hanoman 0.9.38 → 0.9.40

package/dist/server.js

@@ -4164,6 +4164,36 @@ var init_enums = __esm({
   }
 });
 
+// ../shared/src/runtime-accounts.ts
+function runtimeOfBuiltin(id2) {
+  if (!isBuiltinAccountId(id2)) return null;
+  const r = zAgent.safeParse(id2.slice(BUILTIN_ACCOUNT_PREFIX.length));
+  return r.success ? r.data : null;
+}
+var BUILTIN_ACCOUNT_PREFIX, BUILTIN_ACCOUNT_LABEL, builtinAccountId, isBuiltinAccountId, zAccountId, zAccountLabel, zRuntimeAccountCreate, zRuntimeAccountPatch, zRuntimeAccountDefault, zRuntimeAccountLogin, zRuntimeAccountDefaults;
+var init_runtime_accounts = __esm({
+  "../shared/src/runtime-accounts.ts"() {
+    "use strict";
+    init_zod();
+    init_enums();
+    BUILTIN_ACCOUNT_PREFIX = "default:";
+    BUILTIN_ACCOUNT_LABEL = "Default";
+    builtinAccountId = (runtime) => `${BUILTIN_ACCOUNT_PREFIX}${runtime}`;
+    isBuiltinAccountId = (id2) => id2.startsWith(BUILTIN_ACCOUNT_PREFIX);
+    zAccountId = external_exports.string().min(1).max(80);
+    zAccountLabel = external_exports.string().trim().min(1).max(40);
+    zRuntimeAccountCreate = external_exports.object({ runtime: zAgent, label: zAccountLabel }).strict();
+    zRuntimeAccountPatch = external_exports.object({ label: zAccountLabel }).strict();
+    zRuntimeAccountDefault = external_exports.object({ runtime: zAgent, accountId: zAccountId }).strict();
+    zRuntimeAccountLogin = external_exports.object({ deviceAuth: external_exports.boolean().optional() }).strict();
+    zRuntimeAccountDefaults = external_exports.object({
+      claude: zAccountId.optional(),
+      codex: zAccountId.optional(),
+      antigravity: zAccountId.optional()
+    });
+  }
+});
+
 // ../shared/src/spec-source.ts
 function payloadShapeFor(source) {
   return source === "qa" ? "qa" : GOAL_SHAPED_SOURCES.has(source) ? "goal" : "brief";
@@ -5482,6 +5512,7 @@ var init_entities = __esm({
     init_method_catalog();
     init_relay();
     init_logs();
+    init_runtime_accounts();
     init_runtime_defaults();
     zProject = external_exports.object({
       id: external_exports.string(),
@@ -5805,6 +5836,10 @@ var init_entities = __esm({
       // lajur log ke hub (SPEC-1217)
       logRetention: zLogRetention.default(LOG_RETENTION_DEFAULTS),
       // retensi log di hub (SPEC-1217)
+      // ADR-0234 · default akun runtime per mesin. LOCAL (setting tak ada di SYNCED) dan TAK ditulis
+      // `PUT /settings` (routes/settings.ts mempertahankan nilai tersimpan) — pengelolanya
+      // `PUT /api/runtime-accounts/default`. Absen = akun bawaan `default:<runtime>`.
+      accounts: zRuntimeAccountDefaults.default({}),
       // SPEC-881 · ADR-0136 · sidik jari isi bawaan yang TERAKHIR ditulis seed di mesin ini, per nama
       // agen. Dipakai seed untuk membedakan "belum pernah disunting operator" dari "sudah". WAJIB
       // dideklarasikan di sini: zod membuang kunci tak dikenal dan `PUT /settings` menulis balik hasil
@@ -5868,7 +5903,7 @@ function resolvePhasePlan(input) {
   if (!input.nativeAgents || cfg?.enabled === false) return null;
   const cells = cfg?.[input.runtime] ?? {};
   const coerce3 = input.runtime === "codex" ? coerceCodexEffort : coerceClaudeEffort;
-  const resolve25 = (key, fallback3) => {
+  const resolve26 = (key, fallback3) => {
     const cell4 = cells[key];
     const override = input.phaseOverrides?.[key];
     if (input.runtime === "antigravity") {
@@ -5892,7 +5927,7 @@ function resolvePhasePlan(input) {
     phases: FLOW_PHASES[input.flow].map((phase) => ({
       phase,
       agentName: phaseAgentName(phase),
-      ...resolve25(phase, phase === REVIEWER_CELL ? REVIEWER_DEFAULTS[input.runtime] : input.orchestrator)
+      ...resolve26(phase, phase === REVIEWER_CELL ? REVIEWER_DEFAULTS[input.runtime] : input.orchestrator)
     })),
     // Amandemen ADR-0170 P2 · cara Execute mengerjakan plan; hanya dipakai sesi claude.
     executeMode: cfg?.executeMode ?? "inline"
@@ -7721,6 +7756,7 @@ var init_dto = __esm({
     init_entities();
     init_lead();
     init_auto_merge();
+    init_runtime_accounts();
     init_handled_by();
     init_prd_status();
     init_enums();
@@ -7762,7 +7798,9 @@ var init_dto = __esm({
       endedReason: external_exports.string().nullable(),
       reconciledAt: external_exports.string().nullable(),
       exitCode: external_exports.number().nullable(),
-      transcriptBytes: external_exports.number().nullable()
+      transcriptBytes: external_exports.number().nullable(),
+      // ADR-0234 · akun runtime saat sesi lahir. null/absen = akun bawaan (atau baris lama).
+      accountId: external_exports.string().nullable().optional()
     });
     zCreateProject = external_exports.object({
       name: external_exports.string().min(1),
@@ -8129,6 +8167,8 @@ var init_dto = __esm({
         agent: zAgent.optional(),
         model: external_exports.string().optional(),
         effort: external_exports.string().optional(),
+        account: zAccountId.optional(),
+        // ADR-0234 · akun runtime pilihan form "Sesi baru"
         force: external_exports.boolean().optional(),
         // ADR-0232 · opsional: `worktree:true` → sesi lahir di `.worktrees/<id>` pada branch baru
         // `term/<id>` dari `branchFrom` (kosong → HEAD repo), alih-alih langsung di repoDir. Tanpa
@@ -8153,6 +8193,8 @@ var init_dto = __esm({
         goal: external_exports.boolean().optional(),
         goalCondition: external_exports.string().max(4e3).optional(),
         agent: zAgent.optional(),
+        account: zAccountId.optional(),
+        // ADR-0234 · akun runtime pilihan picker Start
         verifyScope: zVerifyScope.optional(),
         // SPEC-734 · ADR-0113 — metode workflow per SESI: undefined → Spec.payload.method →
         // Setting.method → "superpowers". LENIENT (`z.string()`, bukan `z.enum`): id yang tak dikenal
@@ -8505,6 +8547,13 @@ var init_api = __esm({
       // ADR-0204 · tandai satu notifikasi terbaca (POST, idempoten).
       notificationRead: (id2) => `${API}/notifications/${encodeURIComponent(id2)}/read`,
       limits: `${API}/limits`,
+      // ADR-0234 · akun runtime & limit per akun.
+      limitsAccounts: `${API}/limits/accounts`,
+      runtimeAccounts: `${API}/runtime-accounts`,
+      runtimeAccount: (id2) => `${API}/runtime-accounts/${encodeURIComponent(id2)}`,
+      runtimeAccountsDefault: `${API}/runtime-accounts/default`,
+      runtimeAccountLogin: (id2) => `${API}/runtime-accounts/${encodeURIComponent(id2)}/login`,
+      runtimeAccountCheck: (id2) => `${API}/runtime-accounts/${encodeURIComponent(id2)}/check`,
       // SPEC-339 · versi codex CLI (peringatan lunak model GPT-5.6).
       codexVersion: `${API}/codex/version`,
       antigravityVersion: `${API}/antigravity/version`,
@@ -12305,6 +12354,38 @@ var init_settings = __esm({
         sampleMethod: "POST",
         build: (a) => ({ method: "POST", path: `/scheduler/queue/${enc(String(a.item))}/requeue` }),
         shape: (raw) => raw
+      },
+      // ADR-0234 · akun runtime. Hanya baca & set default — tambah/hapus/login akun tetap di dashboard
+      // (COOKIE_ONLY: pengelolaan kredensial dan login OAuth butuh manusia di browser).
+      {
+        name: "hanoman_runtime_accounts_list",
+        title: "Daftar akun runtime",
+        description: "Akun langganan Claude Code/Codex/Antigravity yang terdaftar di mesin ini \u2014 termasuk akun bawaan `default:<runtime>` \u2014 dengan status login (belum-login|aktif|perlu-login-ulang), email & paket, drift konfigurasi, dan akun mana yang jadi default tiap runtime. `id`-nya dipakai di `account` pada hanoman_session_create. Menambah/menghapus/login akun hanya lewat dashboard.",
+        inputSchema: obj({ properties: {} }),
+        mode: "read",
+        capability: "settings:read",
+        samplePath: "/runtime-accounts",
+        sampleMethod: "GET",
+        build: () => ({ method: "GET", path: "/runtime-accounts" }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_runtime_account_default_set",
+        title: "Set akun default runtime",
+        description: "Menjadikan satu akun sebagai default runtime-nya untuk SETIAP sesi baru di mesin ini, termasuk sesi otomatis (scheduler, lead, reverse/prd). `accountId` dari hanoman_runtime_accounts_list; `default:<runtime>` mengembalikan ke akun bawaan. Sesi yang sedang berjalan tak berubah. Ditolak 409 bila runtime akun tak cocok atau sandbox sesi aktif (hanya akun bawaan).",
+        inputSchema: obj({
+          properties: {
+            runtime: enumStr(["claude", "codex", "antigravity"], "Runtime yang default-nya diubah."),
+            accountId: str("Id akun dari hanoman_runtime_accounts_list.")
+          },
+          required: ["runtime", "accountId"]
+        }),
+        mode: "write",
+        capability: "settings:write",
+        samplePath: "/runtime-accounts/default",
+        sampleMethod: "PUT",
+        build: (a) => ({ method: "PUT", path: "/runtime-accounts/default", body: { runtime: String(a.runtime), accountId: String(a.accountId) } }),
+        shape: (raw) => raw
       }
     ];
   }
@@ -13263,6 +13344,7 @@ var init_sessions = __esm({
             ),
             shell: bool("true = terminal shell biasa di repo project, tanpa agen. Hanya dengan `project`."),
             agent: enumStr(["claude", "codex", "antigravity"], "Mesin sesi. Kosong = default global."),
+            account: str("Id akun runtime dari hanoman_runtime_accounts_list (ADR-0234). Kosong = akun default runtime di mesin ini."),
             model: str("Model. Kosong = default global."),
             effort: str("Effort. Kosong = default global."),
             goal: bool("Mode goal per-sesi. Kosong = ikut setelan global."),
@@ -13299,7 +13381,7 @@ var init_sessions = __esm({
         build: (a) => {
           if (s(a.spec)) {
             const body2 = { spec: String(a.spec), flow: String(a.flow) };
-            for (const k of ["model", "effort", "goalCondition", "agent", "verifyScope", "method"])
+            for (const k of ["model", "effort", "goalCondition", "agent", "account", "verifyScope", "method"])
               if (s(a[k]) !== void 0) body2[k] = s(a[k]);
             if (a.phaseOverrides && typeof a.phaseOverrides === "object" && !Array.isArray(a.phaseOverrides)) body2.phaseOverrides = a.phaseOverrides;
             for (const k of ["goal", "force"]) if (typeof a[k] === "boolean") body2[k] = a[k];
@@ -13311,7 +13393,7 @@ var init_sessions = __esm({
           if (flow2 === "breakdown") return { method: "POST", path: "/terminal/sessions", body: { project, flow: flow2, prdPath: String(a.prdPath) } };
           if (flow2 === "reverse" || flow2 === "scaffold") return { method: "POST", path: "/terminal/sessions", body: { project, flow: flow2 } };
           const body = { project };
-          for (const k of ["agent", "model", "effort", "branchFrom"]) if (s(a[k]) !== void 0) body[k] = s(a[k]);
+          for (const k of ["agent", "account", "model", "effort", "branchFrom"]) if (s(a[k]) !== void 0) body[k] = s(a[k]);
           if (typeof a.worktree === "boolean") body.worktree = a.worktree;
           return { method: "POST", path: "/terminal/sessions", body };
         },
@@ -14481,6 +14563,19 @@ var init_system = __esm({
         build: () => ({ method: "GET", path: "/limits/antigravity" }),
         shape: (raw) => raw
       },
+      // ADR-0234 · limit per akun runtime. GLOBAL_READ → tanpa email (identitas di hanoman_runtime_accounts_list).
+      {
+        name: "hanoman_limits_accounts",
+        title: "Limit langganan per akun runtime",
+        description: "Limit (window 5 jam, mingguan, dst) untuk SETIAP akun runtime terdaftar di mesin ini \u2014 Claude, Codex, Antigravity \u2014 termasuk akun bawaan `default:<runtime>`. Tanpa email. `limits.status` stale = data terakhir (akun belum dipakai sejak tokennya kedaluwarsa); window yang `resetsAt`-nya sudah lewat berarti sudah reset. `isDefault` menandai akun yang dipakai sesi baru.",
+        inputSchema: obj({ properties: {} }),
+        mode: "read",
+        capability: null,
+        samplePath: "/limits/accounts",
+        sampleMethod: "GET",
+        build: () => ({ method: "GET", path: "/limits/accounts" }),
+        shape: (raw) => raw
+      },
       {
         name: "hanoman_overview_get",
         title: "Ringkasan kinerja hari ini (Overview)",
@@ -17124,6 +17219,7 @@ var init_src = __esm({
   "../shared/src/index.ts"() {
     "use strict";
     init_enums();
+    init_runtime_accounts();
     init_spec_source();
     init_method_catalog();
     init_method_status();
@@ -20034,12 +20130,12 @@ function manifestRoots(home3) {
   return out4;
 }
 function cacheRoots(home3) {
-  const cache6 = join6(home3, "plugins", "cache");
+  const cache7 = join6(home3, "plugins", "cache");
   const out4 = [];
-  for (const marketplace of dirsIn(cache6))
-    for (const pkg of dirsIn(join6(cache6, marketplace)))
-      for (const version of dirsIn(join6(cache6, marketplace, pkg)))
-        out4.push({ pkg, marketplace, dir: join6(cache6, marketplace, pkg, version) });
+  for (const marketplace of dirsIn(cache7))
+    for (const pkg of dirsIn(join6(cache7, marketplace)))
+      for (const version of dirsIn(join6(cache7, marketplace, pkg)))
+        out4.push({ pkg, marketplace, dir: join6(cache7, marketplace, pkg, version) });
   return out4;
 }
 function disabledPlugins(agent, home3) {
@@ -20212,10 +20308,10 @@ function ensureSpawnHelpersExecutable(paths3, ops) {
   }
   return fixed;
 }
-function repairSpawnHelper(resolve25, notify) {
+function repairSpawnHelper(resolve26, notify) {
   let ptyDir;
   try {
-    ptyDir = dirname5(resolve25("node-pty/package.json"));
+    ptyDir = dirname5(resolve26("node-pty/package.json"));
   } catch {
     return [];
   }
@@ -20233,8 +20329,8 @@ function repairSpawnHelper(resolve25, notify) {
   if (fixed.length) notify?.("hanoman \xB7 memperbaiki izin `spawn-helper` node-pty (hilang setelah pemasangan/pembaruan paket)\n");
   return fixed;
 }
-function ensureSpawnHelper(resolve25, notify) {
-  return repairSpawnHelper(resolve25, notify);
+function ensureSpawnHelper(resolve26, notify) {
+  return repairSpawnHelper(resolve26, notify);
 }
 function spawnWithHelperRecovery(doSpawn, repair) {
   repair();
@@ -24999,9 +25095,9 @@ var require_dispatcher_base = __commonJS({
       }
       close(callback) {
         if (callback === void 0) {
-          return new Promise((resolve25, reject2) => {
+          return new Promise((resolve26, reject2) => {
             this.close((err, data) => {
-              return err ? reject2(err) : resolve25(data);
+              return err ? reject2(err) : resolve26(data);
             });
           });
         }
@@ -25039,9 +25135,9 @@ var require_dispatcher_base = __commonJS({
           err = null;
         }
         if (callback === void 0) {
-          return new Promise((resolve25, reject2) => {
+          return new Promise((resolve26, reject2) => {
             this.destroy(err, (err2, data) => {
-              return err2 ? reject2(err2) : resolve25(data);
+              return err2 ? reject2(err2) : resolve26(data);
             });
           });
         }
@@ -28538,8 +28634,8 @@ var require_promise = __commonJS({
     function createDeferredPromise() {
       let res;
       let rej;
-      const promise = new Promise((resolve25, reject2) => {
-        res = resolve25;
+      const promise = new Promise((resolve26, reject2) => {
+        res = resolve26;
         rej = reject2;
       });
       return { promise, resolve: res, reject: rej };
@@ -29942,12 +30038,12 @@ upgrade: ${upgrade}\r
           cb();
         }
       }
-      const waitForDrain = () => new Promise((resolve25, reject2) => {
+      const waitForDrain = () => new Promise((resolve26, reject2) => {
         assert(callback === null);
         if (socket2[kError]) {
           reject2(socket2[kError]);
         } else {
-          callback = resolve25;
+          callback = resolve26;
         }
       });
       socket2.on("close", onDrain).on("drain", onDrain);
@@ -30823,12 +30919,12 @@ var require_client_h2 = __commonJS({
           cb();
         }
       }
-      const waitForDrain = () => new Promise((resolve25, reject2) => {
+      const waitForDrain = () => new Promise((resolve26, reject2) => {
         assert(callback === null);
         if (socket2[kError]) {
           reject2(socket2[kError]);
         } else {
-          callback = resolve25;
+          callback = resolve26;
         }
       });
       h2stream.on("close", onDrain).on("drain", onDrain);
@@ -31144,16 +31240,16 @@ var require_client = __commonJS({
         return this[kNeedDrain] < 2;
       }
       [kClose]() {
-        return new Promise((resolve25) => {
+        return new Promise((resolve26) => {
           if (this[kSize]) {
-            this[kClosedResolve] = resolve25;
+            this[kClosedResolve] = resolve26;
           } else {
-            resolve25(null);
+            resolve26(null);
           }
         });
       }
       [kDestroy](err) {
-        return new Promise((resolve25) => {
+        return new Promise((resolve26) => {
           const requests = this[kQueue].splice(this[kPendingIdx]);
           for (let i = 0; i < requests.length; i++) {
             const request = requests[i];
@@ -31166,7 +31262,7 @@ var require_client = __commonJS({
               this[kClosedResolve]();
               this[kClosedResolve] = null;
             }
-            resolve25(null);
+            resolve26(null);
           };
           if (this[kHTTPContext]) {
             this[kHTTPContext].destroy(err, callback);
@@ -31573,8 +31669,8 @@ var require_pool_base = __commonJS({
           }
           return Promise.all(closeAll);
         } else {
-          return new Promise((resolve25) => {
-            this[kClosedResolve] = resolve25;
+          return new Promise((resolve26) => {
+            this[kClosedResolve] = resolve26;
           });
         }
       }
@@ -32693,7 +32789,7 @@ var require_socks5_proxy_agent = __commonJS({
         const proxyHost = this[kProxyUrl].hostname;
         const proxyPort = parseInt(this[kProxyUrl].port) || 1080;
         debug2("creating SOCKS5 connection to", proxyHost, proxyPort);
-        const socket2 = await new Promise((resolve25, reject2) => {
+        const socket2 = await new Promise((resolve26, reject2) => {
           this[kConnector]({
             hostname: proxyHost,
             host: proxyHost,
@@ -32703,7 +32799,7 @@ var require_socks5_proxy_agent = __commonJS({
             if (err) {
               reject2(err);
             } else {
-              resolve25(socket3);
+              resolve26(socket3);
             }
           });
         });
@@ -32713,14 +32809,14 @@ var require_socks5_proxy_agent = __commonJS({
           socket2.destroy();
         });
         await socks5Client.handshake();
-        await new Promise((resolve25, reject2) => {
+        await new Promise((resolve26, reject2) => {
           const timeout2 = setTimeout(() => {
             reject2(new Error("SOCKS5 authentication timeout"));
           }, 5e3);
           const onAuthenticated = () => {
             clearTimeout(timeout2);
             socks5Client.removeListener("error", onError);
-            resolve25();
+            resolve26();
           };
           const onError = (err) => {
             clearTimeout(timeout2);
@@ -32729,14 +32825,14 @@ var require_socks5_proxy_agent = __commonJS({
           };
           if (socks5Client.state === STATES.AUTHENTICATED) {
             clearTimeout(timeout2);
-            resolve25();
+            resolve26();
           } else {
             socks5Client.once("authenticated", onAuthenticated);
             socks5Client.once("error", onError);
           }
         });
         await socks5Client.connect(targetHost, targetPort);
-        await new Promise((resolve25, reject2) => {
+        await new Promise((resolve26, reject2) => {
           const timeout2 = setTimeout(() => {
             reject2(new Error("SOCKS5 connection timeout"));
           }, 5e3);
@@ -32744,7 +32840,7 @@ var require_socks5_proxy_agent = __commonJS({
             debug2("SOCKS5 tunnel established to", targetHost, targetPort, "via", info);
             clearTimeout(timeout2);
             socks5Client.removeListener("error", onError);
-            resolve25();
+            resolve26();
           };
           const onError = (err) => {
             clearTimeout(timeout2);
@@ -32787,8 +32883,8 @@ var require_socks5_proxy_agent = __commonJS({
                       socket: socket2,
                       servername: this[kRequestTls]?.servername || targetHost
                     });
-                    await new Promise((resolve25, reject2) => {
-                      finalSocket.once("secureConnect", resolve25);
+                    await new Promise((resolve26, reject2) => {
+                      finalSocket.once("secureConnect", resolve26);
                       finalSocket.once("error", reject2);
                     });
                   }
@@ -33870,7 +33966,7 @@ var require_readable = __commonJS({
         if (this._readableState.closeEmitted) {
           return Promise.resolve(null);
         }
-        return new Promise((resolve25, reject2) => {
+        return new Promise((resolve26, reject2) => {
           if (this[kContentLength] && this[kContentLength] > limit || this[kBytesRead] > limit) {
             this.destroy(new AbortError2());
           }
@@ -33884,11 +33980,11 @@ var require_readable = __commonJS({
               if (signal.aborted) {
                 reject2(signal.reason ?? new AbortError2());
               } else {
-                resolve25(null);
+                resolve26(null);
               }
             });
           } else {
-            this.on("close", resolve25);
+            this.on("close", resolve26);
           }
           this.on("error", noop).on("data", () => {
             if (this[kBytesRead] > limit) {
@@ -33916,7 +34012,7 @@ var require_readable = __commonJS({
     }
     function consume2(stream, type) {
       assert(!stream[kConsume]);
-      return new Promise((resolve25, reject2) => {
+      return new Promise((resolve26, reject2) => {
         if (isUnusable(stream)) {
           const rState = stream._readableState;
           if (rState.destroyed && rState.closeEmitted === false) {
@@ -33931,7 +34027,7 @@ var require_readable = __commonJS({
             stream[kConsume] = {
               type,
               stream,
-              resolve: resolve25,
+              resolve: resolve26,
               reject: reject2,
               length: 0,
               body: []
@@ -34005,18 +34101,18 @@ var require_readable = __commonJS({
       return buffer;
     }
     function consumeEnd(consume3, encoding) {
-      const { type, body, resolve: resolve25, stream, length } = consume3;
+      const { type, body, resolve: resolve26, stream, length } = consume3;
       try {
         if (type === "text") {
-          resolve25(chunksDecode(body, length, encoding));
+          resolve26(chunksDecode(body, length, encoding));
         } else if (type === "json") {
-          resolve25(JSON.parse(chunksDecode(body, length, encoding)));
+          resolve26(JSON.parse(chunksDecode(body, length, encoding)));
         } else if (type === "arrayBuffer") {
-          resolve25(chunksConcat(body, length).buffer);
+          resolve26(chunksConcat(body, length).buffer);
         } else if (type === "blob") {
-          resolve25(new Blob(body, { type: stream[kContentType] }));
+          resolve26(new Blob(body, { type: stream[kContentType] }));
         } else if (type === "bytes") {
-          resolve25(chunksConcat(body, length));
+          resolve26(chunksConcat(body, length));
         }
         consumeFinish(consume3);
       } catch (err) {
@@ -34206,9 +34302,9 @@ var require_api_request = __commonJS({
     };
     function request(opts2, callback) {
       if (callback === void 0) {
-        return new Promise((resolve25, reject2) => {
+        return new Promise((resolve26, reject2) => {
           request.call(this, opts2, (err, data) => {
-            return err ? reject2(err) : resolve25(data);
+            return err ? reject2(err) : resolve26(data);
           });
         });
       }
@@ -34420,9 +34516,9 @@ var require_api_stream = __commonJS({
     };
     function stream(opts2, factory, callback) {
       if (callback === void 0) {
-        return new Promise((resolve25, reject2) => {
+        return new Promise((resolve26, reject2) => {
           stream.call(this, opts2, factory, (err, data) => {
-            return err ? reject2(err) : resolve25(data);
+            return err ? reject2(err) : resolve26(data);
           });
         });
       }
@@ -34710,9 +34806,9 @@ var require_api_upgrade = __commonJS({
     };
     function upgrade(opts2, callback) {
       if (callback === void 0) {
-        return new Promise((resolve25, reject2) => {
+        return new Promise((resolve26, reject2) => {
           upgrade.call(this, opts2, (err, data) => {
-            return err ? reject2(err) : resolve25(data);
+            return err ? reject2(err) : resolve26(data);
           });
         });
       }
@@ -34805,9 +34901,9 @@ var require_api_connect = __commonJS({
     };
     function connect2(opts2, callback) {
       if (callback === void 0) {
-        return new Promise((resolve25, reject2) => {
+        return new Promise((resolve26, reject2) => {
           connect2.call(this, opts2, (err, data) => {
-            return err ? reject2(err) : resolve25(data);
+            return err ? reject2(err) : resolve26(data);
           });
         });
       }
@@ -36081,7 +36177,7 @@ var require_snapshot_recorder = __commonJS({
   "../node_modules/.pnpm/undici@7.29.1/node_modules/undici/lib/mock/snapshot-recorder.js"(exports, module) {
     "use strict";
     var { writeFile: writeFile9, readFile: readFile12, mkdir: mkdir13 } = __require("node:fs/promises");
-    var { dirname: dirname20, resolve: resolve25 } = __require("node:path");
+    var { dirname: dirname20, resolve: resolve26 } = __require("node:path");
     var { setTimeout: setTimeout2, clearTimeout: clearTimeout2 } = __require("node:timers");
     var { InvalidArgumentError, UndiciError } = require_errors();
     var { hashId, isUrlExcludedFactory, normalizeHeaders, createHeaderFilters } = require_snapshot_utils();
@@ -36261,14 +36357,14 @@ var require_snapshot_recorder = __commonJS({
         }
         const request = formatRequestKey(requestOpts, this.#headerFilters, this.matchOptions);
         const hash4 = createRequestHash(request);
-        const snapshot3 = this.#snapshots.get(hash4);
-        if (!snapshot3) return void 0;
-        const currentCallCount = snapshot3.callCount || 0;
-        const responseIndex = Math.min(currentCallCount, snapshot3.responses.length - 1);
-        snapshot3.callCount = currentCallCount + 1;
+        const snapshot4 = this.#snapshots.get(hash4);
+        if (!snapshot4) return void 0;
+        const currentCallCount = snapshot4.callCount || 0;
+        const responseIndex = Math.min(currentCallCount, snapshot4.responses.length - 1);
+        snapshot4.callCount = currentCallCount + 1;
         return {
-          ...snapshot3,
-          response: snapshot3.responses[responseIndex]
+          ...snapshot4,
+          response: snapshot4.responses[responseIndex]
         };
       }
       /**
@@ -36282,12 +36378,12 @@ var require_snapshot_recorder = __commonJS({
           throw new InvalidArgumentError("Snapshot path is required");
         }
         try {
-          const data = await readFile12(resolve25(path), "utf8");
+          const data = await readFile12(resolve26(path), "utf8");
           const parsed = JSON.parse(data);
           if (Array.isArray(parsed)) {
             this.#snapshots.clear();
-            for (const { hash: hash4, snapshot: snapshot3 } of parsed) {
-              this.#snapshots.set(hash4, snapshot3);
+            for (const { hash: hash4, snapshot: snapshot4 } of parsed) {
+              this.#snapshots.set(hash4, snapshot4);
             }
           } else {
             this.#snapshots = new Map(Object.entries(parsed));
@@ -36311,11 +36407,11 @@ var require_snapshot_recorder = __commonJS({
         if (!path) {
           throw new InvalidArgumentError("Snapshot path is required");
         }
-        const resolvedPath = resolve25(path);
+        const resolvedPath = resolve26(path);
         await mkdir13(dirname20(resolvedPath), { recursive: true });
-        const data = Array.from(this.#snapshots.entries()).map(([hash4, snapshot3]) => ({
+        const data = Array.from(this.#snapshots.entries()).map(([hash4, snapshot4]) => ({
           hash: hash4,
-          snapshot: snapshot3
+          snapshot: snapshot4
         }));
         await writeFile9(resolvedPath, JSON.stringify(data, null, 2), { flush: true });
       }
@@ -36345,8 +36441,8 @@ var require_snapshot_recorder = __commonJS({
        * @returns {void}
        */
       resetCallCounts() {
-        for (const snapshot3 of this.#snapshots.values()) {
-          snapshot3.callCount = 0;
+        for (const snapshot4 of this.#snapshots.values()) {
+          snapshot4.callCount = 0;
         }
       }
       /**
@@ -36367,15 +36463,15 @@ var require_snapshot_recorder = __commonJS({
       getSnapshotInfo(requestOpts) {
         const request = formatRequestKey(requestOpts, this.#headerFilters, this.matchOptions);
         const hash4 = createRequestHash(request);
-        const snapshot3 = this.#snapshots.get(hash4);
-        if (!snapshot3) return null;
+        const snapshot4 = this.#snapshots.get(hash4);
+        if (!snapshot4) return null;
         return {
           hash: hash4,
-          request: snapshot3.request,
-          responseCount: snapshot3.responses ? snapshot3.responses.length : snapshot3.response ? 1 : 0,
+          request: snapshot4.request,
+          responseCount: snapshot4.responses ? snapshot4.responses.length : snapshot4.response ? 1 : 0,
           // .response for legacy snapshots
-          callCount: snapshot3.callCount || 0,
-          timestamp: snapshot3.timestamp
+          callCount: snapshot4.callCount || 0,
+          timestamp: snapshot4.timestamp
         };
       }
       /**
@@ -36386,8 +36482,8 @@ var require_snapshot_recorder = __commonJS({
       replaceSnapshots(snapshotData) {
         this.#snapshots.clear();
         if (Array.isArray(snapshotData)) {
-          for (const { hash: hash4, snapshot: snapshot3 } of snapshotData) {
-            this.#snapshots.set(hash4, snapshot3);
+          for (const { hash: hash4, snapshot: snapshot4 } of snapshotData) {
+            this.#snapshots.set(hash4, snapshot4);
           }
         } else if (snapshotData && typeof snapshotData === "object") {
           this.#snapshots = new Map(Object.entries(snapshotData));
@@ -36524,9 +36620,9 @@ var require_snapshot_agent = __commonJS({
           if (!this[kSnapshotLoaded]) {
             return this.#asyncDispatch(opts2, handler);
           }
-          const snapshot3 = this[kSnapshotRecorder].findSnapshot(opts2);
-          if (snapshot3) {
-            return this.#replaySnapshot(snapshot3, handler);
+          const snapshot4 = this[kSnapshotRecorder].findSnapshot(opts2);
+          if (snapshot4) {
+            return this.#replaySnapshot(snapshot4, handler);
           } else if (mode === "update") {
             return this.#recordAndReplay(opts2, handler);
           } else {
@@ -36596,9 +36692,9 @@ var require_snapshot_agent = __commonJS({
        * @param {Object} handler - The handler to call with the response data.
        * @returns {void}
        */
-      #replaySnapshot(snapshot3, handler) {
+      #replaySnapshot(snapshot4, handler) {
         try {
-          const { response } = snapshot3;
+          const { response } = snapshot4;
           const controller = {
             pause() {
             },
@@ -36656,8 +36752,8 @@ var require_snapshot_agent = __commonJS({
        * @returns {void}
        */
       #setupMockInterceptors() {
-        for (const snapshot3 of this[kSnapshotRecorder].getSnapshots()) {
-          const { request, responses, response } = snapshot3;
+        for (const snapshot4 of this[kSnapshotRecorder].getSnapshots()) {
+          const { request, responses, response } = snapshot4;
           const url2 = new URL(request.url);
           const mockPool = this.get(url2.origin);
           const responseData = responses ? responses[0] : response;
@@ -43737,7 +43833,7 @@ var require_fetch = __commonJS({
         const agent = fetchParams.controller.dispatcher;
         const path = url2.pathname + url2.search;
         const hasTrailingQuestionMark = url2.search.length === 0 && url2.href[url2.href.length - url2.hash.length - 1] === "?";
-        return new Promise((resolve25, reject2) => agent.dispatch(
+        return new Promise((resolve26, reject2) => agent.dispatch(
           {
             path: hasTrailingQuestionMark ? `${path}?` : path,
             origin: url2.origin,
@@ -43825,7 +43921,7 @@ var require_fetch = __commonJS({
                 }
               }
               const onError = this.onError.bind(this);
-              resolve25({
+              resolve26({
                 status: status2,
                 statusText,
                 headersList,
@@ -43878,7 +43974,7 @@ var require_fetch = __commonJS({
                   headersList.append(headerName, String(value), true);
                 }
               }
-              resolve25({
+              resolve26({
                 status: status2,
                 statusText: STATUS_CODES[status2],
                 headersList,
@@ -43902,7 +43998,7 @@ var require_fetch = __commonJS({
                   headersList.append(nameStr, value.toString("latin1"), true);
                 }
               }
-              resolve25({
+              resolve26({
                 status: status2,
                 statusText: STATUS_CODES[status2],
                 headersList,
@@ -44289,8 +44385,8 @@ var require_cache3 = __commonJS({
        * @returns {requestResponseList}
        */
       #batchCacheOperations(operations) {
-        const cache6 = this.#relevantRequestResponseList;
-        const backupCache = [...cache6];
+        const cache7 = this.#relevantRequestResponseList;
+        const backupCache = [...cache7];
         const addedItems = [];
         const resultList = [];
         try {
@@ -44317,9 +44413,9 @@ var require_cache3 = __commonJS({
                 return [];
               }
               for (const requestResponse of requestResponses) {
-                const idx = cache6.indexOf(requestResponse);
+                const idx = cache7.indexOf(requestResponse);
                 assert(idx !== -1);
-                cache6.splice(idx, 1);
+                cache7.splice(idx, 1);
               }
             } else if (operation.type === "put") {
               if (operation.response == null) {
@@ -44349,11 +44445,11 @@ var require_cache3 = __commonJS({
               }
               requestResponses = this.#queryCache(operation.request);
               for (const requestResponse of requestResponses) {
-                const idx = cache6.indexOf(requestResponse);
+                const idx = cache7.indexOf(requestResponse);
                 assert(idx !== -1);
-                cache6.splice(idx, 1);
+                cache7.splice(idx, 1);
               }
-              cache6.push([operation.request, operation.response]);
+              cache7.push([operation.request, operation.response]);
               addedItems.push([operation.request, operation.response]);
             }
             resultList.push([operation.request, operation.response]);
@@ -44530,13 +44626,13 @@ var require_cachestorage = __commonJS({
         if (options2.cacheName != null) {
           if (this.#caches.has(options2.cacheName)) {
             const cacheList = this.#caches.get(options2.cacheName);
-            const cache6 = new Cache(kConstruct, cacheList);
-            return await cache6.match(request, options2);
+            const cache7 = new Cache(kConstruct, cacheList);
+            return await cache7.match(request, options2);
           }
         } else {
           for (const cacheList of this.#caches.values()) {
-            const cache6 = new Cache(kConstruct, cacheList);
-            const response = await cache6.match(request, options2);
+            const cache7 = new Cache(kConstruct, cacheList);
+            const response = await cache7.match(request, options2);
             if (response !== void 0) {
               return response;
             }
@@ -44566,12 +44662,12 @@ var require_cachestorage = __commonJS({
         webidl.argumentLengthCheck(arguments, 1, prefix);
         cacheName = webidl.converters.DOMString(cacheName, prefix, "cacheName");
         if (this.#caches.has(cacheName)) {
-          const cache7 = this.#caches.get(cacheName);
-          return new Cache(kConstruct, cache7);
+          const cache8 = this.#caches.get(cacheName);
+          return new Cache(kConstruct, cache8);
         }
-        const cache6 = [];
-        this.#caches.set(cacheName, cache6);
-        return new Cache(kConstruct, cache6);
+        const cache7 = [];
+        this.#caches.set(cacheName, cache7);
+        return new Cache(kConstruct, cache7);
       }
       /**
        * @see https://w3c.github.io/ServiceWorker/#cache-storage-delete
@@ -48243,7 +48339,7 @@ import { request as httpsRequest } from "node:https";
 import { isIP } from "node:net";
 import { createGunzip } from "node:zlib";
 async function pinnedRequest(input) {
-  return new Promise((resolve25, reject2) => {
+  return new Promise((resolve26, reject2) => {
     const transport = input.url.protocol === "https:" ? httpsRequest : httpRequest;
     const req = transport({
       protocol: input.url.protocol,
@@ -48265,7 +48361,7 @@ async function pinnedRequest(input) {
       const capTerurai = input.maxDecodedBytes ?? input.maxResponseBytes;
       const chunks = [];
       let kabel = 0, terurai = 0;
-      const selesai = () => resolve25({
+      const selesai = () => resolve26({
         status: response.statusCode ?? 0,
         headers: response.headers,
         body: Buffer.concat(chunks)
@@ -48308,12 +48404,12 @@ async function pinnedRequest(input) {
   });
 }
 function withLookupTimeout(p3, ms) {
-  return new Promise((resolve25, reject2) => {
+  return new Promise((resolve26, reject2) => {
     const timer11 = setTimeout(() => reject2(Object.assign(new Error("outbound timeout"), { name: "AbortError" })), ms);
     timer11.unref?.();
     p3.then((v) => {
       clearTimeout(timer11);
-      resolve25(v);
+      resolve26(v);
     }, (e) => {
       clearTimeout(timer11);
       reject2(e);
@@ -48798,9 +48894,12 @@ var init_session_event_token = __esm({
 });
 
 // src/services/session-sandbox.ts
+function sessionSandboxOn(env = process.env) {
+  return resolveHardening(env) || env.HANOMAN_SESSION_SANDBOX !== void 0 && env.HANOMAN_SESSION_SANDBOX !== "off";
+}
 function assertAntigravityLaunch(agent, goal, env = process.env) {
   if (agent !== "antigravity") return;
-  if (resolveHardening(env) || env.HANOMAN_SESSION_SANDBOX !== void 0 && env.HANOMAN_SESSION_SANDBOX !== "off")
+  if (sessionSandboxOn(env))
     throw new RuntimeLaunchError(409, "antigravity-sandbox-unsupported", "Antigravity CLI hanya tersedia pada host/lab; sandbox belum didukung.");
   if (goal) throw new RuntimeLaunchError(409, "antigravity-goal-unsupported", "Antigravity CLI belum mendukung enforcement goal native.");
 }
@@ -49036,14 +49135,14 @@ function tmux(...args) {
   }
 }
 function tmuxAsync(...args) {
-  return new Promise((resolve25, reject2) => {
+  return new Promise((resolve26, reject2) => {
     execFile2(
       "tmux",
       ["-L", socket(), "-f", "/dev/null", ...args],
       { encoding: "utf8", env: agentEnvironment(null, process.env) },
       (e, stdout, stderr) => {
         if (!e) {
-          resolve25(stdout);
+          resolve26(stdout);
           return;
         }
         const err = e;
@@ -49108,7 +49207,8 @@ function parsePanes(out4) {
       doneAtBirth,
       paneWidth,
       paneHeight,
-      customName
+      customName,
+      accountRaw
     ] = line.split("	");
     if (!n2?.startsWith(PREFIX)) return [];
     const exited = dead === "1";
@@ -49150,6 +49250,8 @@ function parsePanes(out4) {
       // SPEC-1218 · AC-C2 · kosong (tmux lama tanpa kolom ini) → undefined, bukan NaN.
       width: paneWidth ? Number(paneWidth) : void 0,
       height: paneHeight ? Number(paneHeight) : void 0,
+      // ADR-0234 · sesi lama / akun bawaan tanpa opsi ini → undefined.
+      accountId: accountRaw || void 0,
       name: customName?.trim() || void 0
     }];
   });
@@ -49193,6 +49295,12 @@ function registerSessionHooks(h2) {
     hooks.delete(h2);
   };
 }
+function registerAccountResolver(r) {
+  accountResolver = r;
+  return () => {
+    if (accountResolver === r) accountResolver = () => null;
+  };
+}
 function registerCustomAgentSource(fn) {
   customAgentSource = fn;
 }
@@ -49426,6 +49534,7 @@ function createSession(projectId, cwd, opts2 = {}) {
     promptArg = `"$(cat ${sq(promptFile)})"`;
   }
   const agent = opts2.agent ?? "claude";
+  const account = opts2.command ? null : accountResolver(agent, opts2.accountId);
   let argv;
   if (opts2.command) {
     argv = opts2.command.map(sq).join(" ");
@@ -49492,10 +49601,13 @@ function createSession(projectId, cwd, opts2 = {}) {
   for (const [k, v] of Object.entries(agentEnvironment(runtime, opts2.env ?? {}))) {
     if (v !== void 0 && !(runtime === "antigravity" && ANTIGRAVITY_ENV_KEYS.some((key) => key === k))) envPairs.push(`${k}=${sq(v)}`);
   }
+  for (const [k, v] of Object.entries(account?.env ?? {})) envPairs.push(`${k}=${sq(v)}`);
   const unsets = [
     ...runtime === "antigravity" ? [] : ANTIGRAVITY_ENV_KEYS,
     ...runtime === "antigravity" ? ["CLAUDE_CODE_OAUTH_TOKEN", "ANTHROPIC_API_KEY"] : [],
-    ...!opts2.command ? [...suppressedInheritKeys(), ...hanomanDbInheritUnsets()] : []
+    ...!opts2.command ? [...suppressedInheritKeys(), ...hanomanDbInheritUnsets()] : [],
+    // ADR-0234 · kredensial env yang mengalahkan login akun (CLAUDE_CODE_OAUTH_TOKEN dst).
+    ...account?.unset ?? []
   ].flatMap((key) => ["-u", key]);
   let cmd = unsets.length ? ["env", ...unsets, ...envPairs, argv].join(" ") : envPairs.length ? `${envPairs.join(" ")} ${argv}` : argv;
   if (!opts2.command) {
@@ -49590,6 +49702,7 @@ function createSession(projectId, cwd, opts2 = {}) {
   if (opts2.flow) tmux("set-option", "-t", name(id2), "@hanoman_flow", opts2.flow);
   if (opts2.branch) tmux("set-option", "-t", name(id2), "@hanoman_branch", opts2.branch);
   tmux("set-option", "-t", name(id2), "@hanoman_agent", agent);
+  if (account) tmux("set-option", "-t", name(id2), "@hanoman_account", account.id);
   const kind = sessionKind({ ...opts2, id: id2 }, projectId, cwd);
   tmux(
     "set-option",
@@ -49636,9 +49749,21 @@ function createSession(projectId, cwd, opts2 = {}) {
     model: opts2.model,
     effort: opts2.effort,
     branch: opts2.branch,
-    cwd
+    cwd,
+    accountId: account?.id
   });
-  return { id: id2, projectId, specId: opts2.specId, flow: opts2.flow, cwd, branch: opts2.branch, exited: false, decision: false, agent };
+  return {
+    id: id2,
+    projectId,
+    specId: opts2.specId,
+    flow: opts2.flow,
+    cwd,
+    branch: opts2.branch,
+    exited: false,
+    decision: false,
+    agent,
+    ...account ? { accountId: account.id } : {}
+  };
 }
 function capturePane(id2, lines2 = 200) {
   try {
@@ -49825,10 +49950,10 @@ function startPoll() {
   poll = setInterval(() => {
     if (polling) return;
     polling = true;
-    const snapshot3 = [...attached.entries()];
+    const snapshot4 = [...attached.entries()];
     listPanesAsync().then(async (panes) => {
       const live = new Map(panes.map((p3) => [p3.id, p3]));
-      for (const [id2, a] of snapshot3) {
+      for (const [id2, a] of snapshot4) {
         if (attached.get(id2) !== a) continue;
         const p3 = live.get(id2);
         if (!p3) end(id2, 0);
@@ -49933,8 +50058,8 @@ function detachAll() {
   for (const id2 of [...attached.keys()]) drop(id2);
 }
 function spawnPty(...args) {
-  const resolve25 = createRequire(import.meta.url).resolve;
-  const repair = () => ensureSpawnHelper(resolve25, (m) => process.stdout.write(m));
+  const resolve26 = createRequire(import.meta.url).resolve;
+  const repair = () => ensureSpawnHelper(resolve26, (m) => process.stdout.write(m));
   try {
     return spawnWithHelperRecovery(() => spawn("tmux", ["-L", socket(), "-f", "/dev/null", ...args], {
       name: "xterm-256color",
@@ -49950,7 +50075,7 @@ function spawnPty(...args) {
     );
   }
 }
-var socket, PREFIX, MAX_SCROLLBACK, SCROLLBACK_SLACK, POLL_MS, markerFilled, markerFilledAsync, clearMarker, PANE_QUIET_MS, paneQuiet, MARKER_STALE_SLACK_S, markerOnset, markerCurrent, decisionOnset, attached, phaseInvocations, PHASE_DONE_SEEN_OPT, phaseDoneSeen, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentTempDir, agentsFilePath, phaseContextFilePath, AGENTS_ARG_SAFE_BYTES, agentContractFilePath, askpassDenyPath, ASKPASS_DENY, SUBAGENT_CONCURRENCY_CAP, NO_SERVER, TmuxError, sq, idFor, FMT, toSessionInfo, listSessions, listSessionsAsync, decisionsOf, getSession, getSessionAsync, hooks, emitBirth, emitDeath, customAgentSource, codexNativeAgentSupport, nativeAgentsAvailable, customAgentsFor, runGitDiff, sleep, paneText, paneIO, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, COALESCE_MS, COALESCE_MAX_BYTES, trimScrollback, phaseKey, sessionFinishedAsync, poll, polling, TERMINAL_QUERY, stripTerminalQueries, CAPTURE_ARGS, detach;
+var socket, PREFIX, MAX_SCROLLBACK, SCROLLBACK_SLACK, POLL_MS, markerFilled, markerFilledAsync, clearMarker, PANE_QUIET_MS, paneQuiet, MARKER_STALE_SLACK_S, markerOnset, markerCurrent, decisionOnset, attached, phaseInvocations, PHASE_DONE_SEEN_OPT, phaseDoneSeen, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentTempDir, agentsFilePath, phaseContextFilePath, AGENTS_ARG_SAFE_BYTES, agentContractFilePath, askpassDenyPath, ASKPASS_DENY, SUBAGENT_CONCURRENCY_CAP, NO_SERVER, TmuxError, sq, idFor, FMT, toSessionInfo, listSessions, listSessionsAsync, decisionsOf, getSession, getSessionAsync, hooks, accountResolver, emitBirth, emitDeath, customAgentSource, codexNativeAgentSupport, nativeAgentsAvailable, customAgentsFor, runGitDiff, sleep, paneText, paneIO, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, COALESCE_MS, COALESCE_MAX_BYTES, trimScrollback, phaseKey, sessionFinishedAsync, poll, polling, TERMINAL_QUERY, stripTerminalQueries, CAPTURE_ARGS, detach;
 var init_pty = __esm({
   "src/services/pty.ts"() {
     "use strict";
@@ -50087,7 +50212,9 @@ exit 1
       "#{pane_width}",
       "#{pane_height}",
       // Nama kustom sesi (rename dari UI/MCP) — di UJUNG juga. Opsi tmux, jadi selamat dari restart API.
-      "#{@hanoman_name}"
+      "#{@hanoman_name}",
+      // ADR-0234 · akun runtime sesi (`RuntimeAccount.id` / `default:<runtime>`) — di UJUNG juga.
+      "#{@hanoman_account}"
     ].join("	");
     toSessionInfo = ({
       id: id2,
@@ -50105,7 +50232,8 @@ exit 1
       model,
       effort: effort2,
       orchestrated,
-      name: name2
+      name: name2,
+      accountId
     }) => ({
       id: id2,
       projectId,
@@ -50123,7 +50251,8 @@ exit 1
       ...model ? { model } : {},
       ...effort2 ? { effort: effort2 } : {},
       ...orchestrated ? { orchestrated: true } : {},
-      ...name2 ? { name: name2 } : {}
+      ...name2 ? { name: name2 } : {},
+      ...accountId ? { accountId } : {}
     });
     listSessions = () => listPanes().map(toSessionInfo);
     listSessionsAsync = async () => (await listPanesAsync()).map(toSessionInfo);
@@ -50140,6 +50269,7 @@ exit 1
     getSession = (id2) => listPanes().find((p3) => p3.id === id2);
     getSessionAsync = async (id2) => (await listPanesAsync()).find((p3) => p3.id === id2);
     hooks = /* @__PURE__ */ new Set();
+    accountResolver = () => null;
     emitBirth = (b) => {
       for (const h2 of hooks) {
         try {
@@ -50502,8 +50632,8 @@ function createLaunchGate(deps) {
     async run(opts2, start, reuse) {
       const previous = tail2;
       let release;
-      tail2 = new Promise((resolve25) => {
-        release = resolve25;
+      tail2 = new Promise((resolve26) => {
+        release = resolve26;
       });
       await previous;
       try {
@@ -50672,6 +50802,8 @@ var init_settings3 = __esm({
       // SPEC-1215 · ADR-0166
       logRetention: LOG_RETENTION_DEFAULTS,
       // SPEC-1215 · ADR-0166
+      accounts: {},
+      // ADR-0234 · default akun runtime (absen = akun bawaan)
       builtinAgents: {},
       // SPEC-881 · ADR-0136 · sidik jari seed (lokal, tak disync)
       builtinAgentPolicies: {},
@@ -53625,7 +53757,7 @@ function readByobReaderWithSignal(reader, buffer, signal) {
     return reader.read(buffer);
   }
   signal.throwIfAborted();
-  return new Promise((resolve25, reject2) => {
+  return new Promise((resolve26, reject2) => {
     const cleanup = () => {
       signal.removeEventListener("abort", onAbort);
     };
@@ -53645,7 +53777,7 @@ function readByobReaderWithSignal(reader, buffer, signal) {
       try {
         const result = await reader.read(buffer);
         cleanup();
-        resolve25(result);
+        resolve26(result);
       } catch (error) {
         cleanup();
         reject2(error);
@@ -55881,9 +56013,9 @@ async function pull(sinceCursor, limit = 500, maxBytes = PULL_MAX_BYTES, opts2 =
 async function bootstrapSnapshot(after, maxBytes = PULL_MAX_BYTES, opts2 = {}) {
   const tip = await prisma.syncLog.findFirst({ orderBy: { seq: "desc" }, select: { seq: true } });
   const cursor = tip ? String(tip.seq) : "0";
-  const sep11 = after ? after.indexOf(":") : -1;
-  const afterEntity = sep11 > 0 ? after.slice(0, sep11) : null;
-  const afterId = sep11 > 0 ? after.slice(sep11 + 1) : null;
+  const sep12 = after ? after.indexOf(":") : -1;
+  const afterEntity = sep12 > 0 ? after.slice(0, sep12) : null;
+  const afterId = sep12 > 0 ? after.slice(sep12 + 1) : null;
   const startAt = afterEntity ? BOOTSTRAP_ORDER.indexOf(afterEntity) : 0;
   if (startAt < 0) throw new Error("bootstrap cursor tak dikenal");
   const records = [];
@@ -57939,13 +58071,13 @@ function requestRelay(deviceId, r, opts2 = {}) {
   if (r.body !== void 0 && utf8Bytes(JSON.stringify(r.body)) > RELAY_REQUEST_BODY_MAX_BYTES)
     return Promise.reject(new RelayError("too-large"));
   const id2 = `r${++counter}`;
-  return new Promise((resolve25, reject2) => {
+  return new Promise((resolve26, reject2) => {
     const timer11 = setTimeout(() => {
       sendCancel(link2, id2);
       settle(link2, id2, new RelayError("timeout"));
     }, opts2.timeoutMs ?? RELAY_REQ_TIMEOUT_MS);
     timer11.unref?.();
-    link2.pending.set(id2, { resolve: resolve25, reject: reject2, timer: timer11, contentType: null, chunks: [], bytes: 0 });
+    link2.pending.set(id2, { resolve: resolve26, reject: reject2, timer: timer11, contentType: null, chunks: [], bytes: 0 });
     try {
       link2.socket.send(JSON.stringify({
         t: "req",
@@ -58908,15 +59040,15 @@ async function openEvent(i) {
   return e;
 }
 function awaitEvent(id2, timeoutMs) {
-  return new Promise((resolve25) => {
+  return new Promise((resolve26) => {
     const timer11 = setTimeout(() => {
       waiters.delete(id2);
-      void closeEvent(id2, "late").catch(() => false).finally(() => resolve25({ status: "late" }));
+      void closeEvent(id2, "late").catch(() => false).finally(() => resolve26({ status: "late" }));
     }, timeoutMs);
     waiters.set(id2, (o) => {
       clearTimeout(timer11);
       waiters.delete(id2);
-      resolve25(o);
+      resolve26(o);
     });
   });
 }
@@ -59062,16 +59194,15 @@ var init_project_config = __esm({
   }
 });
 
-// src/services/limits.ts
+// src/services/runtime-accounts/keychain.ts
+import { createHash as createHash14 } from "node:crypto";
 import { execFileSync as execFileSync6 } from "node:child_process";
-import { readFileSync as readFileSync18 } from "node:fs";
-import { homedir as homedir6, userInfo } from "node:os";
-import { join as join34 } from "node:path";
-function credsFile() {
-  return join34(effectiveStr("CLAUDE_CONFIG_DIR") ?? join34(homedir6(), ".claude"), ".credentials.json");
+import { userInfo } from "node:os";
+function claudeKeychainService(configDir) {
+  return `Claude Code-credentials-${createHash14("sha256").update(configDir).digest("hex").slice(0, 8)}`;
 }
-function keychainAccessToken(run6 = securityRun, account = osAccount()) {
-  const base3 = ["find-generic-password", "-s", "Claude Code-credentials"];
+function readClaudeKeychainToken(service, run6 = securityRun, account = osAccount()) {
+  const base3 = ["find-generic-password", "-s", service];
   for (const scope of account ? [["-a", account], []] : [[]]) {
     try {
       const tok = JSON.parse(run6([...base3, ...scope, "-w"]))?.claudeAiOauth?.accessToken;
@@ -59081,6 +59212,45 @@ function keychainAccessToken(run6 = securityRun, account = osAccount()) {
   }
   return null;
 }
+function deleteClaudeKeychainEntry(service, run6 = securityRun) {
+  for (let i = 0; i < 4; i++) {
+    try {
+      run6(["delete-generic-password", "-s", service]);
+    } catch {
+      return;
+    }
+  }
+}
+var securityRun, osAccount;
+var init_keychain = __esm({
+  "src/services/runtime-accounts/keychain.ts"() {
+    "use strict";
+    securityRun = (args, input) => execFileSync6("security", args, {
+      encoding: "utf8",
+      input,
+      stdio: [input === void 0 ? "ignore" : "pipe", "pipe", "ignore"]
+    });
+    osAccount = () => {
+      try {
+        return userInfo().username || null;
+      } catch {
+        return null;
+      }
+    };
+  }
+});
+
+// src/services/limits.ts
+import { execFileSync as execFileSync7 } from "node:child_process";
+import { readFileSync as readFileSync18 } from "node:fs";
+import { homedir as homedir6, userInfo as userInfo2 } from "node:os";
+import { join as join34 } from "node:path";
+function credsFile() {
+  return join34(effectiveStr("CLAUDE_CONFIG_DIR") ?? join34(homedir6(), ".claude"), ".credentials.json");
+}
+function keychainAccessToken(run6 = securityRun2, account = osAccount2()) {
+  return readClaudeKeychainToken("Claude Code-credentials", run6, account);
+}
 function readAccessToken() {
   if (process.platform === "darwin" && !effectiveStr("CLAUDE_CONFIG_DIR")) {
     const tok = keychainAccessToken();
@@ -59114,38 +59284,43 @@ function mapWindows(json) {
     };
   });
 }
-function fallback() {
-  return lastOk ? { ...lastOk, status: "stale" } : { status: "unavailable", windows: [], fetchedAt: null };
-}
-async function fetchUsage() {
-  const token = readAccessToken();
-  if (!token) return fallback();
+async function fetchClaudeWindows(token, fetchImpl = fetch) {
   try {
-    const res = await fetch(USAGE_URL, {
+    const res = await fetchImpl(USAGE_URL, {
       headers: { authorization: `Bearer ${token}`, "anthropic-beta": "oauth-2025-04-20" },
-      // SPEC-197 · tanpa timeout, endpoint yang menggantung menahan request ~300s dan poll 60s
-      // menumpuk koneksi. AbortError ditangkap catch di bawah → fallback (stale/unavailable).
+      // SPEC-197 · tanpa timeout, endpoint yang menggantung menahan request ~300s dan poll menumpuk koneksi.
       signal: AbortSignal.timeout(5e3)
     });
-    if (!res.ok) return fallback();
-    const dto = { status: "ok", windows: mapWindows(await res.json()), fetchedAt: nowIso() };
-    lastOk = dto;
-    return dto;
+    if (!res.ok) return null;
+    return mapWindows(await res.json());
   } catch {
-    return fallback();
+    return null;
   }
 }
+function fallback() {
+  return lastOk ? { ...lastOk, status: "stale" } : { status: "unavailable", windows: [], fetchedAt: null };
+}
+async function fetchUsage() {
+  const token = readAccessToken();
+  if (!token) return fallback();
+  const windows = await fetchClaudeWindows(token);
+  if (!windows) return fallback();
+  const dto = { status: "ok", windows, fetchedAt: nowIso() };
+  lastOk = dto;
+  return dto;
+}
 async function getLimits() {
   if (lastOk && Date.now() < freshUntil) return lastOk;
   const dto = await fetchUsage();
   if (dto.status === "ok") freshUntil = Date.now() + TTL_MS2;
   return dto;
 }
-var USAGE_URL, TTL_MS2, lastOk, freshUntil, LABELS, humanize, nowIso, securityRun, osAccount;
+var USAGE_URL, TTL_MS2, lastOk, freshUntil, LABELS, humanize, nowIso, securityRun2, osAccount2;
 var init_limits = __esm({
   "src/services/limits.ts"() {
     "use strict";
     init_config2();
+    init_keychain();
     USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
     TTL_MS2 = 3e4;
     lastOk = null;
@@ -59157,10 +59332,10 @@ var init_limits = __esm({
     };
     humanize = (k) => k.replace(/_/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
     nowIso = () => (/* @__PURE__ */ new Date()).toISOString();
-    securityRun = (args) => execFileSync6("security", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
-    osAccount = () => {
+    securityRun2 = (args) => execFileSync7("security", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+    osAccount2 = () => {
       try {
-        return userInfo().username || null;
+        return userInfo2().username || null;
       } catch {
         return null;
       }
@@ -59289,16 +59464,16 @@ var init_codex_limits = __esm({
 });
 
 // src/services/antigravity-limits.ts
-import { execFileSync as execFileSync7 } from "node:child_process";
+import { execFileSync as execFileSync8 } from "node:child_process";
 import { readFileSync as readFileSync19 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
 import { join as join36 } from "node:path";
-function readAgyToken(run6 = securityRun2) {
+function parseAgyToken(raw) {
   try {
-    let raw = run6(["find-generic-password", "-s", "gemini", "-a", "antigravity", "-w"]).trim();
+    let s2 = raw.trim();
     const prefix = "go-keyring-base64:";
-    if (raw.startsWith(prefix)) raw = Buffer.from(raw.slice(prefix.length), "base64").toString("utf8");
-    const tok = JSON.parse(raw)?.token;
+    if (s2.startsWith(prefix)) s2 = Buffer.from(s2.slice(prefix.length), "base64").toString("utf8");
+    const tok = JSON.parse(s2)?.token;
     if (typeof tok?.access_token !== "string" || !tok.access_token) return null;
     const expiry = typeof tok.expiry === "string" ? Date.parse(tok.expiry) : NaN;
     return { accessToken: tok.access_token, expiry: Number.isFinite(expiry) ? expiry : null };
@@ -59306,6 +59481,13 @@ function readAgyToken(run6 = securityRun2) {
     return null;
   }
 }
+function readAgyToken(run6 = securityRun3) {
+  try {
+    return parseAgyToken(run6(["find-generic-password", "-s", "gemini", "-a", "antigravity", "-w"]));
+  } catch {
+    return null;
+  }
+}
 function defaultProject() {
   try {
     return readFileSync19(join36(agyHome(), "cache", "default_project_id.txt"), "utf8").trim() || null;
@@ -59348,14 +59530,9 @@ function mapQuota(json) {
 function fallback2() {
   return lastOk2 ? { ...lastOk2, status: "stale" } : UNAVAILABLE2;
 }
-async function fetchQuota(deps) {
-  if (deps.platform !== "darwin") return fallback2();
-  const tok = deps.token();
-  if (!tok) return fallback2();
-  if (tok.expiry !== null && tok.expiry - EXPIRY_SKEW_MS <= deps.now()) return fallback2();
-  const project = deps.project();
+async function fetchAgyWindows(tok, project, f) {
   try {
-    const res = await deps.fetch(QUOTA_URL, {
+    const res = await f(QUOTA_URL, {
       method: "POST",
       headers: {
         authorization: `Bearer ${tok.accessToken}`,
@@ -59366,27 +59543,31 @@ async function fetchQuota(deps) {
       // Endpoint yang menggantung tak boleh menumpuk koneksi di bawah siar 30 dtk (SPEC-197).
       signal: AbortSignal.timeout(5e3)
     });
-    if (!res.ok) return fallback2();
+    if (!res.ok) return null;
     const windows = mapQuota(await res.json());
-    if (!windows.length) return fallback2();
-    const dto = {
-      status: "ok",
-      windows,
-      fetchedAt: new Date(deps.now()).toISOString()
-    };
-    lastOk2 = dto;
-    return dto;
+    return windows.length ? windows : null;
   } catch {
-    return fallback2();
+    return null;
   }
 }
+async function fetchQuota(deps) {
+  if (deps.platform !== "darwin") return fallback2();
+  const tok = deps.token();
+  if (!tok) return fallback2();
+  if (tok.expiry !== null && tok.expiry - EXPIRY_SKEW_MS <= deps.now()) return fallback2();
+  const windows = await fetchAgyWindows(tok, deps.project(), deps.fetch);
+  if (!windows) return fallback2();
+  const dto = { status: "ok", windows, fetchedAt: new Date(deps.now()).toISOString() };
+  lastOk2 = dto;
+  return dto;
+}
 async function getAntigravityLimits(deps = prodDeps) {
   if (lastOk2 && deps.now() < freshUntil3) return lastOk2;
   const dto = await fetchQuota(deps);
   if (dto.status === "ok") freshUntil3 = deps.now() + TTL_MS4;
   return dto;
 }
-var QUOTA_URL, USER_AGENT, TTL_MS4, EXPIRY_SKEW_MS, lastOk2, freshUntil3, UNAVAILABLE2, securityRun2, agyHome, severityOf2, prodDeps;
+var QUOTA_URL, USER_AGENT, TTL_MS4, EXPIRY_SKEW_MS, lastOk2, freshUntil3, UNAVAILABLE2, securityRun3, agyHome, severityOf2, prodDeps;
 var init_antigravity_limits = __esm({
   "src/services/antigravity-limits.ts"() {
     "use strict";
@@ -59398,7 +59579,7 @@ var init_antigravity_limits = __esm({
     lastOk2 = null;
     freshUntil3 = 0;
     UNAVAILABLE2 = { status: "unavailable", windows: [], fetchedAt: null };
-    securityRun2 = (args) => execFileSync7("security", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+    securityRun3 = (args) => execFileSync8("security", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
     agyHome = () => join36(homedir8(), ".gemini", "antigravity-cli");
     severityOf2 = (pct3) => pct3 >= 90 ? "critical" : pct3 >= 70 ? "warning" : "normal";
     prodDeps = {
@@ -59498,7 +59679,7 @@ var init_budget = __esm({
 });
 
 // src/services/session-dialog.ts
-import { createHash as createHash14 } from "node:crypto";
+import { createHash as createHash15 } from "node:crypto";
 function readSessionDialog(io) {
   const text2 = io.capture();
   const s2 = answerable(text2);
@@ -59554,7 +59735,7 @@ var init_session_dialog2 = __esm({
     init_tui_dialog();
     init_pty();
     DIALOG_CHUNK_MS = 50;
-    screenHashOf = (paneText2) => createHash14("sha256").update(dialogKey(paneText2)).digest("hex").slice(0, 16);
+    screenHashOf = (paneText2) => createHash15("sha256").update(dialogKey(paneText2)).digest("hex").slice(0, 16);
     answerable = (paneText2) => {
       const s2 = readDialogScreen(paneText2);
       if (s2?.kind !== "question") return null;
@@ -61451,6 +61632,11 @@ function capabilityForRoute(method, path) {
   if (top === "webhooks") return rw("webhooks");
   if (top === "client-accounts") return rw("clients");
   if (top === "portal") return read2 ? "portal:read" : "COOKIE_ONLY";
+  if (top === "runtime-accounts") {
+    if (read2 && seg.length === 1) return "settings:read";
+    if (method === "PUT" && seg.length === 2 && seg[1] === "default") return "settings:write";
+    return "COOKIE_ONLY";
+  }
   if (top === "settings" || top === "config") return rw("settings");
   if (top === "specs") {
     if (method === "DELETE" && seg.length === 3 && seg[2] === "worktree") return "ide:git";
@@ -61651,7 +61837,7 @@ function createRelayDispatcher(o) {
       send(i === 0 ? { t: "res", id: id2, status: status2, contentType, part, end: end2 } : { t: "res", id: id2, part, end: end2 });
     });
   };
-  const fail4 = (id2, status2, error) => reply(id2, status2, JSON_TYPE, JSON.stringify({ error }));
+  const fail5 = (id2, status2, error) => reply(id2, status2, JSON_TYPE, JSON.stringify({ error }));
   async function handleReq(f) {
     const started2 = now();
     const record2 = (status2, extra = {}) => audit({
@@ -61662,19 +61848,19 @@ function createRelayDispatcher(o) {
     });
     if (inflight4.has(f.id)) return;
     if (inflight4.size >= RELAY_MAX_INFLIGHT) {
-      fail4(f.id, 429, "relay-busy");
+      fail5(f.id, 429, "relay-busy");
       record2(429);
       return;
     }
     const payload = f.body === void 0 ? void 0 : JSON.stringify(f.body);
     if (payload !== void 0 && utf8Bytes(payload) > RELAY_REQUEST_BODY_MAX_BYTES) {
-      fail4(f.id, 413, "relay-body-too-large");
+      fail5(f.id, 413, "relay-body-too-large");
       record2(413);
       return;
     }
     const url2 = f.query ? `${f.path}?${f.query.replace(/^\?/, "")}` : f.path;
     if (!relayRouteAllowed(f.method, url2) || !relayBodyAllowed(f.method, f.path, f.body)) {
-      fail4(f.id, 403, "relay route not allowed");
+      fail5(f.id, 403, "relay route not allowed");
       record2(403);
       return;
     }
@@ -61722,13 +61908,13 @@ function createRelayDispatcher(o) {
       });
       if (entry2.cancelled) return;
       if (utf8Bytes(res.body) > RELAY_RESPONSE_MAX_BYTES) {
-        fail4(f.id, 502, "relay-response-too-large");
+        fail5(f.id, 502, "relay-response-too-large");
         return;
       }
       reply(f.id, res.statusCode, String(res.headers["content-type"] ?? "application/octet-stream"), res.body);
     } catch {
       record2(502);
-      if (!entry2.cancelled) fail4(f.id, 502, "relay-dispatch-failed");
+      if (!entry2.cancelled) fail5(f.id, 502, "relay-dispatch-failed");
     } finally {
       inflight4.delete(f.id);
     }
@@ -64097,7 +64283,7 @@ var require_websocket2 = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes12, createHash: createHash24 } = __require("crypto");
+    var { randomBytes: randomBytes12, createHash: createHash25 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate2();
@@ -64765,7 +64951,7 @@ var require_websocket2 = __commonJS({
           abortHandshake(websocket2, socket2, "Invalid Upgrade header");
           return;
         }
-        const digest3 = createHash24("sha1").update(key + GUID).digest("base64");
+        const digest3 = createHash25("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest3) {
           abortHandshake(websocket2, socket2, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -65134,7 +65320,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash24 } = __require("crypto");
+    var { createHash: createHash25 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate2();
     var subprotocol2 = require_subprotocol();
@@ -65441,7 +65627,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket2, 503);
-        const digest3 = createHash24("sha1").update(key + GUID).digest("base64");
+        const digest3 = createHash25("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -66716,6 +66902,7 @@ async function startSpecSession(spec, opts2) {
       goal,
       agent,
       askVia,
+      accountId: opts2.accountId,
       phaseFile: phaseFilePath(repoDir, id2),
       decisionFile: decisionFilePath(repoDir, id2),
       attachmentsDir: attachments.items.length ? attachments.dir : void 0,
@@ -66772,7 +66959,7 @@ var init_session_launch = __esm({
 import { spawn as spawn4 } from "node:child_process";
 function runVerify(cwd, command, timeoutMs) {
   const env = Object.fromEntries(Object.entries(process.env).filter(([k]) => !STRIP.test(k)));
-  return new Promise((resolve25) => {
+  return new Promise((resolve26) => {
     const child = spawn4("sh", ["-c", command], { cwd, env, stdio: ["ignore", "pipe", "pipe"] });
     let out4 = "";
     const keep = (b) => {
@@ -66785,12 +66972,12 @@ function runVerify(cwd, command, timeoutMs) {
     }, timeoutMs);
     child.on("close", (code, signal) => {
       clearTimeout(timer11);
-      resolve25({ ok: code === 0 && !signal, code, tail: signal ? `${out4}
+      resolve26({ ok: code === 0 && !signal, code, tail: signal ? `${out4}
 [dihentikan: ${signal}]` : out4 });
     });
     child.on("error", (e) => {
       clearTimeout(timer11);
-      resolve25({ ok: false, code: null, tail: e.message });
+      resolve26({ ok: false, code: null, tail: e.message });
     });
   });
 }
@@ -67298,7 +67485,7 @@ var init_approvals = __esm({
 });
 
 // src/services/telegram/gateway.ts
-import { createHash as createHash15 } from "node:crypto";
+import { createHash as createHash16 } from "node:crypto";
 var digestRaw, TelegramGateway;
 var init_gateway = __esm({
   "src/services/telegram/gateway.ts"() {
@@ -67307,7 +67494,7 @@ var init_gateway = __esm({
     init_protocol();
     init_runtime();
     init_typing();
-    digestRaw = (update2) => createHash15("sha256").update(JSON.stringify(update2)).digest("hex");
+    digestRaw = (update2) => createHash16("sha256").update(JSON.stringify(update2)).digest("hex");
     TelegramGateway = class {
       constructor(deps) {
         this.deps = deps;
@@ -67508,7 +67695,7 @@ var init_gateway = __esm({
             const message = sanitizeTelegramOutput(error.message, this.deps.exactSecrets).slice(0, 500);
             updateTelegramRuntimeStatus({ running: false, readiness: "error", lastError: message });
             if (error instanceof TelegramApiError && error.code === 409) return;
-            await new Promise((resolve25) => setTimeout(resolve25, 1e3));
+            await new Promise((resolve26) => setTimeout(resolve26, 1e3));
           }
         }
       }
@@ -67631,14 +67818,14 @@ var init_engine_command = __esm({
 });
 
 // src/services/telegram/session.ts
-import { createHash as createHash16 } from "node:crypto";
+import { createHash as createHash17 } from "node:crypto";
 var chatHash, telegramOperatorSessionId, formatTelegramTurn, TelegramSessionCoordinator;
 var init_session = __esm({
   "src/services/telegram/session.ts"() {
     "use strict";
     init_src2();
     init_engine_command();
-    chatHash = (chatId) => createHash16("sha256").update(chatId).digest("hex").slice(0, 16);
+    chatHash = (chatId) => createHash17("sha256").update(chatId).digest("hex").slice(0, 16);
     telegramOperatorSessionId = (chatId) => `telegram-${chatHash(chatId)}`;
     formatTelegramTurn = (input) => `[Telegram update ${input.updateId} \xB7 chat ${input.chatId} \xB7 kind ${input.kind}]
 ${input.text}`;
@@ -68231,7 +68418,7 @@ var init_bootstrap = __esm({
 });
 
 // src/services/codex-version.ts
-import { execFile as execFile17 } from "node:child_process";
+import { execFile as execFile18 } from "node:child_process";
 import { promisify as promisify17 } from "node:util";
 async function probeCodexVersion(env = process.env, execute = runVersion) {
   const probe = codexNativeVersionProbe(env, codexBin2());
@@ -68246,9 +68433,9 @@ function parseCodexVersion(out4) {
   return m ? `${m[1]}.${m[2]}.${m[3]}` : null;
 }
 async function getCodexVersion(now = Date.now()) {
-  if (cache3 && now - cache3.at < TTL_MS5) return cache3.version;
+  if (cache4 && now - cache4.at < TTL_MS6) return cache4.version;
   const version = await probeCodexVersion();
-  cache3 = { at: now, version };
+  cache4 = { at: now, version };
   return version;
 }
 async function codexVersionInfo() {
@@ -68260,19 +68447,19 @@ async function codexVersionInfo() {
   };
 }
 function _resetCodexVersionCache() {
-  cache3 = null;
+  cache4 = null;
 }
-var run3, CODEX_MIN_CLIENT, TTL_MS5, cache3, codexBin2, runVersion;
+var run3, CODEX_MIN_CLIENT, TTL_MS6, cache4, codexBin2, runVersion;
 var init_codex_version = __esm({
   "src/services/codex-version.ts"() {
     "use strict";
     init_src();
     init_src2();
     init_config2();
-    run3 = promisify17(execFile17);
+    run3 = promisify17(execFile18);
     CODEX_MIN_CLIENT = "0.144.0";
-    TTL_MS5 = 5 * 6e4;
-    cache3 = null;
+    TTL_MS6 = 5 * 6e4;
+    cache4 = null;
     codexBin2 = () => effectiveStr("HANOMAN_CODEX_BIN") ?? "codex";
     runVersion = async (bin, args) => {
       const { stdout } = await run3(bin, args, { timeout: 1e4 });
@@ -68282,17 +68469,17 @@ var init_codex_version = __esm({
 });
 
 // src/services/agent-tool-catalog.ts
-import { readFileSync as readFileSync27 } from "node:fs";
-import { homedir as homedir13 } from "node:os";
-import { join as join51 } from "node:path";
+import { readFileSync as readFileSync31 } from "node:fs";
+import { homedir as homedir16 } from "node:os";
+import { join as join56 } from "node:path";
 function mcpServerNames(repoDir) {
   const names = [];
-  const claudeJson = readJson2(join51(home(), ".claude.json"));
+  const claudeJson = readJson2(join56(home(), ".claude.json"));
   names.push(...serversOf(claudeJson));
   if (repoDir) {
     const projects = claudeJson?.projects;
     if (projects && typeof projects === "object") names.push(...serversOf(projects[repoDir]));
-    names.push(...serversOf(readJson2(join51(repoDir, ".mcp.json"))));
+    names.push(...serversOf(readJson2(join56(repoDir, ".mcp.json"))));
   }
   names.push(...codexServers());
   return [...new Set(names.filter(Boolean))].sort((a, b) => a.localeCompare(b));
@@ -68305,10 +68492,10 @@ var init_agent_tool_catalog = __esm({
   "src/services/agent-tool-catalog.ts"() {
     "use strict";
     init_src();
-    home = () => process.env.HOME || homedir13();
+    home = () => process.env.HOME || homedir16();
     readJson2 = (path) => {
       try {
-        return JSON.parse(readFileSync27(path, "utf8"));
+        return JSON.parse(readFileSync31(path, "utf8"));
       } catch {
         return null;
       }
@@ -68321,7 +68508,7 @@ var init_agent_tool_catalog = __esm({
     codexServers = () => {
       let text2;
       try {
-        text2 = readFileSync27(join51(home(), ".codex", "config.toml"), "utf8");
+        text2 = readFileSync31(join56(home(), ".codex", "config.toml"), "utf8");
       } catch {
         return [];
       }
@@ -68337,7 +68524,7 @@ var init_agent_tool_catalog = __esm({
 });
 
 // src/services/builtin-agents.ts
-import { createHash as createHash20 } from "node:crypto";
+import { createHash as createHash21 } from "node:crypto";
 async function seedBuiltinAgents() {
   try {
     const setting = await getSetting();
@@ -68439,7 +68626,7 @@ var init_builtin_agents2 = __esm({
     init_settings3();
     init_tombstone();
     init_sync_notify();
-    digest2 = (parts) => createHash20("sha256").update(parts.join(" ")).digest("hex").slice(0, 16);
+    digest2 = (parts) => createHash21("sha256").update(parts.join(" ")).digest("hex").slice(0, 16);
     legacyFingerprint = (name2, description, instructions, tools) => digest2([name2, description, instructions, [...tools].join(",")]);
     mentionPart = (v) => {
       const m = mentionsOf(v);
@@ -68537,7 +68724,7 @@ function toRuntimeDef(row, runtime) {
 }
 async function loadCustomAgents() {
   try {
-    cache4 = await prisma.customAgent.findMany();
+    cache5 = await prisma.customAgent.findMany();
     const projects = await prisma.project.findMany({ select: { id: true, repoDir: true } });
     const bindings = await prisma.localBinding.findMany({ select: { projectId: true, repoDir: true } });
     const next = /* @__PURE__ */ new Map();
@@ -68545,7 +68732,7 @@ async function loadCustomAgents() {
     for (const b of bindings) next.set(b.projectId, b.repoDir ?? null);
     repoDirCache = next;
   } catch {
-    cache4 = [];
+    cache5 = [];
     repoDirCache = /* @__PURE__ */ new Map();
   }
 }
@@ -68558,10 +68745,10 @@ function agentDefsFor(contextOrProjectId, legacyAgent) {
     changedFiles: []
   } : contextOrProjectId;
   const { projectId } = context;
-  const globals = cache4.filter((r) => r.projectId === null).map(asCustomAgent);
-  const project = cache4.filter((r) => r.projectId === projectId).map(asCustomAgent);
+  const globals = cache5.filter((r) => r.projectId === null).map(asCustomAgent);
+  const project = cache5.filter((r) => r.projectId === projectId).map(asCustomAgent);
   const effectiveIds = new Set(effectiveAgents(globals, project).map((agent) => agent.id));
-  const effectiveRows = cache4.filter((row) => effectiveIds.has(row.id));
+  const effectiveRows = cache5.filter((row) => effectiveIds.has(row.id));
   const eff = selectAgentRows(effectiveRows, context);
   const needsCatalog = eff.some((row) => (toolsOf(row.tools) ?? []).includes(ALL_TOOLS));
   const catalogIds = needsCatalog ? agentToolIds(repoDirCache.get(projectId) ?? null) : [];
@@ -68617,7 +68804,7 @@ async function installCustomAgents() {
     codexSupportRefreshTimer.unref();
   }
 }
-var cache4, codexNativeSupport, codexSupportRefreshTimer, codexSupportRefreshTail, repoDirCache, asCustomAgent, defaultCodexSupportProbe;
+var cache5, codexNativeSupport, codexSupportRefreshTimer, codexSupportRefreshTail, repoDirCache, asCustomAgent, defaultCodexSupportProbe;
 var init_custom_agents2 = __esm({
   "src/services/custom-agents.ts"() {
     "use strict";
@@ -68629,7 +68816,7 @@ var init_custom_agents2 = __esm({
     init_builtin_agents2();
     init_runtime_defaults2();
     init_codex_version();
-    cache4 = [];
+    cache5 = [];
     codexNativeSupport = { version: null, ok: false };
     codexSupportRefreshTimer = null;
     codexSupportRefreshTail = Promise.resolve();
@@ -71176,14 +71363,14 @@ var require_stream_consumer = __commonJS({
   "../node_modules/.pnpm/@fastify+multipart@10.1.0/node_modules/@fastify/multipart/lib/stream-consumer.js"(exports, module) {
     "use strict";
     module.exports = function streamToNull(stream) {
-      return new Promise((resolve25, reject2) => {
+      return new Promise((resolve26, reject2) => {
         stream.on("data", () => {
         });
         stream.on("close", () => {
-          resolve25();
+          resolve26();
         });
         stream.on("end", () => {
-          resolve25();
+          resolve26();
         });
         stream.on("error", (error) => {
           reject2(error);
@@ -71632,10 +71819,10 @@ var require_multipart2 = __commonJS({
           }
         };
         const parts = () => {
-          return new Promise((resolve25, reject2) => {
+          return new Promise((resolve26, reject2) => {
             handle((val) => {
               if (val instanceof Error) return reject2(val);
-              resolve25(val);
+              resolve26(val);
             });
           });
         };
@@ -71941,7 +72128,7 @@ import websocket from "@fastify/websocket";
 import cookie from "@fastify/cookie";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
 import { dirname as dirname19 } from "node:path";
-import { existsSync as existsSync25 } from "node:fs";
+import { existsSync as existsSync26 } from "node:fs";
 
 // src/web-dir.ts
 import { resolve as resolve11 } from "node:path";
@@ -72029,11 +72216,11 @@ var UploadError = class extends Error {
   }
 };
 function timeout(promise, ms, code) {
-  return new Promise((resolve25, reject2) => {
+  return new Promise((resolve26, reject2) => {
     const timer11 = setTimeout(() => reject2(new UploadError(code, "upload operation timed out")), ms);
     promise.then((value) => {
       clearTimeout(timer11);
-      resolve25(value);
+      resolve26(value);
     }, (error) => {
       clearTimeout(timer11);
       reject2(error);
@@ -72056,7 +72243,7 @@ function scannerFromEnv(path) {
     return Promise.resolve();
   }
   if (!isAbsolute9(command)) return Promise.reject(new UploadError("UPLOAD_SCAN", "scanner path must be absolute"));
-  return new Promise((resolve25, reject2) => {
+  return new Promise((resolve26, reject2) => {
     const child = spawn2(command, [path], { shell: false, stdio: "ignore" });
     const timer11 = setTimeout(() => {
       child.kill("SIGKILL");
@@ -72068,7 +72255,7 @@ function scannerFromEnv(path) {
     });
     child.once("exit", (code) => {
       clearTimeout(timer11);
-      if (code === 0) resolve25();
+      if (code === 0) resolve26();
       else reject2(new UploadError("UPLOAD_SCAN", `scanner exit ${code}`));
     });
   });
@@ -74091,7 +74278,8 @@ var view4 = (r) => ({
   endedReason: r.endedReason,
   reconciledAt: r.reconciledAt?.toISOString() ?? null,
   exitCode: r.exitCode,
-  transcriptBytes: r.transcriptBytes
+  transcriptBytes: r.transcriptBytes,
+  accountId: r.accountId
 });
 async function titleFor(specId) {
   if (!specId) return null;
@@ -74112,7 +74300,9 @@ async function beginSession(b) {
       model: b.model ?? null,
       effort: b.effort ?? null,
       branch: b.branch ?? null,
-      cwd: b.cwd
+      cwd: b.cwd,
+      accountId: b.accountId ?? null
+      // ADR-0234
     }
   });
 }
@@ -74274,7 +74464,7 @@ async function reconciledSpecIdsSince(cutoff) {
 async function reconciledRuntimesSince(cutoff) {
   const rows = await prisma.sessionHistory.findMany({
     where: { endedReason: RECONCILED, reconciledAt: { gte: cutoff }, specId: { not: null } },
-    select: { specId: true, agent: true, model: true, effort: true },
+    select: { specId: true, agent: true, model: true, effort: true, accountId: true },
     orderBy: { startedAt: "desc" }
   });
   const out4 = /* @__PURE__ */ new Map();
@@ -74284,7 +74474,8 @@ async function reconciledRuntimesSince(cutoff) {
       // `agent` kolom String — nilai asing jatuh ke claude, cermin pembacaan @hanoman_agent (pty.ts).
       agent: r.agent === "antigravity" ? "antigravity" : r.agent === "codex" ? "codex" : "claude",
       ...r.model ? { model: r.model } : {},
-      ...r.effort ? { effort: r.effort } : {}
+      ...r.effort ? { effort: r.effort } : {},
+      ...r.accountId ? { accountId: r.accountId } : {}
     });
   }
   return out4;
@@ -77033,7 +77224,7 @@ function renderDocPdf(text2, name2, meta) {
   });
   const chunks = [];
   doc.on("data", (c) => chunks.push(c));
-  const done = new Promise((resolve25) => doc.on("end", () => resolve25(Buffer.concat(chunks))));
+  const done = new Promise((resolve26) => doc.on("end", () => resolve26(Buffer.concat(chunks))));
   doc.font("Helvetica-Bold").fontSize(8).fillColor(BRASS).text(toWinAnsi(meta.eyebrow.toUpperCase()), { characterSpacing: 0.8 });
   doc.moveDown(0.25);
   doc.font("Helvetica-Bold").fontSize(17).fillColor(STRONG).text(toWinAnsi(name2.split("/").pop() ?? name2));
@@ -77754,7 +77945,9 @@ async function settings_default(app3) {
       builtinRuntimeDefaults: markRuntimeDefaultsUserEdited(before2, runtimePreserved),
       remoteControl: before2.remoteControl,
       logShipping: before2.logShipping,
-      logRetention: before2.logRetention
+      logRetention: before2.logRetention,
+      // ADR-0234 · pilihan akun runtime milik PUT /runtime-accounts/default, bukan form Settings.
+      accounts: before2.accounts
     };
     const row = await prisma.setting.upsert({
       where: { id: 1 },
@@ -78581,9 +78774,9 @@ init_src();
 init_src2();
 init_session_phases();
 init_spec_review2();
-import { existsSync as existsSync21 } from "node:fs";
-import { execFileSync as execFileSync9 } from "node:child_process";
-import { randomUUID as randomUUID13 } from "node:crypto";
+import { existsSync as existsSync22 } from "node:fs";
+import { execFileSync as execFileSync10 } from "node:child_process";
+import { randomUUID as randomUUID14 } from "node:crypto";
 init_integrate();
 init_settings3();
 init_codex_trust();
@@ -78646,7 +78839,7 @@ function setBounded(map, key, value, maxKeys) {
 // src/services/auth.ts
 init_src2();
 init_db();
-import { randomBytes as randomBytes4, scrypt as scryptCb, timingSafeEqual as timingSafeEqual4, createHash as createHash17 } from "node:crypto";
+import { randomBytes as randomBytes4, scrypt as scryptCb, timingSafeEqual as timingSafeEqual4, createHash as createHash18 } from "node:crypto";
 import { promisify as promisify16 } from "node:util";
 var scrypt = promisify16(scryptCb);
 var COOKIE_NAME = "hn_session";
@@ -78664,7 +78857,7 @@ async function verifyPassword(pw, stored) {
   return key.length === want.length && timingSafeEqual4(key, want);
 }
 var newSessionToken = () => randomBytes4(32).toString("base64url");
-var sessionId = (token) => createHash17("sha256").update(token).digest("hex");
+var sessionId = (token) => createHash18("sha256").update(token).digest("hex");
 async function createSession2(userId) {
   const token = newSessionToken();
   await prisma.session.create({
@@ -78725,9 +78918,9 @@ function cookieOpts(req) {
 
 // src/services/device-token.ts
 init_db();
-import { randomBytes as randomBytes5, createHash as createHash18 } from "node:crypto";
+import { randomBytes as randomBytes5, createHash as createHash19 } from "node:crypto";
 var newDeviceToken = () => randomBytes5(32).toString("base64url");
-var tokenHash = (token) => createHash18("sha256").update(token).digest("hex");
+var tokenHash = (token) => createHash19("sha256").update(token).digest("hex");
 async function issueDeviceToken(userId, name2) {
   const token = newDeviceToken();
   const row = await prisma.deviceToken.create({ data: { userId, name: name2, tokenHash: tokenHash(token) } });
@@ -78966,6 +79159,554 @@ function appendDiag(home3, sessionId2, events) {
   appendFileSync4(file, rows.map((r) => JSON.stringify(r)).join("\n") + "\n");
 }
 
+// src/services/runtime-accounts/registry.ts
+init_src();
+init_db();
+init_settings3();
+import { randomUUID as randomUUID12 } from "node:crypto";
+import { rmSync as rmSync12 } from "node:fs";
+
+// src/services/runtime-accounts/home.ts
+import { chmodSync as chmodSync10, existsSync as existsSync21, lstatSync as lstatSync10, mkdirSync as mkdirSync18, readFileSync as readFileSync20, readlinkSync as readlinkSync3, renameSync as renameSync7, symlinkSync as symlinkSync2, writeFileSync as writeFileSync18 } from "node:fs";
+import { join as join43 } from "node:path";
+
+// src/services/runtime-accounts/paths.ts
+init_src2();
+import { homedir as homedir10 } from "node:os";
+import { join as join42, resolve as resolve23, sep as sep11 } from "node:path";
+var accountsRoot = (env = process.env) => join42(resolveHome(env), "accounts");
+var accountHomeDir = (runtime, id2, env = process.env) => join42(accountsRoot(env), runtime, id2);
+var baseHome = (runtime, env = process.env) => agentSkillHome(runtime, env);
+function baseClaudeJson(env = process.env, osHome = homedir10()) {
+  const own = env.HANOMAN_CLAUDE_HOME?.trim() || env.CLAUDE_CONFIG_DIR?.trim();
+  return own ? join42(own, ".claude.json") : join42(osHome, ".claude.json");
+}
+function insideAccountsRoot(path, env = process.env) {
+  return resolve23(path).startsWith(resolve23(accountsRoot(env)) + sep11);
+}
+
+// src/services/runtime-accounts/home.ts
+var SHARED_ENTRIES = {
+  claude: ["skills", "plugins", "agents", "commands", "hooks", "output-styles", "settings.json", "CLAUDE.md", "projects"],
+  codex: ["config.toml", "skills", "plugins", "AGENTS.md", "hooks.json", "prompts", "rules"],
+  // Mode tukar agy: home akun hanya menyimpan slot token, tak ada aset bersama.
+  antigravity: []
+};
+var MIRRORED_CLAUDE_KEYS = [
+  "mcpServers",
+  "hasCompletedOnboarding",
+  "lastOnboardingVersion",
+  "theme",
+  "bypassPermissionsModeAccepted",
+  "projects"
+];
+function classify(target3, link2) {
+  let st2 = null;
+  try {
+    st2 = lstatSync10(link2);
+  } catch {
+    st2 = null;
+  }
+  if (!st2) return existsSync21(target3) ? "absent" : "no-target";
+  if (st2.isSymbolicLink()) return readlinkSync3(link2) === target3 ? "ok" : "drift";
+  return "drift";
+}
+function inspectAccountHome(runtime, homeDir, base3 = baseHome(runtime)) {
+  return SHARED_ENTRIES[runtime].filter((e) => classify(join43(base3, e), join43(homeDir, e)) === "drift");
+}
+function ensureAccountHome(runtime, homeDir, base3 = baseHome(runtime)) {
+  mkdirSync18(homeDir, { recursive: true, mode: 448 });
+  chmodSync10(homeDir, 448);
+  const linked = [], drift = [];
+  for (const entry2 of SHARED_ENTRIES[runtime]) {
+    const target3 = join43(base3, entry2), link2 = join43(homeDir, entry2);
+    const state = classify(target3, link2);
+    if (state === "drift") drift.push(entry2);
+    else if (state === "absent") {
+      symlinkSync2(target3, link2);
+      linked.push(entry2);
+    }
+  }
+  return { linked, drift };
+}
+function mirrorClaudeJson(accountHome, baseJsonPath = baseClaudeJson()) {
+  let base3;
+  try {
+    base3 = JSON.parse(readFileSync20(baseJsonPath, "utf8"));
+  } catch {
+    return;
+  }
+  const path = join43(accountHome, ".claude.json");
+  let acct = {};
+  try {
+    acct = JSON.parse(readFileSync20(path, "utf8"));
+  } catch {
+    acct = {};
+  }
+  let changed = false;
+  for (const k of MIRRORED_CLAUDE_KEYS) {
+    if (!(k in base3) || JSON.stringify(acct[k]) === JSON.stringify(base3[k])) continue;
+    acct[k] = base3[k];
+    changed = true;
+  }
+  if (!changed) return;
+  const tmp = `${path}.hanoman-${process.pid}.tmp`;
+  writeFileSync18(tmp, JSON.stringify(acct, null, 2), { mode: 384 });
+  renameSync7(tmp, path);
+}
+function prepareAccountHome(runtime, homeDir) {
+  const r = ensureAccountHome(runtime, homeDir);
+  if (runtime === "claude") mirrorClaudeJson(homeDir);
+  return r;
+}
+
+// src/services/runtime-accounts/registry.ts
+init_keychain();
+
+// src/services/runtime-accounts/identity.ts
+init_pty();
+import { execFile as execFile17 } from "node:child_process";
+import { readFileSync as readFileSync21 } from "node:fs";
+import { join as join44 } from "node:path";
+var NONE2 = { loggedIn: false, identity: null };
+var execOut = (bin, args, env) => new Promise((res, rej) => {
+  execFile17(bin, args, { env, encoding: "utf8", timeout: 15e3 }, (err, stdout) => stdout ? res(stdout) : rej(err));
+});
+async function probeClaudeLogin(homeDir, run6 = execOut, bin = agentBin("claude")) {
+  const env = { ...process.env };
+  if (homeDir) {
+    env.CLAUDE_CONFIG_DIR = homeDir;
+    delete env.CLAUDE_CODE_OAUTH_TOKEN;
+    delete env.ANTHROPIC_API_KEY;
+  }
+  try {
+    const j = JSON.parse(await run6(bin, ["auth", "status", "--json"], env));
+    if (j.loggedIn !== true) return NONE2;
+    return { loggedIn: true, identity: {
+      ...typeof j.email === "string" && j.email ? { email: j.email } : {},
+      ...typeof j.subscriptionType === "string" && j.subscriptionType ? { plan: j.subscriptionType } : {}
+    } };
+  } catch {
+    return NONE2;
+  }
+}
+function decodeJwtClaims(token) {
+  const part = token.split(".")[1];
+  if (!part) return null;
+  try {
+    const v = JSON.parse(Buffer.from(part, "base64url").toString("utf8"));
+    return v && typeof v === "object" ? v : null;
+  } catch {
+    return null;
+  }
+}
+function probeCodexLogin(codexHome2) {
+  let j;
+  try {
+    j = JSON.parse(readFileSync21(join44(codexHome2, "auth.json"), "utf8"));
+  } catch {
+    return NONE2;
+  }
+  const access = j.tokens?.access_token;
+  if (typeof access !== "string" || !access) return NONE2;
+  const claims = typeof j.tokens?.id_token === "string" ? decodeJwtClaims(j.tokens.id_token) : null;
+  const auth = claims?.["https://api.openai.com/auth"];
+  return { loggedIn: true, identity: {
+    ...typeof claims?.email === "string" ? { email: claims.email } : {},
+    ...typeof auth?.chatgpt_plan_type === "string" ? { plan: auth.chatgpt_plan_type } : {}
+  } };
+}
+function nextStatus(loggedIn, everLoggedIn) {
+  return loggedIn ? "aktif" : everLoggedIn ? "perlu-login-ulang" : "belum-login";
+}
+
+// src/services/runtime-accounts/registry.ts
+var AccountError = class extends Error {
+  constructor(code, status2, message) {
+    super(message);
+    this.code = code;
+    this.status = status2;
+  }
+};
+var probes = {
+  claude: (home3) => probeClaudeLogin(home3),
+  codex: async (home3) => probeCodexLogin(home3),
+  // Mode tukar agy (antigravity-swap.ts) memasang probe slot-nya lewat setProbe saat boot.
+  antigravity: async () => ({ loggedIn: false, identity: null })
+};
+function setProbe(runtime, fn) {
+  probes[runtime] = fn;
+}
+var RUNTIMES = zAgent.options;
+var snapshot2 = { rows: [], defaults: {}, builtin: {} };
+var accountSnapshot = () => snapshot2;
+var toRow = (r) => ({
+  id: r.id,
+  runtime: zAgent.parse(r.runtime),
+  label: r.label,
+  homeDir: r.homeDir,
+  identity: r.identity && typeof r.identity === "object" && !Array.isArray(r.identity) ? r.identity : null,
+  status: r.status === "aktif" || r.status === "perlu-login-ulang" ? r.status : "belum-login",
+  createdAt: r.createdAt,
+  lastLoginAt: r.lastLoginAt
+});
+async function refreshSnapshot() {
+  const [rows, setting] = await Promise.all([
+    prisma.runtimeAccount.findMany({ orderBy: { createdAt: "asc" } }),
+    getSetting()
+  ]);
+  snapshot2 = { ...snapshot2, rows: rows.map(toRow), defaults: setting.accounts ?? {} };
+}
+var defaultOf = (runtime) => snapshot2.defaults[runtime] ?? builtinAccountId(runtime);
+function accountExists(id2) {
+  return isBuiltinAccountId(id2) ? runtimeOfBuiltin(id2) !== null : snapshot2.rows.some((r) => r.id === id2);
+}
+function listAccountDTOs() {
+  const out4 = [];
+  for (const runtime of RUNTIMES) {
+    const def2 = defaultOf(runtime);
+    const b = snapshot2.builtin[runtime];
+    out4.push({
+      id: builtinAccountId(runtime),
+      runtime,
+      label: BUILTIN_ACCOUNT_LABEL,
+      builtin: true,
+      isDefault: def2 === builtinAccountId(runtime),
+      // Belum diprobe = anggap aktif: akun bawaan adalah perilaku hanoman selama ini.
+      status: b?.status ?? "aktif",
+      identity: b?.identity ?? null,
+      drift: [],
+      createdAt: null,
+      lastLoginAt: null
+    });
+    for (const r of snapshot2.rows.filter((x) => x.runtime === runtime)) {
+      out4.push({
+        id: r.id,
+        runtime,
+        label: r.label,
+        builtin: false,
+        isDefault: def2 === r.id,
+        status: r.status,
+        identity: r.identity,
+        drift: inspectAccountHome(runtime, r.homeDir),
+        createdAt: r.createdAt.toISOString(),
+        lastLoginAt: r.lastLoginAt?.toISOString() ?? null
+      });
+    }
+  }
+  return out4;
+}
+var dtoOf = (id2) => {
+  const d = listAccountDTOs().find((a) => a.id === id2);
+  if (!d) throw new AccountError("account-not-found", 404, `akun ${id2} tak ditemukan`);
+  return d;
+};
+var labelTaken = (runtime, label2) => new AccountError("account-label-taken", 409, `label "${label2}" sudah dipakai di ${runtime}`);
+var isUniqueViolation = (e) => e.code === "P2002";
+async function createAccount(runtime, label2) {
+  if (label2.toLowerCase() === BUILTIN_ACCOUNT_LABEL.toLowerCase()) throw labelTaken(runtime, label2);
+  const id2 = randomUUID12().replace(/-/g, "").slice(0, 8);
+  const homeDir = accountHomeDir(runtime, id2);
+  try {
+    await prisma.runtimeAccount.create({ data: { id: id2, runtime, label: label2, homeDir, status: "belum-login" } });
+  } catch (e) {
+    if (isUniqueViolation(e)) throw labelTaken(runtime, label2);
+    throw e;
+  }
+  ensureAccountHome(runtime, homeDir, baseHome(runtime));
+  await refreshSnapshot();
+  return dtoOf(id2);
+}
+async function rowOrThrow(id2) {
+  const r = await prisma.runtimeAccount.findUnique({ where: { id: id2 } });
+  if (!r) throw new AccountError("account-not-found", 404, `akun ${id2} tak ditemukan`);
+  return toRow(r);
+}
+async function renameAccount(id2, label2) {
+  const row = await rowOrThrow(id2);
+  if (label2.toLowerCase() === BUILTIN_ACCOUNT_LABEL.toLowerCase()) throw labelTaken(row.runtime, label2);
+  try {
+    await prisma.runtimeAccount.update({ where: { id: id2 }, data: { label: label2 } });
+  } catch (e) {
+    if (isUniqueViolation(e)) throw labelTaken(row.runtime, label2);
+    throw e;
+  }
+  await refreshSnapshot();
+  return dtoOf(id2);
+}
+async function writeDefaults(accounts) {
+  const s2 = await getSetting();
+  const data = { ...s2, accounts };
+  await prisma.setting.upsert({ where: { id: 1 }, update: { data }, create: { id: 1, data } });
+}
+async function deleteAccount(id2, liveAccountIds2) {
+  const row = await rowOrThrow(id2);
+  if (liveAccountIds2().includes(id2)) throw new AccountError("account-in-use", 409, `akun "${row.label}" masih dipakai sesi yang hidup`);
+  await prisma.runtimeAccount.delete({ where: { id: id2 } });
+  const s2 = await getSetting();
+  if (s2.accounts?.[row.runtime] === id2) {
+    const next = { ...s2.accounts };
+    delete next[row.runtime];
+    await writeDefaults(next);
+  }
+  if (row.runtime === "claude" && process.platform === "darwin") deleteClaudeKeychainEntry(claudeKeychainService(row.homeDir));
+  if (insideAccountsRoot(row.homeDir)) rmSync12(row.homeDir, { recursive: true, force: true });
+  await refreshSnapshot();
+}
+async function setDefaultAccount(runtime, accountId, sandbox) {
+  if (isBuiltinAccountId(accountId)) {
+    if (accountId !== builtinAccountId(runtime))
+      throw new AccountError("account-runtime-mismatch", 409, `${accountId} bukan akun bawaan ${runtime}`);
+  } else {
+    const row = await rowOrThrow(accountId);
+    if (row.runtime !== runtime) throw new AccountError("account-runtime-mismatch", 409, `akun "${row.label}" milik ${row.runtime}, bukan ${runtime}`);
+    if (sandbox) throw new AccountError("account-sandbox-unsupported", 409, "sandbox sesi hanya mendukung akun bawaan");
+  }
+  const s2 = await getSetting();
+  const next = { ...s2.accounts ?? {} };
+  if (isBuiltinAccountId(accountId)) delete next[runtime];
+  else next[runtime] = accountId;
+  await writeDefaults(next);
+  await refreshSnapshot();
+}
+async function probeBuiltin(runtime, use2 = probes) {
+  const p3 = runtime === "claude" ? await use2.claude(null) : runtime === "codex" ? await use2.codex(baseHome("codex")) : await use2.antigravity(null, builtinAccountId("antigravity"));
+  snapshot2 = { ...snapshot2, builtin: { ...snapshot2.builtin, [runtime]: {
+    status: nextStatus(p3.loggedIn, true),
+    identity: p3.identity
+  } } };
+}
+async function checkAccount(id2, override) {
+  const use2 = override ?? probes;
+  const builtin = runtimeOfBuiltin(id2);
+  if (builtin) {
+    await probeBuiltin(builtin, use2);
+    return dtoOf(id2);
+  }
+  const row = await rowOrThrow(id2);
+  const p3 = row.runtime === "claude" ? await use2.claude(row.homeDir) : row.runtime === "codex" ? await use2.codex(row.homeDir) : await use2.antigravity(row.homeDir, row.id);
+  const ever = row.lastLoginAt !== null || row.status !== "belum-login";
+  await prisma.runtimeAccount.update({ where: { id: id2 }, data: {
+    status: nextStatus(p3.loggedIn, ever),
+    ...p3.loggedIn ? { identity: p3.identity ?? {} } : {},
+    ...p3.loggedIn && row.status !== "aktif" ? { lastLoginAt: /* @__PURE__ */ new Date() } : {}
+  } });
+  await refreshSnapshot();
+  return dtoOf(id2);
+}
+async function refreshAllStatuses() {
+  for (const runtime of RUNTIMES) {
+    try {
+      await probeBuiltin(runtime);
+    } catch (e) {
+      console.error(`akun runtime (status ${runtime} bawaan):`, e);
+    }
+  }
+  for (const r of snapshot2.rows) {
+    try {
+      await checkAccount(r.id);
+    } catch (e) {
+      console.error(`akun runtime (status ${r.label}):`, e);
+    }
+  }
+}
+
+// src/services/runtime-accounts/resolver.ts
+init_src();
+init_session_sandbox();
+init_db();
+
+// src/services/runtime-accounts/antigravity-swap.ts
+init_src();
+init_secret_box();
+init_antigravity_limits();
+init_pty();
+init_keychain();
+import { chmodSync as chmodSync11, mkdirSync as mkdirSync19, readFileSync as readFileSync22, rmSync as rmSync13, writeFileSync as writeFileSync19 } from "node:fs";
+import { homedir as homedir11 } from "node:os";
+import { join as join45 } from "node:path";
+var BUILTIN = builtinAccountId("antigravity");
+var isAgyLoginSession = (sessionId2) => sessionId2 === "acct-login-default-antigravity" || accountSnapshot().rows.some((r) => r.runtime === "antigravity" && sessionId2 === `acct-login-${r.id}`);
+var liveAgySessions = () => listSessions().filter((s2) => !s2.exited && (s2.agent === "antigravity" || isAgyLoginSession(s2.id)));
+var fsAgyIo = () => ({
+  run: securityRun,
+  readFile: (p3) => {
+    try {
+      return readFileSync22(p3, "utf8");
+    } catch {
+      return null;
+    }
+  },
+  writeFile: (p3, s2) => {
+    writeFileSync19(p3, s2, { mode: 384 });
+    chmodSync11(p3, 384);
+  },
+  removeFile: (p3) => rmSync13(p3, { force: true }),
+  tokenFile: join45(homedir11(), ".gemini", "antigravity-cli", "antigravity-oauth-token"),
+  accountsDir: join45(accountsRoot(), "antigravity"),
+  // Sesi agy hidup memakai akun yang AKTIF saat ini (satu Keychain), apa pun @hanoman_account-nya.
+  liveAgyAccountIds: () => liveAgySessions().map((s2) => s2.accountId ?? BUILTIN)
+});
+var slotDir = (io, id2) => join45(io.accountsDir, isBuiltinAccountId(id2) ? "default" : id2);
+var activeFile = (io) => join45(io.accountsDir, "active");
+function activeAgyAccount(io = fsAgyIo()) {
+  return io.readFile(activeFile(io))?.trim() || BUILTIN;
+}
+function readSlot(accountId, io = fsAgyIo()) {
+  let raw;
+  try {
+    raw = readFileSync22(join45(slotDir(io, accountId), "slot.enc"), "utf8");
+  } catch {
+    return null;
+  }
+  const plain = decryptSecret(raw);
+  if (!plain) return null;
+  try {
+    return JSON.parse(plain);
+  } catch {
+    return null;
+  }
+}
+function writeSlot(accountId, slot, io) {
+  const d = slotDir(io, accountId);
+  mkdirSync19(d, { recursive: true, mode: 448 });
+  const p3 = join45(d, "slot.enc");
+  writeFileSync19(p3, encryptSecret(JSON.stringify(slot)), { mode: 384 });
+  chmodSync11(p3, 384);
+}
+function readKeychain(io) {
+  try {
+    return io.run(["find-generic-password", "-s", "gemini", "-a", "antigravity", "-w"]).trim() || null;
+  } catch {
+    return null;
+  }
+}
+var shq2 = (s2) => `'${s2.replace(/'/g, "'\\''")}'`;
+function writeKeychain(value, io) {
+  try {
+    io.run(["delete-generic-password", "-s", "gemini", "-a", "antigravity"]);
+  } catch {
+  }
+  if (value) io.run(["-i"], `add-generic-password -U -s gemini -a antigravity -w ${shq2(value)}
+`);
+}
+function captureActiveSlot(io = fsAgyIo()) {
+  writeSlot(activeAgyAccount(io), { keychain: readKeychain(io), file: io.readFile(io.tokenFile) }, io);
+}
+function activateAgyAccount(targetId, io = fsAgyIo()) {
+  if (activeAgyAccount(io) === targetId) return;
+  if (io.liveAgyAccountIds().length > 0)
+    throw new AccountError("antigravity-account-busy", 409, "masih ada sesi Antigravity yang berjalan dengan akun lain \u2014 tutup dulu sesinya");
+  captureActiveSlot(io);
+  const slot = readSlot(targetId, io) ?? { keychain: null, file: null };
+  writeKeychain(slot.keychain, io);
+  if (slot.file) io.writeFile(io.tokenFile, slot.file);
+  else io.removeFile(io.tokenFile);
+  mkdirSync19(io.accountsDir, { recursive: true, mode: 448 });
+  io.writeFile(activeFile(io), targetId);
+}
+function emailOf(raw) {
+  try {
+    let s2 = raw.trim();
+    const prefix = "go-keyring-base64:";
+    if (s2.startsWith(prefix)) s2 = Buffer.from(s2.slice(prefix.length), "base64").toString("utf8");
+    const e = JSON.parse(s2).id_token_email;
+    return typeof e === "string" && e ? e : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function rawLogin(accountId, io) {
+  if (activeAgyAccount(io) === accountId) return readKeychain(io) ?? io.readFile(io.tokenFile);
+  const s2 = readSlot(accountId, io);
+  return s2?.keychain ?? s2?.file ?? null;
+}
+function probeAgyLogin(accountId, io = fsAgyIo()) {
+  const raw = rawLogin(accountId, io);
+  if (!raw || !parseAgyToken(raw)) return { loggedIn: false, identity: null };
+  const email = emailOf(raw);
+  return { loggedIn: true, identity: email ? { email } : {} };
+}
+var UNAVAILABLE3 = { status: "unavailable", windows: [], fetchedAt: null };
+async function agyAccountLimits(accountId, io = fsAgyIo()) {
+  if (process.platform !== "darwin") return UNAVAILABLE3;
+  const raw = rawLogin(accountId, io);
+  const tok = raw ? parseAgyToken(raw) : null;
+  if (!tok || tok.expiry !== null && tok.expiry - EXPIRY_SKEW_MS <= Date.now()) return UNAVAILABLE3;
+  const windows = await fetchAgyWindows(tok, defaultProject(), fetch);
+  return windows ? { status: "ok", windows, fetchedAt: (/* @__PURE__ */ new Date()).toISOString() } : UNAVAILABLE3;
+}
+
+// src/services/runtime-accounts/resolver.ts
+function accountEnv(runtime, homeDir) {
+  if (runtime === "claude") return { env: { CLAUDE_CONFIG_DIR: homeDir }, unset: ["CLAUDE_CODE_OAUTH_TOKEN", "ANTHROPIC_API_KEY"] };
+  if (runtime === "codex") return { env: { CODEX_HOME: homeDir }, unset: [] };
+  return { env: {}, unset: [] };
+}
+var prodDeps3 = () => ({
+  sandbox: sessionSandboxOn(),
+  warn: (m) => console.warn(m),
+  ...process.platform === "darwin" ? { activateAgy: (id2) => activateAgyAccount(id2) } : {}
+});
+var AGY_BUILTIN = builtinAccountId("antigravity");
+function resolveAgy(requested, deps) {
+  const snap = accountSnapshot();
+  const rows = snap.rows.filter((r) => r.runtime === "antigravity");
+  if (!rows.length || !deps.activateAgy) return null;
+  const target3 = requested ?? snap.defaults.antigravity ?? AGY_BUILTIN;
+  const row = rows.find((r) => r.id === target3);
+  if (!isBuiltinAccountId(target3) && !row) deps.warn(`hanoman: akun Antigravity ${target3} tak ditemukan \u2014 memakai akun bawaan`);
+  if (row && !requested && row.status !== "aktif")
+    deps.warn(`hanoman: akun default Antigravity "${row.label}" berstatus ${row.status} \u2014 sesi memakai akun bawaan`);
+  const id2 = row && (requested || row.status === "aktif") ? row.id : AGY_BUILTIN;
+  deps.activateAgy(id2);
+  return id2 === AGY_BUILTIN ? null : { id: id2, env: {}, unset: [] };
+}
+function resolveLaunchAccount(agent, requested, deps = prodDeps3()) {
+  if (deps.sandbox) return null;
+  if (agent === "antigravity") return resolveAgy(requested, deps);
+  const snap = accountSnapshot();
+  const id2 = requested ?? snap.defaults[agent];
+  if (!id2 || isBuiltinAccountId(id2)) return null;
+  const row = snap.rows.find((r) => r.id === id2 && r.runtime === agent);
+  if (!row) {
+    deps.warn(`hanoman: akun runtime ${id2} tak ditemukan untuk ${agent} \u2014 memakai akun bawaan`);
+    return null;
+  }
+  if (!requested && row.status !== "aktif") {
+    deps.warn(`hanoman: akun default ${agent} "${row.label}" berstatus ${row.status} \u2014 sesi memakai akun bawaan`);
+    return null;
+  }
+  try {
+    prepareAccountHome(agent, row.homeDir);
+  } catch (e) {
+    deps.warn(`hanoman: menyiapkan home akun "${row.label}" gagal: ${e.message}`);
+  }
+  return { id: row.id, ...accountEnv(agent, row.homeDir) };
+}
+async function assertLaunchAccount(agent, requested, sandbox = sessionSandboxOn()) {
+  if (!requested) return;
+  if (isBuiltinAccountId(requested)) {
+    if (requested !== builtinAccountId(agent))
+      throw new AccountError("account-runtime-mismatch", 409, `${requested} bukan akun bawaan ${agent}`);
+    assertAgyFree(agent, requested);
+    return;
+  }
+  const row = await prisma.runtimeAccount.findUnique({ where: { id: requested } });
+  if (!row) throw new AccountError("account-not-found", 404, `akun ${requested} tak ditemukan`);
+  if (row.runtime !== agent) throw new AccountError("account-runtime-mismatch", 409, `akun "${row.label}" milik ${row.runtime}, bukan ${agent}`);
+  if (sandbox) throw new AccountError("account-sandbox-unsupported", 409, "sandbox sesi hanya mendukung akun bawaan");
+  if (row.status !== "aktif") throw new AccountError("account-not-logged-in", 409, `akun "${row.label}" belum login`);
+  assertAgyFree(agent, requested);
+}
+function assertAgyFree(agent, requested) {
+  if (agent !== "antigravity" || process.platform !== "darwin") return;
+  if (!accountSnapshot().rows.some((r) => r.runtime === "antigravity")) return;
+  if (activeAgyAccount() === requested) return;
+  if (liveAgySessions().length > 0)
+    throw new AccountError("antigravity-account-busy", 409, "masih ada sesi Antigravity yang berjalan dengan akun lain \u2014 tutup dulu sesinya");
+}
+
 // src/routes/terminal.ts
 init_notifications2();
 init_stage_machine();
@@ -79040,11 +79781,11 @@ init_uploads();
 // src/services/agent-invocations.ts
 init_src();
 init_db();
-import { createHash as createHash19, randomUUID as randomUUID12 } from "node:crypto";
-import { execFileSync as execFileSync8 } from "node:child_process";
-import { homedir as homedir10 } from "node:os";
-import { readFileSync as readFileSync20, realpathSync as realpathSync11, statSync as statSync7 } from "node:fs";
-import { isAbsolute as isAbsolute12, relative as relative8, resolve as resolve23 } from "node:path";
+import { createHash as createHash20, randomUUID as randomUUID13 } from "node:crypto";
+import { execFileSync as execFileSync9 } from "node:child_process";
+import { homedir as homedir12 } from "node:os";
+import { readFileSync as readFileSync23, realpathSync as realpathSync11, statSync as statSync7 } from "node:fs";
+import { isAbsolute as isAbsolute12, relative as relative8, resolve as resolve24 } from "node:path";
 
 // src/services/session-event-relay.ts
 init_session_event_token();
@@ -79052,7 +79793,7 @@ init_session_event_spool();
 init_ingress_policy();
 import { constants as constants4 } from "node:fs";
 import { mkdir as mkdir8, open as open4, readdir as readdir9, rm as rm7 } from "node:fs/promises";
-import { join as join42 } from "node:path";
+import { join as join46 } from "node:path";
 var MAX_EVENT_BYTES = 1e6;
 var MAX_FILES_PER_DRAIN = 1e3;
 var SESSION_ID_RE = /^[a-z0-9_-]+$/;
@@ -79103,7 +79844,7 @@ async function drainSpool(app3, root, observation, host2) {
   let readBuffer;
   for (const session of await readdir9(root, { withFileTypes: true })) {
     if (!session.isDirectory() || !SESSION_ID_RE.test(session.name)) continue;
-    const dir2 = join42(root, session.name);
+    const dir2 = join46(root, session.name);
     let entries4;
     try {
       entries4 = await readdir9(dir2, { withFileTypes: true });
@@ -79115,7 +79856,7 @@ async function drainSpool(app3, root, observation, host2) {
       if (!entry2.isFile() || !entry2.name.endsWith(".json")) continue;
       const eventAt = /^(\d{1,15})-/.exec(entry2.name)?.[1];
       if (++examined > MAX_FILES_PER_DRAIN) return delivered;
-      const path = join42(dir2, entry2.name);
+      const path = join46(dir2, entry2.name);
       let payload;
       let handle;
       try {
@@ -79202,10 +79943,10 @@ var MAX_TRANSCRIPT_BYTES2 = 10 * 1024 * 1024;
 var ANSI2 = /[\u001b\u009b](?:\][^\u0007]*(?:\u0007|\u001b\\)|\[[0-?]*[ -/]*[@-~]|[@-_])/g;
 var snapshotHashes = /* @__PURE__ */ new Map();
 var keyOf = (x) => `${x.sessionId}\0${x.runtimeInvocationId}`;
-var hash3 = (value) => createHash19("sha256").update(value).digest("hex");
+var hash3 = (value) => createHash20("sha256").update(value).digest("hex");
 var defaultGitStatus = (cwd) => {
   try {
-    return execFileSync8("git", ["-C", cwd, "status", "--porcelain=v1", "-z"], {
+    return execFileSync9("git", ["-C", cwd, "status", "--porcelain=v1", "-z"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     });
@@ -79213,7 +79954,7 @@ var defaultGitStatus = (cwd) => {
     return null;
   }
 };
-function snapshot2(cwd, run6 = defaultGitStatus) {
+function snapshot3(cwd, run6 = defaultGitStatus) {
   try {
     const value = run6(cwd);
     return value === null ? null : hash3(value);
@@ -79233,8 +79974,11 @@ var utf8Prefix = (value, maxBytes) => {
   return out4;
 };
 var transcriptRoots = () => [
-  resolve23(process.env.CLAUDE_CONFIG_DIR ?? `${homedir10()}/.claude`),
-  resolve23(process.env.CODEX_HOME ?? `${homedir10()}/.codex`)
+  resolve24(process.env.CLAUDE_CONFIG_DIR ?? `${homedir12()}/.claude`),
+  resolve24(process.env.CODEX_HOME ?? `${homedir12()}/.codex`),
+  // ADR-0234 · home akun runtime (CLAUDE_CONFIG_DIR/CODEX_HOME per sesi). Transkrip claude akun lewat
+  // symlink `projects/` tetap berada di bawah akar ini.
+  resolve24(accountsRoot())
 ];
 var inside = (path, root) => {
   const rel = relative8(root, path);
@@ -79315,7 +80059,7 @@ function transcriptUsage(path, roots = transcriptRoots()) {
     if (!safeRoots.some((root) => inside(real2, root))) return EMPTY_USAGE;
     const info = statSync7(real2);
     if (!info.isFile() || info.size > MAX_TRANSCRIPT_BYTES2) return EMPTY_USAGE;
-    return usageFromText(readFileSync20(real2, "utf8"));
+    return usageFromText(readFileSync23(real2, "utf8"));
   } catch {
     return EMPTY_USAGE;
   }
@@ -79333,7 +80077,7 @@ async function startAgentInvocation(input, io = {}) {
       where: { id: existing.id },
       data: { status: "running", endedAt: null, durationMs: null }
     });
-    const before3 = snapshot2(input.cwd, io.gitStatus);
+    const before3 = snapshot3(input.cwd, io.gitStatus);
     if (before3 !== null) snapshotHashes.set(keyOf(input), before3);
     return { row: row2, duplicate: false };
   }
@@ -79344,7 +80088,7 @@ async function startAgentInvocation(input, io = {}) {
     } },
     update: {},
     create: {
-      id: randomUUID12(),
+      id: randomUUID13(),
       sessionId: input.sessionId,
       projectId: input.projectId,
       specId: input.specId ?? null,
@@ -79360,7 +80104,7 @@ async function startAgentInvocation(input, io = {}) {
       startedAt
     }
   });
-  const before2 = snapshot2(input.cwd, io.gitStatus);
+  const before2 = snapshot3(input.cwd, io.gitStatus);
   if (before2 !== null) snapshotHashes.set(keyOf(input), before2);
   return { row, duplicate: existing !== null };
 }
@@ -79376,7 +80120,7 @@ async function stopAgentInvocation(input, io = {}) {
   const cleanResult = input.result === void 0 ? null : stripAnsi(input.result);
   const usage2 = transcriptUsage(input.transcriptPath, io.transcriptRoots);
   const before2 = snapshotHashes.get(keyOf(input));
-  const after = snapshot2(input.cwd, io.gitStatus);
+  const after = snapshot3(input.cwd, io.gitStatus);
   snapshotHashes.delete(keyOf(input));
   const evidence = {
     // Stop tanpa start lazim setelah restart server di tengah invocation. Waktu start dan status
@@ -79398,7 +80142,7 @@ async function stopAgentInvocation(input, io = {}) {
   }
   const row = await prisma.agentInvocation.create({
     data: {
-      id: randomUUID12(),
+      id: randomUUID13(),
       sessionId: input.sessionId,
       projectId: input.projectId,
       specId: input.specId ?? null,
@@ -79600,25 +80344,25 @@ init_ask();
 // src/services/decision-guard.ts
 init_src2();
 init_db();
-import { mkdirSync as mkdirSync18, readFileSync as readFileSync21, readdirSync as readdirSync11, rmSync as rmSync12, statSync as statSync8, writeFileSync as writeFileSync18 } from "node:fs";
-import { join as join43 } from "node:path";
+import { mkdirSync as mkdirSync20, readFileSync as readFileSync24, readdirSync as readdirSync11, rmSync as rmSync14, statSync as statSync8, writeFileSync as writeFileSync20 } from "node:fs";
+import { join as join47 } from "node:path";
 var SESSION_HEADER = "x-hanoman-session";
 var SAFE_ID = /^[A-Za-z0-9._-]{1,200}$/;
 var launchers = /* @__PURE__ */ new Map();
 var STALE_MS = 30 * 24 * 60 * 6e4;
-var launcherDir = (env = process.env) => join43(resolveHome(env), "session-launchers");
+var launcherDir = (env = process.env) => join47(resolveHome(env), "session-launchers");
 function recordLauncher(sessionId2, agentId, env = process.env) {
   if (!SAFE_ID.test(sessionId2)) return;
   const known2 = launchersFor(sessionId2, env);
   known2.add(agentId);
   try {
     const dir2 = launcherDir(env);
-    mkdirSync18(dir2, { recursive: true, mode: 448 });
-    writeFileSync18(join43(dir2, sessionId2), [...known2].join("\n"), { mode: 384 });
+    mkdirSync20(dir2, { recursive: true, mode: 448 });
+    writeFileSync20(join47(dir2, sessionId2), [...known2].join("\n"), { mode: 384 });
     const now = Date.now();
     for (const f of readdirSync11(dir2)) {
       try {
-        if (now - statSync8(join43(dir2, f)).mtimeMs > STALE_MS) rmSync12(join43(dir2, f), { force: true });
+        if (now - statSync8(join47(dir2, f)).mtimeMs > STALE_MS) rmSync14(join47(dir2, f), { force: true });
       } catch {
       }
     }
@@ -79630,7 +80374,7 @@ function launchersFor(sessionId2, env) {
   if (hot) return hot;
   const ids = /* @__PURE__ */ new Set();
   try {
-    for (const l of readFileSync21(join43(launcherDir(env), sessionId2), "utf8").split("\n")) if (l.trim()) ids.add(l.trim());
+    for (const l of readFileSync24(join47(launcherDir(env), sessionId2), "utf8").split("\n")) if (l.trim()) ids.add(l.trim());
   } catch {
   }
   launchers.set(sessionId2, ids);
@@ -79703,6 +80447,7 @@ async function terminal_default(app3, opts2) {
         const setting = await getSetting();
         const agent2 = parsed.data.agent ?? setting.agent;
         validatePhaseOverrides(agent2, parsed.data.phaseOverrides);
+        await assertLaunchAccount(agent2, parsed.data.account);
         const requestedGoal = parsed.data.flow === "goal" || parsed.data.flow === "no_effort" || (parsed.data.goal ?? setting.goal.enabled);
         if (agent2 === "antigravity") await withSessionAdmission({ id: sessionIdForSpec(spec.id), force: parsed.data.force }, async () => {
           assertAntigravityLaunch(agent2, requestedGoal);
@@ -79719,6 +80464,8 @@ async function terminal_default(app3, opts2) {
           // SPEC-332 · ADR-0073
           agent: parsed.data.agent,
           // SPEC-338 · ADR-0074
+          accountId: parsed.data.account,
+          // ADR-0234
           verifyScope: parsed.data.verifyScope,
           // SPEC-376 · ADR-0080
           method: parsed.data.method,
@@ -79732,6 +80479,7 @@ async function terminal_default(app3, opts2) {
         });
         return reply.code(201).send(r.resumed ? { id: r.id, resumed: true } : { id: r.id });
       } catch (e) {
+        if (e instanceof AccountError) return reply.code(e.status).send({ error: e.code, message: e.message });
         if (e instanceof LaunchError) {
           if (e.kind === "blocked")
             return reply.code(409).send({ error: e.message, blocked: true, blockers: e.blockers });
@@ -79943,21 +80691,28 @@ async function terminal_default(app3, opts2) {
       return reply.code(result.code).send(result.body);
     }
     const { agent, model, effort: effort2 } = await terminalAgentDefaults(parsed.data);
+    const account = parsed.data.account;
+    try {
+      await assertLaunchAccount(agent, account);
+    } catch (e) {
+      if (e instanceof AccountError) return reply.code(e.status).send({ error: e.code, message: e.message });
+      throw e;
+    }
     if (agent === "codex") ensureCodexTrust(repoDir);
     if (parsed.data.worktree) {
-      const id2 = `term-${randomUUID13().slice(0, 8)}`;
+      const id2 = `term-${randomUUID14().slice(0, 8)}`;
       const branch = `term/${id2.slice("term-".length)}`;
       const from = parsed.data.branchFrom ?? "HEAD";
       const result = await withSessionAdmission({ id: id2, exempt: false, force: parsed.data.force }, async () => {
         const wt = `${repoDir}/.worktrees/${id2}`;
         try {
           realGit.addWorktree(repoDir, wt, from);
-          execFileSync9("git", ["switch", "-q", "-c", branch], { cwd: wt, stdio: "pipe" });
+          execFileSync10("git", ["switch", "-q", "-c", branch], { cwd: wt, stdio: "pipe" });
         } catch (e) {
           if (ownsWorktree(repoDir, wt)) realGit.removeWorktree(repoDir, wt);
           return { code: 422, body: { error: `gagal membuat worktree dari "${from}": ${e.message}` } };
         }
-        const s3 = createSession(project.id, wt, { id: id2, agent, model, effort: effort2, branch });
+        const s3 = createSession(project.id, wt, { id: id2, agent, model, effort: effort2, branch, accountId: account });
         return { code: 201, body: { id: s3.id } };
       }, (pane) => ({ code: 201, body: { id: pane.id } }));
       return reply.code(result.code).send(result.body);
@@ -79967,7 +80722,7 @@ async function terminal_default(app3, opts2) {
     const s2 = await createOperatorSession(
       project.id,
       repoDir,
-      { agent, model, effort: effort2 },
+      { agent, model, effort: effort2, accountId: account },
       { exempt: false, force: parsed.data.force }
     );
     return reply.code(201).send({ id: s2.id });
@@ -80082,7 +80837,7 @@ async function terminal_default(app3, opts2) {
     if (!repoDir) return { ok: false, code: 409, msg: "project belum punya repoDir" };
     if (!s2.cwd.includes("/.worktrees/"))
       return { ok: false, code: 409, msg: "belum ada worktree untuk di-review \u2014 jalankan/lanjutkan sesi dulu", empty: "no-worktree" };
-    if (!existsSync21(s2.cwd))
+    if (!existsSync22(s2.cwd))
       return { ok: false, code: 409, msg: "belum ada worktree untuk di-review \u2014 jalankan/lanjutkan sesi dulu", empty: "no-commit" };
     return { ok: true, id: s2.id, repoDir };
   };
@@ -80345,8 +81100,8 @@ async function terminalWorkspaceRoutes(app3) {
 // src/routes/vps.ts
 init_db();
 init_src();
-import { readFileSync as readFileSync26, existsSync as existsSync24 } from "node:fs";
-import { homedir as homedir12 } from "node:os";
+import { readFileSync as readFileSync29, existsSync as existsSync25 } from "node:fs";
+import { homedir as homedir14 } from "node:os";
 
 // src/vps/catalog/catalog.data.ts
 var RAW_SECTIONS = [{ "id": "ssh", "title": "SSH Hardening", "icon": "\u{1F511}", "count": 14 }, { "id": "firewall", "title": "Firewall & Network", "icon": "\u{1F525}", "count": 14 }, { "id": "aapanel", "title": "aaPanel Security", "icon": "\u{1F5A5}\uFE0F", "count": 14 }, { "id": "user", "title": "User & Permission Management", "icon": "\u{1F464}", "count": 14 }, { "id": "system", "title": "System Hardening (OS Level)", "icon": "\u2699\uFE0F", "count": 16 }, { "id": "webserver", "title": "Web Server Hardening", "icon": "\u{1F310}", "count": 14 }, { "id": "database", "title": "Database Security", "icon": "\u{1F5C4}\uFE0F", "count": 15 }, { "id": "ssl", "title": "SSL/TLS & Enkripsi", "icon": "\u{1F512}", "count": 13 }, { "id": "ids", "title": "Intrusion Detection & Prevention", "icon": "\u{1F6A8}", "count": 9 }, { "id": "logging", "title": "Logging & Monitoring", "icon": "\u{1F4CA}", "count": 13 }, { "id": "backup", "title": "Backup & Disaster Recovery", "icon": "\u{1F4BE}", "count": 12 }, { "id": "ddos", "title": "DDoS Protection", "icon": "\u{1F30A}", "count": 11 }, { "id": "kernel", "title": "Kernel Hardening", "icon": "\u{1F9E0}", "count": 12 }, { "id": "malware", "title": "File Integrity & Malware Detection", "icon": "\u{1F9A0}", "count": 7 }, { "id": "enterprise", "title": "Advanced Enterprise & Government Level", "icon": "\u{1F3E2}", "count": 31 }, { "id": "checklist", "title": "Checklist Rutin", "icon": "\u2705", "count": 23 }];
@@ -80553,14 +81308,14 @@ function resolveComponents(ids, profile) {
 }
 
 // src/services/vps-provision.ts
-import { readFileSync as readFileSync23 } from "node:fs";
+import { readFileSync as readFileSync26 } from "node:fs";
 
 // src/services/vps-ssh.ts
 init_config2();
 import { spawn as spawn6 } from "node:child_process";
-import { mkdtempSync as mkdtempSync4, rmSync as rmSync13, writeFileSync as writeFileSync19 } from "node:fs";
+import { mkdtempSync as mkdtempSync4, rmSync as rmSync15, writeFileSync as writeFileSync21 } from "node:fs";
 import { tmpdir as tmpdir7 } from "node:os";
-import { dirname as dirname17, join as join44 } from "node:path";
+import { dirname as dirname17, join as join48 } from "node:path";
 var sshBin = () => effectiveStr("HANOMAN_SSH_BIN") ?? "ssh";
 function consoleArgv(t) {
   return [
@@ -80575,9 +81330,9 @@ function consoleArgv(t) {
   ];
 }
 function askpassScript() {
-  const dir2 = mkdtempSync4(join44(tmpdir7(), "hanoman-askpass-"));
-  const path = join44(dir2, "askpass.sh");
-  writeFileSync19(path, `#!/bin/sh
+  const dir2 = mkdtempSync4(join48(tmpdir7(), "hanoman-askpass-"));
+  const path = join48(dir2, "askpass.sh");
+  writeFileSync21(path, `#!/bin/sh
 printf '%s' "$HANOMAN_SSH_PASSWORD"
 `, { mode: 448 });
   return path;
@@ -80610,14 +81365,14 @@ function sshExec(t, remoteCmd, opts2 = {}) {
     SSH_ASKPASS_REQUIRE: "force",
     HANOMAN_SSH_PASSWORD: opts2.password
   } : process.env;
-  return new Promise((resolve25) => {
+  return new Promise((resolve26) => {
     const p3 = spawn6(sshBin(), args, { stdio: ["pipe", "pipe", "pipe"], env });
     let out4 = "";
     const timer11 = setTimeout(() => p3.kill("SIGKILL"), opts2.timeoutMs ?? 6e4);
     const done = (r) => {
       clearTimeout(timer11);
-      if (askpass) rmSync13(dirname17(askpass), { recursive: true, force: true });
-      resolve25(r);
+      if (askpass) rmSync15(dirname17(askpass), { recursive: true, force: true });
+      resolve26(r);
     };
     p3.stdout.on("data", (d) => {
       out4 += d;
@@ -80637,8 +81392,8 @@ function sshExec(t, remoteCmd, opts2 = {}) {
 // src/services/vps-audit.ts
 init_db();
 init_deps();
-import { existsSync as existsSync22, readFileSync as readFileSync22 } from "node:fs";
-import { join as join45 } from "node:path";
+import { existsSync as existsSync23, readFileSync as readFileSync25 } from "node:fs";
+import { join as join49 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 init_sync_notify();
 
@@ -80743,7 +81498,7 @@ var packagedScript = (f) => fileURLToPath5(new URL(`../scripts/vps/${f}`, import
 var moduleDir2 = () => fileURLToPath5(new URL(".", import.meta.url));
 var scriptPath = (f) => {
   const packed = packagedScript(f);
-  return existsSync22(packed) ? packed : join45(repoRoot(moduleDir2()), "server", "scripts", "vps", f);
+  return existsSync23(packed) ? packed : join49(repoRoot(moduleDir2()), "server", "scripts", "vps", f);
 };
 async function itemStatesOf(vpsId) {
   const rows = await prisma.vpsItemState.findMany({ where: { vpsId } });
@@ -80753,7 +81508,7 @@ async function runAudit(v) {
   const r = await sshExec(
     target2(v),
     "sudo -n bash -s",
-    { stdin: readFileSync22(scriptPath("audit.sh"), "utf8"), timeoutMs: 6e4 }
+    { stdin: readFileSync25(scriptPath("audit.sh"), "utf8"), timeoutMs: 6e4 }
   );
   const audit = parseAudit(r.out);
   if (r.code !== 0 || audit.length === 0) return { ok: false, out: r.out };
@@ -80833,7 +81588,7 @@ function parseProvisionSteps(out4) {
     return m ? [{ item: m[1], status: m[2], detail: (m[3] ?? "").trim() }] : [];
   });
 }
-var script = () => readFileSync23(scriptPath("provision.sh"), "utf8");
+var script = () => readFileSync26(scriptPath("provision.sh"), "utf8");
 async function probeComponents(v) {
   const r = await sshExec(v, "env MODE=probe bash -s", { stdin: script(), timeoutMs: PROBE_TIMEOUT_MS });
   const components2 = parseComponents(r.out);
@@ -80860,7 +81615,7 @@ async function readSetupToken(v, home3 = "/var/lib/hanoman") {
 }
 
 // src/services/vps-remediate.ts
-import { readFileSync as readFileSync24 } from "node:fs";
+import { readFileSync as readFileSync27 } from "node:fs";
 function parseSteps2(out4) {
   return out4.split("\n").flatMap((line) => {
     const m = line.match(/^STEP (\S+) (would|ok|fail)(?: (.*))?$/);
@@ -80871,7 +81626,7 @@ async function remediate(v, items, dryRun) {
   const r = await sshExec(
     v,
     `sudo -n env ITEMS=${items.join(",")} SSH_PORT=${v.port} DRY_RUN=${dryRun ? "1" : ""} bash -s`,
-    { stdin: readFileSync24(scriptPath("remediate.sh"), "utf8"), timeoutMs: 3e5 }
+    { stdin: readFileSync27(scriptPath("remediate.sh"), "utf8"), timeoutMs: 3e5 }
   );
   return { ok: r.code === 0, steps: parseSteps2(r.out), out: r.out };
 }
@@ -80987,39 +81742,39 @@ async function listVpsWithScore() {
 // src/services/vps-key.ts
 init_src2();
 init_config2();
-import { execFileSync as execFileSync10 } from "node:child_process";
-import { chmodSync as chmodSync10, copyFileSync, existsSync as existsSync23, mkdirSync as mkdirSync19, readFileSync as readFileSync25, unlinkSync as unlinkSync5 } from "node:fs";
-import { homedir as homedir11 } from "node:os";
-import { join as join46 } from "node:path";
+import { execFileSync as execFileSync11 } from "node:child_process";
+import { chmodSync as chmodSync12, copyFileSync, existsSync as existsSync24, mkdirSync as mkdirSync21, readFileSync as readFileSync28, unlinkSync as unlinkSync5 } from "node:fs";
+import { homedir as homedir13 } from "node:os";
+import { join as join50 } from "node:path";
 var keyDir = () => effectiveStr("HANOMAN_SSH_KEY_DIR") ?? resolveDataDirs().sshKeys;
 var KEY_FILES = ["id_ed25519", "id_ed25519.pub"];
 function adoptLegacyKey(dir2) {
   if (effectiveStr("HANOMAN_SSH_KEY_DIR")) return;
-  const legacy = join46(homedir11(), ".hanoman");
+  const legacy = join50(homedir13(), ".hanoman");
   if (legacy === dir2) return;
-  if (!KEY_FILES.every((f) => existsSync23(join46(legacy, f)))) return;
-  mkdirSync19(dir2, { recursive: true, mode: 448 });
+  if (!KEY_FILES.every((f) => existsSync24(join50(legacy, f)))) return;
+  mkdirSync21(dir2, { recursive: true, mode: 448 });
   for (const f of KEY_FILES) {
-    copyFileSync(join46(legacy, f), join46(dir2, f));
-    chmodSync10(join46(dir2, f), 384);
+    copyFileSync(join50(legacy, f), join50(dir2, f));
+    chmodSync12(join50(dir2, f), 384);
   }
-  for (const f of KEY_FILES) unlinkSync5(join46(legacy, f));
+  for (const f of KEY_FILES) unlinkSync5(join50(legacy, f));
   console.log(`vps: key SSH dipindah dari ${legacy} ke ${dir2} (SPEC-846 \u2014 satu batas backup)`);
 }
 function ensureHanomanKey() {
   const dir2 = keyDir();
-  const privPath = join46(dir2, KEY_FILES[0]);
+  const privPath = join50(dir2, KEY_FILES[0]);
   const pubPath = `${privPath}.pub`;
-  if (!existsSync23(privPath)) adoptLegacyKey(dir2);
-  if (!existsSync23(privPath)) {
-    mkdirSync19(dir2, { recursive: true, mode: 448 });
-    execFileSync10(
+  if (!existsSync24(privPath)) adoptLegacyKey(dir2);
+  if (!existsSync24(privPath)) {
+    mkdirSync21(dir2, { recursive: true, mode: 448 });
+    execFileSync11(
       "ssh-keygen",
       ["-t", "ed25519", "-N", "", "-C", "hanoman", "-f", privPath],
       { stdio: ["ignore", "ignore", "pipe"] }
     );
   }
-  return { privPath, pubPath, pub: readFileSync25(pubPath, "utf8").trim() };
+  return { privPath, pubPath, pub: readFileSync28(pubPath, "utf8").trim() };
 }
 
 // src/services/vps-bootstrap.ts
@@ -81039,7 +81794,7 @@ init_session_launch_gate();
 init_settings3();
 init_sync_notify();
 function keyMissing(v) {
-  return !!v.keyPath && !existsSync24(v.keyPath);
+  return !!v.keyPath && !existsSync25(v.keyPath);
 }
 async function vps_default(app3) {
   app3.get("/vps", async () => listVpsWithScore());
@@ -81267,7 +82022,7 @@ async function vps_default(app3) {
     const r = await sshExec(
       v,
       `sudo -n env SSH_PORT=${v.port} SSH_USER=${v.user} bash -s`,
-      { stdin: readFileSync26(scriptPath("harden.sh"), "utf8"), timeoutMs: 3e5 }
+      { stdin: readFileSync29(scriptPath("harden.sh"), "utf8"), timeoutMs: 3e5 }
     );
     if (r.code !== 0) return reply.code(502).send({ error: "harden gagal lewat ssh", transcript: r.out });
     const verify = await sshExec(v, "true", { timeoutMs: 3e4 });
@@ -81292,7 +82047,7 @@ async function vps_default(app3) {
     const v = await prisma.vps.findUnique({ where: { id: req.params.id } });
     if (!v) return reply.code(404).send({ error: "not found" });
     if (keyMissing(v)) return reply.code(409).send({ error: "key VPS tidak ada di mesin ini", keyMissing: true });
-    const s2 = await createOperatorSession(`vps-console:${v.id}`, homedir12(), { id: `vpsc-${v.id}`, command: consoleArgv(v) });
+    const s2 = await createOperatorSession(`vps-console:${v.id}`, homedir14(), { id: `vpsc-${v.id}`, command: consoleArgv(v) });
     return reply.code(201).send({ id: s2.id });
   });
   app3.post("/vps/:id/session", async (req, reply) => {
@@ -81301,7 +82056,7 @@ async function vps_default(app3) {
     if (keyMissing(v)) return reply.code(409).send({ error: "key VPS tidak ada di mesin ini", keyMissing: true });
     const checks = v.audit ?? [];
     const { model, effort: effort2 } = await sessionModel();
-    const s2 = await createAgentSession(`vps:${v.id}`, homedir12(), {
+    const s2 = await createAgentSession(`vps:${v.id}`, homedir14(), {
       model,
       effort: effort2,
       prompt: [
@@ -81320,10 +82075,213 @@ async function vps_default(app3) {
 init_limits();
 init_codex_limits();
 init_antigravity_limits();
+
+// src/services/runtime-accounts/limits.ts
+init_config2();
+init_limits();
+init_codex_limits();
+init_antigravity_limits();
+init_keychain();
+import { readFileSync as readFileSync30 } from "node:fs";
+import { join as join51 } from "node:path";
+var TTL_MS5 = 3e4;
+var UNAVAILABLE4 = { status: "unavailable", windows: [], fetchedAt: null };
+function readClaudeAccountToken(homeDir, platform2 = process.platform) {
+  if (platform2 === "darwin") {
+    const t = readClaudeKeychainToken(claudeKeychainService(homeDir));
+    if (t) return t;
+  }
+  try {
+    const t = JSON.parse(readFileSync30(join51(homeDir, ".credentials.json"), "utf8"))?.claudeAiOauth?.accessToken;
+    return typeof t === "string" && t ? t : null;
+  } catch {
+    return null;
+  }
+}
+var antigravityAccount = async (_row) => UNAVAILABLE4;
+var antigravityBuiltin = () => getAntigravityLimits();
+function setAntigravityAccountLimits(account, builtin) {
+  antigravityAccount = account;
+  if (builtin) antigravityBuiltin = builtin;
+}
+var prodDeps4 = () => ({
+  now: Date.now,
+  fetchEnabled: effectiveStr("HANOMAN_ACCOUNT_LIMITS_FETCH") !== "0",
+  builtin: { claude: getLimits, codex: () => getCodexLimits(), antigravity: () => antigravityBuiltin() },
+  claudeToken: (h2) => readClaudeAccountToken(h2),
+  claudeWindows: (t) => fetchClaudeWindows(t),
+  codexLimits: (d) => getCodexLimits(d),
+  antigravity: (row) => antigravityAccount(row)
+});
+var cache3 = /* @__PURE__ */ new Map();
+async function cached3(key, now, load2) {
+  const e = cache3.get(key);
+  if (e && now < e.freshUntil) return e.last;
+  const dto = await load2();
+  if (dto.status !== "unavailable") {
+    cache3.set(key, { last: dto, freshUntil: now + TTL_MS5 });
+    return dto;
+  }
+  return e ? { ...e.last, status: "stale" } : dto;
+}
+async function loadRow(row, d) {
+  if (row.runtime === "claude") {
+    const tok = d.claudeToken(row.homeDir);
+    if (!tok) return UNAVAILABLE4;
+    const windows = await d.claudeWindows(tok);
+    return windows ? { status: "ok", windows, fetchedAt: new Date(d.now()).toISOString() } : UNAVAILABLE4;
+  }
+  if (row.runtime === "codex") {
+    const c = await d.codexLimits(join51(row.homeDir, "sessions"));
+    return { status: c.status, windows: c.windows, fetchedAt: c.fetchedAt };
+  }
+  return d.antigravity(row);
+}
+async function getAccountLimits(deps = prodDeps4()) {
+  const rows = new Map(accountSnapshot().rows.map((r) => [r.id, r]));
+  return Promise.all(listAccountDTOs().map(async (a) => {
+    let limits2;
+    const row = rows.get(a.id);
+    if (a.builtin) {
+      const b = await deps.builtin[a.runtime]();
+      limits2 = { status: b.status, windows: b.windows, fetchedAt: b.fetchedAt };
+    } else if (!deps.fetchEnabled || !row) limits2 = UNAVAILABLE4;
+    else limits2 = await cached3(a.id, deps.now(), () => loadRow(row, deps));
+    return { accountId: a.id, runtime: a.runtime, label: a.label, builtin: a.builtin, isDefault: a.isDefault, loginStatus: a.status, limits: limits2 };
+  }));
+}
+
+// src/routes/limits.ts
 async function limits(app3) {
   app3.get("/limits", async () => getLimits());
   app3.get("/limits/codex", async () => getCodexLimits());
   app3.get("/limits/antigravity", async () => getAntigravityLimits());
+  app3.get("/limits/accounts", async () => getAccountLimits());
+}
+
+// src/routes/runtime-accounts.ts
+init_src();
+init_pty();
+init_session_sandbox();
+
+// src/services/runtime-accounts/login.ts
+init_src();
+init_pty();
+init_session_launch_gate();
+import { homedir as homedir15 } from "node:os";
+var LOGIN_PREFIX = "acct-login-";
+var loginSessionId = (accountId) => `${LOGIN_PREFIX}${accountId.replace(/[^a-z0-9]/gi, "-")}`;
+function accountIdForLoginSession(sessionId2) {
+  if (!sessionId2.startsWith(LOGIN_PREFIX)) return null;
+  const ids = [...zAgent.options.map((r) => builtinAccountId(r)), ...accountSnapshot().rows.map((r) => r.id)];
+  return ids.find((id2) => loginSessionId(id2) === sessionId2) ?? null;
+}
+function loginArgv(runtime, opts2) {
+  if (runtime === "claude") return [agentBin("claude"), "auth", "login", "--claudeai"];
+  if (runtime === "codex") return [agentBin("codex"), "login", ...opts2.deviceAuth ? ["--device-auth"] : []];
+  return antigravityLogin(opts2);
+}
+var antigravityLogin = (_opts) => {
+  throw new AccountError("account-not-found", 404, "login Antigravity belum didukung");
+};
+function setAntigravityLogin(fn) {
+  antigravityLogin = fn;
+}
+var beforeLogin = (_runtime, _accountId) => {
+};
+function setBeforeLogin(fn) {
+  beforeLogin = fn;
+}
+async function openLoginSession(accountId, opts2) {
+  const builtin = runtimeOfBuiltin(accountId);
+  let runtime, homeDir = null, env = {};
+  if (builtin) runtime = builtin;
+  else {
+    const row = accountSnapshot().rows.find((r) => r.id === accountId);
+    if (!row) throw new AccountError("account-not-found", 404, `akun ${accountId} tak ditemukan`);
+    runtime = row.runtime;
+    homeDir = row.homeDir;
+    prepareAccountHome(runtime, homeDir);
+    env = accountEnv(runtime, homeDir).env;
+  }
+  const argv = loginArgv(runtime, opts2);
+  beforeLogin(runtime, accountId);
+  const s2 = await createOperatorSession(`account:${accountId}`, homeDir ?? homedir15(), {
+    id: loginSessionId(accountId),
+    command: argv,
+    env
+  });
+  return { id: s2.id };
+}
+
+// src/routes/runtime-accounts.ts
+var fail2 = (reply, e) => {
+  if (e instanceof AccountError) return reply.code(e.status).send({ error: e.code, message: e.message });
+  throw e;
+};
+var liveAccountIds = () => listSessions().filter((s2) => !s2.exited && s2.accountId).map((s2) => s2.accountId);
+var builtinRefused = (reply) => reply.code(400).send({ error: "akun bawaan tak bisa diubah atau dihapus" });
+var listBody = () => ({ accounts: listAccountDTOs(), sandbox: sessionSandboxOn() });
+async function runtime_accounts_default(app3) {
+  app3.get("/runtime-accounts", async () => listBody());
+  app3.post("/runtime-accounts", async (req, reply) => {
+    const p3 = zRuntimeAccountCreate.safeParse(req.body);
+    if (!p3.success) return reply.code(400).send({ error: "invalid body" });
+    try {
+      return reply.code(201).send(await createAccount(p3.data.runtime, p3.data.label));
+    } catch (e) {
+      return fail2(reply, e);
+    }
+  });
+  app3.patch("/runtime-accounts/:id", async (req, reply) => {
+    const { id: id2 } = req.params;
+    if (isBuiltinAccountId(id2)) return builtinRefused(reply);
+    const p3 = zRuntimeAccountPatch.safeParse(req.body);
+    if (!p3.success) return reply.code(400).send({ error: "invalid body" });
+    try {
+      return await renameAccount(id2, p3.data.label);
+    } catch (e) {
+      return fail2(reply, e);
+    }
+  });
+  app3.delete("/runtime-accounts/:id", async (req, reply) => {
+    const { id: id2 } = req.params;
+    if (isBuiltinAccountId(id2)) return builtinRefused(reply);
+    try {
+      await deleteAccount(id2, liveAccountIds);
+      return reply.code(204).send();
+    } catch (e) {
+      return fail2(reply, e);
+    }
+  });
+  app3.put("/runtime-accounts/default", async (req, reply) => {
+    const p3 = zRuntimeAccountDefault.safeParse(req.body);
+    if (!p3.success) return reply.code(400).send({ error: "invalid body" });
+    try {
+      await setDefaultAccount(p3.data.runtime, p3.data.accountId, sessionSandboxOn());
+      return listBody();
+    } catch (e) {
+      return fail2(reply, e);
+    }
+  });
+  app3.post("/runtime-accounts/:id/login", async (req, reply) => {
+    const { id: id2 } = req.params;
+    const p3 = zRuntimeAccountLogin.safeParse(req.body ?? {});
+    if (!p3.success) return reply.code(400).send({ error: "invalid body" });
+    try {
+      return reply.code(201).send(await openLoginSession(id2, p3.data));
+    } catch (e) {
+      return fail2(reply, e);
+    }
+  });
+  app3.post("/runtime-accounts/:id/check", async (req, reply) => {
+    const { id: id2 } = req.params;
+    try {
+      return await checkAccount(id2);
+    } catch (e) {
+      return fail2(reply, e);
+    }
+  });
 }
 
 // src/routes/codex.ts
@@ -81336,10 +82294,10 @@ async function codex(app3) {
 init_src2();
 init_antigravity_runtime();
 init_session_sandbox();
-import { execFile as execFile18 } from "node:child_process";
+import { execFile as execFile19 } from "node:child_process";
 import { promisify as promisify18 } from "node:util";
-var run4 = promisify18(execFile18);
-var TTL_MS6 = 5 * 6e4;
+var run4 = promisify18(execFile19);
+var TTL_MS7 = 5 * 6e4;
 var unavailable = (error) => ({ version: null, error });
 var CHANGED2 = "Konfigurasi runtime berubah; periksa versi kembali.";
 function parseAntigravityVersion(output) {
@@ -81381,22 +82339,22 @@ function createAntigravityVersionService(deps = {}) {
   const now = deps.now ?? Date.now;
   const probe = deps.probe ?? probeAntigravityVersion;
   let currentKey, generation2 = 0;
-  let cache6;
+  let cache7;
   let pending2;
   return () => {
     const nextKey = key();
     if (nextKey !== currentKey) {
       currentKey = nextKey;
       generation2++;
-      cache6 = void 0;
+      cache7 = void 0;
       pending2 = void 0;
     }
-    if (cache6 && now() - cache6.at < TTL_MS6) return Promise.resolve(cache6.info);
+    if (cache7 && now() - cache7.at < TTL_MS7) return Promise.resolve(cache7.info);
     if (pending2) return pending2;
     const startedGeneration = generation2;
     const request = probe().catch(() => unavailable("Versi Antigravity tidak dapat diperiksa.")).then((info) => {
       if (startedGeneration !== generation2 || key() !== nextKey) return unavailable(CHANGED2);
-      cache6 = { at: now(), info };
+      cache7 = { at: now(), info };
       return info;
     }).finally(() => {
       if (pending2 === request) pending2 = void 0;
@@ -81415,9 +82373,9 @@ async function antigravity(app3) {
 // src/services/model-catalog.ts
 init_src2();
 init_src();
-import { randomUUID as randomUUID14 } from "node:crypto";
+import { randomUUID as randomUUID15 } from "node:crypto";
 import { readFile as readFile9, writeFile as writeFile6, rename as rename5, mkdir as mkdir9, rm as rm9 } from "node:fs/promises";
-import { dirname as dirname18, join as join48 } from "node:path";
+import { dirname as dirname18, join as join53 } from "node:path";
 
 // src/services/model-catalog-parser.ts
 init_zod();
@@ -81524,7 +82482,7 @@ init_session_sandbox();
 import { spawn as spawn7 } from "node:child_process";
 import { mkdtemp as mkdtemp2, rm as rm8 } from "node:fs/promises";
 import { tmpdir as tmpdir8 } from "node:os";
-import { join as join47 } from "node:path";
+import { join as join52 } from "node:path";
 var MAX_BYTES = 4 * 1024 * 1024;
 var TIMEOUT_MS = 2e4;
 var quote3 = (s2) => "'" + s2.replaceAll("'", "'\\''") + "'";
@@ -81559,7 +82517,7 @@ function catalogCommand(agent, cwd, env) {
   return { bin: sandbox[0], args: sandbox.slice(1) };
 }
 function runCatalogCommand(command, agent, cwd, env, timeoutMs = TIMEOUT_MS) {
-  return new Promise((resolve25, reject2) => {
+  return new Promise((resolve26, reject2) => {
     assertAntigravityLaunch(agent, void 0, env);
     const child = spawn7(command.bin, command.args, { cwd, env: agentEnvironment(agent, env), stdio: ["pipe", "pipe", "pipe"] });
     let buffer = "", bytes = 0, settled = false;
@@ -81575,7 +82533,7 @@ function runCatalogCommand(command, agent, cwd, env, timeoutMs = TIMEOUT_MS) {
         killTimer.unref();
       }
       if (error) reject2(error);
-      else resolve25(result);
+      else resolve26(result);
     };
     const timer11 = setTimeout(() => finish(new Error("Pemeriksaan model melewati batas waktu")), timeoutMs);
     child.on("error", () => finish(new Error("CLI model tidak dapat dijalankan")));
@@ -81623,7 +82581,7 @@ function runCatalogCommand(command, agent, cwd, env, timeoutMs = TIMEOUT_MS) {
 }
 async function probeModelCatalog(agent) {
   assertAntigravityLaunch(agent);
-  const cwd = await mkdtemp2(join47(tmpdir8(), "hanoman-models-"));
+  const cwd = await mkdtemp2(join52(tmpdir8(), "hanoman-models-"));
   const env = agentEnvironment(agent, process.env);
   for (const key of ["HANOMAN_CLAUDE_BIN", "HANOMAN_CODEX_BIN", "HANOMAN_PODMAN_BIN", "HANOMAN_ANTIGRAVITY_BIN"]) {
     const value = effectiveStr(key);
@@ -81670,9 +82628,9 @@ function createModelCatalogService(deps) {
       if (!initialized) {
         initialized = true;
         try {
-          const cached3 = parseCachedCatalog(await deps.read());
+          const cached4 = parseCachedCatalog(await deps.read());
           if (!current()) return state;
-          state = cached3;
+          state = cached4;
           for (const agent of ["claude", "codex", "antigravity"]) {
             if (state.providers[agent].updatedAt) state.providers[agent].source = "cache";
           }
@@ -81726,7 +82684,7 @@ function createModelCatalogService(deps) {
 async function writeModelCatalogCache(file, catalog, current = () => true) {
   const sanitized = parseCachedCatalog(catalog);
   await mkdir9(dirname18(file), { recursive: true });
-  const temp = `${file}.${process.pid}.${randomUUID14()}.tmp`;
+  const temp = `${file}.${process.pid}.${randomUUID15()}.tmp`;
   try {
     await writeFile6(temp, JSON.stringify(sanitized), { mode: 384, flag: "wx" });
     if (current()) await rename5(temp, file);
@@ -81734,7 +82692,7 @@ async function writeModelCatalogCache(file, catalog, current = () => true) {
     await rm9(temp, { force: true });
   }
 }
-var cacheFile = () => join48(resolveHome(), "model-catalog.json");
+var cacheFile = () => join53(resolveHome(), "model-catalog.json");
 var modelCatalogService = createModelCatalogService({
   probe: probeModelCatalog,
   key: catalogProbeKey,
@@ -81919,8 +82877,8 @@ function tokenStats(now, invs, landedToday) {
   const today = invs.filter((i) => i.startedAt.getTime() >= t0);
   const input = today.reduce((n2, i) => n2 + (i.inputTokens ?? 0), 0);
   const output = today.reduce((n2, i) => n2 + (i.outputTokens ?? 0), 0);
-  const cached3 = today.reduce((n2, i) => n2 + (i.cachedTokens ?? 0), 0);
-  const total = input + output + cached3;
+  const cached4 = today.reduce((n2, i) => n2 + (i.cachedTokens ?? 0), 0);
+  const total = input + output + cached4;
   const byAgent = /* @__PURE__ */ new Map();
   for (const i of today) byAgent.set(i.agentName, (byAgent.get(i.agentName) ?? 0) + invTotal(i));
   let topAgent = null;
@@ -81928,9 +82886,9 @@ function tokenStats(now, invs, landedToday) {
   return {
     input,
     output,
-    cached: cached3,
+    cached: cached4,
     total,
-    cacheHitPct: input + cached3 > 0 ? Math.round(cached3 / (input + cached3) * 100) : null,
+    cacheHitPct: input + cached4 > 0 ? Math.round(cached4 / (input + cached4) * 100) : null,
     perLanded: landedToday && landedToday > 0 ? Math.round(total / landedToday) : null,
     topAgent,
     yesterdayTotal: invs.filter((i) => i.startedAt.getTime() >= y0 && i.startedAt.getTime() < t0).reduce((n2, i) => n2 + invTotal(i), 0)
@@ -82923,8 +83881,8 @@ init_db();
 init_pty();
 init_config5();
 init_inbox();
-import { mkdirSync as mkdirSync20, writeFileSync as writeFileSync20 } from "node:fs";
-import { join as join49 } from "node:path";
+import { mkdirSync as mkdirSync22, writeFileSync as writeFileSync22 } from "node:fs";
+import { join as join54 } from "node:path";
 init_human_input();
 var idle = /* @__PURE__ */ new Set();
 var sending = /* @__PURE__ */ new Set();
@@ -82935,7 +83893,7 @@ function isLeadIdle(id2) {
   return idle.has(id2);
 }
 var HUMAN_QUIET_MS = 12e4;
-var batchDir = (projectId) => join49(resolveHome(), "lead-batches", projectId);
+var batchDir = (projectId) => join54(resolveHome(), "lead-batches", projectId);
 var briefFn = async () => "(situasi tak tersedia \u2014 panggil /brief)";
 function setBriefBuilder(fn) {
   briefFn = fn;
@@ -82955,9 +83913,9 @@ var prodCourierDeps = {
   brief: (p3) => briefFn(p3).catch(() => "(situasi tak tersedia \u2014 panggil /brief)"),
   write: (projectId, text2) => {
     const dir2 = batchDir(projectId);
-    mkdirSync20(dir2, { recursive: true });
-    const file = join49(dir2, `${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.md`);
-    writeFileSync20(file, text2);
+    mkdirSync22(dir2, { recursive: true });
+    const file = join54(dir2, `${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.md`);
+    writeFileSync22(file, text2);
     return file;
   },
   send: (id2, line) => sendToPane(id2, line),
@@ -83327,6 +84285,9 @@ var GROUPS = [
   // ADR-0224 · limit Antigravity — grup TERPISAH. Panggilan jaringan ber-cache 60 dtk di service, dan
   // nol panggilan saat token agy kedaluwarsa; dedup signature membuat frame lahir saat isinya berubah.
   { everyTicks: 30, last: "", build: async () => ({ t: "antigravityLimits", limits: await getAntigravityLimits() }) },
+  // ADR-0234 · limit per akun runtime — grup TERPISAH. Akun bawaan memakai cache service lama; akun
+  // terdaftar ber-cache 30 dtk per akun. Dedup signature: frame lahir saat isinya berubah.
+  { everyTicks: 30, last: "", build: async () => ({ t: "accountLimits", accounts: await getAccountLimits() }) },
   // SPEC-214 · deteksi update jarang berubah; recompute tiap 300 dtk, dedup signature → siar hanya
   // saat status berubah. getUpdateStatus cache 15s + fetch ter-gate (server.ts) → attach tak menahan.
   { everyTicks: 300, last: "", build: async () => ({ t: "update", update: await getUpdateStatus() }) },
@@ -83755,7 +84716,7 @@ init_src();
 init_db();
 import { gunzipSync, gzipSync } from "node:zlib";
 import { mkdir as mkdir10, rename as rename6, writeFile as writeFile7 } from "node:fs/promises";
-import { join as join50 } from "node:path";
+import { join as join55 } from "node:path";
 
 // src/services/device-auth.ts
 function bearerToken2(req) {
@@ -84013,9 +84974,9 @@ async function sync_default(app3) {
       const deviceId = req.device.id;
       const withTranscriptKey = await Promise.all(parsed.data.entries.map(async (e) => {
         if (!e.transcript) return e;
-        const dir2 = join50(resolveDataDirs().home, "remote-transcripts", deviceId);
+        const dir2 = join55(resolveDataDirs().home, "remote-transcripts", deviceId);
         await mkdir10(dir2, { recursive: true, mode: 448 });
-        const final = join50(dir2, `${e.seq}.txt`);
+        const final = join55(dir2, `${e.seq}.txt`);
         const tmp = `${final}.tmp`;
         await writeFile7(tmp, e.transcript, { encoding: "utf8", mode: 384 });
         await rename6(tmp, final);
@@ -84570,9 +85531,9 @@ init_db();
 init_db();
 init_uploads();
 init_src();
-import { createHash as createHash21, randomBytes as randomBytes7 } from "node:crypto";
+import { createHash as createHash22, randomBytes as randomBytes7 } from "node:crypto";
 function hashAccessKey(key) {
-  return createHash21("sha256").update(key).digest("hex");
+  return createHash22("sha256").update(key).digest("hex");
 }
 function generateAccessKey() {
   const key = "hnm_tkt_" + randomBytes7(24).toString("hex");
@@ -85625,7 +86586,7 @@ init_skill_library2();
 init_skill_inject();
 init_local_binding();
 import { basename as basename11 } from "node:path";
-var fail2 = (reply, e) => {
+var fail3 = (reply, e) => {
   if (e instanceof SkillError) return reply.code(e.status).send({ error: e.message });
   throw e;
 };
@@ -85651,7 +86612,7 @@ async function skills(app3) {
     try {
       return skillTree((await resolveSkill(req.params.key)).dir);
     } catch (e) {
-      return fail2(reply, e);
+      return fail3(reply, e);
     }
   });
   app3.get("/skills/:key/file", async (req, reply) => {
@@ -85659,7 +86620,7 @@ async function skills(app3) {
       const s2 = await resolveSkill(req.params.key);
       return readSkillFile(s2.dir, String(req.query.path ?? ""));
     } catch (e) {
-      return fail2(reply, e);
+      return fail3(reply, e);
     }
   });
   app3.put("/skills/:key/file", async (req, reply) => {
@@ -85670,7 +86631,7 @@ async function skills(app3) {
       const base3 = typeof b.baseHash === "string" ? b.baseHash : null;
       return writeSkillFile(s2.dir, String(req.query.path ?? ""), b.content, base3);
     } catch (e) {
-      return fail2(reply, e);
+      return fail3(reply, e);
     }
   });
   app3.post("/skills/:key/entry", async (req, reply) => {
@@ -85681,7 +86642,7 @@ async function skills(app3) {
       createSkillEntry(s2.dir, b.path, b.kind);
       return reply.code(201).send({ ok: true });
     } catch (e) {
-      return fail2(reply, e);
+      return fail3(reply, e);
     }
   });
   app3.delete("/skills/:key/entry", async (req, reply) => {
@@ -85690,7 +86651,7 @@ async function skills(app3) {
       deleteSkillEntry(s2.dir, String(req.query.path ?? ""));
       return reply.code(204).send();
     } catch (e) {
-      return fail2(reply, e);
+      return fail3(reply, e);
     }
   });
   app3.post("/skills", async (req, reply) => {
@@ -85702,7 +86663,7 @@ async function skills(app3) {
       await releaseInjected(layer, b.projectId, dir2);
       return reply.code(201).send(await resolveSkill(created(layer, b.source, b.projectId, dir2)));
     } catch (e) {
-      return fail2(reply, e);
+      return fail3(reply, e);
     }
   });
   app3.post("/skills/:key/fork", async (req, reply) => {
@@ -85714,7 +86675,7 @@ async function skills(app3) {
       await releaseInjected(layer, b?.projectId, dir2);
       return reply.code(201).send(await resolveSkill(created(layer, b?.source, b?.projectId, dir2)));
     } catch (e) {
-      return fail2(reply, e);
+      return fail3(reply, e);
     }
   });
   app3.delete("/skills/:key", async (req, reply) => {
@@ -85722,7 +86683,7 @@ async function skills(app3) {
       deleteSkillDir((await editable(req.params.key)).dir);
       return reply.code(204).send();
     } catch (e) {
-      return fail2(reply, e);
+      return fail3(reply, e);
     }
   });
 }
@@ -86078,9 +87039,9 @@ async function qa(app3) {
       const keys2 = Object.keys(p3).filter((k) => p3[k] !== void 0);
       if (!(keys2.length === 1 && keys2[0] === "status" && p3.status !== "closed")) return locked(reply);
     }
-    const nextStatus = p3.status ?? existing.status;
+    const nextStatus2 = p3.status ?? existing.status;
     const nextVerdict = p3.verdict === void 0 ? existing.verdict : p3.verdict;
-    if ((nextStatus === "submitted" || nextStatus === "closed") && !nextVerdict)
+    if ((nextStatus2 === "submitted" || nextStatus2 === "closed") && !nextVerdict)
       return reply.code(400).send({ error: "verdict wajib diisi sebelum laporan di-submit atau di-close" });
     await prisma.qaReport.update({ where: { id: rid }, data: {
       title: p3.title,
@@ -86618,25 +87579,25 @@ function qaTemplateWorkbook() {
   });
 }
 var norm3 = (s2) => s2.trim().toLowerCase();
-function fail3(sheet, row, message) {
+function fail4(sheet, row, message) {
   throw new XlsxError(`${sheet}, baris ${row}: ${message}`);
 }
 var choice = (s2, allowed, sheet, row) => {
   const v = allowed.find((a) => norm3(a) === norm3(s2));
-  return v ?? fail3(sheet, row, `nilai "${s2}" tidak dikenal; pilih ${allowed.join(", ")}`);
+  return v ?? fail4(sheet, row, `nilai "${s2}" tidak dikenal; pilih ${allowed.join(", ")}`);
 };
 function parseQaWorkbook(buf) {
   const read2 = (sheet) => readXlsx(buf, { sheet, required: true });
   const summary = read2("Ringkasan");
-  if (norm3(summary[0]?.[0] ?? "") !== "kolom" || norm3(summary[0]?.[1] ?? "") !== "nilai") fail3("Ringkasan", 1, "butuh kolom Kolom dan Nilai");
+  if (norm3(summary[0]?.[0] ?? "") !== "kolom" || norm3(summary[0]?.[1] ?? "") !== "nilai") fail4("Ringkasan", 1, "butuh kolom Kolom dan Nilai");
   const fields = new Map(summary.slice(1).map((r) => [norm3(r[0] ?? ""), r[1] ?? ""]));
   const val = (k) => fields.get(norm3(k)) ?? "";
   const rowOf = (k) => Math.max(1, summary.findIndex((r) => norm3(r[0] ?? "") === norm3(k)) + 1);
-  if (!val("Judul").trim()) fail3("Ringkasan", rowOf("Judul"), "Judul wajib diisi");
+  if (!val("Judul").trim()) fail4("Ringkasan", rowOf("Judul"), "Judul wajib diisi");
   const environment = /* @__PURE__ */ Object.create(null);
   for (const line of val("Lingkungan").split(/\r\n|\r|\n|;(?=\s*[^=:;\s]+\s*[=:])/).filter((l) => l.trim())) {
     const match = /^\s*([^=:]+)[=:]\s*(.*)$/.exec(line);
-    if (!match) fail3("Ringkasan", rowOf("Lingkungan"), "Lingkungan: gunakan kunci=nilai, satu per baris");
+    if (!match) fail4("Ringkasan", rowOf("Lingkungan"), "Lingkungan: gunakan kunci=nilai, satu per baris");
     environment[match[1].trim()] = match[2];
   }
   const base3 = zCreateQaReport.safeParse({
@@ -86648,7 +87609,7 @@ function parseQaWorkbook(buf) {
     environment,
     verdict: val("Keputusan") ? choice(val("Keputusan"), QA_VERDICTS, "Ringkasan", rowOf("Keputusan")) : null
   });
-  if (!base3.success) fail3("Ringkasan", 1, base3.error.issues.map((e) => `${e.path.join(".")}: ${e.message}`).join("; "));
+  if (!base3.success) fail4("Ringkasan", 1, base3.error.issues.map((e) => `${e.path.join(".")}: ${e.message}`).join("; "));
   const parsed = {
     ...base3.data,
     reportId: val("Ref") || null,
@@ -86666,13 +87627,13 @@ function parseQaWorkbook(buf) {
   }
   const rows = read2("Temuan");
   const headers = rows[0]?.map(norm3) ?? [];
-  for (const h2 of ["judul", "severity", "prioritas", "langkah", "expected", "actual"]) if (!headers.includes(h2)) fail3("Temuan", 1, `kolom ${h2} wajib ada`);
+  for (const h2 of ["judul", "severity", "prioritas", "langkah", "expected", "actual"]) if (!headers.includes(h2)) fail4("Temuan", 1, `kolom ${h2} wajib ada`);
   const getF = (r, k) => r[headers.indexOf(norm3(k))] ?? "";
   const findingRows = rows.slice(1).map((r, i) => ({ r, row: i + 2 })).filter(({ r }) => !r.every((v) => !v.trim()));
   const used = /* @__PURE__ */ new Map();
   const claim = (sheet, row, code) => {
-    if (norm3(code) === "laporan") fail3(sheet, row, 'Kode "Laporan" dicadangkan untuk lampiran laporan');
-    if (used.has(qaCodeKey(code))) fail3(sheet, row, `Kode ${code} dipakai ${used.get(qaCodeKey(code))}; kode harus unik`);
+    if (norm3(code) === "laporan") fail4(sheet, row, 'Kode "Laporan" dicadangkan untuk lampiran laporan');
+    if (used.has(qaCodeKey(code))) fail4(sheet, row, `Kode ${code} dipakai ${used.get(qaCodeKey(code))}; kode harus unik`);
     used.set(qaCodeKey(code), `${sheet}`);
   };
   for (const c of cases) if (c.code.trim()) claim("Test case", c.row, c.code.trim());
@@ -86690,10 +87651,10 @@ function parseQaWorkbook(buf) {
   for (const c of cases) {
     const customCode = c.code.trim() || null;
     const code = customCode ?? autoCode("TC-", caseCounter);
-    if (c.ref && refs2.has(c.ref)) fail3("Test case", c.row, "Ref berulang");
+    if (c.ref && refs2.has(c.ref)) fail4("Test case", c.row, "Ref berulang");
     if (c.ref) refs2.add(c.ref);
     const result = zCreateQaCase.safeParse({ title: c.title, steps: c.steps ?? "", expected: c.expected ?? "", actual: c.actual ?? "", status: c.status ?? "todo" });
-    if (!result.success) fail3("Test case", c.row, result.error.issues.map((e) => `${e.path}: ${e.message}`).join("; "));
+    if (!result.success) fail4("Test case", c.row, result.error.issues.map((e) => `${e.path}: ${e.message}`).join("; "));
     caseByKey.set(qaCodeKey(code), code);
     parsed.cases.push({ ...result.data, id: c.ref, code, customCode, attachments: [] });
   }
@@ -86704,11 +87665,11 @@ function parseQaWorkbook(buf) {
     const customCode = get("Kode").trim() || null;
     const code = customCode ?? autoCode("F-", findingCounter);
     const id2 = get("Ref") || null;
-    if (id2 && findingRefs.has(id2)) fail3("Temuan", row, "Ref berulang");
+    if (id2 && findingRefs.has(id2)) fail4("Temuan", row, "Ref berulang");
     if (id2) findingRefs.add(id2);
     const caseRef = get("Test case").trim();
     const caseCode = caseRef ? caseByKey.get(qaCodeKey(caseRef)) ?? null : null;
-    if (caseRef && !caseCode) fail3("Temuan", row, `Test case ${caseRef} tidak ditemukan`);
+    if (caseRef && !caseCode) fail4("Temuan", row, `Test case ${caseRef} tidak ditemukan`);
     const status2 = choice(get("Status") || "open", QA_FINDING_STATUSES, "Temuan", row);
     const result = zCreateQaFinding.safeParse({
       title: get("Judul"),
@@ -86720,17 +87681,17 @@ function parseQaWorkbook(buf) {
       actual: get("Actual"),
       status: status2 === "sent" ? "open" : status2
     });
-    if (!result.success) fail3("Temuan", row, result.error.issues.map((e) => `${e.path}: ${e.message}`).join("; "));
+    if (!result.success) fail4("Temuan", row, result.error.issues.map((e) => `${e.path}: ${e.message}`).join("; "));
     parsed.findings.push({ ...result.data, status: status2, id: id2, code, customCode, caseId: null, caseCode, attachments: [] });
   }
   const attachments = read2("Lampiran");
-  if (norm3(attachments[0]?.[0] ?? "") !== "pemilik" || norm3(attachments[0]?.[1] ?? "") !== "berkas") fail3("Lampiran", 1, "butuh kolom Pemilik dan Berkas");
+  if (norm3(attachments[0]?.[0] ?? "") !== "pemilik" || norm3(attachments[0]?.[1] ?? "") !== "berkas") fail4("Lampiran", 1, "butuh kolom Pemilik dan Berkas");
   for (let i = 1; i < attachments.length; i++) {
     const [owner = "", path = ""] = attachments[i];
     if (!owner.trim() && !path.trim()) continue;
-    if (!path.trim() || path.includes("\\") || path.startsWith("/") || path.split("/").some((p3) => p3 === ".." || p3 === "." || !p3)) fail3("Lampiran", i + 1, "Berkas harus nama berkas atau path relatif yang aman");
+    if (!path.trim() || path.includes("\\") || path.startsWith("/") || path.split("/").some((p3) => p3 === ".." || p3 === "." || !p3)) fail4("Lampiran", i + 1, "Berkas harus nama berkas atau path relatif yang aman");
     const target3 = norm3(owner) === "laporan" ? parsed.attachments : parsed.cases.find((c) => qaCodeKey(c.code) === qaCodeKey(owner))?.attachments ?? parsed.findings.find((f) => qaCodeKey(f.code) === qaCodeKey(owner))?.attachments;
-    if (!target3) fail3("Lampiran", i + 1, `Pemilik "${owner}" tidak ditemukan; gunakan Laporan atau Kode TC/F yang ada`);
+    if (!target3) fail4("Lampiran", i + 1, `Pemilik "${owner}" tidak ditemukan; gunakan Laporan atau Kode TC/F yang ada`);
     target3.push(path.trim());
   }
   return parsed;
@@ -87159,11 +88120,11 @@ var humanSize3 = (n2) => n2 >= 1024 * 1024 ? `${(n2 / 1024 / 1024).toFixed(1)} M
 var day3 = (iso5) => iso5.slice(0, 16).replace("T", " ");
 var T = (s2) => toWinAnsi(s2 ?? "");
 function writeQaPdf(d, images) {
-  return new Promise((resolve25, reject2) => {
+  return new Promise((resolve26, reject2) => {
     const doc = new PDFDocument2({ size: "A4", margin: M, bufferPages: true, info: { Title: T(`${d.code} ${d.title}`), Author: T(d.tester || "hanoman"), Subject: "Laporan QA" } });
     const chunks = [];
     doc.on("data", (c) => chunks.push(c));
-    doc.on("end", () => resolve25(Buffer.concat(chunks)));
+    doc.on("end", () => resolve26(Buffer.concat(chunks)));
     doc.on("error", reject2);
     const room = (h2) => {
       if (doc.y + h2 > BOTTOM) doc.addPage();
@@ -87418,9 +88379,9 @@ init_codex_trust();
 init_qa_attachment_transfer();
 init_uploads();
 init_ask_via2();
-import { createHash as createHash22 } from "node:crypto";
-import { execFileSync as execFileSync11 } from "node:child_process";
-import { join as join52 } from "node:path";
+import { createHash as createHash23 } from "node:crypto";
+import { execFileSync as execFileSync12 } from "node:child_process";
+import { join as join57 } from "node:path";
 var QaSessionError = class extends Error {
   constructor(code, message, needsBind = false) {
     super(message);
@@ -87428,7 +88389,7 @@ var QaSessionError = class extends Error {
     this.needsBind = needsBind;
   }
 };
-var qaSessionId = (findingId) => `qa-${createHash22("sha256").update(findingId).digest("hex").slice(0, 24)}`;
+var qaSessionId = (findingId) => `qa-${createHash23("sha256").update(findingId).digest("hex").slice(0, 24)}`;
 async function startQaFindingSession(d, fid) {
   const f = d.findings.find((x) => x.id === fid);
   if (!f) throw new QaSessionError(404, "temuan tidak ditemukan");
@@ -87447,14 +88408,14 @@ async function startQaFindingSession(d, fid) {
       const saved = await saveSessionUpload(id2, bytes, a.mimeType);
       files2.push(`${JSON.stringify(a.filename)} (${a.mimeType}): ${saved.path}`);
     }
-    const wt = join52(repoDir, ".worktrees", id2);
+    const wt = join57(repoDir, ".worktrees", id2);
     const branch = `qa/${id2.slice(3)}`;
     const reused = realGit.worktreeAlive(wt);
     try {
       if (!reused) {
         const base3 = realGit.revParse(repoDir, branch) ? branch : "HEAD";
         realGit.addWorktree(repoDir, wt, base3);
-        execFileSync11("git", ["checkout", "-B", branch], { cwd: wt, encoding: "utf8" });
+        execFileSync12("git", ["checkout", "-B", branch], { cwd: wt, encoding: "utf8" });
       }
     } catch (e) {
       throw new QaSessionError(422, `Gagal membuat worktree QA: ${e.message}`);
@@ -87728,7 +88689,7 @@ async function resolveGithubRepo(projectId) {
 
 // src/services/github-fetch.ts
 init_config2();
-import { execFile as execFile19 } from "node:child_process";
+import { execFile as execFile20 } from "node:child_process";
 var labelNames = (l) => (l ?? []).map((x) => typeof x === "string" ? x : x.name ?? "").filter(Boolean);
 var norm4 = (s2) => s2.toLowerCase() === "closed" ? "closed" : "open";
 function issueFromGh(raw) {
@@ -87768,15 +88729,15 @@ function issuesFromRest(raw) {
 }
 var GH_FIELDS = "number,title,body,author,labels,url,state,createdAt,updatedAt";
 var API2 = "https://api.github.com";
-var defaultRunGh = (args, env) => new Promise((resolve25, reject2) => {
-  execFile19(
+var defaultRunGh = (args, env) => new Promise((resolve26, reject2) => {
+  execFile20(
     args[0],
     args.slice(1),
     { env, maxBuffer: 1 << 26, encoding: "utf8", timeout: 6e4 },
     (err, stdout, stderr) => {
       const e = err;
       if (e && (e.code === "ENOENT" || e.code === "EACCES")) return reject2(e);
-      resolve25({ code: err ? Number(err.code ?? 1) : 0, stdout, stderr });
+      resolve26({ code: err ? Number(err.code ?? 1) : 0, stdout, stderr });
     }
   );
 });
@@ -88362,20 +89323,20 @@ var normalize2 = (r) => ({
   events: strings(r.events),
   projectIds: Array.isArray(r.projectIds) ? strings(r.projectIds) : null
 });
-var cache5 = [];
+var cache6 = [];
 function webhooksActive() {
-  return cache5.length > 0;
+  return cache6.length > 0;
 }
 async function refreshWebhookCache() {
   try {
     const rows = await prisma.webhookEndpoint.findMany({ where: { enabled: true } });
-    cache5 = rows.map(normalize2);
+    cache6 = rows.map(normalize2);
   } catch {
-    cache5 = [];
+    cache6 = [];
   }
 }
 function matchingEndpoints(eventType, projectId) {
-  return cache5.filter((e) => {
+  return cache6.filter((e) => {
     if (!matchesEvent(e.events, eventType)) return false;
     if (e.projectIds === null) return true;
     return projectId !== null && e.projectIds.includes(projectId);
@@ -88442,13 +89403,13 @@ init_ssrf();
 init_safe_outbound_request();
 async function sendOnce(o, deps = {}) {
   const started2 = Date.now();
-  const fail4 = (error, httpStatus = null, gone = false) => ({ ok: false, httpStatus, durationMs: Date.now() - started2, error, gone });
+  const fail5 = (error, httpStatus = null, gone = false) => ({ ok: false, httpStatus, durationMs: Date.now() - started2, error, gone });
   const parsed = validateWebhookUrl(o.endpoint.url);
-  if (!parsed.ok) return fail4(`URL tak sah: ${parsed.error}`);
+  if (!parsed.ok) return fail5(`URL tak sah: ${parsed.error}`);
   const guard = await checkDestination(parsed.url, o.endpoint.allowPrivate, deps.lookup);
-  if (!guard.ok) return fail4(guard.error);
+  if (!guard.ok) return fail5(guard.error);
   const secret = secretOf(o.endpoint);
-  if (!secret) return fail4("secret tak bisa dibuka \u2014 rotasi secret endpoint ini");
+  if (!secret) return fail5("secret tak bisa dibuka \u2014 rotasi secret endpoint ini");
   const headers = signedHeaders({
     secret,
     body: o.body,
@@ -88491,7 +89452,7 @@ async function sendOnce(o, deps = {}) {
     return { ok: false, httpStatus: res.status, durationMs, error: `HTTP ${res.status}`, gone: false };
   } catch (e) {
     const msg = e.name === "AbortError" ? `timeout ${WEBHOOK_TIMEOUT_MS} ms` : e.message;
-    return fail4(msg);
+    return fail5(msg);
   } finally {
     clearTimeout(timer11);
   }
@@ -88878,7 +89839,7 @@ init_settings3();
 // src/services/portal-chat/turn.ts
 init_src();
 init_db();
-import { execFile as execFile20 } from "node:child_process";
+import { execFile as execFile21 } from "node:child_process";
 
 // src/services/portal-chat/guard-input.ts
 import { randomBytes as randomBytes10 } from "node:crypto";
@@ -88990,9 +89951,9 @@ ${baru}`;
 // src/services/portal-chat/workspace.ts
 init_src();
 init_db();
-import { mkdirSync as mkdirSync21, mkdtempSync as mkdtempSync5, rmSync as rmSync14, writeFileSync as writeFileSync21 } from "node:fs";
+import { mkdirSync as mkdirSync23, mkdtempSync as mkdtempSync5, rmSync as rmSync16, writeFileSync as writeFileSync23 } from "node:fs";
 import { tmpdir as tmpdir9 } from "node:os";
-import { join as join53 } from "node:path";
+import { join as join58 } from "node:path";
 var STAGE_LABEL = {
   brainstorming: "Dirumuskan",
   objective: "Dirumuskan",
@@ -89035,7 +89996,7 @@ function renderTicketDoc(tickets2) {
 ${baris.join("\n")}`;
 }
 async function buildChatWorkspace(projectId) {
-  const dir2 = mkdtempSync5(join53(tmpdir9(), "hanoman-portal-chat-"));
+  const dir2 = mkdtempSync5(join58(tmpdir9(), "hanoman-portal-chat-"));
   try {
     const project = await prisma.project.findUnique({
       where: { id: projectId },
@@ -89050,7 +90011,7 @@ async function buildChatWorkspace(projectId) {
     });
     const files2 = [];
     const tulis = (rel, isi) => {
-      writeFileSync21(join53(dir2, rel), isi, { mode: 384 });
+      writeFileSync23(join58(dir2, rel), isi, { mode: 384 });
       files2.push(rel);
     };
     tulis("project.md", renderProjectDoc(project));
@@ -89058,16 +90019,16 @@ async function buildChatWorkspace(projectId) {
     tulis("laporan.md", renderTicketDoc(tickets2.map((t) => toPortalTicket(t, null))));
     const prds = await listPrds(projectId);
     if (prds.length) {
-      mkdirSync21(join53(dir2, "dokumen"), { mode: 448 });
+      mkdirSync23(join58(dir2, "dokumen"), { mode: 448 });
       for (const prd of prds) {
         const isi = await readPrd(projectId, prd.path);
         if (!isi) continue;
-        tulis(join53("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
+        tulis(join58("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
       }
     }
-    return { dir: dir2, files: files2, cleanup: () => rmSync14(dir2, { recursive: true, force: true }) };
+    return { dir: dir2, files: files2, cleanup: () => rmSync16(dir2, { recursive: true, force: true }) };
   } catch (error) {
-    rmSync14(dir2, { recursive: true, force: true });
+    rmSync16(dir2, { recursive: true, force: true });
     throw error;
   }
 }
@@ -89145,8 +90106,8 @@ function chatFailureReason(err, stdout, stderr, timeoutMs) {
   return `chat portal gagal (${bagaimana}): ${detail2}`;
 }
 function runProcess(p3, timeoutMs) {
-  return new Promise((resolve25, reject2) => {
-    const child = execFile20(p3.file, p3.args, {
+  return new Promise((resolve26, reject2) => {
+    const child = execFile21(p3.file, p3.args, {
       cwd: p3.cwd,
       timeout: timeoutMs,
       maxBuffer: 16 * 1024 * 1024,
@@ -89157,7 +90118,7 @@ function runProcess(p3, timeoutMs) {
       stdout,
       stderr,
       timeoutMs
-    ))) : resolve25(stdout));
+    ))) : resolve26(stdout));
     child.stdin?.end();
   });
 }
@@ -89587,15 +90548,15 @@ init_src();
 init_db();
 
 // src/services/bootstrap.ts
-import { createHash as createHash23, randomBytes as randomBytes11, timingSafeEqual as timingSafeEqual5 } from "node:crypto";
+import { createHash as createHash24, randomBytes as randomBytes11, timingSafeEqual as timingSafeEqual5 } from "node:crypto";
 import { chmod as chmod2, lstat as lstat3, mkdir as mkdir11, readFile as readFile10, unlink as unlink5, writeFile as writeFile8 } from "node:fs/promises";
-import { join as join54 } from "node:path";
-var TTL_MS7 = 15 * 6e4;
+import { join as join59 } from "node:path";
+var TTL_MS8 = 15 * 6e4;
 var SETUP_TOKEN_FILE = "setup.token";
 var BootstrapError = class extends Error {
   code = "BOOTSTRAP_PROOF";
 };
-var tokenPath = (home3) => join54(home3, SETUP_TOKEN_FILE);
+var tokenPath = (home3) => join59(home3, SETUP_TOKEN_FILE);
 async function readStored(home3) {
   try {
     const info = await lstat3(tokenPath(home3));
@@ -89627,7 +90588,7 @@ async function ensureSetupToken(home3, now = Date.now()) {
     });
   }
   const token = randomBytes11(32).toString("base64url");
-  const expiresAt = now + TTL_MS7;
+  const expiresAt = now + TTL_MS8;
   try {
     await writeFile8(tokenPath(home3), `${token}
 ${new Date(expiresAt).toISOString()}
@@ -89640,8 +90601,8 @@ ${new Date(expiresAt).toISOString()}
 }
 async function verifySetupToken(candidate, home3, now = Date.now()) {
   const stored = await readStored(home3);
-  const got = createHash23("sha256").update(candidate).digest();
-  const want = createHash23("sha256").update(stored.token).digest();
+  const got = createHash24("sha256").update(candidate).digest();
+  const want = createHash24("sha256").update(stored.token).digest();
   if (stored.expiresAt <= now || !timingSafeEqual5(got, want)) throw new BootstrapError("invalid setup proof");
 }
 async function consumeSetupToken(home3) {
@@ -90060,7 +91021,7 @@ init_event_log();
 
 // src/services/remote-access-request.ts
 init_src();
-import { randomUUID as randomUUID15 } from "node:crypto";
+import { randomUUID as randomUUID16 } from "node:crypto";
 var REQUEST_TIER_LABEL = { lihat: "Lihat", kerja: "Kerja", tulis: "Tulis" };
 var entries3 = [];
 var accepted = [];
@@ -90084,7 +91045,7 @@ function createAccessRequest(input, now = Date.now()) {
     return { ok: false, reason: "rate-limited", retryAfterMs: accepted[0] + ACCESS_REQUEST_WINDOW_MS - now };
   accepted.push(now);
   const entry2 = {
-    id: randomUUID15(),
+    id: randomUUID16(),
     tier: input.tier,
     state: "pending",
     requestedAt: now,
@@ -90433,7 +91394,7 @@ init_event_log();
 init_transcript_store();
 init_src2();
 import { readFile as readFile11 } from "node:fs/promises";
-import { join as join55 } from "node:path";
+import { join as join60 } from "node:path";
 function decodeCursor(c) {
   if (!c) return null;
   try {
@@ -90471,7 +91432,7 @@ async function readRemoteTranscript(id2) {
   const row = await prisma.logEntry.findUnique({ where: { id: id2 } });
   if (!row || row.lane !== "transcript" || !row.transcriptKey) return null;
   if (row.deviceId === "local") return readTranscript(row.transcriptKey);
-  const path = join55(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
+  const path = join60(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
   try {
     return await readFile11(path, "utf8");
   } catch {
@@ -90668,7 +91629,7 @@ var SETUP_PUBLIC = /* @__PURE__ */ new Set([
   "POST /api/setup"
 ]);
 function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {}) {
-  const docFile = agentDocFile !== void 0 ? agentDocFile : pickGuideFile(dirname19(fileURLToPath6(import.meta.url)), env, existsSync25);
+  const docFile = agentDocFile !== void 0 ? agentDocFile : pickGuideFile(dirname19(fileURLToPath6(import.meta.url)), env, existsSync26);
   const ingress = loadIngressPolicy(env);
   const app3 = Fastify({ logger: false, trustProxy: trustProxyFromEnv(env) });
   app3.setErrorHandler((error, _req, reply) => {
@@ -90773,6 +91734,7 @@ function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {})
     await api.register(terminalWorkspaceRoutes);
     await api.register(vps_default);
     await api.register(limits);
+    await api.register(runtime_accounts_default);
     await api.register(update);
     await api.register(events_default, wsOptions);
     await api.register(ws_tickets_default, { allowTestPrincipal: !requireAuth && env.NODE_ENV === "test" });
@@ -90817,7 +91779,7 @@ function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {})
     await api.register(qaBacklog);
   }, { prefix: "/api" });
   if (shouldServeWeb(env)) {
-    const dist = pickWebDir(dirname19(fileURLToPath6(import.meta.url)), env, existsSync25);
+    const dist = pickWebDir(dirname19(fileURLToPath6(import.meta.url)), env, existsSync26);
     if (dist) {
       app3.register(fastifyStatic, { root: dist });
       app3.setNotFoundHandler((req, reply) => req.url.startsWith("/api") ? reply.code(404).send({ error: "not found" }) : req.url.startsWith("/assets/") ? reply.code(404).type("text/plain").send("not found") : reply.sendFile("index.html"));
@@ -91149,7 +92111,7 @@ async function tick4(now, deps, end2 = prodEnd) {
     console.error("scheduler drain:", e);
   }
 }
-var prodDeps3 = {
+var prodDeps5 = {
   liveCount: async () => (await listSessionsAsync()).filter((s2) => !s2.exited).length,
   isLive: async (specId) => {
     const s2 = await getSessionAsync(sessionIdForSpec(specId));
@@ -91183,7 +92145,7 @@ var prodDeps3 = {
 };
 var TICK_MS3 = 1e4;
 var timer7;
-function startScheduler(deps = prodDeps3) {
+function startScheduler(deps = prodDeps5) {
   if (timer7) return;
   timer7 = setInterval(() => void tick4(Date.now(), deps), TICK_MS3);
   timer7.unref();
@@ -91220,16 +92182,21 @@ init_db();
 init_session_launch();
 init_session_admission2();
 init_notifications2();
-var prodDeps4 = {
+var prodResumeStart = async (spec, runtime) => {
+  if (runtime?.accountId && !accountExists(runtime.accountId))
+    throw new Error(`akun runtime ${runtime.accountId} sudah dihapus \u2014 lanjutkan manual dan pilih akun lain`);
+  return startSpecSession(spec, { flow: flowForSource(spec.source), ...runtime ?? {} });
+};
+var prodDeps6 = {
   // ADR-0170 · mengamandemen ADR-0169 keputusan #4: `bypassCapacity` DICABUT. Auto-resume kini
   // tunduk cap/beban host seperti "Lanjutkan" manual — mesin 8 GB operator sudah dua kali kernel
   // panic akibat batch sesi paralel tepat SAAT boot (memori mac-mini-8gb-panic-agen-paralel),
   // titik waktu paling rawan menumpuk kandidat resume. Gerbang dependency ADR-0093 tak berubah.
-  startSpec: (spec, runtime) => startSpecSession(spec, { flow: flowForSource(spec.source), ...runtime ?? {} }),
+  startSpec: prodResumeStart,
   recordFail: recordFailure,
   recordDeferred: recordFailure
 };
-async function resumeReconciledSessions(cutoff, deps = prodDeps4) {
+async function resumeReconciledSessions(cutoff, deps = prodDeps6) {
   const report = { resumed: [], failed: [], deferred: [] };
   const specIds = await reconciledSpecIdsSince(cutoff);
   if (!specIds.length) return report;
@@ -91258,6 +92225,48 @@ async function resumeReconciledSessions(cutoff, deps = prodDeps4) {
   return report;
 }
 
+// src/services/runtime-accounts/install.ts
+init_src();
+init_pty();
+init_antigravity_limits();
+async function installRuntimeAccounts() {
+  await refreshSnapshot();
+  registerAccountResolver((agent, requested) => resolveLaunchAccount(agent, requested));
+  registerSessionHooks({
+    // Sesi login ditutup operator → baca ulang status akun itu.
+    onDeath: (d) => {
+      const id2 = accountIdForLoginSession(d.sessionId);
+      if (id2) void checkAccount(id2).catch((e) => console.error("akun runtime (periksa sesudah login):", e));
+    }
+  });
+  installAntigravitySwap();
+  void refreshAllStatuses().catch((e) => console.error("akun runtime (status boot):", e));
+}
+var AGY_BUILTIN2 = builtinAccountId("antigravity");
+var darwin = process.platform === "darwin";
+function installAntigravitySwap() {
+  setProbe("antigravity", async (_home, accountId) => darwin ? probeAgyLogin(accountId) : { loggedIn: isBuiltinAccountId(accountId), identity: null });
+  setAntigravityAccountLimits(
+    (row) => agyAccountLimits(row.id),
+    // Akun bawaan saat akun lain aktif: Keychain memuat login akun LAIN — baca slot bawaan, bukan Keychain.
+    () => !darwin || activeAgyAccount() === AGY_BUILTIN2 ? getAntigravityLimits() : agyAccountLimits(AGY_BUILTIN2)
+  );
+  setAntigravityLogin(() => [agentBin("antigravity")]);
+  setBeforeLogin((runtime, accountId) => {
+    if (runtime === "antigravity" && darwin) activateAgyAccount(accountId);
+  });
+  registerSessionHooks({
+    onDeath: () => {
+      if (!darwin || !accountSnapshot().rows.some((r) => r.runtime === "antigravity")) return;
+      try {
+        captureActiveSlot();
+      } catch (e) {
+        console.error("akun agy (tangkap slot):", e);
+      }
+    }
+  });
+}
+
 // src/server.ts
 init_event_log();
 init_settings3();
@@ -91273,7 +92282,7 @@ init_tap();
 init_src();
 init_db();
 init_actor();
-import { randomUUID as randomUUID16 } from "node:crypto";
+import { randomUUID as randomUUID17 } from "node:crypto";
 function skipped(def2, row) {
   if (!def2.skipWhen || !row) return false;
   return row[def2.skipWhen.field] === def2.skipWhen.equals;
@@ -91339,7 +92348,7 @@ async function emitWebhook(i) {
     const targets = matchingEndpoints(type, projectId);
     if (!targets.length) return;
     const name2 = projectId ? (await prisma.project.findUnique({ where: { id: projectId }, select: { name: true } }))?.name ?? null : null;
-    const env = buildEnvelope(i, name2, (/* @__PURE__ */ new Date()).toISOString(), `evt_${randomUUID16().replace(/-/g, "")}`);
+    const env = buildEnvelope(i, name2, (/* @__PURE__ */ new Date()).toISOString(), `evt_${randomUUID17().replace(/-/g, "")}`);
     if (!env) return;
     await enqueueEnvelope(env, targets);
   } catch (e) {
@@ -91535,13 +92544,13 @@ init_src();
 init_db();
 init_integrate();
 init_local_binding();
-import { execFile as execFile21 } from "node:child_process";
+import { execFile as execFile22 } from "node:child_process";
 import { promisify as promisify19 } from "node:util";
 init_notifications2();
 var AUTO_MERGE_WINDOW_MS = 24 * 60 * 60 * 1e3;
 var AUTO_MERGE_GRACE_MS = 15 * 60 * 1e3;
 var TICK_MS5 = 6e4;
-var exec11 = promisify19(execFile21);
+var exec11 = promisify19(execFile22);
 var GIT8 = { timeout: 3e4, maxBuffer: 1 << 24, encoding: "utf8" };
 var gitOut = async (cwd, args) => {
   try {
@@ -91654,13 +92663,13 @@ init_src2();
 
 // src/services/secure-home.ts
 import { chmod as chmod3, lstat as lstat4, mkdir as mkdir12 } from "node:fs/promises";
-import { isAbsolute as isAbsolute13, resolve as resolve24 } from "node:path";
+import { isAbsolute as isAbsolute13, resolve as resolve25 } from "node:path";
 var HomePermissionError = class extends Error {
   code = "HOME_SYMLINK";
 };
 async function assertNoSymlink(path, allowMissing) {
   try {
-    const info = await lstat4(resolve24(path));
+    const info = await lstat4(resolve25(path));
     if (info.isSymbolicLink()) throw new HomePermissionError(`symlink ditolak: ${path}`);
   } catch (error) {
     if (error.code === "ENOENT" && allowMissing) return;
@@ -91754,9 +92763,9 @@ async function pruneLogs(now, retention, opts2 = {}) {
 }
 async function reconcileRemoteTranscripts() {
   const { readdir: readdir10, unlink: unlink6, stat: stat8 } = await import("node:fs/promises");
-  const { join: join56 } = await import("node:path");
+  const { join: join61 } = await import("node:path");
   const { resolveDataDirs: resolveDataDirs2 } = await Promise.resolve().then(() => (init_src2(), src_exports));
-  const root = join56(resolveDataDirs2().home, "remote-transcripts");
+  const root = join61(resolveDataDirs2().home, "remote-transcripts");
   let deviceDirs;
   try {
     deviceDirs = await readdir10(root);
@@ -91770,16 +92779,16 @@ async function reconcileRemoteTranscripts() {
   for (const dev of deviceDirs) {
     let files2;
     try {
-      files2 = await readdir10(join56(root, dev));
+      files2 = await readdir10(join61(root, dev));
     } catch {
       continue;
     }
     for (const f of files2) {
       const key = `${dev}/${f}`;
       if (referenced.has(key)) continue;
-      const st2 = await stat8(join56(root, dev, f)).catch(() => null);
+      const st2 = await stat8(join61(root, dev, f)).catch(() => null);
       if (!st2 || Date.now() - st2.mtimeMs < gracePeriodMs) continue;
-      await unlink6(join56(root, dev, f)).catch(() => {
+      await unlink6(join61(root, dev, f)).catch(() => {
       });
       orphans++;
     }
@@ -92022,6 +93031,7 @@ bootstrapReady.then(async () => {
   console.log(`hanoman api ${host}:${port}`);
   await installWebhooks();
   installSessionHistory();
+  await installRuntimeAccounts();
   installEventTap({ transcriptEnabled: async () => (await getSetting()).logShipping.transcript });
   const bootSetting = await getSetting();
   if (bootSetting.logShipping.server) installConsoleTap();