diff --git a/TODO.md b/TODO.md
index ccdaad6..828616f 100644
--- a/TODO.md
+++ b/TODO.md
@@ -170,8 +170,9 @@ apps/
 - [x] Smoke `bun run api`: health 200; register/login 200; wrong-pwd 401; protected-no-token 401; create/list/delete session; add conversation msg
 - [ ] **daemon** — IPC server + attach TUI client (pakai IPC 3g)
 - [x] **ws** — handler `/ws`, protokol token/connected/done/error; smoke: no-token rejected 401, with-token welcome
-- [ ] **grpc** — stub (health endpoint)
-- [ ] **web** — static server + proteksi traversal; frontend placeholder
+- [x] **grpc** — stub (health endpoint); smoke: `/grpc/health` 200
+- [x] **web** — static server + proteksi traversal; smoke: `/` serves index, traversal 404
+- [x] CLI `--api`/`--ws`/`--grpc`/`--web` dispatch → start server masing-masing (smoke: `bun run cli --api --api-port` → health 200)
 
 ### Fase 6 — Bersih-bersih + verifikasi akhir
 - [ ] Hapus semua sisa crate Rust: `apps/{domain,application,infrastructure,gateway,bootstrap,interfaces/*}` file `.rs`, `Cargo.toml`, `Cargo.lock`, `.cargo/`, `lefthook.yml`