hanoman 0.9.40 → 0.9.41

package/dist/server.js

@@ -5798,6 +5798,9 @@ var init_entities = __esm({
       // SPEC-184
       notifyDecisionTelegram: external_exports.boolean().default(true),
       // ADR-0226 · dorong "menunggu keputusan" ke Telegram
+      // ADR-0235 · saklar tunggal auto-resume SEMUA sesi (backlog + bebas) yang terputus paksa (reboot/crash).
+      // Default MATI — mengamandemen ADR-0169 (dulu selalu nyala untuk backlog).
+      autoResumeSessions: external_exports.boolean().default(false),
       agentAccessEnabled: external_exports.boolean().default(false),
       // SPEC-257 · master switch akses AI agent
       scheduler: zScheduler.default(SCHEDULER_DEFAULTS),
@@ -21749,10 +21752,29 @@ var init_session_id = __esm({
   }
 });
 
+// src/services/claude-conversation.ts
+import { existsSync as existsSync8, readdirSync as readdirSync8 } from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import { join as join13 } from "node:path";
+function claudeConversationExists(uuid, configDir) {
+  if (!/^[0-9a-f-]{36}$/i.test(uuid)) return false;
+  const projects = join13(configDir ?? process.env.CLAUDE_CONFIG_DIR ?? join13(homedir4(), ".claude"), "projects");
+  try {
+    return readdirSync8(projects).some((slug2) => existsSync8(join13(projects, slug2, `${uuid}.jsonl`)));
+  } catch {
+    return false;
+  }
+}
+var init_claude_conversation = __esm({
+  "src/services/claude-conversation.ts"() {
+    "use strict";
+  }
+});
+
 // src/services/antigravity-env-bootstrap.ts
 import * as fs from "node:fs";
 import { createHash as createHash6 } from "node:crypto";
-import { join as join13, dirname as dirname8, basename as basename5 } from "node:path";
+import { join as join14, dirname as dirname8, basename as basename5 } from "node:path";
 import { tmpdir as tmpdir3 } from "node:os";
 function consume(receipt, io, hashOf2, parent, paths3) {
   if (!receipt || typeof receipt.directory !== "string" || paths3.dirname(receipt.directory) !== parent || !paths3.basename(receipt.directory).startsWith("hanoman-ag-env-")) return;
@@ -21768,12 +21790,12 @@ function consume(receipt, io, hashOf2, parent, paths3) {
 }
 function cleanupAntigravityEnvBootstrap(receipt) {
   const parent = receipt && typeof receipt === "object" && "parent" in receipt && typeof receipt.parent === "string" ? receipt.parent : tmpdir3();
-  consume(receipt, fs, hashOf, parent, { join: join13, dirname: dirname8, basename: basename5 });
+  consume(receipt, fs, hashOf, parent, { join: join14, dirname: dirname8, basename: basename5 });
 }
 function createAntigravityEnvBootstrap(command, env) {
-  const directory = fs.mkdtempSync(join13(tmpdir3(), "hanoman-ag-env-"));
+  const directory = fs.mkdtempSync(join14(tmpdir3(), "hanoman-ag-env-"));
   fs.chmodSync(directory, 448);
-  const path = join13(directory, "launch.sh"), metadata = join13(directory, "receipt.json");
+  const path = join14(directory, "launch.sh"), metadata = join14(directory, "receipt.json");
   const cleaner = `const fs=require('node:fs'),{createHash}=require('node:crypto'),{join,dirname,basename}=require('node:path'); (${consume.toString()})(JSON.parse(fs.readFileSync(process.argv[1],'utf8')),fs,b=>createHash('sha256').update(b).digest('hex'),${JSON.stringify(dirname8(directory))},require('node:path'));`;
   const exports = ["GEMINI_API_KEY", "GOOGLE_GEMINI_BASE_URL"].map((key) => env[key] === void 0 ? `unset ${key}` : `export ${key}=${quote(env[key])}`);
   const content = `unset GEMINI_API_KEY GOOGLE_GEMINI_BASE_URL CLAUDE_CODE_OAUTH_TOKEN ANTHROPIC_API_KEY
@@ -21802,9 +21824,9 @@ var init_antigravity_env_bootstrap = __esm({
 });
 
 // src/services/secret-box.ts
-import { chmodSync as chmodSync6, existsSync as existsSync8, mkdirSync as mkdirSync8, readFileSync as readFileSync10, writeFileSync as writeFileSync10 } from "node:fs";
+import { chmodSync as chmodSync6, existsSync as existsSync9, mkdirSync as mkdirSync8, readFileSync as readFileSync10, writeFileSync as writeFileSync10 } from "node:fs";
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
-import { dirname as dirname9, join as join14 } from "node:path";
+import { dirname as dirname9, join as join15 } from "node:path";
 function isEncrypted(value) {
   return value.startsWith(ENC_PREFIX);
 }
@@ -21836,7 +21858,7 @@ function fromEnv(raw) {
   return null;
 }
 function secretKeyPath() {
-  return join14(resolveHome(), "secret.key");
+  return join15(resolveHome(), "secret.key");
 }
 function secretKey() {
   if (cached) return cached;
@@ -21848,7 +21870,7 @@ function secretKey() {
     return key2;
   }
   const path = secretKeyPath();
-  if (existsSync8(path)) {
+  if (existsSync9(path)) {
     const key2 = Buffer.from(readFileSync10(path, "utf8").trim(), "base64url");
     if (key2.length !== KEY_BYTES) throw new Error(`kunci di ${path} rusak \u2014 panjangnya bukan 32 byte`);
     cached = key2;
@@ -21972,12 +21994,12 @@ var init_antigravity_runtime = __esm({
 });
 
 // src/runner/deps.ts
-import { existsSync as existsSync9 } from "node:fs";
-import { dirname as dirname10, join as join15 } from "node:path";
+import { existsSync as existsSync10 } from "node:fs";
+import { dirname as dirname10, join as join16 } from "node:path";
 function repoRootFrom(startDir) {
   let dir2 = startDir;
   for (let i = 0; i < 8; i++) {
-    if (existsSync9(join15(dir2, "pnpm-workspace.yaml"))) return dir2;
+    if (existsSync10(join16(dir2, "pnpm-workspace.yaml"))) return dir2;
     const parent = dirname10(dir2);
     if (parent === dir2) break;
     dir2 = parent;
@@ -21994,19 +22016,19 @@ var init_deps = __esm({
 
 // src/services/bundled-skills.ts
 import { createHash as createHash7 } from "node:crypto";
-import { chmodSync as chmodSync7, cpSync as cpSync3, existsSync as existsSync10, mkdirSync as mkdirSync9, readFileSync as readFileSync11, readdirSync as readdirSync8, renameSync as renameSync4, rmSync as rmSync6, statSync as statSync3, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join16, relative as relative5, sep as sep6 } from "node:path";
+import { chmodSync as chmodSync7, cpSync as cpSync3, existsSync as existsSync11, mkdirSync as mkdirSync9, readFileSync as readFileSync11, readdirSync as readdirSync9, renameSync as renameSync4, rmSync as rmSync6, statSync as statSync3, writeFileSync as writeFileSync11 } from "node:fs";
+import { join as join17, relative as relative5, sep as sep6 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function bundledSkillsDir() {
   const packed = packagedDir();
-  return existsSync10(packed) ? packed : join16(repoRoot(moduleDir()), "server", "skills");
+  return existsSync11(packed) ? packed : join17(repoRoot(moduleDir()), "server", "skills");
 }
 function filesUnder(dir2) {
   const out4 = [];
   const walk = (d) => {
-    for (const n2 of readdirSync8(d).sort()) {
+    for (const n2 of readdirSync9(d).sort()) {
       if (n2 === BUNDLED_MARKER || n2 === ".DS_Store") continue;
-      const full = join16(d, n2);
+      const full = join17(d, n2);
       if (statSync3(full).isDirectory()) walk(full);
       else out4.push(full);
     }
@@ -22026,7 +22048,7 @@ function contentSha(dir2) {
 }
 function markerSha(dir2) {
   try {
-    const parsed = JSON.parse(readFileSync11(join16(dir2, BUNDLED_MARKER), "utf8"));
+    const parsed = JSON.parse(readFileSync11(join17(dir2, BUNDLED_MARKER), "utf8"));
     const sha2 = parsed?.sha;
     return typeof sha2 === "string" ? sha2 : null;
   } catch {
@@ -22039,7 +22061,7 @@ function install(src, dest, sha2) {
   cpSync3(src, tmp, { recursive: true });
   for (const f of filesUnder(tmp))
     if (relative5(tmp, f).split(sep6)[0] === "scripts") chmodSync7(f, statSync3(f).mode | 493);
-  writeFileSync11(join16(tmp, BUNDLED_MARKER), `${JSON.stringify({ sha: sha2, seededAt: (/* @__PURE__ */ new Date()).toISOString() })}
+  writeFileSync11(join17(tmp, BUNDLED_MARKER), `${JSON.stringify({ sha: sha2, seededAt: (/* @__PURE__ */ new Date()).toISOString() })}
 `);
   rmSync6(dest, { recursive: true, force: true });
   renameSync4(tmp, dest);
@@ -22053,10 +22075,10 @@ function seedBundledSkills(hanomanHome, o = {}) {
   const root = hanomanSkillsDir(hanomanHome);
   for (const name2 of names) {
     try {
-      const src = join16(source, name2);
-      const dest = join16(root, name2);
+      const src = join17(source, name2);
+      const dest = join17(root, name2);
       const bundleSha = contentSha(src);
-      if (!existsSync10(dest)) {
+      if (!existsSync11(dest)) {
         mkdirSync9(root, { recursive: true });
         install(src, dest, bundleSha);
         out4.seeded.push(name2);
@@ -22089,24 +22111,24 @@ var init_bundled_skills = __esm({
     skillDirsIn = (source) => {
       let names;
       try {
-        names = readdirSync8(source);
+        names = readdirSync9(source);
       } catch {
         return [];
       }
-      return names.filter((n2) => !n2.startsWith(".") && existsSync10(join16(source, n2, "SKILL.md"))).sort();
+      return names.filter((n2) => !n2.startsWith(".") && existsSync11(join17(source, n2, "SKILL.md"))).sort();
     };
-    isBundledCopy = (dir2) => existsSync10(join16(dir2, BUNDLED_MARKER));
+    isBundledCopy = (dir2) => existsSync11(join17(dir2, BUNDLED_MARKER));
   }
 });
 
 // src/services/skill-inject.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
 import { createHash as createHash8 } from "node:crypto";
-import { appendFileSync as appendFileSync2, existsSync as existsSync11, lstatSync as lstatSync7, mkdirSync as mkdirSync10, readFileSync as readFileSync12, readlinkSync as readlinkSync2, symlinkSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync12 } from "node:fs";
-import { isAbsolute as isAbsolute8, join as join17 } from "node:path";
+import { appendFileSync as appendFileSync2, existsSync as existsSync12, lstatSync as lstatSync7, mkdirSync as mkdirSync10, readFileSync as readFileSync12, readlinkSync as readlinkSync2, symlinkSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync12 } from "node:fs";
+import { isAbsolute as isAbsolute8, join as join18 } from "node:path";
 function excludeFile(repoDir) {
   const common = execFileSync4("git", ["rev-parse", "--git-common-dir"], { cwd: repoDir, env: agentEnvironment(null, process.env), encoding: "utf8" }).trim();
-  return join17(isAbsolute8(common) ? common : join17(repoDir, common), "info", "exclude");
+  return join18(isAbsolute8(common) ? common : join18(repoDir, common), "info", "exclude");
 }
 function ownedSkills(tempDir) {
   try {
@@ -22141,11 +22163,11 @@ function injectGlobalSkills(o) {
   const todo = global2.filter((s2) => !taken.has(s2.name) && !(userOwned.has(s2.name) && isBundledCopy(s2.dir)));
   if (!todo.length) return out4;
   if (o.agent === "claude") {
-    const root = join17(o.tempDir, "skills-root");
+    const root = join18(o.tempDir, "skills-root");
     try {
-      mkdirSync10(join17(root, ".claude", "skills"), { recursive: true });
+      mkdirSync10(join18(root, ".claude", "skills"), { recursive: true });
       for (const s2 of todo) {
-        const link2 = join17(root, ".claude", "skills", s2.name);
+        const link2 = join18(root, ".claude", "skills", s2.name);
         if (!lstatSync7(link2, { throwIfNoEntry: false })) symlinkSync(s2.dir, link2);
         out4.injected.push(s2.name);
       }
@@ -22166,19 +22188,19 @@ function injectGlobalSkills(o) {
     let ownedLink;
     let ownedPair = "";
     try {
-      const link2 = join17(o.cwd, ".agents", "skills", s2.name);
+      const link2 = join18(o.cwd, ".agents", "skills", s2.name);
       if (o.agent === "antigravity") {
-        for (const dir2 of [join17(o.cwd, ".agents"), join17(o.cwd, ".agents", "skills")]) {
+        for (const dir2 of [join18(o.cwd, ".agents"), join18(o.cwd, ".agents", "skills")]) {
           const st2 = lstatSync7(dir2, { throwIfNoEntry: false });
           if (st2 && (!st2.isDirectory() || st2.isSymbolicLink())) throw new Error("akar skill bukan direktori aman");
         }
       }
       if (lstatSync7(link2, { throwIfNoEntry: false })) continue;
-      mkdirSync10(join17(o.cwd, ".agents", "skills"), { recursive: true });
+      mkdirSync10(join18(o.cwd, ".agents", "skills"), { recursive: true });
       symlinkSync(s2.dir, link2);
       ownedLink = link2;
-      mkdirSync10(join17(exclude, ".."), { recursive: true });
-      const cur = existsSync11(exclude) ? readFileSync12(exclude, "utf8") : "";
+      mkdirSync10(join18(exclude, ".."), { recursive: true });
+      const cur = existsSync12(exclude) ? readFileSync12(exclude, "utf8") : "";
       const line = excludeLine(s2.name);
       const lines2 = cur.split("\n");
       const hasOperatorLine = lines2.some((entry2, index) => entry2 === line && !lines2[index - 1]?.startsWith(`${INJECT_MARKER}:antigravity:`));
@@ -22221,7 +22243,7 @@ ${line}
 function unexcludeInjected(repoDir, name2) {
   try {
     const f = excludeFile(repoDir);
-    if (!existsSync11(f)) return;
+    if (!existsSync12(f)) return;
     const line = excludeLine(name2);
     writeFileSync12(f, readFileSync12(f, "utf8").split("\n").filter((l) => l !== line).join("\n"));
   } catch {
@@ -22235,31 +22257,31 @@ var init_skill_inject = __esm({
     init_bundled_skills();
     INJECT_MARKER = "# hanoman:skill-inject";
     excludeLine = (name2) => `/.agents/skills/${name2}`;
-    manifestPath = (tempDir) => join17(tempDir, "antigravity-skills.json");
+    manifestPath = (tempDir) => join18(tempDir, "antigravity-skills.json");
   }
 });
 
 // src/services/antigravity-trust.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { closeSync as closeSync2, lstatSync as lstatSync8, mkdirSync as mkdirSync11, openSync as openSync2, readFileSync as readFileSync13, realpathSync as realpathSync6, renameSync as renameSync5, unlinkSync as unlinkSync3, writeFileSync as writeFileSync13 } from "node:fs";
-import { homedir as homedir4 } from "node:os";
-import { join as join18 } from "node:path";
+import { homedir as homedir5 } from "node:os";
+import { join as join19 } from "node:path";
 function safeOwned(path, directory) {
   const st2 = lstatSync8(path);
   if (st2.isSymbolicLink() || (directory ? !st2.isDirectory() : !st2.isFile()) || process.getuid && st2.uid !== process.getuid()) throw new Error("unsafe path");
 }
-function ensureAntigravityTrust(cwd, home3 = homedir4()) {
+function ensureAntigravityTrust(cwd, home3 = homedir5()) {
   let temp;
   let fd;
   try {
     const canonical = realpathSync6(cwd);
     mkdirSync11(home3, { recursive: true });
     const root = realpathSync6(home3);
-    for (const dir2 of [join18(root, ".gemini"), join18(root, ".gemini", "antigravity-cli")]) {
+    for (const dir2 of [join19(root, ".gemini"), join19(root, ".gemini", "antigravity-cli")]) {
       if (!lstatSync8(dir2, { throwIfNoEntry: false })) mkdirSync11(dir2, { mode: 448 });
       safeOwned(dir2, true);
     }
-    const file = join18(root, ".gemini", "antigravity-cli", "settings.json");
+    const file = join19(root, ".gemini", "antigravity-cli", "settings.json");
     const original = lstatSync8(file, { throwIfNoEntry: false });
     let settings = {};
     if (original) {
@@ -22333,14 +22355,14 @@ var init_local_binding = __esm({
 });
 
 // src/services/skill-library.ts
-import { join as join19 } from "node:path";
-import { existsSync as existsSync12 } from "node:fs";
+import { join as join20 } from "node:path";
+import { existsSync as existsSync13 } from "node:fs";
 async function libraryAll() {
   const global2 = scanGlobalSkills(opts());
   const projects = await prisma.project.findMany({ orderBy: { name: "asc" }, select: { id: true, name: true } });
   const groups = await Promise.all(projects.map(async (p3) => {
     const repo = await resolveRepoDir(p3.id);
-    if (!repo || !existsSync12(repo)) return { projectId: p3.id, name: p3.name, skills: [], error: "repo tidak ditemukan" };
+    if (!repo || !existsSync13(repo)) return { projectId: p3.id, name: p3.name, skills: [], error: "repo tidak ditemukan" };
     return { projectId: p3.id, name: p3.name, skills: scanProjectSkills(p3.id, repo, opts()) };
   }));
   return { global: global2, projects: groups };
@@ -22363,17 +22385,17 @@ async function targetParent(layer, source, projectId) {
   if (layer === "user") {
     const s2 = source ?? ".claude";
     if (!USER_SOURCES.includes(s2)) throw new SkillError(400, "source user harus .claude/.codex/.agents/.gemini/antigravity-cli");
-    if (s2 === ".agents") return join19(agentsSkillHome(process.env), "skills");
-    if (s2 === ".gemini/antigravity-cli") return join19(agentSkillHome("antigravity", process.env), "skills");
-    return join19(agentSkillHome(s2 === ".codex" ? "codex" : "claude", process.env), "skills");
+    if (s2 === ".agents") return join20(agentsSkillHome(process.env), "skills");
+    if (s2 === ".gemini/antigravity-cli") return join20(agentSkillHome("antigravity", process.env), "skills");
+    return join20(agentSkillHome(s2 === ".codex" ? "codex" : "claude", process.env), "skills");
   }
   if (layer === "project") {
     if (!projectId) throw new SkillError(400, "projectId wajib untuk lapis project");
     const s2 = source ?? ".claude";
     if (!PROJECT_SOURCES.includes(s2)) throw new SkillError(400, "source project harus .claude/.agents/.codex");
     const repo = await resolveRepoDir(projectId);
-    if (!repo || !existsSync12(repo)) throw new SkillError(404, "repo project tidak ditemukan");
-    return join19(repo, s2, "skills");
+    if (!repo || !existsSync13(repo)) throw new SkillError(404, "repo project tidak ditemukan");
+    return join20(repo, s2, "skills");
   }
   throw new SkillError(400, "layer harus hanoman, user, atau project");
 }
@@ -48487,7 +48509,7 @@ var init_safe_outbound_request = __esm({
 // src/services/uploads.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { mkdir, writeFile, readFile as readFile2, unlink, rm } from "node:fs/promises";
-import { join as join20, resolve as resolve9 } from "node:path";
+import { join as join21, resolve as resolve9 } from "node:path";
 function extFor(mimeType) {
   return EXT[mimeType] ?? ".bin";
 }
@@ -48498,17 +48520,17 @@ async function saveUpload(buf, mimeType) {
   const dir2 = uploadDir();
   await mkdir(dir2, { recursive: true, mode: 448 });
   const storageKey = `${randomUUID3()}${extFor(mimeType)}`;
-  await writeFile(join20(dir2, storageKey), buf, { mode: 384 });
+  await writeFile(join21(dir2, storageKey), buf, { mode: 384 });
   return { storageKey, size: buf.length };
 }
 function sessionUploadDir(sessionId2) {
   if (!SESSION_ID.test(sessionId2)) throw new Error(`sessionId tak sah: ${sessionId2}`);
-  return join20(uploadDir(), "terminal", sessionId2);
+  return join21(uploadDir(), "terminal", sessionId2);
 }
 async function saveSessionUpload(sessionId2, buf, mimeType) {
   const dir2 = sessionUploadDir(sessionId2);
   await mkdir(dir2, { recursive: true, mode: 448 });
-  const path = join20(dir2, `${randomUUID3()}${extFor(mimeType)}`);
+  const path = join21(dir2, `${randomUUID3()}${extFor(mimeType)}`);
   await writeFile(path, buf, { mode: 384 });
   return { path, size: buf.length };
 }
@@ -48524,11 +48546,11 @@ async function dropSessionUploads(sessionId2) {
 }
 async function readUpload(storageKey) {
   const safe3 = storageKey.replace(/[/\\]/g, "");
-  return readFile2(join20(uploadDir(), safe3));
+  return readFile2(join21(uploadDir(), safe3));
 }
 async function readUploadOrFetch(storageKey) {
   const safe3 = storageKey.replace(/[/\\]/g, "");
-  const target3 = join20(uploadDir(), safe3);
+  const target3 = join21(uploadDir(), safe3);
   try {
     return await readFile2(target3);
   } catch {
@@ -48555,7 +48577,7 @@ async function readUploadOrFetch(storageKey) {
 }
 async function deleteUpload(storageKey) {
   const safe3 = storageKey.replace(/[/\\]/g, "");
-  await unlink(join20(uploadDir(), safe3)).catch(() => {
+  await unlink(join21(uploadDir(), safe3)).catch(() => {
   });
 }
 var EXT, SESSION_ID;
@@ -49001,14 +49023,14 @@ var init_session_sandbox = __esm({
 });
 
 // src/services/session-event-spool.ts
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 var sessionEventSpoolRoot, sessionEventDir;
 var init_session_event_spool = __esm({
   "src/services/session-event-spool.ts"() {
     "use strict";
     init_src2();
-    sessionEventSpoolRoot = (env = process.env) => join21(resolveHome(env), "session-events");
-    sessionEventDir = (sessionId2, env = process.env) => join21(sessionEventSpoolRoot(env), sessionId2);
+    sessionEventSpoolRoot = (env = process.env) => join22(resolveHome(env), "session-events");
+    sessionEventDir = (sessionId2, env = process.env) => join22(sessionEventSpoolRoot(env), sessionId2);
   }
 });
 
@@ -49535,6 +49557,9 @@ function createSession(projectId, cwd, opts2 = {}) {
   }
   const agent = opts2.agent ?? "claude";
   const account = opts2.command ? null : accountResolver(agent, opts2.accountId);
+  const convId = !opts2.command && agent === "claude" && !opts2.specId ? opts2.agentSessionId ?? randomUUID4() : void 0;
+  const canResumeConv = !!convId && !!opts2.agentSessionId && !!opts2.resumeAgentSession && claudeConversationExists(convId, account?.env?.CLAUDE_CONFIG_DIR);
+  const convArg = convId ? `${canResumeConv ? "--resume" : "--session-id"} ${sq(convId)}` : "";
   let argv;
   if (opts2.command) {
     argv = opts2.command.map(sq).join(" ");
@@ -49577,7 +49602,7 @@ function createSession(projectId, cwd, opts2 = {}) {
       process.stderr.write(`hanoman: penyuntikan skill global gagal: ${e.message}
 `);
     }
-    argv = (agent === "antigravity" ? [sq(agentBin(agent)), flags, ...promptArg ? ["--prompt-interactive", promptArg] : []] : [sq(agentBin(agent)), promptArg, flags, agentsArg, nativeAgentArgs, skillsArg]).filter(Boolean).join(" ");
+    argv = (agent === "antigravity" ? [sq(agentBin(agent)), flags, ...promptArg ? ["--prompt-interactive", promptArg] : []] : [sq(agentBin(agent)), promptArg, flags, convArg, agentsArg, nativeAgentArgs, skillsArg]).filter(Boolean).join(" ");
   }
   const envPairs = [];
   if (!opts2.command && agent === "claude") {
@@ -49750,7 +49775,8 @@ function createSession(projectId, cwd, opts2 = {}) {
     effort: opts2.effort,
     branch: opts2.branch,
     cwd,
-    accountId: account?.id
+    accountId: account?.id,
+    ...convId ? { agentSessionId: convId } : {}
   });
   return {
     id: id2,
@@ -50083,6 +50109,7 @@ var init_pty = __esm({
     init_src();
     init_session_phases();
     init_session_id();
+    init_claude_conversation();
     init_antigravity_env_bootstrap();
     init_antigravity_runtime();
     init_skill_inject();
@@ -50388,7 +50415,7 @@ var init_redact_known = __esm({
 // src/services/transcript-store.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { mkdir as mkdir2, writeFile as writeFile2, readFile as readFile3, unlink as unlink2, readdir as readdir2, stat as stat3 } from "node:fs/promises";
-import { join as join22, resolve as resolve10, basename as basename6 } from "node:path";
+import { join as join23, resolve as resolve10, basename as basename6 } from "node:path";
 function transcriptDir() {
   return resolve10(effectiveStr("HANOMAN_TRANSCRIPT_DIR")?.trim() || resolveDataDirs().transcripts);
 }
@@ -50408,13 +50435,13 @@ async function saveTranscript(text2) {
   const dir2 = transcriptDir();
   await mkdir2(dir2, { recursive: true, mode: 448 });
   const key = `${randomUUID5()}.log`;
-  await writeFile2(join22(dir2, key), body, { encoding: "utf8", mode: 384 });
+  await writeFile2(join23(dir2, key), body, { encoding: "utf8", mode: 384 });
   return { key, bytes: Buffer.byteLength(body, "utf8"), truncated };
 }
 async function readTranscript(key) {
   if (!key) return null;
   try {
-    return await readFile3(join22(transcriptDir(), basename6(key)), "utf8");
+    return await readFile3(join23(transcriptDir(), basename6(key)), "utf8");
   } catch {
     return null;
   }
@@ -50422,7 +50449,7 @@ async function readTranscript(key) {
 async function deleteTranscript(key) {
   if (!key) return;
   try {
-    await unlink2(join22(transcriptDir(), basename6(key)));
+    await unlink2(join23(transcriptDir(), basename6(key)));
   } catch (e) {
     if (e.code !== "ENOENT") throw e;
   }
@@ -50440,7 +50467,7 @@ async function listTranscripts() {
   for (const name2 of names) {
     if (!name2.endsWith(".log")) continue;
     try {
-      rows.push({ key: name2, mtimeMs: (await stat3(join22(dir2, name2))).mtimeMs });
+      rows.push({ key: name2, mtimeMs: (await stat3(join23(dir2, name2))).mtimeMs });
     } catch {
     }
   }
@@ -50771,6 +50798,8 @@ var init_settings3 = __esm({
       notifyDecisionSound: "alert",
       notifyDecisionTelegram: true,
       // ADR-0226 · tak berefek tanpa bot token + allowlist
+      autoResumeSessions: false,
+      // ADR-0235 · auto-resume semua sesi setelah reboot/crash (opt-in)
       agentAccessEnabled: false,
       // SPEC-257 · akses AI agent off sampai dibuka manusia
       scheduler: SCHEDULER_DEFAULTS,
@@ -55737,11 +55766,11 @@ var init_tombstone = __esm({
 // src/services/qa-attachment-sync.ts
 import { createHash as createHash9, randomUUID as randomUUID7 } from "node:crypto";
 import { chmod, mkdir as mkdir4, rename as rename2, stat as stat4, writeFile as writeFile4 } from "node:fs/promises";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 async function qaBytesPresent(storageKey) {
   if (!QA_STORAGE_KEY.test(storageKey)) return false;
   try {
-    return (await stat4(join24(uploadDir(), storageKey))).isFile();
+    return (await stat4(join25(uploadDir(), storageKey))).isFile();
   } catch {
     return false;
   }
@@ -55766,10 +55795,10 @@ async function storeQaBytes(storageKey, buf) {
   if (!QA_STORAGE_KEY.test(storageKey)) throw new Error("storageKey tak sah");
   const dir2 = uploadDir();
   await mkdir4(dir2, { recursive: true, mode: 448 });
-  const tmp = join24(dir2, `${storageKey}.tmp-${randomUUID7()}`);
+  const tmp = join25(dir2, `${storageKey}.tmp-${randomUUID7()}`);
   await writeFile4(tmp, buf, { mode: 384 });
-  await rename2(tmp, join24(dir2, storageKey));
-  await chmod(join24(dir2, storageKey), 384).catch(() => {
+  await rename2(tmp, join25(dir2, storageKey));
+  await chmod(join25(dir2, storageKey), 384).catch(() => {
   });
 }
 var QA_STORAGE_KEY, QA_SYNC_MAX_BYTES, SNIFFABLE2, isUtf8Text2;
@@ -56420,7 +56449,7 @@ var init_sync_notify = __esm({
 // src/services/safe-repo-path.ts
 import { constants as constants3 } from "node:fs";
 import { lstat, mkdir as mkdir5, open as open2, realpath, rename as rename3, unlink as unlink4 } from "node:fs/promises";
-import { isAbsolute as isAbsolute10, join as join25, relative as relative6, resolve as resolve13, sep as sep7 } from "node:path";
+import { isAbsolute as isAbsolute10, join as join26, relative as relative6, resolve as resolve13, sep as sep7 } from "node:path";
 import { randomUUID as randomUUID8 } from "node:crypto";
 import { closeSync as closeSync3, fstatSync as fstatSync2, lstatSync as lstatSync9, mkdirSync as mkdirSync13, openSync as openSync3, readFileSync as readFileSync15, realpathSync as realpathSync7, renameSync as renameSync6, unlinkSync as unlinkSync4, writeFileSync as writeFileSync15 } from "node:fs";
 function components(rel) {
@@ -56444,7 +56473,7 @@ async function ensureRepoParents(root, rel) {
   const parts = components(rel).slice(0, -1);
   let current = base3;
   for (const part of parts) {
-    current = join25(current, part);
+    current = join26(current, part);
     try {
       await mkdir5(current, { mode: 448 });
     } catch (error) {
@@ -56461,7 +56490,7 @@ function ensureRepoParentsSync(root, rel) {
   const parts = components(rel).slice(0, -1);
   let current = base3;
   for (const part of parts) {
-    current = join25(current, part);
+    current = join26(current, part);
     try {
       mkdirSync13(current, { mode: 448 });
     } catch (error) {
@@ -56477,7 +56506,7 @@ async function resolveRepoEntry(root, rel, opts2 = {}) {
   const parts = components(rel);
   let current = base3;
   for (let i = 0; i < parts.length; i++) {
-    current = join25(current, parts[i]);
+    current = join26(current, parts[i]);
     const stat8 = await lstat(current).catch((error) => {
       if (error.code === "ENOENT" && opts2.allowMissingTail) return null;
       if (error.code === "ENOENT" && opts2.allowMissingFinal && i === parts.length - 1) return null;
@@ -56498,7 +56527,7 @@ function assertSafeRepoPathSync(root, rel, allowMissingFinal = false, allowMissi
   const parts = components(rel);
   let current = base3;
   for (let i = 0; i < parts.length; i++) {
-    current = join25(current, parts[i]);
+    current = join26(current, parts[i]);
     try {
       const stat8 = lstatSync9(current);
       if (stat8.isSymbolicLink()) denied("symlink");
@@ -56528,7 +56557,7 @@ function writeRepoFileAtomicSync(root, rel, data) {
   const parent = resolve13(path, "..");
   const parentRel = relative6(realpathSync7(root), parent);
   if (parentRel) assertSafeRepoPathSync(root, parentRel);
-  const temp = join25(parent, `.hanoman-${randomUUID8()}.tmp`);
+  const temp = join26(parent, `.hanoman-${randomUUID8()}.tmp`);
   const fd = openSync3(temp, constants3.O_WRONLY | constants3.O_CREAT | constants3.O_EXCL | (constants3.O_NOFOLLOW ?? 0), 384);
   try {
     writeFileSync15(fd, data);
@@ -56575,7 +56604,7 @@ async function writeRepoFileAtomic(root, rel, data) {
   await mkdir5(entry2.parent, { recursive: false, mode: 448 }).catch((error) => {
     if (error.code !== "EEXIST") throw error;
   });
-  const temp = join25(entry2.parent, `.hanoman-${randomUUID8()}.tmp`);
+  const temp = join26(entry2.parent, `.hanoman-${randomUUID8()}.tmp`);
   const handle = await open2(temp, constants3.O_WRONLY | constants3.O_CREAT | constants3.O_EXCL | (constants3.O_NOFOLLOW ?? 0), 384);
   try {
     await handle.writeFile(data);
@@ -56612,7 +56641,7 @@ var init_safe_repo_path = __esm({
 import { execFile as execFile5 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
 import { rmSync as rmSync9 } from "node:fs";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 async function worktreeForBranch(repoDir, branch) {
   let path = null;
   for (const line of (await out(repoDir, ["worktree", "list", "--porcelain"])).split("\n")) {
@@ -56645,7 +56674,7 @@ async function integrateBranch(repoDir, src, op, target3) {
   const tgt = await resolveTarget(repoDir, target3);
   if (!tgt) return { status: "error", code: 400, error: `target "${target3}" tidak dikenal` };
   await sh(repoDir, ["fetch", "origin"]);
-  const wt = join26(repoDir, ".worktrees", `merge-${sanitize(src.mergeId)}`);
+  const wt = join27(repoDir, ".worktrees", `merge-${sanitize(src.mergeId)}`);
   await reclaim(repoDir, wt);
   const baseRef = op === "merge" ? tgt.ref : source;
   const baseSha = await out(repoDir, ["rev-parse", "--verify", "--end-of-options", `${baseRef}^{commit}`]);
@@ -56706,7 +56735,7 @@ async function mergeIntoCurrent(repoDir, source, opts2 = {}) {
   const src = await resolveGraphSource(repoDir, source);
   if (!src) return { status: "error", code: 400, error: `source "${source}" tak dikenal` };
   await sh(repoDir, ["fetch", "origin"]);
-  const wt = join26(repoDir, ".worktrees", `merge-${sanitize(current)}`);
+  const wt = join27(repoDir, ".worktrees", `merge-${sanitize(current)}`);
   await reclaim(repoDir, wt);
   const baseSha = await out(repoDir, ["rev-parse", "--verify", "--end-of-options", `refs/heads/${current}^{commit}`]);
   if (!await ok(repoDir, ["worktree", "add", "--detach", "-q", wt, baseSha]))
@@ -56744,7 +56773,7 @@ async function replayCurrent(repoDir, source, cmd) {
   const current = await out(repoDir, ["rev-parse", "--abbrev-ref", "HEAD"]);
   if (!current || current === "HEAD")
     return { status: "error", code: 409, error: "HEAD detached \u2014 checkout sebuah branch dulu" };
-  const wt = join26(repoDir, ".worktrees", `merge-${sanitize(current)}`);
+  const wt = join27(repoDir, ".worktrees", `merge-${sanitize(current)}`);
   await reclaim(repoDir, wt);
   const baseSha = await out(repoDir, ["rev-parse", "--verify", "--end-of-options", `refs/heads/${current}^{commit}`]);
   if (!await ok(repoDir, ["worktree", "add", "--detach", "-q", wt, baseSha]))
@@ -56804,11 +56833,11 @@ import { execFile as execFile6 } from "node:child_process";
 import { promisify as promisify5 } from "node:util";
 import { mkdtemp, copyFile, rm as rm2 } from "node:fs/promises";
 import { tmpdir as tmpdir5 } from "node:os";
-import { join as join27, resolve as resolve15 } from "node:path";
+import { join as join28, resolve as resolve15 } from "node:path";
 async function withTempIndex(wt, fn) {
   const idx = (await exec4("git", ["rev-parse", "--git-path", "index"], { cwd: wt, ...GIT3 })).stdout.trim();
-  const dir2 = await mkdtemp(join27(tmpdir5(), "hanoman-idx-"));
-  const tmp = join27(dir2, "index");
+  const dir2 = await mkdtemp(join28(tmpdir5(), "hanoman-idx-"));
+  const tmp = join28(dir2, "index");
   await copyFile(resolve15(wt, idx), tmp);
   const env = { ...process.env, GIT_INDEX_FILE: tmp };
   try {
@@ -56954,7 +56983,7 @@ var init_spec_review2 = __esm({
     GIT3 = { maxBuffer: 1 << 24 };
     MAX = 256 * 1024;
     emptySpecReview = (reason) => ({ base: "", files: [], changed: [], empty: true, reason });
-    worktreeDir = (repoDir, specId) => join27(repoDir, ".worktrees", specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_"));
+    worktreeDir = (repoDir, specId) => join28(repoDir, ".worktrees", specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_"));
     splitZ = (s2) => s2.split("\0").filter(Boolean);
     EMPTY_TREE = "4b825dc642cb6eb9a060e54bf8d69288fbee4904";
   }
@@ -57531,6 +57560,12 @@ async function recordFailure(specId, title, projectId, reason) {
   }).catch(() => {
   });
 }
+async function recordFreeResumeIssue(sessionId2, title, projectId, reason) {
+  await prisma.notification.create({
+    data: { type: "fail", key: `fail:resume:${sessionId2}:${Date.now()}`, specId: null, sessionId: sessionId2, title: `Gagal: ${title} \u2014 ${reason}`, projectId }
+  }).catch(() => {
+  });
+}
 async function recordAutoMerge(specId, projectId, title) {
   const sessionId2 = specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
   await prisma.notification.create({
@@ -57655,7 +57690,7 @@ var init_notifications2 = __esm({
 
 // src/services/codex-trust.ts
 import { appendFileSync as appendFileSync3, mkdirSync as mkdirSync14, readFileSync as readFileSync16, realpathSync as realpathSync9 } from "node:fs";
-import { homedir as homedir5 } from "node:os";
+import { homedir as homedir6 } from "node:os";
 function ensureCodexTrust(repoDir, home3) {
   const path = codexConfigPath(home3);
   let canonical = repoDir;
@@ -57684,7 +57719,7 @@ var codexHome, codexConfigPath;
 var init_codex_trust = __esm({
   "src/services/codex-trust.ts"() {
     "use strict";
-    codexHome = (home3) => home3 ?? process.env.CODEX_HOME ?? `${homedir5()}/.codex`;
+    codexHome = (home3) => home3 ?? process.env.CODEX_HOME ?? `${homedir6()}/.codex`;
     codexConfigPath = (home3) => `${codexHome(home3)}/config.toml`;
   }
 });
@@ -57812,7 +57847,7 @@ var init_device_sockets = __esm({
 // src/services/exit-guard.ts
 import { spawn as spawn3 } from "node:child_process";
 import { writeFileSync as writeFileSync16 } from "node:fs";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 function watchdogScript(pid, graceMs) {
   const secs = Math.max(1, Math.ceil(graceMs / 1e3));
   return `s=$(ps -o lstart= -p ${pid}); sleep ${secs}; [ -n "$s" ] && [ "$(ps -o lstart= -p ${pid})" = "$s" ] && kill -9 ${pid}`;
@@ -57829,7 +57864,7 @@ function exitGuarded(code, d = {}) {
   const pid = d.pid ?? process.pid;
   try {
     const write2 = d.writeIntent ?? ((p3, t) => writeFileSync16(p3, t, { mode: 384 }));
-    write2(join31(d.home ?? resolveHome(), EXIT_INTENT_FILE), formatExitIntent(pid, code));
+    write2(join32(d.home ?? resolveHome(), EXIT_INTENT_FILE), formatExitIntent(pid, code));
   } catch {
   }
   try {
@@ -58306,7 +58341,7 @@ var init_remote_session = __esm({
 
 // src/services/spec-attachment-dir.ts
 import { mkdir as mkdir6, readdir as readdir5, readFile as readFile6, rm as rm4, writeFile as writeFile5 } from "node:fs/promises";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 function uniqueName(taken, filename) {
   if (!taken.has(filename)) {
     taken.add(filename);
@@ -58354,19 +58389,19 @@ async function syncSpecAttachmentsDir(specId, projectId) {
   for (const a of rows) {
     let bytes;
     try {
-      bytes = await readFile6(join32(uploadDir(), a.storageKey));
+      bytes = await readFile6(join33(uploadDir(), a.storageKey));
     } catch {
       continue;
     }
     const filename = uniqueName(taken, a.filename);
-    const path = join32(dir2, filename);
+    const path = join33(dir2, filename);
     await writeFile5(path, bytes, { mode: 384 });
     items.push({ filename, mimeType: a.mimeType, size: a.size, path });
   }
-  await writeFile5(join32(dir2, INDEX), renderIndex(specId, items), { mode: 384 });
+  await writeFile5(join33(dir2, INDEX), renderIndex(specId, items), { mode: 384 });
   const keep = /* @__PURE__ */ new Set([INDEX, ...items.map((a) => a.filename)]);
   for (const name2 of await readdir5(dir2)) {
-    if (!keep.has(name2)) await rm4(join32(dir2, name2), { recursive: true, force: true }).catch(() => {
+    if (!keep.has(name2)) await rm4(join33(dir2, name2), { recursive: true, force: true }).catch(() => {
     });
   }
   return items;
@@ -58385,7 +58420,7 @@ var init_spec_attachment_dir = __esm({
     init_local_binding();
     init_session_id();
     init_uploads();
-    specAttachmentsDir = (repoDir, sessionId2) => join32(repoDir, ".worktrees", ".attachments", sessionId2);
+    specAttachmentsDir = (repoDir, sessionId2) => join33(repoDir, ".worktrees", ".attachments", sessionId2);
     INDEX = "INDEX.md";
     humanSize = (n2) => n2 >= 1024 * 1024 ? `${(n2 / 1024 / 1024).toFixed(1)} MB` : n2 >= 1024 ? `${Math.round(n2 / 1024)} KB` : `${n2} B`;
   }
@@ -59243,10 +59278,10 @@ var init_keychain = __esm({
 // src/services/limits.ts
 import { execFileSync as execFileSync7 } from "node:child_process";
 import { readFileSync as readFileSync18 } from "node:fs";
-import { homedir as homedir6, userInfo as userInfo2 } from "node:os";
-import { join as join34 } from "node:path";
+import { homedir as homedir7, userInfo as userInfo2 } from "node:os";
+import { join as join35 } from "node:path";
 function credsFile() {
-  return join34(effectiveStr("CLAUDE_CONFIG_DIR") ?? join34(homedir6(), ".claude"), ".credentials.json");
+  return join35(effectiveStr("CLAUDE_CONFIG_DIR") ?? join35(homedir7(), ".claude"), ".credentials.json");
 }
 function keychainAccessToken(run6 = securityRun2, account = osAccount2()) {
   return readClaudeKeychainToken("Claude Code-credentials", run6, account);
@@ -59345,8 +59380,8 @@ var init_limits = __esm({
 
 // src/services/codex-limits.ts
 import { open as open3, readdir as readdir6, stat as stat6 } from "node:fs/promises";
-import { homedir as homedir7 } from "node:os";
-import { join as join35 } from "node:path";
+import { homedir as homedir8 } from "node:os";
+import { join as join36 } from "node:path";
 function windowLabel(minutes) {
   if (minutes === 300) return "Sesi 5 jam";
   if (minutes === 10080) return "Mingguan";
@@ -59377,7 +59412,7 @@ async function recentRollouts(dir2) {
     return [];
   }
   const stamped = await Promise.all(entries4.map(async (rel) => {
-    const full = join35(dir2, rel);
+    const full = join36(dir2, rel);
     try {
       return { full, mtime: (await stat6(full)).mtimeMs };
     } catch {
@@ -59457,7 +59492,7 @@ var init_codex_limits = __esm({
     MAX_FILES = 8;
     cache2 = null;
     freshUntil2 = 0;
-    codexSessionsDir = () => join35(process.env.CODEX_HOME ?? join35(homedir7(), ".codex"), "sessions");
+    codexSessionsDir = () => join36(process.env.CODEX_HOME ?? join36(homedir8(), ".codex"), "sessions");
     UNAVAILABLE = { status: "unavailable", windows: [], fetchedAt: null, plan: null };
     severityOf = (pct3) => pct3 >= 90 ? "critical" : pct3 >= 70 ? "warning" : "normal";
   }
@@ -59466,8 +59501,8 @@ var init_codex_limits = __esm({
 // src/services/antigravity-limits.ts
 import { execFileSync as execFileSync8 } from "node:child_process";
 import { readFileSync as readFileSync19 } from "node:fs";
-import { homedir as homedir8 } from "node:os";
-import { join as join36 } from "node:path";
+import { homedir as homedir9 } from "node:os";
+import { join as join37 } from "node:path";
 function parseAgyToken(raw) {
   try {
     let s2 = raw.trim();
@@ -59490,7 +59525,7 @@ function readAgyToken(run6 = securityRun3) {
 }
 function defaultProject() {
   try {
-    return readFileSync19(join36(agyHome(), "cache", "default_project_id.txt"), "utf8").trim() || null;
+    return readFileSync19(join37(agyHome(), "cache", "default_project_id.txt"), "utf8").trim() || null;
   } catch {
     return null;
   }
@@ -59580,7 +59615,7 @@ var init_antigravity_limits = __esm({
     freshUntil3 = 0;
     UNAVAILABLE2 = { status: "unavailable", windows: [], fetchedAt: null };
     securityRun3 = (args) => execFileSync8("security", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
-    agyHome = () => join36(homedir8(), ".gemini", "antigravity-cli");
+    agyHome = () => join37(homedir9(), ".gemini", "antigravity-cli");
     severityOf2 = (pct3) => pct3 >= 90 ? "critical" : pct3 >= 70 ? "warning" : "normal";
     prodDeps = {
       platform: process.platform,
@@ -60038,7 +60073,7 @@ var init_prompt2 = __esm({
 });
 
 // src/services/lead/verdict.ts
-import { existsSync as existsSync18 } from "node:fs";
+import { existsSync as existsSync19 } from "node:fs";
 import { isAbsolute as isAbsolute11, resolve as resolvePath2, relative as relative7 } from "node:path";
 function extractJsonBlock(raw) {
   const re = /```json\s*\n([\s\S]*?)```/g;
@@ -60074,7 +60109,7 @@ function keepExistingRefs(refs2, repoDir) {
     const full = resolvePath2(repoDir, ref);
     const rel = relative7(repoDir, full);
     if (rel.startsWith("..")) continue;
-    if (existsSync18(full)) out4.push(ref);
+    if (existsSync19(full)) out4.push(ref);
   }
   return [...new Set(out4)];
 }
@@ -65924,15 +65959,15 @@ var init_client2 = __esm({
 
 // src/services/logs/spool.ts
 import { appendFile, mkdir as mkdir7, readFile as readFile8, readdir as readdir7, rm as rm5, stat as stat7 } from "node:fs/promises";
-import { join as join37 } from "node:path";
+import { join as join38 } from "node:path";
 function spoolDir(lane) {
-  return join37(resolveDataDirs().home, "log-spool", lane);
+  return join38(resolveDataDirs().home, "log-spool", lane);
 }
 async function currentSegment(lane) {
   const dir2 = spoolDir(lane);
   await mkdir7(dir2, { recursive: true, mode: 448 });
   if (currentFile && currentBytes < LOG_SPOOL_SEGMENT_BYTES) return currentFile;
-  currentFile = join37(dir2, `${Date.now()}-${++segCounter}.ndjson`);
+  currentFile = join38(dir2, `${Date.now()}-${++segCounter}.ndjson`);
   currentBytes = 0;
   return currentFile;
 }
@@ -65954,7 +65989,7 @@ async function readSpoolSegments(lane) {
   const files2 = names.filter((n2) => n2.endsWith(".ndjson")).sort();
   const out4 = [];
   for (const name2 of files2) {
-    const file = join37(dir2, name2);
+    const file = join38(dir2, name2);
     const raw = await readFile8(file, "utf8").catch(() => "");
     const entries4 = raw.split("\n").filter(Boolean).map((l) => JSON.parse(l));
     out4.push({ file, entries: entries4 });
@@ -66619,8 +66654,8 @@ var init_git_token = __esm({
 
 // src/services/project-checkout.ts
 import { execFile as execFile14, spawnSync as spawnSync4 } from "node:child_process";
-import { existsSync as existsSync19, readdirSync as readdirSync10, rmSync as rmSync10 } from "node:fs";
-import { join as join38 } from "node:path";
+import { existsSync as existsSync20, readdirSync as readdirSync11, rmSync as rmSync10 } from "node:fs";
+import { join as join39 } from "node:path";
 import { promisify as promisify13 } from "node:util";
 async function runGit(args, o) {
   const full = o.token ? ["-c", "credential.helper=", ...args] : args;
@@ -66642,8 +66677,8 @@ async function doClone(projectId, opts2) {
   if (!project) throw new CheckoutError(`project "${projectId}" tidak ada`, "not-found");
   if (!project.gitRemote) throw new CheckoutError(`project "${projectId}" tidak punya gitRemote untuk di-clone`, "no-remote");
   const remote = project.gitRemote;
-  const dest = opts2.dir ?? join38(checkoutRoot(), slug(project.id));
-  if (existsSync19(dest) && !isEmptyDir(dest)) {
+  const dest = opts2.dir ?? join39(checkoutRoot(), slug(project.id));
+  if (existsSync20(dest) && !isEmptyDir(dest)) {
     const origin = originOf2(dest);
     if (origin && sameRemote(origin, remote)) {
       await setBinding(projectId, dest);
@@ -66706,7 +66741,7 @@ var init_project_checkout = __esm({
     CLONE_TIMEOUT_MS = 10 * 6e4;
     FETCH_TIMEOUT_MS = 2 * 6e4;
     AUTH_RE = /Authentication failed|could not read (Username|Password)|Invalid username or password|HTTP 40[13]|returned error: 40[13]|Repository not found|Permission denied \(publickey\)/i;
-    checkoutRoot = () => join38(resolveHome(), "projects");
+    checkoutRoot = () => join39(resolveHome(), "projects");
     slug = (id2) => id2.toLowerCase().replace(/[^a-z0-9_-]+/g, "-").replace(/^-+|-+$/g, "") || "project";
     sameRemote = (a, b) => {
       const norm5 = (u) => httpsRemote(u).replace(/\.git$/, "").replace(/\/+$/, "").toLowerCase();
@@ -66715,7 +66750,7 @@ var init_project_checkout = __esm({
     redact = (text2, token) => token ? text2.split(token).join("***") : text2;
     isEmptyDir = (dir2) => {
       try {
-        return readdirSync10(dir2).length === 0;
+        return readdirSync11(dir2).length === 0;
       } catch {
         return false;
       }
@@ -68470,16 +68505,16 @@ var init_codex_version = __esm({
 
 // src/services/agent-tool-catalog.ts
 import { readFileSync as readFileSync31 } from "node:fs";
-import { homedir as homedir16 } from "node:os";
-import { join as join56 } from "node:path";
+import { homedir as homedir17 } from "node:os";
+import { join as join57 } from "node:path";
 function mcpServerNames(repoDir) {
   const names = [];
-  const claudeJson = readJson2(join56(home(), ".claude.json"));
+  const claudeJson = readJson2(join57(home(), ".claude.json"));
   names.push(...serversOf(claudeJson));
   if (repoDir) {
     const projects = claudeJson?.projects;
     if (projects && typeof projects === "object") names.push(...serversOf(projects[repoDir]));
-    names.push(...serversOf(readJson2(join56(repoDir, ".mcp.json"))));
+    names.push(...serversOf(readJson2(join57(repoDir, ".mcp.json"))));
   }
   names.push(...codexServers());
   return [...new Set(names.filter(Boolean))].sort((a, b) => a.localeCompare(b));
@@ -68492,7 +68527,7 @@ var init_agent_tool_catalog = __esm({
   "src/services/agent-tool-catalog.ts"() {
     "use strict";
     init_src();
-    home = () => process.env.HOME || homedir16();
+    home = () => process.env.HOME || homedir17();
     readJson2 = (path) => {
       try {
         return JSON.parse(readFileSync31(path, "utf8"));
@@ -68508,7 +68543,7 @@ var init_agent_tool_catalog = __esm({
     codexServers = () => {
       let text2;
       try {
-        text2 = readFileSync31(join56(home(), ".codex", "config.toml"), "utf8");
+        text2 = readFileSync31(join57(home(), ".codex", "config.toml"), "utf8");
       } catch {
         return [];
       }
@@ -72128,7 +72163,7 @@ import websocket from "@fastify/websocket";
 import cookie from "@fastify/cookie";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
 import { dirname as dirname19 } from "node:path";
-import { existsSync as existsSync26 } from "node:fs";
+import { existsSync as existsSync27 } from "node:fs";
 
 // src/web-dir.ts
 import { resolve as resolve11 } from "node:path";
@@ -72192,7 +72227,7 @@ init_uploads();
 import { randomUUID as randomUUID6 } from "node:crypto";
 import { spawn as spawn2 } from "node:child_process";
 import { mkdir as mkdir3, rename, unlink as unlink3, writeFile as writeFile3 } from "node:fs/promises";
-import { basename as basename7, isAbsolute as isAbsolute9, join as join23 } from "node:path";
+import { basename as basename7, isAbsolute as isAbsolute9, join as join24 } from "node:path";
 import sharp from "sharp";
 var UPLOAD_LIMITS = {
   fileBytes: 5 * 1024 * 1024,
@@ -72266,16 +72301,16 @@ function safeFilename2(input, extension2) {
 }
 async function commitToStorage(buffer, extension2, deps, beforePromote) {
   const storageDir = deps.storageDir ?? uploadDir();
-  const quarantineDir = join23(storageDir, ".quarantine");
+  const quarantineDir = join24(storageDir, ".quarantine");
   await mkdir3(quarantineDir, { recursive: true, mode: 448 });
   await mkdir3(storageDir, { recursive: true, mode: 448 });
-  const quarantine = join23(quarantineDir, `${randomUUID6()}.upload`);
+  const quarantine = join24(quarantineDir, `${randomUUID6()}.upload`);
   const storageKey = `${randomUUID6()}${extension2}`;
   await writeFile3(quarantine, buffer, { mode: 384, flag: "wx" });
   try {
     await timeout((deps.scanner ?? scannerFromEnv)(quarantine), UPLOAD_LIMITS.scanMs, "UPLOAD_SCAN");
     await beforePromote?.();
-    await rename(quarantine, join23(storageDir, storageKey));
+    await rename(quarantine, join24(storageDir, storageKey));
   } catch (error) {
     await unlink3(quarantine).catch(() => {
     });
@@ -72731,7 +72766,7 @@ init_src();
 init_safe_repo_path();
 import { execFile as execFile3 } from "node:child_process";
 import { promisify as promisify2 } from "node:util";
-import { existsSync as existsSync13, rmSync as rmSync8 } from "node:fs";
+import { existsSync as existsSync14, rmSync as rmSync8 } from "node:fs";
 import { resolve as resolve14 } from "node:path";
 var exec = promisify2(execFile3);
 async function listRepoDocs(repoDir) {
@@ -72756,12 +72791,12 @@ function docsDirOf(repoDir) {
 }
 function resolveIndex(repoDir, docsDir) {
   const rel = `${docsDir}/README.md`;
-  return existsSync13(resolve14(repoDir, rel)) ? rel : "";
+  return existsSync14(resolve14(repoDir, rel)) ? rel : "";
 }
 var catOf = (rel) => rel.includes("/") ? rel.slice(0, rel.lastIndexOf("/")) : ".";
 var nameOf = (rel) => rel.includes("/") ? rel.slice(rel.lastIndexOf("/") + 1) : rel;
 async function scanRepoDocs(repoDir) {
-  if (!repoDir || !existsSync13(repoDir)) return { coverage: 0, tree: [] };
+  if (!repoDir || !existsSync14(repoDir)) return { coverage: 0, tree: [] };
   const files2 = await listRepoDocs(repoDir);
   const docsDir = docsDirOf(repoDir);
   const index = resolveIndex(repoDir, docsDir);
@@ -72809,7 +72844,7 @@ function writeDocFile(repoDir, rel, content) {
 }
 function deleteDocFile(repoDir, rel) {
   const abs = docAbsPath(repoDir, rel);
-  if (!existsSync13(abs)) return false;
+  if (!existsSync14(abs)) return false;
   rmSync8(abs);
   return true;
 }
@@ -73128,7 +73163,7 @@ async function projects_default(app3) {
 init_src();
 init_src2();
 init_integrate();
-import { existsSync as existsSync17 } from "node:fs";
+import { existsSync as existsSync18 } from "node:fs";
 import { basename as basename9 } from "node:path";
 
 // src/services/worktree-delete.ts
@@ -73147,7 +73182,7 @@ init_spec_review2();
 init_safe_repo_path();
 import { execFile as execFile7 } from "node:child_process";
 import { promisify as promisify6 } from "node:util";
-import { existsSync as existsSync14 } from "node:fs";
+import { existsSync as existsSync15 } from "node:fs";
 import { readdir as readdir3 } from "node:fs/promises";
 import { resolve as resolve16 } from "node:path";
 var exec5 = promisify6(execFile7);
@@ -73160,7 +73195,7 @@ function repoAbsPath(repoDir, rel, allowMissingFinal = false) {
   return resolve16(repoDir, rel);
 }
 async function listRepoTree(repoDir, ref = "") {
-  if (!repoDir || !existsSync14(repoDir)) return [];
+  if (!repoDir || !existsSync15(repoDir)) return [];
   try {
     const { stdout } = ref ? await exec5("git", ["ls-tree", "-r", "--name-only", "-z", ref], { cwd: repoDir, ...GIT4 }) : await exec5("git", ["ls-files", "--cached", "--others", "--exclude-standard", "-z"], { cwd: repoDir, ...GIT4 });
     return [...new Set(splitZ2(stdout))].sort();
@@ -73170,7 +73205,7 @@ async function listRepoTree(repoDir, ref = "") {
 }
 async function listIgnoredEntries(repoDir) {
   const empty = { files: [], dirs: [] };
-  if (!repoDir || !existsSync14(repoDir)) return empty;
+  if (!repoDir || !existsSync15(repoDir)) return empty;
   try {
     const { stdout } = await exec5(
       "git",
@@ -73223,7 +73258,7 @@ async function currentBranch(repoDir) {
 }
 async function repoStatus(repoDir) {
   const empty = { branch: "", ahead: 0, behind: 0, staged: [], unstaged: [], untracked: [], clean: true };
-  if (!repoDir || !existsSync14(repoDir)) return empty;
+  if (!repoDir || !existsSync15(repoDir)) return empty;
   try {
     const { stdout } = await exec5("git", ["status", "--porcelain=v1", "-z", "-b"], { cwd: repoDir, ...GIT4 });
     const parts = stdout.split("\0");
@@ -73256,7 +73291,7 @@ async function repoStatus(repoDir) {
   }
 }
 async function listStashes(repoDir) {
-  if (!repoDir || !existsSync14(repoDir)) return [];
+  if (!repoDir || !existsSync15(repoDir)) return [];
   try {
     const { stdout } = await exec5("git", ["stash", "list", `--format=%gd${US}%s${US}%aI`], { cwd: repoDir, ...GIT4 });
     return stdout.split("\n").filter(Boolean).map((line) => {
@@ -73268,7 +73303,7 @@ async function listStashes(repoDir) {
   }
 }
 async function listGraph(repoDir, limit = 200, opts2 = {}) {
-  if (!repoDir || !existsSync14(repoDir)) return { commits: [], current: "", total: 0 };
+  if (!repoDir || !existsSync15(repoDir)) return { commits: [], current: "", total: 0 };
   try {
     const fmt = ["%H", "%P", "%an", "%aI", "%s", "%D"].join(US);
     const refArgs = opts2.branches?.length ? ["--end-of-options", ...opts2.branches] : [
@@ -73338,7 +73373,7 @@ async function changedOf(repoDir, sha2) {
 }
 async function compareCommits(repoDir, from, to) {
   const empty = { from, to, changed: [] };
-  if (!repoDir || !existsSync14(repoDir)) return empty;
+  if (!repoDir || !existsSync15(repoDir)) return empty;
   try {
     const [num, name2] = await Promise.all([
       exec5("git", ["diff", "--numstat", "-z", "--no-renames", "--end-of-options", from, to], { cwd: repoDir, ...GIT4 }),
@@ -73350,7 +73385,7 @@ async function compareCommits(repoDir, from, to) {
   }
 }
 async function searchCommits(repoDir, q2, by = "all") {
-  if (!repoDir || !existsSync14(repoDir) || !q2) return [];
+  if (!repoDir || !existsSync15(repoDir) || !q2) return [];
   const run6 = async (extra) => {
     try {
       return (await exec5("git", ["log", "--all", "--format=%H", ...extra], { cwd: repoDir, ...GIT4 })).stdout.split("\n").filter(Boolean);
@@ -73597,7 +73632,7 @@ async function runGitOp(repoDir, op) {
   }
 }
 async function workingStatus(repoDir) {
-  if (!repoDir || !existsSync14(repoDir)) return { branch: "", staged: [], unstaged: [] };
+  if (!repoDir || !existsSync15(repoDir)) return { branch: "", staged: [], unstaged: [] };
   const [branch, staged, unstaged] = await Promise.all([
     currentBranch(repoDir),
     changedFiles(repoDir, ["--cached"]),
@@ -73606,7 +73641,7 @@ async function workingStatus(repoDir) {
   return { branch, staged, unstaged };
 }
 async function workingFileDiff(repoDir, path, staged) {
-  if (!repoDir || !existsSync14(repoDir)) return null;
+  if (!repoDir || !existsSync15(repoDir)) return null;
   repoAbsPath(repoDir, path, true);
   const changed = staged ? await changedFiles(repoDir, ["--cached"]) : await withTempIndex(repoDir, (env) => changedFiles(repoDir, [], env));
   const cf = changed.find((c) => c.path === path);
@@ -73815,7 +73850,7 @@ async function deleteBranches(repoDir, names, opts2) {
 import { execFile as execFile9 } from "node:child_process";
 import { realpathSync as realpathSync8 } from "node:fs";
 import { stat as stat5 } from "node:fs/promises";
-import { basename as basename8, dirname as dirname13, join as join28, resolve as resolve17, sep as sep8 } from "node:path";
+import { basename as basename8, dirname as dirname13, join as join29, resolve as resolve17, sep as sep8 } from "node:path";
 import { promisify as promisify8 } from "node:util";
 var exec7 = promisify8(execFile9);
 var GIT6 = { timeout: 6e4, maxBuffer: 1 << 24, encoding: "utf8" };
@@ -73857,7 +73892,7 @@ var real = (p3) => {
   } catch {
     const path = resolve17(p3);
     const parent = dirname13(path);
-    return parent === path ? path : join28(real(parent), basename8(path));
+    return parent === path ? path : join29(real(parent), basename8(path));
   }
 };
 function hasWorktreeSession(path, sessionId2, sessions) {
@@ -73869,7 +73904,7 @@ function hasWorktreeSession(path, sessionId2, sessions) {
 }
 async function bornAt(path) {
   try {
-    const st2 = await stat5(join28(path, ".git"));
+    const st2 = await stat5(join29(path, ".git"));
     const ms = st2.birthtimeMs > 0 ? st2.birthtimeMs : st2.mtimeMs;
     return new Date(ms).toISOString();
   } catch {
@@ -74097,7 +74132,7 @@ init_notifications2();
 import { execFile as execFile11 } from "node:child_process";
 import { readdir as readdir4, rm as rm3 } from "node:fs/promises";
 import { promisify as promisify10 } from "node:util";
-import { join as join29, resolve as resolve19 } from "node:path";
+import { join as join30, resolve as resolve19 } from "node:path";
 var TICK_MS = 6e4;
 var trashDirOf = (repoDir) => resolve19(repoDir, ".worktrees", ".trash");
 var exec8 = promisify10(execFile11);
@@ -74158,7 +74193,7 @@ async function sweepRepo(repoDir, projectId, deps = prodReaperDeps) {
   }
   let removed = 0;
   for (const entry2 of entries4) {
-    const path = join29(dir2, entry2);
+    const path = join30(dir2, entry2);
     const known2 = pending.get(path);
     const row = known2 ?? { path, repoDir, projectId, entry: entry2, sessionId: sessionIdOf(entry2), since: Date.now() };
     pending.set(path, row);
@@ -74301,8 +74336,10 @@ async function beginSession(b) {
       effort: b.effort ?? null,
       branch: b.branch ?? null,
       cwd: b.cwd,
-      accountId: b.accountId ?? null
+      accountId: b.accountId ?? null,
       // ADR-0234
+      agentSessionId: b.agentSessionId ?? null
+      // ADR-0235
     }
   });
 }
@@ -74480,6 +74517,35 @@ async function reconciledRuntimesSince(cutoff) {
   }
   return out4;
 }
+var FREE_FLOW_KINDS = /* @__PURE__ */ new Set(["reverse", "prd", "scaffold", "breakdown"]);
+async function reconciledFreeSessionsSince(cutoff) {
+  const rows = await prisma.sessionHistory.findMany({
+    where: { endedReason: RECONCILED, reconciledAt: { gte: cutoff }, specId: null },
+    orderBy: { startedAt: "desc" }
+  });
+  const seen2 = /* @__PURE__ */ new Set();
+  const out4 = [];
+  for (const r of rows) {
+    if (seen2.has(r.sessionId)) continue;
+    seen2.add(r.sessionId);
+    const eligible = r.kind === "terminal" || r.kind === "shell" || FREE_FLOW_KINDS.has(r.kind) || r.kind === "worktree" && r.sessionId.startsWith("term-");
+    if (!eligible) continue;
+    out4.push({
+      sessionId: r.sessionId,
+      projectId: r.projectId,
+      kind: r.kind,
+      flow: r.flow,
+      agent: r.agent === "antigravity" ? "antigravity" : r.agent === "codex" ? "codex" : "claude",
+      ...r.model ? { model: r.model } : {},
+      ...r.effort ? { effort: r.effort } : {},
+      ...r.accountId ? { accountId: r.accountId } : {},
+      ...r.branch ? { branch: r.branch } : {},
+      cwd: r.cwd,
+      ...r.agentSessionId ? { agentSessionId: r.agentSessionId } : {}
+    });
+  }
+  return out4.reverse();
+}
 function installSessionHistory() {
   registerSessionHooks({
     onBirth: (b) => {
@@ -74626,8 +74692,8 @@ function appendSourceHistory(current, entry2) {
 
 // src/services/spec-reset.ts
 import { execFile as execFile13 } from "node:child_process";
-import { existsSync as existsSync15 } from "node:fs";
-import { join as join30 } from "node:path";
+import { existsSync as existsSync16 } from "node:fs";
+import { join as join31 } from "node:path";
 import { promisify as promisify12 } from "node:util";
 
 // src/services/stage-artifacts.ts
@@ -74682,14 +74748,14 @@ async function planSpecReset(spec) {
   const repoDir = await resolveRepoDir(spec.projectId);
   if (!repoDir) return EMPTY3;
   const sid = sessionIdForSpec(spec.id);
-  const wt = join30(repoDir, ".worktrees", sid);
+  const wt = join31(repoDir, ".worktrees", sid);
   const branch = `hanoman/${sid}`;
   const hasBranch = await shaResolvable(repoDir, `refs/heads/${branch}`);
   return {
     // Berkas fase seluruh stage yang ditinggalkan — rentang yang sama persis dengan revert stage
     // SPEC-167, karena tujuan akhirnya memang sama: item berdiri lagi di `brainstorming`.
     wouldDelete: await artifactsToRemove(spec.projectId, spec.id, "brainstorming", spec.stage),
-    worktree: existsSync15(wt) ? wt : null,
+    worktree: existsSync16(wt) ? wt : null,
     branch: hasBranch ? branch : null
   };
 }
@@ -74770,9 +74836,9 @@ init_uploads();
 // src/services/spec-mockups.ts
 init_local_binding();
 init_spec_review2();
-import { existsSync as existsSync16, readdirSync as readdirSync9, realpathSync as realpathSync10, statSync as statSync5 } from "node:fs";
+import { existsSync as existsSync17, readdirSync as readdirSync10, realpathSync as realpathSync10, statSync as statSync5 } from "node:fs";
 import { readFile as readFile7 } from "node:fs/promises";
-import { extname as extname2, join as join33, sep as sep10 } from "node:path";
+import { extname as extname2, join as join34, sep as sep10 } from "node:path";
 var MOCKUP_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*\.(png|jpe?g|webp)$/i;
 var MIME = { ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".webp": "image/webp" };
 var isDir = (p3) => {
@@ -74785,18 +74851,18 @@ var isDir = (p3) => {
 async function resolveMockupDir(spec) {
   const repoDir = await resolveRepoDir(spec.projectId);
   if (!repoDir) return null;
-  const rel = join33("docs", "mockups", spec.id.toLowerCase());
-  const worktree = join33(worktreeDir(repoDir, spec.id), rel);
+  const rel = join34("docs", "mockups", spec.id.toLowerCase());
+  const worktree = join34(worktreeDir(repoDir, spec.id), rel);
   if (isDir(worktree)) return { source: "worktree", dir: worktree };
-  const repo = join33(repoDir, rel);
+  const repo = join34(repoDir, rel);
   return isDir(repo) ? { source: "repo", dir: repo } : null;
 }
 async function listMockups(spec) {
   const found = await resolveMockupDir(spec);
   if (!found) return { source: null, dir: null, items: [] };
-  const items = readdirSync9(found.dir).filter((n2) => MOCKUP_NAME.test(n2)).sort().flatMap((name2) => {
+  const items = readdirSync10(found.dir).filter((n2) => MOCKUP_NAME.test(n2)).sort().flatMap((name2) => {
     try {
-      const st2 = statSync5(join33(found.dir, name2));
+      const st2 = statSync5(join34(found.dir, name2));
       return st2.isFile() ? [{ name: name2, size: st2.size, modifiedAt: st2.mtime.toISOString() }] : [];
     } catch {
       return [];
@@ -74808,8 +74874,8 @@ async function readMockup(spec, name2) {
   if (!MOCKUP_NAME.test(name2)) return null;
   const found = await resolveMockupDir(spec);
   if (!found) return null;
-  const file = join33(found.dir, name2);
-  if (!existsSync16(file)) return null;
+  const file = join34(found.dir, name2);
+  if (!existsSync17(file)) return null;
   try {
     const root = realpathSync10(found.dir);
     const real2 = realpathSync10(file);
@@ -77835,7 +77901,7 @@ ${item.context}` : item.context;
   });
   const specWithProject = (id2) => prisma.spec.findUnique({ where: { id: id2 }, include: { project: true } });
   const resolveReview = async (repoDir, spec) => {
-    if (existsSync17(worktreeDir(repoDir, spec.id))) return { wt: true };
+    if (existsSync18(worktreeDir(repoDir, spec.id))) return { wt: true };
     if (spec.baseSha && spec.headSha && await shaResolvable(repoDir, spec.baseSha) && await shaResolvable(repoDir, spec.headSha))
       return { wt: false, base: spec.baseSha, head: spec.headSha };
     const r = await specCommitRange(repoDir, spec.id);
@@ -78133,7 +78199,7 @@ import { spawn as spawn5 } from "node:child_process";
 // src/services/git-remotes.ts
 import { execFile as execFile16 } from "node:child_process";
 import { promisify as promisify15 } from "node:util";
-import { existsSync as existsSync20 } from "node:fs";
+import { existsSync as existsSync21 } from "node:fs";
 var exec10 = promisify15(execFile16);
 var GIT7 = { maxBuffer: 1 << 24, encoding: "utf8" };
 function parseRemote(url2) {
@@ -78152,7 +78218,7 @@ function prUrl(remoteUrl, branch, base3 = "main") {
   return null;
 }
 async function listRemotes(repoDir) {
-  if (!repoDir || !existsSync20(repoDir)) return [];
+  if (!repoDir || !existsSync21(repoDir)) return [];
   try {
     const { stdout } = await exec10("git", ["remote", "-v"], { cwd: repoDir, ...GIT7 });
     const map = /* @__PURE__ */ new Map();
@@ -78200,7 +78266,7 @@ init_integrate();
 init_safe_repo_path();
 import { lstat as lstat2, rename as rename4, rm as rm6 } from "node:fs/promises";
 import { createWriteStream } from "node:fs";
-import { join as join39 } from "node:path";
+import { join as join40 } from "node:path";
 import { randomUUID as randomUUID11 } from "node:crypto";
 import { pipeline } from "node:stream/promises";
 var EntryExistsError = class extends Error {
@@ -78261,7 +78327,7 @@ async function saveUpload2(repoDir, rel, source, opts2 = {}) {
   if (current && !opts2.overwrite) return { status: "exists" };
   if (current && !current.isFile())
     throw new PathContainmentError("repository path ditolak: target bukan file regular");
-  const temp = join39(entry2.parent, `.hanoman-${randomUUID11()}.tmp`);
+  const temp = join40(entry2.parent, `.hanoman-${randomUUID11()}.tmp`);
   try {
     await pipeline(source, createWriteStream(temp, { flags: "wx", mode: 384 }));
     if (opts2.isTruncated?.()) {
@@ -78751,15 +78817,15 @@ async function finishGraphOp(reply, id2, repoDir, r, verb) {
 
 // src/routes/fs.ts
 import { readdir as readdir8 } from "node:fs/promises";
-import { homedir as homedir9 } from "node:os";
-import { resolve as resolve22, dirname as dirname16, join as join40 } from "node:path";
+import { homedir as homedir10 } from "node:os";
+import { resolve as resolve22, dirname as dirname16, join as join41 } from "node:path";
 async function fs_default(app3) {
   app3.get("/fs/browse", async (req, reply) => {
     const q2 = req.query.path;
-    const dir2 = q2 && q2.trim() ? resolve22(q2.trim()) : homedir9();
+    const dir2 = q2 && q2.trim() ? resolve22(q2.trim()) : homedir10();
     try {
       const ents = await readdir8(dir2, { withFileTypes: true });
-      const entries4 = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join40(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
+      const entries4 = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join41(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
       const parent = dirname16(dir2);
       return { path: dir2, parent: parent === dir2 ? null : parent, entries: entries4 };
     } catch {
@@ -78774,7 +78840,7 @@ init_src();
 init_src2();
 init_session_phases();
 init_spec_review2();
-import { existsSync as existsSync22 } from "node:fs";
+import { existsSync as existsSync23 } from "node:fs";
 import { execFileSync as execFileSync10 } from "node:child_process";
 import { randomUUID as randomUUID14 } from "node:crypto";
 init_integrate();
@@ -79134,13 +79200,13 @@ init_local_binding();
 
 // src/services/terminal-diag.ts
 import { appendFileSync as appendFileSync4, mkdirSync as mkdirSync17, statSync as statSync6, rmSync as rmSync11 } from "node:fs";
-import { join as join41 } from "node:path";
+import { join as join42 } from "node:path";
 var DIAG_MAX_BYTES = 2 * 1024 * 1024;
 var KINDS = /* @__PURE__ */ new Set(["key", "comp", "data", "ack", "pred"]);
 var ID = /^[A-Za-z0-9_-]{1,64}$/;
 function diagFile(home3, sessionId2) {
   if (!ID.test(sessionId2)) throw new Error(`id sesi tak sah untuk diag: ${sessionId2}`);
-  return join41(home3, "diag", `${sessionId2}.jsonl`);
+  return join42(home3, "diag", `${sessionId2}.jsonl`);
 }
 function usable(ev) {
   if (!ev || typeof ev !== "object") return false;
@@ -79151,7 +79217,7 @@ function appendDiag(home3, sessionId2, events) {
   const file = diagFile(home3, sessionId2);
   const rows = events.filter(usable);
   if (!rows.length) return;
-  mkdirSync17(join41(home3, "diag"), { recursive: true });
+  mkdirSync17(join42(home3, "diag"), { recursive: true });
   try {
     if (statSync6(file).size > DIAG_MAX_BYTES) rmSync11(file);
   } catch {
@@ -79167,19 +79233,19 @@ import { randomUUID as randomUUID12 } from "node:crypto";
 import { rmSync as rmSync12 } from "node:fs";
 
 // src/services/runtime-accounts/home.ts
-import { chmodSync as chmodSync10, existsSync as existsSync21, lstatSync as lstatSync10, mkdirSync as mkdirSync18, readFileSync as readFileSync20, readlinkSync as readlinkSync3, renameSync as renameSync7, symlinkSync as symlinkSync2, writeFileSync as writeFileSync18 } from "node:fs";
-import { join as join43 } from "node:path";
+import { chmodSync as chmodSync10, existsSync as existsSync22, lstatSync as lstatSync10, mkdirSync as mkdirSync18, readFileSync as readFileSync20, readlinkSync as readlinkSync3, renameSync as renameSync7, symlinkSync as symlinkSync2, writeFileSync as writeFileSync18 } from "node:fs";
+import { join as join44 } from "node:path";
 
 // src/services/runtime-accounts/paths.ts
 init_src2();
-import { homedir as homedir10 } from "node:os";
-import { join as join42, resolve as resolve23, sep as sep11 } from "node:path";
-var accountsRoot = (env = process.env) => join42(resolveHome(env), "accounts");
-var accountHomeDir = (runtime, id2, env = process.env) => join42(accountsRoot(env), runtime, id2);
+import { homedir as homedir11 } from "node:os";
+import { join as join43, resolve as resolve23, sep as sep11 } from "node:path";
+var accountsRoot = (env = process.env) => join43(resolveHome(env), "accounts");
+var accountHomeDir = (runtime, id2, env = process.env) => join43(accountsRoot(env), runtime, id2);
 var baseHome = (runtime, env = process.env) => agentSkillHome(runtime, env);
-function baseClaudeJson(env = process.env, osHome = homedir10()) {
+function baseClaudeJson(env = process.env, osHome = homedir11()) {
   const own = env.HANOMAN_CLAUDE_HOME?.trim() || env.CLAUDE_CONFIG_DIR?.trim();
-  return own ? join42(own, ".claude.json") : join42(osHome, ".claude.json");
+  return own ? join43(own, ".claude.json") : join43(osHome, ".claude.json");
 }
 function insideAccountsRoot(path, env = process.env) {
   return resolve23(path).startsWith(resolve23(accountsRoot(env)) + sep11);
@@ -79207,19 +79273,19 @@ function classify(target3, link2) {
   } catch {
     st2 = null;
   }
-  if (!st2) return existsSync21(target3) ? "absent" : "no-target";
+  if (!st2) return existsSync22(target3) ? "absent" : "no-target";
   if (st2.isSymbolicLink()) return readlinkSync3(link2) === target3 ? "ok" : "drift";
   return "drift";
 }
 function inspectAccountHome(runtime, homeDir, base3 = baseHome(runtime)) {
-  return SHARED_ENTRIES[runtime].filter((e) => classify(join43(base3, e), join43(homeDir, e)) === "drift");
+  return SHARED_ENTRIES[runtime].filter((e) => classify(join44(base3, e), join44(homeDir, e)) === "drift");
 }
 function ensureAccountHome(runtime, homeDir, base3 = baseHome(runtime)) {
   mkdirSync18(homeDir, { recursive: true, mode: 448 });
   chmodSync10(homeDir, 448);
   const linked = [], drift = [];
   for (const entry2 of SHARED_ENTRIES[runtime]) {
-    const target3 = join43(base3, entry2), link2 = join43(homeDir, entry2);
+    const target3 = join44(base3, entry2), link2 = join44(homeDir, entry2);
     const state = classify(target3, link2);
     if (state === "drift") drift.push(entry2);
     else if (state === "absent") {
@@ -79236,7 +79302,7 @@ function mirrorClaudeJson(accountHome, baseJsonPath = baseClaudeJson()) {
   } catch {
     return;
   }
-  const path = join43(accountHome, ".claude.json");
+  const path = join44(accountHome, ".claude.json");
   let acct = {};
   try {
     acct = JSON.parse(readFileSync20(path, "utf8"));
@@ -79267,7 +79333,7 @@ init_keychain();
 init_pty();
 import { execFile as execFile17 } from "node:child_process";
 import { readFileSync as readFileSync21 } from "node:fs";
-import { join as join44 } from "node:path";
+import { join as join45 } from "node:path";
 var NONE2 = { loggedIn: false, identity: null };
 var execOut = (bin, args, env) => new Promise((res, rej) => {
   execFile17(bin, args, { env, encoding: "utf8", timeout: 15e3 }, (err, stdout) => stdout ? res(stdout) : rej(err));
@@ -79303,7 +79369,7 @@ function decodeJwtClaims(token) {
 function probeCodexLogin(codexHome2) {
   let j;
   try {
-    j = JSON.parse(readFileSync21(join44(codexHome2, "auth.json"), "utf8"));
+    j = JSON.parse(readFileSync21(join45(codexHome2, "auth.json"), "utf8"));
   } catch {
     return NONE2;
   }
@@ -79523,8 +79589,8 @@ init_antigravity_limits();
 init_pty();
 init_keychain();
 import { chmodSync as chmodSync11, mkdirSync as mkdirSync19, readFileSync as readFileSync22, rmSync as rmSync13, writeFileSync as writeFileSync19 } from "node:fs";
-import { homedir as homedir11 } from "node:os";
-import { join as join45 } from "node:path";
+import { homedir as homedir12 } from "node:os";
+import { join as join46 } from "node:path";
 var BUILTIN = builtinAccountId("antigravity");
 var isAgyLoginSession = (sessionId2) => sessionId2 === "acct-login-default-antigravity" || accountSnapshot().rows.some((r) => r.runtime === "antigravity" && sessionId2 === `acct-login-${r.id}`);
 var liveAgySessions = () => listSessions().filter((s2) => !s2.exited && (s2.agent === "antigravity" || isAgyLoginSession(s2.id)));
@@ -79542,20 +79608,20 @@ var fsAgyIo = () => ({
     chmodSync11(p3, 384);
   },
   removeFile: (p3) => rmSync13(p3, { force: true }),
-  tokenFile: join45(homedir11(), ".gemini", "antigravity-cli", "antigravity-oauth-token"),
-  accountsDir: join45(accountsRoot(), "antigravity"),
+  tokenFile: join46(homedir12(), ".gemini", "antigravity-cli", "antigravity-oauth-token"),
+  accountsDir: join46(accountsRoot(), "antigravity"),
   // Sesi agy hidup memakai akun yang AKTIF saat ini (satu Keychain), apa pun @hanoman_account-nya.
   liveAgyAccountIds: () => liveAgySessions().map((s2) => s2.accountId ?? BUILTIN)
 });
-var slotDir = (io, id2) => join45(io.accountsDir, isBuiltinAccountId(id2) ? "default" : id2);
-var activeFile = (io) => join45(io.accountsDir, "active");
+var slotDir = (io, id2) => join46(io.accountsDir, isBuiltinAccountId(id2) ? "default" : id2);
+var activeFile = (io) => join46(io.accountsDir, "active");
 function activeAgyAccount(io = fsAgyIo()) {
   return io.readFile(activeFile(io))?.trim() || BUILTIN;
 }
 function readSlot(accountId, io = fsAgyIo()) {
   let raw;
   try {
-    raw = readFileSync22(join45(slotDir(io, accountId), "slot.enc"), "utf8");
+    raw = readFileSync22(join46(slotDir(io, accountId), "slot.enc"), "utf8");
   } catch {
     return null;
   }
@@ -79570,7 +79636,7 @@ function readSlot(accountId, io = fsAgyIo()) {
 function writeSlot(accountId, slot, io) {
   const d = slotDir(io, accountId);
   mkdirSync19(d, { recursive: true, mode: 448 });
-  const p3 = join45(d, "slot.enc");
+  const p3 = join46(d, "slot.enc");
   writeFileSync19(p3, encryptSecret(JSON.stringify(slot)), { mode: 384 });
   chmodSync11(p3, 384);
 }
@@ -79783,7 +79849,7 @@ init_src();
 init_db();
 import { createHash as createHash20, randomUUID as randomUUID13 } from "node:crypto";
 import { execFileSync as execFileSync9 } from "node:child_process";
-import { homedir as homedir12 } from "node:os";
+import { homedir as homedir13 } from "node:os";
 import { readFileSync as readFileSync23, realpathSync as realpathSync11, statSync as statSync7 } from "node:fs";
 import { isAbsolute as isAbsolute12, relative as relative8, resolve as resolve24 } from "node:path";
 
@@ -79793,7 +79859,7 @@ init_session_event_spool();
 init_ingress_policy();
 import { constants as constants4 } from "node:fs";
 import { mkdir as mkdir8, open as open4, readdir as readdir9, rm as rm7 } from "node:fs/promises";
-import { join as join46 } from "node:path";
+import { join as join47 } from "node:path";
 var MAX_EVENT_BYTES = 1e6;
 var MAX_FILES_PER_DRAIN = 1e3;
 var SESSION_ID_RE = /^[a-z0-9_-]+$/;
@@ -79844,7 +79910,7 @@ async function drainSpool(app3, root, observation, host2) {
   let readBuffer;
   for (const session of await readdir9(root, { withFileTypes: true })) {
     if (!session.isDirectory() || !SESSION_ID_RE.test(session.name)) continue;
-    const dir2 = join46(root, session.name);
+    const dir2 = join47(root, session.name);
     let entries4;
     try {
       entries4 = await readdir9(dir2, { withFileTypes: true });
@@ -79856,7 +79922,7 @@ async function drainSpool(app3, root, observation, host2) {
       if (!entry2.isFile() || !entry2.name.endsWith(".json")) continue;
       const eventAt = /^(\d{1,15})-/.exec(entry2.name)?.[1];
       if (++examined > MAX_FILES_PER_DRAIN) return delivered;
-      const path = join46(dir2, entry2.name);
+      const path = join47(dir2, entry2.name);
       let payload;
       let handle;
       try {
@@ -79974,8 +80040,8 @@ var utf8Prefix = (value, maxBytes) => {
   return out4;
 };
 var transcriptRoots = () => [
-  resolve24(process.env.CLAUDE_CONFIG_DIR ?? `${homedir12()}/.claude`),
-  resolve24(process.env.CODEX_HOME ?? `${homedir12()}/.codex`),
+  resolve24(process.env.CLAUDE_CONFIG_DIR ?? `${homedir13()}/.claude`),
+  resolve24(process.env.CODEX_HOME ?? `${homedir13()}/.codex`),
   // ADR-0234 · home akun runtime (CLAUDE_CONFIG_DIR/CODEX_HOME per sesi). Transkrip claude akun lewat
   // symlink `projects/` tetap berada di bawah akar ini.
   resolve24(accountsRoot())
@@ -80344,13 +80410,13 @@ init_ask();
 // src/services/decision-guard.ts
 init_src2();
 init_db();
-import { mkdirSync as mkdirSync20, readFileSync as readFileSync24, readdirSync as readdirSync11, rmSync as rmSync14, statSync as statSync8, writeFileSync as writeFileSync20 } from "node:fs";
-import { join as join47 } from "node:path";
+import { mkdirSync as mkdirSync20, readFileSync as readFileSync24, readdirSync as readdirSync12, rmSync as rmSync14, statSync as statSync8, writeFileSync as writeFileSync20 } from "node:fs";
+import { join as join48 } from "node:path";
 var SESSION_HEADER = "x-hanoman-session";
 var SAFE_ID = /^[A-Za-z0-9._-]{1,200}$/;
 var launchers = /* @__PURE__ */ new Map();
 var STALE_MS = 30 * 24 * 60 * 6e4;
-var launcherDir = (env = process.env) => join47(resolveHome(env), "session-launchers");
+var launcherDir = (env = process.env) => join48(resolveHome(env), "session-launchers");
 function recordLauncher(sessionId2, agentId, env = process.env) {
   if (!SAFE_ID.test(sessionId2)) return;
   const known2 = launchersFor(sessionId2, env);
@@ -80358,11 +80424,11 @@ function recordLauncher(sessionId2, agentId, env = process.env) {
   try {
     const dir2 = launcherDir(env);
     mkdirSync20(dir2, { recursive: true, mode: 448 });
-    writeFileSync20(join47(dir2, sessionId2), [...known2].join("\n"), { mode: 384 });
+    writeFileSync20(join48(dir2, sessionId2), [...known2].join("\n"), { mode: 384 });
     const now = Date.now();
-    for (const f of readdirSync11(dir2)) {
+    for (const f of readdirSync12(dir2)) {
       try {
-        if (now - statSync8(join47(dir2, f)).mtimeMs > STALE_MS) rmSync14(join47(dir2, f), { force: true });
+        if (now - statSync8(join48(dir2, f)).mtimeMs > STALE_MS) rmSync14(join48(dir2, f), { force: true });
       } catch {
       }
     }
@@ -80374,7 +80440,7 @@ function launchersFor(sessionId2, env) {
   if (hot) return hot;
   const ids = /* @__PURE__ */ new Set();
   try {
-    for (const l of readFileSync24(join47(launcherDir(env), sessionId2), "utf8").split("\n")) if (l.trim()) ids.add(l.trim());
+    for (const l of readFileSync24(join48(launcherDir(env), sessionId2), "utf8").split("\n")) if (l.trim()) ids.add(l.trim());
   } catch {
   }
   launchers.set(sessionId2, ids);
@@ -80837,7 +80903,7 @@ async function terminal_default(app3, opts2) {
     if (!repoDir) return { ok: false, code: 409, msg: "project belum punya repoDir" };
     if (!s2.cwd.includes("/.worktrees/"))
       return { ok: false, code: 409, msg: "belum ada worktree untuk di-review \u2014 jalankan/lanjutkan sesi dulu", empty: "no-worktree" };
-    if (!existsSync22(s2.cwd))
+    if (!existsSync23(s2.cwd))
       return { ok: false, code: 409, msg: "belum ada worktree untuk di-review \u2014 jalankan/lanjutkan sesi dulu", empty: "no-commit" };
     return { ok: true, id: s2.id, repoDir };
   };
@@ -81100,8 +81166,8 @@ async function terminalWorkspaceRoutes(app3) {
 // src/routes/vps.ts
 init_db();
 init_src();
-import { readFileSync as readFileSync29, existsSync as existsSync25 } from "node:fs";
-import { homedir as homedir14 } from "node:os";
+import { readFileSync as readFileSync29, existsSync as existsSync26 } from "node:fs";
+import { homedir as homedir15 } from "node:os";
 
 // src/vps/catalog/catalog.data.ts
 var RAW_SECTIONS = [{ "id": "ssh", "title": "SSH Hardening", "icon": "\u{1F511}", "count": 14 }, { "id": "firewall", "title": "Firewall & Network", "icon": "\u{1F525}", "count": 14 }, { "id": "aapanel", "title": "aaPanel Security", "icon": "\u{1F5A5}\uFE0F", "count": 14 }, { "id": "user", "title": "User & Permission Management", "icon": "\u{1F464}", "count": 14 }, { "id": "system", "title": "System Hardening (OS Level)", "icon": "\u2699\uFE0F", "count": 16 }, { "id": "webserver", "title": "Web Server Hardening", "icon": "\u{1F310}", "count": 14 }, { "id": "database", "title": "Database Security", "icon": "\u{1F5C4}\uFE0F", "count": 15 }, { "id": "ssl", "title": "SSL/TLS & Enkripsi", "icon": "\u{1F512}", "count": 13 }, { "id": "ids", "title": "Intrusion Detection & Prevention", "icon": "\u{1F6A8}", "count": 9 }, { "id": "logging", "title": "Logging & Monitoring", "icon": "\u{1F4CA}", "count": 13 }, { "id": "backup", "title": "Backup & Disaster Recovery", "icon": "\u{1F4BE}", "count": 12 }, { "id": "ddos", "title": "DDoS Protection", "icon": "\u{1F30A}", "count": 11 }, { "id": "kernel", "title": "Kernel Hardening", "icon": "\u{1F9E0}", "count": 12 }, { "id": "malware", "title": "File Integrity & Malware Detection", "icon": "\u{1F9A0}", "count": 7 }, { "id": "enterprise", "title": "Advanced Enterprise & Government Level", "icon": "\u{1F3E2}", "count": 31 }, { "id": "checklist", "title": "Checklist Rutin", "icon": "\u2705", "count": 23 }];
@@ -81315,7 +81381,7 @@ init_config2();
 import { spawn as spawn6 } from "node:child_process";
 import { mkdtempSync as mkdtempSync4, rmSync as rmSync15, writeFileSync as writeFileSync21 } from "node:fs";
 import { tmpdir as tmpdir7 } from "node:os";
-import { dirname as dirname17, join as join48 } from "node:path";
+import { dirname as dirname17, join as join49 } from "node:path";
 var sshBin = () => effectiveStr("HANOMAN_SSH_BIN") ?? "ssh";
 function consoleArgv(t) {
   return [
@@ -81330,8 +81396,8 @@ function consoleArgv(t) {
   ];
 }
 function askpassScript() {
-  const dir2 = mkdtempSync4(join48(tmpdir7(), "hanoman-askpass-"));
-  const path = join48(dir2, "askpass.sh");
+  const dir2 = mkdtempSync4(join49(tmpdir7(), "hanoman-askpass-"));
+  const path = join49(dir2, "askpass.sh");
   writeFileSync21(path, `#!/bin/sh
 printf '%s' "$HANOMAN_SSH_PASSWORD"
 `, { mode: 448 });
@@ -81392,8 +81458,8 @@ function sshExec(t, remoteCmd, opts2 = {}) {
 // src/services/vps-audit.ts
 init_db();
 init_deps();
-import { existsSync as existsSync23, readFileSync as readFileSync25 } from "node:fs";
-import { join as join49 } from "node:path";
+import { existsSync as existsSync24, readFileSync as readFileSync25 } from "node:fs";
+import { join as join50 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 init_sync_notify();
 
@@ -81498,7 +81564,7 @@ var packagedScript = (f) => fileURLToPath5(new URL(`../scripts/vps/${f}`, import
 var moduleDir2 = () => fileURLToPath5(new URL(".", import.meta.url));
 var scriptPath = (f) => {
   const packed = packagedScript(f);
-  return existsSync23(packed) ? packed : join49(repoRoot(moduleDir2()), "server", "scripts", "vps", f);
+  return existsSync24(packed) ? packed : join50(repoRoot(moduleDir2()), "server", "scripts", "vps", f);
 };
 async function itemStatesOf(vpsId) {
   const rows = await prisma.vpsItemState.findMany({ where: { vpsId } });
@@ -81743,30 +81809,30 @@ async function listVpsWithScore() {
 init_src2();
 init_config2();
 import { execFileSync as execFileSync11 } from "node:child_process";
-import { chmodSync as chmodSync12, copyFileSync, existsSync as existsSync24, mkdirSync as mkdirSync21, readFileSync as readFileSync28, unlinkSync as unlinkSync5 } from "node:fs";
-import { homedir as homedir13 } from "node:os";
-import { join as join50 } from "node:path";
+import { chmodSync as chmodSync12, copyFileSync, existsSync as existsSync25, mkdirSync as mkdirSync21, readFileSync as readFileSync28, unlinkSync as unlinkSync5 } from "node:fs";
+import { homedir as homedir14 } from "node:os";
+import { join as join51 } from "node:path";
 var keyDir = () => effectiveStr("HANOMAN_SSH_KEY_DIR") ?? resolveDataDirs().sshKeys;
 var KEY_FILES = ["id_ed25519", "id_ed25519.pub"];
 function adoptLegacyKey(dir2) {
   if (effectiveStr("HANOMAN_SSH_KEY_DIR")) return;
-  const legacy = join50(homedir13(), ".hanoman");
+  const legacy = join51(homedir14(), ".hanoman");
   if (legacy === dir2) return;
-  if (!KEY_FILES.every((f) => existsSync24(join50(legacy, f)))) return;
+  if (!KEY_FILES.every((f) => existsSync25(join51(legacy, f)))) return;
   mkdirSync21(dir2, { recursive: true, mode: 448 });
   for (const f of KEY_FILES) {
-    copyFileSync(join50(legacy, f), join50(dir2, f));
-    chmodSync12(join50(dir2, f), 384);
+    copyFileSync(join51(legacy, f), join51(dir2, f));
+    chmodSync12(join51(dir2, f), 384);
   }
-  for (const f of KEY_FILES) unlinkSync5(join50(legacy, f));
+  for (const f of KEY_FILES) unlinkSync5(join51(legacy, f));
   console.log(`vps: key SSH dipindah dari ${legacy} ke ${dir2} (SPEC-846 \u2014 satu batas backup)`);
 }
 function ensureHanomanKey() {
   const dir2 = keyDir();
-  const privPath = join50(dir2, KEY_FILES[0]);
+  const privPath = join51(dir2, KEY_FILES[0]);
   const pubPath = `${privPath}.pub`;
-  if (!existsSync24(privPath)) adoptLegacyKey(dir2);
-  if (!existsSync24(privPath)) {
+  if (!existsSync25(privPath)) adoptLegacyKey(dir2);
+  if (!existsSync25(privPath)) {
     mkdirSync21(dir2, { recursive: true, mode: 448 });
     execFileSync11(
       "ssh-keygen",
@@ -81794,7 +81860,7 @@ init_session_launch_gate();
 init_settings3();
 init_sync_notify();
 function keyMissing(v) {
-  return !!v.keyPath && !existsSync25(v.keyPath);
+  return !!v.keyPath && !existsSync26(v.keyPath);
 }
 async function vps_default(app3) {
   app3.get("/vps", async () => listVpsWithScore());
@@ -82047,7 +82113,7 @@ async function vps_default(app3) {
     const v = await prisma.vps.findUnique({ where: { id: req.params.id } });
     if (!v) return reply.code(404).send({ error: "not found" });
     if (keyMissing(v)) return reply.code(409).send({ error: "key VPS tidak ada di mesin ini", keyMissing: true });
-    const s2 = await createOperatorSession(`vps-console:${v.id}`, homedir14(), { id: `vpsc-${v.id}`, command: consoleArgv(v) });
+    const s2 = await createOperatorSession(`vps-console:${v.id}`, homedir15(), { id: `vpsc-${v.id}`, command: consoleArgv(v) });
     return reply.code(201).send({ id: s2.id });
   });
   app3.post("/vps/:id/session", async (req, reply) => {
@@ -82056,7 +82122,7 @@ async function vps_default(app3) {
     if (keyMissing(v)) return reply.code(409).send({ error: "key VPS tidak ada di mesin ini", keyMissing: true });
     const checks = v.audit ?? [];
     const { model, effort: effort2 } = await sessionModel();
-    const s2 = await createAgentSession(`vps:${v.id}`, homedir14(), {
+    const s2 = await createAgentSession(`vps:${v.id}`, homedir15(), {
       model,
       effort: effort2,
       prompt: [
@@ -82083,7 +82149,7 @@ init_codex_limits();
 init_antigravity_limits();
 init_keychain();
 import { readFileSync as readFileSync30 } from "node:fs";
-import { join as join51 } from "node:path";
+import { join as join52 } from "node:path";
 var TTL_MS5 = 3e4;
 var UNAVAILABLE4 = { status: "unavailable", windows: [], fetchedAt: null };
 function readClaudeAccountToken(homeDir, platform2 = process.platform) {
@@ -82092,7 +82158,7 @@ function readClaudeAccountToken(homeDir, platform2 = process.platform) {
     if (t) return t;
   }
   try {
-    const t = JSON.parse(readFileSync30(join51(homeDir, ".credentials.json"), "utf8"))?.claudeAiOauth?.accessToken;
+    const t = JSON.parse(readFileSync30(join52(homeDir, ".credentials.json"), "utf8"))?.claudeAiOauth?.accessToken;
     return typeof t === "string" && t ? t : null;
   } catch {
     return null;
@@ -82132,7 +82198,7 @@ async function loadRow(row, d) {
     return windows ? { status: "ok", windows, fetchedAt: new Date(d.now()).toISOString() } : UNAVAILABLE4;
   }
   if (row.runtime === "codex") {
-    const c = await d.codexLimits(join51(row.homeDir, "sessions"));
+    const c = await d.codexLimits(join52(row.homeDir, "sessions"));
     return { status: c.status, windows: c.windows, fetchedAt: c.fetchedAt };
   }
   return d.antigravity(row);
@@ -82168,7 +82234,7 @@ init_session_sandbox();
 init_src();
 init_pty();
 init_session_launch_gate();
-import { homedir as homedir15 } from "node:os";
+import { homedir as homedir16 } from "node:os";
 var LOGIN_PREFIX = "acct-login-";
 var loginSessionId = (accountId) => `${LOGIN_PREFIX}${accountId.replace(/[^a-z0-9]/gi, "-")}`;
 function accountIdForLoginSession(sessionId2) {
@@ -82206,7 +82272,7 @@ async function openLoginSession(accountId, opts2) {
   }
   const argv = loginArgv(runtime, opts2);
   beforeLogin(runtime, accountId);
-  const s2 = await createOperatorSession(`account:${accountId}`, homeDir ?? homedir15(), {
+  const s2 = await createOperatorSession(`account:${accountId}`, homeDir ?? homedir16(), {
     id: loginSessionId(accountId),
     command: argv,
     env
@@ -82375,7 +82441,7 @@ init_src2();
 init_src();
 import { randomUUID as randomUUID15 } from "node:crypto";
 import { readFile as readFile9, writeFile as writeFile6, rename as rename5, mkdir as mkdir9, rm as rm9 } from "node:fs/promises";
-import { dirname as dirname18, join as join53 } from "node:path";
+import { dirname as dirname18, join as join54 } from "node:path";
 
 // src/services/model-catalog-parser.ts
 init_zod();
@@ -82482,7 +82548,7 @@ init_session_sandbox();
 import { spawn as spawn7 } from "node:child_process";
 import { mkdtemp as mkdtemp2, rm as rm8 } from "node:fs/promises";
 import { tmpdir as tmpdir8 } from "node:os";
-import { join as join52 } from "node:path";
+import { join as join53 } from "node:path";
 var MAX_BYTES = 4 * 1024 * 1024;
 var TIMEOUT_MS = 2e4;
 var quote3 = (s2) => "'" + s2.replaceAll("'", "'\\''") + "'";
@@ -82581,7 +82647,7 @@ function runCatalogCommand(command, agent, cwd, env, timeoutMs = TIMEOUT_MS) {
 }
 async function probeModelCatalog(agent) {
   assertAntigravityLaunch(agent);
-  const cwd = await mkdtemp2(join52(tmpdir8(), "hanoman-models-"));
+  const cwd = await mkdtemp2(join53(tmpdir8(), "hanoman-models-"));
   const env = agentEnvironment(agent, process.env);
   for (const key of ["HANOMAN_CLAUDE_BIN", "HANOMAN_CODEX_BIN", "HANOMAN_PODMAN_BIN", "HANOMAN_ANTIGRAVITY_BIN"]) {
     const value = effectiveStr(key);
@@ -82692,7 +82758,7 @@ async function writeModelCatalogCache(file, catalog, current = () => true) {
     await rm9(temp, { force: true });
   }
 }
-var cacheFile = () => join53(resolveHome(), "model-catalog.json");
+var cacheFile = () => join54(resolveHome(), "model-catalog.json");
 var modelCatalogService = createModelCatalogService({
   probe: probeModelCatalog,
   key: catalogProbeKey,
@@ -83882,7 +83948,7 @@ init_pty();
 init_config5();
 init_inbox();
 import { mkdirSync as mkdirSync22, writeFileSync as writeFileSync22 } from "node:fs";
-import { join as join54 } from "node:path";
+import { join as join55 } from "node:path";
 init_human_input();
 var idle = /* @__PURE__ */ new Set();
 var sending = /* @__PURE__ */ new Set();
@@ -83893,7 +83959,7 @@ function isLeadIdle(id2) {
   return idle.has(id2);
 }
 var HUMAN_QUIET_MS = 12e4;
-var batchDir = (projectId) => join54(resolveHome(), "lead-batches", projectId);
+var batchDir = (projectId) => join55(resolveHome(), "lead-batches", projectId);
 var briefFn = async () => "(situasi tak tersedia \u2014 panggil /brief)";
 function setBriefBuilder(fn) {
   briefFn = fn;
@@ -83914,7 +83980,7 @@ var prodCourierDeps = {
   write: (projectId, text2) => {
     const dir2 = batchDir(projectId);
     mkdirSync22(dir2, { recursive: true });
-    const file = join54(dir2, `${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.md`);
+    const file = join55(dir2, `${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.md`);
     writeFileSync22(file, text2);
     return file;
   },
@@ -84716,7 +84782,7 @@ init_src();
 init_db();
 import { gunzipSync, gzipSync } from "node:zlib";
 import { mkdir as mkdir10, rename as rename6, writeFile as writeFile7 } from "node:fs/promises";
-import { join as join55 } from "node:path";
+import { join as join56 } from "node:path";
 
 // src/services/device-auth.ts
 function bearerToken2(req) {
@@ -84974,9 +85040,9 @@ async function sync_default(app3) {
       const deviceId = req.device.id;
       const withTranscriptKey = await Promise.all(parsed.data.entries.map(async (e) => {
         if (!e.transcript) return e;
-        const dir2 = join55(resolveDataDirs().home, "remote-transcripts", deviceId);
+        const dir2 = join56(resolveDataDirs().home, "remote-transcripts", deviceId);
         await mkdir10(dir2, { recursive: true, mode: 448 });
-        const final = join55(dir2, `${e.seq}.txt`);
+        const final = join56(dir2, `${e.seq}.txt`);
         const tmp = `${final}.tmp`;
         await writeFile7(tmp, e.transcript, { encoding: "utf8", mode: 384 });
         await rename6(tmp, final);
@@ -88381,7 +88447,7 @@ init_uploads();
 init_ask_via2();
 import { createHash as createHash23 } from "node:crypto";
 import { execFileSync as execFileSync12 } from "node:child_process";
-import { join as join57 } from "node:path";
+import { join as join58 } from "node:path";
 var QaSessionError = class extends Error {
   constructor(code, message, needsBind = false) {
     super(message);
@@ -88408,7 +88474,7 @@ async function startQaFindingSession(d, fid) {
       const saved = await saveSessionUpload(id2, bytes, a.mimeType);
       files2.push(`${JSON.stringify(a.filename)} (${a.mimeType}): ${saved.path}`);
     }
-    const wt = join57(repoDir, ".worktrees", id2);
+    const wt = join58(repoDir, ".worktrees", id2);
     const branch = `qa/${id2.slice(3)}`;
     const reused = realGit.worktreeAlive(wt);
     try {
@@ -89953,7 +90019,7 @@ init_src();
 init_db();
 import { mkdirSync as mkdirSync23, mkdtempSync as mkdtempSync5, rmSync as rmSync16, writeFileSync as writeFileSync23 } from "node:fs";
 import { tmpdir as tmpdir9 } from "node:os";
-import { join as join58 } from "node:path";
+import { join as join59 } from "node:path";
 var STAGE_LABEL = {
   brainstorming: "Dirumuskan",
   objective: "Dirumuskan",
@@ -89996,7 +90062,7 @@ function renderTicketDoc(tickets2) {
 ${baris.join("\n")}`;
 }
 async function buildChatWorkspace(projectId) {
-  const dir2 = mkdtempSync5(join58(tmpdir9(), "hanoman-portal-chat-"));
+  const dir2 = mkdtempSync5(join59(tmpdir9(), "hanoman-portal-chat-"));
   try {
     const project = await prisma.project.findUnique({
       where: { id: projectId },
@@ -90011,7 +90077,7 @@ async function buildChatWorkspace(projectId) {
     });
     const files2 = [];
     const tulis = (rel, isi) => {
-      writeFileSync23(join58(dir2, rel), isi, { mode: 384 });
+      writeFileSync23(join59(dir2, rel), isi, { mode: 384 });
       files2.push(rel);
     };
     tulis("project.md", renderProjectDoc(project));
@@ -90019,11 +90085,11 @@ async function buildChatWorkspace(projectId) {
     tulis("laporan.md", renderTicketDoc(tickets2.map((t) => toPortalTicket(t, null))));
     const prds = await listPrds(projectId);
     if (prds.length) {
-      mkdirSync23(join58(dir2, "dokumen"), { mode: 448 });
+      mkdirSync23(join59(dir2, "dokumen"), { mode: 448 });
       for (const prd of prds) {
         const isi = await readPrd(projectId, prd.path);
         if (!isi) continue;
-        tulis(join58("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
+        tulis(join59("dokumen", `${prd.slug.replaceAll("/", "-")}.md`), isi);
       }
     }
     return { dir: dir2, files: files2, cleanup: () => rmSync16(dir2, { recursive: true, force: true }) };
@@ -90550,13 +90616,13 @@ init_db();
 // src/services/bootstrap.ts
 import { createHash as createHash24, randomBytes as randomBytes11, timingSafeEqual as timingSafeEqual5 } from "node:crypto";
 import { chmod as chmod2, lstat as lstat3, mkdir as mkdir11, readFile as readFile10, unlink as unlink5, writeFile as writeFile8 } from "node:fs/promises";
-import { join as join59 } from "node:path";
+import { join as join60 } from "node:path";
 var TTL_MS8 = 15 * 6e4;
 var SETUP_TOKEN_FILE = "setup.token";
 var BootstrapError = class extends Error {
   code = "BOOTSTRAP_PROOF";
 };
-var tokenPath = (home3) => join59(home3, SETUP_TOKEN_FILE);
+var tokenPath = (home3) => join60(home3, SETUP_TOKEN_FILE);
 async function readStored(home3) {
   try {
     const info = await lstat3(tokenPath(home3));
@@ -91394,7 +91460,7 @@ init_event_log();
 init_transcript_store();
 init_src2();
 import { readFile as readFile11 } from "node:fs/promises";
-import { join as join60 } from "node:path";
+import { join as join61 } from "node:path";
 function decodeCursor(c) {
   if (!c) return null;
   try {
@@ -91432,7 +91498,7 @@ async function readRemoteTranscript(id2) {
   const row = await prisma.logEntry.findUnique({ where: { id: id2 } });
   if (!row || row.lane !== "transcript" || !row.transcriptKey) return null;
   if (row.deviceId === "local") return readTranscript(row.transcriptKey);
-  const path = join60(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
+  const path = join61(resolveDataDirs().home, "remote-transcripts", row.transcriptKey);
   try {
     return await readFile11(path, "utf8");
   } catch {
@@ -91629,7 +91695,7 @@ var SETUP_PUBLIC = /* @__PURE__ */ new Set([
   "POST /api/setup"
 ]);
 function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {}) {
-  const docFile = agentDocFile !== void 0 ? agentDocFile : pickGuideFile(dirname19(fileURLToPath6(import.meta.url)), env, existsSync26);
+  const docFile = agentDocFile !== void 0 ? agentDocFile : pickGuideFile(dirname19(fileURLToPath6(import.meta.url)), env, existsSync27);
   const ingress = loadIngressPolicy(env);
   const app3 = Fastify({ logger: false, trustProxy: trustProxyFromEnv(env) });
   app3.setErrorHandler((error, _req, reply) => {
@@ -91779,7 +91845,7 @@ function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {})
     await api.register(qaBacklog);
   }, { prefix: "/api" });
   if (shouldServeWeb(env)) {
-    const dist = pickWebDir(dirname19(fileURLToPath6(import.meta.url)), env, existsSync26);
+    const dist = pickWebDir(dirname19(fileURLToPath6(import.meta.url)), env, existsSync27);
     if (dist) {
       app3.register(fastifyStatic, { root: dist });
       app3.setNotFoundHandler((req, reply) => req.url.startsWith("/api") ? reply.code(404).send({ error: "not found" }) : req.url.startsWith("/assets/") ? reply.code(404).type("text/plain").send("not found") : reply.sendFile("index.html"));
@@ -92179,9 +92245,46 @@ function registerTriaseSource() {
 // src/services/session-boot-resume.ts
 init_src();
 init_db();
+import { existsSync as existsSync28 } from "node:fs";
 init_session_launch();
+init_session_launch_gate();
 init_session_admission2();
 init_notifications2();
+init_local_binding();
+init_session_phases();
+init_pty();
+var prodFreeStart = async (c) => {
+  if (!existsSync28(c.cwd)) throw new Error(`direktori ${c.cwd} sudah tidak ada`);
+  if (c.kind === "shell") {
+    await createOperatorSession(c.projectId, c.cwd, { id: c.sessionId, command: [shellBin()] });
+    return;
+  }
+  if (c.accountId && !accountExists(c.accountId))
+    throw new Error(`akun runtime ${c.accountId} sudah dihapus \u2014 buka sesi baru dan pilih akun lain`);
+  const base3 = {
+    id: c.sessionId,
+    agent: c.agent,
+    model: c.model,
+    effort: c.effort,
+    accountId: c.accountId,
+    ...c.branch ? { branch: c.branch } : {},
+    ...c.agentSessionId ? { agentSessionId: c.agentSessionId, resumeAgentSession: true } : {}
+  };
+  if (c.kind === "terminal" || c.kind === "worktree") {
+    await createOperatorSession(c.projectId, c.cwd, base3, { exempt: false });
+    return;
+  }
+  if (c.agent !== "claude" || !c.agentSessionId)
+    throw new Error("percakapan agennya tak tercatat \u2014 mulai ulang dari layar project");
+  const repoDir = await resolveRepoDir(c.projectId);
+  if (!repoDir) throw new Error("project belum di-bind ke checkout lokal");
+  await createOperatorSession(c.projectId, c.cwd, {
+    ...base3,
+    flow: c.flow,
+    phaseFile: phaseFilePath(repoDir, c.sessionId),
+    decisionFile: decisionFilePath(repoDir, c.sessionId)
+  }, { exempt: false });
+};
 var prodResumeStart = async (spec, runtime) => {
   if (runtime?.accountId && !accountExists(runtime.accountId))
     throw new Error(`akun runtime ${runtime.accountId} sudah dihapus \u2014 lanjutkan manual dan pilih akun lain`);
@@ -92194,12 +92297,50 @@ var prodDeps6 = {
   // titik waktu paling rawan menumpuk kandidat resume. Gerbang dependency ADR-0093 tak berubah.
   startSpec: prodResumeStart,
   recordFail: recordFailure,
-  recordDeferred: recordFailure
+  recordDeferred: recordFailure,
+  startFree: prodFreeStart,
+  recordFreeIssue: recordFreeResumeIssue
 };
 async function resumeReconciledSessions(cutoff, deps = prodDeps6) {
   const report = { resumed: [], failed: [], deferred: [] };
+  await resumeSpecs(cutoff, deps, report);
+  await resumeFree(cutoff, deps, report);
+  return report;
+}
+async function resumeFree(cutoff, deps, report) {
+  if (!deps.startFree) return;
+  const candidates2 = await reconciledFreeSessionsSince(cutoff);
+  const note = deps.recordFreeIssue ?? (async () => {
+  });
+  for (const c of candidates2) {
+    const title = `sesi ${c.sessionId}`;
+    try {
+      await deps.startFree(c);
+      report.resumed.push(c.sessionId);
+    } catch (e) {
+      if (e instanceof LaunchAdmissionError) {
+        await note(
+          c.sessionId,
+          title,
+          c.projectId,
+          `ditunda \u2014 cap/beban host penuh saat boot (${e.kind}). Buka lagi manual saat slot kosong.`
+        );
+        report.deferred.push(c.sessionId);
+        continue;
+      }
+      await note(
+        c.sessionId,
+        title,
+        c.projectId,
+        `gagal dilanjutkan otomatis \u2014 ${e instanceof Error ? e.message : String(e)}`
+      );
+      report.failed.push(c.sessionId);
+    }
+  }
+}
+async function resumeSpecs(cutoff, deps, report) {
   const specIds = await reconciledSpecIdsSince(cutoff);
-  if (!specIds.length) return report;
+  if (!specIds.length) return;
   const specs = await prisma.spec.findMany({ where: { id: { in: specIds }, stage: { not: "done" } } });
   const runtimes = await reconciledRuntimesSince(cutoff);
   for (const spec of specs) {
@@ -92222,7 +92363,6 @@ async function resumeReconciledSessions(cutoff, deps = prodDeps6) {
       report.failed.push(spec.id);
     }
   }
-  return report;
 }
 
 // src/services/runtime-accounts/install.ts
@@ -92763,9 +92903,9 @@ async function pruneLogs(now, retention, opts2 = {}) {
 }
 async function reconcileRemoteTranscripts() {
   const { readdir: readdir10, unlink: unlink6, stat: stat8 } = await import("node:fs/promises");
-  const { join: join61 } = await import("node:path");
+  const { join: join62 } = await import("node:path");
   const { resolveDataDirs: resolveDataDirs2 } = await Promise.resolve().then(() => (init_src2(), src_exports));
-  const root = join61(resolveDataDirs2().home, "remote-transcripts");
+  const root = join62(resolveDataDirs2().home, "remote-transcripts");
   let deviceDirs;
   try {
     deviceDirs = await readdir10(root);
@@ -92779,16 +92919,16 @@ async function reconcileRemoteTranscripts() {
   for (const dev of deviceDirs) {
     let files2;
     try {
-      files2 = await readdir10(join61(root, dev));
+      files2 = await readdir10(join62(root, dev));
     } catch {
       continue;
     }
     for (const f of files2) {
       const key = `${dev}/${f}`;
       if (referenced.has(key)) continue;
-      const st2 = await stat8(join61(root, dev, f)).catch(() => null);
+      const st2 = await stat8(join62(root, dev, f)).catch(() => null);
       if (!st2 || Date.now() - st2.mtimeMs < gracePeriodMs) continue;
-      await unlink6(join61(root, dev, f)).catch(() => {
+      await unlink6(join62(root, dev, f)).catch(() => {
       });
       orphans++;
     }
@@ -93043,7 +93183,7 @@ bootstrapReady.then(async () => {
       for (const row of await detectOrphanWorktrees()) {
         console.log(`worktree yatim: ${row.projectId} \u2014 ${row.count} menunggu konfirmasi di tab Worktrees`);
       }
-      if (n2) {
+      if (n2 && (await getSetting()).autoResumeSessions) {
         const { resumed, failed, deferred } = await resumeReconciledSessions(reconcileCutoff);
         if (resumed.length)
           console.log(`auto-resume: ${resumed.length} sesi dilanjutkan otomatis (${resumed.join(", ")})`);