hanoman 0.9.30 → 0.9.32

package/dist/server.js

@@ -5474,6 +5474,8 @@ var init_entities = __esm({
       // SPEC-184
       notifyDecisionSound: external_exports.enum(NOTIFY_SOUNDS).default("alert"),
       // SPEC-184
+      notifyDecisionTelegram: external_exports.boolean().default(true),
+      // ADR-0226 · dorong "menunggu keputusan" ke Telegram
       agentAccessEnabled: external_exports.boolean().default(false),
       // SPEC-257 · master switch akses AI agent
       scheduler: zScheduler.default(SCHEDULER_DEFAULTS),
@@ -7613,12 +7615,16 @@ var init_session_admission = __esm({
 function flowForSource(source) {
   return source === "qa" ? "qa" : source === "audit" ? "audit" : source === "goal" ? "goal" : source === "no_effort" ? "no_effort" : "feature";
 }
+function formatExitIntent(pid, code) {
+  return `${pid} ${code}
+`;
+}
 function subKey(topic, params) {
   const canon = {};
   for (const k of Object.keys(params).sort()) if (params[k] !== void 0) canon[k] = params[k];
   return `${topic}|${JSON.stringify(canon)}`;
 }
-var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zMarkSpecReviewed, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, isGoalShapedFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zSetupApply, zChangePassword, zAdminPasswordReset, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, PROVISION_PROFILES, COMPONENT_IDS, zProvision, UPDATE_RESTART_EXIT, CONFIG_RESTART_EXIT, MANUAL_RESTART_EXIT, zUpdateApplyBody, MAX_SUBS, zSubPage, zSubLimit, zTopicParams, zEventsClientMsg, zTicketView, zTicketAttachmentView, zSpecAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
+var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zMarkSpecReviewed, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, isGoalShapedFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zSetupApply, zChangePassword, zAdminPasswordReset, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, PROVISION_PROFILES, COMPONENT_IDS, zProvision, UPDATE_RESTART_EXIT, CONFIG_RESTART_EXIT, MANUAL_RESTART_EXIT, EXIT_INTENT_FILE, zUpdateApplyBody, MAX_SUBS, zSubPage, zSubLimit, zTopicParams, zEventsClientMsg, zTicketView, zTicketAttachmentView, zSpecAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
 var init_dto = __esm({
   "../shared/src/dto.ts"() {
     "use strict";
@@ -8153,6 +8159,7 @@ var init_dto = __esm({
     UPDATE_RESTART_EXIT = 75;
     CONFIG_RESTART_EXIT = 76;
     MANUAL_RESTART_EXIT = 77;
+    EXIT_INTENT_FILE = "exit-intent";
     zUpdateApplyBody = external_exports.object({ confirm: external_exports.boolean().optional() });
     MAX_SUBS = 16;
     zSubPage = external_exports.number().int().min(1).max(1e4);
@@ -17096,6 +17103,11 @@ var init_verify_scope = __esm({
       '  test-nya memang berjalan, jangan menerima "no test files" sebagai bukti.',
       "- Typecheck: hanya paket yang tersentuh (mis. `pnpm --filter ./server typecheck`).",
       "  JANGAN `pnpm -r typecheck` \u2014 itu menyalakan satu proses tsc per paket sekaligus.",
+      "- Ritme: per task jalankan berkas test yang task itu sentuh saja.",
+      "  JANGAN menjalankan ulang berkas test yang sudah hijau selama kode yang diujinya",
+      "  tak berubah sejak itu. Typecheck paket tersentuh sesudah task yang mengubah",
+      "  tipe/kontrak ekspor, bukan tiap task. Gabungan semua test tersentuh + typecheck",
+      "  dijalankan SEKALI di akhir, sebelum melapor.",
       "- Lint: hanya berkas yang berubah, bukan seluruh repo.",
       "- Build penuh: hanya bila yang kamu ubah memang soal build/bundling.",
       "- Boot server + curl / smoke end-to-end: hanya bila task ini menyentuh endpoint atau perilaku",
@@ -17441,7 +17453,7 @@ Stack: ${project.stack || "\u2014"}`,
 ${cron.prompt}`
   ].join("\n\n");
 }
-var PIPELINES, WORK_PHASES, DECIDER, ASK_ROUTE, AMBIGUOUS, AUTONOMY_CLAUSE, AUTONOMY_CLAUSE_FULL, autonomyClause, phaseInstruction, skillInstruction, auditDecisionInstruction, ESCALATION_CONTRACT, auditOnlyInstruction, auditContinuationInstruction, auditContinuationForOrchestrator, writesCode, scopeClause, codeStyleClause, methodClause, attachmentClause, orchestratorAttachmentClause, PROJECT_METHOD, specContext, goalDetail, goalBlock, goalContext, projectContext, scaffoldContext, prdBriefBlock, prdAuditBlock, prdContext, breakdownContext, prdPhaseLines, breakdownPhaseLines, resumeClause, RESUMED_WORKTREE_NOTE, REVERSE_PHASE_GUIDE, SCAFFOLD_PHASE_GUIDE;
+var PIPELINES, WORK_PHASES, DECIDER, ASK_ROUTE, AMBIGUOUS, AUTONOMY_CLAUSE, AUTONOMY_CLAUSE_FULL, autonomyClause, PLAN_SHAPE, phaseInstruction, skillInstruction, auditDecisionInstruction, ESCALATION_CONTRACT, auditOnlyInstruction, auditContinuationInstruction, auditContinuationForOrchestrator, writesCode, scopeClause, codeStyleClause, methodClause, attachmentClause, orchestratorAttachmentClause, PROJECT_METHOD, specContext, goalDetail, goalBlock, goalContext, projectContext, scaffoldContext, prdBriefBlock, prdAuditBlock, prdContext, breakdownContext, prdPhaseLines, breakdownPhaseLines, resumeClause, RESUMED_WORKTREE_NOTE, REVERSE_PHASE_GUIDE, SCAFFOLD_PHASE_GUIDE;
 var init_prompt = __esm({
   "../runner/src/prompt.ts"() {
     "use strict";
@@ -17458,12 +17470,14 @@ var init_prompt = __esm({
     AUTONOMY_CLAUSE = `Jalankan seluruh pipeline sampai tuntas tanpa berhenti di batas antar-fase. Checkpoint "review"/"approval"/"need review" milik skill superpowers BUKAN titik berhenti di sini \u2014 lanjut saja ke fase berikutnya. Berhenti HANYA untuk ${AMBIGUOUS}: JANGAN memutuskannya sendiri, ${ASK_ROUTE} Selain itu, terus lanjut.`;
     AUTONOMY_CLAUSE_FULL = `Kamu diluncurkan scheduler \u2014 mungkin tak ada manusia yang sedang menonton terminal ini. Tembus seluruh pipeline sampai stage \`done\`, lalu commit & push: checkpoint "review"/"approval" milik skill BUKAN titik berhenti dan jangan menunggu persetujuan siapa pun. Tetapi JANGAN memutuskan sendiri ${AMBIGUOUS}: ${ASK_ROUTE} Catat keputusan penting di pesan commit. Merge ke branch utama tetap dilakukan manusia, bukan kamu.`;
     autonomyClause = (mode) => mode === "full-control" ? AUTONOMY_CLAUSE_FULL : AUTONOMY_CLAUSE;
+    PLAN_SHAPE = 'Bentuk plan: rencana, bukan kode. Tiap task `- [ ]` adalah satu irisan perilaku yang bisa diverifikasi: berkas yang disentuh, perilaku yang dibangun, AC yang dipenuhinya, dan test yang membuktikannya (nama test + kasus intinya dalam satu kalimat). JANGAN menulis isi implementasi maupun isi test lengkap \u2014 Execute yang menulisnya; kode di plan ditulis dua kali. Potongan kode hanya untuk kontrak yang tak boleh ditafsirkan (signature/tipe ekspor, skema, bentuk payload API), masing-masing pendek. Jangan memecah tulis-test, jalankan, implementasi, dan commit menjadi kotak terpisah. Sasaran \xB1300 baris; lebih panjang biasanya tanda kode ikut tertulis. Aturan ini mengalahkan anjuran "kode lengkap di setiap langkah" dan "langkah 2\u20135 menit" milik skill plan mana pun.';
     phaseInstruction = (phases2, method) => {
       const base3 = `Kerjakan fase berurutan: ${phases2.join(" \u2192 ")}.
 Setiap kali sebuah fase selesai (atau kamu putuskan dilewati), append satu baris ke berkas di $HANOMAN_PHASE_FILE \u2014 persis: \`echo "<Nama Fase> done" >> "$HANOMAN_PHASE_FILE"\`, atau \`skipped\` sebagai ganti \`done\`. Nama fase ditulis apa adanya seperti di atas.`;
       if (!phases2.includes("Plan") || !phases2.includes("Execute")) return base3;
       return base3 + `
-Execute BELUM selesai selama plan (\`${method.planDir}/**\`) masih punya task \`- [ ]\`: kerjakan SEMUA PR/task sampai tiap kotak jadi \`- [x]\` sebelum menulis \`Execute done\`. hanoman menahan backlog di \`executing\`, bukan \`done\`, selama masih ada \`- [ ]\`.`;
+Execute BELUM selesai selama plan (\`${method.planDir}/**\`) masih punya task \`- [ ]\`: kerjakan SEMUA PR/task sampai tiap kotak jadi \`- [x]\` sebelum menulis \`Execute done\`. hanoman menahan backlog di \`executing\`, bukan \`done\`, selama masih ada \`- [ ]\`.
+${PLAN_SHAPE}`;
     };
     skillInstruction = (flow2, phases2, method) => {
       const lines2 = phases2.map((p3) => {
@@ -18620,7 +18634,7 @@ function backlogGuide(flow2, phase, ctx) {
   const m = ctx.method;
   switch (phase) {
     case "Brainstorm":
-      return `- Brainstorm: gali konteks, alternatif, dan keputusan untuk backlog ini dari Source of Truth dan kode. Tulis hasilnya sebagai bagian \`## Konteks & keputusan\` di dokumen spec baru di \`${m.specDir}/\` (nama berkas \`<YYYY-MM-DD>-<spec-id>-<slug>-design.md\`) dan laporkan path-nya.` + (ctx.fromAudit ? ` Backlog ini LANJUTAN audit ${ctx.fromAudit}: baca \`internal/docs/research/audit-${ctx.fromAudit.toLowerCase()}-*.md\` lebih dulu dan pakai temuannya sebagai bahan \u2014 jangan menginvestigasi ulang dari nol.` : "");
+      return `- Brainstorm: gali konteks, alternatif, dan keputusan untuk backlog ini dari Source of Truth dan kode. Tulis hasilnya sebagai bagian \`## Konteks & keputusan\` di dokumen spec baru di \`${m.specDir}/\` (nama berkas \`<YYYY-MM-DD>-<spec-id>-<slug>-design.md\`) dan laporkan path-nya. ${FRONT_LOADED_DECISIONS("sampai Execute")} Tulis jawabannya ke \`## Konteks & keputusan\`.` + (ctx.fromAudit ? ` Backlog ini LANJUTAN audit ${ctx.fromAudit}: baca \`internal/docs/research/audit-${ctx.fromAudit.toLowerCase()}-*.md\` lebih dulu dan pakai temuannya sebagai bahan \u2014 jangan menginvestigasi ulang dari nol.` : "");
     case "Objective":
       return "- Objective: baca dokumen spec dari fase Brainstorm (path-nya di serah-terima), lalu tambahkan bagian `## Objective` berisi SATU objective terukur beserta kriteria suksesnya.";
     case "Spec":
@@ -18629,11 +18643,11 @@ function backlogGuide(flow2, phase, ctx) {
     // default skill) lolos hampa. Nama dikunci seperti Brainstorm, dan path persisnya diteruskan
     // orchestrator ke Execute & reviewer — bukan pola glob yang bisa mencocoki plan backlog lain.
     case "Plan":
-      return `- Plan: tulis plan implementasi berkotak \`- [ ]\` untuk backlog ini dari dokumen spec-nya (path di serah-terima) ke SATU berkas \`${m.planDir}/<YYYY-MM-DD>-<spec-id>-<slug>.md\` (spec-id backlog ini huruf kecil, mis. \`2026-09-25-spec-123-ekspor-csv.md\` \u2014 nama tanpa spec-id membuat hanoman tak menemukan plan-nya). Laporkan path PERSIS berkas itu di \`Artefak:\`; orchestrator meneruskannya ke Execute.`;
+      return `- Plan: tulis plan implementasi berkotak \`- [ ]\` untuk backlog ini dari dokumen spec-nya (path di serah-terima) ke SATU berkas \`${m.planDir}/<YYYY-MM-DD>-<spec-id>-<slug>.md\` (spec-id backlog ini huruf kecil, mis. \`2026-09-25-spec-123-ekspor-csv.md\` \u2014 nama tanpa spec-id membuat hanoman tak menemukan plan-nya). Laporkan path PERSIS berkas itu di \`Artefak:\`; orchestrator meneruskannya ke Execute. ${PLAN_SHAPE}`;
     case "Execute":
       return `- Execute: kerjakan plan backlog ini \u2014 path persisnya di baris \`Artefak fase sebelumnya:\` serah-terima (bila tak ada: berkas di \`${m.planDir}/\` yang namanya memuat spec-id backlog ini). Execute BELUM selesai selama plan masih punya task \`- [ ]\`: kerjakan SEMUA task sampai tiap kotak jadi \`- [x]\` sebelum melapor \`Status: selesai\`. hanoman menahan backlog di \`executing\`, bukan \`done\`, selama masih ada \`- [ ]\`. Laporan \`Status: selesai\` wajib memuat tabel \`AC \u2192 bukti\`: setiap acceptance criteria dokumen spec (qa jalur-cepat: dokumen audit) \u2192 perintah yang kamu jalankan beserta hasil yang kamu baca, atau path:baris yang membuktikannya. AC tanpa bukti = belum selesai; laporanmu diperiksa ulang sebelum fase ditutup.`;
     case "Audit":
-      return flow2 === "audit" ? "- Audit: ini audit-only \u2014 investigasi SAJA, JANGAN menulis perbaikan kode apa pun. Telusuri akar masalah / log / jawaban dan nilai apakah issue terdefinisi dengan baik. Laporkan temuan beserta buktinya; dokumennya ditulis fase Laporan." : "- Audit: telusuri akar masalah dengan bukti (reproduksi, log, kode) dan tulis dokumen audit ke `internal/docs/research/audit-<spec-id>-<slug>.md`. Lalu putuskan jalurnya dari hasil Audit, bukan default: bila temuan berconfidence tinggi dan perbaikannya bisa dikerjakan langsung (diff kecil, akar masalah jelas), tulis `Rekomendasi fase: jalur-cepat` beserta alasannya \u2014 orchestrator akan melewati Spec & Plan dan dokumen audit menjadi doc-of-record perbaikan itu. Bila temuan luas, berisiko, atau ambigu, tulis `Rekomendasi fase: penuh`.";
+      return flow2 === "audit" ? "- Audit: ini audit-only \u2014 investigasi SAJA, JANGAN menulis perbaikan kode apa pun. Telusuri akar masalah / log / jawaban dan nilai apakah issue terdefinisi dengan baik. Laporkan temuan beserta buktinya; dokumennya ditulis fase Laporan." : "- Audit: telusuri akar masalah dengan bukti (reproduksi, log, kode) dan tulis dokumen audit ke `internal/docs/research/audit-<spec-id>-<slug>.md`. Lalu putuskan jalurnya dari hasil Audit, bukan default: bila temuan berconfidence tinggi dan perbaikannya bisa dikerjakan langsung (diff kecil, akar masalah jelas), tulis `Rekomendasi fase: jalur-cepat` beserta alasannya \u2014 orchestrator akan melewati Spec & Plan dan dokumen audit menjadi doc-of-record perbaikan itu. Bila temuan luas, berisiko, atau ambigu, tulis `Rekomendasi fase: penuh`. " + FRONT_LOADED_DECISIONS("Spec, Plan, dan Execute") + " Catat jawabannya di dokumen audit.";
     case "Laporan":
       return "- Laporan: tulis DOKUMEN AUDIT ke Source of Truth `internal/docs/research/audit-<spec-id>-<slug>.md` (ikuti konvensi audit yang ada), tautkan di `internal/docs/README.md`, memuat: keluhan/pertanyaan, temuan (dengan bukti/log), apakah issue terdefinisi baik, dan rekomendasi tindak lanjut. Commit dokumen itu. Tak ada kode fitur.\n\n" + ESCALATION_CONTRACT;
     case "Goal":
@@ -18775,7 +18789,7 @@ function withPhaseDelegation(phaseDefs, roster, runtime) {
 ${clause}` } : def2;
   });
 }
-var REVIEWER_AGENT_NAME, PROJECT_FLOWS, DOC_WRITING_PHASES, PHASE_AGENT_AUTONOMY, PHASE_AGENT_RULES, PHASE_AGENT_REPORT, ATTACHMENT_NOTE, TERMINAL_ASK, PHASE_AGENT_ASK, TERMINAL_HANDOFF, PHASE_AGENT_HANDOFF, forPhaseAgent, REVIEWER_RULES, roleOf, liveCustoms, NATIVE_PHASE_PROTOCOL;
+var REVIEWER_AGENT_NAME, PROJECT_FLOWS, DOC_WRITING_PHASES, PHASE_AGENT_AUTONOMY, FOREGROUND_RULE, PHASE_AGENT_RULES, PHASE_AGENT_REPORT, ATTACHMENT_NOTE, FRONT_LOADED_DECISIONS, TERMINAL_ASK, PHASE_AGENT_ASK, TERMINAL_HANDOFF, PHASE_AGENT_HANDOFF, forPhaseAgent, REVIEWER_RULES, roleOf, liveCustoms, NATIVE_PHASE_PROTOCOL;
 var init_phase_agents = __esm({
   "../runner/src/phase-agents.ts"() {
     "use strict";
@@ -18785,13 +18799,15 @@ var init_phase_agents = __esm({
     REVIEWER_AGENT_NAME = phaseAgentName(REVIEWER_CELL);
     PROJECT_FLOWS = /* @__PURE__ */ new Set(["reverse", "scaffold", "prd", "breakdown"]);
     DOC_WRITING_PHASES = /* @__PURE__ */ new Set(["Docs teknis", "Konvensi & index", "Doc index"]);
-    PHASE_AGENT_AUTONOMY = `Kamu dipanggil orchestrator sesi hanoman, bukan manusia. Checkpoint "review"/"approval" milik skill BUKAN titik berhenti. Tetapi kamu TIDAK BOLEH memutuskan sendiri hal yang masih ambigu dan akan mempengaruhi hasil \u2014 percabangan data model, kontrak API, scope, perilaku yang terlihat pengguna, atau asumsi yang terpaksa kamu ambil agar bisa lanjut \u2014 dan kamu tak bisa bertanya langsung. Daftarkan SEMUANYA di bagian \`Keputusan terbuka:\` laporanmu (tanpa batas jumlah; tiap butir berupa pertanyaan bernomor diakhiri \`?\` beserta opsi dan rekomendasimu), begitu juga bila panduan fase menyuruhmu bertanya ke manusia, lalu tulis \`Status: menunggu-keputusan\` dan berhenti. Jawabannya datang sebagai pesan susulan ke agen yang sama \u2014 lanjutkan dari sana; bila jawaban itu memunculkan ambiguitas baru, laporkan lagi dengan cara yang sama. Yang menjawab ditentukan hanoman \u2014 ${DECIDER}.`;
+    PHASE_AGENT_AUTONOMY = `Kamu dipanggil orchestrator sesi hanoman, bukan manusia. Checkpoint "review"/"approval" milik skill BUKAN titik berhenti. Tetapi kamu TIDAK BOLEH memutuskan sendiri hal yang masih ambigu dan akan mempengaruhi hasil \u2014 percabangan data model, kontrak API, scope, perilaku yang terlihat pengguna, atau asumsi yang terpaksa kamu ambil agar bisa lanjut \u2014 dan kamu tak bisa bertanya langsung. Daftarkan SEMUANYA di bagian \`Keputusan terbuka:\` laporanmu (tanpa batas jumlah; tiap butir berupa pertanyaan bernomor diakhiri \`?\` beserta opsi dan rekomendasimu), begitu juga bila panduan fase menyuruhmu bertanya ke manusia, lalu tulis \`Status: menunggu-keputusan\` dan berhenti. Jawabannya datang sebagai pesan susulan ke agen yang sama \u2014 lanjutkan dari sana; bila jawaban itu memunculkan ambiguitas baru, laporkan lagi dengan cara yang sama. Yang menjawab ditentukan hanoman \u2014 ${DECIDER}. Keputusan yang sudah dijawab (baris \`Keputusan manusia sejauh ini:\` serah-terima, bagian keputusan dokumen spec atau dokumen audit) sudah final \u2014 JANGAN menanyakannya ulang; kumpulkan ambiguitas baru fasemu dan laporkan sekaligus.`;
+    FOREGROUND_RULE = "- Jalankan test/typecheck/build di FOREGROUND dengan batas waktu dan baca hasilnya di giliran yang sama. JANGAN melepasnya ke latar lalu menunggu dengan jeda tidur berdurasi tetap (`sleep N` berulang) \u2014 itu menit yang terbuang tanpa hasil; set yang terlalu lama untuk satu perintah dipecah. Proses yang memang harus hidup di latar (server untuk smoke) ditunggu dengan pemeriksaan kesiapan berbatas waktu yang berhenti sendiri begitu siap.";
     PHASE_AGENT_RULES = [
       "Batas peran fase:",
       "- JANGAN menulis `$HANOMAN_PHASE_FILE` \u2014 orchestrator satu-satunya penulis marker fase.",
       "- JANGAN `git push` \u2014 push milik orchestrator. Commit artefak fasemu sendiri sebelum melapor.",
       `- JANGAN memanggil agen berawalan \`${PHASE_AGENT_PREFIX}\`. Custom agent lain boleh dipanggil bila relevan.`,
       "- Kerjakan HANYA fase ini; fase lain dikerjakan agen fasenya sendiri.",
+      FOREGROUND_RULE,
       // T1 · ADR-0164 amandemen 2026-09-23 · 22 laporan tanpa `Status:` di audit: agen fase mengakhiri
       // gilirannya sambil menunggu proses latarnya sendiri, dan teks "menunggu" itu dibaca orchestrator
       // sebagai laporan final. Giliranmu yang berakhir = laporanmu, jadi menunggu harus terjadi DI DALAM giliran.
@@ -18807,6 +18823,7 @@ var init_phase_agents = __esm({
       "Klaim tanpa bukti bukan bukti. Maksimal 1200 kata."
     ].join("\n");
     ATTACHMENT_NOTE = "Bila serah-terima menyebut manifest lampiran (`INDEX.md`), baca manifest itu dan lampiran yang relevan di awal fase.";
+    FRONT_LOADED_DECISIONS = (until) => `Kumpulkan di fase ini SEMUA keputusan yang akan dibutuhkan ${until} \u2014 bukan hanya yang muncul sekarang: data model & migrasi/backfill, kontrak API, scope & yang di luar scope, perilaku terlihat pengguna, sumber data, kasus tepi \u2014 dan ajukan sekaligus sebagai \`Keputusan terbuka:\` dalam satu putaran; satu putaran di depan jauh lebih murah daripada beberapa putaran yang tersebar.`;
     TERMINAL_ASK = /([Aa])jukan SATU pertanyaan per giliran ke manusia di terminal ini, tunggu jawabannya(?=[,.])/;
     PHASE_AGENT_ASK = "jukan pertanyaannya sebagai butir `Keputusan terbuka:` di laporanmu \u2014 satu topik per putaran, beserta konteks & opsinya, karena kamu tak berhadapan langsung dengan manusia \u2014 lalu tulis `Status: menunggu-keputusan` dan berhenti; jawabannya datang sebagai pesan susulan ke agen yang sama";
     TERMINAL_HANDOFF = "tulis ringkasan hasil + daftar pertanyaan yang belum terjawab ke terminal.";
@@ -18817,6 +18834,7 @@ var init_phase_agents = __esm({
       "- JANGAN mengubah, membuat, atau menghapus berkas apa pun di worktree, JANGAN commit, JANGAN `git push`/`git stash`/`git checkout`/`git reset`. Kamu membaca dan menjalankan perintah verifikasi saja.",
       "- JANGAN menulis `$HANOMAN_PHASE_FILE` dan JANGAN memperbaiki temuanmu sendiri \u2014 perbaikan milik agen Execute, marker milik orchestrator.",
       `- JANGAN memanggil agen berawalan \`${PHASE_AGENT_PREFIX}\`.`,
+      FOREGROUND_RULE,
       "- JANGAN mengakhiri giliran atau melapor selama masih menunggu proses/tugas latar milikmu sendiri (test yang kamu jalankan di latar): tunggu sampai selesai dan baca hasilnya, lalu tulis laporan lengkap berawalan `Status:`."
     ].join("\n");
     roleOf = (phase) => phase === "Execute" || phase === "Goal" ? "execute" : phase === "Kerjakan" || phase === "Verifikasi" ? "none" : "research";
@@ -20714,6 +20732,7 @@ __export(src_exports, {
   GOAL_TUI_PASTE_LIMIT: () => GOAL_TUI_PASTE_LIMIT,
   PHASE_CONTEXT_HEADER: () => PHASE_CONTEXT_HEADER,
   PIPELINES: () => PIPELINES,
+  PLAN_SHAPE: () => PLAN_SHAPE,
   PROJECT_METHOD: () => PROJECT_METHOD,
   READ_ONLY_DENIED_COMMANDS: () => READ_ONLY_DENIED_COMMANDS,
   READ_ONLY_DENIED_OPERATORS: () => READ_ONLY_DENIED_OPERATORS,
@@ -50134,6 +50153,8 @@ var init_settings3 = __esm({
       notifySound: "short",
       notifyDecision: true,
       notifyDecisionSound: "alert",
+      notifyDecisionTelegram: true,
+      // ADR-0226 · tak berefek tanpa bot token + allowlist
       agentAccessEnabled: false,
       // SPEC-257 · akses AI agent off sampai dibuka manusia
       scheduler: SCHEDULER_DEFAULTS,
@@ -55948,6 +55969,300 @@ var init_live_phases = __esm({
   }
 });
 
+// src/services/telegram/client.ts
+var TelegramApiError, TelegramApiClient;
+var init_client = __esm({
+  "src/services/telegram/client.ts"() {
+    "use strict";
+    TelegramApiError = class extends Error {
+      constructor(method, code, message, retryAfter) {
+        super(`Telegram ${method} gagal${code ? ` (${code})` : ""}: ${message}`);
+        this.method = method;
+        this.code = code;
+        this.retryAfter = retryAfter;
+        this.name = "TelegramApiError";
+      }
+    };
+    TelegramApiClient = class {
+      constructor(token, transport = (url2, init) => fetch(url2, init), baseUrl = "https://api.telegram.org") {
+        this.token = token;
+        this.transport = transport;
+        this.baseUrl = baseUrl;
+      }
+      safe(message) {
+        return message.split(this.token).join("[REDACTED]").replace(/https:\/\/api\.telegram\.org\/bot[^/\s]+/g, "https://api.telegram.org/bot[REDACTED]");
+      }
+      async call(method, body, signal) {
+        let response;
+        try {
+          response = await this.transport(`${this.baseUrl}/bot${this.token}/${method}`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify(body),
+            signal
+          });
+        } catch (error) {
+          throw new TelegramApiError(method, void 0, this.safe(error.message || "network error"));
+        }
+        if (!response.ok) {
+          const failed = await response.json().catch(() => null);
+          throw new TelegramApiError(method, response.status, `HTTP ${response.status}`, failed?.parameters?.retry_after);
+        }
+        let envelope;
+        try {
+          envelope = await response.json();
+        } catch {
+          throw new TelegramApiError(method, response.status, "respons bukan JSON");
+        }
+        if (!envelope.ok || envelope.result === void 0) {
+          throw new TelegramApiError(
+            method,
+            envelope.error_code,
+            this.safe(envelope.description ?? "respons tidak valid"),
+            envelope.parameters?.retry_after
+          );
+        }
+        return envelope.result;
+      }
+      getMe() {
+        return this.call("getMe", {});
+      }
+      async getUpdates(input) {
+        if (!Number.isInteger(input.offset) || input.offset < 0) throw new Error("offset harus integer non-negatif");
+        if (!Number.isInteger(input.limit) || input.limit < 1 || input.limit > 100) throw new Error("limit harus 1..100");
+        if (!Number.isInteger(input.timeout) || input.timeout < 0 || input.timeout > 50) throw new Error("timeout harus 0..50");
+        return this.call("getUpdates", {
+          offset: input.offset,
+          limit: input.limit,
+          timeout: input.timeout,
+          allowed_updates: ["message", "callback_query"]
+        }, input.signal);
+      }
+      sendMessage(input) {
+        return this.call("sendMessage", {
+          chat_id: input.chatId,
+          text: input.text,
+          ...input.replyMarkup ? { reply_markup: input.replyMarkup } : {}
+        });
+      }
+      /**
+       * SPEC-493 · indikator "typing…". Argumennya posisional (beda dari tetangganya) sesuai kontrak
+       * yang diminta. Telegram TAK punya API stop-typing: statusnya padam sendiri ~5 detik sesudah
+       * panggilan terakhir, dan pesan masuk apa pun langsung menghapusnya.
+       */
+      sendChatAction(chatId, action = "typing") {
+        return this.call("sendChatAction", { chat_id: chatId, action });
+      }
+      editMessageText(input) {
+        return this.call("editMessageText", {
+          chat_id: input.chatId,
+          message_id: input.messageId,
+          text: input.text
+        });
+      }
+      answerCallbackQuery(input) {
+        return this.call("answerCallbackQuery", {
+          callback_query_id: input.callbackQueryId,
+          ...input.text ? { text: input.text } : {}
+        });
+      }
+    };
+  }
+});
+
+// src/services/telegram/protocol.ts
+import { createHash as createHash10 } from "node:crypto";
+function normalizeTelegramCommand(text2) {
+  const clean3 = text2.trim();
+  const match = clean3.match(/^\/([a-z0-9_]+)(?:@[a-z0-9_]+)?(?:\s+([\s\S]*))?$/i);
+  if (!match) return clean3;
+  const args = match[2]?.trim().replace(/\s+/g, " ");
+  return `/${match[1].toLowerCase()}${args ? ` ${args}` : ""}`;
+}
+function parseConfirmationCallback(data) {
+  if (data.length > 64) return null;
+  const match = data.match(/^tgcf:([A-Za-z0-9_-]{1,40}):(approve|deny)$/);
+  return match ? { token: match[1], action: match[2] } : null;
+}
+function parseTelegramUpdate(update2, allowlist, maxText = 12e3) {
+  const root = record(update2);
+  const updateId = root && Number.isInteger(root.update_id) && Number(root.update_id) >= 0 ? Number(root.update_id) : null;
+  if (!root || updateId === null) return { ok: false, updateId: null, reason: "malformed" };
+  const callback = record(root.callback_query);
+  const message = callback ? record(callback.message) : record(root.message);
+  const from = callback ? record(callback.from) : record(message?.from);
+  const chat = record(message?.chat);
+  const chatId = typeof chat?.id === "number" && Number.isSafeInteger(chat.id) ? String(chat.id) : void 0;
+  const userId = typeof from?.id === "number" && Number.isSafeInteger(from.id) ? String(from.id) : void 0;
+  if (!message || !from || !chat || !chatId || !userId) return { ok: false, updateId, reason: "malformed", chatId, userId };
+  if (chat.type !== "private") return { ok: false, updateId, reason: "group", chatId, userId };
+  if (from.is_bot === true) return { ok: false, updateId, reason: "sender-bot", chatId, userId };
+  if (!allowlist.has(userId)) return { ok: false, updateId, reason: "not-allowed", chatId, userId };
+  const messageId = typeof message.message_id === "number" && Number.isInteger(message.message_id) ? message.message_id : null;
+  if (messageId === null) return { ok: false, updateId, reason: "malformed", chatId, userId };
+  if (callback) {
+    const callbackQueryId = typeof callback.id === "string" ? callback.id : "";
+    const data = typeof callback.data === "string" ? callback.data : "";
+    const parsed = parseConfirmationCallback(data);
+    if (!callbackQueryId || !parsed) return { ok: false, updateId, reason: "invalid-callback", chatId, userId };
+    return {
+      ok: true,
+      input: {
+        updateId,
+        chatId,
+        userId,
+        messageId,
+        kind: "callback",
+        text: data,
+        callbackQueryId,
+        callbackToken: parsed.token,
+        callbackAction: parsed.action
+      }
+    };
+  }
+  if (typeof message.text !== "string" || !message.text.trim()) {
+    return { ok: false, updateId, reason: "non-text", chatId, userId };
+  }
+  const text2 = normalizeTelegramCommand(message.text);
+  if (text2.length > maxText) return { ok: false, updateId, reason: "too-long", chatId, userId };
+  return {
+    ok: true,
+    input: {
+      updateId,
+      chatId,
+      userId,
+      messageId,
+      kind: text2.startsWith("/") ? "command" : "text",
+      text: text2
+    }
+  };
+}
+function inboundDigest(input) {
+  return createHash10("sha256").update(`${input.updateId}\0${input.chatId}\0${input.userId}\0${input.kind}\0${input.text}`, "utf8").digest("hex");
+}
+function sanitizeTelegramOutput(text2, exactSecrets = []) {
+  let clean3 = text2.replace(ANSI, "").replace(CONTROLS, "");
+  for (const secret of [...exactSecrets].filter(Boolean).sort((a, b) => b.length - a.length)) {
+    clean3 = clean3.split(secret).join("[REDACTED]");
+  }
+  for (const pattern of CREDENTIAL_PATTERNS) clean3 = clean3.replace(pattern, "[REDACTED]");
+  return clean3.trim();
+}
+function splitTelegramText(text2, max = 4096, exactSecrets = []) {
+  if (!Number.isInteger(max) || max < 1) throw new Error("max harus integer positif");
+  const clean3 = sanitizeTelegramOutput(text2, exactSecrets);
+  if (!clean3) return [];
+  const chunks = [];
+  let rest = clean3;
+  while (rest.length > max) {
+    let cut = max;
+    const before2 = rest.charCodeAt(cut - 1);
+    const after = rest.charCodeAt(cut);
+    if (before2 >= 55296 && before2 <= 56319 && after >= 56320 && after <= 57343) cut--;
+    const window2 = rest.slice(0, cut);
+    const newline2 = window2.lastIndexOf("\n");
+    const space = window2.lastIndexOf(" ");
+    const boundary = Math.max(newline2, space);
+    if (boundary >= Math.floor(max / 2)) cut = boundary + 1;
+    chunks.push(rest.slice(0, cut));
+    rest = rest.slice(cut);
+  }
+  if (rest) chunks.push(rest);
+  return chunks;
+}
+var record, ANSI, CONTROLS, CREDENTIAL_PATTERNS, TELEGRAM_GATEWAY_FAILURE_KIND, TELEGRAM_FINAL_REPLY_KINDS;
+var init_protocol = __esm({
+  "src/services/telegram/protocol.ts"() {
+    "use strict";
+    record = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+    ANSI = /[\u001b\u009b](?:\][^\u0007]*(?:\u0007|\u001b\\)|\[[0-?]*[ -/]*[@-~]|[@-_])/g;
+    CONTROLS = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/g;
+    CREDENTIAL_PATTERNS = [
+      /\b\d{6,}:[A-Za-z0-9_-]{20,}\b/g,
+      /\bhnm_(?:agent_)?[A-Za-z0-9_-]{16,}\b/g,
+      /\bsk-ant-[A-Za-z0-9_-]{16,}\b/g
+    ];
+    TELEGRAM_GATEWAY_FAILURE_KIND = "gateway-failure";
+    TELEGRAM_FINAL_REPLY_KINDS = /* @__PURE__ */ new Set([
+      "final",
+      "decision",
+      "failure",
+      "confirmation",
+      TELEGRAM_GATEWAY_FAILURE_KIND
+    ]);
+  }
+});
+
+// src/services/telegram/notify.ts
+function recipients(raw) {
+  return (raw ?? "").split(/[\s,]+/).filter((id2) => /^\d+$/.test(id2));
+}
+function dashboardOrigin(env = process.env) {
+  const first = env.HANOMAN_CONTROL_ORIGINS?.split(",").map((o) => o.trim()).find(Boolean);
+  if (!first) return null;
+  try {
+    return new URL(first).origin;
+  } catch {
+    return null;
+  }
+}
+function decisionMessage(push, origin) {
+  const title = push.title.length > TITLE_MAX ? `${push.title.slice(0, TITLE_MAX - 1)}\u2026` : push.title;
+  return [
+    "Sesi menunggu keputusanmu",
+    title,
+    push.specId ? `${push.specId} \xB7 sesi ${push.sessionId}` : `sesi ${push.sessionId}`,
+    ...origin ? [`${origin}/terminal`] : []
+  ].join("\n");
+}
+async function pushDecisionToTelegram(push, deps = {}) {
+  try {
+    const read2 = deps.read ?? effectiveStr;
+    const setting = await (deps.getSetting ?? getSetting)();
+    if (!setting.notifyDecisionTelegram) return 0;
+    const botToken = read2("HANOMAN_TELEGRAM_BOT_TOKEN")?.trim();
+    const ids = recipients(read2("HANOMAN_TELEGRAM_ALLOWED_USER_IDS"));
+    if (!botToken || ids.length === 0) return 0;
+    const controller = new AbortController();
+    const timer11 = setTimeout(() => controller.abort(), deps.timeoutMs ?? SEND_TIMEOUT_MS);
+    const send = deps.transport ?? ((url2, init) => fetch(url2, init));
+    const client = new TelegramApiClient(botToken, (url2, init) => send(url2, { ...init, signal: controller.signal }));
+    const text2 = decisionMessage(push, deps.origin === void 0 ? dashboardOrigin() : deps.origin);
+    try {
+      const results = await Promise.allSettled(ids.map((chatId) => client.sendMessage({ chatId, text: text2 })));
+      let sent = 0;
+      for (const [i, r] of results.entries()) {
+        if (r.status === "fulfilled") {
+          sent++;
+          continue;
+        }
+        console.warn(
+          `telegram: push keputusan ke ${ids[i]} gagal:`,
+          sanitizeTelegramOutput(r.reason.message, [botToken])
+        );
+      }
+      return sent;
+    } finally {
+      clearTimeout(timer11);
+    }
+  } catch (error) {
+    console.warn("telegram: push keputusan gagal:", error.message);
+    return 0;
+  }
+}
+var SEND_TIMEOUT_MS, TITLE_MAX;
+var init_notify = __esm({
+  "src/services/telegram/notify.ts"() {
+    "use strict";
+    init_config2();
+    init_settings3();
+    init_client();
+    init_protocol();
+    SEND_TIMEOUT_MS = 1e4;
+    TITLE_MAX = 200;
+  }
+});
+
 // src/services/notifications.ts
 async function recordDrift(vpsId, vpsName, drift, snapshotId) {
   if (drift.length === 0) return;
@@ -56068,6 +56383,7 @@ async function scanDecisions(read2 = liveDecisionsAsync) {
     await prisma.notification.create({
       data: { type: "decision", specId: s2.specId ?? null, sessionId: s2.id, projectId: s2.projectId || null, title }
     });
+    void pushDecisionToTelegram({ title, specId: s2.specId ?? null, sessionId: s2.id });
   }
 }
 async function notificationsFeed(p3 = {}) {
@@ -56090,6 +56406,7 @@ var init_notifications2 = __esm({
     init_db();
     init_pty();
     init_live_phases();
+    init_notify();
     awaiting = /* @__PURE__ */ new Set();
     DEFAULT_FEED_TAKE = 50;
   }
@@ -56167,6 +56484,45 @@ var init_device_sockets = __esm({
   }
 });
 
+// src/services/exit-guard.ts
+import { spawn as spawn3 } from "node:child_process";
+import { writeFileSync as writeFileSync15 } from "node:fs";
+import { join as join29 } from "node:path";
+function watchdogScript(pid, graceMs) {
+  const secs = Math.max(1, Math.ceil(graceMs / 1e3));
+  return `s=$(ps -o lstart= -p ${pid}); sleep ${secs}; [ -n "$s" ] && [ "$(ps -o lstart= -p ${pid})" = "$s" ] && kill -9 ${pid}`;
+}
+function launchWatchdog(script2, env = process.env) {
+  if (env.VITEST) return false;
+  const child = spawn3("/bin/sh", ["-c", script2], { detached: true, stdio: "ignore" });
+  child.on("error", () => {
+  });
+  child.unref();
+  return true;
+}
+function exitGuarded(code, d = {}) {
+  const pid = d.pid ?? process.pid;
+  try {
+    const write2 = d.writeIntent ?? ((p3, t) => writeFileSync15(p3, t, { mode: 384 }));
+    write2(join29(d.home ?? resolveHome(), EXIT_INTENT_FILE), formatExitIntent(pid, code));
+  } catch {
+  }
+  try {
+    (d.launch ?? launchWatchdog)(watchdogScript(pid, d.graceMs ?? EXIT_WATCHDOG_MS));
+  } catch {
+  }
+  (d.exit ?? ((c) => process.exit(c)))(code);
+}
+var EXIT_WATCHDOG_MS;
+var init_exit_guard = __esm({
+  "src/services/exit-guard.ts"() {
+    "use strict";
+    init_src();
+    init_src2();
+    EXIT_WATCHDOG_MS = 5e3;
+  }
+});
+
 // src/services/update.ts
 import { readFileSync as readFileSync16 } from "node:fs";
 import { resolve as resolve20, dirname as dirname13 } from "node:path";
@@ -56202,7 +56558,7 @@ function supervised() {
 }
 function requestRestartForUpdate() {
   const delay2 = effectiveInt("HANOMAN_UPDATE_RESTART_DELAY_MS") ?? 250;
-  setTimeout(() => (exiter ?? ((c) => process.exit(c)))(UPDATE_RESTART_EXIT), delay2);
+  setTimeout(() => (exiter ?? exitGuarded)(UPDATE_RESTART_EXIT), delay2);
 }
 async function maybeFetch() {
   if (!effectiveBool("HANOMAN_UPDATE_FETCH")) return;
@@ -56248,6 +56604,7 @@ var init_update = __esm({
     "use strict";
     init_src();
     init_config2();
+    init_exit_guard();
     UPDATE_COMMAND = "npm i -g hanoman@latest --prefer-online";
     RESULT_TTL_MS = 15e3;
     FETCH_TTL_MS = 5 * 6e4;
@@ -56744,7 +57101,7 @@ var init_runtime_defaults2 = __esm({
 });
 
 // src/services/agent-token.ts
-import { randomBytes as randomBytes2, createHash as createHash11, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
+import { randomBytes as randomBytes2, createHash as createHash12, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 function toAgentTokenView(t) {
   return {
     id: t.id,
@@ -56831,112 +57188,11 @@ var init_agent_token = __esm({
   "src/services/agent-token.ts"() {
     "use strict";
     init_db();
-    hash2 = (token) => createHash11("sha256").update(token).digest("hex");
+    hash2 = (token) => createHash12("sha256").update(token).digest("hex");
     AGENT_CREATOR_PREFIX = "agent:";
   }
 });
 
-// src/services/telegram/client.ts
-var TelegramApiError, TelegramApiClient;
-var init_client = __esm({
-  "src/services/telegram/client.ts"() {
-    "use strict";
-    TelegramApiError = class extends Error {
-      constructor(method, code, message, retryAfter) {
-        super(`Telegram ${method} gagal${code ? ` (${code})` : ""}: ${message}`);
-        this.method = method;
-        this.code = code;
-        this.retryAfter = retryAfter;
-        this.name = "TelegramApiError";
-      }
-    };
-    TelegramApiClient = class {
-      constructor(token, transport = (url2, init) => fetch(url2, init), baseUrl = "https://api.telegram.org") {
-        this.token = token;
-        this.transport = transport;
-        this.baseUrl = baseUrl;
-      }
-      safe(message) {
-        return message.split(this.token).join("[REDACTED]").replace(/https:\/\/api\.telegram\.org\/bot[^/\s]+/g, "https://api.telegram.org/bot[REDACTED]");
-      }
-      async call(method, body, signal) {
-        let response;
-        try {
-          response = await this.transport(`${this.baseUrl}/bot${this.token}/${method}`, {
-            method: "POST",
-            headers: { "content-type": "application/json" },
-            body: JSON.stringify(body),
-            signal
-          });
-        } catch (error) {
-          throw new TelegramApiError(method, void 0, this.safe(error.message || "network error"));
-        }
-        if (!response.ok) {
-          const failed = await response.json().catch(() => null);
-          throw new TelegramApiError(method, response.status, `HTTP ${response.status}`, failed?.parameters?.retry_after);
-        }
-        let envelope;
-        try {
-          envelope = await response.json();
-        } catch {
-          throw new TelegramApiError(method, response.status, "respons bukan JSON");
-        }
-        if (!envelope.ok || envelope.result === void 0) {
-          throw new TelegramApiError(
-            method,
-            envelope.error_code,
-            this.safe(envelope.description ?? "respons tidak valid"),
-            envelope.parameters?.retry_after
-          );
-        }
-        return envelope.result;
-      }
-      getMe() {
-        return this.call("getMe", {});
-      }
-      async getUpdates(input) {
-        if (!Number.isInteger(input.offset) || input.offset < 0) throw new Error("offset harus integer non-negatif");
-        if (!Number.isInteger(input.limit) || input.limit < 1 || input.limit > 100) throw new Error("limit harus 1..100");
-        if (!Number.isInteger(input.timeout) || input.timeout < 0 || input.timeout > 50) throw new Error("timeout harus 0..50");
-        return this.call("getUpdates", {
-          offset: input.offset,
-          limit: input.limit,
-          timeout: input.timeout,
-          allowed_updates: ["message", "callback_query"]
-        }, input.signal);
-      }
-      sendMessage(input) {
-        return this.call("sendMessage", {
-          chat_id: input.chatId,
-          text: input.text,
-          ...input.replyMarkup ? { reply_markup: input.replyMarkup } : {}
-        });
-      }
-      /**
-       * SPEC-493 · indikator "typing…". Argumennya posisional (beda dari tetangganya) sesuai kontrak
-       * yang diminta. Telegram TAK punya API stop-typing: statusnya padam sendiri ~5 detik sesudah
-       * panggilan terakhir, dan pesan masuk apa pun langsung menghapusnya.
-       */
-      sendChatAction(chatId, action = "typing") {
-        return this.call("sendChatAction", { chat_id: chatId, action });
-      }
-      editMessageText(input) {
-        return this.call("editMessageText", {
-          chat_id: input.chatId,
-          message_id: input.messageId,
-          text: input.text
-        });
-      }
-      answerCallbackQuery(input) {
-        return this.call("answerCallbackQuery", {
-          callback_query_id: input.callbackQueryId,
-          ...input.text ? { text: input.text } : {}
-        });
-      }
-    };
-  }
-});
-
 // src/services/telegram/config.ts
 async function setTelegramEngine(next) {
   const cur = await getSetting();
@@ -56972,129 +57228,6 @@ var init_config4 = __esm({
   }
 });
 
-// src/services/telegram/protocol.ts
-import { createHash as createHash12 } from "node:crypto";
-function normalizeTelegramCommand(text2) {
-  const clean3 = text2.trim();
-  const match = clean3.match(/^\/([a-z0-9_]+)(?:@[a-z0-9_]+)?(?:\s+([\s\S]*))?$/i);
-  if (!match) return clean3;
-  const args = match[2]?.trim().replace(/\s+/g, " ");
-  return `/${match[1].toLowerCase()}${args ? ` ${args}` : ""}`;
-}
-function parseConfirmationCallback(data) {
-  if (data.length > 64) return null;
-  const match = data.match(/^tgcf:([A-Za-z0-9_-]{1,40}):(approve|deny)$/);
-  return match ? { token: match[1], action: match[2] } : null;
-}
-function parseTelegramUpdate(update2, allowlist, maxText = 12e3) {
-  const root = record(update2);
-  const updateId = root && Number.isInteger(root.update_id) && Number(root.update_id) >= 0 ? Number(root.update_id) : null;
-  if (!root || updateId === null) return { ok: false, updateId: null, reason: "malformed" };
-  const callback = record(root.callback_query);
-  const message = callback ? record(callback.message) : record(root.message);
-  const from = callback ? record(callback.from) : record(message?.from);
-  const chat = record(message?.chat);
-  const chatId = typeof chat?.id === "number" && Number.isSafeInteger(chat.id) ? String(chat.id) : void 0;
-  const userId = typeof from?.id === "number" && Number.isSafeInteger(from.id) ? String(from.id) : void 0;
-  if (!message || !from || !chat || !chatId || !userId) return { ok: false, updateId, reason: "malformed", chatId, userId };
-  if (chat.type !== "private") return { ok: false, updateId, reason: "group", chatId, userId };
-  if (from.is_bot === true) return { ok: false, updateId, reason: "sender-bot", chatId, userId };
-  if (!allowlist.has(userId)) return { ok: false, updateId, reason: "not-allowed", chatId, userId };
-  const messageId = typeof message.message_id === "number" && Number.isInteger(message.message_id) ? message.message_id : null;
-  if (messageId === null) return { ok: false, updateId, reason: "malformed", chatId, userId };
-  if (callback) {
-    const callbackQueryId = typeof callback.id === "string" ? callback.id : "";
-    const data = typeof callback.data === "string" ? callback.data : "";
-    const parsed = parseConfirmationCallback(data);
-    if (!callbackQueryId || !parsed) return { ok: false, updateId, reason: "invalid-callback", chatId, userId };
-    return {
-      ok: true,
-      input: {
-        updateId,
-        chatId,
-        userId,
-        messageId,
-        kind: "callback",
-        text: data,
-        callbackQueryId,
-        callbackToken: parsed.token,
-        callbackAction: parsed.action
-      }
-    };
-  }
-  if (typeof message.text !== "string" || !message.text.trim()) {
-    return { ok: false, updateId, reason: "non-text", chatId, userId };
-  }
-  const text2 = normalizeTelegramCommand(message.text);
-  if (text2.length > maxText) return { ok: false, updateId, reason: "too-long", chatId, userId };
-  return {
-    ok: true,
-    input: {
-      updateId,
-      chatId,
-      userId,
-      messageId,
-      kind: text2.startsWith("/") ? "command" : "text",
-      text: text2
-    }
-  };
-}
-function inboundDigest(input) {
-  return createHash12("sha256").update(`${input.updateId}\0${input.chatId}\0${input.userId}\0${input.kind}\0${input.text}`, "utf8").digest("hex");
-}
-function sanitizeTelegramOutput(text2, exactSecrets = []) {
-  let clean3 = text2.replace(ANSI, "").replace(CONTROLS, "");
-  for (const secret of [...exactSecrets].filter(Boolean).sort((a, b) => b.length - a.length)) {
-    clean3 = clean3.split(secret).join("[REDACTED]");
-  }
-  for (const pattern of CREDENTIAL_PATTERNS) clean3 = clean3.replace(pattern, "[REDACTED]");
-  return clean3.trim();
-}
-function splitTelegramText(text2, max = 4096, exactSecrets = []) {
-  if (!Number.isInteger(max) || max < 1) throw new Error("max harus integer positif");
-  const clean3 = sanitizeTelegramOutput(text2, exactSecrets);
-  if (!clean3) return [];
-  const chunks = [];
-  let rest = clean3;
-  while (rest.length > max) {
-    let cut = max;
-    const before2 = rest.charCodeAt(cut - 1);
-    const after = rest.charCodeAt(cut);
-    if (before2 >= 55296 && before2 <= 56319 && after >= 56320 && after <= 57343) cut--;
-    const window2 = rest.slice(0, cut);
-    const newline2 = window2.lastIndexOf("\n");
-    const space = window2.lastIndexOf(" ");
-    const boundary = Math.max(newline2, space);
-    if (boundary >= Math.floor(max / 2)) cut = boundary + 1;
-    chunks.push(rest.slice(0, cut));
-    rest = rest.slice(cut);
-  }
-  if (rest) chunks.push(rest);
-  return chunks;
-}
-var record, ANSI, CONTROLS, CREDENTIAL_PATTERNS, TELEGRAM_GATEWAY_FAILURE_KIND, TELEGRAM_FINAL_REPLY_KINDS;
-var init_protocol = __esm({
-  "src/services/telegram/protocol.ts"() {
-    "use strict";
-    record = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
-    ANSI = /[\u001b\u009b](?:\][^\u0007]*(?:\u0007|\u001b\\)|\[[0-?]*[ -/]*[@-~]|[@-_])/g;
-    CONTROLS = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/g;
-    CREDENTIAL_PATTERNS = [
-      /\b\d{6,}:[A-Za-z0-9_-]{20,}\b/g,
-      /\bhnm_(?:agent_)?[A-Za-z0-9_-]{16,}\b/g,
-      /\bsk-ant-[A-Za-z0-9_-]{16,}\b/g
-    ];
-    TELEGRAM_GATEWAY_FAILURE_KIND = "gateway-failure";
-    TELEGRAM_FINAL_REPLY_KINDS = /* @__PURE__ */ new Set([
-      "final",
-      "decision",
-      "failure",
-      "confirmation",
-      TELEGRAM_GATEWAY_FAILURE_KIND
-    ]);
-  }
-});
-
 // src/services/telegram/runtime.ts
 function setTelegramRuntime(input) {
   registration = {
@@ -62748,15 +62881,15 @@ var init_client2 = __esm({
 
 // src/services/logs/spool.ts
 import { appendFile, mkdir as mkdir7, readFile as readFile7, readdir as readdir7, rm as rm6, stat as stat6 } from "node:fs/promises";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 function spoolDir(lane) {
-  return join32(resolveDataDirs().home, "log-spool", lane);
+  return join33(resolveDataDirs().home, "log-spool", lane);
 }
 async function currentSegment(lane) {
   const dir2 = spoolDir(lane);
   await mkdir7(dir2, { recursive: true, mode: 448 });
   if (currentFile && currentBytes < LOG_SPOOL_SEGMENT_BYTES) return currentFile;
-  currentFile = join32(dir2, `${Date.now()}-${++segCounter}.ndjson`);
+  currentFile = join33(dir2, `${Date.now()}-${++segCounter}.ndjson`);
   currentBytes = 0;
   return currentFile;
 }
@@ -62778,7 +62911,7 @@ async function readSpoolSegments(lane) {
   const files2 = names.filter((n2) => n2.endsWith(".ndjson")).sort();
   const out4 = [];
   for (const name2 of files2) {
-    const file = join32(dir2, name2);
+    const file = join33(dir2, name2);
     const raw = await readFile7(file, "utf8").catch(() => "");
     const entries4 = raw.split("\n").filter(Boolean).map((l) => JSON.parse(l));
     out4.push({ file, entries: entries4 });
@@ -63465,15 +63598,15 @@ var init_codex_version = __esm({
 // src/services/agent-tool-catalog.ts
 import { readFileSync as readFileSync26 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
-import { join as join48 } from "node:path";
+import { join as join49 } from "node:path";
 function mcpServerNames(repoDir) {
   const names = [];
-  const claudeJson = readJson2(join48(home(), ".claude.json"));
+  const claudeJson = readJson2(join49(home(), ".claude.json"));
   names.push(...serversOf(claudeJson));
   if (repoDir) {
     const projects = claudeJson?.projects;
     if (projects && typeof projects === "object") names.push(...serversOf(projects[repoDir]));
-    names.push(...serversOf(readJson2(join48(repoDir, ".mcp.json"))));
+    names.push(...serversOf(readJson2(join49(repoDir, ".mcp.json"))));
   }
   names.push(...codexServers());
   return [...new Set(names.filter(Boolean))].sort((a, b) => a.localeCompare(b));
@@ -63502,7 +63635,7 @@ var init_agent_tool_catalog = __esm({
     codexServers = () => {
       let text2;
       try {
-        text2 = readFileSync26(join48(home(), ".codex", "config.toml"), "utf8");
+        text2 = readFileSync26(join49(home(), ".codex", "config.toml"), "utf8");
       } catch {
         return [];
       }
@@ -70445,8 +70578,8 @@ init_local_binding();
 init_session_id();
 init_uploads();
 import { mkdir as mkdir6, readdir as readdir5, readFile as readFile6, rm as rm4, writeFile as writeFile5 } from "node:fs/promises";
-import { join as join29 } from "node:path";
-var specAttachmentsDir = (repoDir, sessionId2) => join29(repoDir, ".worktrees", ".attachments", sessionId2);
+import { join as join30 } from "node:path";
+var specAttachmentsDir = (repoDir, sessionId2) => join30(repoDir, ".worktrees", ".attachments", sessionId2);
 var INDEX = "INDEX.md";
 var humanSize = (n2) => n2 >= 1024 * 1024 ? `${(n2 / 1024 / 1024).toFixed(1)} MB` : n2 >= 1024 ? `${Math.round(n2 / 1024)} KB` : `${n2} B`;
 function uniqueName(taken, filename) {
@@ -70496,19 +70629,19 @@ async function syncSpecAttachmentsDir(specId, projectId) {
   for (const a of rows) {
     let bytes;
     try {
-      bytes = await readFile6(join29(uploadDir(), a.storageKey));
+      bytes = await readFile6(join30(uploadDir(), a.storageKey));
     } catch {
       continue;
     }
     const filename = uniqueName(taken, a.filename);
-    const path = join29(dir2, filename);
+    const path = join30(dir2, filename);
     await writeFile5(path, bytes, { mode: 384 });
     items.push({ filename, mimeType: a.mimeType, size: a.size, path });
   }
-  await writeFile5(join29(dir2, INDEX), renderIndex(specId, items), { mode: 384 });
+  await writeFile5(join30(dir2, INDEX), renderIndex(specId, items), { mode: 384 });
   const keep = /* @__PURE__ */ new Set([INDEX, ...items.map((a) => a.filename)]);
   for (const name2 of await readdir5(dir2)) {
-    if (!keep.has(name2)) await rm4(join29(dir2, name2), { recursive: true, force: true }).catch(() => {
+    if (!keep.has(name2)) await rm4(join30(dir2, name2), { recursive: true, force: true }).catch(() => {
     });
   }
   return items;
@@ -73147,7 +73280,7 @@ init_session_phases();
 init_stage_machine();
 init_notifications2();
 init_sync_notify();
-import { createHash as createHash10 } from "node:crypto";
+import { createHash as createHash11 } from "node:crypto";
 var specNum = (id2) => Number.parseInt(id2.match(/\d+/)?.[0] ?? "0", 10);
 var selectOf = (shape) => Object.fromEntries(
   Object.keys(shape).filter((k) => k !== "blockedBy").map((k) => [k, true])
@@ -73239,7 +73372,7 @@ async function liveSignature() {
 async function specsDigest() {
   const agg = await prisma.spec.aggregate({ _count: { _all: true }, _max: { updatedAt: true }, _sum: { version: true } });
   const db = `${agg._count._all}:${agg._max.updatedAt?.getTime() ?? 0}:${agg._sum.version ?? 0}`;
-  return createHash10("sha1").update(`${db}|${await liveSignature()}`).digest("hex");
+  return createHash11("sha1").update(`${db}|${await liveSignature()}`).digest("hex");
 }
 async function liveSpecs(filter = {}) {
   await liveOverlayTick();
@@ -73954,7 +74087,7 @@ async function docs_default(app3) {
 // src/routes/ide.ts
 init_src2();
 import { basename as basename10 } from "node:path";
-import { spawn as spawn3 } from "node:child_process";
+import { spawn as spawn4 } from "node:child_process";
 
 // src/services/git-remotes.ts
 import { execFile as execFile14 } from "node:child_process";
@@ -74024,7 +74157,7 @@ init_codex_trust();
 // src/services/repo-fs.ts
 import { lstat as lstat2, rename as rename4, rm as rm5 } from "node:fs/promises";
 import { createWriteStream } from "node:fs";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 import { randomUUID as randomUUID11 } from "node:crypto";
 import { pipeline } from "node:stream/promises";
 var EntryExistsError = class extends Error {
@@ -74085,7 +74218,7 @@ async function saveUpload2(repoDir, rel, source, opts2 = {}) {
   if (current && !opts2.overwrite) return { status: "exists" };
   if (current && !current.isFile())
     throw new PathContainmentError("repository path ditolak: target bukan file regular");
-  const temp = join30(entry2.parent, `.hanoman-${randomUUID11()}.tmp`);
+  const temp = join31(entry2.parent, `.hanoman-${randomUUID11()}.tmp`);
   try {
     await pipeline(source, createWriteStream(temp, { flags: "wx", mode: 384 }));
     if (opts2.isTruncated?.()) {
@@ -74369,7 +74502,7 @@ async function ide_default(app3) {
     const ref = q2.ref || "HEAD";
     if (!/^[\w./@{}-]+$/.test(ref)) return reply.code(400).send({ error: "ref tidak valid" });
     const fmt = q2.format === "tar" ? "tar" : "zip";
-    const child = spawn3("git", ["archive", `--format=${fmt}`, "--end-of-options", ref], { cwd: repoDir });
+    const child = spawn4("git", ["archive", `--format=${fmt}`, "--end-of-options", ref], { cwd: repoDir });
     reply.header("content-type", fmt === "zip" ? "application/zip" : "application/x-tar");
     reply.header("content-disposition", `attachment; filename="${basename10(repoDir)}-${ref.replace(/[^\w.-]/g, "_")}.${fmt}"`);
     return reply.send(child.stdout);
@@ -74576,14 +74709,14 @@ async function finishGraphOp(reply, id2, repoDir, r, verb) {
 // src/routes/fs.ts
 import { readdir as readdir6 } from "node:fs/promises";
 import { homedir as homedir6 } from "node:os";
-import { resolve as resolve22, dirname as dirname14, join as join31 } from "node:path";
+import { resolve as resolve22, dirname as dirname14, join as join32 } from "node:path";
 async function fs_default(app3) {
   app3.get("/fs/browse", async (req, reply) => {
     const q2 = req.query.path;
     const dir2 = q2 && q2.trim() ? resolve22(q2.trim()) : homedir6();
     try {
       const ents = await readdir6(dir2, { withFileTypes: true });
-      const entries4 = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join31(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
+      const entries4 = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join32(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
       const parent = dirname14(dir2);
       return { path: dir2, parent: parent === dir2 ? null : parent, entries: entries4 };
     } catch {
@@ -74612,11 +74745,11 @@ init_src2();
 init_db();
 import { execFile as execFile15, spawnSync as spawnSync4 } from "node:child_process";
 import { existsSync as existsSync16, readdirSync as readdirSync8, rmSync as rmSync9 } from "node:fs";
-import { join as join33 } from "node:path";
+import { join as join34 } from "node:path";
 import { promisify as promisify14 } from "node:util";
 
 // src/services/git-auth.ts
-import { chmodSync as chmodSync8, mkdirSync as mkdirSync15, writeFileSync as writeFileSync15 } from "node:fs";
+import { chmodSync as chmodSync8, mkdirSync as mkdirSync15, writeFileSync as writeFileSync16 } from "node:fs";
 import { tmpdir as tmpdir6 } from "node:os";
 import { dirname as dirname15 } from "node:path";
 var gitAskpassPath = () => `${tmpdir6()}/hanoman-askpass/token.sh`;
@@ -74637,7 +74770,7 @@ var isGithubHttps = (remote) => /^https:\/\/github\.com\//.test(remote);
 function gitAuthEnv(token) {
   const path = gitAskpassPath();
   mkdirSync15(dirname15(path), { recursive: true, mode: 448 });
-  writeFileSync15(path, ASKPASS_TOKEN, { mode: 448 });
+  writeFileSync16(path, ASKPASS_TOKEN, { mode: 448 });
   chmodSync8(path, 448);
   return { GIT_ASKPASS: path, GIT_TERMINAL_PROMPT: "0", HANOMAN_GIT_TOKEN: token };
 }
@@ -74679,7 +74812,7 @@ var CheckoutError = class extends Error {
 var CLONE_TIMEOUT_MS = 10 * 6e4;
 var FETCH_TIMEOUT_MS = 2 * 6e4;
 var AUTH_RE = /Authentication failed|could not read (Username|Password)|Invalid username or password|HTTP 40[13]|returned error: 40[13]|Repository not found|Permission denied \(publickey\)/i;
-var checkoutRoot = () => join33(resolveHome(), "projects");
+var checkoutRoot = () => join34(resolveHome(), "projects");
 var slug = (id2) => id2.toLowerCase().replace(/[^a-z0-9_-]+/g, "-").replace(/^-+|-+$/g, "") || "project";
 var sameRemote = (a, b) => {
   const norm5 = (u) => httpsRemote(u).replace(/\.git$/, "").replace(/\/+$/, "").toLowerCase();
@@ -74713,7 +74846,7 @@ async function doClone(projectId, opts2) {
   if (!project) throw new CheckoutError(`project "${projectId}" tidak ada`, "not-found");
   if (!project.gitRemote) throw new CheckoutError(`project "${projectId}" tidak punya gitRemote untuk di-clone`, "no-remote");
   const remote = project.gitRemote;
-  const dest = opts2.dir ?? join33(checkoutRoot(), slug(project.id));
+  const dest = opts2.dir ?? join34(checkoutRoot(), slug(project.id));
   if (existsSync16(dest) && !isEmptyDir(dest)) {
     const origin = originOf2(dest);
     if (origin && sameRemote(origin, remote)) {
@@ -75297,13 +75430,13 @@ init_local_binding();
 
 // src/services/terminal-diag.ts
 import { appendFileSync as appendFileSync4, mkdirSync as mkdirSync16, statSync as statSync4, rmSync as rmSync10 } from "node:fs";
-import { join as join34 } from "node:path";
+import { join as join35 } from "node:path";
 var DIAG_MAX_BYTES = 2 * 1024 * 1024;
 var KINDS = /* @__PURE__ */ new Set(["key", "comp", "data", "ack", "pred"]);
 var ID = /^[A-Za-z0-9_-]{1,64}$/;
 function diagFile(home3, sessionId2) {
   if (!ID.test(sessionId2)) throw new Error(`id sesi tak sah untuk diag: ${sessionId2}`);
-  return join34(home3, "diag", `${sessionId2}.jsonl`);
+  return join35(home3, "diag", `${sessionId2}.jsonl`);
 }
 function usable(ev) {
   if (!ev || typeof ev !== "object") return false;
@@ -75314,7 +75447,7 @@ function appendDiag(home3, sessionId2, events) {
   const file = diagFile(home3, sessionId2);
   const rows = events.filter(usable);
   if (!rows.length) return;
-  mkdirSync16(join34(home3, "diag"), { recursive: true });
+  mkdirSync16(join35(home3, "diag"), { recursive: true });
   try {
     if (statSync4(file).size > DIAG_MAX_BYTES) rmSync10(file);
   } catch {
@@ -75408,7 +75541,7 @@ init_session_event_spool();
 init_ingress_policy();
 import { constants as constants4 } from "node:fs";
 import { mkdir as mkdir8, open as open3, readdir as readdir8, rm as rm7 } from "node:fs/promises";
-import { join as join35 } from "node:path";
+import { join as join36 } from "node:path";
 var MAX_EVENT_BYTES = 1e6;
 var MAX_FILES_PER_DRAIN = 1e3;
 var SESSION_ID_RE = /^[a-z0-9_-]+$/;
@@ -75459,7 +75592,7 @@ async function drainSpool(app3, root, observation, host2) {
   let readBuffer;
   for (const session of await readdir8(root, { withFileTypes: true })) {
     if (!session.isDirectory() || !SESSION_ID_RE.test(session.name)) continue;
-    const dir2 = join35(root, session.name);
+    const dir2 = join36(root, session.name);
     let entries4;
     try {
       entries4 = await readdir8(dir2, { withFileTypes: true });
@@ -75471,7 +75604,7 @@ async function drainSpool(app3, root, observation, host2) {
       if (!entry2.isFile() || !entry2.name.endsWith(".json")) continue;
       const eventAt = /^(\d{1,15})-/.exec(entry2.name)?.[1];
       if (++examined > MAX_FILES_PER_DRAIN) return delivered;
-      const path = join35(dir2, entry2.name);
+      const path = join36(dir2, entry2.name);
       let payload;
       let handle;
       try {
@@ -76498,9 +76631,9 @@ init_session_sandbox();
 init_session_sandbox();
 import { execFile as execFile16 } from "node:child_process";
 import { randomUUID as randomUUID13 } from "node:crypto";
-import { mkdirSync as mkdirSync17, rmSync as rmSync11, writeFileSync as writeFileSync16 } from "node:fs";
+import { mkdirSync as mkdirSync17, rmSync as rmSync11, writeFileSync as writeFileSync17 } from "node:fs";
 import { constants as constants5, tmpdir as tmpdir7 } from "node:os";
-import { join as join36 } from "node:path";
+import { join as join37 } from "node:path";
 var binFor = (agent) => agent === "antigravity" ? antigravityBin() : agent === "codex" ? effectiveStr("HANOMAN_CODEX_BIN") ?? "codex" : effectiveStr("HANOMAN_CLAUDE_BIN") ?? "claude";
 function leadArgv(o) {
   if (o.agent === "antigravity") return [
@@ -76538,11 +76671,11 @@ function leadProcess(prompt, o, env = process.env) {
   const mode = env.HANOMAN_SESSION_SANDBOX ?? (resolveHardening(env) ? "required" : "off");
   if (mode === "off") return { file, args: directArgs, cwd: o.cwd, cleanup: () => {
   } };
-  const promptDir = join36(tmpdir7(), "hanoman-prompts");
+  const promptDir = join37(tmpdir7(), "hanoman-prompts");
   mkdirSync17(promptDir, { recursive: true, mode: 448 });
-  const promptFile = join36(promptDir, `oneshot-${randomUUID13()}`);
-  writeFileSync16(promptFile, prompt, { flag: "wx", mode: 384 });
-  const workspace = o.cwd ?? join36(tmpdir7(), `hanoman-oneshot-${randomUUID13()}`);
+  const promptFile = join37(promptDir, `oneshot-${randomUUID13()}`);
+  writeFileSync17(promptFile, prompt, { flag: "wx", mode: 384 });
+  const workspace = o.cwd ?? join37(tmpdir7(), `hanoman-oneshot-${randomUUID13()}`);
   if (!o.cwd) mkdirSync17(workspace, { recursive: false, mode: 448 });
   try {
     const argsWithoutPrompt = directArgs.slice(0, -1);
@@ -77401,13 +77534,13 @@ async function run2(sessionId2, deps) {
 // src/services/decision-guard.ts
 init_src2();
 init_db();
-import { mkdirSync as mkdirSync18, readFileSync as readFileSync18, readdirSync as readdirSync9, rmSync as rmSync12, statSync as statSync6, writeFileSync as writeFileSync17 } from "node:fs";
-import { join as join37 } from "node:path";
+import { mkdirSync as mkdirSync18, readFileSync as readFileSync18, readdirSync as readdirSync9, rmSync as rmSync12, statSync as statSync6, writeFileSync as writeFileSync18 } from "node:fs";
+import { join as join38 } from "node:path";
 var SESSION_HEADER = "x-hanoman-session";
 var SAFE_ID = /^[A-Za-z0-9._-]{1,200}$/;
 var launchers = /* @__PURE__ */ new Map();
 var STALE_MS = 30 * 24 * 60 * 6e4;
-var launcherDir = (env = process.env) => join37(resolveHome(env), "session-launchers");
+var launcherDir = (env = process.env) => join38(resolveHome(env), "session-launchers");
 function recordLauncher(sessionId2, agentId, env = process.env) {
   if (!SAFE_ID.test(sessionId2)) return;
   const known2 = launchersFor(sessionId2, env);
@@ -77415,11 +77548,11 @@ function recordLauncher(sessionId2, agentId, env = process.env) {
   try {
     const dir2 = launcherDir(env);
     mkdirSync18(dir2, { recursive: true, mode: 448 });
-    writeFileSync17(join37(dir2, sessionId2), [...known2].join("\n"), { mode: 384 });
+    writeFileSync18(join38(dir2, sessionId2), [...known2].join("\n"), { mode: 384 });
     const now = Date.now();
     for (const f of readdirSync9(dir2)) {
       try {
-        if (now - statSync6(join37(dir2, f)).mtimeMs > STALE_MS) rmSync12(join37(dir2, f), { force: true });
+        if (now - statSync6(join38(dir2, f)).mtimeMs > STALE_MS) rmSync12(join38(dir2, f), { force: true });
       } catch {
       }
     }
@@ -77431,7 +77564,7 @@ function launchersFor(sessionId2, env) {
   if (hot) return hot;
   const ids = /* @__PURE__ */ new Set();
   try {
-    for (const l of readFileSync18(join37(launcherDir(env), sessionId2), "utf8").split("\n")) if (l.trim()) ids.add(l.trim());
+    for (const l of readFileSync18(join38(launcherDir(env), sessionId2), "utf8").split("\n")) if (l.trim()) ids.add(l.trim());
   } catch {
   }
   launchers.set(sessionId2, ids);
@@ -78329,10 +78462,10 @@ import { readFileSync as readFileSync20 } from "node:fs";
 
 // src/services/vps-ssh.ts
 init_config2();
-import { spawn as spawn4 } from "node:child_process";
-import { mkdtempSync as mkdtempSync4, rmSync as rmSync13, writeFileSync as writeFileSync18 } from "node:fs";
+import { spawn as spawn5 } from "node:child_process";
+import { mkdtempSync as mkdtempSync4, rmSync as rmSync13, writeFileSync as writeFileSync19 } from "node:fs";
 import { tmpdir as tmpdir8 } from "node:os";
-import { dirname as dirname16, join as join38 } from "node:path";
+import { dirname as dirname16, join as join39 } from "node:path";
 var sshBin = () => effectiveStr("HANOMAN_SSH_BIN") ?? "ssh";
 function consoleArgv(t) {
   return [
@@ -78347,9 +78480,9 @@ function consoleArgv(t) {
   ];
 }
 function askpassScript() {
-  const dir2 = mkdtempSync4(join38(tmpdir8(), "hanoman-askpass-"));
-  const path = join38(dir2, "askpass.sh");
-  writeFileSync18(path, `#!/bin/sh
+  const dir2 = mkdtempSync4(join39(tmpdir8(), "hanoman-askpass-"));
+  const path = join39(dir2, "askpass.sh");
+  writeFileSync19(path, `#!/bin/sh
 printf '%s' "$HANOMAN_SSH_PASSWORD"
 `, { mode: 448 });
   return path;
@@ -78383,7 +78516,7 @@ function sshExec(t, remoteCmd, opts2 = {}) {
     HANOMAN_SSH_PASSWORD: opts2.password
   } : process.env;
   return new Promise((resolve25) => {
-    const p3 = spawn4(sshBin(), args, { stdio: ["pipe", "pipe", "pipe"], env });
+    const p3 = spawn5(sshBin(), args, { stdio: ["pipe", "pipe", "pipe"], env });
     let out4 = "";
     const timer11 = setTimeout(() => p3.kill("SIGKILL"), opts2.timeoutMs ?? 6e4);
     const done = (r) => {
@@ -78409,16 +78542,16 @@ function sshExec(t, remoteCmd, opts2 = {}) {
 // src/services/vps-audit.ts
 init_db();
 import { existsSync as existsSync20, readFileSync as readFileSync19 } from "node:fs";
-import { join as join40 } from "node:path";
+import { join as join41 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 
 // src/runner/deps.ts
 import { existsSync as existsSync19 } from "node:fs";
-import { dirname as dirname17, join as join39 } from "node:path";
+import { dirname as dirname17, join as join40 } from "node:path";
 function repoRootFrom(startDir) {
   let dir2 = startDir;
   for (let i = 0; i < 8; i++) {
-    if (existsSync19(join39(dir2, "pnpm-workspace.yaml"))) return dir2;
+    if (existsSync19(join40(dir2, "pnpm-workspace.yaml"))) return dir2;
     const parent = dirname17(dir2);
     if (parent === dir2) break;
     dir2 = parent;
@@ -78531,7 +78664,7 @@ var packagedScript = (f) => fileURLToPath4(new URL(`../scripts/vps/${f}`, import
 var moduleDir = () => fileURLToPath4(new URL(".", import.meta.url));
 var scriptPath = (f) => {
   const packed = packagedScript(f);
-  return existsSync20(packed) ? packed : join40(repoRoot(moduleDir()), "server", "scripts", "vps", f);
+  return existsSync20(packed) ? packed : join41(repoRoot(moduleDir()), "server", "scripts", "vps", f);
 };
 async function itemStatesOf(vpsId) {
   const rows = await prisma.vpsItemState.findMany({ where: { vpsId } });
@@ -78778,25 +78911,25 @@ init_config2();
 import { execFileSync as execFileSync7 } from "node:child_process";
 import { chmodSync as chmodSync9, copyFileSync, existsSync as existsSync21, mkdirSync as mkdirSync19, readFileSync as readFileSync22, unlinkSync as unlinkSync5 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
-import { join as join41 } from "node:path";
+import { join as join42 } from "node:path";
 var keyDir = () => effectiveStr("HANOMAN_SSH_KEY_DIR") ?? resolveDataDirs().sshKeys;
 var KEY_FILES = ["id_ed25519", "id_ed25519.pub"];
 function adoptLegacyKey(dir2) {
   if (effectiveStr("HANOMAN_SSH_KEY_DIR")) return;
-  const legacy = join41(homedir8(), ".hanoman");
+  const legacy = join42(homedir8(), ".hanoman");
   if (legacy === dir2) return;
-  if (!KEY_FILES.every((f) => existsSync21(join41(legacy, f)))) return;
+  if (!KEY_FILES.every((f) => existsSync21(join42(legacy, f)))) return;
   mkdirSync19(dir2, { recursive: true, mode: 448 });
   for (const f of KEY_FILES) {
-    copyFileSync(join41(legacy, f), join41(dir2, f));
-    chmodSync9(join41(dir2, f), 384);
+    copyFileSync(join42(legacy, f), join42(dir2, f));
+    chmodSync9(join42(dir2, f), 384);
   }
-  for (const f of KEY_FILES) unlinkSync5(join41(legacy, f));
+  for (const f of KEY_FILES) unlinkSync5(join42(legacy, f));
   console.log(`vps: key SSH dipindah dari ${legacy} ke ${dir2} (SPEC-846 \u2014 satu batas backup)`);
 }
 function ensureHanomanKey() {
   const dir2 = keyDir();
-  const privPath = join41(dir2, KEY_FILES[0]);
+  const privPath = join42(dir2, KEY_FILES[0]);
   const pubPath = `${privPath}.pub`;
   if (!existsSync21(privPath)) adoptLegacyKey(dir2);
   if (!existsSync21(privPath)) {
@@ -79109,7 +79242,7 @@ init_config2();
 import { execFileSync as execFileSync8 } from "node:child_process";
 import { readFileSync as readFileSync24 } from "node:fs";
 import { homedir as homedir10, userInfo } from "node:os";
-import { join as join42 } from "node:path";
+import { join as join43 } from "node:path";
 var USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
 var TTL_MS2 = 3e4;
 var lastOk = null;
@@ -79122,7 +79255,7 @@ var LABELS = {
 var humanize = (k) => k.replace(/_/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
 var nowIso = () => (/* @__PURE__ */ new Date()).toISOString();
 function credsFile() {
-  return join42(effectiveStr("CLAUDE_CONFIG_DIR") ?? join42(homedir10(), ".claude"), ".credentials.json");
+  return join43(effectiveStr("CLAUDE_CONFIG_DIR") ?? join43(homedir10(), ".claude"), ".credentials.json");
 }
 var securityRun = (args) => execFileSync8("security", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
 var osAccount = () => {
@@ -79207,14 +79340,14 @@ async function getLimits() {
 // src/services/codex-limits.ts
 import { open as open4, readdir as readdir9, stat as stat7 } from "node:fs/promises";
 import { homedir as homedir11 } from "node:os";
-import { join as join43 } from "node:path";
+import { join as join44 } from "node:path";
 var TTL_MS3 = 3e4;
 var STALE_AFTER_MS = 12 * 36e5;
 var TAIL_BYTES = 512 * 1024;
 var MAX_FILES = 8;
 var cache2 = null;
 var freshUntil2 = 0;
-var codexSessionsDir = () => join43(process.env.CODEX_HOME ?? join43(homedir11(), ".codex"), "sessions");
+var codexSessionsDir = () => join44(process.env.CODEX_HOME ?? join44(homedir11(), ".codex"), "sessions");
 var UNAVAILABLE = { status: "unavailable", windows: [], fetchedAt: null, plan: null };
 function windowLabel(minutes) {
   if (minutes === 300) return "Sesi 5 jam";
@@ -79247,7 +79380,7 @@ async function recentRollouts(dir2) {
     return [];
   }
   const stamped = await Promise.all(entries4.map(async (rel) => {
-    const full = join43(dir2, rel);
+    const full = join44(dir2, rel);
     try {
       return { full, mtime: (await stat7(full)).mtimeMs };
     } catch {
@@ -79323,7 +79456,7 @@ init_config2();
 import { execFileSync as execFileSync9 } from "node:child_process";
 import { readFileSync as readFileSync25 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
-import { join as join44 } from "node:path";
+import { join as join45 } from "node:path";
 var QUOTA_URL = "https://cloudcode-pa.googleapis.com/v1internal:retrieveUserQuotaSummary";
 var USER_AGENT = "antigravity (hanoman)";
 var TTL_MS4 = 6e4;
@@ -79345,10 +79478,10 @@ function readAgyToken(run6 = securityRun2) {
     return null;
   }
 }
-var agyHome = () => join44(homedir12(), ".gemini", "antigravity-cli");
+var agyHome = () => join45(homedir12(), ".gemini", "antigravity-cli");
 function defaultProject() {
   try {
-    return readFileSync25(join44(agyHome(), "cache", "default_project_id.txt"), "utf8").trim() || null;
+    return readFileSync25(join45(agyHome(), "cache", "default_project_id.txt"), "utf8").trim() || null;
   } catch {
     return null;
   }
@@ -79536,7 +79669,7 @@ init_src2();
 init_src();
 import { randomUUID as randomUUID14 } from "node:crypto";
 import { readFile as readFile8, writeFile as writeFile6, rename as rename5, mkdir as mkdir9, rm as rm9 } from "node:fs/promises";
-import { dirname as dirname18, join as join46 } from "node:path";
+import { dirname as dirname18, join as join47 } from "node:path";
 
 // src/services/model-catalog-parser.ts
 init_zod();
@@ -79640,10 +79773,10 @@ init_src2();
 init_antigravity_runtime();
 init_config2();
 init_session_sandbox();
-import { spawn as spawn5 } from "node:child_process";
+import { spawn as spawn6 } from "node:child_process";
 import { mkdtemp as mkdtemp2, rm as rm8 } from "node:fs/promises";
 import { tmpdir as tmpdir9 } from "node:os";
-import { join as join45 } from "node:path";
+import { join as join46 } from "node:path";
 var MAX_BYTES = 4 * 1024 * 1024;
 var TIMEOUT_MS = 2e4;
 var quote3 = (s2) => "'" + s2.replaceAll("'", "'\\''") + "'";
@@ -79680,7 +79813,7 @@ function catalogCommand(agent, cwd, env) {
 function runCatalogCommand(command, agent, cwd, env, timeoutMs = TIMEOUT_MS) {
   return new Promise((resolve25, reject2) => {
     assertAntigravityLaunch(agent, void 0, env);
-    const child = spawn5(command.bin, command.args, { cwd, env: agentEnvironment(agent, env), stdio: ["pipe", "pipe", "pipe"] });
+    const child = spawn6(command.bin, command.args, { cwd, env: agentEnvironment(agent, env), stdio: ["pipe", "pipe", "pipe"] });
     let buffer = "", bytes = 0, settled = false;
     let killTimer;
     const finish = (error, result) => {
@@ -79742,7 +79875,7 @@ function runCatalogCommand(command, agent, cwd, env, timeoutMs = TIMEOUT_MS) {
 }
 async function probeModelCatalog(agent) {
   assertAntigravityLaunch(agent);
-  const cwd = await mkdtemp2(join45(tmpdir9(), "hanoman-models-"));
+  const cwd = await mkdtemp2(join46(tmpdir9(), "hanoman-models-"));
   const env = agentEnvironment(agent, process.env);
   for (const key of ["HANOMAN_CLAUDE_BIN", "HANOMAN_CODEX_BIN", "HANOMAN_PODMAN_BIN", "HANOMAN_ANTIGRAVITY_BIN"]) {
     const value = effectiveStr(key);
@@ -79853,7 +79986,7 @@ async function writeModelCatalogCache(file, catalog, current = () => true) {
     await rm9(temp, { force: true });
   }
 }
-var cacheFile = () => join46(resolveHome(), "model-catalog.json");
+var cacheFile = () => join47(resolveHome(), "model-catalog.json");
 var modelCatalogService = createModelCatalogService({
   probe: probeModelCatalog,
   key: catalogProbeKey,
@@ -79892,8 +80025,9 @@ init_pty();
 
 // src/services/restart.ts
 init_src();
+init_exit_guard();
 function requestConfigRestart(delayMs = 50) {
-  setTimeout(() => process.exit(CONFIG_RESTART_EXIT), delayMs);
+  setTimeout(() => exitGuarded(CONFIG_RESTART_EXIT), delayMs);
 }
 function afterReplyFlushed(raw, fn, maxWaitMs = 5e3) {
   let done = false;
@@ -79911,7 +80045,7 @@ function afterReplyFlushed(raw, fn, maxWaitMs = 5e3) {
   timer11 = setTimeout(run6, maxWaitMs);
 }
 function requestManualRestart(delayMs = 250) {
-  setTimeout(() => process.exit(MANUAL_RESTART_EXIT), delayMs);
+  setTimeout(() => exitGuarded(MANUAL_RESTART_EXIT), delayMs);
 }
 
 // src/routes/update.ts
@@ -81780,7 +81914,7 @@ init_src();
 init_db();
 import { gunzipSync, gzipSync } from "node:zlib";
 import { mkdir as mkdir10, rename as rename6, writeFile as writeFile7 } from "node:fs/promises";
-import { join as join47 } from "node:path";
+import { join as join48 } from "node:path";
 
 // src/services/device-auth.ts
 function bearerToken2(req) {
@@ -82036,9 +82170,9 @@ async function sync_default(app3) {
       const deviceId = req.device.id;
       const withTranscriptKey = await Promise.all(parsed.data.entries.map(async (e) => {
         if (!e.transcript) return e;
-        const dir2 = join47(resolveDataDirs().home, "remote-transcripts", deviceId);
+        const dir2 = join48(resolveDataDirs().home, "remote-transcripts", deviceId);
         await mkdir10(dir2, { recursive: true, mode: 448 });
-        const final = join47(dir2, `${e.seq}.txt`);
+        const final = join48(dir2, `${e.seq}.txt`);
         const tmp = `${final}.tmp`;
         await writeFile7(tmp, e.transcript, { encoding: "utf8", mode: 384 });
         await rename6(tmp, final);
@@ -85325,7 +85459,7 @@ init_qa_attachment_transfer();
 init_uploads();
 import { createHash as createHash21 } from "node:crypto";
 import { execFileSync as execFileSync10 } from "node:child_process";
-import { join as join49 } from "node:path";
+import { join as join50 } from "node:path";
 var QaSessionError = class extends Error {
   constructor(code, message, needsBind = false) {
     super(message);
@@ -85352,7 +85486,7 @@ async function startQaFindingSession(d, fid) {
       const saved = await saveSessionUpload(id2, bytes, a.mimeType);
       files2.push(`${JSON.stringify(a.filename)} (${a.mimeType}): ${saved.path}`);
     }
-    const wt = join49(repoDir, ".worktrees", id2);
+    const wt = join50(repoDir, ".worktrees", id2);
     const branch = `qa/${id2.slice(3)}`;
     const reused = realGit.worktreeAlive(wt);
     try {
@@ -86891,9 +87025,9 @@ ${baru}`;
 // src/services/portal-chat/workspace.ts
 init_src();
 init_db();
-import { mkdirSync as mkdirSync20, mkdtempSync as mkdtempSync5, rmSync as rmSync14, writeFileSync as writeFileSync19 } from "node:fs";
+import { mkdirSync as mkdirSync20, mkdtempSync as mkdtempSync5, rmSync as rmSync14, writeFileSync as writeFileSync20 } from "node:fs";
 import { tmpdir as tmpdir10 } from "node:os";
-import { join as join50 } from "node:path";
+import { join as join51 } from "node:path";
 var STAGE_LABEL = {
   brainstorming: "Dirumuskan",
   objective: "Dirumuskan",
@@ -86936,7 +87070,7 @@ function renderTicketDoc(tickets2) {
 ${baris.join("\n")}`;
 }
 async function buildChatWorkspace(projectId) {
-  const dir2 = mkdtempSync5(join50(tmpdir10(), "hanoman-portal-chat-"));
+  const dir2 = mkdtempSync5(join51(tmpdir10(), "hanoman-portal-chat-"));
   try {
     const project = await prisma.project.findUnique({
       where: { id: projectId },
@@ -86951,7 +87085,7 @@ async function buildChatWorkspace(projectId) {
     });
     const files2 = [];
     const tulis = (rel, isi) => {
-      writeFileSync19(join50(dir2, rel), isi, { mode: 384 });
+      writeFileSync20(join51(dir2, rel), isi, { mode: 384 });
       files2.push(rel);
     };
     tulis("project.md", renderProjectDoc(project));
@@ -86959,11 +87093,11 @@ async function buildChatWorkspace(projectId) {
     tulis("laporan.md", renderTicketDoc(tickets2.map((t) => toPortalTicket(t, null))));
     const prds = await listPrds(projectId);
     if (prds.length) {
-      mkdirSync20(join50(dir2, "dokumen"), { mode: 448 });
+      mkdirSync20(join51(dir2, "dokumen"), { mode: 448 });
       for (const prd of prds) {
         const isi = await readPrd(projectId, prd.path);
         if (!isi) continue;
-        tulis(join50("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
+        tulis(join51("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
       }
     }
     return { dir: dir2, files: files2, cleanup: () => rmSync14(dir2, { recursive: true, force: true }) };
@@ -87490,13 +87624,13 @@ init_db();
 // src/services/bootstrap.ts
 import { createHash as createHash22, randomBytes as randomBytes11, timingSafeEqual as timingSafeEqual5 } from "node:crypto";
 import { chmod as chmod2, lstat as lstat3, mkdir as mkdir11, readFile as readFile9, unlink as unlink5, writeFile as writeFile8 } from "node:fs/promises";
-import { join as join51 } from "node:path";
+import { join as join52 } from "node:path";
 var TTL_MS7 = 15 * 6e4;
 var SETUP_TOKEN_FILE = "setup.token";
 var BootstrapError = class extends Error {
   code = "BOOTSTRAP_PROOF";
 };
-var tokenPath = (home3) => join51(home3, SETUP_TOKEN_FILE);
+var tokenPath = (home3) => join52(home3, SETUP_TOKEN_FILE);
 async function readStored(home3) {
   try {
     const info = await lstat3(tokenPath(home3));
@@ -88334,7 +88468,7 @@ init_event_log();
 init_transcript_store();
 init_src2();
 import { readFile as readFile10 } from "node:fs/promises";
-import { join as join52 } from "node:path";
+import { join as join53 } from "node:path";
 function decodeCursor(c) {
   if (!c) return null;
   try {
@@ -88372,7 +88506,7 @@ async function readRemoteTranscript(id2) {
   const row = await prisma.logEntry.findUnique({ where: { id: id2 } });
   if (!row || row.lane !== "transcript" || !row.transcriptKey) return null;
   if (row.deviceId === "local") return readTranscript(row.transcriptKey);
-  const path = join52(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
+  const path = join53(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
   try {
     return await readFile10(path, "utf8");
   } catch {
@@ -89639,9 +89773,9 @@ async function pruneLogs(now, retention, opts2 = {}) {
 }
 async function reconcileRemoteTranscripts() {
   const { readdir: readdir10, unlink: unlink6, stat: stat8 } = await import("node:fs/promises");
-  const { join: join53 } = await import("node:path");
+  const { join: join54 } = await import("node:path");
   const { resolveDataDirs: resolveDataDirs2 } = await Promise.resolve().then(() => (init_src2(), src_exports));
-  const root = join53(resolveDataDirs2().home, "remote-transcripts");
+  const root = join54(resolveDataDirs2().home, "remote-transcripts");
   let deviceDirs;
   try {
     deviceDirs = await readdir10(root);
@@ -89655,16 +89789,16 @@ async function reconcileRemoteTranscripts() {
   for (const dev of deviceDirs) {
     let files2;
     try {
-      files2 = await readdir10(join53(root, dev));
+      files2 = await readdir10(join54(root, dev));
     } catch {
       continue;
     }
     for (const f of files2) {
       const key = `${dev}/${f}`;
       if (referenced.has(key)) continue;
-      const st = await stat8(join53(root, dev, f)).catch(() => null);
+      const st = await stat8(join54(root, dev, f)).catch(() => null);
       if (!st || Date.now() - st.mtimeMs < gracePeriodMs) continue;
-      await unlink6(join53(root, dev, f)).catch(() => {
+      await unlink6(join54(root, dev, f)).catch(() => {
       });
       orphans++;
     }
@@ -89851,6 +89985,7 @@ init_transcript_store();
 init_client2();
 init_dispatcher();
 init_safe_outbound_request();
+init_exit_guard();
 installSafeGlobalFetch();
 var app2 = buildApp();
 var port = Number(process.env.PORT ?? 8787);
@@ -89869,7 +90004,7 @@ var shutdown = createShutdown({
     await app2.close();
     await prisma.$disconnect();
   },
-  exit: (code) => process.exit(code)
+  exit: (code) => exitGuarded(code)
 });
 process.on("SIGTERM", () => void shutdown("SIGTERM"));
 process.on("SIGINT", () => void shutdown("SIGINT"));
@@ -89945,7 +90080,7 @@ bootstrapReady.then(async () => {
   startOverviewRecorder();
 }).catch((err) => {
   console.error("listen gagal:", err);
-  process.exit(1);
+  exitGuarded(1);
 });
 /*! Bundled license information: