hanoman 0.9.31 → 0.9.32

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.9.31",
-  "sha": "762018b6",
-  "builtAt": "2026-10-19T06:42:39.892Z"
+  "version": "0.9.32",
+  "sha": "5946ca19",
+  "builtAt": "2026-10-19T07:56:38.058Z"
 }

package/dist/cli.js

@@ -6783,7 +6783,11 @@ var init_session_admission = __esm({
 });
 
 // ../shared/src/dto.ts
-var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zMarkSpecReviewed, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zSetupApply, zChangePassword, zAdminPasswordReset, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, PROVISION_PROFILES, COMPONENT_IDS, zProvision, UPDATE_RESTART_EXIT, CONFIG_RESTART_EXIT, MANUAL_RESTART_EXIT, zUpdateApplyBody, MAX_SUBS, zSubPage, zSubLimit, zTopicParams, zEventsClientMsg, zTicketView, zTicketAttachmentView, zSpecAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
+function parseExitIntent(text) {
+  const m = /^(\d+) (\d+)\s*$/.exec(text ?? "");
+  return m ? { pid: Number(m[1]), code: Number(m[2]) } : null;
+}
+var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zMarkSpecReviewed, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zSetupApply, zChangePassword, zAdminPasswordReset, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, PROVISION_PROFILES, COMPONENT_IDS, zProvision, UPDATE_RESTART_EXIT, CONFIG_RESTART_EXIT, MANUAL_RESTART_EXIT, EXIT_INTENT_FILE, zUpdateApplyBody, MAX_SUBS, zSubPage, zSubLimit, zTopicParams, zEventsClientMsg, zTicketView, zTicketAttachmentView, zSpecAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
 var init_dto = __esm({
   "../shared/src/dto.ts"() {
     "use strict";
@@ -7317,6 +7321,7 @@ var init_dto = __esm({
     UPDATE_RESTART_EXIT = 75;
     CONFIG_RESTART_EXIT = 76;
     MANUAL_RESTART_EXIT = 77;
+    EXIT_INTENT_FILE = "exit-intent";
     zUpdateApplyBody = external_exports.object({ confirm: external_exports.boolean().optional() });
     MAX_SUBS = 16;
     zSubPage = external_exports.number().int().min(1).max(1e4);
@@ -16187,13 +16192,14 @@ __export(start_exports, {
   parseStartArgs: () => parseStartArgs,
   planSupervisorStep: () => planSupervisorStep,
   prismaClientUsable: () => prismaClientUsable,
+  resolveChildExit: () => resolveChildExit,
   serverEnv: () => serverEnv,
   spawnEnv: () => spawnEnv
 });
 import { spawn, execFileSync as execFileSync3 } from "node:child_process";
 import { createRequire as createRequire2 } from "node:module";
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, chmodSync as chmodSync3 } from "node:fs";
-import { dirname as dirname4, resolve as resolvePath } from "node:path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, chmodSync as chmodSync3, readFileSync as readFileSync3, rmSync } from "node:fs";
+import { dirname as dirname4, join as join6, resolve as resolvePath } from "node:path";
 import { fileURLToPath } from "node:url";
 function parseStartArgs(argv) {
   const out = { port: null, host: null, db: null, migrate: true };
@@ -16318,6 +16324,23 @@ function installLatest() {
 function spawnEnv(fileEnv, processEnv, server) {
   return { ...fileEnv, ...processEnv, ...server };
 }
+function resolveChildExit(exit, intentText) {
+  const intent = parseExitIntent(intentText);
+  if (exit.signal === "SIGKILL" && intent && exit.pid !== void 0 && intent.pid === exit.pid) {
+    return { code: intent.code, forced: true };
+  }
+  return { code: exit.code ?? 0, forced: false };
+}
+function takeExitIntent(home) {
+  const path = join6(home, EXIT_INTENT_FILE);
+  try {
+    const text = readFileSync3(path, "utf8");
+    rmSync(path, { force: true });
+    return text;
+  } catch {
+    return null;
+  }
+}
 function runServer(serverJs, env, fileEnv) {
   const child = spawn(process.execPath, [serverJs], {
     stdio: "inherit",
@@ -16325,9 +16348,9 @@ function runServer(serverJs, env, fileEnv) {
   });
   const handlers = ["SIGINT", "SIGTERM"].map((sig) => [sig, () => child.kill(sig)]);
   for (const [sig, h] of handlers) process.on(sig, h);
-  return new Promise((res) => child.on("exit", (code) => {
+  return new Promise((res) => child.on("exit", (code, signal) => {
     for (const [sig, h] of handlers) process.off(sig, h);
-    res(code ?? 0);
+    res({ code, signal, pid: child.pid });
   }));
 }
 async function start(argv, ctx) {
@@ -16386,7 +16409,10 @@ ${hint}
   let restartsUsed = 0;
   let configRestartsUsed = 0;
   for (; ; ) {
-    const code = await runServer(layout.server, env, readConfigEnv(home));
+    const exit = await runServer(layout.server, env, readConfigEnv(home));
+    const { code, forced } = resolveChildExit(exit, takeExitIntent(home));
+    if (forced) ctx.stderr(`hanoman: server macet saat keluar \u2014 dihentikan watchdog; dilanjutkan sebagai exit ${code} (ADR-0227)
+`);
     const step = planSupervisorStep(code, restartsUsed, configRestartsUsed);
     if (step.action === "exit") {
       if (code === UPDATE_RESTART_EXIT) {
@@ -37833,7 +37859,7 @@ __export(mcp_exports, {
   agentTokenPath: () => agentTokenPath,
   default: () => mcp
 });
-import { readFileSync as readFileSync3 } from "node:fs";
+import { readFileSync as readFileSync4 } from "node:fs";
 import { join as join8 } from "node:path";
 async function mcp(argv, ctx) {
   const cfg = resolveMcpConfig(argv, ctx.env, () => tokenFile(ctx.env));
@@ -37868,7 +37894,7 @@ var init_mcp2 = __esm({
     agentTokenPath = (env) => join8(resolveHome(env), "agent-token");
     tokenFile = (env) => {
       try {
-        return readFileSync3(agentTokenPath(env), "utf8");
+        return readFileSync4(agentTokenPath(env), "utf8");
       } catch {
         return null;
       }
@@ -38209,11 +38235,11 @@ var init_migrate_pg = __esm({
 });
 
 // src/config.ts
-import { readFileSync as readFileSync4, existsSync as existsSync7 } from "node:fs";
+import { readFileSync as readFileSync5, existsSync as existsSync7 } from "node:fs";
 import { join as join10 } from "node:path";
 function loadConfig(repoRoot) {
   const p3 = join10(repoRoot, "hanoman.config.json");
-  const raw = existsSync7(p3) ? JSON.parse(readFileSync4(p3, "utf8")) : {};
+  const raw = existsSync7(p3) ? JSON.parse(readFileSync5(p3, "utf8")) : {};
   return zHanomanConfig.parse(raw);
 }
 var init_config3 = __esm({
@@ -38240,10 +38266,10 @@ var init_repo = __esm({
 });
 
 // src/docs-model.ts
-import { readFileSync as readFileSync5, readdirSync as readdirSync3, statSync as statSync2 } from "node:fs";
+import { readFileSync as readFileSync6, readdirSync as readdirSync3, statSync as statSync2 } from "node:fs";
 import { join as join12, relative as relative2 } from "node:path";
 function parseIndex(indexPath) {
-  const md = readFileSync5(indexPath, "utf8");
+  const md = readFileSync6(indexPath, "utf8");
   const out = /* @__PURE__ */ new Set();
   for (const m of md.matchAll(LINK_RE2)) {
     let t = m[1].trim();
@@ -38291,7 +38317,7 @@ var init_docs_model = __esm({
 
 // src/verify.ts
 import { join as join13 } from "node:path";
-import { existsSync as existsSync8, readFileSync as readFileSync6 } from "node:fs";
+import { existsSync as existsSync8, readFileSync as readFileSync7 } from "node:fs";
 function scanCoverage(cwd) {
   const { root, docsDir, indexPath } = resolveRepo(cwd);
   const docsRoot = join13(root, docsDir);
@@ -38300,7 +38326,7 @@ function scanCoverage(cwd) {
   const corpus = walkDocs(docsRoot);
   const read = (rel) => {
     try {
-      return readFileSync6(join13(docsRoot, rel), "utf8");
+      return readFileSync7(join13(docsRoot, rel), "utf8");
     } catch {
       return null;
     }
@@ -38343,9 +38369,9 @@ var init_docs_scan = __esm({
 });
 
 // src/index-edit.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync2 } from "node:fs";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync2 } from "node:fs";
 function addLink(indexPath, relPath, category) {
-  let md = readFileSync7(indexPath, "utf8");
+  let md = readFileSync8(indexPath, "utf8");
   if (md.includes(`(${relPath})`)) return;
   const base2 = relPath.split("/").pop().replace(/\.md$/, "");
   const line = `- [${base2}](${relPath})`;
@@ -38375,7 +38401,7 @@ __export(docs_index_exports, {
 });
 import { parseArgs as parseArgs2 } from "node:util";
 import { join as join14 } from "node:path";
-import { existsSync as existsSync9, readFileSync as readFileSync8 } from "node:fs";
+import { existsSync as existsSync9, readFileSync as readFileSync9 } from "node:fs";
 async function docs_index_default(args, ctx) {
   const { values } = parseArgs2({ args, options: { check: { type: "boolean" }, fix: { type: "boolean" } }, allowPositionals: true });
   const { root, docsDir, indexPath } = resolveRepo(ctx.cwd);
@@ -38383,7 +38409,7 @@ async function docs_index_default(args, ctx) {
   const corpus = walkDocs(docsRoot);
   const read = (rel) => {
     try {
-      return readFileSync8(join14(docsRoot, rel), "utf8");
+      return readFileSync9(join14(docsRoot, rel), "utf8");
     } catch {
       return null;
     }
@@ -38548,10 +38574,10 @@ var pack_exports = {};
 __export(pack_exports, {
   default: () => pack
 });
-import { cpSync, existsSync as existsSync10, mkdirSync as mkdirSync3, readFileSync as readFileSync9, rmSync, writeFileSync as writeFileSync3 } from "node:fs";
+import { cpSync, existsSync as existsSync10, mkdirSync as mkdirSync3, readFileSync as readFileSync10, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "node:fs";
 import { dirname as dirname8, join as join16 } from "node:path";
 function depVersions(repo) {
-  const read = (p3) => JSON.parse(readFileSync9(join16(repo, p3), "utf8"));
+  const read = (p3) => JSON.parse(readFileSync10(join16(repo, p3), "utf8"));
   const server = read("server/package.json"), cli = read("cli/package.json");
   const pools = [server.dependencies, server.devDependencies, cli.dependencies, cli.devDependencies];
   const out = {};
@@ -38577,7 +38603,7 @@ async function pack(argv, ctx) {
   }
   const outIdx = argv.indexOf("--out");
   const out = outIdx === -1 ? join16(repo, "dist-npm") : join16(repo, argv[outIdx + 1] ?? "dist-npm");
-  const version2 = JSON.parse(readFileSync9(join16(repo, "package.json"), "utf8")).version;
+  const version2 = JSON.parse(readFileSync10(join16(repo, "package.json"), "utf8")).version;
   if (!version2) {
     ctx.stderr("pack: root package.json tanpa field version\n");
     return 1;
@@ -38590,7 +38616,7 @@ async function pack(argv, ctx) {
 `);
     return 1;
   }
-  rmSync(out, { recursive: true, force: true });
+  rmSync2(out, { recursive: true, force: true });
   mkdirSync3(join16(out, "bin"), { recursive: true });
   for (const item of copyPlan(repo)) {
     if (!existsSync10(item.from)) {
@@ -38629,13 +38655,13 @@ var verify_packed_exports = {};
 __export(verify_packed_exports, {
   default: () => verifyPacked
 });
-import { readFileSync as readFileSync10 } from "node:fs";
+import { readFileSync as readFileSync11 } from "node:fs";
 import { join as join17 } from "node:path";
 function verifyPacked(_argv, ctx) {
   const path = join17(process.cwd(), "package.json");
   let pkg;
   try {
-    pkg = JSON.parse(readFileSync10(path, "utf8"));
+    pkg = JSON.parse(readFileSync11(path, "utf8"));
   } catch {
     ctx.stderr(`verify: tak bisa membaca ${path}
 `);

package/dist/server.js

@@ -7615,12 +7615,16 @@ var init_session_admission = __esm({
 function flowForSource(source) {
   return source === "qa" ? "qa" : source === "audit" ? "audit" : source === "goal" ? "goal" : source === "no_effort" ? "no_effort" : "feature";
 }
+function formatExitIntent(pid, code) {
+  return `${pid} ${code}
+`;
+}
 function subKey(topic, params) {
   const canon = {};
   for (const k of Object.keys(params).sort()) if (params[k] !== void 0) canon[k] = params[k];
   return `${topic}|${JSON.stringify(canon)}`;
 }
-var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zMarkSpecReviewed, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, isGoalShapedFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zSetupApply, zChangePassword, zAdminPasswordReset, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, PROVISION_PROFILES, COMPONENT_IDS, zProvision, UPDATE_RESTART_EXIT, CONFIG_RESTART_EXIT, MANUAL_RESTART_EXIT, zUpdateApplyBody, MAX_SUBS, zSubPage, zSubLimit, zTopicParams, zEventsClientMsg, zTicketView, zTicketAttachmentView, zSpecAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
+var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zMarkSpecReviewed, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, isGoalShapedFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zSetupApply, zChangePassword, zAdminPasswordReset, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, PROVISION_PROFILES, COMPONENT_IDS, zProvision, UPDATE_RESTART_EXIT, CONFIG_RESTART_EXIT, MANUAL_RESTART_EXIT, EXIT_INTENT_FILE, zUpdateApplyBody, MAX_SUBS, zSubPage, zSubLimit, zTopicParams, zEventsClientMsg, zTicketView, zTicketAttachmentView, zSpecAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
 var init_dto = __esm({
   "../shared/src/dto.ts"() {
     "use strict";
@@ -8155,6 +8159,7 @@ var init_dto = __esm({
     UPDATE_RESTART_EXIT = 75;
     CONFIG_RESTART_EXIT = 76;
     MANUAL_RESTART_EXIT = 77;
+    EXIT_INTENT_FILE = "exit-intent";
     zUpdateApplyBody = external_exports.object({ confirm: external_exports.boolean().optional() });
     MAX_SUBS = 16;
     zSubPage = external_exports.number().int().min(1).max(1e4);
@@ -56479,6 +56484,45 @@ var init_device_sockets = __esm({
   }
 });
 
+// src/services/exit-guard.ts
+import { spawn as spawn3 } from "node:child_process";
+import { writeFileSync as writeFileSync15 } from "node:fs";
+import { join as join29 } from "node:path";
+function watchdogScript(pid, graceMs) {
+  const secs = Math.max(1, Math.ceil(graceMs / 1e3));
+  return `s=$(ps -o lstart= -p ${pid}); sleep ${secs}; [ -n "$s" ] && [ "$(ps -o lstart= -p ${pid})" = "$s" ] && kill -9 ${pid}`;
+}
+function launchWatchdog(script2, env = process.env) {
+  if (env.VITEST) return false;
+  const child = spawn3("/bin/sh", ["-c", script2], { detached: true, stdio: "ignore" });
+  child.on("error", () => {
+  });
+  child.unref();
+  return true;
+}
+function exitGuarded(code, d = {}) {
+  const pid = d.pid ?? process.pid;
+  try {
+    const write2 = d.writeIntent ?? ((p3, t) => writeFileSync15(p3, t, { mode: 384 }));
+    write2(join29(d.home ?? resolveHome(), EXIT_INTENT_FILE), formatExitIntent(pid, code));
+  } catch {
+  }
+  try {
+    (d.launch ?? launchWatchdog)(watchdogScript(pid, d.graceMs ?? EXIT_WATCHDOG_MS));
+  } catch {
+  }
+  (d.exit ?? ((c) => process.exit(c)))(code);
+}
+var EXIT_WATCHDOG_MS;
+var init_exit_guard = __esm({
+  "src/services/exit-guard.ts"() {
+    "use strict";
+    init_src();
+    init_src2();
+    EXIT_WATCHDOG_MS = 5e3;
+  }
+});
+
 // src/services/update.ts
 import { readFileSync as readFileSync16 } from "node:fs";
 import { resolve as resolve20, dirname as dirname13 } from "node:path";
@@ -56514,7 +56558,7 @@ function supervised() {
 }
 function requestRestartForUpdate() {
   const delay2 = effectiveInt("HANOMAN_UPDATE_RESTART_DELAY_MS") ?? 250;
-  setTimeout(() => (exiter ?? ((c) => process.exit(c)))(UPDATE_RESTART_EXIT), delay2);
+  setTimeout(() => (exiter ?? exitGuarded)(UPDATE_RESTART_EXIT), delay2);
 }
 async function maybeFetch() {
   if (!effectiveBool("HANOMAN_UPDATE_FETCH")) return;
@@ -56560,6 +56604,7 @@ var init_update = __esm({
     "use strict";
     init_src();
     init_config2();
+    init_exit_guard();
     UPDATE_COMMAND = "npm i -g hanoman@latest --prefer-online";
     RESULT_TTL_MS = 15e3;
     FETCH_TTL_MS = 5 * 6e4;
@@ -62836,15 +62881,15 @@ var init_client2 = __esm({
 
 // src/services/logs/spool.ts
 import { appendFile, mkdir as mkdir7, readFile as readFile7, readdir as readdir7, rm as rm6, stat as stat6 } from "node:fs/promises";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 function spoolDir(lane) {
-  return join32(resolveDataDirs().home, "log-spool", lane);
+  return join33(resolveDataDirs().home, "log-spool", lane);
 }
 async function currentSegment(lane) {
   const dir2 = spoolDir(lane);
   await mkdir7(dir2, { recursive: true, mode: 448 });
   if (currentFile && currentBytes < LOG_SPOOL_SEGMENT_BYTES) return currentFile;
-  currentFile = join32(dir2, `${Date.now()}-${++segCounter}.ndjson`);
+  currentFile = join33(dir2, `${Date.now()}-${++segCounter}.ndjson`);
   currentBytes = 0;
   return currentFile;
 }
@@ -62866,7 +62911,7 @@ async function readSpoolSegments(lane) {
   const files2 = names.filter((n2) => n2.endsWith(".ndjson")).sort();
   const out4 = [];
   for (const name2 of files2) {
-    const file = join32(dir2, name2);
+    const file = join33(dir2, name2);
     const raw = await readFile7(file, "utf8").catch(() => "");
     const entries4 = raw.split("\n").filter(Boolean).map((l) => JSON.parse(l));
     out4.push({ file, entries: entries4 });
@@ -63553,15 +63598,15 @@ var init_codex_version = __esm({
 // src/services/agent-tool-catalog.ts
 import { readFileSync as readFileSync26 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
-import { join as join48 } from "node:path";
+import { join as join49 } from "node:path";
 function mcpServerNames(repoDir) {
   const names = [];
-  const claudeJson = readJson2(join48(home(), ".claude.json"));
+  const claudeJson = readJson2(join49(home(), ".claude.json"));
   names.push(...serversOf(claudeJson));
   if (repoDir) {
     const projects = claudeJson?.projects;
     if (projects && typeof projects === "object") names.push(...serversOf(projects[repoDir]));
-    names.push(...serversOf(readJson2(join48(repoDir, ".mcp.json"))));
+    names.push(...serversOf(readJson2(join49(repoDir, ".mcp.json"))));
   }
   names.push(...codexServers());
   return [...new Set(names.filter(Boolean))].sort((a, b) => a.localeCompare(b));
@@ -63590,7 +63635,7 @@ var init_agent_tool_catalog = __esm({
     codexServers = () => {
       let text2;
       try {
-        text2 = readFileSync26(join48(home(), ".codex", "config.toml"), "utf8");
+        text2 = readFileSync26(join49(home(), ".codex", "config.toml"), "utf8");
       } catch {
         return [];
       }
@@ -70533,8 +70578,8 @@ init_local_binding();
 init_session_id();
 init_uploads();
 import { mkdir as mkdir6, readdir as readdir5, readFile as readFile6, rm as rm4, writeFile as writeFile5 } from "node:fs/promises";
-import { join as join29 } from "node:path";
-var specAttachmentsDir = (repoDir, sessionId2) => join29(repoDir, ".worktrees", ".attachments", sessionId2);
+import { join as join30 } from "node:path";
+var specAttachmentsDir = (repoDir, sessionId2) => join30(repoDir, ".worktrees", ".attachments", sessionId2);
 var INDEX = "INDEX.md";
 var humanSize = (n2) => n2 >= 1024 * 1024 ? `${(n2 / 1024 / 1024).toFixed(1)} MB` : n2 >= 1024 ? `${Math.round(n2 / 1024)} KB` : `${n2} B`;
 function uniqueName(taken, filename) {
@@ -70584,19 +70629,19 @@ async function syncSpecAttachmentsDir(specId, projectId) {
   for (const a of rows) {
     let bytes;
     try {
-      bytes = await readFile6(join29(uploadDir(), a.storageKey));
+      bytes = await readFile6(join30(uploadDir(), a.storageKey));
     } catch {
       continue;
     }
     const filename = uniqueName(taken, a.filename);
-    const path = join29(dir2, filename);
+    const path = join30(dir2, filename);
     await writeFile5(path, bytes, { mode: 384 });
     items.push({ filename, mimeType: a.mimeType, size: a.size, path });
   }
-  await writeFile5(join29(dir2, INDEX), renderIndex(specId, items), { mode: 384 });
+  await writeFile5(join30(dir2, INDEX), renderIndex(specId, items), { mode: 384 });
   const keep = /* @__PURE__ */ new Set([INDEX, ...items.map((a) => a.filename)]);
   for (const name2 of await readdir5(dir2)) {
-    if (!keep.has(name2)) await rm4(join29(dir2, name2), { recursive: true, force: true }).catch(() => {
+    if (!keep.has(name2)) await rm4(join30(dir2, name2), { recursive: true, force: true }).catch(() => {
     });
   }
   return items;
@@ -74042,7 +74087,7 @@ async function docs_default(app3) {
 // src/routes/ide.ts
 init_src2();
 import { basename as basename10 } from "node:path";
-import { spawn as spawn3 } from "node:child_process";
+import { spawn as spawn4 } from "node:child_process";
 
 // src/services/git-remotes.ts
 import { execFile as execFile14 } from "node:child_process";
@@ -74112,7 +74157,7 @@ init_codex_trust();
 // src/services/repo-fs.ts
 import { lstat as lstat2, rename as rename4, rm as rm5 } from "node:fs/promises";
 import { createWriteStream } from "node:fs";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 import { randomUUID as randomUUID11 } from "node:crypto";
 import { pipeline } from "node:stream/promises";
 var EntryExistsError = class extends Error {
@@ -74173,7 +74218,7 @@ async function saveUpload2(repoDir, rel, source, opts2 = {}) {
   if (current && !opts2.overwrite) return { status: "exists" };
   if (current && !current.isFile())
     throw new PathContainmentError("repository path ditolak: target bukan file regular");
-  const temp = join30(entry2.parent, `.hanoman-${randomUUID11()}.tmp`);
+  const temp = join31(entry2.parent, `.hanoman-${randomUUID11()}.tmp`);
   try {
     await pipeline(source, createWriteStream(temp, { flags: "wx", mode: 384 }));
     if (opts2.isTruncated?.()) {
@@ -74457,7 +74502,7 @@ async function ide_default(app3) {
     const ref = q2.ref || "HEAD";
     if (!/^[\w./@{}-]+$/.test(ref)) return reply.code(400).send({ error: "ref tidak valid" });
     const fmt = q2.format === "tar" ? "tar" : "zip";
-    const child = spawn3("git", ["archive", `--format=${fmt}`, "--end-of-options", ref], { cwd: repoDir });
+    const child = spawn4("git", ["archive", `--format=${fmt}`, "--end-of-options", ref], { cwd: repoDir });
     reply.header("content-type", fmt === "zip" ? "application/zip" : "application/x-tar");
     reply.header("content-disposition", `attachment; filename="${basename10(repoDir)}-${ref.replace(/[^\w.-]/g, "_")}.${fmt}"`);
     return reply.send(child.stdout);
@@ -74664,14 +74709,14 @@ async function finishGraphOp(reply, id2, repoDir, r, verb) {
 // src/routes/fs.ts
 import { readdir as readdir6 } from "node:fs/promises";
 import { homedir as homedir6 } from "node:os";
-import { resolve as resolve22, dirname as dirname14, join as join31 } from "node:path";
+import { resolve as resolve22, dirname as dirname14, join as join32 } from "node:path";
 async function fs_default(app3) {
   app3.get("/fs/browse", async (req, reply) => {
     const q2 = req.query.path;
     const dir2 = q2 && q2.trim() ? resolve22(q2.trim()) : homedir6();
     try {
       const ents = await readdir6(dir2, { withFileTypes: true });
-      const entries4 = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join31(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
+      const entries4 = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join32(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
       const parent = dirname14(dir2);
       return { path: dir2, parent: parent === dir2 ? null : parent, entries: entries4 };
     } catch {
@@ -74700,11 +74745,11 @@ init_src2();
 init_db();
 import { execFile as execFile15, spawnSync as spawnSync4 } from "node:child_process";
 import { existsSync as existsSync16, readdirSync as readdirSync8, rmSync as rmSync9 } from "node:fs";
-import { join as join33 } from "node:path";
+import { join as join34 } from "node:path";
 import { promisify as promisify14 } from "node:util";
 
 // src/services/git-auth.ts
-import { chmodSync as chmodSync8, mkdirSync as mkdirSync15, writeFileSync as writeFileSync15 } from "node:fs";
+import { chmodSync as chmodSync8, mkdirSync as mkdirSync15, writeFileSync as writeFileSync16 } from "node:fs";
 import { tmpdir as tmpdir6 } from "node:os";
 import { dirname as dirname15 } from "node:path";
 var gitAskpassPath = () => `${tmpdir6()}/hanoman-askpass/token.sh`;
@@ -74725,7 +74770,7 @@ var isGithubHttps = (remote) => /^https:\/\/github\.com\//.test(remote);
 function gitAuthEnv(token) {
   const path = gitAskpassPath();
   mkdirSync15(dirname15(path), { recursive: true, mode: 448 });
-  writeFileSync15(path, ASKPASS_TOKEN, { mode: 448 });
+  writeFileSync16(path, ASKPASS_TOKEN, { mode: 448 });
   chmodSync8(path, 448);
   return { GIT_ASKPASS: path, GIT_TERMINAL_PROMPT: "0", HANOMAN_GIT_TOKEN: token };
 }
@@ -74767,7 +74812,7 @@ var CheckoutError = class extends Error {
 var CLONE_TIMEOUT_MS = 10 * 6e4;
 var FETCH_TIMEOUT_MS = 2 * 6e4;
 var AUTH_RE = /Authentication failed|could not read (Username|Password)|Invalid username or password|HTTP 40[13]|returned error: 40[13]|Repository not found|Permission denied \(publickey\)/i;
-var checkoutRoot = () => join33(resolveHome(), "projects");
+var checkoutRoot = () => join34(resolveHome(), "projects");
 var slug = (id2) => id2.toLowerCase().replace(/[^a-z0-9_-]+/g, "-").replace(/^-+|-+$/g, "") || "project";
 var sameRemote = (a, b) => {
   const norm5 = (u) => httpsRemote(u).replace(/\.git$/, "").replace(/\/+$/, "").toLowerCase();
@@ -74801,7 +74846,7 @@ async function doClone(projectId, opts2) {
   if (!project) throw new CheckoutError(`project "${projectId}" tidak ada`, "not-found");
   if (!project.gitRemote) throw new CheckoutError(`project "${projectId}" tidak punya gitRemote untuk di-clone`, "no-remote");
   const remote = project.gitRemote;
-  const dest = opts2.dir ?? join33(checkoutRoot(), slug(project.id));
+  const dest = opts2.dir ?? join34(checkoutRoot(), slug(project.id));
   if (existsSync16(dest) && !isEmptyDir(dest)) {
     const origin = originOf2(dest);
     if (origin && sameRemote(origin, remote)) {
@@ -75385,13 +75430,13 @@ init_local_binding();
 
 // src/services/terminal-diag.ts
 import { appendFileSync as appendFileSync4, mkdirSync as mkdirSync16, statSync as statSync4, rmSync as rmSync10 } from "node:fs";
-import { join as join34 } from "node:path";
+import { join as join35 } from "node:path";
 var DIAG_MAX_BYTES = 2 * 1024 * 1024;
 var KINDS = /* @__PURE__ */ new Set(["key", "comp", "data", "ack", "pred"]);
 var ID = /^[A-Za-z0-9_-]{1,64}$/;
 function diagFile(home3, sessionId2) {
   if (!ID.test(sessionId2)) throw new Error(`id sesi tak sah untuk diag: ${sessionId2}`);
-  return join34(home3, "diag", `${sessionId2}.jsonl`);
+  return join35(home3, "diag", `${sessionId2}.jsonl`);
 }
 function usable(ev) {
   if (!ev || typeof ev !== "object") return false;
@@ -75402,7 +75447,7 @@ function appendDiag(home3, sessionId2, events) {
   const file = diagFile(home3, sessionId2);
   const rows = events.filter(usable);
   if (!rows.length) return;
-  mkdirSync16(join34(home3, "diag"), { recursive: true });
+  mkdirSync16(join35(home3, "diag"), { recursive: true });
   try {
     if (statSync4(file).size > DIAG_MAX_BYTES) rmSync10(file);
   } catch {
@@ -75496,7 +75541,7 @@ init_session_event_spool();
 init_ingress_policy();
 import { constants as constants4 } from "node:fs";
 import { mkdir as mkdir8, open as open3, readdir as readdir8, rm as rm7 } from "node:fs/promises";
-import { join as join35 } from "node:path";
+import { join as join36 } from "node:path";
 var MAX_EVENT_BYTES = 1e6;
 var MAX_FILES_PER_DRAIN = 1e3;
 var SESSION_ID_RE = /^[a-z0-9_-]+$/;
@@ -75547,7 +75592,7 @@ async function drainSpool(app3, root, observation, host2) {
   let readBuffer;
   for (const session of await readdir8(root, { withFileTypes: true })) {
     if (!session.isDirectory() || !SESSION_ID_RE.test(session.name)) continue;
-    const dir2 = join35(root, session.name);
+    const dir2 = join36(root, session.name);
     let entries4;
     try {
       entries4 = await readdir8(dir2, { withFileTypes: true });
@@ -75559,7 +75604,7 @@ async function drainSpool(app3, root, observation, host2) {
       if (!entry2.isFile() || !entry2.name.endsWith(".json")) continue;
       const eventAt = /^(\d{1,15})-/.exec(entry2.name)?.[1];
       if (++examined > MAX_FILES_PER_DRAIN) return delivered;
-      const path = join35(dir2, entry2.name);
+      const path = join36(dir2, entry2.name);
       let payload;
       let handle;
       try {
@@ -76586,9 +76631,9 @@ init_session_sandbox();
 init_session_sandbox();
 import { execFile as execFile16 } from "node:child_process";
 import { randomUUID as randomUUID13 } from "node:crypto";
-import { mkdirSync as mkdirSync17, rmSync as rmSync11, writeFileSync as writeFileSync16 } from "node:fs";
+import { mkdirSync as mkdirSync17, rmSync as rmSync11, writeFileSync as writeFileSync17 } from "node:fs";
 import { constants as constants5, tmpdir as tmpdir7 } from "node:os";
-import { join as join36 } from "node:path";
+import { join as join37 } from "node:path";
 var binFor = (agent) => agent === "antigravity" ? antigravityBin() : agent === "codex" ? effectiveStr("HANOMAN_CODEX_BIN") ?? "codex" : effectiveStr("HANOMAN_CLAUDE_BIN") ?? "claude";
 function leadArgv(o) {
   if (o.agent === "antigravity") return [
@@ -76626,11 +76671,11 @@ function leadProcess(prompt, o, env = process.env) {
   const mode = env.HANOMAN_SESSION_SANDBOX ?? (resolveHardening(env) ? "required" : "off");
   if (mode === "off") return { file, args: directArgs, cwd: o.cwd, cleanup: () => {
   } };
-  const promptDir = join36(tmpdir7(), "hanoman-prompts");
+  const promptDir = join37(tmpdir7(), "hanoman-prompts");
   mkdirSync17(promptDir, { recursive: true, mode: 448 });
-  const promptFile = join36(promptDir, `oneshot-${randomUUID13()}`);
-  writeFileSync16(promptFile, prompt, { flag: "wx", mode: 384 });
-  const workspace = o.cwd ?? join36(tmpdir7(), `hanoman-oneshot-${randomUUID13()}`);
+  const promptFile = join37(promptDir, `oneshot-${randomUUID13()}`);
+  writeFileSync17(promptFile, prompt, { flag: "wx", mode: 384 });
+  const workspace = o.cwd ?? join37(tmpdir7(), `hanoman-oneshot-${randomUUID13()}`);
   if (!o.cwd) mkdirSync17(workspace, { recursive: false, mode: 448 });
   try {
     const argsWithoutPrompt = directArgs.slice(0, -1);
@@ -77489,13 +77534,13 @@ async function run2(sessionId2, deps) {
 // src/services/decision-guard.ts
 init_src2();
 init_db();
-import { mkdirSync as mkdirSync18, readFileSync as readFileSync18, readdirSync as readdirSync9, rmSync as rmSync12, statSync as statSync6, writeFileSync as writeFileSync17 } from "node:fs";
-import { join as join37 } from "node:path";
+import { mkdirSync as mkdirSync18, readFileSync as readFileSync18, readdirSync as readdirSync9, rmSync as rmSync12, statSync as statSync6, writeFileSync as writeFileSync18 } from "node:fs";
+import { join as join38 } from "node:path";
 var SESSION_HEADER = "x-hanoman-session";
 var SAFE_ID = /^[A-Za-z0-9._-]{1,200}$/;
 var launchers = /* @__PURE__ */ new Map();
 var STALE_MS = 30 * 24 * 60 * 6e4;
-var launcherDir = (env = process.env) => join37(resolveHome(env), "session-launchers");
+var launcherDir = (env = process.env) => join38(resolveHome(env), "session-launchers");
 function recordLauncher(sessionId2, agentId, env = process.env) {
   if (!SAFE_ID.test(sessionId2)) return;
   const known2 = launchersFor(sessionId2, env);
@@ -77503,11 +77548,11 @@ function recordLauncher(sessionId2, agentId, env = process.env) {
   try {
     const dir2 = launcherDir(env);
     mkdirSync18(dir2, { recursive: true, mode: 448 });
-    writeFileSync17(join37(dir2, sessionId2), [...known2].join("\n"), { mode: 384 });
+    writeFileSync18(join38(dir2, sessionId2), [...known2].join("\n"), { mode: 384 });
     const now = Date.now();
     for (const f of readdirSync9(dir2)) {
       try {
-        if (now - statSync6(join37(dir2, f)).mtimeMs > STALE_MS) rmSync12(join37(dir2, f), { force: true });
+        if (now - statSync6(join38(dir2, f)).mtimeMs > STALE_MS) rmSync12(join38(dir2, f), { force: true });
       } catch {
       }
     }
@@ -77519,7 +77564,7 @@ function launchersFor(sessionId2, env) {
   if (hot) return hot;
   const ids = /* @__PURE__ */ new Set();
   try {
-    for (const l of readFileSync18(join37(launcherDir(env), sessionId2), "utf8").split("\n")) if (l.trim()) ids.add(l.trim());
+    for (const l of readFileSync18(join38(launcherDir(env), sessionId2), "utf8").split("\n")) if (l.trim()) ids.add(l.trim());
   } catch {
   }
   launchers.set(sessionId2, ids);
@@ -78417,10 +78462,10 @@ import { readFileSync as readFileSync20 } from "node:fs";
 
 // src/services/vps-ssh.ts
 init_config2();
-import { spawn as spawn4 } from "node:child_process";
-import { mkdtempSync as mkdtempSync4, rmSync as rmSync13, writeFileSync as writeFileSync18 } from "node:fs";
+import { spawn as spawn5 } from "node:child_process";
+import { mkdtempSync as mkdtempSync4, rmSync as rmSync13, writeFileSync as writeFileSync19 } from "node:fs";
 import { tmpdir as tmpdir8 } from "node:os";
-import { dirname as dirname16, join as join38 } from "node:path";
+import { dirname as dirname16, join as join39 } from "node:path";
 var sshBin = () => effectiveStr("HANOMAN_SSH_BIN") ?? "ssh";
 function consoleArgv(t) {
   return [
@@ -78435,9 +78480,9 @@ function consoleArgv(t) {
   ];
 }
 function askpassScript() {
-  const dir2 = mkdtempSync4(join38(tmpdir8(), "hanoman-askpass-"));
-  const path = join38(dir2, "askpass.sh");
-  writeFileSync18(path, `#!/bin/sh
+  const dir2 = mkdtempSync4(join39(tmpdir8(), "hanoman-askpass-"));
+  const path = join39(dir2, "askpass.sh");
+  writeFileSync19(path, `#!/bin/sh
 printf '%s' "$HANOMAN_SSH_PASSWORD"
 `, { mode: 448 });
   return path;
@@ -78471,7 +78516,7 @@ function sshExec(t, remoteCmd, opts2 = {}) {
     HANOMAN_SSH_PASSWORD: opts2.password
   } : process.env;
   return new Promise((resolve25) => {
-    const p3 = spawn4(sshBin(), args, { stdio: ["pipe", "pipe", "pipe"], env });
+    const p3 = spawn5(sshBin(), args, { stdio: ["pipe", "pipe", "pipe"], env });
     let out4 = "";
     const timer11 = setTimeout(() => p3.kill("SIGKILL"), opts2.timeoutMs ?? 6e4);
     const done = (r) => {
@@ -78497,16 +78542,16 @@ function sshExec(t, remoteCmd, opts2 = {}) {
 // src/services/vps-audit.ts
 init_db();
 import { existsSync as existsSync20, readFileSync as readFileSync19 } from "node:fs";
-import { join as join40 } from "node:path";
+import { join as join41 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 
 // src/runner/deps.ts
 import { existsSync as existsSync19 } from "node:fs";
-import { dirname as dirname17, join as join39 } from "node:path";
+import { dirname as dirname17, join as join40 } from "node:path";
 function repoRootFrom(startDir) {
   let dir2 = startDir;
   for (let i = 0; i < 8; i++) {
-    if (existsSync19(join39(dir2, "pnpm-workspace.yaml"))) return dir2;
+    if (existsSync19(join40(dir2, "pnpm-workspace.yaml"))) return dir2;
     const parent = dirname17(dir2);
     if (parent === dir2) break;
     dir2 = parent;
@@ -78619,7 +78664,7 @@ var packagedScript = (f) => fileURLToPath4(new URL(`../scripts/vps/${f}`, import
 var moduleDir = () => fileURLToPath4(new URL(".", import.meta.url));
 var scriptPath = (f) => {
   const packed = packagedScript(f);
-  return existsSync20(packed) ? packed : join40(repoRoot(moduleDir()), "server", "scripts", "vps", f);
+  return existsSync20(packed) ? packed : join41(repoRoot(moduleDir()), "server", "scripts", "vps", f);
 };
 async function itemStatesOf(vpsId) {
   const rows = await prisma.vpsItemState.findMany({ where: { vpsId } });
@@ -78866,25 +78911,25 @@ init_config2();
 import { execFileSync as execFileSync7 } from "node:child_process";
 import { chmodSync as chmodSync9, copyFileSync, existsSync as existsSync21, mkdirSync as mkdirSync19, readFileSync as readFileSync22, unlinkSync as unlinkSync5 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
-import { join as join41 } from "node:path";
+import { join as join42 } from "node:path";
 var keyDir = () => effectiveStr("HANOMAN_SSH_KEY_DIR") ?? resolveDataDirs().sshKeys;
 var KEY_FILES = ["id_ed25519", "id_ed25519.pub"];
 function adoptLegacyKey(dir2) {
   if (effectiveStr("HANOMAN_SSH_KEY_DIR")) return;
-  const legacy = join41(homedir8(), ".hanoman");
+  const legacy = join42(homedir8(), ".hanoman");
   if (legacy === dir2) return;
-  if (!KEY_FILES.every((f) => existsSync21(join41(legacy, f)))) return;
+  if (!KEY_FILES.every((f) => existsSync21(join42(legacy, f)))) return;
   mkdirSync19(dir2, { recursive: true, mode: 448 });
   for (const f of KEY_FILES) {
-    copyFileSync(join41(legacy, f), join41(dir2, f));
-    chmodSync9(join41(dir2, f), 384);
+    copyFileSync(join42(legacy, f), join42(dir2, f));
+    chmodSync9(join42(dir2, f), 384);
   }
-  for (const f of KEY_FILES) unlinkSync5(join41(legacy, f));
+  for (const f of KEY_FILES) unlinkSync5(join42(legacy, f));
   console.log(`vps: key SSH dipindah dari ${legacy} ke ${dir2} (SPEC-846 \u2014 satu batas backup)`);
 }
 function ensureHanomanKey() {
   const dir2 = keyDir();
-  const privPath = join41(dir2, KEY_FILES[0]);
+  const privPath = join42(dir2, KEY_FILES[0]);
   const pubPath = `${privPath}.pub`;
   if (!existsSync21(privPath)) adoptLegacyKey(dir2);
   if (!existsSync21(privPath)) {
@@ -79197,7 +79242,7 @@ init_config2();
 import { execFileSync as execFileSync8 } from "node:child_process";
 import { readFileSync as readFileSync24 } from "node:fs";
 import { homedir as homedir10, userInfo } from "node:os";
-import { join as join42 } from "node:path";
+import { join as join43 } from "node:path";
 var USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
 var TTL_MS2 = 3e4;
 var lastOk = null;
@@ -79210,7 +79255,7 @@ var LABELS = {
 var humanize = (k) => k.replace(/_/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
 var nowIso = () => (/* @__PURE__ */ new Date()).toISOString();
 function credsFile() {
-  return join42(effectiveStr("CLAUDE_CONFIG_DIR") ?? join42(homedir10(), ".claude"), ".credentials.json");
+  return join43(effectiveStr("CLAUDE_CONFIG_DIR") ?? join43(homedir10(), ".claude"), ".credentials.json");
 }
 var securityRun = (args) => execFileSync8("security", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
 var osAccount = () => {
@@ -79295,14 +79340,14 @@ async function getLimits() {
 // src/services/codex-limits.ts
 import { open as open4, readdir as readdir9, stat as stat7 } from "node:fs/promises";
 import { homedir as homedir11 } from "node:os";
-import { join as join43 } from "node:path";
+import { join as join44 } from "node:path";
 var TTL_MS3 = 3e4;
 var STALE_AFTER_MS = 12 * 36e5;
 var TAIL_BYTES = 512 * 1024;
 var MAX_FILES = 8;
 var cache2 = null;
 var freshUntil2 = 0;
-var codexSessionsDir = () => join43(process.env.CODEX_HOME ?? join43(homedir11(), ".codex"), "sessions");
+var codexSessionsDir = () => join44(process.env.CODEX_HOME ?? join44(homedir11(), ".codex"), "sessions");
 var UNAVAILABLE = { status: "unavailable", windows: [], fetchedAt: null, plan: null };
 function windowLabel(minutes) {
   if (minutes === 300) return "Sesi 5 jam";
@@ -79335,7 +79380,7 @@ async function recentRollouts(dir2) {
     return [];
   }
   const stamped = await Promise.all(entries4.map(async (rel) => {
-    const full = join43(dir2, rel);
+    const full = join44(dir2, rel);
     try {
       return { full, mtime: (await stat7(full)).mtimeMs };
     } catch {
@@ -79411,7 +79456,7 @@ init_config2();
 import { execFileSync as execFileSync9 } from "node:child_process";
 import { readFileSync as readFileSync25 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
-import { join as join44 } from "node:path";
+import { join as join45 } from "node:path";
 var QUOTA_URL = "https://cloudcode-pa.googleapis.com/v1internal:retrieveUserQuotaSummary";
 var USER_AGENT = "antigravity (hanoman)";
 var TTL_MS4 = 6e4;
@@ -79433,10 +79478,10 @@ function readAgyToken(run6 = securityRun2) {
     return null;
   }
 }
-var agyHome = () => join44(homedir12(), ".gemini", "antigravity-cli");
+var agyHome = () => join45(homedir12(), ".gemini", "antigravity-cli");
 function defaultProject() {
   try {
-    return readFileSync25(join44(agyHome(), "cache", "default_project_id.txt"), "utf8").trim() || null;
+    return readFileSync25(join45(agyHome(), "cache", "default_project_id.txt"), "utf8").trim() || null;
   } catch {
     return null;
   }
@@ -79624,7 +79669,7 @@ init_src2();
 init_src();
 import { randomUUID as randomUUID14 } from "node:crypto";
 import { readFile as readFile8, writeFile as writeFile6, rename as rename5, mkdir as mkdir9, rm as rm9 } from "node:fs/promises";
-import { dirname as dirname18, join as join46 } from "node:path";
+import { dirname as dirname18, join as join47 } from "node:path";
 
 // src/services/model-catalog-parser.ts
 init_zod();
@@ -79728,10 +79773,10 @@ init_src2();
 init_antigravity_runtime();
 init_config2();
 init_session_sandbox();
-import { spawn as spawn5 } from "node:child_process";
+import { spawn as spawn6 } from "node:child_process";
 import { mkdtemp as mkdtemp2, rm as rm8 } from "node:fs/promises";
 import { tmpdir as tmpdir9 } from "node:os";
-import { join as join45 } from "node:path";
+import { join as join46 } from "node:path";
 var MAX_BYTES = 4 * 1024 * 1024;
 var TIMEOUT_MS = 2e4;
 var quote3 = (s2) => "'" + s2.replaceAll("'", "'\\''") + "'";
@@ -79768,7 +79813,7 @@ function catalogCommand(agent, cwd, env) {
 function runCatalogCommand(command, agent, cwd, env, timeoutMs = TIMEOUT_MS) {
   return new Promise((resolve25, reject2) => {
     assertAntigravityLaunch(agent, void 0, env);
-    const child = spawn5(command.bin, command.args, { cwd, env: agentEnvironment(agent, env), stdio: ["pipe", "pipe", "pipe"] });
+    const child = spawn6(command.bin, command.args, { cwd, env: agentEnvironment(agent, env), stdio: ["pipe", "pipe", "pipe"] });
     let buffer = "", bytes = 0, settled = false;
     let killTimer;
     const finish = (error, result) => {
@@ -79830,7 +79875,7 @@ function runCatalogCommand(command, agent, cwd, env, timeoutMs = TIMEOUT_MS) {
 }
 async function probeModelCatalog(agent) {
   assertAntigravityLaunch(agent);
-  const cwd = await mkdtemp2(join45(tmpdir9(), "hanoman-models-"));
+  const cwd = await mkdtemp2(join46(tmpdir9(), "hanoman-models-"));
   const env = agentEnvironment(agent, process.env);
   for (const key of ["HANOMAN_CLAUDE_BIN", "HANOMAN_CODEX_BIN", "HANOMAN_PODMAN_BIN", "HANOMAN_ANTIGRAVITY_BIN"]) {
     const value = effectiveStr(key);
@@ -79941,7 +79986,7 @@ async function writeModelCatalogCache(file, catalog, current = () => true) {
     await rm9(temp, { force: true });
   }
 }
-var cacheFile = () => join46(resolveHome(), "model-catalog.json");
+var cacheFile = () => join47(resolveHome(), "model-catalog.json");
 var modelCatalogService = createModelCatalogService({
   probe: probeModelCatalog,
   key: catalogProbeKey,
@@ -79980,8 +80025,9 @@ init_pty();
 
 // src/services/restart.ts
 init_src();
+init_exit_guard();
 function requestConfigRestart(delayMs = 50) {
-  setTimeout(() => process.exit(CONFIG_RESTART_EXIT), delayMs);
+  setTimeout(() => exitGuarded(CONFIG_RESTART_EXIT), delayMs);
 }
 function afterReplyFlushed(raw, fn, maxWaitMs = 5e3) {
   let done = false;
@@ -79999,7 +80045,7 @@ function afterReplyFlushed(raw, fn, maxWaitMs = 5e3) {
   timer11 = setTimeout(run6, maxWaitMs);
 }
 function requestManualRestart(delayMs = 250) {
-  setTimeout(() => process.exit(MANUAL_RESTART_EXIT), delayMs);
+  setTimeout(() => exitGuarded(MANUAL_RESTART_EXIT), delayMs);
 }
 
 // src/routes/update.ts
@@ -81868,7 +81914,7 @@ init_src();
 init_db();
 import { gunzipSync, gzipSync } from "node:zlib";
 import { mkdir as mkdir10, rename as rename6, writeFile as writeFile7 } from "node:fs/promises";
-import { join as join47 } from "node:path";
+import { join as join48 } from "node:path";
 
 // src/services/device-auth.ts
 function bearerToken2(req) {
@@ -82124,9 +82170,9 @@ async function sync_default(app3) {
       const deviceId = req.device.id;
       const withTranscriptKey = await Promise.all(parsed.data.entries.map(async (e) => {
         if (!e.transcript) return e;
-        const dir2 = join47(resolveDataDirs().home, "remote-transcripts", deviceId);
+        const dir2 = join48(resolveDataDirs().home, "remote-transcripts", deviceId);
         await mkdir10(dir2, { recursive: true, mode: 448 });
-        const final = join47(dir2, `${e.seq}.txt`);
+        const final = join48(dir2, `${e.seq}.txt`);
         const tmp = `${final}.tmp`;
         await writeFile7(tmp, e.transcript, { encoding: "utf8", mode: 384 });
         await rename6(tmp, final);
@@ -85413,7 +85459,7 @@ init_qa_attachment_transfer();
 init_uploads();
 import { createHash as createHash21 } from "node:crypto";
 import { execFileSync as execFileSync10 } from "node:child_process";
-import { join as join49 } from "node:path";
+import { join as join50 } from "node:path";
 var QaSessionError = class extends Error {
   constructor(code, message, needsBind = false) {
     super(message);
@@ -85440,7 +85486,7 @@ async function startQaFindingSession(d, fid) {
       const saved = await saveSessionUpload(id2, bytes, a.mimeType);
       files2.push(`${JSON.stringify(a.filename)} (${a.mimeType}): ${saved.path}`);
     }
-    const wt = join49(repoDir, ".worktrees", id2);
+    const wt = join50(repoDir, ".worktrees", id2);
     const branch = `qa/${id2.slice(3)}`;
     const reused = realGit.worktreeAlive(wt);
     try {
@@ -86979,9 +87025,9 @@ ${baru}`;
 // src/services/portal-chat/workspace.ts
 init_src();
 init_db();
-import { mkdirSync as mkdirSync20, mkdtempSync as mkdtempSync5, rmSync as rmSync14, writeFileSync as writeFileSync19 } from "node:fs";
+import { mkdirSync as mkdirSync20, mkdtempSync as mkdtempSync5, rmSync as rmSync14, writeFileSync as writeFileSync20 } from "node:fs";
 import { tmpdir as tmpdir10 } from "node:os";
-import { join as join50 } from "node:path";
+import { join as join51 } from "node:path";
 var STAGE_LABEL = {
   brainstorming: "Dirumuskan",
   objective: "Dirumuskan",
@@ -87024,7 +87070,7 @@ function renderTicketDoc(tickets2) {
 ${baris.join("\n")}`;
 }
 async function buildChatWorkspace(projectId) {
-  const dir2 = mkdtempSync5(join50(tmpdir10(), "hanoman-portal-chat-"));
+  const dir2 = mkdtempSync5(join51(tmpdir10(), "hanoman-portal-chat-"));
   try {
     const project = await prisma.project.findUnique({
       where: { id: projectId },
@@ -87039,7 +87085,7 @@ async function buildChatWorkspace(projectId) {
     });
     const files2 = [];
     const tulis = (rel, isi) => {
-      writeFileSync19(join50(dir2, rel), isi, { mode: 384 });
+      writeFileSync20(join51(dir2, rel), isi, { mode: 384 });
       files2.push(rel);
     };
     tulis("project.md", renderProjectDoc(project));
@@ -87047,11 +87093,11 @@ async function buildChatWorkspace(projectId) {
     tulis("laporan.md", renderTicketDoc(tickets2.map((t) => toPortalTicket(t, null))));
     const prds = await listPrds(projectId);
     if (prds.length) {
-      mkdirSync20(join50(dir2, "dokumen"), { mode: 448 });
+      mkdirSync20(join51(dir2, "dokumen"), { mode: 448 });
       for (const prd of prds) {
         const isi = await readPrd(projectId, prd.path);
         if (!isi) continue;
-        tulis(join50("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
+        tulis(join51("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
       }
     }
     return { dir: dir2, files: files2, cleanup: () => rmSync14(dir2, { recursive: true, force: true }) };
@@ -87578,13 +87624,13 @@ init_db();
 // src/services/bootstrap.ts
 import { createHash as createHash22, randomBytes as randomBytes11, timingSafeEqual as timingSafeEqual5 } from "node:crypto";
 import { chmod as chmod2, lstat as lstat3, mkdir as mkdir11, readFile as readFile9, unlink as unlink5, writeFile as writeFile8 } from "node:fs/promises";
-import { join as join51 } from "node:path";
+import { join as join52 } from "node:path";
 var TTL_MS7 = 15 * 6e4;
 var SETUP_TOKEN_FILE = "setup.token";
 var BootstrapError = class extends Error {
   code = "BOOTSTRAP_PROOF";
 };
-var tokenPath = (home3) => join51(home3, SETUP_TOKEN_FILE);
+var tokenPath = (home3) => join52(home3, SETUP_TOKEN_FILE);
 async function readStored(home3) {
   try {
     const info = await lstat3(tokenPath(home3));
@@ -88422,7 +88468,7 @@ init_event_log();
 init_transcript_store();
 init_src2();
 import { readFile as readFile10 } from "node:fs/promises";
-import { join as join52 } from "node:path";
+import { join as join53 } from "node:path";
 function decodeCursor(c) {
   if (!c) return null;
   try {
@@ -88460,7 +88506,7 @@ async function readRemoteTranscript(id2) {
   const row = await prisma.logEntry.findUnique({ where: { id: id2 } });
   if (!row || row.lane !== "transcript" || !row.transcriptKey) return null;
   if (row.deviceId === "local") return readTranscript(row.transcriptKey);
-  const path = join52(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
+  const path = join53(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
   try {
     return await readFile10(path, "utf8");
   } catch {
@@ -89727,9 +89773,9 @@ async function pruneLogs(now, retention, opts2 = {}) {
 }
 async function reconcileRemoteTranscripts() {
   const { readdir: readdir10, unlink: unlink6, stat: stat8 } = await import("node:fs/promises");
-  const { join: join53 } = await import("node:path");
+  const { join: join54 } = await import("node:path");
   const { resolveDataDirs: resolveDataDirs2 } = await Promise.resolve().then(() => (init_src2(), src_exports));
-  const root = join53(resolveDataDirs2().home, "remote-transcripts");
+  const root = join54(resolveDataDirs2().home, "remote-transcripts");
   let deviceDirs;
   try {
     deviceDirs = await readdir10(root);
@@ -89743,16 +89789,16 @@ async function reconcileRemoteTranscripts() {
   for (const dev of deviceDirs) {
     let files2;
     try {
-      files2 = await readdir10(join53(root, dev));
+      files2 = await readdir10(join54(root, dev));
     } catch {
       continue;
     }
     for (const f of files2) {
       const key = `${dev}/${f}`;
       if (referenced.has(key)) continue;
-      const st = await stat8(join53(root, dev, f)).catch(() => null);
+      const st = await stat8(join54(root, dev, f)).catch(() => null);
       if (!st || Date.now() - st.mtimeMs < gracePeriodMs) continue;
-      await unlink6(join53(root, dev, f)).catch(() => {
+      await unlink6(join54(root, dev, f)).catch(() => {
       });
       orphans++;
     }
@@ -89939,6 +89985,7 @@ init_transcript_store();
 init_client2();
 init_dispatcher();
 init_safe_outbound_request();
+init_exit_guard();
 installSafeGlobalFetch();
 var app2 = buildApp();
 var port = Number(process.env.PORT ?? 8787);
@@ -89957,7 +90004,7 @@ var shutdown = createShutdown({
     await app2.close();
     await prisma.$disconnect();
   },
-  exit: (code) => process.exit(code)
+  exit: (code) => exitGuarded(code)
 });
 process.on("SIGTERM", () => void shutdown("SIGTERM"));
 process.on("SIGINT", () => void shutdown("SIGINT"));
@@ -90033,7 +90080,7 @@ bootstrapReady.then(async () => {
   startOverviewRecorder();
 }).catch((err) => {
   console.error("listen gagal:", err);
-  process.exit(1);
+  exitGuarded(1);
 });
 /*! Bundled license information:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hanoman",
-  "version": "0.9.31",
+  "version": "0.9.32",
   "description": "Orchestrator + dashboard workflow docs-driven untuk sesi Claude Code / Codex",
   "type": "module",
   "repository": {