbox !== "podman") return { bin: codexBin3, args: ["--version"] };
+  return {
+    bin: env.HANOMAN_PODMAN_BIN ?? "podman",
+    args: [
+      "run",
+      "--rm",
+      "--read-only",
+      "--cap-drop=ALL",
+      "--userns=keep-id",
+      "--network",
+      "none",
+      env.HANOMAN_SESSION_IMAGE ?? "hanoman-agent:latest",
+      "/bin/sh",
+      "-lc",
+      `${shellQuote2(codexBin3)} --version`
+    ]
+  };
+}
+function renderCodexAgentToml(def2, roster, options2 = {}) {
+  const lines2 = [
+    `name = ${tomlString(def2.name)}`,
+    `description = ${tomlString(def2.description)}`,
+    `developer_instructions = ${tomlString(agentPromptOf(def2, roster))}`,
+    ...def2.model ? [`model = ${tomlString(def2.model)}`] : [],
+    ...def2.effort ? [`model_reasoning_effort = ${tomlString(def2.effort)}`] : [],
+    ...def2.workspacePolicy === "read-only" ? ['sandbox_mode = "read-only"'] : []
+  ];
+  if (def2.workspacePolicy === "read-only" && options2.readOnlyHookCommand) {
+    lines2.push(
+      "",
+      "[[hooks.PreToolUse]]",
+      "",
+      "[[hooks.PreToolUse.hooks]]",
+      'type = "command"',
+      `command = ${tomlString(options2.readOnlyHookCommand)}`,
+      "timeout = 5"
+    );
+  }
+  return `${lines2.join("\n")}
+`;
+}
+function materializeCodexAgents(defs, tempDir, options2 = {}) {
+  if (defs.length === 0) {
+    return { args: [], delegationClause: "", configPaths: [], warnings: [], liveDefs: [] };
+  }
+  if ("clientVersion" in options2 && !codexNativeAgentsSupported(options2.clientVersion ?? null)) {
+    const seen2 = options2.clientVersion ?? "tak terdeteksi";
+    return {
+      args: [],
+      delegationClause: "",
+      configPaths: [],
+      liveDefs: [],
+      warnings: defs.map((def2) => ({
+        agentName: def2.name,
+        reason: `Codex ${seen2} tidak mendukung custom agent native; butuh >= ${CODEX_NATIVE_AGENTS_MIN_CLIENT}`
+      }))
+    };
+  }
+  const write2 = options2.writeFile ?? ((path, content) => writeFileSync2(path, content, { mode: 384 }));
+  const chmod3 = options2.chmod ?? chmodSync2;
+  const successful = [];
+  const warnings = [];
+  for (const [index, def2] of defs.entries()) {
+    if (def2.workspacePolicy === "isolated-worktree") {
+      warnings.push({
+        agentName: def2.name,
+        reason: "isolated-worktree belum tersedia untuk subagent Codex"
+      });
+      continue;
+    }
+    const path = join2(tempDir, `${String(index).padStart(2, "0")}-${safeFilename(def2.name)}.toml`);
+    try {
+      write2(path, renderCodexAgentToml(def2, defs, options2));
+      chmod3(path, 384);
+      successful.push({ def: def2, path });
+    } catch (error) {
+      warnings.push({
+        agentName: def2.name,
+        reason: error instanceof Error ? error.message : String(error)
+      });
+    }
+  }
+  if (successful.length === 0) {
+    return { args: [], delegationClause: "", configPaths: [], warnings, liveDefs: [] };
+  }
+  const args = [
+    "-c",
+    "agents.enabled=true",
+    "-c",
+    "agents.max_concurrent_threads_per_session=3"
+  ];
+  for (const { def: def2, path } of successful) {
+    const key = `agents.${tomlKey(def2.name)}`;
+    args.push("-c", `${key}.description=${tomlString(def2.description)}`);
+    args.push("-c", `${key}.config_file=${tomlString(path)}`);
+  }
+  const liveDefs = successful.map((entry) => entry.def);
+  return {
+    args,
+    delegationClause: agentDelegationClause(liveDefs, "codex"),
+    configPaths: successful.map((entry) => entry.path),
+    warnings,
+    liveDefs
+  };
+}
+var CODEX_NATIVE_AGENTS_MIN_CLIENT, shellQuote2, tomlString, tomlKey, safeFilename;
+var init_codex_agent_config = __esm({
+  "../runner/src/codex-agent-config.ts"() {
+    "use strict";
+    init_src();
+    init_custom_agents();
+    init_runtime_profile();
+    CODEX_NATIVE_AGENTS_MIN_CLIENT = "0.151.0";
+    shellQuote2 = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+    tomlString = (value) => JSON.stringify(value);
+    tomlKey = (value) => JSON.stringify(value);
+    safeFilename = (name2) => name2.replace(/[^a-z0-9-]/gi, "-");
+  }
+});
+
+// ../runner/src/custom-agent-eval.ts
+var init_custom_agent_eval = __esm({
+  "../runner/src/custom-agent-eval.ts"() {
+    "use strict";
+    init_src();
+    init_codex_agent_config();
+    init_codex_settings();
+    init_custom_agents();
+    init_settings2();
   }
 });
 
 // ../runner/src/paths.ts
 import { homedir } from "node:os";
-import { dirname as dirname2, isAbsolute as isAbsolute2, join, resolve as resolve5 } from "node:path";
+import { dirname as dirname2, isAbsolute as isAbsolute2, join as join3, resolve as resolve5 } from "node:path";
 function resolveHome(env = process.env, home3 = homedir()) {
   const v = env.HANOMAN_HOME?.trim();
-  return v ? v : join(home3, ".hanoman");
+  return v ? v : join3(home3, ".hanoman");
 }
 function resolveDataDirs(env = process.env, home3 = homedir()) {
   const root = resolveHome(env, home3);
-  const dir2 = (key, name2) => env[key]?.trim() || join(root, name2);
+  const dir2 = (key, name2) => env[key]?.trim() || join3(root, name2);
   return {
     home: root,
     transcripts: dir2("HANOMAN_TRANSCRIPT_DIR", "transcripts"),
@@ -12675,7 +13119,7 @@ function resolveDbUrl(env, schemaDir2) {
     return absoluteFileUrl(own, schemaDir2);
   }
   const raw = env.DATABASE_URL?.trim();
-  if (!raw || !raw.startsWith("file:")) return `file:${join(resolveHome(env), "hanoman.db")}`;
+  if (!raw || !raw.startsWith("file:")) return `file:${join3(resolveHome(env), "hanoman.db")}`;
   return absoluteFileUrl(raw, schemaDir2);
 }
 function absoluteFileUrl(raw, schemaDir2) {
@@ -12703,7 +13147,7 @@ var init_paths = __esm({
 
 // ../runner/src/skills.ts
 import { homedir as homedir2 } from "node:os";
-import { basename as basename2, dirname as dirname3, join as join2, resolve as resolve6 } from "node:path";
+import { basename as basename2, dirname as dirname3, join as join4, resolve as resolve6 } from "node:path";
 import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync2 } from "node:fs";
 function agentSkillHome(agent, env = process.env, osHome = homedir2()) {
   const own = (agent === "codex" ? env.HANOMAN_CODEX_HOME : env.HANOMAN_CLAUDE_HOME)?.trim();
@@ -12712,10 +13156,10 @@ function agentSkillHome(agent, env = process.env, osHome = homedir2()) {
     const cx = env.CODEX_HOME?.trim();
     if (cx) return cx;
   }
-  return join2(osHome, agent === "codex" ? ".codex" : ".claude");
+  return join4(osHome, agent === "codex" ? ".codex" : ".claude");
 }
 function agentsSkillHome(env = process.env, osHome = homedir2()) {
-  return env.HANOMAN_AGENTS_HOME?.trim() || join2(osHome, ".agents");
+  return env.HANOMAN_AGENTS_HOME?.trim() || join4(osHome, ".agents");
 }
 function dirsIn(dir2) {
   try {
@@ -12732,7 +13176,7 @@ function readJson(file) {
   }
 }
 function isSkillDir(dir2) {
-  return existsSync3(join2(dir2, "SKILL.md"));
+  return existsSync3(join4(dir2, "SKILL.md"));
 }
 function asSkill(dir2, pkg, name2 = basename2(dir2)) {
   return { id: pkg ? `${pkg}:${name2}` : name2, name: name2, pkg, dir: dir2 };
@@ -12740,7 +13184,7 @@ function asSkill(dir2, pkg, name2 = basename2(dir2)) {
 function skillsUnder(dir2, pkg, depth = 2) {
   const out4 = [];
   for (const name2 of dirsIn(dir2)) {
-    const sub = join2(dir2, name2);
+    const sub = join4(dir2, name2);
     if (isSkillDir(sub)) out4.push(asSkill(sub, pkg, name2));
     else if (depth > 1) out4.push(...skillsUnder(sub, pkg, depth - 1));
   }
@@ -12748,7 +13192,7 @@ function skillsUnder(dir2, pkg, depth = 2) {
 }
 function manifestSkills(installPath, pkg) {
   for (const marker of [".claude-plugin", ".codex-plugin"]) {
-    const j = readJson(join2(installPath, marker, "plugin.json"));
+    const j = readJson(join4(installPath, marker, "plugin.json"));
     const declared = j?.skills;
     if (!Array.isArray(declared)) continue;
     const out4 = [];
@@ -12764,11 +13208,11 @@ function manifestSkills(installPath, pkg) {
 }
 function pluginSkills(installPath, pkg) {
   const declared = manifestSkills(installPath, pkg);
-  return declared.length ? declared : skillsUnder(join2(installPath, "skills"), pkg);
+  return declared.length ? declared : skillsUnder(join4(installPath, "skills"), pkg);
 }
 function lockPluginNames(agentsHome) {
   const out4 = /* @__PURE__ */ new Map();
-  const j = readJson(join2(agentsHome, ".skill-lock.json"));
+  const j = readJson(join4(agentsHome, ".skill-lock.json"));
   const skills = j?.skills;
   if (!skills || typeof skills !== "object") return out4;
   for (const [name2, entry] of Object.entries(skills)) {
@@ -12782,7 +13226,7 @@ function splitPluginKey(key) {
   return at > 0 ? { pkg: key.slice(0, at), marketplace: key.slice(at + 1) } : { pkg: key, marketplace: "" };
 }
 function manifestRoots(home3) {
-  const j = readJson(join2(home3, "plugins", "installed_plugins.json"));
+  const j = readJson(join4(home3, "plugins", "installed_plugins.json"));
   const plugins = j?.plugins;
   if (!plugins || typeof plugins !== "object") return [];
   const out4 = [];
@@ -12796,18 +13240,18 @@ function manifestRoots(home3) {
   return out4;
 }
 function cacheRoots(home3) {
-  const cache6 = join2(home3, "plugins", "cache");
+  const cache6 = join4(home3, "plugins", "cache");
   const out4 = [];
   for (const marketplace of dirsIn(cache6))
-    for (const pkg of dirsIn(join2(cache6, marketplace)))
-      for (const version of dirsIn(join2(cache6, marketplace, pkg)))
-        out4.push({ pkg, marketplace, dir: join2(cache6, marketplace, pkg, version) });
+    for (const pkg of dirsIn(join4(cache6, marketplace)))
+      for (const version of dirsIn(join4(cache6, marketplace, pkg)))
+        out4.push({ pkg, marketplace, dir: join4(cache6, marketplace, pkg, version) });
   return out4;
 }
 function disabledPlugins(agent, home3) {
   const out4 = /* @__PURE__ */ new Set();
   if (agent === "claude") {
-    const en = readJson(join2(home3, "settings.json"))?.enabledPlugins;
+    const en = readJson(join4(home3, "settings.json"))?.enabledPlugins;
     if (en && typeof en === "object") {
       for (const [k, v] of Object.entries(en)) if (v === false) out4.add(k);
     }
@@ -12815,7 +13259,7 @@ function disabledPlugins(agent, home3) {
   }
   let toml;
   try {
-    toml = readFileSync2(join2(home3, "config.toml"), "utf8");
+    toml = readFileSync2(join4(home3, "config.toml"), "utf8");
   } catch {
     return out4;
   }
@@ -12851,18 +13295,18 @@ function scanAgentSkills(agent, env = process.env, osHome = homedir2()) {
       skills.push(s2);
     }
   };
-  const userDir = join2(home3, "skills");
+  const userDir = join4(home3, "skills");
   add(userDir, skillsUnder(userDir, null));
   for (const r of [...manifestRoots(home3), ...cacheRoots(home3)]) {
     if (disabled.has(`${r.pkg}@${r.marketplace}`)) continue;
     const found = pluginSkills(r.dir, r.pkg);
     if (!found.length) continue;
     packages.add(r.pkg);
-    add(join2(r.dir, "skills"), found);
+    add(join4(r.dir, "skills"), found);
   }
   if (agent === "codex") {
     const agentsHome = agentsSkillHome(env, osHome);
-    const dir2 = join2(agentsHome, "skills");
+    const dir2 = join4(agentsHome, "skills");
     const names = lockPluginNames(agentsHome);
     const flat = skillsUnder(dir2, null);
     const withPkg = flat.flatMap((s2) => {
@@ -12953,12 +13397,12 @@ var init_telegram_operator = __esm({
 });
 
 // ../runner/src/spawn-helper.ts
-import { readdirSync as readdirSync2, existsSync as existsSync4, statSync, chmodSync } from "node:fs";
-import { dirname as dirname4, join as join3 } from "node:path";
+import { readdirSync as readdirSync2, existsSync as existsSync4, statSync, chmodSync as chmodSync3 } from "node:fs";
+import { dirname as dirname4, join as join5 } from "node:path";
 function spawnHelperPaths(ptyDir, listDir, exists) {
-  const dirs = [join3(ptyDir, "build", "Release")];
-  for (const name2 of listDir(join3(ptyDir, "prebuilds"))) dirs.push(join3(ptyDir, "prebuilds", name2));
-  return dirs.map((d) => join3(d, "spawn-helper")).filter(exists);
+  const dirs = [join5(ptyDir, "build", "Release")];
+  for (const name2 of listDir(join5(ptyDir, "prebuilds"))) dirs.push(join5(ptyDir, "prebuilds", name2));
+  return dirs.map((d) => join5(d, "spawn-helper")).filter(exists);
 }
 function ensureSpawnHelpersExecutable(paths2, ops) {
   const fixed = [];
@@ -12973,10 +13417,10 @@ function ensureSpawnHelpersExecutable(paths2, ops) {
   }
   return fixed;
 }
-function repairSpawnHelper(resolve21, notify) {
+function repairSpawnHelper(resolve22, notify) {
   let ptyDir;
   try {
-    ptyDir = dirname4(resolve21("node-pty/package.json"));
+    ptyDir = dirname4(resolve22("node-pty/package.json"));
   } catch {
     return [];
   }
@@ -12989,15 +13433,15 @@ function repairSpawnHelper(resolve21, notify) {
   }, existsSync4);
   const fixed = ensureSpawnHelpersExecutable(paths2, {
     mode: (p3) => statSync(p3).mode,
-    chmod: (p3, m) => chmodSync(p3, m)
+    chmod: (p3, m) => chmodSync3(p3, m)
   });
   if (fixed.length) notify?.("hanoman \xB7 memperbaiki izin `spawn-helper` node-pty (sekali per instalasi)\n");
   return fixed;
 }
-function ensureSpawnHelperOnce(resolve21, notify) {
+function ensureSpawnHelperOnce(resolve22, notify) {
   if (repaired) return [];
   repaired = true;
-  return repairSpawnHelper(resolve21, notify);
+  return repairSpawnHelper(resolve22, notify);
 }
 var repaired;
 var init_spawn_helper = __esm({
@@ -13008,10 +13452,10 @@ var init_spawn_helper = __esm({
 });
 
 // ../runner/src/config-env.ts
-import { chmodSync as chmodSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync } from "node:fs";
-import { join as join4 } from "node:path";
+import { chmodSync as chmodSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { join as join6 } from "node:path";
 function configEnvPath(home3) {
-  return join4(home3, CONFIG_ENV_FILE);
+  return join6(home3, CONFIG_ENV_FILE);
 }
 function parseConfigEnv(text) {
   const out4 = {};
@@ -13039,8 +13483,8 @@ function readConfigEnv(home3) {
 function writeConfigEnv(home3, values) {
   mkdirSync2(home3, { recursive: true, mode: 448 });
   const path = configEnvPath(home3);
-  writeFileSync(path, formatConfigEnv(values), { mode: 384 });
-  chmodSync2(path, 384);
+  writeFileSync3(path, formatConfigEnv(values), { mode: 384 });
+  chmodSync4(path, 384);
 }
 var CONFIG_ENV_FILE;
 var init_config_env = __esm({
@@ -13050,23 +13494,6 @@ var init_config_env = __esm({
   }
 });
 
-// ../runner/src/runtime-profile.ts
-function resolveHardening(env) {
-  if (env.HANOMAN_HARDENING === "1") return true;
-  return env.HANOMAN_SESSION_SANDBOX === "podman" || filled(env.HANOMAN_PUBLIC_ORIGINS) || filled(env.HANOMAN_TRUST_PROXY);
-}
-function resolveDeployment(env) {
-  if (resolveHardening(env)) return "public";
-  return env.HANOMAN_DEPLOYMENT === "public" ? "public" : "local";
-}
-var filled;
-var init_runtime_profile = __esm({
-  "../runner/src/runtime-profile.ts"() {
-    "use strict";
-    filled = (v) => !!v && v.trim() !== "";
-  }
-});
-
 // ../runner/src/sandbox-probe.ts
 import { execFileSync } from "node:child_process";
 import { accessSync, constants } from "node:fs";
@@ -13179,6 +13606,9 @@ var init_src2 = __esm({
     init_codex_settings();
     init_agent_cli();
     init_custom_agents();
+    init_agent_readonly();
+    init_codex_agent_config();
+    init_custom_agent_eval();
     init_verify_scope();
     init_code_style();
     init_paths();
@@ -13465,9 +13895,9 @@ var init_session_id = __esm({
 });
 
 // src/services/secret-box.ts
-import { chmodSync as chmodSync3, existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync5, writeFileSync as writeFileSync2 } from "node:fs";
+import { chmodSync as chmodSync5, existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "node:fs";
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
-import { dirname as dirname6, join as join5 } from "node:path";
+import { dirname as dirname6, join as join7 } from "node:path";
 function isEncrypted(value) {
   return value.startsWith(ENC_PREFIX);
 }
@@ -13499,7 +13929,7 @@ function fromEnv(raw) {
   return null;
 }
 function secretKeyPath() {
-  return join5(resolveHome(), "secret.key");
+  return join7(resolveHome(), "secret.key");
 }
 function secretKey() {
   if (cached) return cached;
@@ -13519,8 +13949,8 @@ function secretKey() {
   }
   const key = randomBytes(KEY_BYTES);
   mkdirSync4(dirname6(path), { recursive: true });
-  writeFileSync2(path, key.toString("base64url"), { mode: 384 });
-  chmodSync3(path, 384);
+  writeFileSync4(path, key.toString("base64url"), { mode: 384 });
+  chmodSync5(path, 384);
   cached = key;
   return key;
 }
@@ -13713,7 +14143,7 @@ import { request as httpRequest } from "node:http";
 import { request as httpsRequest } from "node:https";
 import { createGunzip } from "node:zlib";
 async function pinnedRequest(input) {
-  return new Promise((resolve21, reject2) => {
+  return new Promise((resolve22, reject2) => {
     const transport = input.url.protocol === "https:" ? httpsRequest : httpRequest;
     const req = transport({
       protocol: input.url.protocol,
@@ -13735,7 +14165,7 @@ async function pinnedRequest(input) {
       const capTerurai = input.maxDecodedBytes ?? input.maxResponseBytes;
       const chunks = [];
       let kabel = 0, terurai = 0;
-      const selesai = () => resolve21({
+      const selesai = () => resolve22({
         status: response.statusCode ?? 0,
         headers: response.headers,
         body: Buffer.concat(chunks)
@@ -13801,7 +14231,7 @@ var init_safe_outbound_request = __esm({
 // src/services/uploads.ts
 import { randomUUID } from "node:crypto";
 import { mkdir, writeFile, readFile as readFile2, unlink, rm } from "node:fs/promises";
-import { join as join6, resolve as resolve8 } from "node:path";
+import { join as join8, resolve as resolve8 } from "node:path";
 function extFor(mimeType) {
   return EXT[mimeType] ?? ".bin";
 }
@@ -13810,12 +14240,12 @@ function uploadDir() {
 }
 function sessionUploadDir(sessionId2) {
   if (!SESSION_ID.test(sessionId2)) throw new Error(`sessionId tak sah: ${sessionId2}`);
-  return join6(uploadDir(), "terminal", sessionId2);
+  return join8(uploadDir(), "terminal", sessionId2);
 }
 async function saveSessionUpload(sessionId2, buf, mimeType) {
   const dir2 = sessionUploadDir(sessionId2);
   await mkdir(dir2, { recursive: true, mode: 448 });
-  const path = join6(dir2, `${randomUUID()}${extFor(mimeType)}`);
+  const path = join8(dir2, `${randomUUID()}${extFor(mimeType)}`);
   await writeFile(path, buf, { mode: 384 });
   return { path, size: buf.length };
 }
@@ -13831,11 +14261,11 @@ async function dropSessionUploads(sessionId2) {
 }
 async function readUpload(storageKey) {
   const safe = storageKey.replace(/[/\\]/g, "");
-  return readFile2(join6(uploadDir(), safe));
+  return readFile2(join8(uploadDir(), safe));
 }
 async function readUploadOrFetch(storageKey) {
   const safe = storageKey.replace(/[/\\]/g, "");
-  const target2 = join6(uploadDir(), safe);
+  const target2 = join8(uploadDir(), safe);
   try {
     return await readFile2(target2);
   } catch {
@@ -13862,7 +14292,7 @@ async function readUploadOrFetch(storageKey) {
 }
 async function deleteUpload(storageKey) {
   const safe = storageKey.replace(/[/\\]/g, "");
-  await unlink(join6(uploadDir(), safe)).catch(() => {
+  await unlink(join8(uploadDir(), safe)).catch(() => {
   });
 }
 var EXT, SESSION_ID;
@@ -14211,11 +14641,15 @@ function sandboxArgv(input) {
   const mounts = ["--volume", `${input.worktree}:/workspace:${input.worktreeMode ?? "rw"}`];
   if (input.phaseFile) mounts.push("--volume", `${input.phaseFile}:${input.phaseFile}:rw`);
   if (input.promptFile) mounts.push("--volume", `${input.promptFile}:${input.promptFile}:ro`);
+  if (input.agentConfigDir)
+    mounts.push("--volume", `${input.agentConfigDir}:${input.agentConfigDir}:ro`);
+  if (input.eventDir)
+    mounts.push("--volume", `${input.eventDir}:${input.eventDir}:rw`);
   if (input.attachmentsDir)
     mounts.push("--volume", `${input.attachmentsDir}:${input.attachmentsDir}:ro`);
   mounts.push("--volume", `${input.credentialDir}:/agent-home:ro`);
   return [
-    "podman",
+    input.podmanBin ?? "podman",
     "run",
     "--rm",
     "--read-only",
@@ -14243,6 +14677,7 @@ function sandboxArgv(input) {
     "NO_PROXY=localhost,127.0.0.1,::1",
     "--env",
     "HOME=/agent-home",
+    ...input.eventDir ? ["--env", `HANOMAN_EVENT_DIR=${input.eventDir}`] : [],
     ...mounts,
     input.image,
     "/bin/sh",
@@ -14262,6 +14697,7 @@ function sandboxArgvFromEnv(input) {
     ...input,
     credentialDir,
     proxy,
+    podmanBin: env.HANOMAN_PODMAN_BIN ?? "podman",
     image: env.HANOMAN_SESSION_IMAGE ?? "hanoman-agent:latest",
     network: env.HANOMAN_SESSION_NETWORK ?? "hanoman-egress"
   });
@@ -14280,18 +14716,30 @@ var init_session_sandbox = __esm({
   }
 });
 
+// src/services/session-event-spool.ts
+import { tmpdir } from "node:os";
+import { join as join9 } from "node:path";
+var sessionEventSpoolRoot, sessionEventDir;
+var init_session_event_spool = __esm({
+  "src/services/session-event-spool.ts"() {
+    "use strict";
+    sessionEventSpoolRoot = () => join9(tmpdir(), "hanoman-session-events");
+    sessionEventDir = (sessionId2) => join9(sessionEventSpoolRoot(), sessionId2);
+  }
+});
+
 // src/services/pty.ts
 import { spawn } from "node-pty";
 import { execFile, execFileSync as execFileSync2 } from "node:child_process";
 import { createRequire } from "node:module";
 import { randomUUID as randomUUID2 } from "node:crypto";
-import { mkdirSync as mkdirSync5, readFileSync as readFileSync6, statSync as statSync2, writeFileSync as writeFileSync3 } from "node:fs";
+import { chmodSync as chmodSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync6, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync5 } from "node:fs";
 import { dirname as dirname7 } from "node:path";
-import { tmpdir } from "node:os";
+import { tmpdir as tmpdir2 } from "node:os";
 function noTtyPromptEnv() {
   const path = askpassDenyPath();
   mkdirSync5(dirname7(path), { recursive: true, mode: 448 });
-  writeFileSync3(path, ASKPASS_DENY, { mode: 448 });
+  writeFileSync5(path, ASKPASS_DENY, { mode: 448 });
   return { SSH_ASKPASS: path, SSH_ASKPASS_REQUIRE: "force", GIT_TERMINAL_PROMPT: "0" };
 }
 function tmux(...args) {
@@ -14310,14 +14758,14 @@ function tmux(...args) {
   }
 }
 function tmuxAsync(...args) {
-  return new Promise((resolve21, reject2) => {
+  return new Promise((resolve22, reject2) => {
     execFile(
       "tmux",
       ["-L", socket(), "-f", "/dev/null", ...args],
       { encoding: "utf8" },
       (e, stdout, stderr) => {
         if (!e) {
-          resolve21(stdout);
+          resolve22(stdout);
           return;
         }
         const err = e;
@@ -14368,7 +14816,8 @@ function parsePanes(out4) {
       alternate,
       activity,
       eventHook,
-      created
+      created,
+      agentRoster
     ] = line.split("	");
     if (!n2?.startsWith(PREFIX)) return [];
     const exited = dead === "1";
@@ -14398,10 +14847,30 @@ function parsePanes(out4) {
       // SPEC-919 · sesi yang lahir di tmux yang tak menjawab field ini → 0 (epoch).
       startedAt: Number(created) || 0,
       // SPEC-909 · ADR-0146 · sesi yang lahir sebelum pembaruan tak punya opsi ini → false.
-      eventHook: eventHook === "1"
+      eventHook: eventHook === "1",
+      agentRoster: parseAgentRoster(agentRoster)
     }];
   });
 }
+function parseAgentRoster(value) {
+  try {
+    const parsed = JSON.parse(value || "[]");
+    if (!Array.isArray(parsed)) return [];
+    return parsed.flatMap((entry) => {
+      if (!entry || typeof entry !== "object") return [];
+      const row = entry;
+      if (typeof row.name !== "string") return [];
+      return [{
+        name: row.name,
+        ...typeof row.id === "string" ? { id: row.id } : {},
+        ...typeof row.model === "string" ? { model: row.model } : {},
+        ...typeof row.timeoutSeconds === "number" ? { timeoutSeconds: row.timeoutSeconds } : {}
+      }];
+    });
+  } catch {
+    return [];
+  }
+}
 function sessionEventEnv(sessionId2, env = process.env) {
   const port2 = Number(env.PORT ?? 8787);
   const host2 = controlHost(loadIngressPolicy(env));
@@ -14409,6 +14878,7 @@ function sessionEventEnv(sessionId2, env = process.env) {
     HANOMAN_SESSION_ID: sessionId2,
     HANOMAN_EVENT_URL: `http://127.0.0.1:${port2}/api/session-events`,
     HANOMAN_EVENT_TOKEN: sessionEventToken(sessionId2),
+    HANOMAN_EVENT_DIR: sessionEventDir(sessionId2),
     ...host2 ? { HANOMAN_EVENT_HOST: host2 } : {}
   };
 }
@@ -14418,6 +14888,24 @@ function registerSessionHooks(h) {
 function registerCustomAgentSource(fn) {
   customAgentSource = fn;
 }
+function registerCodexNativeAgentSupport(fn) {
+  codexNativeAgentSupport = fn;
+}
+function collectChangedFiles(cwd, baseSha, run4 = runGitDiff) {
+  try {
+    const files = /* @__PURE__ */ new Set();
+    const add = (args) => {
+      for (const path of run4(cwd, args).split("\0")) if (path) files.add(path);
+    };
+    if (baseSha) add(["diff", "--name-only", "-z", `${baseSha}...HEAD`]);
+    add(["diff", "--name-only", "-z"]);
+    add(["diff", "--cached", "--name-only", "-z"]);
+    add(["ls-files", "--others", "--exclude-standard", "-z"]);
+    return [...files].sort();
+  } catch {
+    return [];
+  }
+}
 function sessionKind(o, projectId, cwd) {
   if (o.specId) return "spec";
   if (o.flow === "reverse" || o.flow === "prd" || o.flow === "scaffold" || o.flow === "breakdown") return o.flow;
@@ -14440,15 +14928,62 @@ function createSession(projectId, cwd, opts = {}) {
   const existing = getSession(id);
   if (existing && !existing.exited) return existing;
   if (existing) killSession(id);
+  const eventDir = opts.command ? void 0 : sessionEventDir(id);
+  if (eventDir) {
+    mkdirSync5(eventDir, { recursive: true, mode: 448 });
+    chmodSync6(eventDir, 448);
+  }
   const agentForDefs = opts.agent ?? "claude";
-  const customDefs = opts.command ? [] : customAgentsFor(projectId, agentForDefs);
-  const rosterBlock = agentForDefs === "codex" ? agentRosterBlock(customDefs) : agentDelegationClause(customDefs);
+  const selectionContext = {
+    projectId,
+    runtime: agentForDefs,
+    flow: opts.flow,
+    cwd,
+    baseSha: opts.env?.HANOMAN_BASE_SHA,
+    prompt: opts.prompt,
+    changedFiles: opts.command ? [] : collectChangedFiles(cwd, opts.env?.HANOMAN_BASE_SHA)
+  };
+  const customDefs = opts.command ? [] : customAgentsFor(selectionContext);
+  let rosterBlock = "";
+  let codexAgentArgs = [];
+  let agentsFile;
+  let agentConfigDir;
+  let liveAgentDefs = [];
+  if (customDefs.length > 0) {
+    const tempDir = agentTempDir(id);
+    agentConfigDir = tempDir;
+    mkdirSync5(tempDir, { recursive: true, mode: 448 });
+    const readOnlyHook = customDefs.some((def2) => def2.workspacePolicy === "read-only") ? writeReadOnlyHook(tempDir) : void 0;
+    if (agentForDefs === "claude") {
+      const json = renderAgentsJson(customDefs, { readOnlyHookCommand: readOnlyHook?.command });
+      if (json) {
+        agentsFile = agentsFilePath(id);
+        writeFileSync5(agentsFile, json, { mode: 384 });
+        rosterBlock = agentDelegationClause(customDefs, "claude");
+        liveAgentDefs = customDefs;
+      }
+    } else {
+      const materialized = materializeCodexAgents(customDefs, tempDir, {
+        readOnlyHookCommand: readOnlyHook?.command,
+        clientVersion: codexNativeAgentSupport().version
+      });
+      codexAgentArgs = materialized.args;
+      rosterBlock = materialized.delegationClause;
+      liveAgentDefs = materialized.liveDefs;
+      for (const warning of materialized.warnings) {
+        process.stderr.write(
+          `hanoman: custom agent ${warning.agentName} tidak dimaterialisasi: ${warning.reason}
+`
+        );
+      }
+    }
+  }
   let promptArg = "";
   let promptFile;
   if (!opts.command && opts.prompt) {
     promptFile = promptFilePath(id);
     mkdirSync5(dirname7(promptFile), { recursive: true, mode: 448 });
-    writeFileSync3(promptFile, opts.prompt + rosterBlock, { mode: 384 });
+    writeFileSync5(promptFile, opts.prompt + rosterBlock, { mode: 384 });
     promptArg = `"$(cat ${sq(promptFile)})"`;
   }
   const agent = opts.agent ?? "claude";
@@ -14460,7 +14995,7 @@ function createSession(projectId, cwd, opts = {}) {
     if (agent === "codex" && opts.goal && opts.flow && opts.specId) {
       goalGate = goalGatePath(id);
       mkdirSync5(dirname7(goalGate), { recursive: true, mode: 448 });
-      writeFileSync3(goalGate, codexGoalScript({
+      writeFileSync5(goalGate, codexGoalScript({
         flow: opts.flow,
         specId: opts.specId,
         condition: opts.goal,
@@ -14470,15 +15005,6 @@ function createSession(projectId, cwd, opts = {}) {
       }), { mode: 448 });
     }
     const effort = agent === "codex" && opts.model && opts.effort ? coerceCodexEffort(opts.model, opts.effort) : opts.effort;
-    let agentsFile;
-    if (agent === "claude") {
-      const json = renderAgentsJson(customDefs);
-      if (json) {
-        agentsFile = agentsFilePath(id);
-        mkdirSync5(dirname7(agentsFile), { recursive: true, mode: 448 });
-        writeFileSync3(agentsFile, json, { mode: 384 });
-      }
-    }
     const flags = agentFlags({
       agent,
       model: opts.model,
@@ -14491,7 +15017,8 @@ function createSession(projectId, cwd, opts = {}) {
       eventHook: true
     }).map(sq).join(" ");
     const agentsArg = agentsFile ? `--agents "$(cat ${sq(agentsFile)})"` : "";
-    argv = [sq(agentBin(agent)), promptArg, flags, agentsArg].filter(Boolean).join(" ");
+    const nativeAgentArgs = agent === "codex" ? codexAgentArgs.map(sq).join(" ") : "";
+    argv = [sq(agentBin(agent)), promptArg, flags, agentsArg, nativeAgentArgs].filter(Boolean).join(" ");
   }
   const envPairs = [];
   if (!opts.command && agent === "claude") {
@@ -14510,16 +15037,16 @@ function createSession(projectId, cwd, opts = {}) {
   if (opts.attachmentsDir) envPairs.push(`HANOMAN_ATTACHMENTS_DIR=${sq(opts.attachmentsDir)}`);
   for (const [k, v] of Object.entries(opts.env ?? {})) envPairs.push(`${k}=${sq(v)}`);
   let cmd = envPairs.length ? `${envPairs.join(" ")} ${argv}` : argv;
-  let sandboxed = false;
   if (!opts.command) {
     const wrapped = sandboxCommand({
       command: cmd,
       worktree: cwd,
       phaseFile: opts.phaseFile,
       promptFile,
+      agentConfigDir,
+      eventDir,
       attachmentsDir: opts.attachmentsDir
     });
-    sandboxed = wrapped !== cmd;
     cmd = wrapped;
   }
   if (opts.decisionFile) mkdirSync5(dirname7(opts.decisionFile), { recursive: true });
@@ -14594,9 +15121,18 @@ function createSession(projectId, cwd, opts = {}) {
   if (opts.flow) tmux("set-option", "-t", name(id), "@hanoman_flow", opts.flow);
   if (opts.branch) tmux("set-option", "-t", name(id), "@hanoman_branch", opts.branch);
   tmux("set-option", "-t", name(id), "@hanoman_agent", agent);
+  if (liveAgentDefs.length > 0) {
+    const roster = liveAgentDefs.map((def2) => ({
+      ...def2.id ? { id: def2.id } : {},
+      name: def2.name,
+      ...def2.model ? { model: def2.model } : {},
+      ...def2.timeoutSeconds ? { timeoutSeconds: def2.timeoutSeconds } : {}
+    }));
+    tmux("set-option", "-t", name(id), "@hanoman_agent_roster", JSON.stringify(roster));
+  }
   if (opts.phaseFile) tmux("set-option", "-t", name(id), "@hanoman_phase_file", opts.phaseFile);
   if (opts.decisionFile) tmux("set-option", "-t", name(id), "@hanoman_decision_file", opts.decisionFile);
-  if (!opts.command && !sandboxed) tmux("set-option", "-t", name(id), "@hanoman_event_hook", "1");
+  if (!opts.command) tmux("set-option", "-t", name(id), "@hanoman_event_hook", "1");
   if (opts.goal && !opts.command) void armGoalInTui(id, opts.goal, { agent }).catch(() => {
   });
   emitBirth({
@@ -14787,10 +15323,10 @@ function startPoll() {
   poll = setInterval(() => {
     if (polling) return;
     polling = true;
-    const snapshot2 = [...attached.entries()];
+    const snapshot3 = [...attached.entries()];
     listPanesAsync().then((panes) => {
       const live = new Map(panes.map((p3) => [p3.id, p3]));
-      for (const [id, a] of snapshot2) {
+      for (const [id, a] of snapshot3) {
         if (attached.get(id) !== a) continue;
         const p3 = live.get(id);
         if (!p3) end(id, 0);
@@ -14853,6 +15389,14 @@ function killSession(id) {
   const transcript = captureTranscript(id);
   drop(id);
   tmux("kill-session", "-t", name(id));
+  try {
+    rmSync2(agentTempDir(id), { recursive: true, force: true });
+  } catch {
+  }
+  try {
+    rmSync2(sessionEventDir(id), { recursive: true, force: true });
+  } catch {
+  }
   emitDeath({ sessionId: id, exitCode: p3.exited ? p3.code : null, transcript });
   void dropSessionUploads(id).catch(() => {
   });
@@ -14878,7 +15422,7 @@ function spawnPty(...args) {
     );
   }
 }
-var socket, PREFIX, MAX_SCROLLBACK, SCROLLBACK_SLACK, POLL_MS, markerFilled, clearMarker, PANE_QUIET_MS, paneQuiet, markerOnset, decisionOnset, attached, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentsFilePath, askpassDenyPath, ASKPASS_DENY, NO_SERVER, TmuxError, sq, idFor, FMT, toSessionInfo, listSessions, listSessionsAsync, liveDecisions, getSession, getSessionAsync, hooks, emitBirth, emitDeath, customAgentSource, customAgentsFor, sleep, paneText, paneIO, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, COALESCE_MS, COALESCE_MAX_BYTES, trimScrollback, phaseKey, paneComplete, sessionFinished, poll, polling, TERMINAL_QUERY, stripTerminalQueries, detach;
+var socket, PREFIX, MAX_SCROLLBACK, SCROLLBACK_SLACK, POLL_MS, markerFilled, clearMarker, PANE_QUIET_MS, paneQuiet, markerOnset, decisionOnset, attached, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentTempDir, agentsFilePath, askpassDenyPath, ASKPASS_DENY, NO_SERVER, TmuxError, sq, idFor, FMT, toSessionInfo, listSessions, listSessionsAsync, liveDecisions, getSession, getSessionAsync, hooks, emitBirth, emitDeath, customAgentSource, codexNativeAgentSupport, customAgentsFor, runGitDiff, sleep, paneText, paneIO, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, COALESCE_MS, COALESCE_MAX_BYTES, trimScrollback, phaseKey, paneComplete, sessionFinished, poll, polling, TERMINAL_QUERY, stripTerminalQueries, detach;
 var init_pty = __esm({
   "src/services/pty.ts"() {
     "use strict";
@@ -14892,6 +15436,8 @@ var init_pty = __esm({
     init_ingress_policy();
     init_session_event_token();
     init_session_sandbox();
+    init_session_event_spool();
+    init_session_event_spool();
     socket = () => effectiveStr("HANOMAN_TMUX_SOCKET") ?? "hanoman";
     PREFIX = "hanoman-";
     MAX_SCROLLBACK = 256 * 1024;
@@ -14906,7 +15452,7 @@ var init_pty = __esm({
     };
     clearMarker = (f) => {
       try {
-        writeFileSync3(f, "");
+        writeFileSync5(f, "");
       } catch {
       }
     };
@@ -14934,11 +15480,12 @@ var init_pty = __esm({
     rootBypassEnv = (uid = process.getuid?.()) => uid === 0 ? { IS_SANDBOX: "1" } : {};
     frame = (f) => JSON.stringify(f);
     name = (id) => PREFIX + id;
-    promptFilePath = (id) => `${tmpdir()}/hanoman-prompts/${id}`;
-    goalGatePath = (id) => `${tmpdir()}/hanoman-goal-gates/${id}.sh`;
-    goalStatePath = (id) => `${tmpdir()}/hanoman-goal-gates/${id}.count`;
-    agentsFilePath = (id) => `${tmpdir()}/hanoman-agents/${id}.json`;
-    askpassDenyPath = () => `${tmpdir()}/hanoman-askpass/deny.sh`;
+    promptFilePath = (id) => `${tmpdir2()}/hanoman-prompts/${id}`;
+    goalGatePath = (id) => `${tmpdir2()}/hanoman-goal-gates/${id}.sh`;
+    goalStatePath = (id) => `${tmpdir2()}/hanoman-goal-gates/${id}.count`;
+    agentTempDir = (id) => `${tmpdir2()}/hanoman-agents/${id}`;
+    agentsFilePath = (id) => `${agentTempDir(id)}/claude.json`;
+    askpassDenyPath = () => `${tmpdir2()}/hanoman-askpass/deny.sh`;
     ASKPASS_DENY = `#!/bin/sh
 echo "hanoman: tak ada manusia di pane ini \u2014 permintaan ketikan ditolak: $1" >&2
 echo "hanoman: buka kuncinya di luar sesi (mis. ssh-add ~/.ssh/id_rsa), lalu ulangi." >&2
@@ -14970,7 +15517,8 @@ exit 1
       // `pty-parse.test.ts` mengunci panjang FMT terhadap destructuring `parsePanes`.
       "#{window_activity}",
       "#{@hanoman_event_hook}",
-      "#{session_created}"
+      "#{session_created}",
+      "#{@hanoman_agent_roster}"
     ].join("	");
     toSessionInfo = ({
       id,
@@ -15028,13 +15576,18 @@ exit 1
       }
     };
     customAgentSource = () => [];
-    customAgentsFor = (projectId, agent) => {
+    codexNativeAgentSupport = () => ({ version: "0.151.0", ok: true });
+    customAgentsFor = (context) => {
       try {
-        return customAgentSource(projectId, agent);
+        return customAgentSource(context);
       } catch {
         return [];
       }
     };
+    runGitDiff = (cwd, args) => execFileSync2("git", ["-C", cwd, ...args], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    });
     sleep = (ms) => new Promise((r) => {
       setTimeout(r, ms);
     });
@@ -15260,6 +15813,11 @@ function validateSyncData(entity, data, options2 = {}) {
       if (!Number.isSafeInteger(value)) throw new Error(`sync tipe invalid: ${entity}.${field}`);
       continue;
     }
+    if (NULLABLE_NUMBER_FIELDS.has(key)) {
+      if (value !== null && !Number.isSafeInteger(value))
+        throw new Error(`sync tipe invalid: ${entity}.${field}`);
+      continue;
+    }
     if (BOOLEAN_FIELDS.has(key)) {
       if (typeof value !== "boolean") throw new Error(`sync tipe invalid: ${entity}.${field}`);
       continue;
@@ -15527,7 +16085,7 @@ async function upsertLocal(entity, id, version, data) {
 function setAcceptedHook(hook) {
   onAccepted = hook;
 }
-var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, PARENTS, __FIELDS, __DATE_FIELDS, NUMBER_FIELDS, FLOAT_FIELDS, BOOLEAN_FIELDS, JSON_FIELDS, __JSON_FIELDS, PULL_MAX_BYTES, BOOTSTRAP_ORDER, onAccepted, __FIELDS_FOR_TEST;
+var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, PARENTS, __FIELDS, __DATE_FIELDS, NUMBER_FIELDS, NULLABLE_NUMBER_FIELDS, FLOAT_FIELDS, BOOLEAN_FIELDS, JSON_FIELDS, __JSON_FIELDS, PULL_MAX_BYTES, BOOTSTRAP_ORDER, onAccepted, __FIELDS_FOR_TEST;
 var init_sync = __esm({
   "src/services/sync.ts"() {
     "use strict";
@@ -15584,7 +16142,24 @@ var init_sync = __esm({
       // SPEC-484 · ADR-0101 · `runtime` ikut: ia menentukan sesi mesin mana yang memakai persona ini,
       // dan kolom yang terlewat di sini mendarat sebagai default palsu (= "warisi") di setiap mesin
       // lain tanpa satu pun error.
-      customAgent: ["projectId", "name", "description", "instructions", "tools", "model", "mentions", "runtime", "enabled", "createdAt", "updatedAt"],
+      customAgent: [
+        "projectId",
+        "name",
+        "description",
+        "instructions",
+        "tools",
+        "model",
+        "mentions",
+        "runtime",
+        "activation",
+        "effort",
+        "workspacePolicy",
+        "maxTurns",
+        "timeoutSeconds",
+        "enabled",
+        "createdAt",
+        "updatedAt"
+      ],
       // SPEC-471 · ADR-0095 · SELURUH kolom bermakna ikut. `status`/`specId` termasuk: keputusan
       // triase adalah bagian keadaan yang harus dilihat sama oleh semua mesin — tanpa itu satu
       // mesin bisa menerima ulang issue yang di mesin lain sudah jadi backlog.
@@ -15663,6 +16238,7 @@ var init_sync = __esm({
       "ticketAttachment:size",
       "githubIssue:number"
     ]);
+    NULLABLE_NUMBER_FIELDS = /* @__PURE__ */ new Set(["customAgent:maxTurns", "customAgent:timeoutSeconds"]);
     FLOAT_FIELDS = /* @__PURE__ */ new Set(["task:order"]);
     BOOLEAN_FIELDS = /* @__PURE__ */ new Set(["vps:hardened", "customAgent:enabled", "member:active"]);
     JSON_FIELDS = /* @__PURE__ */ new Set([
@@ -15697,6 +16273,33 @@ var init_sync = __esm({
   }
 });
 
+// src/services/sync-notify.ts
+async function notifySynced(entity, id) {
+  try {
+    if (!isEntity(entity)) return;
+    await consumeTombstoneOnRecreate(entity, id);
+    if (effectiveStr("SYNC_SERVER_URL")) await enqueueOutbox(entity, id);
+    else await publishLocal(entity, id);
+  } catch {
+  }
+}
+async function notifyDeleted(entity, id) {
+  try {
+    if (!isEntity(entity)) return;
+    if (effectiveStr("SYNC_SERVER_URL")) await enqueueOutbox(entity, id);
+    else await publishDelete(entity, id);
+  } catch {
+  }
+}
+var init_sync_notify = __esm({
+  "src/services/sync-notify.ts"() {
+    "use strict";
+    init_config2();
+    init_outbox();
+    init_sync();
+  }
+});
+
 // src/services/settings.ts
 async function getSetting() {
   const raw = (await prisma.setting.findUnique({ where: { id: 1 } }))?.data;
@@ -15777,8 +16380,10 @@ var init_settings3 = __esm({
       // SPEC-518 · agen pembuat changelog (opt-in, mati)
       portalChat: PORTAL_CHAT_DEFAULTS,
       // SPEC-854 · ADR-0130 · chat portal klien (opt-in, mati)
-      builtinAgents: {}
+      builtinAgents: {},
       // SPEC-881 · ADR-0136 · sidik jari seed (lokal, tak disync)
+      builtinAgentPolicies: {}
+      // SPEC-950 · marker safety policy sekali-jalan (lokal)
     };
     RETIRED_MODELS = { "claude-opus-4-8": "claude-opus-5" };
   }
@@ -16184,12 +16789,12 @@ var require_common = __commonJS({
       createDebug.skips = [];
       createDebug.formatters = {};
       function selectColor(namespace) {
-        let hash2 = 0;
+        let hash3 = 0;
         for (let i = 0; i < namespace.length; i++) {
-          hash2 = (hash2 << 5) - hash2 + namespace.charCodeAt(i);
-          hash2 |= 0;
+          hash3 = (hash3 << 5) - hash3 + namespace.charCodeAt(i);
+          hash3 |= 0;
         }
-        return createDebug.colors[Math.abs(hash2) % createDebug.colors.length];
+        return createDebug.colors[Math.abs(hash3) % createDebug.colors.length];
       }
       createDebug.selectColor = selectColor;
       function createDebug(namespace) {
@@ -17335,7 +17940,7 @@ var init_gateway = __esm({
             const message = sanitizeTelegramOutput(error.message, this.deps.exactSecrets).slice(0, 500);
             updateTelegramRuntimeStatus({ running: false, readiness: "error", lastError: message });
             if (error instanceof TelegramApiError && error.code === 409) return;
-            await new Promise((resolve21) => setTimeout(resolve21, 1e3));
+            await new Promise((resolve22) => setTimeout(resolve22, 1e3));
           }
         }
       }
@@ -17498,9 +18103,9 @@ ${input.text}`;
         }
         const engine = await this.deps.defaults();
         await this.deps.store.setChatEngine(input.chatId, engine);
-        const hash2 = chatHash(input.chatId);
-        const projectId = `telegram:${hash2}`;
-        const cwd = `${this.deps.home.replace(/\/$/, "")}/telegram/${hash2}`;
+        const hash3 = chatHash(input.chatId);
+        const projectId = `telegram:${hash3}`;
+        const cwd = `${this.deps.home.replace(/\/$/, "")}/telegram/${hash3}`;
         this.deps.ensureDir(cwd);
         if (engine.agent === "codex") this.deps.ensureCodexTrust(cwd);
         const personality = await this.deps.personality(context.personalityAgentId, context.activeProjectId);
@@ -18049,6 +18654,57 @@ var init_bootstrap = __esm({
   }
 });
 
+// src/services/codex-version.ts
+import { execFile as execFile14 } from "node:child_process";
+import { promisify as promisify13 } from "node:util";
+async function probeCodexVersion(env = process.env, execute = runVersion) {
+  const probe = codexNativeVersionProbe(env, codexBin2());
+  try {
+    return parseCodexVersion((await execute(probe.bin, probe.args)).stdout);
+  } catch {
+    return null;
+  }
+}
+function parseCodexVersion(out4) {
+  const m = /(\d+)\.(\d+)\.(\d+)/.exec(out4);
+  return m ? `${m[1]}.${m[2]}.${m[3]}` : null;
+}
+async function getCodexVersion(now = Date.now()) {
+  if (cache3 && now - cache3.at < TTL_MS4) return cache3.version;
+  const version = await probeCodexVersion();
+  cache3 = { at: now, version };
+  return version;
+}
+async function codexVersionInfo() {
+  const version = await getCodexVersion();
+  return {
+    version,
+    minRequired: CODEX_MIN_CLIENT,
+    ok: version === null || cmpVersion(version, CODEX_MIN_CLIENT) >= 0
+  };
+}
+function _resetCodexVersionCache() {
+  cache3 = null;
+}
+var run3, CODEX_MIN_CLIENT, TTL_MS4, cache3, codexBin2, runVersion;
+var init_codex_version = __esm({
+  "src/services/codex-version.ts"() {
+    "use strict";
+    init_src();
+    init_src2();
+    init_config2();
+    run3 = promisify13(execFile14);
+    CODEX_MIN_CLIENT = "0.144.0";
+    TTL_MS4 = 5 * 6e4;
+    cache3 = null;
+    codexBin2 = () => effectiveStr("HANOMAN_CODEX_BIN") ?? "codex";
+    runVersion = async (bin, args) => {
+      const { stdout } = await run3(bin, args, { timeout: 1e4 });
+      return { stdout };
+    };
+  }
+});
+
 // src/services/presence/snapshot.ts
 function paneToPresence(p3, phase) {
   return {
@@ -20448,7 +21104,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes11, createHash: createHash11 } = __require("crypto");
+    var { randomBytes: randomBytes11, createHash: createHash12 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -21116,8 +21772,8 @@ var require_websocket = __commonJS({
           abortHandshake(websocket2, socket2, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash11("sha1").update(key + GUID).digest("base64");
-        if (res.headers["sec-websocket-accept"] !== digest) {
+        const digest2 = createHash12("sha1").update(key + GUID).digest("base64");
+        if (res.headers["sec-websocket-accept"] !== digest2) {
           abortHandshake(websocket2, socket2, "Invalid Sec-WebSocket-Accept header");
           return;
         }
@@ -21397,7 +22053,7 @@ var require_stream = __commonJS({
       };
       duplex._final = function(callback) {
         if (ws2.readyState === ws2.CONNECTING) {
-          ws2.once("open", function open4() {
+          ws2.once("open", function open5() {
             duplex._final(callback);
           });
           return;
@@ -21418,7 +22074,7 @@ var require_stream = __commonJS({
       };
       duplex._write = function(chunk, encoding, callback) {
         if (ws2.readyState === ws2.CONNECTING) {
-          ws2.once("open", function open4() {
+          ws2.once("open", function open5() {
             duplex._write(chunk, encoding, callback);
           });
           return;
@@ -21485,7 +22141,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash11 } = __require("crypto");
+    var { createHash: createHash12 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -21792,12 +22448,12 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket2, 503);
-        const digest = createHash11("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash12("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
           "Connection: Upgrade",
-          `Sec-WebSocket-Accept: ${digest}`
+          `Sec-WebSocket-Accept: ${digest2}`
         ];
         const ws2 = new this.options.WebSocket(null, void 0, this.options);
         if (protocols.size) {
@@ -22343,6 +22999,382 @@ var init_sync_client = __esm({
   }
 });
 
+// src/services/agent-tool-catalog.ts
+import { readFileSync as readFileSync17 } from "node:fs";
+import { homedir as homedir10 } from "node:os";
+import { join as join29 } from "node:path";
+function mcpServerNames(repoDir) {
+  const names = [];
+  const claudeJson = readJson2(join29(home(), ".claude.json"));
+  names.push(...serversOf(claudeJson));
+  if (repoDir) {
+    const projects = claudeJson?.projects;
+    if (projects && typeof projects === "object") names.push(...serversOf(projects[repoDir]));
+    names.push(...serversOf(readJson2(join29(repoDir, ".mcp.json"))));
+  }
+  names.push(...codexServers());
+  return [...new Set(names.filter(Boolean))].sort((a, b) => a.localeCompare(b));
+}
+function agentToolCatalog(repoDir) {
+  return [ALL_TOOLS_ENTRY, ...BUILTIN_AGENT_TOOLS, ...mcpServerNames(repoDir).map(mcpToolEntry)];
+}
+var home, readJson2, serversOf, codexServers, agentToolIds;
+var init_agent_tool_catalog = __esm({
+  "src/services/agent-tool-catalog.ts"() {
+    "use strict";
+    init_src();
+    home = () => process.env.HOME || homedir10();
+    readJson2 = (path) => {
+      try {
+        return JSON.parse(readFileSync17(path, "utf8"));
+      } catch {
+        return null;
+      }
+    };
+    serversOf = (node) => {
+      const ms = node?.mcpServers;
+      if (!ms || typeof ms !== "object" || Array.isArray(ms)) return [];
+      return Object.keys(ms);
+    };
+    codexServers = () => {
+      let text;
+      try {
+        text = readFileSync17(join29(home(), ".codex", "config.toml"), "utf8");
+      } catch {
+        return [];
+      }
+      const out4 = [];
+      for (const m of text.matchAll(/^\s*\[mcp_servers\.(?:"([^"]+)"|([A-Za-z0-9_-]+))(?:\.[^\]]*)?\]/gm)) {
+        const name2 = m[1] ?? m[2];
+        if (name2) out4.push(name2);
+      }
+      return out4;
+    };
+    agentToolIds = (repoDir) => agentToolCatalog(repoDir).map((t) => t.id);
+  }
+});
+
+// src/services/builtin-agents.ts
+import { createHash as createHash9 } from "node:crypto";
+async function seedBuiltinAgents() {
+  try {
+    const setting = await getSetting();
+    const stamps = { ...setting.builtinAgents };
+    const policies = { ...setting.builtinAgentPolicies };
+    let changed = false;
+    for (const a of BUILTIN_AGENTS) {
+      const id = customAgentId(null, a.name);
+      const fp = builtinFingerprint(a);
+      const row = await prisma.customAgent.findUnique({ where: { id } });
+      const qaPolicyPending = a.name === "qa-verifier" && policies[a.name] !== QA_SAFETY_POLICY;
+      if (!row) {
+        if (await findTombstone("customAgent", id)) {
+          if (qaPolicyPending) {
+            policies[a.name] = QA_SAFETY_POLICY;
+            changed = true;
+          }
+          continue;
+        }
+        await prisma.customAgent.create({ data: {
+          id,
+          projectId: null,
+          name: a.name,
+          description: a.description,
+          instructions: a.instructions,
+          tools: [...a.tools],
+          model: null,
+          mentions: [],
+          runtime: null,
+          activation: a.activation,
+          effort: a.effort,
+          workspacePolicy: a.workspacePolicy,
+          maxTurns: a.maxTurns,
+          timeoutSeconds: a.timeoutSeconds,
+          enabled: a.enabledByDefault
+        } });
+        await notifySynced("customAgent", id);
+        stamps[a.name] = fp;
+        changed = true;
+        if (qaPolicyPending) policies[a.name] = QA_SAFETY_POLICY;
+        continue;
+      }
+      const stamped = stamps[a.name];
+      const unedited = Boolean(stamped) && (stamped === rowFingerprint(row) || stamped === legacyRowFingerprint(row));
+      const data = {};
+      if (unedited && stamped !== fp) {
+        Object.assign(data, {
+          description: a.description,
+          instructions: a.instructions,
+          tools: [...a.tools],
+          activation: a.activation,
+          effort: a.effort,
+          workspacePolicy: a.workspacePolicy,
+          maxTurns: a.maxTurns,
+          timeoutSeconds: a.timeoutSeconds
+        });
+        stamps[a.name] = fp;
+        changed = true;
+      }
+      if (qaPolicyPending && unedited) data.enabled = false;
+      if (Object.keys(data).length > 0) {
+        await prisma.customAgent.update({ where: { id }, data });
+        await notifySynced("customAgent", id);
+      }
+      if (qaPolicyPending) {
+        policies[a.name] = QA_SAFETY_POLICY;
+        changed = true;
+      }
+    }
+    if (changed) {
+      const data = { ...setting, builtinAgents: stamps, builtinAgentPolicies: policies };
+      await prisma.setting.upsert({
+        where: { id: 1 },
+        update: { data },
+        create: { id: 1, data }
+      });
+    }
+  } catch {
+  }
+}
+var digest, legacyFingerprint, fingerprint, builtinFingerprint, rowFingerprint, legacyRowFingerprint, QA_SAFETY_POLICY;
+var init_builtin_agents2 = __esm({
+  "src/services/builtin-agents.ts"() {
+    "use strict";
+    init_src();
+    init_db();
+    init_settings3();
+    init_tombstone();
+    init_sync_notify();
+    digest = (parts) => createHash9("sha256").update(parts.join(" ")).digest("hex").slice(0, 16);
+    legacyFingerprint = (name2, description, instructions, tools) => digest([name2, description, instructions, [...tools].join(",")]);
+    fingerprint = (a) => digest([
+      a.name,
+      a.description,
+      a.instructions,
+      (toolsOf(a.tools) ?? []).join(","),
+      activationOf(a.activation),
+      effortOf(a.effort) ?? "",
+      workspacePolicyOf(a.workspacePolicy),
+      String(maxTurnsOf(a.maxTurns) ?? ""),
+      String(timeoutSecondsOf(a.timeoutSeconds) ?? "")
+    ]);
+    builtinFingerprint = (a) => fingerprint(a);
+    rowFingerprint = (r) => fingerprint(r);
+    legacyRowFingerprint = (r) => legacyFingerprint(r.name, r.description, r.instructions, toolsOf(r.tools) ?? []);
+    QA_SAFETY_POLICY = "disable-unedited-v1";
+  }
+});
+
+// src/services/custom-agents.ts
+var custom_agents_exports = {};
+__export(custom_agents_exports, {
+  agentDefsFor: () => agentDefsFor,
+  collectChangedFiles: () => collectChangedFiles,
+  currentCustomAgentRuntimeSupport: () => currentCustomAgentRuntimeSupport,
+  installCustomAgents: () => installCustomAgents,
+  loadCustomAgents: () => loadCustomAgents,
+  refreshCustomAgentRuntimeSupport: () => refreshCustomAgentRuntimeSupport,
+  selectAgentRows: () => selectAgentRows,
+  toDef: () => toDef,
+  unknownMentions: () => unknownMentions,
+  validateGraph: () => validateGraph
+});
+function smartBuiltinSelected(row, context) {
+  switch (row.name) {
+    case "scout":
+      return hasPhase(context, "Plan") || hasPhase(context, "Execute") || hasPhase(context, "Audit") || context.changedFiles.length === 0;
+    case "blast-radius":
+      return hasPhase(context, "Execute") || hasPhase(context, "Audit") || context.changedFiles.length > 0;
+    case "security-reviewer":
+      return (hasPhase(context, "Execute") || hasPhase(context, "Audit")) && touchesExternalInput(context);
+    case "spec-auditor":
+      return hasPhase(context, "Plan") || hasPhase(context, "Execute");
+    case "dep-auditor":
+      return touchesDependency(context.changedFiles);
+    case "root-causer":
+      return hasPhase(context, "Audit");
+    case "qa-verifier":
+      return context.runtime === "claude" && hasPhase(context, "Execute") && workspacePolicyOf(row.workspacePolicy) === "isolated-worktree" && touchesExecutableWork(context.changedFiles);
+    case "edge-case-hunter":
+      return context.runtime === "claude" && hasPhase(context, "Execute") && workspacePolicyOf(row.workspacePolicy) === "isolated-worktree";
+    default:
+      return true;
+  }
+}
+function selectAgentRows(rows, context) {
+  return rows.filter((row) => {
+    if (!row.enabled) return false;
+    const runtime = runtimeOf(row.runtime);
+    if (runtime !== null && runtime !== context.runtime) return false;
+    if (workspacePolicyOf(row.workspacePolicy) === "isolated-worktree" && context.runtime !== "claude") return false;
+    if (activationOf(row.activation) === "always") return true;
+    const builtin = row.projectId === null && BUILTIN_AGENT_NAMES.includes(row.name);
+    return builtin ? smartBuiltinSelected(row, context) : true;
+  });
+}
+function currentCustomAgentRuntimeSupport() {
+  return { ...codexNativeSupport };
+}
+function toDef(r) {
+  return {
+    id: r.id,
+    name: r.name,
+    description: r.description,
+    instructions: r.instructions,
+    tools: toolsOf(r.tools),
+    model: r.model,
+    mentions: mentionsOf(r.mentions),
+    activation: activationOf(r.activation),
+    effort: effortOf(r.effort),
+    workspacePolicy: workspacePolicyOf(r.workspacePolicy),
+    maxTurns: maxTurnsOf(r.maxTurns),
+    timeoutSeconds: timeoutSecondsOf(r.timeoutSeconds)
+  };
+}
+function recommendedModel(row, runtime) {
+  if (row.model) return row.model;
+  if (row.projectId !== null) return null;
+  const builtin = BUILTIN_AGENTS.find((agent) => agent.name === row.name);
+  if (!builtin) return null;
+  const model = builtin.models[runtime];
+  if (runtime === "claude" && (model === "haiku" || model === "sonnet")) return model;
+  return modelsForRuntime(runtime).some((entry) => entry.id === model) ? model : null;
+}
+function toRuntimeDef(row, runtime) {
+  return { ...toDef(row), model: recommendedModel(row, runtime) };
+}
+async function loadCustomAgents() {
+  try {
+    cache4 = await prisma.customAgent.findMany();
+    const projects = await prisma.project.findMany({ select: { id: true, repoDir: true } });
+    const bindings = await prisma.localBinding.findMany({ select: { projectId: true, repoDir: true } });
+    const next = /* @__PURE__ */ new Map();
+    for (const p3 of projects) next.set(p3.id, p3.repoDir ?? null);
+    for (const b of bindings) next.set(b.projectId, b.repoDir ?? null);
+    repoDirCache = next;
+  } catch {
+    cache4 = [];
+    repoDirCache = /* @__PURE__ */ new Map();
+  }
+}
+function agentDefsFor(contextOrProjectId, legacyAgent) {
+  const legacy = typeof contextOrProjectId === "string";
+  const context = legacy ? {
+    projectId: contextOrProjectId,
+    runtime: legacyAgent ?? "claude",
+    cwd: "",
+    changedFiles: []
+  } : contextOrProjectId;
+  const { projectId } = context;
+  const globals = cache4.filter((r) => r.projectId === null).map(asCustomAgent);
+  const project = cache4.filter((r) => r.projectId === projectId).map(asCustomAgent);
+  const effectiveIds = new Set(effectiveAgents(globals, project).map((agent) => agent.id));
+  const effectiveRows = cache4.filter((row) => effectiveIds.has(row.id));
+  const eff = legacy ? effectiveRows.filter((row) => row.enabled && (runtimeOf(row.runtime) === null || runtimeOf(row.runtime) === context.runtime) && !(workspacePolicyOf(row.workspacePolicy) === "isolated-worktree" && context.runtime !== "claude")) : selectAgentRows(effectiveRows, context);
+  const needsCatalog = eff.some((row) => (toolsOf(row.tools) ?? []).includes(ALL_TOOLS));
+  const catalogIds = needsCatalog ? agentToolIds(repoDirCache.get(projectId) ?? null) : [];
+  return eff.map((row) => {
+    const a = asCustomAgent(row);
+    return {
+      ...toRuntimeDef(row, context.runtime),
+      // Ekspansi terjadi DI SINI, sebelum `resolveTools` di runner: meneruskan `"*"` apa adanya
+      // membuat claude membuangnya senyap (agen tanpa alat), sementara menerjemahkannya jadi `null`
+      // membuat agen mewarisi SELURUH tool termasuk `Task` — lapis 2 anti-loop lenyap tanpa jejak.
+      tools: expandTools(a.tools, catalogIds),
+      mentions: a.mentions ?? []
+    };
+  });
+}
+function validateGraph(rows) {
+  const projectScopes = [...new Set(rows.map((r) => r.projectId).filter((p3) => p3 !== null))];
+  const globals = rows.filter((r) => r.projectId === null).map(asCustomAgent);
+  for (const scope of [null, ...projectScopes]) {
+    const project = scope === null ? [] : rows.filter((r) => r.projectId === scope).map(asCustomAgent);
+    const nodes = effectiveAgents(globals, project).map((a) => ({ name: a.name, mentions: a.mentions ?? [] }));
+    const cycle = detectCycle(nodes);
+    if (cycle) return { scope: scope ?? GLOBAL_SCOPE, cycle };
+  }
+  return null;
+}
+function unknownMentions(row, all) {
+  const visible = new Set(
+    all.filter((r) => r.projectId === null || row.projectId !== null && r.projectId === row.projectId).map((r) => r.name)
+  );
+  return mentionsOf(row.mentions).filter((m) => !visible.has(m));
+}
+async function refreshCustomAgentRuntimeSupport(probe = defaultCodexSupportProbe) {
+  const refresh = codexSupportRefreshTail.then(async () => {
+    const version = await probe();
+    codexNativeSupport = { version, ok: codexNativeAgentsSupported(version) };
+  });
+  codexSupportRefreshTail = refresh.catch(() => {
+  });
+  return refresh;
+}
+async function installCustomAgents() {
+  await seedBuiltinAgents();
+  await loadCustomAgents();
+  await refreshCustomAgentRuntimeSupport();
+  registerCodexNativeAgentSupport(() => codexNativeSupport);
+  registerCustomAgentSource((context) => agentDefsFor(context));
+  if (!codexSupportRefreshTimer) {
+    codexSupportRefreshTimer = setInterval(() => {
+      void refreshCustomAgentRuntimeSupport().catch((error) => console.error("custom agent: probe Codex gagal:", error));
+    }, 5 * 6e4);
+    codexSupportRefreshTimer.unref();
+  }
+}
+var phasesOf, hasPhase, touchesDependency, touchesExternalInput, touchesExecutableWork, cache4, codexNativeSupport, codexSupportRefreshTimer, codexSupportRefreshTail, repoDirCache, asCustomAgent, defaultCodexSupportProbe;
+var init_custom_agents2 = __esm({
+  "src/services/custom-agents.ts"() {
+    "use strict";
+    init_db();
+    init_src();
+    init_src2();
+    init_pty();
+    init_agent_tool_catalog();
+    init_builtin_agents2();
+    init_codex_version();
+    phasesOf = (flow) => flow ? PIPELINES[flow] : [];
+    hasPhase = (context, name2) => phasesOf(context.flow).includes(name2);
+    touchesDependency = (files) => files.some((path) => /(^|\/)(?:package\.json|pnpm-lock\.yaml|package-lock\.json|yarn\.lock|bun\.lockb?|Cargo\.(?:toml|lock)|go\.(?:mod|sum)|requirements[^/]*\.txt|pyproject\.toml)$/i.test(path));
+    touchesExternalInput = (context) => {
+      const surface = [context.prompt ?? "", ...context.changedFiles].join("\n");
+      return /(?:^|[\W_/.-])(route|routes|handler|auth|oauth|api|cli|config|filesystem|upload|webhook|input)(?:$|[\W_/.-])/i.test(surface);
+    };
+    touchesExecutableWork = (files) => files.some((path) => !/(^|\/)(?:docs?|internal\/docs)\//i.test(path) && /(?:\.(?:[cm]?[jt]sx?|py|go|rs|java|rb|php)|(?:^|\/)test(?:s)?\/)/i.test(path));
+    cache4 = [];
+    codexNativeSupport = { version: null, ok: false };
+    codexSupportRefreshTimer = null;
+    codexSupportRefreshTail = Promise.resolve();
+    repoDirCache = /* @__PURE__ */ new Map();
+    asCustomAgent = (r) => ({
+      id: r.id,
+      projectId: r.projectId,
+      name: r.name,
+      description: r.description,
+      instructions: r.instructions,
+      tools: toolsOf(r.tools),
+      model: r.model,
+      mentions: mentionsOf(r.mentions),
+      runtime: runtimeOf(r.runtime),
+      activation: activationOf(r.activation),
+      effort: effortOf(r.effort),
+      workspacePolicy: workspacePolicyOf(r.workspacePolicy),
+      maxTurns: maxTurnsOf(r.maxTurns),
+      timeoutSeconds: timeoutSecondsOf(r.timeoutSeconds),
+      enabled: r.enabled,
+      createdAt: "",
+      updatedAt: ""
+      // tak dipakai lapis ini
+    });
+    defaultCodexSupportProbe = async () => {
+      _resetCodexVersionCache();
+      return getCodexVersion();
+    };
+  }
+});
+
 // src/services/config-apply.ts
 var config_apply_exports = {};
 __export(config_apply_exports, {
@@ -22370,6 +23402,10 @@ async function applyConfigSideEffect(key) {
     return;
   }
   if (configEntry(key)?.inheritEnv) mirrorInheritEnv(key);
+  if (key === "HANOMAN_CODEX_BIN") {
+    const { refreshCustomAgentRuntimeSupport: refreshCustomAgentRuntimeSupport2 } = await Promise.resolve().then(() => (init_custom_agents2(), custom_agents_exports));
+    await refreshCustomAgentRuntimeSupport2();
+  }
 }
 async function rotateSyncOrigin(input) {
   const url2 = new URL(input);
@@ -24854,14 +25890,14 @@ var require_stream_consumer = __commonJS({
   "../node_modules/.pnpm/@fastify+multipart@10.1.0/node_modules/@fastify/multipart/lib/stream-consumer.js"(exports, module) {
     "use strict";
     module.exports = function streamToNull(stream) {
-      return new Promise((resolve21, reject2) => {
+      return new Promise((resolve22, reject2) => {
         stream.on("data", () => {
         });
         stream.on("close", () => {
-          resolve21();
+          resolve22();
         });
         stream.on("end", () => {
-          resolve21();
+          resolve22();
         });
         stream.on("error", (error) => {
           reject2(error);
@@ -25310,10 +26346,10 @@ var require_multipart2 = __commonJS({
           }
         };
         const parts = () => {
-          return new Promise((resolve21, reject2) => {
+          return new Promise((resolve22, reject2) => {
             handle((val) => {
               if (val instanceof Error) return reject2(val);
-              resolve21(val);
+              resolve22(val);
             });
           });
         };
@@ -25494,7 +26530,7 @@ var require_multipart2 = __commonJS({
           parts = this.parts(options3);
         }
         this.savedRequestFiles = [];
-        const tmpdir6 = options3?.tmpdir || os.tmpdir();
+        const tmpdir7 = options3?.tmpdir || os.tmpdir();
         this.tmpUploads = [];
         let i = 0;
         for await (const part of parts) {
@@ -25502,7 +26538,7 @@ var require_multipart2 = __commonJS({
           if (!part.file) {
             continue;
           }
-          const filepath = path.join(tmpdir6, generateId() + path.extname(part.filename || "file" + i++));
+          const filepath = path.join(tmpdir7, generateId() + path.extname(part.filename || "file" + i++));
           const target2 = createWriteStream2(filepath);
           try {
             this.tmpUploads.push(filepath);
@@ -25679,15 +26715,15 @@ init_stage_machine();
 init_src();
 import { execFile as execFile2 } from "node:child_process";
 import { promisify } from "node:util";
-import { existsSync as existsSync6, rmSync as rmSync2 } from "node:fs";
+import { existsSync as existsSync6, rmSync as rmSync3 } from "node:fs";
 import { resolve as resolve10 } from "node:path";
 
 // src/services/safe-repo-path.ts
 import { constants as constants2 } from "node:fs";
 import { lstat, mkdir as mkdir2, open as open2, realpath, rename, unlink as unlink2 } from "node:fs/promises";
-import { isAbsolute as isAbsolute4, join as join7, relative, resolve as resolve9, sep as sep2 } from "node:path";
+import { isAbsolute as isAbsolute4, join as join10, relative, resolve as resolve9, sep as sep2 } from "node:path";
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { closeSync, fstatSync, lstatSync, mkdirSync as mkdirSync6, openSync, readFileSync as readFileSync7, realpathSync as realpathSync2, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync4 } from "node:fs";
+import { closeSync, fstatSync, lstatSync, mkdirSync as mkdirSync6, openSync, readFileSync as readFileSync7, realpathSync as realpathSync2, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync6 } from "node:fs";
 var PathContainmentError = class extends Error {
   code = "PATH_CONTAINMENT";
 };
@@ -25715,7 +26751,7 @@ async function ensureRepoParents(root, rel) {
   const parts = components(rel).slice(0, -1);
   let current = base2;
   for (const part of parts) {
-    current = join7(current, part);
+    current = join10(current, part);
     try {
       await mkdir2(current, { mode: 448 });
     } catch (error) {
@@ -25732,7 +26768,7 @@ function ensureRepoParentsSync(root, rel) {
   const parts = components(rel).slice(0, -1);
   let current = base2;
   for (const part of parts) {
-    current = join7(current, part);
+    current = join10(current, part);
     try {
       mkdirSync6(current, { mode: 448 });
     } catch (error) {
@@ -25748,7 +26784,7 @@ async function resolveRepoEntry(root, rel, opts = {}) {
   const parts = components(rel);
   let current = base2;
   for (let i = 0; i < parts.length; i++) {
-    current = join7(current, parts[i]);
+    current = join10(current, parts[i]);
     const stat4 = await lstat(current).catch((error) => {
       if (error.code === "ENOENT" && opts.allowMissingTail) return null;
       if (error.code === "ENOENT" && opts.allowMissingFinal && i === parts.length - 1) return null;
@@ -25769,7 +26805,7 @@ function assertSafeRepoPathSync(root, rel, allowMissingFinal = false, allowMissi
   const parts = components(rel);
   let current = base2;
   for (let i = 0; i < parts.length; i++) {
-    current = join7(current, parts[i]);
+    current = join10(current, parts[i]);
     try {
       const stat4 = lstatSync(current);
       if (stat4.isSymbolicLink()) denied("symlink");
@@ -25799,10 +26835,10 @@ function writeRepoFileAtomicSync(root, rel, data) {
   const parent = resolve9(path, "..");
   const parentRel = relative(realpathSync2(root), parent);
   if (parentRel) assertSafeRepoPathSync(root, parentRel);
-  const temp = join7(parent, `.hanoman-${randomUUID3()}.tmp`);
+  const temp = join10(parent, `.hanoman-${randomUUID3()}.tmp`);
   const fd = openSync(temp, constants2.O_WRONLY | constants2.O_CREAT | constants2.O_EXCL | (constants2.O_NOFOLLOW ?? 0), 384);
   try {
-    writeFileSync4(fd, data);
+    writeFileSync6(fd, data);
   } finally {
     closeSync(fd);
   }
@@ -25846,7 +26882,7 @@ async function writeRepoFileAtomic(root, rel, data) {
   await mkdir2(entry.parent, { recursive: false, mode: 448 }).catch((error) => {
     if (error.code !== "EEXIST") throw error;
   });
-  const temp = join7(entry.parent, `.hanoman-${randomUUID3()}.tmp`);
+  const temp = join10(entry.parent, `.hanoman-${randomUUID3()}.tmp`);
   const handle = await open2(temp, constants2.O_WRONLY | constants2.O_CREAT | constants2.O_EXCL | (constants2.O_NOFOLLOW ?? 0), 384);
   try {
     await handle.writeFile(data);
@@ -25945,7 +26981,7 @@ function writeDocFile(repoDir, rel, content) {
 function deleteDocFile(repoDir, rel) {
   const abs = docAbsPath(repoDir, rel);
   if (!existsSync6(abs)) return false;
-  rmSync2(abs);
+  rmSync3(abs);
   return true;
 }
 
@@ -26003,9 +27039,9 @@ async function toProjectView(p3, sessions, devices2) {
   const specs = await prisma.spec.findMany({ where: { projectId: p3.id } });
   const { coverage } = await scanRepoDocs(await resolveRepoDir(p3.id));
   const binding = await getBinding(p3.id);
-  const open4 = specs.filter((s2) => s2.stage !== "done");
+  const open5 = specs.filter((s2) => s2.stage !== "done");
   const { session, commit } = sessionOf(p3.id, sessions);
-  const topStage = open4.length ? open4.map((s2) => s2.stage).sort((a, b) => STAGES.indexOf(b) - STAGES.indexOf(a))[0] : "spec";
+  const topStage = open5.length ? open5.map((s2) => s2.stage).sort((a, b) => STAGES.indexOf(b) - STAGES.indexOf(a))[0] : "spec";
   return {
     id: p3.id,
     name: p3.name,
@@ -26018,7 +27054,7 @@ async function toProjectView(p3, sessions, devices2) {
     docStatus: docStatusFor(coverage),
     coverage,
     createdAt: p3.createdAt.toISOString(),
-    backlog: open4.length,
+    backlog: open5.length,
     topStage,
     session,
     activity: session.status === "running" ? `running \xB7 ${session.flow ?? "sesi"}` : "idle",
@@ -26037,31 +27073,13 @@ async function toProjectView(p3, sessions, devices2) {
   };
 }
 
-// src/services/sync-notify.ts
-init_config2();
-init_outbox();
-init_sync();
-async function notifySynced(entity, id) {
-  try {
-    if (!isEntity(entity)) return;
-    await consumeTombstoneOnRecreate(entity, id);
-    if (effectiveStr("SYNC_SERVER_URL")) await enqueueOutbox(entity, id);
-    else await publishLocal(entity, id);
-  } catch {
-  }
-}
-async function notifyDeleted(entity, id) {
-  try {
-    if (!isEntity(entity)) return;
-    if (effectiveStr("SYNC_SERVER_URL")) await enqueueOutbox(entity, id);
-    else await publishDelete(entity, id);
-  } catch {
-  }
-}
+// src/routes/projects.ts
+init_sync_notify();
 
 // src/services/sync-delete.ts
 init_sync();
 init_tombstone();
+init_sync_notify();
 init_outbox();
 async function deleteSynced(entity, id, deviceId) {
   const snap = await snapshot(entity, id);
@@ -26305,8 +27323,8 @@ import { existsSync as existsSync9 } from "node:fs";
 // src/services/integrate.ts
 import { execFile as execFile4 } from "node:child_process";
 import { promisify as promisify3 } from "node:util";
-import { rmSync as rmSync3 } from "node:fs";
-import { join as join8 } from "node:path";
+import { rmSync as rmSync4 } from "node:fs";
+import { join as join11 } from "node:path";
 var sanitize = (id) => id.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
 var sourceBranch = (specId) => `hanoman/${sanitize(specId)}`;
 var exec3 = promisify3(execFile4);
@@ -26342,7 +27360,7 @@ async function resolveTarget(repoDir, target2) {
 async function reclaim(repoDir, wt) {
   await sh(repoDir, ["worktree", "remove", "--force", wt]);
   await sh(repoDir, ["worktree", "prune"]);
-  rmSync3(wt, { recursive: true, force: true });
+  rmSync4(wt, { recursive: true, force: true });
 }
 async function integrateBranch(repoDir, src, op, target2) {
   const source = await resolveSource(repoDir, src.branch);
@@ -26350,7 +27368,7 @@ async function integrateBranch(repoDir, src, op, target2) {
   const tgt = await resolveTarget(repoDir, target2);
   if (!tgt) return { status: "error", code: 400, error: `target "${target2}" tidak dikenal` };
   await sh(repoDir, ["fetch", "origin"]);
-  const wt = join8(repoDir, ".worktrees", `merge-${sanitize(src.mergeId)}`);
+  const wt = join11(repoDir, ".worktrees", `merge-${sanitize(src.mergeId)}`);
   await reclaim(repoDir, wt);
   const baseRef = op === "merge" ? tgt.ref : source;
   const baseSha = await out(repoDir, ["rev-parse", "--verify", "--end-of-options", `${baseRef}^{commit}`]);
@@ -26411,7 +27429,7 @@ async function mergeIntoCurrent(repoDir, source, opts = {}) {
   const src = await resolveGraphSource(repoDir, source);
   if (!src) return { status: "error", code: 400, error: `source "${source}" tak dikenal` };
   await sh(repoDir, ["fetch", "origin"]);
-  const wt = join8(repoDir, ".worktrees", `merge-${sanitize(current)}`);
+  const wt = join11(repoDir, ".worktrees", `merge-${sanitize(current)}`);
   await reclaim(repoDir, wt);
   const baseSha = await out(repoDir, ["rev-parse", "--verify", "--end-of-options", `refs/heads/${current}^{commit}`]);
   if (!await ok(repoDir, ["worktree", "add", "--detach", "-q", wt, baseSha]))
@@ -26449,7 +27467,7 @@ async function replayCurrent(repoDir, source, cmd) {
   const current = await out(repoDir, ["rev-parse", "--abbrev-ref", "HEAD"]);
   if (!current || current === "HEAD")
     return { status: "error", code: 409, error: "HEAD detached \u2014 checkout sebuah branch dulu" };
-  const wt = join8(repoDir, ".worktrees", `merge-${sanitize(current)}`);
+  const wt = join11(repoDir, ".worktrees", `merge-${sanitize(current)}`);
   await reclaim(repoDir, wt);
   const baseSha = await out(repoDir, ["rev-parse", "--verify", "--end-of-options", `refs/heads/${current}^{commit}`]);
   if (!await ok(repoDir, ["worktree", "add", "--detach", "-q", wt, baseSha]))
@@ -26497,16 +27515,16 @@ init_db();
 import { execFile as execFile5 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
 import { mkdtemp, copyFile, rm as rm2 } from "node:fs/promises";
-import { tmpdir as tmpdir2 } from "node:os";
-import { join as join9, resolve as resolve11 } from "node:path";
+import { tmpdir as tmpdir3 } from "node:os";
+import { join as join12, resolve as resolve11 } from "node:path";
 var exec4 = promisify4(execFile5);
 var GIT3 = { maxBuffer: 1 << 24 };
 var MAX = 256 * 1024;
-var worktreeDir = (repoDir, specId) => join9(repoDir, ".worktrees", specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_"));
+var worktreeDir = (repoDir, specId) => join12(repoDir, ".worktrees", specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_"));
 async function withTempIndex(wt, fn) {
   const idx = (await exec4("git", ["rev-parse", "--git-path", "index"], { cwd: wt, ...GIT3 })).stdout.trim();
-  const dir2 = await mkdtemp(join9(tmpdir2(), "hanoman-idx-"));
-  const tmp = join9(dir2, "index");
+  const dir2 = await mkdtemp(join12(tmpdir3(), "hanoman-idx-"));
+  const tmp = join12(dir2, "index");
   await copyFile(resolve11(wt, idx), tmp);
   const env = { ...process.env, GIT_INDEX_FILE: tmp };
   try {
@@ -26705,7 +27723,7 @@ function appendSourceHistory(current, entry) {
 // src/services/spec-reset.ts
 import { execFile as execFile8 } from "node:child_process";
 import { existsSync as existsSync8 } from "node:fs";
-import { join as join11 } from "node:path";
+import { join as join14 } from "node:path";
 import { promisify as promisify7 } from "node:util";
 
 // src/services/stage-artifacts.ts
@@ -26754,7 +27772,7 @@ init_db();
 import { execFile as execFile6 } from "node:child_process";
 import { readdir, rm as rm3 } from "node:fs/promises";
 import { promisify as promisify5 } from "node:util";
-import { join as join10, resolve as resolve12 } from "node:path";
+import { join as join13, resolve as resolve12 } from "node:path";
 init_notifications2();
 var TICK_MS = 6e4;
 var trashDirOf = (repoDir) => resolve12(repoDir, ".worktrees", ".trash");
@@ -26814,7 +27832,7 @@ async function sweepRepo(repoDir, projectId, deps = prodReaperDeps) {
   }
   let removed = 0;
   for (const entry of entries3) {
-    const path = join10(dir2, entry);
+    const path = join13(dir2, entry);
     const known = pending.get(path);
     const row = known ?? { path, repoDir, projectId, entry, sessionId: sessionIdOf(entry), since: Date.now() };
     pending.set(path, row);
@@ -27370,7 +28388,7 @@ async function planSpecReset(spec) {
   const repoDir = await resolveRepoDir(spec.projectId);
   if (!repoDir) return EMPTY;
   const sid = sessionIdForSpec(spec.id);
-  const wt = join11(repoDir, ".worktrees", sid);
+  const wt = join14(repoDir, ".worktrees", sid);
   const branch = `hanoman/${sid}`;
   const hasBranch = await shaResolvable(repoDir, `refs/heads/${branch}`);
   return {
@@ -27401,6 +28419,7 @@ async function applySpecReset(spec, plan) {
 
 // src/routes/specs.ts
 init_notifications2();
+init_sync_notify();
 
 // src/services/spec-complete.ts
 init_db();
@@ -27408,6 +28427,7 @@ init_notifications2();
 
 // src/services/session-result.ts
 init_db();
+init_sync_notify();
 import { randomUUID as randomUUID4 } from "node:crypto";
 var WHITELIST = [
   "projectId",
@@ -27433,6 +28453,7 @@ async function recordSessionResult(input) {
 }
 
 // src/services/spec-complete.ts
+init_sync_notify();
 async function completeSpecManually(spec, input) {
   const at = input.at ?? /* @__PURE__ */ new Date();
   const manualDone = {
@@ -27468,7 +28489,7 @@ import { extname } from "node:path";
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { spawn as spawn2 } from "node:child_process";
 import { mkdir as mkdir3, rename as rename2, unlink as unlink3, writeFile as writeFile2 } from "node:fs/promises";
-import { basename as basename3, isAbsolute as isAbsolute5, join as join12 } from "node:path";
+import { basename as basename3, isAbsolute as isAbsolute5, join as join15 } from "node:path";
 
 // ../node_modules/.pnpm/strtok3@10.3.5/node_modules/strtok3/lib/stream/Errors.js
 var defaultMessages = "End-Of-Stream";
@@ -29581,7 +30602,7 @@ function readByobReaderWithSignal(reader, buffer, signal) {
     return reader.read(buffer);
   }
   signal.throwIfAborted();
-  return new Promise((resolve21, reject2) => {
+  return new Promise((resolve22, reject2) => {
     const cleanup = () => {
       signal.removeEventListener("abort", onAbort);
     };
@@ -29601,7 +30622,7 @@ function readByobReaderWithSignal(reader, buffer, signal) {
       try {
         const result = await reader.read(buffer);
         cleanup();
-        resolve21(result);
+        resolve22(result);
       } catch (error) {
         cleanup();
         reject2(error);
@@ -31360,11 +32381,11 @@ var UploadError = class extends Error {
   }
 };
 function timeout(promise, ms, code) {
-  return new Promise((resolve21, reject2) => {
+  return new Promise((resolve22, reject2) => {
     const timer9 = setTimeout(() => reject2(new UploadError(code, "upload operation timed out")), ms);
     promise.then((value) => {
       clearTimeout(timer9);
-      resolve21(value);
+      resolve22(value);
     }, (error) => {
       clearTimeout(timer9);
       reject2(error);
@@ -31387,7 +32408,7 @@ function scannerFromEnv(path) {
     return Promise.resolve();
   }
   if (!isAbsolute5(command)) return Promise.reject(new UploadError("UPLOAD_SCAN", "scanner path must be absolute"));
-  return new Promise((resolve21, reject2) => {
+  return new Promise((resolve22, reject2) => {
     const child = spawn2(command, [path], { shell: false, stdio: "ignore" });
     const timer9 = setTimeout(() => {
       child.kill("SIGKILL");
@@ -31399,27 +32420,27 @@ function scannerFromEnv(path) {
     });
     child.once("exit", (code) => {
       clearTimeout(timer9);
-      if (code === 0) resolve21();
+      if (code === 0) resolve22();
       else reject2(new UploadError("UPLOAD_SCAN", `scanner exit ${code}`));
     });
   });
 }
-function safeFilename(input, extension2) {
+function safeFilename2(input, extension2) {
   const stem = basename3(input).replace(/\.[^.]*$/, "").replace(/[^a-zA-Z0-9._ -]/g, "_").slice(0, 180).trim();
   return `${stem || "upload"}${extension2}`;
 }
 async function commitToStorage(buffer, extension2, deps, beforePromote) {
   const storageDir = deps.storageDir ?? uploadDir();
-  const quarantineDir = join12(storageDir, ".quarantine");
+  const quarantineDir = join15(storageDir, ".quarantine");
   await mkdir3(quarantineDir, { recursive: true, mode: 448 });
   await mkdir3(storageDir, { recursive: true, mode: 448 });
-  const quarantine = join12(quarantineDir, `${randomUUID5()}.upload`);
+  const quarantine = join15(quarantineDir, `${randomUUID5()}.upload`);
   const storageKey = `${randomUUID5()}${extension2}`;
   await writeFile2(quarantine, buffer, { mode: 384, flag: "wx" });
   try {
     await timeout((deps.scanner ?? scannerFromEnv)(quarantine), UPLOAD_LIMITS.scanMs, "UPLOAD_SCAN");
     await beforePromote?.();
-    await rename2(quarantine, join12(storageDir, storageKey));
+    await rename2(quarantine, join15(storageDir, storageKey));
   } catch (error) {
     await unlink3(quarantine).catch(() => {
     });
@@ -31466,7 +32487,7 @@ async function processUpload(input, deps = {}) {
   });
   return {
     storageKey,
-    filename: safeFilename(input.clientName, type.extension),
+    filename: safeFilename2(input.clientName, type.extension),
     mimeType,
     extension: type.extension,
     size: normalized.byteLength,
@@ -31506,7 +32527,7 @@ async function processDocumentUpload(input, deps = {}) {
   const storageKey = await commitToStorage(input.buffer, extension2, deps);
   return {
     storageKey,
-    filename: safeFilename(input.clientName, extension2),
+    filename: safeFilename2(input.clientName, extension2),
     mimeType: input.clientMime,
     extension: extension2,
     size: input.buffer.byteLength
@@ -31620,10 +32641,10 @@ async function dropSpecAttachments(specId) {
 // src/services/spec-attachment-dir.ts
 init_db();
 import { mkdir as mkdir4, readdir as readdir3, readFile as readFile3, rm as rm4, writeFile as writeFile3 } from "node:fs/promises";
-import { join as join13 } from "node:path";
+import { join as join16 } from "node:path";
 init_session_id();
 init_uploads();
-var specAttachmentsDir = (repoDir, sessionId2) => join13(repoDir, ".worktrees", ".attachments", sessionId2);
+var specAttachmentsDir = (repoDir, sessionId2) => join16(repoDir, ".worktrees", ".attachments", sessionId2);
 var INDEX = "INDEX.md";
 var humanSize = (n2) => n2 >= 1024 * 1024 ? `${(n2 / 1024 / 1024).toFixed(1)} MB` : n2 >= 1024 ? `${Math.round(n2 / 1024)} KB` : `${n2} B`;
 function uniqueName(taken, filename) {
@@ -31673,19 +32694,19 @@ async function syncSpecAttachmentsDir(specId, projectId) {
   for (const a of rows) {
     let bytes;
     try {
-      bytes = await readFile3(join13(uploadDir(), a.storageKey));
+      bytes = await readFile3(join16(uploadDir(), a.storageKey));
     } catch {
       continue;
     }
     const filename = uniqueName(taken, a.filename);
-    const path = join13(dir2, filename);
+    const path = join16(dir2, filename);
     await writeFile3(path, bytes, { mode: 384 });
     items.push({ filename, mimeType: a.mimeType, size: a.size, path });
   }
-  await writeFile3(join13(dir2, INDEX), renderIndex(specId, items), { mode: 384 });
+  await writeFile3(join16(dir2, INDEX), renderIndex(specId, items), { mode: 384 });
   const keep = /* @__PURE__ */ new Set([INDEX, ...items.map((a) => a.filename)]);
   for (const name2 of await readdir3(dir2)) {
-    if (!keep.has(name2)) await rm4(join13(dir2, name2), { recursive: true, force: true }).catch(() => {
+    if (!keep.has(name2)) await rm4(join16(dir2, name2), { recursive: true, force: true }).catch(() => {
     });
   }
   return items;
@@ -34242,7 +35263,7 @@ function renderDocPdf(text, name2, meta) {
   });
   const chunks = [];
   doc.on("data", (c) => chunks.push(c));
-  const done = new Promise((resolve21) => doc.on("end", () => resolve21(Buffer.concat(chunks))));
+  const done = new Promise((resolve22) => doc.on("end", () => resolve22(Buffer.concat(chunks))));
   doc.font("Helvetica-Bold").fontSize(8).fillColor(BRASS).text(toWinAnsi(meta.eyebrow.toUpperCase()), { characterSpacing: 0.8 });
   doc.moveDown(0.25);
   doc.font("Helvetica-Bold").fontSize(17).fillColor(STRONG).text(toWinAnsi(name2.split("/").pop() ?? name2));
@@ -34317,6 +35338,7 @@ init_pty();
 init_session_phases();
 init_stage_machine();
 init_notifications2();
+init_sync_notify();
 
 // src/services/spec-head.ts
 init_db();
@@ -34337,11 +35359,12 @@ async function recordHeadSha(specId, worktree, read2 = readHead) {
 }
 
 // src/services/live-specs.ts
+var specNum = (id) => Number.parseInt(id.match(/\d+/)?.[0] ?? "0", 10);
 async function liveSpecs(filter = {}) {
-  const specs = await prisma.spec.findMany({
+  const specs = (await prisma.spec.findMany({
     where: { projectId: filter.project, source: filter.source },
     orderBy: { id: "desc" }
-  });
+  })).sort((a, b) => specNum(b.id) - specNum(a.id));
   const live = sessionPhasesBySpec();
   if (live.size === 0) return decorateBlocked(specs);
   const advanced = [];
@@ -35226,7 +36249,7 @@ async function deleteBranches(repoDir, names, opts) {
 import { execFile as execFile11 } from "node:child_process";
 import { realpathSync as realpathSync4 } from "node:fs";
 import { stat } from "node:fs/promises";
-import { basename as basename4, join as join14, resolve as resolve15, sep as sep4 } from "node:path";
+import { basename as basename4, join as join17, resolve as resolve15, sep as sep4 } from "node:path";
 import { promisify as promisify10 } from "node:util";
 var exec10 = promisify10(execFile11);
 var GIT7 = { timeout: 6e4, maxBuffer: 1 << 24, encoding: "utf8" };
@@ -35271,7 +36294,7 @@ var real = (p3) => {
 };
 async function bornAt(path) {
   try {
-    const st = await stat(join14(path, ".git"));
+    const st = await stat(join17(path, ".git"));
     const ms = st.birthtimeMs > 0 ? st.birthtimeMs : st.mtimeMs;
     return new Date(ms).toISOString();
   } catch {
@@ -35436,7 +36459,7 @@ init_session_id();
 // src/services/repo-fs.ts
 import { lstat as lstat2, rename as rename3, rm as rm5 } from "node:fs/promises";
 import { createWriteStream } from "node:fs";
-import { join as join15 } from "node:path";
+import { join as join18 } from "node:path";
 import { randomUUID as randomUUID6 } from "node:crypto";
 import { pipeline } from "node:stream/promises";
 var EntryExistsError = class extends Error {
@@ -35497,7 +36520,7 @@ async function saveUpload(repoDir, rel, source, opts = {}) {
   if (current && !opts.overwrite) return { status: "exists" };
   if (current && !current.isFile())
     throw new PathContainmentError("repository path ditolak: target bukan file regular");
-  const temp = join15(entry.parent, `.hanoman-${randomUUID6()}.tmp`);
+  const temp = join18(entry.parent, `.hanoman-${randomUUID6()}.tmp`);
   try {
     await pipeline(source, createWriteStream(temp, { flags: "wx", mode: 384 }));
     if (opts.isTruncated?.()) {
@@ -35515,13 +36538,13 @@ async function saveUpload(repoDir, rel, source, opts = {}) {
 // src/routes/ide.ts
 var activeSessions = (id) => listSessions().filter((s2) => s2.projectId === id && !s2.exited).length;
 async function lockInputs(id) {
-  const open4 = await prisma.spec.findMany({
+  const open5 = await prisma.spec.findMany({
     where: { projectId: id, stage: { not: "done" } },
     select: { id: true }
   });
   const sessions = listSessions().filter((s2) => s2.projectId === id && !s2.exited).map((s2) => s2.branch || (s2.specId ? `hanoman/${s2.id}` : "")).filter(Boolean);
   return {
-    openSpecBranches: new Set(open4.map((s2) => sourceBranch(s2.id))),
+    openSpecBranches: new Set(open5.map((s2) => sourceBranch(s2.id))),
     sessionBranches: new Set(sessions)
   };
 }
@@ -36013,14 +37036,14 @@ async function finishGraphOp(reply, id, repoDir, r, verb) {
 // src/routes/fs.ts
 import { readdir as readdir4 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
-import { resolve as resolve17, dirname as dirname9, join as join16 } from "node:path";
+import { resolve as resolve17, dirname as dirname9, join as join19 } from "node:path";
 async function fs_default(app2) {
   app2.get("/fs/browse", async (req, reply) => {
     const q = req.query.path;
     const dir2 = q && q.trim() ? resolve17(q.trim()) : homedir4();
     try {
       const ents = await readdir4(dir2, { withFileTypes: true });
-      const entries3 = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join16(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
+      const entries3 = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join19(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
       const parent = dirname9(dir2);
       return { path: dir2, parent: parent === dir2 ? null : parent, entries: entries3 };
     } catch {
@@ -36502,14 +37525,14 @@ function installCommand(m, agent, shell = shellBin()) {
 }
 
 // src/services/terminal-diag.ts
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync9, statSync as statSync3, rmSync as rmSync4 } from "node:fs";
-import { join as join17 } from "node:path";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync9, statSync as statSync3, rmSync as rmSync5 } from "node:fs";
+import { join as join20 } from "node:path";
 var DIAG_MAX_BYTES = 2 * 1024 * 1024;
 var KINDS = /* @__PURE__ */ new Set(["key", "comp", "data", "ack", "pred"]);
 var ID = /^[A-Za-z0-9_-]{1,64}$/;
 function diagFile(home3, sessionId2) {
   if (!ID.test(sessionId2)) throw new Error(`id sesi tak sah untuk diag: ${sessionId2}`);
-  return join17(home3, "diag", `${sessionId2}.jsonl`);
+  return join20(home3, "diag", `${sessionId2}.jsonl`);
 }
 function usable(ev) {
   if (!ev || typeof ev !== "object") return false;
@@ -36520,9 +37543,9 @@ function appendDiag(home3, sessionId2, events) {
   const file = diagFile(home3, sessionId2);
   const rows = events.filter(usable);
   if (!rows.length) return;
-  mkdirSync9(join17(home3, "diag"), { recursive: true });
+  mkdirSync9(join20(home3, "diag"), { recursive: true });
   try {
-    if (statSync3(file).size > DIAG_MAX_BYTES) rmSync4(file);
+    if (statSync3(file).size > DIAG_MAX_BYTES) rmSync5(file);
   } catch {
   }
   appendFileSync2(file, rows.map((r) => JSON.stringify(r)).join("\n") + "\n");
@@ -37077,9 +38100,9 @@ init_pty();
 init_session_sandbox();
 import { execFile as execFile13 } from "node:child_process";
 import { randomUUID as randomUUID7 } from "node:crypto";
-import { mkdirSync as mkdirSync10, rmSync as rmSync5, writeFileSync as writeFileSync5 } from "node:fs";
-import { tmpdir as tmpdir3 } from "node:os";
-import { join as join18 } from "node:path";
+import { mkdirSync as mkdirSync10, rmSync as rmSync6, writeFileSync as writeFileSync7 } from "node:fs";
+import { tmpdir as tmpdir4 } from "node:os";
+import { join as join21 } from "node:path";
 var binFor = (agent) => agent === "codex" ? effectiveStr("HANOMAN_CODEX_BIN") ?? "codex" : effectiveStr("HANOMAN_CLAUDE_BIN") ?? "claude";
 function leadArgv(o) {
   if (o.agent === "codex") {
@@ -37100,22 +38123,22 @@ function leadArgv(o) {
   ];
 }
 var leadEnv = (agent, base2 = process.env, uid = process.getuid?.()) => agent === "claude" ? { ...rootBypassEnv(uid), ...base2 } : { ...base2 };
-var shellQuote = (value) => `'${value.replace(/'/g, `'"'"'`)}'`;
+var shellQuote3 = (value) => `'${value.replace(/'/g, `'"'"'`)}'`;
 function leadProcess(prompt, o, env = process.env) {
   const file = binFor(o.agent);
   const directArgs = leadArgv({ agent: o.agent, model: o.model, effort: o.effort, prompt });
   const mode = env.HANOMAN_SESSION_SANDBOX ?? (resolveHardening(env) ? "required" : "off");
   if (mode === "off") return { file, args: directArgs, cwd: o.cwd, cleanup: () => {
   } };
-  const promptDir = join18(tmpdir3(), "hanoman-prompts");
+  const promptDir = join21(tmpdir4(), "hanoman-prompts");
   mkdirSync10(promptDir, { recursive: true, mode: 448 });
-  const promptFile = join18(promptDir, `oneshot-${randomUUID7()}`);
-  writeFileSync5(promptFile, prompt, { flag: "wx", mode: 384 });
-  const workspace = o.cwd ?? join18(tmpdir3(), `hanoman-oneshot-${randomUUID7()}`);
+  const promptFile = join21(promptDir, `oneshot-${randomUUID7()}`);
+  writeFileSync7(promptFile, prompt, { flag: "wx", mode: 384 });
+  const workspace = o.cwd ?? join21(tmpdir4(), `hanoman-oneshot-${randomUUID7()}`);
   if (!o.cwd) mkdirSync10(workspace, { recursive: false, mode: 448 });
   try {
     const argsWithoutPrompt = directArgs.slice(0, -1);
-    const command = [file, ...argsWithoutPrompt].map(shellQuote).join(" ") + ` "$(cat ${shellQuote(promptFile)})"`;
+    const command = [file, ...argsWithoutPrompt].map(shellQuote3).join(" ") + ` "$(cat ${shellQuote3(promptFile)})"`;
     const sandbox = sandboxArgvFromEnv({
       command,
       worktree: workspace,
@@ -37129,13 +38152,13 @@ function leadProcess(prompt, o, env = process.env) {
       args: sandbox.slice(1),
       promptFile,
       cleanup: () => {
-        rmSync5(promptFile, { force: true });
-        if (!o.cwd) rmSync5(workspace, { recursive: true, force: true });
+        rmSync6(promptFile, { force: true });
+        if (!o.cwd) rmSync6(workspace, { recursive: true, force: true });
       }
     };
   } catch (error) {
-    rmSync5(promptFile, { force: true });
-    if (!o.cwd) rmSync5(workspace, { recursive: true, force: true });
+    rmSync6(promptFile, { force: true });
+    if (!o.cwd) rmSync6(workspace, { recursive: true, force: true });
     throw error;
   }
 }
@@ -37153,7 +38176,7 @@ function leadFailureReason(agent, timeoutMs, err, stdout, stderr) {
 }
 function think(prompt, o) {
   const process2 = leadProcess(prompt, o);
-  return new Promise((resolve21, reject2) => {
+  return new Promise((resolve22, reject2) => {
     const child = execFile13(process2.file, process2.args, {
       cwd: process2.cwd,
       timeout: o.timeoutMs,
@@ -37167,7 +38190,7 @@ function think(prompt, o) {
         reject2(new Error(leadFailureReason(o.agent, o.timeoutMs, err, stdout, stderr)));
         return;
       }
-      resolve21(stdout);
+      resolve22(stdout);
     });
     child.stdin?.end();
   });
@@ -37204,9 +38227,9 @@ function acquire(cap, waitMs) {
     return Promise.resolve();
   }
   const startedAt = Date.now();
-  return new Promise((resolve21, reject2) => {
+  return new Promise((resolve22, reject2) => {
     const w = {
-      grant: resolve21,
+      grant: resolve22,
       deny: reject2,
       timer: setTimeout(() => {
         const i = queue.indexOf(w);
@@ -38602,9 +39625,9 @@ import { readFileSync as readFileSync10 } from "node:fs";
 // src/services/vps-ssh.ts
 init_config2();
 import { spawn as spawn4 } from "node:child_process";
-import { mkdtempSync, rmSync as rmSync6, writeFileSync as writeFileSync6 } from "node:fs";
-import { tmpdir as tmpdir4 } from "node:os";
-import { dirname as dirname10, join as join19 } from "node:path";
+import { mkdtempSync, rmSync as rmSync7, writeFileSync as writeFileSync8 } from "node:fs";
+import { tmpdir as tmpdir5 } from "node:os";
+import { dirname as dirname10, join as join22 } from "node:path";
 var sshBin = () => effectiveStr("HANOMAN_SSH_BIN") ?? "ssh";
 function consoleArgv(t) {
   return [
@@ -38619,9 +39642,9 @@ function consoleArgv(t) {
   ];
 }
 function askpassScript() {
-  const dir2 = mkdtempSync(join19(tmpdir4(), "hanoman-askpass-"));
-  const path = join19(dir2, "askpass.sh");
-  writeFileSync6(path, `#!/bin/sh
+  const dir2 = mkdtempSync(join22(tmpdir5(), "hanoman-askpass-"));
+  const path = join22(dir2, "askpass.sh");
+  writeFileSync8(path, `#!/bin/sh
 printf '%s' "$HANOMAN_SSH_PASSWORD"
 `, { mode: 448 });
   return path;
@@ -38654,14 +39677,14 @@ function sshExec(t, remoteCmd, opts = {}) {
     SSH_ASKPASS_REQUIRE: "force",
     HANOMAN_SSH_PASSWORD: opts.password
   } : process.env;
-  return new Promise((resolve21) => {
+  return new Promise((resolve22) => {
     const p3 = spawn4(sshBin(), args, { stdio: ["pipe", "pipe", "pipe"], env });
     let out4 = "";
     const timer9 = setTimeout(() => p3.kill("SIGKILL"), opts.timeoutMs ?? 6e4);
     const done = (r) => {
       clearTimeout(timer9);
-      if (askpass) rmSync6(dirname10(askpass), { recursive: true, force: true });
-      resolve21(r);
+      if (askpass) rmSync7(dirname10(askpass), { recursive: true, force: true });
+      resolve22(r);
     };
     p3.stdout.on("data", (d) => {
       out4 += d;
@@ -38681,16 +39704,16 @@ function sshExec(t, remoteCmd, opts = {}) {
 // src/services/vps-audit.ts
 init_db();
 import { existsSync as existsSync14, readFileSync as readFileSync9 } from "node:fs";
-import { join as join21 } from "node:path";
+import { join as join24 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/runner/deps.ts
 import { existsSync as existsSync13 } from "node:fs";
-import { dirname as dirname11, join as join20 } from "node:path";
+import { dirname as dirname11, join as join23 } from "node:path";
 function repoRootFrom(startDir) {
   let dir2 = startDir;
   for (let i = 0; i < 8; i++) {
-    if (existsSync13(join20(dir2, "pnpm-workspace.yaml"))) return dir2;
+    if (existsSync13(join23(dir2, "pnpm-workspace.yaml"))) return dir2;
     const parent = dirname11(dir2);
     if (parent === dir2) break;
     dir2 = parent;
@@ -38699,6 +39722,9 @@ function repoRootFrom(startDir) {
 }
 var repoRoot = (startDir = process.cwd()) => repoRootFrom(startDir);
 
+// src/services/vps-audit.ts
+init_sync_notify();
+
 // src/vps/scoring.ts
 var pct = (fulfilled, applicable) => applicable === 0 ? 100 : Math.round(fulfilled / applicable * 100);
 function scoreCompliance(probeStatus, states, items = CATALOG) {
@@ -38800,7 +39826,7 @@ var packagedScript = (f) => fileURLToPath3(new URL(`../scripts/vps/${f}`, import
 var moduleDir = () => fileURLToPath3(new URL(".", import.meta.url));
 var scriptPath = (f) => {
   const packed = packagedScript(f);
-  return existsSync14(packed) ? packed : join21(repoRoot(moduleDir()), "server", "scripts", "vps", f);
+  return existsSync14(packed) ? packed : join24(repoRoot(moduleDir()), "server", "scripts", "vps", f);
 };
 async function itemStatesOf(vpsId) {
   const rows = await prisma.vpsItemState.findMany({ where: { vpsId } });
@@ -39008,27 +40034,27 @@ async function buildChecklist(vpsId) {
 init_src2();
 init_config2();
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { chmodSync as chmodSync4, copyFileSync, existsSync as existsSync15, mkdirSync as mkdirSync11, readFileSync as readFileSync12, unlinkSync as unlinkSync2 } from "node:fs";
+import { chmodSync as chmodSync7, copyFileSync, existsSync as existsSync15, mkdirSync as mkdirSync11, readFileSync as readFileSync12, unlinkSync as unlinkSync2 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { join as join22 } from "node:path";
+import { join as join25 } from "node:path";
 var keyDir = () => effectiveStr("HANOMAN_SSH_KEY_DIR") ?? resolveDataDirs().sshKeys;
 var KEY_FILES = ["id_ed25519", "id_ed25519.pub"];
 function adoptLegacyKey(dir2) {
   if (effectiveStr("HANOMAN_SSH_KEY_DIR")) return;
-  const legacy = join22(homedir5(), ".hanoman");
+  const legacy = join25(homedir5(), ".hanoman");
   if (legacy === dir2) return;
-  if (!KEY_FILES.every((f) => existsSync15(join22(legacy, f)))) return;
+  if (!KEY_FILES.every((f) => existsSync15(join25(legacy, f)))) return;
   mkdirSync11(dir2, { recursive: true, mode: 448 });
   for (const f of KEY_FILES) {
-    copyFileSync(join22(legacy, f), join22(dir2, f));
-    chmodSync4(join22(dir2, f), 384);
+    copyFileSync(join25(legacy, f), join25(dir2, f));
+    chmodSync7(join25(dir2, f), 384);
   }
-  for (const f of KEY_FILES) unlinkSync2(join22(legacy, f));
+  for (const f of KEY_FILES) unlinkSync2(join25(legacy, f));
   console.log(`vps: key SSH dipindah dari ${legacy} ke ${dir2} (SPEC-846 \u2014 satu batas backup)`);
 }
 function ensureHanomanKey() {
   const dir2 = keyDir();
-  const privPath = join22(dir2, KEY_FILES[0]);
+  const privPath = join25(dir2, KEY_FILES[0]);
   const pubPath = `${privPath}.pub`;
   if (!existsSync15(privPath)) adoptLegacyKey(dir2);
   if (!existsSync15(privPath)) {
@@ -39057,6 +40083,7 @@ async function bootstrapKey(t, password) {
 // src/routes/vps.ts
 init_pty();
 init_settings3();
+init_sync_notify();
 function keyMissing(v) {
   return !!v.keyPath && !existsSync16(v.keyPath);
 }
@@ -39340,7 +40367,7 @@ init_config2();
 import { execFileSync as execFileSync4 } from "node:child_process";
 import { readFileSync as readFileSync14 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { join as join23 } from "node:path";
+import { join as join26 } from "node:path";
 var USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
 var TTL_MS2 = 3e4;
 var lastOk = null;
@@ -39353,7 +40380,7 @@ var LABELS = {
 var humanize = (k) => k.replace(/_/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
 var nowIso = () => (/* @__PURE__ */ new Date()).toISOString();
 function credsFile() {
-  return join23(effectiveStr("CLAUDE_CONFIG_DIR") ?? join23(homedir7(), ".claude"), ".credentials.json");
+  return join26(effectiveStr("CLAUDE_CONFIG_DIR") ?? join26(homedir7(), ".claude"), ".credentials.json");
 }
 function readAccessToken() {
   if (process.platform === "darwin" && !effectiveStr("CLAUDE_CONFIG_DIR")) {
@@ -39427,14 +40454,14 @@ async function getLimits() {
 // src/services/codex-limits.ts
 import { open as open3, readdir as readdir5, stat as stat2 } from "node:fs/promises";
 import { homedir as homedir8 } from "node:os";
-import { join as join24 } from "node:path";
+import { join as join27 } from "node:path";
 var TTL_MS3 = 3e4;
 var STALE_AFTER_MS = 12 * 36e5;
 var TAIL_BYTES = 512 * 1024;
 var MAX_FILES = 8;
 var cache2 = null;
 var freshUntil2 = 0;
-var codexSessionsDir = () => join24(process.env.CODEX_HOME ?? join24(homedir8(), ".codex"), "sessions");
+var codexSessionsDir = () => join27(process.env.CODEX_HOME ?? join27(homedir8(), ".codex"), "sessions");
 var UNAVAILABLE = { status: "unavailable", windows: [], fetchedAt: null, plan: null };
 function windowLabel(minutes) {
   if (minutes === 300) return "Sesi 5 jam";
@@ -39467,7 +40494,7 @@ async function recentRollouts(dir2) {
     return [];
   }
   const stamped = await Promise.all(entries3.map(async (rel) => {
-    const full = join24(dir2, rel);
+    const full = join27(dir2, rel);
     try {
       return { full, mtime: (await stat2(full)).mtimeMs };
     } catch {
@@ -39544,41 +40571,8 @@ async function limits(app2) {
   app2.get("/limits/codex", async () => getCodexLimits());
 }
 
-// src/services/codex-version.ts
-init_src();
-init_config2();
-import { execFile as execFile14 } from "node:child_process";
-import { promisify as promisify13 } from "node:util";
-var run3 = promisify13(execFile14);
-var CODEX_MIN_CLIENT = "0.144.0";
-var TTL_MS4 = 5 * 6e4;
-var cache3 = null;
-var codexBin2 = () => effectiveStr("HANOMAN_CODEX_BIN") ?? "codex";
-function parseCodexVersion(out4) {
-  const m = /(\d+)\.(\d+)\.(\d+)/.exec(out4);
-  return m ? `${m[1]}.${m[2]}.${m[3]}` : null;
-}
-async function getCodexVersion(now = Date.now()) {
-  if (cache3 && now - cache3.at < TTL_MS4) return cache3.version;
-  let version = null;
-  try {
-    const { stdout } = await run3(codexBin2(), ["--version"], { timeout: 5e3 });
-    version = parseCodexVersion(stdout);
-  } catch {
-  }
-  cache3 = { at: now, version };
-  return version;
-}
-async function codexVersionInfo() {
-  const version = await getCodexVersion();
-  return {
-    version,
-    minRequired: CODEX_MIN_CLIENT,
-    ok: version === null || cmpVersion(version, CODEX_MIN_CLIENT) >= 0
-  };
-}
-
 // src/routes/codex.ts
+init_codex_version();
 async function codex(app2) {
   app2.get("/codex/version", async () => codexVersionInfo());
 }
@@ -41179,7 +42173,7 @@ init_config2();
 init_src2();
 import { randomUUID as randomUUID8 } from "node:crypto";
 import { mkdir as mkdir5, writeFile as writeFile4, readFile as readFile4, unlink as unlink4, readdir as readdir6, stat as stat3 } from "node:fs/promises";
-import { join as join25, resolve as resolve19, basename as basename6 } from "node:path";
+import { join as join28, resolve as resolve19, basename as basename6 } from "node:path";
 var MAX_TRANSCRIPT_BYTES = 1024 * 1024;
 function transcriptDir() {
   return resolve19(effectiveStr("HANOMAN_TRANSCRIPT_DIR")?.trim() || resolveDataDirs().transcripts);
@@ -41200,13 +42194,13 @@ async function saveTranscript(text) {
   const dir2 = transcriptDir();
   await mkdir5(dir2, { recursive: true, mode: 448 });
   const key = `${randomUUID8()}.log`;
-  await writeFile4(join25(dir2, key), body, { encoding: "utf8", mode: 384 });
+  await writeFile4(join28(dir2, key), body, { encoding: "utf8", mode: 384 });
   return { key, bytes: Buffer.byteLength(body, "utf8"), truncated };
 }
 async function readTranscript(key) {
   if (!key) return null;
   try {
-    return await readFile4(join25(transcriptDir(), basename6(key)), "utf8");
+    return await readFile4(join28(transcriptDir(), basename6(key)), "utf8");
   } catch {
     return null;
   }
@@ -41214,7 +42208,7 @@ async function readTranscript(key) {
 async function deleteTranscript(key) {
   if (!key) return;
   try {
-    await unlink4(join25(transcriptDir(), basename6(key)));
+    await unlink4(join28(transcriptDir(), basename6(key)));
   } catch (e) {
     if (e.code !== "ENOENT") throw e;
   }
@@ -41232,7 +42226,7 @@ async function listTranscripts() {
   for (const name2 of names) {
     if (!name2.endsWith(".log")) continue;
     try {
-      rows.push({ key: name2, mtimeMs: (await stat3(join25(dir2, name2))).mtimeMs });
+      rows.push({ key: name2, mtimeMs: (await stat3(join28(dir2, name2))).mtimeMs });
     } catch {
     }
   }
@@ -41286,11 +42280,11 @@ async function beginSession(b) {
   });
 }
 async function finishSession(d) {
-  const open4 = await prisma.sessionHistory.findFirst({
+  const open5 = await prisma.sessionHistory.findFirst({
     where: { sessionId: d.sessionId, endedAt: null },
     orderBy: { startedAt: "desc" }
   });
-  if (!open4) return;
+  if (!open5) return;
   let t = { key: "", bytes: 0 };
   if (d.transcript) {
     try {
@@ -41300,7 +42294,7 @@ async function finishSession(d) {
     }
   }
   await prisma.sessionHistory.update({
-    where: { id: open4.id },
+    where: { id: open5.id },
     data: {
       endedAt: /* @__PURE__ */ new Date(),
       endedReason: CLOSED,
@@ -41415,14 +42409,14 @@ async function reconcileTranscripts(opts = {}) {
   return report;
 }
 async function reconcileHistory(liveSessionIds) {
-  const open4 = await prisma.sessionHistory.findMany({
+  const open5 = await prisma.sessionHistory.findMany({
     where: { endedAt: null },
     select: { id: true, sessionId: true, updatedAt: true }
   });
   const live = new Set(liveSessionIds);
   const at = /* @__PURE__ */ new Date();
   let closed = 0;
-  for (const r of open4) {
+  for (const r of open5) {
     if (live.has(r.sessionId)) continue;
     await prisma.sessionHistory.update({
       where: { id: r.id },
@@ -41473,7 +42467,285 @@ async function session_history_default(app2) {
 init_src();
 init_session_event_token();
 init_pty();
+
+// src/services/agent-invocations.ts
+init_src();
+init_db();
+import { createHash as createHash8, randomUUID as randomUUID10 } from "node:crypto";
+import { execFileSync as execFileSync5 } from "node:child_process";
+import { homedir as homedir9 } from "node:os";
+import { readFileSync as readFileSync16, realpathSync as realpathSync5, statSync as statSync4 } from "node:fs";
+import { isAbsolute as isAbsolute7, relative as relative3, resolve as resolve20 } from "node:path";
+var MAX_EXCERPT_BYTES = 4096;
+var MAX_TRANSCRIPT_BYTES2 = 10 * 1024 * 1024;
+var ANSI2 = /[\u001b\u009b](?:\][^\u0007]*(?:\u0007|\u001b\\)|\[[0-?]*[ -/]*[@-~]|[@-_])/g;
+var snapshotHashes = /* @__PURE__ */ new Map();
+var keyOf = (x) => `${x.sessionId}\0${x.runtimeInvocationId}`;
+var hash2 = (value) => createHash8("sha256").update(value).digest("hex");
+var defaultGitStatus = (cwd) => {
+  try {
+    return execFileSync5("git", ["-C", cwd, "status", "--porcelain=v1", "-z"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+  } catch {
+    return null;
+  }
+};
+function snapshot2(cwd, run4 = defaultGitStatus) {
+  try {
+    const value = run4(cwd);
+    return value === null ? null : hash2(value);
+  } catch {
+    return null;
+  }
+}
+var stripAnsi = (value) => value.replace(ANSI2, "");
+var utf8Prefix = (value, maxBytes) => {
+  let out4 = "", bytes = 0;
+  for (const char of value) {
+    const next = Buffer.byteLength(char, "utf8");
+    if (bytes + next > maxBytes) break;
+    out4 += char;
+    bytes += next;
+  }
+  return out4;
+};
+var transcriptRoots = () => [
+  resolve20(process.env.CLAUDE_CONFIG_DIR ?? `${homedir9()}/.claude`),
+  resolve20(process.env.CODEX_HOME ?? `${homedir9()}/.codex`)
+];
+var inside = (path, root) => {
+  const rel = relative3(root, path);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute7(rel);
+};
+var EMPTY_USAGE = { inputTokens: null, outputTokens: null, cachedTokens: null };
+var nonnegativeInt = (value) => Number.isSafeInteger(value) && Number(value) >= 0 ? Number(value) : null;
+function usageFromText(text) {
+  const found = [];
+  const inspect = (value) => {
+    if (!value || typeof value !== "object") return;
+    const record2 = value;
+    const usage2 = record2.usage;
+    if (usage2 && typeof usage2 === "object") {
+      const u = usage2;
+      found.push([
+        nonnegativeInt(u.input_tokens ?? u.inputTokens) ?? -1,
+        nonnegativeInt(u.output_tokens ?? u.outputTokens) ?? -1,
+        nonnegativeInt(u.cached_tokens ?? u.cachedTokens ?? u.cache_read_input_tokens ?? u.cacheReadInputTokens) ?? -1
+      ]);
+    }
+  };
+  for (const line of text.split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      inspect(JSON.parse(line));
+    } catch {
+    }
+  }
+  if (found.length === 0) return EMPTY_USAGE;
+  const max = (index) => {
+    const values = found.map((entry) => entry[index]).filter((n2) => n2 >= 0);
+    return values.length ? Math.max(...values) : null;
+  };
+  return { inputTokens: max(0), outputTokens: max(1), cachedTokens: max(2) };
+}
+function transcriptUsage(path, roots = transcriptRoots()) {
+  if (!path) return EMPTY_USAGE;
+  try {
+    const real2 = realpathSync5(path);
+    const safeRoots = roots.map((root) => realpathSync5(root));
+    if (!safeRoots.some((root) => inside(real2, root))) return EMPTY_USAGE;
+    const info = statSync4(real2);
+    if (!info.isFile() || info.size > MAX_TRANSCRIPT_BYTES2) return EMPTY_USAGE;
+    return usageFromText(readFileSync16(real2, "utf8"));
+  } catch {
+    return EMPTY_USAGE;
+  }
+}
+async function startAgentInvocation(input, io = {}) {
+  const startedAt = input.startedAt ?? /* @__PURE__ */ new Date();
+  const existing = await prisma.agentInvocation.findUnique({
+    where: { sessionId_runtimeInvocationId: {
+      sessionId: input.sessionId,
+      runtimeInvocationId: input.runtimeInvocationId
+    } }
+  });
+  const row = await prisma.agentInvocation.upsert({
+    where: { sessionId_runtimeInvocationId: {
+      sessionId: input.sessionId,
+      runtimeInvocationId: input.runtimeInvocationId
+    } },
+    update: {},
+    create: {
+      id: randomUUID10(),
+      sessionId: input.sessionId,
+      projectId: input.projectId,
+      specId: input.specId ?? null,
+      runtime: input.runtime,
+      runtimeInvocationId: input.runtimeInvocationId,
+      customAgentId: input.customAgentId ?? null,
+      agentName: input.agentName,
+      model: input.model ?? null,
+      status: "running",
+      startedAt
+    }
+  });
+  const before2 = snapshot2(input.cwd, io.gitStatus);
+  if (before2 !== null) snapshotHashes.set(keyOf(input), before2);
+  return { row, duplicate: existing !== null };
+}
+async function stopAgentInvocation(input, io = {}) {
+  const unique = { sessionId_runtimeInvocationId: {
+    sessionId: input.sessionId,
+    runtimeInvocationId: input.runtimeInvocationId
+  } };
+  const existing = await prisma.agentInvocation.findUnique({ where: unique });
+  if (existing?.endedAt) return { row: existing, duplicate: true };
+  const endedAt = input.endedAt ?? /* @__PURE__ */ new Date();
+  const startedAt = existing?.startedAt ?? endedAt;
+  const cleanResult = input.result === void 0 ? null : stripAnsi(input.result);
+  const usage2 = transcriptUsage(input.transcriptPath, io.transcriptRoots);
+  const before2 = snapshotHashes.get(keyOf(input));
+  const after = snapshot2(input.cwd, io.gitStatus);
+  snapshotHashes.delete(keyOf(input));
+  const evidence = {
+    // Stop tanpa start lazim setelah restart server di tengah invocation. Waktu start dan status
+    // runtime sudah hilang; simpan baris sintetis yang dapat diaudit tanpa mengarang durasi 0 ms.
+    status: existing ? input.status ?? "completed" : "completed",
+    endedAt,
+    durationMs: existing ? Math.max(0, endedAt.getTime() - startedAt.getTime()) : null,
+    ...usage2,
+    resultExcerpt: cleanResult === null ? null : utf8Prefix(cleanResult, MAX_EXCERPT_BYTES),
+    resultHash: cleanResult === null ? null : hash2(cleanResult),
+    workspaceChanged: before2 !== void 0 && after !== null && before2 !== after
+  };
+  if (existing) {
+    const row2 = await prisma.agentInvocation.update({ where: { id: existing.id }, data: evidence });
+    return { row: row2, duplicate: false };
+  }
+  const row = await prisma.agentInvocation.create({
+    data: {
+      id: randomUUID10(),
+      sessionId: input.sessionId,
+      projectId: input.projectId,
+      specId: input.specId ?? null,
+      runtime: input.runtime,
+      runtimeInvocationId: input.runtimeInvocationId,
+      customAgentId: input.customAgentId ?? null,
+      agentName: input.agentName,
+      model: input.model ?? null,
+      startedAt,
+      ...evidence
+    }
+  });
+  return { row, duplicate: false };
+}
+async function reconcileAgentInvocations(liveSessionIds) {
+  const live = new Set(liveSessionIds);
+  const open5 = await prisma.agentInvocation.findMany({ where: { status: "running" } });
+  let changed = 0;
+  const endedAt = /* @__PURE__ */ new Date();
+  for (const row of open5) {
+    if (live.has(row.sessionId)) continue;
+    await prisma.agentInvocation.update({
+      where: { id: row.id },
+      data: {
+        status: "abandoned",
+        endedAt,
+        durationMs: Math.max(0, endedAt.getTime() - row.startedAt.getTime())
+      }
+    });
+    changed++;
+  }
+  return changed;
+}
+var agentInvocationView = (row) => ({
+  id: row.id,
+  sessionId: row.sessionId,
+  projectId: row.projectId,
+  specId: row.specId,
+  runtime: row.runtime === "codex" ? "codex" : "claude",
+  customAgentId: row.customAgentId,
+  agentName: row.agentName,
+  model: row.model,
+  status: row.status,
+  startedAt: row.startedAt.toISOString(),
+  endedAt: row.endedAt?.toISOString() ?? null,
+  durationMs: row.durationMs,
+  inputTokens: row.inputTokens,
+  outputTokens: row.outputTokens,
+  cachedTokens: row.cachedTokens,
+  resultExcerpt: row.resultExcerpt,
+  resultHash: row.resultHash,
+  workspaceChanged: row.workspaceChanged,
+  disposition: AGENT_DISPOSITIONS.includes(row.disposition) ? row.disposition : "pending",
+  dispositionNote: row.dispositionNote,
+  evaluatedAt: row.evaluatedAt?.toISOString() ?? null
+});
+var median = (values) => {
+  if (values.length === 0) return null;
+  values.sort((a, b) => a - b);
+  const middle = Math.floor(values.length / 2);
+  return values.length % 2 === 1 ? values[middle] : (values[middle - 1] + values[middle]) / 2;
+};
+var availableSum = (values) => {
+  const known = values.filter((value) => value !== null);
+  return known.length ? known.reduce((sum, value) => sum + value, 0) : null;
+};
+async function agentMetrics(query2) {
+  const where = {
+    ...query2.projectId ? { projectId: query2.projectId } : {},
+    ...query2.from || query2.to ? { startedAt: {
+      ...query2.from ? { gte: query2.from } : {},
+      ...query2.to ? { lte: query2.to } : {}
+    } } : {}
+  };
+  const rows = await prisma.agentInvocation.findMany({ where, orderBy: { startedAt: "desc" } });
+  const groups = /* @__PURE__ */ new Map();
+  for (const row of rows) groups.set(row.agentName, [...groups.get(row.agentName) ?? [], row]);
+  const agents = [...groups.entries()].map(([agentName, invocations]) => {
+    const dispositions = { pending: 0, accepted: 0, partial: 0, rejected: 0, falsePositive: 0 };
+    for (const row of invocations) {
+      if (row.disposition === "accepted") dispositions.accepted++;
+      else if (row.disposition === "partial") dispositions.partial++;
+      else if (row.disposition === "rejected") dispositions.rejected++;
+      else if (row.disposition === "false-positive") dispositions.falsePositive++;
+      else dispositions.pending++;
+    }
+    const evaluated = dispositions.accepted + dispositions.partial + dispositions.rejected + dispositions.falsePositive;
+    return {
+      agentName,
+      invocationCount: invocations.length,
+      medianDurationMs: median(invocations.flatMap((row) => row.durationMs === null ? [] : [row.durationMs])),
+      inputTokens: availableSum(invocations.map((row) => row.inputTokens)),
+      outputTokens: availableSum(invocations.map((row) => row.outputTokens)),
+      cachedTokens: availableSum(invocations.map((row) => row.cachedTokens)),
+      dispositions,
+      operationalPrecision: evaluated ? (dispositions.accepted + dispositions.partial) / evaluated : null,
+      workspaceChanged: invocations.some((row) => row.workspaceChanged)
+    };
+  }).sort((a, b) => a.agentName.localeCompare(b.agentName));
+  return { agents, recent: rows.slice(0, 100).map(agentInvocationView) };
+}
+async function updateAgentInvocationDisposition(id, disposition, note) {
+  const exists = await prisma.agentInvocation.findUnique({ where: { id } });
+  if (!exists) return null;
+  const row = await prisma.agentInvocation.update({
+    where: { id },
+    data: {
+      disposition,
+      dispositionNote: note?.trim() || null,
+      evaluatedAt: /* @__PURE__ */ new Date()
+    }
+  });
+  return agentInvocationView(row);
+}
+
+// src/routes/session-events.ts
 var bearer = (h) => /^Bearer (.+)$/.exec(h ?? "")?.[1] ?? "";
+var recordOf = (value) => value && typeof value === "object" ? value : null;
+var boundedString = (value, max) => typeof value === "string" && value.length > 0 && value.length <= max ? value : void 0;
 async function session_events_default(app2) {
   app2.post("/session-events", async (req, reply) => {
     const sessionId2 = String(req.headers["x-hanoman-session"] ?? "");
@@ -41482,6 +42754,38 @@ async function session_events_default(app2) {
       return reply.code(401).send({ error: "unauthorized" });
     const s2 = await getSessionAsync(sessionId2);
     if (!s2 || s2.exited) return reply.code(404).send({ error: "live session not found" });
+    const body = recordOf(req.body);
+    const lifecycle = body?.hook_event_name;
+    if (body && (lifecycle === "SubagentStart" || lifecycle === "SubagentStop")) {
+      const runtimeInvocationId = boundedString(
+        body.agent_id ?? body.subagent_id ?? body.thread_id,
+        500
+      );
+      const agentName = boundedString(body.agent_type ?? body.agent_name, 200);
+      const meta = agentName ? (s2.agentRoster ?? []).find((agent) => agent.name === agentName) : void 0;
+      if (!runtimeInvocationId || !meta) return reply.code(202).send({ ignored: true });
+      const identity = {
+        sessionId: sessionId2,
+        projectId: s2.projectId,
+        specId: s2.specId,
+        runtime: s2.agent,
+        runtimeInvocationId,
+        customAgentId: meta.id,
+        agentName: meta.name,
+        model: meta.model,
+        cwd: s2.cwd
+      };
+      const outcome = lifecycle === "SubagentStart" ? await startAgentInvocation(identity) : await stopAgentInvocation({
+        ...identity,
+        status: body.status === "interrupted" ? "interrupted" : "completed",
+        result: boundedString(body.last_assistant_message ?? body.result, 1e6),
+        transcriptPath: boundedString(
+          body.agent_transcript_path ?? body.transcript_path,
+          4096
+        )
+      });
+      return reply.code(202).send(outcome.duplicate ? { duplicate: true } : { accepted: true });
+    }
     const event = parseHookEvent(req.body);
     if (!event) return reply.code(202).send({ ignored: true });
     const r = await intakeAsk({
@@ -41575,9 +42879,9 @@ init_db();
 init_db();
 init_uploads();
 init_src();
-import { createHash as createHash8, randomBytes as randomBytes6 } from "node:crypto";
+import { createHash as createHash10, randomBytes as randomBytes6 } from "node:crypto";
 function hashAccessKey(key) {
-  return createHash8("sha256").update(key).digest("hex");
+  return createHash10("sha256").update(key).digest("hex");
 }
 function generateAccessKey() {
   const key = "hnm_tkt_" + randomBytes6(24).toString("hex");
@@ -41587,13 +42891,13 @@ function generateShareToken() {
   return "hnm_shr_" + randomBytes6(24).toString("hex");
 }
 async function createTicket(input) {
-  const { key, hash: hash2 } = generateAccessKey();
+  const { key, hash: hash3 } = generateAccessKey();
   for (let attempt = 0; attempt < 3; attempt++) {
     const max = await prisma.ticket.aggregate({ where: { projectId: input.projectId }, _max: { number: true } });
     const number = (max._max.number ?? 0) + 1;
     try {
       const ticket = await prisma.ticket.create({
-        data: { ...input, number, accessKeyHash: hash2, shareToken: generateShareToken(), status: "new" }
+        data: { ...input, number, accessKeyHash: hash3, shareToken: generateShareToken(), status: "new" }
       });
       return { ticket, key };
     } catch (e) {
@@ -41620,6 +42924,7 @@ async function pruneOldTickets(now = Date.now()) {
 // src/services/ticket-intake.ts
 init_db();
 init_notifications2();
+init_sync_notify();
 init_uploads();
 var TICKET_UPLOAD = { MAX_FILES: 3 };
 async function parseTicketUpload(req) {
@@ -41783,10 +43088,12 @@ async function help_default(app2) {
 
 // src/routes/tickets.ts
 init_db();
+init_sync_notify();
 init_uploads();
 
 // src/services/ticket-accept.ts
 init_db();
+init_sync_notify();
 var attachmentData = (t, atts) => {
   if (atts.length === 0) return "Tanpa lampiran.";
   const list2 = atts.map(
@@ -42701,201 +44008,28 @@ async function changelog_default(app2) {
 // src/routes/custom-agents.ts
 init_src();
 init_db();
-
-// src/services/agent-tool-catalog.ts
-init_src();
-import { readFileSync as readFileSync16 } from "node:fs";
-import { homedir as homedir9 } from "node:os";
-import { join as join26 } from "node:path";
-var home = () => process.env.HOME || homedir9();
-var readJson2 = (path) => {
-  try {
-    return JSON.parse(readFileSync16(path, "utf8"));
-  } catch {
-    return null;
-  }
-};
-var serversOf = (node) => {
-  const ms = node?.mcpServers;
-  if (!ms || typeof ms !== "object" || Array.isArray(ms)) return [];
-  return Object.keys(ms);
-};
-var codexServers = () => {
-  let text;
-  try {
-    text = readFileSync16(join26(home(), ".codex", "config.toml"), "utf8");
-  } catch {
-    return [];
-  }
-  const out4 = [];
-  for (const m of text.matchAll(/^\s*\[mcp_servers\.(?:"([^"]+)"|([A-Za-z0-9_-]+))(?:\.[^\]]*)?\]/gm)) {
-    const name2 = m[1] ?? m[2];
-    if (name2) out4.push(name2);
-  }
-  return out4;
-};
-function mcpServerNames(repoDir) {
-  const names = [];
-  const claudeJson = readJson2(join26(home(), ".claude.json"));
-  names.push(...serversOf(claudeJson));
-  if (repoDir) {
-    const projects = claudeJson?.projects;
-    if (projects && typeof projects === "object") names.push(...serversOf(projects[repoDir]));
-    names.push(...serversOf(readJson2(join26(repoDir, ".mcp.json"))));
-  }
-  names.push(...codexServers());
-  return [...new Set(names.filter(Boolean))].sort((a, b) => a.localeCompare(b));
-}
-function agentToolCatalog(repoDir) {
-  return [ALL_TOOLS_ENTRY, ...BUILTIN_AGENT_TOOLS, ...mcpServerNames(repoDir).map(mcpToolEntry)];
-}
-var agentToolIds = (repoDir) => agentToolCatalog(repoDir).map((t) => t.id);
-
-// src/routes/custom-agents.ts
-init_settings3();
-
-// src/services/builtin-agents.ts
-init_src();
-init_db();
+init_sync_notify();
+init_agent_tool_catalog();
 init_settings3();
-init_tombstone();
-import { createHash as createHash9 } from "node:crypto";
-var fingerprint = (name2, description, instructions, tools) => createHash9("sha256").update([name2, description, instructions, [...tools].join(",")].join(" ")).digest("hex").slice(0, 16);
-var builtinFingerprint = (a) => fingerprint(a.name, a.description, a.instructions, a.tools);
-var rowFingerprint = (r) => fingerprint(r.name, r.description, r.instructions, toolsOf(r.tools) ?? []);
-async function seedBuiltinAgents() {
-  try {
-    const setting = await getSetting();
-    const stamps = { ...setting.builtinAgents };
-    let changed = false;
-    for (const a of BUILTIN_AGENTS) {
-      const id = customAgentId(null, a.name);
-      const fp = builtinFingerprint(a);
-      const row = await prisma.customAgent.findUnique({ where: { id } });
-      if (!row) {
-        if (await findTombstone("customAgent", id)) continue;
-        await prisma.customAgent.create({ data: {
-          id,
-          projectId: null,
-          name: a.name,
-          description: a.description,
-          instructions: a.instructions,
-          tools: [...a.tools],
-          model: null,
-          mentions: [],
-          runtime: null,
-          enabled: a.enabledByDefault
-        } });
-        await notifySynced("customAgent", id);
-        stamps[a.name] = fp;
-        changed = true;
-        continue;
-      }
-      const stamped = stamps[a.name];
-      if (!stamped || stamped === fp) continue;
-      if (stamped !== rowFingerprint(row)) continue;
-      await prisma.customAgent.update({ where: { id }, data: {
-        description: a.description,
-        instructions: a.instructions,
-        tools: [...a.tools]
-        // `enabled` TIDAK di sini. Sengaja.
-      } });
-      await notifySynced("customAgent", id);
-      stamps[a.name] = fp;
-      changed = true;
-    }
-    if (changed) {
-      const data = { ...setting, builtinAgents: stamps };
-      await prisma.setting.upsert({
-        where: { id: 1 },
-        update: { data },
-        create: { id: 1, data }
-      });
-    }
-  } catch {
-  }
-}
-
-// src/services/custom-agents.ts
-init_db();
-init_src();
-init_pty();
-var cache4 = [];
-var repoDirCache = /* @__PURE__ */ new Map();
-var asCustomAgent = (r) => ({
-  id: r.id,
-  projectId: r.projectId,
-  name: r.name,
-  description: r.description,
-  instructions: r.instructions,
-  tools: toolsOf(r.tools),
-  model: r.model,
-  mentions: mentionsOf(r.mentions),
-  runtime: runtimeOf(r.runtime),
-  enabled: r.enabled,
-  createdAt: "",
-  updatedAt: ""
-  // tak dipakai lapis ini
-});
-async function loadCustomAgents() {
-  try {
-    cache4 = await prisma.customAgent.findMany();
-    const projects = await prisma.project.findMany({ select: { id: true, repoDir: true } });
-    const bindings = await prisma.localBinding.findMany({ select: { projectId: true, repoDir: true } });
-    const next = /* @__PURE__ */ new Map();
-    for (const p3 of projects) next.set(p3.id, p3.repoDir ?? null);
-    for (const b of bindings) next.set(b.projectId, b.repoDir ?? null);
-    repoDirCache = next;
-  } catch {
-    cache4 = [];
-    repoDirCache = /* @__PURE__ */ new Map();
-  }
-}
-function agentDefsFor(projectId, agent) {
-  const globals = cache4.filter((r) => r.projectId === null).map(asCustomAgent);
-  const project = cache4.filter((r) => r.projectId === projectId).map(asCustomAgent);
-  const eff = effectiveAgents(globals, project).filter((a) => a.runtime === null || a.runtime === agent);
-  const needsCatalog = eff.some((a) => (a.tools ?? []).includes(ALL_TOOLS));
-  const catalogIds = needsCatalog ? agentToolIds(repoDirCache.get(projectId) ?? null) : [];
-  return eff.map((a) => ({
-    name: a.name,
-    description: a.description,
-    instructions: a.instructions,
-    // Ekspansi terjadi DI SINI, sebelum `resolveTools` di runner: meneruskan `"*"` apa adanya
-    // membuat claude membuangnya senyap (agen tanpa alat), sementara menerjemahkannya jadi `null`
-    // membuat agen mewarisi SELURUH tool termasuk `Task` — lapis 2 anti-loop lenyap tanpa jejak.
-    tools: expandTools(a.tools, catalogIds),
-    model: a.model,
-    mentions: a.mentions ?? []
-  }));
-}
-function validateGraph(rows) {
-  const projectScopes = [...new Set(rows.map((r) => r.projectId).filter((p3) => p3 !== null))];
-  const globals = rows.filter((r) => r.projectId === null).map(asCustomAgent);
-  for (const scope of [null, ...projectScopes]) {
-    const project = scope === null ? [] : rows.filter((r) => r.projectId === scope).map(asCustomAgent);
-    const nodes = effectiveAgents(globals, project).map((a) => ({ name: a.name, mentions: a.mentions ?? [] }));
-    const cycle = detectCycle(nodes);
-    if (cycle) return { scope: scope ?? GLOBAL_SCOPE, cycle };
-  }
-  return null;
-}
-function unknownMentions(row, all) {
-  const visible = new Set(
-    all.filter((r) => r.projectId === null || row.projectId !== null && r.projectId === row.projectId).map((r) => r.name)
-  );
-  return mentionsOf(row.mentions).filter((m) => !visible.has(m));
-}
-async function installCustomAgents() {
-  await seedBuiltinAgents();
-  await loadCustomAgents();
-  registerCustomAgentSource((projectId, agent) => agentDefsFor(projectId, agent));
-}
-
-// src/routes/custom-agents.ts
+init_builtin_agents2();
+init_custom_agents2();
 var rowsOf = async () => await prisma.customAgent.findMany();
 var stampsOf = async () => (await getSetting()).builtinAgents;
-var view8 = (r, projectId, stamps = {}) => {
+var availabilityOf = (r, requestedRuntime) => {
+  const configuredRuntime = runtimeOf(r.runtime);
+  if (requestedRuntime && configuredRuntime && configuredRuntime !== requestedRuntime) {
+    return { available: false, availabilityReason: `hanya tersedia untuk runtime ${configuredRuntime}` };
+  }
+  const effectiveRuntime = requestedRuntime ?? configuredRuntime;
+  if (workspacePolicyOf(r.workspacePolicy) === "isolated-worktree" && effectiveRuntime === "codex") {
+    return {
+      available: false,
+      availabilityReason: "isolated-worktree belum tersedia untuk subagent Codex"
+    };
+  }
+  return { available: true };
+};
+var view8 = (r, projectId, stamps = {}, requestedRuntime) => {
   const builtin = r.projectId === null && BUILTIN_AGENT_NAMES.includes(r.name);
   return {
     id: r.id,
@@ -42907,12 +44041,18 @@ var view8 = (r, projectId, stamps = {}) => {
     model: r.model,
     mentions: mentionsOf(r.mentions),
     runtime: runtimeOf(r.runtime),
+    activation: activationOf(r.activation),
+    effort: effortOf(r.effort),
+    workspacePolicy: workspacePolicyOf(r.workspacePolicy),
+    maxTurns: maxTurnsOf(r.maxTurns),
+    timeoutSeconds: timeoutSecondsOf(r.timeoutSeconds),
     enabled: r.enabled,
     builtin,
     // Sidik jari yang tak tercatat (baris menyeberang sync dari mesin lain, seed di sini belum
     // pernah menyentuhnya) dibaca sebagai "disunting" — lebih baik menandai berlebih daripada
     // menjanjikan "asli bawaan" untuk isi yang tak bisa kita buktikan.
     builtinEdited: builtin ? stamps[r.name] !== rowFingerprint(r) : false,
+    ...availabilityOf(r, requestedRuntime),
     ...projectId ? { inherited: r.projectId === null } : {}
   };
 };
@@ -42930,6 +44070,11 @@ function modelProblem(model, runtime) {
   const ok2 = modelsForRuntime(runtime).some((m) => m.id === model);
   return ok2 ? null : { error: "model tak dikenal untuk runtime ini", model, runtime };
 }
+function effortProblem(effort, runtime, model) {
+  if (!effort) return null;
+  const ok2 = effortsForRuntimeModel(runtime, model).includes(effort);
+  return ok2 ? null : { error: "effort tak didukung runtime/model ini", effort, runtime, model };
+}
 async function custom_agents_default(app2) {
   app2.get("/custom-agents/catalog", async (req) => {
     const projectId = req.query.projectId;
@@ -42939,8 +44084,13 @@ async function custom_agents_default(app2) {
       runtimes: AGENT_RUNTIMES.map((id) => ({ id, label: AGENT_RUNTIME_LABELS[id] }))
     };
   });
-  app2.get("/custom-agents", async (req) => {
-    const projectId = req.query.projectId;
+  app2.get("/custom-agents", async (req, reply) => {
+    const query2 = req.query;
+    const projectId = query2.projectId;
+    const requestedRuntime = query2.runtime;
+    if (requestedRuntime && !AGENT_RUNTIMES.includes(requestedRuntime)) {
+      return reply.code(400).send({ error: "runtime harus claude atau codex" });
+    }
     const rows = await prisma.customAgent.findMany({
       where: projectId ? { OR: [{ projectId: null }, { projectId }] } : { projectId: null },
       orderBy: { name: "asc" }
@@ -42949,7 +44099,7 @@ async function custom_agents_default(app2) {
     for (const r of rows) if (r.projectId === null) byName.set(r.name, r);
     for (const r of rows) if (r.projectId !== null) byName.set(r.name, r);
     const stamps = await stampsOf();
-    return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name)).map((r) => view8(r, projectId, stamps));
+    return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name)).map((r) => view8(r, projectId, stamps, requestedRuntime));
   });
   app2.post("/custom-agents", async (req, reply) => {
     const parsed = zCreateCustomAgent.safeParse(req.body);
@@ -42962,6 +44112,8 @@ async function custom_agents_default(app2) {
     if (tp) return reply.code(400).send(tp);
     const mp = modelProblem(p3.model ?? null, p3.runtime ?? null);
     if (mp) return reply.code(400).send(mp);
+    const ep = effortProblem(p3.effort ?? null, p3.runtime ?? null, p3.model ?? null);
+    if (ep) return reply.code(400).send(ep);
     const id = customAgentId(projectId, p3.name);
     if (await prisma.customAgent.findUnique({ where: { id } }))
       return reply.code(409).send({ error: "nama sudah dipakai di scope ini", id });
@@ -42975,6 +44127,11 @@ async function custom_agents_default(app2) {
       model: p3.model ?? null,
       mentions: p3.mentions ?? [],
       runtime: p3.runtime ?? null,
+      activation: p3.activation ?? "always",
+      effort: p3.effort ?? null,
+      workspacePolicy: p3.workspacePolicy ?? "inherit",
+      maxTurns: p3.maxTurns ?? null,
+      timeoutSeconds: p3.timeoutSeconds ?? null,
       enabled: p3.enabled ?? true
     };
     const all = [...await rowsOf(), candidate];
@@ -42992,6 +44149,11 @@ async function custom_agents_default(app2) {
       model: candidate.model,
       mentions: candidate.mentions,
       runtime: candidate.runtime,
+      activation: candidate.activation,
+      effort: candidate.effort,
+      workspacePolicy: candidate.workspacePolicy,
+      maxTurns: candidate.maxTurns,
+      timeoutSeconds: candidate.timeoutSeconds,
       enabled: candidate.enabled
     } });
     await loadCustomAgents();
@@ -43009,6 +44171,12 @@ async function custom_agents_default(app2) {
     if (!existing) return reply.code(404).send({ error: "not found" });
     const before2 = existing;
     const effRuntime = "runtime" in parsed.data ? parsed.data.runtime ?? null : runtimeOf(before2.runtime);
+    const effWorkspacePolicy = "workspacePolicy" in parsed.data ? parsed.data.workspacePolicy ?? "inherit" : workspacePolicyOf(before2.workspacePolicy);
+    if (("runtime" in parsed.data || "workspacePolicy" in parsed.data) && effWorkspacePolicy === "isolated-worktree" && effRuntime !== "claude") {
+      return reply.code(400).send({
+        error: "isolated-worktree hanya tersedia untuk agen ber-runtime Claude Code"
+      });
+    }
     if (parsed.data.tools !== void 0) {
       const tp = toolsProblem(parsed.data.tools, agentToolIds(await repoDirOf2(before2.projectId)));
       if (tp) return reply.code(400).send(tp);
@@ -43020,12 +44188,25 @@ async function custom_agents_default(app2) {
       );
       if (mp) return reply.code(400).send(mp);
     }
+    if (parsed.data.effort !== void 0 || parsed.data.model !== void 0 || "runtime" in parsed.data) {
+      const ep = effortProblem(
+        parsed.data.effort !== void 0 ? parsed.data.effort : effortOf(before2.effort),
+        effRuntime,
+        parsed.data.model !== void 0 ? parsed.data.model : before2.model
+      );
+      if (ep) return reply.code(400).send(ep);
+    }
     const candidate = {
       ...before2,
       ...parsed.data,
       mentions: parsed.data.mentions ?? mentionsOf(before2.mentions),
       tools: parsed.data.tools !== void 0 ? parsed.data.tools : toolsOf(before2.tools),
-      runtime: effRuntime
+      runtime: effRuntime,
+      activation: parsed.data.activation ?? activationOf(before2.activation),
+      effort: parsed.data.effort !== void 0 ? parsed.data.effort : effortOf(before2.effort),
+      workspacePolicy: effWorkspacePolicy,
+      maxTurns: parsed.data.maxTurns !== void 0 ? parsed.data.maxTurns : maxTurnsOf(before2.maxTurns),
+      timeoutSeconds: parsed.data.timeoutSeconds !== void 0 ? parsed.data.timeoutSeconds : timeoutSecondsOf(before2.timeoutSeconds)
     };
     const all = (await rowsOf()).map((r) => r.id === id ? candidate : r);
     const unknown = unknownMentions(candidate, all);
@@ -43039,6 +44220,11 @@ async function custom_agents_default(app2) {
       model: candidate.model,
       mentions: candidate.mentions,
       runtime: candidate.runtime,
+      activation: candidate.activation,
+      effort: candidate.effort,
+      workspacePolicy: candidate.workspacePolicy,
+      maxTurns: candidate.maxTurns,
+      timeoutSeconds: candidate.timeoutSeconds,
       enabled: candidate.enabled
     } });
     await loadCustomAgents();
@@ -43065,9 +44251,39 @@ async function custom_agents_default(app2) {
   });
 }
 
+// src/routes/custom-agent-metrics.ts
+init_zod();
+var zQuery = external_exports.object({
+  projectId: external_exports.string().min(1).optional(),
+  from: external_exports.string().datetime({ offset: true }).optional(),
+  to: external_exports.string().datetime({ offset: true }).optional()
+});
+var zPatch = external_exports.object({
+  disposition: external_exports.enum(["accepted", "partial", "rejected", "false-positive"]),
+  note: external_exports.string().max(500).nullable().optional()
+}).strict();
+async function custom_agent_metrics_default(app2) {
+  app2.get("/custom-agents/metrics", async (req, reply) => {
+    const parsed = zQuery.safeParse(req.query);
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.issues[0]?.message });
+    const from = parsed.data.from ? new Date(parsed.data.from) : void 0;
+    const to = parsed.data.to ? new Date(parsed.data.to) : void 0;
+    if (from && to && from > to) return reply.code(400).send({ error: "from harus sebelum to" });
+    return agentMetrics({ projectId: parsed.data.projectId, from, to });
+  });
+  app2.patch("/custom-agents/invocations/:id", async (req, reply) => {
+    const body = zPatch.safeParse(req.body);
+    if (!body.success) return reply.code(400).send({ error: body.error.issues[0]?.message });
+    const id = String(req.params.id ?? "");
+    const view13 = await updateAgentInvocationDisposition(id, body.data.disposition, body.data.note);
+    return view13 ?? reply.code(404).send({ error: "invocation tidak ditemukan" });
+  });
+}
+
 // src/routes/members.ts
 init_src();
 init_db();
+init_sync_notify();
 var view9 = (m) => ({
   id: m.id,
   name: m.name,
@@ -43124,10 +44340,12 @@ async function members_default(app2) {
 // src/routes/tasks.ts
 init_src();
 init_db();
+init_sync_notify();
 
 // src/services/task-escalate.ts
 init_src();
 init_db();
+init_sync_notify();
 var day = (d) => d ? d.toISOString().slice(0, 10) : null;
 function contextOf(task, member, backlink) {
   const lines2 = [
@@ -43408,7 +44626,7 @@ function issuesFromRest(raw) {
 }
 var GH_FIELDS = "number,title,body,author,labels,url,state,createdAt,updatedAt";
 var API2 = "https://api.github.com";
-var defaultRunGh = (args, env) => new Promise((resolve21, reject2) => {
+var defaultRunGh = (args, env) => new Promise((resolve22, reject2) => {
   execFile16(
     args[0],
     args.slice(1),
@@ -43416,7 +44634,7 @@ var defaultRunGh = (args, env) => new Promise((resolve21, reject2) => {
     (err, stdout, stderr) => {
       const e = err;
       if (e && (e.code === "ENOENT" || e.code === "EACCES")) return reject2(e);
-      resolve21({ code: err ? Number(err.code ?? 1) : 0, stdout, stderr });
+      resolve22({ code: err ? Number(err.code ?? 1) : 0, stdout, stderr });
     }
   );
 });
@@ -43511,6 +44729,7 @@ async function fetchIssues(repo, opts, deps = {}) {
 }
 
 // src/services/github-issues.ts
+init_sync_notify();
 var issueRowId = (projectId, slug, number) => `${projectId}:${slug}#${number}`;
 async function pullIssues(projectId, opts = {}, deps = {}) {
   const resolved = await resolveGithubRepo(projectId);
@@ -43559,6 +44778,7 @@ async function pullIssues(projectId, opts = {}, deps = {}) {
 // src/services/github-accept.ts
 init_src();
 init_db();
+init_sync_notify();
 var backlinkOf = (i) => `Dari GitHub issue ${i.repoSlug}#${i.number} (${i.url}).`;
 async function acceptGithubIssue(issue2, opts) {
   if (issue2.specId) {
@@ -43615,6 +44835,7 @@ ${backlink}`;
 }
 
 // src/routes/github-issues.ts
+init_sync_notify();
 var zPull = external_exports.object({
   state: external_exports.enum(["open", "all"]).optional(),
   limit: external_exports.number().int().min(1).max(1e3).optional()
@@ -44451,10 +45672,10 @@ function sanitizeClientText(text) {
   return text.replace(/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/g, "").slice(0, MAX_PESAN);
 }
 function wrapClientMessage(text, nonce) {
-  const open4 = `<pesan-klien-${nonce}>`;
+  const open5 = `<pesan-klien-${nonce}>`;
   const close = `</pesan-klien-${nonce}>`;
   const jinak = sanitizeClientText(text).replaceAll("</pesan-klien", "<\u200B/pesan-klien").replaceAll("<pesan-klien", "<\u200Bpesan-klien");
-  return `${open4}
+  return `${open5}
 ${jinak}
 ${close}`;
 }
@@ -44553,9 +45774,9 @@ ${baru}`;
 // src/services/portal-chat/workspace.ts
 init_src();
 init_db();
-import { mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync2, rmSync as rmSync7, writeFileSync as writeFileSync7 } from "node:fs";
-import { tmpdir as tmpdir5 } from "node:os";
-import { join as join27 } from "node:path";
+import { mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync2, rmSync as rmSync8, writeFileSync as writeFileSync9 } from "node:fs";
+import { tmpdir as tmpdir6 } from "node:os";
+import { join as join30 } from "node:path";
 var STAGE_LABEL = {
   brainstorming: "Dirumuskan",
   objective: "Dirumuskan",
@@ -44610,7 +45831,7 @@ ${c.body}
 ${baris.join("\n")}`;
 }
 async function buildChatWorkspace(projectId) {
-  const dir2 = mkdtempSync2(join27(tmpdir5(), "hanoman-portal-chat-"));
+  const dir2 = mkdtempSync2(join30(tmpdir6(), "hanoman-portal-chat-"));
   try {
     const project = await prisma.project.findUnique({
       where: { id: projectId },
@@ -44631,7 +45852,7 @@ async function buildChatWorkspace(projectId) {
     });
     const files = [];
     const tulis = (rel, isi) => {
-      writeFileSync7(join27(dir2, rel), isi, { mode: 384 });
+      writeFileSync9(join30(dir2, rel), isi, { mode: 384 });
       files.push(rel);
     };
     tulis("project.md", renderProjectDoc(project));
@@ -44640,16 +45861,16 @@ async function buildChatWorkspace(projectId) {
     tulis("catatan-rilis.md", renderChangelogDoc(changelogs));
     const prds = await listPrds(projectId);
     if (prds.length) {
-      mkdirSync12(join27(dir2, "dokumen"), { mode: 448 });
+      mkdirSync12(join30(dir2, "dokumen"), { mode: 448 });
       for (const prd of prds) {
         const isi = await readPrd(projectId, prd.path);
         if (!isi) continue;
-        tulis(join27("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
+        tulis(join30("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
       }
     }
-    return { dir: dir2, files, cleanup: () => rmSync7(dir2, { recursive: true, force: true }) };
+    return { dir: dir2, files, cleanup: () => rmSync8(dir2, { recursive: true, force: true }) };
   } catch (error) {
-    rmSync7(dir2, { recursive: true, force: true });
+    rmSync8(dir2, { recursive: true, force: true });
     throw error;
   }
 }
@@ -44683,7 +45904,7 @@ function portalChatArgv(o) {
     o.prompt
   ];
 }
-var shellQuote2 = (v) => `'${v.replace(/'/g, `'"'"'`)}'`;
+var shellQuote4 = (v) => `'${v.replace(/'/g, `'"'"'`)}'`;
 function portalChatProcess(o, env = process.env) {
   const file = effectiveStr("HANOMAN_CLAUDE_BIN") ?? "claude";
   const args = portalChatArgv(o);
@@ -44693,7 +45914,7 @@ function portalChatProcess(o, env = process.env) {
       throw new Error("chat portal menolak jalan: sandbox sesi wajib saat hardening menyala");
     return { file, args, cwd: o.workspace };
   }
-  const command = [file, ...args].map(shellQuote2).join(" ");
+  const command = [file, ...args].map(shellQuote4).join(" ");
   const sandbox = sandboxArgvFromEnv({
     command,
     worktree: o.workspace,
@@ -44727,7 +45948,7 @@ function chatFailureReason(err, stdout, stderr, timeoutMs) {
   return `chat portal gagal (${bagaimana}): ${detail}`;
 }
 function runProcess(p3, timeoutMs) {
-  return new Promise((resolve21, reject2) => {
+  return new Promise((resolve22, reject2) => {
     const child = execFile17(p3.file, p3.args, {
       cwd: p3.cwd,
       timeout: timeoutMs,
@@ -44739,7 +45960,7 @@ function runProcess(p3, timeoutMs) {
       stdout,
       stderr,
       timeoutMs
-    ))) : resolve21(stdout));
+    ))) : resolve22(stdout));
     child.stdin?.end();
   });
 }
@@ -44963,7 +46184,7 @@ init_zod();
 init_db();
 init_settings3();
 var zPrd = external_exports.object({ slug: external_exports.string().regex(/^[a-z0-9]([a-z0-9-]{0,60}[a-z0-9])?$/) });
-var zQuery = external_exports.object({ project: external_exports.string().min(1) });
+var zQuery2 = external_exports.object({ project: external_exports.string().min(1) });
 var sessionRow = (s2) => ({
   id: s2.id,
   projectId: s2.projectId,
@@ -44991,7 +46212,7 @@ var messageRow = (m) => ({
 });
 async function portal_chat_admin_default(app2) {
   app2.get("/portal-chat/sessions", async (req, reply) => {
-    const parsed = zQuery.safeParse(req.query);
+    const parsed = zQuery2.safeParse(req.query);
     if (!parsed.success) return reply.code(400).send({ error: "project wajib" });
     const { page, limit } = req.query;
     const rows = await prisma.portalChatSession.findMany({
@@ -45035,7 +46256,7 @@ async function portal_chat_admin_default(app2) {
     return reply.code(201).send({ path });
   });
   app2.get("/portal-chat/export", async (req, reply) => {
-    const parsed = zQuery.safeParse(req.query);
+    const parsed = zQuery2.safeParse(req.query);
     if (!parsed.success) return reply.code(400).send({ error: "project wajib" });
     const { from, to } = req.query;
     const rows = await prisma.portalChatSession.findMany({
@@ -45155,15 +46376,15 @@ init_src();
 init_db();
 
 // src/services/bootstrap.ts
-import { createHash as createHash10, randomBytes as randomBytes10, timingSafeEqual as timingSafeEqual4 } from "node:crypto";
+import { createHash as createHash11, randomBytes as randomBytes10, timingSafeEqual as timingSafeEqual4 } from "node:crypto";
 import { chmod, lstat as lstat3, mkdir as mkdir6, readFile as readFile5, unlink as unlink5, writeFile as writeFile5 } from "node:fs/promises";
-import { join as join28 } from "node:path";
+import { join as join31 } from "node:path";
 var TTL_MS5 = 15 * 6e4;
 var SETUP_TOKEN_FILE = "setup.token";
 var BootstrapError = class extends Error {
   code = "BOOTSTRAP_PROOF";
 };
-var tokenPath = (home3) => join28(home3, SETUP_TOKEN_FILE);
+var tokenPath = (home3) => join31(home3, SETUP_TOKEN_FILE);
 async function readStored(home3) {
   try {
     const info = await lstat3(tokenPath(home3));
@@ -45208,8 +46429,8 @@ ${new Date(expiresAt).toISOString()}
 }
 async function verifySetupToken(candidate, home3, now = Date.now()) {
   const stored = await readStored(home3);
-  const got = createHash10("sha256").update(candidate).digest();
-  const want = createHash10("sha256").update(stored.token).digest();
+  const got = createHash11("sha256").update(candidate).digest();
+  const want = createHash11("sha256").update(stored.token).digest();
   if (stored.expiresAt <= now || !timingSafeEqual4(got, want)) throw new BootstrapError("invalid setup proof");
 }
 async function consumeSetupToken(home3) {
@@ -45488,7 +46709,10 @@ function capabilityForRoute(method, path) {
     return rw("settings");
   }
   if (top === "lead") return rw("lead");
-  if (top === "custom-agents") return rw("agents");
+  if (top === "custom-agents") {
+    if (seg[1] === "metrics" || seg[1] === "invocations") return "COOKIE_ONLY";
+    return rw("agents");
+  }
   if (top === "telegram") {
     const sub = seg[1] ?? "";
     if (sub === "settings" || sub === "test" || sub === "credentials") return "COOKIE_ONLY";
@@ -45775,6 +46999,7 @@ function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {})
     await api.register(methods);
     await api.register(lead_default);
     await api.register(custom_agents_default);
+    await api.register(custom_agent_metrics_default);
     await api.register(githubIssues);
     await api.register(telegramRoutes);
     await api.register(webhooks_default);
@@ -45975,6 +47200,7 @@ init_db();
 init_src2();
 init_notifications2();
 init_stage_machine();
+init_sync_notify();
 init_pty();
 init_session_phases();
 var FAIL_REASON = "sesi berakhir sebelum mencapai done (gagal/limit)";
@@ -46141,6 +47367,7 @@ function registerTriaseSource() {
 }
 
 // src/server.ts
+init_custom_agents2();
 init_pty();
 init_bootstrap();
 
@@ -46150,7 +47377,7 @@ init_tap();
 // src/services/webhooks/emit.ts
 init_src();
 init_db();
-import { randomUUID as randomUUID10 } from "node:crypto";
+import { randomUUID as randomUUID11 } from "node:crypto";
 function skipped(def2, row) {
   if (!def2.skipWhen || !row) return false;
   return row[def2.skipWhen.field] === def2.skipWhen.equals;
@@ -46216,7 +47443,7 @@ async function emitWebhook(i) {
     const targets = matchingEndpoints(type, projectId);
     if (!targets.length) return;
     const name2 = projectId ? (await prisma.project.findUnique({ where: { id: projectId }, select: { name: true } }))?.name ?? null : null;
-    const env = buildEnvelope(i, name2, (/* @__PURE__ */ new Date()).toISOString(), `evt_${randomUUID10().replace(/-/g, "")}`);
+    const env = buildEnvelope(i, name2, (/* @__PURE__ */ new Date()).toISOString(), `evt_${randomUUID11().replace(/-/g, "")}`);
     if (!env) return;
     await enqueueEnvelope(env, targets);
   } catch (e) {
@@ -46529,13 +47756,13 @@ init_src2();
 
 // src/services/secure-home.ts
 import { chmod as chmod2, lstat as lstat4, mkdir as mkdir7 } from "node:fs/promises";
-import { isAbsolute as isAbsolute7, resolve as resolve20 } from "node:path";
+import { isAbsolute as isAbsolute8, resolve as resolve21 } from "node:path";
 var HomePermissionError = class extends Error {
   code = "HOME_SYMLINK";
 };
 async function assertNoSymlink(path, allowMissing) {
   try {
-    const info = await lstat4(resolve20(path));
+    const info = await lstat4(resolve21(path));
     if (info.isSymbolicLink()) throw new HomePermissionError(`symlink ditolak: ${path}`);
   } catch (error) {
     if (error.code === "ENOENT" && allowMissing) return;
@@ -46543,7 +47770,7 @@ async function assertNoSymlink(path, allowMissing) {
   }
 }
 async function secureHanomanHome(opts) {
-  if (!isAbsolute7(opts.home)) throw new HomePermissionError("HANOMAN_HOME harus absolut");
+  if (!isAbsolute8(opts.home)) throw new HomePermissionError("HANOMAN_HOME harus absolut");
   await assertNoSymlink(opts.home, true);
   await mkdir7(opts.home, { recursive: true, mode: 448 });
   await assertNoSymlink(opts.home, false);
@@ -46733,10 +47960,106 @@ function startRetentionSweep() {
 
 // src/server.ts
 init_uploads();
+
+// src/services/session-event-relay.ts
+init_session_event_token();
+init_session_event_spool();
+import { constants as constants3 } from "node:fs";
+import { mkdir as mkdir8, open as open4, readdir as readdir7, rm as rm6 } from "node:fs/promises";
+import { join as join32 } from "node:path";
+var MAX_EVENT_BYTES = 1e6;
+var MAX_FILES_PER_DRAIN = 1e3;
+var SESSION_ID_RE = /^[a-z0-9_-]+$/;
+async function drainSessionEventSpool(app2, root = sessionEventSpoolRoot()) {
+  await mkdir8(root, { recursive: true, mode: 448 });
+  let delivered = 0;
+  let examined = 0;
+  let readBuffer;
+  for (const session of await readdir7(root, { withFileTypes: true })) {
+    if (!session.isDirectory() || !SESSION_ID_RE.test(session.name)) continue;
+    const dir2 = join32(root, session.name);
+    let entries3;
+    try {
+      entries3 = await readdir7(dir2, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const entry of entries3) {
+      if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
+      if (++examined > MAX_FILES_PER_DRAIN) return delivered;
+      const path = join32(dir2, entry.name);
+      let payload;
+      let handle;
+      try {
+        handle = await open4(path, constants3.O_RDONLY | constants3.O_NOFOLLOW);
+        const stat4 = await handle.stat();
+        if (!stat4.isFile() || stat4.size > MAX_EVENT_BYTES) throw new Error("payload terlalu besar");
+        readBuffer ??= Buffer.allocUnsafe(MAX_EVENT_BYTES + 1);
+        const { bytesRead } = await handle.read(readBuffer, 0, readBuffer.length, 0);
+        if (bytesRead > MAX_EVENT_BYTES) throw new Error("payload terlalu besar");
+        const parsed = JSON.parse(readBuffer.subarray(0, bytesRead).toString("utf8"));
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+          throw new Error("payload event bukan object");
+        }
+        payload = parsed;
+      } catch {
+        await rm6(path, { force: true }).catch(() => {
+        });
+        continue;
+      } finally {
+        await handle?.close().catch(() => {
+        });
+      }
+      try {
+        const response = await app2.inject({
+          method: "POST",
+          url: "/api/session-events",
+          headers: {
+            authorization: `Bearer ${sessionEventToken(session.name)}`,
+            "x-hanoman-session": session.name
+          },
+          payload
+        });
+        if (response.statusCode === 429 || response.statusCode >= 500) continue;
+        await rm6(path, { force: true }).catch(() => {
+        });
+        if (response.statusCode >= 200 && response.statusCode < 300) delivered++;
+      } catch {
+      }
+    }
+  }
+  return delivered;
+}
+function startSessionEventRelay(app2, options2 = {}) {
+  const root = options2.root ?? sessionEventSpoolRoot();
+  let running = false;
+  const tick6 = async () => {
+    if (running) return;
+    running = true;
+    try {
+      await drainSessionEventSpool({ inject: async (request) => app2.inject(request) }, root);
+    } catch (error) {
+      console.error("session event relay gagal:", error);
+    } finally {
+      running = false;
+    }
+  };
+  const timer9 = setInterval(() => {
+    void tick6();
+  }, options2.intervalMs ?? 250);
+  timer9.unref();
+  app2.addHook("onClose", async () => {
+    clearInterval(timer9);
+  });
+  void tick6();
+}
+
+// src/server.ts
 var app = buildApp();
 var port = Number(process.env.PORT ?? 8787);
 var host = process.env.HOST ?? "127.0.0.1";
 assertRuntimeBoundary(process.env, { uid: process.getuid?.(), host });
+startSessionEventRelay(app);
 process.on("unhandledRejection", (err) => console.error("unhandledRejection:", err));
 process.on("uncaughtException", (err) => console.error("uncaughtException:", err));
 async function shutdown(sig) {
@@ -46765,9 +48088,19 @@ var bootstrapReady = secureHanomanHome({
   const proof = await ensureSetupToken(resolveHome());
   console.log(`setup admin memerlukan token di ${proof.path}; kedaluwarsa ${new Date(proof.expiresAt).toISOString()}`);
 });
-bootstrapReady.then(() => app.listen({ port, host })).then(async () => {
-  console.log(`hanoman api ${host}:${port}`);
+bootstrapReady.then(async () => {
+  try {
+    const { loadConfig: loadConfig2 } = await Promise.resolve().then(() => (init_config2(), config_exports));
+    const { applyConfigOnBoot: applyConfigOnBoot2 } = await Promise.resolve().then(() => (init_config_apply(), config_apply_exports));
+    await loadConfig2();
+    await applyConfigOnBoot2();
+  } catch (e) {
+    console.error("config runtime gagal dimuat \u2014 memakai env/default:", e);
+  }
   await installCustomAgents();
+  return app.listen({ port, host });
+}).then(async () => {
+  console.log(`hanoman api ${host}:${port}`);
   await installWebhooks();
   installSessionHistory();
   try {
@@ -46775,17 +48108,12 @@ bootstrapReady.then(() => app.listen({ port, host })).then(async () => {
     void reconcileHistory(liveIds).then((n2) => {
       if (n2) console.log(`riwayat sesi: ${n2} baris berjalan direkonsiliasi`);
     }).catch((e) => console.error("rekonsiliasi riwayat sesi:", e));
+    void reconcileAgentInvocations(liveIds).then((n2) => {
+      if (n2) console.log(`custom agent: ${n2} invocation ditandai abandoned`);
+    }).catch((e) => console.error("rekonsiliasi invocation custom agent:", e));
   } catch (e) {
     console.error("rekonsiliasi riwayat sesi dilewati \u2014 tmux tak terbaca:", e);
   }
-  try {
-    const { loadConfig: loadConfig2 } = await Promise.resolve().then(() => (init_config2(), config_exports));
-    const { applyConfigOnBoot: applyConfigOnBoot2 } = await Promise.resolve().then(() => (init_config_apply(), config_apply_exports));
-    await loadConfig2();
-    await applyConfigOnBoot2();
-  } catch (e) {
-    console.error("config runtime gagal dimuat \u2014 memakai env/default:", e);
-  }
   const boundPort = app.server.address().port;
   await installTelegramGateway(app, { apiBase: `http://127.0.0.1:${boundPort}` });
   startVpsMonitor();