mainflow 0.41.0 → 0.43.0-alpha.1

package/dist/hooks.js

@@ -1,10 +1,10 @@
-import { P as configSchema, W as parseRef, Y as taskSchema, rt as describeRequest } from "./dist-zSabglPq.js";
-import { A as grantScope, D as loadSessions, Dt as worktreesOf, Et as findHubRoot, F as mayDecorate, M as decorateReply, N as endsWithMarker, O as readSession, P as headerLine, S as turnReminder, Tt as currentBranch, Y as loadHub, bt as formatMismatch, ct as nodeStorage, i as hostName, it as taskFile, j as matchGrants, kt as DATA_DIR, ot as readFrontMatter, q as HubError, st as readYaml, x as sessionBriefing, xt as hubFormatVersion } from "./host-BAMZmRy8.js";
-import { n as hubWriter, r as writtenLines } from "./operation-DlR1P_Pt.js";
+import { I as configSchema, Y as parseRef, ft as describeRequest, rt as taskSchema, tt as repoPaths } from "./dist-D5rZ0MQH.js";
+import { C as turnReminder, Dt as hubFormatVersion, Et as formatMismatch, F as headerLine, Ft as inRepositoryHubAt, Gt as nodeStorage, Ht as resolveHub, I as mayDecorate, Jt as hubPath, Kt as currentBranch, Lt as notRegisteredMessage, M as matchGrants, N as decorateReply, O as loadSessions, P as endsWithMarker, Pt as hubHoldingFile, Q as HubError, Qt as DATA_DIR, S as sessionBriefing, Xt as worktreesOf, Yt as realPath, dt as readFrontMatter, et as loadHub, ft as readYaml, i as hostName, j as grantScope, k as readSession, lt as taskFile, qt as dataFile } from "./host-BJvqZy-i.js";
+import { n as hubWriter, r as writtenLines } from "./operation-BhBbGauo.js";
 import { SCENARIO_LINES, SCENARIO_SKIP_KINDS } from "./facts.js";
 import { resolveFixed, scanCommand, scopedCwd } from "./grant-commands.js";
 import { appendFileSync, existsSync, readFileSync } from "node:fs";
-import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { isAbsolute, join, relative, resolve } from "node:path";
 //#region src/hooks.ts
 const SUMMARY_LIMIT = 280;
 /** The parent transcript `<dir>/<session>.jsonl` keeps its subagents under `<dir>/<session>/subagents/`. */
@@ -76,8 +76,8 @@ const claudeCodeSessionId = (raw) => `claude-code-${shortId(raw)}`;
 * bring an ended or archived one back, since the viewer is working in it again. Its environment facts are
 * written when it is created and whenever `refresh` asks, such as on SessionStart after a resume.
 */
-async function recordSession(write, root, payload, id, refresh) {
-	const cwd = payload.cwd ?? root;
+async function recordSession(write, dirs, payload, id, refresh) {
+	const cwd = payload.cwd ?? dirs.root;
 	const { session, created } = (await write("session.ensure", {
 		id,
 		agent: "claude-code",
@@ -107,11 +107,11 @@ const openLink = (hub) => (path) => `https://${hostName(hub)}/open${path}`;
 * only, so the model keeps reading what it wrote. Text with nothing to change
 * returns before the hub is loaded, because Claude Code holds every batch until the hook answers.
 */
-const displayReply = (root, { payload }) => {
+const displayReply = (dirs, { payload }) => {
 	const text = payload.delta;
 	if (!text || !mayDecorate(text)) return null;
-	const hub = loadHub(root, { remotes: false });
-	const session = payload.session_id ? readSession(root, claudeCodeSessionId(payload.session_id)) : null;
+	const hub = loadHub(dirs, { remotes: false });
+	const session = payload.session_id ? readSession(dirs, claudeCodeSessionId(payload.session_id)) : null;
 	const shown = decorateReply(text, {
 		hub,
 		session,
@@ -125,10 +125,10 @@ const displayReply = (root, { payload }) => {
 /** Mainline ids a reply mentions, e.g. m001 in `m001/t003`; not inside a longer word or path. */
 const MAINLINE_MENTION = /(?<![\w/#.[-])(m\d{3})(?![\w\]])/g;
 /** The open mainlines the text mentions; loads the hub only when the text mentions one. */
-function openMainlinesIn(root, text) {
+function openMainlinesIn(dirs, text) {
 	const mentioned = new Set([...text.matchAll(MAINLINE_MENTION)].map((m) => m[1]));
 	if (mentioned.size === 0) return [];
-	return loadHub(root, { remotes: false }).mainlines.filter((m) => mentioned.has(m.id) && !m.archivedAt && (m.status === "active" || m.status === "planning")).map((m) => m.id);
+	return loadHub(dirs, { remotes: false }).mainlines.filter((m) => mentioned.has(m.id) && !m.archivedAt && (m.status === "active" || m.status === "planning")).map((m) => m.id);
 }
 /** Tools whose `file_path` input writes a file. */
 const WRITE_TOOLS = /* @__PURE__ */ new Set([
@@ -139,16 +139,16 @@ const WRITE_TOOLS = /* @__PURE__ */ new Set([
 ]);
 /** A Bash command that runs the mainflow CLI: by the form the hook texts give, or as a `mainflow` command word that starts a command, not one that is only an argument. */
 const isMainflowCommand = (command, cli) => command.includes(cli) || /(?:^|[;&|(])\s*mainflow\s+\S|(?:\.bin|mainflow\/dist)\/(?:cli\.js|mainflow)\b/.test(command);
-/** Whether a path lies under a `.mainflow/` directory. */
-const inMainflowData = (path) => /(?:^|\/)\.mainflow\//.test(path);
+/** Whether `path` is a file of a hub registered on this machine: it lies in that hub's data directory. */
+const inHubData = (path, env) => hubHoldingFile(path, env) !== null;
 /** A user record that holds what the user typed; tool results come back as user records too, but carry only tool_result blocks. */
 const isUserPrompt = (r) => r.type === "user" && !r.isSidechain && (typeof r.message?.content === "string" || Array.isArray(r.message?.content) && r.message.content.some((b) => b.type === "text"));
 /**
 * Whether the turn that is ending, everything after the last user message in the transcript, ran a mainflow
-* command or wrote a file under `.mainflow/`. False when the transcript is missing or unreadable, so a hook that
+* command or wrote a file of a registered hub. False when the transcript is missing or unreadable, so a hook that
 * cannot tell never asks.
 */
-function turnTouchedMainflow(transcript, cli) {
+function turnTouchedMainflow(transcript, cli, env) {
 	if (!transcript || !existsSync(transcript)) return false;
 	let lines;
 	try {
@@ -169,7 +169,7 @@ function turnTouchedMainflow(transcript, cli) {
 		for (const block of content) {
 			if (block.type !== "tool_use") continue;
 			if (block.name === "Bash" && typeof block.input?.command === "string" && isMainflowCommand(block.input.command, cli)) return true;
-			if (block.name && WRITE_TOOLS.has(block.name) && typeof block.input?.file_path === "string" && inMainflowData(block.input.file_path)) return true;
+			if (block.name && WRITE_TOOLS.has(block.name) && typeof block.input?.file_path === "string" && inHubData(block.input.file_path, env)) return true;
 		}
 	}
 	return false;
@@ -177,20 +177,20 @@ function turnTouchedMainflow(transcript, cli) {
 /**
 * What to ask for when a turn ends without its header line: the header itself when an action is in progress, or
 * an action first when the queue is empty, the reply talks about an open mainline and the turn ran a mainflow
-* command or wrote under `.mainflow/`, since the header only names the session's own action in progress. A reply
+* command or wrote a file of the hub, since the header only names the session's own action in progress. A reply
 * that only mentions a mainline, in a draft or a question, asks for nothing. Null when there is nothing to ask for.
 */
-function missingHeaderRequest(root, { payload, cli }) {
+function missingHeaderRequest(dirs, { payload, cli, env }) {
 	if (!payload.session_id || payload.stop_hook_active) return null;
 	const message = payload.last_assistant_message ?? "";
 	if (endsWithMarker(message)) return null;
-	const session = readSession(root, claudeCodeSessionId(payload.session_id));
+	const session = readSession(dirs, claudeCodeSessionId(payload.session_id));
 	const header = headerLine(session);
 	if (header) return `[mainflow] 這一輪最後一則回覆的最後一行不是標頭。請只回一則內容為「${header}」的訊息，不加其他文字。`;
 	if (session && session.actions.length > 0) return null;
-	const mainlines = openMainlinesIn(root, message);
-	if (mainlines.length === 0 || !turnTouchedMainflow(payload.transcript_path, cli)) return null;
-	return `[mainflow] 這一輪的回覆提到 ${mainlines.join("、")}，也執行了 mainflow 指令或寫入 .mainflow/，但這場會話沒有行動，所以回覆結尾沒有標頭。這一輪若在推進它，先用 ${cli} action add "<做法>" --serves <m/t#c>（還沒拆任務時用解決條件 <m#r>）列出行動並用 ${cli} action set <a編號> --status doing 標為進行中，或用 ${cli} session handoff <會話> 接手上一場沒做完的行動；再只回一則內容為「▸ <m/t> · <a編號>」的訊息，不加其他文字。只是提到、沒有推進時，不必處理。`;
+	const mainlines = openMainlinesIn(dirs, message);
+	if (mainlines.length === 0 || !turnTouchedMainflow(payload.transcript_path, cli, env)) return null;
+	return `[mainflow] 這一輪的回覆提到 ${mainlines.join("、")}，也執行了 mainflow 指令或寫入 hub 的資料目錄，但這場會話沒有行動，所以回覆結尾沒有標頭。這一輪若在推進它，先用 ${cli} action add "<做法>" --serves <m/t#c>（還沒拆任務時用解決條件 <m#r>）列出行動並用 ${cli} action set <a編號> --status doing 標為進行中，或用 ${cli} session handoff <會話> 接手上一場沒做完的行動；再只回一則內容為「▸ <m/t> · <a編號>」的訊息，不加其他文字。只是提到、沒有推進時，不必處理。`;
 }
 /**
 * Stop: ask for what the turn's header needs, then settle the session. Only the model knows which message closes a
@@ -198,36 +198,36 @@ function missingHeaderRequest(root, { payload, cli }) {
 * stops it from asking twice in a row. A session asked to list an action is not settled yet: settling removes a
 * session with no actions, and the action it is asked to add needs the session to exist.
 */
-const settleAndCheckMarker = async (root, context) => {
-	const request = missingHeaderRequest(root, context);
-	const session = context.payload.session_id ? readSession(root, claudeCodeSessionId(context.payload.session_id)) : null;
-	if (!request || session && session.actions.length > 0) await settleOnEnd(root, context);
+const settleAndCheckMarker = async (dirs, context) => {
+	const request = missingHeaderRequest(dirs, context);
+	const session = context.payload.session_id ? readSession(dirs, claudeCodeSessionId(context.payload.session_id)) : null;
+	if (!request || session && session.actions.length > 0) await settleOnEnd(dirs, context);
 	return request ? JSON.stringify({ hookSpecificOutput: {
 		hookEventName: "Stop",
 		additionalContext: request
 	} }) : null;
 };
 const CLAUDE_CODE_EVENTS = {
-	"session-start": async (root, { payload, envFile, cli, startUi, write }) => {
+	"session-start": async (dirs, { payload, envFile, cli, startUi, write }) => {
 		if (!payload.session_id) return null;
 		const id = claudeCodeSessionId(payload.session_id);
-		const session = await recordSession(write, root, payload, id, true);
+		const session = await recordSession(write, dirs, payload, id, true);
 		await write("session.reminder", {
 			id,
 			digest: null
 		});
 		if (envFile) appendFileSync(envFile, `export MAINFLOW_SESSION=${id}\n`);
-		startUi?.(root);
-		return sessionBriefing(root, session, {
+		startUi?.(dirs);
+		return sessionBriefing(dirs, session, {
 			cli,
 			envNote: envFile ? "已設定環境變數 MAINFLOW_SESSION，指令不必再帶 --session" : `執行指令時帶 --session ${id}`
 		});
 	},
-	"user-prompt-submit": async (root, { payload, cli, write }) => {
+	"user-prompt-submit": async (dirs, { payload, cli, write }) => {
 		if (!payload.session_id) return null;
-		const session = await recordSession(write, root, payload, claudeCodeSessionId(payload.session_id), false);
+		const session = await recordSession(write, dirs, payload, claudeCodeSessionId(payload.session_id), false);
 		const saved = [];
-		const text = turnReminder(root, session, {
+		const text = turnReminder(dirs, session, {
 			cli,
 			saveDigest: (digest) => saved.push(write("session.reminder", {
 				id: session.id,
@@ -239,20 +239,20 @@ const CLAUDE_CODE_EVENTS = {
 	},
 	stop: settleAndCheckMarker,
 	"session-end": settleOnEnd,
-	"subagent-start": async (root, { payload, write }) => {
+	"subagent-start": async (dirs, { payload, write }) => {
 		if (!payload.agent_id) return null;
 		const parent = payload.session_id ? claudeCodeSessionId(payload.session_id) : null;
 		await write("session.ensure", {
 			id: claudeCodeSessionId(payload.agent_id),
 			agent: payload.agent_type ? `claude-code/${payload.agent_type}` : "claude-code",
-			cwd: payload.cwd ?? root,
-			delegatedFrom: parent && readSession(root, parent) ? parent : null
+			cwd: payload.cwd ?? dirs.root,
+			delegatedFrom: parent && readSession(dirs, parent) ? parent : null
 		});
 		return null;
 	},
-	"subagent-stop": async (root, { payload, write }) => {
+	"subagent-stop": async (dirs, { payload, write }) => {
 		const id = payload.agent_id ? claudeCodeSessionId(payload.agent_id) : null;
-		if (!id || !readSession(root, id)) return null;
+		if (!id || !readSession(dirs, id)) return null;
 		const transcript = payload.transcript_path ? subagentTranscript(payload.transcript_path, payload.agent_id) : void 0;
 		const meta = transcript ? readMeta(transcript) : {};
 		await write("session.info", {
@@ -270,7 +270,7 @@ const CLAUDE_CODE_EVENTS = {
 		});
 		return null;
 	},
-	"pre-tool-use": (root, context) => typeof context.payload.tool_name === "string" && WRITE_TOOLS.has(context.payload.tool_name) ? decideStartGate(root, context) : decideByGrants(root, context),
+	"pre-tool-use": (dirs, context) => typeof context.payload.tool_name === "string" && WRITE_TOOLS.has(context.payload.tool_name) ? decideStartGate(dirs, context) : decideByGrants(dirs, context),
 	"post-tool-use": checkAfterWrite,
 	"message-display": displayReply
 };
@@ -333,21 +333,21 @@ async function logGranted(write, scope, call, request, grant, warn) {
 * print nothing, so other hooks and the usual permission rules decide them. Any failure asks: the caller turns a
 * throw into the fallback above.
 */
-async function decideByGrants(root, { payload, warn, write }) {
+async function decideByGrants(dirs, { payload, warn, write }) {
 	const scan = grantableCall(payload);
 	if (!scan) return null;
 	if (scan.kind === "refused") return askBecause(scan.reason);
 	const sessionId = payload.session_id;
 	if (typeof sessionId !== "string" || !sessionId) return askBecause("payload 沒有字串的 session_id");
-	const scoped = grantScope(root, readSession(root, claudeCodeSessionId(sessionId)));
+	const scoped = grantScope(dirs, readSession(dirs, claudeCodeSessionId(sessionId)));
 	if (!scoped.ok) return askBecause(scoped.reason);
-	const config = readYaml(join(root, DATA_DIR, "config.yaml"), configSchema).data;
-	const place = scopedCwd(payload.cwd, root, config.repos);
+	const repos = repoPaths(readYaml(join(dirs.data, "config.yaml"), configSchema).data.repos);
+	const place = scopedCwd(payload.cwd, dirs.root, repos);
 	if (!place.ok) return askBecause(place.reason);
 	const resolved = resolveFixed(scan.call, {
 		cwd: place.dir,
-		root,
-		repos: config.repos
+		root: dirs.root,
+		repos
 	});
 	if (!resolved.ok) return askBecause(resolved.reason);
 	const match = matchGrants(scoped.scope, [resolved.request]);
@@ -365,15 +365,15 @@ function hasScenarioLine(body) {
 	return lines.slice(start + 1, end === -1 ? void 0 : end).some((line) => SCENARIO_LINES.confirmed.pattern.test(line) || SCENARIO_LINES.skipped.pattern.test(line));
 }
 /** Whether a path lies under `tmp/` at the root of the hub or of a repository config.yaml lists. */
-function inProjectTmp(file, root) {
-	const repos = readYaml(join(root, DATA_DIR, "config.yaml"), configSchema).data.repos;
-	return [root, ...Object.values(repos).map((path) => resolve(root, path))].some((dir) => relative(dir, file).startsWith(`tmp/`));
+function inProjectTmp(file, dirs) {
+	const repos = repoPaths(readYaml(join(dirs.data, "config.yaml"), configSchema).data.repos);
+	return [dirs.root, ...Object.values(repos).map((path) => resolve(dirs.root, path))].some((dir) => relative(dir, file).startsWith(`tmp/`));
 }
 /**
 * The open tasks of this hub that the session's actions in progress serve, created on or after START_GATE_FROM,
 * whose 紀錄 has neither line. A task that cannot be read is left out: the gate only stops what it can show is missing.
 */
-function unconfirmedTasks(root, session) {
+function unconfirmedTasks(dirs, session) {
 	const tasks = /* @__PURE__ */ new Set();
 	for (const action of session.actions) {
 		if (action.status !== "doing") continue;
@@ -385,7 +385,7 @@ function unconfirmedTasks(root, session) {
 	return [...tasks].filter((ref) => {
 		const [mainline, task] = ref.split("/");
 		try {
-			const { data, body } = readFrontMatter(taskFile(root, mainline, task), taskSchema);
+			const { data, body } = readFrontMatter(taskFile(dirs, mainline, task), taskSchema);
 			return data.created >= "2026-10-19" && data.status !== "done" && data.status !== "dropped" && !hasScenarioLine(body);
 		} catch {
 			return false;
@@ -395,19 +395,19 @@ function unconfirmedTasks(root, session) {
 /**
 * PreToolUse for the tools that write a file: deny the write while a task the session's action in progress
 * serves has neither a confirmation nor a skip line under 紀錄, so code waits for its acceptance scenarios.
-* Writes under `.mainflow/` or a project's `tmp/`, a session with no record or no such task, print nothing. A
+* Writes to a registered hub's data directory or a project's `tmp/`, a session with no record or no such task, print nothing. A
 * subagent's call carries the main session's session_id, so it is judged by the main session's action. Any failure
 * stays silent, since the fallback only answers Bash, and the write goes on.
 */
-function decideStartGate(root, { payload, cli }) {
+function decideStartGate(dirs, { payload, cli, env }) {
 	const path = payload.tool_input?.file_path ?? payload.tool_input?.notebook_path;
 	const sessionId = payload.session_id;
 	if (typeof path !== "string" || !path || typeof sessionId !== "string" || !sessionId) return null;
-	const file = isAbsolute(path) ? path : resolve(typeof payload.cwd === "string" ? payload.cwd : root, path);
-	if (inMainflowData(file) || inProjectTmp(file, root)) return null;
-	const session = readSession(root, claudeCodeSessionId(sessionId));
+	const file = isAbsolute(path) ? path : resolve(typeof payload.cwd === "string" ? payload.cwd : dirs.root, path);
+	if (inHubData(file, env) || inProjectTmp(file, dirs)) return null;
+	const session = readSession(dirs, claudeCodeSessionId(sessionId));
 	if (!session) return null;
-	const missing = unconfirmedTasks(root, session);
+	const missing = unconfirmedTasks(dirs, session);
 	if (missing.length === 0) return null;
 	const reason = [
 		`${missing.join("、")} 的「紀錄」沒有驗收情境的確認行，也沒有略過行，所以先不寫檔。`,
@@ -422,35 +422,29 @@ function decideStartGate(root, { payload, cli }) {
 }
 /** How many problems outside the written file the reminder lists before it only gives the count. */
 const OTHER_PROBLEMS_SHOWN = 5;
-const problemLine = (p) => `- ${p.file}${p.field ? ` › ${p.field}` : ""}：${p.message}`;
+/** A problem as the reminder lists it, its file as the absolute path the model opens. */
+const problemLine = (dirs, p) => `- ${dataFile(dirs, p.file)}${p.field ? ` › ${p.field}` : ""}：${p.message}`;
 /**
-* The hub a written file belongs to: the nearest `.mainflow` above it that holds config.yaml. It is
-* found from the file itself rather than from the session's directory, because a worktree maps the
-* session to the main tree's hub while the file was written to the worktree's own copy.
+* After a tool writes into a hub's data directory, run the same checks as `mainflow check` and hand the problems
+* to the model in the same turn. Edit, Write and MultiEdit name the file; Bash only counts when its command mentions
+* `.mainflow` or the hub's data directory, a text match that misses paths built from variables. A clean hub, or a
+* write elsewhere, adds nothing. The hub a written file belongs to is the registered hub whose data directory
+* holds it, found from the file itself rather than from the session's directory, because a session may write
+* into another registered hub.
 */
-function hubOfFile(file) {
-	for (let dir = dirname(file); dirname(dir) !== dir; dir = dirname(dir)) if (basename(dir) === ".mainflow" && existsSync(join(dir, "config.yaml"))) return dirname(dir);
-	return null;
-}
-/**
-* After a tool writes under `.mainflow/`, run the same checks as `mainflow check` and hand the problems
-* to the model in the same turn. Edit, Write and MultiEdit name the file; Bash only counts when its
-* command mentions `.mainflow`, a text match that misses paths built from variables. A clean hub, or a
-* write elsewhere, adds nothing.
-*/
-function checkAfterWrite(root, { payload, cli }) {
+function checkAfterWrite(dirs, { payload, cli, env }) {
 	const input = payload.tool_input ?? {};
-	let hub = root;
+	let hub = dirs;
 	let written = null;
 	if (payload.tool_name === "Bash") {
-		if (!input.command?.includes(".mainflow")) return null;
+		if (!input.command?.includes(".mainflow") && !input.command?.includes(dirs.data)) return null;
 	} else {
 		if (!input.file_path) return null;
-		const file = isAbsolute(input.file_path) ? input.file_path : resolve(payload.cwd ?? root, input.file_path);
-		const owner = hubOfFile(file);
+		const file = isAbsolute(input.file_path) ? input.file_path : resolve(payload.cwd ?? dirs.root, input.file_path);
+		const owner = hubHoldingFile(file, env);
 		if (!owner) return null;
 		hub = owner;
-		written = relative(owner, file);
+		written = hubPath(owner, realPath(file) ?? file);
 	}
 	let problems;
 	try {
@@ -469,10 +463,11 @@ function checkAfterWrite(root, { payload, cli }) {
 	if (problems.length === 0) return null;
 	const own = written ? problems.filter((p) => p.file === written) : [];
 	const others = problems.filter((p) => !own.includes(p));
+	const line = (p) => problemLine(hub, p);
 	const lines = [
-		written && own.length ? `[mainflow] 剛寫入的 ${written} 有 ${own.length} 個問題，改好再繼續：` : `[mainflow] 寫入 .mainflow/ 後，check 找到 ${problems.length} 個問題：`,
-		...own.map(problemLine),
-		...others.length ? [...own.length ? [`其他檔案還有 ${others.length} 個問題：`] : [], ...others.slice(0, OTHER_PROBLEMS_SHOWN).map(problemLine)] : [],
+		written && own.length ? `[mainflow] 剛寫入的 ${dataFile(hub, written)} 有 ${own.length} 個問題，改好再繼續：` : `[mainflow] 寫入 hub 的資料目錄 ${hub.data} 後，check 找到 ${problems.length} 個問題：`,
+		...own.map(line),
+		...others.length ? [...own.length ? [`其他檔案還有 ${others.length} 個問題：`] : [], ...others.slice(0, OTHER_PROBLEMS_SHOWN).map(line)] : [],
 		...others.length > OTHER_PROBLEMS_SHOWN ? [`還有 ${others.length - OTHER_PROBLEMS_SHOWN} 個沒列出，跑 ${cli} check 看全部。`] : []
 	];
 	return JSON.stringify({ hookSpecificOutput: {
@@ -484,17 +479,46 @@ const HOOK_PLATFORMS = { "claude-code": CLAUDE_CODE_EVENTS };
 const HOOK_FALLBACKS = { "claude-code": CLAUDE_CODE_FALLBACKS };
 /**
 * Events that find the hub from $CLAUDE_PROJECT_DIR before the payload's cwd. A publish runs in the package's own
-* repository, which config.yaml may list outside the hub directory (../mainflow), so its cwd leads to no hub.
+* repository, which may be one the session's hub only references, so its cwd leads to another hub or to none, while
+* the grants that cover it are the session's hub's.
 */
 const PROJECT_HUB_EVENTS = /* @__PURE__ */ new Set(["pre-tool-use"]);
-function hubRootFor(event, ctx) {
-	return (PROJECT_HUB_EVENTS.has(event) && ctx.projectDir && isAbsolute(ctx.projectDir) ? findHubRoot(ctx.projectDir) : null) ?? findHubRoot(typeof ctx.payload.cwd === "string" ? ctx.payload.cwd : process.cwd());
+/** The directory whose hub an event works on: $CLAUDE_PROJECT_DIR for the events above when set, the payload's cwd otherwise. */
+const hookDirs = (event, ctx) => [...PROJECT_HUB_EVENTS.has(event) && ctx.projectDir && isAbsolute(ctx.projectDir) ? [ctx.projectDir] : [], typeof ctx.payload.cwd === "string" ? ctx.payload.cwd : process.cwd()];
+/**
+* The registered hub of the first of the event's directories that has one (docs/file-format.md "hub 對照表"). The
+* registry's lock is never waited for, since the host stops a hook that runs past its timeout.
+*/
+function hubFor(event, ctx, warn) {
+	for (const dir of hookDirs(event, ctx)) {
+		const hub = resolveHub(dir, {
+			env: ctx.env,
+			warn,
+			waitForLock: false
+		});
+		if (hub) return hub;
+	}
+	return null;
+}
+/**
+* SessionStart in a repository that still keeps a hub's data in its .mainflow/ and that this machine has not
+* registered: tell the model, since every other hook stays silent there and nothing else would show that mainflow is
+* not working.
+*/
+function unregisteredNotice(event, ctx) {
+	const dir = hookDirs(event, ctx).at(-1);
+	const found = inRepositoryHubAt(dir);
+	if (!found) return null;
+	return {
+		stdout: event === "session-start" ? `[mainflow] 這個倉庫的 hub「${found.name}」的資料還在倉庫裡的 .mainflow/，這台機器也還沒登記它，所以 mainflow 的 hook 不會運作。執行 ${ctx.cli} hub migrate-data ${found.root} 把資料搬到使用者層級的 mainflow 目錄並登記後就恢復。` : null,
+		error: `mainflow hook claude-code ${event}: ${notRegisteredMessage(dir)}`
+	};
 }
 /** Events whose output reaches the model before it works, so they carry the notice that the hub's data format does not match this CLI. */
 const FORMAT_NOTICE_EVENTS = /* @__PURE__ */ new Set(["session-start", "user-prompt-submit"]);
 /** What the model is told when the hub's data format is not the one this CLI reads and writes; null when it is. */
-function formatNotice(root, cli) {
-	const found = hubFormatVersion(nodeStorage(root));
+function formatNotice(dirs, cli) {
+	const found = hubFormatVersion(nodeStorage(dirs));
 	const reason = found === null ? null : formatMismatch(found);
 	if (found === null || reason === null) return null;
 	return {
@@ -526,25 +550,35 @@ async function runHook(platform, event, ctx) {
 	const warnings = [];
 	const errorText = (message) => [...warnings, ...message ? [message] : []].join("\n") || null;
 	try {
-		const root = hubRootFor(event, ctx);
-		if (!root) return {
-			stdout: hookFallback(platform, event, ctx, { kind: "outside-hub" }),
-			error: null
-		};
 		const warn = (message) => warnings.push(message);
-		const writer = ctx.write ?? hubWriter(root);
+		const dirs = hubFor(event, ctx, (message) => warn(`mainflow hook ${platform} ${event}: ${message}`));
+		if (!dirs) {
+			const unregistered = unregisteredNotice(event, ctx);
+			return {
+				stdout: hookFallback(platform, event, ctx, { kind: "outside-hub" }) ?? unregistered?.stdout ?? null,
+				error: errorText(unregistered?.error)
+			};
+		}
+		if (!existsSync(join(dirs.data, "config.yaml"))) {
+			const told = FORMAT_NOTICE_EVENTS.has(event);
+			return {
+				stdout: event === "session-start" ? `[mainflow] hub「${dirs.name}」的資料還沒下載到這台機器，所以 mainflow 的 hook 不會運作。先設好 MAINFLOW_SYNC_CLIENT_ID 與 MAINFLOW_SYNC_CLIENT_SECRET，再執行 ${ctx.cli} sync 下載後就恢復。` : null,
+				error: told ? errorText(`mainflow hook ${platform} ${event}: hub "${dirs.name}" has no config.yaml in ${dirs.data} yet; run mainflow sync to download it`) : errorText()
+			};
+		}
+		const writer = ctx.write ?? hubWriter(dirs, process.env, { hook: true });
 		const write = async (op, input) => {
 			const written = await writer(op, input);
 			for (const line of writtenLines(written)) if (line.startsWith("!")) warn(`mainflow hook ${platform} ${event}: ${line.slice(2)}`);
 			return written;
 		};
-		const notice = FORMAT_NOTICE_EVENTS.has(event) ? formatNotice(root, ctx.cli) : null;
+		const notice = FORMAT_NOTICE_EVENTS.has(event) ? formatNotice(dirs, ctx.cli) : null;
 		if (notice) return {
 			stdout: notice.text,
 			error: errorText(`mainflow hook ${platform} ${event}: ${notice.reason}`)
 		};
 		return {
-			stdout: await handler(root, {
+			stdout: await handler(dirs, {
 				...ctx,
 				warn,
 				write