hanoman 0.9.29 → 0.9.30

package/dist/server.js

@@ -5575,7 +5575,7 @@ function resolvePhasePlan(input) {
   if (!input.nativeAgents || cfg?.enabled === false) return null;
   const cells = cfg?.[input.runtime] ?? {};
   const coerce3 = input.runtime === "codex" ? coerceCodexEffort : coerceClaudeEffort;
-  const resolve25 = (key, fallback2) => {
+  const resolve25 = (key, fallback3) => {
     const cell4 = cells[key];
     const override = input.phaseOverrides?.[key];
     if (input.runtime === "antigravity") {
@@ -5587,9 +5587,9 @@ function resolvePhasePlan(input) {
       }
       return { model: model2, effort: null };
     }
-    const picked = override?.model ?? cell4?.model ?? fallback2.model;
+    const picked = override?.model ?? cell4?.model ?? fallback3.model;
     const model = input.runtime === "claude" && picked === CLAUDE_DEFAULT_ALIAS ? CLAUDE_SUBAGENT_INHERIT : picked;
-    return { model, effort: coerce3(model, override?.effort ?? cell4?.effort ?? fallback2.effort ?? "medium") };
+    return { model, effort: coerce3(model, override?.effort ?? cell4?.effort ?? fallback3.effort ?? "medium") };
   };
   const reviewer = REVIEWER_FLOWS.has(input.flow) ? {
     agentName: phaseAgentName(REVIEWER_CELL),
@@ -9122,6 +9122,17 @@ var init_config_registry = __esm({
       // runtime
       { key: "HANOMAN_EVENTS_TICK_MS", group: "runtime", label: "Interval events (ms)", kind: "int", apply: "live", category: "knob", example: "1000", default: "1000", min: 100 },
       { key: "HANOMAN_UPDATE_FETCH", group: "runtime", label: "Deteksi update saat boot", kind: "bool", apply: "live", category: "knob", default: "1" },
+      // ADR-0224 · limit Antigravity membaca token agy di Keychain dan memanggil Cloud Code API Google.
+      {
+        key: "HANOMAN_ANTIGRAVITY_LIMITS_FETCH",
+        group: "runtime",
+        label: "Baca limit Antigravity",
+        kind: "bool",
+        apply: "live",
+        category: "knob",
+        default: "1",
+        help: "Membaca token agy di Keychain macOS lalu memanggil API kuota Google (endpoint internal, tak terdokumentasi). Matikan bila tak ingin hanoman menyentuh kredensial agy."
+      },
       // SPEC-398 · ADR-0087 · deteksi update kini membandingkan semver dengan registry npm, bukan
       // menghitung commit di repo git (HANOMAN_REPO_ROOT dicabut bersama jalur git itu).
       {
@@ -14235,6 +14246,18 @@ var init_system = __esm({
         build: () => ({ method: "GET", path: "/limits/codex" }),
         shape: (raw) => raw
       },
+      {
+        name: "hanoman_limits_antigravity",
+        title: "Sisa kuota Antigravity",
+        description: "Sisa kuota Antigravity CLI (agy) per grup model (Gemini; Claude/GPT) untuk jendela mingguan dan 5 jam, berikut kapan resetnya. Dibaca live dari Cloud Code API Google memakai token agy yang sedang hidup dan di-cache 60 detik; token yang kedaluwarsa (agy tak berjalan) memberi `stale` atau `unavailable`, bukan angka karangan. Endpoint terpisah dari hanoman_limits karena sumbernya beda. Tak menuntut capability apa pun.",
+        inputSchema: obj({ properties: {} }),
+        mode: "read",
+        capability: null,
+        samplePath: "/limits/antigravity",
+        sampleMethod: "GET",
+        build: () => ({ method: "GET", path: "/limits/antigravity" }),
+        shape: (raw) => raw
+      },
       {
         name: "hanoman_overview_get",
         title: "Ringkasan kinerja hari ini (Overview)",
@@ -63404,7 +63427,7 @@ function parseCodexVersion(out4) {
   return m ? `${m[1]}.${m[2]}.${m[3]}` : null;
 }
 async function getCodexVersion(now = Date.now()) {
-  if (cache3 && now - cache3.at < TTL_MS4) return cache3.version;
+  if (cache3 && now - cache3.at < TTL_MS5) return cache3.version;
   const version = await probeCodexVersion();
   cache3 = { at: now, version };
   return version;
@@ -63420,7 +63443,7 @@ async function codexVersionInfo() {
 function _resetCodexVersionCache() {
   cache3 = null;
 }
-var run3, CODEX_MIN_CLIENT, TTL_MS4, cache3, codexBin2, runVersion;
+var run3, CODEX_MIN_CLIENT, TTL_MS5, cache3, codexBin2, runVersion;
 var init_codex_version = __esm({
   "src/services/codex-version.ts"() {
     "use strict";
@@ -63429,7 +63452,7 @@ var init_codex_version = __esm({
     init_config2();
     run3 = promisify16(execFile17);
     CODEX_MIN_CLIENT = "0.144.0";
-    TTL_MS4 = 5 * 6e4;
+    TTL_MS5 = 5 * 6e4;
     cache3 = null;
     codexBin2 = () => effectiveStr("HANOMAN_CODEX_BIN") ?? "codex";
     runVersion = async (bin, args) => {
@@ -63440,17 +63463,17 @@ var init_codex_version = __esm({
 });
 
 // src/services/agent-tool-catalog.ts
-import { readFileSync as readFileSync25 } from "node:fs";
-import { homedir as homedir12 } from "node:os";
-import { join as join47 } from "node:path";
+import { readFileSync as readFileSync26 } from "node:fs";
+import { homedir as homedir13 } from "node:os";
+import { join as join48 } from "node:path";
 function mcpServerNames(repoDir) {
   const names = [];
-  const claudeJson = readJson2(join47(home(), ".claude.json"));
+  const claudeJson = readJson2(join48(home(), ".claude.json"));
   names.push(...serversOf(claudeJson));
   if (repoDir) {
     const projects = claudeJson?.projects;
     if (projects && typeof projects === "object") names.push(...serversOf(projects[repoDir]));
-    names.push(...serversOf(readJson2(join47(repoDir, ".mcp.json"))));
+    names.push(...serversOf(readJson2(join48(repoDir, ".mcp.json"))));
   }
   names.push(...codexServers());
   return [...new Set(names.filter(Boolean))].sort((a, b) => a.localeCompare(b));
@@ -63463,10 +63486,10 @@ var init_agent_tool_catalog = __esm({
   "src/services/agent-tool-catalog.ts"() {
     "use strict";
     init_src();
-    home = () => process.env.HOME || homedir12();
+    home = () => process.env.HOME || homedir13();
     readJson2 = (path) => {
       try {
-        return JSON.parse(readFileSync25(path, "utf8"));
+        return JSON.parse(readFileSync26(path, "utf8"));
       } catch {
         return null;
       }
@@ -63479,7 +63502,7 @@ var init_agent_tool_catalog = __esm({
     codexServers = () => {
       let text2;
       try {
-        text2 = readFileSync25(join47(home(), ".codex", "config.toml"), "utf8");
+        text2 = readFileSync26(join48(home(), ".codex", "config.toml"), "utf8");
       } catch {
         return [];
       }
@@ -76879,6 +76902,10 @@ async function fail(req, deps, reason, flowId = null, step = null) {
 // src/services/lead/detect.ts
 var answers = /* @__PURE__ */ new Map();
 var capped = /* @__PURE__ */ new Set();
+function askSignature(a) {
+  const raw = a.questions.length ? a.questions.map((q2) => q2.question).join("\n") : a.message;
+  return raw.toLowerCase().replace(/\s+/g, " ").trim().slice(0, 2e3);
+}
 var failures = /* @__PURE__ */ new Map();
 var failCapped = /* @__PURE__ */ new Set();
 var failedAt = /* @__PURE__ */ new Map();
@@ -76950,7 +76977,9 @@ async function admitAsk(s2, deps = prodDetectDeps) {
   if (!(await deps.optIn()).includes(s2.projectId)) return no("project tak opt-in lead");
   if (!leadActive(cfg, s2.projectId)) return no("lead dijeda untuk project ini");
   if (deps.exited(s2.id)) return no("pane mati");
-  if ((answers.get(s2.id) ?? 0) >= cfg.maxAutoAnswers) {
+  const run6 = answers.get(s2.id);
+  const looping = !!run6 && (s2.sig === void 0 || s2.sig === run6.sig);
+  if (run6 && looping && run6.n >= cfg.maxAutoAnswers) {
     if (!capped.has(s2.id)) {
       capped.add(s2.id);
       const row = await recordDecision({
@@ -76959,9 +76988,9 @@ async function admitAsk(s2, deps = prodDetectDeps) {
         sessionId: s2.id,
         gate: "detected",
         kind: "quality",
-        question: `Sesi ${s2.id} sudah dijawab otomatis ${cfg.maxAutoAnswers}\xD7 berturut-turut.`,
-        answer: "Berhenti menjawab sesi ini; serahkan ke operator.",
-        reason: "Batas jawaban otomatis per sesi tercapai \u2014 pengulangan menandakan lead tak benar-benar membuka jalan buntunya (AC-11).",
+        question: `Sesi ${s2.id} sudah dijawab otomatis ${cfg.maxAutoAnswers}\xD7 berturut-turut untuk pertanyaan yang sama.`,
+        answer: "Berhenti menjawab pertanyaan ini; serahkan ke operator.",
+        reason: "Pertanyaan yang sama terus kembali sesudah dijawab \u2014 pengulangan menandakan lead tak benar-benar membuka jalan buntunya (AC-11, ADR-0223).",
         refs: [],
         confidence: "tinggi",
         action: "none",
@@ -77017,7 +77046,13 @@ async function answerAsk(ask, s2, deps = prodDetectDeps) {
   const out4 = { at: chain.at, flowId: chain.flowId, step: chain.step };
   if (chain.acted && chain.done) {
     if (s2.decisionFile) deps.clearMarker(s2.decisionFile);
-    answers.set(ask.sessionId, (answers.get(ask.sessionId) ?? 0) + 1);
+    const sig = askSignature(ask);
+    const prev = answers.get(ask.sessionId);
+    if (prev?.sig === sig) prev.n++;
+    else {
+      answers.set(ask.sessionId, { sig, n: 1 });
+      capped.delete(ask.sessionId);
+    }
     failures.delete(ask.sessionId);
     return { answered: true, reason: "", ...out4 };
   }
@@ -77025,7 +77060,7 @@ async function answerAsk(ask, s2, deps = prodDetectDeps) {
     failures.set(ask.sessionId, (failures.get(ask.sessionId) ?? 0) + 1);
     failedAt.set(ask.sessionId, deps.now());
   }
-  return { answered: false, reason: chain.reason, ...out4 };
+  return { answered: false, reason: chain.reason, ...out4, ...chain.mismatch ? { mismatch: true } : {} };
 }
 async function runChain(ask, s2, deps) {
   const sid = ask.sessionId;
@@ -77043,6 +77078,7 @@ async function runChain(ask, s2, deps) {
     return { ...r, flowId, step };
   };
   const stop = (reason, failed = false) => ({ acted, done: false, failed, reason, at, flowId, step });
+  const asked = ask.source === "ask-tool";
   if (ask.source === "turn-end") {
     const read2 = readCodexTurn(ask.message);
     if (!read2.asking) return stop(read2.reason);
@@ -77079,6 +77115,13 @@ async function runChain(ask, s2, deps) {
       // `tunggal` di tiap langkah — `chainSteps` kosong tepat di tempat yang paling membutuhkannya.
       chain: true
     };
+    if (asked && q2) {
+      const seen2 = await waitDialogFor(sid, q2, ask.questions, deps);
+      if (seen2 === "none") return stop("dialog tak muncul di pane \u2014 tak ada yang diketik", true);
+      if (seen2 === "other") {
+        return i === 0 ? { ...stop("dialog di pane adalah pertanyaan lain \u2014 tak ada yang diketik"), mismatch: true } : stop("dialog di pane bukan pertanyaan berikutnya rantai ini \u2014 tak ada yang diketik");
+      }
+    }
     let row;
     try {
       row = await deps.decide({ ...req, flowId }, deps.decideDeps);
@@ -77102,9 +77145,11 @@ async function runChain(ask, s2, deps) {
     if (!row) return stop("lead tak menghasilkan keputusan yang berlaku");
     if (row.status !== "berlaku") return stop("lead tak menghasilkan keputusan yang berlaku", true);
     let before2 = "";
-    if (ask.source === "ask-tool") {
-      const text2 = await waitDialog(sid, deps);
-      if (text2 === null) return stop("dialog tak muncul di pane \u2014 tak ada yang diketik", true);
+    if (asked && q2) {
+      const text2 = deps.pane(sid);
+      const screen = readDialogScreen(text2);
+      if (!screen || !dialogFits(screen, q2, ask.questions))
+        return stop("layar dialog berubah selagi lead memutuskan \u2014 tak ada yang diketik");
       before2 = dialogKey(text2);
     }
     if (isTakenOver(sid)) return stop("diambil alih operator");
@@ -77136,13 +77181,29 @@ async function afterLastAnswer(id2, deps) {
   }
   return "pending";
 }
-async function waitDialog(id2, deps) {
+async function waitDialogFor(id2, q2, all, deps) {
+  let sawDialog = false;
   for (let i = 0; i < DIALOG_WAIT_TRIES; i++) {
-    const text2 = deps.pane(id2);
-    if (readDialogScreen(text2)) return text2;
+    const screen = readDialogScreen(deps.pane(id2));
+    if (screen?.kind === "question") {
+      if (dialogFits(screen, q2, all)) return "fit";
+      sawDialog = true;
+    }
     await deps.sleep(CHAIN_POLL_MS);
   }
-  return null;
+  return sawDialog ? "other" : "none";
+}
+var bare = (s2) => s2.toLowerCase().replace(/[^\p{L}\p{N}]+/gu, "");
+function dialogFits(screen, q2, all) {
+  if (screen.kind !== "question") return false;
+  if (screen.tabs.length && screen.tabs.length !== all.length) return false;
+  const title = bare(screen.title);
+  const text2 = bare(q2.question);
+  if (title.length >= 6 && text2 && !text2.startsWith(title) && !title.startsWith(text2)) return false;
+  const labels = q2.options.map((o) => bare(o.label)).filter(Boolean);
+  const shown = screen.options.map(bare).filter(Boolean);
+  if (labels.length && shown.length && !shown.some((s2) => labels.some((l) => l.startsWith(s2) || s2.startsWith(l)))) return false;
+  return true;
 }
 async function waitScreenChange(id2, before2, deps) {
   for (let i = 0; i < CHAIN_POLL_TRIES; i++) {
@@ -77157,6 +77218,8 @@ init_pty();
 var ASK_BUCKET = { capacity: 5, refillMs: 1e4 };
 var GLOBAL_BUCKET = { capacity: 20, refillMs: 500 };
 var SEEN_MAX = 512;
+var ASK_QUEUE_MAX = 8;
+var ASK_MISMATCH_MAX = 2;
 var entries = /* @__PURE__ */ new Map();
 var seen = [];
 var seenSet = /* @__PURE__ */ new Set();
@@ -77236,7 +77299,8 @@ async function intakeAsk(input, deps = prodAskDeps) {
   const verdict = await deps.admit({
     id: input.sessionId,
     specId: input.specId,
-    projectId: input.projectId
+    projectId: input.projectId,
+    sig: askSignature(input.event)
   });
   if (!verdict.ok) return { status: "rejected", reason: verdict.reason };
   seenSet.add(key);
@@ -77252,12 +77316,16 @@ async function intakeAsk(input, deps = prodAskDeps) {
   };
   const ask = toAsk({ sessionId: input.sessionId, agent: input.agent, event: input.event, now });
   const cur = entries.get(input.sessionId);
-  if (cur?.running) {
-    cur.pending = { ask, ctx };
+  if (cur?.busy) {
+    cur.queue.push({ ask, ctx, skips: 0 });
+    if (cur.queue.length > ASK_QUEUE_MAX) {
+      const dropped = cur.queue.shift();
+      console.log(`lead ask ${input.sessionId}: antrean penuh \u2014 tanya ${dropped.ask.askId} dibuang`);
+    }
     return { status: "accepted" };
   }
   clearTakeover(input.sessionId);
-  entries.set(input.sessionId, { ask, ctx, pending: null, running: false });
+  entries.set(input.sessionId, { ask, ctx, skips: 0, queue: [], busy: true, running: false });
   void prune(deps);
   void run2(input.sessionId, deps);
   return { status: "accepted" };
@@ -77311,16 +77379,19 @@ async function run2(sessionId2, deps) {
         step: r.step,
         state: r.answered ? "answered" : "failed"
       };
-      if (!e.pending) break;
-      const next = e.pending;
-      e.pending = null;
+      if (r.mismatch && e.queue.length && e.skips < ASK_MISMATCH_MAX)
+        e.queue.push({ ask: { ...e.ask, state: "queued" }, ctx: e.ctx, skips: e.skips + 1 });
+      const next = e.queue.shift();
+      if (!next) break;
       e.ask = next.ask;
       e.ctx = next.ctx;
+      e.skips = next.skips;
     }
   } finally {
     clearQueued(sessionId2);
     clearDeciding(sessionId2);
     e.running = false;
+    e.busy = false;
     inFlight3--;
     const nextId = waiting.shift();
     if (nextId) void run2(nextId, deps);
@@ -79247,10 +79318,131 @@ async function getCodexLimits(dir2) {
   return dto;
 }
 
+// src/services/antigravity-limits.ts
+init_config2();
+import { execFileSync as execFileSync9 } from "node:child_process";
+import { readFileSync as readFileSync25 } from "node:fs";
+import { homedir as homedir12 } from "node:os";
+import { join as join44 } from "node:path";
+var QUOTA_URL = "https://cloudcode-pa.googleapis.com/v1internal:retrieveUserQuotaSummary";
+var USER_AGENT = "antigravity (hanoman)";
+var TTL_MS4 = 6e4;
+var EXPIRY_SKEW_MS = 3e4;
+var lastOk2 = null;
+var freshUntil3 = 0;
+var UNAVAILABLE2 = { status: "unavailable", windows: [], fetchedAt: null };
+var securityRun2 = (args) => execFileSync9("security", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+function readAgyToken(run6 = securityRun2) {
+  try {
+    let raw = run6(["find-generic-password", "-s", "gemini", "-a", "antigravity", "-w"]).trim();
+    const prefix = "go-keyring-base64:";
+    if (raw.startsWith(prefix)) raw = Buffer.from(raw.slice(prefix.length), "base64").toString("utf8");
+    const tok = JSON.parse(raw)?.token;
+    if (typeof tok?.access_token !== "string" || !tok.access_token) return null;
+    const expiry = typeof tok.expiry === "string" ? Date.parse(tok.expiry) : NaN;
+    return { accessToken: tok.access_token, expiry: Number.isFinite(expiry) ? expiry : null };
+  } catch {
+    return null;
+  }
+}
+var agyHome = () => join44(homedir12(), ".gemini", "antigravity-cli");
+function defaultProject() {
+  try {
+    return readFileSync25(join44(agyHome(), "cache", "default_project_id.txt"), "utf8").trim() || null;
+  } catch {
+    return null;
+  }
+}
+var severityOf2 = (pct3) => pct3 >= 90 ? "critical" : pct3 >= 70 ? "warning" : "normal";
+function windowLabel2(window2) {
+  if (window2 === "5h") return "Sesi 5 jam";
+  if (window2 === "weekly") return "Mingguan";
+  return window2;
+}
+function groupLabel(name2) {
+  if (/^gemini/i.test(name2)) return "Gemini";
+  if (/claude/i.test(name2) && /gpt/i.test(name2)) return "Claude/GPT";
+  return name2;
+}
+function mapQuota(json) {
+  const groups = json?.groups;
+  if (!Array.isArray(groups)) return [];
+  return groups.flatMap((g) => {
+    const group2 = groupLabel(g.displayName ?? "");
+    return (Array.isArray(g.buckets) ? g.buckets : []).flatMap((b) => {
+      if (typeof b.remainingFraction !== "number" || !b.bucketId) return [];
+      const remaining = Math.max(0, Math.min(1, b.remainingFraction));
+      const usedPct = Math.round((1 - remaining) * 100);
+      const label2 = windowLabel2(b.window ?? "");
+      return [{
+        key: `antigravity:${b.bucketId}`,
+        label: group2 ? `${group2} \xB7 ${label2}` : label2,
+        usedPct,
+        resetsAt: b.resetTime ?? null,
+        severity: severityOf2(usedPct),
+        // API tak punya padanan `is_active` claude. Yang paling dekat: bucket yang HABIS.
+        isActive: remaining === 0
+      }];
+    });
+  });
+}
+function fallback2() {
+  return lastOk2 ? { ...lastOk2, status: "stale" } : UNAVAILABLE2;
+}
+var prodDeps = {
+  platform: process.platform,
+  // `HANOMAN_ANTIGRAVITY_LIMITS_FETCH=0` mematikan sumbernya sama sekali (cermin
+  // `HANOMAN_UPDATE_FETCH`): suite test server berjalan di macOS operator, dan route ini tak boleh
+  // membaca Keychain asli lalu memanggil Google dari dalam test.
+  token: () => effectiveStr("HANOMAN_ANTIGRAVITY_LIMITS_FETCH") === "0" ? null : readAgyToken(),
+  project: defaultProject,
+  fetch: (...a) => fetch(...a),
+  now: Date.now
+};
+async function fetchQuota(deps) {
+  if (deps.platform !== "darwin") return fallback2();
+  const tok = deps.token();
+  if (!tok) return fallback2();
+  if (tok.expiry !== null && tok.expiry - EXPIRY_SKEW_MS <= deps.now()) return fallback2();
+  const project = deps.project();
+  try {
+    const res = await deps.fetch(QUOTA_URL, {
+      method: "POST",
+      headers: {
+        authorization: `Bearer ${tok.accessToken}`,
+        "content-type": "application/json",
+        "user-agent": USER_AGENT
+      },
+      body: JSON.stringify(project ? { project } : {}),
+      // Endpoint yang menggantung tak boleh menumpuk koneksi di bawah siar 30 dtk (SPEC-197).
+      signal: AbortSignal.timeout(5e3)
+    });
+    if (!res.ok) return fallback2();
+    const windows = mapQuota(await res.json());
+    if (!windows.length) return fallback2();
+    const dto = {
+      status: "ok",
+      windows,
+      fetchedAt: new Date(deps.now()).toISOString()
+    };
+    lastOk2 = dto;
+    return dto;
+  } catch {
+    return fallback2();
+  }
+}
+async function getAntigravityLimits(deps = prodDeps) {
+  if (lastOk2 && deps.now() < freshUntil3) return lastOk2;
+  const dto = await fetchQuota(deps);
+  if (dto.status === "ok") freshUntil3 = deps.now() + TTL_MS4;
+  return dto;
+}
+
 // src/routes/limits.ts
 async function limits(app3) {
   app3.get("/limits", async () => getLimits());
   app3.get("/limits/codex", async () => getCodexLimits());
+  app3.get("/limits/antigravity", async () => getAntigravityLimits());
 }
 
 // src/routes/codex.ts
@@ -79266,7 +79458,7 @@ init_session_sandbox();
 import { execFile as execFile18 } from "node:child_process";
 import { promisify as promisify17 } from "node:util";
 var run4 = promisify17(execFile18);
-var TTL_MS5 = 5 * 6e4;
+var TTL_MS6 = 5 * 6e4;
 var unavailable = (error) => ({ version: null, error });
 var CHANGED2 = "Konfigurasi runtime berubah; periksa versi kembali.";
 function parseAntigravityVersion(output) {
@@ -79318,7 +79510,7 @@ function createAntigravityVersionService(deps = {}) {
       cache6 = void 0;
       pending2 = void 0;
     }
-    if (cache6 && now() - cache6.at < TTL_MS5) return Promise.resolve(cache6.info);
+    if (cache6 && now() - cache6.at < TTL_MS6) return Promise.resolve(cache6.info);
     if (pending2) return pending2;
     const startedGeneration = generation2;
     const request = probe().catch(() => unavailable("Versi Antigravity tidak dapat diperiksa.")).then((info) => {
@@ -79344,7 +79536,7 @@ init_src2();
 init_src();
 import { randomUUID as randomUUID14 } from "node:crypto";
 import { readFile as readFile8, writeFile as writeFile6, rename as rename5, mkdir as mkdir9, rm as rm9 } from "node:fs/promises";
-import { dirname as dirname18, join as join45 } from "node:path";
+import { dirname as dirname18, join as join46 } from "node:path";
 
 // src/services/model-catalog-parser.ts
 init_zod();
@@ -79451,7 +79643,7 @@ init_session_sandbox();
 import { spawn as spawn5 } from "node:child_process";
 import { mkdtemp as mkdtemp2, rm as rm8 } from "node:fs/promises";
 import { tmpdir as tmpdir9 } from "node:os";
-import { join as join44 } from "node:path";
+import { join as join45 } from "node:path";
 var MAX_BYTES = 4 * 1024 * 1024;
 var TIMEOUT_MS = 2e4;
 var quote3 = (s2) => "'" + s2.replaceAll("'", "'\\''") + "'";
@@ -79550,7 +79742,7 @@ function runCatalogCommand(command, agent, cwd, env, timeoutMs = TIMEOUT_MS) {
 }
 async function probeModelCatalog(agent) {
   assertAntigravityLaunch(agent);
-  const cwd = await mkdtemp2(join44(tmpdir9(), "hanoman-models-"));
+  const cwd = await mkdtemp2(join45(tmpdir9(), "hanoman-models-"));
   const env = agentEnvironment(agent, process.env);
   for (const key of ["HANOMAN_CLAUDE_BIN", "HANOMAN_CODEX_BIN", "HANOMAN_PODMAN_BIN", "HANOMAN_ANTIGRAVITY_BIN"]) {
     const value = effectiveStr(key);
@@ -79661,7 +79853,7 @@ async function writeModelCatalogCache(file, catalog, current = () => true) {
     await rm9(temp, { force: true });
   }
 }
-var cacheFile = () => join45(resolveHome(), "model-catalog.json");
+var cacheFile = () => join46(resolveHome(), "model-catalog.json");
 var modelCatalogService = createModelCatalogService({
   probe: probeModelCatalog,
   key: catalogProbeKey,
@@ -81158,6 +81350,9 @@ var GROUPS = [
   // ekor + cache 30s, jadi biayanya jauh di bawah panggilan jaringan claude. Frame lahir hanya saat
   // isinya berubah (dedup signature), dan snapshot codex baru bergerak saat ada sesi codex jalan.
   { everyTicks: 30, last: "", build: async () => ({ t: "codexLimits", limits: await getCodexLimits() }) },
+  // ADR-0224 · limit Antigravity — grup TERPISAH. Panggilan jaringan ber-cache 60 dtk di service, dan
+  // nol panggilan saat token agy kedaluwarsa; dedup signature membuat frame lahir saat isinya berubah.
+  { everyTicks: 30, last: "", build: async () => ({ t: "antigravityLimits", limits: await getAntigravityLimits() }) },
   // SPEC-214 · deteksi update jarang berubah; recompute tiap 300 dtk, dedup signature → siar hanya
   // saat status berubah. getUpdateStatus cache 15s + fetch ter-gate (server.ts) → attach tak menahan.
   { everyTicks: 300, last: "", build: async () => ({ t: "update", update: await getUpdateStatus() }) },
@@ -81585,7 +81780,7 @@ init_src();
 init_db();
 import { gunzipSync, gzipSync } from "node:zlib";
 import { mkdir as mkdir10, rename as rename6, writeFile as writeFile7 } from "node:fs/promises";
-import { join as join46 } from "node:path";
+import { join as join47 } from "node:path";
 
 // src/services/device-auth.ts
 function bearerToken2(req) {
@@ -81841,9 +82036,9 @@ async function sync_default(app3) {
       const deviceId = req.device.id;
       const withTranscriptKey = await Promise.all(parsed.data.entries.map(async (e) => {
         if (!e.transcript) return e;
-        const dir2 = join46(resolveDataDirs().home, "remote-transcripts", deviceId);
+        const dir2 = join47(resolveDataDirs().home, "remote-transcripts", deviceId);
         await mkdir10(dir2, { recursive: true, mode: 448 });
-        const final = join46(dir2, `${e.seq}.txt`);
+        const final = join47(dir2, `${e.seq}.txt`);
         const tmp = `${final}.tmp`;
         await writeFile7(tmp, e.transcript, { encoding: "utf8", mode: 384 });
         await rename6(tmp, final);
@@ -82238,7 +82433,10 @@ async function session_events_default(app3) {
       event
     });
     if (r.status === "duplicate") return reply.code(202).send({ duplicate: true });
-    if (r.status === "rate-limited") return reply.code(429).send({ error: "terlalu banyak event" });
+    if (r.status === "rate-limited") {
+      console.log(`lead ask ${sessionId2}: tanya ${event.askId} ditolak batas laju \u2014 menunggu manusia`);
+      return reply.code(429).send({ error: "terlalu banyak event" });
+    }
     if (r.status === "rejected") return reply.code(202).send({ rejected: true, reason: r.reason });
     return reply.code(202).send({ accepted: true });
   });
@@ -85126,8 +85324,8 @@ init_codex_trust();
 init_qa_attachment_transfer();
 init_uploads();
 import { createHash as createHash21 } from "node:crypto";
-import { execFileSync as execFileSync9 } from "node:child_process";
-import { join as join48 } from "node:path";
+import { execFileSync as execFileSync10 } from "node:child_process";
+import { join as join49 } from "node:path";
 var QaSessionError = class extends Error {
   constructor(code, message, needsBind = false) {
     super(message);
@@ -85154,14 +85352,14 @@ async function startQaFindingSession(d, fid) {
       const saved = await saveSessionUpload(id2, bytes, a.mimeType);
       files2.push(`${JSON.stringify(a.filename)} (${a.mimeType}): ${saved.path}`);
     }
-    const wt = join48(repoDir, ".worktrees", id2);
+    const wt = join49(repoDir, ".worktrees", id2);
     const branch = `qa/${id2.slice(3)}`;
     const reused = realGit.worktreeAlive(wt);
     try {
       if (!reused) {
         const base3 = realGit.revParse(repoDir, branch) ? branch : "HEAD";
         realGit.addWorktree(repoDir, wt, base3);
-        execFileSync9("git", ["checkout", "-B", branch], { cwd: wt, encoding: "utf8" });
+        execFileSync10("git", ["checkout", "-B", branch], { cwd: wt, encoding: "utf8" });
       }
     } catch (e) {
       throw new QaSessionError(422, `Gagal membuat worktree QA: ${e.message}`);
@@ -86695,7 +86893,7 @@ init_src();
 init_db();
 import { mkdirSync as mkdirSync20, mkdtempSync as mkdtempSync5, rmSync as rmSync14, writeFileSync as writeFileSync19 } from "node:fs";
 import { tmpdir as tmpdir10 } from "node:os";
-import { join as join49 } from "node:path";
+import { join as join50 } from "node:path";
 var STAGE_LABEL = {
   brainstorming: "Dirumuskan",
   objective: "Dirumuskan",
@@ -86738,7 +86936,7 @@ function renderTicketDoc(tickets2) {
 ${baris.join("\n")}`;
 }
 async function buildChatWorkspace(projectId) {
-  const dir2 = mkdtempSync5(join49(tmpdir10(), "hanoman-portal-chat-"));
+  const dir2 = mkdtempSync5(join50(tmpdir10(), "hanoman-portal-chat-"));
   try {
     const project = await prisma.project.findUnique({
       where: { id: projectId },
@@ -86753,7 +86951,7 @@ async function buildChatWorkspace(projectId) {
     });
     const files2 = [];
     const tulis = (rel, isi) => {
-      writeFileSync19(join49(dir2, rel), isi, { mode: 384 });
+      writeFileSync19(join50(dir2, rel), isi, { mode: 384 });
       files2.push(rel);
     };
     tulis("project.md", renderProjectDoc(project));
@@ -86761,11 +86959,11 @@ async function buildChatWorkspace(projectId) {
     tulis("laporan.md", renderTicketDoc(tickets2.map((t) => toPortalTicket(t, null))));
     const prds = await listPrds(projectId);
     if (prds.length) {
-      mkdirSync20(join49(dir2, "dokumen"), { mode: 448 });
+      mkdirSync20(join50(dir2, "dokumen"), { mode: 448 });
       for (const prd of prds) {
         const isi = await readPrd(projectId, prd.path);
         if (!isi) continue;
-        tulis(join49("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
+        tulis(join50("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
       }
     }
     return { dir: dir2, files: files2, cleanup: () => rmSync14(dir2, { recursive: true, force: true }) };
@@ -87292,13 +87490,13 @@ init_db();
 // src/services/bootstrap.ts
 import { createHash as createHash22, randomBytes as randomBytes11, timingSafeEqual as timingSafeEqual5 } from "node:crypto";
 import { chmod as chmod2, lstat as lstat3, mkdir as mkdir11, readFile as readFile9, unlink as unlink5, writeFile as writeFile8 } from "node:fs/promises";
-import { join as join50 } from "node:path";
-var TTL_MS6 = 15 * 6e4;
+import { join as join51 } from "node:path";
+var TTL_MS7 = 15 * 6e4;
 var SETUP_TOKEN_FILE = "setup.token";
 var BootstrapError = class extends Error {
   code = "BOOTSTRAP_PROOF";
 };
-var tokenPath = (home3) => join50(home3, SETUP_TOKEN_FILE);
+var tokenPath = (home3) => join51(home3, SETUP_TOKEN_FILE);
 async function readStored(home3) {
   try {
     const info = await lstat3(tokenPath(home3));
@@ -87330,7 +87528,7 @@ async function ensureSetupToken(home3, now = Date.now()) {
     });
   }
   const token = randomBytes11(32).toString("base64url");
-  const expiresAt = now + TTL_MS6;
+  const expiresAt = now + TTL_MS7;
   try {
     await writeFile8(tokenPath(home3), `${token}
 ${new Date(expiresAt).toISOString()}
@@ -88136,7 +88334,7 @@ init_event_log();
 init_transcript_store();
 init_src2();
 import { readFile as readFile10 } from "node:fs/promises";
-import { join as join51 } from "node:path";
+import { join as join52 } from "node:path";
 function decodeCursor(c) {
   if (!c) return null;
   try {
@@ -88174,7 +88372,7 @@ async function readRemoteTranscript(id2) {
   const row = await prisma.logEntry.findUnique({ where: { id: id2 } });
   if (!row || row.lane !== "transcript" || !row.transcriptKey) return null;
   if (row.deviceId === "local") return readTranscript(row.transcriptKey);
-  const path = join51(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
+  const path = join52(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
   try {
     return await readFile10(path, "utf8");
   } catch {
@@ -88841,7 +89039,7 @@ async function tick4(now, deps, end2 = prodEnd) {
     console.error("scheduler drain:", e);
   }
 }
-var prodDeps = {
+var prodDeps2 = {
   liveCount: async () => (await listSessionsAsync()).filter((s2) => !s2.exited).length,
   isLive: async (specId) => {
     const s2 = await getSessionAsync(sessionIdForSpec(specId));
@@ -88875,7 +89073,7 @@ var prodDeps = {
 };
 var TICK_MS3 = 1e4;
 var timer7;
-function startScheduler(deps = prodDeps) {
+function startScheduler(deps = prodDeps2) {
   if (timer7) return;
   timer7 = setInterval(() => void tick4(Date.now(), deps), TICK_MS3);
   timer7.unref();
@@ -88910,7 +89108,7 @@ init_src();
 init_db();
 init_session_admission2();
 init_notifications2();
-var prodDeps2 = {
+var prodDeps3 = {
   // ADR-0170 · mengamandemen ADR-0169 keputusan #4: `bypassCapacity` DICABUT. Auto-resume kini
   // tunduk cap/beban host seperti "Lanjutkan" manual — mesin 8 GB operator sudah dua kali kernel
   // panic akibat batch sesi paralel tepat SAAT boot (memori mac-mini-8gb-panic-agen-paralel),
@@ -88919,7 +89117,7 @@ var prodDeps2 = {
   recordFail: recordFailure,
   recordDeferred: recordFailure
 };
-async function resumeReconciledSessions(cutoff, deps = prodDeps2) {
+async function resumeReconciledSessions(cutoff, deps = prodDeps3) {
   const report = { resumed: [], failed: [], deferred: [] };
   const specIds = await reconciledSpecIdsSince(cutoff);
   if (!specIds.length) return report;
@@ -89441,9 +89639,9 @@ async function pruneLogs(now, retention, opts2 = {}) {
 }
 async function reconcileRemoteTranscripts() {
   const { readdir: readdir10, unlink: unlink6, stat: stat8 } = await import("node:fs/promises");
-  const { join: join52 } = await import("node:path");
+  const { join: join53 } = await import("node:path");
   const { resolveDataDirs: resolveDataDirs2 } = await Promise.resolve().then(() => (init_src2(), src_exports));
-  const root = join52(resolveDataDirs2().home, "remote-transcripts");
+  const root = join53(resolveDataDirs2().home, "remote-transcripts");
   let deviceDirs;
   try {
     deviceDirs = await readdir10(root);
@@ -89457,16 +89655,16 @@ async function reconcileRemoteTranscripts() {
   for (const dev of deviceDirs) {
     let files2;
     try {
-      files2 = await readdir10(join52(root, dev));
+      files2 = await readdir10(join53(root, dev));
     } catch {
       continue;
     }
     for (const f of files2) {
       const key = `${dev}/${f}`;
       if (referenced.has(key)) continue;
-      const st = await stat8(join52(root, dev, f)).catch(() => null);
+      const st = await stat8(join53(root, dev, f)).catch(() => null);
       if (!st || Date.now() - st.mtimeMs < gracePeriodMs) continue;
-      await unlink6(join52(root, dev, f)).catch(() => {
+      await unlink6(join53(root, dev, f)).catch(() => {
       });
       orphans++;
     }