hecks 6.0.0 → 7.0.0

data/lib/hecks/tools/tenant_provisioning.rb

@@ -4,6 +4,7 @@ require "hecks"
 # --adapter=PostgresEra needs the era persistence plugin (ADR 0033).
 require "hecks/ports/persistence/plugins/era"
 require "optparse"
+require "hecks/hecks/adapters/journal_store"
 require_relative "../tools"
 
 module Hecks
@@ -85,6 +86,7 @@ module Hecks
         refuse_if_refused(dispatcher, slug)
 
         puts "wrote #{File.join(domain_directory, "environments", "#{slug}.world")}"
+        hold_first_eras(domain_directory, slug)
         dispatcher
       end
 
@@ -139,6 +141,27 @@ module Hecks
         puts "#{options[:domain]} is tenant_capable? for #{slug.inspect} — registered under realm #{options[:realm].inspect}"
       end
 
+      # Holds era 1 of each era-keeping bluebook in the tenant's schema before the boot reads it:
+      # a boot only reads (ADR 0168), and `hold_first` is the one writer. A bluebook whose lineage
+      # already holds an era is left untouched, so a re-provision mints nothing and an existing
+      # schema's eras and rows are never read as new.
+      def hold_first_eras(domain_directory, slug)
+        held = Hecks::Adapters::JournalStore::HeldDomain.open(domain_directory, mode: :bare, environment: slug)
+        held.bluebook_names.each do |name|
+          domain = Hecks::Adapters::JournalStore::HeldDomain.new(held.registry, held.directory, name)
+          hold_first_era(domain) if domain.capable?
+        end
+      end
+
+      def hold_first_era(domain)
+        text = Hecks::Runtime::EraCheck.source_text_for(domain.bluebook, domain.directory, registry: domain.registry)
+        domain.writing do |lineage|
+          next if lineage.eras.any?
+
+          lineage.hold_first_era!(text, projection: domain.shape, aggregates: domain.aggregates, role: domain.app_role)
+        end
+      end
+
       # @raise [SystemExit] when a bluebook of the registry is not tenant capable
       def refuse_unless_tenant_capable(registry)
         registry.bluebooks.each_key do |name|

data/lib/hecks/tools/tools_doc.rb

@@ -164,7 +164,7 @@ module Hecks
 
         stale = SECTIONS.reject { |section| section_text(text, section) == section_text(fresh, section) }
         warn "tools_doc: #{DOCUMENT} differs from the RetiredScript rows in: #{stale.join(", ")} " \
-             "(run hecks regeneration_run.project_tools_doc --confirm)"
+             "(run hecks regeneration_run.project_tools_doc! --confirm)"
         1
       end
 
@@ -183,13 +183,14 @@ module Hecks
 
         # @param row [Hash{String => String}] a `RetiredScript` row
         # @return [Array(Hash, Array<String>)] the projected command or query, and the words that
-        #   name it on the command line
+        #   name it on the command line, a command's with the bang the launcher requires
         # @raise [SystemExit] when the row names no command or query
         def spec_for(row)
           declaration = %w[Custodian Codebase].include?(row["section"]) ? "Hecks" : row["section"]
           name = "#{Naming.snake(row["aggregate"])}.#{row["verb"]}"
-          spec = find_spec(projection(declaration), name) or abort "tools_doc: #{declaration} has no command or query #{name}"
-          [spec, words(declaration, name, row)]
+          cli = projection(declaration)
+          spec = find_spec(cli, name) or abort "tools_doc: #{declaration} has no command or query #{name}"
+          [spec, words(declaration, name, row, bang: cli[:names][:command].key?(name))]
         end
 
         private
@@ -207,13 +208,14 @@ module Hecks
           end
         end
 
-        # `hecks ir`, `hecks console`, `hecks quality_control sweep.run`, `hecks host.check_era`.
+        # `hecks ir`, `hecks console!`, `hecks quality_control sweep.run`, `hecks host.check_era!`.
         # The launcher takes a name that is only a query as a query, so no `query` word is needed.
-        def words(declaration, name, row)
+        def words(declaration, name, row, bang:)
           route = route_for(Adapters::Driving::LauncherOptions.settings(@runtime, declaration) || {}, declaration, name, row)
-          return [route] if route
+          marked = ->(word) { bang ? "#{word}!" : word }
+          return [marked.call(route)] if route
 
-          [*(Naming.snake(declaration) unless declaration == "Hecks"), name]
+          [*(Naming.snake(declaration) unless declaration == "Hecks"), marked.call(name)]
         end
 
         # @return [String, nil] the one word the launcher routes the name by, when it has one

data/lib/hecks/tools/translation_audit/edges.rb

@@ -11,16 +11,17 @@ module Hecks
         # The era the edge leads to and the chain of translations ending in it, or nil when the
         # journal stands at era 1 with nothing to audit.
         #
+        # @param directory [String, nil] the domain's bluebook directory, holding its implicit moves
         # @return [Array, nil] the era ordinal and the chain
-        def edge_chain(registry, bluebook, lineage)
+        def edge_chain(registry, bluebook, lineage, directory = nil)
           eras = lineage.eras
           current_shape = Hecks::Runtime::StorageShape.project(bluebook)
-          held_shape = Hecks::Runtime::StorageShape.project(lineage_manager.shadow(eras.last[:held_text]))
+          held_shape = lineage_manager.held_shape(eras.last)
 
           if held_shape == current_shape
             standing_chain(registry, bluebook, eras)
           else
-            pending_chain(registry, bluebook, lineage, eras)
+            pending_chain(registry, bluebook, lineage, eras, directory)
           end
         end
 
@@ -38,32 +39,36 @@ module Hecks
             puts "#{bluebook.name} stands at era 1 — no edge to audit."
             return nil
           end
-          [era, lineage_manager.edge_chain(registry, bluebook, eras, latest[:label])]
+          [era, lineage_manager.edge_chain(registry, bluebook, eras, latest[:label], target: latest)]
         end
 
         # The chain when the bluebook has moved past the held journal: audit the pending edge
         # before any mint.
-        def pending_chain(registry, bluebook, lineage, eras)
+        def pending_chain(registry, bluebook, lineage, eras, directory)
           lineage_manager.ensure_named!(lineage, eras.last)
           latest = lineage.eras.last
-          pending = pending_translation(registry, bluebook, latest)
+          pending = pending_translation(registry, bluebook, latest, lineage, directory)
           chain = begin
-            lineage_manager.edge_chain(registry, bluebook, eras, latest[:label])
+            lineage_manager.edge_chain(registry, bluebook, eras, latest[:label], target: latest)
           rescue StandardError
             []
           end
           [latest[:ordinal] + 1, (chain || []) + [{ translation: pending }]]
         end
 
-        # @return [Object] the translation leading from `latest` to the bluebook
-        # @raise [SystemExit] when none is declared
-        def pending_translation(registry, bluebook, latest)
-          to_label = Hecks::Runtime::StorageShape.mint_hash(bluebook)[0, Hecks::Runtime::StorageShape::LABEL_LENGTH]
-          pending = registry.translations.find do |t|
-            t.domain == bluebook.name && t.from == latest[:label] && t.to == to_label
-          end
-          pending or abort "no translation edge leads #{latest[:label]} to #{to_label} — " \
-                           "run hecks scaffold_translation first"
+        # The edge the shared decision leads `latest` by, as a mint takes it.
+        #
+        # @return [Object] the edge leading from `latest` to the bluebook
+        # @raise [SystemExit] when the decision names no edge
+        def pending_translation(registry, bluebook, latest, lineage, directory)
+          verdict = lineage_manager::MintDecision.decide_latest(
+            latest, bluebook: bluebook, translations: registry.translations, directory: directory,
+            watermark: lineage.last_ordinal
+          )
+          return verdict.edge if verdict.verdict == "would_mint"
+
+          abort "no translation edge leads #{latest[:label]} to the current shape (the decision is " \
+                "#{verdict.verdict}) — run hecks scaffold_translation first"
         end
       end
     end

data/lib/hecks/tools/translation_audit/verdicts.rb

@@ -50,7 +50,7 @@ module Hecks
         end
 
         def records_before(lineage, aggregate, era, chain)
-          return lineage.translated_latest(aggregate, era, chain[0..-2]) if chain.size > 1
+          return lineage.received_latest(aggregate, era, chain) if chain.size > 1
 
           lineage.ancestor_latest(aggregate, era, chain)
         end

data/lib/hecks/tools/translation_audit.rb

@@ -56,7 +56,7 @@ module Hecks
       def audit(session)
         return hold_first_era(session) if session.no_era?
 
-        audit_edge(session, edge_chain(session.registry, session.bluebook, session.lineage))
+        audit_edge(session, edge_chain(session.registry, session.bluebook, session.lineage, session.directory))
       end
 
       # @param found [Array, nil] the era ordinal and the chain of translations ending in it, or nil

data/lib/hecks/tools/translation_scaffold.rb

@@ -115,7 +115,7 @@ module Hecks
       # @return [Array] the journal's latest era and the bluebook it held
       def held_era(lineage)
         latest = lineage.eras.last
-        [latest, lineage_manager.shadow(latest[:held_text])]
+        [latest, lineage_manager.held_bluebook(latest)]
       end
 
       # A journal with no era yet holds the bluebook as its first, so there is nothing to scaffold.

data/lib/hecks/tools.rb

@@ -20,9 +20,11 @@ module Hecks
       "standardize_comments_rust"      => ["tools/rust_comment_style", "RustCommentStyle"],
       "regen_codegen_domains"          => ["tools/regeneration_run", "RegenerationRun"],
       "gate"                           => ["tools/gate", "Gate"],
+      "move_disables"                  => ["tools/move_disables", "MoveDisables"],
       "argument_gate_matrix"           => ["tools/argument_gate_matrix", "ArgumentGateMatrix"],
       "project_ci_gates"               => ["tools/ci_gates", "CiGates"],
       "decide_ci_gate"                 => ["tools/ci_gate_decision", "CiGateDecision"],
+      "project_ci_pipeline"            => ["tools/ci_workflows", "CiWorkflows"],
       "project_lanes"                  => ["tools/lanes", "Lanes"],
       "project_tools_doc"              => ["tools/tools_doc", "ToolsDoc"],
       "project_deploy"                 => ["tools/deploy_recipe", "DeployRecipe"],
@@ -44,7 +46,8 @@ module Hecks
       "evolve"                         => ["tools/evolve_run", "EvolveRun"],
       "query_ir"                       => ["tools/query_ir_run", "QueryIrRun"],
       "codemod_hoist_local_givens"     => ["tools/hoist_local_givens", "HoistLocalGivens"],
-      "codemod_implicit_append_fields" => ["tools/drop_implicit_append_fields", "DropImplicitAppendFields"]
+      "codemod_implicit_append_fields" => ["tools/drop_implicit_append_fields", "DropImplicitAppendFields"],
+      "codemod_move_former_name"       => ["tools/move_former_name", "MoveFormerName"]
     }.freeze
 
     module_function

data/lib/hecks/version.rb

@@ -1,5 +1,5 @@
 module Hecks
   # Read directly by the gemspec, so this file must never require the
   # rest of the gem (its dependencies aren't resolved yet at that point).
-  VERSION = "6.0.0".freeze # rust/host/HECKS_RELEASE names the same release
+  VERSION = "7.0.0".freeze # rust/host/HECKS_RELEASE names the same release
 end

data/lib/hecks/vocabulary.rb

@@ -115,39 +115,51 @@ module Hecks
         {"name"=>"textarea", "pattern"=>"\\b(text|body|note|notes|description|message|comment)\\b", "resolves_to"=>"kind"}.freeze
       ].freeze,
       "GateCheck" => [
-        {"name"=>"rspec", "id"=>"rspec", "title"=>"rspec (parallel)", "argv"=>"", "script"=>"# Workers are grouped by this machine's own last timings, kept under the git directory\n# (shared by every worktree, never committed). CI's committed baseline leaves out the io\n# specs this run includes, so it only seeds the first run; each run then rewrites the log.\nlog=\"$(git rev-parse --git-common-dir)/hecks_rspec_runtime.log\"\n[ -f \"$log\" ] || cp .github/rspec_runtime_baseline.log \"$log\"\nbundle exec parallel_rspec spec -n {workers} --group-by runtime --runtime-log \"$log\" --allowed-missing 100 \\\n  -o \"--format progress --format ParallelTests::RSpec::RuntimeLogger --out $log\"\n", "blocked"=>"the suite is red."}.freeze,
+        {"name"=>"rspec", "id"=>"rspec", "title"=>"rspec (parallel)", "runs_in"=>"ci", "argv"=>"", "script"=>"# Workers are grouped by this machine's own last timings, kept under the git directory\n# (shared by every worktree, never committed). CI's committed baseline leaves out the io\n# specs this run includes, so it only seeds the first run; each run then rewrites the log.\nlog=\"$(git rev-parse --git-common-dir)/hecks_rspec_runtime.log\"\n[ -f \"$log\" ] || cp .github/rspec_runtime_baseline.log \"$log\"\nbundle exec parallel_rspec spec -n {workers} --group-by runtime --runtime-log \"$log\" --allowed-missing 100 \\\n  -o \"--format progress --format ParallelTests::RSpec::RuntimeLogger --out $log\"\n", "blocked"=>"the suite is red."}.freeze,
         {"name"=>"fuzzing", "id"=>"fuzzing", "title"=>"spec/fuzzing, which the parallel run above excludes", "argv"=>"bundle exec rspec spec/fuzzing --tag fuzzing", "script"=>"", "blocked"=>"spec/fuzzing is red."}.freeze,
         {"name"=>"query_agreement", "id"=>"query_agreement", "title"=>"adapter agreement, one declared query and every engine giving the same answer", "argv"=>"bundle exec rspec spec/adapters/query_agreement_spec.rb --tag io", "script"=>"", "blocked"=>"the engines disagree about a declared query; one of them is wrong, and a self-consistent adapter spec cannot tell which."}.freeze,
-        {"name"=>"engine_agreement", "id"=>"engine_agreement", "title"=>"engine agreement, every declared comparator on both engines", "argv"=>"bundle exec exe/hecks conformance_run.check_engine_agreement --wait", "script"=>"", "blocked"=>"a comparator is missing a shared case or a cross-engine spec."}.freeze,
-        {"name"=>"shape_ledger", "id"=>"shape_ledger", "title"=>"shape ledger, every bluebook's storage shape held by the ledger or reached by a translation edge", "argv"=>"bundle exec exe/hecks conformance_run.check_shape_ledger --wait", "script"=>"", "blocked"=>"a bluebook's storage shape moved with no translation edge from the shape the ledger holds; the failure prints the edge to commit. A change that only adds is settled in one step with `hecks conformance_run.check_shape_ledger --confirm --additive --wait`, which writes the empty edge and moves the ledger; a change that renames or reshapes data needs rules first."}.freeze,
-        {"name"=>"model_check", "id"=>"model_check", "title"=>"model check, unreachable states, dead transitions and orphaned handlers", "argv"=>"bundle exec exe/hecks model_check --wait", "script"=>"", "blocked"=>"the model checker found something."}.freeze,
-        {"name"=>"doc_coverage", "id"=>"doc_coverage", "title"=>"docs coverage, words with no running example", "argv"=>"bundle exec exe/hecks conformance_run.measure_doc_coverage --wait", "script"=>"", "blocked"=>"the language ships something undocumented; write the missing sections and examples."}.freeze,
+        {"name"=>"engine_agreement", "id"=>"engine_agreement", "title"=>"engine agreement, every declared comparator on both engines", "argv"=>"bundle exec exe/hecks conformance_run.check_engine_agreement! --wait", "script"=>"", "blocked"=>"a comparator is missing a shared case or a cross-engine spec."}.freeze,
+        {"name"=>"shape_ledger", "id"=>"shape_ledger", "title"=>"shape ledger, every bluebook's storage shape held by the ledger or reached by a translation edge", "argv"=>"bundle exec exe/hecks conformance_run.check_shape_ledger! --wait", "script"=>"", "blocked"=>"a bluebook's storage shape moved with no translation edge from the shape the ledger holds; the failure prints the edge to commit. A change that only adds is settled in one step with `hecks conformance_run.check_shape_ledger! --confirm --additive --wait`, which writes the empty edge and moves the ledger; a change that renames or reshapes data needs rules first."}.freeze,
+        {"name"=>"model_check", "id"=>"model_check", "title"=>"model check, unreachable states, dead transitions and orphaned handlers", "argv"=>"bundle exec exe/hecks ModelCheckRun.model_check! --wait", "script"=>"", "blocked"=>"the model checker found something."}.freeze,
+        {"name"=>"doc_coverage", "id"=>"doc_coverage", "title"=>"docs coverage, words with no running example", "argv"=>"bundle exec exe/hecks conformance_run.measure_doc_coverage! --wait", "script"=>"", "blocked"=>"the language ships something undocumented; write the missing sections and examples."}.freeze,
         {"name"=>"rubocop", "id"=>"rubocop", "title"=>"rubocop, the static style and correctness gate", "argv"=>"bundle exec rubocop -c .rubocop.yml", "script"=>"", "blocked"=>"rubocop found an offense."}.freeze,
-        {"name"=>"codegen_drift", "id"=>"codegen_drift", "title"=>"codegen drift, rust/src/generated/ must match a fresh regeneration", "argv"=>"bundle exec exe/hecks regeneration_run.regenerate_corpus --check --wait", "script"=>"", "blocked"=>"regenerating hits a diff. Only pizzas, mod.rs and Cargo.toml are committed, so run `hecks regenerate_corpus --confirm` (it also materializes the rest on a fresh checkout) and commit what it changed."}.freeze,
-        {"name"=>"comment_style", "id"=>"comment_style", "title"=>"comment style, every comment under lib/hecks and spec against docs/COMMENT_STYLE_GUIDE.md", "argv"=>"bundle exec exe/hecks style_run.check_comments paths=lib/hecks spec --wait", "script"=>"", "blocked"=>"a comment breaks the style guide, such as a line past 100 characters; `hecks fix_comments` rewrites the mechanical ones, and the rest are shortened by hand. CI runs this same check."}.freeze,
-        {"name"=>"comment_blocks", "id"=>"comment_blocks", "title"=>"comment blocks, no run of comment lines past ADR 0075's cap", "argv"=>"bundle exec exe/hecks style_run.check_comments paths=lib,spec,examples only=long_block --wait", "script"=>"", "blocked"=>"a comment block ran past the cap; shorten it."}.freeze,
+        {"name"=>"codegen_drift", "id"=>"codegen_drift", "title"=>"codegen drift, rust/src/generated/ must match a fresh regeneration", "argv"=>"bundle exec exe/hecks regeneration_run.regenerate_corpus! --check --wait", "script"=>"", "blocked"=>"regenerating hits a diff. The whole generated tree is committed, so run `hecks regeneration_run.regenerate_corpus! --confirm` and commit what it changed."}.freeze,
+        {"name"=>"comment_style", "id"=>"comment_style", "title"=>"comment style, every comment under lib/hecks and spec against docs/COMMENT_STYLE_GUIDE.md", "argv"=>"bundle exec exe/hecks style_run.check_comments! paths=lib/hecks spec --wait", "script"=>"", "blocked"=>"a comment breaks the style guide, such as a line past 100 characters; `hecks StyleRun.fix_comments!` rewrites the mechanical ones, and the rest are shortened by hand. CI runs this same check."}.freeze,
+        {"name"=>"comment_blocks", "id"=>"comment_blocks", "title"=>"comment blocks, no run of comment lines past ADR 0075's cap", "argv"=>"bundle exec exe/hecks style_run.check_comments! paths=lib,spec,examples only=long_block --wait", "script"=>"", "blocked"=>"a comment block ran past the cap; shorten it."}.freeze,
+        {"name"=>"command_names", "id"=>"command_names", "title"=>"command names, every launcher name a workflow, hook, gate row, spec or guide invokes still resolves", "argv"=>"bundle exec exe/hecks conformance_run.check_command_names! --wait", "script"=>"", "blocked"=>"a file invokes a launcher name the launcher no longer accepts (a renamed command, or a write without its !), so what runs it runs nothing. The failure names each file:line and the nearest valid name. Mark an invocation that is shown and not run with `dead-name-check: skip` on its line or the one before, a fence with `skip`, `historical` or `illustrative` after its language, or a whole page with `dead-name-check: skip-file` in its first lines."}.freeze,
+        {"name"=>"workflow_pagination", "id"=>"workflow_pagination", "title"=>"workflow pagination, no step counts or waits for GitHub list items from the first page alone", "argv"=>"bundle exec exe/hecks conformance_run.check_workflow_pagination! --wait", "script"=>"", "blocked"=>"a workflow step counts or waits for the items of a list call (artifacts, runs, jobs, issues, releases, pulls, commits) and reads only the first 30. Add --paginate and count the lines it prints, or filter the path with ?name=."}.freeze,
+        {"name"=>"secret_output", "id"=>"secret_output", "title"=>"secret output, no value a world hands an adapter as a secret reaches what a launcher prints", "argv"=>"bundle exec rspec spec/secret_output_spec.rb", "script"=>"", "blocked"=>"a declared secret, or a database URL's password, reached a refusal, a note or a result. Hold it through `Hecks::Secrets` where the world hands it over, and print through a guarded stream."}.freeze,
+        {"name"=>"adapter_words", "id"=>"adapter_words", "title"=>"adapter words, no domain name equal to a technology word the adapters are named for", "argv"=>"bundle exec rspec spec/adapter_words_spec.rb", "script"=>"", "blocked"=>"a domain name (a module, aggregate, command or query) equals a technology word listed in lib/hecks/hecks/adapter_words.json. The failure names each one; rename the domain name, not the adapter."}.freeze,
         {"name"=>"rust_fmt", "id"=>"rust_fmt", "title"=>"rustfmt, every Rust crate laid out as `cargo fmt` would", "argv"=>"", "script"=>"# The main crate's generated modules are not committed, so cargo fmt would stop at a\n# missing file on a fresh checkout; its hand-written entry points are named instead.\nrustfmt --check --edition 2021 rust/src/main.rs rust/src/kernel/mod.rs rust/tests/*.rs\nfor crate in parser codegen lsp host web build; do\n  cargo fmt --check --manifest-path \"rust/$crate/Cargo.toml\"\ndone\n", "blocked"=>"a Rust file is not laid out as rustfmt has it; run `cargo fmt` in its crate (rust/src/exemplar is exempt, it is text templates). Generated Rust is laid out by its generators, so fix the generator, not the output."}.freeze,
-        {"name"=>"rust_io", "id"=>"rust_io", "title"=>"rust io specs, conformance, coercion, has_many, semantics corpus and feature exclusivity", "argv"=>"", "script"=>"# Building the banking crate makes banking the default feature and rewrites the module\n# list, both tracked. They are put back on the way out, and the check will not start over\n# a person's uncommitted edits to them.\nrewritten=\"rust/Cargo.toml rust/src/generated/mod.rs\"\nif [ -n \"$(git status --porcelain -- $rewritten)\" ]; then\n  echo \"uncommitted changes in $rewritten; commit or discard them first\" >&2\n  exit 1\nfi\ntrap 'git checkout -q -- $rewritten' EXIT\nenv -u CARGO_TARGET_DIR bundle exec exe/hecks regeneration_run.regenerate_corpus --confirm --wait\nbundle exec exe/hecks build.project_rust domain=examples/banking --wait\nbundle exec rspec --tag io --profile 8 spec/rust_conformance_spec.rb spec/rust_conformance_fuzz_spec.rb spec/rust_numeric_coercion_spec.rb spec/rust_generated/has_many_spec.rb spec/semantics_corpus_spec.rb\nbundle exec rspec --tag io --profile 8 spec/rust_generated/domain_feature_exclusivity_spec.rb\n", "blocked"=>"a Rust io spec failed, or skipped; the crate it built is under rust/target."}.freeze,
-        {"name"=>"ci_codegen_drift", "id"=>"codegen_drift", "title"=>"codegen drift, the committed generated Rust must match the regeneration this job holds", "argv"=>"git diff --exit-code --stat -- rust/src/generated rust/Cargo.toml", "script"=>"", "blocked"=>"regenerating hits a diff. Only pizzas, mod.rs and Cargo.toml are committed, so run `hecks regenerate_corpus --confirm` (it also materializes the rest on a fresh checkout) and commit what it changed."}.freeze,
-        {"name"=>"rust_clippy", "id"=>"rust_clippy", "title"=>"clippy, every Rust crate with its warnings as errors", "argv"=>"", "script"=>"for crate in . parser codegen lsp host web build; do\n  cargo clippy --all-targets --manifest-path \"rust/$crate/Cargo.toml\" -- -D warnings\ndone\n", "blocked"=>"clippy found a warning in a Rust crate, under the strict `[lints.clippy]` table of its Cargo.toml. The main crate needs rust/src/generated, so run `hecks regenerate_corpus --confirm` first on a fresh checkout. Fix the code, or allow a lint at the one site with a line saying why; a warning in generated Rust is fixed in its generator."}.freeze,
-        {"name"=>"lint_deploy_recipes", "id"=>"lint_deploy_recipes", "title"=>"generated deploy recipes, a command with no checked exit status or no echo", "argv"=>"bundle exec exe/hecks deploy makefile_check.lint --wait", "script"=>"", "blocked"=>"a generated deploy Makefile has an unchecked command, or real AWS or database work with no echo telling the person running it what is about to happen."}.freeze,
-        {"name"=>"fuzz", "id"=>"fuzz", "title"=>"fuzz, every example domain on the Memory adapter", "argv"=>"bundle exec exe/hecks fuzz_run.fuzz --wait", "script"=>"", "blocked"=>"a property, an interpreter crash or a determinism check failed on a replayed sequence; the seed is in the output."}.freeze,
-        {"name"=>"fuzz_sqlite", "id"=>"fuzz_sqlite", "title"=>"fuzz on a real on-disk SQLite database", "argv"=>"bundle exec exe/hecks fuzz_run.fuzz adapter=sqlite seeds=6 --wait", "script"=>"", "blocked"=>"the SQLite adapter broke a property the Memory adapter held; seeds are 1..N, so the run repeats."}.freeze,
-        {"name"=>"fuzz_postgres", "id"=>"fuzz_postgres", "title"=>"fuzz on real Postgres, up to four workers (each in its own scratch schema)", "argv"=>"bundle exec exe/hecks fuzz_run.fuzz adapter=postgres seeds=3 steps=20 --wait", "script"=>"", "blocked"=>"the Postgres adapter broke a property the Memory adapter held; it needs PGHOST, PGUSER and PGPASSWORD."}.freeze,
-        {"name"=>"vocabulary_drift", "id"=>"vocabulary_drift", "title"=>"vocabulary, the reserved-name tables regenerated must match the committed ones", "argv"=>"", "script"=>"bundle exec exe/hecks language_run.project_vocabulary --confirm --wait\nbundle exec exe/hecks language_run.project_reserved_names --confirm --wait\ngit diff --exit-code -- lib/hecks/vocabulary.rb rust/codegen/src/reserved_names.rs rust/build/src/reserved_names.rs\n", "blocked"=>"a generated vocabulary file is stale; the check rewrote it, so commit the result."}.freeze,
-        {"name"=>"ci_gates", "id"=>"ci_gates", "title"=>"ci gates, the CiGate rows must match the marked regions of the workflows", "argv"=>"bundle exec exe/hecks regeneration_run.project_ci_gates --wait", "script"=>"", "blocked"=>"a CiGate row changed with no projection, or a region was edited by hand; run `hecks regeneration_run.project_ci_gates --confirm`."}.freeze,
-        {"name"=>"tools_doc", "id"=>"tools_doc", "title"=>"tools doc, docs/tools.md must match the RetiredScript rows", "argv"=>"bundle exec exe/hecks regeneration_run.project_tools_doc --wait", "script"=>"", "blocked"=>"a command's arguments changed with no regenerated doc; run `hecks regeneration_run.project_tools_doc --confirm`."}.freeze,
+        {"name"=>"rust_io", "id"=>"rust_io", "title"=>"rust io specs, conformance, coercion, has_many, semantics corpus, corpus regeneration and feature exclusivity", "argv"=>"", "script"=>"# Building the banking crate makes banking the default feature and rewrites the module\n# list, both tracked. They are put back on the way out, and the check will not start over\n# a person's uncommitted edits to them.\nrewritten=\"rust/Cargo.toml rust/src/generated/mod.rs\"\nif [ -n \"$(git status --porcelain -- $rewritten)\" ]; then\n  echo \"uncommitted changes in $rewritten; commit or discard them first\" >&2\n  exit 1\nfi\ntrap 'git checkout -q -- $rewritten' EXIT\nenv -u CARGO_TARGET_DIR bundle exec exe/hecks regeneration_run.regenerate_corpus! --confirm --wait\nbundle exec exe/hecks build.project_rust! domain=examples/banking --wait\nbundle exec rspec --tag io --profile 8 spec/rust_conformance_spec.rb spec/rust_conformance_fuzz_spec.rb spec/rust_numeric_coercion_spec.rb spec/rust_generated/has_many_spec.rb spec/semantics_corpus_spec.rb\nbundle exec rspec --tag io --profile 8 spec/rust_generated/domain_feature_exclusivity_spec.rb\nbundle exec rspec --tag io --profile 8 spec/rust_build_regeneration_order_spec.rb spec/rust_build_regeneration_subset_spec.rb\n", "blocked"=>"a Rust io spec failed, or skipped; the crate it built is under rust/target."}.freeze,
+        {"name"=>"ci_codegen_drift", "id"=>"codegen_drift", "title"=>"codegen drift, the committed generated Rust must match the regeneration this job holds", "argv"=>"git diff --exit-code --stat -- rust/src/generated rust/Cargo.toml", "script"=>"", "blocked"=>"regenerating hits a diff. The whole generated tree is committed, so run `hecks regeneration_run.regenerate_corpus! --confirm` and commit what it changed."}.freeze,
+        {"name"=>"generated_tree", "id"=>"generated_tree", "title"=>"whole-tree specs, the examples tagged generated_all against every domain's generated Rust", "argv"=>"bundle exec rspec --tag generated_all", "script"=>"", "blocked"=>"a spec that reads the whole generated tree failed; run `hecks regeneration_run.regenerate_corpus! --confirm` to materialize every domain, then `bundle exec rspec --tag generated_all`."}.freeze,
+        {"name"=>"rust_clippy", "id"=>"rust_clippy", "title"=>"clippy, every Rust crate with its warnings as errors", "argv"=>"", "script"=>"for crate in . parser codegen lsp host web build; do\n  cargo clippy --all-targets --manifest-path \"rust/$crate/Cargo.toml\" -- -D warnings\ndone\n", "blocked"=>"clippy found a warning in a Rust crate, under the strict `[lints.clippy]` table of its Cargo.toml. The main crate needs rust/src/generated, so run `hecks regeneration_run.regenerate_corpus! --confirm` first on a fresh checkout. Fix the code, or allow a lint at the one site with a line saying why; a warning in generated Rust is fixed in its generator."}.freeze,
+        {"name"=>"lint_deploy_recipes", "id"=>"lint_deploy_recipes", "title"=>"generated deploy recipes, a command with no checked exit status or no echo", "argv"=>"bundle exec exe/hecks deploy MakefileCheck.lint! --wait", "script"=>"", "blocked"=>"a generated deploy Makefile has an unchecked command, or real AWS or database work with no echo telling the person running it what is about to happen."}.freeze,
+        {"name"=>"fuzz_1_of_3", "id"=>"fuzz_1_of_3", "title"=>"fuzz, shard 1 of 3 of the example domains on the Memory adapter", "argv"=>"bundle exec exe/hecks fuzz_run.fuzz! shard=1/3 --wait", "script"=>"", "blocked"=>"a property, an interpreter crash or a determinism check failed on a replayed sequence; the seed is in the output."}.freeze,
+        {"name"=>"fuzz_2_of_3", "id"=>"fuzz_2_of_3", "title"=>"fuzz, shard 2 of 3 of the example domains on the Memory adapter", "argv"=>"bundle exec exe/hecks fuzz_run.fuzz! shard=2/3 --wait", "script"=>"", "blocked"=>"a property, an interpreter crash or a determinism check failed on a replayed sequence; the seed is in the output."}.freeze,
+        {"name"=>"fuzz_3_of_3", "id"=>"fuzz_3_of_3", "title"=>"fuzz, shard 3 of 3 of the example domains on the Memory adapter", "argv"=>"bundle exec exe/hecks fuzz_run.fuzz! shard=3/3 --wait", "script"=>"", "blocked"=>"a property, an interpreter crash or a determinism check failed on a replayed sequence; the seed is in the output."}.freeze,
+        {"name"=>"fuzz_sqlite_1_of_3", "id"=>"fuzz_sqlite_1_of_3", "title"=>"fuzz, shard 1 of 3 on a real on-disk SQLite database", "argv"=>"bundle exec exe/hecks fuzz_run.fuzz! adapter=sqlite seeds=6 shard=1/3 --wait", "script"=>"", "blocked"=>"the SQLite adapter broke a property the Memory adapter held; seeds are 1..N, so the run repeats."}.freeze,
+        {"name"=>"fuzz_sqlite_2_of_3", "id"=>"fuzz_sqlite_2_of_3", "title"=>"fuzz, shard 2 of 3 on a real on-disk SQLite database", "argv"=>"bundle exec exe/hecks fuzz_run.fuzz! adapter=sqlite seeds=6 shard=2/3 --wait", "script"=>"", "blocked"=>"the SQLite adapter broke a property the Memory adapter held; seeds are 1..N, so the run repeats."}.freeze,
+        {"name"=>"fuzz_sqlite_3_of_3", "id"=>"fuzz_sqlite_3_of_3", "title"=>"fuzz, shard 3 of 3 on a real on-disk SQLite database", "argv"=>"bundle exec exe/hecks fuzz_run.fuzz! adapter=sqlite seeds=6 shard=3/3 --wait", "script"=>"", "blocked"=>"the SQLite adapter broke a property the Memory adapter held; seeds are 1..N, so the run repeats."}.freeze,
+        {"name"=>"fuzz_shards", "id"=>"fuzz_shards", "title"=>"fuzz shards, the three shards together hold every domain of the sweep once", "argv"=>"bundle exec exe/hecks fuzz_run.fuzz! list_shards=3 --wait", "script"=>"", "blocked"=>"the split of the fuzz sweep into three shards drops or repeats a domain, or cannot be listed; a shard would then sweep less than the sweep it stands for. Read the refusal, and fix lib/hecks/tools/fuzz_sweep/shards.rb or the cost table spec/fuzzing/fuzz_runtime_baseline.log."}.freeze,
+        {"name"=>"fuzz_postgres_1_of_2", "id"=>"fuzz_postgres_1_of_2", "title"=>"fuzz, shard 1 of 2 on real Postgres (each run in its own scratch schema)", "argv"=>"bundle exec exe/hecks fuzz_run.fuzz! adapter=postgres seeds=3 steps=20 shard=1/2 --wait", "script"=>"", "blocked"=>"the Postgres adapter broke a property the Memory adapter held; it needs PGHOST, PGUSER and PGPASSWORD."}.freeze,
+        {"name"=>"fuzz_postgres_2_of_2", "id"=>"fuzz_postgres_2_of_2", "title"=>"fuzz, shard 2 of 2 on real Postgres (each run in its own scratch schema)", "argv"=>"bundle exec exe/hecks fuzz_run.fuzz! adapter=postgres seeds=3 steps=20 shard=2/2 --wait", "script"=>"", "blocked"=>"the Postgres adapter broke a property the Memory adapter held; it needs PGHOST, PGUSER and PGPASSWORD."}.freeze,
+        {"name"=>"vocabulary_drift", "id"=>"vocabulary_drift", "title"=>"vocabulary, the reserved-name tables regenerated must match the committed ones", "argv"=>"", "script"=>"bundle exec exe/hecks language_run.project_vocabulary! --confirm --wait\nbundle exec exe/hecks language_run.project_reserved_names! --confirm --wait\ngit diff --exit-code -- lib/hecks/vocabulary.rb rust/codegen/src/reserved_names.rs rust/build/src/reserved_names.rs\n", "blocked"=>"a generated vocabulary file is stale; the check rewrote it, so commit the result."}.freeze,
+        {"name"=>"ci_gates", "id"=>"ci_gates", "title"=>"ci gates, the CiGate rows must match the marked regions of the workflows", "argv"=>"bundle exec exe/hecks regeneration_run.project_ci_gates! --wait", "script"=>"", "blocked"=>"a CiGate row changed with no projection, or a region was edited by hand; run `hecks regeneration_run.project_ci_gates! --confirm`."}.freeze,
+        {"name"=>"ci_pipeline", "id"=>"ci_pipeline", "title"=>"ci pipeline, the workflow rows must match the files they project", "argv"=>"bundle exec exe/hecks regeneration_run.project_ci_pipeline! --wait", "script"=>"", "blocked"=>"a workflow row changed with no projection, or a projected workflow was edited by hand; run `hecks regeneration_run.project_ci_pipeline! --confirm`."}.freeze,
+        {"name"=>"tools_doc", "id"=>"tools_doc", "title"=>"tools doc, docs/tools.md must match the RetiredScript rows", "argv"=>"bundle exec exe/hecks regeneration_run.project_tools_doc! --wait", "script"=>"", "blocked"=>"a command's arguments changed with no regenerated doc; run `hecks regeneration_run.project_tools_doc! --confirm`."}.freeze,
         {"name"=>"rust_coverage", "id"=>"rust_coverage", "title"=>"rust coverage, every generated module", "argv"=>"bundle exec exe/hecks query corpus_run.corpus_rust_coverage --wait", "script"=>"", "blocked"=>"a construct a domain declares has no generated Rust, or an entry on RUST_COVERAGE_PENDING is now fixed and must be deleted."}.freeze,
         {"name"=>"rust_coverage_codegen", "id"=>"rust_coverage_codegen", "title"=>"rust coverage against hecks-codegen's own manifest, pizzas governance identity banking meta", "argv"=>"", "script"=>"for module in pizzas governance identity banking meta; do\n  bundle exec exe/hecks query build.rust_coverage module_name=$module codegen=rust --wait\ndone\n", "blocked"=>"hecks-codegen generated nothing for a construct a domain declares."}.freeze,
-        {"name"=>"kernel_coverage", "id"=>"kernel_coverage", "title"=>"rust kernel coverage, every capability variant has a kernel file", "argv"=>"bundle exec exe/hecks kernel_run.measure_kernel_coverage --wait", "script"=>"", "blocked"=>"a capability's enum variant has no rust/src/kernel file behind it."}.freeze,
-        {"name"=>"rust_vocabulary_drift", "id"=>"rust_vocabulary_drift", "title"=>"rust vocabulary, the kernel vocab tables regenerated must match the committed ones", "argv"=>"", "script"=>"bundle exec exe/hecks language_run.project_rust_vocabulary --confirm --wait\ngit diff --exit-code -- rust/src/kernel/vocab/\nuntracked=\"$(git status --porcelain --untracked-files=all -- rust/src/kernel/vocab/)\"\nif [ -n \"$untracked\" ]; then\n  echo \"rust/src/kernel/vocab has uncommitted generated files:\" >&2\n  echo \"$untracked\" >&2\n  exit 1\nfi\n", "blocked"=>"the generated kernel vocab tables are stale or untracked; the check rewrote them, so commit the result."}.freeze
+        {"name"=>"kernel_coverage", "id"=>"kernel_coverage", "title"=>"rust kernel coverage, every capability variant has a kernel file", "argv"=>"bundle exec exe/hecks kernel_run.measure_kernel_coverage! --wait", "script"=>"", "blocked"=>"a capability's enum variant has no rust/src/kernel file behind it."}.freeze,
+        {"name"=>"rust_vocabulary_drift", "id"=>"rust_vocabulary_drift", "title"=>"rust vocabulary, the kernel vocab tables regenerated must match the committed ones", "argv"=>"", "script"=>"bundle exec exe/hecks language_run.project_rust_vocabulary! --confirm --wait\ngit diff --exit-code -- rust/src/kernel/vocab/\nuntracked=\"$(git status --porcelain --untracked-files=all -- rust/src/kernel/vocab/)\"\nif [ -n \"$untracked\" ]; then\n  echo \"rust/src/kernel/vocab has uncommitted generated files:\" >&2\n  echo \"$untracked\" >&2\n  exit 1\nfi\n", "blocked"=>"the generated kernel vocab tables are stale or untracked; the check rewrote them, so commit the result."}.freeze
       ].freeze,
       "GateStage" => [
-        {"name"=>"pre_push", "env"=>"HECKS_ENVIRONMENT=memory HECKS_PROCESS_SPECS=1", "checks"=>"rspec,fuzzing,query_agreement,engine_agreement,shape_ledger,model_check,doc_coverage,rubocop,codegen_drift,comment_style,comment_blocks,rust_fmt"}.freeze,
-        {"name"=>"quick", "env"=>"HECKS_ENVIRONMENT=memory", "checks"=>"shape_ledger,rubocop,comment_style,comment_blocks"}.freeze,
-        {"name"=>"unguarded_push", "env"=>"HECKS_ENVIRONMENT=memory", "checks"=>"shape_ledger,rubocop,comment_style,comment_blocks,fuzzing"}.freeze,
+        {"name"=>"pre_push", "env"=>"HECKS_ENVIRONMENT=memory HECKS_PROCESS_SPECS=1", "checks"=>"fuzzing,query_agreement,engine_agreement,shape_ledger,model_check,doc_coverage,rubocop,codegen_drift,comment_style,comment_blocks,rust_fmt"}.freeze,
+        {"name"=>"ci_suite", "env"=>"HECKS_ENVIRONMENT=memory HECKS_PROCESS_SPECS=1", "checks"=>"rspec"}.freeze,
+        {"name"=>"quick", "env"=>"HECKS_ENVIRONMENT=memory", "checks"=>"shape_ledger,rubocop,comment_style,comment_blocks,secret_output,adapter_words"}.freeze,
         {"name"=>"rust_io", "env"=>"CI=true HECKS_ENVIRONMENT=memory", "checks"=>"rust_io"}.freeze,
-        {"name"=>"ci", "env"=>"", "checks"=>"model_check,shape_ledger,engine_agreement,doc_coverage,rubocop,comment_style,comment_blocks,ci_codegen_drift,rust_fmt,rust_clippy,lint_deploy_recipes,fuzz,fuzz_sqlite,fuzz_postgres,vocabulary_drift,ci_gates,tools_doc,rust_coverage,rust_coverage_codegen,kernel_coverage,rust_vocabulary_drift"}.freeze
+        {"name"=>"ci", "env"=>"", "checks"=>"model_check,shape_ledger,engine_agreement,doc_coverage,rubocop,comment_style,comment_blocks,ci_codegen_drift,generated_tree,rust_fmt,rust_clippy,lint_deploy_recipes,command_names,workflow_pagination,fuzz_1_of_3,fuzz_2_of_3,fuzz_3_of_3,fuzz_sqlite_1_of_3,fuzz_sqlite_2_of_3,fuzz_sqlite_3_of_3,fuzz_postgres_1_of_2,fuzz_postgres_2_of_2,fuzz_shards,vocabulary_drift,ci_gates,ci_pipeline,tools_doc,rust_coverage,rust_coverage_codegen,kernel_coverage,rust_vocabulary_drift"}.freeze
       ].freeze,
       "IncludeHaystack" => [
         {"type"=>"Array", "strategy"=>"membership"}.freeze,
@@ -195,12 +207,12 @@ module Hecks
       ].freeze,
       "QaDial" => [
         {"name"=>"cadence_seconds", "type"=>"Integer", "meaning"=>"Minimum gap in seconds between one tick's report and the next dispatch; 0 is immediately. Read by the `/loop hecks_qa` caller, not by any script."}.freeze,
-        {"name"=>"pr_cap_per_day", "type"=>"Integer", "meaning"=>"Most PRs (Patch plus Improvement) `hecks quality_control patch.open` opens per calendar day; 0 is uncapped."}.freeze,
+        {"name"=>"pr_cap_per_day", "type"=>"Integer", "meaning"=>"Most PRs (Patch plus Improvement) `hecks quality_control Patch.open!` opens per calendar day; 0 is uncapped."}.freeze,
         {"name"=>"widening_tiers", "type"=>"Array", "meaning"=>"Fuzz depth by `Target.clean_streak`, in three discrete tiers, read by `SweepDepth.for_streak`. The last row (`upto: Float::INFINITY`) is the ceiling."}.freeze,
         {"name"=>"sweep_max_parallel", "type"=>"Integer", "meaning"=>"How many `hecks quality_control query sweep.run <target>` children `--all` keeps running at once."}.freeze,
         {"name"=>"liveness_fallback_seconds", "type"=>"Integer", "meaning"=>"How long the `/loop hecks_qa` caller waits for a tick's report before assuming it stalled."}.freeze,
-        {"name"=>"draft_only", "type"=>"Boolean", "meaning"=>"Whether `hecks quality_control patch.open` opens its PR as a draft; false opens it ready for review."}.freeze,
-        {"name"=>"auto_merge", "type"=>"Boolean", "meaning"=>"Whether `hecks quality_control patch.open` queues the PR for auto-merge once it is open."}.freeze,
+        {"name"=>"draft_only", "type"=>"Boolean", "meaning"=>"Whether `hecks quality_control Patch.open!` opens its PR as a draft; false opens it ready for review."}.freeze,
+        {"name"=>"auto_merge", "type"=>"Boolean", "meaning"=>"Whether `hecks quality_control Patch.open!` queues the PR for auto-merge once it is open."}.freeze,
         {"name"=>"adversarial_fraction", "type"=>"Numeric", "meaning"=>"Fraction (0.0..1.0) of generated command steps mutated adversarially; 0 turns the layer off. Higher finds refusal-ordering splits sooner but reaches deep state less often."}.freeze,
         {"name"=>"guided_generation", "type"=>"Boolean", "meaning"=>"Coverage-guided generation across one sweep's seeds (`Hecks::Fuzzing::CoverageCampaign`)."}.freeze,
         {"name"=>"corpus_splice_probability", "type"=>"Numeric", "meaning"=>"Fraction (0.0..1.0) of seeds that start from a prefix of an earlier seed's new coverage. Off by default: measured, it trades breadth for depth (banking reached 1.41x the deep-state tuples, chess lost 0.12x of all tuples), while favoring rare verbs alone never lost."}.freeze,
@@ -222,7 +234,13 @@ module Hecks
         {"name"=>"generated_domain_seeds", "type"=>"Integer", "meaning"=>"Generated sequences run per generated domain."}.freeze,
         {"name"=>"mutation_files", "type"=>"Array", "meaning"=>"Rust files `hecks quality_control target.mutate --from-dials` mutates, and so the files one `hecks quality_control sweep.tick` mutation-tests after the generated domains; empty skips the step."}.freeze,
         {"name"=>"mutation_equivalent", "type"=>"Array", "meaning"=>"Mutants that behave the same as the original code, by the name `cargo mutants --list` gives them without the file and line; never run, so they cannot be reported as survivors."}.freeze,
-        {"name"=>"structural_refusal_boundary", "type"=>"Array", "meaning"=>"Construct families a skipped query verb may belong to. A skip inside the list is logged Held, one outside it Surprised. Shrink-only: spec/fuzzing/rust_gap_manifest_spec.rb fails when a family here is declared by no committed manifest."}.freeze
+        {"name"=>"structural_refusal_boundary", "type"=>"Array", "meaning"=>"Construct families a skipped query verb may belong to. A skip inside the list is logged Held, one outside it Surprised. Shrink-only: spec/fuzzing/rust_gap_manifest_spec.rb fails when a family here is declared by no committed manifest."}.freeze,
+        {"name"=>"red_main_check", "type"=>"Boolean", "meaning"=>"Whether each `hecks quality_control sweep.tick` runs the quick gate on local main as its last finding step, logging each red check as a bug and fixing the self-contained ones; false skips the step."}.freeze,
+        {"name"=>"event_pump", "type"=>"Boolean", "meaning"=>"Whether each `hecks quality_control sweep.tick` runs the event pump as its last step: each attached domain's policies react to the events past their cursors, and every refusal is named. false skips the step; `hecks quality_control event_pump.pump!` runs it regardless."}.freeze,
+        {"name"=>"push_nudge", "type"=>"Boolean", "meaning"=>"Whether each `hecks quality_control sweep.tick` checks once whether a push of local main is due and files, revises or finishes the one `push-due` Work row; false skips the check. The thresholds are the QualityControl world's `push_nudge` setting."}.freeze,
+        {"name"=>"quiesced", "type"=>"Boolean", "meaning"=>"Whether each `hecks quality_control sweep.tick` runs no step at all: every step prints `quiesced: skipped <step>` and the tick exits 0, so a mint window sees a quiet ledger. The setting is read once at the start of a tick; `hecks qa_quiesce.hold!` writes a marker file every step checks as well, which a tick already running notices before its next step."}.freeze,
+        {"name"=>"main_maintenance", "type"=>"Boolean", "meaning"=>"Whether each `hecks quality_control sweep.tick` runs the main-maintenance chain after the main-check step: the quick gate on main, the reconcile plan, and the push through the train when origin is behind. false skips the chain."}.freeze,
+        {"name"=>"maintenance_confirm", "type"=>"Boolean", "meaning"=>"Whether the main-maintenance chain's reconcile writes after its plan (`Era.Reconcile` with confirm); false leaves the reconcile a dry run that writes nothing."}.freeze
       ].freeze,
       "QueryComparator" => [
         {"name"=>"eq"}.freeze,
@@ -451,6 +469,14 @@ module Hecks
         {"refusal"=>"AttributeAbsent", "site"=>"absent_read", "template"=>"{aggregate} {field} is absent on this record — declared, not optional, and added since it was written. Backfill it in a translation (backfill :{field}, default: ...), or declare it optional: true"}.freeze,
         {"refusal"=>"ProjectionAbsent", "site"=>"absent_read", "template"=>"{aggregate} {field} is not yet projected on this record — declared via projects :{field}, but no rebuild sweep has populated it. Run the sweep, or read {reference}.{remote_field} directly if this rule cannot wait"}.freeze
       ].freeze,
+      "RehearsalScope" => [
+        {"name"=>"quick", "stages"=>"quick"}.freeze,
+        {"name"=>"deep", "stages"=>"quick,impacted"}.freeze
+      ].freeze,
+      "RehearsalStage" => [
+        {"name"=>"quick", "kind"=>"gate", "argument"=>"quick"}.freeze,
+        {"name"=>"impacted", "kind"=>"impacted", "argument"=>""}.freeze
+      ].freeze,
       "ReleaseFile" => [
         {"path"=>"lib/hecks/version.rb", "lines"=>"^\\s*VERSION = \"[0-9]+\\.[0-9]+\\.[0-9]+\"\\.freeze$"}.freeze,
         {"path"=>"CHANGELOG.md", "lines"=>""}.freeze,
@@ -500,7 +526,7 @@ module Hecks
         {"script"=>"heki_compact", "section"=>"Custodian", "aggregate"=>"Era", "verb"=>"compact_heki"}.freeze,
         {"script"=>"vendor_bluebook", "section"=>"Custodian", "aggregate"=>"Package", "verb"=>"vendor", "note"=>"waits: a refusal exits 1 with its reason on stderr"}.freeze,
         {"script"=>"project_cli", "section"=>"Custodian", "aggregate"=>"Launch", "verb"=>"project_cli"}.freeze,
-        {"script"=>"hecks_mcp_door", "section"=>"Custodian", "aggregate"=>"Launch", "verb"=>"serve_mcp"}.freeze,
+        {"script"=>"hecks_mcp_door", "section"=>"Custodian", "aggregate"=>"Server", "verb"=>"serve_mcp"}.freeze,
         {"script"=>"project_rust", "section"=>"Custodian", "aggregate"=>"Build", "verb"=>"project_rust"}.freeze,
         {"script"=>"project_wasm", "section"=>"Custodian", "aggregate"=>"Build", "verb"=>"build_wasm"}.freeze,
         {"script"=>"project_host", "section"=>"Custodian", "aggregate"=>"Build", "verb"=>"build_host"}.freeze,
@@ -559,6 +585,7 @@ module Hecks
         {"script"=>"canonicalise", "section"=>"Codebase", "aggregate"=>"StyleRun", "verb"=>"canonicalise"}.freeze,
         {"script"=>"codemod_hoist_local_givens", "section"=>"Codebase", "aggregate"=>"CodemodRun", "verb"=>"hoist_local_givens"}.freeze,
         {"script"=>"codemod_implicit_append_fields", "section"=>"Codebase", "aggregate"=>"CodemodRun", "verb"=>"drop_implicit_append_fields"}.freeze,
+        {"script"=>"codemod_move_former_name", "section"=>"Codebase", "aggregate"=>"CodemodRun", "verb"=>"move_former_name"}.freeze,
         {"script"=>"rspec_shard_files", "section"=>"Codebase", "aggregate"=>"TestSuiteRun", "verb"=>"shard_specs"}.freeze,
         {"script"=>"rspec_io_parallel_files", "section"=>"Codebase", "aggregate"=>"TestSuiteRun", "verb"=>"list_io_parallel_specs"}.freeze,
         {"script"=>"rspec_io_parallel_files", "section"=>"Codebase", "aggregate"=>"TestSuiteRun", "verb"=>"write_io_parallel_spec_list"}.freeze,
@@ -574,12 +601,13 @@ module Hecks
         {"script"=>"query_ir", "section"=>"Codebase", "aggregate"=>"CorpusRun", "verb"=>"ir_constructs"}.freeze,
         {"script"=>"query_ir", "section"=>"Codebase", "aggregate"=>"CorpusRun", "verb"=>"ir_duplicates"}.freeze,
         {"script"=>"query_ir", "section"=>"Codebase", "aggregate"=>"CorpusRun", "verb"=>"ir_impact"}.freeze,
-        {"script"=>"hecks_query_ir_mcp", "section"=>"Codebase", "aggregate"=>"CorpusRun", "verb"=>"serve_query_ir_mcp"}.freeze,
-        {"script"=>"present", "section"=>"Codebase", "aggregate"=>"CorpusRun", "verb"=>"present"}.freeze,
+        {"script"=>"hecks_query_ir_mcp", "section"=>"Codebase", "aggregate"=>"Server", "verb"=>"serve_query_ir_mcp"}.freeze,
+        {"script"=>"present", "section"=>"Codebase", "aggregate"=>"Server", "verb"=>"present"}.freeze,
         {"script"=>"release", "section"=>"Codebase", "aggregate"=>"PublishingRun", "verb"=>"publish", "note"=>"without --confirm, the old --dry-run"}.freeze,
         {"script"=>"release_gem", "section"=>"Codebase", "aggregate"=>"PublishingRun", "verb"=>"publish_gem"}.freeze,
         {"script"=>"(new)", "section"=>"Codebase", "aggregate"=>"GateRun", "verb"=>"gate"}.freeze,
         {"script"=>"qa_tick", "section"=>"QualityControl", "aggregate"=>"Sweep", "verb"=>"tick"}.freeze,
+        {"script"=>"qa_event_pump", "section"=>"QualityControl", "aggregate"=>"EventPump", "verb"=>"pump"}.freeze,
         {"script"=>"qa_sweep", "section"=>"QualityControl", "aggregate"=>"Sweep", "verb"=>"run", "passes"=>"--all --seeds N --steps N --adversarial F --role-draw F --dry-run F --self-consistency BOOL --modes a,b --persistence-parity --no-parity"}.freeze,
         {"script"=>"qa_sweep", "section"=>"QualityControl", "aggregate"=>"Target", "verb"=>"release"}.freeze,
         {"script"=>"qa_pr_check", "section"=>"QualityControl", "aggregate"=>"Clearance", "verb"=>"check_pull_requests"}.freeze,
@@ -595,6 +623,8 @@ module Hecks
         {"script"=>"qa_discover_external_domains", "section"=>"QualityControl", "aggregate"=>"Target", "verb"=>"discover_external_domains", "passes"=>"--projects-dir ~/Projects --max-depth 3 --known-path PATH …"}.freeze,
         {"script"=>"qa_postgres_migrate", "section"=>"QualityControl", "aggregate"=>"Sweep", "verb"=>"migrate_ledger_from_heki", "passes"=>"[aggregate …] --force", "note"=>"a dry run without --force"}.freeze,
         {"script"=>"qa_postgres_role", "section"=>"QualityControl", "aggregate"=>"Sweep", "verb"=>"create_ledger_role"}.freeze,
+        {"script"=>"qa_main_gate", "section"=>"QualityControl", "aggregate"=>"MainCheck", "verb"=>"check_main"}.freeze,
+        {"script"=>"qa_fix_main_bug", "section"=>"QualityControl", "aggregate"=>"Bug", "verb"=>"fix_and_land", "passes"=>"--bug BUG#n"}.freeze,
         {"script"=>"qa_concurrency_racer", "section"=>"QualityControl", "aggregate"=>"Sweep", "verb"=>"race", "note"=>"not user-facing; ProcessPool starts it"}.freeze
       ].freeze,
       "RustReservedWord" => [

data/lib/hecks/workflow_pagination/judge.rb

@@ -0,0 +1,48 @@
+module Hecks
+  module WorkflowPagination
+    # Whether a GitHub API call can take its answer from one page and still be right.
+    #
+    # A list endpoint answers 30 items a page. A call that counts or waits for items, and reads that
+    # one page, is right until the list grows past it and then fails without a word.
+    module Judge
+      # The last path segment of an endpoint that answers an array, or an object holding one.
+      LISTS = %w[artifacts runs jobs issues releases pulls commits comments tags branches labels workflows
+                 check-runs check-suites reviews assets].freeze
+
+      # Query terms that narrow a list to the item asked for.
+      FILTERS = /(?:\A|&)(?:name|head_sha|sha)=/
+
+      # A call that counts what it reads, or looks one item up by a test.
+      COUNTING = /\|\s*length\b|'length'|"length"|wc -l|grep -c|\bcount\b/
+
+      # A call that waits for an item to show among those it reads.
+      WAITING = /select\(|grep -q|startswith|contains\(/
+
+      # The words that open a loop which polls.
+      LOOP = /\b(?:until|while|seq)\b/
+
+      # A comparison to a fixed number, which bounds how many items the call can need.
+      BOUNDED = /(?:=|==|-eq|-ge|-gt|-lt|-le)\s*"?\d+"?/
+
+      module_function
+
+      # @param call [Statement] one API call
+      # @return [String, nil] what is wrong with it, or nil when one page is enough
+      def fault(call)
+        return unless LISTS.include?(call.route.split("/").last) && reads_items?(call)
+        return if call.text.include?("--paginate") || call.query.match?(FILTERS)
+        return if call.query.include?("per_page=100") && call.after.match?(BOUNDED)
+
+        "counts or waits for the items of #{call.route} from its first page (30 items); " \
+          "add --paginate and count the lines it prints, or filter the path with ?name="
+      end
+
+      # @return [Boolean] whether the call counts the items or waits for one among them
+      def reads_items?(call)
+        return true if call.text.match?(COUNTING)
+
+        call.text.match?(WAITING) && call.before.match?(LOOP)
+      end
+    end
+  end
+end

data/lib/hecks/workflow_pagination/statement.rb

@@ -0,0 +1,50 @@
+module Hecks
+  module WorkflowPagination
+    # One GitHub API call written in a workflow: the line it starts on and its text, with the lines
+    # a trailing backslash joins, and the lines around it that say what it is used for.
+    class Statement
+      # What the call is for, read from the lines around it.
+      Setting = Struct.new(:before, :after)
+
+      # How far around a call the lines that say what it is for reach.
+      REACH = 6
+
+      # A GitHub API path: the part after the host, up to the quote or space that ends it.
+      PATH = %r{(?:api\.github\.com/)?\b((?:repos|orgs|user|search|enterprises)/[^\s"'\\)]+)}
+
+      attr_reader :line, :text
+
+      # @param lines [Array<String>] the file's lines
+      # @param index [Integer] where the call starts
+      def initialize(lines, index)
+        @line = index + 1
+        @lines = lines
+        @text = joined(index)
+        @index = index
+      end
+
+      # @return [String, nil] the path the call reads, with its query
+      def path = @text[PATH, 1]
+
+      # @return [String] the path without its query
+      def route = path.to_s.partition("?").first
+
+      # @return [String] the query of the path
+      def query = path.to_s.partition("?").last
+
+      # @return [String] the lines after the call, where its answer is compared
+      def after = @lines[(@index + 1)..(@index + REACH)].to_a.join
+
+      # @return [String] the lines before the call, where a loop opens
+      def before = @lines[[@index - REACH, 0].max...@index].join
+
+      private
+
+      def joined(index)
+        text = @lines[index].dup
+        text << @lines[index += 1] while text.rstrip.end_with?("\\") && @lines[index + 1]
+        text
+      end
+    end
+  end
+end