mainflow 0.9.0 → 0.10.0

package/dist/cli.js

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
-import { A as appendOps, B as loadHub, C as setSessionStatus, D as updateAction, F as reopenIssue, I as setFindingArchived, K as WriteError, L as setFindingStatus, M as createFinding, N as createIssue, O as sessionBriefing, P as planIssue, R as setIssueArchived, T as startSession, U as MAINLINE_FILE, W as TASK_FILE, Y as findHubRoot, _ as addAction, a as createDecision, b as readSession, c as dropChecklistItem, d as setChecklistItem, f as setCriterion, g as updateTask, h as supersedeDecision, i as addRepo, j as closeIssue, l as initHub, n as acceptDecision, o as createMainline, p as setMainlineStatus, r as addHub, s as createTask, t as migrateHub, u as setArchived, x as setSessionArchived, z as HubError } from "./dist-_ArTiNbL.js";
-import { c as listProgress, r as launchUi, s as CLI_VERSION } from "./launch-D2WJRvPD.js";
+import { $ as MAINLINE_FILE, A as setSessionStatus, B as appendOps, C as updateTask, D as readSession, F as sessionBriefing, G as reopenIssue, H as createFinding, J as setIssueArchived, K as setFindingArchived, M as startSession, O as setSessionArchived, P as updateAction, S as supersedeDecision, U as createIssue, V as closeIssue, W as planIssue, X as loadHub, Y as HubError, _ as setArchived, at as findHubRoot, b as setMainlineStatus, c as migrateHub, d as addRepo, et as TASK_FILE, f as createDecision, g as initHub, h as dropChecklistItem, l as acceptDecision, m as createTask, nt as WriteError, p as createMainline, q as setFindingStatus, u as addHub, v as setChecklistItem, w as addAction, y as setCriterion } from "./host-BFGfpTDq.js";
+import { t as listProgress } from "./progress-1BfPg2zN.js";
 import { COMMAND_SPECS, OPTIONS } from "./facts.js";
 import { runHook } from "./hooks.js";
+import { c as CLI_VERSION, r as launchUi, s as startUiInBackground } from "./launch-D5uHpqkh.js";
 import { readFileSync, realpathSync } from "node:fs";
 import { join, relative } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -89,7 +90,8 @@ const RUNS = {
 		const { stdout, error } = runHook(args[0], args[1], {
 			payload,
 			envFile: process.env.CLAUDE_ENV_FILE,
-			cli: CLI
+			cli: CLI,
+			startUi: startUiInBackground
 		});
 		if (error) console.error(error);
 		if (stdout) console.log(stdout);

package/dist/hooks.d.ts

@@ -11,6 +11,10 @@ export interface ClaudeCodePayload {
   effort?: {
     level?: string;
   };
+  /** Stop: true when the turn is already continuing because a Stop hook asked it to */
+  stop_hook_active?: boolean;
+  /** MessageDisplay: the lines of an assistant message about to be shown */
+  delta?: string;
   /** PostToolUse: the tool that ran and its input */
   tool_name?: string;
   tool_input?: {
@@ -26,9 +30,13 @@ export interface HookContext {
   envFile?: string;
   /** How the executor should invoke the CLI inside the hub, used in the texts it reads */
   cli: string;
+  /** Start the hub's interface without waiting; given by the CLI entry point, left out by callers that must not spawn */
+  startUi?: (root: string) => void;
 }
 export declare const claudeCodeSessionId: (raw: string) => string;
 type Handler = (root: string, ctx: HookContext) => string | null;
+/** How a hub's interface is linked from a reply: through its /open route, which shows the address in the app. */
+export declare const openLink: (hub: string) => (path: string) => string;
 export declare const HOOK_PLATFORMS: Record<string, Record<string, Handler>>;
 /**
  * Run a hook handler. A hook must never break the host session, so outside a hub it stays silent and any

package/dist/hooks.js

@@ -1,4 +1,4 @@
-import { B as loadHub, C as setSessionStatus, J as currentBranch, O as sessionBriefing, S as setSessionInfo, X as worktreesOf, Y as findHubRoot, b as readSession, k as turnReminder, q as DATA_DIR, v as ensureSession, w as settleSession, z as HubError } from "./dist-_ArTiNbL.js";
+import { A as setSessionStatus, D as readSession, F as sessionBriefing, I as turnReminder, L as decorateReply, R as endsWithMarker, T as ensureSession, X as loadHub, Y as HubError, at as findHubRoot, i as hostName, it as currentBranch, j as settleSession, k as setSessionInfo, ot as worktreesOf, rt as DATA_DIR, z as mayDecorate } from "./host-BFGfpTDq.js";
 import { appendFileSync, existsSync, readFileSync } from "node:fs";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
 //#region src/hooks.ts
@@ -23,8 +23,9 @@ const brief = (text) => {
 const shortId = (raw) => raw.replace(/[^a-z0-9]/gi, "").toLowerCase().slice(0, 8);
 const claudeCodeSessionId = (raw) => `claude-code-${shortId(raw)}`;
 /**
-* One handler per Claude Code event; each returns what to print for the model, or null. SessionStart and
-* UserPromptSubmit take plain text; PostToolUse takes the hook JSON, since its plain stdout never reaches the model.
+* One handler per Claude Code event; each returns what to print, or null. SessionStart and UserPromptSubmit take
+* plain text for the model; PostToolUse, Stop and MessageDisplay take the hook JSON, since their plain stdout
+* never reaches the model or the screen.
 */
 /**
 * Record the main session: create it when it is missing, since a turn that tracked nothing left no record, and
@@ -51,12 +52,50 @@ const settleOnEnd = (root, { payload }) => {
 	if (payload.session_id) settleSession(root, claudeCodeSessionId(payload.session_id));
 	return null;
 };
+/** How a hub's interface is linked from a reply: through its /open route, which shows the address in the app. */
+const openLink = (hub) => (path) => `https://${hostName(hub)}/open${path}`;
+/**
+* MessageDisplay: link the references in the lines about to be shown and expand a trailing end marker into the
+* current action line. Display only, so the model keeps reading what it wrote. Text with nothing to change
+* returns before the hub is loaded, because Claude Code holds every batch until the hook answers.
+*/
+const displayReply = (root, { payload }) => {
+	const text = payload.delta;
+	if (!text || !mayDecorate(text)) return null;
+	const hub = loadHub(root, { remotes: false });
+	const session = payload.session_id ? readSession(root, claudeCodeSessionId(payload.session_id)) : null;
+	const shown = decorateReply(text, {
+		hub,
+		session,
+		link: openLink(hub.config.hub)
+	});
+	return shown === text ? null : JSON.stringify({ hookSpecificOutput: {
+		hookEventName: "MessageDisplay",
+		displayContent: shown
+	} });
+};
+/**
+* Stop: settle the session, then ask for the end marker when a session with an action in progress ended its
+* turn without one. Only the model knows which message closes a turn, so the marker is its to write; this makes
+* a forgotten one cost a single extra message. stop_hook_active stops it from asking twice in a row.
+*/
+const settleAndCheckMarker = (root, context) => {
+	settleOnEnd(root, context);
+	const { payload } = context;
+	if (!payload.session_id || payload.stop_hook_active || endsWithMarker(payload.last_assistant_message ?? "")) return null;
+	if (!readSession(root, claudeCodeSessionId(payload.session_id))?.actions.some((a) => a.status === "doing")) return null;
+	return JSON.stringify({ hookSpecificOutput: {
+		hookEventName: "Stop",
+		additionalContext: `[mainflow] 這一輪最後一則回覆沒有以單獨一行的 ▸ 結尾。請只回一則內容為 ▸ 的訊息，不加其他文字。`
+	} });
+};
 const CLAUDE_CODE_EVENTS = {
-	"session-start": (root, { payload, envFile, cli }) => {
+	"session-start": (root, { payload, envFile, cli, startUi }) => {
 		if (!payload.session_id) return null;
 		const id = claudeCodeSessionId(payload.session_id);
 		const session = recordSession(root, payload, id, true);
 		if (envFile) appendFileSync(envFile, `export MAINFLOW_SESSION=${id}\n`);
+		startUi?.(root);
 		return sessionBriefing(root, session, {
 			cli,
 			envNote: envFile ? "已設定環境變數 MAINFLOW_SESSION，指令不必再帶 --session" : `執行指令時帶 --session ${id}`
@@ -66,7 +105,7 @@ const CLAUDE_CODE_EVENTS = {
 		if (!payload.session_id) return null;
 		return turnReminder(root, recordSession(root, payload, claudeCodeSessionId(payload.session_id), false), { cli });
 	},
-	stop: settleOnEnd,
+	stop: settleAndCheckMarker,
 	"session-end": settleOnEnd,
 	"subagent-start": (root, { payload }) => {
 		if (!payload.agent_id) return null;
@@ -93,7 +132,8 @@ const CLAUDE_CODE_EVENTS = {
 		setSessionStatus(root, id, "ended");
 		return null;
 	},
-	"post-tool-use": checkAfterWrite
+	"post-tool-use": checkAfterWrite,
+	"message-display": displayReply
 };
 /** How many problems outside the written file the reminder lists before it only gives the count. */
 const OTHER_PROBLEMS_SHOWN = 5;
@@ -184,4 +224,4 @@ function runHook(platform, event, ctx) {
 	}
 }
 //#endregion
-export { HOOK_PLATFORMS, claudeCodeSessionId, runHook, subagentTranscript };
+export { HOOK_PLATFORMS, claudeCodeSessionId, openLink, runHook, subagentTranscript };

package/dist/{dist-_ArTiNbL.js → host-BFGfpTDq.js}

@@ -1,7 +1,7 @@
 import { A as mainlineSchema, C as TASK_SECTIONS, D as findingSchema, E as decisionSchema, F as refMainline, I as sessionSchema, L as taskSchema, M as parseOpsLine, N as parseRef, O as formatOpsEntry, P as refExample, S as TASK_REQUIRED_SECTIONS, T as configSchema, b as SESSION_STATUS, c as FINDING_STATUS, d as ISSUE_SECTIONS, g as MERGE_STATES, h as MAINLINE_STATUS, i as DECISION_SECTIONS, j as opsEntrySchema, k as issueSchema, m as MAINLINE_SECTIONS, n as CLOSED_STATUS, o as DEFAULT_CATEGORIES, r as DECIDERS, s as FINDING_SECTIONS, t as CHECKLIST_REF, v as REF_EXAMPLES, w as WORK_STATUS, x as SLUG, y as RESERVED_HUB_NAMES } from "./dist-D2NK-QQP.js";
-import { appendFileSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync, writeSync } from "node:fs";
+import { appendFileSync, closeSync, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, statSync, symlinkSync, writeFileSync, writeSync } from "node:fs";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import { spawnSync } from "node:child_process";
+import { spawn, spawnSync } from "node:child_process";
 import { createHash, randomBytes } from "node:crypto";
 import { parse, stringify } from "yaml";
 //#region ../core/dist/paths.js
@@ -909,6 +909,68 @@ function appendOps(root, input) {
 		return entry;
 	});
 }
+/** Where the hub's interface shows a reference; null for kinds it has no page or panel for. */
+function pathOf(ref, target) {
+	const [m, child] = ref.split("/");
+	switch (target.kind) {
+		case "mainline": return `/mainlines/${m}`;
+		case "task": return `/mainlines/${m}/tasks/${child}`;
+		case "decision": return `/mainlines/${m}/decisions/${child}`;
+		case "issue": return `/issues?peek=${ref}`;
+		case "finding": return `/findings?peek=${ref}`;
+		default: return null;
+	}
+}
+const sessionPath = (id) => `/sessions/${id}`;
+/** Fenced blocks, inline code, markdown links and bare URLs: text inside them is left as written. */
+const PROTECTED = /(```[\s\S]*?(?:```|$)|`[^`\n]*`|\[[^\]\n]*\]\([^)\n]*\)|https?:\/\/\S+)/;
+/** A file under a mainline directory, or a reference to a mainline, task, decision, issue or finding. */
+const MENTION = /\.mainflow\/mainlines\/(m\d{3})-[\w-]+\/([^\s`'")\]]+\.\w+)|(?<![\w/#.[-])(m\d{3}(?:\/[td]\d{3})?|[if]\d{3})(?![\w\]])/g;
+/** Links for the references and mainline files the text mentions; references the hub does not have stay as text. */
+function linkMentions(text, context) {
+	const index = refIndex(context.hub);
+	return text.split(PROTECTED).map((part, i) => i % 2 === 1 ? part : part.replace(MENTION, (all, m, file, ref) => {
+		if (m && file) return index.has(m) ? `[${m}/${file}](${context.link(`/mainlines/${m}/files/${file}`)})` : all;
+		const target = ref ? index.get(ref) : void 0;
+		const path = ref && target ? pathOf(ref, target) : null;
+		return path ? `[${ref}](${context.link(path)})` : all;
+	})).join("");
+}
+/** `▸ m001 title › t001 title › a001 do`, each id linked; null when the session has no action in progress. */
+function currentActionLine(context) {
+	const action = context.session?.actions.find((a) => a.status === "doing");
+	if (!context.session || !action) return null;
+	const index = refIndex(context.hub);
+	const parts = [];
+	const served = action.serves.map((s) => parseRef(s)).find((r) => r !== null);
+	if (served && "mainline" in served) {
+		const mainline = index.get(served.mainline);
+		parts.push(`[${served.mainline}](${context.link(`/mainlines/${served.mainline}`)}) ${mainline?.title ?? ""}`.trimEnd());
+		if ("task" in served) {
+			const ref = `${served.mainline}/${served.task}`;
+			parts.push(`[${served.task}](${context.link(`/mainlines/${served.mainline}/tasks/${served.task}`)}) ${index.get(ref)?.title ?? ""}`.trimEnd());
+		}
+	}
+	parts.push(`[${action.id}](${context.link(sessionPath(context.session.id))}) ${action.do}`);
+	return `▸ ${parts.join(" › ")}`;
+}
+/** Whether a message ends with the marker line, as the turn's last message should. */
+const endsWithMarker = (text) => text.trimEnd().split("\n").at(-1)?.trim() === "▸";
+/**
+* The text to display for a piece of a reply: mentions linked, and a trailing marker line replaced with the
+* current action line (or removed when there is none). Returns the input unchanged when there is nothing to do.
+*/
+function decorateReply(text, context) {
+	let shown = linkMentions(text, context);
+	if (endsWithMarker(shown)) {
+		const body = shown.trimEnd().slice(0, -1).trimEnd();
+		const line = currentActionLine(context);
+		shown = line ? `${body}\n\n${line}\n` : `${body}\n`;
+	}
+	return shown;
+}
+/** Cheap test for text that decorateReply could change, so a display hook can skip loading the hub. */
+const mayDecorate = (text) => /m\d{3}|[if]\d{3}|\.mainflow\/mainlines/.test(text) || endsWithMarker(text);
 //#endregion
 //#region ../core/dist/briefing.js
 function describe(root, ref) {
@@ -977,7 +1039,11 @@ function turnReminder(root, session, options) {
 	if (session.actions.length === 0) return null;
 	const doing = current(session);
 	const open = session.actions.filter((a) => a.status === "todo" || a.status === "doing");
-	return [doing ? `[mainflow] 目前行動 ${doing.id} ${doing.do}，服務 ${doing.serves.join("、") || "（未指定）"}。這一輪的工作若不屬於它，先調整佇列再做。` : open.length === 0 ? `[mainflow] ${session.id} 的行動都已結束。繼續工作前先用 ${options.cli} action add 列出下一個行動。` : `[mainflow] ${session.id} 目前沒有進行中的行動。`, ...queueWarnings(root, session, options.cli).map((w) => `- ${w}`)].join("\n");
+	return [
+		doing ? `[mainflow] 目前行動 ${doing.id} ${doing.do}，服務 ${doing.serves.join("、") || "（未指定）"}。這一輪的工作若不屬於它，先調整佇列再做。` : open.length === 0 ? `[mainflow] ${session.id} 的行動都已結束。繼續工作前先用 ${options.cli} action add 列出下一個行動。` : `[mainflow] ${session.id} 目前沒有進行中的行動。`,
+		...doing ? [`- 這一輪最後一則回覆的最後一行只寫 ▸，回覆範例等其他內容都放在它前面。畫面上它會換成目前行動與連結。`] : [],
+		...queueWarnings(root, session, options.cli).map((w) => `- ${w}`)
+	].join("\n");
 }
 //#endregion
 //#region ../core/dist/sessions.js
@@ -1653,4 +1719,119 @@ function migrateHub(root, options = {}) {
 	});
 }
 //#endregion
-export { appendOps as A, loadHub as B, setSessionStatus as C, updateAction as D, transcriptPath as E, reopenIssue as F, ConflictError as G, refIndex as H, setFindingArchived as I, currentBranch as J, WriteError as K, setFindingStatus as L, createFinding as M, createIssue as N, sessionBriefing as O, planIssue as P, setIssueArchived as R, setSessionInfo as S, startSession as T, MAINLINE_FILE as U, linksInto as V, TASK_FILE as W, worktreesOf as X, findHubRoot as Y, addAction as _, createDecision as a, readSession as b, dropChecklistItem as c, setChecklistItem as d, setCriterion as f, updateTask as g, supersedeDecision as h, addRepo as i, closeIssue as j, turnReminder as k, initHub as l, setMainlineTitle as m, acceptDecision as n, createMainline as o, setMainlineStatus as p, DATA_DIR as q, addHub as r, createTask as s, migrateHub as t, setArchived as u, ensureSession as v, settleSession as w, setSessionArchived as x, loadSessions as y, HubError as z };
+//#region src/host.ts
+const DEFAULT_UI_PORT = 4320;
+const hostName = (hub) => `${hub}.mainflow.localhost`;
+function siteBlock(hub, port) {
+	return [
+		`# mainflow hub ${hub}: written by \`mainflow ui\` to match the port it serves on; do not edit.`,
+		`${hostName(hub)} {`,
+		"	tls internal",
+		`\treverse_proxy localhost:${port}`,
+		"}",
+		""
+	].join("\n");
+}
+/** Caddy's sites directory: MAINFLOW_CADDY_SITES, or the Homebrew layout {prefix}/etc/caddy/sites; null without either. */
+function caddySites() {
+	if (process.env.MAINFLOW_CADDY_SITES) return process.env.MAINFLOW_CADDY_SITES;
+	const prefix = spawnSync("brew", ["--prefix"], { encoding: "utf8" });
+	if (prefix.error || prefix.status !== 0) return null;
+	return join(prefix.stdout.trim(), "etc/caddy/sites");
+}
+/** Reload Caddy from the Caddyfile two levels above the sites directory; the error text on failure. */
+function reloadCaddy(sites) {
+	const caddyfile = join(sites, "..", "..", "Caddyfile");
+	const reload = spawnSync("caddy", [
+		"reload",
+		"--config",
+		caddyfile
+	], { encoding: "utf8" });
+	if (reload.error) return reload.error.message;
+	return reload.status === 0 ? null : (reload.stderr || reload.stdout).trim().slice(-300);
+}
+/**
+* Whether Caddy is running, judged by its admin API answering at all. The API refuses requests like
+* Node's fetch with 403 ("client is not allowed to access from origin"), so any response counts; only a
+* refused connection or a timeout means Caddy is down (observed 2026-09-25: checking for 200 reported a
+* running Caddy as stopped). MAINFLOW_CADDY_ADMIN overrides the address.
+*/
+async function caddyRunning() {
+	const admin = process.env.MAINFLOW_CADDY_ADMIN ?? "http://127.0.0.1:2019";
+	try {
+		await fetch(`${admin}/config/`, { signal: AbortSignal.timeout(500) });
+		return true;
+	} catch {
+		return false;
+	}
+}
+const realOf = (path) => existsSync(path) ? realpathSync(path) : resolve(path);
+/**
+* Point {hub}.mainflow.localhost at `port`. The site block is rewritten and Caddy reloaded only when the
+* port differs from what Caddy already has, so an ordinary start leaves Caddy alone. A link owned by a
+* different hub of the same name stops here: overwriting it would silently take that hub's host name.
+*/
+async function syncHost(root, hub, port, options = {}) {
+	const sites = caddySites();
+	if (!sites || !existsSync(sites)) return {
+		url: null,
+		reason: `Caddy's sites directory was not found (${sites ?? "no Homebrew prefix"}); install Caddy and import that directory from the Caddyfile, or set MAINFLOW_CADDY_SITES`
+	};
+	const dir = join(root, DATA_DIR, "local", "caddy");
+	const file = join(dir, `${hub}.caddy`);
+	const link = join(sites, `mainflow-${hub}.caddy`);
+	const linked = lstatSync(link, { throwIfNoEntry: false });
+	if (linked) {
+		const target = linked.isSymbolicLink() ? resolve(dirname(link), readlinkSync(link)) : link;
+		if (existsSync(target) && realOf(target) !== realOf(file)) throw new WriteError(`host name ${hostName(hub)} is already used by another hub (${link} → ${target}); give one of the hubs a different name in its .mainflow/config.yaml`);
+	}
+	const block = siteBlock(hub, port);
+	if ((linked && existsSync(file) ? readFileSync(file, "utf8") : null) !== block) {
+		mkdirSync(dir, { recursive: true });
+		writeFileSync(file, block);
+		if (linked) rmSync(link);
+		symlinkSync(file, link);
+		const failure = (options.reload ?? reloadCaddy)(sites);
+		if (failure) return {
+			url: null,
+			reason: `caddy reload failed: ${failure}`
+		};
+	} else if (!await (options.running ?? caddyRunning)()) return {
+		url: null,
+		reason: "Caddy is not running; start it with `brew services start caddy`"
+	};
+	return { url: `https://${hostName(hub)}` };
+}
+/** The macOS app's bundle identifier, from apps/macos/scripts/package.sh. */
+const APP_BUNDLE_ID = "space.carlos.mainflow";
+/** Close the tabs Safari and Chrome opened on this hub's /open route; each browser only when it is running. */
+const closeOpenTabs = (hub) => {
+	const marker = `${hostName(hub)}/open/`;
+	return ["Safari", "Google Chrome"].map((app) => `if application "${app}" is running then
+  tell application "${app}"
+    repeat with w in (every window)
+      close (every tab of w whose URL contains "${marker}")
+    end repeat
+  end tell
+end if`).join("\n");
+};
+/**
+* Show an address of the hub's interface in the macOS app through its mainflow:// scheme (docs/app.md "連結").
+* A link in a reply reaches here through the default browser, so once the app has the address the browser tab
+* it left is closed and the app brought back to the front. Returns false when no app handles the scheme; the
+* caller then leaves the page to the browser. Does nothing and returns false outside macOS.
+*/
+function openInApp(hub, target, closeAfterMs = 150) {
+	if (process.platform !== "darwin") return false;
+	if (spawnSync("open", [`mainflow://${hub}${target}`]).status !== 0) return false;
+	setTimeout(() => {
+		spawnSync("osascript", ["-e", closeOpenTabs(hub)]);
+		spawn("open", ["-b", APP_BUNDLE_ID], {
+			detached: true,
+			stdio: "ignore"
+		}).on("error", () => {}).unref();
+	}, closeAfterMs);
+	return true;
+}
+//#endregion
+export { MAINLINE_FILE as $, setSessionStatus as A, appendOps as B, updateTask as C, readSession as D, loadSessions as E, sessionBriefing as F, reopenIssue as G, createFinding as H, turnReminder as I, setIssueArchived as J, setFindingArchived as K, decorateReply as L, startSession as M, transcriptPath as N, setSessionArchived as O, updateAction as P, refIndex as Q, endsWithMarker as R, supersedeDecision as S, ensureSession as T, createIssue as U, closeIssue as V, planIssue as W, loadHub as X, HubError as Y, linksInto as Z, setArchived as _, openInApp as a, findHubRoot as at, setMainlineStatus as b, migrateHub as c, addRepo as d, TASK_FILE as et, createDecision as f, initHub as g, dropChecklistItem as h, hostName as i, currentBranch as it, settleSession as j, setSessionInfo as k, acceptDecision as l, createTask as m, DEFAULT_UI_PORT as n, WriteError as nt, siteBlock as o, worktreesOf as ot, createMainline as p, setFindingStatus as q, caddySites as r, DATA_DIR as rt, syncHost as s, APP_BUNDLE_ID as t, ConflictError as tt, addHub as u, setChecklistItem as v, addAction as w, setMainlineTitle as x, setCriterion as y, mayDecorate as z };

package/dist/host.d.ts

@@ -21,4 +21,13 @@ export type HostResult = {
  * different hub of the same name stops here: overwriting it would silently take that hub's host name.
  */
 export declare function syncHost(root: string, hub: string, port: number, options?: HostOptions): Promise<HostResult>;
+/** The macOS app's bundle identifier, from apps/macos/scripts/package.sh. */
+export declare const APP_BUNDLE_ID = "space.carlos.mainflow";
+/**
+ * Show an address of the hub's interface in the macOS app through its mainflow:// scheme (docs/app.md "連結").
+ * A link in a reply reaches here through the default browser, so once the app has the address the browser tab
+ * it left is closed and the app brought back to the front. Returns false when no app handles the scheme; the
+ * caller then leaves the page to the browser. Does nothing and returns false outside macOS.
+ */
+export declare function openInApp(hub: string, target: string, closeAfterMs?: number): boolean;
 //#endregion

package/dist/host.js

@@ -1,89 +1,2 @@
-import { K as WriteError, q as DATA_DIR } from "./dist-_ArTiNbL.js";
-import { existsSync, lstatSync, mkdirSync, readFileSync, readlinkSync, realpathSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
-import { spawnSync } from "node:child_process";
-//#region src/host.ts
-const DEFAULT_UI_PORT = 4320;
-const hostName = (hub) => `${hub}.mainflow.localhost`;
-function siteBlock(hub, port) {
-	return [
-		`# mainflow hub ${hub}: written by \`mainflow ui\` to match the port it serves on; do not edit.`,
-		`${hostName(hub)} {`,
-		"	tls internal",
-		`\treverse_proxy localhost:${port}`,
-		"}",
-		""
-	].join("\n");
-}
-/** Caddy's sites directory: MAINFLOW_CADDY_SITES, or the Homebrew layout {prefix}/etc/caddy/sites; null without either. */
-function caddySites() {
-	if (process.env.MAINFLOW_CADDY_SITES) return process.env.MAINFLOW_CADDY_SITES;
-	const prefix = spawnSync("brew", ["--prefix"], { encoding: "utf8" });
-	if (prefix.error || prefix.status !== 0) return null;
-	return join(prefix.stdout.trim(), "etc/caddy/sites");
-}
-/** Reload Caddy from the Caddyfile two levels above the sites directory; the error text on failure. */
-function reloadCaddy(sites) {
-	const caddyfile = join(sites, "..", "..", "Caddyfile");
-	const reload = spawnSync("caddy", [
-		"reload",
-		"--config",
-		caddyfile
-	], { encoding: "utf8" });
-	if (reload.error) return reload.error.message;
-	return reload.status === 0 ? null : (reload.stderr || reload.stdout).trim().slice(-300);
-}
-/**
-* Whether Caddy is running, judged by its admin API answering at all. The API refuses requests like
-* Node's fetch with 403 ("client is not allowed to access from origin"), so any response counts; only a
-* refused connection or a timeout means Caddy is down (observed 2026-09-25: checking for 200 reported a
-* running Caddy as stopped). MAINFLOW_CADDY_ADMIN overrides the address.
-*/
-async function caddyRunning() {
-	const admin = process.env.MAINFLOW_CADDY_ADMIN ?? "http://127.0.0.1:2019";
-	try {
-		await fetch(`${admin}/config/`, { signal: AbortSignal.timeout(500) });
-		return true;
-	} catch {
-		return false;
-	}
-}
-const realOf = (path) => existsSync(path) ? realpathSync(path) : resolve(path);
-/**
-* Point {hub}.mainflow.localhost at `port`. The site block is rewritten and Caddy reloaded only when the
-* port differs from what Caddy already has, so an ordinary start leaves Caddy alone. A link owned by a
-* different hub of the same name stops here: overwriting it would silently take that hub's host name.
-*/
-async function syncHost(root, hub, port, options = {}) {
-	const sites = caddySites();
-	if (!sites || !existsSync(sites)) return {
-		url: null,
-		reason: `Caddy's sites directory was not found (${sites ?? "no Homebrew prefix"}); install Caddy and import that directory from the Caddyfile, or set MAINFLOW_CADDY_SITES`
-	};
-	const dir = join(root, DATA_DIR, "local", "caddy");
-	const file = join(dir, `${hub}.caddy`);
-	const link = join(sites, `mainflow-${hub}.caddy`);
-	const linked = lstatSync(link, { throwIfNoEntry: false });
-	if (linked) {
-		const target = linked.isSymbolicLink() ? resolve(dirname(link), readlinkSync(link)) : link;
-		if (existsSync(target) && realOf(target) !== realOf(file)) throw new WriteError(`host name ${hostName(hub)} is already used by another hub (${link} → ${target}); give one of the hubs a different name in its .mainflow/config.yaml`);
-	}
-	const block = siteBlock(hub, port);
-	if ((linked && existsSync(file) ? readFileSync(file, "utf8") : null) !== block) {
-		mkdirSync(dir, { recursive: true });
-		writeFileSync(file, block);
-		if (linked) rmSync(link);
-		symlinkSync(file, link);
-		const failure = (options.reload ?? reloadCaddy)(sites);
-		if (failure) return {
-			url: null,
-			reason: `caddy reload failed: ${failure}`
-		};
-	} else if (!await (options.running ?? caddyRunning)()) return {
-		url: null,
-		reason: "Caddy is not running; start it with `brew services start caddy`"
-	};
-	return { url: `https://${hostName(hub)}` };
-}
-//#endregion
-export { DEFAULT_UI_PORT, caddySites, hostName, siteBlock, syncHost };
+import { a as openInApp, i as hostName, n as DEFAULT_UI_PORT, o as siteBlock, r as caddySites, s as syncHost, t as APP_BUNDLE_ID } from "./host-BFGfpTDq.js";
+export { APP_BUNDLE_ID, DEFAULT_UI_PORT, caddySites, hostName, openInApp, siteBlock, syncHost };

package/dist/launch-D5uHpqkh.js

@@ -0,0 +1,184 @@
+import { n as DEFAULT_UI_PORT, nt as WriteError, rt as DATA_DIR, s as syncHost } from "./host-BFGfpTDq.js";
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { spawn, spawnSync } from "node:child_process";
+import { createServer } from "node:net";
+//#region src/version.ts
+/** This CLI's own version, from the package manifest one level above both src/ and dist/. */
+const CLI_VERSION = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
+//#endregion
+//#region src/launch.ts
+/** How many ports above DEFAULT_UI_PORT are tried before giving up. */
+const PORT_SPAN = 100;
+/** Where the last server started is remembered: machine-specific, so under the unversioned local/ folder. */
+const uiRecordFile = (root) => join(root, DATA_DIR, "local", "ui.json");
+function readUiRecord(root) {
+	try {
+		const record = JSON.parse(readFileSync(uiRecordFile(root), "utf8"));
+		if (!Number.isInteger(record.port)) return void 0;
+		return {
+			port: record.port,
+			...Number.isInteger(record.pid) && { pid: record.pid },
+			...typeof record.version === "string" && { version: record.version }
+		};
+	} catch {
+		return;
+	}
+}
+function writeUiRecord(root, record) {
+	mkdirSync(join(root, DATA_DIR, "local"), { recursive: true });
+	writeFileSync(uiRecordFile(root), `${JSON.stringify(record)}\n`);
+}
+/**
+* Ports to try, in order. An explicit --port is the only candidate: the user asked for that port. Otherwise
+* the hub's configured port, then the last one used, then the default range.
+*/
+function portCandidates(options) {
+	if (options.explicit !== void 0) return [options.explicit];
+	const range = Array.from({ length: 100 }, (_, i) => DEFAULT_UI_PORT + i);
+	return [...new Set([
+		options.configured,
+		options.last,
+		...range
+	].filter((p) => p !== void 0))];
+}
+const sleep = (ms) => new Promise((done) => setTimeout(done, ms));
+const networkProbe = {
+	async serverAt(port) {
+		try {
+			const res = await fetch(`http://localhost:${port}/api/hub`, { signal: AbortSignal.timeout(500) });
+			if (!res.ok) return null;
+			const body = await res.json();
+			if (typeof body.hub !== "string") return null;
+			return {
+				hub: body.hub,
+				...typeof body.version === "string" && { version: body.version }
+			};
+		} catch {
+			return null;
+		}
+	},
+	isFree: (port) => new Promise((done) => {
+		const probe = createServer().once("error", () => done(false));
+		probe.listen(port, () => probe.close(() => done(true)));
+	}),
+	listenerOf(port) {
+		const out = spawnSync("lsof", [
+			"-nP",
+			`-iTCP:${port}`,
+			"-sTCP:LISTEN",
+			"-t"
+		], { encoding: "utf8" });
+		const pid = Number(out.stdout?.split("\n")[0]);
+		return out.status === 0 && Number.isInteger(pid) && pid > 0 ? pid : null;
+	},
+	async stop(pid, port) {
+		try {
+			process.kill(pid, "SIGTERM");
+		} catch {
+			return false;
+		}
+		for (let i = 0; i < 25; i++) {
+			await sleep(200);
+			if (await networkProbe.isFree(port)) return true;
+		}
+		return false;
+	}
+};
+/**
+* A candidate already serving this hub wins wherever it sits in the order, so a lost last-port record or a
+* changed ui.port never starts a second copy; all candidates are asked at once, bounding the wait by one
+* probe timeout. Otherwise the first free candidate; ports held by another hub or program are skipped.
+*/
+async function choosePort(hub, candidates, probe = networkProbe) {
+	const servers = await Promise.all(candidates.map((port) => probe.serverAt(port)));
+	const at = candidates.findIndex((_, i) => servers[i]?.hub === hub);
+	if (at >= 0) return {
+		port: candidates[at],
+		running: servers[at].version ?? ""
+	};
+	for (const [i, port] of candidates.entries()) if (servers[i] === null && await probe.isFree(port)) return {
+		port,
+		running: void 0
+	};
+	const tried = candidates.length === 1 ? `port ${candidates[0]} is` : `ports ${candidates[0]} to ${candidates.at(-1)} are`;
+	throw new WriteError(`${tried} taken by other programs; free one, or pass --port <port>`);
+}
+/**
+* Run `mainflow ui --no-open` detached, for a hook that must not wait: it reuses a server already serving this
+* hub, replaces one of another version, or starts one. The CLI running now is the one started, so the hub's
+* pinned version serves its interface.
+*/
+function startUiInBackground(root) {
+	const cli = process.argv[1];
+	if (!cli) return;
+	spawn(process.execPath, [
+		cli,
+		"ui",
+		"--no-open"
+	], {
+		cwd: root,
+		detached: true,
+		stdio: "ignore"
+	}).on("error", () => {}).unref();
+}
+/** Open a URL in the default browser without waiting for it. */
+function openUrl(url) {
+	const [command, ...args] = process.platform === "darwin" ? ["open", url] : process.platform === "win32" ? [
+		"cmd",
+		"/c",
+		"start",
+		"",
+		url
+	] : ["xdg-open", url];
+	spawn(command, args, {
+		detached: true,
+		stdio: "ignore"
+	}).on("error", () => console.log(`open ${url} in a browser`)).unref();
+}
+/** Start or reuse this hub's interface: the URL it is reached at, and the server when this call started one. */
+async function launchUi(root, hub, configured, options) {
+	const log = options.log ?? console.log;
+	let explicit;
+	if (options.port !== void 0) {
+		explicit = Number(options.port);
+		if (!Number.isInteger(explicit) || explicit < 1024 || explicit > 65535) throw new WriteError("--port must be an integer from 1024 to 65535, e.g. --port 4320");
+	}
+	const probe = options.probe ?? networkProbe;
+	const record = readUiRecord(root);
+	const choice = await choosePort(hub, portCandidates({
+		explicit,
+		configured,
+		last: record?.port
+	}), probe);
+	let reuse = choice.running !== void 0;
+	if (reuse && choice.running !== CLI_VERSION) {
+		const from = choice.running || "unknown";
+		const pid = record?.port === choice.port && record.pid !== void 0 ? record.pid : probe.listenerOf(choice.port);
+		if (pid !== null && await probe.stop(pid, choice.port)) {
+			log(`! restarted: mainflow ${from} → ${CLI_VERSION}`);
+			reuse = false;
+		} else log(`! localhost:${choice.port} still runs mainflow ${from}, not ${CLI_VERSION}; stop it with \`kill $(lsof -ti tcp:${choice.port})\` and run mainflow ui again`);
+	}
+	let server;
+	if (!reuse) {
+		const { serveUi } = await import("./ui-DbEmJiwO.js");
+		server = await serveUi(root, choice.port);
+		writeUiRecord(root, {
+			port: choice.port,
+			pid: process.pid,
+			version: CLI_VERSION
+		});
+	}
+	const host = await syncHost(root, hub, choice.port, options.host);
+	if (host.url === null) log(`! host name not available: ${host.reason}`);
+	const url = host.url ?? `http://localhost:${choice.port}`;
+	log(`${reuse ? "already running" : "mainflow ui"}: ${url} (localhost:${choice.port})`);
+	if (options.open) openUrl(url);
+	return {
+		url,
+		server
+	};
+}
+//#endregion
+export { portCandidates as a, CLI_VERSION as c, networkProbe as i, choosePort as n, readUiRecord as o, launchUi as r, startUiInBackground as s, PORT_SPAN as t };

package/dist/launch.d.ts

@@ -45,6 +45,12 @@ export type PortChoice = {
  * probe timeout. Otherwise the first free candidate; ports held by another hub or program are skipped.
  */
 export declare function choosePort(hub: string, candidates: number[], probe?: PortProbe): Promise<PortChoice>;
+/**
+ * Run `mainflow ui --no-open` detached, for a hook that must not wait: it reuses a server already serving this
+ * hub, replaces one of another version, or starts one. The CLI running now is the one started, so the hub's
+ * pinned version serves its interface.
+ */
+export declare function startUiInBackground(root: string): void;
 export interface LaunchOptions {
   port?: string;
   open: boolean;

package/dist/launch.js

@@ -1,2 +1,2 @@
-import { a as portCandidates, i as networkProbe, n as choosePort, o as readUiRecord, r as launchUi, t as PORT_SPAN } from "./launch-D2WJRvPD.js";
-export { PORT_SPAN, choosePort, launchUi, networkProbe, portCandidates, readUiRecord };
+import { a as portCandidates, i as networkProbe, n as choosePort, o as readUiRecord, r as launchUi, s as startUiInBackground, t as PORT_SPAN } from "./launch-D5uHpqkh.js";
+export { PORT_SPAN, choosePort, launchUi, networkProbe, portCandidates, readUiRecord, startUiInBackground };

package/dist/progress-1BfPg2zN.js

@@ -0,0 +1,10 @@
+//#region ../core/dist/progress.js
+function listProgress(items) {
+	const counted = items.filter((item) => !item.dropped);
+	return {
+		done: counted.filter((item) => item.done).length,
+		total: counted.length
+	};
+}
+//#endregion
+export { listProgress as t };

package/dist/{launch-D2WJRvPD.js → ui-DbEmJiwO.js}

@@ -1,11 +1,11 @@
-import { B as loadHub, E as transcriptPath, G as ConflictError, H as refIndex, I as setFindingArchived, K as WriteError, R as setIssueArchived, V as linksInto, b as readSession, d as setChecklistItem, f as setCriterion, g as updateTask, m as setMainlineTitle, p as setMainlineStatus, q as DATA_DIR, u as setArchived, x as setSessionArchived, y as loadSessions } from "./dist-_ArTiNbL.js";
-import { DEFAULT_UI_PORT, syncHost } from "./host.js";
+import { C as updateTask, D as readSession, E as loadSessions, J as setIssueArchived, K as setFindingArchived, N as transcriptPath, O as setSessionArchived, Q as refIndex, X as loadHub, Z as linksInto, _ as setArchived, a as openInApp, b as setMainlineStatus, nt as WriteError, rt as DATA_DIR, tt as ConflictError, v as setChecklistItem, x as setMainlineTitle, y as setCriterion } from "./host-BFGfpTDq.js";
+import { t as listProgress } from "./progress-1BfPg2zN.js";
+import { c as CLI_VERSION } from "./launch-D5uHpqkh.js";
 import { createRequire } from "node:module";
-import { closeSync, existsSync, mkdirSync, openSync, readFileSync, readSync, statSync, watch, writeFileSync } from "node:fs";
+import { closeSync, existsSync, openSync, readFileSync, readSync, statSync, watch } from "node:fs";
 import { basename, dirname, extname, join, normalize, relative, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { spawn, spawnSync } from "node:child_process";
-import { createServer } from "node:net";
+import { spawnSync } from "node:child_process";
 import { serve } from "@hono/node-server";
 import { homedir } from "node:os";
 import { Hono } from "hono";
@@ -205,19 +205,6 @@ function attributeTrace(trace, actions, now = Date.now()) {
 	};
 }
 //#endregion
-//#region ../core/dist/progress.js
-function listProgress(items) {
-	const counted = items.filter((item) => !item.dropped);
-	return {
-		done: counted.filter((item) => item.done).length,
-		total: counted.length
-	};
-}
-//#endregion
-//#region src/version.ts
-/** This CLI's own version, from the package manifest one level above both src/ and dist/. */
-const CLI_VERSION = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
-//#endregion
 //#region src/server.ts
 /** Every reference with a hub prefix in the documents of `hub`: links, origins and replaced items. */
 function prefixedRefs(hub) {
@@ -465,9 +452,16 @@ function webDir() {
 * Resolves once the port is listening. A port taken between the free-port probe and here rejects with a
 * WriteError instead of Node's unhandled 'error' event and stack trace.
 */
-function serveUi(root, port) {
+function serveUi(root, port, open = openInApp) {
 	const app = createApp(root);
 	const dist = webDir();
+	const hub = loadHub(root, { remotes: false }).config.hub;
+	app.get("/open/*", (c) => {
+		const url = new URL(c.req.url);
+		const target = `${url.pathname.slice(5) || "/"}${url.search}`;
+		const opened = open(hub, target);
+		return c.html(openPage(target, opened));
+	});
 	app.get("*", (c) => {
 		let file = join(dist, normalize(decodeURIComponent(c.req.path)));
 		if (!file.startsWith(dist + sep) || !existsSync(file) || !statSync(file).isFile()) file = join(dist, "index.html");
@@ -481,160 +475,10 @@ function serveUi(root, port) {
 		server.once("error", (error) => fail(error.code === "EADDRINUSE" ? new WriteError(`port ${port} is already in use; run mainflow ui again to pick another`) : error));
 	});
 }
-//#endregion
-//#region src/launch.ts
-/** How many ports above DEFAULT_UI_PORT are tried before giving up. */
-const PORT_SPAN = 100;
-/** Where the last server started is remembered: machine-specific, so under the unversioned local/ folder. */
-const uiRecordFile = (root) => join(root, DATA_DIR, "local", "ui.json");
-function readUiRecord(root) {
-	try {
-		const record = JSON.parse(readFileSync(uiRecordFile(root), "utf8"));
-		if (!Number.isInteger(record.port)) return void 0;
-		return {
-			port: record.port,
-			...Number.isInteger(record.pid) && { pid: record.pid },
-			...typeof record.version === "string" && { version: record.version }
-		};
-	} catch {
-		return;
-	}
-}
-function writeUiRecord(root, record) {
-	mkdirSync(join(root, DATA_DIR, "local"), { recursive: true });
-	writeFileSync(uiRecordFile(root), `${JSON.stringify(record)}\n`);
-}
-/**
-* Ports to try, in order. An explicit --port is the only candidate: the user asked for that port. Otherwise
-* the hub's configured port, then the last one used, then the default range.
-*/
-function portCandidates(options) {
-	if (options.explicit !== void 0) return [options.explicit];
-	const range = Array.from({ length: 100 }, (_, i) => DEFAULT_UI_PORT + i);
-	return [...new Set([
-		options.configured,
-		options.last,
-		...range
-	].filter((p) => p !== void 0))];
-}
-const sleep = (ms) => new Promise((done) => setTimeout(done, ms));
-const networkProbe = {
-	async serverAt(port) {
-		try {
-			const res = await fetch(`http://localhost:${port}/api/hub`, { signal: AbortSignal.timeout(500) });
-			if (!res.ok) return null;
-			const body = await res.json();
-			if (typeof body.hub !== "string") return null;
-			return {
-				hub: body.hub,
-				...typeof body.version === "string" && { version: body.version }
-			};
-		} catch {
-			return null;
-		}
-	},
-	isFree: (port) => new Promise((done) => {
-		const probe = createServer().once("error", () => done(false));
-		probe.listen(port, () => probe.close(() => done(true)));
-	}),
-	listenerOf(port) {
-		const out = spawnSync("lsof", [
-			"-nP",
-			`-iTCP:${port}`,
-			"-sTCP:LISTEN",
-			"-t"
-		], { encoding: "utf8" });
-		const pid = Number(out.stdout?.split("\n")[0]);
-		return out.status === 0 && Number.isInteger(pid) && pid > 0 ? pid : null;
-	},
-	async stop(pid, port) {
-		try {
-			process.kill(pid, "SIGTERM");
-		} catch {
-			return false;
-		}
-		for (let i = 0; i < 25; i++) {
-			await sleep(200);
-			if (await networkProbe.isFree(port)) return true;
-		}
-		return false;
-	}
-};
-/**
-* A candidate already serving this hub wins wherever it sits in the order, so a lost last-port record or a
-* changed ui.port never starts a second copy; all candidates are asked at once, bounding the wait by one
-* probe timeout. Otherwise the first free candidate; ports held by another hub or program are skipped.
-*/
-async function choosePort(hub, candidates, probe = networkProbe) {
-	const servers = await Promise.all(candidates.map((port) => probe.serverAt(port)));
-	const at = candidates.findIndex((_, i) => servers[i]?.hub === hub);
-	if (at >= 0) return {
-		port: candidates[at],
-		running: servers[at].version ?? ""
-	};
-	for (const [i, port] of candidates.entries()) if (servers[i] === null && await probe.isFree(port)) return {
-		port,
-		running: void 0
-	};
-	const tried = candidates.length === 1 ? `port ${candidates[0]} is` : `ports ${candidates[0]} to ${candidates.at(-1)} are`;
-	throw new WriteError(`${tried} taken by other programs; free one, or pass --port <port>`);
-}
-/** Open a URL in the default browser without waiting for it. */
-function openUrl(url) {
-	const [command, ...args] = process.platform === "darwin" ? ["open", url] : process.platform === "win32" ? [
-		"cmd",
-		"/c",
-		"start",
-		"",
-		url
-	] : ["xdg-open", url];
-	spawn(command, args, {
-		detached: true,
-		stdio: "ignore"
-	}).on("error", () => console.log(`open ${url} in a browser`)).unref();
-}
-/** Start or reuse this hub's interface: the URL it is reached at, and the server when this call started one. */
-async function launchUi(root, hub, configured, options) {
-	const log = options.log ?? console.log;
-	let explicit;
-	if (options.port !== void 0) {
-		explicit = Number(options.port);
-		if (!Number.isInteger(explicit) || explicit < 1024 || explicit > 65535) throw new WriteError("--port must be an integer from 1024 to 65535, e.g. --port 4320");
-	}
-	const probe = options.probe ?? networkProbe;
-	const record = readUiRecord(root);
-	const choice = await choosePort(hub, portCandidates({
-		explicit,
-		configured,
-		last: record?.port
-	}), probe);
-	let reuse = choice.running !== void 0;
-	if (reuse && choice.running !== CLI_VERSION) {
-		const from = choice.running || "unknown";
-		const pid = record?.port === choice.port && record.pid !== void 0 ? record.pid : probe.listenerOf(choice.port);
-		if (pid !== null && await probe.stop(pid, choice.port)) {
-			log(`! restarted: mainflow ${from} → ${CLI_VERSION}`);
-			reuse = false;
-		} else log(`! localhost:${choice.port} still runs mainflow ${from}, not ${CLI_VERSION}; stop it with \`kill $(lsof -ti tcp:${choice.port})\` and run mainflow ui again`);
-	}
-	let server;
-	if (!reuse) {
-		server = await serveUi(root, choice.port);
-		writeUiRecord(root, {
-			port: choice.port,
-			pid: process.pid,
-			version: CLI_VERSION
-		});
-	}
-	const host = await syncHost(root, hub, choice.port, options.host);
-	if (host.url === null) log(`! host name not available: ${host.reason}`);
-	const url = host.url ?? `http://localhost:${choice.port}`;
-	log(`${reuse ? "already running" : "mainflow ui"}: ${url} (localhost:${choice.port})`);
-	if (options.open) openUrl(url);
-	return {
-		url,
-		server
-	};
+/** The page an /open link leaves in the browser: blank in the interface's colours, or a jump to the address. */
+function openPage(target, opened) {
+	const escaped = target.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;");
+	return `<!doctype html><meta charset="utf-8"><meta name="color-scheme" content="light dark">${opened ? "" : `<meta http-equiv="refresh" content="0;url=${escaped}">`}<title>mainflow</title><style>html{background:#fff}@media (prefers-color-scheme: dark){html{background:#111113}}</style>`;
 }
 //#endregion
-export { portCandidates as a, listProgress as c, networkProbe as i, choosePort as n, readUiRecord as o, launchUi as r, CLI_VERSION as s, PORT_SPAN as t };
+export { serveUi };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mainflow",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "本機多 AI 協作的主脈絡任務管理：CLI 與介面",
   "license": "MIT",
   "type": "module",