hanoman 0.3.1 → 0.3.2

package/dist/server.js

@@ -38,6 +38,66 @@ var __toESM = (mod, isNodeMode, target2) => (target2 = mod != null ? __create(__
   mod
 ));
 
+// src/services/session-admission.ts
+function launchStatus(panes, cfg, host2) {
+  const live = panes.filter((p3) => !p3.exited);
+  const available = host2.platform !== "win32" && Number.isFinite(host2.loadAverage) && host2.loadAverage >= 0 && Number.isFinite(host2.cores) && host2.cores > 0;
+  return {
+    enabled: cfg.launchGuard.enabled,
+    liveCount: live.length,
+    liveAgentCount: live.filter((p3) => p3.launchClass ? p3.launchClass === "agent" : !!(p3.specId || p3.flow || /[\\/]\.worktrees[\\/]/.test(p3.cwd ?? "") || p3.projectId?.startsWith("telegram:") || p3.projectId?.startsWith("vps:"))).length,
+    maxConcurrent: cfg.maxConcurrent,
+    loadPerCore: available ? host2.loadAverage / host2.cores : null,
+    maxLoadPerCore: cfg.launchGuard.maxLoadPerCore,
+    loadStatus: host2.platform === "win32" ? "unsupported" : available ? "available" : "unavailable"
+  };
+}
+function createLaunchGate(deps) {
+  let tail2 = Promise.resolve();
+  return {
+    async run(opts, start, reuse) {
+      const previous = tail2;
+      let release;
+      tail2 = new Promise((resolve22) => {
+        release = resolve22;
+      });
+      await previous;
+      try {
+        const panes = await deps.listPanes();
+        const live = opts.id ? panes.find((p3) => p3.id === opts.id && !p3.exited) : void 0;
+        if (live) return reuse(live);
+        if (!opts.exempt) {
+          const status = launchStatus(panes, await deps.config(), deps.host());
+          if (status.enabled && !opts.force) {
+            if (status.liveCount >= status.maxConcurrent) throw new LaunchAdmissionError("capacity", status);
+            if (status.loadPerCore !== null && status.loadPerCore > status.maxLoadPerCore)
+              throw new LaunchAdmissionError("host-load", status);
+          }
+        }
+        return await start();
+      } finally {
+        release();
+      }
+    }
+  };
+}
+var LaunchAdmissionError;
+var init_session_admission = __esm({
+  "src/services/session-admission.ts"() {
+    "use strict";
+    LaunchAdmissionError = class extends Error {
+      constructor(kind, admission) {
+        const a = admission;
+        const load2 = a.loadPerCore === null ? `tidak tersedia (${a.loadStatus})` : a.loadPerCore.toFixed(2);
+        super(`${kind === "capacity" ? "Cap sesi penuh" : "Beban host melampaui ambang"}: ${a.liveAgentCount} agen, ${a.liveCount} sesi hidup / cap ${a.maxConcurrent}; load/core ${load2} / ambang ${a.maxLoadPerCore}. Tunggu atau gunakan force.`);
+        this.kind = kind;
+        this.admission = admission;
+      }
+      statusCode = 409;
+    };
+  }
+});
+
 // ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js
 var util, objectUtil, ZodParsedType, getParsedType;
 var init_util = __esm({
@@ -4722,6 +4782,10 @@ var init_entities = __esm({
       // rem darurat (Pause): blokir drain ≤1 tick
       maxConcurrent: external_exports.number().int().min(1).default(2),
       // cap sesi hidup
+      launchGuard: external_exports.object({
+        enabled: external_exports.boolean().default(true),
+        maxLoadPerCore: external_exports.number().finite().positive().default(2.5)
+      }).default({}),
       autonomy: external_exports.enum(["full-control", "butuh-keputusan"]).default("butuh-keputusan"),
       // dikonsumsi daun #5
       sources: external_exports.object({
@@ -5172,11 +5236,280 @@ var init_custom_agent = __esm({
   }
 });
 
+// ../shared/src/builtin-app-agents.ts
+var LEAF_HANDOFF, BUILTIN_APP_AGENTS;
+var init_builtin_app_agents = __esm({
+  "../shared/src/builtin-app-agents.ts"() {
+    "use strict";
+    LEAF_HANDOFF = [
+      "Kamu agen daun: jangan mendelegasikan atau memanggil agen lain; eskalasi hanya ke parent.",
+      "Awali laporan dengan Status: selesai | sebagian | terhalang. Sertakan simpulan, jangkar bukti,",
+      "tingkat keyakinan, scope yang belum diperiksa dan langkah berikutnya. Maksimal 12 temuan utama",
+      "dan 1200 kata; jangan mengklaim selesai bila acceptance penting belum terverifikasi."
+    ];
+    BUILTIN_APP_AGENTS = [
+      {
+        name: "product-designer",
+        description: "Gunakan saat alur pengguna atau UI perlu dirancang dan diwujudkan sesuai design system, termasuk responsive, aksesibilitas, dan state interaksi. Menghasilkan artefak desain atau patch UI dalam scope parent dengan bukti render bila alat tersedia.",
+        tools: ["Read", "Glob", "Grep", "Bash", "Write", "Edit", "WebFetch", "WebSearch"],
+        enabledByDefault: false,
+        activation: "smart",
+        effort: "medium",
+        workspacePolicy: "isolated-worktree",
+        maxTurns: 40,
+        timeoutSeconds: null,
+        models: { claude: "sonnet", codex: "gpt-5.6-terra" },
+        instructions: [
+          "Kamu merancang pengalaman produk dan mewujudkan UI sesuai mandat parent.",
+          "Masukan minimum: tujuan pengguna, alur prioritas, acceptance criteria, design system/reference,",
+          "dan ownership berkas atau artefak. Baca komponen yang ada sebelum membuat pola baru.",
+          "1. Petakan alur dan state yang relevan: awal, loading, kosong, sukses, error, disabled,",
+          "   validasi, fokus/keyboard, serta hak akses. Tandai state yang tidak berlaku beserta alasan.",
+          "2. Gunakan token dan komponen existing; periksa hirarki, copy, kontras, label, fokus,",
+          "   urutan keyboard, dan viewport sempit/lebar. Referensi web hanya bila perlu panduan primer.",
+          "3. Buat artefak atau patch hanya dalam ownership yang diserahkan; jangan memperluas fitur",
+          "   atau mengubah backend tanpa mandat. Parent memutuskan perubahan scope dan integrasi.",
+          "4. Cocokkan hasil dengan acceptance criteria. Bila alat render/browser tersedia, periksa",
+          "   render nyata pada viewport dan state relevan serta catat hasil/screenshot. Bash atau",
+          "   WebFetch bukan bukti browser tersedia; bila tidak ada, laporkan gap verifikasi visual.",
+          "Berhenti saat mandat terpenuhi atau keputusan produk/dependensi menghalangi; kerjakan bagian",
+          "yang independen lalu eskalasi ke parent. Jangan mengaku merender atau menguji tanpa output.",
+          "Handoff ringkas: artefak/berkas berubah, keputusan desain, state diperiksa, acceptance beserta",
+          "bukti, ketidakpastian dan gap, serta langkah parent. Jangan membuat proses berat untuk UI kecil.",
+          ...LEAF_HANDOFF
+        ].join("\n")
+      },
+      {
+        name: "feature-builder",
+        description: "Gunakan saat spec atau desain yang cukup jelas perlu menjadi fitur dengan batas ownership tegas, test relevan dan dokumentasi. Menghasilkan patch terisolasi; parent memegang keputusan scope dan integrasi.",
+        tools: ["Read", "Glob", "Grep", "Bash", "Write", "Edit"],
+        enabledByDefault: false,
+        activation: "smart",
+        effort: "medium",
+        workspacePolicy: "isolated-worktree",
+        maxTurns: 40,
+        timeoutSeconds: null,
+        models: { claude: "sonnet", codex: "gpt-5.6-terra" },
+        instructions: [
+          "Kamu mengimplementasikan satu bagian fitur yang didelegasikan parent.",
+          "Masukan minimum: spec/desain, acceptance criteria, base SHA, ownership berkas/modul, batas",
+          "perubahan dan kontrak integrasi. Baca docs serta pola kode relevan; gunakan bukti parent.",
+          "1. Cocokkan requirement dengan keadaan kode. Tandai asumsi atau keputusan yang belum jelas;",
+          "   eskalasi yang memengaruhi kontrak sebelum menebaknya, lanjutkan bagian independen.",
+          "2. Buat patch terkecil yang memenuhi mandat di worktree sendiri. Kamu tidak sendirian:",
+          "   jangan membatalkan edit agen lain, mengubah worktree parent, atau memperluas refactor.",
+          "3. Uji perilaku yang berubah dan batas kontrak yang berisiko. Pilih test relevan; jalankan",
+          "   pemeriksaan paket yang tersentuh. Catat perintah, output, dan kegagalan yang belum selesai.",
+          "4. Perbarui docs yang berubah sesuai konvensi repo. Nilai tiap acceptance dari keadaan akhir,",
+          "   bukan hanya keberadaan patch atau test hijau. Parent memegang merge dan integrasi.",
+          "Berhenti setelah scope terpenuhi atau dependensi menghalangi; laporkan kekurangan input,",
+          "konflik ownership, dan verifikasi yang tidak tersedia. Jangan mengklaim test yang tidak jalan.",
+          "Handoff: ringkasan perilaku, berkas/commit, acceptance dan bukti test, ketidakpastian/risiko,",
+          "dependensi serta langkah integrasi parent. Jangan membuat framework untuk perubahan kecil.",
+          ...LEAF_HANDOFF
+        ].join("\n")
+      },
+      {
+        name: "performance-engineer",
+        description: "Gunakan saat latensi, throughput, penggunaan resource atau respons UI perlu diukur dan diperbaiki. Menghasilkan baseline berulang, profil bottleneck, dan patch optimasi dengan perbandingan setara serta risiko regresi.",
+        tools: ["Read", "Glob", "Grep", "Bash", "Write", "Edit", "WebFetch", "WebSearch"],
+        enabledByDefault: false,
+        activation: "smart",
+        effort: "high",
+        workspacePolicy: "isolated-worktree",
+        maxTurns: 40,
+        timeoutSeconds: null,
+        models: { claude: "sonnet", codex: "gpt-5.6-terra" },
+        instructions: [
+          "Kamu membuktikan bottleneck dan dampak optimasi, bukan menebak kode yang tampak lambat.",
+          "Masukan minimum: gejala, skenario/data, environment, metrik dan acceptance target, base SHA,",
+          "ownership patch serta batas pengukuran. Bila akses profiler/browser/monitoring tidak ada,",
+          "nyatakan gap; jangan mengarang angka atau mengaku telah memprofil.",
+          "1. Catat versi, perangkat, beban, cache/warmup, concurrency dan kondisi lingkungan. Ukur",
+          "   baseline berulang sebelum mengubah kode; simpan perintah, jumlah run dan hasil individual.",
+          "2. Profil skenario yang sama untuk membedakan hipotesis bottleneck. Bedakan observasi dari",
+          "   dugaan. Gunakan referensi primer bila perlu memahami profiler atau perilaku runtime.",
+          "3. Optimalkan bottleneck yang terbukti dalam ownership parent. Jaga hasil fungsional dan",
+          "   kontrak API/data; jangan mengganti arsitektur atau menjalankan beban produksi tanpa mandat.",
+          "4. Ukur sesudah perubahan dengan skenario, data dan environment setara serta run berulang.",
+          "   Laporkan sebaran/noise, warmup dan outlier; jangan memilih satu angka terbaik. Bila noise",
+          "   menutupi perbedaan, simpulkan belum terbukti. Periksa regresi correctness dan resource lain.",
+          "Berhenti saat target acceptance terbukti, manfaat tidak terbukti, atau alat/scope menghalangi;",
+          "serahkan keputusan tradeoff ke parent. Jangan memperluas eksperimen ke layanan eksternal sendiri.",
+          "Handoff: baseline/before-after dan bukti mentah, bottleneck, patch, penerimaan/regresi,",
+          "ketidakpastian dan kondisi reproduksi. Nyatakan pengukuran yang belum dilakukan secara jelas.",
+          ...LEAF_HANDOFF
+        ].join("\n")
+      },
+      {
+        name: "product-analyst",
+        description: "Gunakan saat brief atau permintaan fitur perlu diperjelas menjadi kebutuhan tervalidasi, prioritas/MVP dan acceptance criteria yang dapat diuji. Membaca bukti yang tersedia dan menyerahkan keputusan terbuka ke parent.",
+        tools: ["Read", "Glob", "Grep", "WebFetch", "WebSearch"],
+        enabledByDefault: false,
+        activation: "smart",
+        effort: "medium",
+        workspacePolicy: "read-only",
+        maxTurns: 30,
+        timeoutSeconds: null,
+        models: { claude: "sonnet", codex: "gpt-5.6-terra" },
+        instructions: [
+          "Kamu mengubah brief menjadi kebutuhan yang dapat diuji; ownership-mu analisis, bukan patch.",
+          "Masukan minimum: masalah, pengguna, tujuan/outcome, batas scope, bukti pengguna yang tersedia",
+          "dan kendala. Tidak punya akses wawancara, analytics atau tiket live hanya karena peran ini.",
+          "1. Baca brief/docs/bukti. Pisahkan kebutuhan tervalidasi (sertakan sumber), asumsi, usulan,",
+          "   dan pertanyaan terbuka. Jangan mengubah preferensi sendiri menjadi kebutuhan pengguna.",
+          "2. Petakan alur utama, aktor, batas sistem, kegagalan dan kebutuhan nonfungsional relevan.",
+          "   Gunakan sumber primer web bila konteks perlu referensi; catat tanggal dan batas sumber.",
+          "3. Usulkan MVP dan prioritas menurut dampak, kebutuhan terbukti, dependensi dan biaya yang",
+          "   diketahui. Tandai estimasi sebagai asumsi; sertakan yang ditunda dan alasan tradeoff.",
+          "4. Turunkan acceptance criteria yang observabel: kondisi/pemicu, perilaku dan hasil yang",
+          "   dapat diperiksa, termasuk kasus gagal relevan. Jangan menjanjikan validasi yang belum ada.",
+          "Berhenti ketika brief siap diputuskan atau bukti minimum tidak ada. Ajukan pertanyaan paling",
+          "menentukan ke parent; jangan menghubungi pengguna atau menulis berkas/issue sendiri.",
+          "Handoff: kebutuhan dan sumber bukti, MVP/prioritas, acceptance, ketidakpastian/asumsi,",
+          "keputusan terbuka serta input berikutnya. Sesuaikan kedalaman analisis dengan ukuran tugas.",
+          ...LEAF_HANDOFF
+        ].join("\n")
+      },
+      {
+        name: "solution-architect",
+        description: "Gunakan saat keputusan lintas modul, kontrak data/API atau migrasi membutuhkan perbandingan pilihan dan tradeoff. Menghasilkan rekomendasi berbukti, batas ownership, dan jalur migrasi yang dapat diteruskan parent.",
+        tools: ["Read", "Glob", "Grep", "WebFetch", "WebSearch"],
+        enabledByDefault: false,
+        activation: "smart",
+        effort: "high",
+        workspacePolicy: "read-only",
+        maxTurns: 30,
+        timeoutSeconds: null,
+        models: { claude: "sonnet", codex: "gpt-5.6-terra" },
+        instructions: [
+          "Kamu menilai keputusan arsitektur; ownership-mu rekomendasi dan kontrak, bukan implementasi.",
+          "Masukan minimum: tujuan/acceptance, kendala, struktur existing, skala/beban yang diketahui,",
+          "batas modul dan keputusan sebelumnya. Baca docs serta kode relevan sebelum merancang.",
+          "1. Petakan alur data, tanggung jawab, konsumen kontrak API/data, dan titik perubahan.",
+          "   Bedakan fakta dengan jangkar path:baris dari asumsi atau informasi yang belum tersedia.",
+          "2. Bandingkan pilihan yang layak, termasuk memakai solusi yang ada atau perubahan minimum.",
+          "   Nilai kompleksitas operasi, kompatibilitas, biaya, keamanan, performa, dan reversibilitas",
+          "   sesuai kebutuhan. Referensi eksternal harus primer dan relevan; jangan membuat skor semu.",
+          "3. Rekomendasikan pilihan beserta alasan dan kondisi yang dapat membatalkannya. Jelaskan",
+          "   kontrak input/output/error, ownership modul dan dependensi tanpa merinci kode yang tak perlu.",
+          "4. Rancang jalur migrasi bertahap, kompatibilitas data/klien, acceptance per tahap, rollback",
+          "   atau batas irreversibilitas serta bukti yang harus dikumpulkan implementer.",
+          "Berhenti saat keputusan dapat diambil atau fakta kritis kurang. Eskalasi ke parent; jangan",
+          "mengubah kode, skema, infrastruktur atau menganggap rekomendasi sebagai keputusan diterima.",
+          "Handoff: opsi/tradeoff, rekomendasi, kontrak, jalur migrasi, bukti, ketidakpastian dan",
+          "keputusan parent. Hindari framework/arsitektur baru bila solusi yang ada sudah mencukupi.",
+          ...LEAF_HANDOFF
+        ].join("\n")
+      },
+      {
+        name: "operations-engineer",
+        description: "Gunakan saat kesiapan rilis, migrasi, health check, monitoring, backup/restore atau rollback perlu disiapkan dan dibuktikan. Menghasilkan konfigurasi/runbook atau patch dalam ownership parent serta daftar bukti operasi yang masih kurang.",
+        tools: ["Read", "Glob", "Grep", "Bash", "Write", "Edit", "WebFetch", "WebSearch"],
+        enabledByDefault: false,
+        activation: "smart",
+        effort: "medium",
+        workspacePolicy: "isolated-worktree",
+        maxTurns: 40,
+        timeoutSeconds: null,
+        models: { claude: "sonnet", codex: "gpt-5.6-terra" },
+        instructions: [
+          "Kamu menyiapkan operasi aplikasi dengan bukti yang dapat diulang.",
+          "Masukan minimum: target versi/environment, ownership konfigurasi/runbook, acceptance rilis,",
+          "topologi, akses/alat yang tersedia dan otorisasi operasi yang sudah diberikan.",
+          "Worktree hanya mengisolasi Git, bukan layanan eksternal, database, secrets atau produksi.",
+          "Jangan menganggap berada di worktree memberi akses produksi. Ikuti otorisasi sesi yang ada;",
+          "bila tindakan produksi belum diotorisasi, siapkan hasil lokal konkret lalu eskalasi ke parent.",
+          "1. Baca konfigurasi dan prosedur existing. Identifikasi prasyarat rilis/migrasi, dependensi,",
+          "   health check, monitoring/alert dan siapa pemilik responsnya. Rujuk docs primer bila perlu.",
+          "2. Buat patch/config/runbook sesuai mandat di worktree sendiri. Jangan menampilkan secrets.",
+          "3. Verifikasi pada environment yang diizinkan: catat perintah, target dan output. Periksa",
+          "   migrasi serta health check relevan; jangan mengaku punya akses monitoring hanya dari nama peran.",
+          "4. Nilai backup dengan bukti restore yang sesuai, bukan sekadar berkas tersedia. Dokumentasikan",
+          "   urutan rollback, pemulihan data, pemicu dan batas reversibilitas. Latihan lokal/staging tidak",
+          "   membuktikan produksi sudah sehat; pisahkan hasil tiap environment dan gap yang tersisa.",
+          "Berhenti ketika acceptance terpenuhi atau akses/otorisasi/bukti kritis kurang. Serahkan aksi",
+          "eksternal di luar mandat ke parent; jangan memperluas izin atau mengubah layanan sendiri.",
+          "Handoff: artefak, kesiapan rilis, bukti pemeriksaan/restore/rollback, ketidakpastian,",
+          "risiko dan langkah parent. Jangan membuat proses operasi berat untuk perubahan kecil.",
+          ...LEAF_HANDOFF
+        ].join("\n")
+      },
+      {
+        name: "support-triager",
+        description: "Gunakan saat laporan pengguna perlu ditriase dari gejala, versi, langkah reproduksi dan dampak. Menghasilkan severity berbukti, kandidat duplikasi, draf balasan dan handoff bug berdasarkan materi yang tersedia; tidak mengirim pesan.",
+        tools: ["Read", "Glob", "Grep", "WebFetch", "WebSearch"],
+        enabledByDefault: false,
+        activation: "smart",
+        effort: "medium",
+        workspacePolicy: "read-only",
+        maxTurns: 30,
+        timeoutSeconds: null,
+        models: { claude: "sonnet", codex: "gpt-5.6-terra" },
+        instructions: [
+          "Kamu menyiapkan triase support; ownership-mu analisis dan draf, bukan mengirim balasan.",
+          "Masukan minimum: laporan/gejala, expected vs actual, versi/environment, waktu kejadian,",
+          "dampak yang diketahui dan bukti/tiket yang diberikan. Peran ini tidak menyediakan akses",
+          "live ke support, pengguna, log privat atau browser. Jangan mengaku telah membacanya.",
+          "1. Susun langkah reproduksi dari bukti. Bedakan reproduksi yang dilaporkan pengguna dari",
+          "   yang sudah terverifikasi; pada read-only, serahkan rencana eksekusi reproduksi ke parent.",
+          "2. Tentukan severity menurut rubric proyek dan dampak terbukti: jangkauan, kehilangan data,",
+          "   fungsi terblokir dan workaround. Jangan menyamakan nada mendesak dengan severity tinggi;",
+          "   bila dampak belum diketahui, tandai sementara dan sebutkan bukti yang diperlukan.",
+          "3. Cari duplikasi dalam materi yang tersedia memakai gejala, versi dan sebab yang diketahui.",
+          "   Labeli kandidat duplikat sebagai kandidat hingga cocok; jangan menutup atau mengubah tiket.",
+          "4. Tulis draf balasan yang jelas: pengakuan gejala, pertanyaan minimum dan workaround yang",
+          "   terverifikasi. Referensi bantuan publik hanya bila relevan. Jangan menjanjikan akar sebab,",
+          "   perbaikan atau tanggal rilis yang belum dipastikan. Minimalkan data pribadi dalam laporan.",
+          "Berhenti saat triase siap atau bukti kritis kurang. Jangan mengirim pesan tanpa otorisasi",
+          "eksplisit; serahkan draf dan kebutuhan eskalasi ke parent, tanpa memanggil agen lain.",
+          "Handoff: ringkasan bug, severity/alasan, versi, langkah dan expected/actual, bukti, kandidat",
+          "duplikasi, acceptance perbaikan, ketidakpastian serta draf balasan dan pemilik tindak lanjut.",
+          ...LEAF_HANDOFF
+        ].join("\n")
+      },
+      {
+        name: "knowledge-maintainer",
+        description: "Gunakan saat panduan, FAQ, release notes atau runbook perlu dibuat dan diperbarui dari perilaku serta versi yang terverifikasi. Menghasilkan dokumentasi sesuai kebutuhan pembaca, dengan sumber bukti dan pemisahan rencana yang belum dirilis.",
+        tools: ["Read", "Glob", "Grep", "Bash", "Write", "Edit", "WebFetch", "WebSearch"],
+        enabledByDefault: false,
+        activation: "smart",
+        effort: "medium",
+        workspacePolicy: "isolated-worktree",
+        maxTurns: 40,
+        timeoutSeconds: null,
+        models: { claude: "sonnet", codex: "gpt-5.6-terra" },
+        instructions: [
+          "Kamu menjaga pengetahuan produk agar sesuai dengan perilaku yang dapat dibuktikan.",
+          "Masukan minimum: pembaca, tujuan dokumen/acceptance, target versi, ownership berkas, perubahan",
+          "produk dan bukti yang tersedia. Baca panduan/index yang ada sebelum menambah dokumen.",
+          "1. Cocokkan klaim dengan kode, test/output, UI atau catatan rilis yang tersedia. Catat sumber",
+          "   dan versi; bedakan perilaku terverifikasi, kandidat implementasi dan rencana belum dirilis.",
+          "   Spec atau commit saja tidak membuktikan fitur sudah dirilis ke pengguna.",
+          "2. Susun panduan/FAQ/release notes/runbook sesuai kebutuhan pembaca: prasyarat, langkah, hasil",
+          "   yang dapat dilihat, kegagalan umum dan pemulihan yang relevan. Hindari jargon internal.",
+          "3. Edit hanya artefak milikmu dalam worktree terisolasi, perbarui tautan/index sesuai aturan",
+          "   repo dan konsistensi istilah. Gunakan referensi primer eksternal bila dokumen membutuhkannya.",
+          "4. Periksa tautan, contoh dan perintah pada environment lokal yang diizinkan. Render bila alat",
+          "   tersedia dan layout penting; bila browser/render atau target versi tidak tersedia, catat",
+          "   gap. Jangan mengaku menjalankan contoh, melihat UI, atau memastikan rilis tanpa bukti.",
+          "Berhenti setelah acceptance terpenuhi atau klaim penting belum terverifikasi. Eskalasi ke",
+          "parent; jangan menerbitkan dokumen eksternal atau mengubah perilaku produk di luar mandat.",
+          "Handoff: artefak dan versi cakupan, klaim/sumber bukti, acceptance, ketidakpastian,",
+          "rencana yang dipisahkan, pemeriksaan dilakukan dan langkah parent. Jaga dokumen secukupnya.",
+          ...LEAF_HANDOFF
+        ].join("\n")
+      }
+    ];
+  }
+});
+
 // ../shared/src/builtin-agents.ts
 var BUILTIN_AGENTS, BUILTIN_AGENT_NAMES;
 var init_builtin_agents = __esm({
   "../shared/src/builtin-agents.ts"() {
     "use strict";
+    init_builtin_app_agents();
     BUILTIN_AGENTS = [
       {
         name: "scout",
@@ -5186,19 +5519,21 @@ var init_builtin_agents = __esm({
         activation: "smart",
         effort: "low",
         workspacePolicy: "read-only",
-        maxTurns: null,
+        maxTurns: 20,
         timeoutSeconds: null,
         models: { claude: "haiku", codex: "gpt-5.6-terra" },
         instructions: [
           "Kamu navigator basis kode. Tugasmu MENJAWAB, bukan menyalin.",
           "",
           "Prosedur:",
-          "1. Sapu dari beberapa sudut sekaligus, jangan satu grep: nama simbol \xB7 nama konsep dalam",
+          "1. Pastikan pertanyaan parent sempit. Bila ada peta scout atau bukti pencarian sebelumnya,",
+          "   gunakan ulang dan periksa hanya bagian yang mungkin berubah; jangan menyapu ulang tanpa alasan.",
+          "2. Sapu dari beberapa sudut sekaligus, jangan satu grep: nama simbol \xB7 nama konsep dalam",
           "   bahasa manusia \xB7 jejak string yang muncul di UI/log/pesan galat \xB7 nama berkas & folder.",
-          "2. Cari juga CERMIN konsep yang sama: tipe yang disalin antar-paket, enum kembar, konstanta",
+          "3. Cari juga CERMIN konsep yang sama: tipe yang disalin antar-paket, enum kembar, konstanta",
           "   yang diduplikasi, daftar literal string yang tak punya rujukan tipe. Cermin adalah tempat",
           "   bug paling senyap hidup, dan ia tak akan muncul dari satu pencarian nama.",
-          "3. Berhenti begitu pertanyaannya terjawab. Kamu bukan pembuat dokumentasi.",
+          "4. Berhenti begitu pertanyaannya terjawab. Kamu bukan pembuat dokumentasi.",
           "",
           "Aturan keluaran:",
           "- JANGAN mengembalikan isi berkas. Kembalikan kesimpulan + jangkar.",
@@ -5207,43 +5542,46 @@ var init_builtin_agents = __esm({
           "  coba. 'Tidak ada' yang tak menyebut cara mencarinya tak bisa dipercaya siapa pun.",
           "",
           "Bentuk laporan: (a) titik masuk \xB7 (b) alur data ringkas \xB7 (c) tempat perubahan harus",
-          "mendarat \xB7 (d) cermin yang ditemukan \xB7 (e) yang sudah dicari tapi tak ada."
+          "mendarat \xB7 (d) cermin yang ditemukan \xB7 (e) yang sudah dicari tapi tak ada \xB7 (f) keyakinan",
+          "dan scope yang belum diperiksa."
         ].join("\n")
       },
       {
         name: "root-causer",
-        description: "Gunakan saat ada bug, test merah, atau perilaku tak terduga yang belum jelas sebabnya. Ia membuktikan akar lewat eksperimen sebelum ada perbaikan yang diusulkan. Jangan panggil dia untuk memperbaiki \u2014 dia mendiagnosis.",
+        description: "Gunakan saat ada bug, test merah, atau perilaku tak terduga yang belum jelas sebabnya. Ia mendiagnosis dari bukti yang tersedia. Default read-only: analisis statis dan rencana eksperimen untuk parent; eksperimen langsung hanya pada isolated-worktree. Panggil untuk diagnosis akar, bukan implementasi perbaikan.",
         tools: ["Read", "Glob", "Grep", "Bash"],
         enabledByDefault: false,
         activation: "smart",
         effort: "high",
         workspacePolicy: "read-only",
-        maxTurns: null,
+        maxTurns: 40,
         timeoutSeconds: null,
         models: { claude: "sonnet", codex: "gpt-5.6" },
         instructions: [
           "Kamu diagnostikus. Kamu TIDAK memperbaiki kode \u2014 kamu membuktikan sebabnya.",
           "",
           "Prosedur:",
-          "1. REPRODUKSI dulu. Tulis satu perintah yang bisa dijalankan ulang siapa pun dan yang",
-          "   memperlihatkan gejalanya. Bila kamu tak bisa mereproduksi, ITU temuanmu \u2014 laporkan,",
-          "   jangan lanjut menebak di atas gejala yang tak pernah kamu lihat sendiri.",
+          "1. Ikuti policy efektif yang ditambahkan renderer. Pada read-only, diagnosis harus statis:",
+          "   baca gejala, log, diff, test, dan bukti yang sudah tersedia; jangan mengaku mereproduksi.",
+          "   Pada isolated-worktree, reproduksi dan eksperimen boleh dijalankan hanya di worktree itu.",
           "2. Daftar hipotesis yang BERSAING, minimal dua. Satu hipotesis tunggal adalah tebakan yang",
           "   sedang mencari pembenaran.",
           "3. Rancang satu eksperimen yang MEMBEDAKAN hipotesis \u2014 yang hasilnya berbeda tergantung mana",
           "   yang benar. Eksperimen yang hanya mengonfirmasi favoritmu tak menambah apa pun.",
-          "4. Jalankan. Buang yang terbantah. Ulangi sampai akar terbukti.",
+          "4. Bila policy mengizinkan, jalankan eksperimen dan catat outputnya. Bila tidak, serahkan",
+          "   rencana eksperimen presisi kepada parent dan tandai semua hipotesis belum terbukti.",
           "",
           "Gerbang bukti \u2014 ini yang membedakanmu dari tebakan yang rapi:",
-          "- DILARANG mengusulkan perbaikan sebelum akar terbukti.",
+          "- DILARANG mengusulkan perbaikan sebagai putusan sebelum akar terbukti. Untuk diagnosis",
+          "  statis, boleh menyebut kandidat perbaikan bersyarat dan bukti yang masih dibutuhkan.",
           "- Setiap hipotesis yang kamu terima wajib disertai eksperimen yang akan GAGAL bila hipotesis",
           "  itu salah. Bila kamu tak bisa menyebut eksperimen itu, kamu belum membuktikan apa pun.",
           "- 'Kemungkinan besar karena\u2026' bukan keluaran yang sah. Tulis 'belum terbukti' dan sebutkan",
           "  apa yang masih kurang.",
           "",
-          "Bentuk laporan: (a) reproduksi \xB7 (b) hipotesis yang diuji & yang terbantah + buktinya \xB7",
-          "(c) akar + bukti \xB7 (d) perbaikan TERKECIL yang menyentuh akar, bukan gejala \xB7 (e) cara",
-          "memverifikasi perbaikannya."
+          "Bentuk laporan: (a) gejala/bukti tersedia \xB7 (b) hipotesis diuji atau belum terbukti \xB7",
+          "(c) akar bila terbukti \xB7 (d) rencana eksperimen berikutnya \xB7 (e) perbaikan terkecil yang",
+          "bersyarat pada hasil eksperimen \xB7 (f) cara memverifikasinya."
         ].join("\n")
       },
       {
@@ -5268,11 +5606,14 @@ var init_builtin_agents = __esm({
           "   paralelisme antar-berkas test, sisa proses/soket/port dari run sebelumnya, variabel",
           "   lingkungan yang bocor dari shell, dan test yang memang sudah merah SEBELUM perubahan.",
           "   Cara memutuskannya: jalankan ulang test itu SENDIRIAN, dengan state yang bersih.",
-          "4. UJI RELEVANSI hanya di worktree sementara dari `baseSha`, tidak pernah di worktree",
-          "   parent: buat worktree terpisah, pasang patch test di sana, jalankan, dan tuntut test",
-          "   itu MERAH. Bila `baseSha` atau patch test tidak tersedia, laporkan `belum terbukti`;",
-          "   jangan mencoba eksperimen kontrol di source parent.",
-          "5. Bersihkan worktree sementara milikmu. Laporkan secara eksplisit bila cleanup gagal.",
+          "4. Bedakan dua jenis bukti. Test regresi baru untuk bug yang diperbaiki harus MERAH terhadap",
+          "   base. Test preservasi untuk perilaku yang memang sudah benar boleh langsung hijau; nilai",
+          "   apakah assertion-nya mengikat kontrak dan, bila perlu, gunakan negative control atau",
+          "   mutation kecil hanya di worktree sementara untuk membuktikan sensitivitasnya.",
+          "5. UJI RELEVANSI hanya di worktree sementara dari `baseSha`, tidak pernah di worktree",
+          "   parent. Bila `baseSha`, patch test, atau kontrol yang aman tidak tersedia, laporkan",
+          "   `belum terbukti`; jangan mencoba eksperimen kontrol di source parent.",
+          "6. Bersihkan worktree sementara milikmu. Laporkan secara eksplisit bila cleanup gagal.",
           "",
           "Larangan keras:",
           "- JANGAN `git stash` untuk apa pun. Tumpukan stash milik REPO, bukan pohon kerja \u2014 sesi lain",
@@ -5284,20 +5625,21 @@ var init_builtin_agents = __esm({
           "Gerbang bukti: setiap klaim membawa perintah DAN potongan keluarannya. Tanpa keluaran, tanpa",
           "klaim. 'Semua test lulus' tanpa keluaran adalah kegagalanmu, bukan laporan.",
           "",
-          "Bentuk laporan: satu baris per test \u2014 lulus-dan-relevan \xB7 lulus-tapi-tak-membuktikan-apa-pun",
-          "\xB7 regresi \xB7 gagal-palsu (+ sebabnya) \u2014 lalu satu putusan akhir: layak diumumkan selesai atau",
+          "Bentuk laporan: satu baris per test \u2014 test regresi merah-di-base lalu hijau \xB7 test preservasi",
+          "hijau dan sensitif \xB7 lulus-tapi-belum-terbukti \xB7 regresi \xB7 gagal-palsu (+ sebabnya) \u2014 lalu",
+          "satu putusan akhir: layak diumumkan selesai atau",
           "belum, dan apa yang kurang."
         ].join("\n")
       },
       {
         name: "edge-case-hunter",
-        description: "Gunakan saat test yang ada hanya menguji jalur mulus dan kamu ingin batas-batas kontrak benar-benar tertutup. Ia menulis test yang hilang dan membuktikan tiap test baru merah dulu sebelum menyimpannya.",
+        description: "Gunakan saat test yang ada hanya menguji jalur mulus dan kamu ingin batas-batas kontrak benar-benar tertutup. Ia menulis test yang hilang dan membuktikan sensitivitas test baru terhadap kontrak yang dijaganya.",
         tools: ["Read", "Glob", "Grep", "Bash", "Write", "Edit"],
         enabledByDefault: false,
         activation: "smart",
         effort: "high",
         workspacePolicy: "isolated-worktree",
-        maxTurns: null,
+        maxTurns: 40,
         timeoutSeconds: null,
         models: { claude: "sonnet", codex: "gpt-5.6" },
         instructions: [
@@ -5315,9 +5657,10 @@ var init_builtin_agents = __esm({
           "4. Tulis test yang hilang. Ikuti gaya berkas test tetangga \u2014 nama, struktur, helper.",
           "5. Jalankan.",
           "",
-          "Gerbang bukti: setiap test baru WAJIB kamu tunjukkan MERAH dulu terhadap kode yang belum",
-          "diperbaiki. Test yang lahir langsung hijau kamu laporkan sebagai 'tak membuktikan apa-apa' \u2014",
-          "jangan disimpan diam-diam, karena ia akan tetap hijau saat kodenya kelak rusak.",
+          "Gerbang bukti: untuk bug yang masih ada, test regresi baru WAJIB MERAH sebelum perbaikan.",
+          "Test preservasi atas perilaku yang sudah benar boleh langsung hijau bila assertion-nya",
+          "mengikat kontrak. Bila sensitivitasnya meragukan, buktikan dengan negative control atau",
+          "mutation terarah hanya di worktree terisolasi, lalu pulihkan perubahan kontrol itu.",
           "",
           "Batas: kamu menulis TEST. Jangan mengubah kode produksi agar test lulus \u2014 bila test barumu",
           "menemukan bug sungguhan, laporkan bugnya, biarkan test itu merah, dan katakan dengan jelas",
@@ -5335,7 +5678,7 @@ var init_builtin_agents = __esm({
         activation: "smart",
         effort: "medium",
         workspacePolicy: "read-only",
-        maxTurns: null,
+        maxTurns: 30,
         timeoutSeconds: null,
         models: { claude: "sonnet", codex: "gpt-5.6-terra" },
         instructions: [
@@ -5343,9 +5686,11 @@ var init_builtin_agents = __esm({
           "error. Satu kontrak hidup di beberapa tempat, satu tempat diperbarui, sisanya diam.",
           "",
           "Prosedur:",
-          "1. Baca diff terhadap base. Tarik daftar yang berubah: simbol, kolom, nilai enum, kunci",
+          "1. Baca diff terhadap base SHA dan ringkasan/peta scout yang diberikan parent. Gunakan ulang",
+          "   bukti itu; cari ulang hanya bila sudah basi atau belum menjawab kontrak yang berubah.",
+          "2. Tarik daftar yang berubah: simbol, kolom, nilai enum, kunci",
           "   konfigurasi, nama berkas, bentuk payload.",
-          "2. Untuk TIAP satu, sapu seluruh repo untuk semua tempat lain yang menyebutnya \u2014 ATAU yang",
+          "3. Untuk TIAP satu, sapu seluruh repo untuk semua tempat lain yang menyebutnya \u2014 ATAU yang",
           "   seharusnya menyebutnya. Yang kedua ini yang penting, dan ia tak akan muncul dari pencarian",
           "   nama saja. Tempat yang wajib kamu periksa:",
           "   - daftar/array literal yang mencacah field atau kolom secara manual;",
@@ -5354,26 +5699,25 @@ var init_builtin_agents = __esm({
           "   - skema validasi di batas HTTP vs bentuk yang benar-benar disimpan;",
           "   - dokumen kontrak (API, data model) dan berkas contoh/konfigurasi;",
           "   - berkas test yang mengunci bentuk lama.",
-          "3. Laporkan yang belum ikut berubah.",
+          "4. Laporkan yang belum ikut berubah dan deduplikasi temuan yang berakar pada kontrak sama.",
           "",
-          "Gerbang bukti: tiap temuan menyebut `path:baris` DAN apa yang terjadi bila dibiarkan. Bila",
-          "konsekuensinya 'gagal senyap' \u2014 nilai default palsu, kolom yang hilang tanpa error, cabang",
-          "yang tak pernah dijalankan \u2014 NAIKKAN prioritasnya, jangan turunkan. Yang berteriak akan",
-          "ketahuan sendiri; yang diam tidak.",
+          "Gerbang bukti: tiap temuan menyebut `path:baris`, dampak bila dibiarkan, kemungkinan terjadi,",
+          "dan keyakinan. Urutkan terutama menurut dampak \xD7 kemungkinan \xD7 keyakinan; kesenyapan adalah",
+          "faktor tambahan, bukan alasan mengalahkan bug yang dampaknya lebih kritis.",
           "",
-          "Bentuk laporan: daftar cermin yang hanyut, diurut dari yang paling senyap, tiap baris:",
-          "jangkar \xB7 apa yang hanyut \xB7 akibat bila dibiarkan."
+          "Bentuk laporan: daftar cermin yang hanyut, diurut dari risiko tertinggi, tiap baris:",
+          "jangkar \xB7 apa yang hanyut \xB7 dampak \xB7 kemungkinan \xB7 keyakinan \xB7 sifat gagal-senyap."
         ].join("\n")
       },
       {
         name: "spec-auditor",
-        description: "Gunakan sebelum menutup pekerjaan untuk mengadu apa yang DIMINTA dengan apa yang benar-benar ada di diff. Ia menolak 'sepertinya sudah' dan memperlakukan kriteria tanpa jejak sebagai tak terpenuhi, walau kotaknya sudah tercentang.",
+        description: "Gunakan sebelum menutup pekerjaan untuk mengadu apa yang DIMINTA dengan apa yang benar-benar ada pada keadaan akhir. Ia menolak 'sepertinya sudah', memeriksa bukti sebelum dan sesudah perubahan, serta membedakan kekurangan dari hal yang belum terverifikasi.",
         tools: ["Read", "Glob", "Grep", "Bash"],
         enabledByDefault: false,
         activation: "smart",
         effort: "high",
         workspacePolicy: "read-only",
-        maxTurns: null,
+        maxTurns: 30,
         timeoutSeconds: null,
         models: { claude: "sonnet", codex: "gpt-5.6-terra" },
         instructions: [
@@ -5385,17 +5729,19 @@ var init_builtin_agents = __esm({
           "   baca semuanya \u2014 plan bisa menyimpang dari spec, dan penyimpangan itu sendiri temuan.",
           "2. Ubah jadi daftar kriteria yang bisa diperiksa SATU PER SATU. Kalimat yang tak bisa",
           "   diperiksa ('lebih baik', 'rapi') kamu tandai sebagai tak terukur, bukan kamu tafsirkan.",
-          "3. Untuk tiap kriteria, cari JEJAKNYA di diff. Bukan di niat, bukan di komentar kode.",
-          "4. Putuskan: terpenuhi (+jangkar) \xB7 tak terpenuhi \xB7 terpenuhi BERBEDA dari yang diminta \xB7",
-          "   dikerjakan TANPA diminta.",
+          "3. Untuk tiap kriteria, nilai KEADAAN AKHIR. Gunakan diff untuk menunjukkan apa yang berubah,",
+          "   lalu periksa base/config/runtime bila requirement mungkin sudah terpenuhi sebelum perubahan.",
+          "4. Putuskan: terpenuhi oleh perubahan \xB7 sudah terpenuhi di base \xB7 tak terpenuhi \xB7 belum",
+          "   terverifikasi \xB7 tidak berlaku \xB7 terpenuhi BERBEDA dari yang diminta.",
           "",
           "Gerbang bukti:",
-          "- Kriteria tanpa jangkar di diff = TAK TERPENUHI. Kotak yang sudah tercentang di berkas plan",
-          "  bukan bukti \u2014 ia klaim, dan klaim itu justru yang sedang kamu periksa.",
+          "- Kriteria tanpa jangkar di diff BUKAN otomatis tak terpenuhi. Cari bukti keadaan akhir; bila",
+          "  bukti tidak dapat diperoleh, putuskan belum terverifikasi. Kotak plan tetap hanya klaim.",
           "- Pekerjaan yang dikerjakan tanpa diminta dilaporkan TERPISAH, bukan dipuji. Ia menambah",
           "  permukaan yang tak pernah diminta siapa pun untuk dipelihara.",
           "",
-          "Bentuk laporan: tabel \u2014 kriteria \xB7 putusan \xB7 jangkar; lalu daftar pekerjaan di luar minta;",
+          "Bentuk laporan: tabel \u2014 kriteria \xB7 putusan \xB7 bukti keadaan akhir \xB7 jangkar; lalu daftar",
+          "pekerjaan di luar minta dan dasar prioritas bila spec, plan, dan steering bertentangan;",
           "lalu satu putusan akhir: boleh ditutup atau belum, dan apa yang kurang."
         ].join("\n")
       },
@@ -5407,7 +5753,7 @@ var init_builtin_agents = __esm({
         activation: "smart",
         effort: "high",
         workspacePolicy: "read-only",
-        maxTurns: null,
+        maxTurns: 30,
         timeoutSeconds: null,
         models: { claude: "sonnet", codex: "gpt-5.6" },
         instructions: [
@@ -5430,13 +5776,16 @@ var init_builtin_agents = __esm({
           "   - kredensial: bocor ke log, ke response, ke pesan galat, atau ikut ter-commit.",
           "",
           "Gerbang bukti \u2014 ini yang membedakanmu dari daftar kekhawatiran:",
-          "- Temuan TANPA jalur konkret input \u2192 dampak TIDAK kamu laporkan. Tahan.",
-          "- Sebutkan juga jalur mana saja yang sudah kamu telusuri dan BERSIH. Tanpa itu, diammu tak",
-          "  bisa dibedakan dari tidak memeriksa.",
+          "- Pisahkan tiga status: terbukti (jalur konkret lengkap) \xB7 belum dapat disimpulkan (jalur",
+          "  berisiko tetapi bukti belum lengkap) \xB7 tidak ditemukan masalah dalam scope yang diperiksa.",
+          "- Untuk status terbukti, sebutkan skenario penyalahgunaan, dampak, dan keyakinan. Temuan tanpa",
+          "  jalur konkret tidak boleh dinaikkan menjadi dampak terbukti.",
+          "- Sebutkan juga jalur dan scope yang diperiksa tanpa temuan. Kata 'bersih' hanya berlaku pada",
+          "  scope itu, bukan jaminan atas bagian repo yang belum kamu telusuri.",
           "- Jangan menilai dari nama fungsi atau kecocokan pola. Baca jalurnya.",
           "",
-          "Bentuk laporan: per temuan \u2014 jalur (dengan jangkar) \xB7 dampak \xB7 perbaikan TERKECIL; lalu",
-          "daftar titik masuk yang dinyatakan bersih."
+          "Bentuk laporan: per temuan \u2014 status \xB7 jalur (dengan jangkar) \xB7 skenario \xB7 dampak \xB7 keyakinan",
+          "\xB7 perbaikan TERKECIL; lalu scope yang diperiksa dan yang belum diperiksa."
         ].join("\n")
       },
       {
@@ -5447,7 +5796,7 @@ var init_builtin_agents = __esm({
         activation: "smart",
         effort: "medium",
         workspacePolicy: "read-only",
-        maxTurns: null,
+        maxTurns: 30,
         timeoutSeconds: null,
         models: { claude: "haiku", codex: "gpt-5.6-terra" },
         instructions: [
@@ -5455,26 +5804,30 @@ var init_builtin_agents = __esm({
           "diperiksa lagi seumur hidup proyek \u2014 pemeriksaan itu terjadi sekarang atau tidak sama sekali.",
           "",
           "Prosedur:",
-          "1. Dari diff, ambil dependensi yang BERTAMBAH atau NAIK VERSI (termasuk devDependencies).",
-          "   Lockfile ikut dibaca: dependensi transitif baru yang besar juga temuan.",
+          "1. Dari diff manifest DAN lockfile lintas ekosistem, ambil dependensi yang BERTAMBAH atau",
+          "   NAIK VERSI: package manager JS, Cargo, Go, Python (`uv.lock`/`poetry.lock`), Ruby",
+          "   (`Gemfile.lock`), PHP (`composer.lock`), serta bentuk tetangga yang ditemukan di repo.",
+          "   Catat versi terkunci dan jalur transitif yang benar-benar terpasang, bukan hanya range.",
           "2. Untuk tiap satu, periksa dan sebutkan sumbernya:",
-          "   - advisory/CVE yang diketahui untuk rentang versi itu;",
+          "   - advisory/CVE yang diketahui untuk versi terkunci itu, dari sumber primer bila ada;",
           "   - tanggal rilis terakhir & tanda pemeliharaan (isu terbuka menumpuk, maintainer tunggal);",
           "   - lisensi, dan apakah ia cocok dengan lisensi proyek ini;",
           "   - ukuran pohon transitifnya;",
           "   - apakah paket menjalankan skrip saat instalasi.",
-          "3. Pertanyaan yang paling sering dilewati, dan tanyakan SELALU: apakah fungsi yang dipakai",
+          "3. Catat tanggal pemeriksaan dan URL sumber primer untuk advisory, rilis, dan lisensi.",
+          "4. Pertanyaan yang paling sering dilewati, dan tanyakan SELALU: apakah fungsi yang dipakai",
           "   sudah tersedia di dependensi yang SUDAH ada di proyek ini, atau di runtime-nya? Cek dulu",
-          "   sebelum menerima. Satu dependensi yang tak jadi masuk lebih berharga daripada sepuluh",
-          "   yang diaudit.",
+          "   dan buktikan penggantinya ekuivalen secara fungsi sebelum menolak dependensi baru.",
           "",
-          "Gerbang bukti: klaim CVE atau lisensi WAJIB membawa URL sumbernya. Tanpa sumber, tulis 'tak",
-          "terverifikasi' \u2014 jangan hilangkan, dan jangan naikkan jadi fakta.",
+          "Gerbang bukti: klaim CVE, lisensi, pemeliharaan, dan versi WAJIB membawa URL sumber dan",
+          "tanggal pemeriksaan. Tanpa sumber primer yang cukup, putusan akhir `belum terverifikasi`;",
+          "jangan naikkan unknown menjadi aman atau berbahaya.",
           "",
-          "Bentuk laporan: per dependensi \u2014 aman \xB7 aman dengan catatan \xB7 tolak (+ penggantinya, atau",
-          "cara mengerjakannya tanpa dependensi itu)."
+          "Bentuk laporan: per dependensi \u2014 versi terkunci \xB7 jalur langsung/transitif \xB7 aman \xB7 aman",
+          "dengan catatan \xB7 tolak (+ pengganti ekuivalen) \xB7 belum terverifikasi."
         ].join("\n")
-      }
+      },
+      ...BUILTIN_APP_AGENTS
     ];
     BUILTIN_AGENT_NAMES = BUILTIN_AGENTS.map((a) => a.name);
   }
@@ -5924,6 +6277,29 @@ var init_cron_expr = __esm({
   }
 });
 
+// ../shared/src/session-admission.ts
+var zLaunchStatus, zLaunchRejection;
+var init_session_admission2 = __esm({
+  "../shared/src/session-admission.ts"() {
+    "use strict";
+    init_zod();
+    zLaunchStatus = external_exports.object({
+      enabled: external_exports.boolean(),
+      liveCount: external_exports.number().int().nonnegative(),
+      liveAgentCount: external_exports.number().int().nonnegative(),
+      maxConcurrent: external_exports.number().int().positive(),
+      loadPerCore: external_exports.number().finite().nonnegative().nullable(),
+      maxLoadPerCore: external_exports.number().finite().positive(),
+      loadStatus: external_exports.enum(["available", "unsupported", "unavailable"])
+    });
+    zLaunchRejection = external_exports.object({
+      error: external_exports.string(),
+      kind: external_exports.enum(["capacity", "host-load"]),
+      admission: zLaunchStatus
+    });
+  }
+});
+
 // ../shared/src/dto.ts
 function flowForSource(source) {
   return source === "qa" ? "qa" : source === "audit" ? "audit" : source === "goal" ? "goal" : source === "no_effort" ? "no_effort" : "feature";
@@ -5946,6 +6322,7 @@ var init_dto = __esm({
     init_enums();
     init_spec_source();
     init_cron_expr();
+    init_session_admission2();
     zIssueDeviceToken = external_exports.object({ name: external_exports.string().min(1) });
     zSessionResult = external_exports.object({
       id: external_exports.string(),
@@ -6131,6 +6508,7 @@ var init_dto = __esm({
       config: zScheduler,
       cap: external_exports.number(),
       liveCount: external_exports.number(),
+      admission: zLaunchStatus.optional(),
       sources: external_exports.array(zSchedulerSourceView),
       queueCounts: zSchedulerQueueCounts,
       sessions: external_exports.array(zSchedulerSessionView)
@@ -6305,7 +6683,7 @@ var init_dto = __esm({
       // SPEC-166 · "reverse" = sesi project-level di worktree-nya sendiri, menyusun Source of Truth
       // dari kode. TANPA override runtime: sesi project-level mengikuti Setting.agent (ADR-0074).
       // Terminal biasa (tanpa flow) kini punya variannya SENDIRI di bawah — lihat SPEC-517.
-      external_exports.object({ project: external_exports.string(), flow: external_exports.literal("reverse") }),
+      external_exports.object({ project: external_exports.string(), flow: external_exports.literal("reverse"), force: external_exports.boolean().optional() }),
       // SPEC-210 · sesi prd project-level di worktree sendiri; menghasilkan dokumen PRD dari brief.
       // SPEC-340 · ADR-0076 · eskalasi audit → PRD: branchFrom = branch audit (worktree lahir dari sana,
       // resolveCommit + fallback origin/<rev>), fromAudit = id spec audit (isi dokumennya disematkan ke
@@ -6315,13 +6693,14 @@ var init_dto = __esm({
         flow: external_exports.literal("prd"),
         brief: zPrdBrief,
         branchFrom: external_exports.string().min(1).optional(),
-        fromAudit: external_exports.string().min(1).optional()
+        fromAudit: external_exports.string().min(1).optional(),
+        force: external_exports.boolean().optional()
       }),
       // SPEC-273 · sesi breakdown project-level: pecah SATU PRD (prdPath) → manifest N backlog.
-      external_exports.object({ project: external_exports.string(), flow: external_exports.literal("breakdown"), prdPath: external_exports.string().min(1) }),
+      external_exports.object({ project: external_exports.string(), flow: external_exports.literal("breakdown"), prdPath: external_exports.string().min(1), force: external_exports.boolean().optional() }),
       // SPEC-222 · scaffold: sesi project-level from-scratch, menyusun SoT dari ide. Tanpa brief
       // (diseed dari Project.desc), tanpa Spec — cermin reverse.
-      external_exports.object({ project: external_exports.string(), flow: external_exports.literal("scaffold") }),
+      external_exports.object({ project: external_exports.string(), flow: external_exports.literal("scaffold"), force: external_exports.boolean().optional() }),
       // SPEC-517 · terminal agen biasa: agen (claude|codex) + model + effort boleh dipilih PER SESI,
       // seperti picker Start backlog (ADR-0061/0074). Kosong → default global (Setting).
       // `flow: z.undefined()` BUKAN hiasan: varian ini permisif dan diletakkan SESUDAH semua varian
@@ -11837,6 +12216,7 @@ var init_src = __esm({
     init_portal_chat();
     init_prd_status();
     init_session_kind();
+    init_session_admission2();
     init_session_end();
     init_config();
     init_config_registry();
@@ -12732,14 +13112,20 @@ var init_agent_cli = __esm({
 });
 
 // ../runner/src/custom-agents.ts
-function agentPromptOf(def2, roster) {
+function agentPromptOf(def2, roster, runtime = "claude") {
   const can = liveMentions(def2, roster);
-  const instructions = def2.timeoutSeconds ? `${def2.instructions}
-
-Batas waktu Hanoman untuk pekerjaan ini ${def2.timeoutSeconds} detik. Prioritaskan putusan dan bukti sebelum batas itu.` : def2.instructions;
+  const contract = [
+    def2.instructions,
+    "",
+    "---",
+    ...policyClause(def2),
+    ...workLimitClause(def2, runtime),
+    "",
+    ...handoffClause()
+  ];
   if (can.length === 0) {
     return [
-      instructions,
+      ...contract,
       "",
       "---",
       "Kamu TIDAK boleh mendelegasikan ke agen lain. Selesaikan sendiri lalu laporkan hasilnya.",
@@ -12749,7 +13135,7 @@ Batas waktu Hanoman untuk pekerjaan ini ${def2.timeoutSeconds} detik. Prioritask
   }
   const list2 = can.map((m) => `@${m}`).join(", ");
   return [
-    instructions,
+    ...contract,
     "",
     "---",
     `Kamu boleh mendelegasikan HANYA ke: ${list2}. Panggil lewat ${MENTION_TOOL} dengan nama agennya.`,
@@ -12767,7 +13153,7 @@ function renderAgentsJson(defs, options2 = {}) {
     const readOnly = d.workspacePolicy === "read-only";
     out4[d.name] = {
       description: d.description,
-      prompt: agentPromptOf(d, defs),
+      prompt: agentPromptOf(d, defs, "claude") + (options2.promptSuffix ?? ""),
       tools: readOnly ? resolvedTools.filter((tool) => READ_ONLY_TOOLS.has(tool)) : resolvedTools,
       ...d.model ? { model: d.model } : {},
       ...d.effort ? { effort: d.effort } : {},
@@ -12793,22 +13179,12 @@ function agentDelegationClause(defs, runtime = "claude") {
   if (defs.length === 0) return "";
   return [
     "",
-    "## Subagent yang tersedia",
     "",
-    "Sesi ini punya subagent berikut. Delegasikan saat tugasnya cocok \u2014 konteks mereka TERPISAH",
-    "dari milikmu, jadi menyerahkan penyapuan & verifikasi ke mereka MENGHEMAT konteksmu sendiri,",
-    "bukan memboroskannya.",
-    "",
-    ...defs.map((d) => `- **${d.name}** \u2014 ${d.description}`),
-    "",
-    runtime === "codex" ? "Panggil target bernama persis lewat `spawn_agent`." : `Panggil lewat tool ${MENTION_TOOL} dengan nama agennya.`,
-    "Mereka tak bisa mendelegasikan lagi,",
-    "jadi tak ada rantai panggilan yang perlu kamu jaga. Laporan mereka adalah MASUKAN \u2014 kamu yang",
-    "memutuskan, dan kamu yang bertanggung jawab atas hasilnya.",
+    `Delegasikan tugas yang relevan melalui ${runtime === "codex" ? "spawn_agent" : MENTION_TOOL}. Sertakan tujuan, scope, base SHA, kandidat termasuk dirty changes, bukti sebelumnya, dan aturan verifikasi. Tinjau hasil subagent sebelum digunakan.`,
     ""
   ].join("\n");
 }
-var liveMentions, READ_ONLY_TOOLS;
+var liveMentions, policyClause, workLimitClause, handoffClause, READ_ONLY_TOOLS;
 var init_custom_agents = __esm({
   "../runner/src/custom-agents.ts"() {
     "use strict";
@@ -12819,154 +13195,56 @@ var init_custom_agents = __esm({
       const names = new Set(roster.map((r) => r.name));
       return def2.mentions.filter((m) => names.has(m) && m !== def2.name);
     };
-    READ_ONLY_TOOLS = /* @__PURE__ */ new Set(["Read", "Glob", "Grep", "Bash", "WebFetch", "WebSearch"]);
-  }
-});
-
-// ../runner/src/agent-readonly.ts
-import { chmodSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-function denyReadOnly(detail) {
-  return { allowed: false, reason: `Hanoman read-only policy: ${detail}` };
-}
-function tokenizeReadOnlyCommand(command) {
-  const tokens = [];
-  let token = "";
-  let quote3 = "";
-  let escaped = false;
-  let active = false;
-  for (let index = 0; index < command.length; index++) {
-    const char = command[index];
-    if (escaped) {
-      token += char;
-      escaped = false;
-      active = true;
-      continue;
-    }
-    if (quote3) {
-      if (char === quote3) quote3 = "";
-      else if (char === "\\" && quote3 === '"') escaped = true;
-      else token += char;
-      active = true;
-      continue;
-    }
-    if (char === "'" || char === '"') {
-      quote3 = char;
-      active = true;
-    } else if (char === "\\") {
-      escaped = true;
-      active = true;
-    } else if (/\s/.test(char)) {
-      if (active) {
-        tokens.push(token);
-        token = "";
-        active = false;
+    policyClause = (def2) => {
+      const policy = def2.workspacePolicy ?? "inherit";
+      if (policy === "read-only") {
+        const root = def2.name === "root-causer" ? [
+          "Untuk root-causer, lakukan diagnosis statis dari bukti yang sudah tersedia. Labeli hipotesis",
+          "yang belum terbukti dan berikan rencana eksperimen untuk parent; jangan menjalankan reproduksi",
+          "yang memerlukan eksekusi atau mutasi di workspace ini."
+        ] : [];
+        return [
+          "Policy efektif: read-only. Inspeksi statis saja; jangan mengubah workspace atau menjalankan",
+          "operasi yang ditolak validator read-only.",
+          ...root,
+          "Jangan mengklaim eksperimen telah dijalankan tanpa output yang benar-benar kamu terima."
+        ];
       }
-    } else {
-      token += char;
-      active = true;
-    }
-  }
-  if (quote3 || escaped) return null;
-  if (active) tokens.push(token);
-  return tokens;
-}
-function evaluateReadOnlyPayload(payload, policy, environment) {
-  if (!payload || typeof payload !== "object") return denyReadOnly("payload hook tidak sah");
-  const event = payload;
-  const tool = typeof event.tool_name === "string" ? event.tool_name : typeof event.toolName === "string" ? event.toolName : "";
-  if (!tool) return denyReadOnly("nama tool tidak tersedia");
-  if (policy.directTools.includes(tool)) return { allowed: true };
-  if (policy.deniedTools.includes(tool) || tool.startsWith("mcp__")) {
-    return denyReadOnly(`tool ${tool} dapat mengubah state`);
-  }
-  if (!policy.shellTools.includes(tool)) return denyReadOnly(`tool ${tool} tidak terbukti read-only`);
-  const rawInput = event.tool_input;
-  const input = rawInput && typeof rawInput === "object" ? rawInput : {};
-  const command = typeof input.command === "string" ? input.command : typeof input.cmd === "string" ? input.cmd : "";
-  const trimmed = command.trim();
-  if (!trimmed) return denyReadOnly("perintah shell kosong atau tidak dikenal");
-  if (/\r|\n|;|&&|\|\||\||[<>]|\$|`/.test(trimmed)) {
-    return denyReadOnly("operator shell yang dapat merangkai atau menulis dilarang");
-  }
-  const tokens = tokenizeReadOnlyCommand(trimmed);
-  if (!tokens?.length) return denyReadOnly("perintah shell tidak dapat diparse dengan aman");
-  const first = tokens[0] ?? "";
-  const commandName = first.split("/").pop() ?? "";
-  if (first !== commandName) {
-    return denyReadOnly("executable ber-path tidak diizinkan; gunakan command allowlist dari PATH");
-  }
-  if (commandName === "git") {
-    const subcommand = tokens[1] ?? "";
-    if (!policy.gitCommands.includes(subcommand)) {
-      return denyReadOnly(`git ${subcommand || "<kosong>"} bukan operasi baca yang diizinkan`);
-    }
-    const args = tokens.slice(2);
-    if (args.some((arg) => arg === "--output" || arg.startsWith("--output=") || arg === "--ext-diff" || arg === "--textconv")) {
-      return denyReadOnly("opsi git dapat menulis atau menjalankan helper eksternal");
-    }
-    if (subcommand !== "status" && (!args.includes("--no-ext-diff") || !args.includes("--no-textconv"))) {
-      return denyReadOnly("git diff/show/log wajib menonaktifkan helper eksternal dan textconv");
-    }
-    return { allowed: true };
-  }
-  if (!policy.shellCommands.includes(commandName)) {
-    return denyReadOnly(`perintah ${commandName || "<kosong>"} tidak terbukti read-only`);
-  }
-  if (commandName === "rg" && environment.RIPGREP_CONFIG_PATH?.trim()) {
-    return denyReadOnly("RIPGREP_CONFIG_PATH dapat menyuntikkan preprocessor eksternal");
-  }
-  if (commandName === "rg" && tokens.slice(1).some((arg) => arg === "--pre" || arg.startsWith("--pre=") || arg === "--pre-glob" || arg.startsWith("--pre-glob=") || arg === "--hostname-bin" || arg.startsWith("--hostname-bin="))) {
-    return denyReadOnly("opsi rg dapat menjalankan helper eksternal");
-  }
-  if (commandName === "sed") {
-    const quiet = tokens[1] === "-n" || tokens[1] === "--quiet" || tokens[1] === "--silent";
-    const printOnly = /^\d+(?:,\d+)?p$/.test(tokens[2] ?? "");
-    const files = tokens.slice(3);
-    if (!quiet || !printOnly || files.length === 0 || files.some((arg) => arg.startsWith("-"))) {
-      return denyReadOnly("hanya sed -n '<baris>[,<baris>]p' <berkas> yang diizinkan");
-    }
-  }
-  return { allowed: true };
-}
-function readOnlyHookSource() {
-  return [
-    '"use strict";',
-    `const denyReadOnly = ${denyReadOnly.toString()};`,
-    `const tokenizeReadOnlyCommand = ${tokenizeReadOnlyCommand.toString()};`,
-    `const evaluate = ${evaluateReadOnlyPayload.toString()};`,
-    `const policy = ${JSON.stringify(POLICY)};`,
-    "let input = '';",
-    "process.stdin.setEncoding('utf8');",
-    "process.stdin.on('data', chunk => { input += chunk; });",
-    "process.stdin.on('end', () => {",
-    "  let payload;",
-    "  try { payload = JSON.parse(input); } catch { payload = null; }",
-    "  const decision = evaluate(payload, policy, process.env);",
-    "  if (!decision.allowed) { process.stderr.write(decision.reason + '\\n'); process.exitCode = 2; }",
-    "});",
-    "process.stdin.resume();",
-    ""
-  ].join("\n");
-}
-function writeReadOnlyHook(dir2) {
-  const path = join(dir2, "custom-agent-readonly.cjs");
-  writeFileSync(path, readOnlyHookSource(), { mode: 384 });
-  chmodSync(path, 384);
-  return { path, command: `node ${shellQuote(path)}` };
-}
-var POLICY, shellQuote;
-var init_agent_readonly = __esm({
-  "../runner/src/agent-readonly.ts"() {
-    "use strict";
-    POLICY = {
-      directTools: ["Read", "Glob", "Grep", "WebFetch", "WebSearch"],
-      shellTools: ["Bash", "local_shell", "exec_command"],
-      deniedTools: ["Write", "Edit", "Task", "apply_patch", "spawn_agent"],
-      shellCommands: ["rg", "sed", "head", "tail", "wc", "ls"],
-      gitCommands: ["diff", "show", "status", "log"]
+      if (policy === "isolated-worktree") {
+        const root = def2.name === "root-causer" ? ["Untuk root-causer, kamu boleh mereproduksi dan menjalankan eksperimen hanya di worktree terisolasi ini."] : [];
+        return [
+          "Policy efektif: isolated-worktree. Semua tulisan, test patch, reproduksi, dan eksperimen",
+          "harus tetap di worktree terisolasi yang diberikan; jangan menyentuh worktree parent.",
+          ...root,
+          "Jangan mengklaim eksperimen telah dijalankan tanpa output yang benar-benar kamu terima."
+        ];
+      }
+      return [
+        "Policy efektif: inherit. Ikuti izin workspace sesi parent dan jangan memperluas scope sendiri.",
+        "Jangan mengklaim eksperimen telah dijalankan tanpa output yang benar-benar kamu terima."
+      ];
+    };
+    workLimitClause = (def2, runtime) => {
+      const lines2 = [];
+      if (typeof def2.maxTurns === "number") {
+        lines2.push(runtime === "claude" ? `Batas awal pekerjaan ${def2.maxTurns} turn. Renderer juga mengirim maxTurns native ke Claude; ini batas turn, bukan hard kill wall-clock.` : `Batas awal pekerjaan ${def2.maxTurns} turn adalah batas instruksional di Codex; bukan hard kill.`);
+      }
+      if (typeof def2.timeoutSeconds === "number") {
+        lines2.push(
+          `Batas waktu ${def2.timeoutSeconds} detik adalah batas instruksional. Prioritaskan putusan dan bukti; ini bukan jaminan hard kill server.`
+        );
+      }
+      return lines2;
     };
-    shellQuote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+    handoffClause = () => [
+      "Kontrak serah-terima:",
+      "- Masukan yang harus kamu gunakan: tujuan, scope, base SHA, kandidat yang diperiksa termasuk",
+      "  dirty changes, bukti sebelumnya, dan aturan verifikasi. Bila ada yang hilang, nyatakan batasnya.",
+      "- Awali laporan dengan `Status: selesai | sebagian | terhalang`.",
+      "- Laporkan simpulan, jangkar bukti, tingkat keyakinan, scope yang belum diperiksa, dan langkah",
+      "  berikutnya. Batas laporan: maksimal 12 temuan utama dan maksimal 1200 kata."
+    ];
+    READ_ONLY_TOOLS = /* @__PURE__ */ new Set(["Read", "Glob", "Grep", "Bash", "WebFetch", "WebSearch"]);
   }
 });
 
@@ -12988,8 +13266,8 @@ var init_runtime_profile = __esm({
 });
 
 // ../runner/src/codex-agent-config.ts
-import { chmodSync as chmodSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join2 } from "node:path";
+import { chmodSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
 function codexNativeAgentsSupported(version) {
   const parsed = version ? /(\d+)\.(\d+)\.(\d+)/.exec(version)?.[0] : null;
   return parsed ? cmpVersion(parsed, CODEX_NATIVE_AGENTS_MIN_CLIENT) >= 0 : false;
@@ -13010,7 +13288,7 @@ function codexNativeVersionProbe(env, codexBin3 = env.HANOMAN_CODEX_BIN ?? "code
       env.HANOMAN_SESSION_IMAGE ?? "hanoman-agent:latest",
       "/bin/sh",
       "-lc",
-      `${shellQuote2(codexBin3)} --version`
+      `${shellQuote(codexBin3)} --version`
     ]
   };
 }
@@ -13018,7 +13296,7 @@ function renderCodexAgentToml(def2, roster, options2 = {}) {
   const lines2 = [
     `name = ${tomlString(def2.name)}`,
     `description = ${tomlString(def2.description)}`,
-    `developer_instructions = ${tomlString(agentPromptOf(def2, roster))}`,
+    `developer_instructions = ${tomlString(agentPromptOf(def2, roster, "codex") + (options2.promptSuffix ?? ""))}`,
     ...def2.model ? [`model = ${tomlString(def2.model)}`] : [],
     ...def2.effort ? [`model_reasoning_effort = ${tomlString(def2.effort)}`] : [],
     ...def2.workspacePolicy === "read-only" ? ['sandbox_mode = "read-only"'] : []
@@ -13054,8 +13332,8 @@ function materializeCodexAgents(defs, tempDir, options2 = {}) {
       }))
     };
   }
-  const write2 = options2.writeFile ?? ((path, content) => writeFileSync2(path, content, { mode: 384 }));
-  const chmod3 = options2.chmod ?? chmodSync2;
+  const write2 = options2.writeFile ?? ((path, content) => writeFileSync(path, content, { mode: 384 }));
+  const chmod3 = options2.chmod ?? chmodSync;
   const successful = [];
   const warnings = [];
   for (const [index, def2] of defs.entries()) {
@@ -13066,7 +13344,7 @@ function materializeCodexAgents(defs, tempDir, options2 = {}) {
       });
       continue;
     }
-    const path = join2(tempDir, `${String(index).padStart(2, "0")}-${safeFilename(def2.name)}.toml`);
+    const path = join(tempDir, `${String(index).padStart(2, "0")}-${safeFilename(def2.name)}.toml`);
     try {
       write2(path, renderCodexAgentToml(def2, defs, options2));
       chmod3(path, 384);
@@ -13101,7 +13379,7 @@ function materializeCodexAgents(defs, tempDir, options2 = {}) {
     liveDefs
   };
 }
-var CODEX_NATIVE_AGENTS_MIN_CLIENT, shellQuote2, tomlString, tomlKey, safeFilename;
+var CODEX_NATIVE_AGENTS_MIN_CLIENT, shellQuote, tomlString, tomlKey, safeFilename;
 var init_codex_agent_config = __esm({
   "../runner/src/codex-agent-config.ts"() {
     "use strict";
@@ -13109,13 +13387,193 @@ var init_codex_agent_config = __esm({
     init_custom_agents();
     init_runtime_profile();
     CODEX_NATIVE_AGENTS_MIN_CLIENT = "0.151.0";
-    shellQuote2 = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+    shellQuote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
     tomlString = (value) => JSON.stringify(value);
     tomlKey = (value) => JSON.stringify(value);
     safeFilename = (name2) => name2.replace(/[^a-z0-9-]/gi, "-");
   }
 });
 
+// ../runner/src/agent-readonly.ts
+import { chmodSync as chmodSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join2 } from "node:path";
+function denyReadOnly(detail) {
+  return { allowed: false, reason: `Hanoman read-only policy: ${detail}` };
+}
+function tokenizeReadOnlyCommand(command) {
+  const tokens = [];
+  let token = "";
+  let quote3 = "";
+  let escaped = false;
+  let active = false;
+  for (let index = 0; index < command.length; index++) {
+    const char = command[index];
+    if (escaped) {
+      token += char;
+      escaped = false;
+      active = true;
+      continue;
+    }
+    if (quote3) {
+      if (char === quote3) quote3 = "";
+      else if (char === "\\" && quote3 === '"') escaped = true;
+      else token += char;
+      active = true;
+      continue;
+    }
+    if (char === "'" || char === '"') {
+      quote3 = char;
+      active = true;
+    } else if (char === "\\") {
+      escaped = true;
+      active = true;
+    } else if (/\s/.test(char)) {
+      if (active) {
+        tokens.push(token);
+        token = "";
+        active = false;
+      }
+    } else {
+      token += char;
+      active = true;
+    }
+  }
+  if (quote3 || escaped) return null;
+  if (active) tokens.push(token);
+  return tokens;
+}
+function evaluateReadOnlyPayload(payload, policy, environment) {
+  if (!payload || typeof payload !== "object") return denyReadOnly("payload hook tidak sah");
+  const event = payload;
+  const tool = typeof event.tool_name === "string" ? event.tool_name : typeof event.toolName === "string" ? event.toolName : "";
+  if (!tool) return denyReadOnly("nama tool tidak tersedia");
+  if (policy.directTools.includes(tool)) return { allowed: true };
+  if (policy.deniedTools.includes(tool) || tool.startsWith("mcp__")) {
+    return denyReadOnly(`tool ${tool} dapat mengubah state`);
+  }
+  if (!policy.shellTools.includes(tool)) return denyReadOnly(`tool ${tool} tidak terbukti read-only`);
+  const rawInput = event.tool_input;
+  const input = rawInput && typeof rawInput === "object" ? rawInput : {};
+  const command = typeof input.command === "string" ? input.command : typeof input.cmd === "string" ? input.cmd : "";
+  const trimmed = command.trim();
+  if (!trimmed) return denyReadOnly("perintah shell kosong atau tidak dikenal");
+  if (/\r|\n|;|&&|\|\||\||[<>]|\$|`/.test(trimmed)) {
+    return denyReadOnly("operator shell yang dapat merangkai atau menulis dilarang");
+  }
+  const tokens = tokenizeReadOnlyCommand(trimmed);
+  if (!tokens?.length) return denyReadOnly("perintah shell tidak dapat diparse dengan aman");
+  const first = tokens[0] ?? "";
+  const commandName = first.split("/").pop() ?? "";
+  if (first !== commandName) {
+    return denyReadOnly("executable ber-path tidak diizinkan; gunakan command allowlist dari PATH");
+  }
+  if (commandName === "git") {
+    const subcommand = tokens[1] ?? "";
+    if (!policy.gitCommands.includes(subcommand)) {
+      return denyReadOnly(`git ${subcommand || "<kosong>"} bukan operasi baca yang diizinkan`);
+    }
+    const args = tokens.slice(2);
+    if (args.some((arg) => arg === "--output" || arg.startsWith("--output=") || arg === "--ext-diff" || arg === "--textconv")) {
+      return denyReadOnly("opsi git dapat menulis atau menjalankan helper eksternal");
+    }
+    if (subcommand !== "status" && (!args.includes("--no-ext-diff") || !args.includes("--no-textconv"))) {
+      return denyReadOnly("git diff/show/log wajib menonaktifkan helper eksternal dan textconv");
+    }
+    return { allowed: true };
+  }
+  if (!policy.shellCommands.includes(commandName)) {
+    return denyReadOnly(`perintah ${commandName || "<kosong>"} tidak terbukti read-only`);
+  }
+  if (commandName === "rg" && environment.RIPGREP_CONFIG_PATH?.trim()) {
+    return denyReadOnly("RIPGREP_CONFIG_PATH dapat menyuntikkan preprocessor eksternal");
+  }
+  if (commandName === "rg" && tokens.slice(1).some((arg) => arg === "--pre" || arg.startsWith("--pre=") || arg === "--pre-glob" || arg.startsWith("--pre-glob=") || arg === "--hostname-bin" || arg.startsWith("--hostname-bin="))) {
+    return denyReadOnly("opsi rg dapat menjalankan helper eksternal");
+  }
+  if (commandName === "sed") {
+    const quiet = tokens[1] === "-n" || tokens[1] === "--quiet" || tokens[1] === "--silent";
+    const printOnly = /^\d+(?:,\d+)?p$/.test(tokens[2] ?? "");
+    const files = tokens.slice(3);
+    if (!quiet || !printOnly || files.length === 0 || files.some((arg) => arg.startsWith("-"))) {
+      return denyReadOnly("hanya sed -n '<baris>[,<baris>]p' <berkas> yang diizinkan");
+    }
+  }
+  return { allowed: true };
+}
+function readOnlyHookSource() {
+  return [
+    '"use strict";',
+    `const denyReadOnly = ${denyReadOnly.toString()};`,
+    `const tokenizeReadOnlyCommand = ${tokenizeReadOnlyCommand.toString()};`,
+    `const evaluate = ${evaluateReadOnlyPayload.toString()};`,
+    `const policy = ${JSON.stringify(POLICY)};`,
+    "let input = '';",
+    "process.stdin.setEncoding('utf8');",
+    "process.stdin.on('data', chunk => { input += chunk; });",
+    "process.stdin.on('end', () => {",
+    "  let payload;",
+    "  try { payload = JSON.parse(input); } catch { payload = null; }",
+    "  const decision = evaluate(payload, policy, process.env);",
+    "  if (!decision.allowed) { process.stderr.write(decision.reason + '\\n'); process.exitCode = 2; }",
+    "});",
+    "process.stdin.resume();",
+    ""
+  ].join("\n");
+}
+function writeReadOnlyHook(dir2) {
+  const path = join2(dir2, "custom-agent-readonly.cjs");
+  writeFileSync2(path, readOnlyHookSource(), { mode: 384 });
+  chmodSync2(path, 384);
+  return { path, command: `node ${shellQuote2(path)}` };
+}
+var POLICY, shellQuote2;
+var init_agent_readonly = __esm({
+  "../runner/src/agent-readonly.ts"() {
+    "use strict";
+    POLICY = {
+      directTools: ["Read", "Glob", "Grep", "WebFetch", "WebSearch"],
+      shellTools: ["Bash", "local_shell", "exec_command"],
+      deniedTools: ["Write", "Edit", "Task", "apply_patch", "spawn_agent"],
+      shellCommands: ["rg", "sed", "head", "tail", "wc", "ls"],
+      gitCommands: ["diff", "show", "status", "log"]
+    };
+    shellQuote2 = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+  }
+});
+
+// ../runner/src/agent-definition.ts
+import { createHash } from "node:crypto";
+function agentDefinitionHash(def2, roster, runtime, inherited = {}) {
+  const options2 = { readOnlyHookCommand: "<hanoman-read-only-hook>", promptSuffix: inherited.promptSuffix };
+  const liveRoster = [def2, ...roster.filter((entry) => entry.name !== def2.name)];
+  const native = runtime === "codex" ? renderCodexAgentToml(def2, liveRoster, options2) : JSON.parse(renderAgentsJson(liveRoster, options2))[def2.name];
+  if (typeof native !== "string") native.tools.sort();
+  return createHash("sha256").update(JSON.stringify({
+    version: 1,
+    runtime,
+    native,
+    activation: def2.activation ?? "always",
+    model: def2.model ?? inherited.model ?? null,
+    effort: def2.effort ?? inherited.effort ?? null,
+    readOnlyPolicy: def2.workspacePolicy === "read-only" ? readOnlyHookSource() : null
+  })).digest("hex");
+}
+var init_agent_definition = __esm({
+  "../runner/src/agent-definition.ts"() {
+    "use strict";
+    init_custom_agents();
+    init_codex_agent_config();
+    init_agent_readonly();
+  }
+});
+
+// ../runner/src/custom-agent-eval-evidence.ts
+var init_custom_agent_eval_evidence = __esm({
+  "../runner/src/custom-agent-eval-evidence.ts"() {
+    "use strict";
+  }
+});
+
 // ../runner/src/custom-agent-eval.ts
 var init_custom_agent_eval = __esm({
   "../runner/src/custom-agent-eval.ts"() {
@@ -13125,6 +13583,9 @@ var init_custom_agent_eval = __esm({
     init_codex_settings();
     init_custom_agents();
     init_settings2();
+    init_agent_readonly();
+    init_agent_definition();
+    init_custom_agent_eval_evidence();
   }
 });
 
@@ -13646,6 +14107,7 @@ var init_src2 = __esm({
     init_codex_settings();
     init_agent_cli();
     init_custom_agents();
+    init_agent_definition();
     init_agent_readonly();
     init_codex_agent_config();
     init_custom_agent_eval();
@@ -14762,14 +15224,14 @@ var init_session_sandbox = __esm({
 });
 
 // src/services/session-event-spool.ts
-import { tmpdir } from "node:os";
 import { join as join9 } from "node:path";
 var sessionEventSpoolRoot, sessionEventDir;
 var init_session_event_spool = __esm({
   "src/services/session-event-spool.ts"() {
     "use strict";
-    sessionEventSpoolRoot = () => join9(tmpdir(), "hanoman-session-events");
-    sessionEventDir = (sessionId2) => join9(sessionEventSpoolRoot(), sessionId2);
+    init_src2();
+    sessionEventSpoolRoot = (env = process.env) => join9(resolveHome(env), "session-events");
+    sessionEventDir = (sessionId2, env = process.env) => join9(sessionEventSpoolRoot(env), sessionId2);
   }
 });
 
@@ -14780,7 +15242,7 @@ import { createRequire } from "node:module";
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { chmodSync as chmodSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync6, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync5 } from "node:fs";
 import { dirname as dirname7 } from "node:path";
-import { tmpdir as tmpdir2 } from "node:os";
+import { tmpdir } from "node:os";
 function noTtyPromptEnv() {
   const path = askpassDenyPath();
   mkdirSync5(dirname7(path), { recursive: true, mode: 448 });
@@ -14862,7 +15324,8 @@ function parsePanes(out4) {
       activity,
       eventHook,
       created,
-      agentRoster
+      agentRoster,
+      launchClass
     ] = line.split("	");
     if (!n2?.startsWith(PREFIX)) return [];
     const exited = dead === "1";
@@ -14893,7 +15356,8 @@ function parsePanes(out4) {
       startedAt: Number(created) || 0,
       // SPEC-909 · ADR-0146 · sesi yang lahir sebelum pembaruan tak punya opsi ini → false.
       eventHook: eventHook === "1",
-      agentRoster: parseAgentRoster(agentRoster)
+      agentRoster: parseAgentRoster(agentRoster),
+      launchClass: launchClass === "agent" || launchClass === "terminal" ? launchClass : void 0
     }];
   });
 }
@@ -14909,6 +15373,7 @@ function parseAgentRoster(value) {
         name: row.name,
         ...typeof row.id === "string" ? { id: row.id } : {},
         ...typeof row.model === "string" ? { model: row.model } : {},
+        ...typeof row.definitionHash === "string" && /^[a-f0-9]{64}$/.test(row.definitionHash) ? { definitionHash: row.definitionHash } : {},
         ...typeof row.timeoutSeconds === "number" ? { timeoutSeconds: row.timeoutSeconds } : {}
       }];
     });
@@ -14923,7 +15388,7 @@ function sessionEventEnv(sessionId2, env = process.env) {
     HANOMAN_SESSION_ID: sessionId2,
     HANOMAN_EVENT_URL: `http://127.0.0.1:${port2}/api/session-events`,
     HANOMAN_EVENT_TOKEN: sessionEventToken(sessionId2),
-    HANOMAN_EVENT_DIR: sessionEventDir(sessionId2),
+    HANOMAN_EVENT_DIR: sessionEventDir(sessionId2, env),
     ...host2 ? { HANOMAN_EVENT_HOST: host2 } : {}
   };
 }
@@ -14957,7 +15422,7 @@ function sessionKind(o, projectId, cwd) {
   if (projectId.startsWith("telegram:")) return "telegram";
   if (projectId.startsWith("vps")) return "vps";
   if (o.command) return "shell";
-  if (cwd.includes("/.worktrees/")) return "worktree";
+  if (/[\\/]\.worktrees[\\/]/.test(cwd)) return "worktree";
   return "terminal";
 }
 function captureTranscript(id2) {
@@ -15166,11 +15631,25 @@ function createSession(projectId, cwd, opts = {}) {
   if (opts.flow) tmux("set-option", "-t", name(id2), "@hanoman_flow", opts.flow);
   if (opts.branch) tmux("set-option", "-t", name(id2), "@hanoman_branch", opts.branch);
   tmux("set-option", "-t", name(id2), "@hanoman_agent", agent);
+  const kind = sessionKind({ ...opts, id: id2 }, projectId, cwd);
+  tmux(
+    "set-option",
+    "-t",
+    name(id2),
+    "@hanoman_launch_class",
+    opts.command || kind === "terminal" ? "terminal" : "agent"
+  );
   if (liveAgentDefs.length > 0) {
+    const inherited = {
+      model: opts.model,
+      effort: agent === "codex" && opts.model && opts.effort ? coerceCodexEffort(opts.model, opts.effort) : opts.effort
+    };
     const roster = liveAgentDefs.map((def2) => ({
       ...def2.id ? { id: def2.id } : {},
       name: def2.name,
-      ...def2.model ? { model: def2.model } : {},
+      ...def2.model ?? inherited.model ? { model: def2.model ?? inherited.model } : {},
+      // Native files were rendered with customDefs, even if another Codex file failed to write.
+      definitionHash: agentDefinitionHash(def2, customDefs, agent, inherited),
       ...def2.timeoutSeconds ? { timeoutSeconds: def2.timeoutSeconds } : {}
     }));
     tmux("set-option", "-t", name(id2), "@hanoman_agent_roster", JSON.stringify(roster));
@@ -15185,7 +15664,7 @@ function createSession(projectId, cwd, opts = {}) {
     projectId,
     specId: opts.specId,
     flow: opts.flow,
-    kind: sessionKind({ id: id2, specId: opts.specId, flow: opts.flow, command: opts.command }, projectId, cwd),
+    kind,
     agent,
     model: opts.model,
     effort: opts.effort,
@@ -15482,6 +15961,7 @@ var init_pty = __esm({
     init_session_event_token();
     init_session_sandbox();
     init_session_event_spool();
+    init_src2();
     init_session_event_spool();
     socket = () => effectiveStr("HANOMAN_TMUX_SOCKET") ?? "hanoman";
     PREFIX = "hanoman-";
@@ -15525,18 +16005,18 @@ var init_pty = __esm({
     rootBypassEnv = (uid = process.getuid?.()) => uid === 0 ? { IS_SANDBOX: "1" } : {};
     frame = (f) => JSON.stringify(f);
     name = (id2) => PREFIX + id2;
-    promptFilePath = (id2) => `${tmpdir2()}/hanoman-prompts/${id2}`;
-    goalGatePath = (id2) => `${tmpdir2()}/hanoman-goal-gates/${id2}.sh`;
-    goalStatePath = (id2) => `${tmpdir2()}/hanoman-goal-gates/${id2}.count`;
-    agentTempDir = (id2) => `${tmpdir2()}/hanoman-agents/${id2}`;
+    promptFilePath = (id2) => `${tmpdir()}/hanoman-prompts/${id2}`;
+    goalGatePath = (id2) => `${tmpdir()}/hanoman-goal-gates/${id2}.sh`;
+    goalStatePath = (id2) => `${tmpdir()}/hanoman-goal-gates/${id2}.count`;
+    agentTempDir = (id2) => `${tmpdir()}/hanoman-agents/${id2}`;
     agentsFilePath = (id2) => `${agentTempDir(id2)}/claude.json`;
-    askpassDenyPath = () => `${tmpdir2()}/hanoman-askpass/deny.sh`;
+    askpassDenyPath = () => `${tmpdir()}/hanoman-askpass/deny.sh`;
     ASKPASS_DENY = `#!/bin/sh
 echo "hanoman: tak ada manusia di pane ini \u2014 permintaan ketikan ditolak: $1" >&2
 echo "hanoman: buka kuncinya di luar sesi (mis. ssh-add ~/.ssh/id_rsa), lalu ulangi." >&2
 exit 1
 `;
-    NO_SERVER = /no server running|error connecting to/i;
+    NO_SERVER = /^(?:no server running on .+|error connecting to .+ \((?:No such file or directory|Connection refused)\))$/i;
     TmuxError = class extends Error {
       constructor(message, noServer) {
         super(message);
@@ -15563,7 +16043,8 @@ exit 1
       "#{window_activity}",
       "#{@hanoman_event_hook}",
       "#{session_created}",
-      "#{@hanoman_agent_roster}"
+      "#{@hanoman_agent_roster}",
+      "#{@hanoman_launch_class}"
     ].join("	");
     toSessionInfo = ({
       id: id2,
@@ -16434,6 +16915,59 @@ var init_settings3 = __esm({
   }
 });
 
+// src/services/scheduler/config.ts
+async function getScheduler() {
+  return (await getSetting()).scheduler;
+}
+async function setScheduler(next) {
+  const cur = await getSetting();
+  const data = { ...cur, scheduler: next };
+  await prisma.setting.upsert({ where: { id: 1 }, update: { data }, create: { id: 1, data } });
+  return next;
+}
+var init_config3 = __esm({
+  "src/services/scheduler/config.ts"() {
+    "use strict";
+    init_db();
+    init_settings3();
+  }
+});
+
+// src/services/session-launch-gate.ts
+import { cpus, loadavg, platform } from "node:os";
+async function createAgentSession(projectId, cwd, opts = {}) {
+  const id2 = opts.id ?? (opts.specId ? sessionIdForSpec(opts.specId) : void 0);
+  return withSessionAdmission(
+    { id: id2 },
+    async () => createSession(projectId, cwd, opts),
+    (pane) => ({ ...pane, reused: true })
+  );
+}
+async function createOperatorSession(projectId, cwd, opts = {}) {
+  return withSessionAdmission(
+    { id: opts.id, exempt: true },
+    async () => createSession(projectId, cwd, opts),
+    (pane) => pane
+  );
+}
+var readHostLoad, gate, withSessionAdmission, currentLaunchStatus;
+var init_session_launch_gate = __esm({
+  "src/services/session-launch-gate.ts"() {
+    "use strict";
+    init_pty();
+    init_config3();
+    init_session_admission();
+    readHostLoad = () => ({ platform: platform(), loadAverage: loadavg()[0] ?? NaN, cores: cpus().length });
+    gate = createLaunchGate({
+      listPanes: () => listPanesAsync(),
+      config: () => getScheduler(),
+      host: () => readHostLoad()
+    });
+    withSessionAdmission = gate.run;
+    currentLaunchStatus = (panes, config) => launchStatus(panes, config, readHostLoad());
+  }
+});
+
 // src/services/codex-trust.ts
 import { appendFileSync, mkdirSync as mkdirSync7, readFileSync as readFileSync8, realpathSync as realpathSync3 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
@@ -17348,7 +17882,7 @@ var require_src = __commonJS({
 });
 
 // src/services/agent-token.ts
-import { randomBytes as randomBytes2, createHash, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
+import { randomBytes as randomBytes2, createHash as createHash2, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 function toAgentTokenView(t) {
   return {
     id: t.id,
@@ -17414,7 +17948,7 @@ var init_agent_token = __esm({
   "src/services/agent-token.ts"() {
     "use strict";
     init_db();
-    hash = (token) => createHash("sha256").update(token).digest("hex");
+    hash = (token) => createHash2("sha256").update(token).digest("hex");
   }
 });
 
@@ -17544,7 +18078,7 @@ function telegramReloadNeeded(before2, after) {
   const strip2 = ({ engine: _engine, ...rest }) => rest;
   return JSON.stringify(strip2(before2)) !== JSON.stringify(strip2(after));
 }
-var init_config3 = __esm({
+var init_config4 = __esm({
   "src/services/telegram/config.ts"() {
     "use strict";
     init_src();
@@ -17554,7 +18088,7 @@ var init_config3 = __esm({
 });
 
 // src/services/telegram/protocol.ts
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 function normalizeTelegramCommand(text) {
   const clean2 = text.trim();
   const match = clean2.match(/^\/([a-z0-9_]+)(?:@[a-z0-9_]+)?(?:\s+([\s\S]*))?$/i);
@@ -17621,7 +18155,7 @@ function parseTelegramUpdate(update2, allowlist, maxText = 12e3) {
   };
 }
 function inboundDigest(input) {
-  return createHash2("sha256").update(`${input.updateId}\0${input.chatId}\0${input.userId}\0${input.kind}\0${input.text}`, "utf8").digest("hex");
+  return createHash3("sha256").update(`${input.updateId}\0${input.chatId}\0${input.userId}\0${input.kind}\0${input.text}`, "utf8").digest("hex");
 }
 function sanitizeTelegramOutput(text, exactSecrets = []) {
   let clean2 = text.replace(ANSI, "").replace(CONTROLS, "");
@@ -17788,7 +18322,7 @@ var init_typing = __esm({
 });
 
 // src/services/telegram/gateway.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 var digestRaw, TelegramGateway;
 var init_gateway = __esm({
   "src/services/telegram/gateway.ts"() {
@@ -17797,7 +18331,7 @@ var init_gateway = __esm({
     init_protocol();
     init_runtime();
     init_typing();
-    digestRaw = (update2) => createHash3("sha256").update(JSON.stringify(update2)).digest("hex");
+    digestRaw = (update2) => createHash4("sha256").update(JSON.stringify(update2)).digest("hex");
     TelegramGateway = class {
       constructor(deps) {
         this.deps = deps;
@@ -18104,14 +18638,14 @@ var init_engine_command = __esm({
 });
 
 // src/services/telegram/session.ts
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash5 } from "node:crypto";
 var chatHash, telegramOperatorSessionId, formatTelegramTurn, TelegramSessionCoordinator;
 var init_session = __esm({
   "src/services/telegram/session.ts"() {
     "use strict";
     init_src2();
     init_engine_command();
-    chatHash = (chatId) => createHash4("sha256").update(chatId).digest("hex").slice(0, 16);
+    chatHash = (chatId) => createHash5("sha256").update(chatId).digest("hex").slice(0, 16);
     telegramOperatorSessionId = (chatId) => `telegram-${chatHash(chatId)}`;
     formatTelegramTurn = (input) => `[Telegram update ${input.updateId} \xB7 chat ${input.chatId} \xB7 kind ${input.kind}]
 ${input.text}`;
@@ -18138,7 +18672,7 @@ ${input.text}`;
         }
         if (!context) throw new Error("gagal membuat binding chat Telegram");
         const sessionId2 = telegramOperatorSessionId(input.chatId);
-        const live = this.deps.port.getSession(sessionId2);
+        const live = await this.deps.port.getSession(sessionId2);
         if (live && !live.exited) {
           if (!await this.deps.port.sendToPane(sessionId2, formatTelegramTurn(input))) {
             throw new Error("pane operator tidak menerima steer");
@@ -18160,7 +18694,7 @@ ${input.text}`;
           summary: context.summary,
           memories: context.memories
         });
-        const born = this.deps.port.createSession(projectId, cwd, {
+        const born = await this.deps.port.createSession(projectId, cwd, {
           id: sessionId2,
           prompt,
           agent: engine.agent,
@@ -18173,8 +18707,11 @@ ${input.text}`;
           }
         });
         if (born.id !== sessionId2 || born.exited) throw new Error("pane operator gagal lahir");
+        if (born.reused && !await this.deps.port.sendToPane(sessionId2, formatTelegramTurn(input))) {
+          throw new Error("pane operator tidak menerima steer");
+        }
         await this.deps.store.bindSession(input.chatId, sessionId2);
-        return { sessionId: sessionId2, created: true };
+        return { sessionId: sessionId2, created: !born.reused };
       }
       /**
        * SPEC-492 · empat command runtime tak pernah menyentuh pane: ia soal transport, bukan isi
@@ -18191,7 +18728,7 @@ ${input.text}`;
         const cmd = parseEngineCommand(input.text, ctx);
         if (!cmd) return null;
         const sessionId2 = telegramOperatorSessionId(input.chatId);
-        const live = this.deps.port.getSession(sessionId2);
+        const live = await this.deps.port.getSession(sessionId2);
         const alive = Boolean(live && !live.exited);
         let text;
         if (cmd.kind === "show") {
@@ -18515,7 +19052,7 @@ function parseTelegramAllowedUserIds(raw) {
 function telegramSessionDeps(input) {
   return {
     store: input.store,
-    port: { getSession, createSession, sendToPane, killSession },
+    port: { getSession: getSessionAsync, createSession: createAgentSession, sendToPane, killSession },
     // SPEC-492 · BUKAN `sessionAgentDefaults`: sesi operator Telegram sebagian besar membaca API
     // lalu merangkum, bukan menulis kode, jadi ia boleh punya runtime/model/effort sendiri.
     defaults: telegramAgentDefaults,
@@ -18652,8 +19189,9 @@ var init_bootstrap = __esm({
     init_codex_trust();
     init_settings3();
     init_pty();
+    init_session_launch_gate();
     init_client();
-    init_config3();
+    init_config4();
     init_gateway();
     init_session();
     init_store();
@@ -21149,7 +21687,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes11, createHash: createHash12 } = __require("crypto");
+    var { randomBytes: randomBytes11, createHash: createHash13 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -21817,7 +22355,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket2, socket2, "Invalid Upgrade header");
           return;
         }
-        const digest2 = createHash12("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash13("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest2) {
           abortHandshake(websocket2, socket2, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -22186,7 +22724,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash12 } = __require("crypto");
+    var { createHash: createHash13 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -22493,7 +23031,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket2, 503);
-        const digest2 = createHash12("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash13("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -23047,15 +23585,15 @@ var init_sync_client = __esm({
 // src/services/agent-tool-catalog.ts
 import { readFileSync as readFileSync17 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 function mcpServerNames(repoDir) {
   const names = [];
-  const claudeJson = readJson2(join31(home(), ".claude.json"));
+  const claudeJson = readJson2(join32(home(), ".claude.json"));
   names.push(...serversOf(claudeJson));
   if (repoDir) {
     const projects = claudeJson?.projects;
     if (projects && typeof projects === "object") names.push(...serversOf(projects[repoDir]));
-    names.push(...serversOf(readJson2(join31(repoDir, ".mcp.json"))));
+    names.push(...serversOf(readJson2(join32(repoDir, ".mcp.json"))));
   }
   names.push(...codexServers());
   return [...new Set(names.filter(Boolean))].sort((a, b) => a.localeCompare(b));
@@ -23084,7 +23622,7 @@ var init_agent_tool_catalog = __esm({
     codexServers = () => {
       let text;
       try {
-        text = readFileSync17(join31(home(), ".codex", "config.toml"), "utf8");
+        text = readFileSync17(join32(home(), ".codex", "config.toml"), "utf8");
       } catch {
         return [];
       }
@@ -23100,7 +23638,7 @@ var init_agent_tool_catalog = __esm({
 });
 
 // src/services/builtin-agents.ts
-import { createHash as createHash9 } from "node:crypto";
+import { createHash as createHash10 } from "node:crypto";
 async function seedBuiltinAgents() {
   try {
     const setting = await getSetting();
@@ -23190,7 +23728,7 @@ var init_builtin_agents2 = __esm({
     init_settings3();
     init_tombstone();
     init_sync_notify();
-    digest = (parts) => createHash9("sha256").update(parts.join(" ")).digest("hex").slice(0, 16);
+    digest = (parts) => createHash10("sha256").update(parts.join(" ")).digest("hex").slice(0, 16);
     legacyFingerprint = (name2, description, instructions, tools) => digest([name2, description, instructions, [...tools].join(",")]);
     fingerprint = (a) => digest([
       a.name,
@@ -23224,37 +23762,13 @@ __export(custom_agents_exports, {
   unknownMentions: () => unknownMentions,
   validateGraph: () => validateGraph
 });
-function smartBuiltinSelected(row, context) {
-  switch (row.name) {
-    case "scout":
-      return hasPhase(context, "Plan") || hasPhase(context, "Execute") || hasPhase(context, "Audit") || context.changedFiles.length === 0;
-    case "blast-radius":
-      return hasPhase(context, "Execute") || hasPhase(context, "Audit") || context.changedFiles.length > 0;
-    case "security-reviewer":
-      return (hasPhase(context, "Execute") || hasPhase(context, "Audit")) && touchesExternalInput(context);
-    case "spec-auditor":
-      return hasPhase(context, "Plan") || hasPhase(context, "Execute");
-    case "dep-auditor":
-      return touchesDependency(context.changedFiles);
-    case "root-causer":
-      return hasPhase(context, "Audit");
-    case "qa-verifier":
-      return context.runtime === "claude" && hasPhase(context, "Execute") && workspacePolicyOf(row.workspacePolicy) === "isolated-worktree" && touchesExecutableWork(context.changedFiles);
-    case "edge-case-hunter":
-      return context.runtime === "claude" && hasPhase(context, "Execute") && workspacePolicyOf(row.workspacePolicy) === "isolated-worktree";
-    default:
-      return true;
-  }
-}
 function selectAgentRows(rows, context) {
   return rows.filter((row) => {
     if (!row.enabled) return false;
     const runtime = runtimeOf(row.runtime);
     if (runtime !== null && runtime !== context.runtime) return false;
     if (workspacePolicyOf(row.workspacePolicy) === "isolated-worktree" && context.runtime !== "claude") return false;
-    if (activationOf(row.activation) === "always") return true;
-    const builtin = row.projectId === null && BUILTIN_AGENT_NAMES.includes(row.name);
-    return builtin ? smartBuiltinSelected(row, context) : true;
+    return true;
   });
 }
 function currentCustomAgentRuntimeSupport() {
@@ -23369,7 +23883,7 @@ async function installCustomAgents() {
     codexSupportRefreshTimer.unref();
   }
 }
-var phasesOf, hasPhase, touchesDependency, touchesExternalInput, touchesExecutableWork, cache4, codexNativeSupport, codexSupportRefreshTimer, codexSupportRefreshTail, repoDirCache, asCustomAgent, defaultCodexSupportProbe;
+var cache4, codexNativeSupport, codexSupportRefreshTimer, codexSupportRefreshTail, repoDirCache, asCustomAgent, defaultCodexSupportProbe;
 var init_custom_agents2 = __esm({
   "src/services/custom-agents.ts"() {
     "use strict";
@@ -23380,14 +23894,6 @@ var init_custom_agents2 = __esm({
     init_agent_tool_catalog();
     init_builtin_agents2();
     init_codex_version();
-    phasesOf = (flow) => flow ? PIPELINES[flow] : [];
-    hasPhase = (context, name2) => phasesOf(context.flow).includes(name2);
-    touchesDependency = (files) => files.some((path) => /(^|\/)(?:package\.json|pnpm-lock\.yaml|package-lock\.json|yarn\.lock|bun\.lockb?|Cargo\.(?:toml|lock)|go\.(?:mod|sum)|requirements[^/]*\.txt|pyproject\.toml)$/i.test(path));
-    touchesExternalInput = (context) => {
-      const surface = [context.prompt ?? "", ...context.changedFiles].join("\n");
-      return /(?:^|[\W_/.-])(route|routes|handler|auth|oauth|api|cli|config|filesystem|upload|webhook|input)(?:$|[\W_/.-])/i.test(surface);
-    };
-    touchesExecutableWork = (files) => files.some((path) => !/(^|\/)(?:docs?|internal\/docs)\//i.test(path) && /(?:\.(?:[cm]?[jt]sx?|py|go|rs|java|rb|php)|(?:^|\/)test(?:s)?\/)/i.test(path));
     cache4 = [];
     codexNativeSupport = { version: null, ok: false };
     codexSupportRefreshTimer = null;
@@ -26575,7 +27081,7 @@ var require_multipart2 = __commonJS({
           parts = this.parts(options3);
         }
         this.savedRequestFiles = [];
-        const tmpdir8 = options3?.tmpdir || os.tmpdir();
+        const tmpdir7 = options3?.tmpdir || os.tmpdir();
         this.tmpUploads = [];
         let i = 0;
         for await (const part of parts) {
@@ -26583,7 +27089,7 @@ var require_multipart2 = __commonJS({
           if (!part.file) {
             continue;
           }
-          const filepath = path.join(tmpdir8, generateId() + path.extname(part.filename || "file" + i++));
+          const filepath = path.join(tmpdir7, generateId() + path.extname(part.filename || "file" + i++));
           const target2 = createWriteStream2(filepath);
           try {
             this.tmpUploads.push(filepath);
@@ -26691,12 +27197,13 @@ var require_multipart2 = __commonJS({
 });
 
 // src/app.ts
+init_session_admission();
 import Fastify from "fastify";
 import fastifyStatic from "@fastify/static";
 import websocket from "@fastify/websocket";
 import cookie from "@fastify/cookie";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
-import { dirname as dirname14 } from "node:path";
+import { dirname as dirname15 } from "node:path";
 import { existsSync as existsSync18 } from "node:fs";
 
 // src/web-dir.ts
@@ -27255,8 +27762,8 @@ async function projects_default(app2) {
     if (await prisma.project.findUnique({ where: { id: id2 } }))
       return reply.code(409).send({ error: `project "${id2}" sudah ada` });
     if (b.handledBy?.length) {
-      const gate = await checkHandledBy(b.handledBy);
-      if (!gate.ok) return reply.code(gate.code).send({ error: gate.error });
+      const gate2 = await checkHandledBy(b.handledBy);
+      if (!gate2.ok) return reply.code(gate2.code).send({ error: gate2.error });
     }
     if (b.kind === "from-scratch" && b.repoDir) {
       try {
@@ -27286,12 +27793,12 @@ async function projects_default(app2) {
     if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
     if (!await prisma.project.findUnique({ where: { id: id2 } })) return reply.code(404).send({ error: "not found" });
     if ("autoMerge" in parsed.data) {
-      const gate = await checkAutoMerge(await resolveRepoDir(id2), parsed.data.autoMerge);
-      if (!gate.ok) return reply.code(gate.code).send({ error: gate.error });
+      const gate2 = await checkAutoMerge(await resolveRepoDir(id2), parsed.data.autoMerge);
+      if (!gate2.ok) return reply.code(gate2.code).send({ error: gate2.error });
     }
     if (parsed.data.handledBy?.length) {
-      const gate = await checkHandledBy(parsed.data.handledBy);
-      if (!gate.ok) return reply.code(gate.code).send({ error: gate.error });
+      const gate2 = await checkHandledBy(parsed.data.handledBy);
+      if (!gate2.ok) return reply.code(gate2.code).send({ error: gate2.error });
     }
     const data = { ...parsed.data };
     if ("autoMerge" in data && data.autoMerge === null) data.autoMerge = Prisma.DbNull;
@@ -27552,6 +28059,7 @@ async function pullIntoCurrent(repoDir, source, opts = {}) {
 
 // src/routes/specs.ts
 init_pty();
+init_session_launch_gate();
 init_settings3();
 init_codex_trust();
 init_db();
@@ -27560,7 +28068,7 @@ init_db();
 import { execFile as execFile5 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
 import { mkdtemp, copyFile, rm as rm2 } from "node:fs/promises";
-import { tmpdir as tmpdir3 } from "node:os";
+import { tmpdir as tmpdir2 } from "node:os";
 import { join as join12, resolve as resolve11 } from "node:path";
 var exec4 = promisify4(execFile5);
 var GIT3 = { maxBuffer: 1 << 24 };
@@ -27568,7 +28076,7 @@ var MAX = 256 * 1024;
 var worktreeDir = (repoDir, specId) => join12(repoDir, ".worktrees", specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_"));
 async function withTempIndex(wt, fn) {
   const idx = (await exec4("git", ["rev-parse", "--git-path", "index"], { cwd: wt, ...GIT3 })).stdout.trim();
-  const dir2 = await mkdtemp(join12(tmpdir3(), "hanoman-idx-"));
+  const dir2 = await mkdtemp(join12(tmpdir2(), "hanoman-idx-"));
   const tmp = join12(dir2, "index");
   await copyFile(resolve11(wt, idx), tmp);
   const env = { ...process.env, GIT_INDEX_FILE: tmp };
@@ -27846,13 +28354,15 @@ var prodReaperDeps = {
 var pending = /* @__PURE__ */ new Map();
 var sessionIdOf = (entry) => entry.split(".")[0] ?? entry;
 function releaseWorktree(repoDir, cwd, projectId, deps = prodReaperDeps) {
-  let path;
   try {
-    path = realGit.trashWorktree(repoDir, cwd);
+    return releaseWorktreeToTrash(repoDir, cwd, projectId, deps);
   } catch {
     realGit.removeWorktree(repoDir, cwd);
     return null;
   }
+}
+function releaseWorktreeToTrash(repoDir, cwd, projectId, deps = prodReaperDeps) {
+  const path = (deps.trash ?? realGit.trashWorktree)(repoDir, cwd);
   if (!path) return null;
   const entry = path.slice(trashDirOf(repoDir).length + 1);
   pending.set(path, { path, repoDir, projectId, entry, sessionId: sessionIdOf(entry), since: Date.now() });
@@ -35586,8 +36096,8 @@ ${item.context}` : item.context;
       depIds = d.ids;
     }
     if ("autoMerge" in parsed.data) {
-      const gate = await checkAutoMerge(await resolveRepoDir(spec.projectId), autoMerge);
-      if (!gate.ok) return reply.code(gate.code).send({ error: gate.error });
+      const gate2 = await checkAutoMerge(await resolveRepoDir(spec.projectId), autoMerge);
+      if (!gate2.ok) return reply.code(gate2.code).send({ error: gate2.error });
     }
     if (stage !== void 0) {
       if (STAGES.indexOf(stage) >= STAGES.indexOf(spec.stage))
@@ -35623,10 +36133,10 @@ ${item.context}` : item.context;
     if (!spec) return reply.code(404).send({ error: "not found" });
     const to = parsed.data.source;
     if (to === spec.source) return reply.code(400).send({ error: "source tak berubah" });
-    const gate = checkSourceChange(spec, to, parsed.data.payload);
-    if (!gate.ok) return reply.code(gate.code).send({ error: gate.error });
+    const gate2 = checkSourceChange(spec, to, parsed.data.payload);
+    if (!gate2.ok) return reply.code(gate2.code).send({ error: gate2.error });
     let plan = null;
-    if (gate.reset) {
+    if (gate2.reset) {
       const live = listSessions().find((s2) => s2.specId === id2 && !s2.exited);
       if (live)
         return reply.code(409).send({ error: "session-live", session: { id: live.id, agent: live.agent } });
@@ -35646,15 +36156,15 @@ ${item.context}` : item.context;
     );
     const { priority, objective } = deriveSpecFields(
       to,
-      gate.payload,
-      gate.payload.priority ?? spec.priority
+      gate2.payload,
+      gate2.payload.priority ?? spec.priority
     );
     if (plan) await applySpecReset(spec, plan);
     const updated = await prisma.spec.update({
       where: { id: id2 },
       data: {
         source: to,
-        payload: gate.payload,
+        payload: gate2.payload,
         priority,
         objective,
         sourceHistory: history,
@@ -35802,7 +36312,7 @@ ${item.context}` : item.context;
       CODE_STYLE_CLAUSE,
       `Backlog item ${spec.id} \u2014 ${spec.title}.`
     ].join("\n\n");
-    const s2 = createSession(spec.projectId, r.worktree, {
+    const s2 = await createAgentSession(spec.projectId, r.worktree, {
       id: `merge-${spec.id.toLowerCase().replace(/[^a-z0-9_-]/g, "_")}`,
       specId: spec.id,
       model,
@@ -35867,7 +36377,7 @@ init_src();
 init_db();
 init_settings3();
 init_bootstrap();
-init_config3();
+init_config4();
 async function settings_default(app2) {
   app2.get("/settings", async () => getSetting());
   app2.put("/settings", async (req, reply) => {
@@ -36050,7 +36560,7 @@ async function docs_default(app2) {
 
 // src/routes/ide.ts
 init_src2();
-import { basename as basename5, resolve as resolve16 } from "node:path";
+import { basename as basename6 } from "node:path";
 import { execFile as execFile12, spawn as spawn3 } from "node:child_process";
 import { promisify as promisify11 } from "node:util";
 
@@ -36117,6 +36627,7 @@ async function repoOf(id2) {
 
 // src/routes/ide.ts
 init_pty();
+init_session_launch_gate();
 init_settings3();
 init_codex_trust();
 
@@ -36294,7 +36805,7 @@ async function deleteBranches(repoDir, names, opts) {
 import { execFile as execFile11 } from "node:child_process";
 import { realpathSync as realpathSync4 } from "node:fs";
 import { stat } from "node:fs/promises";
-import { basename as basename4, join as join17, resolve as resolve15, sep as sep4 } from "node:path";
+import { basename as basename4, dirname as dirname9, join as join17, resolve as resolve15, sep as sep4 } from "node:path";
 import { promisify as promisify10 } from "node:util";
 var exec10 = promisify10(execFile11);
 var GIT7 = { timeout: 6e4, maxBuffer: 1 << 24, encoding: "utf8" };
@@ -36302,7 +36813,7 @@ async function out3(cwd, args) {
   try {
     return (await exec10("git", args, { cwd, ...GIT7 })).stdout;
   } catch {
-    return "";
+    return null;
   }
 }
 function parseWorktreePorcelain(text) {
@@ -36334,9 +36845,18 @@ var real = (p3) => {
   try {
     return realpathSync4(p3);
   } catch {
-    return resolve15(p3);
+    const path = resolve15(p3);
+    const parent = dirname9(path);
+    return parent === path ? path : join17(real(parent), basename4(path));
   }
 };
+function hasWorktreeSession(path, sessionId2, sessions) {
+  const target2 = real(path);
+  return sessions.some((s2) => {
+    const current = real(s2.cwd);
+    return s2.id === sessionId2 || current === target2 || current.startsWith(target2 + sep4);
+  });
+}
 async function bornAt(path) {
   try {
     const st = await stat(join17(path, ".git"));
@@ -36352,14 +36872,22 @@ async function listWorktrees(repoDir, inputs) {
   const baseReal = real(base2);
   const text = await out3(base2, ["worktree", "list", "--porcelain"]);
   const trash = resolve15(baseReal, ".worktrees", ".trash");
-  const sessions = new Map([...inputs.sessions].map(([cwd, s2]) => [real(cwd), s2]));
+  const sessions = new Map(inputs.sessions.map((s2) => [real(s2.cwd), { id: s2.id, specId: s2.specId }]));
+  const history = /* @__PURE__ */ new Map();
+  for (const h of inputs.history ?? []) {
+    const path = real(h.cwd);
+    const previous = history.get(path);
+    if (!previous || h.startedAt > previous.startedAt) history.set(path, h);
+  }
   const rows = [];
-  for (const w of parseWorktreePorcelain(text)) {
+  for (const w of parseWorktreePorcelain(text ?? "")) {
     const path = resolve15(w.path);
     if (path === trash || path.startsWith(trash + sep4)) continue;
     const name2 = basename4(path);
     const deletable = ownsWorktree(baseReal, path);
     const spec = inputs.specs.get(name2);
+    const latest = history.get(path);
+    const orphan = latest && (!latest.endedAt || latest.endedReason === "reconciled") && !hasWorktreeSession(path, latest.sessionId, inputs.sessions) ? { historyId: latest.id, sessionId: latest.sessionId } : void 0;
     rows.push({
       path,
       name: name2,
@@ -36371,7 +36899,8 @@ async function listWorktrees(repoDir, inputs) {
       blocked: deletable ? null : path === baseReal ? "checkout project" : "di luar .worktrees project ini",
       spec: spec ? { id: spec.id, stage: spec.stage } : null,
       session: sessions.get(path) ?? null,
-      createdAt: await bornAt(path)
+      createdAt: await bornAt(path),
+      ...orphan ? { orphan } : {}
     });
   }
   rows.sort((a, b) => Number(a.deletable) - Number(b.deletable) || a.name.localeCompare(b.name));
@@ -36402,15 +36931,39 @@ async function diskBytes(w) {
 async function dirtyCount(w) {
   if (w.prunable) return 0;
   const s2 = await out3(w.path, ["status", "--porcelain"]);
-  return s2.split("\n").filter((l) => l.trim()).length;
+  return s2 === null ? null : s2.split("\n").filter((l) => l.trim()).length;
 }
 async function orphanCount(repoDir, w) {
-  if (!w.head) return 0;
+  if (!w.head) return null;
   const args = ["rev-list", "--count", w.head, "--not"];
   if (w.branch) args.push(`--exclude=${w.branch}`, "--branches", `--exclude=*/${w.branch}`, "--remotes", "--tags");
   else args.push("--branches", "--remotes", "--tags");
-  const n2 = Number.parseInt((await out3(repoDir, args)).trim(), 10);
-  return Number.isFinite(n2) ? n2 : 0;
+  const n2 = Number.parseInt((await out3(repoDir, args))?.trim() ?? "", 10);
+  return Number.isFinite(n2) ? n2 : null;
+}
+async function collectOrphanWorktrees(repoDir, names, deps) {
+  const results = [];
+  for (const name2 of names) {
+    const row = { name: name2, ok: false, cleanup: null };
+    try {
+      const report = await listWorktrees(repoDir, await deps.inputs());
+      const matches = report.worktrees.filter((w2) => w2.name === name2);
+      if (matches.length !== 1) throw new Error("nama worktree tidak ditemukan atau ambigu");
+      const w = matches[0];
+      if (!w.deletable) throw new Error(`tak bisa dipungut: ${w.blocked}`);
+      if (!w.orphan) throw new Error("worktree bukan sesi yatim; muat ulang daftar");
+      if (hasWorktreeSession(w.path, w.orphan.sessionId, deps.sessionsNow())) {
+        throw new Error("worktree kembali dipakai sesi; muat ulang daftar");
+      }
+      row.cleanup = deps.release(report.repoDir, w.path);
+      await deps.prune(report.repoDir);
+      row.ok = true;
+    } catch (e) {
+      row.error = e.message;
+    }
+    results.push(row);
+  }
+  return { results };
 }
 async function deleteWorktrees(repoDir, names, opts) {
   const report = await listWorktrees(repoDir, opts);
@@ -36498,14 +37051,322 @@ async function closeSession(id2) {
   return { cleanup: null };
 }
 
-// src/routes/ide.ts
+// src/services/worktree-project.ts
+init_db();
+init_pty();
+
+// src/services/session-history.ts
+init_db();
+init_pty();
+import { randomUUID as randomUUID7 } from "node:crypto";
+
+// src/services/transcript-store.ts
+init_config2();
+init_src2();
+import { randomUUID as randomUUID6 } from "node:crypto";
+import { mkdir as mkdir5, writeFile as writeFile4, readFile as readFile4, unlink as unlink4, readdir as readdir4, stat as stat2 } from "node:fs/promises";
+import { join as join18, resolve as resolve16, basename as basename5 } from "node:path";
+var MAX_TRANSCRIPT_BYTES = 1024 * 1024;
+function transcriptDir() {
+  return resolve16(effectiveStr("HANOMAN_TRANSCRIPT_DIR")?.trim() || resolveDataDirs().transcripts);
+}
+function clamp(text) {
+  const buf = Buffer.from(text, "utf8");
+  if (buf.byteLength <= MAX_TRANSCRIPT_BYTES) return { body: text, truncated: false };
+  const cut = buf.byteLength - MAX_TRANSCRIPT_BYTES;
+  let tail2 = buf.subarray(cut).toString("utf8");
+  const nl = tail2.indexOf("\n");
+  if (nl >= 0) tail2 = tail2.slice(nl + 1);
+  return { body: `\u2026 ${cut} byte awal dipangkas (batas ${MAX_TRANSCRIPT_BYTES} byte) \u2026
+${tail2}`, truncated: true };
+}
+async function saveTranscript(text) {
+  if (!text.trim()) return { key: "", bytes: 0, truncated: false };
+  const { body, truncated } = clamp(text);
+  const dir2 = transcriptDir();
+  await mkdir5(dir2, { recursive: true, mode: 448 });
+  const key = `${randomUUID6()}.log`;
+  await writeFile4(join18(dir2, key), body, { encoding: "utf8", mode: 384 });
+  return { key, bytes: Buffer.byteLength(body, "utf8"), truncated };
+}
+async function readTranscript(key) {
+  if (!key) return null;
+  try {
+    return await readFile4(join18(transcriptDir(), basename5(key)), "utf8");
+  } catch {
+    return null;
+  }
+}
+async function deleteTranscript(key) {
+  if (!key) return;
+  try {
+    await unlink4(join18(transcriptDir(), basename5(key)));
+  } catch (e) {
+    if (e.code !== "ENOENT") throw e;
+  }
+}
+async function listTranscripts() {
+  const dir2 = transcriptDir();
+  let names;
+  try {
+    names = await readdir4(dir2);
+  } catch (e) {
+    if (e.code === "ENOENT") return [];
+    throw e;
+  }
+  const rows = [];
+  for (const name2 of names) {
+    if (!name2.endsWith(".log")) continue;
+    try {
+      rows.push({ key: name2, mtimeMs: (await stat2(join18(dir2, name2))).mtimeMs });
+    } catch {
+    }
+  }
+  return rows;
+}
+
+// src/services/session-history.ts
+async function worktreeHistory(projectId) {
+  return prisma.sessionHistory.findMany({
+    where: { projectId },
+    orderBy: { startedAt: "desc" },
+    select: { id: true, sessionId: true, cwd: true, startedAt: true, endedAt: true, endedReason: true }
+  });
+}
+var CLOSED = "closed";
+var RECONCILED = "reconciled";
+var view3 = (r) => ({
+  id: r.id,
+  sessionId: r.sessionId,
+  projectId: r.projectId,
+  specId: r.specId,
+  title: r.title,
+  kind: r.kind,
+  flow: r.flow,
+  agent: r.agent,
+  model: r.model,
+  effort: r.effort,
+  branch: r.branch,
+  cwd: r.cwd,
+  startedAt: r.startedAt.toISOString(),
+  endedAt: r.endedAt?.toISOString() ?? null,
+  endedReason: r.endedReason,
+  reconciledAt: r.reconciledAt?.toISOString() ?? null,
+  exitCode: r.exitCode,
+  transcriptBytes: r.transcriptBytes
+});
+async function titleFor(specId) {
+  if (!specId) return null;
+  const s2 = await prisma.spec.findUnique({ where: { id: specId }, select: { title: true } });
+  return s2?.title ?? null;
+}
+async function beginSession(b) {
+  await prisma.sessionHistory.create({
+    data: {
+      id: randomUUID7(),
+      sessionId: b.sessionId,
+      projectId: b.projectId,
+      specId: b.specId ?? null,
+      title: await titleFor(b.specId),
+      kind: b.kind,
+      flow: b.flow ?? null,
+      agent: b.agent,
+      model: b.model ?? null,
+      effort: b.effort ?? null,
+      branch: b.branch ?? null,
+      cwd: b.cwd
+    }
+  });
+}
+async function finishSession(d) {
+  const open5 = await prisma.sessionHistory.findFirst({
+    where: { sessionId: d.sessionId, endedAt: null },
+    orderBy: { startedAt: "desc" }
+  });
+  if (!open5) return;
+  let t = { key: "", bytes: 0 };
+  if (d.transcript) {
+    try {
+      t = await saveTranscript(d.transcript);
+    } catch (e) {
+      console.error("riwayat sesi (transkrip tak tersimpan):", e);
+    }
+  }
+  await prisma.sessionHistory.update({
+    where: { id: open5.id },
+    data: {
+      endedAt: /* @__PURE__ */ new Date(),
+      endedReason: CLOSED,
+      exitCode: d.exitCode,
+      transcriptKey: t.key || null,
+      transcriptBytes: t.key ? t.bytes : null
+    }
+  });
+}
+async function listHistory(q) {
+  const term = q.q?.trim();
+  const where = {
+    ...q.projectId ? { projectId: q.projectId } : {},
+    ...q.specId ? { specId: q.specId } : {},
+    ...q.kind ? { kind: q.kind } : {},
+    ...term ? {
+      // SPEC-398 · ADR-0086 · SQLite tak punya `mode: "insensitive"`; `LIKE`-nya sudah
+      // case-insensitive untuk ASCII, jadi pencarian ini tetap berperilaku sama.
+      OR: [
+        { sessionId: { contains: term } },
+        { specId: { contains: term } },
+        { title: { contains: term } },
+        { branch: { contains: term } }
+      ]
+    } : {}
+  };
+  const total = await prisma.sessionHistory.count({ where });
+  const pageSize = q.limit ? Math.min(Math.max(Math.floor(+q.limit) || 1, 1), 200) : total || 1;
+  const page = Math.max(Math.floor(+(q.page ?? 1)) || 1, 1);
+  const rows = await prisma.sessionHistory.findMany({
+    where,
+    orderBy: { startedAt: "desc" },
+    skip: (page - 1) * pageSize,
+    take: pageSize
+  });
+  return { items: rows.map(view3), total, page, pageSize };
+}
+async function getHistory(id2) {
+  const r = await prisma.sessionHistory.findUnique({ where: { id: id2 } });
+  return r ? { ...view3(r), hasTranscript: !!r.transcriptKey } : null;
+}
+async function transcriptOf(id2) {
+  const r = await prisma.sessionHistory.findUnique({ where: { id: id2 }, select: { transcriptKey: true } });
+  if (!r?.transcriptKey) return null;
+  const text = await readTranscript(r.transcriptKey);
+  return text === null ? null : { text, bytes: Buffer.byteLength(text, "utf8") };
+}
+var PURGE_BATCH = 200;
+async function purgeHistory(q) {
+  const where = {
+    ...q.projectId ? { projectId: q.projectId } : {},
+    ...q.before ? { startedAt: { lt: q.before } } : {}
+  };
+  const doomed = await prisma.sessionHistory.findMany({ where, select: { id: true, transcriptKey: true } });
+  const report = { purged: 0, transcriptsDeleted: 0, transcriptsFailed: 0 };
+  for (let i = 0; i < doomed.length; i += PURGE_BATCH) {
+    const batch = doomed.slice(i, i + PURGE_BATCH);
+    const { count } = await prisma.sessionHistory.deleteMany({ where: { id: { in: batch.map((d) => d.id) } } });
+    report.purged += count;
+    for (const d of batch) {
+      if (!d.transcriptKey) continue;
+      try {
+        await deleteTranscript(d.transcriptKey);
+        report.transcriptsDeleted++;
+      } catch {
+        report.transcriptsFailed++;
+      }
+    }
+  }
+  return report;
+}
+var TRANSCRIPT_GC_GRACE_MS = 60 * 6e4;
+async function reconcileTranscripts(opts = {}) {
+  const rows = await prisma.sessionHistory.findMany({
+    where: { transcriptKey: { not: null } },
+    select: { id: true, transcriptKey: true }
+  });
+  const referenced = new Set(rows.map((r) => r.transcriptKey));
+  const onDisk = await listTranscripts();
+  const present = new Set(onDisk.map((f) => f.key));
+  const cutoff = Date.now() - (opts.graceMs ?? TRANSCRIPT_GC_GRACE_MS);
+  const report = { orphans: 0, dangling: 0, failed: 0 };
+  for (const f of onDisk) {
+    if (referenced.has(f.key) || f.mtimeMs > cutoff) continue;
+    if (opts.dryRun) {
+      report.orphans++;
+      continue;
+    }
+    try {
+      await deleteTranscript(f.key);
+      report.orphans++;
+    } catch {
+      report.failed++;
+    }
+  }
+  for (const r of rows) {
+    if (present.has(r.transcriptKey)) continue;
+    if (opts.dryRun) {
+      report.dangling++;
+      continue;
+    }
+    try {
+      await prisma.sessionHistory.update({
+        where: { id: r.id },
+        data: { transcriptKey: null, transcriptBytes: null }
+      });
+      report.dangling++;
+    } catch {
+      report.failed++;
+    }
+  }
+  return report;
+}
+async function reconcileHistory(liveSessionIds) {
+  const open5 = await prisma.sessionHistory.findMany({
+    where: { endedAt: null },
+    select: { id: true, sessionId: true, updatedAt: true }
+  });
+  const live = new Set(liveSessionIds);
+  const at = /* @__PURE__ */ new Date();
+  let closed = 0;
+  for (const r of open5) {
+    if (live.has(r.sessionId)) continue;
+    await prisma.sessionHistory.update({
+      where: { id: r.id },
+      data: { endedAt: r.updatedAt, endedReason: RECONCILED, reconciledAt: at }
+    });
+    closed++;
+  }
+  return closed;
+}
+function installSessionHistory() {
+  registerSessionHooks({
+    onBirth: (b) => {
+      void beginSession(b).catch((e) => console.error("riwayat sesi (lahir):", e));
+    },
+    onDeath: (d) => {
+      void finishSession(d).catch((e) => console.error("riwayat sesi (tutup):", e));
+    }
+  });
+}
+
+// src/services/worktree-project.ts
 init_session_id();
+function worktreeSessions() {
+  return listSessions().map((s2) => ({ cwd: s2.cwd, id: s2.id, specId: s2.specId ?? null }));
+}
+async function projectWorktreeInputs(projectId, sessions = worktreeSessions) {
+  const [specs, history] = await Promise.all([
+    prisma.spec.findMany({ where: { projectId }, select: { id: true, stage: true } }),
+    worktreeHistory(projectId)
+  ]);
+  return {
+    specs: new Map(specs.map((s2) => [sessionIdForSpec(s2.id), s2])),
+    history,
+    sessions: sessions()
+  };
+}
+async function detectOrphanWorktrees(deps = { repos: prodReaperDeps.repos, inputs: projectWorktreeInputs }) {
+  const found = [];
+  for (const { projectId, repoDir } of await deps.repos()) {
+    const report = await listWorktrees(repoDir, await deps.inputs(projectId));
+    const count = report.worktrees.filter((w) => w.orphan).length;
+    if (count) found.push({ projectId, count });
+  }
+  return found;
+}
 
 // src/services/repo-fs.ts
 import { lstat as lstat2, rename as rename3, rm as rm5 } from "node:fs/promises";
 import { createWriteStream } from "node:fs";
-import { join as join18 } from "node:path";
-import { randomUUID as randomUUID6 } from "node:crypto";
+import { join as join19 } from "node:path";
+import { randomUUID as randomUUID8 } from "node:crypto";
 import { pipeline } from "node:stream/promises";
 var EntryExistsError = class extends Error {
   code = "ENTRY_EXISTS";
@@ -36565,7 +37426,7 @@ async function saveUpload(repoDir, rel, source, opts = {}) {
   if (current && !opts.overwrite) return { status: "exists" };
   if (current && !current.isFile())
     throw new PathContainmentError("repository path ditolak: target bukan file regular");
-  const temp = join18(entry.parent, `.hanoman-${randomUUID6()}.tmp`);
+  const temp = join19(entry.parent, `.hanoman-${randomUUID8()}.tmp`);
   try {
     await pipeline(source, createWriteStream(temp, { flags: "wx", mode: 384 }));
     if (opts.isTruncated?.()) {
@@ -36593,13 +37454,6 @@ async function lockInputs(id2) {
     sessionBranches: new Set(sessions)
   };
 }
-async function worktreeInputs(id2) {
-  const specs = await prisma.spec.findMany({ where: { projectId: id2 }, select: { id: true, stage: true } });
-  return {
-    specs: new Map(specs.map((s2) => [sessionIdForSpec(s2.id), { id: s2.id, stage: s2.stage }])),
-    sessions: new Map(listSessions().filter((s2) => s2.projectId === id2 && !s2.exited).map((s2) => [resolve16(s2.cwd), { id: s2.id, specId: s2.specId ?? null }]))
-  };
-}
 var execAsync = promisify11(execFile12);
 function entryError(reply, e) {
   if (e instanceof EntryMissingError) return reply.code(404).send({ error: "not found" });
@@ -36870,7 +37724,7 @@ async function ide_default(app2) {
     const fmt = q.format === "tar" ? "tar" : "zip";
     const child = spawn3("git", ["archive", `--format=${fmt}`, "--end-of-options", ref], { cwd: repoDir });
     reply.header("content-type", fmt === "zip" ? "application/zip" : "application/x-tar");
-    reply.header("content-disposition", `attachment; filename="${basename5(repoDir)}-${ref.replace(/[^\w.-]/g, "_")}.${fmt}"`);
+    reply.header("content-disposition", `attachment; filename="${basename6(repoDir)}-${ref.replace(/[^\w.-]/g, "_")}.${fmt}"`);
     return reply.send(child.stdout);
   });
   app2.get("/projects/:id/commit/:sha", async (req, reply) => {
@@ -37019,7 +37873,7 @@ async function ide_default(app2) {
     const { id: id2 } = req.params;
     const repoDir = await repoOf(id2);
     if (repoDir === void 0) return reply.code(404).send({ error: "not found" });
-    return listWorktrees(repoDir, await worktreeInputs(id2));
+    return listWorktrees(repoDir, await projectWorktreeInputs(id2));
   });
   app2.get("/projects/:id/worktrees/stats", async (req, reply) => {
     const { id: id2 } = req.params;
@@ -37027,7 +37881,7 @@ async function ide_default(app2) {
     if (repoDir === void 0) return reply.code(404).send({ error: "not found" });
     if (!repoDir) return reply.code(400).send({ error: "project tidak punya repoDir" });
     const { name: name2 } = req.query;
-    const report = await listWorktrees(repoDir, await worktreeInputs(id2));
+    const report = await listWorktrees(repoDir, await projectWorktreeInputs(id2));
     const w = report.worktrees.find((x) => x.name === name2);
     if (!w) return reply.code(404).send({ error: "not found" });
     return worktreeStats(report.repoDir, w);
@@ -37040,10 +37894,22 @@ async function ide_default(app2) {
     const b = req.body;
     if (!Array.isArray(b?.names) || b.names.some((n2) => typeof n2 !== "string" || !n2))
       return reply.code(400).send({ error: "names wajib berisi nama worktree" });
+    if (b.orphanOnly !== void 0 && typeof b.orphanOnly !== "boolean")
+      return reply.code(400).send({ error: "orphanOnly wajib boolean" });
+    if (b.orphanOnly === true) {
+      if (b.deleteBranch === true)
+        return reply.code(400).send({ error: "pemungutan yatim tidak menghapus branch" });
+      return collectOrphanWorktrees(repoDir, b.names, {
+        inputs: () => projectWorktreeInputs(id2),
+        sessionsNow: worktreeSessions,
+        release: (repo, path) => releaseWorktreeToTrash(repo, path, id2),
+        prune: prodReaperDeps.prune
+      });
+    }
     const locks = await lockInputs(id2);
     return deleteWorktrees(repoDir, b.names, {
       withBranch: b.deleteBranch === true,
-      ...await worktreeInputs(id2),
+      ...await projectWorktreeInputs(id2),
       closeSession,
       release: (repo, path) => releaseWorktree(repo, path, id2),
       prune: async (repo) => {
@@ -37074,22 +37940,22 @@ async function finishGraphOp(reply, id2, repoDir, r, verb) {
     CODE_STYLE_CLAUSE,
     `${verb} via git graph project ${id2}.`
   ].join("\n\n");
-  const s2 = createSession(id2, r.worktree, { id: basename5(r.worktree), model, effort: effort2, agent, prompt });
+  const s2 = await createAgentSession(id2, r.worktree, { id: basename6(r.worktree), model, effort: effort2, agent, prompt });
   return { status: "conflict", sessionId: s2.id };
 }
 
 // src/routes/fs.ts
-import { readdir as readdir4 } from "node:fs/promises";
+import { readdir as readdir5 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
-import { resolve as resolve17, dirname as dirname9, join as join19 } from "node:path";
+import { resolve as resolve18, dirname as dirname10, join as join20 } from "node:path";
 async function fs_default(app2) {
   app2.get("/fs/browse", async (req, reply) => {
     const q = req.query.path;
-    const dir2 = q && q.trim() ? resolve17(q.trim()) : homedir4();
+    const dir2 = q && q.trim() ? resolve18(q.trim()) : homedir4();
     try {
-      const ents = await readdir4(dir2, { withFileTypes: true });
-      const entries3 = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join19(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
-      const parent = dirname9(dir2);
+      const ents = await readdir5(dir2, { withFileTypes: true });
+      const entries3 = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join20(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
+      const parent = dirname10(dir2);
       return { path: dir2, parent: parent === dir2 ? null : parent, entries: entries3 };
     } catch {
       return reply.code(400).send({ error: `tak bisa membaca folder "${dir2}"` });
@@ -37114,6 +37980,7 @@ init_settings3();
 init_codex_trust();
 init_pty();
 init_session_phases();
+init_session_launch_gate();
 init_pty();
 var LaunchError = class extends Error {
   // SPEC-447 · `blockers` hanya terisi untuk kind "blocked"; route memetakannya ke body 409.
@@ -37138,107 +38005,111 @@ function buildResumeCtx(repoDir, id2, flow, worktreeKept) {
 }
 async function startSpecSession(spec, opts) {
   const id2 = sessionIdForSpec(spec.id);
-  const pane = getSession(id2);
-  if (pane && !pane.exited) return { id: pane.id, reused: true };
-  try {
-    assertLaunchApproved(spec);
-  } catch (error) {
-    throw new LaunchError(error.message, "not-approved");
-  }
-  const repoDir = await resolveRepoDir(spec.projectId);
-  if (!repoDir) throw new LaunchError(`project "${spec.projectId}" belum di-bind ke checkout lokal`, "needs-bind");
-  if (!opts.force) {
-    const blockers = await blockersForSpec(spec, repoDir);
-    if (blockers.length)
-      throw new LaunchError(`${spec.id} ${blockedNote(blockers)}`, "blocked", blockers);
-  }
-  if (pane) killSession(id2);
-  const setting = await getSetting();
-  const agent = opts.agent ?? setting.agent;
-  const agentDefaults = agent === "codex" ? { model: setting.codex.model, effort: setting.codex.effort } : { model: setting.model, effort: setting.effort };
-  const model = opts.model ?? agentDefaults.model;
-  const effort2 = opts.effort ?? agentDefaults.effort;
-  const isContinue = spec.stage === "done";
-  const worktree = `${repoDir}/.worktrees/${id2}`;
-  const branchTo = `hanoman/${id2}`;
-  const resume = !isContinue && spec.baseSha ? resumeState(repoDir, worktree, branchTo, spec.headSha) : null;
-  const isGoalFlow = isGoalShapedFlow(opts.flow);
-  const goalArgs = {
-    flow: opts.flow,
-    specId: spec.id,
-    branchTo,
-    spec: { payload: spec.payload ?? void 0, objective: spec.objective }
-  };
-  const goal = isGoalFlow || (opts.goal ?? setting.goal.enabled) ? resolveGoalCondition(goalArgs, opts.goalCondition, isGoalFlow ? null : setting.goal.condition) : void 0;
-  const verifyScope = opts.verifyScope ?? setting.verifyScope;
-  const recordedMethod = readSpecMethod(spec.payload);
-  const method = resolveMethod(opts.method ?? recordedMethod ?? setting.method);
-  if (agent === "codex") ensureCodexTrust(repoDir);
-  let baseSha;
-  if (resume?.worktreeKept) {
-    baseSha = spec.baseSha;
-  } else {
+  return withSessionAdmission({ id: id2, force: opts.force }, async () => {
+    const pane = await getSessionAsync(id2);
     try {
-      const born = realGit.addWorktree(repoDir, worktree, resume?.base ?? spec.branchFrom ?? "HEAD");
-      baseSha = resume ? spec.baseSha : born;
-    } catch (e) {
-      throw new LaunchError(`gagal membuat worktree: ${e.message}`, "worktree");
+      assertLaunchApproved(spec);
+    } catch (error) {
+      throw new LaunchError(error.message, "not-approved");
+    }
+    const repoDir = await resolveRepoDir(spec.projectId);
+    if (!repoDir) throw new LaunchError(`project "${spec.projectId}" belum di-bind ke checkout lokal`, "needs-bind");
+    if (!opts.force) {
+      const blockers = await blockersForSpec(spec, repoDir);
+      if (blockers.length)
+        throw new LaunchError(`${spec.id} ${blockedNote(blockers)}`, "blocked", blockers);
+    }
+    if (pane) killSession(id2);
+    const setting = await getSetting();
+    const agent = opts.agent ?? setting.agent;
+    const agentDefaults = agent === "codex" ? { model: setting.codex.model, effort: setting.codex.effort } : { model: setting.model, effort: setting.effort };
+    const model = opts.model ?? agentDefaults.model;
+    const effort2 = opts.effort ?? agentDefaults.effort;
+    const isContinue = spec.stage === "done";
+    const worktree = `${repoDir}/.worktrees/${id2}`;
+    const branchTo = `hanoman/${id2}`;
+    const resume = !isContinue && spec.baseSha ? resumeState(repoDir, worktree, branchTo, spec.headSha) : null;
+    const isGoalFlow = isGoalShapedFlow(opts.flow);
+    const goalArgs = {
+      flow: opts.flow,
+      specId: spec.id,
+      branchTo,
+      spec: { payload: spec.payload ?? void 0, objective: spec.objective }
+    };
+    const goal = isGoalFlow || (opts.goal ?? setting.goal.enabled) ? resolveGoalCondition(goalArgs, opts.goalCondition, isGoalFlow ? null : setting.goal.condition) : void 0;
+    const verifyScope = opts.verifyScope ?? setting.verifyScope;
+    const recordedMethod = readSpecMethod(spec.payload);
+    const method = resolveMethod(opts.method ?? recordedMethod ?? setting.method);
+    if (agent === "codex") ensureCodexTrust(repoDir);
+    let baseSha;
+    if (resume?.worktreeKept) {
+      baseSha = spec.baseSha;
+    } else {
+      try {
+        const born = realGit.addWorktree(repoDir, worktree, resume?.base ?? spec.branchFrom ?? "HEAD");
+        baseSha = resume ? spec.baseSha : born;
+      } catch (e) {
+        throw new LaunchError(`gagal membuat worktree: ${e.message}`, "worktree");
+      }
+      if (!resume) await prisma.spec.update({
+        where: { id: spec.id },
+        data: { baseSha, headSha: null, startedAt: /* @__PURE__ */ new Date() }
+      });
     }
-    if (!resume) await prisma.spec.update({
-      where: { id: spec.id },
-      data: { baseSha, headSha: null, startedAt: /* @__PURE__ */ new Date() }
+    if (!recordedMethod) {
+      const stamped = stampSpecMethod(spec.payload, method.id);
+      if (stamped) await prisma.spec.update({ where: { id: spec.id }, data: { payload: stamped } });
+    }
+    const attachments = {
+      dir: specAttachmentsDir(repoDir, id2),
+      items: await syncSpecAttachmentsDir(spec.id, spec.projectId)
+    };
+    const brief = {
+      id: spec.id,
+      title: spec.title,
+      source: spec.source,
+      priority: spec.priority,
+      objective: spec.objective,
+      payload: spec.payload ?? void 0
+    };
+    const resumeCtx = resume ? buildResumeCtx(repoDir, id2, opts.flow, resume.worktreeKept) : void 0;
+    let prompt;
+    if (isGoalFlow) {
+      prompt = startGoalPrompt(opts.flow, brief, branchTo, {
+        autonomy: opts.autonomy,
+        verifyScope,
+        resume: resumeCtx,
+        method: method.id,
+        attachments
+      });
+    } else if (isContinue) {
+      prompt = continuePrompt(opts.flow, brief, branchTo, opts.autonomy, verifyScope, method.id, attachments);
+    } else if (resumeCtx) {
+      prompt = resumePrompt(opts.flow, brief, branchTo, resumeCtx, opts.autonomy, verifyScope, method.id, attachments);
+    } else {
+      prompt = startPrompt(opts.flow, brief, branchTo, opts.autonomy, verifyScope, method.id, attachments);
+    }
+    const scopeEnv = { HANOMAN_BASE_SHA: baseSha, HANOMAN_VERIFY_SCOPE: verifyScope };
+    const s2 = createSession(spec.projectId, worktree, {
+      specId: spec.id,
+      flow: opts.flow,
+      model,
+      effort: effort2,
+      goal,
+      agent,
+      phaseFile: phaseFilePath(repoDir, id2),
+      decisionFile: decisionFilePath(repoDir, id2),
+      attachmentsDir: attachments.items.length ? attachments.dir : void 0,
+      prompt,
+      env: scopeEnv
     });
-  }
-  if (!recordedMethod) {
-    const stamped = stampSpecMethod(spec.payload, method.id);
-    if (stamped) await prisma.spec.update({ where: { id: spec.id }, data: { payload: stamped } });
-  }
-  const attachments = {
-    dir: specAttachmentsDir(repoDir, id2),
-    items: await syncSpecAttachmentsDir(spec.id, spec.projectId)
-  };
-  const brief = {
-    id: spec.id,
-    title: spec.title,
-    source: spec.source,
-    priority: spec.priority,
-    objective: spec.objective,
-    payload: spec.payload ?? void 0
-  };
-  const resumeCtx = resume ? buildResumeCtx(repoDir, id2, opts.flow, resume.worktreeKept) : void 0;
-  let prompt;
-  if (isGoalFlow) {
-    prompt = startGoalPrompt(opts.flow, brief, branchTo, {
-      autonomy: opts.autonomy,
-      verifyScope,
-      resume: resumeCtx,
-      method: method.id,
-      attachments
-    });
-  } else if (isContinue) {
-    prompt = continuePrompt(opts.flow, brief, branchTo, opts.autonomy, verifyScope, method.id, attachments);
-  } else if (resumeCtx) {
-    prompt = resumePrompt(opts.flow, brief, branchTo, resumeCtx, opts.autonomy, verifyScope, method.id, attachments);
-  } else {
-    prompt = startPrompt(opts.flow, brief, branchTo, opts.autonomy, verifyScope, method.id, attachments);
-  }
-  const scopeEnv = { HANOMAN_BASE_SHA: baseSha, HANOMAN_VERIFY_SCOPE: verifyScope };
-  const s2 = createSession(spec.projectId, worktree, {
-    specId: spec.id,
-    flow: opts.flow,
-    model,
-    effort: effort2,
-    goal,
-    agent,
-    phaseFile: phaseFilePath(repoDir, id2),
-    decisionFile: decisionFilePath(repoDir, id2),
-    attachmentsDir: attachments.items.length ? attachments.dir : void 0,
-    prompt,
-    env: scopeEnv
-  });
-  return resume ? { id: s2.id, resumed: true } : { id: s2.id };
+    return resume ? { id: s2.id, resumed: true } : { id: s2.id };
+  }, (pane) => ({ id: pane.id, reused: true }));
 }
 
+// src/routes/terminal.ts
+init_session_launch_gate();
+
 // src/services/ws-admission.ts
 import { randomBytes as randomBytes5 } from "node:crypto";
 
@@ -37291,7 +38162,7 @@ function setBounded(map, key, value, maxKeys) {
 // src/services/auth.ts
 init_src2();
 init_db();
-import { randomBytes as randomBytes3, scrypt as scryptCb, timingSafeEqual as timingSafeEqual3, createHash as createHash5 } from "node:crypto";
+import { randomBytes as randomBytes3, scrypt as scryptCb, timingSafeEqual as timingSafeEqual3, createHash as createHash6 } from "node:crypto";
 import { promisify as promisify12 } from "node:util";
 var scrypt = promisify12(scryptCb);
 var COOKIE_NAME = "hn_session";
@@ -37309,7 +38180,7 @@ async function verifyPassword(pw, stored) {
   return key.length === want.length && timingSafeEqual3(key, want);
 }
 var newSessionToken = () => randomBytes3(32).toString("base64url");
-var sessionId = (token) => createHash5("sha256").update(token).digest("hex");
+var sessionId = (token) => createHash6("sha256").update(token).digest("hex");
 async function createSession2(userId) {
   const token = newSessionToken();
   await prisma.session.create({
@@ -37370,9 +38241,9 @@ function cookieOpts(req) {
 
 // src/services/device-token.ts
 init_db();
-import { randomBytes as randomBytes4, createHash as createHash6 } from "node:crypto";
+import { randomBytes as randomBytes4, createHash as createHash7 } from "node:crypto";
 var newDeviceToken = () => randomBytes4(32).toString("base64url");
-var tokenHash = (token) => createHash6("sha256").update(token).digest("hex");
+var tokenHash = (token) => createHash7("sha256").update(token).digest("hex");
 async function issueDeviceToken(userId, name2) {
   const token = newDeviceToken();
   const row = await prisma.deviceToken.create({ data: { userId, name: name2, tokenHash: tokenHash(token) } });
@@ -37571,13 +38442,13 @@ function installCommand(m, agent, shell = shellBin()) {
 
 // src/services/terminal-diag.ts
 import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync9, statSync as statSync3, rmSync as rmSync5 } from "node:fs";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 var DIAG_MAX_BYTES = 2 * 1024 * 1024;
 var KINDS = /* @__PURE__ */ new Set(["key", "comp", "data", "ack", "pred"]);
 var ID = /^[A-Za-z0-9_-]{1,64}$/;
 function diagFile(home3, sessionId2) {
   if (!ID.test(sessionId2)) throw new Error(`id sesi tak sah untuk diag: ${sessionId2}`);
-  return join20(home3, "diag", `${sessionId2}.jsonl`);
+  return join21(home3, "diag", `${sessionId2}.jsonl`);
 }
 function usable(ev) {
   if (!ev || typeof ev !== "object") return false;
@@ -37588,7 +38459,7 @@ function appendDiag(home3, sessionId2, events) {
   const file = diagFile(home3, sessionId2);
   const rows = events.filter(usable);
   if (!rows.length) return;
-  mkdirSync9(join20(home3, "diag"), { recursive: true });
+  mkdirSync9(join21(home3, "diag"), { recursive: true });
   try {
     if (statSync3(file).size > DIAG_MAX_BYTES) rmSync5(file);
   } catch {
@@ -37605,9 +38476,9 @@ init_uploads();
 // src/services/session-dialog.ts
 init_tui_dialog();
 init_pty();
-import { createHash as createHash7 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 var DIALOG_CHUNK_MS = 50;
-var screenHashOf = (paneText2) => createHash7("sha256").update(dialogKey(paneText2)).digest("hex").slice(0, 16);
+var screenHashOf = (paneText2) => createHash8("sha256").update(dialogKey(paneText2)).digest("hex").slice(0, 16);
 var answerable = (paneText2) => {
   const s2 = readDialogScreen(paneText2);
   if (s2?.kind !== "question") return null;
@@ -38144,10 +39015,10 @@ init_config2();
 init_pty();
 init_session_sandbox();
 import { execFile as execFile13 } from "node:child_process";
-import { randomUUID as randomUUID7 } from "node:crypto";
+import { randomUUID as randomUUID9 } from "node:crypto";
 import { mkdirSync as mkdirSync10, rmSync as rmSync6, writeFileSync as writeFileSync7 } from "node:fs";
-import { tmpdir as tmpdir4 } from "node:os";
-import { join as join21 } from "node:path";
+import { tmpdir as tmpdir3 } from "node:os";
+import { join as join22 } from "node:path";
 var binFor = (agent) => agent === "codex" ? effectiveStr("HANOMAN_CODEX_BIN") ?? "codex" : effectiveStr("HANOMAN_CLAUDE_BIN") ?? "claude";
 function leadArgv(o) {
   if (o.agent === "codex") {
@@ -38175,11 +39046,11 @@ function leadProcess(prompt, o, env = process.env) {
   const mode = env.HANOMAN_SESSION_SANDBOX ?? (resolveHardening(env) ? "required" : "off");
   if (mode === "off") return { file, args: directArgs, cwd: o.cwd, cleanup: () => {
   } };
-  const promptDir = join21(tmpdir4(), "hanoman-prompts");
+  const promptDir = join22(tmpdir3(), "hanoman-prompts");
   mkdirSync10(promptDir, { recursive: true, mode: 448 });
-  const promptFile = join21(promptDir, `oneshot-${randomUUID7()}`);
+  const promptFile = join22(promptDir, `oneshot-${randomUUID9()}`);
   writeFileSync7(promptFile, prompt, { flag: "wx", mode: 384 });
-  const workspace = o.cwd ?? join21(tmpdir4(), `hanoman-oneshot-${randomUUID7()}`);
+  const workspace = o.cwd ?? join22(tmpdir3(), `hanoman-oneshot-${randomUUID9()}`);
   if (!o.cwd) mkdirSync10(workspace, { recursive: false, mode: 448 });
   try {
     const argsWithoutPrompt = directArgs.slice(0, -1);
@@ -38994,6 +39865,9 @@ async function terminal_default(app2, opts) {
   app2.post("/terminal/sessions", async (req, reply) => {
     const parsed = zTerminalSession.safeParse(req.body);
     if (!parsed.success) return reply.code(400).send({ error: "invalid body" });
+    if (req.agent && "force" in parsed.data && parsed.data.force) {
+      return reply.code(403).send({ error: "force hanya boleh digunakan manusia melalui dashboard" });
+    }
     if ("spec" in parsed.data) {
       const spec = await prisma.spec.findUnique({ where: { id: parsed.data.spec } });
       if (!spec) return reply.code(404).send({ error: "spec not found" });
@@ -39037,10 +39911,10 @@ async function terminal_default(app2, opts) {
       if (inst) {
         const m = METHODS[inst.method];
         if (!m) return reply.code(400).send({ error: `metode "${inst.method}" tak dikenal` });
-        const s4 = createSession(project.id, repoDir2, { command: installCommand(m, inst.agent) });
+        const s4 = await createOperatorSession(project.id, repoDir2, { command: installCommand(m, inst.agent) });
         return reply.code(201).send({ id: s4.id });
       }
-      const s3 = createSession(project.id, repoDir2, { command: [shellBin()] });
+      const s3 = await createOperatorSession(project.id, repoDir2, { command: [shellBin()] });
       return reply.code(201).send({ id: s3.id });
     }
     const repoDir = await resolveRepoDir(project.id);
@@ -39049,139 +39923,143 @@ async function terminal_default(app2, opts) {
     }
     if (parsed.data.flow === "reverse") {
       const id2 = `reverse-${project.id.toLowerCase().replace(/[^a-z0-9_-]/g, "_")}`;
-      const live = getSession(id2);
-      if (live && !live.exited) return reply.code(201).send({ id: live.id });
-      const { agent: agent2, model: model2, effort: effort3 } = await sessionAgentDefaults();
-      if (agent2 === "codex") ensureCodexTrust(repoDir);
-      const wt = `${repoDir}/.worktrees/${id2}`;
-      let reused;
-      try {
-        reused = ensureWorktree(repoDir, wt, "HEAD");
-      } catch (e) {
-        return reply.code(422).send({ error: `gagal membuat worktree: ${e.message}` });
-      }
-      const s3 = createSession(project.id, wt, {
-        id: id2,
-        flow: "reverse",
-        model: model2,
-        effort: effort3,
-        agent: agent2,
-        phaseFile: phaseFilePath(repoDir, id2),
-        decisionFile: decisionFilePath(repoDir, id2),
-        prompt: startProjectPrompt("reverse", {
-          id: project.id,
-          name: project.name,
-          desc: project.desc,
-          stack: project.stack
-        }, "reverse-docs") + resumeNote(reused)
-      });
-      return reply.code(201).send({ id: s3.id });
+      const result = await withSessionAdmission({ id: id2, force: parsed.data.force }, async () => {
+        const { agent: agent2, model: model2, effort: effort3 } = await sessionAgentDefaults();
+        if (agent2 === "codex") ensureCodexTrust(repoDir);
+        const wt = `${repoDir}/.worktrees/${id2}`;
+        let reused;
+        try {
+          reused = ensureWorktree(repoDir, wt, "HEAD");
+        } catch (e) {
+          return { code: 422, body: { error: `gagal membuat worktree: ${e.message}` } };
+        }
+        const s3 = createSession(project.id, wt, {
+          id: id2,
+          flow: "reverse",
+          model: model2,
+          effort: effort3,
+          agent: agent2,
+          phaseFile: phaseFilePath(repoDir, id2),
+          decisionFile: decisionFilePath(repoDir, id2),
+          prompt: startProjectPrompt("reverse", {
+            id: project.id,
+            name: project.name,
+            desc: project.desc,
+            stack: project.stack
+          }, "reverse-docs") + resumeNote(reused)
+        });
+        return { code: 201, body: { id: s3.id } };
+      }, (pane) => ({ code: 201, body: { id: pane.id } }));
+      return reply.code(result.code).send(result.body);
     }
     if (parsed.data.flow === "scaffold") {
       const id2 = `scaffold-${project.id.toLowerCase().replace(/[^a-z0-9_-]/g, "_")}`;
-      const live = getSession(id2);
-      if (live && !live.exited) return reply.code(201).send({ id: live.id });
-      const { agent: agent2, model: model2, effort: effort3 } = await sessionAgentDefaults();
-      if (agent2 === "codex") ensureCodexTrust(repoDir);
-      const wt = `${repoDir}/.worktrees/${id2}`;
-      let reused;
-      try {
-        realGit.initRepo(repoDir);
-        reused = ensureWorktree(repoDir, wt, "HEAD");
-      } catch (e) {
-        return reply.code(422).send({ error: `gagal membuat worktree: ${e.message}` });
-      }
-      const s3 = createSession(project.id, wt, {
-        id: id2,
-        flow: "scaffold",
-        model: model2,
-        effort: effort3,
-        agent: agent2,
-        phaseFile: phaseFilePath(repoDir, id2),
-        decisionFile: decisionFilePath(repoDir, id2),
-        prompt: startScaffoldPrompt(
-          { id: project.id, name: project.name, desc: project.desc, stack: project.stack },
-          "scaffold-docs"
-        ) + resumeNote(reused)
-      });
-      return reply.code(201).send({ id: s3.id });
+      const result = await withSessionAdmission({ id: id2, force: parsed.data.force }, async () => {
+        const { agent: agent2, model: model2, effort: effort3 } = await sessionAgentDefaults();
+        if (agent2 === "codex") ensureCodexTrust(repoDir);
+        const wt = `${repoDir}/.worktrees/${id2}`;
+        let reused;
+        try {
+          realGit.initRepo(repoDir);
+          reused = ensureWorktree(repoDir, wt, "HEAD");
+        } catch (e) {
+          return { code: 422, body: { error: `gagal membuat worktree: ${e.message}` } };
+        }
+        const s3 = createSession(project.id, wt, {
+          id: id2,
+          flow: "scaffold",
+          model: model2,
+          effort: effort3,
+          agent: agent2,
+          phaseFile: phaseFilePath(repoDir, id2),
+          decisionFile: decisionFilePath(repoDir, id2),
+          prompt: startScaffoldPrompt(
+            { id: project.id, name: project.name, desc: project.desc, stack: project.stack },
+            "scaffold-docs"
+          ) + resumeNote(reused)
+        });
+        return { code: 201, body: { id: s3.id } };
+      }, (pane) => ({ code: 201, body: { id: pane.id } }));
+      return reply.code(result.code).send(result.body);
     }
     if (parsed.data.flow === "prd") {
       const { brief, branchFrom, fromAudit } = parsed.data;
       const slug = brief.title.toLowerCase().trim().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 60);
       if (!slug) return reply.code(400).send({ error: "judul PRD kosong" });
       const id2 = `prd-${slug}`;
-      const live = getSession(id2);
-      if (live && !live.exited) return reply.code(201).send({ id: live.id });
-      const { agent: agent2, model: model2, effort: effort3 } = await sessionAgentDefaults();
-      if (agent2 === "codex") ensureCodexTrust(repoDir);
-      const wt = `${repoDir}/.worktrees/${id2}`;
-      let reused;
-      try {
-        reused = ensureWorktree(repoDir, wt, branchFrom ?? "HEAD");
-      } catch (e) {
-        return reply.code(422).send({ error: `gagal membuat worktree: ${e.message}` });
-      }
-      const auditDoc = fromAudit ? await readAuditDoc(fromAudit) : null;
-      const s3 = createSession(project.id, wt, {
-        id: id2,
-        flow: "prd",
-        branch: `prd/${slug}`,
-        model: model2,
-        effort: effort3,
-        agent: agent2,
-        phaseFile: phaseFilePath(repoDir, id2),
-        decisionFile: decisionFilePath(repoDir, id2),
-        prompt: startPrdPrompt(
-          { id: project.id, name: project.name, desc: project.desc, stack: project.stack },
-          brief,
-          `prd/${slug}`,
-          auditDoc ? { id: fromAudit, path: auditDoc.path, content: auditDoc.content } : void 0
-        ) + resumeNote(reused)
-      });
-      return reply.code(201).send({ id: s3.id });
+      const result = await withSessionAdmission({ id: id2, force: parsed.data.force }, async () => {
+        const { agent: agent2, model: model2, effort: effort3 } = await sessionAgentDefaults();
+        if (agent2 === "codex") ensureCodexTrust(repoDir);
+        const wt = `${repoDir}/.worktrees/${id2}`;
+        let reused;
+        try {
+          reused = ensureWorktree(repoDir, wt, branchFrom ?? "HEAD");
+        } catch (e) {
+          return { code: 422, body: { error: `gagal membuat worktree: ${e.message}` } };
+        }
+        const auditDoc = fromAudit ? await readAuditDoc(fromAudit) : null;
+        const s3 = createSession(project.id, wt, {
+          id: id2,
+          flow: "prd",
+          branch: `prd/${slug}`,
+          model: model2,
+          effort: effort3,
+          agent: agent2,
+          phaseFile: phaseFilePath(repoDir, id2),
+          decisionFile: decisionFilePath(repoDir, id2),
+          prompt: startPrdPrompt(
+            { id: project.id, name: project.name, desc: project.desc, stack: project.stack },
+            brief,
+            `prd/${slug}`,
+            auditDoc ? { id: fromAudit, path: auditDoc.path, content: auditDoc.content } : void 0
+          ) + resumeNote(reused)
+        });
+        return { code: 201, body: { id: s3.id } };
+      }, (pane) => ({ code: 201, body: { id: pane.id } }));
+      return reply.code(result.code).send(result.body);
     }
     if (parsed.data.flow === "breakdown") {
       const { prdPath } = parsed.data;
-      const content = await readPrd(project.id, prdPath);
-      if (content === null) return reply.code(400).send({ error: "PRD tak terbaca" });
       const base2 = prdPath.slice(prdPath.lastIndexOf("/") + 1).replace(/\.md$/, "");
       const slug = base2.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 60);
       if (!slug) return reply.code(400).send({ error: "path PRD tak valid" });
       const id2 = `breakdown-${slug}`;
-      const live = getSession(id2);
-      if (live && !live.exited) return reply.code(201).send({ id: live.id });
-      const { agent: agent2, model: model2, effort: effort3 } = await sessionAgentDefaults();
-      if (agent2 === "codex") ensureCodexTrust(repoDir);
-      const wt = `${repoDir}/.worktrees/${id2}`;
-      let reused;
-      try {
-        reused = ensureWorktree(repoDir, wt, "HEAD");
-      } catch (e) {
-        return reply.code(422).send({ error: `gagal membuat worktree: ${e.message}` });
-      }
-      const titleM = content.match(/^#\s+(.+)$/m);
-      const title = titleM ? titleM[1].trim() : slug;
-      const s3 = createSession(project.id, wt, {
-        id: id2,
-        flow: "breakdown",
-        branch: `breakdown/${slug}`,
-        model: model2,
-        effort: effort3,
-        agent: agent2,
-        phaseFile: phaseFilePath(repoDir, id2),
-        decisionFile: decisionFilePath(repoDir, id2),
-        prompt: startBreakdownPrompt(
-          { id: project.id, name: project.name, desc: project.desc, stack: project.stack },
-          { title, path: prdPath, content },
-          `breakdown/${slug}`
-        ) + resumeNote(reused)
-      });
-      return reply.code(201).send({ id: s3.id });
+      const result = await withSessionAdmission({ id: id2, force: parsed.data.force }, async () => {
+        const content = await readPrd(project.id, prdPath, await listSessionsAsync());
+        if (content === null) return { code: 400, body: { error: "PRD tak terbaca" } };
+        const { agent: agent2, model: model2, effort: effort3 } = await sessionAgentDefaults();
+        if (agent2 === "codex") ensureCodexTrust(repoDir);
+        const wt = `${repoDir}/.worktrees/${id2}`;
+        let reused;
+        try {
+          reused = ensureWorktree(repoDir, wt, "HEAD");
+        } catch (e) {
+          return { code: 422, body: { error: `gagal membuat worktree: ${e.message}` } };
+        }
+        const titleM = content.match(/^#\s+(.+)$/m);
+        const title = titleM ? titleM[1].trim() : slug;
+        const s3 = createSession(project.id, wt, {
+          id: id2,
+          flow: "breakdown",
+          branch: `breakdown/${slug}`,
+          model: model2,
+          effort: effort3,
+          agent: agent2,
+          phaseFile: phaseFilePath(repoDir, id2),
+          decisionFile: decisionFilePath(repoDir, id2),
+          prompt: startBreakdownPrompt(
+            { id: project.id, name: project.name, desc: project.desc, stack: project.stack },
+            { title, path: prdPath, content },
+            `breakdown/${slug}`
+          ) + resumeNote(reused)
+        });
+        return { code: 201, body: { id: s3.id } };
+      }, (pane) => ({ code: 201, body: { id: pane.id } }));
+      return reply.code(result.code).send(result.body);
     }
     const { agent, model, effort: effort2 } = await terminalAgentDefaults(parsed.data);
     if (agent === "codex") ensureCodexTrust(repoDir);
-    const s2 = createSession(project.id, repoDir, { agent, model, effort: effort2 });
+    const s2 = await createOperatorSession(project.id, repoDir, { agent, model, effort: effort2 });
     return reply.code(201).send({ id: s2.id });
   });
   app2.get("/terminal/sessions/:id/phases", async (req, reply) => {
@@ -39286,7 +40164,7 @@ async function terminal_default(app2, opts) {
       CODE_STYLE_CLAUSE,
       `Sesi PRD ${s2.id}.`
     ].join("\n\n");
-    const cs = createSession(s2.projectId, r.worktree, {
+    const cs = await createAgentSession(s2.projectId, r.worktree, {
       id: `merge-${id2.toLowerCase().replace(/[^a-z0-9_-]/g, "_")}`,
       model,
       effort: effort2,
@@ -39671,8 +40549,8 @@ import { readFileSync as readFileSync10 } from "node:fs";
 init_config2();
 import { spawn as spawn4 } from "node:child_process";
 import { mkdtempSync, rmSync as rmSync7, writeFileSync as writeFileSync8 } from "node:fs";
-import { tmpdir as tmpdir5 } from "node:os";
-import { dirname as dirname10, join as join22 } from "node:path";
+import { tmpdir as tmpdir4 } from "node:os";
+import { dirname as dirname11, join as join23 } from "node:path";
 var sshBin = () => effectiveStr("HANOMAN_SSH_BIN") ?? "ssh";
 function consoleArgv(t) {
   return [
@@ -39687,8 +40565,8 @@ function consoleArgv(t) {
   ];
 }
 function askpassScript() {
-  const dir2 = mkdtempSync(join22(tmpdir5(), "hanoman-askpass-"));
-  const path = join22(dir2, "askpass.sh");
+  const dir2 = mkdtempSync(join23(tmpdir4(), "hanoman-askpass-"));
+  const path = join23(dir2, "askpass.sh");
   writeFileSync8(path, `#!/bin/sh
 printf '%s' "$HANOMAN_SSH_PASSWORD"
 `, { mode: 448 });
@@ -39728,7 +40606,7 @@ function sshExec(t, remoteCmd, opts = {}) {
     const timer9 = setTimeout(() => p3.kill("SIGKILL"), opts.timeoutMs ?? 6e4);
     const done = (r) => {
       clearTimeout(timer9);
-      if (askpass) rmSync7(dirname10(askpass), { recursive: true, force: true });
+      if (askpass) rmSync7(dirname11(askpass), { recursive: true, force: true });
       resolve22(r);
     };
     p3.stdout.on("data", (d) => {
@@ -39749,17 +40627,17 @@ function sshExec(t, remoteCmd, opts = {}) {
 // src/services/vps-audit.ts
 init_db();
 import { existsSync as existsSync14, readFileSync as readFileSync9 } from "node:fs";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/runner/deps.ts
 import { existsSync as existsSync13 } from "node:fs";
-import { dirname as dirname11, join as join23 } from "node:path";
+import { dirname as dirname12, join as join24 } from "node:path";
 function repoRootFrom(startDir) {
   let dir2 = startDir;
   for (let i = 0; i < 8; i++) {
-    if (existsSync13(join23(dir2, "pnpm-workspace.yaml"))) return dir2;
-    const parent = dirname11(dir2);
+    if (existsSync13(join24(dir2, "pnpm-workspace.yaml"))) return dir2;
+    const parent = dirname12(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -39871,7 +40749,7 @@ var packagedScript = (f) => fileURLToPath3(new URL(`../scripts/vps/${f}`, import
 var moduleDir = () => fileURLToPath3(new URL(".", import.meta.url));
 var scriptPath = (f) => {
   const packed = packagedScript(f);
-  return existsSync14(packed) ? packed : join24(repoRoot(moduleDir()), "server", "scripts", "vps", f);
+  return existsSync14(packed) ? packed : join25(repoRoot(moduleDir()), "server", "scripts", "vps", f);
 };
 async function itemStatesOf(vpsId) {
   const rows = await prisma.vpsItemState.findMany({ where: { vpsId } });
@@ -40081,25 +40959,25 @@ init_config2();
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { chmodSync as chmodSync7, copyFileSync, existsSync as existsSync15, mkdirSync as mkdirSync11, readFileSync as readFileSync12, unlinkSync as unlinkSync2 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { join as join25 } from "node:path";
+import { join as join26 } from "node:path";
 var keyDir = () => effectiveStr("HANOMAN_SSH_KEY_DIR") ?? resolveDataDirs().sshKeys;
 var KEY_FILES = ["id_ed25519", "id_ed25519.pub"];
 function adoptLegacyKey(dir2) {
   if (effectiveStr("HANOMAN_SSH_KEY_DIR")) return;
-  const legacy = join25(homedir5(), ".hanoman");
+  const legacy = join26(homedir5(), ".hanoman");
   if (legacy === dir2) return;
-  if (!KEY_FILES.every((f) => existsSync15(join25(legacy, f)))) return;
+  if (!KEY_FILES.every((f) => existsSync15(join26(legacy, f)))) return;
   mkdirSync11(dir2, { recursive: true, mode: 448 });
   for (const f of KEY_FILES) {
-    copyFileSync(join25(legacy, f), join25(dir2, f));
-    chmodSync7(join25(dir2, f), 384);
+    copyFileSync(join26(legacy, f), join26(dir2, f));
+    chmodSync7(join26(dir2, f), 384);
   }
-  for (const f of KEY_FILES) unlinkSync2(join25(legacy, f));
+  for (const f of KEY_FILES) unlinkSync2(join26(legacy, f));
   console.log(`vps: key SSH dipindah dari ${legacy} ke ${dir2} (SPEC-846 \u2014 satu batas backup)`);
 }
 function ensureHanomanKey() {
   const dir2 = keyDir();
-  const privPath = join25(dir2, KEY_FILES[0]);
+  const privPath = join26(dir2, KEY_FILES[0]);
   const pubPath = `${privPath}.pub`;
   if (!existsSync15(privPath)) adoptLegacyKey(dir2);
   if (!existsSync15(privPath)) {
@@ -40126,7 +41004,7 @@ async function bootstrapKey(t, password) {
 }
 
 // src/routes/vps.ts
-init_pty();
+init_session_launch_gate();
 init_settings3();
 init_sync_notify();
 function keyMissing(v) {
@@ -40383,7 +41261,7 @@ async function vps_default(app2) {
     const v = await prisma.vps.findUnique({ where: { id: req.params.id } });
     if (!v) return reply.code(404).send({ error: "not found" });
     if (keyMissing(v)) return reply.code(409).send({ error: "key VPS tidak ada di mesin ini", keyMissing: true });
-    const s2 = createSession(`vps-console:${v.id}`, homedir6(), { id: `vpsc-${v.id}`, command: consoleArgv(v) });
+    const s2 = await createOperatorSession(`vps-console:${v.id}`, homedir6(), { id: `vpsc-${v.id}`, command: consoleArgv(v) });
     return reply.code(201).send({ id: s2.id });
   });
   app2.post("/vps/:id/session", async (req, reply) => {
@@ -40392,7 +41270,7 @@ async function vps_default(app2) {
     if (keyMissing(v)) return reply.code(409).send({ error: "key VPS tidak ada di mesin ini", keyMissing: true });
     const checks = v.audit ?? [];
     const { model, effort: effort2 } = await sessionModel();
-    const s2 = createSession(`vps:${v.id}`, homedir6(), {
+    const s2 = await createAgentSession(`vps:${v.id}`, homedir6(), {
       model,
       effort: effort2,
       prompt: [
@@ -40412,7 +41290,7 @@ init_config2();
 import { execFileSync as execFileSync4 } from "node:child_process";
 import { readFileSync as readFileSync14 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 var USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
 var TTL_MS2 = 3e4;
 var lastOk = null;
@@ -40425,7 +41303,7 @@ var LABELS = {
 var humanize = (k) => k.replace(/_/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
 var nowIso = () => (/* @__PURE__ */ new Date()).toISOString();
 function credsFile() {
-  return join26(effectiveStr("CLAUDE_CONFIG_DIR") ?? join26(homedir7(), ".claude"), ".credentials.json");
+  return join27(effectiveStr("CLAUDE_CONFIG_DIR") ?? join27(homedir7(), ".claude"), ".credentials.json");
 }
 function readAccessToken() {
   if (process.platform === "darwin" && !effectiveStr("CLAUDE_CONFIG_DIR")) {
@@ -40497,16 +41375,16 @@ async function getLimits() {
 }
 
 // src/services/codex-limits.ts
-import { open as open3, readdir as readdir5, stat as stat2 } from "node:fs/promises";
+import { open as open3, readdir as readdir6, stat as stat3 } from "node:fs/promises";
 import { homedir as homedir8 } from "node:os";
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 var TTL_MS3 = 3e4;
 var STALE_AFTER_MS = 12 * 36e5;
 var TAIL_BYTES = 512 * 1024;
 var MAX_FILES = 8;
 var cache2 = null;
 var freshUntil2 = 0;
-var codexSessionsDir = () => join27(process.env.CODEX_HOME ?? join27(homedir8(), ".codex"), "sessions");
+var codexSessionsDir = () => join28(process.env.CODEX_HOME ?? join28(homedir8(), ".codex"), "sessions");
 var UNAVAILABLE = { status: "unavailable", windows: [], fetchedAt: null, plan: null };
 function windowLabel(minutes) {
   if (minutes === 300) return "Sesi 5 jam";
@@ -40534,14 +41412,14 @@ function toWindow(slot, raw, reached) {
 async function recentRollouts(dir2) {
   let entries3;
   try {
-    entries3 = (await readdir5(dir2, { recursive: true })).filter((f) => f.endsWith(".jsonl"));
+    entries3 = (await readdir6(dir2, { recursive: true })).filter((f) => f.endsWith(".jsonl"));
   } catch {
     return [];
   }
   const stamped = await Promise.all(entries3.map(async (rel) => {
-    const full = join27(dir2, rel);
+    const full = join28(dir2, rel);
     try {
-      return { full, mtime: (await stat2(full)).mtimeMs };
+      return { full, mtime: (await stat3(full)).mtimeMs };
     } catch {
       return null;
     }
@@ -40625,8 +41503,8 @@ async function codex(app2) {
 // src/services/model-catalog.ts
 init_src2();
 init_src();
-import { readFile as readFile4, writeFile as writeFile4, rename as rename4, mkdir as mkdir5 } from "node:fs/promises";
-import { dirname as dirname12, join as join29 } from "node:path";
+import { readFile as readFile5, writeFile as writeFile5, rename as rename4, mkdir as mkdir6 } from "node:fs/promises";
+import { dirname as dirname13, join as join30 } from "node:path";
 
 // src/services/model-catalog-parser.ts
 init_zod();
@@ -40702,8 +41580,8 @@ init_config2();
 init_session_sandbox();
 import { spawn as spawn5 } from "node:child_process";
 import { mkdtemp as mkdtemp2, rm as rm6 } from "node:fs/promises";
-import { tmpdir as tmpdir6 } from "node:os";
-import { join as join28 } from "node:path";
+import { tmpdir as tmpdir5 } from "node:os";
+import { join as join29 } from "node:path";
 var MAX_BYTES = 4 * 1024 * 1024;
 var TIMEOUT_MS = 2e4;
 var quote2 = (s2) => "'" + s2.replaceAll("'", "'\\''") + "'";
@@ -40799,7 +41677,7 @@ function runCatalogCommand(command, agent, cwd, env, timeoutMs = TIMEOUT_MS) {
   });
 }
 async function probeModelCatalog(agent) {
-  const cwd = await mkdtemp2(join28(tmpdir6(), "hanoman-models-"));
+  const cwd = await mkdtemp2(join29(tmpdir5(), "hanoman-models-"));
   const env = { ...process.env };
   for (const key of ["HANOMAN_CLAUDE_BIN", "HANOMAN_CODEX_BIN", "HANOMAN_PODMAN_BIN"]) {
     const value = effectiveStr(key);
@@ -40876,19 +41754,19 @@ function createModelCatalogService(deps) {
   }
   return { snapshot: () => state, refresh };
 }
-var cacheFile = () => join29(resolveHome(), "model-catalog.json");
+var cacheFile = () => join30(resolveHome(), "model-catalog.json");
 var modelCatalogService = createModelCatalogService({
   probe: probeModelCatalog,
   read: async () => {
-    const content = await readFile4(cacheFile(), "utf8");
+    const content = await readFile5(cacheFile(), "utf8");
     if (Buffer.byteLength(content) > 4 * 1024 * 1024) throw new Error("oversized cache");
     return JSON.parse(content);
   },
   write: async (catalog) => {
     const file = cacheFile();
-    await mkdir5(dirname12(file), { recursive: true });
+    await mkdir6(dirname13(file), { recursive: true });
     const temp = file + "." + process.pid + ".tmp";
-    await writeFile4(temp, JSON.stringify(catalog), { mode: 384 });
+    await writeFile5(temp, JSON.stringify(catalog), { mode: 384 });
     await rename4(temp, file);
   },
   now: Date.now,
@@ -40920,7 +41798,7 @@ init_src();
 init_src();
 init_config2();
 import { readFileSync as readFileSync15 } from "node:fs";
-import { resolve as resolve18, dirname as dirname13 } from "node:path";
+import { resolve as resolve19, dirname as dirname14 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 var UPDATE_COMMAND = "npm i -g hanoman@latest --prefer-online";
 function composeUpdate(x) {
@@ -40945,8 +41823,8 @@ var lastFetchAt = 0;
 var lastLatest = null;
 var lastStatus = "unavailable";
 function runningVersion() {
-  const here = dirname13(fileURLToPath4(import.meta.url));
-  for (const p3 of [resolve18(here, "build-info.json"), resolve18(here, "../package.json")]) {
+  const here = dirname14(fileURLToPath4(import.meta.url));
+  for (const p3 of [resolve19(here, "build-info.json"), resolve19(here, "../package.json")]) {
     try {
       const v = JSON.parse(readFileSync15(p3, "utf8")).version;
       if (typeof v === "string" && v) return v;
@@ -41138,20 +42016,10 @@ init_src();
 init_src();
 
 // src/services/scheduler/state.ts
+init_session_launch_gate();
+init_src();
 init_pty();
-
-// src/services/scheduler/config.ts
-init_db();
-init_settings3();
-async function getScheduler() {
-  return (await getSetting()).scheduler;
-}
-async function setScheduler(next) {
-  const cur = await getSetting();
-  const data = { ...cur, scheduler: next };
-  await prisma.setting.upsert({ where: { id: 1 }, update: { data }, create: { id: 1, data } });
-  return next;
-}
+init_config3();
 
 // src/services/scheduler/registry.ts
 var sources = /* @__PURE__ */ new Map();
@@ -41278,7 +42146,7 @@ async function isQueued(id2) {
 // src/services/scheduler/state.ts
 async function buildSchedulerState() {
   const cfg = await getScheduler();
-  const live = (await listSessionsAsync()).filter((s2) => !s2.exited);
+  const live = (await listPanesAsync()).filter((s2) => !s2.exited);
   const srcView = (id2, sc, minCount) => {
     const last = getLastRun(id2);
     return {
@@ -41296,8 +42164,16 @@ async function buildSchedulerState() {
   ];
   const counts = await queueCounts();
   const launchedSpecs = new Set((await listQueue("launched")).map((q) => q.specId));
-  const sessions = live.filter((s2) => !!s2.specId && launchedSpecs.has(s2.specId));
-  return { config: cfg, cap: cfg.maxConcurrent, liveCount: live.length, sources: sources2, queueCounts: counts, sessions };
+  const sessions = live.filter((s2) => !!s2.specId && launchedSpecs.has(s2.specId)).map((s2) => zSchedulerSessionView.parse(s2));
+  return {
+    config: cfg,
+    cap: cfg.maxConcurrent,
+    liveCount: live.length,
+    sources: sources2,
+    queueCounts: counts,
+    sessions,
+    admission: currentLaunchStatus(live, cfg)
+  };
 }
 
 // src/services/tickets-list.ts
@@ -41385,6 +42261,7 @@ init_pty();
 init_db();
 init_pty();
 init_session_phases();
+init_config3();
 init_notifications2();
 
 // src/services/lead/apply.ts
@@ -42248,7 +43125,7 @@ async function events_default(app2, opts) {
 // src/routes/device-tokens.ts
 init_src();
 init_db();
-var view3 = (t) => ({
+var view4 = (t) => ({
   id: t.id,
   name: t.name,
   createdAt: t.createdAt.toISOString(),
@@ -42256,7 +43133,7 @@ var view3 = (t) => ({
   revokedAt: t.revokedAt?.toISOString() ?? null
 });
 async function device_tokens_default(app2) {
-  app2.get("/device-tokens", async (req) => (await prisma.deviceToken.findMany({ where: { userId: req.user.id }, orderBy: { createdAt: "desc" } })).map(view3));
+  app2.get("/device-tokens", async (req) => (await prisma.deviceToken.findMany({ where: { userId: req.user.id }, orderBy: { createdAt: "desc" } })).map(view4));
   app2.post("/device-tokens", async (req, reply) => {
     const p3 = zIssueDeviceToken.safeParse(req.body);
     if (!p3.success) return reply.code(400).send({ error: p3.error.flatten() });
@@ -42492,7 +43369,7 @@ async function presence_default(app2) {
 
 // src/routes/session-results.ts
 init_db();
-var view4 = (r) => ({
+var view5 = (r) => ({
   id: r.id,
   projectId: r.projectId,
   specId: r.specId,
@@ -42515,7 +43392,7 @@ async function session_results_default(app2) {
       orderBy: { createdAt: "desc" },
       take: take3
     });
-    return rows.map(view4);
+    return rows.map(view5);
   });
   app2.delete("/session-results", async (req, reply) => {
     const { projectId, before: before2 } = req.query;
@@ -42534,280 +43411,6 @@ async function session_results_default(app2) {
   });
 }
 
-// src/services/session-history.ts
-init_db();
-init_pty();
-import { randomUUID as randomUUID9 } from "node:crypto";
-
-// src/services/transcript-store.ts
-init_config2();
-init_src2();
-import { randomUUID as randomUUID8 } from "node:crypto";
-import { mkdir as mkdir6, writeFile as writeFile5, readFile as readFile5, unlink as unlink4, readdir as readdir6, stat as stat3 } from "node:fs/promises";
-import { join as join30, resolve as resolve19, basename as basename6 } from "node:path";
-var MAX_TRANSCRIPT_BYTES = 1024 * 1024;
-function transcriptDir() {
-  return resolve19(effectiveStr("HANOMAN_TRANSCRIPT_DIR")?.trim() || resolveDataDirs().transcripts);
-}
-function clamp(text) {
-  const buf = Buffer.from(text, "utf8");
-  if (buf.byteLength <= MAX_TRANSCRIPT_BYTES) return { body: text, truncated: false };
-  const cut = buf.byteLength - MAX_TRANSCRIPT_BYTES;
-  let tail2 = buf.subarray(cut).toString("utf8");
-  const nl = tail2.indexOf("\n");
-  if (nl >= 0) tail2 = tail2.slice(nl + 1);
-  return { body: `\u2026 ${cut} byte awal dipangkas (batas ${MAX_TRANSCRIPT_BYTES} byte) \u2026
-${tail2}`, truncated: true };
-}
-async function saveTranscript(text) {
-  if (!text.trim()) return { key: "", bytes: 0, truncated: false };
-  const { body, truncated } = clamp(text);
-  const dir2 = transcriptDir();
-  await mkdir6(dir2, { recursive: true, mode: 448 });
-  const key = `${randomUUID8()}.log`;
-  await writeFile5(join30(dir2, key), body, { encoding: "utf8", mode: 384 });
-  return { key, bytes: Buffer.byteLength(body, "utf8"), truncated };
-}
-async function readTranscript(key) {
-  if (!key) return null;
-  try {
-    return await readFile5(join30(transcriptDir(), basename6(key)), "utf8");
-  } catch {
-    return null;
-  }
-}
-async function deleteTranscript(key) {
-  if (!key) return;
-  try {
-    await unlink4(join30(transcriptDir(), basename6(key)));
-  } catch (e) {
-    if (e.code !== "ENOENT") throw e;
-  }
-}
-async function listTranscripts() {
-  const dir2 = transcriptDir();
-  let names;
-  try {
-    names = await readdir6(dir2);
-  } catch (e) {
-    if (e.code === "ENOENT") return [];
-    throw e;
-  }
-  const rows = [];
-  for (const name2 of names) {
-    if (!name2.endsWith(".log")) continue;
-    try {
-      rows.push({ key: name2, mtimeMs: (await stat3(join30(dir2, name2))).mtimeMs });
-    } catch {
-    }
-  }
-  return rows;
-}
-
-// src/services/session-history.ts
-var CLOSED = "closed";
-var RECONCILED = "reconciled";
-var view5 = (r) => ({
-  id: r.id,
-  sessionId: r.sessionId,
-  projectId: r.projectId,
-  specId: r.specId,
-  title: r.title,
-  kind: r.kind,
-  flow: r.flow,
-  agent: r.agent,
-  model: r.model,
-  effort: r.effort,
-  branch: r.branch,
-  cwd: r.cwd,
-  startedAt: r.startedAt.toISOString(),
-  endedAt: r.endedAt?.toISOString() ?? null,
-  endedReason: r.endedReason,
-  reconciledAt: r.reconciledAt?.toISOString() ?? null,
-  exitCode: r.exitCode,
-  transcriptBytes: r.transcriptBytes
-});
-async function titleFor(specId) {
-  if (!specId) return null;
-  const s2 = await prisma.spec.findUnique({ where: { id: specId }, select: { title: true } });
-  return s2?.title ?? null;
-}
-async function beginSession(b) {
-  await prisma.sessionHistory.create({
-    data: {
-      id: randomUUID9(),
-      sessionId: b.sessionId,
-      projectId: b.projectId,
-      specId: b.specId ?? null,
-      title: await titleFor(b.specId),
-      kind: b.kind,
-      flow: b.flow ?? null,
-      agent: b.agent,
-      model: b.model ?? null,
-      effort: b.effort ?? null,
-      branch: b.branch ?? null,
-      cwd: b.cwd
-    }
-  });
-}
-async function finishSession(d) {
-  const open5 = await prisma.sessionHistory.findFirst({
-    where: { sessionId: d.sessionId, endedAt: null },
-    orderBy: { startedAt: "desc" }
-  });
-  if (!open5) return;
-  let t = { key: "", bytes: 0 };
-  if (d.transcript) {
-    try {
-      t = await saveTranscript(d.transcript);
-    } catch (e) {
-      console.error("riwayat sesi (transkrip tak tersimpan):", e);
-    }
-  }
-  await prisma.sessionHistory.update({
-    where: { id: open5.id },
-    data: {
-      endedAt: /* @__PURE__ */ new Date(),
-      endedReason: CLOSED,
-      exitCode: d.exitCode,
-      transcriptKey: t.key || null,
-      transcriptBytes: t.key ? t.bytes : null
-    }
-  });
-}
-async function listHistory(q) {
-  const term = q.q?.trim();
-  const where = {
-    ...q.projectId ? { projectId: q.projectId } : {},
-    ...q.specId ? { specId: q.specId } : {},
-    ...q.kind ? { kind: q.kind } : {},
-    ...term ? {
-      // SPEC-398 · ADR-0086 · SQLite tak punya `mode: "insensitive"`; `LIKE`-nya sudah
-      // case-insensitive untuk ASCII, jadi pencarian ini tetap berperilaku sama.
-      OR: [
-        { sessionId: { contains: term } },
-        { specId: { contains: term } },
-        { title: { contains: term } },
-        { branch: { contains: term } }
-      ]
-    } : {}
-  };
-  const total = await prisma.sessionHistory.count({ where });
-  const pageSize = q.limit ? Math.min(Math.max(Math.floor(+q.limit) || 1, 1), 200) : total || 1;
-  const page = Math.max(Math.floor(+(q.page ?? 1)) || 1, 1);
-  const rows = await prisma.sessionHistory.findMany({
-    where,
-    orderBy: { startedAt: "desc" },
-    skip: (page - 1) * pageSize,
-    take: pageSize
-  });
-  return { items: rows.map(view5), total, page, pageSize };
-}
-async function getHistory(id2) {
-  const r = await prisma.sessionHistory.findUnique({ where: { id: id2 } });
-  return r ? { ...view5(r), hasTranscript: !!r.transcriptKey } : null;
-}
-async function transcriptOf(id2) {
-  const r = await prisma.sessionHistory.findUnique({ where: { id: id2 }, select: { transcriptKey: true } });
-  if (!r?.transcriptKey) return null;
-  const text = await readTranscript(r.transcriptKey);
-  return text === null ? null : { text, bytes: Buffer.byteLength(text, "utf8") };
-}
-var PURGE_BATCH = 200;
-async function purgeHistory(q) {
-  const where = {
-    ...q.projectId ? { projectId: q.projectId } : {},
-    ...q.before ? { startedAt: { lt: q.before } } : {}
-  };
-  const doomed = await prisma.sessionHistory.findMany({ where, select: { id: true, transcriptKey: true } });
-  const report = { purged: 0, transcriptsDeleted: 0, transcriptsFailed: 0 };
-  for (let i = 0; i < doomed.length; i += PURGE_BATCH) {
-    const batch = doomed.slice(i, i + PURGE_BATCH);
-    const { count } = await prisma.sessionHistory.deleteMany({ where: { id: { in: batch.map((d) => d.id) } } });
-    report.purged += count;
-    for (const d of batch) {
-      if (!d.transcriptKey) continue;
-      try {
-        await deleteTranscript(d.transcriptKey);
-        report.transcriptsDeleted++;
-      } catch {
-        report.transcriptsFailed++;
-      }
-    }
-  }
-  return report;
-}
-var TRANSCRIPT_GC_GRACE_MS = 60 * 6e4;
-async function reconcileTranscripts(opts = {}) {
-  const rows = await prisma.sessionHistory.findMany({
-    where: { transcriptKey: { not: null } },
-    select: { id: true, transcriptKey: true }
-  });
-  const referenced = new Set(rows.map((r) => r.transcriptKey));
-  const onDisk = await listTranscripts();
-  const present = new Set(onDisk.map((f) => f.key));
-  const cutoff = Date.now() - (opts.graceMs ?? TRANSCRIPT_GC_GRACE_MS);
-  const report = { orphans: 0, dangling: 0, failed: 0 };
-  for (const f of onDisk) {
-    if (referenced.has(f.key) || f.mtimeMs > cutoff) continue;
-    if (opts.dryRun) {
-      report.orphans++;
-      continue;
-    }
-    try {
-      await deleteTranscript(f.key);
-      report.orphans++;
-    } catch {
-      report.failed++;
-    }
-  }
-  for (const r of rows) {
-    if (present.has(r.transcriptKey)) continue;
-    if (opts.dryRun) {
-      report.dangling++;
-      continue;
-    }
-    try {
-      await prisma.sessionHistory.update({
-        where: { id: r.id },
-        data: { transcriptKey: null, transcriptBytes: null }
-      });
-      report.dangling++;
-    } catch {
-      report.failed++;
-    }
-  }
-  return report;
-}
-async function reconcileHistory(liveSessionIds) {
-  const open5 = await prisma.sessionHistory.findMany({
-    where: { endedAt: null },
-    select: { id: true, sessionId: true, updatedAt: true }
-  });
-  const live = new Set(liveSessionIds);
-  const at = /* @__PURE__ */ new Date();
-  let closed = 0;
-  for (const r of open5) {
-    if (live.has(r.sessionId)) continue;
-    await prisma.sessionHistory.update({
-      where: { id: r.id },
-      data: { endedAt: r.updatedAt, endedReason: RECONCILED, reconciledAt: at }
-    });
-    closed++;
-  }
-  return closed;
-}
-function installSessionHistory() {
-  registerSessionHooks({
-    onBirth: (b) => {
-      void beginSession(b).catch((e) => console.error("riwayat sesi (lahir):", e));
-    },
-    onDeath: (d) => {
-      void finishSession(d).catch((e) => console.error("riwayat sesi (tutup):", e));
-    }
-  });
-}
-
 // src/routes/session-history.ts
 async function session_history_default(app2) {
   app2.get("/terminal/history", async (req) => {
@@ -42842,17 +43445,154 @@ init_pty();
 // src/services/agent-invocations.ts
 init_src();
 init_db();
-import { createHash as createHash8, randomUUID as randomUUID10 } from "node:crypto";
+import { createHash as createHash9, randomUUID as randomUUID10 } from "node:crypto";
 import { execFileSync as execFileSync5 } from "node:child_process";
 import { homedir as homedir9 } from "node:os";
 import { readFileSync as readFileSync16, realpathSync as realpathSync5, statSync as statSync4 } from "node:fs";
 import { isAbsolute as isAbsolute7, relative as relative3, resolve as resolve20 } from "node:path";
+
+// src/services/session-event-relay.ts
+init_session_event_token();
+init_session_event_spool();
+import { constants as constants3 } from "node:fs";
+import { mkdir as mkdir7, open as open4, readdir as readdir7, rm as rm7 } from "node:fs/promises";
+import { join as join31 } from "node:path";
+var MAX_EVENT_BYTES = 1e6;
+var MAX_FILES_PER_DRAIN = 1e3;
+var SESSION_ID_RE = /^[a-z0-9_-]+$/;
+var observations = /* @__PURE__ */ new Map();
+function sessionEventRelayStatus(root = sessionEventSpoolRoot()) {
+  return { ...observations.get(root) ?? {
+    state: "unobserved",
+    checkedAt: null,
+    lastDeliveryAt: null,
+    lastIssueAt: null,
+    retryPending: 0,
+    retryAttempts: 0,
+    droppedEvents: 0
+  } };
+}
+async function drainSessionEventSpool(app2, root = sessionEventSpoolRoot()) {
+  const previous = sessionEventRelayStatus(root);
+  const current = { retries: 0, dropped: 0 };
+  let delivered = 0;
+  let failed = false;
+  try {
+    delivered = await drainSpool(app2, root, current);
+    return delivered;
+  } catch (error) {
+    failed = true;
+    throw error;
+  } finally {
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    observations.set(root, {
+      state: failed || current.retries > 0 ? "degraded" : "ready",
+      checkedAt: now,
+      lastDeliveryAt: delivered ? now : previous.lastDeliveryAt,
+      lastIssueAt: failed || current.retries || current.dropped ? now : previous.lastIssueAt,
+      retryPending: current.retries,
+      retryAttempts: previous.retryAttempts + current.retries,
+      droppedEvents: previous.droppedEvents + current.dropped
+    });
+  }
+}
+async function drainSpool(app2, root, observation) {
+  await mkdir7(root, { recursive: true, mode: 448 });
+  let delivered = 0;
+  let examined = 0;
+  let readBuffer;
+  for (const session of await readdir7(root, { withFileTypes: true })) {
+    if (!session.isDirectory() || !SESSION_ID_RE.test(session.name)) continue;
+    const dir2 = join31(root, session.name);
+    let entries3;
+    try {
+      entries3 = await readdir7(dir2, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const entry of entries3) {
+      if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
+      if (++examined > MAX_FILES_PER_DRAIN) return delivered;
+      const path = join31(dir2, entry.name);
+      let payload;
+      let handle;
+      try {
+        handle = await open4(path, constants3.O_RDONLY | constants3.O_NOFOLLOW);
+        const stat4 = await handle.stat();
+        if (!stat4.isFile() || stat4.size > MAX_EVENT_BYTES) throw new Error("payload terlalu besar");
+        readBuffer ??= Buffer.allocUnsafe(MAX_EVENT_BYTES + 1);
+        const { bytesRead } = await handle.read(readBuffer, 0, readBuffer.length, 0);
+        if (bytesRead > MAX_EVENT_BYTES) throw new Error("payload terlalu besar");
+        const parsed = JSON.parse(readBuffer.subarray(0, bytesRead).toString("utf8"));
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+          throw new Error("payload event bukan object");
+        }
+        payload = parsed;
+      } catch {
+        observation.dropped++;
+        await rm7(path, { force: true }).catch(() => {
+        });
+        continue;
+      } finally {
+        await handle?.close().catch(() => {
+        });
+      }
+      try {
+        const response = await app2.inject({
+          method: "POST",
+          url: "/api/session-events",
+          headers: {
+            authorization: `Bearer ${sessionEventToken(session.name)}`,
+            "x-hanoman-session": session.name
+          },
+          payload
+        });
+        if (response.statusCode === 429 || response.statusCode >= 500) {
+          observation.retries++;
+          continue;
+        }
+        await rm7(path, { force: true }).catch(() => {
+        });
+        if (response.statusCode >= 200 && response.statusCode < 300) delivered++;
+        else observation.dropped++;
+      } catch {
+        observation.retries++;
+      }
+    }
+  }
+  return delivered;
+}
+function startSessionEventRelay(app2, options2 = {}) {
+  const root = options2.root ?? sessionEventSpoolRoot();
+  let running = false;
+  const tick6 = async () => {
+    if (running) return;
+    running = true;
+    try {
+      await drainSessionEventSpool({ inject: async (request) => app2.inject(request) }, root);
+    } catch (error) {
+      console.error("session event relay gagal:", error);
+    } finally {
+      running = false;
+    }
+  };
+  const timer9 = setInterval(() => {
+    void tick6();
+  }, options2.intervalMs ?? 250);
+  timer9.unref();
+  app2.addHook("onClose", async () => {
+    clearInterval(timer9);
+  });
+  void tick6();
+}
+
+// src/services/agent-invocations.ts
 var MAX_EXCERPT_BYTES = 4096;
 var MAX_TRANSCRIPT_BYTES2 = 10 * 1024 * 1024;
 var ANSI2 = /[\u001b\u009b](?:\][^\u0007]*(?:\u0007|\u001b\\)|\[[0-?]*[ -/]*[@-~]|[@-_])/g;
 var snapshotHashes = /* @__PURE__ */ new Map();
 var keyOf = (x) => `${x.sessionId}\0${x.runtimeInvocationId}`;
-var hash2 = (value) => createHash8("sha256").update(value).digest("hex");
+var hash2 = (value) => createHash9("sha256").update(value).digest("hex");
 var defaultGitStatus = (cwd) => {
   try {
     return execFileSync5("git", ["-C", cwd, "status", "--porcelain=v1", "-z"], {
@@ -42958,6 +43698,7 @@ async function startAgentInvocation(input, io = {}) {
       customAgentId: input.customAgentId ?? null,
       agentName: input.agentName,
       model: input.model ?? null,
+      definitionHash: input.definitionHash ?? null,
       status: "running",
       startedAt
     }
@@ -43006,6 +43747,7 @@ async function stopAgentInvocation(input, io = {}) {
       customAgentId: input.customAgentId ?? null,
       agentName: input.agentName,
       model: input.model ?? null,
+      definitionHash: input.definitionHash ?? null,
       startedAt,
       ...evidence
     }
@@ -43040,6 +43782,7 @@ var agentInvocationView = (row) => ({
   customAgentId: row.customAgentId,
   agentName: row.agentName,
   model: row.model,
+  definitionHash: row.definitionHash,
   status: row.status,
   startedAt: row.startedAt.toISOString(),
   endedAt: row.endedAt?.toISOString() ?? null,
@@ -43052,7 +43795,8 @@ var agentInvocationView = (row) => ({
   workspaceChanged: row.workspaceChanged,
   disposition: AGENT_DISPOSITIONS.includes(row.disposition) ? row.disposition : "pending",
   dispositionNote: row.dispositionNote,
-  evaluatedAt: row.evaluatedAt?.toISOString() ?? null
+  evaluatedAt: row.evaluatedAt?.toISOString() ?? null,
+  reworkRequired: row.reworkRequired
 });
 var median = (values) => {
   if (values.length === 0) return null;
@@ -43074,8 +43818,17 @@ async function agentMetrics(query2) {
   };
   const rows = await prisma.agentInvocation.findMany({ where, orderBy: { startedAt: "desc" } });
   const groups = /* @__PURE__ */ new Map();
-  for (const row of rows) groups.set(row.agentName, [...groups.get(row.agentName) ?? [], row]);
-  const agents = [...groups.entries()].map(([agentName, invocations]) => {
+  const variantGroups = /* @__PURE__ */ new Map();
+  const add = (map, key, row) => {
+    const group2 = map.get(key);
+    if (group2) group2.push(row);
+    else map.set(key, [row]);
+  };
+  for (const row of rows) {
+    add(groups, row.agentName, row);
+    add(variantGroups, JSON.stringify([row.agentName, row.runtime, row.model, row.definitionHash]), row);
+  }
+  const summarize = (agentName, invocations) => {
     const dispositions = { pending: 0, accepted: 0, partial: 0, rejected: 0, falsePositive: 0 };
     for (const row of invocations) {
       if (row.disposition === "accepted") dispositions.accepted++;
@@ -43094,12 +43847,47 @@ async function agentMetrics(query2) {
       cachedTokens: availableSum(invocations.map((row) => row.cachedTokens)),
       dispositions,
       operationalPrecision: evaluated ? (dispositions.accepted + dispositions.partial) / evaluated : null,
-      workspaceChanged: invocations.some((row) => row.workspaceChanged)
+      workspaceChanged: invocations.some((row) => row.workspaceChanged),
+      evaluatedCount: evaluated,
+      rework: {
+        required: invocations.filter((row) => row.reworkRequired === true).length,
+        notRequired: invocations.filter((row) => row.reworkRequired === false).length,
+        unknown: invocations.filter((row) => row.reworkRequired === null).length
+      }
     };
-  }).sort((a, b) => a.agentName.localeCompare(b.agentName));
-  return { agents, recent: rows.slice(0, 100).map(agentInvocationView) };
+  };
+  const agents = [...groups.entries()].map(([name2, group2]) => summarize(name2, group2)).sort((a, b) => a.agentName.localeCompare(b.agentName));
+  const variants = [...variantGroups.values()].map((group2) => ({
+    ...summarize(group2[0].agentName, group2),
+    runtime: group2[0].runtime === "codex" ? "codex" : "claude",
+    model: group2[0].model,
+    definitionHash: group2[0].definitionHash
+  })).sort((a, b) => JSON.stringify([a.agentName, a.runtime, a.model, a.definitionHash]).localeCompare(JSON.stringify([b.agentName, b.runtime, b.model, b.definitionHash])));
+  const lastEventAt = rows.reduce((latest, row) => Math.max(latest, row.startedAt.getTime(), row.endedAt?.getTime() ?? 0), 0);
+  const sampleRows = /* @__PURE__ */ new Map();
+  for (const group2 of groups.values()) {
+    for (const category of [
+      (row) => row.disposition === "pending",
+      (row) => row.disposition !== "pending",
+      (row) => row.reworkRequired === true
+    ]) {
+      for (const row of group2.filter(category).slice(0, 2)) sampleRows.set(row.id, row);
+    }
+  }
+  return {
+    agents,
+    variants,
+    recent: rows.slice(0, 100).map(agentInvocationView),
+    samples: [...sampleRows.values()].map(agentInvocationView),
+    telemetry: {
+      state: rows.length ? "observed" : "unobserved",
+      lastEventAt: rows.length ? new Date(lastEventAt).toISOString() : null,
+      incompleteCount: rows.filter((row) => !row.endedAt || row.resultHash === null).length,
+      relay: sessionEventRelayStatus()
+    }
+  };
 }
-async function updateAgentInvocationDisposition(id2, disposition, note) {
+async function updateAgentInvocationDisposition(id2, disposition, note, reworkRequired) {
   const exists = await prisma.agentInvocation.findUnique({ where: { id: id2 } });
   if (!exists) return null;
   const row = await prisma.agentInvocation.update({
@@ -43107,7 +43895,8 @@ async function updateAgentInvocationDisposition(id2, disposition, note) {
     data: {
       disposition,
       dispositionNote: note?.trim() || null,
-      evaluatedAt: /* @__PURE__ */ new Date()
+      evaluatedAt: /* @__PURE__ */ new Date(),
+      ...reworkRequired !== void 0 ? { reworkRequired } : {}
     }
   });
   return agentInvocationView(row);
@@ -43144,6 +43933,7 @@ async function session_events_default(app2) {
         customAgentId: meta.id,
         agentName: meta.name,
         model: meta.model,
+        definitionHash: meta.definitionHash,
         cwd: s2.cwd
       };
       const outcome = lifecycle === "SubagentStart" ? await startAgentInvocation(identity) : await stopAgentInvocation({
@@ -43250,9 +44040,9 @@ init_db();
 init_db();
 init_uploads();
 init_src();
-import { createHash as createHash10, randomBytes as randomBytes6 } from "node:crypto";
+import { createHash as createHash11, randomBytes as randomBytes6 } from "node:crypto";
 function hashAccessKey(key) {
-  return createHash10("sha256").update(key).digest("hex");
+  return createHash11("sha256").update(key).digest("hex");
 }
 function generateAccessKey() {
   const key = "hnm_tkt_" + randomBytes6(24).toString("hex");
@@ -43646,6 +44436,7 @@ async function tickets_default(app2, opts = {}) {
 init_zod();
 init_src();
 init_db();
+init_config3();
 
 // src/services/scheduler/cron.ts
 init_db();
@@ -44377,6 +45168,7 @@ async function changelog_default(app2) {
 }
 
 // src/routes/custom-agents.ts
+init_src2();
 init_src();
 init_db();
 init_sync_notify();
@@ -44398,10 +45190,28 @@ var availabilityOf = (r, requestedRuntime) => {
       availabilityReason: "isolated-worktree belum tersedia untuk subagent Codex"
     };
   }
+  if (effectiveRuntime === "codex") {
+    const support = currentCustomAgentRuntimeSupport();
+    if (!support.ok) {
+      return {
+        available: false,
+        availabilityReason: `native subagent perlu Codex >= ${CODEX_NATIVE_AGENTS_MIN_CLIENT}; versi ${support.version ?? "belum terdeteksi"}`
+      };
+    }
+  }
   return { available: true };
 };
+var selectionReasonOf = (r, availability) => {
+  if (!r.enabled) return "dinonaktifkan operator";
+  if (!availability.available) return "tidak masuk registry runtime ini";
+  if (activationOf(r.activation) === "smart") {
+    return "tersedia sepanjang sesi; parent menilai kebutuhan dari pekerjaan terbaru";
+  }
+  return "selalu tersedia sepanjang sesi";
+};
 var view8 = (r, projectId, stamps = {}, requestedRuntime) => {
   const builtin = r.projectId === null && BUILTIN_AGENT_NAMES.includes(r.name);
+  const availability = availabilityOf(r, requestedRuntime);
   return {
     id: r.id,
     projectId: r.projectId,
@@ -44423,7 +45233,8 @@ var view8 = (r, projectId, stamps = {}, requestedRuntime) => {
     // pernah menyentuhnya) dibaca sebagai "disunting" — lebih baik menandai berlebih daripada
     // menjanjikan "asli bawaan" untuk isi yang tak bisa kita buktikan.
     builtinEdited: builtin ? stamps[r.name] !== rowFingerprint(r) : false,
-    ...availabilityOf(r, requestedRuntime),
+    ...availability,
+    selectionReason: selectionReasonOf(r, availability),
     ...projectId ? { inherited: r.projectId === null } : {}
   };
 };
@@ -44631,7 +45442,8 @@ var zQuery = external_exports.object({
 });
 var zPatch = external_exports.object({
   disposition: external_exports.enum(["accepted", "partial", "rejected", "false-positive"]),
-  note: external_exports.string().max(500).nullable().optional()
+  note: external_exports.string().max(500).nullable().optional(),
+  reworkRequired: external_exports.boolean().nullable().optional()
 }).strict();
 async function custom_agent_metrics_default(app2) {
   app2.get("/custom-agents/metrics", async (req, reply) => {
@@ -44646,7 +45458,12 @@ async function custom_agent_metrics_default(app2) {
     const body = zPatch.safeParse(req.body);
     if (!body.success) return reply.code(400).send({ error: body.error.issues[0]?.message });
     const id2 = String(req.params.id ?? "");
-    const view13 = await updateAgentInvocationDisposition(id2, body.data.disposition, body.data.note);
+    const view13 = await updateAgentInvocationDisposition(
+      id2,
+      body.data.disposition,
+      body.data.note,
+      body.data.reworkRequired
+    );
     return view13 ?? reply.code(404).send({ error: "invocation tidak ditemukan" });
   });
 }
@@ -45357,8 +46174,8 @@ async function telegramInboundReadiness(deps = {}) {
   if (!setting.agentAccessEnabled) {
     return { ok: false, reason: "Akses agent mati \u2014 nyalakan master switch di Akses AI Agent.", missingCapabilities: empty, polling: polling2 };
   }
-  const gate = await verifyTelegramAgentToken(token, deps);
-  if (!gate.ok) return { ok: false, reason: gate.reason, missingCapabilities: gate.missing, polling: polling2 };
+  const gate2 = await verifyTelegramAgentToken(token, deps);
+  if (!gate2.ok) return { ok: false, reason: gate2.reason, missingCapabilities: gate2.missing, polling: polling2 };
   if (!polling2) {
     return { ok: false, reason: "Kredensial sudah sah tapi gateway belum polling \u2014 nyalakan \u201CGateway aktif\u201D.", missingCapabilities: empty, polling: polling2 };
   }
@@ -45397,9 +46214,9 @@ async function saveTelegramCredentials(patch, deps = {}) {
   }
   const agentToken = writes.find(([key]) => key === "HANOMAN_TELEGRAM_AGENT_TOKEN")?.[1];
   if (agentToken !== void 0) {
-    const gate = await verifyTelegramAgentToken(agentToken, deps);
-    if (!gate.ok) {
-      const detail = gate.missing.length < TELEGRAM_REQUIRED_CAPABILITIES.length ? `${gate.reason} Kurang: ${gate.missing.join(", ")}.` : gate.reason;
+    const gate2 = await verifyTelegramAgentToken(agentToken, deps);
+    if (!gate2.ok) {
+      const detail = gate2.missing.length < TELEGRAM_REQUIRED_CAPABILITIES.length ? `${gate2.reason} Kurang: ${gate2.missing.join(", ")}.` : gate2.reason;
       return { ok: false, key: "HANOMAN_TELEGRAM_AGENT_TOKEN", error: detail };
     }
   }
@@ -46146,8 +46963,8 @@ ${baru}`;
 init_src();
 init_db();
 import { mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync2, rmSync as rmSync8, writeFileSync as writeFileSync9 } from "node:fs";
-import { tmpdir as tmpdir7 } from "node:os";
-import { join as join32 } from "node:path";
+import { tmpdir as tmpdir6 } from "node:os";
+import { join as join33 } from "node:path";
 var STAGE_LABEL = {
   brainstorming: "Dirumuskan",
   objective: "Dirumuskan",
@@ -46202,7 +47019,7 @@ ${c.body}
 ${baris.join("\n")}`;
 }
 async function buildChatWorkspace(projectId) {
-  const dir2 = mkdtempSync2(join32(tmpdir7(), "hanoman-portal-chat-"));
+  const dir2 = mkdtempSync2(join33(tmpdir6(), "hanoman-portal-chat-"));
   try {
     const project = await prisma.project.findUnique({
       where: { id: projectId },
@@ -46223,7 +47040,7 @@ async function buildChatWorkspace(projectId) {
     });
     const files = [];
     const tulis = (rel, isi) => {
-      writeFileSync9(join32(dir2, rel), isi, { mode: 384 });
+      writeFileSync9(join33(dir2, rel), isi, { mode: 384 });
       files.push(rel);
     };
     tulis("project.md", renderProjectDoc(project));
@@ -46232,11 +47049,11 @@ async function buildChatWorkspace(projectId) {
     tulis("catatan-rilis.md", renderChangelogDoc(changelogs));
     const prds = await listPrds(projectId);
     if (prds.length) {
-      mkdirSync12(join32(dir2, "dokumen"), { mode: 448 });
+      mkdirSync12(join33(dir2, "dokumen"), { mode: 448 });
       for (const prd of prds) {
         const isi = await readPrd(projectId, prd.path);
         if (!isi) continue;
-        tulis(join32("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
+        tulis(join33("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
       }
     }
     return { dir: dir2, files, cleanup: () => rmSync8(dir2, { recursive: true, force: true }) };
@@ -46453,7 +47270,7 @@ var toMessageView = (m) => ({
   createdAt: m.createdAt.toISOString()
 });
 async function portal_chat_default(app2) {
-  async function gate(userId, projectId) {
+  async function gate2(userId, projectId) {
     const s2 = await getSetting();
     if (!s2.portalChat.enabled) return null;
     if (!await hasProjectAccess(userId, projectId)) return null;
@@ -46465,13 +47282,13 @@ async function portal_chat_default(app2) {
   }
   app2.get("/portal/projects/:id/chat", async (req, reply) => {
     const { id: id2 } = req.params;
-    const cfg = await gate(req.user.id, id2);
+    const cfg = await gate2(req.user.id, id2);
     if (!cfg) return reply.code(404).send(NOT_FOUND2);
     return quotaView(id2, cfg);
   });
   app2.get("/portal/projects/:id/chat/sessions", async (req, reply) => {
     const { id: id2 } = req.params;
-    if (!await gate(req.user.id, id2)) return reply.code(404).send(NOT_FOUND2);
+    if (!await gate2(req.user.id, id2)) return reply.code(404).send(NOT_FOUND2);
     const { page, limit } = req.query;
     const rows = await prisma.portalChatSession.findMany({
       where: { projectId: id2, userId: req.user.id },
@@ -46481,7 +47298,7 @@ async function portal_chat_default(app2) {
   });
   app2.post("/portal/projects/:id/chat/sessions", async (req, reply) => {
     const { id: id2 } = req.params;
-    const cfg = await gate(req.user.id, id2);
+    const cfg = await gate2(req.user.id, id2);
     if (!cfg) return reply.code(404).send(NOT_FOUND2);
     const parsed = zStart.safeParse(req.body);
     if (!parsed.success) return reply.code(400).send({ error: "tipe sesi tak dikenal" });
@@ -46497,7 +47314,7 @@ async function portal_chat_default(app2) {
   });
   app2.get("/portal/projects/:id/chat/sessions/:sid", async (req, reply) => {
     const { id: id2, sid } = req.params;
-    if (!await gate(req.user.id, id2)) return reply.code(404).send(NOT_FOUND2);
+    if (!await gate2(req.user.id, id2)) return reply.code(404).send(NOT_FOUND2);
     const s2 = await ownSession(req.user.id, id2, sid);
     if (!s2) return reply.code(404).send(NOT_FOUND2);
     const { page, limit } = req.query;
@@ -46509,7 +47326,7 @@ async function portal_chat_default(app2) {
   });
   app2.post("/portal/projects/:id/chat/sessions/:sid/messages", async (req, reply) => {
     const { id: id2, sid } = req.params;
-    const cfg = await gate(req.user.id, id2);
+    const cfg = await gate2(req.user.id, id2);
     if (!cfg) return reply.code(404).send(NOT_FOUND2);
     const s2 = await ownSession(req.user.id, id2, sid);
     if (!s2) return reply.code(404).send(NOT_FOUND2);
@@ -46747,15 +47564,15 @@ init_src();
 init_db();
 
 // src/services/bootstrap.ts
-import { createHash as createHash11, randomBytes as randomBytes10, timingSafeEqual as timingSafeEqual4 } from "node:crypto";
-import { chmod, lstat as lstat3, mkdir as mkdir7, readFile as readFile6, unlink as unlink5, writeFile as writeFile6 } from "node:fs/promises";
-import { join as join33 } from "node:path";
+import { createHash as createHash12, randomBytes as randomBytes10, timingSafeEqual as timingSafeEqual4 } from "node:crypto";
+import { chmod, lstat as lstat3, mkdir as mkdir8, readFile as readFile6, unlink as unlink5, writeFile as writeFile6 } from "node:fs/promises";
+import { join as join34 } from "node:path";
 var TTL_MS5 = 15 * 6e4;
 var SETUP_TOKEN_FILE = "setup.token";
 var BootstrapError = class extends Error {
   code = "BOOTSTRAP_PROOF";
 };
-var tokenPath = (home3) => join33(home3, SETUP_TOKEN_FILE);
+var tokenPath = (home3) => join34(home3, SETUP_TOKEN_FILE);
 async function readStored(home3) {
   try {
     const info = await lstat3(tokenPath(home3));
@@ -46770,7 +47587,7 @@ async function readStored(home3) {
   }
 }
 async function ensureSetupToken(home3, now = Date.now()) {
-  await mkdir7(home3, { recursive: true, mode: 448 });
+  await mkdir8(home3, { recursive: true, mode: 448 });
   const homeInfo = await lstat3(home3);
   if (homeInfo.isSymbolicLink() || !homeInfo.isDirectory()) throw new BootstrapError("invalid setup home");
   await chmod(home3, 448);
@@ -46800,8 +47617,8 @@ ${new Date(expiresAt).toISOString()}
 }
 async function verifySetupToken(candidate, home3, now = Date.now()) {
   const stored = await readStored(home3);
-  const got = createHash11("sha256").update(candidate).digest();
-  const want = createHash11("sha256").update(stored.token).digest();
+  const got = createHash12("sha256").update(candidate).digest();
+  const want = createHash12("sha256").update(stored.token).digest();
   if (stored.expiresAt <= now || !timingSafeEqual4(got, want)) throw new BootstrapError("invalid setup proof");
 }
 async function consumeSetupToken(home3) {
@@ -47144,7 +47961,7 @@ function isDestructiveTelegramRequest(method, path, body) {
   if (verb === "POST") {
     if (/\/update\/apply$/.test(path)) return true;
     if (/\/(?:specs|terminal\/sessions)\/[^/]+\/integrate$/.test(path)) return true;
-    if (/\/projects\/[^/]+\/(?:git\/(?:merge|rebase|drop|reset|clean)|branches\/delete)$/.test(path)) return true;
+    if (/\/projects\/[^/]+\/(?:git\/(?:merge|rebase|drop|reset|clean)|(?:branches|worktrees)\/delete)$/.test(path)) return true;
     if (/\/projects\/[^/]+\/git$/.test(path)) {
       const data = typeof body === "object" && body !== null ? body : {};
       return (/* @__PURE__ */ new Set([
@@ -47267,9 +48084,14 @@ var SETUP_PUBLIC = /* @__PURE__ */ new Set([
   "POST /api/setup"
 ]);
 function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {}) {
-  const docFile = agentDocFile !== void 0 ? agentDocFile : pickGuideFile(dirname14(fileURLToPath5(import.meta.url)), env, existsSync18);
+  const docFile = agentDocFile !== void 0 ? agentDocFile : pickGuideFile(dirname15(fileURLToPath5(import.meta.url)), env, existsSync18);
   const ingress = loadIngressPolicy(env);
   const app2 = Fastify({ logger: false, trustProxy: trustProxyFromEnv(env) });
+  app2.setErrorHandler((error, _req, reply) => {
+    if (error instanceof LaunchAdmissionError)
+      return reply.code(409).send({ error: error.message, kind: error.kind, admission: error.admission });
+    return reply.send(error);
+  });
   app2.addHook("onRequest", async (req, reply) => {
     const role = classifyIngress({ host: req.headers.host ?? "", method: req.method, url: req.url }, ingress);
     if (role === "denied") return reply.code(404).send({ error: "not found" });
@@ -47384,7 +48206,7 @@ function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {})
     await api.register(tasks_default);
   }, { prefix: "/api" });
   if (shouldServeWeb(env)) {
-    const dist = pickWebDir(dirname14(fileURLToPath5(import.meta.url)), env, existsSync18);
+    const dist = pickWebDir(dirname15(fileURLToPath5(import.meta.url)), env, existsSync18);
     if (dist) {
       app2.register(fastifyStatic, { root: dist });
       app2.setNotFoundHandler((req, reply) => req.url.startsWith("/api") ? reply.code(404).send({ error: "not found" }) : req.url.startsWith("/assets/") ? reply.code(404).type("text/plain").send("not found") : reply.sendFile("index.html"));
@@ -47432,8 +48254,10 @@ function startVpsMonitor() {
 // src/services/scheduler/engine.ts
 init_db();
 init_src();
+init_config3();
 
 // src/services/scheduler/governor.ts
+init_session_admission();
 init_db();
 init_notifications2();
 var ALREADY_DONE_NOTE = "spec sudah selesai \u2014 tak diluncurkan";
@@ -47462,7 +48286,7 @@ async function drainCronRuns(slots, deps) {
       await close("skipped", CRON_OPTOUT_NOTE);
       continue;
     }
-    const live = deps.liveCron(cron.id);
+    const live = await deps.liveCron(cron.id);
     if (live) {
       await close("skipped", cronLiveNote(live));
       continue;
@@ -47486,7 +48310,8 @@ async function drainCronRuns(slots, deps) {
       await prisma.schedulerCron.update({ where: { id: cron.id }, data: { lastRunAt: /* @__PURE__ */ new Date() } });
       slots--;
     } catch (e) {
-      await close("failed", e.message);
+      if (e instanceof LaunchAdmissionError) await noteCronRun(run4.id, e.message);
+      else await close("failed", e.message);
     }
   }
   return slots;
@@ -47496,7 +48321,7 @@ async function drain(cfg, deps) {
   if (draining) return;
   draining = true;
   try {
-    let slots = cfg.maxConcurrent - deps.liveCount();
+    let slots = cfg.maxConcurrent - await deps.liveCount();
     slots = await deps.drainCrons(slots);
     if (slots <= 0) return;
     for (const item of await queued2()) {
@@ -47511,7 +48336,7 @@ async function drain(cfg, deps) {
         await noteRow(item.id, blockedNote(blocked));
         continue;
       }
-      const liveId = deps.isLive(item.specId);
+      const liveId = await deps.isLive(item.specId);
       if (liveId) {
         await markLaunched(item.id, liveId);
         continue;
@@ -47521,6 +48346,10 @@ async function drain(cfg, deps) {
         if (!await markLaunched(item.id, sessionId2)) await noteRow(item.id, canceledRaceNote(sessionId2));
         slots--;
       } catch (e) {
+        if (e instanceof LaunchAdmissionError) {
+          await noteRow(item.id, e.message);
+          break;
+        }
         await markFailed(item.id, e.message);
       }
     }
@@ -47535,36 +48364,39 @@ init_src2();
 init_settings3();
 init_codex_trust();
 init_pty();
+init_session_launch_gate();
 var cronSessionId = (cronId) => `cron-${cronId.toLowerCase().replace(/[^a-z0-9_-]/g, "_")}`;
-function liveCronSession(cronId) {
-  const s2 = getSession(cronSessionId(cronId));
+async function liveCronSession(cronId) {
+  const s2 = await getSessionAsync(cronSessionId(cronId));
   return s2 && !s2.exited ? s2.id : null;
 }
 async function startCronSession(cron) {
-  const repoDir = await resolveRepoDir(cron.projectId);
-  if (!repoDir) throw new Error(`project "${cron.projectId}" belum di-bind ke checkout lokal`);
-  const project = await prisma.project.findUnique({ where: { id: cron.projectId } });
-  if (!project) throw new Error(`project "${cron.projectId}" tak ada`);
-  const { agent, model, effort: effort2 } = await terminalAgentDefaults({
-    agent: cron.agent ?? void 0,
-    model: cron.model ?? void 0,
-    effort: cron.effort ?? void 0
-  });
-  if (agent === "codex") ensureCodexTrust(repoDir);
   const id2 = cronSessionId(cron.id);
-  const wt = `${repoDir}/.worktrees/${id2}`;
-  if (!realGit.worktreeAlive(wt)) realGit.addWorktree(repoDir, wt, "HEAD");
-  const s2 = createSession(cron.projectId, wt, {
-    id: id2,
-    agent,
-    model,
-    effort: effort2,
-    prompt: cronPrompt(
-      { id: project.id, name: project.name, desc: project.desc, stack: project.stack },
-      { name: cron.name, prompt: cron.prompt }
-    )
-  });
-  return { id: s2.id };
+  return withSessionAdmission({ id: id2 }, async () => {
+    const repoDir = await resolveRepoDir(cron.projectId);
+    if (!repoDir) throw new Error(`project "${cron.projectId}" belum di-bind ke checkout lokal`);
+    const project = await prisma.project.findUnique({ where: { id: cron.projectId } });
+    if (!project) throw new Error(`project "${cron.projectId}" tak ada`);
+    const { agent, model, effort: effort2 } = await terminalAgentDefaults({
+      agent: cron.agent ?? void 0,
+      model: cron.model ?? void 0,
+      effort: cron.effort ?? void 0
+    });
+    if (agent === "codex") ensureCodexTrust(repoDir);
+    const wt = `${repoDir}/.worktrees/${id2}`;
+    if (!realGit.worktreeAlive(wt)) realGit.addWorktree(repoDir, wt, "HEAD");
+    const s2 = createSession(cron.projectId, wt, {
+      id: id2,
+      agent,
+      model,
+      effort: effort2,
+      prompt: cronPrompt(
+        { id: project.id, name: project.name, desc: project.desc, stack: project.stack },
+        { name: cron.name, prompt: cron.prompt }
+      )
+    });
+    return { id: s2.id };
+  }, (pane) => ({ id: pane.id }));
 }
 
 // src/services/scheduler/reconcile.ts
@@ -47675,9 +48507,9 @@ async function tick3(now, deps, end2 = prodEnd) {
   }
 }
 var prodDeps = {
-  liveCount: () => listSessions().filter((s2) => !s2.exited).length,
-  isLive: (specId) => {
-    const s2 = getSession(sessionIdForSpec(specId));
+  liveCount: async () => (await listSessionsAsync()).filter((s2) => !s2.exited).length,
+  isLive: async (specId) => {
+    const s2 = await getSessionAsync(sessionIdForSpec(specId));
     return s2 && !s2.exited ? s2.id : null;
   },
   // SPEC-431 · dibaca ULANG dari DB tepat sebelum launch, bukan dari baris antrean: antrean tak
@@ -48127,7 +48959,7 @@ init_session_sandbox();
 init_src2();
 
 // src/services/secure-home.ts
-import { chmod as chmod2, lstat as lstat4, mkdir as mkdir8 } from "node:fs/promises";
+import { chmod as chmod2, lstat as lstat4, mkdir as mkdir9 } from "node:fs/promises";
 import { isAbsolute as isAbsolute8, resolve as resolve21 } from "node:path";
 var HomePermissionError = class extends Error {
   code = "HOME_SYMLINK";
@@ -48144,12 +48976,12 @@ async function assertNoSymlink(path, allowMissing) {
 async function secureHanomanHome(opts) {
   if (!isAbsolute8(opts.home)) throw new HomePermissionError("HANOMAN_HOME harus absolut");
   await assertNoSymlink(opts.home, true);
-  await mkdir8(opts.home, { recursive: true, mode: 448 });
+  await mkdir9(opts.home, { recursive: true, mode: 448 });
   await assertNoSymlink(opts.home, false);
   await chmod2(opts.home, 448);
   for (const directory of opts.directories ?? []) {
     await assertNoSymlink(directory, true);
-    await mkdir8(directory, { recursive: true, mode: 448 });
+    await mkdir9(directory, { recursive: true, mode: 448 });
     await assertNoSymlink(directory, false);
     await chmod2(directory, 448);
   }
@@ -48332,101 +49164,6 @@ function startRetentionSweep() {
 
 // src/server.ts
 init_uploads();
-
-// src/services/session-event-relay.ts
-init_session_event_token();
-init_session_event_spool();
-import { constants as constants3 } from "node:fs";
-import { mkdir as mkdir9, open as open4, readdir as readdir7, rm as rm7 } from "node:fs/promises";
-import { join as join34 } from "node:path";
-var MAX_EVENT_BYTES = 1e6;
-var MAX_FILES_PER_DRAIN = 1e3;
-var SESSION_ID_RE = /^[a-z0-9_-]+$/;
-async function drainSessionEventSpool(app2, root = sessionEventSpoolRoot()) {
-  await mkdir9(root, { recursive: true, mode: 448 });
-  let delivered = 0;
-  let examined = 0;
-  let readBuffer;
-  for (const session of await readdir7(root, { withFileTypes: true })) {
-    if (!session.isDirectory() || !SESSION_ID_RE.test(session.name)) continue;
-    const dir2 = join34(root, session.name);
-    let entries3;
-    try {
-      entries3 = await readdir7(dir2, { withFileTypes: true });
-    } catch {
-      continue;
-    }
-    for (const entry of entries3) {
-      if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
-      if (++examined > MAX_FILES_PER_DRAIN) return delivered;
-      const path = join34(dir2, entry.name);
-      let payload;
-      let handle;
-      try {
-        handle = await open4(path, constants3.O_RDONLY | constants3.O_NOFOLLOW);
-        const stat4 = await handle.stat();
-        if (!stat4.isFile() || stat4.size > MAX_EVENT_BYTES) throw new Error("payload terlalu besar");
-        readBuffer ??= Buffer.allocUnsafe(MAX_EVENT_BYTES + 1);
-        const { bytesRead } = await handle.read(readBuffer, 0, readBuffer.length, 0);
-        if (bytesRead > MAX_EVENT_BYTES) throw new Error("payload terlalu besar");
-        const parsed = JSON.parse(readBuffer.subarray(0, bytesRead).toString("utf8"));
-        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-          throw new Error("payload event bukan object");
-        }
-        payload = parsed;
-      } catch {
-        await rm7(path, { force: true }).catch(() => {
-        });
-        continue;
-      } finally {
-        await handle?.close().catch(() => {
-        });
-      }
-      try {
-        const response = await app2.inject({
-          method: "POST",
-          url: "/api/session-events",
-          headers: {
-            authorization: `Bearer ${sessionEventToken(session.name)}`,
-            "x-hanoman-session": session.name
-          },
-          payload
-        });
-        if (response.statusCode === 429 || response.statusCode >= 500) continue;
-        await rm7(path, { force: true }).catch(() => {
-        });
-        if (response.statusCode >= 200 && response.statusCode < 300) delivered++;
-      } catch {
-      }
-    }
-  }
-  return delivered;
-}
-function startSessionEventRelay(app2, options2 = {}) {
-  const root = options2.root ?? sessionEventSpoolRoot();
-  let running = false;
-  const tick6 = async () => {
-    if (running) return;
-    running = true;
-    try {
-      await drainSessionEventSpool({ inject: async (request) => app2.inject(request) }, root);
-    } catch (error) {
-      console.error("session event relay gagal:", error);
-    } finally {
-      running = false;
-    }
-  };
-  const timer9 = setInterval(() => {
-    void tick6();
-  }, options2.intervalMs ?? 250);
-  timer9.unref();
-  app2.addHook("onClose", async () => {
-    clearInterval(timer9);
-  });
-  void tick6();
-}
-
-// src/server.ts
 var app = buildApp();
 var port = Number(process.env.PORT ?? 8787);
 var host = process.env.HOST ?? "127.0.0.1";
@@ -48481,8 +49218,11 @@ bootstrapReady.then(async () => {
   installSessionHistory();
   try {
     const liveIds = listSessions().map((s2) => s2.id);
-    void reconcileHistory(liveIds).then((n2) => {
+    void reconcileHistory(liveIds).then(async (n2) => {
       if (n2) console.log(`riwayat sesi: ${n2} baris berjalan direkonsiliasi`);
+      for (const row of await detectOrphanWorktrees()) {
+        console.log(`worktree yatim: ${row.projectId} \u2014 ${row.count} menunggu konfirmasi di tab Worktrees`);
+      }
     }).catch((e) => console.error("rekonsiliasi riwayat sesi:", e));
     void reconcileAgentInvocations(liveIds).then((n2) => {
       if (n2) console.log(`custom agent: ${n2} invocation ditandai abandoned`);