hanoman 0.7.1 → 0.8.0

package/dist/server.js

@@ -3612,15 +3612,15 @@ var init_types = __esm({
           }
         }
         if (effect.type === "refinement") {
-          const executeRefinement = (acc) => {
-            const result = effect.refinement(acc, checkCtx);
+          const executeRefinement = (acc2) => {
+            const result = effect.refinement(acc2, checkCtx);
             if (ctx.common.async) {
               return Promise.resolve(result);
             }
             if (result instanceof Promise) {
               throw new Error("Async refinement encountered during synchronous parse operation. Use .parseAsync instead.");
             }
-            return acc;
+            return acc2;
           };
           if (ctx.common.async === false) {
             const inner = this._def.schema._parseSync({
@@ -5023,7 +5023,7 @@ function cmpVersion(a, b) {
   }
   return 0;
 }
-var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpecBlocker, zSourceChange, zManualDone, zSpec, NOTIFY_SOUNDS, MODELS, EFFORTS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, CHANGELOG_ENGINE_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zPortalChat, PORTAL_CHAT_DEFAULTS, zPhaseCell, zPhaseOverride, zPhaseOverrides, zFlowOrchestration, zOrchestration, ORCHESTRATION_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
+var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpecBlocker, zSourceChange, zManualDone, zSpec, zSpecListItem, zSpecSlim, NOTIFY_SOUNDS, MODELS, EFFORTS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, CHANGELOG_ENGINE_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zPortalChat, PORTAL_CHAT_DEFAULTS, zPhaseCell, zPhaseOverride, zPhaseOverrides, zFlowOrchestration, zOrchestration, ORCHESTRATION_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
 var init_entities = __esm({
   "../shared/src/entities.ts"() {
     "use strict";
@@ -5129,6 +5129,11 @@ var init_entities = __esm({
       // sesi atau belum selesai. `.nullable().default(null)` menjaga respons/klien versi lama parse.
       manualDone: zManualDone.nullable().default(null)
     });
+    zSpecListItem = zSpec.omit({ payload: true, sourceHistory: true }).extend({
+      version: external_exports.number().optional(),
+      updatedAt: external_exports.string().optional()
+    });
+    zSpecSlim = zSpecListItem.omit({ objective: true });
     NOTIFY_SOUNDS = [
       "off",
       "short",
@@ -6738,9 +6743,9 @@ function nextRun(spec, after, limitDays = 400) {
   for (let d = 0; d <= limitDays; d++) {
     const day2 = new Date(after.getFullYear(), after.getMonth(), after.getDate() + d);
     if (!dayMatches(spec, day2)) continue;
-    for (const h of hours) {
+    for (const h2 of hours) {
       for (const mi of minutes) {
-        const cand = new Date(day2.getFullYear(), day2.getMonth(), day2.getDate(), h, mi, 0, 0);
+        const cand = new Date(day2.getFullYear(), day2.getMonth(), day2.getDate(), h2, mi, 0, 0);
         if (cand.getTime() > t) return cand;
       }
     }
@@ -7760,8 +7765,8 @@ function coverageOf(docs) {
   const linked = [...byCat.values()].filter(Boolean).length;
   return Math.round(linked / byCat.size * 100);
 }
-function docStatusFor(pct2) {
-  return pct2 >= 90 ? "ok" : pct2 >= 60 ? "drift" : "broken";
+function docStatusFor(pct3) {
+  return pct3 >= 90 ? "ok" : pct3 >= 60 ? "drift" : "broken";
 }
 function isExternalLink(target3) {
   return !target3 || /^(https?:|#|mailto:)/.test(target3);
@@ -9252,17 +9257,12 @@ var init_backlog = __esm({
         inputSchema: obj({ properties: { spec: str(ID_HINT) }, required: ["spec"] }),
         mode: "read",
         capability: "backlog:read",
-        samplePath: "/specs",
+        samplePath: "/specs/SPEC-1",
         sampleMethod: "GET",
-        build: (a) => ({ method: "GET", path: "/specs", query: { q: String(a.spec), limit: "100" } }),
-        // REST tak punya `GET /specs/:id`; `q` adalah SUBSTRING, jadi `SPEC-48` mengembalikan
-        // SPEC-480…489. Pencocokan persis dilakukan di sini, bukan dipercayakan ke server.
-        shape: (raw, a) => {
-          const want = String(a.spec).trim().toLowerCase();
-          const items = raw?.items ?? [];
-          const hit = items.find((i) => String(i.id).toLowerCase() === want);
-          return hit ? shapeSpecDetail(hit) : { error: `backlog "${String(a.spec)}" tidak ada. Cek ejaannya (bentuknya SPEC-nnn) atau cari dengan hanoman_backlog_search.` };
-        }
+        // SPEC-1267 · `GET /specs` tak lagi membawa `payload`/`sourceHistory`, jadi isi penuh HANYA ada di
+        // `GET /specs/:id`. Pencocokan id persis kini urusan server (404 bila tak ada).
+        build: (a) => ({ method: "GET", path: `/specs/${enc(String(a.spec).trim())}` }),
+        shape: (raw) => shapeSpecDetail(raw)
       },
       {
         name: "hanoman_backlog_docs_list",
@@ -13042,8 +13042,8 @@ function guideLine(guide, phase) {
 }
 function phaseSkillsFor(flow2, phase, method) {
   const own = method.phaseSkills[phase] ?? [];
-  const phases = PIPELINES[flow2];
-  return writesCode(flow2) && phase === phases[phases.length - 1] ? [.../* @__PURE__ */ new Set([...own, ...method.exitSkills])] : [...own];
+  const phases2 = PIPELINES[flow2];
+  return writesCode(flow2) && phase === phases2[phases2.length - 1] ? [.../* @__PURE__ */ new Set([...own, ...method.exitSkills])] : [...own];
 }
 function orchestratorClause(plan, o = {}) {
   const codex2 = plan.runtime === "codex";
@@ -13320,15 +13320,15 @@ var init_prompt = __esm({
     AUTONOMY_CLAUSE = `Jalankan seluruh pipeline sampai tuntas tanpa berhenti di batas antar-fase. Checkpoint "review"/"approval"/"need review" milik skill superpowers BUKAN titik berhenti di sini \u2014 lanjut saja ke fase berikutnya. Berhenti HANYA untuk ${AMBIGUOUS}: JANGAN memutuskannya sendiri, ${ASK_ROUTE} Selain itu, terus lanjut.`;
     AUTONOMY_CLAUSE_FULL = `Kamu diluncurkan scheduler \u2014 mungkin tak ada manusia yang sedang menonton terminal ini. Tembus seluruh pipeline sampai stage \`done\`, lalu commit & push: checkpoint "review"/"approval" milik skill BUKAN titik berhenti dan jangan menunggu persetujuan siapa pun. Tetapi JANGAN memutuskan sendiri ${AMBIGUOUS}: ${ASK_ROUTE} Catat keputusan penting di pesan commit. Merge ke branch utama tetap dilakukan manusia, bukan kamu.`;
     autonomyClause = (mode) => mode === "full-control" ? AUTONOMY_CLAUSE_FULL : AUTONOMY_CLAUSE;
-    phaseInstruction = (phases, method) => {
-      const base2 = `Kerjakan fase berurutan: ${phases.join(" \u2192 ")}.
+    phaseInstruction = (phases2, method) => {
+      const base2 = `Kerjakan fase berurutan: ${phases2.join(" \u2192 ")}.
 Setiap kali sebuah fase selesai (atau kamu putuskan dilewati), append satu baris ke berkas di $HANOMAN_PHASE_FILE \u2014 persis: \`echo "<Nama Fase> done" >> "$HANOMAN_PHASE_FILE"\`, atau \`skipped\` sebagai ganti \`done\`. Nama fase ditulis apa adanya seperti di atas.`;
-      if (!phases.includes("Plan") || !phases.includes("Execute")) return base2;
+      if (!phases2.includes("Plan") || !phases2.includes("Execute")) return base2;
       return base2 + `
 Execute BELUM selesai selama plan (\`${method.planDir}/**\`) masih punya task \`- [ ]\`: kerjakan SEMUA PR/task sampai tiap kotak jadi \`- [x]\` sebelum menulis \`Execute done\`. hanoman menahan backlog di \`executing\`, bukan \`done\`, selama masih ada \`- [ ]\`.`;
     };
-    skillInstruction = (flow2, phases, method) => {
-      const lines2 = phases.map((p3) => {
+    skillInstruction = (flow2, phases2, method) => {
+      const lines2 = phases2.map((p3) => {
         const skills = phaseSkillsFor(flow2, p3, method);
         return skills.length ? `- ${p3}: ${skills.join(", ")}` : "";
       }).filter(Boolean);
@@ -13671,10 +13671,10 @@ function goalFlowCondition(flow2, specId, branchTo, spec) {
 }
 function defaultGoalCondition({ flow: flow2, specId, branchTo, spec }) {
   if (isGoalShapedFlow(flow2)) return goalFlowCondition(flow2, specId, branchTo, spec);
-  const phases = PIPELINES[flow2];
-  const planGate = phases.includes("Plan") && phases.includes("Execute");
+  const phases2 = PIPELINES[flow2];
+  const planGate = phases2.includes("Plan") && phases2.includes("Execute");
   const clauses = [
-    `1. output \`cat "$HANOMAN_PHASE_FILE"\` yang memuat satu baris untuk SETIAP fase ${phases.join(" \u2192 ")}, masing-masing berakhiran \`done\` atau \`skipped\`;`
+    `1. output \`cat "$HANOMAN_PHASE_FILE"\` yang memuat satu baris untuk SETIAP fase ${phases2.join(" \u2192 ")}, masing-masing berakhiran \`done\` atau \`skipped\`;`
   ];
   if (planGate) {
     const dirs = PLAN_DIRS.map((d) => `${d}/`).join(" ");
@@ -13734,8 +13734,8 @@ function codexHookArgs(o) {
   return args;
 }
 function codexGoalScript(o) {
-  const phases = PIPELINES[o.flow];
-  const planGate = phases.includes("Plan") && phases.includes("Execute");
+  const phases2 = PIPELINES[o.flow];
+  const planGate = phases2.includes("Plan") && phases2.includes("Execute");
   const max = o.maxBlocks ?? GOAL_MAX_BLOCKS;
   const lines2 = [
     "#!/bin/sh",
@@ -13745,7 +13745,7 @@ function codexGoalScript(o) {
     `ST=${shq(o.stateFile)}`,
     "missing=''"
   ];
-  for (const p3 of phases) {
+  for (const p3 of phases2) {
     lines2.push(
       `grep -qE ${shq(`^${p3} (done|skipped)[[:space:]]*$`)} "$PF" 2>/dev/null || missing="$missing\\n- fase ${p3} belum tercatat di \\$HANOMAN_PHASE_FILE"`
     );
@@ -14494,8 +14494,8 @@ var init_custom_agent_eval_evidence = __esm({
     };
     textFile = (root, path) => {
       const target3 = evidencePath(root, path);
-      const stat5 = lstatSync(target3);
-      if (!stat5.isFile() || stat5.size > 1024 * 1024) throw new Error("Evidence must be a bounded regular file");
+      const stat7 = lstatSync(target3);
+      if (!stat7.isFile() || stat7.size > 1024 * 1024) throw new Error("Evidence must be a bounded regular file");
       return readFileSync2(target3, "utf8");
     };
     snapshotEvalEvidence = (context) => {
@@ -14867,9 +14867,9 @@ var init_custom_agent_eval = __esm({
           hash4.update(`missing:${rel}\0`);
           continue;
         }
-        const stat5 = lstatSync2(path);
-        if (stat5.isSymbolicLink()) hash4.update(`l:${rel}\0${readlinkSync(path)}\0`);
-        else hash4.update(`f:${stat5.mode}:${rel}\0`).update(readFileSync3(path));
+        const stat7 = lstatSync2(path);
+        if (stat7.isSymbolicLink()) hash4.update(`l:${rel}\0${readlinkSync(path)}\0`);
+        else hash4.update(`f:${stat7.mode}:${rel}\0`).update(readFileSync3(path));
       }
       return hash4.digest("hex");
     };
@@ -15022,8 +15022,8 @@ ${result.error.message}` : result.stderr ?? ""
       for (const name2 of readdirSync2(eventDir).filter((entry) => entry.endsWith(".json")).sort()) {
         try {
           const path = evidencePath(eventDir, name2);
-          const stat5 = lstatSync2(path);
-          if (!stat5.isFile() || stat5.size > 1024 * 1024) continue;
+          const stat7 = lstatSync2(path);
+          if (!stat7.isFile() || stat7.size > 1024 * 1024) continue;
           const parsed = JSON.parse(readFileSync3(path, "utf8"));
           if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
             events.push(parsed);
@@ -15986,14 +15986,9 @@ var init_stage_machine = __esm({
 
 // src/services/session-phases.ts
 import { readFileSync as readFileSync6, readdirSync as readdirSync5 } from "node:fs";
-function recorded(file) {
+import { readFile, readdir, stat } from "node:fs/promises";
+function parseRecorded(raw) {
   const out4 = /* @__PURE__ */ new Map();
-  let raw;
-  try {
-    raw = readFileSync6(file, "utf8");
-  } catch {
-    return out4;
-  }
   for (const line of raw.split("\n")) {
     const trimmed = line.trimEnd();
     const i = trimmed.lastIndexOf(" ");
@@ -16004,19 +15999,40 @@ function recorded(file) {
   }
   return out4;
 }
-function readPhases(file, flow2) {
-  const seen2 = recorded(file);
-  let activeTaken = false;
-  return PIPELINES[flow2].map((name2) => {
-    const state = seen2.get(name2);
-    if (state) return { name: name2, state };
-    if (activeTaken) return { name: name2, state: "pending" };
-    activeTaken = true;
-    return { name: name2, state: "active" };
-  });
+function recorded(file) {
+  let raw;
+  try {
+    raw = readFileSync6(file, "utf8");
+  } catch {
+    return /* @__PURE__ */ new Map();
+  }
+  return parseRecorded(raw);
+}
+async function recordedAsync(file) {
+  let st;
+  try {
+    st = await stat(file);
+  } catch {
+    phaseFileMemo.delete(file);
+    return /* @__PURE__ */ new Map();
+  }
+  const hit = phaseFileMemo.get(file);
+  if (hit && hit.mtimeMs === st.mtimeMs && hit.size === st.size) return hit.seen;
+  let raw;
+  try {
+    raw = await readFile(file, "utf8");
+  } catch {
+    return /* @__PURE__ */ new Map();
+  }
+  const seen2 = parseRecorded(raw);
+  phaseFileMemo.set(file, { mtimeMs: st.mtimeMs, size: st.size, seen: seen2 });
+  return seen2;
+}
+async function readPhasesAsync(file, flow2) {
+  return derivePhases(await recordedAsync(file), flow2);
 }
-function enrichPhases(phases, roster, invocations, doneSeenAt, now, bornAt2, doneAtBirth = /* @__PURE__ */ new Set()) {
-  return phases.map((p3) => {
+function enrichPhases(phases2, roster, invocations, doneSeenAt, now, bornAt2, doneAtBirth = /* @__PURE__ */ new Set()) {
+  return phases2.map((p3) => {
     const r = roster.find((entry) => entry.phase === p3.name);
     if (!r) return p3;
     const all = invocations.filter((i) => i.phase === p3.name);
@@ -16046,23 +16062,23 @@ function enrichPhases(phases, roster, invocations, doneSeenAt, now, bornAt2, don
     };
   });
 }
-function trackDoneSeen(phases, doneSeenAt, now) {
-  const byName = new Map(phases.map((p3) => [p3.name, p3.state]));
+function trackDoneSeen(phases2, doneSeenAt, now) {
+  const byName = new Map(phases2.map((p3) => [p3.name, p3.state]));
   for (const name2 of [...doneSeenAt.keys()])
     if (byName.get(name2) !== "done") doneSeenAt.delete(name2);
-  for (const p3 of phases)
+  for (const p3 of phases2)
     if (p3.state === "done" && !doneSeenAt.has(p3.name)) doneSeenAt.set(p3.name, now);
 }
-function stageFor(phases) {
+function stageFor(phases2) {
   let best = -1;
-  for (const p3 of phases) {
+  for (const p3 of phases2) {
     if (WORK_PHASES.includes(p3.name) && p3.state === "active")
       best = Math.max(best, STAGES.indexOf("executing"));
     if (p3.state !== "done" && p3.state !== "skipped") continue;
     const s2 = REACHED[p3.name];
     if (s2) best = Math.max(best, STAGES.indexOf(s2));
   }
-  if (phases[0]?.state === "active") best = Math.max(best, STAGES.indexOf("brainstorming"));
+  if (phases2[0]?.state === "active") best = Math.max(best, STAGES.indexOf("brainstorming"));
   return best < 0 ? null : STAGES[best];
 }
 function planComplete(worktree, specId) {
@@ -16085,16 +16101,45 @@ function planComplete(worktree, specId) {
   }
   return true;
 }
-function sessionComplete(phases, worktree, specId) {
-  if (!phasesComplete(phases)) return false;
+async function planCompleteAsync(worktree, specId) {
+  const re = new RegExp(`(^|[^a-z0-9])${specId.toLowerCase()}([^0-9]|$)`);
+  for (const rel of PLAN_DIRS) {
+    const dir2 = `${worktree}/${rel}`;
+    let names;
+    try {
+      names = await readdir(dir2);
+    } catch {
+      continue;
+    }
+    for (const n2 of names) {
+      if (!re.test(n2.toLowerCase())) continue;
+      try {
+        if (/^[ \t]*- \[ \]/m.test(await readFile(`${dir2}/${n2}`, "utf8"))) return false;
+      } catch {
+      }
+    }
+  }
+  return true;
+}
+function sessionComplete(phases2, worktree, specId) {
+  if (!phasesComplete(phases2)) return false;
   return specId ? planComplete(worktree, specId) : true;
 }
-function stageForRun(phases, worktree, specId) {
-  const s2 = stageFor(phases);
+function stageForRun(phases2, worktree, specId) {
+  const s2 = stageFor(phases2);
   if (s2 === "done" && !planComplete(worktree, specId)) return "executing";
   return s2;
 }
-var phaseFilePath, decisionFilePath, REACHED, phasesComplete;
+async function stageForRunAsync(phases2, worktree, specId) {
+  const s2 = stageFor(phases2);
+  if (s2 === "done" && !await planCompleteAsync(worktree, specId)) return "executing";
+  return s2;
+}
+async function sessionCompleteAsync(phases2, worktree, specId) {
+  if (!phasesComplete(phases2)) return false;
+  return specId ? planCompleteAsync(worktree, specId) : true;
+}
+var phaseFilePath, decisionFilePath, phaseFileMemo, derivePhases, readPhases, REACHED, phasesComplete;
 var init_session_phases = __esm({
   "src/services/session-phases.ts"() {
     "use strict";
@@ -16103,6 +16148,18 @@ var init_session_phases = __esm({
     init_stage_machine();
     phaseFilePath = (repoDir, sessionId2) => `${repoDir}/.worktrees/.phases/${sessionId2}`;
     decisionFilePath = (repoDir, sessionId2) => `${repoDir}/.worktrees/.decisions/${sessionId2}`;
+    phaseFileMemo = /* @__PURE__ */ new Map();
+    derivePhases = (seen2, flow2) => {
+      let activeTaken = false;
+      return PIPELINES[flow2].map((name2) => {
+        const state = seen2.get(name2);
+        if (state) return { name: name2, state };
+        if (activeTaken) return { name: name2, state: "pending" };
+        activeTaken = true;
+        return { name: name2, state: "active" };
+      });
+    };
+    readPhases = (file, flow2) => derivePhases(recorded(file), flow2);
     REACHED = {
       Objective: "objective",
       Audit: "objective",
@@ -16118,7 +16175,7 @@ var init_session_phases = __esm({
       // mencapai `done` — tak ada fase verifikasi untuk menutupnya.
       Kerjakan: "done"
     };
-    phasesComplete = (phases) => phases.length > 0 && phases.every((p3) => p3.state === "done" || p3.state === "skipped");
+    phasesComplete = (phases2) => phases2.length > 0 && phases2.every((p3) => p3.state === "done" || p3.state === "skipped");
   }
 });
 
@@ -16467,7 +16524,7 @@ var init_safe_outbound_request = __esm({
 
 // src/services/uploads.ts
 import { randomUUID } from "node:crypto";
-import { mkdir, writeFile, readFile, unlink, rm } from "node:fs/promises";
+import { mkdir, writeFile, readFile as readFile2, unlink, rm } from "node:fs/promises";
 import { join as join11, resolve as resolve8 } from "node:path";
 function extFor(mimeType) {
   return EXT[mimeType] ?? ".bin";
@@ -16498,13 +16555,13 @@ async function dropSessionUploads(sessionId2) {
 }
 async function readUpload(storageKey) {
   const safe = storageKey.replace(/[/\\]/g, "");
-  return readFile(join11(uploadDir(), safe));
+  return readFile2(join11(uploadDir(), safe));
 }
 async function readUploadOrFetch(storageKey) {
   const safe = storageKey.replace(/[/\\]/g, "");
   const target3 = join11(uploadDir(), safe);
   try {
-    return await readFile(target3);
+    return await readFile2(target3);
   } catch {
     const base2 = effectiveStr("SYNC_SERVER_URL");
     const token = effectiveStr("SYNC_DEVICE_TOKEN");
@@ -16976,22 +17033,22 @@ import { execFile, execFileSync as execFileSync2 } from "node:child_process";
 import { createRequire } from "node:module";
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { chmodSync as chmodSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync8, rmSync as rmSync4, statSync as statSync2, writeFileSync as writeFileSync8 } from "node:fs";
+import { stat as stat2 } from "node:fs/promises";
 import { dirname as dirname8 } from "node:path";
 import { tmpdir as tmpdir3 } from "node:os";
-function phaseView(p3, a) {
-  const phases = readPhases(p3.phaseFile, p3.flow);
+function phaseView(p3, a, phases2) {
   const now = Date.now();
-  trackDoneSeen(phases, a.doneSeenAt, now);
+  trackDoneSeen(phases2, a.doneSeenAt, now);
   const roster = (p3.agentRoster ?? []).flatMap((r) => r.phase ? [{ name: r.name, phase: r.phase, model: r.model, effort: r.effort }] : []);
   return roster.length ? enrichPhases(
-    phases,
+    phases2,
     roster,
     phaseInvocations.get(p3.id) ?? [],
     a.doneSeenAt,
     now,
     p3.startedAt * 1e3,
     new Set(p3.doneAtBirth ?? [])
-  ) : phases;
+  ) : phases2;
 }
 function noTtyPromptEnv() {
   const path = askpassDenyPath();
@@ -17164,10 +17221,10 @@ function sessionEventEnv(sessionId2, env = process.env) {
     ...host2 ? { HANOMAN_EVENT_HOST: host2 } : {}
   };
 }
-function registerSessionHooks(h) {
-  hooks.add(h);
+function registerSessionHooks(h2) {
+  hooks.add(h2);
   return () => {
-    hooks.delete(h);
+    hooks.delete(h2);
   };
 }
 function registerCustomAgentSource(fn) {
@@ -17601,20 +17658,6 @@ function sessionPhases(id2) {
   if (!p3?.flow || !p3.phaseFile) return null;
   return readPhases(p3.phaseFile, p3.flow);
 }
-function sessionPhasesBySpec() {
-  const out4 = /* @__PURE__ */ new Map();
-  let panes;
-  try {
-    panes = listPanes();
-  } catch {
-    return out4;
-  }
-  for (const p3 of panes) {
-    if (!p3.specId || !p3.flow || !p3.phaseFile) continue;
-    out4.set(p3.specId, { phases: readPhases(p3.phaseFile, p3.flow), cwd: p3.cwd });
-  }
-  return out4;
-}
 function broadcast(a, f) {
   const msg = frame(f);
   for (const c of a.clients) c.send(msg);
@@ -17669,14 +17712,16 @@ function end(id2, code) {
   broadcast(a, { t: "exit", code });
   drop(id2);
 }
-function pollPhases(p3, a) {
+async function pollPhases(p3, a) {
   if (!p3.flow || !p3.phaseFile) return;
-  const phases = phaseView(p3, a);
-  const complete = paneComplete(p3);
-  const json = phaseKey(phases, complete);
+  const raw = await readPhasesAsync(p3.phaseFile, p3.flow);
+  const complete = await sessionCompleteAsync(raw, p3.cwd, p3.specId);
+  if (attached.get(p3.id) !== a) return;
+  const phases2 = phaseView(p3, a, raw);
+  const json = phaseKey(phases2, complete);
   if (json === a.lastPhases) return;
   a.lastPhases = json;
-  broadcast(a, { t: "phase", phases, complete });
+  broadcast(a, { t: "phase", phases: phases2, complete });
 }
 function setPhaseInvocations(sessionId2, rows) {
   if (attached.has(sessionId2)) phaseInvocations.set(sessionId2, rows);
@@ -17692,7 +17737,7 @@ function startPoll() {
     if (polling) return;
     polling = true;
     const snapshot3 = [...attached.entries()];
-    listPanesAsync().then((panes) => {
+    listPanesAsync().then(async (panes) => {
       const live = new Map(panes.map((p3) => [p3.id, p3]));
       for (const [id2, a] of snapshot3) {
         if (attached.get(id2) !== a) continue;
@@ -17700,7 +17745,8 @@ function startPoll() {
         if (!p3) end(id2, 0);
         else if (p3.exited) end(id2, p3.code);
         else {
-          pollPhases(p3, a);
+          await pollPhases(p3, a).catch(() => {
+          });
           pollAlt(p3, a);
         }
       }
@@ -17715,31 +17761,43 @@ function startPoll() {
   }, POLL_MS);
   poll.unref();
 }
-function attach(id2, c) {
-  const p3 = getSession(id2);
+function replayExited(c, p3, screen) {
+  if (screen.trim()) c.send(frame({ t: "data", d: stripTerminalQueries(screen.replace(/\n/g, "\r\n")) }));
+  c.send(frame({ t: "exit", code: p3.code }));
+  c.close();
+}
+async function screenResyncFrame(id2) {
+  try {
+    const screen = await tmuxAsync("capture-pane", "-p", "-e", "-J", "-t", name(id2));
+    return frame({ t: "data", d: `\x1B[2J\x1B[H${stripTerminalQueries(screen.replace(/\n/g, "\r\n"))}` });
+  } catch {
+    return null;
+  }
+}
+async function attachAsync(id2, c) {
+  const p3 = await getSessionAsync(id2);
   if (!p3) {
     c.close();
     return;
   }
   if (p3.exited) {
-    const screen = tmux("capture-pane", "-p", "-e", "-J", "-S", "-2000", "-t", name(id2));
-    if (screen.trim()) {
-      c.send(frame({ t: "data", d: stripTerminalQueries(screen.replace(/\n/g, "\r\n")) }));
-    }
-    c.send(frame({ t: "exit", code: p3.code }));
-    c.close();
+    replayExited(c, p3, await tmuxAsync(...CAPTURE_ARGS(id2)));
     return;
   }
+  attachLive(id2, c, p3);
+}
+function attachLive(id2, c, p3) {
   const a = attached.get(id2) ?? open(id2);
   a.clients.add(c);
   if (a.scrollback) c.send(frame({ t: "data", d: stripTerminalQueries(a.scrollback) }));
   a.lastAlt = p3.altScreen;
   c.send(frame({ t: "alt", on: p3.altScreen }));
   if (p3.flow && p3.phaseFile) {
-    const phases = phaseView(p3, a);
-    const complete = paneComplete(p3);
-    a.lastPhases = phaseKey(phases, complete);
-    c.send(frame({ t: "phase", phases, complete }));
+    const raw = readPhases(p3.phaseFile, p3.flow);
+    const phases2 = phaseView(p3, a, raw);
+    const complete = sessionComplete(raw, p3.cwd, p3.specId);
+    a.lastPhases = phaseKey(phases2, complete);
+    c.send(frame({ t: "phase", phases: phases2, complete }));
   }
 }
 function writeTo(id2, d, from) {
@@ -17791,7 +17849,7 @@ function spawnPty(...args) {
     );
   }
 }
-var socket, PREFIX, MAX_SCROLLBACK, SCROLLBACK_SLACK, POLL_MS, markerFilled, clearMarker, PANE_QUIET_MS, paneQuiet, markerOnset, decisionOnset, attached, phaseInvocations, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentTempDir, agentsFilePath, askpassDenyPath, ASKPASS_DENY, NO_SERVER, TmuxError, sq, idFor, FMT, toSessionInfo, listSessions, listSessionsAsync, liveDecisions, getSession, getSessionAsync, hooks, emitBirth, emitDeath, customAgentSource, codexNativeAgentSupport, nativeAgentsAvailable, customAgentsFor, runGitDiff, sleep, paneText, paneIO, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, COALESCE_MS, COALESCE_MAX_BYTES, trimScrollback, phaseKey, paneComplete, sessionFinished, poll, polling, TERMINAL_QUERY, stripTerminalQueries, detach;
+var socket, PREFIX, MAX_SCROLLBACK, SCROLLBACK_SLACK, POLL_MS, markerFilled, markerFilledAsync, clearMarker, PANE_QUIET_MS, paneQuiet, markerOnset, decisionOnset, attached, phaseInvocations, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentTempDir, agentsFilePath, askpassDenyPath, ASKPASS_DENY, NO_SERVER, TmuxError, sq, idFor, FMT, toSessionInfo, listSessions, listSessionsAsync, decisionsOf, getSession, getSessionAsync, hooks, emitBirth, emitDeath, customAgentSource, codexNativeAgentSupport, nativeAgentsAvailable, customAgentsFor, runGitDiff, sleep, paneText, paneIO, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, COALESCE_MS, COALESCE_MAX_BYTES, trimScrollback, phaseKey, sessionFinishedAsync, poll, polling, TERMINAL_QUERY, stripTerminalQueries, CAPTURE_ARGS, detach;
 var init_pty = __esm({
   "src/services/pty.ts"() {
     "use strict";
@@ -17820,6 +17878,13 @@ var init_pty = __esm({
         return false;
       }
     };
+    markerFilledAsync = async (f) => {
+      try {
+        return (await stat2(f)).size > 0;
+      } catch {
+        return false;
+      }
+    };
     clearMarker = (f) => {
       try {
         writeFileSync8(f, "");
@@ -17937,7 +18002,7 @@ exit 1
     });
     listSessions = () => listPanes().map(toSessionInfo);
     listSessionsAsync = async () => (await listPanesAsync()).map(toSessionInfo);
-    liveDecisions = () => listPanes().filter((p3) => !p3.exited && p3.decisionFile).map((p3) => ({
+    decisionsOf = (panes) => panes.filter((p3) => !p3.exited && p3.decisionFile).map((p3) => ({
       id: p3.id,
       specId: p3.specId,
       projectId: p3.projectId,
@@ -17951,17 +18016,17 @@ exit 1
     getSessionAsync = async (id2) => (await listPanesAsync()).find((p3) => p3.id === id2);
     hooks = /* @__PURE__ */ new Set();
     emitBirth = (b) => {
-      for (const h of hooks) {
+      for (const h2 of hooks) {
         try {
-          h.onBirth?.(b);
+          h2.onBirth?.(b);
         } catch {
         }
       }
     };
     emitDeath = (d) => {
-      for (const h of hooks) {
+      for (const h2 of hooks) {
         try {
-          h.onDeath?.(d);
+          h2.onDeath?.(d);
         } catch {
         }
       }
@@ -18017,11 +18082,10 @@ exit 1
     COALESCE_MS = 16;
     COALESCE_MAX_BYTES = 64 * 1024;
     trimScrollback = (s2) => s2.length > MAX_SCROLLBACK + SCROLLBACK_SLACK ? s2.slice(-MAX_SCROLLBACK) : s2;
-    phaseKey = (phases, complete) => JSON.stringify({ phases, complete });
-    paneComplete = (p3) => !!p3.flow && !!p3.phaseFile && sessionComplete(readPhases(p3.phaseFile, p3.flow), p3.cwd, p3.specId);
-    sessionFinished = (id2) => {
-      const p3 = getSession(id2);
-      return !!p3 && paneComplete(p3);
+    phaseKey = (phases2, complete) => JSON.stringify({ phases: phases2, complete });
+    sessionFinishedAsync = async (id2) => {
+      const p3 = await getSessionAsync(id2);
+      return !!p3 && !!p3.flow && !!p3.phaseFile && sessionCompleteAsync(await readPhasesAsync(p3.phaseFile, p3.flow), p3.cwd, p3.specId);
     };
     polling = false;
     TERMINAL_QUERY = new RegExp([
@@ -18041,6 +18105,7 @@ exit 1
       // XTWINOPS laporan — berparameter TUNGGAL
     ].join("|"), "g");
     stripTerminalQueries = (s2) => s2.replace(TERMINAL_QUERY, "");
+    CAPTURE_ARGS = (id2) => ["capture-pane", "-p", "-e", "-J", "-S", "-2000", "-t", name(id2)];
     detach = (id2, c) => {
       attached.get(id2)?.clients.delete(c);
     };
@@ -18066,7 +18131,7 @@ var init_redact_known = __esm({
 
 // src/services/transcript-store.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { mkdir as mkdir2, writeFile as writeFile2, readFile as readFile2, unlink as unlink2, readdir, stat } from "node:fs/promises";
+import { mkdir as mkdir2, writeFile as writeFile2, readFile as readFile3, unlink as unlink2, readdir as readdir2, stat as stat3 } from "node:fs/promises";
 import { join as join13, resolve as resolve9, basename as basename4 } from "node:path";
 function transcriptDir() {
   return resolve9(effectiveStr("HANOMAN_TRANSCRIPT_DIR")?.trim() || resolveDataDirs().transcripts);
@@ -18093,7 +18158,7 @@ async function saveTranscript(text) {
 async function readTranscript(key) {
   if (!key) return null;
   try {
-    return await readFile2(join13(transcriptDir(), basename4(key)), "utf8");
+    return await readFile3(join13(transcriptDir(), basename4(key)), "utf8");
   } catch {
     return null;
   }
@@ -18110,7 +18175,7 @@ async function listTranscripts() {
   const dir2 = transcriptDir();
   let names;
   try {
-    names = await readdir(dir2);
+    names = await readdir2(dir2);
   } catch (e) {
     if (e.code === "ENOENT") return [];
     throw e;
@@ -18119,7 +18184,7 @@ async function listTranscripts() {
   for (const name2 of names) {
     if (!name2.endsWith(".log")) continue;
     try {
-      rows.push({ key: name2, mtimeMs: (await stat(join13(dir2, name2))).mtimeMs });
+      rows.push({ key: name2, mtimeMs: (await stat3(join13(dir2, name2))).mtimeMs });
     } catch {
     }
   }
@@ -19181,6 +19246,118 @@ var init_codex_trust = __esm({
   }
 });
 
+// src/services/logs/phase-tap.ts
+function observePhases(rows) {
+  const seen2 = /* @__PURE__ */ new Set();
+  for (const r of rows) {
+    seen2.add(r.sessionId);
+    const prev = known.get(r.sessionId);
+    if (!known.has(r.sessionId)) {
+      known.set(r.sessionId, r.phase);
+      continue;
+    }
+    if (prev !== r.phase) {
+      void appendEvent({
+        kind: "session.phase",
+        msg: `sesi ${r.sessionId} fase ${prev ?? "?"} \u2192 ${r.phase ?? "?"}`,
+        projectId: r.projectId,
+        specId: r.specId ?? null,
+        sessionId: r.sessionId,
+        data: { from: prev, to: r.phase }
+      });
+      known.set(r.sessionId, r.phase);
+    }
+  }
+  for (const id2 of [...known.keys()]) if (!seen2.has(id2)) known.delete(id2);
+}
+var known;
+var init_phase_tap = __esm({
+  "src/services/logs/phase-tap.ts"() {
+    "use strict";
+    init_event_log();
+    known = /* @__PURE__ */ new Map();
+  }
+});
+
+// src/services/presence/snapshot.ts
+function paneToPresence(p3, phase) {
+  return {
+    sessionId: p3.id,
+    projectId: p3.projectId,
+    ...p3.specId ? { specId: p3.specId } : {},
+    ...p3.flow ? { flow: p3.flow } : {},
+    ...phase ? { phase } : {},
+    agent: p3.agent,
+    // Presedensi: pane mati sudah berakhir apa pun isi markernya.
+    status: p3.exited ? "exited" : p3.decision ? "waiting" : "working",
+    startedAt: isoFromEpochSeconds(p3.startedAt)
+  };
+}
+function activePhase(p3) {
+  if (!p3.flow || !p3.phaseFile) return void 0;
+  return readPhases(p3.phaseFile, p3.flow).find((f) => f.state === "active")?.name;
+}
+function listPanesShared(now = Date.now()) {
+  if (panesMemo && now - panesMemo.at < PANES_MEMO_MS) return panesMemo.value;
+  const value = listPanesAsync();
+  panesMemo = { at: now, value };
+  value.catch(() => {
+    if (panesMemo?.value === value) panesMemo = null;
+  });
+  return value;
+}
+async function buildLocalPresence() {
+  const panes = await listPanesShared();
+  const rows = panes.slice(0, MAX_PRESENCE_SESSIONS).map((p3) => paneToPresence(p3, activePhase(p3)));
+  observePhases(rows.map((r) => ({ sessionId: r.sessionId, projectId: r.projectId, specId: r.specId, phase: r.phase })));
+  return rows;
+}
+async function buildLocalCapacity() {
+  return currentLaunchStatus(await listPanesShared(), await getScheduler());
+}
+var isoFromEpochSeconds, PANES_MEMO_MS, panesMemo;
+var init_snapshot = __esm({
+  "src/services/presence/snapshot.ts"() {
+    "use strict";
+    init_src();
+    init_pty();
+    init_session_phases();
+    init_config3();
+    init_session_launch_gate();
+    init_phase_tap();
+    isoFromEpochSeconds = (s2) => new Date((s2 || 0) * 1e3).toISOString();
+    PANES_MEMO_MS = 1e3;
+    panesMemo = null;
+  }
+});
+
+// src/services/live-phases.ts
+async function sessionPhasesBySpecAsync() {
+  const out4 = /* @__PURE__ */ new Map();
+  let panes;
+  try {
+    panes = await listPanesShared();
+  } catch {
+    return out4;
+  }
+  await Promise.all(panes.map(async (p3) => {
+    if (!p3.specId || !p3.flow || !p3.phaseFile) return;
+    out4.set(p3.specId, { phases: await readPhasesAsync(p3.phaseFile, p3.flow), cwd: p3.cwd });
+  }));
+  return out4;
+}
+async function liveDecisionsAsync() {
+  return decisionsOf(await listPanesShared());
+}
+var init_live_phases = __esm({
+  "src/services/live-phases.ts"() {
+    "use strict";
+    init_session_phases();
+    init_snapshot();
+    init_pty();
+  }
+});
+
 // src/services/notifications.ts
 async function recordDrift(vpsId, vpsName, drift, snapshotId) {
   if (drift.length === 0) return;
@@ -19282,11 +19459,11 @@ async function recordCronRun(cronId, cronName, projectId, dueAt, status2, note)
   }).catch(() => {
   });
 }
-async function scanDecisions(read2 = liveDecisions) {
+async function scanDecisions(read2 = liveDecisionsAsync) {
   const next = /* @__PURE__ */ new Set();
   const fresh = [];
-  for (const s2 of read2()) {
-    if (!markerFilled(s2.decisionFile)) continue;
+  for (const s2 of await read2()) {
+    if (!await markerFilledAsync(s2.decisionFile)) continue;
     if (awaiting.has(s2.id)) {
       next.add(s2.id);
       continue;
@@ -19322,96 +19499,12 @@ var init_notifications2 = __esm({
     "use strict";
     init_db();
     init_pty();
+    init_live_phases();
     awaiting = /* @__PURE__ */ new Set();
     DEFAULT_FEED_TAKE = 50;
   }
 });
 
-// src/services/logs/phase-tap.ts
-function observePhases(rows) {
-  const seen2 = /* @__PURE__ */ new Set();
-  for (const r of rows) {
-    seen2.add(r.sessionId);
-    const prev = known.get(r.sessionId);
-    if (!known.has(r.sessionId)) {
-      known.set(r.sessionId, r.phase);
-      continue;
-    }
-    if (prev !== r.phase) {
-      void appendEvent({
-        kind: "session.phase",
-        msg: `sesi ${r.sessionId} fase ${prev ?? "?"} \u2192 ${r.phase ?? "?"}`,
-        projectId: r.projectId,
-        specId: r.specId ?? null,
-        sessionId: r.sessionId,
-        data: { from: prev, to: r.phase }
-      });
-      known.set(r.sessionId, r.phase);
-    }
-  }
-  for (const id2 of [...known.keys()]) if (!seen2.has(id2)) known.delete(id2);
-}
-var known;
-var init_phase_tap = __esm({
-  "src/services/logs/phase-tap.ts"() {
-    "use strict";
-    init_event_log();
-    known = /* @__PURE__ */ new Map();
-  }
-});
-
-// src/services/presence/snapshot.ts
-function paneToPresence(p3, phase) {
-  return {
-    sessionId: p3.id,
-    projectId: p3.projectId,
-    ...p3.specId ? { specId: p3.specId } : {},
-    ...p3.flow ? { flow: p3.flow } : {},
-    ...phase ? { phase } : {},
-    agent: p3.agent,
-    // Presedensi: pane mati sudah berakhir apa pun isi markernya.
-    status: p3.exited ? "exited" : p3.decision ? "waiting" : "working",
-    startedAt: isoFromEpochSeconds(p3.startedAt)
-  };
-}
-function activePhase(p3) {
-  if (!p3.flow || !p3.phaseFile) return void 0;
-  return readPhases(p3.phaseFile, p3.flow).find((f) => f.state === "active")?.name;
-}
-function listPanesShared(now = Date.now()) {
-  if (panesMemo && now - panesMemo.at < PANES_MEMO_MS) return panesMemo.value;
-  const value = listPanesAsync();
-  panesMemo = { at: now, value };
-  value.catch(() => {
-    if (panesMemo?.value === value) panesMemo = null;
-  });
-  return value;
-}
-async function buildLocalPresence() {
-  const panes = await listPanesShared();
-  const rows = panes.slice(0, MAX_PRESENCE_SESSIONS).map((p3) => paneToPresence(p3, activePhase(p3)));
-  observePhases(rows.map((r) => ({ sessionId: r.sessionId, projectId: r.projectId, specId: r.specId, phase: r.phase })));
-  return rows;
-}
-async function buildLocalCapacity() {
-  return currentLaunchStatus(await listPanesShared(), await getScheduler());
-}
-var isoFromEpochSeconds, PANES_MEMO_MS, panesMemo;
-var init_snapshot = __esm({
-  "src/services/presence/snapshot.ts"() {
-    "use strict";
-    init_src();
-    init_pty();
-    init_session_phases();
-    init_config3();
-    init_session_launch_gate();
-    init_phase_tap();
-    isoFromEpochSeconds = (s2) => new Date((s2 || 0) * 1e3).toISOString();
-    PANES_MEMO_MS = 1e3;
-    panesMemo = null;
-  }
-});
-
 // src/services/device-sockets.ts
 function registerDeviceSocket(deviceId, kind, socket2) {
   const entry = { kind, socket: socket2 };
@@ -19916,8 +20009,8 @@ var require_ms = __commonJS({
   "../node_modules/.pnpm/ms@2.1.3/node_modules/ms/index.js"(exports, module) {
     var s2 = 1e3;
     var m = s2 * 60;
-    var h = m * 60;
-    var d = h * 24;
+    var h2 = m * 60;
+    var d = h2 * 24;
     var w = d * 7;
     var y = d * 365.25;
     module.exports = function(val, options2) {
@@ -19965,7 +20058,7 @@ var require_ms = __commonJS({
         case "hrs":
         case "hr":
         case "h":
-          return n2 * h;
+          return n2 * h2;
         case "minutes":
         case "minute":
         case "mins":
@@ -19993,8 +20086,8 @@ var require_ms = __commonJS({
       if (msAbs >= d) {
         return Math.round(ms / d) + "d";
       }
-      if (msAbs >= h) {
-        return Math.round(ms / h) + "h";
+      if (msAbs >= h2) {
+        return Math.round(ms / h2) + "h";
       }
       if (msAbs >= m) {
         return Math.round(ms / m) + "m";
@@ -20009,8 +20102,8 @@ var require_ms = __commonJS({
       if (msAbs >= d) {
         return plural(ms, msAbs, d, "day");
       }
-      if (msAbs >= h) {
-        return plural(ms, msAbs, h, "hour");
+      if (msAbs >= h2) {
+        return plural(ms, msAbs, h2, "hour");
       }
       if (msAbs >= m) {
         return plural(ms, msAbs, m, "minute");
@@ -20726,7 +20819,7 @@ var init_runtime_defaults2 = __esm({
 });
 
 // src/services/agent-token.ts
-import { randomBytes as randomBytes2, createHash as createHash4, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
+import { randomBytes as randomBytes2, createHash as createHash5, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 function toAgentTokenView(t) {
   return {
     id: t.id,
@@ -20792,7 +20885,7 @@ var init_agent_token = __esm({
   "src/services/agent-token.ts"() {
     "use strict";
     init_db();
-    hash2 = (token) => createHash4("sha256").update(token).digest("hex");
+    hash2 = (token) => createHash5("sha256").update(token).digest("hex");
   }
 });
 
@@ -20932,7 +21025,7 @@ var init_config4 = __esm({
 });
 
 // src/services/telegram/protocol.ts
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 function normalizeTelegramCommand(text) {
   const clean2 = text.trim();
   const match = clean2.match(/^\/([a-z0-9_]+)(?:@[a-z0-9_]+)?(?:\s+([\s\S]*))?$/i);
@@ -20999,7 +21092,7 @@ function parseTelegramUpdate(update2, allowlist, maxText = 12e3) {
   };
 }
 function inboundDigest(input) {
-  return createHash5("sha256").update(`${input.updateId}\0${input.chatId}\0${input.userId}\0${input.kind}\0${input.text}`, "utf8").digest("hex");
+  return createHash6("sha256").update(`${input.updateId}\0${input.chatId}\0${input.userId}\0${input.kind}\0${input.text}`, "utf8").digest("hex");
 }
 function sanitizeTelegramOutput(text, exactSecrets = []) {
   let clean2 = text.replace(ANSI, "").replace(CONTROLS, "");
@@ -21166,7 +21259,7 @@ var init_typing = __esm({
 });
 
 // src/services/telegram/gateway.ts
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 var digestRaw, TelegramGateway;
 var init_gateway = __esm({
   "src/services/telegram/gateway.ts"() {
@@ -21175,7 +21268,7 @@ var init_gateway = __esm({
     init_protocol();
     init_runtime();
     init_typing();
-    digestRaw = (update2) => createHash6("sha256").update(JSON.stringify(update2)).digest("hex");
+    digestRaw = (update2) => createHash7("sha256").update(JSON.stringify(update2)).digest("hex");
     TelegramGateway = class {
       constructor(deps) {
         this.deps = deps;
@@ -21482,14 +21575,14 @@ var init_engine_command = __esm({
 });
 
 // src/services/telegram/session.ts
-import { createHash as createHash7 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 var chatHash, telegramOperatorSessionId, formatTelegramTurn, TelegramSessionCoordinator;
 var init_session = __esm({
   "src/services/telegram/session.ts"() {
     "use strict";
     init_src2();
     init_engine_command();
-    chatHash = (chatId) => createHash7("sha256").update(chatId).digest("hex").slice(0, 16);
+    chatHash = (chatId) => createHash8("sha256").update(chatId).digest("hex").slice(0, 16);
     telegramOperatorSessionId = (chatId) => `telegram-${chatHash(chatId)}`;
     formatTelegramTurn = (input) => `[Telegram update ${input.updateId} \xB7 chat ${input.chatId} \xB7 kind ${input.kind}]
 ${input.text}`;
@@ -24949,7 +25042,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes12, createHash: createHash15 } = __require("crypto");
+    var { randomBytes: randomBytes12, createHash: createHash16 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -25617,7 +25710,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket2, socket2, "Invalid Upgrade header");
           return;
         }
-        const digest2 = createHash15("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash16("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest2) {
           abortHandshake(websocket2, socket2, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -25986,7 +26079,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash15 } = __require("crypto");
+    var { createHash: createHash16 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -26293,7 +26386,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket2, 503);
-        const digest2 = createHash15("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash16("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -26365,7 +26458,7 @@ var require_websocket_server = __commonJS({
       socket2.once("finish", socket2.destroy);
       socket2.end(
         `HTTP/1.1 ${code} ${http.STATUS_CODES[code]}\r
-` + Object.keys(headers).map((h) => `${h}: ${headers[h]}`).join("\r\n") + "\r\n\r\n" + message
+` + Object.keys(headers).map((h2) => `${h2}: ${headers[h2]}`).join("\r\n") + "\r\n\r\n" + message
       );
     }
     function abortHandshakeOrEmitwsClientError(server, req, socket2, code, message, headers) {
@@ -26589,7 +26682,7 @@ var init_client2 = __esm({
 });
 
 // src/services/logs/spool.ts
-import { appendFile, mkdir as mkdir8, readFile as readFile6, readdir as readdir8, rm as rm8, stat as stat4 } from "node:fs/promises";
+import { appendFile, mkdir as mkdir8, readFile as readFile7, readdir as readdir9, rm as rm8, stat as stat6 } from "node:fs/promises";
 import { join as join35 } from "node:path";
 function spoolDir(lane) {
   return join35(resolveDataDirs().home, "log-spool", lane);
@@ -26613,7 +26706,7 @@ async function readSpoolSegments(lane) {
   const dir2 = spoolDir(lane);
   let names;
   try {
-    names = await readdir8(dir2);
+    names = await readdir9(dir2);
   } catch {
     return [];
   }
@@ -26621,7 +26714,7 @@ async function readSpoolSegments(lane) {
   const out4 = [];
   for (const name2 of files) {
     const file = join35(dir2, name2);
-    const raw = await readFile6(file, "utf8").catch(() => "");
+    const raw = await readFile7(file, "utf8").catch(() => "");
     const entries3 = raw.split("\n").filter(Boolean).map((l) => JSON.parse(l));
     out4.push({ file, entries: entries3 });
   }
@@ -27229,7 +27322,7 @@ var init_agent_tool_catalog = __esm({
 });
 
 // src/services/builtin-agents.ts
-import { createHash as createHash12 } from "node:crypto";
+import { createHash as createHash13 } from "node:crypto";
 async function seedBuiltinAgents() {
   try {
     const setting = await getSetting();
@@ -27319,7 +27412,7 @@ var init_builtin_agents2 = __esm({
     init_settings3();
     init_tombstone();
     init_sync_notify();
-    digest = (parts) => createHash12("sha256").update(parts.join(" ")).digest("hex").slice(0, 16);
+    digest = (parts) => createHash13("sha256").update(parts.join(" ")).digest("hex").slice(0, 16);
     legacyFingerprint = (name2, description, instructions, tools) => digest([name2, description, instructions, [...tools].join(",")]);
     fingerprint = (a) => digest([
       a.name,
@@ -27825,14 +27918,14 @@ var require_HeaderParser = __commonJS({
       }
       const lines2 = this.buffer.split(RE_CRLF);
       const len = lines2.length;
-      let m, h;
+      let m, h2;
       for (var i = 0; i < len; ++i) {
         if (lines2[i].length === 0) {
           continue;
         }
         if (lines2[i][0] === "	" || lines2[i][0] === " ") {
-          if (h) {
-            this.header[h][this.header[h].length - 1] += lines2[i];
+          if (h2) {
+            this.header[h2][this.header[h2].length - 1] += lines2[i];
             continue;
           }
         }
@@ -27841,9 +27934,9 @@ var require_HeaderParser = __commonJS({
           return;
         }
         m = RE_HDR.exec(lines2[i]);
-        h = m[1].toLowerCase();
-        this.header[h] = this.header[h] || [];
-        this.header[h].push(m[2] || "");
+        h2 = m[1].toLowerCase();
+        this.header[h2] = this.header[h2] || [];
+        this.header[h2].push(m[2] || "");
         if (++this.npairs === this.maxHeaderPairs) {
           break;
         }
@@ -30835,14 +30928,14 @@ async function health_default(app3) {
 }
 
 // src/routes/agent-doc.ts
-import { readFile as readFile3 } from "node:fs/promises";
+import { readFile as readFile4 } from "node:fs/promises";
 async function agent_doc_default(app3, opts) {
   app3.get("/agent-integration.md", async (_req, reply) => {
     if (!opts.file)
       return reply.code(404).send({
         error: `dokumen panduan tak ada di instalasi ini (${AGENT_DOC_REL}) \u2014 pasang ulang paket hanoman atau set HANOMAN_AGENT_DOC`
       });
-    const text = await readFile3(opts.file, "utf8");
+    const text = await readFile4(opts.file, "utf8");
     return reply.type("text/markdown; charset=utf-8").send(text);
   });
 }
@@ -30883,8 +30976,8 @@ function components(rel) {
 }
 async function canonicalRoot(root) {
   const out4 = await realpath(root).catch(() => denied("root tidak ada"));
-  const stat5 = await lstat(out4);
-  if (!stat5.isDirectory() || stat5.isSymbolicLink()) denied("root bukan direktori regular");
+  const stat7 = await lstat(out4);
+  if (!stat7.isDirectory() || stat7.isSymbolicLink()) denied("root bukan direktori regular");
   return out4;
 }
 function beneath(root, candidate) {
@@ -30902,8 +30995,8 @@ async function ensureRepoParents(root, rel) {
     } catch (error) {
       if (error.code !== "EEXIST") throw error;
     }
-    const stat5 = await lstat(current);
-    if (stat5.isSymbolicLink() || !stat5.isDirectory()) denied("parent tidak aman");
+    const stat7 = await lstat(current);
+    if (stat7.isSymbolicLink() || !stat7.isDirectory()) denied("parent tidak aman");
     const canonical = await realpath(current);
     if (!beneath(base2, canonical) || canonical !== current) denied("parent keluar root");
   }
@@ -30919,8 +31012,8 @@ function ensureRepoParentsSync(root, rel) {
     } catch (error) {
       if (error.code !== "EEXIST") throw error;
     }
-    const stat5 = lstatSync3(current);
-    if (stat5.isSymbolicLink() || !stat5.isDirectory()) denied("parent tidak aman");
+    const stat7 = lstatSync3(current);
+    if (stat7.isSymbolicLink() || !stat7.isDirectory()) denied("parent tidak aman");
     if (realpathSync4(current) !== current || !beneath(base2, current)) denied("parent keluar root");
   }
 }
@@ -30930,14 +31023,14 @@ async function resolveRepoEntry(root, rel, opts = {}) {
   let current = base2;
   for (let i = 0; i < parts.length; i++) {
     current = join14(current, parts[i]);
-    const stat5 = await lstat(current).catch((error) => {
+    const stat7 = await lstat(current).catch((error) => {
       if (error.code === "ENOENT" && opts.allowMissingTail) return null;
       if (error.code === "ENOENT" && opts.allowMissingFinal && i === parts.length - 1) return null;
       return denied("komponen tidak ada");
     });
-    if (!stat5) break;
-    if (stat5.isSymbolicLink()) denied("symlink");
-    if (i < parts.length - 1 && !stat5.isDirectory()) denied("parent bukan direktori");
+    if (!stat7) break;
+    if (stat7.isSymbolicLink()) denied("symlink");
+    if (i < parts.length - 1 && !stat7.isDirectory()) denied("parent bukan direktori");
   }
   if (!beneath(base2, resolve12(current))) denied("keluar root");
   const parent = resolve12(current, "..");
@@ -30952,9 +31045,9 @@ function assertSafeRepoPathSync(root, rel, allowMissingFinal = false, allowMissi
   for (let i = 0; i < parts.length; i++) {
     current = join14(current, parts[i]);
     try {
-      const stat5 = lstatSync3(current);
-      if (stat5.isSymbolicLink()) denied("symlink");
-      if (i < parts.length - 1 && !stat5.isDirectory()) denied("parent bukan direktori");
+      const stat7 = lstatSync3(current);
+      if (stat7.isSymbolicLink()) denied("symlink");
+      if (i < parts.length - 1 && !stat7.isDirectory()) denied("parent bukan direktori");
     } catch (error) {
       if (allowMissingTail && error.code === "ENOENT") break;
       if (allowMissingFinal && error.code === "ENOENT" && i === parts.length - 1) break;
@@ -31009,8 +31102,8 @@ async function readRepoFile(root, rel) {
   const entry = await resolveRepoEntry(root, rel);
   const handle = await open2(entry.path, constants2.O_RDONLY | (constants2.O_NOFOLLOW ?? 0)).catch(() => denied("final component tidak aman"));
   try {
-    const stat5 = await handle.stat();
-    if (!stat5.isFile()) denied("bukan file regular");
+    const stat7 = await handle.stat();
+    if (!stat7.isFile()) denied("bukan file regular");
     return await handle.readFile();
   } finally {
     await handle.close();
@@ -31338,7 +31431,7 @@ async function projects_default(app3) {
     const needle = (q ?? "").trim().toLowerCase();
     const filtered = needle ? views.filter((v) => `${v.name} ${v.desc} ${v.stack}`.toLowerCase().includes(needle)) : views;
     const device = (handledBy ?? "").trim();
-    const scoped = device ? filtered.filter((v) => v.handledBy.some((h) => h.deviceId === device)) : filtered;
+    const scoped = device ? filtered.filter((v) => v.handledBy.some((h2) => h2.deviceId === device)) : filtered;
     return paginate(scoped, page, limit);
   });
   app3.get("/projects/:id", async (req, reply) => {
@@ -31916,7 +32009,7 @@ async function deleteDoc(projectId, path) {
 init_src2();
 init_db();
 import { execFile as execFile6 } from "node:child_process";
-import { readdir as readdir2, rm as rm3 } from "node:fs/promises";
+import { readdir as readdir3, rm as rm3 } from "node:fs/promises";
 import { promisify as promisify5 } from "node:util";
 import { join as join17, resolve as resolve15 } from "node:path";
 init_notifications2();
@@ -31974,7 +32067,7 @@ async function sweepRepo(repoDir, projectId, deps = prodReaperDeps) {
   const dir2 = trashDirOf(repoDir);
   let entries3;
   try {
-    entries3 = await readdir2(dir2);
+    entries3 = await readdir3(dir2);
   } catch {
     return 0;
   }
@@ -32033,7 +32126,7 @@ function ownsWorktree(repoDir, cwd) {
 import { execFile as execFile7 } from "node:child_process";
 import { promisify as promisify6 } from "node:util";
 import { existsSync as existsSync8 } from "node:fs";
-import { readdir as readdir3 } from "node:fs/promises";
+import { readdir as readdir4 } from "node:fs/promises";
 import { resolve as resolve17 } from "node:path";
 var exec6 = promisify6(execFile7);
 var GIT4 = { maxBuffer: 1 << 24 };
@@ -32079,7 +32172,7 @@ async function listDirEntries(repoDir, rel) {
   const abs = repoAbsPath(repoDir, rel);
   let raw;
   try {
-    raw = await readdir3(abs, { withFileTypes: true });
+    raw = await readdir4(abs, { withFileTypes: true });
   } catch {
     return empty;
   }
@@ -32245,12 +32338,12 @@ async function searchCommits(repoDir, q, by = "all") {
   };
   const byMessage = () => run4(["-i", "-F", `--grep=${q}`]);
   const byAuthor = () => run4(["-i", `--author=${q}`]);
-  const byHash = async () => (await run4([])).filter((h2) => h2.toLowerCase().startsWith(q.toLowerCase()));
+  const byHash = async () => (await run4([])).filter((h3) => h3.toLowerCase().startsWith(q.toLowerCase()));
   if (by === "message") return byMessage();
   if (by === "author") return byAuthor();
   if (by === "hash") return byHash();
-  const [m, a, h] = await Promise.all([byMessage(), byAuthor(), byHash()]);
-  return [.../* @__PURE__ */ new Set([...m, ...a, ...h])];
+  const [m, a, h2] = await Promise.all([byMessage(), byAuthor(), byHash()]);
+  return [.../* @__PURE__ */ new Set([...m, ...a, ...h2])];
 }
 async function compareFile(repoDir, from, to, rel) {
   if (!repoDir) return null;
@@ -32271,9 +32364,9 @@ async function commitDetail(repoDir, sha) {
   try {
     const fmt = ["%H", "%P", "%an", "%aI", "%s", "%G?", "%cn", "%cI", "%ae", "%b"].join(US);
     const parts = (await exec6("git", ["show", "-s", `--pretty=format:${fmt}`, sha], { cwd: repoDir, ...GIT4 })).stdout.split(US);
-    const [h, parents, author, at, subject, gsig, committer, committedAt, authorEmail] = parts;
+    const [h2, parents, author, at, subject, gsig, committer, committedAt, authorEmail] = parts;
     return {
-      sha: h,
+      sha: h2,
       parents: parents ? parents.split(" ") : [],
       author: author ?? "",
       at: at ?? "",
@@ -33328,8 +33421,8 @@ var FileTokenizer = class _FileTokenizer extends AbstractTokenizer {
    */
   static async fromFile(sourceFilePath) {
     const fileHandle = await fsOpen(sourceFilePath, "r");
-    const stat5 = await fileHandle.stat();
-    return new _FileTokenizer(fileHandle, { fileInfo: { path: sourceFilePath, size: stat5.size } });
+    const stat7 = await fileHandle.stat();
+    return new _FileTokenizer(fileHandle, { fileInfo: { path: sourceFilePath, size: stat7.size } });
   }
   constructor(fileHandle, options2) {
     super(options2);
@@ -33979,7 +34072,7 @@ function indexOf(buffer, portion) {
   return -1;
 }
 function mergeArrays(chunks) {
-  const totalLength = chunks.reduce((acc, curr) => acc + curr.length, 0);
+  const totalLength = chunks.reduce((acc2, curr) => acc2 + curr.length, 0);
   const mergedArray = new Uint8Array(totalLength);
   let offset = 0;
   for (const chunk of chunks) {
@@ -36939,7 +37032,7 @@ async function dropSpecAttachments(specId) {
 
 // src/services/spec-attachment-dir.ts
 init_db();
-import { mkdir as mkdir5, readdir as readdir4, readFile as readFile4, rm as rm4, writeFile as writeFile4 } from "node:fs/promises";
+import { mkdir as mkdir5, readdir as readdir5, readFile as readFile5, rm as rm4, writeFile as writeFile4 } from "node:fs/promises";
 import { join as join20 } from "node:path";
 init_session_id();
 init_uploads();
@@ -36993,7 +37086,7 @@ async function syncSpecAttachmentsDir(specId, projectId) {
   for (const a of rows) {
     let bytes;
     try {
-      bytes = await readFile4(join20(uploadDir(), a.storageKey));
+      bytes = await readFile5(join20(uploadDir(), a.storageKey));
     } catch {
       continue;
     }
@@ -37004,7 +37097,7 @@ async function syncSpecAttachmentsDir(specId, projectId) {
   }
   await writeFile4(join20(dir2, INDEX), renderIndex(specId, items), { mode: 384 });
   const keep = /* @__PURE__ */ new Set([INDEX, ...items.map((a) => a.filename)]);
-  for (const name2 of await readdir4(dir2)) {
+  for (const name2 of await readdir5(dir2)) {
     if (!keep.has(name2)) await rm4(join20(dir2, name2), { recursive: true, force: true }).catch(() => {
     });
   }
@@ -39439,12 +39532,12 @@ function drawCode(doc, text) {
       used += hl;
     }
     const body = seg.join("\n");
-    const h = doc.heightOfString(body, opts) + 12;
+    const h2 = doc.heightOfString(body, opts) + 12;
     const top = doc.y;
-    doc.save().rect(left, top, right - left, h).fill(PANEL).restore();
+    doc.save().rect(left, top, right - left, h2).fill(PANEL).restore();
     doc.fillColor(INK).text(body, left + 8, top + 6, opts);
     doc.x = left;
-    doc.y = top + h;
+    doc.y = top + h2;
     if (i < lines2.length) doc.addPage();
   }
   doc.moveDown(0.5);
@@ -39478,12 +39571,12 @@ function drawTable(doc, t) {
   const row = (cells, bold) => {
     const texts = cells.map((c) => toWinAnsi(flatten(c.tokens).map((r) => r.text).join("") || c.text || ""));
     doc.font(bold ? "Helvetica-Bold" : "Helvetica").fontSize(9.2).fillColor(bold ? STRONG : INK);
-    const h = Math.max(...texts.map((s2) => doc.heightOfString(s2, { width: w - 10 })), 0) + 7;
-    if (doc.y + h > doc.page.height - doc.page.margins.bottom) doc.addPage();
+    const h2 = Math.max(...texts.map((s2) => doc.heightOfString(s2, { width: w - 10 })), 0) + 7;
+    if (doc.y + h2 > doc.page.height - doc.page.margins.bottom) doc.addPage();
     const y0 = doc.y;
     texts.forEach((s2, i) => doc.text(s2, left + i * w + 5, y0 + 3, { width: w - 10 }));
     doc.x = left;
-    doc.y = y0 + h;
+    doc.y = y0 + h2;
     rule(doc, HAIR, 2);
   };
   rule(doc, HAIR, 2);
@@ -39632,12 +39725,14 @@ function inDayRange(at, from, to) {
 }
 
 // src/services/live-specs.ts
+init_src();
 init_db();
-init_pty();
+init_live_phases();
 init_session_phases();
 init_stage_machine();
 init_notifications2();
 init_sync_notify();
+import { createHash as createHash4 } from "node:crypto";
 
 // src/services/spec-head.ts
 init_db();
@@ -39659,34 +39754,102 @@ async function recordHeadSha(specId, worktree, read2 = readHead) {
 
 // src/services/live-specs.ts
 var specNum = (id2) => Number.parseInt(id2.match(/\d+/)?.[0] ?? "0", 10);
-async function liveSpecs(filter = {}) {
-  const specs = (await prisma.spec.findMany({
-    where: { projectId: filter.project, source: filter.source },
-    orderBy: { id: "desc" }
-  })).sort((a, b) => specNum(b.id) - specNum(a.id));
-  const live = sessionPhasesBySpec();
-  if (live.size === 0) return decorateBlocked(specs);
+var selectOf = (shape) => Object.fromEntries(
+  Object.keys(shape).filter((k) => k !== "blockedBy").map((k) => [k, true])
+);
+var SLIM_SELECT = selectOf(zSpecSlim.shape);
+var LIST_SELECT = selectOf(zSpecListItem.shape);
+var phases = () => sessionPhasesBySpecAsync().catch(() => /* @__PURE__ */ new Map());
+var sortByNumber = (rows) => {
+  const n2 = new Map(rows.map((r) => [r.id, specNum(r.id)]));
+  return rows.sort((a, b) => n2.get(b.id) - n2.get(a.id));
+};
+async function applyOverlay(specs, live) {
+  if (live.size === 0) return { out: specs, advanced: [], doneNow: [] };
   const advanced = [];
   const doneNow = [];
-  const out4 = specs.map((s2) => {
+  const out4 = await Promise.all(specs.map(async (s2) => {
     const entry = live.get(s2.id);
     if (!entry) return s2;
-    const next = stageForRun(entry.phases, entry.cwd, s2.id);
+    const next = await stageForRunAsync(entry.phases, entry.cwd, s2.id);
     if (!next || STAGES.indexOf(next) <= STAGES.indexOf(s2.stage)) return s2;
     advanced.push({ id: s2.id, from: s2.stage, stage: next, cwd: entry.cwd });
     if (next === "done") doneNow.push({ specId: s2.id, title: s2.title, projectId: s2.projectId });
     return { ...s2, stage: next };
-  });
-  if (advanced.length)
-    await Promise.all(advanced.map(async (a) => {
-      const res = await prisma.spec.updateMany({ where: { id: a.id, stage: a.from }, data: { stage: a.stage } }).catch(() => ({ count: 0 }));
-      if (res.count === 0) return;
-      if (a.stage === "done") await recordHeadSha(a.id, a.cwd);
-      await notifySynced("spec", a.id);
-    }));
+  }));
+  return { out: out4, advanced, doneNow };
+}
+async function liveOverlayTick() {
+  const live = await phases();
+  if (live.size === 0) return;
+  const specs = await prisma.spec.findMany({
+    where: { id: { in: [...live.keys()] } },
+    select: { id: true, stage: true, title: true, projectId: true }
+  });
+  const { advanced, doneNow } = await applyOverlay(specs, live);
+  await Promise.all(advanced.map(async (a) => {
+    const res = await prisma.spec.updateMany({ where: { id: a.id, stage: a.from }, data: { stage: a.stage } }).catch(() => ({ count: 0 }));
+    if (res.count === 0) return;
+    if (a.stage === "done") await recordHeadSha(a.id, a.cwd);
+    await notifySynced("spec", a.id);
+  }));
   await Promise.all(doneNow.map((d) => recordCompletion(d.specId, d.title, d.projectId)));
+}
+async function listSpecsLive(filter = {}) {
+  const specs = sortByNumber(await prisma.spec.findMany({
+    where: { projectId: filter.project, source: filter.source },
+    orderBy: { id: "desc" }
+  }));
+  return decorateBlocked((await applyOverlay(specs, await phases())).out);
+}
+async function listSelected(select, where = {}) {
+  const rows = sortByNumber(await prisma.spec.findMany({ where, select, orderBy: { id: "desc" } }));
+  const { out: out4 } = await applyOverlay(rows, await phases());
   return decorateBlocked(out4);
 }
+var slimCache = null;
+async function slimRows() {
+  const count = await prisma.spec.count();
+  if (slimCache) {
+    const changed = await prisma.spec.findMany({
+      where: { updatedAt: { gte: slimCache.max } },
+      select: SLIM_SELECT
+    });
+    for (const r of changed) {
+      slimCache.rows.set(r.id, r);
+      if (r.updatedAt > slimCache.max) slimCache.max = r.updatedAt;
+    }
+    if (slimCache.rows.size === count) return [...slimCache.rows.values()];
+  }
+  const rows = await prisma.spec.findMany({ select: SLIM_SELECT });
+  slimCache = { rows: new Map(rows.map((r) => [r.id, r])), max: rows.reduce((m, r) => r.updatedAt > m ? r.updatedAt : m, /* @__PURE__ */ new Date(0)) };
+  return rows;
+}
+async function listSpecsSlim() {
+  const { out: out4 } = await applyOverlay(sortByNumber(await slimRows()), await phases());
+  return await decorateBlocked(out4);
+}
+var listSpecsItems = (filter = {}) => listSelected(LIST_SELECT, { projectId: filter.project, source: filter.source });
+async function overlayOne(spec) {
+  const live = await phases();
+  return (await applyOverlay([spec], live)).out[0];
+}
+async function liveSignature() {
+  const live = await phases();
+  const parts = await Promise.all([...live.entries()].sort(([a], [b]) => a.localeCompare(b)).map(
+    async ([id2, e]) => `${id2}:${e.phases.map((p3) => p3.state[0]).join("")}${phasesComplete(e.phases) ? `:${await planCompleteAsync(e.cwd, id2)}` : ""}`
+  ));
+  return parts.join("|");
+}
+async function specsDigest() {
+  const agg = await prisma.spec.aggregate({ _count: { _all: true }, _max: { updatedAt: true }, _sum: { version: true } });
+  const db = `${agg._count._all}:${agg._max.updatedAt?.getTime() ?? 0}:${agg._sum.version ?? 0}`;
+  return createHash4("sha1").update(`${db}|${await liveSignature()}`).digest("hex");
+}
+async function liveSpecs(filter = {}) {
+  await liveOverlayTick();
+  return listSpecsLive(filter);
+}
 
 // src/services/launch-authority.ts
 init_src();
@@ -39721,8 +39884,15 @@ function filterSpecs(specs, f) {
 async function specs_default(app3) {
   app3.get("/specs", async (req) => {
     const { project, source, q, stage, priority, startable, dateField, from, to, page, limit } = req.query;
-    const overlaid = await liveSpecs({ project, source });
-    return paginate(filterSpecs(overlaid, { q, stage, priority, startable, dateField, from, to }), page, limit);
+    await liveOverlayTick();
+    const items = await listSpecsItems({ project, source });
+    return paginate(filterSpecs(items, { q, stage, priority, startable, dateField, from, to }), page, limit);
+  });
+  app3.get("/specs/:id", async (req, reply) => {
+    const { id: id2 } = req.params;
+    const row = await prisma.spec.findUnique({ where: { id: id2 } });
+    if (!row) return reply.code(404).send({ error: "spec tak ditemukan" });
+    return (await decorateBlocked([await overlayOne(row)]))[0];
   });
   app3.post("/specs", async (req, reply) => {
     const parsed = zCreateSpec.safeParse(req.body);
@@ -40583,7 +40753,7 @@ async function deleteBranches(repoDir, names, opts) {
 // src/services/worktree-list.ts
 import { execFile as execFile11 } from "node:child_process";
 import { realpathSync as realpathSync6 } from "node:fs";
-import { stat as stat2 } from "node:fs/promises";
+import { stat as stat4 } from "node:fs/promises";
 import { basename as basename6, dirname as dirname11, join as join21, resolve as resolve19, sep as sep6 } from "node:path";
 import { promisify as promisify10 } from "node:util";
 var exec10 = promisify10(execFile11);
@@ -40638,7 +40808,7 @@ function hasWorktreeSession(path, sessionId2, sessions) {
 }
 async function bornAt(path) {
   try {
-    const st = await stat2(join21(path, ".git"));
+    const st = await stat4(join21(path, ".git"));
     const ms = st.birthtimeMs > 0 ? st.birthtimeMs : st.mtimeMs;
     return new Date(ms).toISOString();
   } catch {
@@ -40653,10 +40823,10 @@ async function listWorktrees(repoDir, inputs) {
   const trash = resolve19(baseReal, ".worktrees", ".trash");
   const sessions = new Map(inputs.sessions.map((s2) => [real(s2.cwd), { id: s2.id, specId: s2.specId }]));
   const history = /* @__PURE__ */ new Map();
-  for (const h of inputs.history ?? []) {
-    const path = real(h.cwd);
+  for (const h2 of inputs.history ?? []) {
+    const path = real(h2.cwd);
     const previous = history.get(path);
-    if (!previous || h.startedAt > previous.startedAt) history.set(path, h);
+    if (!previous || h2.startedAt > previous.startedAt) history.set(path, h2);
   }
   const raw = parseWorktreePorcelain(text ?? "");
   const mainPath = raw[0] ? resolve19(raw[0].path) : null;
@@ -41054,10 +41224,14 @@ function installSessionHistory() {
 
 // src/services/worktree-project.ts
 init_session_id();
+var toWorktreeSession = (s2) => ({ cwd: s2.cwd, id: s2.id, specId: s2.specId ?? null });
 function worktreeSessions() {
-  return listSessions().map((s2) => ({ cwd: s2.cwd, id: s2.id, specId: s2.specId ?? null }));
+  return listSessions().map(toWorktreeSession);
+}
+async function worktreeSessionsAsync() {
+  return (await listSessionsAsync()).map(toWorktreeSession);
 }
-async function projectWorktreeInputs(projectId, sessions = worktreeSessions) {
+async function projectWorktreeInputs(projectId, sessions = worktreeSessionsAsync) {
   const [specs, history] = await Promise.all([
     prisma.spec.findMany({ where: { projectId }, select: { id: true, stage: true } }),
     worktreeHistory(projectId)
@@ -41065,7 +41239,7 @@ async function projectWorktreeInputs(projectId, sessions = worktreeSessions) {
   return {
     specs: new Map(specs.map((s2) => [sessionIdForSpec(s2.id), s2])),
     history,
-    sessions: sessions()
+    sessions: await sessions()
   };
 }
 async function detectOrphanWorktrees(deps = { repos: prodReaperDeps.repos, inputs: projectWorktreeInputs }) {
@@ -41665,7 +41839,7 @@ async function finishGraphOp(reply, id2, repoDir, r, verb) {
 }
 
 // src/routes/fs.ts
-import { readdir as readdir5 } from "node:fs/promises";
+import { readdir as readdir6 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import { resolve as resolve21, dirname as dirname12, join as join23 } from "node:path";
 async function fs_default(app3) {
@@ -41673,7 +41847,7 @@ async function fs_default(app3) {
     const q = req.query.path;
     const dir2 = q && q.trim() ? resolve21(q.trim()) : homedir4();
     try {
-      const ents = await readdir5(dir2, { withFileTypes: true });
+      const ents = await readdir6(dir2, { withFileTypes: true });
       const entries3 = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join23(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
       const parent = dirname12(dir2);
       return { path: dir2, parent: parent === dir2 ? null : parent, entries: entries3 };
@@ -41735,10 +41909,10 @@ function resumeState(repoDir, worktree, branchTo, headSha) {
   return base2 ? { worktreeKept: false, base: base2 } : null;
 }
 function buildResumeCtx(repoDir, id2, flow2, worktreeKept) {
-  const phases = readPhases(phaseFilePath(repoDir, id2), flow2);
+  const phases2 = readPhases(phaseFilePath(repoDir, id2), flow2);
   return {
-    recorded: phases.filter((p3) => p3.state === "done" || p3.state === "skipped").map((p3) => `${p3.name} ${p3.state}`),
-    next: phases.find((p3) => p3.state === "active")?.name,
+    recorded: phases2.filter((p3) => p3.state === "done" || p3.state === "skipped").map((p3) => `${p3.name} ${p3.state}`),
+    next: phases2.find((p3) => p3.state === "active")?.name,
     worktreeKept
   };
 }
@@ -41834,8 +42008,8 @@ async function startSpecSession(spec, opts) {
     const fullPlan = sessionPhasePlan(setting, opts.flow, agent, { model, effort: effort2 }, opts.phaseOverrides);
     let plan = fullPlan;
     if (fullPlan && isContinue && !isGoalFlow) {
-      const phases = fullPlan.phases.filter((p3) => p3.phase === "Execute");
-      plan = phases.length ? { ...fullPlan, phases } : null;
+      const phases2 = fullPlan.phases.filter((p3) => p3.phase === "Execute");
+      plan = phases2.length ? { ...fullPlan, phases: phases2 } : null;
     }
     const buildPrompt = (p3) => {
       if (isGoalFlow) {
@@ -41936,7 +42110,7 @@ function setBounded(map, key, value, maxKeys) {
 // src/services/auth.ts
 init_src2();
 init_db();
-import { randomBytes as randomBytes3, scrypt as scryptCb, timingSafeEqual as timingSafeEqual3, createHash as createHash8 } from "node:crypto";
+import { randomBytes as randomBytes3, scrypt as scryptCb, timingSafeEqual as timingSafeEqual3, createHash as createHash9 } from "node:crypto";
 import { promisify as promisify12 } from "node:util";
 var scrypt = promisify12(scryptCb);
 var COOKIE_NAME = "hn_session";
@@ -41954,7 +42128,7 @@ async function verifyPassword(pw, stored) {
   return key.length === want.length && timingSafeEqual3(key, want);
 }
 var newSessionToken = () => randomBytes3(32).toString("base64url");
-var sessionId = (token) => createHash8("sha256").update(token).digest("hex");
+var sessionId = (token) => createHash9("sha256").update(token).digest("hex");
 async function createSession2(userId) {
   const token = newSessionToken();
   await prisma.session.create({
@@ -42015,9 +42189,9 @@ function cookieOpts(req) {
 
 // src/services/device-token.ts
 init_db();
-import { randomBytes as randomBytes4, createHash as createHash9 } from "node:crypto";
+import { randomBytes as randomBytes4, createHash as createHash10 } from "node:crypto";
 var newDeviceToken = () => randomBytes4(32).toString("base64url");
-var tokenHash = (token) => createHash9("sha256").update(token).digest("hex");
+var tokenHash = (token) => createHash10("sha256").update(token).digest("hex");
 async function issueDeviceToken(userId, name2) {
   const token = newDeviceToken();
   const row = await prisma.deviceToken.create({ data: { userId, name: name2, tokenHash: tokenHash(token) } });
@@ -42253,12 +42427,77 @@ function appendDiag(home3, sessionId2, events) {
 init_notifications2();
 init_stage_machine();
 init_pty();
+
+// src/services/bounded-sender.ts
+var HIGH = 1024 * 1024;
+var CAP = 256 * 1024;
+var DRAIN_MS = 20;
+var isData = (frame2) => frame2.startsWith('{"t":"data"');
+function createBoundedSender(ws2, o = {}) {
+  const high = o.high ?? HIGH;
+  const cap = o.cap ?? CAP;
+  const drainMs = o.drainMs ?? DRAIN_MS;
+  let pending2 = [];
+  let pendingBytes = 0;
+  let timer10;
+  let resyncNeeded = false;
+  const trim = () => {
+    for (let i = 0; i < pending2.length && pendingBytes > cap; ) {
+      if (!isData(pending2[i])) {
+        i++;
+        continue;
+      }
+      pendingBytes -= pending2[i].length;
+      pending2.splice(i, 1);
+      resyncNeeded = true;
+    }
+  };
+  const drain2 = () => {
+    timer10 = void 0;
+    if (ws2.bufferedAmount > high) {
+      timer10 = setTimeout(drain2, drainMs);
+      timer10.unref?.();
+      return;
+    }
+    const out4 = pending2;
+    pending2 = [];
+    pendingBytes = 0;
+    for (const f of out4) ws2.send(f);
+    if (resyncNeeded) {
+      resyncNeeded = false;
+      o.onResync?.();
+    }
+  };
+  return {
+    send(frame2) {
+      if (pending2.length === 0 && ws2.bufferedAmount <= high) {
+        ws2.send(frame2);
+        return;
+      }
+      pending2.push(frame2);
+      pendingBytes += frame2.length;
+      trim();
+      if (!timer10) {
+        timer10 = setTimeout(drain2, drainMs);
+        timer10.unref?.();
+      }
+    },
+    dispose() {
+      if (timer10) clearTimeout(timer10);
+      timer10 = void 0;
+      pending2 = [];
+      pendingBytes = 0;
+    }
+  };
+}
+
+// src/routes/terminal.ts
 init_uploads();
 
 // src/services/agent-invocations.ts
 init_src();
 init_db();
-import { createHash as createHash10, randomUUID as randomUUID9 } from "node:crypto";
+import { createHash as createHash11, randomUUID as randomUUID9 } from "node:crypto";
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { homedir as homedir5 } from "node:os";
 import { readFileSync as readFileSync12, realpathSync as realpathSync7, statSync as statSync4 } from "node:fs";
@@ -42268,7 +42507,7 @@ import { isAbsolute as isAbsolute8, relative as relative4, resolve as resolve22
 init_session_event_token();
 init_session_event_spool();
 import { constants as constants3 } from "node:fs";
-import { mkdir as mkdir6, open as open3, readdir as readdir6, rm as rm6 } from "node:fs/promises";
+import { mkdir as mkdir6, open as open3, readdir as readdir7, rm as rm6 } from "node:fs/promises";
 import { join as join25 } from "node:path";
 var MAX_EVENT_BYTES = 1e6;
 var MAX_FILES_PER_DRAIN = 1e3;
@@ -42314,12 +42553,12 @@ async function drainSpool(app3, root, observation) {
   let delivered = 0;
   let examined = 0;
   let readBuffer;
-  for (const session of await readdir6(root, { withFileTypes: true })) {
+  for (const session of await readdir7(root, { withFileTypes: true })) {
     if (!session.isDirectory() || !SESSION_ID_RE.test(session.name)) continue;
     const dir2 = join25(root, session.name);
     let entries3;
     try {
-      entries3 = await readdir6(dir2, { withFileTypes: true });
+      entries3 = await readdir7(dir2, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -42331,8 +42570,8 @@ async function drainSpool(app3, root, observation) {
       let handle;
       try {
         handle = await open3(path, constants3.O_RDONLY | constants3.O_NOFOLLOW);
-        const stat5 = await handle.stat();
-        if (!stat5.isFile() || stat5.size > MAX_EVENT_BYTES) throw new Error("payload terlalu besar");
+        const stat7 = await handle.stat();
+        if (!stat7.isFile() || stat7.size > MAX_EVENT_BYTES) throw new Error("payload terlalu besar");
         readBuffer ??= Buffer.allocUnsafe(MAX_EVENT_BYTES + 1);
         const { bytesRead } = await handle.read(readBuffer, 0, readBuffer.length, 0);
         if (bytesRead > MAX_EVENT_BYTES) throw new Error("payload terlalu besar");
@@ -42405,7 +42644,7 @@ var MAX_TRANSCRIPT_BYTES2 = 10 * 1024 * 1024;
 var ANSI2 = /[\u001b\u009b](?:\][^\u0007]*(?:\u0007|\u001b\\)|\[[0-?]*[ -/]*[@-~]|[@-_])/g;
 var snapshotHashes = /* @__PURE__ */ new Map();
 var keyOf = (x) => `${x.sessionId}\0${x.runtimeInvocationId}`;
-var hash3 = (value) => createHash10("sha256").update(value).digest("hex");
+var hash3 = (value) => createHash11("sha256").update(value).digest("hex");
 var defaultGitStatus = (cwd) => {
   try {
     return execFileSync3("git", ["-C", cwd, "status", "--porcelain=v1", "-z"], {
@@ -42751,9 +42990,9 @@ async function refreshPhaseInvocations(sessionId2) {
 // src/services/session-dialog.ts
 init_tui_dialog();
 init_pty();
-import { createHash as createHash11 } from "node:crypto";
+import { createHash as createHash12 } from "node:crypto";
 var DIALOG_CHUNK_MS = 50;
-var screenHashOf = (paneText2) => createHash11("sha256").update(dialogKey(paneText2)).digest("hex").slice(0, 16);
+var screenHashOf = (paneText2) => createHash12("sha256").update(dialogKey(paneText2)).digest("hex").slice(0, 16);
 var answerable = (paneText2) => {
   const s2 = readDialogScreen(paneText2);
   if (s2?.kind !== "question") return null;
@@ -44363,9 +44602,9 @@ async function terminal_default(app3, opts) {
   app3.get("/terminal/sessions/:id/phases", async (req, reply) => {
     const { id: id2 } = req.params;
     const s2 = getSession(id2);
-    const phases = sessionPhases(id2);
-    if (!s2?.flow || !phases) return reply.code(404).send({ error: "not found" });
-    return { flow: s2.flow, phases };
+    const phases2 = sessionPhases(id2);
+    if (!s2?.flow || !phases2) return reply.code(404).send({ error: "not found" });
+    return { flow: s2.flow, phases: phases2 };
   });
   app3.post("/terminal/sessions/:id/steer", async (req, reply) => {
     const parsed = zTerminalSteerInput.safeParse(req.body);
@@ -44503,7 +44742,6 @@ async function terminal_default(app3, opts) {
     }
   }, (socket2, req) => {
     const { id: id2 } = req.params;
-    if (!getSession(id2)) return socket2.close(4004, "not found");
     const isClientRemote = req.remote !== void 0;
     const principal = isClientRemote ? { kind: "remote", id: `client:${req.remote.actor.hubOrigin}:${req.remote.actor.userId}` } : req.wsPrincipal;
     let release;
@@ -44514,14 +44752,38 @@ async function terminal_default(app3, opts) {
       return;
     }
     const guard = new WsMessageGuard({ perWindow: TERMINAL_WS_MESSAGES_PER_MINUTE });
-    const client = { send: (m) => socket2.send(m), close: () => socket2.close() };
-    attach(id2, client);
-    void refreshPhaseInvocations(id2);
+    const bounded = createBoundedSender(socket2, {
+      onResync: () => {
+        void screenResyncFrame(id2).then((f) => {
+          if (f) bounded.send(f);
+        });
+      }
+    });
+    const client = { send: (m) => bounded.send(m), close: () => socket2.close() };
+    let ready = false;
+    let closed = false;
+    const early = [];
+    const attachReady = (async () => {
+      const found = await getSessionAsync(id2);
+      if (!found) {
+        socket2.close(4004, "not found");
+        return;
+      }
+      if (closed) return;
+      await attachAsync(id2, client);
+      if (closed) {
+        detach(id2, client);
+        return;
+      }
+      void refreshPhaseInvocations(id2);
+    })().catch(() => {
+      socket2.close(1011, "attach failed");
+    });
     const watch = isClientRemote ? null : createPrincipalWatch({
       check: () => revalidateWsPrincipal(req, principal),
       onRevoked: () => socket2.close(1008, "session revoked")
     });
-    socket2.on("message", (raw) => {
+    const onMessage = (raw) => {
       const verdict = guard.accept(raw);
       if (!verdict.ok) {
         socket2.close(verdict.code, verdict.reason);
@@ -44544,10 +44806,20 @@ async function terminal_default(app3, opts) {
         } catch {
         }
       }
+    };
+    socket2.on("message", (raw) => {
+      if (ready) onMessage(raw);
+      else early.push(raw);
+    });
+    void attachReady.then(() => {
+      ready = true;
+      for (const raw of early.splice(0)) onMessage(raw);
     });
     const revalidate = watch ? setInterval(() => watch.refresh(), 6e4) : void 0;
     revalidate?.unref?.();
     socket2.on("close", () => {
+      closed = true;
+      bounded.dispose();
       if (revalidate) clearInterval(revalidate);
       watch?.dispose();
       release();
@@ -45037,13 +45309,13 @@ function mapToCatalog(checks) {
 var isHardened = (checks) => CRITICAL.every((c) => checks.find((x) => x.check === c)?.status === "pass");
 var HEALTH_CMD = `echo HEALTH uptime $(uptime -p 2>/dev/null || uptime); echo HEALTH disk $(df -P / | awk 'NR==2{print $5}'); echo HEALTH mem $(free -m 2>/dev/null | awk 'NR==2{printf "%d/%dMB", $3, $2}'); echo HEALTH load $(cut -d" " -f1-3 /proc/loadavg)`;
 function parseHealth(out4) {
-  const h = {};
+  const h2 = {};
   for (const line of out4.split("\n")) {
     const m = line.match(/^HEALTH (\S+) ?(.*)$/);
-    if (m) h[m[1]] = m[2].trim();
+    if (m) h2[m[1]] = m[2].trim();
   }
-  if (!h.uptime && !h.disk) return null;
-  return { uptime: h.uptime ?? "", disk: h.disk ?? "", mem: h.mem ?? "", load: h.load ?? "" };
+  if (!h2.uptime && !h2.disk) return null;
+  return { uptime: h2.uptime ?? "", disk: h2.disk ?? "", mem: h2.mem ?? "", load: h2.load ?? "" };
 }
 var target = (v) => ({ host: v.host, port: v.port, user: v.user, keyPath: v.keyPath });
 var packagedScript = (f) => fileURLToPath4(new URL(`../scripts/vps/${f}`, import.meta.url));
@@ -45625,9 +45897,9 @@ function readAccessToken() {
     return null;
   }
 }
-function normalizeSeverity(s2, pct2) {
+function normalizeSeverity(s2, pct3) {
   if (s2 === "normal" || s2 === "warning" || s2 === "critical") return s2;
-  return pct2 >= 90 ? "critical" : pct2 >= 70 ? "warning" : "normal";
+  return pct3 >= 90 ? "critical" : pct3 >= 70 ? "warning" : "normal";
 }
 function mapWindows(json) {
   const arr = json?.limits;
@@ -45676,7 +45948,7 @@ async function getLimits() {
 }
 
 // src/services/codex-limits.ts
-import { open as open4, readdir as readdir7, stat as stat3 } from "node:fs/promises";
+import { open as open4, readdir as readdir8, stat as stat5 } from "node:fs/promises";
 import { homedir as homedir9 } from "node:os";
 import { join as join32 } from "node:path";
 var TTL_MS3 = 3e4;
@@ -45694,7 +45966,7 @@ function windowLabel(minutes) {
   if (minutes % 60 === 0) return `${minutes / 60} jam`;
   return `${minutes} menit`;
 }
-var severityOf = (pct2) => pct2 >= 90 ? "critical" : pct2 >= 70 ? "warning" : "normal";
+var severityOf = (pct3) => pct3 >= 90 ? "critical" : pct3 >= 70 ? "warning" : "normal";
 function toWindow(slot, raw, reached) {
   const minutes = raw.window_minutes ?? 0;
   const usedPct = Math.round(raw.used_percent ?? 0);
@@ -45713,14 +45985,14 @@ function toWindow(slot, raw, reached) {
 async function recentRollouts(dir2) {
   let entries3;
   try {
-    entries3 = (await readdir7(dir2, { recursive: true })).filter((f) => f.endsWith(".jsonl"));
+    entries3 = (await readdir8(dir2, { recursive: true })).filter((f) => f.endsWith(".jsonl"));
   } catch {
     return [];
   }
   const stamped = await Promise.all(entries3.map(async (rel) => {
     const full = join32(dir2, rel);
     try {
-      return { full, mtime: (await stat3(full)).mtimeMs };
+      return { full, mtime: (await stat5(full)).mtimeMs };
     } catch {
       return null;
     }
@@ -45804,7 +46076,7 @@ async function codex(app3) {
 // src/services/model-catalog.ts
 init_src2();
 init_src();
-import { readFile as readFile5, writeFile as writeFile5, rename as rename4, mkdir as mkdir7 } from "node:fs/promises";
+import { readFile as readFile6, writeFile as writeFile5, rename as rename4, mkdir as mkdir7 } from "node:fs/promises";
 import { dirname as dirname15, join as join34 } from "node:path";
 
 // src/services/model-catalog-parser.ts
@@ -46059,7 +46331,7 @@ var cacheFile = () => join34(resolveHome(), "model-catalog.json");
 var modelCatalogService = createModelCatalogService({
   probe: probeModelCatalog,
   read: async () => {
-    const content = await readFile5(cacheFile(), "utf8");
+    const content = await readFile6(cacheFile(), "utf8");
     if (Buffer.byteLength(content) > 4 * 1024 * 1024) throw new Error("oversized cache");
     return JSON.parse(content);
   },
@@ -46396,6 +46668,7 @@ async function buildTasksPage(f) {
 // src/services/lead/views.ts
 init_db();
 init_pty();
+init_live_phases();
 
 // src/services/lead/pulse.ts
 init_db();
@@ -46576,13 +46849,7 @@ function findCollisions(areas) {
   return out4;
 }
 var prodPulseDeps = {
-  sessions: () => {
-    try {
-      return listSessions();
-    } catch {
-      return [];
-    }
-  },
+  sessions: () => listSessionsAsync().catch(() => []),
   areas: async (s2) => {
     const repoDir = await resolveRepoDir(s2.projectId);
     if (!repoDir) return [];
@@ -46595,14 +46862,8 @@ var prodPulseDeps = {
       return [];
     }
   },
-  planDone: planComplete,
-  finished: (id2) => {
-    try {
-      return sessionFinished(id2);
-    } catch {
-      return false;
-    }
-  },
+  planDone: planCompleteAsync,
+  finished: (id2) => sessionFinishedAsync(id2).catch(() => false),
   decide,
   decideDeps: prodDecideDeps,
   apply: applyAction,
@@ -46648,10 +46909,10 @@ async function pulse(deps = prodPulseDeps) {
 async function followUpFinished(cfg, optIn, deps) {
   let n2 = 0;
   const opt = new Set(optIn);
-  for (const s2 of deps.sessions()) {
+  for (const s2 of await deps.sessions()) {
     if (!s2.exited || !s2.specId || !opt.has(s2.projectId)) continue;
     const bad = (s2.exitCode ?? 0) !== 0;
-    const unfinished = !deps.planDone(s2.cwd, s2.specId);
+    const unfinished = !await deps.planDone(s2.cwd, s2.specId);
     if (!bad && !unfinished) continue;
     const mark = `Sesi ${s2.id} untuk backlog ${s2.specId}`;
     const seen2 = await prisma.leadDecision.findFirst({
@@ -46690,10 +46951,10 @@ async function followUpFinished(cfg, optIn, deps) {
 async function followUpComplete(optIn, deps) {
   let n2 = 0;
   const opt = new Set(optIn);
-  for (const s2 of deps.sessions()) {
+  for (const s2 of await deps.sessions()) {
     if (!s2.specId || !opt.has(s2.projectId)) continue;
     if ((s2.exitCode ?? 0) !== 0) continue;
-    if (!deps.finished(s2.id)) continue;
+    if (!await deps.finished(s2.id)) continue;
     const mark = `Backlog ${s2.specId} sudah selesai di sesi ${s2.id}`;
     const seen2 = await prisma.leadDecision.findFirst({
       where: { sessionId: s2.id, gate: "pulse", question: { startsWith: mark } }
@@ -46732,7 +46993,7 @@ async function followUpComplete(optIn, deps) {
 }
 async function detectCollisions(optIn, deps) {
   const opt = new Set(optIn);
-  const live = deps.sessions().filter((s2) => !s2.exited && s2.specId && opt.has(s2.projectId));
+  const live = (await deps.sessions()).filter((s2) => !s2.exited && s2.specId && opt.has(s2.projectId));
   if (live.length < 2) return 0;
   const areas = [];
   for (const s2 of live) {
@@ -46827,7 +47088,7 @@ async function orderProject(projectId, deps) {
 
 // src/services/lead/engine.ts
 init_notifications2();
-init_pty();
+init_live_phases();
 var HOUSEKEEPING_MS = 6e4;
 var busyPulse = false;
 var lastPulseAt = 0;
@@ -46862,9 +47123,9 @@ async function tick(now, deps = {}) {
     console.error("lead expire:", e);
   }));
   jobs.push((async () => {
-    const live = deps.live ?? liveDecisions;
+    const live = deps.live ?? liveDecisionsAsync;
     const legacy = deps.legacy ?? recordLegacySession;
-    for (const s2 of live()) {
+    for (const s2 of await live()) {
       if (s2.eventHook || !s2.waiting) continue;
       await legacy(s2.id, s2.projectId || null, s2.specId ?? null);
     }
@@ -46909,7 +47170,7 @@ async function buildLeadStatus() {
   }
   let waiting2 = [];
   try {
-    waiting2 = liveDecisions().filter((d) => d.waiting).map((d) => d.id);
+    waiting2 = (await liveDecisionsAsync()).filter((d) => d.waiting).map((d) => d.id);
   } catch {
   }
   const rows = await Promise.all(projects.map(async (p3) => ({
@@ -46982,11 +47243,48 @@ function parseParams(topic, params) {
   return r.success ? r.data : void 0;
 }
 
+// src/services/events-profile.ts
+import { monitorEventLoopDelay } from "node:perf_hooks";
+var PROFILE = process.env.HANOMAN_EVENTS_PROFILE === "1";
+var acc = {};
+var h;
+var nowUs = () => Number(process.hrtime.bigint() / 1000n);
+var profStart = () => PROFILE ? nowUs() : 0;
+function profEnd(group2, t0, bytes, emitted) {
+  if (!PROFILE) return;
+  const a = acc[group2] ??= { builds: [], frames: 0, bytes: 0, ticks: 0 };
+  a.builds.push((nowUs() - t0) / 1e3);
+  a.ticks++;
+  if (emitted) {
+    a.frames++;
+    a.bytes += bytes;
+  }
+}
+var pct2 = (xs, p3) => {
+  const s2 = [...xs].sort((a, b) => a - b);
+  return s2[Math.min(s2.length - 1, Math.floor(s2.length * p3))] ?? 0;
+};
+function startLagMonitor() {
+  if (!PROFILE || h) return;
+  const mon = h = monitorEventLoopDelay({ resolution: 10 });
+  mon.enable();
+  setInterval(() => {
+    const ms = (n2) => +(n2 / 1e6).toFixed(1);
+    const rows = Object.entries(acc).map(([g, a]) => `${g}: build p95=${pct2(a.builds, 0.95).toFixed(1)}ms frames=${a.frames}/${a.ticks} bytes=${a.bytes}`);
+    console.log(`[events-profile] loop p50=${ms(mon.percentile(50))} p99=${ms(mon.percentile(99))} max=${ms(mon.max)}ms | ${rows.join(" | ")}`);
+    mon.reset();
+    for (const k of Object.keys(acc)) delete acc[k];
+  }, 1e4).unref();
+}
+
 // src/services/events.ts
 var clients = /* @__PURE__ */ new Set();
 var cookieClients = /* @__PURE__ */ new WeakSet();
 var clientGroups = /* @__PURE__ */ new WeakMap();
 var tickMs = () => effectiveInt("HANOMAN_EVENTS_TICK_MS") ?? 1e3;
+var presenceKey = (m) => JSON.stringify({ ...m, devices: m.devices.map(
+  (d) => d.local ? { ...d, lastSeenAt: null } : d
+) });
 var GROUPS = [
   { everyTicks: 3, cookieOnly: true, last: "", build: async () => ({
     t: "models",
@@ -47002,7 +47300,16 @@ var GROUPS = [
     // loop — termasuk frame ketikan terminal — selama spawn (terukur sampai 916 ms saat mesin sibuk).
     sessions: (await listSessionsAsync()).map((s2) => isDeciding(s2.id) ? { ...s2, deciding: true } : s2)
   }) },
-  { everyTicks: 1, last: "", build: async () => ({ t: "specs", specs: await liveSpecs() }) },
+  // SPEC-1267 · frame ringkas (`SpecSlim`: tanpa payload/objective/sourceHistory) yang hanya dibangun
+  // saat `specsDigest` berubah. Kemajuan stage dari fase sesi (`liveOverlayTick`) tetap dijalankan
+  // tiap tick: ia hidup di berkas/tmux, bukan di DB, jadi digest DB tak melihatnya sebelum ditulis.
+  {
+    everyTicks: 1,
+    last: "",
+    pre: liveOverlayTick,
+    gate: specsDigest,
+    build: async () => ({ t: "specs", specs: await listSpecsSlim() })
+  },
   { everyTicks: 3, last: "", build: async () => ({ t: "notifications", ...await notificationsFeed() }) },
   // SPEC-742 · ADR-0116 · pembersihan worktree yang masih jalan. `listCleanups()` membaca peta di
   // memori, bukan disk — nol I/O per tick, dan dedup signature membuat frame lahir hanya saat
@@ -47028,7 +47335,15 @@ var GROUPS = [
   // dihitung). 3 dtk: presence berdenyut 30 dtk, jadi kadens lebih rapat hanya menambah build tanpa
   // menambah informasi. `presenceView` menyegarkan sesi mesin ini sendiri di dalamnya — satu
   // `tmux list-panes` asinkron, tak menahan event loop.
-  { everyTicks: 3, cookieOnly: true, last: "", build: async () => ({ t: "presence", ...await presenceView() }) },
+  // SPEC-1267 · `lastSeenAt` device lokal = jam build ini, jadi berubah tiap build; kunci dedup
+  // mengosongkannya supaya frame hanya lahir saat isi presence benar-benar berubah.
+  {
+    everyTicks: 3,
+    cookieOnly: true,
+    last: "",
+    build: async () => ({ t: "presence", ...await presenceView() }),
+    sig: presenceKey
+  },
   // SPEC-961 · grup GLOBAL ke-11 · angka "butuh pengajuan" untuk badge sidebar. 5 dtk: badge bukan
   // board — yang dijanjikannya adalah "ada yang menunggu", bukan detik keberapa ia muncul — dan
   // dedup signature membuat frame lahir hanya saat salah satu angka berubah (jarang). Empat angka,
@@ -47037,8 +47352,7 @@ var GROUPS = [
   // id/judul, dan agent token sudah boleh membaca daftar sumbernya lewat capability masing-masing.
   { everyTicks: 5, last: "", build: async () => ({ t: "pending", counts: await pendingCounts() }) }
 ];
-function broadcast2(msg, cookieOnly = false) {
-  const s2 = JSON.stringify(msg);
+function broadcast2(msg, s2, cookieOnly = false) {
   for (const c of clients) {
     if (cookieOnly && !cookieClients.has(c)) continue;
     const groups = clientGroups.get(c);
@@ -47126,31 +47440,54 @@ function subscribeClient(c, subs) {
 var tick2 = 0;
 var busy = false;
 var timer3;
+async function runGroup(g) {
+  const t0 = profStart();
+  let msg;
+  try {
+    await g.pre?.();
+    let gate2;
+    if (g.gate) {
+      try {
+        gate2 = await g.gate();
+      } catch {
+        gate2 = void 0;
+      }
+      if (gate2 !== void 0 && gate2 === g.lastGate) {
+        profEnd("gate", t0, 0, false);
+        return null;
+      }
+    }
+    msg = await g.build();
+    if (g.failing) {
+      g.failing = false;
+      console.log(`siar dashboard pulih: ${msg.t}`);
+    }
+    const json = JSON.stringify(msg);
+    const key = g.sig ? g.sig(msg) : json;
+    const emit = key !== g.lastSig;
+    profEnd(msg.t, t0, json.length, emit);
+    if (g.gate) g.lastGate = gate2;
+    return emit ? { g, msg, json, key, gate: gate2 } : null;
+  } catch (e) {
+    if (!g.failing) {
+      g.failing = true;
+      console.error("siar dashboard gagal membangun frame:", e);
+    }
+    return null;
+  }
+}
 async function __tick() {
   if (busy) return;
   busy = true;
   tick2++;
   try {
-    for (const g of GROUPS) {
-      if (tick2 % g.everyTicks !== 0) continue;
-      let msg;
-      try {
-        msg = await g.build();
-      } catch (e) {
-        if (!g.failing) {
-          g.failing = true;
-          console.error("siar dashboard gagal membangun frame:", e);
-        }
-        continue;
-      }
-      if (g.failing) {
-        g.failing = false;
-        console.log(`siar dashboard pulih: ${msg.t}`);
-      }
-      const sig = JSON.stringify(msg);
-      if (sig === g.last) continue;
-      g.last = sig;
-      broadcast2(msg, g.cookieOnly);
+    const results = await Promise.all(GROUPS.filter((g) => tick2 % g.everyTicks === 0).map(runGroup));
+    for (const r of results) {
+      if (!r) continue;
+      r.g.last = r.json;
+      r.g.lastSig = r.key;
+      r.g.lastT = r.msg.t;
+      broadcast2(r.msg, r.json, r.g.cookieOnly);
     }
     for (const e of entries2.values()) {
       e.tick++;
@@ -47163,6 +47500,7 @@ async function __tick() {
 }
 function startLoop() {
   if (timer3) return;
+  startLagMonitor();
   timer3 = setInterval(() => {
     void __tick();
   }, tickMs());
@@ -47174,9 +47512,13 @@ function stopLoop() {
     timer3 = void 0;
   }
   tick2 = 0;
-  for (const g of GROUPS) g.last = "";
+  for (const g of GROUPS) {
+    g.last = "";
+    g.lastSig = void 0;
+    g.lastGate = void 0;
+  }
 }
-async function attach2(c, o = {}) {
+async function attach(c, o = {}) {
   clients.add(c);
   if (o.maySubscribe !== false) cookieClients.add(c);
   if (o.groups) clientGroups.set(c, o.groups);
@@ -47187,17 +47529,20 @@ async function attach2(c, o = {}) {
   } catch {
     return;
   }
-  for (const g of GROUPS) {
-    if (g.cookieOnly && !cookieClients.has(c)) continue;
-    let msg;
+  const wanted = GROUPS.filter((g) => !(g.cookieOnly && !cookieClients.has(c)));
+  const frames = await Promise.all(wanted.map(async (g) => {
+    if (g.last && g.lastT) return { t: g.lastT, json: g.last };
     try {
-      msg = await g.build();
+      const msg = await g.build();
+      return { t: msg.t, json: JSON.stringify(msg) };
     } catch {
-      continue;
+      return null;
     }
-    if (o.groups && !o.groups.has(msg.t)) continue;
+  }));
+  for (const f of frames) {
+    if (!f || o.groups && !o.groups.has(f.t)) continue;
     try {
-      c.send(JSON.stringify(msg));
+      c.send(f.json);
     } catch {
       return;
     }
@@ -47231,7 +47576,7 @@ async function events_default(app3, opts) {
     const client = { send: (m) => socket2.send(m), close: () => socket2.close() };
     if (req.remote) {
       const ideRead = req.remote.capabilities.includes("ide:read");
-      void attach2(client, { maySubscribe: false, groups: remoteEventGroups(ideRead) });
+      void attach(client, { maySubscribe: false, groups: remoteEventGroups(ideRead) });
       socket2.on("close", () => detach2(client));
       return;
     }
@@ -47244,7 +47589,7 @@ async function events_default(app3, opts) {
       return;
     }
     const maySubscribe = canSubscribeTopics(principal);
-    void attach2(client, { maySubscribe });
+    void attach(client, { maySubscribe });
     const guard = new WsMessageGuard({ perWindow: SUB_FRAMES_PER_MINUTE });
     socket2.on("message", (raw) => {
       const verdict = guard.accept(raw);
@@ -47354,8 +47699,8 @@ import { join as join36 } from "node:path";
 
 // src/services/device-auth.ts
 function bearerToken2(req) {
-  const h = req.headers["authorization"];
-  return typeof h === "string" && h.startsWith("Bearer ") ? h.slice(7) : void 0;
+  const h2 = req.headers["authorization"];
+  return typeof h2 === "string" && h2.startsWith("Bearer ") ? h2.slice(7) : void 0;
 }
 async function requireDeviceToken(req, reply) {
   const token = bearerToken2(req);
@@ -47790,7 +48135,7 @@ async function session_history_default(app3) {
 init_src();
 init_session_event_token();
 init_pty();
-var bearer = (h) => /^Bearer (.+)$/.exec(h ?? "")?.[1] ?? "";
+var bearer = (h2) => /^Bearer (.+)$/.exec(h2 ?? "")?.[1] ?? "";
 var recordOf = (value) => value && typeof value === "object" ? value : null;
 var boundedString = (value, max) => typeof value === "string" && value.length > 0 && value.length <= max ? value : void 0;
 async function session_events_default(app3) {
@@ -47938,9 +48283,9 @@ init_db();
 init_db();
 init_uploads();
 init_src();
-import { createHash as createHash13, randomBytes as randomBytes7 } from "node:crypto";
+import { createHash as createHash14, randomBytes as randomBytes7 } from "node:crypto";
 function hashAccessKey(key) {
-  return createHash13("sha256").update(key).digest("hex");
+  return createHash14("sha256").update(key).digest("hex");
 }
 function generateAccessKey() {
   const key = "hnm_tkt_" + randomBytes7(24).toString("hex");
@@ -50842,8 +51187,8 @@ function systemPromptFor(type, nonce) {
 ${type === "brainstorm" ? BRAINSTORM : TANYA}`;
 }
 function renderTurnPrompt(o) {
-  const riwayat = o.history.map((h) => h.role === "klien" ? wrapClientMessage(h.text, o.nonce) : `<jawaban-hanoman>
-${h.text}
+  const riwayat = o.history.map((h2) => h2.role === "klien" ? wrapClientMessage(h2.text, o.nonce) : `<jawaban-hanoman>
+${h2.text}
 </jawaban-hanoman>`).join("\n\n");
   const baru = wrapClientMessage(o.message, o.nonce);
   return riwayat ? `Percakapan sejauh ini:
@@ -51463,8 +51808,8 @@ init_src();
 init_db();
 
 // src/services/bootstrap.ts
-import { createHash as createHash14, randomBytes as randomBytes11, timingSafeEqual as timingSafeEqual5 } from "node:crypto";
-import { chmod, lstat as lstat3, mkdir as mkdir10, readFile as readFile7, unlink as unlink5, writeFile as writeFile7 } from "node:fs/promises";
+import { createHash as createHash15, randomBytes as randomBytes11, timingSafeEqual as timingSafeEqual5 } from "node:crypto";
+import { chmod, lstat as lstat3, mkdir as mkdir10, readFile as readFile8, unlink as unlink5, writeFile as writeFile7 } from "node:fs/promises";
 import { join as join39 } from "node:path";
 var TTL_MS5 = 15 * 6e4;
 var SETUP_TOKEN_FILE = "setup.token";
@@ -51476,7 +51821,7 @@ async function readStored(home3) {
   try {
     const info = await lstat3(tokenPath(home3));
     if (info.isSymbolicLink() || !info.isFile()) throw new BootstrapError("invalid setup proof");
-    const [token, expires] = (await readFile7(tokenPath(home3), "utf8")).trim().split("\n");
+    const [token, expires] = (await readFile8(tokenPath(home3), "utf8")).trim().split("\n");
     const expiresAt = Date.parse(expires ?? "");
     if (!token || !Number.isFinite(expiresAt)) throw new BootstrapError("invalid setup proof");
     return { token, expiresAt };
@@ -51516,8 +51861,8 @@ ${new Date(expiresAt).toISOString()}
 }
 async function verifySetupToken(candidate, home3, now = Date.now()) {
   const stored = await readStored(home3);
-  const got = createHash14("sha256").update(candidate).digest();
-  const want = createHash14("sha256").update(stored.token).digest();
+  const got = createHash15("sha256").update(candidate).digest();
+  const want = createHash15("sha256").update(stored.token).digest();
   if (stored.expiresAt <= now || !timingSafeEqual5(got, want)) throw new BootstrapError("invalid setup proof");
 }
 async function consumeSetupToken(home3) {
@@ -52012,7 +52357,7 @@ init_db();
 init_event_log();
 init_transcript_store();
 init_src2();
-import { readFile as readFile8 } from "node:fs/promises";
+import { readFile as readFile9 } from "node:fs/promises";
 import { join as join40 } from "node:path";
 function decodeCursor(c) {
   if (!c) return null;
@@ -52053,7 +52398,7 @@ async function readRemoteTranscript(id2) {
   if (row.deviceId === "local") return readTranscript(row.transcriptKey);
   const path = join40(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
   try {
-    return await readFile8(path, "utf8");
+    return await readFile9(path, "utf8");
   } catch {
     return null;
   }
@@ -52093,8 +52438,8 @@ async function logs_default(app3) {
 init_agent_token();
 init_settings3();
 function agentTokenFromReq(req) {
-  const h = req.headers["authorization"];
-  if (typeof h === "string" && h.startsWith("Bearer ")) return h.slice(7);
+  const h2 = req.headers["authorization"];
+  if (typeof h2 === "string" && h2.startsWith("Bearer ")) return h2.slice(7);
   return void 0;
 }
 async function authenticateAgent(token) {
@@ -52415,11 +52760,11 @@ async function auditSweep(now = Date.now) {
 var timers = [];
 function startVpsMonitor() {
   if (timers.length) return;
-  const h = setInterval(() => void healthSweep(), HEALTH_MS);
+  const h2 = setInterval(() => void healthSweep(), HEALTH_MS);
   const a = setInterval(() => void auditSweep(), AUDIT_MS);
-  h.unref();
+  h2.unref();
   a.unref();
-  timers = [h, a];
+  timers = [h2, a];
   void healthSweep();
   void auditSweep();
 }
@@ -52589,10 +52934,10 @@ async function reconcile(deps) {
         await markFailed(item.id, "spec hilang");
         continue;
       }
-      const p3 = deps.pane(item.sessionId ?? "");
+      const p3 = await deps.pane(item.sessionId ?? "");
       let stage = spec.stage;
       if (p3?.flow && p3.phaseFile) {
-        const d = deps.deriveStage(p3.phaseFile, p3.flow, p3.cwd, item.specId);
+        const d = await deps.deriveStage(p3.phaseFile, p3.flow, p3.cwd, item.specId);
         if (d && STAGES.indexOf(d) > STAGES.indexOf(stage)) {
           const { count } = await prisma.spec.updateMany({ where: { id: item.specId, stage }, data: { stage: d } });
           if (count > 0) await notifySynced("spec", item.specId).catch(() => {
@@ -52625,11 +52970,11 @@ async function reconcile(deps) {
   }
 }
 var reconcileProdDeps = {
-  pane: (sessionId2) => {
-    const s2 = getSession(sessionId2);
+  pane: async (sessionId2) => {
+    const s2 = await getSessionAsync(sessionId2);
     return s2 ? { exited: s2.exited, flow: s2.flow, phaseFile: s2.phaseFile, cwd: s2.cwd } : void 0;
   },
-  deriveStage: (phaseFile, flow2, cwd, specId) => stageForRun(readPhases(phaseFile, flow2), cwd, specId),
+  deriveStage: async (phaseFile, flow2, cwd, specId) => stageForRunAsync(await readPhasesAsync(phaseFile, flow2), cwd, specId),
   headSha: (wt) => {
     try {
       return realGit.headSha(wt);
@@ -53234,13 +53579,13 @@ async function pruneLogs(now, retention, opts = {}) {
   return { logsPruned, logBytesFreed };
 }
 async function reconcileRemoteTranscripts() {
-  const { readdir: readdir9, unlink: unlink6, stat: stat5 } = await import("node:fs/promises");
+  const { readdir: readdir10, unlink: unlink6, stat: stat7 } = await import("node:fs/promises");
   const { join: join41 } = await import("node:path");
   const { resolveDataDirs: resolveDataDirs2 } = await Promise.resolve().then(() => (init_src2(), src_exports));
   const root = join41(resolveDataDirs2().home, "remote-transcripts");
   let deviceDirs;
   try {
-    deviceDirs = await readdir9(root);
+    deviceDirs = await readdir10(root);
   } catch {
     return { orphans: 0 };
   }
@@ -53251,14 +53596,14 @@ async function reconcileRemoteTranscripts() {
   for (const dev of deviceDirs) {
     let files;
     try {
-      files = await readdir9(join41(root, dev));
+      files = await readdir10(join41(root, dev));
     } catch {
       continue;
     }
     for (const f of files) {
       const key = `${dev}/${f}`;
       if (referenced.has(key)) continue;
-      const st = await stat5(join41(root, dev, f)).catch(() => null);
+      const st = await stat7(join41(root, dev, f)).catch(() => null);
       if (!st || Date.now() - st.mtimeMs < gracePeriodMs) continue;
       await unlink6(join41(root, dev, f)).catch(() => {
       });