hanoman 0.7.1 → 0.9.0

package/dist/server.js

@@ -3612,15 +3612,15 @@ var init_types = __esm({
           }
         }
         if (effect.type === "refinement") {
-          const executeRefinement = (acc) => {
-            const result = effect.refinement(acc, checkCtx);
+          const executeRefinement = (acc2) => {
+            const result = effect.refinement(acc2, checkCtx);
             if (ctx.common.async) {
               return Promise.resolve(result);
             }
             if (result instanceof Promise) {
               throw new Error("Async refinement encountered during synchronous parse operation. Use .parseAsync instead.");
             }
-            return acc;
+            return acc2;
           };
           if (ctx.common.async === false) {
             const inner = this._def.schema._parseSync({
@@ -5023,7 +5023,7 @@ function cmpVersion(a, b) {
   }
   return 0;
 }
-var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpecBlocker, zSourceChange, zManualDone, zSpec, NOTIFY_SOUNDS, MODELS, EFFORTS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, CHANGELOG_ENGINE_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zPortalChat, PORTAL_CHAT_DEFAULTS, zPhaseCell, zPhaseOverride, zPhaseOverrides, zFlowOrchestration, zOrchestration, ORCHESTRATION_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
+var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpecBlocker, zSourceChange, zManualDone, zSpec, zSpecListItem, zSpecSlim, NOTIFY_SOUNDS, MODELS, EFFORTS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, CHANGELOG_ENGINE_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zPortalChat, PORTAL_CHAT_DEFAULTS, zPhaseCell, zPhaseOverride, zPhaseOverrides, zFlowOrchestration, zOrchestration, ORCHESTRATION_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
 var init_entities = __esm({
   "../shared/src/entities.ts"() {
     "use strict";
@@ -5129,6 +5129,11 @@ var init_entities = __esm({
       // sesi atau belum selesai. `.nullable().default(null)` menjaga respons/klien versi lama parse.
       manualDone: zManualDone.nullable().default(null)
     });
+    zSpecListItem = zSpec.omit({ payload: true, sourceHistory: true }).extend({
+      version: external_exports.number().optional(),
+      updatedAt: external_exports.string().optional()
+    });
+    zSpecSlim = zSpecListItem.omit({ objective: true });
     NOTIFY_SOUNDS = [
       "off",
       "short",
@@ -6738,9 +6743,9 @@ function nextRun(spec, after, limitDays = 400) {
   for (let d = 0; d <= limitDays; d++) {
     const day2 = new Date(after.getFullYear(), after.getMonth(), after.getDate() + d);
     if (!dayMatches(spec, day2)) continue;
-    for (const h of hours) {
+    for (const h2 of hours) {
       for (const mi of minutes) {
-        const cand = new Date(day2.getFullYear(), day2.getMonth(), day2.getDate(), h, mi, 0, 0);
+        const cand = new Date(day2.getFullYear(), day2.getMonth(), day2.getDate(), h2, mi, 0, 0);
         if (cand.getTime() > t) return cand;
       }
     }
@@ -6787,7 +6792,7 @@ function subKey(topic, params) {
   for (const k of Object.keys(params).sort()) if (params[k] !== void 0) canon[k] = params[k];
   return `${topic}|${JSON.stringify(canon)}`;
 }
-var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, isGoalShapedFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zSetupApply, zChangePassword, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, PROVISION_PROFILES, COMPONENT_IDS, zProvision, UPDATE_RESTART_EXIT, CONFIG_RESTART_EXIT, zUpdateApplyBody, MAX_SUBS, zSubPage, zSubLimit, zTopicParams, zEventsClientMsg, zTicketView, zTicketAttachmentView, zSpecAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
+var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, isGoalShapedFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zSetupApply, zChangePassword, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, PROVISION_PROFILES, COMPONENT_IDS, zProvision, UPDATE_RESTART_EXIT, CONFIG_RESTART_EXIT, MANUAL_RESTART_EXIT, zUpdateApplyBody, MAX_SUBS, zSubPage, zSubLimit, zTopicParams, zEventsClientMsg, zTicketView, zTicketAttachmentView, zSpecAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
 var init_dto = __esm({
   "../shared/src/dto.ts"() {
     "use strict";
@@ -7309,6 +7314,7 @@ var init_dto = __esm({
     });
     UPDATE_RESTART_EXIT = 75;
     CONFIG_RESTART_EXIT = 76;
+    MANUAL_RESTART_EXIT = 77;
     zUpdateApplyBody = external_exports.object({ confirm: external_exports.boolean().optional() });
     MAX_SUBS = 16;
     zSubPage = external_exports.number().int().min(1).max(1e4);
@@ -7760,8 +7766,8 @@ function coverageOf(docs) {
   const linked = [...byCat.values()].filter(Boolean).length;
   return Math.round(linked / byCat.size * 100);
 }
-function docStatusFor(pct2) {
-  return pct2 >= 90 ? "ok" : pct2 >= 60 ? "drift" : "broken";
+function docStatusFor(pct3) {
+  return pct3 >= 90 ? "ok" : pct3 >= 60 ? "drift" : "broken";
 }
 function isExternalLink(target3) {
   return !target3 || /^(https?:|#|mailto:)/.test(target3);
@@ -9252,17 +9258,12 @@ var init_backlog = __esm({
         inputSchema: obj({ properties: { spec: str(ID_HINT) }, required: ["spec"] }),
         mode: "read",
         capability: "backlog:read",
-        samplePath: "/specs",
+        samplePath: "/specs/SPEC-1",
         sampleMethod: "GET",
-        build: (a) => ({ method: "GET", path: "/specs", query: { q: String(a.spec), limit: "100" } }),
-        // REST tak punya `GET /specs/:id`; `q` adalah SUBSTRING, jadi `SPEC-48` mengembalikan
-        // SPEC-480…489. Pencocokan persis dilakukan di sini, bukan dipercayakan ke server.
-        shape: (raw, a) => {
-          const want = String(a.spec).trim().toLowerCase();
-          const items = raw?.items ?? [];
-          const hit = items.find((i) => String(i.id).toLowerCase() === want);
-          return hit ? shapeSpecDetail(hit) : { error: `backlog "${String(a.spec)}" tidak ada. Cek ejaannya (bentuknya SPEC-nnn) atau cari dengan hanoman_backlog_search.` };
-        }
+        // SPEC-1267 · `GET /specs` tak lagi membawa `payload`/`sourceHistory`, jadi isi penuh HANYA ada di
+        // `GET /specs/:id`. Pencocokan id persis kini urusan server (404 bila tak ada).
+        build: (a) => ({ method: "GET", path: `/specs/${enc(String(a.spec).trim())}` }),
+        shape: (raw) => shapeSpecDetail(raw)
       },
       {
         name: "hanoman_backlog_docs_list",
@@ -13042,8 +13043,8 @@ function guideLine(guide, phase) {
 }
 function phaseSkillsFor(flow2, phase, method) {
   const own = method.phaseSkills[phase] ?? [];
-  const phases = PIPELINES[flow2];
-  return writesCode(flow2) && phase === phases[phases.length - 1] ? [.../* @__PURE__ */ new Set([...own, ...method.exitSkills])] : [...own];
+  const phases2 = PIPELINES[flow2];
+  return writesCode(flow2) && phase === phases2[phases2.length - 1] ? [.../* @__PURE__ */ new Set([...own, ...method.exitSkills])] : [...own];
 }
 function orchestratorClause(plan, o = {}) {
   const codex2 = plan.runtime === "codex";
@@ -13320,15 +13321,15 @@ var init_prompt = __esm({
     AUTONOMY_CLAUSE = `Jalankan seluruh pipeline sampai tuntas tanpa berhenti di batas antar-fase. Checkpoint "review"/"approval"/"need review" milik skill superpowers BUKAN titik berhenti di sini \u2014 lanjut saja ke fase berikutnya. Berhenti HANYA untuk ${AMBIGUOUS}: JANGAN memutuskannya sendiri, ${ASK_ROUTE} Selain itu, terus lanjut.`;
     AUTONOMY_CLAUSE_FULL = `Kamu diluncurkan scheduler \u2014 mungkin tak ada manusia yang sedang menonton terminal ini. Tembus seluruh pipeline sampai stage \`done\`, lalu commit & push: checkpoint "review"/"approval" milik skill BUKAN titik berhenti dan jangan menunggu persetujuan siapa pun. Tetapi JANGAN memutuskan sendiri ${AMBIGUOUS}: ${ASK_ROUTE} Catat keputusan penting di pesan commit. Merge ke branch utama tetap dilakukan manusia, bukan kamu.`;
     autonomyClause = (mode) => mode === "full-control" ? AUTONOMY_CLAUSE_FULL : AUTONOMY_CLAUSE;
-    phaseInstruction = (phases, method) => {
-      const base2 = `Kerjakan fase berurutan: ${phases.join(" \u2192 ")}.
+    phaseInstruction = (phases2, method) => {
+      const base2 = `Kerjakan fase berurutan: ${phases2.join(" \u2192 ")}.
 Setiap kali sebuah fase selesai (atau kamu putuskan dilewati), append satu baris ke berkas di $HANOMAN_PHASE_FILE \u2014 persis: \`echo "<Nama Fase> done" >> "$HANOMAN_PHASE_FILE"\`, atau \`skipped\` sebagai ganti \`done\`. Nama fase ditulis apa adanya seperti di atas.`;
-      if (!phases.includes("Plan") || !phases.includes("Execute")) return base2;
+      if (!phases2.includes("Plan") || !phases2.includes("Execute")) return base2;
       return base2 + `
 Execute BELUM selesai selama plan (\`${method.planDir}/**\`) masih punya task \`- [ ]\`: kerjakan SEMUA PR/task sampai tiap kotak jadi \`- [x]\` sebelum menulis \`Execute done\`. hanoman menahan backlog di \`executing\`, bukan \`done\`, selama masih ada \`- [ ]\`.`;
     };
-    skillInstruction = (flow2, phases, method) => {
-      const lines2 = phases.map((p3) => {
+    skillInstruction = (flow2, phases2, method) => {
+      const lines2 = phases2.map((p3) => {
         const skills = phaseSkillsFor(flow2, p3, method);
         return skills.length ? `- ${p3}: ${skills.join(", ")}` : "";
       }).filter(Boolean);
@@ -13645,6 +13646,20 @@ var init_settings2 = __esm({
         }];
         hooks2.SubagentStart = [{ hooks: [{ type: "command", command: EVENT_HOOK_COMMAND }] }];
         hooks2.SubagentStop = [{ hooks: [{ type: "command", command: EVENT_HOOK_COMMAND }] }];
+        if (decisionFile) {
+          const sub = `'${decisionFile.split("'").join("'\\''")}.sub'`;
+          const f = `'${decisionFile.split("'").join("'\\''")}'`;
+          hooks2.SubagentStart.push({ hooks: [{ type: "command", command: `echo 1 >> ${sub}; exit 0` }] });
+          hooks2.SubagentStop.push({ hooks: [{
+            type: "command",
+            command: `[ -s ${sub} ] && { sed '$d' ${sub} > ${sub}.t; mv ${sub}.t ${sub}; }; exit 0`
+          }] });
+          hooks2.Notification = [{ hooks: [{
+            type: "command",
+            command: `m=$(cat); if [ -s ${sub} ]; then echo "$m" | grep -qiE 'permission|needs.?input'; else echo "$m" | grep -qiE 'idle|permission|waiting for|needs.?input'; fi && { [ -s ${f} ] || date +%s > ${f}; } || true`
+          }] }];
+          hooks2.UserPromptSubmit = [{ hooks: [{ type: "command", command: `: > ${f}; : > ${sub}` }] }];
+        }
       }
       if (goal) hooks2.Stop = [{ hooks: [{ type: "prompt", prompt: goal }] }];
       return {
@@ -13671,10 +13686,10 @@ function goalFlowCondition(flow2, specId, branchTo, spec) {
 }
 function defaultGoalCondition({ flow: flow2, specId, branchTo, spec }) {
   if (isGoalShapedFlow(flow2)) return goalFlowCondition(flow2, specId, branchTo, spec);
-  const phases = PIPELINES[flow2];
-  const planGate = phases.includes("Plan") && phases.includes("Execute");
+  const phases2 = PIPELINES[flow2];
+  const planGate = phases2.includes("Plan") && phases2.includes("Execute");
   const clauses = [
-    `1. output \`cat "$HANOMAN_PHASE_FILE"\` yang memuat satu baris untuk SETIAP fase ${phases.join(" \u2192 ")}, masing-masing berakhiran \`done\` atau \`skipped\`;`
+    `1. output \`cat "$HANOMAN_PHASE_FILE"\` yang memuat satu baris untuk SETIAP fase ${phases2.join(" \u2192 ")}, masing-masing berakhiran \`done\` atau \`skipped\`;`
   ];
   if (planGate) {
     const dirs = PLAN_DIRS.map((d) => `${d}/`).join(" ");
@@ -13734,8 +13749,8 @@ function codexHookArgs(o) {
   return args;
 }
 function codexGoalScript(o) {
-  const phases = PIPELINES[o.flow];
-  const planGate = phases.includes("Plan") && phases.includes("Execute");
+  const phases2 = PIPELINES[o.flow];
+  const planGate = phases2.includes("Plan") && phases2.includes("Execute");
   const max = o.maxBlocks ?? GOAL_MAX_BLOCKS;
   const lines2 = [
     "#!/bin/sh",
@@ -13745,7 +13760,7 @@ function codexGoalScript(o) {
     `ST=${shq(o.stateFile)}`,
     "missing=''"
   ];
-  for (const p3 of phases) {
+  for (const p3 of phases2) {
     lines2.push(
       `grep -qE ${shq(`^${p3} (done|skipped)[[:space:]]*$`)} "$PF" 2>/dev/null || missing="$missing\\n- fase ${p3} belum tercatat di \\$HANOMAN_PHASE_FILE"`
     );
@@ -14494,8 +14509,8 @@ var init_custom_agent_eval_evidence = __esm({
     };
     textFile = (root, path) => {
       const target3 = evidencePath(root, path);
-      const stat5 = lstatSync(target3);
-      if (!stat5.isFile() || stat5.size > 1024 * 1024) throw new Error("Evidence must be a bounded regular file");
+      const stat7 = lstatSync(target3);
+      if (!stat7.isFile() || stat7.size > 1024 * 1024) throw new Error("Evidence must be a bounded regular file");
       return readFileSync2(target3, "utf8");
     };
     snapshotEvalEvidence = (context) => {
@@ -14867,9 +14882,9 @@ var init_custom_agent_eval = __esm({
           hash4.update(`missing:${rel}\0`);
           continue;
         }
-        const stat5 = lstatSync2(path);
-        if (stat5.isSymbolicLink()) hash4.update(`l:${rel}\0${readlinkSync(path)}\0`);
-        else hash4.update(`f:${stat5.mode}:${rel}\0`).update(readFileSync3(path));
+        const stat7 = lstatSync2(path);
+        if (stat7.isSymbolicLink()) hash4.update(`l:${rel}\0${readlinkSync(path)}\0`);
+        else hash4.update(`f:${stat7.mode}:${rel}\0`).update(readFileSync3(path));
       }
       return hash4.digest("hex");
     };
@@ -15022,8 +15037,8 @@ ${result.error.message}` : result.stderr ?? ""
       for (const name2 of readdirSync2(eventDir).filter((entry) => entry.endsWith(".json")).sort()) {
         try {
           const path = evidencePath(eventDir, name2);
-          const stat5 = lstatSync2(path);
-          if (!stat5.isFile() || stat5.size > 1024 * 1024) continue;
+          const stat7 = lstatSync2(path);
+          if (!stat7.isFile() || stat7.size > 1024 * 1024) continue;
           const parsed = JSON.parse(readFileSync3(path, "utf8"));
           if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
             events.push(parsed);
@@ -15986,14 +16001,9 @@ var init_stage_machine = __esm({
 
 // src/services/session-phases.ts
 import { readFileSync as readFileSync6, readdirSync as readdirSync5 } from "node:fs";
-function recorded(file) {
+import { readFile, readdir, stat } from "node:fs/promises";
+function parseRecorded(raw) {
   const out4 = /* @__PURE__ */ new Map();
-  let raw;
-  try {
-    raw = readFileSync6(file, "utf8");
-  } catch {
-    return out4;
-  }
   for (const line of raw.split("\n")) {
     const trimmed = line.trimEnd();
     const i = trimmed.lastIndexOf(" ");
@@ -16004,19 +16014,40 @@ function recorded(file) {
   }
   return out4;
 }
-function readPhases(file, flow2) {
-  const seen2 = recorded(file);
-  let activeTaken = false;
-  return PIPELINES[flow2].map((name2) => {
-    const state = seen2.get(name2);
-    if (state) return { name: name2, state };
-    if (activeTaken) return { name: name2, state: "pending" };
-    activeTaken = true;
-    return { name: name2, state: "active" };
-  });
+function recorded(file) {
+  let raw;
+  try {
+    raw = readFileSync6(file, "utf8");
+  } catch {
+    return /* @__PURE__ */ new Map();
+  }
+  return parseRecorded(raw);
 }
-function enrichPhases(phases, roster, invocations, doneSeenAt, now, bornAt2, doneAtBirth = /* @__PURE__ */ new Set()) {
-  return phases.map((p3) => {
+async function recordedAsync(file) {
+  let st;
+  try {
+    st = await stat(file);
+  } catch {
+    phaseFileMemo.delete(file);
+    return /* @__PURE__ */ new Map();
+  }
+  const hit = phaseFileMemo.get(file);
+  if (hit && hit.mtimeMs === st.mtimeMs && hit.size === st.size) return hit.seen;
+  let raw;
+  try {
+    raw = await readFile(file, "utf8");
+  } catch {
+    return /* @__PURE__ */ new Map();
+  }
+  const seen2 = parseRecorded(raw);
+  phaseFileMemo.set(file, { mtimeMs: st.mtimeMs, size: st.size, seen: seen2 });
+  return seen2;
+}
+async function readPhasesAsync(file, flow2) {
+  return derivePhases(await recordedAsync(file), flow2);
+}
+function enrichPhases(phases2, roster, invocations, doneSeenAt, now, bornAt2, doneAtBirth = /* @__PURE__ */ new Set()) {
+  return phases2.map((p3) => {
     const r = roster.find((entry) => entry.phase === p3.name);
     if (!r) return p3;
     const all = invocations.filter((i) => i.phase === p3.name);
@@ -16046,23 +16077,23 @@ function enrichPhases(phases, roster, invocations, doneSeenAt, now, bornAt2, don
     };
   });
 }
-function trackDoneSeen(phases, doneSeenAt, now) {
-  const byName = new Map(phases.map((p3) => [p3.name, p3.state]));
+function trackDoneSeen(phases2, doneSeenAt, now) {
+  const byName = new Map(phases2.map((p3) => [p3.name, p3.state]));
   for (const name2 of [...doneSeenAt.keys()])
     if (byName.get(name2) !== "done") doneSeenAt.delete(name2);
-  for (const p3 of phases)
+  for (const p3 of phases2)
     if (p3.state === "done" && !doneSeenAt.has(p3.name)) doneSeenAt.set(p3.name, now);
 }
-function stageFor(phases) {
+function stageFor(phases2) {
   let best = -1;
-  for (const p3 of phases) {
+  for (const p3 of phases2) {
     if (WORK_PHASES.includes(p3.name) && p3.state === "active")
       best = Math.max(best, STAGES.indexOf("executing"));
     if (p3.state !== "done" && p3.state !== "skipped") continue;
     const s2 = REACHED[p3.name];
     if (s2) best = Math.max(best, STAGES.indexOf(s2));
   }
-  if (phases[0]?.state === "active") best = Math.max(best, STAGES.indexOf("brainstorming"));
+  if (phases2[0]?.state === "active") best = Math.max(best, STAGES.indexOf("brainstorming"));
   return best < 0 ? null : STAGES[best];
 }
 function planComplete(worktree, specId) {
@@ -16085,16 +16116,45 @@ function planComplete(worktree, specId) {
   }
   return true;
 }
-function sessionComplete(phases, worktree, specId) {
-  if (!phasesComplete(phases)) return false;
+async function planCompleteAsync(worktree, specId) {
+  const re = new RegExp(`(^|[^a-z0-9])${specId.toLowerCase()}([^0-9]|$)`);
+  for (const rel of PLAN_DIRS) {
+    const dir2 = `${worktree}/${rel}`;
+    let names;
+    try {
+      names = await readdir(dir2);
+    } catch {
+      continue;
+    }
+    for (const n2 of names) {
+      if (!re.test(n2.toLowerCase())) continue;
+      try {
+        if (/^[ \t]*- \[ \]/m.test(await readFile(`${dir2}/${n2}`, "utf8"))) return false;
+      } catch {
+      }
+    }
+  }
+  return true;
+}
+function sessionComplete(phases2, worktree, specId) {
+  if (!phasesComplete(phases2)) return false;
   return specId ? planComplete(worktree, specId) : true;
 }
-function stageForRun(phases, worktree, specId) {
-  const s2 = stageFor(phases);
+function stageForRun(phases2, worktree, specId) {
+  const s2 = stageFor(phases2);
   if (s2 === "done" && !planComplete(worktree, specId)) return "executing";
   return s2;
 }
-var phaseFilePath, decisionFilePath, REACHED, phasesComplete;
+async function stageForRunAsync(phases2, worktree, specId) {
+  const s2 = stageFor(phases2);
+  if (s2 === "done" && !await planCompleteAsync(worktree, specId)) return "executing";
+  return s2;
+}
+async function sessionCompleteAsync(phases2, worktree, specId) {
+  if (!phasesComplete(phases2)) return false;
+  return specId ? planCompleteAsync(worktree, specId) : true;
+}
+var phaseFilePath, decisionFilePath, phaseFileMemo, derivePhases, readPhases, REACHED, phasesComplete;
 var init_session_phases = __esm({
   "src/services/session-phases.ts"() {
     "use strict";
@@ -16103,6 +16163,18 @@ var init_session_phases = __esm({
     init_stage_machine();
     phaseFilePath = (repoDir, sessionId2) => `${repoDir}/.worktrees/.phases/${sessionId2}`;
     decisionFilePath = (repoDir, sessionId2) => `${repoDir}/.worktrees/.decisions/${sessionId2}`;
+    phaseFileMemo = /* @__PURE__ */ new Map();
+    derivePhases = (seen2, flow2) => {
+      let activeTaken = false;
+      return PIPELINES[flow2].map((name2) => {
+        const state = seen2.get(name2);
+        if (state) return { name: name2, state };
+        if (activeTaken) return { name: name2, state: "pending" };
+        activeTaken = true;
+        return { name: name2, state: "active" };
+      });
+    };
+    readPhases = (file, flow2) => derivePhases(recorded(file), flow2);
     REACHED = {
       Objective: "objective",
       Audit: "objective",
@@ -16118,7 +16190,7 @@ var init_session_phases = __esm({
       // mencapai `done` — tak ada fase verifikasi untuk menutupnya.
       Kerjakan: "done"
     };
-    phasesComplete = (phases) => phases.length > 0 && phases.every((p3) => p3.state === "done" || p3.state === "skipped");
+    phasesComplete = (phases2) => phases2.length > 0 && phases2.every((p3) => p3.state === "done" || p3.state === "skipped");
   }
 });
 
@@ -16467,7 +16539,7 @@ var init_safe_outbound_request = __esm({
 
 // src/services/uploads.ts
 import { randomUUID } from "node:crypto";
-import { mkdir, writeFile, readFile, unlink, rm } from "node:fs/promises";
+import { mkdir, writeFile, readFile as readFile2, unlink, rm } from "node:fs/promises";
 import { join as join11, resolve as resolve8 } from "node:path";
 function extFor(mimeType) {
   return EXT[mimeType] ?? ".bin";
@@ -16498,13 +16570,13 @@ async function dropSessionUploads(sessionId2) {
 }
 async function readUpload(storageKey) {
   const safe = storageKey.replace(/[/\\]/g, "");
-  return readFile(join11(uploadDir(), safe));
+  return readFile2(join11(uploadDir(), safe));
 }
 async function readUploadOrFetch(storageKey) {
   const safe = storageKey.replace(/[/\\]/g, "");
   const target3 = join11(uploadDir(), safe);
   try {
-    return await readFile(target3);
+    return await readFile2(target3);
   } catch {
     const base2 = effectiveStr("SYNC_SERVER_URL");
     const token = effectiveStr("SYNC_DEVICE_TOKEN");
@@ -16976,22 +17048,22 @@ import { execFile, execFileSync as execFileSync2 } from "node:child_process";
 import { createRequire } from "node:module";
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { chmodSync as chmodSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync8, rmSync as rmSync4, statSync as statSync2, writeFileSync as writeFileSync8 } from "node:fs";
+import { stat as stat2 } from "node:fs/promises";
 import { dirname as dirname8 } from "node:path";
 import { tmpdir as tmpdir3 } from "node:os";
-function phaseView(p3, a) {
-  const phases = readPhases(p3.phaseFile, p3.flow);
+function phaseView(p3, a, phases2) {
   const now = Date.now();
-  trackDoneSeen(phases, a.doneSeenAt, now);
+  trackDoneSeen(phases2, a.doneSeenAt, now);
   const roster = (p3.agentRoster ?? []).flatMap((r) => r.phase ? [{ name: r.name, phase: r.phase, model: r.model, effort: r.effort }] : []);
   return roster.length ? enrichPhases(
-    phases,
+    phases2,
     roster,
     phaseInvocations.get(p3.id) ?? [],
     a.doneSeenAt,
     now,
     p3.startedAt * 1e3,
     new Set(p3.doneAtBirth ?? [])
-  ) : phases;
+  ) : phases2;
 }
 function noTtyPromptEnv() {
   const path = askpassDenyPath();
@@ -17164,10 +17236,10 @@ function sessionEventEnv(sessionId2, env = process.env) {
     ...host2 ? { HANOMAN_EVENT_HOST: host2 } : {}
   };
 }
-function registerSessionHooks(h) {
-  hooks.add(h);
+function registerSessionHooks(h2) {
+  hooks.add(h2);
   return () => {
-    hooks.delete(h);
+    hooks.delete(h2);
   };
 }
 function registerCustomAgentSource(fn) {
@@ -17601,20 +17673,6 @@ function sessionPhases(id2) {
   if (!p3?.flow || !p3.phaseFile) return null;
   return readPhases(p3.phaseFile, p3.flow);
 }
-function sessionPhasesBySpec() {
-  const out4 = /* @__PURE__ */ new Map();
-  let panes;
-  try {
-    panes = listPanes();
-  } catch {
-    return out4;
-  }
-  for (const p3 of panes) {
-    if (!p3.specId || !p3.flow || !p3.phaseFile) continue;
-    out4.set(p3.specId, { phases: readPhases(p3.phaseFile, p3.flow), cwd: p3.cwd });
-  }
-  return out4;
-}
 function broadcast(a, f) {
   const msg = frame(f);
   for (const c of a.clients) c.send(msg);
@@ -17669,14 +17727,16 @@ function end(id2, code) {
   broadcast(a, { t: "exit", code });
   drop(id2);
 }
-function pollPhases(p3, a) {
+async function pollPhases(p3, a) {
   if (!p3.flow || !p3.phaseFile) return;
-  const phases = phaseView(p3, a);
-  const complete = paneComplete(p3);
-  const json = phaseKey(phases, complete);
+  const raw = await readPhasesAsync(p3.phaseFile, p3.flow);
+  const complete = await sessionCompleteAsync(raw, p3.cwd, p3.specId);
+  if (attached.get(p3.id) !== a) return;
+  const phases2 = phaseView(p3, a, raw);
+  const json = phaseKey(phases2, complete);
   if (json === a.lastPhases) return;
   a.lastPhases = json;
-  broadcast(a, { t: "phase", phases, complete });
+  broadcast(a, { t: "phase", phases: phases2, complete });
 }
 function setPhaseInvocations(sessionId2, rows) {
   if (attached.has(sessionId2)) phaseInvocations.set(sessionId2, rows);
@@ -17692,7 +17752,7 @@ function startPoll() {
     if (polling) return;
     polling = true;
     const snapshot3 = [...attached.entries()];
-    listPanesAsync().then((panes) => {
+    listPanesAsync().then(async (panes) => {
       const live = new Map(panes.map((p3) => [p3.id, p3]));
       for (const [id2, a] of snapshot3) {
         if (attached.get(id2) !== a) continue;
@@ -17700,7 +17760,8 @@ function startPoll() {
         if (!p3) end(id2, 0);
         else if (p3.exited) end(id2, p3.code);
         else {
-          pollPhases(p3, a);
+          await pollPhases(p3, a).catch(() => {
+          });
           pollAlt(p3, a);
         }
       }
@@ -17715,31 +17776,43 @@ function startPoll() {
   }, POLL_MS);
   poll.unref();
 }
-function attach(id2, c) {
-  const p3 = getSession(id2);
+function replayExited(c, p3, screen) {
+  if (screen.trim()) c.send(frame({ t: "data", d: stripTerminalQueries(screen.replace(/\n/g, "\r\n")) }));
+  c.send(frame({ t: "exit", code: p3.code }));
+  c.close();
+}
+async function screenResyncFrame(id2) {
+  try {
+    const screen = await tmuxAsync("capture-pane", "-p", "-e", "-J", "-t", name(id2));
+    return frame({ t: "data", d: `\x1B[2J\x1B[H${stripTerminalQueries(screen.replace(/\n/g, "\r\n"))}` });
+  } catch {
+    return null;
+  }
+}
+async function attachAsync(id2, c) {
+  const p3 = await getSessionAsync(id2);
   if (!p3) {
     c.close();
     return;
   }
   if (p3.exited) {
-    const screen = tmux("capture-pane", "-p", "-e", "-J", "-S", "-2000", "-t", name(id2));
-    if (screen.trim()) {
-      c.send(frame({ t: "data", d: stripTerminalQueries(screen.replace(/\n/g, "\r\n")) }));
-    }
-    c.send(frame({ t: "exit", code: p3.code }));
-    c.close();
+    replayExited(c, p3, await tmuxAsync(...CAPTURE_ARGS(id2)));
     return;
   }
+  attachLive(id2, c, p3);
+}
+function attachLive(id2, c, p3) {
   const a = attached.get(id2) ?? open(id2);
   a.clients.add(c);
   if (a.scrollback) c.send(frame({ t: "data", d: stripTerminalQueries(a.scrollback) }));
   a.lastAlt = p3.altScreen;
   c.send(frame({ t: "alt", on: p3.altScreen }));
   if (p3.flow && p3.phaseFile) {
-    const phases = phaseView(p3, a);
-    const complete = paneComplete(p3);
-    a.lastPhases = phaseKey(phases, complete);
-    c.send(frame({ t: "phase", phases, complete }));
+    const raw = readPhases(p3.phaseFile, p3.flow);
+    const phases2 = phaseView(p3, a, raw);
+    const complete = sessionComplete(raw, p3.cwd, p3.specId);
+    a.lastPhases = phaseKey(phases2, complete);
+    c.send(frame({ t: "phase", phases: phases2, complete }));
   }
 }
 function writeTo(id2, d, from) {
@@ -17791,7 +17864,7 @@ function spawnPty(...args) {
     );
   }
 }
-var socket, PREFIX, MAX_SCROLLBACK, SCROLLBACK_SLACK, POLL_MS, markerFilled, clearMarker, PANE_QUIET_MS, paneQuiet, markerOnset, decisionOnset, attached, phaseInvocations, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentTempDir, agentsFilePath, askpassDenyPath, ASKPASS_DENY, NO_SERVER, TmuxError, sq, idFor, FMT, toSessionInfo, listSessions, listSessionsAsync, liveDecisions, getSession, getSessionAsync, hooks, emitBirth, emitDeath, customAgentSource, codexNativeAgentSupport, nativeAgentsAvailable, customAgentsFor, runGitDiff, sleep, paneText, paneIO, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, COALESCE_MS, COALESCE_MAX_BYTES, trimScrollback, phaseKey, paneComplete, sessionFinished, poll, polling, TERMINAL_QUERY, stripTerminalQueries, detach;
+var socket, PREFIX, MAX_SCROLLBACK, SCROLLBACK_SLACK, POLL_MS, markerFilled, markerFilledAsync, clearMarker, PANE_QUIET_MS, paneQuiet, markerOnset, decisionOnset, attached, phaseInvocations, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentTempDir, agentsFilePath, askpassDenyPath, ASKPASS_DENY, NO_SERVER, TmuxError, sq, idFor, FMT, toSessionInfo, listSessions, listSessionsAsync, decisionsOf, getSession, getSessionAsync, hooks, emitBirth, emitDeath, customAgentSource, codexNativeAgentSupport, nativeAgentsAvailable, customAgentsFor, runGitDiff, sleep, paneText, paneIO, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, COALESCE_MS, COALESCE_MAX_BYTES, trimScrollback, phaseKey, sessionFinishedAsync, poll, polling, TERMINAL_QUERY, stripTerminalQueries, CAPTURE_ARGS, detach;
 var init_pty = __esm({
   "src/services/pty.ts"() {
     "use strict";
@@ -17820,6 +17893,13 @@ var init_pty = __esm({
         return false;
       }
     };
+    markerFilledAsync = async (f) => {
+      try {
+        return (await stat2(f)).size > 0;
+      } catch {
+        return false;
+      }
+    };
     clearMarker = (f) => {
       try {
         writeFileSync8(f, "");
@@ -17937,7 +18017,7 @@ exit 1
     });
     listSessions = () => listPanes().map(toSessionInfo);
     listSessionsAsync = async () => (await listPanesAsync()).map(toSessionInfo);
-    liveDecisions = () => listPanes().filter((p3) => !p3.exited && p3.decisionFile).map((p3) => ({
+    decisionsOf = (panes) => panes.filter((p3) => !p3.exited && p3.decisionFile).map((p3) => ({
       id: p3.id,
       specId: p3.specId,
       projectId: p3.projectId,
@@ -17951,17 +18031,17 @@ exit 1
     getSessionAsync = async (id2) => (await listPanesAsync()).find((p3) => p3.id === id2);
     hooks = /* @__PURE__ */ new Set();
     emitBirth = (b) => {
-      for (const h of hooks) {
+      for (const h2 of hooks) {
         try {
-          h.onBirth?.(b);
+          h2.onBirth?.(b);
         } catch {
         }
       }
     };
     emitDeath = (d) => {
-      for (const h of hooks) {
+      for (const h2 of hooks) {
         try {
-          h.onDeath?.(d);
+          h2.onDeath?.(d);
         } catch {
         }
       }
@@ -18017,11 +18097,10 @@ exit 1
     COALESCE_MS = 16;
     COALESCE_MAX_BYTES = 64 * 1024;
     trimScrollback = (s2) => s2.length > MAX_SCROLLBACK + SCROLLBACK_SLACK ? s2.slice(-MAX_SCROLLBACK) : s2;
-    phaseKey = (phases, complete) => JSON.stringify({ phases, complete });
-    paneComplete = (p3) => !!p3.flow && !!p3.phaseFile && sessionComplete(readPhases(p3.phaseFile, p3.flow), p3.cwd, p3.specId);
-    sessionFinished = (id2) => {
-      const p3 = getSession(id2);
-      return !!p3 && paneComplete(p3);
+    phaseKey = (phases2, complete) => JSON.stringify({ phases: phases2, complete });
+    sessionFinishedAsync = async (id2) => {
+      const p3 = await getSessionAsync(id2);
+      return !!p3 && !!p3.flow && !!p3.phaseFile && sessionCompleteAsync(await readPhasesAsync(p3.phaseFile, p3.flow), p3.cwd, p3.specId);
     };
     polling = false;
     TERMINAL_QUERY = new RegExp([
@@ -18041,6 +18120,7 @@ exit 1
       // XTWINOPS laporan — berparameter TUNGGAL
     ].join("|"), "g");
     stripTerminalQueries = (s2) => s2.replace(TERMINAL_QUERY, "");
+    CAPTURE_ARGS = (id2) => ["capture-pane", "-p", "-e", "-J", "-S", "-2000", "-t", name(id2)];
     detach = (id2, c) => {
       attached.get(id2)?.clients.delete(c);
     };
@@ -18066,7 +18146,7 @@ var init_redact_known = __esm({
 
 // src/services/transcript-store.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { mkdir as mkdir2, writeFile as writeFile2, readFile as readFile2, unlink as unlink2, readdir, stat } from "node:fs/promises";
+import { mkdir as mkdir2, writeFile as writeFile2, readFile as readFile3, unlink as unlink2, readdir as readdir2, stat as stat3 } from "node:fs/promises";
 import { join as join13, resolve as resolve9, basename as basename4 } from "node:path";
 function transcriptDir() {
   return resolve9(effectiveStr("HANOMAN_TRANSCRIPT_DIR")?.trim() || resolveDataDirs().transcripts);
@@ -18093,7 +18173,7 @@ async function saveTranscript(text) {
 async function readTranscript(key) {
   if (!key) return null;
   try {
-    return await readFile2(join13(transcriptDir(), basename4(key)), "utf8");
+    return await readFile3(join13(transcriptDir(), basename4(key)), "utf8");
   } catch {
     return null;
   }
@@ -18110,7 +18190,7 @@ async function listTranscripts() {
   const dir2 = transcriptDir();
   let names;
   try {
-    names = await readdir(dir2);
+    names = await readdir2(dir2);
   } catch (e) {
     if (e.code === "ENOENT") return [];
     throw e;
@@ -18119,7 +18199,7 @@ async function listTranscripts() {
   for (const name2 of names) {
     if (!name2.endsWith(".log")) continue;
     try {
-      rows.push({ key: name2, mtimeMs: (await stat(join13(dir2, name2))).mtimeMs });
+      rows.push({ key: name2, mtimeMs: (await stat3(join13(dir2, name2))).mtimeMs });
     } catch {
     }
   }
@@ -19181,6 +19261,118 @@ var init_codex_trust = __esm({
   }
 });
 
+// src/services/logs/phase-tap.ts
+function observePhases(rows) {
+  const seen2 = /* @__PURE__ */ new Set();
+  for (const r of rows) {
+    seen2.add(r.sessionId);
+    const prev = known.get(r.sessionId);
+    if (!known.has(r.sessionId)) {
+      known.set(r.sessionId, r.phase);
+      continue;
+    }
+    if (prev !== r.phase) {
+      void appendEvent({
+        kind: "session.phase",
+        msg: `sesi ${r.sessionId} fase ${prev ?? "?"} \u2192 ${r.phase ?? "?"}`,
+        projectId: r.projectId,
+        specId: r.specId ?? null,
+        sessionId: r.sessionId,
+        data: { from: prev, to: r.phase }
+      });
+      known.set(r.sessionId, r.phase);
+    }
+  }
+  for (const id2 of [...known.keys()]) if (!seen2.has(id2)) known.delete(id2);
+}
+var known;
+var init_phase_tap = __esm({
+  "src/services/logs/phase-tap.ts"() {
+    "use strict";
+    init_event_log();
+    known = /* @__PURE__ */ new Map();
+  }
+});
+
+// src/services/presence/snapshot.ts
+function paneToPresence(p3, phase) {
+  return {
+    sessionId: p3.id,
+    projectId: p3.projectId,
+    ...p3.specId ? { specId: p3.specId } : {},
+    ...p3.flow ? { flow: p3.flow } : {},
+    ...phase ? { phase } : {},
+    agent: p3.agent,
+    // Presedensi: pane mati sudah berakhir apa pun isi markernya.
+    status: p3.exited ? "exited" : p3.decision ? "waiting" : "working",
+    startedAt: isoFromEpochSeconds(p3.startedAt)
+  };
+}
+function activePhase(p3) {
+  if (!p3.flow || !p3.phaseFile) return void 0;
+  return readPhases(p3.phaseFile, p3.flow).find((f) => f.state === "active")?.name;
+}
+function listPanesShared(now = Date.now()) {
+  if (panesMemo && now - panesMemo.at < PANES_MEMO_MS) return panesMemo.value;
+  const value = listPanesAsync();
+  panesMemo = { at: now, value };
+  value.catch(() => {
+    if (panesMemo?.value === value) panesMemo = null;
+  });
+  return value;
+}
+async function buildLocalPresence() {
+  const panes = await listPanesShared();
+  const rows = panes.slice(0, MAX_PRESENCE_SESSIONS).map((p3) => paneToPresence(p3, activePhase(p3)));
+  observePhases(rows.map((r) => ({ sessionId: r.sessionId, projectId: r.projectId, specId: r.specId, phase: r.phase })));
+  return rows;
+}
+async function buildLocalCapacity() {
+  return currentLaunchStatus(await listPanesShared(), await getScheduler());
+}
+var isoFromEpochSeconds, PANES_MEMO_MS, panesMemo;
+var init_snapshot = __esm({
+  "src/services/presence/snapshot.ts"() {
+    "use strict";
+    init_src();
+    init_pty();
+    init_session_phases();
+    init_config3();
+    init_session_launch_gate();
+    init_phase_tap();
+    isoFromEpochSeconds = (s2) => new Date((s2 || 0) * 1e3).toISOString();
+    PANES_MEMO_MS = 1e3;
+    panesMemo = null;
+  }
+});
+
+// src/services/live-phases.ts
+async function sessionPhasesBySpecAsync() {
+  const out4 = /* @__PURE__ */ new Map();
+  let panes;
+  try {
+    panes = await listPanesShared();
+  } catch {
+    return out4;
+  }
+  await Promise.all(panes.map(async (p3) => {
+    if (!p3.specId || !p3.flow || !p3.phaseFile) return;
+    out4.set(p3.specId, { phases: await readPhasesAsync(p3.phaseFile, p3.flow), cwd: p3.cwd });
+  }));
+  return out4;
+}
+async function liveDecisionsAsync() {
+  return decisionsOf(await listPanesShared());
+}
+var init_live_phases = __esm({
+  "src/services/live-phases.ts"() {
+    "use strict";
+    init_session_phases();
+    init_snapshot();
+    init_pty();
+  }
+});
+
 // src/services/notifications.ts
 async function recordDrift(vpsId, vpsName, drift, snapshotId) {
   if (drift.length === 0) return;
@@ -19282,11 +19474,11 @@ async function recordCronRun(cronId, cronName, projectId, dueAt, status2, note)
   }).catch(() => {
   });
 }
-async function scanDecisions(read2 = liveDecisions) {
+async function scanDecisions(read2 = liveDecisionsAsync) {
   const next = /* @__PURE__ */ new Set();
   const fresh = [];
-  for (const s2 of read2()) {
-    if (!markerFilled(s2.decisionFile)) continue;
+  for (const s2 of await read2()) {
+    if (!await markerFilledAsync(s2.decisionFile)) continue;
     if (awaiting.has(s2.id)) {
       next.add(s2.id);
       continue;
@@ -19322,96 +19514,12 @@ var init_notifications2 = __esm({
     "use strict";
     init_db();
     init_pty();
+    init_live_phases();
     awaiting = /* @__PURE__ */ new Set();
     DEFAULT_FEED_TAKE = 50;
   }
 });
 
-// src/services/logs/phase-tap.ts
-function observePhases(rows) {
-  const seen2 = /* @__PURE__ */ new Set();
-  for (const r of rows) {
-    seen2.add(r.sessionId);
-    const prev = known.get(r.sessionId);
-    if (!known.has(r.sessionId)) {
-      known.set(r.sessionId, r.phase);
-      continue;
-    }
-    if (prev !== r.phase) {
-      void appendEvent({
-        kind: "session.phase",
-        msg: `sesi ${r.sessionId} fase ${prev ?? "?"} \u2192 ${r.phase ?? "?"}`,
-        projectId: r.projectId,
-        specId: r.specId ?? null,
-        sessionId: r.sessionId,
-        data: { from: prev, to: r.phase }
-      });
-      known.set(r.sessionId, r.phase);
-    }
-  }
-  for (const id2 of [...known.keys()]) if (!seen2.has(id2)) known.delete(id2);
-}
-var known;
-var init_phase_tap = __esm({
-  "src/services/logs/phase-tap.ts"() {
-    "use strict";
-    init_event_log();
-    known = /* @__PURE__ */ new Map();
-  }
-});
-
-// src/services/presence/snapshot.ts
-function paneToPresence(p3, phase) {
-  return {
-    sessionId: p3.id,
-    projectId: p3.projectId,
-    ...p3.specId ? { specId: p3.specId } : {},
-    ...p3.flow ? { flow: p3.flow } : {},
-    ...phase ? { phase } : {},
-    agent: p3.agent,
-    // Presedensi: pane mati sudah berakhir apa pun isi markernya.
-    status: p3.exited ? "exited" : p3.decision ? "waiting" : "working",
-    startedAt: isoFromEpochSeconds(p3.startedAt)
-  };
-}
-function activePhase(p3) {
-  if (!p3.flow || !p3.phaseFile) return void 0;
-  return readPhases(p3.phaseFile, p3.flow).find((f) => f.state === "active")?.name;
-}
-function listPanesShared(now = Date.now()) {
-  if (panesMemo && now - panesMemo.at < PANES_MEMO_MS) return panesMemo.value;
-  const value = listPanesAsync();
-  panesMemo = { at: now, value };
-  value.catch(() => {
-    if (panesMemo?.value === value) panesMemo = null;
-  });
-  return value;
-}
-async function buildLocalPresence() {
-  const panes = await listPanesShared();
-  const rows = panes.slice(0, MAX_PRESENCE_SESSIONS).map((p3) => paneToPresence(p3, activePhase(p3)));
-  observePhases(rows.map((r) => ({ sessionId: r.sessionId, projectId: r.projectId, specId: r.specId, phase: r.phase })));
-  return rows;
-}
-async function buildLocalCapacity() {
-  return currentLaunchStatus(await listPanesShared(), await getScheduler());
-}
-var isoFromEpochSeconds, PANES_MEMO_MS, panesMemo;
-var init_snapshot = __esm({
-  "src/services/presence/snapshot.ts"() {
-    "use strict";
-    init_src();
-    init_pty();
-    init_session_phases();
-    init_config3();
-    init_session_launch_gate();
-    init_phase_tap();
-    isoFromEpochSeconds = (s2) => new Date((s2 || 0) * 1e3).toISOString();
-    PANES_MEMO_MS = 1e3;
-    panesMemo = null;
-  }
-});
-
 // src/services/device-sockets.ts
 function registerDeviceSocket(deviceId, kind, socket2) {
   const entry = { kind, socket: socket2 };
@@ -19916,8 +20024,8 @@ var require_ms = __commonJS({
   "../node_modules/.pnpm/ms@2.1.3/node_modules/ms/index.js"(exports, module) {
     var s2 = 1e3;
     var m = s2 * 60;
-    var h = m * 60;
-    var d = h * 24;
+    var h2 = m * 60;
+    var d = h2 * 24;
     var w = d * 7;
     var y = d * 365.25;
     module.exports = function(val, options2) {
@@ -19965,7 +20073,7 @@ var require_ms = __commonJS({
         case "hrs":
         case "hr":
         case "h":
-          return n2 * h;
+          return n2 * h2;
         case "minutes":
         case "minute":
         case "mins":
@@ -19993,8 +20101,8 @@ var require_ms = __commonJS({
       if (msAbs >= d) {
         return Math.round(ms / d) + "d";
       }
-      if (msAbs >= h) {
-        return Math.round(ms / h) + "h";
+      if (msAbs >= h2) {
+        return Math.round(ms / h2) + "h";
       }
       if (msAbs >= m) {
         return Math.round(ms / m) + "m";
@@ -20009,8 +20117,8 @@ var require_ms = __commonJS({
       if (msAbs >= d) {
         return plural(ms, msAbs, d, "day");
       }
-      if (msAbs >= h) {
-        return plural(ms, msAbs, h, "hour");
+      if (msAbs >= h2) {
+        return plural(ms, msAbs, h2, "hour");
       }
       if (msAbs >= m) {
         return plural(ms, msAbs, m, "minute");
@@ -20726,7 +20834,7 @@ var init_runtime_defaults2 = __esm({
 });
 
 // src/services/agent-token.ts
-import { randomBytes as randomBytes2, createHash as createHash4, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
+import { randomBytes as randomBytes2, createHash as createHash5, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 function toAgentTokenView(t) {
   return {
     id: t.id,
@@ -20792,7 +20900,7 @@ var init_agent_token = __esm({
   "src/services/agent-token.ts"() {
     "use strict";
     init_db();
-    hash2 = (token) => createHash4("sha256").update(token).digest("hex");
+    hash2 = (token) => createHash5("sha256").update(token).digest("hex");
   }
 });
 
@@ -20932,7 +21040,7 @@ var init_config4 = __esm({
 });
 
 // src/services/telegram/protocol.ts
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 function normalizeTelegramCommand(text) {
   const clean2 = text.trim();
   const match = clean2.match(/^\/([a-z0-9_]+)(?:@[a-z0-9_]+)?(?:\s+([\s\S]*))?$/i);
@@ -20999,7 +21107,7 @@ function parseTelegramUpdate(update2, allowlist, maxText = 12e3) {
   };
 }
 function inboundDigest(input) {
-  return createHash5("sha256").update(`${input.updateId}\0${input.chatId}\0${input.userId}\0${input.kind}\0${input.text}`, "utf8").digest("hex");
+  return createHash6("sha256").update(`${input.updateId}\0${input.chatId}\0${input.userId}\0${input.kind}\0${input.text}`, "utf8").digest("hex");
 }
 function sanitizeTelegramOutput(text, exactSecrets = []) {
   let clean2 = text.replace(ANSI, "").replace(CONTROLS, "");
@@ -21166,7 +21274,7 @@ var init_typing = __esm({
 });
 
 // src/services/telegram/gateway.ts
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 var digestRaw, TelegramGateway;
 var init_gateway = __esm({
   "src/services/telegram/gateway.ts"() {
@@ -21175,7 +21283,7 @@ var init_gateway = __esm({
     init_protocol();
     init_runtime();
     init_typing();
-    digestRaw = (update2) => createHash6("sha256").update(JSON.stringify(update2)).digest("hex");
+    digestRaw = (update2) => createHash7("sha256").update(JSON.stringify(update2)).digest("hex");
     TelegramGateway = class {
       constructor(deps) {
         this.deps = deps;
@@ -21482,14 +21590,14 @@ var init_engine_command = __esm({
 });
 
 // src/services/telegram/session.ts
-import { createHash as createHash7 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 var chatHash, telegramOperatorSessionId, formatTelegramTurn, TelegramSessionCoordinator;
 var init_session = __esm({
   "src/services/telegram/session.ts"() {
     "use strict";
     init_src2();
     init_engine_command();
-    chatHash = (chatId) => createHash7("sha256").update(chatId).digest("hex").slice(0, 16);
+    chatHash = (chatId) => createHash8("sha256").update(chatId).digest("hex").slice(0, 16);
     telegramOperatorSessionId = (chatId) => `telegram-${chatHash(chatId)}`;
     formatTelegramTurn = (input) => `[Telegram update ${input.updateId} \xB7 chat ${input.chatId} \xB7 kind ${input.kind}]
 ${input.text}`;
@@ -24949,7 +25057,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes12, createHash: createHash15 } = __require("crypto");
+    var { randomBytes: randomBytes12, createHash: createHash16 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -25617,7 +25725,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket2, socket2, "Invalid Upgrade header");
           return;
         }
-        const digest2 = createHash15("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash16("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest2) {
           abortHandshake(websocket2, socket2, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -25986,7 +26094,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash15 } = __require("crypto");
+    var { createHash: createHash16 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -26293,7 +26401,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket2, 503);
-        const digest2 = createHash15("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash16("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -26365,7 +26473,7 @@ var require_websocket_server = __commonJS({
       socket2.once("finish", socket2.destroy);
       socket2.end(
         `HTTP/1.1 ${code} ${http.STATUS_CODES[code]}\r
-` + Object.keys(headers).map((h) => `${h}: ${headers[h]}`).join("\r\n") + "\r\n\r\n" + message
+` + Object.keys(headers).map((h2) => `${h2}: ${headers[h2]}`).join("\r\n") + "\r\n\r\n" + message
       );
     }
     function abortHandshakeOrEmitwsClientError(server, req, socket2, code, message, headers) {
@@ -26589,7 +26697,7 @@ var init_client2 = __esm({
 });
 
 // src/services/logs/spool.ts
-import { appendFile, mkdir as mkdir8, readFile as readFile6, readdir as readdir8, rm as rm8, stat as stat4 } from "node:fs/promises";
+import { appendFile, mkdir as mkdir8, readFile as readFile7, readdir as readdir9, rm as rm8, stat as stat6 } from "node:fs/promises";
 import { join as join35 } from "node:path";
 function spoolDir(lane) {
   return join35(resolveDataDirs().home, "log-spool", lane);
@@ -26613,7 +26721,7 @@ async function readSpoolSegments(lane) {
   const dir2 = spoolDir(lane);
   let names;
   try {
-    names = await readdir8(dir2);
+    names = await readdir9(dir2);
   } catch {
     return [];
   }
@@ -26621,7 +26729,7 @@ async function readSpoolSegments(lane) {
   const out4 = [];
   for (const name2 of files) {
     const file = join35(dir2, name2);
-    const raw = await readFile6(file, "utf8").catch(() => "");
+    const raw = await readFile7(file, "utf8").catch(() => "");
     const entries3 = raw.split("\n").filter(Boolean).map((l) => JSON.parse(l));
     out4.push({ file, entries: entries3 });
   }
@@ -27229,7 +27337,7 @@ var init_agent_tool_catalog = __esm({
 });
 
 // src/services/builtin-agents.ts
-import { createHash as createHash12 } from "node:crypto";
+import { createHash as createHash13 } from "node:crypto";
 async function seedBuiltinAgents() {
   try {
     const setting = await getSetting();
@@ -27319,7 +27427,7 @@ var init_builtin_agents2 = __esm({
     init_settings3();
     init_tombstone();
     init_sync_notify();
-    digest = (parts) => createHash12("sha256").update(parts.join(" ")).digest("hex").slice(0, 16);
+    digest = (parts) => createHash13("sha256").update(parts.join(" ")).digest("hex").slice(0, 16);
     legacyFingerprint = (name2, description, instructions, tools) => digest([name2, description, instructions, [...tools].join(",")]);
     fingerprint = (a) => digest([
       a.name,
@@ -27825,14 +27933,14 @@ var require_HeaderParser = __commonJS({
       }
       const lines2 = this.buffer.split(RE_CRLF);
       const len = lines2.length;
-      let m, h;
+      let m, h2;
       for (var i = 0; i < len; ++i) {
         if (lines2[i].length === 0) {
           continue;
         }
         if (lines2[i][0] === "	" || lines2[i][0] === " ") {
-          if (h) {
-            this.header[h][this.header[h].length - 1] += lines2[i];
+          if (h2) {
+            this.header[h2][this.header[h2].length - 1] += lines2[i];
             continue;
           }
         }
@@ -27841,9 +27949,9 @@ var require_HeaderParser = __commonJS({
           return;
         }
         m = RE_HDR.exec(lines2[i]);
-        h = m[1].toLowerCase();
-        this.header[h] = this.header[h] || [];
-        this.header[h].push(m[2] || "");
+        h2 = m[1].toLowerCase();
+        this.header[h2] = this.header[h2] || [];
+        this.header[h2].push(m[2] || "");
         if (++this.npairs === this.maxHeaderPairs) {
           break;
         }
@@ -30835,14 +30943,14 @@ async function health_default(app3) {
 }
 
 // src/routes/agent-doc.ts
-import { readFile as readFile3 } from "node:fs/promises";
+import { readFile as readFile4 } from "node:fs/promises";
 async function agent_doc_default(app3, opts) {
   app3.get("/agent-integration.md", async (_req, reply) => {
     if (!opts.file)
       return reply.code(404).send({
         error: `dokumen panduan tak ada di instalasi ini (${AGENT_DOC_REL}) \u2014 pasang ulang paket hanoman atau set HANOMAN_AGENT_DOC`
       });
-    const text = await readFile3(opts.file, "utf8");
+    const text = await readFile4(opts.file, "utf8");
     return reply.type("text/markdown; charset=utf-8").send(text);
   });
 }
@@ -30883,8 +30991,8 @@ function components(rel) {
 }
 async function canonicalRoot(root) {
   const out4 = await realpath(root).catch(() => denied("root tidak ada"));
-  const stat5 = await lstat(out4);
-  if (!stat5.isDirectory() || stat5.isSymbolicLink()) denied("root bukan direktori regular");
+  const stat7 = await lstat(out4);
+  if (!stat7.isDirectory() || stat7.isSymbolicLink()) denied("root bukan direktori regular");
   return out4;
 }
 function beneath(root, candidate) {
@@ -30902,8 +31010,8 @@ async function ensureRepoParents(root, rel) {
     } catch (error) {
       if (error.code !== "EEXIST") throw error;
     }
-    const stat5 = await lstat(current);
-    if (stat5.isSymbolicLink() || !stat5.isDirectory()) denied("parent tidak aman");
+    const stat7 = await lstat(current);
+    if (stat7.isSymbolicLink() || !stat7.isDirectory()) denied("parent tidak aman");
     const canonical = await realpath(current);
     if (!beneath(base2, canonical) || canonical !== current) denied("parent keluar root");
   }
@@ -30919,8 +31027,8 @@ function ensureRepoParentsSync(root, rel) {
     } catch (error) {
       if (error.code !== "EEXIST") throw error;
     }
-    const stat5 = lstatSync3(current);
-    if (stat5.isSymbolicLink() || !stat5.isDirectory()) denied("parent tidak aman");
+    const stat7 = lstatSync3(current);
+    if (stat7.isSymbolicLink() || !stat7.isDirectory()) denied("parent tidak aman");
     if (realpathSync4(current) !== current || !beneath(base2, current)) denied("parent keluar root");
   }
 }
@@ -30930,14 +31038,14 @@ async function resolveRepoEntry(root, rel, opts = {}) {
   let current = base2;
   for (let i = 0; i < parts.length; i++) {
     current = join14(current, parts[i]);
-    const stat5 = await lstat(current).catch((error) => {
+    const stat7 = await lstat(current).catch((error) => {
       if (error.code === "ENOENT" && opts.allowMissingTail) return null;
       if (error.code === "ENOENT" && opts.allowMissingFinal && i === parts.length - 1) return null;
       return denied("komponen tidak ada");
     });
-    if (!stat5) break;
-    if (stat5.isSymbolicLink()) denied("symlink");
-    if (i < parts.length - 1 && !stat5.isDirectory()) denied("parent bukan direktori");
+    if (!stat7) break;
+    if (stat7.isSymbolicLink()) denied("symlink");
+    if (i < parts.length - 1 && !stat7.isDirectory()) denied("parent bukan direktori");
   }
   if (!beneath(base2, resolve12(current))) denied("keluar root");
   const parent = resolve12(current, "..");
@@ -30952,9 +31060,9 @@ function assertSafeRepoPathSync(root, rel, allowMissingFinal = false, allowMissi
   for (let i = 0; i < parts.length; i++) {
     current = join14(current, parts[i]);
     try {
-      const stat5 = lstatSync3(current);
-      if (stat5.isSymbolicLink()) denied("symlink");
-      if (i < parts.length - 1 && !stat5.isDirectory()) denied("parent bukan direktori");
+      const stat7 = lstatSync3(current);
+      if (stat7.isSymbolicLink()) denied("symlink");
+      if (i < parts.length - 1 && !stat7.isDirectory()) denied("parent bukan direktori");
     } catch (error) {
       if (allowMissingTail && error.code === "ENOENT") break;
       if (allowMissingFinal && error.code === "ENOENT" && i === parts.length - 1) break;
@@ -31009,8 +31117,8 @@ async function readRepoFile(root, rel) {
   const entry = await resolveRepoEntry(root, rel);
   const handle = await open2(entry.path, constants2.O_RDONLY | (constants2.O_NOFOLLOW ?? 0)).catch(() => denied("final component tidak aman"));
   try {
-    const stat5 = await handle.stat();
-    if (!stat5.isFile()) denied("bukan file regular");
+    const stat7 = await handle.stat();
+    if (!stat7.isFile()) denied("bukan file regular");
     return await handle.readFile();
   } finally {
     await handle.close();
@@ -31338,7 +31446,7 @@ async function projects_default(app3) {
     const needle = (q ?? "").trim().toLowerCase();
     const filtered = needle ? views.filter((v) => `${v.name} ${v.desc} ${v.stack}`.toLowerCase().includes(needle)) : views;
     const device = (handledBy ?? "").trim();
-    const scoped = device ? filtered.filter((v) => v.handledBy.some((h) => h.deviceId === device)) : filtered;
+    const scoped = device ? filtered.filter((v) => v.handledBy.some((h2) => h2.deviceId === device)) : filtered;
     return paginate(scoped, page, limit);
   });
   app3.get("/projects/:id", async (req, reply) => {
@@ -31916,7 +32024,7 @@ async function deleteDoc(projectId, path) {
 init_src2();
 init_db();
 import { execFile as execFile6 } from "node:child_process";
-import { readdir as readdir2, rm as rm3 } from "node:fs/promises";
+import { readdir as readdir3, rm as rm3 } from "node:fs/promises";
 import { promisify as promisify5 } from "node:util";
 import { join as join17, resolve as resolve15 } from "node:path";
 init_notifications2();
@@ -31974,7 +32082,7 @@ async function sweepRepo(repoDir, projectId, deps = prodReaperDeps) {
   const dir2 = trashDirOf(repoDir);
   let entries3;
   try {
-    entries3 = await readdir2(dir2);
+    entries3 = await readdir3(dir2);
   } catch {
     return 0;
   }
@@ -32033,7 +32141,7 @@ function ownsWorktree(repoDir, cwd) {
 import { execFile as execFile7 } from "node:child_process";
 import { promisify as promisify6 } from "node:util";
 import { existsSync as existsSync8 } from "node:fs";
-import { readdir as readdir3 } from "node:fs/promises";
+import { readdir as readdir4 } from "node:fs/promises";
 import { resolve as resolve17 } from "node:path";
 var exec6 = promisify6(execFile7);
 var GIT4 = { maxBuffer: 1 << 24 };
@@ -32079,7 +32187,7 @@ async function listDirEntries(repoDir, rel) {
   const abs = repoAbsPath(repoDir, rel);
   let raw;
   try {
-    raw = await readdir3(abs, { withFileTypes: true });
+    raw = await readdir4(abs, { withFileTypes: true });
   } catch {
     return empty;
   }
@@ -32245,12 +32353,12 @@ async function searchCommits(repoDir, q, by = "all") {
   };
   const byMessage = () => run4(["-i", "-F", `--grep=${q}`]);
   const byAuthor = () => run4(["-i", `--author=${q}`]);
-  const byHash = async () => (await run4([])).filter((h2) => h2.toLowerCase().startsWith(q.toLowerCase()));
+  const byHash = async () => (await run4([])).filter((h3) => h3.toLowerCase().startsWith(q.toLowerCase()));
   if (by === "message") return byMessage();
   if (by === "author") return byAuthor();
   if (by === "hash") return byHash();
-  const [m, a, h] = await Promise.all([byMessage(), byAuthor(), byHash()]);
-  return [.../* @__PURE__ */ new Set([...m, ...a, ...h])];
+  const [m, a, h2] = await Promise.all([byMessage(), byAuthor(), byHash()]);
+  return [.../* @__PURE__ */ new Set([...m, ...a, ...h2])];
 }
 async function compareFile(repoDir, from, to, rel) {
   if (!repoDir) return null;
@@ -32271,9 +32379,9 @@ async function commitDetail(repoDir, sha) {
   try {
     const fmt = ["%H", "%P", "%an", "%aI", "%s", "%G?", "%cn", "%cI", "%ae", "%b"].join(US);
     const parts = (await exec6("git", ["show", "-s", `--pretty=format:${fmt}`, sha], { cwd: repoDir, ...GIT4 })).stdout.split(US);
-    const [h, parents, author, at, subject, gsig, committer, committedAt, authorEmail] = parts;
+    const [h2, parents, author, at, subject, gsig, committer, committedAt, authorEmail] = parts;
     return {
-      sha: h,
+      sha: h2,
       parents: parents ? parents.split(" ") : [],
       author: author ?? "",
       at: at ?? "",
@@ -33328,8 +33436,8 @@ var FileTokenizer = class _FileTokenizer extends AbstractTokenizer {
    */
   static async fromFile(sourceFilePath) {
     const fileHandle = await fsOpen(sourceFilePath, "r");
-    const stat5 = await fileHandle.stat();
-    return new _FileTokenizer(fileHandle, { fileInfo: { path: sourceFilePath, size: stat5.size } });
+    const stat7 = await fileHandle.stat();
+    return new _FileTokenizer(fileHandle, { fileInfo: { path: sourceFilePath, size: stat7.size } });
   }
   constructor(fileHandle, options2) {
     super(options2);
@@ -33979,7 +34087,7 @@ function indexOf(buffer, portion) {
   return -1;
 }
 function mergeArrays(chunks) {
-  const totalLength = chunks.reduce((acc, curr) => acc + curr.length, 0);
+  const totalLength = chunks.reduce((acc2, curr) => acc2 + curr.length, 0);
   const mergedArray = new Uint8Array(totalLength);
   let offset = 0;
   for (const chunk of chunks) {
@@ -36939,7 +37047,7 @@ async function dropSpecAttachments(specId) {
 
 // src/services/spec-attachment-dir.ts
 init_db();
-import { mkdir as mkdir5, readdir as readdir4, readFile as readFile4, rm as rm4, writeFile as writeFile4 } from "node:fs/promises";
+import { mkdir as mkdir5, readdir as readdir5, readFile as readFile5, rm as rm4, writeFile as writeFile4 } from "node:fs/promises";
 import { join as join20 } from "node:path";
 init_session_id();
 init_uploads();
@@ -36993,7 +37101,7 @@ async function syncSpecAttachmentsDir(specId, projectId) {
   for (const a of rows) {
     let bytes;
     try {
-      bytes = await readFile4(join20(uploadDir(), a.storageKey));
+      bytes = await readFile5(join20(uploadDir(), a.storageKey));
     } catch {
       continue;
     }
@@ -37004,7 +37112,7 @@ async function syncSpecAttachmentsDir(specId, projectId) {
   }
   await writeFile4(join20(dir2, INDEX), renderIndex(specId, items), { mode: 384 });
   const keep = /* @__PURE__ */ new Set([INDEX, ...items.map((a) => a.filename)]);
-  for (const name2 of await readdir4(dir2)) {
+  for (const name2 of await readdir5(dir2)) {
     if (!keep.has(name2)) await rm4(join20(dir2, name2), { recursive: true, force: true }).catch(() => {
     });
   }
@@ -39439,12 +39547,12 @@ function drawCode(doc, text) {
       used += hl;
     }
     const body = seg.join("\n");
-    const h = doc.heightOfString(body, opts) + 12;
+    const h2 = doc.heightOfString(body, opts) + 12;
     const top = doc.y;
-    doc.save().rect(left, top, right - left, h).fill(PANEL).restore();
+    doc.save().rect(left, top, right - left, h2).fill(PANEL).restore();
     doc.fillColor(INK).text(body, left + 8, top + 6, opts);
     doc.x = left;
-    doc.y = top + h;
+    doc.y = top + h2;
     if (i < lines2.length) doc.addPage();
   }
   doc.moveDown(0.5);
@@ -39478,12 +39586,12 @@ function drawTable(doc, t) {
   const row = (cells, bold) => {
     const texts = cells.map((c) => toWinAnsi(flatten(c.tokens).map((r) => r.text).join("") || c.text || ""));
     doc.font(bold ? "Helvetica-Bold" : "Helvetica").fontSize(9.2).fillColor(bold ? STRONG : INK);
-    const h = Math.max(...texts.map((s2) => doc.heightOfString(s2, { width: w - 10 })), 0) + 7;
-    if (doc.y + h > doc.page.height - doc.page.margins.bottom) doc.addPage();
+    const h2 = Math.max(...texts.map((s2) => doc.heightOfString(s2, { width: w - 10 })), 0) + 7;
+    if (doc.y + h2 > doc.page.height - doc.page.margins.bottom) doc.addPage();
     const y0 = doc.y;
     texts.forEach((s2, i) => doc.text(s2, left + i * w + 5, y0 + 3, { width: w - 10 }));
     doc.x = left;
-    doc.y = y0 + h;
+    doc.y = y0 + h2;
     rule(doc, HAIR, 2);
   };
   rule(doc, HAIR, 2);
@@ -39632,12 +39740,14 @@ function inDayRange(at, from, to) {
 }
 
 // src/services/live-specs.ts
+init_src();
 init_db();
-init_pty();
+init_live_phases();
 init_session_phases();
 init_stage_machine();
 init_notifications2();
 init_sync_notify();
+import { createHash as createHash4 } from "node:crypto";
 
 // src/services/spec-head.ts
 init_db();
@@ -39659,34 +39769,102 @@ async function recordHeadSha(specId, worktree, read2 = readHead) {
 
 // src/services/live-specs.ts
 var specNum = (id2) => Number.parseInt(id2.match(/\d+/)?.[0] ?? "0", 10);
-async function liveSpecs(filter = {}) {
-  const specs = (await prisma.spec.findMany({
-    where: { projectId: filter.project, source: filter.source },
-    orderBy: { id: "desc" }
-  })).sort((a, b) => specNum(b.id) - specNum(a.id));
-  const live = sessionPhasesBySpec();
-  if (live.size === 0) return decorateBlocked(specs);
+var selectOf = (shape) => Object.fromEntries(
+  Object.keys(shape).filter((k) => k !== "blockedBy").map((k) => [k, true])
+);
+var SLIM_SELECT = selectOf(zSpecSlim.shape);
+var LIST_SELECT = selectOf(zSpecListItem.shape);
+var phases = () => sessionPhasesBySpecAsync().catch(() => /* @__PURE__ */ new Map());
+var sortByNumber = (rows) => {
+  const n2 = new Map(rows.map((r) => [r.id, specNum(r.id)]));
+  return rows.sort((a, b) => n2.get(b.id) - n2.get(a.id));
+};
+async function applyOverlay(specs, live) {
+  if (live.size === 0) return { out: specs, advanced: [], doneNow: [] };
   const advanced = [];
   const doneNow = [];
-  const out4 = specs.map((s2) => {
+  const out4 = await Promise.all(specs.map(async (s2) => {
     const entry = live.get(s2.id);
     if (!entry) return s2;
-    const next = stageForRun(entry.phases, entry.cwd, s2.id);
+    const next = await stageForRunAsync(entry.phases, entry.cwd, s2.id);
     if (!next || STAGES.indexOf(next) <= STAGES.indexOf(s2.stage)) return s2;
     advanced.push({ id: s2.id, from: s2.stage, stage: next, cwd: entry.cwd });
     if (next === "done") doneNow.push({ specId: s2.id, title: s2.title, projectId: s2.projectId });
     return { ...s2, stage: next };
-  });
-  if (advanced.length)
-    await Promise.all(advanced.map(async (a) => {
-      const res = await prisma.spec.updateMany({ where: { id: a.id, stage: a.from }, data: { stage: a.stage } }).catch(() => ({ count: 0 }));
-      if (res.count === 0) return;
-      if (a.stage === "done") await recordHeadSha(a.id, a.cwd);
-      await notifySynced("spec", a.id);
-    }));
+  }));
+  return { out: out4, advanced, doneNow };
+}
+async function liveOverlayTick() {
+  const live = await phases();
+  if (live.size === 0) return;
+  const specs = await prisma.spec.findMany({
+    where: { id: { in: [...live.keys()] } },
+    select: { id: true, stage: true, title: true, projectId: true }
+  });
+  const { advanced, doneNow } = await applyOverlay(specs, live);
+  await Promise.all(advanced.map(async (a) => {
+    const res = await prisma.spec.updateMany({ where: { id: a.id, stage: a.from }, data: { stage: a.stage } }).catch(() => ({ count: 0 }));
+    if (res.count === 0) return;
+    if (a.stage === "done") await recordHeadSha(a.id, a.cwd);
+    await notifySynced("spec", a.id);
+  }));
   await Promise.all(doneNow.map((d) => recordCompletion(d.specId, d.title, d.projectId)));
+}
+async function listSpecsLive(filter = {}) {
+  const specs = sortByNumber(await prisma.spec.findMany({
+    where: { projectId: filter.project, source: filter.source },
+    orderBy: { id: "desc" }
+  }));
+  return decorateBlocked((await applyOverlay(specs, await phases())).out);
+}
+async function listSelected(select, where = {}) {
+  const rows = sortByNumber(await prisma.spec.findMany({ where, select, orderBy: { id: "desc" } }));
+  const { out: out4 } = await applyOverlay(rows, await phases());
   return decorateBlocked(out4);
 }
+var slimCache = null;
+async function slimRows() {
+  const count = await prisma.spec.count();
+  if (slimCache) {
+    const changed = await prisma.spec.findMany({
+      where: { updatedAt: { gte: slimCache.max } },
+      select: SLIM_SELECT
+    });
+    for (const r of changed) {
+      slimCache.rows.set(r.id, r);
+      if (r.updatedAt > slimCache.max) slimCache.max = r.updatedAt;
+    }
+    if (slimCache.rows.size === count) return [...slimCache.rows.values()];
+  }
+  const rows = await prisma.spec.findMany({ select: SLIM_SELECT });
+  slimCache = { rows: new Map(rows.map((r) => [r.id, r])), max: rows.reduce((m, r) => r.updatedAt > m ? r.updatedAt : m, /* @__PURE__ */ new Date(0)) };
+  return rows;
+}
+async function listSpecsSlim() {
+  const { out: out4 } = await applyOverlay(sortByNumber(await slimRows()), await phases());
+  return await decorateBlocked(out4);
+}
+var listSpecsItems = (filter = {}) => listSelected(LIST_SELECT, { projectId: filter.project, source: filter.source });
+async function overlayOne(spec) {
+  const live = await phases();
+  return (await applyOverlay([spec], live)).out[0];
+}
+async function liveSignature() {
+  const live = await phases();
+  const parts = await Promise.all([...live.entries()].sort(([a], [b]) => a.localeCompare(b)).map(
+    async ([id2, e]) => `${id2}:${e.phases.map((p3) => p3.state[0]).join("")}${phasesComplete(e.phases) ? `:${await planCompleteAsync(e.cwd, id2)}` : ""}`
+  ));
+  return parts.join("|");
+}
+async function specsDigest() {
+  const agg = await prisma.spec.aggregate({ _count: { _all: true }, _max: { updatedAt: true }, _sum: { version: true } });
+  const db = `${agg._count._all}:${agg._max.updatedAt?.getTime() ?? 0}:${agg._sum.version ?? 0}`;
+  return createHash4("sha1").update(`${db}|${await liveSignature()}`).digest("hex");
+}
+async function liveSpecs(filter = {}) {
+  await liveOverlayTick();
+  return listSpecsLive(filter);
+}
 
 // src/services/launch-authority.ts
 init_src();
@@ -39721,8 +39899,15 @@ function filterSpecs(specs, f) {
 async function specs_default(app3) {
   app3.get("/specs", async (req) => {
     const { project, source, q, stage, priority, startable, dateField, from, to, page, limit } = req.query;
-    const overlaid = await liveSpecs({ project, source });
-    return paginate(filterSpecs(overlaid, { q, stage, priority, startable, dateField, from, to }), page, limit);
+    await liveOverlayTick();
+    const items = await listSpecsItems({ project, source });
+    return paginate(filterSpecs(items, { q, stage, priority, startable, dateField, from, to }), page, limit);
+  });
+  app3.get("/specs/:id", async (req, reply) => {
+    const { id: id2 } = req.params;
+    const row = await prisma.spec.findUnique({ where: { id: id2 } });
+    if (!row) return reply.code(404).send({ error: "spec tak ditemukan" });
+    return (await decorateBlocked([await overlayOne(row)]))[0];
   });
   app3.post("/specs", async (req, reply) => {
     const parsed = zCreateSpec.safeParse(req.body);
@@ -40583,7 +40768,7 @@ async function deleteBranches(repoDir, names, opts) {
 // src/services/worktree-list.ts
 import { execFile as execFile11 } from "node:child_process";
 import { realpathSync as realpathSync6 } from "node:fs";
-import { stat as stat2 } from "node:fs/promises";
+import { stat as stat4 } from "node:fs/promises";
 import { basename as basename6, dirname as dirname11, join as join21, resolve as resolve19, sep as sep6 } from "node:path";
 import { promisify as promisify10 } from "node:util";
 var exec10 = promisify10(execFile11);
@@ -40638,7 +40823,7 @@ function hasWorktreeSession(path, sessionId2, sessions) {
 }
 async function bornAt(path) {
   try {
-    const st = await stat2(join21(path, ".git"));
+    const st = await stat4(join21(path, ".git"));
     const ms = st.birthtimeMs > 0 ? st.birthtimeMs : st.mtimeMs;
     return new Date(ms).toISOString();
   } catch {
@@ -40653,10 +40838,10 @@ async function listWorktrees(repoDir, inputs) {
   const trash = resolve19(baseReal, ".worktrees", ".trash");
   const sessions = new Map(inputs.sessions.map((s2) => [real(s2.cwd), { id: s2.id, specId: s2.specId }]));
   const history = /* @__PURE__ */ new Map();
-  for (const h of inputs.history ?? []) {
-    const path = real(h.cwd);
+  for (const h2 of inputs.history ?? []) {
+    const path = real(h2.cwd);
     const previous = history.get(path);
-    if (!previous || h.startedAt > previous.startedAt) history.set(path, h);
+    if (!previous || h2.startedAt > previous.startedAt) history.set(path, h2);
   }
   const raw = parseWorktreePorcelain(text ?? "");
   const mainPath = raw[0] ? resolve19(raw[0].path) : null;
@@ -41054,10 +41239,14 @@ function installSessionHistory() {
 
 // src/services/worktree-project.ts
 init_session_id();
+var toWorktreeSession = (s2) => ({ cwd: s2.cwd, id: s2.id, specId: s2.specId ?? null });
 function worktreeSessions() {
-  return listSessions().map((s2) => ({ cwd: s2.cwd, id: s2.id, specId: s2.specId ?? null }));
+  return listSessions().map(toWorktreeSession);
+}
+async function worktreeSessionsAsync() {
+  return (await listSessionsAsync()).map(toWorktreeSession);
 }
-async function projectWorktreeInputs(projectId, sessions = worktreeSessions) {
+async function projectWorktreeInputs(projectId, sessions = worktreeSessionsAsync) {
   const [specs, history] = await Promise.all([
     prisma.spec.findMany({ where: { projectId }, select: { id: true, stage: true } }),
     worktreeHistory(projectId)
@@ -41065,7 +41254,7 @@ async function projectWorktreeInputs(projectId, sessions = worktreeSessions) {
   return {
     specs: new Map(specs.map((s2) => [sessionIdForSpec(s2.id), s2])),
     history,
-    sessions: sessions()
+    sessions: await sessions()
   };
 }
 async function detectOrphanWorktrees(deps = { repos: prodReaperDeps.repos, inputs: projectWorktreeInputs }) {
@@ -41665,7 +41854,7 @@ async function finishGraphOp(reply, id2, repoDir, r, verb) {
 }
 
 // src/routes/fs.ts
-import { readdir as readdir5 } from "node:fs/promises";
+import { readdir as readdir6 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import { resolve as resolve21, dirname as dirname12, join as join23 } from "node:path";
 async function fs_default(app3) {
@@ -41673,7 +41862,7 @@ async function fs_default(app3) {
     const q = req.query.path;
     const dir2 = q && q.trim() ? resolve21(q.trim()) : homedir4();
     try {
-      const ents = await readdir5(dir2, { withFileTypes: true });
+      const ents = await readdir6(dir2, { withFileTypes: true });
       const entries3 = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join23(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
       const parent = dirname12(dir2);
       return { path: dir2, parent: parent === dir2 ? null : parent, entries: entries3 };
@@ -41735,10 +41924,10 @@ function resumeState(repoDir, worktree, branchTo, headSha) {
   return base2 ? { worktreeKept: false, base: base2 } : null;
 }
 function buildResumeCtx(repoDir, id2, flow2, worktreeKept) {
-  const phases = readPhases(phaseFilePath(repoDir, id2), flow2);
+  const phases2 = readPhases(phaseFilePath(repoDir, id2), flow2);
   return {
-    recorded: phases.filter((p3) => p3.state === "done" || p3.state === "skipped").map((p3) => `${p3.name} ${p3.state}`),
-    next: phases.find((p3) => p3.state === "active")?.name,
+    recorded: phases2.filter((p3) => p3.state === "done" || p3.state === "skipped").map((p3) => `${p3.name} ${p3.state}`),
+    next: phases2.find((p3) => p3.state === "active")?.name,
     worktreeKept
   };
 }
@@ -41834,8 +42023,8 @@ async function startSpecSession(spec, opts) {
     const fullPlan = sessionPhasePlan(setting, opts.flow, agent, { model, effort: effort2 }, opts.phaseOverrides);
     let plan = fullPlan;
     if (fullPlan && isContinue && !isGoalFlow) {
-      const phases = fullPlan.phases.filter((p3) => p3.phase === "Execute");
-      plan = phases.length ? { ...fullPlan, phases } : null;
+      const phases2 = fullPlan.phases.filter((p3) => p3.phase === "Execute");
+      plan = phases2.length ? { ...fullPlan, phases: phases2 } : null;
     }
     const buildPrompt = (p3) => {
       if (isGoalFlow) {
@@ -41936,7 +42125,7 @@ function setBounded(map, key, value, maxKeys) {
 // src/services/auth.ts
 init_src2();
 init_db();
-import { randomBytes as randomBytes3, scrypt as scryptCb, timingSafeEqual as timingSafeEqual3, createHash as createHash8 } from "node:crypto";
+import { randomBytes as randomBytes3, scrypt as scryptCb, timingSafeEqual as timingSafeEqual3, createHash as createHash9 } from "node:crypto";
 import { promisify as promisify12 } from "node:util";
 var scrypt = promisify12(scryptCb);
 var COOKIE_NAME = "hn_session";
@@ -41954,7 +42143,7 @@ async function verifyPassword(pw, stored) {
   return key.length === want.length && timingSafeEqual3(key, want);
 }
 var newSessionToken = () => randomBytes3(32).toString("base64url");
-var sessionId = (token) => createHash8("sha256").update(token).digest("hex");
+var sessionId = (token) => createHash9("sha256").update(token).digest("hex");
 async function createSession2(userId) {
   const token = newSessionToken();
   await prisma.session.create({
@@ -42015,9 +42204,9 @@ function cookieOpts(req) {
 
 // src/services/device-token.ts
 init_db();
-import { randomBytes as randomBytes4, createHash as createHash9 } from "node:crypto";
+import { randomBytes as randomBytes4, createHash as createHash10 } from "node:crypto";
 var newDeviceToken = () => randomBytes4(32).toString("base64url");
-var tokenHash = (token) => createHash9("sha256").update(token).digest("hex");
+var tokenHash = (token) => createHash10("sha256").update(token).digest("hex");
 async function issueDeviceToken(userId, name2) {
   const token = newDeviceToken();
   const row = await prisma.deviceToken.create({ data: { userId, name: name2, tokenHash: tokenHash(token) } });
@@ -42253,12 +42442,77 @@ function appendDiag(home3, sessionId2, events) {
 init_notifications2();
 init_stage_machine();
 init_pty();
+
+// src/services/bounded-sender.ts
+var HIGH = 1024 * 1024;
+var CAP = 256 * 1024;
+var DRAIN_MS = 20;
+var isData = (frame2) => frame2.startsWith('{"t":"data"');
+function createBoundedSender(ws2, o = {}) {
+  const high = o.high ?? HIGH;
+  const cap = o.cap ?? CAP;
+  const drainMs = o.drainMs ?? DRAIN_MS;
+  let pending2 = [];
+  let pendingBytes = 0;
+  let timer10;
+  let resyncNeeded = false;
+  const trim = () => {
+    for (let i = 0; i < pending2.length && pendingBytes > cap; ) {
+      if (!isData(pending2[i])) {
+        i++;
+        continue;
+      }
+      pendingBytes -= pending2[i].length;
+      pending2.splice(i, 1);
+      resyncNeeded = true;
+    }
+  };
+  const drain2 = () => {
+    timer10 = void 0;
+    if (ws2.bufferedAmount > high) {
+      timer10 = setTimeout(drain2, drainMs);
+      timer10.unref?.();
+      return;
+    }
+    const out4 = pending2;
+    pending2 = [];
+    pendingBytes = 0;
+    for (const f of out4) ws2.send(f);
+    if (resyncNeeded) {
+      resyncNeeded = false;
+      o.onResync?.();
+    }
+  };
+  return {
+    send(frame2) {
+      if (pending2.length === 0 && ws2.bufferedAmount <= high) {
+        ws2.send(frame2);
+        return;
+      }
+      pending2.push(frame2);
+      pendingBytes += frame2.length;
+      trim();
+      if (!timer10) {
+        timer10 = setTimeout(drain2, drainMs);
+        timer10.unref?.();
+      }
+    },
+    dispose() {
+      if (timer10) clearTimeout(timer10);
+      timer10 = void 0;
+      pending2 = [];
+      pendingBytes = 0;
+    }
+  };
+}
+
+// src/routes/terminal.ts
 init_uploads();
 
 // src/services/agent-invocations.ts
 init_src();
 init_db();
-import { createHash as createHash10, randomUUID as randomUUID9 } from "node:crypto";
+import { createHash as createHash11, randomUUID as randomUUID9 } from "node:crypto";
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { homedir as homedir5 } from "node:os";
 import { readFileSync as readFileSync12, realpathSync as realpathSync7, statSync as statSync4 } from "node:fs";
@@ -42268,7 +42522,7 @@ import { isAbsolute as isAbsolute8, relative as relative4, resolve as resolve22
 init_session_event_token();
 init_session_event_spool();
 import { constants as constants3 } from "node:fs";
-import { mkdir as mkdir6, open as open3, readdir as readdir6, rm as rm6 } from "node:fs/promises";
+import { mkdir as mkdir6, open as open3, readdir as readdir7, rm as rm6 } from "node:fs/promises";
 import { join as join25 } from "node:path";
 var MAX_EVENT_BYTES = 1e6;
 var MAX_FILES_PER_DRAIN = 1e3;
@@ -42314,12 +42568,12 @@ async function drainSpool(app3, root, observation) {
   let delivered = 0;
   let examined = 0;
   let readBuffer;
-  for (const session of await readdir6(root, { withFileTypes: true })) {
+  for (const session of await readdir7(root, { withFileTypes: true })) {
     if (!session.isDirectory() || !SESSION_ID_RE.test(session.name)) continue;
     const dir2 = join25(root, session.name);
     let entries3;
     try {
-      entries3 = await readdir6(dir2, { withFileTypes: true });
+      entries3 = await readdir7(dir2, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -42331,8 +42585,8 @@ async function drainSpool(app3, root, observation) {
       let handle;
       try {
         handle = await open3(path, constants3.O_RDONLY | constants3.O_NOFOLLOW);
-        const stat5 = await handle.stat();
-        if (!stat5.isFile() || stat5.size > MAX_EVENT_BYTES) throw new Error("payload terlalu besar");
+        const stat7 = await handle.stat();
+        if (!stat7.isFile() || stat7.size > MAX_EVENT_BYTES) throw new Error("payload terlalu besar");
         readBuffer ??= Buffer.allocUnsafe(MAX_EVENT_BYTES + 1);
         const { bytesRead } = await handle.read(readBuffer, 0, readBuffer.length, 0);
         if (bytesRead > MAX_EVENT_BYTES) throw new Error("payload terlalu besar");
@@ -42405,7 +42659,7 @@ var MAX_TRANSCRIPT_BYTES2 = 10 * 1024 * 1024;
 var ANSI2 = /[\u001b\u009b](?:\][^\u0007]*(?:\u0007|\u001b\\)|\[[0-?]*[ -/]*[@-~]|[@-_])/g;
 var snapshotHashes = /* @__PURE__ */ new Map();
 var keyOf = (x) => `${x.sessionId}\0${x.runtimeInvocationId}`;
-var hash3 = (value) => createHash10("sha256").update(value).digest("hex");
+var hash3 = (value) => createHash11("sha256").update(value).digest("hex");
 var defaultGitStatus = (cwd) => {
   try {
     return execFileSync3("git", ["-C", cwd, "status", "--porcelain=v1", "-z"], {
@@ -42751,9 +43005,9 @@ async function refreshPhaseInvocations(sessionId2) {
 // src/services/session-dialog.ts
 init_tui_dialog();
 init_pty();
-import { createHash as createHash11 } from "node:crypto";
+import { createHash as createHash12 } from "node:crypto";
 var DIALOG_CHUNK_MS = 50;
-var screenHashOf = (paneText2) => createHash11("sha256").update(dialogKey(paneText2)).digest("hex").slice(0, 16);
+var screenHashOf = (paneText2) => createHash12("sha256").update(dialogKey(paneText2)).digest("hex").slice(0, 16);
 var answerable = (paneText2) => {
   const s2 = readDialogScreen(paneText2);
   if (s2?.kind !== "question") return null;
@@ -44363,9 +44617,9 @@ async function terminal_default(app3, opts) {
   app3.get("/terminal/sessions/:id/phases", async (req, reply) => {
     const { id: id2 } = req.params;
     const s2 = getSession(id2);
-    const phases = sessionPhases(id2);
-    if (!s2?.flow || !phases) return reply.code(404).send({ error: "not found" });
-    return { flow: s2.flow, phases };
+    const phases2 = sessionPhases(id2);
+    if (!s2?.flow || !phases2) return reply.code(404).send({ error: "not found" });
+    return { flow: s2.flow, phases: phases2 };
   });
   app3.post("/terminal/sessions/:id/steer", async (req, reply) => {
     const parsed = zTerminalSteerInput.safeParse(req.body);
@@ -44503,7 +44757,6 @@ async function terminal_default(app3, opts) {
     }
   }, (socket2, req) => {
     const { id: id2 } = req.params;
-    if (!getSession(id2)) return socket2.close(4004, "not found");
     const isClientRemote = req.remote !== void 0;
     const principal = isClientRemote ? { kind: "remote", id: `client:${req.remote.actor.hubOrigin}:${req.remote.actor.userId}` } : req.wsPrincipal;
     let release;
@@ -44514,14 +44767,38 @@ async function terminal_default(app3, opts) {
       return;
     }
     const guard = new WsMessageGuard({ perWindow: TERMINAL_WS_MESSAGES_PER_MINUTE });
-    const client = { send: (m) => socket2.send(m), close: () => socket2.close() };
-    attach(id2, client);
-    void refreshPhaseInvocations(id2);
+    const bounded = createBoundedSender(socket2, {
+      onResync: () => {
+        void screenResyncFrame(id2).then((f) => {
+          if (f) bounded.send(f);
+        });
+      }
+    });
+    const client = { send: (m) => bounded.send(m), close: () => socket2.close() };
+    let ready = false;
+    let closed = false;
+    const early = [];
+    const attachReady = (async () => {
+      const found = await getSessionAsync(id2);
+      if (!found) {
+        socket2.close(4004, "not found");
+        return;
+      }
+      if (closed) return;
+      await attachAsync(id2, client);
+      if (closed) {
+        detach(id2, client);
+        return;
+      }
+      void refreshPhaseInvocations(id2);
+    })().catch(() => {
+      socket2.close(1011, "attach failed");
+    });
     const watch = isClientRemote ? null : createPrincipalWatch({
       check: () => revalidateWsPrincipal(req, principal),
       onRevoked: () => socket2.close(1008, "session revoked")
     });
-    socket2.on("message", (raw) => {
+    const onMessage = (raw) => {
       const verdict = guard.accept(raw);
       if (!verdict.ok) {
         socket2.close(verdict.code, verdict.reason);
@@ -44544,10 +44821,20 @@ async function terminal_default(app3, opts) {
         } catch {
         }
       }
+    };
+    socket2.on("message", (raw) => {
+      if (ready) onMessage(raw);
+      else early.push(raw);
+    });
+    void attachReady.then(() => {
+      ready = true;
+      for (const raw of early.splice(0)) onMessage(raw);
     });
     const revalidate = watch ? setInterval(() => watch.refresh(), 6e4) : void 0;
     revalidate?.unref?.();
     socket2.on("close", () => {
+      closed = true;
+      bounded.dispose();
       if (revalidate) clearInterval(revalidate);
       watch?.dispose();
       release();
@@ -45037,13 +45324,13 @@ function mapToCatalog(checks) {
 var isHardened = (checks) => CRITICAL.every((c) => checks.find((x) => x.check === c)?.status === "pass");
 var HEALTH_CMD = `echo HEALTH uptime $(uptime -p 2>/dev/null || uptime); echo HEALTH disk $(df -P / | awk 'NR==2{print $5}'); echo HEALTH mem $(free -m 2>/dev/null | awk 'NR==2{printf "%d/%dMB", $3, $2}'); echo HEALTH load $(cut -d" " -f1-3 /proc/loadavg)`;
 function parseHealth(out4) {
-  const h = {};
+  const h2 = {};
   for (const line of out4.split("\n")) {
     const m = line.match(/^HEALTH (\S+) ?(.*)$/);
-    if (m) h[m[1]] = m[2].trim();
+    if (m) h2[m[1]] = m[2].trim();
   }
-  if (!h.uptime && !h.disk) return null;
-  return { uptime: h.uptime ?? "", disk: h.disk ?? "", mem: h.mem ?? "", load: h.load ?? "" };
+  if (!h2.uptime && !h2.disk) return null;
+  return { uptime: h2.uptime ?? "", disk: h2.disk ?? "", mem: h2.mem ?? "", load: h2.load ?? "" };
 }
 var target = (v) => ({ host: v.host, port: v.port, user: v.user, keyPath: v.keyPath });
 var packagedScript = (f) => fileURLToPath4(new URL(`../scripts/vps/${f}`, import.meta.url));
@@ -45625,9 +45912,9 @@ function readAccessToken() {
     return null;
   }
 }
-function normalizeSeverity(s2, pct2) {
+function normalizeSeverity(s2, pct3) {
   if (s2 === "normal" || s2 === "warning" || s2 === "critical") return s2;
-  return pct2 >= 90 ? "critical" : pct2 >= 70 ? "warning" : "normal";
+  return pct3 >= 90 ? "critical" : pct3 >= 70 ? "warning" : "normal";
 }
 function mapWindows(json) {
   const arr = json?.limits;
@@ -45676,7 +45963,7 @@ async function getLimits() {
 }
 
 // src/services/codex-limits.ts
-import { open as open4, readdir as readdir7, stat as stat3 } from "node:fs/promises";
+import { open as open4, readdir as readdir8, stat as stat5 } from "node:fs/promises";
 import { homedir as homedir9 } from "node:os";
 import { join as join32 } from "node:path";
 var TTL_MS3 = 3e4;
@@ -45694,7 +45981,7 @@ function windowLabel(minutes) {
   if (minutes % 60 === 0) return `${minutes / 60} jam`;
   return `${minutes} menit`;
 }
-var severityOf = (pct2) => pct2 >= 90 ? "critical" : pct2 >= 70 ? "warning" : "normal";
+var severityOf = (pct3) => pct3 >= 90 ? "critical" : pct3 >= 70 ? "warning" : "normal";
 function toWindow(slot, raw, reached) {
   const minutes = raw.window_minutes ?? 0;
   const usedPct = Math.round(raw.used_percent ?? 0);
@@ -45713,14 +46000,14 @@ function toWindow(slot, raw, reached) {
 async function recentRollouts(dir2) {
   let entries3;
   try {
-    entries3 = (await readdir7(dir2, { recursive: true })).filter((f) => f.endsWith(".jsonl"));
+    entries3 = (await readdir8(dir2, { recursive: true })).filter((f) => f.endsWith(".jsonl"));
   } catch {
     return [];
   }
   const stamped = await Promise.all(entries3.map(async (rel) => {
     const full = join32(dir2, rel);
     try {
-      return { full, mtime: (await stat3(full)).mtimeMs };
+      return { full, mtime: (await stat5(full)).mtimeMs };
     } catch {
       return null;
     }
@@ -45804,7 +46091,7 @@ async function codex(app3) {
 // src/services/model-catalog.ts
 init_src2();
 init_src();
-import { readFile as readFile5, writeFile as writeFile5, rename as rename4, mkdir as mkdir7 } from "node:fs/promises";
+import { readFile as readFile6, writeFile as writeFile5, rename as rename4, mkdir as mkdir7 } from "node:fs/promises";
 import { dirname as dirname15, join as join34 } from "node:path";
 
 // src/services/model-catalog-parser.ts
@@ -46059,7 +46346,7 @@ var cacheFile = () => join34(resolveHome(), "model-catalog.json");
 var modelCatalogService = createModelCatalogService({
   probe: probeModelCatalog,
   read: async () => {
-    const content = await readFile5(cacheFile(), "utf8");
+    const content = await readFile6(cacheFile(), "utf8");
     if (Buffer.byteLength(content) > 4 * 1024 * 1024) throw new Error("oversized cache");
     return JSON.parse(content);
   },
@@ -46096,6 +46383,17 @@ async function methods(app3) {
 init_src();
 init_update();
 init_pty();
+
+// src/services/restart.ts
+init_src();
+function requestConfigRestart(delayMs = 50) {
+  setTimeout(() => process.exit(CONFIG_RESTART_EXIT), delayMs);
+}
+function requestManualRestart(delayMs = 250) {
+  setTimeout(() => process.exit(MANUAL_RESTART_EXIT), delayMs);
+}
+
+// src/routes/update.ts
 async function update(app3) {
   app3.get("/update", async () => getUpdateStatus());
   app3.post("/update/apply", async (req, reply) => {
@@ -46111,6 +46409,15 @@ async function update(app3) {
     requestRestartForUpdate();
     return reply.code(202).send({ accepted: true, from, to, liveSessions });
   });
+  app3.post("/restart", async (req, reply) => {
+    const parsed = zUpdateApplyBody.safeParse(req.body ?? {});
+    if (!parsed.success) return reply.code(400).send({ error: "bad-body" });
+    if (!supervised()) return reply.code(409).send({ error: "unsupervised" });
+    const liveSessions = listSessions().filter((s2) => !s2.exited).length;
+    if (!parsed.data.confirm) return reply.code(409).send({ error: "confirm-required", liveSessions });
+    requestManualRestart();
+    return reply.code(202).send({ accepted: true, liveSessions });
+  });
 }
 
 // src/services/events.ts
@@ -46396,6 +46703,7 @@ async function buildTasksPage(f) {
 // src/services/lead/views.ts
 init_db();
 init_pty();
+init_live_phases();
 
 // src/services/lead/pulse.ts
 init_db();
@@ -46576,13 +46884,7 @@ function findCollisions(areas) {
   return out4;
 }
 var prodPulseDeps = {
-  sessions: () => {
-    try {
-      return listSessions();
-    } catch {
-      return [];
-    }
-  },
+  sessions: () => listSessionsAsync().catch(() => []),
   areas: async (s2) => {
     const repoDir = await resolveRepoDir(s2.projectId);
     if (!repoDir) return [];
@@ -46595,14 +46897,8 @@ var prodPulseDeps = {
       return [];
     }
   },
-  planDone: planComplete,
-  finished: (id2) => {
-    try {
-      return sessionFinished(id2);
-    } catch {
-      return false;
-    }
-  },
+  planDone: planCompleteAsync,
+  finished: (id2) => sessionFinishedAsync(id2).catch(() => false),
   decide,
   decideDeps: prodDecideDeps,
   apply: applyAction,
@@ -46648,10 +46944,10 @@ async function pulse(deps = prodPulseDeps) {
 async function followUpFinished(cfg, optIn, deps) {
   let n2 = 0;
   const opt = new Set(optIn);
-  for (const s2 of deps.sessions()) {
+  for (const s2 of await deps.sessions()) {
     if (!s2.exited || !s2.specId || !opt.has(s2.projectId)) continue;
     const bad = (s2.exitCode ?? 0) !== 0;
-    const unfinished = !deps.planDone(s2.cwd, s2.specId);
+    const unfinished = !await deps.planDone(s2.cwd, s2.specId);
     if (!bad && !unfinished) continue;
     const mark = `Sesi ${s2.id} untuk backlog ${s2.specId}`;
     const seen2 = await prisma.leadDecision.findFirst({
@@ -46690,10 +46986,10 @@ async function followUpFinished(cfg, optIn, deps) {
 async function followUpComplete(optIn, deps) {
   let n2 = 0;
   const opt = new Set(optIn);
-  for (const s2 of deps.sessions()) {
+  for (const s2 of await deps.sessions()) {
     if (!s2.specId || !opt.has(s2.projectId)) continue;
     if ((s2.exitCode ?? 0) !== 0) continue;
-    if (!deps.finished(s2.id)) continue;
+    if (!await deps.finished(s2.id)) continue;
     const mark = `Backlog ${s2.specId} sudah selesai di sesi ${s2.id}`;
     const seen2 = await prisma.leadDecision.findFirst({
       where: { sessionId: s2.id, gate: "pulse", question: { startsWith: mark } }
@@ -46732,7 +47028,7 @@ async function followUpComplete(optIn, deps) {
 }
 async function detectCollisions(optIn, deps) {
   const opt = new Set(optIn);
-  const live = deps.sessions().filter((s2) => !s2.exited && s2.specId && opt.has(s2.projectId));
+  const live = (await deps.sessions()).filter((s2) => !s2.exited && s2.specId && opt.has(s2.projectId));
   if (live.length < 2) return 0;
   const areas = [];
   for (const s2 of live) {
@@ -46827,7 +47123,7 @@ async function orderProject(projectId, deps) {
 
 // src/services/lead/engine.ts
 init_notifications2();
-init_pty();
+init_live_phases();
 var HOUSEKEEPING_MS = 6e4;
 var busyPulse = false;
 var lastPulseAt = 0;
@@ -46862,9 +47158,9 @@ async function tick(now, deps = {}) {
     console.error("lead expire:", e);
   }));
   jobs.push((async () => {
-    const live = deps.live ?? liveDecisions;
+    const live = deps.live ?? liveDecisionsAsync;
     const legacy = deps.legacy ?? recordLegacySession;
-    for (const s2 of live()) {
+    for (const s2 of await live()) {
       if (s2.eventHook || !s2.waiting) continue;
       await legacy(s2.id, s2.projectId || null, s2.specId ?? null);
     }
@@ -46909,7 +47205,7 @@ async function buildLeadStatus() {
   }
   let waiting2 = [];
   try {
-    waiting2 = liveDecisions().filter((d) => d.waiting).map((d) => d.id);
+    waiting2 = (await liveDecisionsAsync()).filter((d) => d.waiting).map((d) => d.id);
   } catch {
   }
   const rows = await Promise.all(projects.map(async (p3) => ({
@@ -46982,11 +47278,48 @@ function parseParams(topic, params) {
   return r.success ? r.data : void 0;
 }
 
+// src/services/events-profile.ts
+import { monitorEventLoopDelay } from "node:perf_hooks";
+var PROFILE = process.env.HANOMAN_EVENTS_PROFILE === "1";
+var acc = {};
+var h;
+var nowUs = () => Number(process.hrtime.bigint() / 1000n);
+var profStart = () => PROFILE ? nowUs() : 0;
+function profEnd(group2, t0, bytes, emitted) {
+  if (!PROFILE) return;
+  const a = acc[group2] ??= { builds: [], frames: 0, bytes: 0, ticks: 0 };
+  a.builds.push((nowUs() - t0) / 1e3);
+  a.ticks++;
+  if (emitted) {
+    a.frames++;
+    a.bytes += bytes;
+  }
+}
+var pct2 = (xs, p3) => {
+  const s2 = [...xs].sort((a, b) => a - b);
+  return s2[Math.min(s2.length - 1, Math.floor(s2.length * p3))] ?? 0;
+};
+function startLagMonitor() {
+  if (!PROFILE || h) return;
+  const mon = h = monitorEventLoopDelay({ resolution: 10 });
+  mon.enable();
+  setInterval(() => {
+    const ms = (n2) => +(n2 / 1e6).toFixed(1);
+    const rows = Object.entries(acc).map(([g, a]) => `${g}: build p95=${pct2(a.builds, 0.95).toFixed(1)}ms frames=${a.frames}/${a.ticks} bytes=${a.bytes}`);
+    console.log(`[events-profile] loop p50=${ms(mon.percentile(50))} p99=${ms(mon.percentile(99))} max=${ms(mon.max)}ms | ${rows.join(" | ")}`);
+    mon.reset();
+    for (const k of Object.keys(acc)) delete acc[k];
+  }, 1e4).unref();
+}
+
 // src/services/events.ts
 var clients = /* @__PURE__ */ new Set();
 var cookieClients = /* @__PURE__ */ new WeakSet();
 var clientGroups = /* @__PURE__ */ new WeakMap();
 var tickMs = () => effectiveInt("HANOMAN_EVENTS_TICK_MS") ?? 1e3;
+var presenceKey = (m) => JSON.stringify({ ...m, devices: m.devices.map(
+  (d) => d.local ? { ...d, lastSeenAt: null } : d
+) });
 var GROUPS = [
   { everyTicks: 3, cookieOnly: true, last: "", build: async () => ({
     t: "models",
@@ -47002,7 +47335,16 @@ var GROUPS = [
     // loop — termasuk frame ketikan terminal — selama spawn (terukur sampai 916 ms saat mesin sibuk).
     sessions: (await listSessionsAsync()).map((s2) => isDeciding(s2.id) ? { ...s2, deciding: true } : s2)
   }) },
-  { everyTicks: 1, last: "", build: async () => ({ t: "specs", specs: await liveSpecs() }) },
+  // SPEC-1267 · frame ringkas (`SpecSlim`: tanpa payload/objective/sourceHistory) yang hanya dibangun
+  // saat `specsDigest` berubah. Kemajuan stage dari fase sesi (`liveOverlayTick`) tetap dijalankan
+  // tiap tick: ia hidup di berkas/tmux, bukan di DB, jadi digest DB tak melihatnya sebelum ditulis.
+  {
+    everyTicks: 1,
+    last: "",
+    pre: liveOverlayTick,
+    gate: specsDigest,
+    build: async () => ({ t: "specs", specs: await listSpecsSlim() })
+  },
   { everyTicks: 3, last: "", build: async () => ({ t: "notifications", ...await notificationsFeed() }) },
   // SPEC-742 · ADR-0116 · pembersihan worktree yang masih jalan. `listCleanups()` membaca peta di
   // memori, bukan disk — nol I/O per tick, dan dedup signature membuat frame lahir hanya saat
@@ -47028,7 +47370,15 @@ var GROUPS = [
   // dihitung). 3 dtk: presence berdenyut 30 dtk, jadi kadens lebih rapat hanya menambah build tanpa
   // menambah informasi. `presenceView` menyegarkan sesi mesin ini sendiri di dalamnya — satu
   // `tmux list-panes` asinkron, tak menahan event loop.
-  { everyTicks: 3, cookieOnly: true, last: "", build: async () => ({ t: "presence", ...await presenceView() }) },
+  // SPEC-1267 · `lastSeenAt` device lokal = jam build ini, jadi berubah tiap build; kunci dedup
+  // mengosongkannya supaya frame hanya lahir saat isi presence benar-benar berubah.
+  {
+    everyTicks: 3,
+    cookieOnly: true,
+    last: "",
+    build: async () => ({ t: "presence", ...await presenceView() }),
+    sig: presenceKey
+  },
   // SPEC-961 · grup GLOBAL ke-11 · angka "butuh pengajuan" untuk badge sidebar. 5 dtk: badge bukan
   // board — yang dijanjikannya adalah "ada yang menunggu", bukan detik keberapa ia muncul — dan
   // dedup signature membuat frame lahir hanya saat salah satu angka berubah (jarang). Empat angka,
@@ -47037,8 +47387,7 @@ var GROUPS = [
   // id/judul, dan agent token sudah boleh membaca daftar sumbernya lewat capability masing-masing.
   { everyTicks: 5, last: "", build: async () => ({ t: "pending", counts: await pendingCounts() }) }
 ];
-function broadcast2(msg, cookieOnly = false) {
-  const s2 = JSON.stringify(msg);
+function broadcast2(msg, s2, cookieOnly = false) {
   for (const c of clients) {
     if (cookieOnly && !cookieClients.has(c)) continue;
     const groups = clientGroups.get(c);
@@ -47126,31 +47475,54 @@ function subscribeClient(c, subs) {
 var tick2 = 0;
 var busy = false;
 var timer3;
+async function runGroup(g) {
+  const t0 = profStart();
+  let msg;
+  try {
+    await g.pre?.();
+    let gate2;
+    if (g.gate) {
+      try {
+        gate2 = await g.gate();
+      } catch {
+        gate2 = void 0;
+      }
+      if (gate2 !== void 0 && gate2 === g.lastGate) {
+        profEnd("gate", t0, 0, false);
+        return null;
+      }
+    }
+    msg = await g.build();
+    if (g.failing) {
+      g.failing = false;
+      console.log(`siar dashboard pulih: ${msg.t}`);
+    }
+    const json = JSON.stringify(msg);
+    const key = g.sig ? g.sig(msg) : json;
+    const emit = key !== g.lastSig;
+    profEnd(msg.t, t0, json.length, emit);
+    if (g.gate) g.lastGate = gate2;
+    return emit ? { g, msg, json, key, gate: gate2 } : null;
+  } catch (e) {
+    if (!g.failing) {
+      g.failing = true;
+      console.error("siar dashboard gagal membangun frame:", e);
+    }
+    return null;
+  }
+}
 async function __tick() {
   if (busy) return;
   busy = true;
   tick2++;
   try {
-    for (const g of GROUPS) {
-      if (tick2 % g.everyTicks !== 0) continue;
-      let msg;
-      try {
-        msg = await g.build();
-      } catch (e) {
-        if (!g.failing) {
-          g.failing = true;
-          console.error("siar dashboard gagal membangun frame:", e);
-        }
-        continue;
-      }
-      if (g.failing) {
-        g.failing = false;
-        console.log(`siar dashboard pulih: ${msg.t}`);
-      }
-      const sig = JSON.stringify(msg);
-      if (sig === g.last) continue;
-      g.last = sig;
-      broadcast2(msg, g.cookieOnly);
+    const results = await Promise.all(GROUPS.filter((g) => tick2 % g.everyTicks === 0).map(runGroup));
+    for (const r of results) {
+      if (!r) continue;
+      r.g.last = r.json;
+      r.g.lastSig = r.key;
+      r.g.lastT = r.msg.t;
+      broadcast2(r.msg, r.json, r.g.cookieOnly);
     }
     for (const e of entries2.values()) {
       e.tick++;
@@ -47163,6 +47535,7 @@ async function __tick() {
 }
 function startLoop() {
   if (timer3) return;
+  startLagMonitor();
   timer3 = setInterval(() => {
     void __tick();
   }, tickMs());
@@ -47174,9 +47547,13 @@ function stopLoop() {
     timer3 = void 0;
   }
   tick2 = 0;
-  for (const g of GROUPS) g.last = "";
+  for (const g of GROUPS) {
+    g.last = "";
+    g.lastSig = void 0;
+    g.lastGate = void 0;
+  }
 }
-async function attach2(c, o = {}) {
+async function attach(c, o = {}) {
   clients.add(c);
   if (o.maySubscribe !== false) cookieClients.add(c);
   if (o.groups) clientGroups.set(c, o.groups);
@@ -47187,17 +47564,20 @@ async function attach2(c, o = {}) {
   } catch {
     return;
   }
-  for (const g of GROUPS) {
-    if (g.cookieOnly && !cookieClients.has(c)) continue;
-    let msg;
+  const wanted = GROUPS.filter((g) => !(g.cookieOnly && !cookieClients.has(c)));
+  const frames = await Promise.all(wanted.map(async (g) => {
+    if (g.last && g.lastT) return { t: g.lastT, json: g.last };
     try {
-      msg = await g.build();
+      const msg = await g.build();
+      return { t: msg.t, json: JSON.stringify(msg) };
     } catch {
-      continue;
+      return null;
     }
-    if (o.groups && !o.groups.has(msg.t)) continue;
+  }));
+  for (const f of frames) {
+    if (!f || o.groups && !o.groups.has(f.t)) continue;
     try {
-      c.send(JSON.stringify(msg));
+      c.send(f.json);
     } catch {
       return;
     }
@@ -47231,7 +47611,7 @@ async function events_default(app3, opts) {
     const client = { send: (m) => socket2.send(m), close: () => socket2.close() };
     if (req.remote) {
       const ideRead = req.remote.capabilities.includes("ide:read");
-      void attach2(client, { maySubscribe: false, groups: remoteEventGroups(ideRead) });
+      void attach(client, { maySubscribe: false, groups: remoteEventGroups(ideRead) });
       socket2.on("close", () => detach2(client));
       return;
     }
@@ -47244,7 +47624,7 @@ async function events_default(app3, opts) {
       return;
     }
     const maySubscribe = canSubscribeTopics(principal);
-    void attach2(client, { maySubscribe });
+    void attach(client, { maySubscribe });
     const guard = new WsMessageGuard({ perWindow: SUB_FRAMES_PER_MINUTE });
     socket2.on("message", (raw) => {
       const verdict = guard.accept(raw);
@@ -47354,8 +47734,8 @@ import { join as join36 } from "node:path";
 
 // src/services/device-auth.ts
 function bearerToken2(req) {
-  const h = req.headers["authorization"];
-  return typeof h === "string" && h.startsWith("Bearer ") ? h.slice(7) : void 0;
+  const h2 = req.headers["authorization"];
+  return typeof h2 === "string" && h2.startsWith("Bearer ") ? h2.slice(7) : void 0;
 }
 async function requireDeviceToken(req, reply) {
   const token = bearerToken2(req);
@@ -47790,7 +48170,7 @@ async function session_history_default(app3) {
 init_src();
 init_session_event_token();
 init_pty();
-var bearer = (h) => /^Bearer (.+)$/.exec(h ?? "")?.[1] ?? "";
+var bearer = (h2) => /^Bearer (.+)$/.exec(h2 ?? "")?.[1] ?? "";
 var recordOf = (value) => value && typeof value === "object" ? value : null;
 var boundedString = (value, max) => typeof value === "string" && value.length > 0 && value.length <= max ? value : void 0;
 async function session_events_default(app3) {
@@ -47938,9 +48318,9 @@ init_db();
 init_db();
 init_uploads();
 init_src();
-import { createHash as createHash13, randomBytes as randomBytes7 } from "node:crypto";
+import { createHash as createHash14, randomBytes as randomBytes7 } from "node:crypto";
 function hashAccessKey(key) {
-  return createHash13("sha256").update(key).digest("hex");
+  return createHash14("sha256").update(key).digest("hex");
 }
 function generateAccessKey() {
   const key = "hnm_tkt_" + randomBytes7(24).toString("hex");
@@ -50842,8 +51222,8 @@ function systemPromptFor(type, nonce) {
 ${type === "brainstorm" ? BRAINSTORM : TANYA}`;
 }
 function renderTurnPrompt(o) {
-  const riwayat = o.history.map((h) => h.role === "klien" ? wrapClientMessage(h.text, o.nonce) : `<jawaban-hanoman>
-${h.text}
+  const riwayat = o.history.map((h2) => h2.role === "klien" ? wrapClientMessage(h2.text, o.nonce) : `<jawaban-hanoman>
+${h2.text}
 </jawaban-hanoman>`).join("\n\n");
   const baru = wrapClientMessage(o.message, o.nonce);
   return riwayat ? `Percakapan sejauh ini:
@@ -51463,8 +51843,8 @@ init_src();
 init_db();
 
 // src/services/bootstrap.ts
-import { createHash as createHash14, randomBytes as randomBytes11, timingSafeEqual as timingSafeEqual5 } from "node:crypto";
-import { chmod, lstat as lstat3, mkdir as mkdir10, readFile as readFile7, unlink as unlink5, writeFile as writeFile7 } from "node:fs/promises";
+import { createHash as createHash15, randomBytes as randomBytes11, timingSafeEqual as timingSafeEqual5 } from "node:crypto";
+import { chmod, lstat as lstat3, mkdir as mkdir10, readFile as readFile8, unlink as unlink5, writeFile as writeFile7 } from "node:fs/promises";
 import { join as join39 } from "node:path";
 var TTL_MS5 = 15 * 6e4;
 var SETUP_TOKEN_FILE = "setup.token";
@@ -51476,7 +51856,7 @@ async function readStored(home3) {
   try {
     const info = await lstat3(tokenPath(home3));
     if (info.isSymbolicLink() || !info.isFile()) throw new BootstrapError("invalid setup proof");
-    const [token, expires] = (await readFile7(tokenPath(home3), "utf8")).trim().split("\n");
+    const [token, expires] = (await readFile8(tokenPath(home3), "utf8")).trim().split("\n");
     const expiresAt = Date.parse(expires ?? "");
     if (!token || !Number.isFinite(expiresAt)) throw new BootstrapError("invalid setup proof");
     return { token, expiresAt };
@@ -51516,8 +51896,8 @@ ${new Date(expiresAt).toISOString()}
 }
 async function verifySetupToken(candidate, home3, now = Date.now()) {
   const stored = await readStored(home3);
-  const got = createHash14("sha256").update(candidate).digest();
-  const want = createHash14("sha256").update(stored.token).digest();
+  const got = createHash15("sha256").update(candidate).digest();
+  const want = createHash15("sha256").update(stored.token).digest();
   if (stored.expiresAt <= now || !timingSafeEqual5(got, want)) throw new BootstrapError("invalid setup proof");
 }
 async function consumeSetupToken(home3) {
@@ -51666,12 +52046,6 @@ function applySetup(home3, input) {
   return next;
 }
 
-// src/services/restart.ts
-init_src();
-function requestConfigRestart(delayMs = 50) {
-  setTimeout(() => process.exit(CONFIG_RESTART_EXIT), delayMs);
-}
-
 // src/routes/setup.ts
 async function setup_default(app3, opts) {
   const attempts = new BoundedRateLimiter({ windowMs: 6e4, limit: 10, maxKeys: 4096 });
@@ -52012,7 +52386,7 @@ init_db();
 init_event_log();
 init_transcript_store();
 init_src2();
-import { readFile as readFile8 } from "node:fs/promises";
+import { readFile as readFile9 } from "node:fs/promises";
 import { join as join40 } from "node:path";
 function decodeCursor(c) {
   if (!c) return null;
@@ -52053,7 +52427,7 @@ async function readRemoteTranscript(id2) {
   if (row.deviceId === "local") return readTranscript(row.transcriptKey);
   const path = join40(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
   try {
-    return await readFile8(path, "utf8");
+    return await readFile9(path, "utf8");
   } catch {
     return null;
   }
@@ -52093,8 +52467,8 @@ async function logs_default(app3) {
 init_agent_token();
 init_settings3();
 function agentTokenFromReq(req) {
-  const h = req.headers["authorization"];
-  if (typeof h === "string" && h.startsWith("Bearer ")) return h.slice(7);
+  const h2 = req.headers["authorization"];
+  if (typeof h2 === "string" && h2.startsWith("Bearer ")) return h2.slice(7);
   return void 0;
 }
 async function authenticateAgent(token) {
@@ -52415,11 +52789,11 @@ async function auditSweep(now = Date.now) {
 var timers = [];
 function startVpsMonitor() {
   if (timers.length) return;
-  const h = setInterval(() => void healthSweep(), HEALTH_MS);
+  const h2 = setInterval(() => void healthSweep(), HEALTH_MS);
   const a = setInterval(() => void auditSweep(), AUDIT_MS);
-  h.unref();
+  h2.unref();
   a.unref();
-  timers = [h, a];
+  timers = [h2, a];
   void healthSweep();
   void auditSweep();
 }
@@ -52589,10 +52963,10 @@ async function reconcile(deps) {
         await markFailed(item.id, "spec hilang");
         continue;
       }
-      const p3 = deps.pane(item.sessionId ?? "");
+      const p3 = await deps.pane(item.sessionId ?? "");
       let stage = spec.stage;
       if (p3?.flow && p3.phaseFile) {
-        const d = deps.deriveStage(p3.phaseFile, p3.flow, p3.cwd, item.specId);
+        const d = await deps.deriveStage(p3.phaseFile, p3.flow, p3.cwd, item.specId);
         if (d && STAGES.indexOf(d) > STAGES.indexOf(stage)) {
           const { count } = await prisma.spec.updateMany({ where: { id: item.specId, stage }, data: { stage: d } });
           if (count > 0) await notifySynced("spec", item.specId).catch(() => {
@@ -52625,11 +52999,11 @@ async function reconcile(deps) {
   }
 }
 var reconcileProdDeps = {
-  pane: (sessionId2) => {
-    const s2 = getSession(sessionId2);
+  pane: async (sessionId2) => {
+    const s2 = await getSessionAsync(sessionId2);
     return s2 ? { exited: s2.exited, flow: s2.flow, phaseFile: s2.phaseFile, cwd: s2.cwd } : void 0;
   },
-  deriveStage: (phaseFile, flow2, cwd, specId) => stageForRun(readPhases(phaseFile, flow2), cwd, specId),
+  deriveStage: async (phaseFile, flow2, cwd, specId) => stageForRunAsync(await readPhasesAsync(phaseFile, flow2), cwd, specId),
   headSha: (wt) => {
     try {
       return realGit.headSha(wt);
@@ -53234,13 +53608,13 @@ async function pruneLogs(now, retention, opts = {}) {
   return { logsPruned, logBytesFreed };
 }
 async function reconcileRemoteTranscripts() {
-  const { readdir: readdir9, unlink: unlink6, stat: stat5 } = await import("node:fs/promises");
+  const { readdir: readdir10, unlink: unlink6, stat: stat7 } = await import("node:fs/promises");
   const { join: join41 } = await import("node:path");
   const { resolveDataDirs: resolveDataDirs2 } = await Promise.resolve().then(() => (init_src2(), src_exports));
   const root = join41(resolveDataDirs2().home, "remote-transcripts");
   let deviceDirs;
   try {
-    deviceDirs = await readdir9(root);
+    deviceDirs = await readdir10(root);
   } catch {
     return { orphans: 0 };
   }
@@ -53251,14 +53625,14 @@ async function reconcileRemoteTranscripts() {
   for (const dev of deviceDirs) {
     let files;
     try {
-      files = await readdir9(join41(root, dev));
+      files = await readdir10(join41(root, dev));
     } catch {
       continue;
     }
     for (const f of files) {
       const key = `${dev}/${f}`;
       if (referenced.has(key)) continue;
-      const st = await stat5(join41(root, dev, f)).catch(() => null);
+      const st = await stat7(join41(root, dev, f)).catch(() => null);
       if (!st || Date.now() - st.mtimeMs < gracePeriodMs) continue;
       await unlink6(join41(root, dev, f)).catch(() => {
       });