hanoman 0.9.14 → 0.9.16

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.9.14",
-  "sha": "ca8210ed",
-  "builtAt": "2026-10-01T23:35:24.906Z"
+  "version": "0.9.16",
+  "sha": "05adb395",
+  "builtAt": "2026-10-05T05:02:21.820Z"
 }

package/dist/cli.js

@@ -7948,7 +7948,7 @@ var init_semver = __esm({
 });
 
 // ../shared/src/qa.ts
-var QA_REPORT_STATUSES, QA_VERDICTS, QA_CASE_STATUSES, QA_SEVERITIES, QA_PRIORITIES, zQaEnvironment, zSteps, zCreateQaReport, zPatchQaReport, zCreateQaCase, zPatchQaCase, zCreateQaFinding, zPatchQaFinding;
+var QA_REPORT_STATUSES, QA_VERDICTS, QA_CASE_STATUSES, QA_SEVERITIES, QA_PRIORITIES, zQaEnvironment, zSteps, zCreateQaReport, zPatchQaReport, zQaCode, zCreateQaCase, zPatchQaCase, zCreateQaFinding, zPatchQaFinding;
 var init_qa = __esm({
   "../shared/src/qa.ts"() {
     "use strict";
@@ -7970,7 +7970,9 @@ var init_qa = __esm({
       verdict: external_exports.enum(QA_VERDICTS).nullable().default(null)
     });
     zPatchQaReport = zCreateQaReport.partial().extend({ status: external_exports.enum(QA_REPORT_STATUSES).optional() });
+    zQaCode = external_exports.string().trim().max(40).refine((c) => !/[\u0000-\u001f·]/.test(c), "kode tak boleh berisi baris baru atau karakter \xB7").refine((c) => c.toLowerCase() !== "laporan", '"Laporan" dicadangkan untuk lampiran laporan').transform((c) => c || null).nullable();
     zCreateQaCase = external_exports.object({
+      code: zQaCode.optional(),
       title: external_exports.string().trim().min(1).max(300),
       steps: external_exports.string().max(1e4).default(""),
       expected: external_exports.string().max(1e4).default(""),
@@ -7980,6 +7982,7 @@ var init_qa = __esm({
     });
     zPatchQaCase = zCreateQaCase.partial();
     zCreateQaFinding = external_exports.object({
+      code: zQaCode.optional(),
       title: external_exports.string().trim().min(1).max(300),
       caseId: external_exports.string().max(120).nullable().default(null),
       severity: external_exports.enum(QA_SEVERITIES).default("major"),
@@ -12134,7 +12137,7 @@ var init_team2 = __esm({
 });
 
 // ../shared/src/mcp-catalog/qa.ts
-var PROJECT3, REPORT, CASE, FINDING, base, one, parseEnv, parseSteps, nullable2, put, REPORT_FIELDS, reportBody, caseBody, findingBody, CASE_FIELDS, FINDING_FIELDS, QA_TOOLS;
+var PROJECT3, REPORT, CASE, FINDING, base, one, parseEnv, parseSteps, nullable2, put, REPORT_FIELDS, reportBody, caseBody, findingBody, CODE_FIELD, CASE_FIELDS, FINDING_FIELDS, QA_TOOLS;
 var init_qa2 = __esm({
   "../shared/src/mcp-catalog/qa.ts"() {
     "use strict";
@@ -12182,6 +12185,7 @@ var init_qa2 = __esm({
     caseBody = (a) => {
       const b = {};
       for (const k of ["title", "steps", "expected", "actual", "status"]) put(b, k, s(a[k]));
+      put(b, "code", nullable2(a.code));
       return b;
     };
     findingBody = (a) => {
@@ -12189,9 +12193,12 @@ var init_qa2 = __esm({
       for (const k of ["title", "severity", "priority", "area", "expected", "actual", "status"]) put(b, k, s(a[k]));
       put(b, "steps", parseSteps(a.steps));
       put(b, "caseId", nullable2(a.testCase));
+      put(b, "code", nullable2(a.code));
       return b;
     };
+    CODE_FIELD = str("Kode bebas (mis. `LOGIN-01`), unik di satu laporan (test case + temuan, tak peka huruf). String KOSONG kembali ke nomor otomatis; tak menyebutnya membiarkan apa adanya.");
     CASE_FIELDS = {
+      code: CODE_FIELD,
       title: str("Judul test case."),
       steps: str("Langkah uji (teks bebas)."),
       expected: str("Hasil yang diharapkan."),
@@ -12199,6 +12206,7 @@ var init_qa2 = __esm({
       status: enumStr(QA_CASE_STATUSES, "Status eksekusi.")
     };
     FINDING_FIELDS = {
+      code: CODE_FIELD,
       title: str("Judul temuan \u2014 satu masalah, satu baris."),
       severity: enumStr(QA_SEVERITIES, "Dampak TEKNIS. Bukan prioritas."),
       priority: enumStr(QA_PRIORITIES, "Urutan perbaikan P0 (paling mendesak)\u2013P3. Terpisah dari severity: bug minor di halaman checkout bisa P0."),
@@ -12225,7 +12233,7 @@ var init_qa2 = __esm({
       {
         name: "hanoman_qa_report_get",
         title: "Detail laporan QA",
-        description: "Satu laporan QA lengkap: header, test case (`TC-01\u2026`), temuan (`F-01\u2026`, dengan repro bernomor, severity, prioritas, `caseCode`), dan metadata lampiran (nama, tipe, ukuran \u2014 bukan byte).",
+        description: "Satu laporan QA lengkap: header, test case (kode otomatis `TC-01\u2026` atau kode bebas QA), temuan (`F-01\u2026` atau kode bebas, dengan repro bernomor, severity, prioritas, `caseCode`), dan metadata lampiran (nama, tipe, ukuran \u2014 bukan byte).",
         inputSchema: obj({ properties: { project: PROJECT3, report: REPORT }, required: ["project", "report"] }),
         mode: "read",
         capability: "qa:read",

package/dist/server.js

@@ -8713,12 +8713,23 @@ var init_semver = __esm({
 });
 
 // ../shared/src/qa.ts
-function assignCodes(rows, prefix, pad) {
+function assignCodes(rows, prefix, pad, taken = /* @__PURE__ */ new Set()) {
   const ts = (r) => new Date(r.createdAt).getTime();
-  const rank = new Map(
-    [...rows].sort((a, b) => ts(a) - ts(b) || (a.id < b.id ? -1 : a.id > b.id ? 1 : 0)).map((r, i) => [r.id, i + 1])
-  );
-  return rows.map((r) => ({ ...r, code: `${prefix}${String(rank.get(r.id)).padStart(pad, "0")}` }));
+  const ordered = [...rows].sort((a, b) => ts(a) - ts(b) || (a.id < b.id ? -1 : a.id > b.id ? 1 : 0));
+  const out4 = /* @__PURE__ */ new Map();
+  let n2 = 0;
+  for (const r of ordered) {
+    if (r.code) {
+      out4.set(r.id, r.code);
+      continue;
+    }
+    let code;
+    do {
+      code = `${prefix}${String(++n2).padStart(pad, "0")}`;
+    } while (taken.has(qaCodeKey(code)));
+    out4.set(r.id, code);
+  }
+  return rows.map((r) => ({ ...r, code: out4.get(r.id) }));
 }
 function qaStats(cases, findings) {
   const c = { total: cases.length, todo: 0, pass: 0, fail: 0, blocked: 0, skipped: 0 };
@@ -8737,7 +8748,7 @@ function qaSeverityToSpec(s2) {
 function qaPriorityToSpec(p3) {
   return p3 === "P0" || p3 === "P1" ? "tinggi" : p3 === "P2" ? "sedang" : "rendah";
 }
-var QA_REPORT_STATUSES, QA_VERDICTS, QA_CASE_STATUSES, QA_SEVERITIES, QA_PRIORITIES, QA_FINDING_STATUSES, QA_OWNER_TYPES, zQaEnvironment, zSteps, zCreateQaReport, zPatchQaReport, zCreateQaCase, zPatchQaCase, zCreateQaFinding, zPatchQaFinding, QA_EXPORT_FORMATS;
+var QA_REPORT_STATUSES, QA_VERDICTS, QA_CASE_STATUSES, QA_SEVERITIES, QA_PRIORITIES, QA_FINDING_STATUSES, QA_OWNER_TYPES, zQaEnvironment, zSteps, zCreateQaReport, zPatchQaReport, zQaCode, zCreateQaCase, zPatchQaCase, zCreateQaFinding, zPatchQaFinding, qaCodeKey, QA_EXPORT_FORMATS;
 var init_qa = __esm({
   "../shared/src/qa.ts"() {
     "use strict";
@@ -8761,7 +8772,9 @@ var init_qa = __esm({
       verdict: external_exports.enum(QA_VERDICTS).nullable().default(null)
     });
     zPatchQaReport = zCreateQaReport.partial().extend({ status: external_exports.enum(QA_REPORT_STATUSES).optional() });
+    zQaCode = external_exports.string().trim().max(40).refine((c) => !/[\u0000-\u001f·]/.test(c), "kode tak boleh berisi baris baru atau karakter \xB7").refine((c) => c.toLowerCase() !== "laporan", '"Laporan" dicadangkan untuk lampiran laporan').transform((c) => c || null).nullable();
     zCreateQaCase = external_exports.object({
+      code: zQaCode.optional(),
       title: external_exports.string().trim().min(1).max(300),
       steps: external_exports.string().max(1e4).default(""),
       expected: external_exports.string().max(1e4).default(""),
@@ -8771,6 +8784,7 @@ var init_qa = __esm({
     });
     zPatchQaCase = zCreateQaCase.partial();
     zCreateQaFinding = external_exports.object({
+      code: zQaCode.optional(),
       title: external_exports.string().trim().min(1).max(300),
       caseId: external_exports.string().max(120).nullable().default(null),
       severity: external_exports.enum(QA_SEVERITIES).default("major"),
@@ -8782,6 +8796,7 @@ var init_qa = __esm({
       status: external_exports.enum(["open", "wontfix"]).default("open")
     });
     zPatchQaFinding = zCreateQaFinding.partial();
+    qaCodeKey = (c) => c.trim().toLowerCase();
     QA_EXPORT_FORMATS = ["zip", "md", "docx", "pdf", "xlsx", "csv"];
   }
 });
@@ -8915,7 +8930,8 @@ function parseQaMarkdown(text2) {
       if (!c[1]) throw new QaMarkdownError("judul test case kosong", abs(cs, idx));
       cases.push({
         id: c[6] || null,
-        code: c[0],
+        code: c[0].trim(),
+        customCode: c[0].trim() || null,
         title: c[1],
         steps: c[2],
         expected: c[3],
@@ -8930,8 +8946,8 @@ function parseQaMarkdown(text2) {
   if (fs2) {
     const heads = fs2.lines.map((l, idx) => ({ l, idx })).filter((x) => x.l.startsWith("### "));
     heads.forEach((h2, n2) => {
-      const hm = /^### (F-\d+) · \[(\w+)\/(P\d)\] (.+)$/.exec(h2.l);
-      if (!hm) throw new QaMarkdownError("judul temuan tak valid; format: `### F-01 \xB7 [major/P1] Judul`", abs(fs2, h2.idx));
+      const hm = /^### (.+?) · \[(\w+)\/(P\d)\] (.+)$/.exec(h2.l);
+      if (!hm) throw new QaMarkdownError("judul temuan tak valid; format: `### F-01 \xB7 [major/P1] Judul` (kode bebas, tanpa \xB7)", abs(fs2, h2.idx));
       const severity = oneOf(hm[2], QA_SEVERITIES, "severity", abs(fs2, h2.idx));
       const priority = oneOf(hm[3], QA_PRIORITIES, "prioritas", abs(fs2, h2.idx));
       const end2 = n2 + 1 < heads.length ? heads[n2 + 1].idx : fs2.lines.length;
@@ -8956,7 +8972,7 @@ function parseQaMarkdown(text2) {
           area = am[1].trim();
           continue;
         }
-        const tm = /^\*\*Test case:\*\* ?(TC-\d+)\s*$/.exec(l);
+        const tm = /^\*\*Test case:\*\* ?(.+?)\s*$/.exec(l);
         if (tm) {
           caseCode = tm[1];
           continue;
@@ -8991,7 +9007,8 @@ function parseQaMarkdown(text2) {
         id: typeof meta.id === "string" && meta.id ? meta.id : null,
         caseId: typeof meta.caseId === "string" && meta.caseId ? meta.caseId : null,
         caseCode,
-        code: hm[1],
+        code: hm[1].trim(),
+        customCode: hm[1].trim(),
         title: hm[4].trim(),
         severity,
         priority,
@@ -9008,7 +9025,7 @@ function parseQaMarkdown(text2) {
   if (ls) {
     let code = null;
     for (const l of ls.lines) {
-      const hm = /^### (TC-\d+)\s*$/.exec(l);
+      const hm = /^### (.+?)\s*$/.exec(l);
       if (hm) {
         code = hm[1];
         continue;
@@ -9017,6 +9034,28 @@ function parseQaMarkdown(text2) {
       if (c) c.attachments.push(...pathsIn([l]));
     }
   }
+  const seen2 = /* @__PURE__ */ new Set();
+  for (const x of [...cases, ...findings]) {
+    if (!x.code) continue;
+    const k = x.code.toLowerCase();
+    if (k === "laporan") throw new QaMarkdownError(`kode "${x.code}" dicadangkan untuk lampiran laporan`, 1);
+    if (seen2.has(k)) throw new QaMarkdownError(`kode ${x.code} dipakai lebih dari sekali; kode harus unik`, 1);
+    seen2.add(k);
+  }
+  let tcN = 0;
+  for (const c of cases) if (!c.code) {
+    do {
+      c.code = `TC-${String(++tcN).padStart(2, "0")}`;
+    } while (seen2.has(c.code.toLowerCase()));
+    seen2.add(c.code.toLowerCase());
+  }
+  for (const f of findings) {
+    if (f.caseCode) {
+      const c = cases.find((x) => x.code.toLowerCase() === f.caseCode.toLowerCase());
+      if (!c) throw new QaMarkdownError(`temuan ${f.code}: test case ${f.caseCode} tidak ditemukan`, 1);
+      f.caseCode = c.code;
+    }
+  }
   return {
     reportId: fs("reportId") || null,
     title: fs("title").trim(),
@@ -13460,7 +13499,7 @@ var init_team2 = __esm({
 });
 
 // ../shared/src/mcp-catalog/qa.ts
-var PROJECT3, REPORT, CASE, FINDING, base, one, parseEnv, parseSteps, nullable2, put, REPORT_FIELDS, reportBody, caseBody, findingBody, CASE_FIELDS, FINDING_FIELDS, QA_TOOLS;
+var PROJECT3, REPORT, CASE, FINDING, base, one, parseEnv, parseSteps, nullable2, put, REPORT_FIELDS, reportBody, caseBody, findingBody, CODE_FIELD, CASE_FIELDS, FINDING_FIELDS, QA_TOOLS;
 var init_qa2 = __esm({
   "../shared/src/mcp-catalog/qa.ts"() {
     "use strict";
@@ -13508,6 +13547,7 @@ var init_qa2 = __esm({
     caseBody = (a) => {
       const b = {};
       for (const k of ["title", "steps", "expected", "actual", "status"]) put(b, k, s(a[k]));
+      put(b, "code", nullable2(a.code));
       return b;
     };
     findingBody = (a) => {
@@ -13515,9 +13555,12 @@ var init_qa2 = __esm({
       for (const k of ["title", "severity", "priority", "area", "expected", "actual", "status"]) put(b, k, s(a[k]));
       put(b, "steps", parseSteps(a.steps));
       put(b, "caseId", nullable2(a.testCase));
+      put(b, "code", nullable2(a.code));
       return b;
     };
+    CODE_FIELD = str("Kode bebas (mis. `LOGIN-01`), unik di satu laporan (test case + temuan, tak peka huruf). String KOSONG kembali ke nomor otomatis; tak menyebutnya membiarkan apa adanya.");
     CASE_FIELDS = {
+      code: CODE_FIELD,
       title: str("Judul test case."),
       steps: str("Langkah uji (teks bebas)."),
       expected: str("Hasil yang diharapkan."),
@@ -13525,6 +13568,7 @@ var init_qa2 = __esm({
       status: enumStr(QA_CASE_STATUSES, "Status eksekusi.")
     };
     FINDING_FIELDS = {
+      code: CODE_FIELD,
       title: str("Judul temuan \u2014 satu masalah, satu baris."),
       severity: enumStr(QA_SEVERITIES, "Dampak TEKNIS. Bukan prioritas."),
       priority: enumStr(QA_PRIORITIES, "Urutan perbaikan P0 (paling mendesak)\u2013P3. Terpisah dari severity: bug minor di halaman checkout bisa P0."),
@@ -13551,7 +13595,7 @@ var init_qa2 = __esm({
       {
         name: "hanoman_qa_report_get",
         title: "Detail laporan QA",
-        description: "Satu laporan QA lengkap: header, test case (`TC-01\u2026`), temuan (`F-01\u2026`, dengan repro bernomor, severity, prioritas, `caseCode`), dan metadata lampiran (nama, tipe, ukuran \u2014 bukan byte).",
+        description: "Satu laporan QA lengkap: header, test case (kode otomatis `TC-01\u2026` atau kode bebas QA), temuan (`F-01\u2026` atau kode bebas, dengan repro bernomor, severity, prioritas, `caseCode`), dan metadata lampiran (nama, tipe, ukuran \u2014 bukan byte).",
         inputSchema: obj({ properties: { project: PROJECT3, report: REPORT }, required: ["project", "report"] }),
         mode: "read",
         capability: "qa:read",
@@ -52197,8 +52241,8 @@ var init_sync = __esm({
       // `qaFinding.backlogId` ikut (cermin task.specId): tanpa itu mesin lain bisa mengirim ulang temuan yang
       // di mesin ini sudah jadi backlog.
       qaReport: ["projectId", "title", "buildVersion", "environment", "scope", "tester", "summary", "status", "verdict", "createdAt", "updatedAt"],
-      qaCase: ["reportId", "title", "steps", "expected", "actual", "status", "order", "createdAt", "updatedAt"],
-      qaFinding: ["reportId", "caseId", "title", "severity", "priority", "area", "steps", "expected", "actual", "status", "backlogId", "createdAt", "updatedAt"],
+      qaCase: ["reportId", "code", "title", "steps", "expected", "actual", "status", "order", "createdAt", "updatedAt"],
+      qaFinding: ["reportId", "caseId", "code", "title", "severity", "priority", "area", "steps", "expected", "actual", "status", "backlogId", "createdAt", "updatedAt"],
       qaAttachment: ["reportId", "projectId", "ownerType", "ownerId", "filename", "mimeType", "size", "sha256", "storageKey", "createdAt", "updatedAt"]
     };
     DATE_FIELDS = {
@@ -64014,8 +64058,9 @@ var attachmentView = (a) => ({
   syncState: a.syncState === "local-only" && !effectiveStr("SYNC_SERVER_URL") ? "available" : a.syncState,
   createdAt: iso3(a.createdAt)
 });
-function caseViews(rows) {
-  return assignCodes(rows, "TC-", 2).map((r) => ({
+var takenCodes = (...lists) => new Set(lists.flat().filter((r) => r.code).map((r) => qaCodeKey(r.code)));
+function caseViews(rows, taken = /* @__PURE__ */ new Set()) {
+  return assignCodes(rows, "TC-", 2, taken).map((r) => ({
     id: r.id,
     reportId: r.reportId,
     code: r.code,
@@ -64029,9 +64074,9 @@ function caseViews(rows) {
     updatedAt: iso3(r.updatedAt)
   })).sort((a, b) => a.order - b.order || (a.id < b.id ? -1 : 1));
 }
-function findingViews(rows, cases, specs = /* @__PURE__ */ new Map()) {
+function findingViews(rows, cases, specs = /* @__PURE__ */ new Map(), taken = /* @__PURE__ */ new Set()) {
   const caseCode = new Map(cases.map((c) => [c.id, c.code]));
-  return assignCodes(rows, "F-", 2).map((r) => ({
+  return assignCodes(rows, "F-", 2, taken).map((r) => ({
     id: r.id,
     reportId: r.reportId,
     code: r.code,
@@ -64071,7 +64116,8 @@ async function reportDetail(projectId, reportId) {
   });
   if (!row) return null;
   const code = (await reportCodes(projectId)).get(row.id);
-  const cases = caseViews(row.cases);
+  const taken = takenCodes(row.cases, row.findings);
+  const cases = caseViews(row.cases, taken);
   const specIds = [...new Set(row.findings.map((f) => f.backlogId).filter((x) => !!x))];
   const specs = new Map(
     (await prisma.spec.findMany({ where: { id: { in: specIds } }, select: { id: true, stage: true, priority: true } })).map((x) => [x.id, x])
@@ -64079,10 +64125,19 @@ async function reportDetail(projectId, reportId) {
   return {
     ...reportView(row, code, row.cases, row.findings),
     cases,
-    findings: findingViews(row.findings, cases, specs),
+    findings: findingViews(row.findings, cases, specs, taken),
     attachments: row.attachments.map(attachmentView)
   };
 }
+async function qaCodeProblem(reportId, code, exceptId) {
+  if (!code) return null;
+  const [cases, findings] = await Promise.all([
+    prisma.qaCase.findMany({ where: { reportId, code: { not: null } }, select: { id: true, code: true } }),
+    prisma.qaFinding.findMany({ where: { reportId, code: { not: null } }, select: { id: true, code: true } })
+  ]);
+  const key = qaCodeKey(code);
+  return [...cases, ...findings].some((r) => r.id !== exceptId && qaCodeKey(r.code) === key) ? { error: "kode sudah dipakai di laporan ini; kode test case dan temuan harus unik", code } : null;
+}
 
 // src/services/sync-delete.ts
 init_sync();
@@ -79444,8 +79499,11 @@ async function qa(app3) {
     if (!parsed.success) return bad(reply, parsed.error);
     const p3 = parsed.data;
     const last2 = await prisma.qaCase.findFirst({ where: { reportId: rid }, orderBy: { order: "desc" }, select: { order: true } });
+    const clash = await qaCodeProblem(rid, p3.code);
+    if (clash) return reply.code(409).send(clash);
     const row = await prisma.qaCase.create({ data: {
       reportId: rid,
+      code: p3.code ?? null,
       title: p3.title,
       steps: p3.steps,
       expected: p3.expected,
@@ -79465,6 +79523,8 @@ async function qa(app3) {
     if (r.status === "closed") return locked(reply);
     const parsed = zPatchQaCase.safeParse(req.body ?? {});
     if (!parsed.success) return bad(reply, parsed.error);
+    const clash = await qaCodeProblem(rid, parsed.data.code, cid);
+    if (clash) return reply.code(409).send(clash);
     await prisma.qaCase.update({ where: { id: cid }, data: parsed.data });
     await notifySynced("qaCase", cid);
     await touch(rid);
@@ -79495,8 +79555,11 @@ async function qa(app3) {
     const p3 = parsed.data;
     const problem = await caseProblem(rid, p3.caseId);
     if (problem) return reply.code(400).send(problem);
+    const clash = await qaCodeProblem(rid, p3.code);
+    if (clash) return reply.code(409).send(clash);
     const row = await prisma.qaFinding.create({ data: {
       reportId: rid,
+      code: p3.code ?? null,
       caseId: p3.caseId,
       title: p3.title,
       severity: p3.severity,
@@ -79522,7 +79585,10 @@ async function qa(app3) {
     const p3 = parsed.data;
     const problem = await caseProblem(rid, p3.caseId);
     if (problem) return reply.code(400).send(problem);
+    const clash = await qaCodeProblem(rid, p3.code, fid);
+    if (clash) return reply.code(409).send(clash);
     await prisma.qaFinding.update({ where: { id: fid }, data: {
+      code: p3.code,
       caseId: p3.caseId,
       title: p3.title,
       severity: p3.severity,
@@ -79885,9 +79951,10 @@ var GUIDE2 = [
   ["Ringkasan", "Judul wajib. Kolom lain boleh kosong. Status: draft, submitted, closed. Keputusan: go (siap), no-go (belum siap), conditional (siap dengan catatan); wajib untuk submitted/closed."],
   ["Test case", "Satu baris = satu pengujian. Status: belum, lulus, gagal, terblokir, dilewati (atau todo, pass, fail, blocked, skipped). Langkah: satu per baris di dalam sel (Alt+Enter)."],
   ["Temuan", "Satu baris = satu masalah. Severity: blocker (tidak bisa dipakai), critical (kritis), major (fitur terganggu), minor (gangguan kecil), trivial (tampilan). Prioritas: P0 segera, P1 tinggi, P2 normal, P3 rendah."],
-  ["Lampiran", "Satu baris = satu berkas. Pemilik: Laporan, TC-01, atau F-01 sesuai Kode. Berkas: nama screenshot/log yang dipilih bersama Excel, atau attachments/nama.png dalam ZIP. Maks 10 MB/berkas, 30 berkas dan 100 MB/laporan."],
+  ["Lampiran", "Satu baris = satu berkas. Pemilik: Laporan, atau Kode test case/temuan (apa pun yang Anda tulis, mis. TC-01 atau LOGIN-3). Berkas: nama screenshot/log yang dipilih bersama Excel, atau attachments/nama.png dalam ZIP. Maks 10 MB/berkas, 30 berkas dan 100 MB/laporan."],
   ["Impor dengan lampiran", "Pilih Excel dan berkas lampiran bersama-sama di dashboard, atau ZIP berisi report.xlsx dan folder attachments/. Gambar yang hanya ditempel di sel Excel tidak diimpor; sertakan berkas gambarnya."],
-  ["Ref", "Biarkan Ref laporan/test case/temuan hasil ekspor untuk memperbarui laporan asal. Kosongkan untuk entri baru. Kode harus unik; Test case pada Temuan merujuk Kode TC yang ada."],
+  ["Ref", "Biarkan Ref laporan/test case/temuan hasil ekspor untuk memperbarui laporan asal. Kosongkan untuk entri baru."],
+  ["Kode", "Bebas Anda tentukan (mis. LOGIN-01, AUTH.3), asal unik di seluruh laporan \u2014 test case dan temuan tidak boleh sama, huruf besar/kecil dianggap sama. Kosongkan untuk nomor otomatis (TC-01 / F-01). Test case pada Temuan merujuk Kode test case."],
   ["Lingkungan", "Satu per baris: os=Windows 11, browser=Chrome, device=Laptop, url=https://\u2026 ."]
 ];
 function writeQaWorkbook(d, paths2 = {}) {
@@ -79953,7 +80020,7 @@ function parseQaWorkbook(buf) {
   const rowOf = (k) => Math.max(1, summary.findIndex((r) => norm3(r[0] ?? "") === norm3(k)) + 1);
   if (!val("Judul").trim()) fail3("Ringkasan", rowOf("Judul"), "Judul wajib diisi");
   const environment = /* @__PURE__ */ Object.create(null);
-  for (const line of val("Lingkungan").split("\n").filter((l) => l.trim())) {
+  for (const line of val("Lingkungan").split(/\r\n|\r|\n|;(?=\s*[^=:;\s]+\s*[=:])/).filter((l) => l.trim())) {
     const match = /^\s*([^=:]+)[=:]\s*(.*)$/.exec(line);
     if (!match) fail3("Ringkasan", rowOf("Lingkungan"), "Lingkungan: gunakan kunci=nilai, satu per baris");
     environment[match[1].trim()] = match[2];
@@ -79983,48 +80050,64 @@ function parseQaWorkbook(buf) {
     if (e instanceof QaTableError) throw new XlsxError(`Test case, ${e.message}`);
     throw e;
   }
-  const codes = /* @__PURE__ */ new Set();
+  const rows = read2("Temuan");
+  const headers = rows[0]?.map(norm3) ?? [];
+  for (const h2 of ["judul", "severity", "prioritas", "langkah", "expected", "actual"]) if (!headers.includes(h2)) fail3("Temuan", 1, `kolom ${h2} wajib ada`);
+  const getF = (r, k) => r[headers.indexOf(norm3(k))] ?? "";
+  const findingRows = rows.slice(1).map((r, i) => ({ r, row: i + 2 })).filter(({ r }) => !r.every((v) => !v.trim()));
+  const used = /* @__PURE__ */ new Map();
+  const claim = (sheet, row, code) => {
+    if (norm3(code) === "laporan") fail3(sheet, row, 'Kode "Laporan" dicadangkan untuk lampiran laporan');
+    if (used.has(qaCodeKey(code))) fail3(sheet, row, `Kode ${code} dipakai ${used.get(qaCodeKey(code))}; kode harus unik`);
+    used.set(qaCodeKey(code), `${sheet}`);
+  };
+  for (const c of cases) if (c.code.trim()) claim("Test case", c.row, c.code.trim());
+  for (const { r, row } of findingRows) if (getF(r, "Kode").trim()) claim("Temuan", row, getF(r, "Kode").trim());
+  const autoCode = (prefix, counter2) => {
+    let code;
+    do {
+      code = `${prefix}${String(++counter2.n).padStart(2, "0")}`;
+    } while (used.has(qaCodeKey(code)));
+    return code;
+  };
+  const caseCounter = { n: 0 };
+  const caseByKey = /* @__PURE__ */ new Map();
   const refs2 = /* @__PURE__ */ new Set();
-  for (const [i, c] of cases.entries()) {
-    const code = c.code || `TC-${String(i + 1).padStart(2, "0")}`;
-    if (!/^TC-\d+$/.test(code) || codes.has(code)) fail3("Test case", c.row, "Kode harus unik dan berformat TC-01");
+  for (const c of cases) {
+    const customCode = c.code.trim() || null;
+    const code = customCode ?? autoCode("TC-", caseCounter);
     if (c.ref && refs2.has(c.ref)) fail3("Test case", c.row, "Ref berulang");
-    codes.add(code);
     if (c.ref) refs2.add(c.ref);
     const result = zCreateQaCase.safeParse({ title: c.title, steps: c.steps ?? "", expected: c.expected ?? "", actual: c.actual ?? "", status: c.status ?? "todo" });
     if (!result.success) fail3("Test case", c.row, result.error.issues.map((e) => `${e.path}: ${e.message}`).join("; "));
-    parsed.cases.push({ ...result.data, id: c.ref, code, attachments: [] });
+    caseByKey.set(qaCodeKey(code), code);
+    parsed.cases.push({ ...result.data, id: c.ref, code, customCode, attachments: [] });
   }
-  const rows = read2("Temuan");
-  const headers = rows[0]?.map(norm3) ?? [];
-  for (const h2 of ["judul", "severity", "prioritas", "langkah", "expected", "actual"]) if (!headers.includes(h2)) fail3("Temuan", 1, `kolom ${h2} wajib ada`);
-  const findingCodes = /* @__PURE__ */ new Set();
+  const findingCounter = { n: 0 };
   const findingRefs = /* @__PURE__ */ new Set();
-  for (let i = 1; i < rows.length; i++) {
-    const r = rows[i];
-    if (r.every((v) => !v.trim())) continue;
-    const get = (k) => r[headers.indexOf(norm3(k))] ?? "";
-    const code = get("Kode") || `F-${String(parsed.findings.length + 1).padStart(2, "0")}`;
-    if (!/^F-\d+$/.test(code) || findingCodes.has(code)) fail3("Temuan", i + 1, "Kode harus unik dan berformat F-01");
-    findingCodes.add(code);
+  for (const { r, row } of findingRows) {
+    const get = (k) => getF(r, k);
+    const customCode = get("Kode").trim() || null;
+    const code = customCode ?? autoCode("F-", findingCounter);
     const id2 = get("Ref") || null;
-    if (id2 && findingRefs.has(id2)) fail3("Temuan", i + 1, "Ref berulang");
+    if (id2 && findingRefs.has(id2)) fail3("Temuan", row, "Ref berulang");
     if (id2) findingRefs.add(id2);
-    const caseCode = get("Test case").trim() || null;
-    if (caseCode && !codes.has(caseCode)) fail3("Temuan", i + 1, `Test case ${caseCode} tidak ditemukan`);
-    const status2 = choice(get("Status") || "open", QA_FINDING_STATUSES, "Temuan", i + 1);
+    const caseRef = get("Test case").trim();
+    const caseCode = caseRef ? caseByKey.get(qaCodeKey(caseRef)) ?? null : null;
+    if (caseRef && !caseCode) fail3("Temuan", row, `Test case ${caseRef} tidak ditemukan`);
+    const status2 = choice(get("Status") || "open", QA_FINDING_STATUSES, "Temuan", row);
     const result = zCreateQaFinding.safeParse({
       title: get("Judul"),
-      severity: choice(get("Severity") || "major", QA_SEVERITIES, "Temuan", i + 1),
-      priority: choice(get("Prioritas") || "P2", QA_PRIORITIES, "Temuan", i + 1),
+      severity: choice(get("Severity") || "major", QA_SEVERITIES, "Temuan", row),
+      priority: choice(get("Prioritas") || "P2", QA_PRIORITIES, "Temuan", row),
       area: get("Area"),
       steps: get("Langkah").split("\n").map((s2) => s2.trim().replace(/^\d+[.)]\s+/, "")).filter(Boolean),
       expected: get("Expected"),
       actual: get("Actual"),
       status: status2 === "sent" ? "open" : status2
     });
-    if (!result.success) fail3("Temuan", i + 1, result.error.issues.map((e) => `${e.path}: ${e.message}`).join("; "));
-    parsed.findings.push({ ...result.data, status: status2, id: id2, code, caseId: null, caseCode, attachments: [] });
+    if (!result.success) fail3("Temuan", row, result.error.issues.map((e) => `${e.path}: ${e.message}`).join("; "));
+    parsed.findings.push({ ...result.data, status: status2, id: id2, code, customCode, caseId: null, caseCode, attachments: [] });
   }
   const attachments = read2("Lampiran");
   if (norm3(attachments[0]?.[0] ?? "") !== "pemilik" || norm3(attachments[0]?.[1] ?? "") !== "berkas") fail3("Lampiran", 1, "butuh kolom Pemilik dan Berkas");
@@ -80032,7 +80115,7 @@ function parseQaWorkbook(buf) {
     const [owner = "", path = ""] = attachments[i];
     if (!owner.trim() && !path.trim()) continue;
     if (!path.trim() || path.includes("\\") || path.startsWith("/") || path.split("/").some((p3) => p3 === ".." || p3 === "." || !p3)) fail3("Lampiran", i + 1, "Berkas harus nama berkas atau path relatif yang aman");
-    const target3 = norm3(owner) === "laporan" ? parsed.attachments : parsed.cases.find((c) => c.code === owner.trim())?.attachments ?? parsed.findings.find((f) => f.code === owner.trim())?.attachments;
+    const target3 = norm3(owner) === "laporan" ? parsed.attachments : parsed.cases.find((c) => qaCodeKey(c.code) === qaCodeKey(owner))?.attachments ?? parsed.findings.find((f) => qaCodeKey(f.code) === qaCodeKey(owner))?.attachments;
     if (!target3) fail3("Lampiran", i + 1, `Pemilik "${owner}" tidak ditemukan; gunakan Laporan atau Kode TC/F yang ada`);
     target3.push(path.trim());
   }
@@ -80156,7 +80239,7 @@ async function importReport(projectId, file, companions = []) {
     const caseByFileId = /* @__PURE__ */ new Map();
     const caseByCode = /* @__PURE__ */ new Map();
     for (const [idx, c] of parsed.cases.entries()) {
-      const fields = { title: c.title, steps: c.steps, expected: c.expected, actual: c.actual, status: c.status, order: idx + 1 };
+      const fields = { code: c.customCode, title: c.title, steps: c.steps, expected: c.expected, actual: c.actual, status: c.status, order: idx + 1 };
       const row = c.id && knownCases.has(c.id) ? await tx.qaCase.update({ where: { id: c.id }, data: fields }) : await tx.qaCase.create({ data: { reportId: report.id, ...fields, createdAt: new Date(now + 1 + idx) } });
       if (c.id) caseByFileId.set(c.id, row.id);
       caseByCode.set(c.code, row.id);
@@ -80167,6 +80250,7 @@ async function importReport(projectId, file, companions = []) {
     for (const [idx, f] of parsed.findings.entries()) {
       const caseId = f.caseId && caseByFileId.get(f.caseId) || f.caseCode && caseByCode.get(f.caseCode) || null;
       const fields = {
+        code: f.customCode,
         caseId,
         title: f.title,
         severity: f.severity,
@@ -80249,6 +80333,20 @@ async function importCases(projectId, reportId, file) {
   const result = await prisma.$transaction(async (tx) => {
     const existing = new Map((await tx.qaCase.findMany({ where: { reportId } })).map((c) => [c.id, c]));
     let maxOrder = Math.max(0, ...[...existing.values()].map((c) => c.order));
+    const findings = await tx.qaFinding.findMany({ where: { reportId }, select: { code: true } });
+    const shown = new Map(caseViews([...existing.values()], takenCodes([...existing.values()], findings)).map((c) => [c.id, c.code]));
+    const owner = /* @__PURE__ */ new Map();
+    for (const c of existing.values()) if (c.code) owner.set(qaCodeKey(c.code), c.id);
+    for (const f of findings) if (f.code) owner.set(qaCodeKey(f.code), "finding");
+    const wanted = (r, id2, current) => {
+      const code = r.code.trim();
+      if (!code || code === current) return void 0;
+      if (qaCodeKey(code) === "laporan") throw new QaImportError(400, `baris ${r.row}: kode "Laporan" dicadangkan`);
+      const holder = owner.get(qaCodeKey(code));
+      if (holder && holder !== id2) throw new QaImportError(400, `baris ${r.row}: kode ${code} sudah dipakai; kode harus unik`);
+      owner.set(qaCodeKey(code), id2);
+      return code;
+    };
     const out4 = { updated: 0, created: 0, unchanged: 0 };
     for (const [i, r] of parsed.entries()) {
       const cur = r.ref ? existing.get(r.ref) : void 0;
@@ -80260,18 +80358,21 @@ async function importCases(projectId, reportId, file) {
           actual: r.actual ?? cur.actual,
           status: r.status ?? cur.status
         };
-        if (next.title === cur.title && next.steps === cur.steps && next.expected === cur.expected && next.actual === cur.actual && next.status === cur.status) {
+        const code2 = wanted(r, cur.id, shown.get(cur.id));
+        if (!code2 && next.title === cur.title && next.steps === cur.steps && next.expected === cur.expected && next.actual === cur.actual && next.status === cur.status) {
           out4.unchanged++;
           continue;
         }
-        await tx.qaCase.update({ where: { id: cur.id }, data: next });
+        await tx.qaCase.update({ where: { id: cur.id }, data: code2 ? { ...next, code: code2 } : next });
         changed.push(cur.id);
         out4.updated++;
         continue;
       }
       if (!r.title) throw new QaImportError(400, `baris ${r.row}: judul wajib diisi (Ref "${r.ref}" tak dikenal di laporan ini)`);
+      const code = wanted(r, `new-${i}`, void 0);
       const made = await tx.qaCase.create({ data: {
         reportId,
+        code: code ?? null,
         title: r.title,
         steps: r.steps ?? "",
         expected: r.expected ?? "",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hanoman",
-  "version": "0.9.14",
+  "version": "0.9.16",
   "description": "Orchestrator + dashboard workflow docs-driven untuk sesi Claude Code / Codex",
   "type": "module",
   "repository": {

package/prisma/migrations/20261005120000_qa_free_code/migration.sql

@@ -0,0 +1,3 @@
+-- ADR-0176 · kode test case & temuan QA bebas ketikan QA (nullable; null = nomor otomatis)
+ALTER TABLE "QaCase" ADD COLUMN "code" TEXT;
+ALTER TABLE "QaFinding" ADD COLUMN "code" TEXT;

package/prisma/schema.prisma

@@ -1088,6 +1088,7 @@ model QaReport {
 model QaCase {
   id        String   @id @default(cuid())
   reportId  String
+  code      String?  // kode bebas ketikan QA (ADR-0176); null = nomor otomatis TC-nn. Unik per laporan (digerbang service)
   title     String
   steps     String   @default("")
   expected  String   @default("")
@@ -1108,6 +1109,7 @@ model QaFinding {
   id        String   @id @default(cuid())
   reportId  String
   caseId    String?
+  code      String?  // kode bebas ketikan QA (ADR-0176); null = nomor otomatis F-nn. Unik per laporan (digerbang service)
   title     String
   severity  String   @default("major") // blocker | critical | major | minor | trivial
   priority  String   @default("P2")    // P0..P3 — terpisah dari severity