hanoman 0.9.37 → 0.9.38

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.9.37",
-  "sha": "f525bd45",
-  "builtAt": "2026-10-30T09:03:54.676Z"
+  "version": "0.9.38",
+  "sha": "fb8cc7c9",
+  "builtAt": "2026-10-31T04:05:47.472Z"
 }

package/dist/cli.js

@@ -4166,12 +4166,13 @@ var init_spec_source = __esm({
 function resolveMethod(id) {
   return (id ? METHODS[id] : void 0) ?? METHODS[DEFAULT_METHOD];
 }
-var DEFAULT_METHOD, VERIFICATION_GATE, MATT_CLAUSE, AGENT_SKILLS_CLAUSE, METHODS, METHOD_IDS, uniq, PLAN_DIRS, SPEC_DIRS;
+var DEFAULT_METHOD, VERIFICATION_GATE, MOCKUP_SKILL, MATT_CLAUSE, AGENT_SKILLS_CLAUSE, METHODS, METHOD_IDS, uniq, PLAN_DIRS, SPEC_DIRS;
 var init_method_catalog = __esm({
   "../shared/src/method-catalog.ts"() {
     "use strict";
     DEFAULT_METHOD = "superpowers";
     VERIFICATION_GATE = "superpowers:verification-before-completion";
+    MOCKUP_SKILL = "codex-image";
     MATT_CLAUSE = "Skill mattpocock yang kontraknya mewawancarai manusia (`/grill-me`, `/to-spec`, `/triage`) JANGAN dipakai: pakai primitif model-invoked-nya untuk menguji rancanganmu sendiri, bukan untuk mewawancarai siapa pun. Hal yang masih ambigu dan akan mempengaruhi hasil tetap JANGAN diputuskan sendiri \u2014 bila kamu agen fase, daftarkan di `Keputusan terbuka:` laporanmu; bila tidak, ajukan lewat jalur tanya di klausa otonomi prompt ini. `to-tickets` di fase Plan dipakai HANYA sebagai penghasil berkas plan berkotak `- [ ]` di `docs/matt/plans/`, BUKAN penerbit tiket \u2014 hanoman sendiri adalah issue tracker-nya, jadi jangan menulis ke tracker eksternal mana pun.";
     AGENT_SKILLS_CLAUSE = "Pakai skill Agent Skills langsung sesuai fase, bukan slash-command atau meta-router `using-agent-skills`. Kontrak fase, instruksi project/pengguna, dan jalur keputusan/review hanoman tetap berlaku: `spec-driven-development` hanya menyusun spec pada fase Spec, jangan menjalankan Plan atau Execute dari fase itu. Simpan spec di `docs/agent-skills/specs/` dan plan beserta SELURUH checklist task `- [ ]` di `docs/agent-skills/plans/`, dengan id backlog pada nama berkas; ini menggantikan default `SPEC.md`, `tasks/plan.md`, dan `tasks/todo.md` upstream. Jangan menimpa plan lain yang belum tuntas atau membuat tiket di tracker eksternal: hanoman adalah issue tracker-nya. Centang task di berkas plan yang sama setelah implementasi dan verifikasi. Hal ambigu yang mempengaruhi hasil mengikuti jalur tanya prompt ini; bila kamu agen fase, daftarkan di `Keputusan terbuka:` laporanmu.";
     METHODS = {
@@ -4186,6 +4187,7 @@ var init_method_catalog = __esm({
         phaseSkills: {
           Brainstorm: ["superpowers:brainstorming"],
           Audit: ["superpowers:systematic-debugging"],
+          Mockup: [MOCKUP_SKILL],
           Plan: ["superpowers:writing-plans"],
           Execute: [
             "superpowers:executing-plans",
@@ -4231,6 +4233,7 @@ var init_method_catalog = __esm({
         phaseSkills: {
           Brainstorm: ["mattpocock-skills:grilling"],
           Audit: ["mattpocock-skills:diagnosing-bugs"],
+          Mockup: [MOCKUP_SKILL],
           Plan: ["mattpocock-skills:to-tickets"],
           Execute: [
             "mattpocock-skills:implement",
@@ -4269,6 +4272,7 @@ var init_method_catalog = __esm({
         phaseSkills: {
           Brainstorm: ["agent-skills:idea-refine"],
           Spec: ["agent-skills:spec-driven-development"],
+          Mockup: [MOCKUP_SKILL],
           Audit: [
             "agent-skills:debugging-and-error-recovery",
             "agent-skills:code-review-and-quality"
@@ -4312,7 +4316,7 @@ var init_method_catalog = __esm({
 
 // ../shared/src/method-status.ts
 function methodSkills(m) {
-  return [.../* @__PURE__ */ new Set([...Object.values(m.phaseSkills).flat(), ...m.exitSkills])];
+  return [.../* @__PURE__ */ new Set([...Object.values(m.phaseSkills).flat(), ...m.exitSkills])].filter((id) => !HANOMAN_PROVIDED_SKILLS.has(id));
 }
 function methodStatus(m, agent, installed) {
   const haveSkills = new Set(installed.skills);
@@ -4330,10 +4334,12 @@ function methodStatus(m, agent, installed) {
     install: [...m.install[agent]]
   };
 }
-var ANTIGRAVITY_METHOD_UNAVAILABLE_REASON;
+var HANOMAN_PROVIDED_SKILLS, ANTIGRAVITY_METHOD_UNAVAILABLE_REASON;
 var init_method_status = __esm({
   "../shared/src/method-status.ts"() {
     "use strict";
+    init_method_catalog();
+    HANOMAN_PROVIDED_SKILLS = /* @__PURE__ */ new Set([MOCKUP_SKILL]);
     ANTIGRAVITY_METHOD_UNAVAILABLE_REASON = "Installer metode Antigravity belum terverifikasi dari upstream";
   }
 });
@@ -4814,8 +4820,10 @@ var init_orchestration = __esm({
     ];
     FLOW_PHASES = {
       // ADR-0230 · `Review` = fase resmi sesudah Execute (dulu langkah R di dalam Execute, ADR-0170 #4).
-      feature: ["Brainstorm", "Objective", "Spec", "Plan", "Execute", "Review"],
-      qa: ["Audit", "Spec", "Plan", "Execute", "Review"],
+      // ADR-0233 · `Mockup` = fase opsional sesudah Spec: gambar UI disetujui sebelum Plan, dilewati agen
+      // bila backlog tak menyentuh UI.
+      feature: ["Brainstorm", "Objective", "Spec", "Mockup", "Plan", "Execute", "Review"],
+      qa: ["Audit", "Spec", "Mockup", "Plan", "Execute", "Review"],
       scaffold: ["Brainstorm", "Objective", "Doc index"],
       reverse: ["Scan", "Docs teknis", "Wawancara", "Konvensi & index", "Serah terima"],
       prd: ["Brainstorm", "PRD"],
@@ -4850,7 +4858,7 @@ var init_runtime_defaults = __esm({
     "use strict";
     init_orchestration();
     init_zod();
-    RUNTIME_DEFAULTS_VERSION = "2026-10-25-v1";
+    RUNTIME_DEFAULTS_VERSION = "2026-10-31-v1";
     zRuntimeDefaultState = external_exports.enum(["seeded", "user"]);
     zBuiltinRuntimeDefaults = external_exports.object({
       version: external_exports.string().default(RUNTIME_DEFAULTS_VERSION),
@@ -4882,6 +4890,7 @@ var init_runtime_defaults = __esm({
           Brainstorm: cell("sonnet", "medium"),
           Objective: cell("sonnet", "medium"),
           Spec: cell("opus", "high"),
+          Mockup: cell("sonnet", "medium"),
           Plan: cell("opus", "high"),
           Execute: cell("sonnet", "high"),
           Review: cell("opus", "high")
@@ -4890,6 +4899,7 @@ var init_runtime_defaults = __esm({
           Brainstorm: cell("gpt-5.6-terra", "medium"),
           Objective: cell("gpt-5.6-terra", "medium"),
           Spec: cell("gpt-5.6-sol", "high"),
+          Mockup: cell("gpt-5.6-terra", "medium"),
           Plan: cell("gpt-5.6-sol", "high"),
           Execute: cell("gpt-5.6-terra", "high"),
           Review: cell("gpt-5.6-sol", "high")
@@ -4899,6 +4909,7 @@ var init_runtime_defaults = __esm({
         {
           Audit: cell("opus", "high"),
           Spec: cell("opus", "high"),
+          Mockup: cell("sonnet", "medium"),
           Plan: cell("sonnet", "high"),
           Execute: cell("sonnet", "high"),
           Review: cell("opus", "high")
@@ -4906,6 +4917,7 @@ var init_runtime_defaults = __esm({
         {
           Audit: cell("gpt-5.6-sol", "high"),
           Spec: cell("gpt-5.6-sol", "high"),
+          Mockup: cell("gpt-5.6-terra", "medium"),
           Plan: cell("gpt-5.6-terra", "high"),
           Execute: cell("gpt-5.6-terra", "high"),
           Review: cell("gpt-5.6-sol", "high")
@@ -6819,7 +6831,7 @@ function parseExitIntent(text) {
   const m = /^(\d+) (\d+)\s*$/.exec(text ?? "");
   return m ? { pid: Number(m[1]), code: Number(m[2]) } : null;
 }
-var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zMarkSpecReviewed, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zSetupApply, zChangePassword, zAdminPasswordReset, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, PROVISION_PROFILES, COMPONENT_IDS, zProvision, UPDATE_RESTART_EXIT, CONFIG_RESTART_EXIT, MANUAL_RESTART_EXIT, EXIT_INTENT_FILE, zUpdateApplyBody, MAX_SUBS, zSubPage, zSubLimit, zTopicParams, zEventsClientMsg, zTicketView, zTicketAttachmentView, zSpecAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
+var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zMarkSpecReviewed, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zSetupApply, zChangePassword, zAdminPasswordReset, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, PROVISION_PROFILES, COMPONENT_IDS, zProvision, UPDATE_RESTART_EXIT, CONFIG_RESTART_EXIT, MANUAL_RESTART_EXIT, EXIT_INTENT_FILE, zUpdateApplyBody, MAX_SUBS, zSubPage, zSubLimit, zTopicParams, zEventsClientMsg, zTicketView, zTicketAttachmentView, zSpecAttachmentView, zMockupItem, zSpecMockups, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
 var init_dto = __esm({
   "../shared/src/dto.ts"() {
     "use strict";
@@ -7442,6 +7454,12 @@ var init_dto = __esm({
       size: external_exports.number().int(),
       createdAt: external_exports.string()
     });
+    zMockupItem = external_exports.object({ name: external_exports.string(), size: external_exports.number().int(), modifiedAt: external_exports.string() });
+    zSpecMockups = external_exports.object({
+      source: external_exports.enum(["worktree", "repo"]).nullable(),
+      dir: external_exports.string().nullable(),
+      items: external_exports.array(zMockupItem)
+    });
     zTicketDetail = zTicketView.extend({
       detail: external_exports.string(),
       attachments: external_exports.array(zTicketAttachmentView),
@@ -7592,6 +7610,9 @@ var init_api = __esm({
       // SPEC-843 · ADR-0124 · lampiran backlog item (multi-berkas per request).
       specAttachments: (id) => `${API}/specs/${id}/attachments`,
       specAttachment: (id, attId) => `${API}/specs/${id}/attachments/${attId}`,
+      // ADR-0233 · mockup UI backlog (docs/mockups/<spec-id>/).
+      specMockups: (id) => `${API}/specs/${id}/mockups`,
+      specMockup: (id, name) => `${API}/specs/${id}/mockups/${encodeURIComponent(name)}`,
       specReview: (id) => `${API}/specs/${id}/review`,
       specReviewFile: (id, path) => `${API}/specs/${id}/review/${path}`,
       // ADR-0213 · hapus worktree satu backlog item (cabang & commit tetap).
@@ -9645,6 +9666,19 @@ var init_backlog = __esm({
         build: (a) => ({ method: "GET", path: `/specs/${enc(String(a.spec))}/attachments` }),
         shape: (raw) => raw
       },
+      // ADR-0233 · mockup UI hasil fase Mockup, dibaca dari worktree sesi atau checkout project.
+      {
+        name: "hanoman_backlog_mockups_list",
+        title: "Daftar mockup backlog",
+        description: "Daftar gambar mockup UI sebuah backlog item (hasil fase Mockup, `docs/mockups/<spec-id>/`): `source` (`worktree` sesi atau `repo` checkout project, null bila belum ada), `dir` (path absolut folder di MESIN SERVER hanoman \u2014 baca langsung bila kamu di mesin yang sama), dan `items` {name, size, modifiedAt}. Unduh satu gambar ke disk klien dengan hanoman_backlog_mockup_download.",
+        inputSchema: obj({ properties: { spec: str(ID_HINT) }, required: ["spec"] }),
+        mode: "read",
+        capability: "backlog:read",
+        samplePath: "/specs/SPEC-1/mockups",
+        sampleMethod: "GET",
+        build: (a) => ({ method: "GET", path: `/specs/${enc(String(a.spec))}/mockups` }),
+        shape: (raw) => raw
+      },
       {
         name: "hanoman_backlog_attachment_delete",
         title: "Hapus lampiran backlog",
@@ -13263,6 +13297,26 @@ var init_transfer = __esm({
         build: (a) => ({ method: "GET", path: `${specOne(a)}/${enc(String(a.attachment))}`, download: dlFile(a, "lampiran") }),
         shape: (raw) => raw
       },
+      // ADR-0233 · mockup UI backlog (`docs/mockups/<spec-id>/`), biner → transfer tool (preseden ADR-0183).
+      {
+        name: "hanoman_backlog_mockup_download",
+        title: "Unduh mockup backlog",
+        description: `Mengunduh SATU gambar mockup UI backlog item ke disk lokal klien MCP. Nama berkas dari hanoman_backlog_mockups_list. ${DOWNLOAD_RESULT}`,
+        inputSchema: obj({
+          properties: { spec: SPEC, name: str("Nama berkas mockup, mis. `01-backlog-detail.png`."), savePath: SAVE_PATH, overwrite: OVERWRITE },
+          required: ["spec", "name"]
+        }),
+        mode: "write",
+        capability: "backlog:read",
+        samplePath: "/specs/SPEC-1/mockups/01-x.png",
+        sampleMethod: "GET",
+        build: (a) => ({
+          method: "GET",
+          path: `/specs/${enc(String(a.spec))}/mockups/${enc(String(a.name))}`,
+          download: dlFile(a, String(a.name ?? "mockup.png"))
+        }),
+        shape: (raw) => raw
+      },
       // ───────────────────────── lampiran tiket ─────────────────────────
       {
         name: "hanoman_ticket_attachment_download",
@@ -15431,7 +15485,7 @@ var init_goal_spec = __esm({
 });
 
 // ../runner/src/prompt.ts
-var DECIDER, ASK_ROUTE, ASK_ESCALATION_TOOL, ASK_DECISIONS_TOOL, AMBIGUOUS, AUTONOMY_CLAUSE, AUTONOMY_CLAUSE_FULL, ESCALATION_CONTRACT, PROJECT_METHOD, REVERSE_PHASE_GUIDE, SCAFFOLD_PHASE_GUIDE;
+var DECIDER, ASK_ROUTE, ASK_ESCALATION_TOOL, ASK_DECISIONS_TOOL, AMBIGUOUS, AUTONOMY_CLAUSE, AUTONOMY_CLAUSE_FULL, mockupGuide, MOCKUP_SINGLE, ESCALATION_CONTRACT, PROJECT_METHOD, REVERSE_PHASE_GUIDE, SCAFFOLD_PHASE_GUIDE;
 var init_prompt = __esm({
   "../runner/src/prompt.ts"() {
     "use strict";
@@ -15447,6 +15501,11 @@ var init_prompt = __esm({
     AMBIGUOUS = "hal yang masih ambigu dan akan mempengaruhi hasil (data model, kontrak API, scope, perilaku yang terlihat pengguna, atau asumsi yang terpaksa kamu ambil agar bisa lanjut)";
     AUTONOMY_CLAUSE = `Jalankan seluruh pipeline sampai tuntas tanpa berhenti di batas antar-fase. Checkpoint "review"/"approval"/"need review" milik skill superpowers BUKAN titik berhenti di sini \u2014 lanjut saja ke fase berikutnya. Berhenti HANYA untuk ${AMBIGUOUS}: JANGAN memutuskannya sendiri, ${ASK_ROUTE} Selain itu, terus lanjut.`;
     AUTONOMY_CLAUSE_FULL = `Kamu diluncurkan scheduler \u2014 mungkin tak ada manusia yang sedang menonton terminal ini. Tembus seluruh pipeline sampai stage \`done\`, lalu commit & push: checkpoint "review"/"approval" milik skill BUKAN titik berhenti dan jangan menunggu persetujuan siapa pun. Tetapi JANGAN memutuskan sendiri ${AMBIGUOUS}: ${ASK_ROUTE} Catat keputusan penting di pesan commit. Merge ke branch utama tetap dilakukan manusia, bukan kamu.`;
+    mockupGuide = (ask, close) => `putuskan dulu dari dokumen spec (qa jalur cepat: dokumen audit) apakah backlog ini mengubah atau membuat UI \u2014 layar, komponen, atau state yang terlihat pengguna. Tidak ada (perbaikan backend, CLI, refactor, docs) \u2192 fase ini dilewati, sebutkan alasannya dalam satu baris; ragu \u2192 anggap ada UI. Ada \u2192 baca design system project bila ada (mis. \`internal/docs/design-system/**\`, \`DESIGN.md\`) dan kode layar yang akan berubah, muat skill \`codex-image\`, lalu hasilkan SATU gambar per layar/state yang berubah, maks 6: desktop \`1536x1024\`, tambah mobile \`1024x1536\` bila layout responsif tersentuh, ke \`docs/mockups/<spec-id>/<NN>-<slug>.png\` (spec-id huruf kecil, NN dua digit urut). Tambahkan bagian \`## Mockup\` di dokumen spec: tiap berkas, layar/state yang ditunjukkannya, dan apa yang berubah. Lalu minta persetujuan ${ask}: sebutkan path absolut setiap gambar dan baris \`Lihat di hanoman: Backlog <SPEC-ID> \u2192 Mockup\`, dengan opsi Setujui \xB7 Revisi (beserta catatan) \xB7 Lewati mockup. Revisi \u2192 buat ulang gambar yang diminta dengan spec gambar LENGKAP ditambah koreksinya (bukan koreksinya saja), timpa berkas yang sama, lalu minta persetujuan lagi. Lewati \u2192 hapus berkas mockup yang belum di-commit. Disetujui \u2192 commit \`docs/mockups/<spec-id>/\` beserta dokumen spec. Bila gambar tak bisa dihasilkan (Codex tak terpasang/belum login, image_gen gagal dua kali), JANGAN membuat pengganti (SVG/CSS/HTML yang dirasterisasi, emoji, atau placeholder bernama sama) \u2014 tanyakan dengan jalur yang sama: tunggu operator menjalankan \`codex login\` lalu lanjut, atau lewati mockup. ${close}`;
+    MOCKUP_SINGLE = "Fase Mockup: " + mockupGuide(
+      "lewat jalur tanya di klausa otonomi prompt ini",
+      "Tulis `Mockup done` sesudah disetujui & di-commit, atau `Mockup skipped` bila dilewati."
+    );
     ESCALATION_CONTRACT = [
       "REKOMENDASI ESKALASI (wajib, terbaca mesin). Di bagian akhir dokumen audit, tulis bagian",
       "`## Rekomendasi eskalasi` berisi penjelasan singkat untuk manusia, LALU tepat SATU blok ```json",
@@ -16695,6 +16754,9 @@ function doctorReport(p3) {
       text: p3.antigravity ? `Antigravity CLI ${p3.antigravity} \u2014 auth manual; ${p3.sandboxRequired ? "sandbox belum didukung" : "host/lab; jalankan agy untuk login; autentikasi belum diverifikasi"}` : p3.sandboxRequired ? "Antigravity CLI \u2014 host/lab saja; sandbox belum didukung; probe/login tidak dijalankan" : "Antigravity CLI \u2014 tak ada (opsional; install/login manual)",
       fatal: false
     },
+    // ADR-0233 · fase Mockup di claude/antigravity menghasilkan gambar lewat `codex exec` (skill
+    // codex-image). Tanpa codex fase itu tak bisa menggambar — sesi tetap jalan, operator ditanya.
+    ...!p3.codex && (p3.claude || p3.antigravity) ? [{ mark: "!", text: "fase Mockup di runtime non-codex butuh codex CLI yang sudah login (`codex login`)", fatal: false }] : [],
     // SPEC-471 · ADR-0095 · `gh` opsional: tanpa dia tarik issue jatuh ke HTTPS + GITHUB_TOKEN.
     {
       mark: p3.gh ? "\u2713" : "\xB7",
@@ -38708,6 +38770,8 @@ function copyPlan(repo) {
     { from: join15(repo, "docs/agent-integration.md"), to: "docs/agent-integration.md" },
     // SPEC-883 · skrip VPS (audit/harden/remediate/provision) dibaca runtime lewat scriptPath().
     { from: join15(repo, "server/scripts/vps"), to: "scripts/vps", dir: true },
+    // ADR-0233 · skill bundel (codex-image), dibaca runtime lewat bundledSkillsDir().
+    { from: join15(repo, "server/skills"), to: "skills", dir: true },
     { from: join15(repo, "LICENSE"), to: "LICENSE" }
   ];
 }
@@ -38749,7 +38813,11 @@ var init_pack = __esm({
       "scripts/vps/audit.sh",
       "scripts/vps/harden.sh",
       "scripts/vps/remediate.sh",
-      "scripts/vps/provision.sh"
+      "scripts/vps/provision.sh",
+      // ADR-0233 · skill bundel di-seed ke $HANOMAN_HOME/skills oleh bundledSkillsDir() — tanpa berkas ini
+      // fase Mockup di runtime non-codex kehilangan skill-nya di setiap instalasi npm.
+      "skills/codex-image/SKILL.md",
+      "skills/codex-image/scripts/codex-image.sh"
     ];
     BIN_SHIM = `#!/usr/bin/env node
 // SPEC-398 \xB7 shim tipis: seluruh logika ada di dist/cli.js (bundle esbuild).