mainflow 0.39.0 → 0.40.0

package/dist/cli.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { $ as stampMs, G as parseUntil, K as refExample, M as UNTIL_FORMS, W as parseRef, n as CLOSED_STATUS } from "./dist-zSabglPq.js";
-import { $ as unavailableHubs, C as loadSessions, Ct as DATA_DIR, G as loadHub, H as checkHubName, K as sectionText, Q as remoteMembers, U as HubError, V as applyOperation, X as memberOfGroup, _t as TASK_FILE, b as duplicateClaimLines, bt as findHubRoot, d as migrateHub, et as nowMinute, f as retroReport, gt as MAINLINE_FILE, h as RETRY_RULES, m as receiverFromEnv, nt as nodeStorage, ot as MAX_FILE_BYTES, p as retroReportFromReceiver, u as groupPlan, v as initHub, vt as requireSlug, w as readSession, wt as WriteError, x as sessionBriefing, y as untilState } from "./host-CIOd2WSh.js";
+import { $ as unavailableHubs, C as loadSessions, Et as WriteError, G as loadHub, H as checkHubName, K as sectionText, Q as remoteMembers, St as findHubRoot, Tt as DATA_DIR, U as HubError, V as applyOperation, X as memberOfGroup, b as duplicateClaimLines, bt as requireSlug, ct as MAX_FILE_BYTES, d as migrateHub, f as retroReport, h as RETRY_RULES, it as nodeStorage, m as receiverFromEnv, p as retroReportFromReceiver, tt as nowMinute, u as groupPlan, v as initHub, vt as MAINLINE_FILE, w as readSession, x as sessionBriefing, y as untilState, yt as TASK_FILE } from "./host-erQ_Sr8U.js";
 import { t as listProgress } from "./progress-1BfPg2zN.js";
-import { C as ServerError, D as syncSettings, E as hubName, O as SETTINGS_FILE, S as ServerApi, T as earlierToken, _ as readDaemon, a as remoteMode, b as readRemote, c as planAnnounce, d as toolCallOf, f as startDaemon, g as probeDaemon, h as callDaemon, i as queuedCount, j as syncPaths, l as planFetch, m as DaemonUnavailable, n as hubWriter, o as fetchDenial, p as DaemonRunning, r as writtenLines, s as hookAnswer, t as CONFIRM_MS, u as planFlush, v as silentHint, w as ENV, x as oversizedFiles } from "./operation-DJARDCM0.js";
+import { C as ServerError, D as syncSettings, E as hubName, O as SETTINGS_FILE, S as ServerApi, T as earlierToken, _ as readDaemon, a as remoteMode, b as readRemote, c as planAnnounce, d as toolCallOf, f as startDaemon, g as probeDaemon, h as callDaemon, i as queuedCount, j as syncPaths, l as planFetch, m as DaemonUnavailable, n as hubWriter, o as fetchDenial, p as DaemonRunning, r as writtenLines, s as hookAnswer, t as CONFIRM_MS, u as planFlush, v as silentHint, w as ENV, x as oversizedFiles } from "./operation-Bf6DtnfD.js";
 import { COMMAND_SPECS, OPTIONS } from "./facts.js";
 import { hookFallback, parsePayload, runHook } from "./hooks.js";
-import { f as CLI_VERSION, i as launchUi, l as startUiInBackground, r as exitCodeFor, u as watchHubGone } from "./launch-DJ944-bI.js";
+import { f as CLI_VERSION, i as launchUi, l as startUiInBackground, r as exitCodeFor, u as watchHubGone } from "./launch-I_JDTAtU.js";
 import { randomBytes } from "node:crypto";
 import { existsSync, readFileSync, readdirSync, realpathSync, rmSync, statSync } from "node:fs";
 import { basename, isAbsolute, join, relative, resolve, sep } from "node:path";

package/dist/hooks.d.ts

@@ -574,6 +574,7 @@ export interface ClaudeCodePayload {
   tool_name?: string;
   tool_input?: {
     file_path?: string;
+    notebook_path?: string;
     command?: string;
   };
 }
@@ -617,6 +618,23 @@ export type HookFailure = {
 } | {
   kind: 'unreadable-input';
 };
+/** The first day the start gate applies; a task created earlier began before the lines below existed. */
+export declare const START_GATE_FROM = "2026-10-19";
+/** The kinds of change that need no acceptance scenarios, as a skip line names them. */
+export declare const SCENARIO_SKIP_KINDS: readonly ['措辭或格式', '照抄或同步版號', '單一設定值', '一句話說得完'];
+/** The two lines under a task's 紀錄 that let writing start: the scenarios were confirmed, or the change needs none. */
+export declare const SCENARIO_LINES: {
+  readonly confirmed: {
+    readonly form: '- 驗收情境確認：{使用者怎麼回覆}';
+    readonly pattern: RegExp;
+  };
+  readonly skipped: {
+    readonly form: `- 驗收情境略過（{${string} 之一}）：{理由}`;
+    readonly pattern: RegExp;
+  };
+};
+/** Whether a task's 紀錄 holds a confirmation or a skip line as a top-level item; its lines are read untrimmed, so an indented one does not count. */
+export declare function hasScenarioLine(body: string): boolean;
 export declare const HOOK_PLATFORMS: Record<string, Record<string, Handler>>;
 /** What an event prints when it cannot run its handler; null for the events that stay silent. */
 export declare function hookFallback(platform: string, event: string, ctx: HookContext, failure: HookFailure): string | null;

package/dist/hooks.js

@@ -1,6 +1,6 @@
-import { P as configSchema, rt as describeRequest } from "./dist-zSabglPq.js";
-import { A as headerLine, C as loadSessions, Ct as DATA_DIR, D as matchGrants, E as grantScope, G as loadHub, O as decorateReply, S as turnReminder, U as HubError, bt as findHubRoot, ht as hubFormatVersion, i as hostName, j as mayDecorate, k as endsWithMarker, mt as formatMismatch, nt as nodeStorage, tt as readYaml, w as readSession, x as sessionBriefing, xt as worktreesOf, yt as currentBranch } from "./host-CIOd2WSh.js";
-import { n as hubWriter, r as writtenLines } from "./operation-DJARDCM0.js";
+import { P as configSchema, W as parseRef, Y as taskSchema, rt as describeRequest } from "./dist-zSabglPq.js";
+import { A as headerLine, C as loadSessions, Ct as worktreesOf, D as matchGrants, E as grantScope, G as loadHub, O as decorateReply, S as turnReminder, St as findHubRoot, Tt as DATA_DIR, U as HubError, _t as hubFormatVersion, et as taskFile, gt as formatMismatch, i as hostName, it as nodeStorage, j as mayDecorate, k as endsWithMarker, nt as readFrontMatter, rt as readYaml, w as readSession, x as sessionBriefing, xt as currentBranch } from "./host-erQ_Sr8U.js";
+import { n as hubWriter, r as writtenLines } from "./operation-Bf6DtnfD.js";
 import { resolveFixed, scanCommand, scopedCwd } from "./grant-commands.js";
 import { appendFileSync, existsSync, readFileSync } from "node:fs";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
@@ -269,7 +269,7 @@ const CLAUDE_CODE_EVENTS = {
 		});
 		return null;
 	},
-	"pre-tool-use": decideByGrants,
+	"pre-tool-use": (root, context) => typeof context.payload.tool_name === "string" && WRITE_TOOLS.has(context.payload.tool_name) ? decideStartGate(root, context) : decideByGrants(root, context),
 	"post-tool-use": checkAfterWrite,
 	"message-display": displayReply
 };
@@ -355,6 +355,90 @@ async function decideByGrants(root, { payload, warn, write }) {
 	await logGranted(write, scoped.scope, scan.call, resolved.request, grant, warn);
 	return permission("allow", `授權 ${grant.ref} 涵蓋 ${describeRequest(resolved.request)}`);
 }
+/** The first day the start gate applies; a task created earlier began before the lines below existed. */
+const START_GATE_FROM = "2026-10-19";
+/** The kinds of change that need no acceptance scenarios, as a skip line names them. */
+const SCENARIO_SKIP_KINDS = [
+	"措辭或格式",
+	"照抄或同步版號",
+	"單一設定值",
+	"一句話說得完"
+];
+/** The two lines under a task's 紀錄 that let writing start: the scenarios were confirmed, or the change needs none. */
+const SCENARIO_LINES = {
+	confirmed: {
+		form: "- 驗收情境確認：{使用者怎麼回覆}",
+		pattern: /^- 驗收情境確認：\S/
+	},
+	skipped: {
+		form: `- 驗收情境略過（{${SCENARIO_SKIP_KINDS.join("、")} 之一}）：{理由}`,
+		pattern: new RegExp(`^- 驗收情境略過（(?:${SCENARIO_SKIP_KINDS.join("|")})）：\\S`)
+	}
+};
+/** Whether a task's 紀錄 holds a confirmation or a skip line as a top-level item; its lines are read untrimmed, so an indented one does not count. */
+function hasScenarioLine(body) {
+	const lines = body.split("\n");
+	const start = lines.findIndex((l) => l.trim() === "## 紀錄");
+	if (start === -1) return false;
+	const end = lines.findIndex((l, i) => i > start && l.startsWith("## "));
+	return lines.slice(start + 1, end === -1 ? void 0 : end).some((line) => SCENARIO_LINES.confirmed.pattern.test(line) || SCENARIO_LINES.skipped.pattern.test(line));
+}
+/** Whether a path lies under `tmp/` at the root of the hub or of a repository config.yaml lists. */
+function inProjectTmp(file, root) {
+	const repos = readYaml(join(root, DATA_DIR, "config.yaml"), configSchema).data.repos;
+	return [root, ...Object.values(repos).map((path) => resolve(root, path))].some((dir) => relative(dir, file).startsWith(`tmp/`));
+}
+/**
+* The open tasks of this hub that the session's actions in progress serve, created on or after START_GATE_FROM,
+* whose 紀錄 has neither line. A task that cannot be read is left out: the gate only stops what it can show is missing.
+*/
+function unconfirmedTasks(root, session) {
+	const tasks = /* @__PURE__ */ new Set();
+	for (const action of session.actions) {
+		if (action.status !== "doing") continue;
+		for (const ref of action.serves) {
+			const parsed = parseRef(ref);
+			if ((parsed?.kind === "task" || parsed?.kind === "checklistItem") && parsed.hub === void 0) tasks.add(`${parsed.mainline}/${parsed.task}`);
+		}
+	}
+	return [...tasks].filter((ref) => {
+		const [mainline, task] = ref.split("/");
+		try {
+			const { data, body } = readFrontMatter(taskFile(root, mainline, task), taskSchema);
+			return data.created >= "2026-10-19" && data.status !== "done" && data.status !== "dropped" && !hasScenarioLine(body);
+		} catch {
+			return false;
+		}
+	});
+}
+/**
+* PreToolUse for the tools that write a file: deny the write while a task the session's action in progress
+* serves has neither a confirmation nor a skip line under 紀錄, so code waits for its acceptance scenarios.
+* Writes under `.mainflow/` or a project's `tmp/`, a session with no record or no such task, print nothing. A
+* subagent's call carries the main session's session_id, so it is judged by the main session's action. Any failure
+* stays silent, since the fallback only answers Bash, and the write goes on.
+*/
+function decideStartGate(root, { payload, cli }) {
+	const path = payload.tool_input?.file_path ?? payload.tool_input?.notebook_path;
+	const sessionId = payload.session_id;
+	if (typeof path !== "string" || !path || typeof sessionId !== "string" || !sessionId) return null;
+	const file = isAbsolute(path) ? path : resolve(typeof payload.cwd === "string" ? payload.cwd : root, path);
+	if (inMainflowData(file) || inProjectTmp(file, root)) return null;
+	const session = readSession(root, claudeCodeSessionId(sessionId));
+	if (!session) return null;
+	const missing = unconfirmedTasks(root, session);
+	if (missing.length === 0) return null;
+	const reason = [
+		`${missing.join("、")} 的「紀錄」沒有驗收情境的確認行，也沒有略過行，所以先不寫檔。`,
+		`使用者確認「完成定義」的驗收情境後，用 ${cli} section append <m/t> 紀錄 加一行「${SCENARIO_LINES.confirmed.form}」。`,
+		`改動屬於 ${SCENARIO_SKIP_KINDS.join("、")} 這四類時，改加「${SCENARIO_LINES.skipped.form}」。`
+	].join("");
+	return JSON.stringify({ hookSpecificOutput: {
+		hookEventName: "PreToolUse",
+		permissionDecision: "deny",
+		permissionDecisionReason: `[mainflow] ${reason}`
+	} });
+}
 /** How many problems outside the written file the reminder lists before it only gives the count. */
 const OTHER_PROBLEMS_SHOWN = 5;
 const problemLine = (p) => `- ${p.file}${p.field ? ` › ${p.field}` : ""}：${p.message}`;
@@ -498,4 +582,4 @@ async function runHook(platform, event, ctx) {
 	}
 }
 //#endregion
-export { HOOK_PLATFORMS, claudeCodeSessionId, hookFallback, openLink, parsePayload, runHook, subagentTranscript };
+export { HOOK_PLATFORMS, SCENARIO_LINES, SCENARIO_SKIP_KINDS, START_GATE_FROM, claudeCodeSessionId, hasScenarioLine, hookFallback, openLink, parsePayload, runHook, subagentTranscript };

package/dist/{host-CIOd2WSh.js → host-erQ_Sr8U.js}

@@ -8430,4 +8430,4 @@ function openInApp(hub, target, closeAfterMs = 150) {
 	return true;
 }
 //#endregion
-export { unavailableHubs as $, headerLine as A, scopeOfPath as B, loadSessions as C, DATA_DIR as Ct, matchGrants as D, grantScope as E, splitFrontMatter as Et, applyOffline as F, loadHub as G, checkHubName as H, renumberRequest as I, mainlineEdges as J, sectionText as K, renumberFiles as L, attributeTrace as M, traceTranscript as N, decorateReply as O, transcriptTitle as P, remoteMembers as Q, renumberPath as R, turnReminder as S, ConflictError as St, transcriptPath as T, contentHash as Tt, HubError as U, applyOperation as V, loadConfig as W, memberOfGroup as X, linksInto as Y, refIndex as Z, setArchivedMany as _, TASK_FILE as _t, openInApp as a, MAX_BLOB_BYTES as at, duplicateClaimLines as b, findHubRoot as bt, siteBlock as c, SOCKET_MAX_AGE_CLOSE as ct, migrateHub as d, readsAsText as dt, nowMinute as et, retroReport as f, requestTime as ft, ARCHIVE_KINDS as g, MAINLINE_FILE as gt, RETRY_RULES as h, hubFormatVersion as ht, hostName as i, BLOB_HASH as it, mayDecorate as j, endsWithMarker as k, syncHost as l, comparePaths as lt, receiverFromEnv as m, formatMismatch as mt, DEFAULT_UI_PORT as n, nodeStorage as nt, removeDanglingLinks as o, MAX_FILE_BYTES as ot, retroReportFromReceiver as p, textBytes as pt, dependencyGraph as q, caddySites as r, ACCESS_HEADERS as rt, removeHostLink as s, ROUTES as st, APP_BUNDLE_ID as t, readYaml as tt, groupPlan as u, exceedsFileLimit as ut, initHub as v, requireSlug as vt, readSession as w, WriteError as wt, sessionBriefing as x, worktreesOf as xt, untilState as y, currentBranch as yt, renumberText as z };
+export { unavailableHubs as $, headerLine as A, scopeOfPath as B, loadSessions as C, worktreesOf as Ct, matchGrants as D, contentHash as Dt, grantScope as E, WriteError as Et, applyOffline as F, loadHub as G, checkHubName as H, renumberRequest as I, mainlineEdges as J, sectionText as K, renumberFiles as L, attributeTrace as M, traceTranscript as N, decorateReply as O, splitFrontMatter as Ot, transcriptTitle as P, remoteMembers as Q, renumberPath as R, turnReminder as S, findHubRoot as St, transcriptPath as T, DATA_DIR as Tt, HubError as U, applyOperation as V, loadConfig as W, memberOfGroup as X, linksInto as Y, refIndex as Z, setArchivedMany as _, hubFormatVersion as _t, openInApp as a, ACCESS_HEADERS as at, duplicateClaimLines as b, requireSlug as bt, siteBlock as c, MAX_FILE_BYTES as ct, migrateHub as d, comparePaths as dt, taskFile as et, retroReport as f, exceedsFileLimit as ft, ARCHIVE_KINDS as g, formatMismatch as gt, RETRY_RULES as h, textBytes as ht, hostName as i, nodeStorage as it, mayDecorate as j, endsWithMarker as k, syncHost as l, ROUTES as lt, receiverFromEnv as m, requestTime as mt, DEFAULT_UI_PORT as n, readFrontMatter as nt, removeDanglingLinks as o, BLOB_HASH as ot, retroReportFromReceiver as p, readsAsText as pt, dependencyGraph as q, caddySites as r, readYaml as rt, removeHostLink as s, MAX_BLOB_BYTES as st, APP_BUNDLE_ID as t, nowMinute as tt, groupPlan as u, SOCKET_MAX_AGE_CLOSE as ut, initHub as v, MAINLINE_FILE as vt, readSession as w, ConflictError as wt, sessionBriefing as x, currentBranch as xt, untilState as y, TASK_FILE as yt, renumberText as z };

package/dist/host.js

@@ -1,2 +1,2 @@
-import { a as openInApp, c as siteBlock, i as hostName, l as syncHost, n as DEFAULT_UI_PORT, o as removeDanglingLinks, r as caddySites, s as removeHostLink, t as APP_BUNDLE_ID } from "./host-CIOd2WSh.js";
+import { a as openInApp, c as siteBlock, i as hostName, l as syncHost, n as DEFAULT_UI_PORT, o as removeDanglingLinks, r as caddySites, s as removeHostLink, t as APP_BUNDLE_ID } from "./host-erQ_Sr8U.js";
 export { APP_BUNDLE_ID, DEFAULT_UI_PORT, caddySites, hostName, openInApp, removeDanglingLinks, removeHostLink, siteBlock, syncHost };

package/dist/{launch-DJ944-bI.js → launch-I_JDTAtU.js}

@@ -1,4 +1,4 @@
-import { Ct as DATA_DIR, i as hostName, l as syncHost, n as DEFAULT_UI_PORT, s as removeHostLink, wt as WriteError } from "./host-CIOd2WSh.js";
+import { Et as WriteError, Tt as DATA_DIR, i as hostName, l as syncHost, n as DEFAULT_UI_PORT, s as removeHostLink } from "./host-erQ_Sr8U.js";
 import { existsSync, mkdirSync, readFileSync, realpathSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { spawn, spawnSync } from "node:child_process";
@@ -276,7 +276,7 @@ async function launchUi(root, hub, configured, options) {
 		}
 		let server;
 		if (!reuse) {
-			const { serveUi } = await import("./ui-BhwCZPJR.js");
+			const { serveUi } = await import("./ui-CFtibt8x.js");
 			server = await serveUi(root, choice.port);
 			writeUiRecord(root, {
 				port: choice.port,

package/dist/launch.js

@@ -1,2 +1,2 @@
-import { a as networkProbe, c as realRoot, d as withUiLock, i as launchUi, l as startUiInBackground, n as choosePort, o as portCandidates, r as exitCodeFor, s as readUiRecord, t as PORT_SPAN, u as watchHubGone } from "./launch-DJ944-bI.js";
+import { a as networkProbe, c as realRoot, d as withUiLock, i as launchUi, l as startUiInBackground, n as choosePort, o as portCandidates, r as exitCodeFor, s as readUiRecord, t as PORT_SPAN, u as watchHubGone } from "./launch-I_JDTAtU.js";
 export { PORT_SPAN, choosePort, exitCodeFor, launchUi, networkProbe, portCandidates, readUiRecord, realRoot, startUiInBackground, watchHubGone, withUiLock };

package/dist/{operation-DJARDCM0.js → operation-Bf6DtnfD.js}

@@ -1,4 +1,4 @@
-import { B as scopeOfPath, Ct as DATA_DIR, Et as splitFrontMatter, F as applyOffline, I as renumberRequest, L as renumberFiles, R as renumberPath, St as ConflictError, Tt as contentHash, V as applyOperation, at as MAX_BLOB_BYTES, ct as SOCKET_MAX_AGE_CLOSE, dt as readsAsText, et as nowMinute, ft as requestTime, it as BLOB_HASH, lt as comparePaths, nt as nodeStorage, ot as MAX_FILE_BYTES, pt as textBytes, rt as ACCESS_HEADERS, st as ROUTES, ut as exceedsFileLimit, wt as WriteError, z as renumberText } from "./host-CIOd2WSh.js";
+import { B as scopeOfPath, Dt as contentHash, Et as WriteError, F as applyOffline, I as renumberRequest, L as renumberFiles, Ot as splitFrontMatter, R as renumberPath, Tt as DATA_DIR, V as applyOperation, at as ACCESS_HEADERS, ct as MAX_FILE_BYTES, dt as comparePaths, ft as exceedsFileLimit, ht as textBytes, it as nodeStorage, lt as ROUTES, mt as requestTime, ot as BLOB_HASH, pt as readsAsText, st as MAX_BLOB_BYTES, tt as nowMinute, ut as SOCKET_MAX_AGE_CLOSE, wt as ConflictError, z as renumberText } from "./host-erQ_Sr8U.js";
 import { createHash, randomBytes } from "node:crypto";
 import { accessSync, appendFileSync, chmodSync, closeSync, constants, copyFileSync, createReadStream, createWriteStream, existsSync, linkSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, renameSync, rmSync, statSync, watch, writeFileSync } from "node:fs";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";

package/dist/{ui-BhwCZPJR.js → ui-CFtibt8x.js}

@@ -1,8 +1,8 @@
 import { P as configSchema } from "./dist-zSabglPq.js";
-import { C as loadSessions, Ct as DATA_DIR, G as loadHub, J as mainlineEdges, K as sectionText, M as attributeTrace, N as traceTranscript, P as transcriptTitle, Q as remoteMembers, St as ConflictError, T as transcriptPath, U as HubError, W as loadConfig, Y as linksInto, Z as refIndex, _ as setArchivedMany, a as openInApp, g as ARCHIVE_KINDS, q as dependencyGraph, tt as readYaml, u as groupPlan, w as readSession, wt as WriteError } from "./host-CIOd2WSh.js";
+import { C as loadSessions, Et as WriteError, G as loadHub, J as mainlineEdges, K as sectionText, M as attributeTrace, N as traceTranscript, P as transcriptTitle, Q as remoteMembers, T as transcriptPath, Tt as DATA_DIR, U as HubError, W as loadConfig, Y as linksInto, Z as refIndex, _ as setArchivedMany, a as openInApp, g as ARCHIVE_KINDS, q as dependencyGraph, rt as readYaml, u as groupPlan, w as readSession, wt as ConflictError } from "./host-erQ_Sr8U.js";
 import { t as listProgress } from "./progress-1BfPg2zN.js";
-import { A as isSynced, _ as readDaemon, a as remoteMode, b as readRemote, h as callDaemon, j as syncPaths, k as SYNC_DIR, m as DaemonUnavailable, n as hubWriter, r as writtenLines, y as watchTree } from "./operation-DJARDCM0.js";
-import { c as realRoot, f as CLI_VERSION, s as readUiRecord } from "./launch-DJ944-bI.js";
+import { A as isSynced, _ as readDaemon, a as remoteMode, b as readRemote, h as callDaemon, j as syncPaths, k as SYNC_DIR, m as DaemonUnavailable, n as hubWriter, r as writtenLines, y as watchTree } from "./operation-Bf6DtnfD.js";
+import { c as realRoot, f as CLI_VERSION, s as readUiRecord } from "./launch-I_JDTAtU.js";
 import { createRequire } from "node:module";
 import { closeSync, existsSync, lstatSync, openSync, readFileSync, readSync, realpathSync, statSync } from "node:fs";
 import { basename, dirname, extname, join, normalize, relative, resolve, sep } from "node:path";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mainflow",
-  "version": "0.39.0",
+  "version": "0.40.0",
   "description": "本機多 AI 協作的主脈絡任務管理：CLI 與介面",
   "license": "MIT",
   "type": "module",