@erclx/canon 5.23.0 → 5.25.0

package/governance/rules/standards/diagrams.md

@@ -1,14 +0,0 @@
----
-# Generated by `canon gov regen` from standards/diagrams.md. Edit that frontmatter, not this file.
-description: Shape and content rules for .canon/diagrams/<kind>.md files
-paths:
-  - '.canon/diagrams/**'
----
-
-# Diagram standards
-
-## Authority
-
-- Follow the diagrams standard for shape and content rules for .canon/diagrams/<kind>.md files. It is the single source. Read it with `canon standards diagrams`.
-- Layout, budgets, accessibility, labels, and render verification inside the fence are a separate topic. The mermaid standard routes them.
-- A diagram entry carries structure and flow, not implementation. Read the standard before adding or revising a kind.

package/governance/rules/standards/mermaid.md

@@ -1,15 +0,0 @@
----
-# Generated by `canon gov regen` from standards/mermaid.md. Edit that frontmatter, not this file.
-description: Direction and layout, node and edge budgets, accessibility fields, label punctuation, and render verification for a Mermaid diagram
-paths:
-  - '**/*.md'
----
-
-# Mermaid standards
-
-## Authority
-
-- Follow the mermaid standard for direction and layout, node and edge budgets, accessibility fields, label punctuation, and render verification for a Mermaid diagram. It is the single source. Read it with `canon standards mermaid`.
-- Apply this rule only when the edit drafts or revises a Mermaid fence. Skip it on a markdown edit carrying no diagram.
-- Read it before drafting the fence. Do not work the layout or the budgets from memory.
-- Which diagram a document carries and what question it answers is a separate topic. The diagrams standard routes it.

package/scripts/core/check-gallery-exclusion.sh

@@ -1,50 +0,0 @@
-#!/usr/bin/env bash
-set -e
-set -o pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-PROJECT_ROOT="${PROJECT_ROOT:-$(cd "$SCRIPT_DIR/../.." && pwd)}"
-
-WEB_DIST="$PROJECT_ROOT/web/dist"
-GALLERY_DIST="$PROJECT_ROOT/web/gallery-dist"
-MARKER='name="canon-gallery-marker"'
-
-# Nothing to grep without a build. Callers run this after `bun run web:build`
-# and `bun run web:gallery`, so an absent dist here means a build step itself
-# failed rather than something this check can verify.
-if [ ! -d "$WEB_DIST" ]; then
-  echo "No $WEB_DIST. Run bun run web:build first." >&2
-  exit 1
-fi
-
-if [ ! -d "$GALLERY_DIST" ]; then
-  echo "No $GALLERY_DIST. Run bun run web:gallery first." >&2
-  exit 1
-fi
-
-# A prose notice is not load-bearing: rewording it silently retires the leak
-# check it backed with every workflow still green. The marker is a fixed
-# `<meta>` tag `web/gallery-src/pages/index.astro` carries for exactly this,
-# so asserting it survives in the gallery's own build is what turns a dropped
-# marker into a loud failure here rather than a blind spot in the check below.
-if ! grep -rl "$MARKER" "$GALLERY_DIST" >/dev/null 2>&1; then
-  echo "The gallery build at $GALLERY_DIST carries no $MARKER. The gallery page dropped its own marker, which is what the leak check below reads for." >&2
-  exit 1
-fi
-
-# `web/gallery.config.mjs` keeps the components-panel gallery out of the
-# published build by never pointing its srcDir at it. A later config change
-# that widens srcDir, or a gallery file moving under web/src/, would publish
-# this repository's component internals to a live domain with every other
-# check still green, which is what this guards against.
-if find "$WEB_DIST" -iname '*gallery*' | grep -q .; then
-  echo "A file named for the gallery reached $WEB_DIST. See web/gallery.config.mjs's srcDir." >&2
-  exit 1
-fi
-
-if grep -rl "$MARKER" "$WEB_DIST" >/dev/null 2>&1; then
-  echo "The gallery's own marker ($MARKER) reached $WEB_DIST. See web/gallery.config.mjs's srcDir." >&2
-  exit 1
-fi
-
-echo "check-gallery-exclusion: gallery marker present in $GALLERY_DIST, absent from $WEB_DIST"

package/src/design/board.ts

@@ -1,576 +0,0 @@
-import {
-  cpSync,
-  existsSync,
-  mkdirSync,
-  readdirSync,
-  readFileSync,
-  rmSync,
-  writeFileSync,
-} from 'node:fs'
-import { join, relative, sep } from 'node:path'
-import { DESIGN_DOCUMENT } from '@/design/regen'
-import { renderDesignDoc } from '@/design/render'
-import { NEUTRAL_TOKENS } from '@/design/neutral'
-import { colorValue } from '@/design/tokens'
-import { parseFrontmatter, readField } from '@/indexes/frontmatter'
-import { recordDir } from '@/record-root'
-import { surfaceDir } from '@/surface-root'
-
-/**
- * The wireframes panel's creation-root spelling, used in its own empty-state
- * message and by this module's tests to seed a fixture. The panel itself
- * resolves its actual read path through `surfaceDir`, which also reads
- * `.claude/wireframes/` for a target that has not run the surface-roots
- * migration, so this constant names where a fresh file lands rather than
- * where every root's corpus necessarily sits.
- */
-export const WIREFRAME_DIR = join('canon', 'wireframes')
-
-/** Landing page for the built site the surfaces panel iframes when present. */
-const WEB_DIST = join('web', 'dist')
-const WEB_DIST_ENTRY = 'index.html'
-
-/**
- * The gallery build, generated by `bun run web:gallery` through
- * `web/gallery.config.mjs`. That config's own `srcDir` is `web/gallery-src`,
- * which `web:build`'s config never reads, so this output never reaches
- * `web/dist`.
- */
-const WEB_GALLERY_DIST = join('web', 'gallery-dist')
-const WEB_GALLERY_DIST_ENTRY = 'index.html'
-
-const IMAGE_EXTENSIONS = ['.png', '.jpg', '.jpeg', '.svg', '.webp']
-
-export interface BoardPanel {
-  readonly id: string
-  readonly title: string
-  /** Relative to the board's own output directory. */
-  readonly path: string
-}
-
-export interface BoardResult {
-  readonly ok: true
-  readonly outDir: string
-  readonly indexPath: string
-  readonly panels: readonly BoardPanel[]
-}
-
-export interface BoardRefused {
-  readonly ok: false
-  readonly reason: 'unsafe-out'
-  readonly detail: string
-}
-
-export type BoardOutcome = BoardResult | BoardRefused
-
-/**
- * Whether clearing `outDir` would take a protected directory down with it:
- * the directory equals one of them, or contains one.
- *
- * `generateBoard` clears its output directory on every run, and `--out` is
- * resolved against the caller's cwd while the panels read from `PROJECT_ROOT`.
- * Those agree in the ordinary case and diverge in exactly one: a second
- * checkout, where a global `canon` resolves `PROJECT_ROOT` to a different
- * tree than the one the caller stands in. Guarding `PROJECT_ROOT` alone misses
- * that case, since `--out .` then resolves under the caller's own cwd, which
- * shares no containment with the unrelated root the guard compared it to.
- */
-function wouldDeleteRoot(protect: readonly string[], outDir: string): boolean {
-  return protect.some((dir) => dir === outDir || dir.startsWith(outDir + sep))
-}
-
-function escapeHtml(value: string): string {
-  return value
-    .replace(/&/g, '&')
-    .replace(/</g, '&lt;')
-    .replace(/>/g, '&gt;')
-    .replace(/"/g, '&quot;')
-}
-
-const THEME_TOGGLE_BUTTON = `<button class="theme-toggle" type="button" aria-label="Switch between light and dark"><svg class="sun" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><circle cx="12" cy="12" r="4"/><path d="M12 2v2M12 20v2M4.9 4.9l1.4 1.4M17.7 17.7l1.4 1.4M2 12h2M20 12h2M4.9 19.1l1.4-1.4M17.7 6.3l1.4-1.4"/></svg><svg class="moon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M21 12.8A9 9 0 1 1 11.2 3a7 7 0 0 0 9.8 9.8z"/></svg></button>`
-
-const THEME_TOGGLE_SCRIPT = [
-  '<script>(function(){',
-  'var r=document.documentElement;',
-  'try{var s=localStorage.getItem("board-theme");if(s)r.dataset.theme=s;}catch(e){}',
-  'document.addEventListener("click",function(e){',
-  'var b=e.target.closest(".theme-toggle");if(!b)return;',
-  'var dark=r.dataset.theme==="dark"||(!r.dataset.theme&&matchMedia("(prefers-color-scheme: dark)").matches);',
-  'r.dataset.theme=dark?"light":"dark";',
-  'try{localStorage.setItem("board-theme",r.dataset.theme);}catch(e){}',
-  '});',
-  '})();</script>',
-].join('')
-
-/**
- * Highlights the nav link for whichever section fills the most of the
- * viewport, following the same largest-intersection-ratio rule the landing
- * page's own floating pill uses, so a reader scrolling through the four
- * panels sees the pill track their position rather than sitting static.
- */
-const SCROLLSPY_SCRIPT = [
-  '<script>(function(){',
-  'var links={};',
-  'document.querySelectorAll("nav a[href^=\\"#\\"]").forEach(function(a){links[a.getAttribute("href").slice(1)]=a;});',
-  'var ratios={};',
-  'var current="";',
-  'var observer=new IntersectionObserver(function(entries){',
-  'entries.forEach(function(entry){ratios[entry.target.id]=entry.isIntersecting?entry.intersectionRatio:0;});',
-  'var bestId="";',
-  'var bestRatio=0;',
-  'Object.keys(ratios).forEach(function(id){if(ratios[id]>bestRatio){bestRatio=ratios[id];bestId=id;}});',
-  'if(bestId&&bestId!==current){',
-  'if(links[current])links[current].classList.remove("active");',
-  'current=bestId;',
-  'if(links[current])links[current].classList.add("active");',
-  '}',
-  '},{threshold:[0,0.25,0.5,0.75,1]});',
-  'Object.keys(links).forEach(function(id){',
-  'var section=document.getElementById(id);',
-  'if(section)observer.observe(section);',
-  '});',
-  '})();</script>',
-].join('')
-
-/**
- * A role's toolkit value, falling back to the neutral install base's where the
- * toolkit record drops the role, so the board never restates a hex of its own.
- */
-function roleColor(role: string): string {
-  const value = colorValue(role) ?? colorValue(role, NEUTRAL_TOKENS)
-  if (value === undefined) throw new Error(`No design token declares ${role}`)
-  return value
-}
-
-/**
- * The same brand mark `src/design/render.ts` embeds in its own preview,
- * colored with the dark accent since the board's default chrome is dark
- * where that preview's is light. Duplicated here rather than imported,
- * following that module's own precedent of three independently-colored
- * copies rather than a shared icon helper for the first second caller.
- */
-function faviconLink(): string {
-  const color = roleColor('accent')
-  const href = `data:image/svg+xml,${encodeURIComponent(
-    `<svg xmlns="http://www.w3.org/2000/svg" viewBox="10 10 80 80"><path d="M34,20 L15,28 L15,72 L34,80 Z M66,20 L85,28 L85,72 L66,80 Z" fill="${color}" /><rect x="44" y="15" width="12" height="70" rx="2" fill="${color}" /></svg>`,
-  )}`
-  return `<link rel="icon" href="${href}">`
-}
-
-/** The board shell's own chrome, read off the toolkit's design source. */
-function shellChrome(): string {
-  const roles: ReadonlyArray<readonly [string, string]> = [
-    ['background', 'background'],
-    ['surface', 'surface'],
-    ['text', 'text'],
-    ['muted', 'muted'],
-    ['border', 'border'],
-    ['accent', 'accent'],
-  ]
-  const dark = roles
-    .map(([name, role]) => {
-      const value = colorValue(role)
-      return value === undefined ? '' : `  --board-${name}: ${value};`
-    })
-    .filter((line) => line !== '')
-  const light = roles
-    .map(([name, role]) => {
-      const value = colorValue(`light-${role}`)
-      return value === undefined ? '' : `  --board-${name}: ${value};`
-    })
-    .filter((line) => line !== '')
-
-  return `:root {\n${dark.join('\n')}\n}\n[data-theme='light'] {\n${light.join('\n')}\n}`
-}
-
-function shellHtml(panels: readonly BoardPanel[]): string {
-  const navLinks = panels
-    .map((panel) => `<a href="#${panel.id}">${escapeHtml(panel.title)}</a>`)
-    .join('')
-
-  const sections = panels
-    .map(
-      (panel, index) =>
-        `<section id="${panel.id}">\n<div class="eyebrow">Panel 0${index + 1}</div>\n<h2>${escapeHtml(panel.title)}</h2>\n<iframe src="${panel.path}" loading="lazy"></iframe>\n</section>`,
-    )
-    .join('\n')
-
-  return `<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8">
-${faviconLink()}
-<title>Design board</title>
-<style>
-${shellChrome()}
-* { box-sizing: border-box; }
-body { font-family: 'Noto Sans Mono', 'DejaVu Sans Mono', monospace; margin: 0; color: var(--board-text); background: var(--board-background); }
-header { padding: 2.5rem 3rem 1.5rem; }
-h1 { margin: 0 0 0.4rem; font-size: 1.6rem; font-weight: 600; letter-spacing: -0.01em; }
-.meta { color: var(--board-muted); font-size: 0.85rem; margin: 0; }
-nav { position: fixed; top: 1.25rem; left: 50%; transform: translateX(-50%); z-index: 1; display: flex; align-items: center; gap: 1.25rem; padding: 0.5rem 0.6rem 0.5rem 1.1rem; background: var(--board-surface); border: 1px solid var(--board-border); border-radius: 999px; box-shadow: 0 4px 16px rgba(0, 0, 0, 0.25); white-space: nowrap; }
-nav a { color: var(--board-muted); text-decoration: none; font-size: 0.8rem; }
-nav a:hover { color: var(--board-accent); }
-nav a.active { color: var(--board-accent); }
-.theme-toggle { display: flex; align-items: center; justify-content: center; width: 1.8rem; height: 1.8rem; background: var(--board-background); color: var(--board-text); border: 1px solid var(--board-border); border-radius: 50%; padding: 0; cursor: pointer; }
-.theme-toggle .sun { display: none; }
-.theme-toggle .moon { display: block; }
-[data-theme='light'] .theme-toggle .sun { display: block; }
-[data-theme='light'] .theme-toggle .moon { display: none; }
-.theme-toggle svg { width: 0.95rem; height: 0.95rem; }
-main { padding: 0 3rem 4.5rem; }
-section { margin-top: 2.5rem; padding-top: 1.25rem; border-top: 1px solid var(--board-border); scroll-margin-top: 4.5rem; }
-.eyebrow { color: var(--board-accent); font-size: 0.7rem; letter-spacing: 0.12em; text-transform: uppercase; margin-bottom: 0.35rem; }
-section h2 { margin: 0 0 0.75rem; font-size: 1.1rem; font-weight: 600; }
-iframe { width: 100%; height: 480px; border: 1px solid var(--board-border); border-radius: 4px; background: var(--board-surface); }
-</style>
-</head>
-<body>
-<header>
-<h1>Design board</h1>
-<p class="meta">Generated by <code>canon design board</code>. Reads from a caller-resolved root, never installed or synced.</p>
-<p class="meta">Drafting a new candidate: <code>canon:draft-and-pick</code>. Auditing a rendered surface: <code>canon:ux-audit</code>.</p>
-</header>
-<nav>${navLinks}${THEME_TOGGLE_BUTTON}</nav>
-<main>
-${sections}
-</main>
-${THEME_TOGGLE_SCRIPT}
-${SCROLLSPY_SCRIPT}
-</body>
-</html>
-`
-}
-
-function panelPage(title: string, body: string): string {
-  const accent = roleColor('light-accent')
-  const surface = roleColor('light-surface')
-  const border = roleColor('light-border')
-  const muted = roleColor('light-muted')
-  const text = roleColor('light-text')
-  const background = roleColor('light-background')
-
-  return `<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8">
-${faviconLink()}
-<title>${escapeHtml(title)}</title>
-<style>
-* { box-sizing: border-box; }
-body { font-family: 'Noto Sans Mono', 'DejaVu Sans Mono', monospace; margin: 0; padding: 1.75rem 2.25rem; color: ${text}; background: ${background}; }
-h2 { margin: 2rem 0 0.6rem; padding-top: 1.1rem; border-top: 1px solid ${border}; font-size: 1rem; font-weight: 600; }
-h2:first-of-type { margin-top: 0; padding-top: 0; border-top: none; }
-p { color: ${muted}; font-size: 0.85rem; }
-table { border-collapse: collapse; width: 100%; margin-top: 0.5rem; font-size: 0.85rem; }
-td, th { padding: 0.4rem 0.6rem; border-bottom: 1px solid ${border}; text-align: left; }
-pre { white-space: pre-wrap; background: ${surface}; border-radius: 4px; padding: 1rem; font-size: 0.8rem; }
-img { border-radius: 4px; border: 1px solid ${border}; margin-top: 0.5rem; }
-a { color: ${accent}; }
-.empty { color: ${muted}; font-style: italic; background: ${surface}; border-radius: 4px; padding: 0.9rem 1rem; }
-</style>
-</head>
-<body>
-${body}
-</body>
-</html>
-`
-}
-
-function writeTokensPanel(root: string, outDir: string): void {
-  const sourcePath = surfaceDir(root, 'DESIGN.md')
-  const dir = join(outDir, 'tokens')
-
-  if (!existsSync(sourcePath)) {
-    mkdirSync(dir, { recursive: true })
-    writeFileSync(
-      join(dir, 'index.html'),
-      panelPage(
-        'Tokens',
-        `<p class="empty">No ${DESIGN_DOCUMENT} at the repository root.</p>`,
-      ),
-    )
-    return
-  }
-
-  renderDesignDoc(sourcePath, dir)
-}
-
-interface WireframeFile {
-  readonly relPath: string
-  readonly text: string
-  readonly description: string | undefined
-}
-
-/**
- * Every wireframe under whichever root the corpus resolves at, sorted for a
- * stable render order across runs. `surfaceDir` reads `.claude/wireframes/`
- * for a target that has not run the surface-roots migration, the same
- * fallback `recordDir` already gives the surfaces panel's teach half.
- * `index.md` at any depth is a catalog rather than a wireframe and is
- * excluded. A glob emits OS-native separators, and the corpus nests one
- * level deep, so the label always reads with forward slashes regardless of
- * platform.
- */
-function listWireframes(root: string): readonly WireframeFile[] {
-  const dir = surfaceDir(root, 'wireframes')
-  if (!existsSync(dir)) return []
-
-  const glob = new Bun.Glob('**/*.md')
-  const relPaths = [...glob.scanSync({ cwd: dir })]
-    .filter((relPath) => relPath.split(sep).pop() !== 'index.md')
-    .map((relPath) => relPath.split(sep).join('/'))
-    .sort()
-
-  return relPaths.map((relPath) => {
-    const text = readFileSync(join(dir, relPath), 'utf8')
-    return {
-      relPath,
-      text,
-      description: readField(parseFrontmatter(text), 'description'),
-    }
-  })
-}
-
-function writeWireframesPanel(root: string, outDir: string): void {
-  const dir = join(outDir, 'wireframes')
-  mkdirSync(dir, { recursive: true })
-
-  const files = listWireframes(root)
-  const sections =
-    files.length === 0
-      ? `<p class="empty">No wireframe files under ${WIREFRAME_DIR}/.</p>`
-      : files
-          .map((file) => {
-            const description = file.description ?? file.relPath
-            return `<h2>${escapeHtml(file.relPath)}</h2>\n<p>${escapeHtml(description)}</p>\n<pre>${escapeHtml(file.text)}</pre>`
-          })
-          .join('\n')
-
-  writeFileSync(join(dir, 'index.html'), panelPage('Wireframes', sections))
-}
-
-/** Copies a built directory whole, filtering nothing, into the board's own tree. */
-function copyBuilt(source: string, dest: string): void {
-  rmSync(dest, { recursive: true, force: true })
-  cpSync(source, dest, { recursive: true })
-}
-
-function writeSurfacesPanel(
-  root: string,
-  outDir: string,
-  isToolkitCheckout: boolean,
-): void {
-  const dir = join(outDir, 'surfaces')
-  mkdirSync(dir, { recursive: true })
-
-  const distSource = join(root, WEB_DIST)
-  const landingBody = !isToolkitCheckout
-    ? `<p class="empty">The landing page panel only renders in this toolkit's own checkout.</p>`
-    : existsSync(join(distSource, WEB_DIST_ENTRY))
-      ? (copyBuilt(distSource, join(dir, 'landing')),
-        '<iframe src="landing/index.html" loading="lazy"></iframe>')
-      : `<p class="empty">No ${WEB_DIST}/ build. Run bun run web:build, then regenerate the board.</p>`
-
-  const teachSource = recordDir(root, 'teach')
-  const teachBody = existsSync(join(teachSource, 'index.html'))
-    ? (copyBuilt(teachSource, join(dir, 'teach')),
-      '<iframe src="teach/index.html" loading="lazy"></iframe>')
-    : `<p class="empty">${relative(root, teachSource)} is gitignored and machine-local, so this panel renders empty in a fresh clone and on CI.</p>`
-
-  writeFileSync(
-    join(dir, 'index.html'),
-    panelPage(
-      'Surfaces',
-      `<h2>Landing page</h2>\n${landingBody}\n<h2>Teach workspaces</h2>\n${teachBody}`,
-    ),
-  )
-}
-
-function writeComponentsPanel(
-  root: string,
-  outDir: string,
-  isToolkitCheckout: boolean,
-): void {
-  const dir = join(outDir, 'components')
-  mkdirSync(dir, { recursive: true })
-
-  const gallerySource = join(root, WEB_GALLERY_DIST)
-  const body = !isToolkitCheckout
-    ? `<p class="empty">The components panel only renders in this toolkit's own checkout.</p>`
-    : existsSync(join(gallerySource, WEB_GALLERY_DIST_ENTRY))
-      ? (copyBuilt(gallerySource, join(dir, 'gallery')),
-        '<iframe src="gallery/index.html" loading="lazy"></iframe>')
-      : `<p class="empty">No ${WEB_GALLERY_DIST}/ build. Run bun run web:gallery, then regenerate the board.</p>`
-
-  writeFileSync(join(dir, 'index.html'), panelPage('Components', body))
-}
-
-function isImage(name: string): boolean {
-  return IMAGE_EXTENSIONS.some((ext) => name.toLowerCase().endsWith(ext))
-}
-
-/** Every image file directly inside a pick folder, one level deep. */
-function imagesIn(dir: string): string[] {
-  return readdirSync(dir, { withFileTypes: true })
-    .filter((entry) => entry.isFile() && isImage(entry.name))
-    .map((entry) => entry.name)
-    .sort()
-}
-
-/**
- * The folder under `picks/` holding operator-supplied reference images, which
- * the References panel reads. It sits beside the captures of the choices it
- * fed, so the candidates panel steps over it rather than listing it as a pick.
- */
-const REFERENCES_FOLDER = 'references'
-
-function writeCandidatesPanel(root: string, outDir: string): void {
-  const dir = join(outDir, 'candidates')
-  mkdirSync(dir, { recursive: true })
-
-  const picksDir = recordDir(root, 'picks')
-  if (!existsSync(picksDir)) {
-    writeFileSync(
-      join(dir, 'index.html'),
-      panelPage(
-        'Past candidates',
-        `<p class="empty">No ${relative(root, picksDir)} folder yet.</p>`,
-      ),
-    )
-    return
-  }
-
-  const folders = readdirSync(picksDir, { withFileTypes: true })
-    .filter((entry) => entry.isDirectory() && entry.name !== REFERENCES_FOLDER)
-    .map((entry) => entry.name)
-    .sort()
-
-  const found: Array<{ folder: string; images: string[] }> = []
-  for (const folder of folders) {
-    const images = imagesIn(join(picksDir, folder))
-    if (images.length > 0) {
-      cpSync(join(picksDir, folder), join(dir, folder), { recursive: true })
-      found.push({ folder, images })
-    }
-  }
-
-  if (found.length === 0) {
-    writeFileSync(
-      join(dir, 'index.html'),
-      panelPage(
-        'Past candidates',
-        `<p class="empty">${folders.length} folders under ${relative(root, picksDir)}/ and none carries a draft-and-pick arm capture. The archival capture step has not run since it shipped.</p>`,
-      ),
-    )
-    return
-  }
-
-  const sections = found
-    .map(
-      ({ folder, images }) =>
-        `<h2>${escapeHtml(folder)}</h2>\n${images.map((image) => `<img src="${escapeHtml(`${folder}/${image}`)}" alt="${escapeHtml(image)}">`).join('\n')}`,
-    )
-    .join('\n')
-
-  writeFileSync(join(dir, 'index.html'), panelPage('Past candidates', sections))
-}
-
-function writeReferencesPanel(root: string, outDir: string): void {
-  const dir = join(outDir, 'references')
-  mkdirSync(dir, { recursive: true })
-
-  const referencesDir = recordDir(root, 'picks', REFERENCES_FOLDER)
-  if (!existsSync(referencesDir)) {
-    writeFileSync(
-      join(dir, 'index.html'),
-      panelPage(
-        'References',
-        `<p class="empty">No ${relative(root, referencesDir)} folder yet.</p>`,
-      ),
-    )
-    return
-  }
-
-  const images = imagesIn(referencesDir)
-  if (images.length === 0) {
-    writeFileSync(
-      join(dir, 'index.html'),
-      panelPage(
-        'References',
-        `<p class="empty">${relative(root, referencesDir)} exists but carries no image yet.</p>`,
-      ),
-    )
-    return
-  }
-
-  for (const image of images) {
-    cpSync(join(referencesDir, image), join(dir, image))
-  }
-
-  const sections = images
-    .map(
-      (image) => `<img src="${escapeHtml(image)}" alt="${escapeHtml(image)}">`,
-    )
-    .join('\n')
-
-  writeFileSync(join(dir, 'index.html'), panelPage('References', sections))
-}
-
-/**
- * Generates the board's page set into `outDir`, clearing whatever was there.
- *
- * This function is the directory's only writer, per the constraint every
- * caller shares it under: `canon serve` and a future `canon capture` pass
- * both read the result and neither may assume it exists ahead of a run.
- *
- * `cwd` is the caller's own working directory, resolved and passed in
- * explicitly rather than read here, so a test can exercise the checkout-
- * mismatch case without touching the process's real cwd.
- *
- * `isToolkitCheckout` gates the surfaces panel's landing-page half and the
- * whole components panel, both of which read this repository's own build
- * output rather than anything a target project produces.
- */
-export function generateBoard(
-  root: string,
-  outDir: string,
-  cwd: string,
-  isToolkitCheckout: boolean,
-): BoardOutcome {
-  if (wouldDeleteRoot([root, cwd], outDir)) {
-    return {
-      ok: false,
-      reason: 'unsafe-out',
-      detail: `${outDir} is or contains ${root} or ${cwd}. Refusing to clear it.`,
-    }
-  }
-
-  rmSync(outDir, { recursive: true, force: true })
-  mkdirSync(outDir, { recursive: true })
-
-  const panels: readonly BoardPanel[] = [
-    { id: 'tokens', title: 'Tokens', path: 'tokens/index.html' },
-    { id: 'surfaces', title: 'Surfaces', path: 'surfaces/index.html' },
-    { id: 'wireframes', title: 'Wireframes', path: 'wireframes/index.html' },
-    {
-      id: 'candidates',
-      title: 'Past candidates',
-      path: 'candidates/index.html',
-    },
-    { id: 'components', title: 'Components', path: 'components/index.html' },
-    { id: 'references', title: 'References', path: 'references/index.html' },
-  ]
-
-  writeTokensPanel(root, outDir)
-  writeSurfacesPanel(root, outDir, isToolkitCheckout)
-  writeWireframesPanel(root, outDir)
-  writeCandidatesPanel(root, outDir)
-  writeComponentsPanel(root, outDir, isToolkitCheckout)
-  writeReferencesPanel(root, outDir)
-
-  const indexPath = join(outDir, 'index.html')
-  writeFileSync(indexPath, shellHtml(panels))
-
-  return { ok: true, outDir, indexPath, panels }
-}