hanoman 0.9.12 → 0.9.14

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.9.12",
-  "sha": "d6b7560c",
-  "builtAt": "2026-09-28T08:05:21.786Z"
+  "version": "0.9.14",
+  "sha": "ca8210ed",
+  "builtAt": "2026-10-01T23:35:24.906Z"
 }

package/dist/cli.js

@@ -3626,23 +3626,23 @@ var init_types2 = __esm({
         }
         if (effect.type === "transform") {
           if (ctx.common.async === false) {
-            const base = this._def.schema._parseSync({
+            const base2 = this._def.schema._parseSync({
               data: ctx.data,
               path: ctx.path,
               parent: ctx
             });
-            if (!isValid(base))
+            if (!isValid(base2))
               return INVALID;
-            const result = effect.transform(base.value, checkCtx);
+            const result = effect.transform(base2.value, checkCtx);
             if (result instanceof Promise) {
               throw new Error(`Asynchronous transform encountered during synchronous parse operation. Use .parseAsync instead.`);
             }
             return { status: status.value, value: result };
           } else {
-            return this._def.schema._parseAsync({ data: ctx.data, path: ctx.path, parent: ctx }).then((base) => {
-              if (!isValid(base))
+            return this._def.schema._parseAsync({ data: ctx.data, path: ctx.path, parent: ctx }).then((base2) => {
+              if (!isValid(base2))
                 return INVALID;
-              return Promise.resolve(effect.transform(base.value, checkCtx)).then((result) => ({
+              return Promise.resolve(effect.transform(base2.value, checkCtx)).then((result) => ({
                 status: status.value,
                 value: result
               }));
@@ -5202,6 +5202,8 @@ var init_agent = __esm({
       // "Backlog — tulis" diam-diam membuka papan orang, dan sebaliknya.
       "team:read",
       "team:write",
+      "qa:read",
+      "qa:write",
       // ADR-0155 · akses KETIGA: `danger`. Dipecah dari `:write` karena keempat operasi ini bukan
       // "menulis lebih banyak", melainkan menjalankan sesuatu di luar proses hanoman — sesi agen di
       // worktree, perintah di VPS, git yang mengubah sejarah, penghapusan artefak dokumen.
@@ -7289,9 +7291,9 @@ var init_api = __esm({
       branches: (id) => `${API}/projects/${id}/branches`,
       // SPEC-360 · ADR-0077 · daftar branch (nilai turunan git) + hapus batch local/origin.
       // SPEC-859 · `include=all` memuat branch yang belum ter-merge; tanpa itu hanya yang ter-merge.
-      branchesUnused: (id, base, include) => {
+      branchesUnused: (id, base2, include) => {
         const q = new URLSearchParams();
-        if (base) q.set("base", base);
+        if (base2) q.set("base", base2);
         if (include) q.set("include", include);
         const s2 = q.toString();
         return `${API}/projects/${id}/branches/unused${s2 ? `?${s2}` : ""}`;
@@ -7367,7 +7369,7 @@ var init_api = __esm({
       // SPEC-233 · remote mgmt + pr-url + archive
       ideRemotes: (id) => `${API}/projects/${id}/remotes`,
       ideRemote: (id, name) => `${API}/projects/${id}/remotes/${encodeURIComponent(name)}`,
-      idePrUrl: (id, branch, base) => `${API}/projects/${id}/pr-url?branch=${encodeURIComponent(branch)}${base ? `&base=${encodeURIComponent(base)}` : ""}`,
+      idePrUrl: (id, branch, base2) => `${API}/projects/${id}/pr-url?branch=${encodeURIComponent(branch)}${base2 ? `&base=${encodeURIComponent(base2)}` : ""}`,
       ideArchive: (id, ref, format = "zip") => `${API}/projects/${id}/archive?ref=${encodeURIComponent(ref)}&format=${format}`,
       ideCommit: (id, sha) => `${API}/projects/${id}/commit/${sha}`,
       // SPEC-233 · diff satu file di commit (vs parent)
@@ -7515,6 +7517,20 @@ var init_api = __esm({
       skillFile: (key) => `${API}/skills/${encodeURIComponent(key)}/file`,
       skillEntry: (key) => `${API}/skills/${encodeURIComponent(key)}/entry`,
       skillFork: (key) => `${API}/skills/${encodeURIComponent(key)}/fork`,
+      // Workspace QA · laporan QA per project. Semua di bawah /projects/:id/qa (capability `qa`).
+      qaReports: (pid) => `${API}/projects/${encodeURIComponent(pid)}/qa/reports`,
+      qaReport: (pid, rid) => `${API}/projects/${encodeURIComponent(pid)}/qa/reports/${encodeURIComponent(rid)}`,
+      qaCases: (pid, rid) => `${API}/projects/${encodeURIComponent(pid)}/qa/reports/${encodeURIComponent(rid)}/cases`,
+      qaCase: (pid, rid, cid) => `${API}/projects/${encodeURIComponent(pid)}/qa/reports/${encodeURIComponent(rid)}/cases/${encodeURIComponent(cid)}`,
+      qaFindings: (pid, rid) => `${API}/projects/${encodeURIComponent(pid)}/qa/reports/${encodeURIComponent(rid)}/findings`,
+      qaFinding: (pid, rid, fid) => `${API}/projects/${encodeURIComponent(pid)}/qa/reports/${encodeURIComponent(rid)}/findings/${encodeURIComponent(fid)}`,
+      qaAttachments: (pid, rid) => `${API}/projects/${encodeURIComponent(pid)}/qa/reports/${encodeURIComponent(rid)}/attachments`,
+      qaAttachment: (pid, rid, aid) => `${API}/projects/${encodeURIComponent(pid)}/qa/reports/${encodeURIComponent(rid)}/attachments/${encodeURIComponent(aid)}`,
+      qaFindingBacklog: (pid, rid, fid) => `${API}/projects/${encodeURIComponent(pid)}/qa/reports/${encodeURIComponent(rid)}/findings/${encodeURIComponent(fid)}/backlog`,
+      qaReportBacklog: (pid, rid) => `${API}/projects/${encodeURIComponent(pid)}/qa/reports/${encodeURIComponent(rid)}/backlog`,
+      qaCasesImport: (pid, rid) => `${API}/projects/${encodeURIComponent(pid)}/qa/reports/${encodeURIComponent(rid)}/cases/import`,
+      qaImport: (pid) => `${API}/projects/${encodeURIComponent(pid)}/qa/import`,
+      qaTemplate: `${API}/qa/template.xlsx`,
       // SPEC-945 · ADR-0150 · papan tim. `members` GLOBAL (bukan per project) — task boleh tanpa
       // project, jadi direktori orang tak bisa digantung pada project.
       members: `${API}/members`,
@@ -7572,7 +7588,7 @@ var init_api = __esm({
       githubIssueUnlink: (id) => `${API}/github-issues/${encodeURIComponent(id)}/unlink`,
       // SPEC-361 · ADR-0078 · unduh dokumen: query ditempelkan ke URL endpoint dokumen yang sudah ada
       // (tak ada endpoint ekspor terpisah). `base` bisa sudah membawa query, mis. ideFile(?path=…).
-      download: (base, fmt) => `${base}${base.includes("?") ? "&" : "?"}download=${fmt}`
+      download: (base2, fmt) => `${base2}${base2.includes("?") ? "&" : "?"}download=${fmt}`
     };
   }
 });
@@ -7931,6 +7947,69 @@ var init_semver = __esm({
   }
 });
 
+// ../shared/src/qa.ts
+var QA_REPORT_STATUSES, QA_VERDICTS, QA_CASE_STATUSES, QA_SEVERITIES, QA_PRIORITIES, zQaEnvironment, zSteps, zCreateQaReport, zPatchQaReport, zCreateQaCase, zPatchQaCase, zCreateQaFinding, zPatchQaFinding;
+var init_qa = __esm({
+  "../shared/src/qa.ts"() {
+    "use strict";
+    init_zod();
+    QA_REPORT_STATUSES = ["draft", "submitted", "closed"];
+    QA_VERDICTS = ["go", "no-go", "conditional"];
+    QA_CASE_STATUSES = ["todo", "pass", "fail", "blocked", "skipped"];
+    QA_SEVERITIES = ["blocker", "critical", "major", "minor", "trivial"];
+    QA_PRIORITIES = ["P0", "P1", "P2", "P3"];
+    zQaEnvironment = external_exports.record(external_exports.string().trim().min(1).max(60), external_exports.string().max(500)).refine((e) => Object.keys(e).length <= 20, "maksimal 20 entri environment");
+    zSteps = external_exports.array(external_exports.string().trim().min(1).max(2e3)).max(50);
+    zCreateQaReport = external_exports.object({
+      title: external_exports.string().trim().min(1).max(300),
+      buildVersion: external_exports.string().trim().max(120).default(""),
+      environment: zQaEnvironment.default({}),
+      scope: external_exports.string().max(5e3).default(""),
+      tester: external_exports.string().trim().max(200).default(""),
+      summary: external_exports.string().max(2e4).default(""),
+      verdict: external_exports.enum(QA_VERDICTS).nullable().default(null)
+    });
+    zPatchQaReport = zCreateQaReport.partial().extend({ status: external_exports.enum(QA_REPORT_STATUSES).optional() });
+    zCreateQaCase = external_exports.object({
+      title: external_exports.string().trim().min(1).max(300),
+      steps: external_exports.string().max(1e4).default(""),
+      expected: external_exports.string().max(1e4).default(""),
+      actual: external_exports.string().max(1e4).default(""),
+      status: external_exports.enum(QA_CASE_STATUSES).default("todo"),
+      order: external_exports.number().finite().optional()
+    });
+    zPatchQaCase = zCreateQaCase.partial();
+    zCreateQaFinding = external_exports.object({
+      title: external_exports.string().trim().min(1).max(300),
+      caseId: external_exports.string().max(120).nullable().default(null),
+      severity: external_exports.enum(QA_SEVERITIES).default("major"),
+      priority: external_exports.enum(QA_PRIORITIES).default("P2"),
+      area: external_exports.string().trim().max(120).default(""),
+      steps: zSteps.default([]),
+      expected: external_exports.string().max(1e4).default(""),
+      actual: external_exports.string().max(1e4).default(""),
+      status: external_exports.enum(["open", "wontfix"]).default("open")
+    });
+    zPatchQaFinding = zCreateQaFinding.partial();
+  }
+});
+
+// ../shared/src/qa-markdown.ts
+var init_qa_markdown = __esm({
+  "../shared/src/qa-markdown.ts"() {
+    "use strict";
+    init_qa();
+  }
+});
+
+// ../shared/src/qa-tabular.ts
+var init_qa_tabular = __esm({
+  "../shared/src/qa-tabular.ts"() {
+    "use strict";
+    init_qa();
+  }
+});
+
 // ../shared/src/webhook.ts
 var WEBHOOK_BACKOFF_SEC, WEBHOOK_MAX_ATTEMPTS, WEBHOOK_MAX_BYTES, WEBHOOK_PING_TYPE, WEBHOOK_ENTITIES, BY_MODEL, WEBHOOK_EVENTS, zCreateWebhookEndpoint, zUpdateWebhookEndpoint;
 var init_webhook = __esm({
@@ -9183,8 +9262,8 @@ var init_backlog = __esm({
         sampleMethod: "GET",
         build: (a) => {
           const path = s(a.path);
-          const base = `/specs/${enc(String(a.spec))}/review`;
-          return { method: "GET", path: path ? `${base}/${String(path).split("/").map(enc).join("/")}` : base };
+          const base2 = `/specs/${enc(String(a.spec))}/review`;
+          return { method: "GET", path: path ? `${base2}/${String(path).split("/").map(enc).join("/")}` : base2 };
         },
         shape: (raw) => raw
       },
@@ -9861,8 +9940,8 @@ var init_ide = __esm({
         sampleMethod: "GET",
         build: (a) => {
           const path = s(a.path);
-          const base = `${p(a.project)}/commit/${enc(String(a.sha))}`;
-          return path ? { method: "GET", path: `${base}/file`, query: { path } } : { method: "GET", path: base };
+          const base2 = `${p(a.project)}/commit/${enc(String(a.sha))}`;
+          return path ? { method: "GET", path: `${base2}/file`, query: { path } } : { method: "GET", path: base2 };
         },
         shape: (raw) => raw
       },
@@ -11099,8 +11178,8 @@ var init_sessions = __esm({
         sampleMethod: "GET",
         build: (a) => {
           const path = s(a.path);
-          const base = `/terminal/sessions/${enc(String(a.session))}/review`;
-          return { method: "GET", path: path ? `${base}/${String(path).split("/").map(enc).join("/")}` : base };
+          const base2 = `/terminal/sessions/${enc(String(a.session))}/review`;
+          return { method: "GET", path: path ? `${base2}/${String(path).split("/").map(enc).join("/")}` : base2 };
         },
         shape: (raw) => raw
       },
@@ -12054,6 +12133,216 @@ var init_team2 = __esm({
   }
 });
 
+// ../shared/src/mcp-catalog/qa.ts
+var PROJECT3, REPORT, CASE, FINDING, base, one, parseEnv, parseSteps, nullable2, put, REPORT_FIELDS, reportBody, caseBody, findingBody, CASE_FIELDS, FINDING_FIELDS, QA_TOOLS;
+var init_qa2 = __esm({
+  "../shared/src/mcp-catalog/qa.ts"() {
+    "use strict";
+    init_qa();
+    init_mcp_schema();
+    init_helpers();
+    PROJECT3 = str("Id project, seperti muncul di hanoman_projects_list.");
+    REPORT = str("Id laporan QA (cuid), seperti muncul di hanoman_qa_reports_list \u2014 BUKAN nomor tampil `QA-007`, yang dihitung saat render.");
+    CASE = str("Id test case (cuid), dari hanoman_qa_report_get.");
+    FINDING = str("Id temuan (cuid), dari hanoman_qa_report_get.");
+    base = (a) => `/projects/${enc(String(a.project))}/qa/reports`;
+    one = (a) => `${base(a)}/${enc(String(a.report))}`;
+    parseEnv = (v) => {
+      if (typeof v !== "string" || !v.trim()) return void 0;
+      const out = {};
+      for (const part of v.split(/[\n;]/)) {
+        const t = part.trim();
+        if (!t) continue;
+        const i = t.indexOf("=");
+        const k = (i < 0 ? t : t.slice(0, i)).trim();
+        if (k) out[k] = i < 0 ? "" : t.slice(i + 1).trim();
+      }
+      return Object.keys(out).length ? out : void 0;
+    };
+    parseSteps = (v) => typeof v === "string" && v.trim() ? v.split("\n").map((l) => l.trim().replace(/^(?:\d+[.)]|[-*])\s+/, "")).filter(Boolean) : void 0;
+    nullable2 = (v) => typeof v !== "string" ? void 0 : v === "" ? null : v;
+    put = (body, key, v) => {
+      if (v !== void 0) body[key] = v;
+    };
+    REPORT_FIELDS = {
+      title: str("Judul laporan, satu baris."),
+      buildVersion: str("Versi/build yang diuji, mis. `0.9.12`."),
+      environment: str("Lingkungan uji: `kunci=nilai` dipisah baris atau `;`, mis. `os=macOS 15; browser=Chrome 130; url=https://staging.x.id`. Maks 20 entri."),
+      scope: str("Cakupan: apa yang diuji dan apa yang sengaja tidak."),
+      tester: str("Nama penguji."),
+      summary: str("Ringkasan hasil, 2\u20133 kalimat, memuat alasan keputusan."),
+      verdict: enumStr(QA_VERDICTS, "Keputusan rilis. Wajib terisi sebelum `status` boleh `submitted`/`closed`.")
+    };
+    reportBody = (a) => {
+      const b = {};
+      for (const k of ["title", "buildVersion", "scope", "tester", "summary", "verdict", "status"]) put(b, k, s(a[k]));
+      put(b, "environment", parseEnv(a.environment));
+      return b;
+    };
+    caseBody = (a) => {
+      const b = {};
+      for (const k of ["title", "steps", "expected", "actual", "status"]) put(b, k, s(a[k]));
+      return b;
+    };
+    findingBody = (a) => {
+      const b = {};
+      for (const k of ["title", "severity", "priority", "area", "expected", "actual", "status"]) put(b, k, s(a[k]));
+      put(b, "steps", parseSteps(a.steps));
+      put(b, "caseId", nullable2(a.testCase));
+      return b;
+    };
+    CASE_FIELDS = {
+      title: str("Judul test case."),
+      steps: str("Langkah uji (teks bebas)."),
+      expected: str("Hasil yang diharapkan."),
+      actual: str("Hasil aktual."),
+      status: enumStr(QA_CASE_STATUSES, "Status eksekusi.")
+    };
+    FINDING_FIELDS = {
+      title: str("Judul temuan \u2014 satu masalah, satu baris."),
+      severity: enumStr(QA_SEVERITIES, "Dampak TEKNIS. Bukan prioritas."),
+      priority: enumStr(QA_PRIORITIES, "Urutan perbaikan P0 (paling mendesak)\u2013P3. Terpisah dari severity: bug minor di halaman checkout bisa P0."),
+      area: str("Area/fitur, mis. `checkout`."),
+      steps: str("Langkah reproduksi, SATU PER BARIS (penomoran `1.` di awal dibuang; server menomori)."),
+      expected: str("Yang seharusnya terjadi."),
+      actual: str("Yang benar-benar terjadi."),
+      status: enumStr(["open", "wontfix"], "`open` atau `wontfix`. `sent` (sudah jadi backlog) hanya ditulis server."),
+      testCase: str("Id test case terkait, dari hanoman_qa_report_get. String KOSONG melepas tautan; tak menyebutnya membiarkan apa adanya.")
+    };
+    QA_TOOLS = [
+      {
+        name: "hanoman_qa_reports_list",
+        title: "Daftar laporan QA",
+        description: "Laporan QA sebuah project, terbaru-diubah dulu, dengan nomor tampil (`QA-001`), status (`draft|submitted|closed`), keputusan (`go|no-go|conditional`), dan statistik (pass-rate dari yang dieksekusi, temuan per severity, jumlah open). Nomor tampil dihitung dari urutan pembuatan \u2014 pakai `id`, bukan nomor, saat memanggil tool lain.",
+        inputSchema: obj({ properties: { project: PROJECT3 }, required: ["project"] }),
+        mode: "read",
+        capability: "qa:read",
+        samplePath: "/projects/p1/qa/reports",
+        sampleMethod: "GET",
+        build: (a) => ({ method: "GET", path: base(a) }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_qa_report_get",
+        title: "Detail laporan QA",
+        description: "Satu laporan QA lengkap: header, test case (`TC-01\u2026`), temuan (`F-01\u2026`, dengan repro bernomor, severity, prioritas, `caseCode`), dan metadata lampiran (nama, tipe, ukuran \u2014 bukan byte).",
+        inputSchema: obj({ properties: { project: PROJECT3, report: REPORT }, required: ["project", "report"] }),
+        mode: "read",
+        capability: "qa:read",
+        samplePath: "/projects/p1/qa/reports/r1",
+        sampleMethod: "GET",
+        build: (a) => ({ method: "GET", path: one(a) }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_qa_report_create",
+        title: "Buat laporan QA",
+        description: "Membuat laporan QA berstatus `draft`. Hanya `project` dan `title` yang wajib. Test case dan temuan ditambahkan lewat tool terpisah.",
+        inputSchema: obj({ properties: { project: PROJECT3, ...REPORT_FIELDS }, required: ["project", "title"] }),
+        mode: "write",
+        capability: "qa:write",
+        samplePath: "/projects/p1/qa/reports",
+        sampleMethod: "POST",
+        build: (a) => ({ method: "POST", path: base(a), body: reportBody(a) }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_qa_report_update",
+        title: "Ubah laporan QA",
+        description: "Mengubah header laporan; hanya field yang disebut yang ditulis. `status`: `draft \u2192 submitted \u2192 closed`; `submitted`/`closed` DITOLAK 400 bila `verdict` belum terisi. Laporan `closed` read-only (409) untuk semua tool QA \u2014 satu-satunya ubahan yang lolos adalah `status: draft` untuk membukanya kembali.",
+        inputSchema: obj({
+          properties: { project: PROJECT3, report: REPORT, ...REPORT_FIELDS, status: enumStr(QA_REPORT_STATUSES, "Status laporan.") },
+          required: ["project", "report"]
+        }),
+        mode: "write",
+        capability: "qa:write",
+        samplePath: "/projects/p1/qa/reports/r1",
+        sampleMethod: "PATCH",
+        build: (a) => ({ method: "PATCH", path: one(a), body: reportBody(a) }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_qa_case_create",
+        title: "Tambah test case",
+        description: "Menambah test case ke akhir daftar laporan. Hanya `title` yang wajib; status awal `todo`. Jawabannya adalah laporan terbaru (test case baru = entri terakhir `cases`).",
+        inputSchema: obj({ properties: { project: PROJECT3, report: REPORT, ...CASE_FIELDS }, required: ["project", "report", "title"] }),
+        mode: "write",
+        capability: "qa:write",
+        samplePath: "/projects/p1/qa/reports/r1/cases",
+        sampleMethod: "POST",
+        build: (a) => ({ method: "POST", path: `${one(a)}/cases`, body: caseBody(a) }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_qa_case_update",
+        title: "Ubah test case",
+        description: "Mengubah test case; hanya field yang disebut yang ditulis. Biasa dipakai untuk mencatat hasil: `status` (`pass|fail|blocked|skipped`) dan `actual`.",
+        inputSchema: obj({ properties: { project: PROJECT3, report: REPORT, case: CASE, ...CASE_FIELDS }, required: ["project", "report", "case"] }),
+        mode: "write",
+        capability: "qa:write",
+        samplePath: "/projects/p1/qa/reports/r1/cases/c1",
+        sampleMethod: "PATCH",
+        build: (a) => ({ method: "PATCH", path: `${one(a)}/cases/${enc(String(a.case))}`, body: caseBody(a) }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_qa_finding_create",
+        title: "Catat temuan QA",
+        description: "Mencatat satu temuan (bug) di laporan. Isi `severity` (dampak teknis) DAN `priority` (urutan perbaikan) secara terpisah \u2014 keduanya tak selalu sama. Tulis `steps` sebagai langkah reproduksi yang bisa diulang orang lain, satu per baris. Temuan baru berstatus `open`; jawabannya laporan terbaru (temuan baru = entri terakhir `findings`).",
+        inputSchema: obj({ properties: { project: PROJECT3, report: REPORT, ...FINDING_FIELDS }, required: ["project", "report", "title"] }),
+        mode: "write",
+        capability: "qa:write",
+        samplePath: "/projects/p1/qa/reports/r1/findings",
+        sampleMethod: "POST",
+        build: (a) => ({ method: "POST", path: `${one(a)}/findings`, body: findingBody(a) }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_qa_finding_update",
+        title: "Ubah temuan QA",
+        description: "Mengubah temuan; hanya field yang disebut yang ditulis. `status`: `open` atau `wontfix`.",
+        inputSchema: obj({ properties: { project: PROJECT3, report: REPORT, finding: FINDING, ...FINDING_FIELDS }, required: ["project", "report", "finding"] }),
+        mode: "write",
+        capability: "qa:write",
+        samplePath: "/projects/p1/qa/reports/r1/findings/f1",
+        sampleMethod: "PATCH",
+        build: (a) => ({ method: "PATCH", path: `${one(a)}/findings/${enc(String(a.finding))}`, body: findingBody(a) }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_qa_finding_to_backlog",
+        title: "Kirim temuan QA ke backlog",
+        description: "Membuat backlog item (`source: qa`) dari satu temuan: judul, repro, expected/actual, lingkungan, dan lampiran temuan ikut sebagai konteks agen. Temuan jadi `sent` dan menyimpan `backlogId`; hasil `findings[].spec` menampilkan stage backlog-nya. IDEMPOTEN: temuan yang sudah dikirim menjawab 200 `created: false` dengan spec yang sama. Pemetaan LOSSY: severity blocker/critical\u2192critical, minor/trivial\u2192minor; P0/P1\u2192tinggi, P2\u2192sedang, P3\u2192rendah (severity & prioritas QA asli tetap tertulis di teks backlog). Ini TIDAK membuka sesi agen; Spec-nya lahir tanpa persetujuan peluncuran bila token tak memegang `sessions:write`. Laporan `closed` tetap boleh (hanya tautan yang berubah).",
+        inputSchema: obj({
+          properties: { project: PROJECT3, report: REPORT, finding: FINDING, priority: enumStr(["tinggi", "sedang", "rendah"], "Timpa prioritas backlog. Tanpa ini: diturunkan dari prioritas P0\u2013P3 temuan.") },
+          required: ["project", "report", "finding"]
+        }),
+        mode: "write",
+        capability: "qa:write",
+        samplePath: "/projects/p1/qa/reports/r1/findings/f1/backlog",
+        sampleMethod: "POST",
+        build: (a) => ({ method: "POST", path: `${one(a)}/findings/${enc(String(a.finding))}/backlog`, body: s(a.priority) ? { priority: s(a.priority) } : {} }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_qa_report_to_backlog",
+        title: "Kirim semua temuan open ke backlog",
+        description: "Mengirim SEMUA temuan berstatus `open` sebuah laporan ke backlog sekaligus (`wontfix` dan yang sudah `sent` dilewati). Jawabannya `results` per temuan (satu yang gagal tak menggagalkan yang lain) dan `sent` = jumlah backlog baru. Semantik per temuan sama dengan hanoman_qa_finding_to_backlog.",
+        inputSchema: obj({
+          properties: { project: PROJECT3, report: REPORT, priority: enumStr(["tinggi", "sedang", "rendah"], "Timpa prioritas SEMUA backlog yang dibuat. Tanpa ini: diturunkan per temuan.") },
+          required: ["project", "report"]
+        }),
+        mode: "write",
+        capability: "qa:write",
+        samplePath: "/projects/p1/qa/reports/r1/backlog",
+        sampleMethod: "POST",
+        build: (a) => ({ method: "POST", path: `${one(a)}/backlog`, body: s(a.priority) ? { priority: s(a.priority) } : {} }),
+        shape: (raw) => raw
+      }
+    ];
+  }
+});
+
 // ../shared/src/mcp-catalog/system.ts
 var SYSTEM_TOOLS;
 var init_system = __esm({
@@ -12143,6 +12432,7 @@ var init_mcp_catalog = __esm({
     init_support();
     init_lead2();
     init_team2();
+    init_qa2();
     init_system();
     MCP_TOOLS = [
       ...ABOUT_TOOLS,
@@ -12163,6 +12453,8 @@ var init_mcp_catalog = __esm({
       // sengaja: urutan di sini = urutan yang dibaca model, dan pekerjaan sehari-hari agen tetap
       // backlog/sesi/IDE — bukan kartu orang lain.
       ...TEAM_TOOLS,
+      ...QA_TOOLS,
+      // Workspace QA · laporan, test case, temuan
       ...SYSTEM_TOOLS
     ];
   }
@@ -12488,6 +12780,9 @@ var init_src = __esm({
     init_config_registry();
     init_semver();
     init_telegram();
+    init_qa();
+    init_qa_markdown();
+    init_qa_tabular();
     init_webhook();
     init_mcp();
     init_auto_merge();
@@ -18956,7 +19251,7 @@ function exactOptional(innerType) {
     innerType
   });
 }
-function nullable2(innerType) {
+function nullable3(innerType) {
   return new ZodNullable2({
     type: "nullable",
     innerType
@@ -19102,10 +19397,10 @@ var init_schemas2 = __esm({
           return exactOptional(this);
         },
         nullable() {
-          return nullable2(this);
+          return nullable3(this);
         },
         nullish() {
-          return optional(nullable2(this));
+          return optional(nullable3(this));
         },
         nonoptional(params) {
           return nonoptional(this, params);
@@ -23376,8 +23671,8 @@ function setNegotiatedProtocolVersion(instance, version3) {
 function isPlainObject$1(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-function mergeCapabilities(base, additional) {
-  const result = { ...base };
+function mergeCapabilities(base2, additional) {
+  const result = { ...base2 };
   for (const key in additional) {
     const k = key;
     const addValue = additional[k];
@@ -28463,10 +28758,10 @@ var init_ajvProvider_CEoC_sr = __esm({
         schemelessOptions.skipEscape = true;
         return serialize(resolved, schemelessOptions);
       }
-      function resolveComponent(base, relative2, options, skipNormalization) {
+      function resolveComponent(base2, relative2, options, skipNormalization) {
         const target = {};
         if (!skipNormalization) {
-          base = parse4(serialize(base, options), options);
+          base2 = parse4(serialize(base2, options), options);
           relative2 = parse4(serialize(relative2, options), options);
         }
         options = options || {};
@@ -28486,24 +28781,24 @@ var init_ajvProvider_CEoC_sr = __esm({
             target.query = relative2.query;
           } else {
             if (!relative2.path) {
-              target.path = base.path;
+              target.path = base2.path;
               if (relative2.query !== void 0) target.query = relative2.query;
-              else target.query = base.query;
+              else target.query = base2.query;
             } else {
               if (relative2.path[0] === "/") target.path = removeDotSegments(relative2.path);
               else {
-                if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) target.path = "/" + relative2.path;
-                else if (!base.path) target.path = relative2.path;
-                else target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative2.path;
+                if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) target.path = "/" + relative2.path;
+                else if (!base2.path) target.path = relative2.path;
+                else target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative2.path;
                 target.path = removeDotSegments(target.path);
               }
               target.query = relative2.query;
             }
-            target.userinfo = base.userinfo;
-            target.host = base.host;
-            target.port = base.port;
+            target.userinfo = base2.userinfo;
+            target.host = base2.host;
+            target.port = base2.port;
           }
-          target.scheme = base.scheme;
+          target.scheme = base2.scheme;
         }
         target.fragment = relative2.fragment;
         return target;
@@ -35057,7 +35352,14 @@ var init_migrate_pg = __esm({
       "Task",
       // SPEC-481 · ADR-0100 · WebhookDelivery WAJIB sesudah WebhookEndpoint (FK endpointId).
       "WebhookEndpoint",
-      "WebhookDelivery"
+      "WebhookDelivery",
+      // Workspace QA · ADR-0174 · QaReport sesudah Project (FK projectId, cascade); QaCase/QaFinding/
+      // QaAttachment sesudah QaReport (FK reportId, cascade). Keempatnya LOCAL-only dan TIDAK ada di
+      // sumber Postgres lama — jalur 42P01 memperlakukannya sebagai nol baris (cermin Changelog).
+      "QaReport",
+      "QaCase",
+      "QaFinding",
+      "QaAttachment"
     ];
     CHUNK = 200;
     INT8_OID = 20;
@@ -35204,8 +35506,8 @@ import { readFileSync as readFileSync7, writeFileSync as writeFileSync2 } from "
 function addLink(indexPath, relPath, category) {
   let md = readFileSync7(indexPath, "utf8");
   if (md.includes(`(${relPath})`)) return;
-  const base = relPath.split("/").pop().replace(/\.md$/, "");
-  const line = `- [${base}](${relPath})`;
+  const base2 = relPath.split("/").pop().replace(/\.md$/, "");
+  const line = `- [${base2}](${relPath})`;
   const head = `## ${category}`;
   if (md.includes(head)) {
     const i = md.indexOf(head) + head.length;