hanoman 0.9.29 → 0.9.31

package/dist/server.js

@@ -5474,6 +5474,8 @@ var init_entities = __esm({
       // SPEC-184
       notifyDecisionSound: external_exports.enum(NOTIFY_SOUNDS).default("alert"),
       // SPEC-184
+      notifyDecisionTelegram: external_exports.boolean().default(true),
+      // ADR-0226 · dorong "menunggu keputusan" ke Telegram
       agentAccessEnabled: external_exports.boolean().default(false),
       // SPEC-257 · master switch akses AI agent
       scheduler: zScheduler.default(SCHEDULER_DEFAULTS),
@@ -5575,7 +5577,7 @@ function resolvePhasePlan(input) {
   if (!input.nativeAgents || cfg?.enabled === false) return null;
   const cells = cfg?.[input.runtime] ?? {};
   const coerce3 = input.runtime === "codex" ? coerceCodexEffort : coerceClaudeEffort;
-  const resolve25 = (key, fallback2) => {
+  const resolve25 = (key, fallback3) => {
     const cell4 = cells[key];
     const override = input.phaseOverrides?.[key];
     if (input.runtime === "antigravity") {
@@ -5587,9 +5589,9 @@ function resolvePhasePlan(input) {
       }
       return { model: model2, effort: null };
     }
-    const picked = override?.model ?? cell4?.model ?? fallback2.model;
+    const picked = override?.model ?? cell4?.model ?? fallback3.model;
     const model = input.runtime === "claude" && picked === CLAUDE_DEFAULT_ALIAS ? CLAUDE_SUBAGENT_INHERIT : picked;
-    return { model, effort: coerce3(model, override?.effort ?? cell4?.effort ?? fallback2.effort ?? "medium") };
+    return { model, effort: coerce3(model, override?.effort ?? cell4?.effort ?? fallback3.effort ?? "medium") };
   };
   const reviewer = REVIEWER_FLOWS.has(input.flow) ? {
     agentName: phaseAgentName(REVIEWER_CELL),
@@ -9122,6 +9124,17 @@ var init_config_registry = __esm({
       // runtime
       { key: "HANOMAN_EVENTS_TICK_MS", group: "runtime", label: "Interval events (ms)", kind: "int", apply: "live", category: "knob", example: "1000", default: "1000", min: 100 },
       { key: "HANOMAN_UPDATE_FETCH", group: "runtime", label: "Deteksi update saat boot", kind: "bool", apply: "live", category: "knob", default: "1" },
+      // ADR-0224 · limit Antigravity membaca token agy di Keychain dan memanggil Cloud Code API Google.
+      {
+        key: "HANOMAN_ANTIGRAVITY_LIMITS_FETCH",
+        group: "runtime",
+        label: "Baca limit Antigravity",
+        kind: "bool",
+        apply: "live",
+        category: "knob",
+        default: "1",
+        help: "Membaca token agy di Keychain macOS lalu memanggil API kuota Google (endpoint internal, tak terdokumentasi). Matikan bila tak ingin hanoman menyentuh kredensial agy."
+      },
       // SPEC-398 · ADR-0087 · deteksi update kini membandingkan semver dengan registry npm, bukan
       // menghitung commit di repo git (HANOMAN_REPO_ROOT dicabut bersama jalur git itu).
       {
@@ -14235,6 +14248,18 @@ var init_system = __esm({
         build: () => ({ method: "GET", path: "/limits/codex" }),
         shape: (raw) => raw
       },
+      {
+        name: "hanoman_limits_antigravity",
+        title: "Sisa kuota Antigravity",
+        description: "Sisa kuota Antigravity CLI (agy) per grup model (Gemini; Claude/GPT) untuk jendela mingguan dan 5 jam, berikut kapan resetnya. Dibaca live dari Cloud Code API Google memakai token agy yang sedang hidup dan di-cache 60 detik; token yang kedaluwarsa (agy tak berjalan) memberi `stale` atau `unavailable`, bukan angka karangan. Endpoint terpisah dari hanoman_limits karena sumbernya beda. Tak menuntut capability apa pun.",
+        inputSchema: obj({ properties: {} }),
+        mode: "read",
+        capability: null,
+        samplePath: "/limits/antigravity",
+        sampleMethod: "GET",
+        build: () => ({ method: "GET", path: "/limits/antigravity" }),
+        shape: (raw) => raw
+      },
       {
         name: "hanoman_overview_get",
         title: "Ringkasan kinerja hari ini (Overview)",
@@ -17073,6 +17098,11 @@ var init_verify_scope = __esm({
       '  test-nya memang berjalan, jangan menerima "no test files" sebagai bukti.',
       "- Typecheck: hanya paket yang tersentuh (mis. `pnpm --filter ./server typecheck`).",
       "  JANGAN `pnpm -r typecheck` \u2014 itu menyalakan satu proses tsc per paket sekaligus.",
+      "- Ritme: per task jalankan berkas test yang task itu sentuh saja.",
+      "  JANGAN menjalankan ulang berkas test yang sudah hijau selama kode yang diujinya",
+      "  tak berubah sejak itu. Typecheck paket tersentuh sesudah task yang mengubah",
+      "  tipe/kontrak ekspor, bukan tiap task. Gabungan semua test tersentuh + typecheck",
+      "  dijalankan SEKALI di akhir, sebelum melapor.",
       "- Lint: hanya berkas yang berubah, bukan seluruh repo.",
       "- Build penuh: hanya bila yang kamu ubah memang soal build/bundling.",
       "- Boot server + curl / smoke end-to-end: hanya bila task ini menyentuh endpoint atau perilaku",
@@ -17418,7 +17448,7 @@ Stack: ${project.stack || "\u2014"}`,
 ${cron.prompt}`
   ].join("\n\n");
 }
-var PIPELINES, WORK_PHASES, DECIDER, ASK_ROUTE, AMBIGUOUS, AUTONOMY_CLAUSE, AUTONOMY_CLAUSE_FULL, autonomyClause, phaseInstruction, skillInstruction, auditDecisionInstruction, ESCALATION_CONTRACT, auditOnlyInstruction, auditContinuationInstruction, auditContinuationForOrchestrator, writesCode, scopeClause, codeStyleClause, methodClause, attachmentClause, orchestratorAttachmentClause, PROJECT_METHOD, specContext, goalDetail, goalBlock, goalContext, projectContext, scaffoldContext, prdBriefBlock, prdAuditBlock, prdContext, breakdownContext, prdPhaseLines, breakdownPhaseLines, resumeClause, RESUMED_WORKTREE_NOTE, REVERSE_PHASE_GUIDE, SCAFFOLD_PHASE_GUIDE;
+var PIPELINES, WORK_PHASES, DECIDER, ASK_ROUTE, AMBIGUOUS, AUTONOMY_CLAUSE, AUTONOMY_CLAUSE_FULL, autonomyClause, PLAN_SHAPE, phaseInstruction, skillInstruction, auditDecisionInstruction, ESCALATION_CONTRACT, auditOnlyInstruction, auditContinuationInstruction, auditContinuationForOrchestrator, writesCode, scopeClause, codeStyleClause, methodClause, attachmentClause, orchestratorAttachmentClause, PROJECT_METHOD, specContext, goalDetail, goalBlock, goalContext, projectContext, scaffoldContext, prdBriefBlock, prdAuditBlock, prdContext, breakdownContext, prdPhaseLines, breakdownPhaseLines, resumeClause, RESUMED_WORKTREE_NOTE, REVERSE_PHASE_GUIDE, SCAFFOLD_PHASE_GUIDE;
 var init_prompt = __esm({
   "../runner/src/prompt.ts"() {
     "use strict";
@@ -17435,12 +17465,14 @@ var init_prompt = __esm({
     AUTONOMY_CLAUSE = `Jalankan seluruh pipeline sampai tuntas tanpa berhenti di batas antar-fase. Checkpoint "review"/"approval"/"need review" milik skill superpowers BUKAN titik berhenti di sini \u2014 lanjut saja ke fase berikutnya. Berhenti HANYA untuk ${AMBIGUOUS}: JANGAN memutuskannya sendiri, ${ASK_ROUTE} Selain itu, terus lanjut.`;
     AUTONOMY_CLAUSE_FULL = `Kamu diluncurkan scheduler \u2014 mungkin tak ada manusia yang sedang menonton terminal ini. Tembus seluruh pipeline sampai stage \`done\`, lalu commit & push: checkpoint "review"/"approval" milik skill BUKAN titik berhenti dan jangan menunggu persetujuan siapa pun. Tetapi JANGAN memutuskan sendiri ${AMBIGUOUS}: ${ASK_ROUTE} Catat keputusan penting di pesan commit. Merge ke branch utama tetap dilakukan manusia, bukan kamu.`;
     autonomyClause = (mode) => mode === "full-control" ? AUTONOMY_CLAUSE_FULL : AUTONOMY_CLAUSE;
+    PLAN_SHAPE = 'Bentuk plan: rencana, bukan kode. Tiap task `- [ ]` adalah satu irisan perilaku yang bisa diverifikasi: berkas yang disentuh, perilaku yang dibangun, AC yang dipenuhinya, dan test yang membuktikannya (nama test + kasus intinya dalam satu kalimat). JANGAN menulis isi implementasi maupun isi test lengkap \u2014 Execute yang menulisnya; kode di plan ditulis dua kali. Potongan kode hanya untuk kontrak yang tak boleh ditafsirkan (signature/tipe ekspor, skema, bentuk payload API), masing-masing pendek. Jangan memecah tulis-test, jalankan, implementasi, dan commit menjadi kotak terpisah. Sasaran \xB1300 baris; lebih panjang biasanya tanda kode ikut tertulis. Aturan ini mengalahkan anjuran "kode lengkap di setiap langkah" dan "langkah 2\u20135 menit" milik skill plan mana pun.';
     phaseInstruction = (phases2, method) => {
       const base3 = `Kerjakan fase berurutan: ${phases2.join(" \u2192 ")}.
 Setiap kali sebuah fase selesai (atau kamu putuskan dilewati), append satu baris ke berkas di $HANOMAN_PHASE_FILE \u2014 persis: \`echo "<Nama Fase> done" >> "$HANOMAN_PHASE_FILE"\`, atau \`skipped\` sebagai ganti \`done\`. Nama fase ditulis apa adanya seperti di atas.`;
       if (!phases2.includes("Plan") || !phases2.includes("Execute")) return base3;
       return base3 + `
-Execute BELUM selesai selama plan (\`${method.planDir}/**\`) masih punya task \`- [ ]\`: kerjakan SEMUA PR/task sampai tiap kotak jadi \`- [x]\` sebelum menulis \`Execute done\`. hanoman menahan backlog di \`executing\`, bukan \`done\`, selama masih ada \`- [ ]\`.`;
+Execute BELUM selesai selama plan (\`${method.planDir}/**\`) masih punya task \`- [ ]\`: kerjakan SEMUA PR/task sampai tiap kotak jadi \`- [x]\` sebelum menulis \`Execute done\`. hanoman menahan backlog di \`executing\`, bukan \`done\`, selama masih ada \`- [ ]\`.
+${PLAN_SHAPE}`;
     };
     skillInstruction = (flow2, phases2, method) => {
       const lines2 = phases2.map((p3) => {
@@ -18597,7 +18629,7 @@ function backlogGuide(flow2, phase, ctx) {
   const m = ctx.method;
   switch (phase) {
     case "Brainstorm":
-      return `- Brainstorm: gali konteks, alternatif, dan keputusan untuk backlog ini dari Source of Truth dan kode. Tulis hasilnya sebagai bagian \`## Konteks & keputusan\` di dokumen spec baru di \`${m.specDir}/\` (nama berkas \`<YYYY-MM-DD>-<spec-id>-<slug>-design.md\`) dan laporkan path-nya.` + (ctx.fromAudit ? ` Backlog ini LANJUTAN audit ${ctx.fromAudit}: baca \`internal/docs/research/audit-${ctx.fromAudit.toLowerCase()}-*.md\` lebih dulu dan pakai temuannya sebagai bahan \u2014 jangan menginvestigasi ulang dari nol.` : "");
+      return `- Brainstorm: gali konteks, alternatif, dan keputusan untuk backlog ini dari Source of Truth dan kode. Tulis hasilnya sebagai bagian \`## Konteks & keputusan\` di dokumen spec baru di \`${m.specDir}/\` (nama berkas \`<YYYY-MM-DD>-<spec-id>-<slug>-design.md\`) dan laporkan path-nya. ${FRONT_LOADED_DECISIONS("sampai Execute")} Tulis jawabannya ke \`## Konteks & keputusan\`.` + (ctx.fromAudit ? ` Backlog ini LANJUTAN audit ${ctx.fromAudit}: baca \`internal/docs/research/audit-${ctx.fromAudit.toLowerCase()}-*.md\` lebih dulu dan pakai temuannya sebagai bahan \u2014 jangan menginvestigasi ulang dari nol.` : "");
     case "Objective":
       return "- Objective: baca dokumen spec dari fase Brainstorm (path-nya di serah-terima), lalu tambahkan bagian `## Objective` berisi SATU objective terukur beserta kriteria suksesnya.";
     case "Spec":
@@ -18606,11 +18638,11 @@ function backlogGuide(flow2, phase, ctx) {
     // default skill) lolos hampa. Nama dikunci seperti Brainstorm, dan path persisnya diteruskan
     // orchestrator ke Execute & reviewer — bukan pola glob yang bisa mencocoki plan backlog lain.
     case "Plan":
-      return `- Plan: tulis plan implementasi berkotak \`- [ ]\` untuk backlog ini dari dokumen spec-nya (path di serah-terima) ke SATU berkas \`${m.planDir}/<YYYY-MM-DD>-<spec-id>-<slug>.md\` (spec-id backlog ini huruf kecil, mis. \`2026-09-25-spec-123-ekspor-csv.md\` \u2014 nama tanpa spec-id membuat hanoman tak menemukan plan-nya). Laporkan path PERSIS berkas itu di \`Artefak:\`; orchestrator meneruskannya ke Execute.`;
+      return `- Plan: tulis plan implementasi berkotak \`- [ ]\` untuk backlog ini dari dokumen spec-nya (path di serah-terima) ke SATU berkas \`${m.planDir}/<YYYY-MM-DD>-<spec-id>-<slug>.md\` (spec-id backlog ini huruf kecil, mis. \`2026-09-25-spec-123-ekspor-csv.md\` \u2014 nama tanpa spec-id membuat hanoman tak menemukan plan-nya). Laporkan path PERSIS berkas itu di \`Artefak:\`; orchestrator meneruskannya ke Execute. ${PLAN_SHAPE}`;
     case "Execute":
       return `- Execute: kerjakan plan backlog ini \u2014 path persisnya di baris \`Artefak fase sebelumnya:\` serah-terima (bila tak ada: berkas di \`${m.planDir}/\` yang namanya memuat spec-id backlog ini). Execute BELUM selesai selama plan masih punya task \`- [ ]\`: kerjakan SEMUA task sampai tiap kotak jadi \`- [x]\` sebelum melapor \`Status: selesai\`. hanoman menahan backlog di \`executing\`, bukan \`done\`, selama masih ada \`- [ ]\`. Laporan \`Status: selesai\` wajib memuat tabel \`AC \u2192 bukti\`: setiap acceptance criteria dokumen spec (qa jalur-cepat: dokumen audit) \u2192 perintah yang kamu jalankan beserta hasil yang kamu baca, atau path:baris yang membuktikannya. AC tanpa bukti = belum selesai; laporanmu diperiksa ulang sebelum fase ditutup.`;
     case "Audit":
-      return flow2 === "audit" ? "- Audit: ini audit-only \u2014 investigasi SAJA, JANGAN menulis perbaikan kode apa pun. Telusuri akar masalah / log / jawaban dan nilai apakah issue terdefinisi dengan baik. Laporkan temuan beserta buktinya; dokumennya ditulis fase Laporan." : "- Audit: telusuri akar masalah dengan bukti (reproduksi, log, kode) dan tulis dokumen audit ke `internal/docs/research/audit-<spec-id>-<slug>.md`. Lalu putuskan jalurnya dari hasil Audit, bukan default: bila temuan berconfidence tinggi dan perbaikannya bisa dikerjakan langsung (diff kecil, akar masalah jelas), tulis `Rekomendasi fase: jalur-cepat` beserta alasannya \u2014 orchestrator akan melewati Spec & Plan dan dokumen audit menjadi doc-of-record perbaikan itu. Bila temuan luas, berisiko, atau ambigu, tulis `Rekomendasi fase: penuh`.";
+      return flow2 === "audit" ? "- Audit: ini audit-only \u2014 investigasi SAJA, JANGAN menulis perbaikan kode apa pun. Telusuri akar masalah / log / jawaban dan nilai apakah issue terdefinisi dengan baik. Laporkan temuan beserta buktinya; dokumennya ditulis fase Laporan." : "- Audit: telusuri akar masalah dengan bukti (reproduksi, log, kode) dan tulis dokumen audit ke `internal/docs/research/audit-<spec-id>-<slug>.md`. Lalu putuskan jalurnya dari hasil Audit, bukan default: bila temuan berconfidence tinggi dan perbaikannya bisa dikerjakan langsung (diff kecil, akar masalah jelas), tulis `Rekomendasi fase: jalur-cepat` beserta alasannya \u2014 orchestrator akan melewati Spec & Plan dan dokumen audit menjadi doc-of-record perbaikan itu. Bila temuan luas, berisiko, atau ambigu, tulis `Rekomendasi fase: penuh`. " + FRONT_LOADED_DECISIONS("Spec, Plan, dan Execute") + " Catat jawabannya di dokumen audit.";
     case "Laporan":
       return "- Laporan: tulis DOKUMEN AUDIT ke Source of Truth `internal/docs/research/audit-<spec-id>-<slug>.md` (ikuti konvensi audit yang ada), tautkan di `internal/docs/README.md`, memuat: keluhan/pertanyaan, temuan (dengan bukti/log), apakah issue terdefinisi baik, dan rekomendasi tindak lanjut. Commit dokumen itu. Tak ada kode fitur.\n\n" + ESCALATION_CONTRACT;
     case "Goal":
@@ -18752,7 +18784,7 @@ function withPhaseDelegation(phaseDefs, roster, runtime) {
 ${clause}` } : def2;
   });
 }
-var REVIEWER_AGENT_NAME, PROJECT_FLOWS, DOC_WRITING_PHASES, PHASE_AGENT_AUTONOMY, PHASE_AGENT_RULES, PHASE_AGENT_REPORT, ATTACHMENT_NOTE, TERMINAL_ASK, PHASE_AGENT_ASK, TERMINAL_HANDOFF, PHASE_AGENT_HANDOFF, forPhaseAgent, REVIEWER_RULES, roleOf, liveCustoms, NATIVE_PHASE_PROTOCOL;
+var REVIEWER_AGENT_NAME, PROJECT_FLOWS, DOC_WRITING_PHASES, PHASE_AGENT_AUTONOMY, FOREGROUND_RULE, PHASE_AGENT_RULES, PHASE_AGENT_REPORT, ATTACHMENT_NOTE, FRONT_LOADED_DECISIONS, TERMINAL_ASK, PHASE_AGENT_ASK, TERMINAL_HANDOFF, PHASE_AGENT_HANDOFF, forPhaseAgent, REVIEWER_RULES, roleOf, liveCustoms, NATIVE_PHASE_PROTOCOL;
 var init_phase_agents = __esm({
   "../runner/src/phase-agents.ts"() {
     "use strict";
@@ -18762,13 +18794,15 @@ var init_phase_agents = __esm({
     REVIEWER_AGENT_NAME = phaseAgentName(REVIEWER_CELL);
     PROJECT_FLOWS = /* @__PURE__ */ new Set(["reverse", "scaffold", "prd", "breakdown"]);
     DOC_WRITING_PHASES = /* @__PURE__ */ new Set(["Docs teknis", "Konvensi & index", "Doc index"]);
-    PHASE_AGENT_AUTONOMY = `Kamu dipanggil orchestrator sesi hanoman, bukan manusia. Checkpoint "review"/"approval" milik skill BUKAN titik berhenti. Tetapi kamu TIDAK BOLEH memutuskan sendiri hal yang masih ambigu dan akan mempengaruhi hasil \u2014 percabangan data model, kontrak API, scope, perilaku yang terlihat pengguna, atau asumsi yang terpaksa kamu ambil agar bisa lanjut \u2014 dan kamu tak bisa bertanya langsung. Daftarkan SEMUANYA di bagian \`Keputusan terbuka:\` laporanmu (tanpa batas jumlah; tiap butir berupa pertanyaan bernomor diakhiri \`?\` beserta opsi dan rekomendasimu), begitu juga bila panduan fase menyuruhmu bertanya ke manusia, lalu tulis \`Status: menunggu-keputusan\` dan berhenti. Jawabannya datang sebagai pesan susulan ke agen yang sama \u2014 lanjutkan dari sana; bila jawaban itu memunculkan ambiguitas baru, laporkan lagi dengan cara yang sama. Yang menjawab ditentukan hanoman \u2014 ${DECIDER}.`;
+    PHASE_AGENT_AUTONOMY = `Kamu dipanggil orchestrator sesi hanoman, bukan manusia. Checkpoint "review"/"approval" milik skill BUKAN titik berhenti. Tetapi kamu TIDAK BOLEH memutuskan sendiri hal yang masih ambigu dan akan mempengaruhi hasil \u2014 percabangan data model, kontrak API, scope, perilaku yang terlihat pengguna, atau asumsi yang terpaksa kamu ambil agar bisa lanjut \u2014 dan kamu tak bisa bertanya langsung. Daftarkan SEMUANYA di bagian \`Keputusan terbuka:\` laporanmu (tanpa batas jumlah; tiap butir berupa pertanyaan bernomor diakhiri \`?\` beserta opsi dan rekomendasimu), begitu juga bila panduan fase menyuruhmu bertanya ke manusia, lalu tulis \`Status: menunggu-keputusan\` dan berhenti. Jawabannya datang sebagai pesan susulan ke agen yang sama \u2014 lanjutkan dari sana; bila jawaban itu memunculkan ambiguitas baru, laporkan lagi dengan cara yang sama. Yang menjawab ditentukan hanoman \u2014 ${DECIDER}. Keputusan yang sudah dijawab (baris \`Keputusan manusia sejauh ini:\` serah-terima, bagian keputusan dokumen spec atau dokumen audit) sudah final \u2014 JANGAN menanyakannya ulang; kumpulkan ambiguitas baru fasemu dan laporkan sekaligus.`;
+    FOREGROUND_RULE = "- Jalankan test/typecheck/build di FOREGROUND dengan batas waktu dan baca hasilnya di giliran yang sama. JANGAN melepasnya ke latar lalu menunggu dengan jeda tidur berdurasi tetap (`sleep N` berulang) \u2014 itu menit yang terbuang tanpa hasil; set yang terlalu lama untuk satu perintah dipecah. Proses yang memang harus hidup di latar (server untuk smoke) ditunggu dengan pemeriksaan kesiapan berbatas waktu yang berhenti sendiri begitu siap.";
     PHASE_AGENT_RULES = [
       "Batas peran fase:",
       "- JANGAN menulis `$HANOMAN_PHASE_FILE` \u2014 orchestrator satu-satunya penulis marker fase.",
       "- JANGAN `git push` \u2014 push milik orchestrator. Commit artefak fasemu sendiri sebelum melapor.",
       `- JANGAN memanggil agen berawalan \`${PHASE_AGENT_PREFIX}\`. Custom agent lain boleh dipanggil bila relevan.`,
       "- Kerjakan HANYA fase ini; fase lain dikerjakan agen fasenya sendiri.",
+      FOREGROUND_RULE,
       // T1 · ADR-0164 amandemen 2026-09-23 · 22 laporan tanpa `Status:` di audit: agen fase mengakhiri
       // gilirannya sambil menunggu proses latarnya sendiri, dan teks "menunggu" itu dibaca orchestrator
       // sebagai laporan final. Giliranmu yang berakhir = laporanmu, jadi menunggu harus terjadi DI DALAM giliran.
@@ -18784,6 +18818,7 @@ var init_phase_agents = __esm({
       "Klaim tanpa bukti bukan bukti. Maksimal 1200 kata."
     ].join("\n");
     ATTACHMENT_NOTE = "Bila serah-terima menyebut manifest lampiran (`INDEX.md`), baca manifest itu dan lampiran yang relevan di awal fase.";
+    FRONT_LOADED_DECISIONS = (until) => `Kumpulkan di fase ini SEMUA keputusan yang akan dibutuhkan ${until} \u2014 bukan hanya yang muncul sekarang: data model & migrasi/backfill, kontrak API, scope & yang di luar scope, perilaku terlihat pengguna, sumber data, kasus tepi \u2014 dan ajukan sekaligus sebagai \`Keputusan terbuka:\` dalam satu putaran; satu putaran di depan jauh lebih murah daripada beberapa putaran yang tersebar.`;
     TERMINAL_ASK = /([Aa])jukan SATU pertanyaan per giliran ke manusia di terminal ini, tunggu jawabannya(?=[,.])/;
     PHASE_AGENT_ASK = "jukan pertanyaannya sebagai butir `Keputusan terbuka:` di laporanmu \u2014 satu topik per putaran, beserta konteks & opsinya, karena kamu tak berhadapan langsung dengan manusia \u2014 lalu tulis `Status: menunggu-keputusan` dan berhenti; jawabannya datang sebagai pesan susulan ke agen yang sama";
     TERMINAL_HANDOFF = "tulis ringkasan hasil + daftar pertanyaan yang belum terjawab ke terminal.";
@@ -18794,6 +18829,7 @@ var init_phase_agents = __esm({
       "- JANGAN mengubah, membuat, atau menghapus berkas apa pun di worktree, JANGAN commit, JANGAN `git push`/`git stash`/`git checkout`/`git reset`. Kamu membaca dan menjalankan perintah verifikasi saja.",
       "- JANGAN menulis `$HANOMAN_PHASE_FILE` dan JANGAN memperbaiki temuanmu sendiri \u2014 perbaikan milik agen Execute, marker milik orchestrator.",
       `- JANGAN memanggil agen berawalan \`${PHASE_AGENT_PREFIX}\`.`,
+      FOREGROUND_RULE,
       "- JANGAN mengakhiri giliran atau melapor selama masih menunggu proses/tugas latar milikmu sendiri (test yang kamu jalankan di latar): tunggu sampai selesai dan baca hasilnya, lalu tulis laporan lengkap berawalan `Status:`."
     ].join("\n");
     roleOf = (phase) => phase === "Execute" || phase === "Goal" ? "execute" : phase === "Kerjakan" || phase === "Verifikasi" ? "none" : "research";
@@ -20691,6 +20727,7 @@ __export(src_exports, {
   GOAL_TUI_PASTE_LIMIT: () => GOAL_TUI_PASTE_LIMIT,
   PHASE_CONTEXT_HEADER: () => PHASE_CONTEXT_HEADER,
   PIPELINES: () => PIPELINES,
+  PLAN_SHAPE: () => PLAN_SHAPE,
   PROJECT_METHOD: () => PROJECT_METHOD,
   READ_ONLY_DENIED_COMMANDS: () => READ_ONLY_DENIED_COMMANDS,
   READ_ONLY_DENIED_OPERATORS: () => READ_ONLY_DENIED_OPERATORS,
@@ -50111,6 +50148,8 @@ var init_settings3 = __esm({
       notifySound: "short",
       notifyDecision: true,
       notifyDecisionSound: "alert",
+      notifyDecisionTelegram: true,
+      // ADR-0226 · tak berefek tanpa bot token + allowlist
       agentAccessEnabled: false,
       // SPEC-257 · akses AI agent off sampai dibuka manusia
       scheduler: SCHEDULER_DEFAULTS,
@@ -55925,6 +55964,300 @@ var init_live_phases = __esm({
   }
 });
 
+// src/services/telegram/client.ts
+var TelegramApiError, TelegramApiClient;
+var init_client = __esm({
+  "src/services/telegram/client.ts"() {
+    "use strict";
+    TelegramApiError = class extends Error {
+      constructor(method, code, message, retryAfter) {
+        super(`Telegram ${method} gagal${code ? ` (${code})` : ""}: ${message}`);
+        this.method = method;
+        this.code = code;
+        this.retryAfter = retryAfter;
+        this.name = "TelegramApiError";
+      }
+    };
+    TelegramApiClient = class {
+      constructor(token, transport = (url2, init) => fetch(url2, init), baseUrl = "https://api.telegram.org") {
+        this.token = token;
+        this.transport = transport;
+        this.baseUrl = baseUrl;
+      }
+      safe(message) {
+        return message.split(this.token).join("[REDACTED]").replace(/https:\/\/api\.telegram\.org\/bot[^/\s]+/g, "https://api.telegram.org/bot[REDACTED]");
+      }
+      async call(method, body, signal) {
+        let response;
+        try {
+          response = await this.transport(`${this.baseUrl}/bot${this.token}/${method}`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify(body),
+            signal
+          });
+        } catch (error) {
+          throw new TelegramApiError(method, void 0, this.safe(error.message || "network error"));
+        }
+        if (!response.ok) {
+          const failed = await response.json().catch(() => null);
+          throw new TelegramApiError(method, response.status, `HTTP ${response.status}`, failed?.parameters?.retry_after);
+        }
+        let envelope;
+        try {
+          envelope = await response.json();
+        } catch {
+          throw new TelegramApiError(method, response.status, "respons bukan JSON");
+        }
+        if (!envelope.ok || envelope.result === void 0) {
+          throw new TelegramApiError(
+            method,
+            envelope.error_code,
+            this.safe(envelope.description ?? "respons tidak valid"),
+            envelope.parameters?.retry_after
+          );
+        }
+        return envelope.result;
+      }
+      getMe() {
+        return this.call("getMe", {});
+      }
+      async getUpdates(input) {
+        if (!Number.isInteger(input.offset) || input.offset < 0) throw new Error("offset harus integer non-negatif");
+        if (!Number.isInteger(input.limit) || input.limit < 1 || input.limit > 100) throw new Error("limit harus 1..100");
+        if (!Number.isInteger(input.timeout) || input.timeout < 0 || input.timeout > 50) throw new Error("timeout harus 0..50");
+        return this.call("getUpdates", {
+          offset: input.offset,
+          limit: input.limit,
+          timeout: input.timeout,
+          allowed_updates: ["message", "callback_query"]
+        }, input.signal);
+      }
+      sendMessage(input) {
+        return this.call("sendMessage", {
+          chat_id: input.chatId,
+          text: input.text,
+          ...input.replyMarkup ? { reply_markup: input.replyMarkup } : {}
+        });
+      }
+      /**
+       * SPEC-493 · indikator "typing…". Argumennya posisional (beda dari tetangganya) sesuai kontrak
+       * yang diminta. Telegram TAK punya API stop-typing: statusnya padam sendiri ~5 detik sesudah
+       * panggilan terakhir, dan pesan masuk apa pun langsung menghapusnya.
+       */
+      sendChatAction(chatId, action = "typing") {
+        return this.call("sendChatAction", { chat_id: chatId, action });
+      }
+      editMessageText(input) {
+        return this.call("editMessageText", {
+          chat_id: input.chatId,
+          message_id: input.messageId,
+          text: input.text
+        });
+      }
+      answerCallbackQuery(input) {
+        return this.call("answerCallbackQuery", {
+          callback_query_id: input.callbackQueryId,
+          ...input.text ? { text: input.text } : {}
+        });
+      }
+    };
+  }
+});
+
+// src/services/telegram/protocol.ts
+import { createHash as createHash10 } from "node:crypto";
+function normalizeTelegramCommand(text2) {
+  const clean3 = text2.trim();
+  const match = clean3.match(/^\/([a-z0-9_]+)(?:@[a-z0-9_]+)?(?:\s+([\s\S]*))?$/i);
+  if (!match) return clean3;
+  const args = match[2]?.trim().replace(/\s+/g, " ");
+  return `/${match[1].toLowerCase()}${args ? ` ${args}` : ""}`;
+}
+function parseConfirmationCallback(data) {
+  if (data.length > 64) return null;
+  const match = data.match(/^tgcf:([A-Za-z0-9_-]{1,40}):(approve|deny)$/);
+  return match ? { token: match[1], action: match[2] } : null;
+}
+function parseTelegramUpdate(update2, allowlist, maxText = 12e3) {
+  const root = record(update2);
+  const updateId = root && Number.isInteger(root.update_id) && Number(root.update_id) >= 0 ? Number(root.update_id) : null;
+  if (!root || updateId === null) return { ok: false, updateId: null, reason: "malformed" };
+  const callback = record(root.callback_query);
+  const message = callback ? record(callback.message) : record(root.message);
+  const from = callback ? record(callback.from) : record(message?.from);
+  const chat = record(message?.chat);
+  const chatId = typeof chat?.id === "number" && Number.isSafeInteger(chat.id) ? String(chat.id) : void 0;
+  const userId = typeof from?.id === "number" && Number.isSafeInteger(from.id) ? String(from.id) : void 0;
+  if (!message || !from || !chat || !chatId || !userId) return { ok: false, updateId, reason: "malformed", chatId, userId };
+  if (chat.type !== "private") return { ok: false, updateId, reason: "group", chatId, userId };
+  if (from.is_bot === true) return { ok: false, updateId, reason: "sender-bot", chatId, userId };
+  if (!allowlist.has(userId)) return { ok: false, updateId, reason: "not-allowed", chatId, userId };
+  const messageId = typeof message.message_id === "number" && Number.isInteger(message.message_id) ? message.message_id : null;
+  if (messageId === null) return { ok: false, updateId, reason: "malformed", chatId, userId };
+  if (callback) {
+    const callbackQueryId = typeof callback.id === "string" ? callback.id : "";
+    const data = typeof callback.data === "string" ? callback.data : "";
+    const parsed = parseConfirmationCallback(data);
+    if (!callbackQueryId || !parsed) return { ok: false, updateId, reason: "invalid-callback", chatId, userId };
+    return {
+      ok: true,
+      input: {
+        updateId,
+        chatId,
+        userId,
+        messageId,
+        kind: "callback",
+        text: data,
+        callbackQueryId,
+        callbackToken: parsed.token,
+        callbackAction: parsed.action
+      }
+    };
+  }
+  if (typeof message.text !== "string" || !message.text.trim()) {
+    return { ok: false, updateId, reason: "non-text", chatId, userId };
+  }
+  const text2 = normalizeTelegramCommand(message.text);
+  if (text2.length > maxText) return { ok: false, updateId, reason: "too-long", chatId, userId };
+  return {
+    ok: true,
+    input: {
+      updateId,
+      chatId,
+      userId,
+      messageId,
+      kind: text2.startsWith("/") ? "command" : "text",
+      text: text2
+    }
+  };
+}
+function inboundDigest(input) {
+  return createHash10("sha256").update(`${input.updateId}\0${input.chatId}\0${input.userId}\0${input.kind}\0${input.text}`, "utf8").digest("hex");
+}
+function sanitizeTelegramOutput(text2, exactSecrets = []) {
+  let clean3 = text2.replace(ANSI, "").replace(CONTROLS, "");
+  for (const secret of [...exactSecrets].filter(Boolean).sort((a, b) => b.length - a.length)) {
+    clean3 = clean3.split(secret).join("[REDACTED]");
+  }
+  for (const pattern of CREDENTIAL_PATTERNS) clean3 = clean3.replace(pattern, "[REDACTED]");
+  return clean3.trim();
+}
+function splitTelegramText(text2, max = 4096, exactSecrets = []) {
+  if (!Number.isInteger(max) || max < 1) throw new Error("max harus integer positif");
+  const clean3 = sanitizeTelegramOutput(text2, exactSecrets);
+  if (!clean3) return [];
+  const chunks = [];
+  let rest = clean3;
+  while (rest.length > max) {
+    let cut = max;
+    const before2 = rest.charCodeAt(cut - 1);
+    const after = rest.charCodeAt(cut);
+    if (before2 >= 55296 && before2 <= 56319 && after >= 56320 && after <= 57343) cut--;
+    const window2 = rest.slice(0, cut);
+    const newline2 = window2.lastIndexOf("\n");
+    const space = window2.lastIndexOf(" ");
+    const boundary = Math.max(newline2, space);
+    if (boundary >= Math.floor(max / 2)) cut = boundary + 1;
+    chunks.push(rest.slice(0, cut));
+    rest = rest.slice(cut);
+  }
+  if (rest) chunks.push(rest);
+  return chunks;
+}
+var record, ANSI, CONTROLS, CREDENTIAL_PATTERNS, TELEGRAM_GATEWAY_FAILURE_KIND, TELEGRAM_FINAL_REPLY_KINDS;
+var init_protocol = __esm({
+  "src/services/telegram/protocol.ts"() {
+    "use strict";
+    record = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+    ANSI = /[\u001b\u009b](?:\][^\u0007]*(?:\u0007|\u001b\\)|\[[0-?]*[ -/]*[@-~]|[@-_])/g;
+    CONTROLS = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/g;
+    CREDENTIAL_PATTERNS = [
+      /\b\d{6,}:[A-Za-z0-9_-]{20,}\b/g,
+      /\bhnm_(?:agent_)?[A-Za-z0-9_-]{16,}\b/g,
+      /\bsk-ant-[A-Za-z0-9_-]{16,}\b/g
+    ];
+    TELEGRAM_GATEWAY_FAILURE_KIND = "gateway-failure";
+    TELEGRAM_FINAL_REPLY_KINDS = /* @__PURE__ */ new Set([
+      "final",
+      "decision",
+      "failure",
+      "confirmation",
+      TELEGRAM_GATEWAY_FAILURE_KIND
+    ]);
+  }
+});
+
+// src/services/telegram/notify.ts
+function recipients(raw) {
+  return (raw ?? "").split(/[\s,]+/).filter((id2) => /^\d+$/.test(id2));
+}
+function dashboardOrigin(env = process.env) {
+  const first = env.HANOMAN_CONTROL_ORIGINS?.split(",").map((o) => o.trim()).find(Boolean);
+  if (!first) return null;
+  try {
+    return new URL(first).origin;
+  } catch {
+    return null;
+  }
+}
+function decisionMessage(push, origin) {
+  const title = push.title.length > TITLE_MAX ? `${push.title.slice(0, TITLE_MAX - 1)}\u2026` : push.title;
+  return [
+    "Sesi menunggu keputusanmu",
+    title,
+    push.specId ? `${push.specId} \xB7 sesi ${push.sessionId}` : `sesi ${push.sessionId}`,
+    ...origin ? [`${origin}/terminal`] : []
+  ].join("\n");
+}
+async function pushDecisionToTelegram(push, deps = {}) {
+  try {
+    const read2 = deps.read ?? effectiveStr;
+    const setting = await (deps.getSetting ?? getSetting)();
+    if (!setting.notifyDecisionTelegram) return 0;
+    const botToken = read2("HANOMAN_TELEGRAM_BOT_TOKEN")?.trim();
+    const ids = recipients(read2("HANOMAN_TELEGRAM_ALLOWED_USER_IDS"));
+    if (!botToken || ids.length === 0) return 0;
+    const controller = new AbortController();
+    const timer11 = setTimeout(() => controller.abort(), deps.timeoutMs ?? SEND_TIMEOUT_MS);
+    const send = deps.transport ?? ((url2, init) => fetch(url2, init));
+    const client = new TelegramApiClient(botToken, (url2, init) => send(url2, { ...init, signal: controller.signal }));
+    const text2 = decisionMessage(push, deps.origin === void 0 ? dashboardOrigin() : deps.origin);
+    try {
+      const results = await Promise.allSettled(ids.map((chatId) => client.sendMessage({ chatId, text: text2 })));
+      let sent = 0;
+      for (const [i, r] of results.entries()) {
+        if (r.status === "fulfilled") {
+          sent++;
+          continue;
+        }
+        console.warn(
+          `telegram: push keputusan ke ${ids[i]} gagal:`,
+          sanitizeTelegramOutput(r.reason.message, [botToken])
+        );
+      }
+      return sent;
+    } finally {
+      clearTimeout(timer11);
+    }
+  } catch (error) {
+    console.warn("telegram: push keputusan gagal:", error.message);
+    return 0;
+  }
+}
+var SEND_TIMEOUT_MS, TITLE_MAX;
+var init_notify = __esm({
+  "src/services/telegram/notify.ts"() {
+    "use strict";
+    init_config2();
+    init_settings3();
+    init_client();
+    init_protocol();
+    SEND_TIMEOUT_MS = 1e4;
+    TITLE_MAX = 200;
+  }
+});
+
 // src/services/notifications.ts
 async function recordDrift(vpsId, vpsName, drift, snapshotId) {
   if (drift.length === 0) return;
@@ -56045,6 +56378,7 @@ async function scanDecisions(read2 = liveDecisionsAsync) {
     await prisma.notification.create({
       data: { type: "decision", specId: s2.specId ?? null, sessionId: s2.id, projectId: s2.projectId || null, title }
     });
+    void pushDecisionToTelegram({ title, specId: s2.specId ?? null, sessionId: s2.id });
   }
 }
 async function notificationsFeed(p3 = {}) {
@@ -56067,6 +56401,7 @@ var init_notifications2 = __esm({
     init_db();
     init_pty();
     init_live_phases();
+    init_notify();
     awaiting = /* @__PURE__ */ new Set();
     DEFAULT_FEED_TAKE = 50;
   }
@@ -56721,7 +57056,7 @@ var init_runtime_defaults2 = __esm({
 });
 
 // src/services/agent-token.ts
-import { randomBytes as randomBytes2, createHash as createHash11, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
+import { randomBytes as randomBytes2, createHash as createHash12, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 function toAgentTokenView(t) {
   return {
     id: t.id,
@@ -56808,112 +57143,11 @@ var init_agent_token = __esm({
   "src/services/agent-token.ts"() {
     "use strict";
     init_db();
-    hash2 = (token) => createHash11("sha256").update(token).digest("hex");
+    hash2 = (token) => createHash12("sha256").update(token).digest("hex");
     AGENT_CREATOR_PREFIX = "agent:";
   }
 });
 
-// src/services/telegram/client.ts
-var TelegramApiError, TelegramApiClient;
-var init_client = __esm({
-  "src/services/telegram/client.ts"() {
-    "use strict";
-    TelegramApiError = class extends Error {
-      constructor(method, code, message, retryAfter) {
-        super(`Telegram ${method} gagal${code ? ` (${code})` : ""}: ${message}`);
-        this.method = method;
-        this.code = code;
-        this.retryAfter = retryAfter;
-        this.name = "TelegramApiError";
-      }
-    };
-    TelegramApiClient = class {
-      constructor(token, transport = (url2, init) => fetch(url2, init), baseUrl = "https://api.telegram.org") {
-        this.token = token;
-        this.transport = transport;
-        this.baseUrl = baseUrl;
-      }
-      safe(message) {
-        return message.split(this.token).join("[REDACTED]").replace(/https:\/\/api\.telegram\.org\/bot[^/\s]+/g, "https://api.telegram.org/bot[REDACTED]");
-      }
-      async call(method, body, signal) {
-        let response;
-        try {
-          response = await this.transport(`${this.baseUrl}/bot${this.token}/${method}`, {
-            method: "POST",
-            headers: { "content-type": "application/json" },
-            body: JSON.stringify(body),
-            signal
-          });
-        } catch (error) {
-          throw new TelegramApiError(method, void 0, this.safe(error.message || "network error"));
-        }
-        if (!response.ok) {
-          const failed = await response.json().catch(() => null);
-          throw new TelegramApiError(method, response.status, `HTTP ${response.status}`, failed?.parameters?.retry_after);
-        }
-        let envelope;
-        try {
-          envelope = await response.json();
-        } catch {
-          throw new TelegramApiError(method, response.status, "respons bukan JSON");
-        }
-        if (!envelope.ok || envelope.result === void 0) {
-          throw new TelegramApiError(
-            method,
-            envelope.error_code,
-            this.safe(envelope.description ?? "respons tidak valid"),
-            envelope.parameters?.retry_after
-          );
-        }
-        return envelope.result;
-      }
-      getMe() {
-        return this.call("getMe", {});
-      }
-      async getUpdates(input) {
-        if (!Number.isInteger(input.offset) || input.offset < 0) throw new Error("offset harus integer non-negatif");
-        if (!Number.isInteger(input.limit) || input.limit < 1 || input.limit > 100) throw new Error("limit harus 1..100");
-        if (!Number.isInteger(input.timeout) || input.timeout < 0 || input.timeout > 50) throw new Error("timeout harus 0..50");
-        return this.call("getUpdates", {
-          offset: input.offset,
-          limit: input.limit,
-          timeout: input.timeout,
-          allowed_updates: ["message", "callback_query"]
-        }, input.signal);
-      }
-      sendMessage(input) {
-        return this.call("sendMessage", {
-          chat_id: input.chatId,
-          text: input.text,
-          ...input.replyMarkup ? { reply_markup: input.replyMarkup } : {}
-        });
-      }
-      /**
-       * SPEC-493 · indikator "typing…". Argumennya posisional (beda dari tetangganya) sesuai kontrak
-       * yang diminta. Telegram TAK punya API stop-typing: statusnya padam sendiri ~5 detik sesudah
-       * panggilan terakhir, dan pesan masuk apa pun langsung menghapusnya.
-       */
-      sendChatAction(chatId, action = "typing") {
-        return this.call("sendChatAction", { chat_id: chatId, action });
-      }
-      editMessageText(input) {
-        return this.call("editMessageText", {
-          chat_id: input.chatId,
-          message_id: input.messageId,
-          text: input.text
-        });
-      }
-      answerCallbackQuery(input) {
-        return this.call("answerCallbackQuery", {
-          callback_query_id: input.callbackQueryId,
-          ...input.text ? { text: input.text } : {}
-        });
-      }
-    };
-  }
-});
-
 // src/services/telegram/config.ts
 async function setTelegramEngine(next) {
   const cur = await getSetting();
@@ -56949,129 +57183,6 @@ var init_config4 = __esm({
   }
 });
 
-// src/services/telegram/protocol.ts
-import { createHash as createHash12 } from "node:crypto";
-function normalizeTelegramCommand(text2) {
-  const clean3 = text2.trim();
-  const match = clean3.match(/^\/([a-z0-9_]+)(?:@[a-z0-9_]+)?(?:\s+([\s\S]*))?$/i);
-  if (!match) return clean3;
-  const args = match[2]?.trim().replace(/\s+/g, " ");
-  return `/${match[1].toLowerCase()}${args ? ` ${args}` : ""}`;
-}
-function parseConfirmationCallback(data) {
-  if (data.length > 64) return null;
-  const match = data.match(/^tgcf:([A-Za-z0-9_-]{1,40}):(approve|deny)$/);
-  return match ? { token: match[1], action: match[2] } : null;
-}
-function parseTelegramUpdate(update2, allowlist, maxText = 12e3) {
-  const root = record(update2);
-  const updateId = root && Number.isInteger(root.update_id) && Number(root.update_id) >= 0 ? Number(root.update_id) : null;
-  if (!root || updateId === null) return { ok: false, updateId: null, reason: "malformed" };
-  const callback = record(root.callback_query);
-  const message = callback ? record(callback.message) : record(root.message);
-  const from = callback ? record(callback.from) : record(message?.from);
-  const chat = record(message?.chat);
-  const chatId = typeof chat?.id === "number" && Number.isSafeInteger(chat.id) ? String(chat.id) : void 0;
-  const userId = typeof from?.id === "number" && Number.isSafeInteger(from.id) ? String(from.id) : void 0;
-  if (!message || !from || !chat || !chatId || !userId) return { ok: false, updateId, reason: "malformed", chatId, userId };
-  if (chat.type !== "private") return { ok: false, updateId, reason: "group", chatId, userId };
-  if (from.is_bot === true) return { ok: false, updateId, reason: "sender-bot", chatId, userId };
-  if (!allowlist.has(userId)) return { ok: false, updateId, reason: "not-allowed", chatId, userId };
-  const messageId = typeof message.message_id === "number" && Number.isInteger(message.message_id) ? message.message_id : null;
-  if (messageId === null) return { ok: false, updateId, reason: "malformed", chatId, userId };
-  if (callback) {
-    const callbackQueryId = typeof callback.id === "string" ? callback.id : "";
-    const data = typeof callback.data === "string" ? callback.data : "";
-    const parsed = parseConfirmationCallback(data);
-    if (!callbackQueryId || !parsed) return { ok: false, updateId, reason: "invalid-callback", chatId, userId };
-    return {
-      ok: true,
-      input: {
-        updateId,
-        chatId,
-        userId,
-        messageId,
-        kind: "callback",
-        text: data,
-        callbackQueryId,
-        callbackToken: parsed.token,
-        callbackAction: parsed.action
-      }
-    };
-  }
-  if (typeof message.text !== "string" || !message.text.trim()) {
-    return { ok: false, updateId, reason: "non-text", chatId, userId };
-  }
-  const text2 = normalizeTelegramCommand(message.text);
-  if (text2.length > maxText) return { ok: false, updateId, reason: "too-long", chatId, userId };
-  return {
-    ok: true,
-    input: {
-      updateId,
-      chatId,
-      userId,
-      messageId,
-      kind: text2.startsWith("/") ? "command" : "text",
-      text: text2
-    }
-  };
-}
-function inboundDigest(input) {
-  return createHash12("sha256").update(`${input.updateId}\0${input.chatId}\0${input.userId}\0${input.kind}\0${input.text}`, "utf8").digest("hex");
-}
-function sanitizeTelegramOutput(text2, exactSecrets = []) {
-  let clean3 = text2.replace(ANSI, "").replace(CONTROLS, "");
-  for (const secret of [...exactSecrets].filter(Boolean).sort((a, b) => b.length - a.length)) {
-    clean3 = clean3.split(secret).join("[REDACTED]");
-  }
-  for (const pattern of CREDENTIAL_PATTERNS) clean3 = clean3.replace(pattern, "[REDACTED]");
-  return clean3.trim();
-}
-function splitTelegramText(text2, max = 4096, exactSecrets = []) {
-  if (!Number.isInteger(max) || max < 1) throw new Error("max harus integer positif");
-  const clean3 = sanitizeTelegramOutput(text2, exactSecrets);
-  if (!clean3) return [];
-  const chunks = [];
-  let rest = clean3;
-  while (rest.length > max) {
-    let cut = max;
-    const before2 = rest.charCodeAt(cut - 1);
-    const after = rest.charCodeAt(cut);
-    if (before2 >= 55296 && before2 <= 56319 && after >= 56320 && after <= 57343) cut--;
-    const window2 = rest.slice(0, cut);
-    const newline2 = window2.lastIndexOf("\n");
-    const space = window2.lastIndexOf(" ");
-    const boundary = Math.max(newline2, space);
-    if (boundary >= Math.floor(max / 2)) cut = boundary + 1;
-    chunks.push(rest.slice(0, cut));
-    rest = rest.slice(cut);
-  }
-  if (rest) chunks.push(rest);
-  return chunks;
-}
-var record, ANSI, CONTROLS, CREDENTIAL_PATTERNS, TELEGRAM_GATEWAY_FAILURE_KIND, TELEGRAM_FINAL_REPLY_KINDS;
-var init_protocol = __esm({
-  "src/services/telegram/protocol.ts"() {
-    "use strict";
-    record = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
-    ANSI = /[\u001b\u009b](?:\][^\u0007]*(?:\u0007|\u001b\\)|\[[0-?]*[ -/]*[@-~]|[@-_])/g;
-    CONTROLS = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/g;
-    CREDENTIAL_PATTERNS = [
-      /\b\d{6,}:[A-Za-z0-9_-]{20,}\b/g,
-      /\bhnm_(?:agent_)?[A-Za-z0-9_-]{16,}\b/g,
-      /\bsk-ant-[A-Za-z0-9_-]{16,}\b/g
-    ];
-    TELEGRAM_GATEWAY_FAILURE_KIND = "gateway-failure";
-    TELEGRAM_FINAL_REPLY_KINDS = /* @__PURE__ */ new Set([
-      "final",
-      "decision",
-      "failure",
-      "confirmation",
-      TELEGRAM_GATEWAY_FAILURE_KIND
-    ]);
-  }
-});
-
 // src/services/telegram/runtime.ts
 function setTelegramRuntime(input) {
   registration = {
@@ -63404,7 +63515,7 @@ function parseCodexVersion(out4) {
   return m ? `${m[1]}.${m[2]}.${m[3]}` : null;
 }
 async function getCodexVersion(now = Date.now()) {
-  if (cache3 && now - cache3.at < TTL_MS4) return cache3.version;
+  if (cache3 && now - cache3.at < TTL_MS5) return cache3.version;
   const version = await probeCodexVersion();
   cache3 = { at: now, version };
   return version;
@@ -63420,7 +63531,7 @@ async function codexVersionInfo() {
 function _resetCodexVersionCache() {
   cache3 = null;
 }
-var run3, CODEX_MIN_CLIENT, TTL_MS4, cache3, codexBin2, runVersion;
+var run3, CODEX_MIN_CLIENT, TTL_MS5, cache3, codexBin2, runVersion;
 var init_codex_version = __esm({
   "src/services/codex-version.ts"() {
     "use strict";
@@ -63429,7 +63540,7 @@ var init_codex_version = __esm({
     init_config2();
     run3 = promisify16(execFile17);
     CODEX_MIN_CLIENT = "0.144.0";
-    TTL_MS4 = 5 * 6e4;
+    TTL_MS5 = 5 * 6e4;
     cache3 = null;
     codexBin2 = () => effectiveStr("HANOMAN_CODEX_BIN") ?? "codex";
     runVersion = async (bin, args) => {
@@ -63440,17 +63551,17 @@ var init_codex_version = __esm({
 });
 
 // src/services/agent-tool-catalog.ts
-import { readFileSync as readFileSync25 } from "node:fs";
-import { homedir as homedir12 } from "node:os";
-import { join as join47 } from "node:path";
+import { readFileSync as readFileSync26 } from "node:fs";
+import { homedir as homedir13 } from "node:os";
+import { join as join48 } from "node:path";
 function mcpServerNames(repoDir) {
   const names = [];
-  const claudeJson = readJson2(join47(home(), ".claude.json"));
+  const claudeJson = readJson2(join48(home(), ".claude.json"));
   names.push(...serversOf(claudeJson));
   if (repoDir) {
     const projects = claudeJson?.projects;
     if (projects && typeof projects === "object") names.push(...serversOf(projects[repoDir]));
-    names.push(...serversOf(readJson2(join47(repoDir, ".mcp.json"))));
+    names.push(...serversOf(readJson2(join48(repoDir, ".mcp.json"))));
   }
   names.push(...codexServers());
   return [...new Set(names.filter(Boolean))].sort((a, b) => a.localeCompare(b));
@@ -63463,10 +63574,10 @@ var init_agent_tool_catalog = __esm({
   "src/services/agent-tool-catalog.ts"() {
     "use strict";
     init_src();
-    home = () => process.env.HOME || homedir12();
+    home = () => process.env.HOME || homedir13();
     readJson2 = (path) => {
       try {
-        return JSON.parse(readFileSync25(path, "utf8"));
+        return JSON.parse(readFileSync26(path, "utf8"));
       } catch {
         return null;
       }
@@ -63479,7 +63590,7 @@ var init_agent_tool_catalog = __esm({
     codexServers = () => {
       let text2;
       try {
-        text2 = readFileSync25(join47(home(), ".codex", "config.toml"), "utf8");
+        text2 = readFileSync26(join48(home(), ".codex", "config.toml"), "utf8");
       } catch {
         return [];
       }
@@ -73124,7 +73235,7 @@ init_session_phases();
 init_stage_machine();
 init_notifications2();
 init_sync_notify();
-import { createHash as createHash10 } from "node:crypto";
+import { createHash as createHash11 } from "node:crypto";
 var specNum = (id2) => Number.parseInt(id2.match(/\d+/)?.[0] ?? "0", 10);
 var selectOf = (shape) => Object.fromEntries(
   Object.keys(shape).filter((k) => k !== "blockedBy").map((k) => [k, true])
@@ -73216,7 +73327,7 @@ async function liveSignature() {
 async function specsDigest() {
   const agg = await prisma.spec.aggregate({ _count: { _all: true }, _max: { updatedAt: true }, _sum: { version: true } });
   const db = `${agg._count._all}:${agg._max.updatedAt?.getTime() ?? 0}:${agg._sum.version ?? 0}`;
-  return createHash10("sha1").update(`${db}|${await liveSignature()}`).digest("hex");
+  return createHash11("sha1").update(`${db}|${await liveSignature()}`).digest("hex");
 }
 async function liveSpecs(filter = {}) {
   await liveOverlayTick();
@@ -76879,6 +76990,10 @@ async function fail(req, deps, reason, flowId = null, step = null) {
 // src/services/lead/detect.ts
 var answers = /* @__PURE__ */ new Map();
 var capped = /* @__PURE__ */ new Set();
+function askSignature(a) {
+  const raw = a.questions.length ? a.questions.map((q2) => q2.question).join("\n") : a.message;
+  return raw.toLowerCase().replace(/\s+/g, " ").trim().slice(0, 2e3);
+}
 var failures = /* @__PURE__ */ new Map();
 var failCapped = /* @__PURE__ */ new Set();
 var failedAt = /* @__PURE__ */ new Map();
@@ -76950,7 +77065,9 @@ async function admitAsk(s2, deps = prodDetectDeps) {
   if (!(await deps.optIn()).includes(s2.projectId)) return no("project tak opt-in lead");
   if (!leadActive(cfg, s2.projectId)) return no("lead dijeda untuk project ini");
   if (deps.exited(s2.id)) return no("pane mati");
-  if ((answers.get(s2.id) ?? 0) >= cfg.maxAutoAnswers) {
+  const run6 = answers.get(s2.id);
+  const looping = !!run6 && (s2.sig === void 0 || s2.sig === run6.sig);
+  if (run6 && looping && run6.n >= cfg.maxAutoAnswers) {
     if (!capped.has(s2.id)) {
       capped.add(s2.id);
       const row = await recordDecision({
@@ -76959,9 +77076,9 @@ async function admitAsk(s2, deps = prodDetectDeps) {
         sessionId: s2.id,
         gate: "detected",
         kind: "quality",
-        question: `Sesi ${s2.id} sudah dijawab otomatis ${cfg.maxAutoAnswers}\xD7 berturut-turut.`,
-        answer: "Berhenti menjawab sesi ini; serahkan ke operator.",
-        reason: "Batas jawaban otomatis per sesi tercapai \u2014 pengulangan menandakan lead tak benar-benar membuka jalan buntunya (AC-11).",
+        question: `Sesi ${s2.id} sudah dijawab otomatis ${cfg.maxAutoAnswers}\xD7 berturut-turut untuk pertanyaan yang sama.`,
+        answer: "Berhenti menjawab pertanyaan ini; serahkan ke operator.",
+        reason: "Pertanyaan yang sama terus kembali sesudah dijawab \u2014 pengulangan menandakan lead tak benar-benar membuka jalan buntunya (AC-11, ADR-0223).",
         refs: [],
         confidence: "tinggi",
         action: "none",
@@ -77017,7 +77134,13 @@ async function answerAsk(ask, s2, deps = prodDetectDeps) {
   const out4 = { at: chain.at, flowId: chain.flowId, step: chain.step };
   if (chain.acted && chain.done) {
     if (s2.decisionFile) deps.clearMarker(s2.decisionFile);
-    answers.set(ask.sessionId, (answers.get(ask.sessionId) ?? 0) + 1);
+    const sig = askSignature(ask);
+    const prev = answers.get(ask.sessionId);
+    if (prev?.sig === sig) prev.n++;
+    else {
+      answers.set(ask.sessionId, { sig, n: 1 });
+      capped.delete(ask.sessionId);
+    }
     failures.delete(ask.sessionId);
     return { answered: true, reason: "", ...out4 };
   }
@@ -77025,7 +77148,7 @@ async function answerAsk(ask, s2, deps = prodDetectDeps) {
     failures.set(ask.sessionId, (failures.get(ask.sessionId) ?? 0) + 1);
     failedAt.set(ask.sessionId, deps.now());
   }
-  return { answered: false, reason: chain.reason, ...out4 };
+  return { answered: false, reason: chain.reason, ...out4, ...chain.mismatch ? { mismatch: true } : {} };
 }
 async function runChain(ask, s2, deps) {
   const sid = ask.sessionId;
@@ -77043,6 +77166,7 @@ async function runChain(ask, s2, deps) {
     return { ...r, flowId, step };
   };
   const stop = (reason, failed = false) => ({ acted, done: false, failed, reason, at, flowId, step });
+  const asked = ask.source === "ask-tool";
   if (ask.source === "turn-end") {
     const read2 = readCodexTurn(ask.message);
     if (!read2.asking) return stop(read2.reason);
@@ -77079,6 +77203,13 @@ async function runChain(ask, s2, deps) {
       // `tunggal` di tiap langkah — `chainSteps` kosong tepat di tempat yang paling membutuhkannya.
       chain: true
     };
+    if (asked && q2) {
+      const seen2 = await waitDialogFor(sid, q2, ask.questions, deps);
+      if (seen2 === "none") return stop("dialog tak muncul di pane \u2014 tak ada yang diketik", true);
+      if (seen2 === "other") {
+        return i === 0 ? { ...stop("dialog di pane adalah pertanyaan lain \u2014 tak ada yang diketik"), mismatch: true } : stop("dialog di pane bukan pertanyaan berikutnya rantai ini \u2014 tak ada yang diketik");
+      }
+    }
     let row;
     try {
       row = await deps.decide({ ...req, flowId }, deps.decideDeps);
@@ -77102,9 +77233,11 @@ async function runChain(ask, s2, deps) {
     if (!row) return stop("lead tak menghasilkan keputusan yang berlaku");
     if (row.status !== "berlaku") return stop("lead tak menghasilkan keputusan yang berlaku", true);
     let before2 = "";
-    if (ask.source === "ask-tool") {
-      const text2 = await waitDialog(sid, deps);
-      if (text2 === null) return stop("dialog tak muncul di pane \u2014 tak ada yang diketik", true);
+    if (asked && q2) {
+      const text2 = deps.pane(sid);
+      const screen = readDialogScreen(text2);
+      if (!screen || !dialogFits(screen, q2, ask.questions))
+        return stop("layar dialog berubah selagi lead memutuskan \u2014 tak ada yang diketik");
       before2 = dialogKey(text2);
     }
     if (isTakenOver(sid)) return stop("diambil alih operator");
@@ -77136,13 +77269,29 @@ async function afterLastAnswer(id2, deps) {
   }
   return "pending";
 }
-async function waitDialog(id2, deps) {
+async function waitDialogFor(id2, q2, all, deps) {
+  let sawDialog = false;
   for (let i = 0; i < DIALOG_WAIT_TRIES; i++) {
-    const text2 = deps.pane(id2);
-    if (readDialogScreen(text2)) return text2;
+    const screen = readDialogScreen(deps.pane(id2));
+    if (screen?.kind === "question") {
+      if (dialogFits(screen, q2, all)) return "fit";
+      sawDialog = true;
+    }
     await deps.sleep(CHAIN_POLL_MS);
   }
-  return null;
+  return sawDialog ? "other" : "none";
+}
+var bare = (s2) => s2.toLowerCase().replace(/[^\p{L}\p{N}]+/gu, "");
+function dialogFits(screen, q2, all) {
+  if (screen.kind !== "question") return false;
+  if (screen.tabs.length && screen.tabs.length !== all.length) return false;
+  const title = bare(screen.title);
+  const text2 = bare(q2.question);
+  if (title.length >= 6 && text2 && !text2.startsWith(title) && !title.startsWith(text2)) return false;
+  const labels = q2.options.map((o) => bare(o.label)).filter(Boolean);
+  const shown = screen.options.map(bare).filter(Boolean);
+  if (labels.length && shown.length && !shown.some((s2) => labels.some((l) => l.startsWith(s2) || s2.startsWith(l)))) return false;
+  return true;
 }
 async function waitScreenChange(id2, before2, deps) {
   for (let i = 0; i < CHAIN_POLL_TRIES; i++) {
@@ -77157,6 +77306,8 @@ init_pty();
 var ASK_BUCKET = { capacity: 5, refillMs: 1e4 };
 var GLOBAL_BUCKET = { capacity: 20, refillMs: 500 };
 var SEEN_MAX = 512;
+var ASK_QUEUE_MAX = 8;
+var ASK_MISMATCH_MAX = 2;
 var entries = /* @__PURE__ */ new Map();
 var seen = [];
 var seenSet = /* @__PURE__ */ new Set();
@@ -77236,7 +77387,8 @@ async function intakeAsk(input, deps = prodAskDeps) {
   const verdict = await deps.admit({
     id: input.sessionId,
     specId: input.specId,
-    projectId: input.projectId
+    projectId: input.projectId,
+    sig: askSignature(input.event)
   });
   if (!verdict.ok) return { status: "rejected", reason: verdict.reason };
   seenSet.add(key);
@@ -77252,12 +77404,16 @@ async function intakeAsk(input, deps = prodAskDeps) {
   };
   const ask = toAsk({ sessionId: input.sessionId, agent: input.agent, event: input.event, now });
   const cur = entries.get(input.sessionId);
-  if (cur?.running) {
-    cur.pending = { ask, ctx };
+  if (cur?.busy) {
+    cur.queue.push({ ask, ctx, skips: 0 });
+    if (cur.queue.length > ASK_QUEUE_MAX) {
+      const dropped = cur.queue.shift();
+      console.log(`lead ask ${input.sessionId}: antrean penuh \u2014 tanya ${dropped.ask.askId} dibuang`);
+    }
     return { status: "accepted" };
   }
   clearTakeover(input.sessionId);
-  entries.set(input.sessionId, { ask, ctx, pending: null, running: false });
+  entries.set(input.sessionId, { ask, ctx, skips: 0, queue: [], busy: true, running: false });
   void prune(deps);
   void run2(input.sessionId, deps);
   return { status: "accepted" };
@@ -77311,16 +77467,19 @@ async function run2(sessionId2, deps) {
         step: r.step,
         state: r.answered ? "answered" : "failed"
       };
-      if (!e.pending) break;
-      const next = e.pending;
-      e.pending = null;
+      if (r.mismatch && e.queue.length && e.skips < ASK_MISMATCH_MAX)
+        e.queue.push({ ask: { ...e.ask, state: "queued" }, ctx: e.ctx, skips: e.skips + 1 });
+      const next = e.queue.shift();
+      if (!next) break;
       e.ask = next.ask;
       e.ctx = next.ctx;
+      e.skips = next.skips;
     }
   } finally {
     clearQueued(sessionId2);
     clearDeciding(sessionId2);
     e.running = false;
+    e.busy = false;
     inFlight3--;
     const nextId = waiting.shift();
     if (nextId) void run2(nextId, deps);
@@ -79247,10 +79406,131 @@ async function getCodexLimits(dir2) {
   return dto;
 }
 
+// src/services/antigravity-limits.ts
+init_config2();
+import { execFileSync as execFileSync9 } from "node:child_process";
+import { readFileSync as readFileSync25 } from "node:fs";
+import { homedir as homedir12 } from "node:os";
+import { join as join44 } from "node:path";
+var QUOTA_URL = "https://cloudcode-pa.googleapis.com/v1internal:retrieveUserQuotaSummary";
+var USER_AGENT = "antigravity (hanoman)";
+var TTL_MS4 = 6e4;
+var EXPIRY_SKEW_MS = 3e4;
+var lastOk2 = null;
+var freshUntil3 = 0;
+var UNAVAILABLE2 = { status: "unavailable", windows: [], fetchedAt: null };
+var securityRun2 = (args) => execFileSync9("security", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+function readAgyToken(run6 = securityRun2) {
+  try {
+    let raw = run6(["find-generic-password", "-s", "gemini", "-a", "antigravity", "-w"]).trim();
+    const prefix = "go-keyring-base64:";
+    if (raw.startsWith(prefix)) raw = Buffer.from(raw.slice(prefix.length), "base64").toString("utf8");
+    const tok = JSON.parse(raw)?.token;
+    if (typeof tok?.access_token !== "string" || !tok.access_token) return null;
+    const expiry = typeof tok.expiry === "string" ? Date.parse(tok.expiry) : NaN;
+    return { accessToken: tok.access_token, expiry: Number.isFinite(expiry) ? expiry : null };
+  } catch {
+    return null;
+  }
+}
+var agyHome = () => join44(homedir12(), ".gemini", "antigravity-cli");
+function defaultProject() {
+  try {
+    return readFileSync25(join44(agyHome(), "cache", "default_project_id.txt"), "utf8").trim() || null;
+  } catch {
+    return null;
+  }
+}
+var severityOf2 = (pct3) => pct3 >= 90 ? "critical" : pct3 >= 70 ? "warning" : "normal";
+function windowLabel2(window2) {
+  if (window2 === "5h") return "Sesi 5 jam";
+  if (window2 === "weekly") return "Mingguan";
+  return window2;
+}
+function groupLabel(name2) {
+  if (/^gemini/i.test(name2)) return "Gemini";
+  if (/claude/i.test(name2) && /gpt/i.test(name2)) return "Claude/GPT";
+  return name2;
+}
+function mapQuota(json) {
+  const groups = json?.groups;
+  if (!Array.isArray(groups)) return [];
+  return groups.flatMap((g) => {
+    const group2 = groupLabel(g.displayName ?? "");
+    return (Array.isArray(g.buckets) ? g.buckets : []).flatMap((b) => {
+      if (typeof b.remainingFraction !== "number" || !b.bucketId) return [];
+      const remaining = Math.max(0, Math.min(1, b.remainingFraction));
+      const usedPct = Math.round((1 - remaining) * 100);
+      const label2 = windowLabel2(b.window ?? "");
+      return [{
+        key: `antigravity:${b.bucketId}`,
+        label: group2 ? `${group2} \xB7 ${label2}` : label2,
+        usedPct,
+        resetsAt: b.resetTime ?? null,
+        severity: severityOf2(usedPct),
+        // API tak punya padanan `is_active` claude. Yang paling dekat: bucket yang HABIS.
+        isActive: remaining === 0
+      }];
+    });
+  });
+}
+function fallback2() {
+  return lastOk2 ? { ...lastOk2, status: "stale" } : UNAVAILABLE2;
+}
+var prodDeps = {
+  platform: process.platform,
+  // `HANOMAN_ANTIGRAVITY_LIMITS_FETCH=0` mematikan sumbernya sama sekali (cermin
+  // `HANOMAN_UPDATE_FETCH`): suite test server berjalan di macOS operator, dan route ini tak boleh
+  // membaca Keychain asli lalu memanggil Google dari dalam test.
+  token: () => effectiveStr("HANOMAN_ANTIGRAVITY_LIMITS_FETCH") === "0" ? null : readAgyToken(),
+  project: defaultProject,
+  fetch: (...a) => fetch(...a),
+  now: Date.now
+};
+async function fetchQuota(deps) {
+  if (deps.platform !== "darwin") return fallback2();
+  const tok = deps.token();
+  if (!tok) return fallback2();
+  if (tok.expiry !== null && tok.expiry - EXPIRY_SKEW_MS <= deps.now()) return fallback2();
+  const project = deps.project();
+  try {
+    const res = await deps.fetch(QUOTA_URL, {
+      method: "POST",
+      headers: {
+        authorization: `Bearer ${tok.accessToken}`,
+        "content-type": "application/json",
+        "user-agent": USER_AGENT
+      },
+      body: JSON.stringify(project ? { project } : {}),
+      // Endpoint yang menggantung tak boleh menumpuk koneksi di bawah siar 30 dtk (SPEC-197).
+      signal: AbortSignal.timeout(5e3)
+    });
+    if (!res.ok) return fallback2();
+    const windows = mapQuota(await res.json());
+    if (!windows.length) return fallback2();
+    const dto = {
+      status: "ok",
+      windows,
+      fetchedAt: new Date(deps.now()).toISOString()
+    };
+    lastOk2 = dto;
+    return dto;
+  } catch {
+    return fallback2();
+  }
+}
+async function getAntigravityLimits(deps = prodDeps) {
+  if (lastOk2 && deps.now() < freshUntil3) return lastOk2;
+  const dto = await fetchQuota(deps);
+  if (dto.status === "ok") freshUntil3 = deps.now() + TTL_MS4;
+  return dto;
+}
+
 // src/routes/limits.ts
 async function limits(app3) {
   app3.get("/limits", async () => getLimits());
   app3.get("/limits/codex", async () => getCodexLimits());
+  app3.get("/limits/antigravity", async () => getAntigravityLimits());
 }
 
 // src/routes/codex.ts
@@ -79266,7 +79546,7 @@ init_session_sandbox();
 import { execFile as execFile18 } from "node:child_process";
 import { promisify as promisify17 } from "node:util";
 var run4 = promisify17(execFile18);
-var TTL_MS5 = 5 * 6e4;
+var TTL_MS6 = 5 * 6e4;
 var unavailable = (error) => ({ version: null, error });
 var CHANGED2 = "Konfigurasi runtime berubah; periksa versi kembali.";
 function parseAntigravityVersion(output) {
@@ -79318,7 +79598,7 @@ function createAntigravityVersionService(deps = {}) {
       cache6 = void 0;
       pending2 = void 0;
     }
-    if (cache6 && now() - cache6.at < TTL_MS5) return Promise.resolve(cache6.info);
+    if (cache6 && now() - cache6.at < TTL_MS6) return Promise.resolve(cache6.info);
     if (pending2) return pending2;
     const startedGeneration = generation2;
     const request = probe().catch(() => unavailable("Versi Antigravity tidak dapat diperiksa.")).then((info) => {
@@ -79344,7 +79624,7 @@ init_src2();
 init_src();
 import { randomUUID as randomUUID14 } from "node:crypto";
 import { readFile as readFile8, writeFile as writeFile6, rename as rename5, mkdir as mkdir9, rm as rm9 } from "node:fs/promises";
-import { dirname as dirname18, join as join45 } from "node:path";
+import { dirname as dirname18, join as join46 } from "node:path";
 
 // src/services/model-catalog-parser.ts
 init_zod();
@@ -79451,7 +79731,7 @@ init_session_sandbox();
 import { spawn as spawn5 } from "node:child_process";
 import { mkdtemp as mkdtemp2, rm as rm8 } from "node:fs/promises";
 import { tmpdir as tmpdir9 } from "node:os";
-import { join as join44 } from "node:path";
+import { join as join45 } from "node:path";
 var MAX_BYTES = 4 * 1024 * 1024;
 var TIMEOUT_MS = 2e4;
 var quote3 = (s2) => "'" + s2.replaceAll("'", "'\\''") + "'";
@@ -79550,7 +79830,7 @@ function runCatalogCommand(command, agent, cwd, env, timeoutMs = TIMEOUT_MS) {
 }
 async function probeModelCatalog(agent) {
   assertAntigravityLaunch(agent);
-  const cwd = await mkdtemp2(join44(tmpdir9(), "hanoman-models-"));
+  const cwd = await mkdtemp2(join45(tmpdir9(), "hanoman-models-"));
   const env = agentEnvironment(agent, process.env);
   for (const key of ["HANOMAN_CLAUDE_BIN", "HANOMAN_CODEX_BIN", "HANOMAN_PODMAN_BIN", "HANOMAN_ANTIGRAVITY_BIN"]) {
     const value = effectiveStr(key);
@@ -79661,7 +79941,7 @@ async function writeModelCatalogCache(file, catalog, current = () => true) {
     await rm9(temp, { force: true });
   }
 }
-var cacheFile = () => join45(resolveHome(), "model-catalog.json");
+var cacheFile = () => join46(resolveHome(), "model-catalog.json");
 var modelCatalogService = createModelCatalogService({
   probe: probeModelCatalog,
   key: catalogProbeKey,
@@ -81158,6 +81438,9 @@ var GROUPS = [
   // ekor + cache 30s, jadi biayanya jauh di bawah panggilan jaringan claude. Frame lahir hanya saat
   // isinya berubah (dedup signature), dan snapshot codex baru bergerak saat ada sesi codex jalan.
   { everyTicks: 30, last: "", build: async () => ({ t: "codexLimits", limits: await getCodexLimits() }) },
+  // ADR-0224 · limit Antigravity — grup TERPISAH. Panggilan jaringan ber-cache 60 dtk di service, dan
+  // nol panggilan saat token agy kedaluwarsa; dedup signature membuat frame lahir saat isinya berubah.
+  { everyTicks: 30, last: "", build: async () => ({ t: "antigravityLimits", limits: await getAntigravityLimits() }) },
   // SPEC-214 · deteksi update jarang berubah; recompute tiap 300 dtk, dedup signature → siar hanya
   // saat status berubah. getUpdateStatus cache 15s + fetch ter-gate (server.ts) → attach tak menahan.
   { everyTicks: 300, last: "", build: async () => ({ t: "update", update: await getUpdateStatus() }) },
@@ -81585,7 +81868,7 @@ init_src();
 init_db();
 import { gunzipSync, gzipSync } from "node:zlib";
 import { mkdir as mkdir10, rename as rename6, writeFile as writeFile7 } from "node:fs/promises";
-import { join as join46 } from "node:path";
+import { join as join47 } from "node:path";
 
 // src/services/device-auth.ts
 function bearerToken2(req) {
@@ -81841,9 +82124,9 @@ async function sync_default(app3) {
       const deviceId = req.device.id;
       const withTranscriptKey = await Promise.all(parsed.data.entries.map(async (e) => {
         if (!e.transcript) return e;
-        const dir2 = join46(resolveDataDirs().home, "remote-transcripts", deviceId);
+        const dir2 = join47(resolveDataDirs().home, "remote-transcripts", deviceId);
         await mkdir10(dir2, { recursive: true, mode: 448 });
-        const final = join46(dir2, `${e.seq}.txt`);
+        const final = join47(dir2, `${e.seq}.txt`);
         const tmp = `${final}.tmp`;
         await writeFile7(tmp, e.transcript, { encoding: "utf8", mode: 384 });
         await rename6(tmp, final);
@@ -82238,7 +82521,10 @@ async function session_events_default(app3) {
       event
     });
     if (r.status === "duplicate") return reply.code(202).send({ duplicate: true });
-    if (r.status === "rate-limited") return reply.code(429).send({ error: "terlalu banyak event" });
+    if (r.status === "rate-limited") {
+      console.log(`lead ask ${sessionId2}: tanya ${event.askId} ditolak batas laju \u2014 menunggu manusia`);
+      return reply.code(429).send({ error: "terlalu banyak event" });
+    }
     if (r.status === "rejected") return reply.code(202).send({ rejected: true, reason: r.reason });
     return reply.code(202).send({ accepted: true });
   });
@@ -85126,8 +85412,8 @@ init_codex_trust();
 init_qa_attachment_transfer();
 init_uploads();
 import { createHash as createHash21 } from "node:crypto";
-import { execFileSync as execFileSync9 } from "node:child_process";
-import { join as join48 } from "node:path";
+import { execFileSync as execFileSync10 } from "node:child_process";
+import { join as join49 } from "node:path";
 var QaSessionError = class extends Error {
   constructor(code, message, needsBind = false) {
     super(message);
@@ -85154,14 +85440,14 @@ async function startQaFindingSession(d, fid) {
       const saved = await saveSessionUpload(id2, bytes, a.mimeType);
       files2.push(`${JSON.stringify(a.filename)} (${a.mimeType}): ${saved.path}`);
     }
-    const wt = join48(repoDir, ".worktrees", id2);
+    const wt = join49(repoDir, ".worktrees", id2);
     const branch = `qa/${id2.slice(3)}`;
     const reused = realGit.worktreeAlive(wt);
     try {
       if (!reused) {
         const base3 = realGit.revParse(repoDir, branch) ? branch : "HEAD";
         realGit.addWorktree(repoDir, wt, base3);
-        execFileSync9("git", ["checkout", "-B", branch], { cwd: wt, encoding: "utf8" });
+        execFileSync10("git", ["checkout", "-B", branch], { cwd: wt, encoding: "utf8" });
       }
     } catch (e) {
       throw new QaSessionError(422, `Gagal membuat worktree QA: ${e.message}`);
@@ -86695,7 +86981,7 @@ init_src();
 init_db();
 import { mkdirSync as mkdirSync20, mkdtempSync as mkdtempSync5, rmSync as rmSync14, writeFileSync as writeFileSync19 } from "node:fs";
 import { tmpdir as tmpdir10 } from "node:os";
-import { join as join49 } from "node:path";
+import { join as join50 } from "node:path";
 var STAGE_LABEL = {
   brainstorming: "Dirumuskan",
   objective: "Dirumuskan",
@@ -86738,7 +87024,7 @@ function renderTicketDoc(tickets2) {
 ${baris.join("\n")}`;
 }
 async function buildChatWorkspace(projectId) {
-  const dir2 = mkdtempSync5(join49(tmpdir10(), "hanoman-portal-chat-"));
+  const dir2 = mkdtempSync5(join50(tmpdir10(), "hanoman-portal-chat-"));
   try {
     const project = await prisma.project.findUnique({
       where: { id: projectId },
@@ -86753,7 +87039,7 @@ async function buildChatWorkspace(projectId) {
     });
     const files2 = [];
     const tulis = (rel, isi) => {
-      writeFileSync19(join49(dir2, rel), isi, { mode: 384 });
+      writeFileSync19(join50(dir2, rel), isi, { mode: 384 });
       files2.push(rel);
     };
     tulis("project.md", renderProjectDoc(project));
@@ -86761,11 +87047,11 @@ async function buildChatWorkspace(projectId) {
     tulis("laporan.md", renderTicketDoc(tickets2.map((t) => toPortalTicket(t, null))));
     const prds = await listPrds(projectId);
     if (prds.length) {
-      mkdirSync20(join49(dir2, "dokumen"), { mode: 448 });
+      mkdirSync20(join50(dir2, "dokumen"), { mode: 448 });
       for (const prd of prds) {
         const isi = await readPrd(projectId, prd.path);
         if (!isi) continue;
-        tulis(join49("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
+        tulis(join50("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
       }
     }
     return { dir: dir2, files: files2, cleanup: () => rmSync14(dir2, { recursive: true, force: true }) };
@@ -87292,13 +87578,13 @@ init_db();
 // src/services/bootstrap.ts
 import { createHash as createHash22, randomBytes as randomBytes11, timingSafeEqual as timingSafeEqual5 } from "node:crypto";
 import { chmod as chmod2, lstat as lstat3, mkdir as mkdir11, readFile as readFile9, unlink as unlink5, writeFile as writeFile8 } from "node:fs/promises";
-import { join as join50 } from "node:path";
-var TTL_MS6 = 15 * 6e4;
+import { join as join51 } from "node:path";
+var TTL_MS7 = 15 * 6e4;
 var SETUP_TOKEN_FILE = "setup.token";
 var BootstrapError = class extends Error {
   code = "BOOTSTRAP_PROOF";
 };
-var tokenPath = (home3) => join50(home3, SETUP_TOKEN_FILE);
+var tokenPath = (home3) => join51(home3, SETUP_TOKEN_FILE);
 async function readStored(home3) {
   try {
     const info = await lstat3(tokenPath(home3));
@@ -87330,7 +87616,7 @@ async function ensureSetupToken(home3, now = Date.now()) {
     });
   }
   const token = randomBytes11(32).toString("base64url");
-  const expiresAt = now + TTL_MS6;
+  const expiresAt = now + TTL_MS7;
   try {
     await writeFile8(tokenPath(home3), `${token}
 ${new Date(expiresAt).toISOString()}
@@ -88136,7 +88422,7 @@ init_event_log();
 init_transcript_store();
 init_src2();
 import { readFile as readFile10 } from "node:fs/promises";
-import { join as join51 } from "node:path";
+import { join as join52 } from "node:path";
 function decodeCursor(c) {
   if (!c) return null;
   try {
@@ -88174,7 +88460,7 @@ async function readRemoteTranscript(id2) {
   const row = await prisma.logEntry.findUnique({ where: { id: id2 } });
   if (!row || row.lane !== "transcript" || !row.transcriptKey) return null;
   if (row.deviceId === "local") return readTranscript(row.transcriptKey);
-  const path = join51(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
+  const path = join52(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
   try {
     return await readFile10(path, "utf8");
   } catch {
@@ -88841,7 +89127,7 @@ async function tick4(now, deps, end2 = prodEnd) {
     console.error("scheduler drain:", e);
   }
 }
-var prodDeps = {
+var prodDeps2 = {
   liveCount: async () => (await listSessionsAsync()).filter((s2) => !s2.exited).length,
   isLive: async (specId) => {
     const s2 = await getSessionAsync(sessionIdForSpec(specId));
@@ -88875,7 +89161,7 @@ var prodDeps = {
 };
 var TICK_MS3 = 1e4;
 var timer7;
-function startScheduler(deps = prodDeps) {
+function startScheduler(deps = prodDeps2) {
   if (timer7) return;
   timer7 = setInterval(() => void tick4(Date.now(), deps), TICK_MS3);
   timer7.unref();
@@ -88910,7 +89196,7 @@ init_src();
 init_db();
 init_session_admission2();
 init_notifications2();
-var prodDeps2 = {
+var prodDeps3 = {
   // ADR-0170 · mengamandemen ADR-0169 keputusan #4: `bypassCapacity` DICABUT. Auto-resume kini
   // tunduk cap/beban host seperti "Lanjutkan" manual — mesin 8 GB operator sudah dua kali kernel
   // panic akibat batch sesi paralel tepat SAAT boot (memori mac-mini-8gb-panic-agen-paralel),
@@ -88919,7 +89205,7 @@ var prodDeps2 = {
   recordFail: recordFailure,
   recordDeferred: recordFailure
 };
-async function resumeReconciledSessions(cutoff, deps = prodDeps2) {
+async function resumeReconciledSessions(cutoff, deps = prodDeps3) {
   const report = { resumed: [], failed: [], deferred: [] };
   const specIds = await reconciledSpecIdsSince(cutoff);
   if (!specIds.length) return report;
@@ -89441,9 +89727,9 @@ async function pruneLogs(now, retention, opts2 = {}) {
 }
 async function reconcileRemoteTranscripts() {
   const { readdir: readdir10, unlink: unlink6, stat: stat8 } = await import("node:fs/promises");
-  const { join: join52 } = await import("node:path");
+  const { join: join53 } = await import("node:path");
   const { resolveDataDirs: resolveDataDirs2 } = await Promise.resolve().then(() => (init_src2(), src_exports));
-  const root = join52(resolveDataDirs2().home, "remote-transcripts");
+  const root = join53(resolveDataDirs2().home, "remote-transcripts");
   let deviceDirs;
   try {
     deviceDirs = await readdir10(root);
@@ -89457,16 +89743,16 @@ async function reconcileRemoteTranscripts() {
   for (const dev of deviceDirs) {
     let files2;
     try {
-      files2 = await readdir10(join52(root, dev));
+      files2 = await readdir10(join53(root, dev));
     } catch {
       continue;
     }
     for (const f of files2) {
       const key = `${dev}/${f}`;
       if (referenced.has(key)) continue;
-      const st = await stat8(join52(root, dev, f)).catch(() => null);
+      const st = await stat8(join53(root, dev, f)).catch(() => null);
       if (!st || Date.now() - st.mtimeMs < gracePeriodMs) continue;
-      await unlink6(join52(root, dev, f)).catch(() => {
+      await unlink6(join53(root, dev, f)).catch(() => {
       });
       orphans++;
     }