@erclx/canon 5.26.0 → 5.27.0

package/src/gate/measures.ts

@@ -6,7 +6,7 @@ import {
   CLIENT_COMMANDS,
   type ClientCommand,
   clientCommandCitationsIn,
-} from '@/client-commands'
+} from '@/gate/client-commands'
 import {
   isOverCount,
   isOverLength,
@@ -23,9 +23,10 @@ import {
   PRACTICE_SKILLS,
   SHIPPED_CORPUS,
 } from '@/claude/skills-audit'
+import { familyKeys } from '@/claude/skills-families'
 import { measureDesignProse } from '@/design/budget'
 import { DESIGN_DOCUMENT } from '@/design/regen'
-import { listRepositoryFiles } from '@/git-files'
+import { listRepositoryFiles } from '@/git/files'
 import { ceilingFindings } from '@/markdown/ceiling'
 import { resolveMarkdown } from '@/markdown/files'
 import { CHECKPOINTS } from '@/markdown/structure'
@@ -166,7 +167,7 @@ export function auditsBaselineRel(root: string): string {
 }
 
 export const CAPTURE_STAMP_FAILURE =
-  'A capture set disagrees with the stamp written when its image was captured. Run canon capture assets/captures --selector .window --out assets/evidence and commit each frame with its image and its stamp.'
+  'A capture set disagrees with the stamp written when its image was captured. Run canon capture assets/captures --selector .window --out assets/frames and commit each frame with its image and its stamp.'
 
 function parseJson(payload: string): unknown {
   try {
@@ -449,6 +450,42 @@ export const skillPracticeShape: Measure = async (ctx) => {
   }
 }
 
+/**
+ * Every shipped skill against the family vocabulary, since the landing page
+ * groups the skill map by the field and a skill without one has no group.
+ *
+ * Read in-process for the reason `skillProvenance` is. Only the shipped corpus
+ * takes a family, so a tree without `claude/skills/` reports unmeasured rather
+ * than a vacuous pass.
+ */
+export const skillFamily: Measure = async (ctx) => {
+  const report = await auditSkills(ctx.root)
+  const shipped = report.corpora.find((corpus) => corpus.rel === SHIPPED_CORPUS)
+  if (shipped === undefined) {
+    return {
+      emissions: [],
+      unmeasured: `no skill corpus at ${SHIPPED_CORPUS} resolved, so no family was read.`,
+    }
+  }
+
+  const found = report.family
+  if (found.length > 0) {
+    const where = found
+      .map((finding) => `${finding.rel} ${finding.detail}`)
+      .join(', ')
+    return {
+      emissions: [],
+      failure: `${plural(found.length, 'skill family finding')}: ${where}. Add metadata.family to the frontmatter, one of ${familyKeys().join(', ')}, matching the skill map group its row sits under.`,
+    }
+  }
+
+  return {
+    emissions: [
+      info(`${plural(shipped.skills, 'shipped skill')} declare a known family`),
+    ],
+  }
+}
+
 /**
  * Every tracked markdown document against the whole-document ceiling.
  *
@@ -982,7 +1019,7 @@ export const clientCommandCitations = async (
     return {
       emissions: [],
       failure:
-        'The client command table is empty, so the corpus was walked and nothing was looked for. Check src/client-commands.ts.',
+        'The client command table is empty, so the corpus was walked and nothing was looked for. Check src/gate/client-commands.ts.',
     }
   }
 
@@ -1023,8 +1060,8 @@ export const clientCommandCitations = async (
     ),
     failure:
       found.length === 1
-        ? `One tracked citation quotes a client command with the wrong argument. Match it against the canonical form in src/client-commands.ts, or mark the line ${CLIENT_COMMAND_MARKER}: <reason> where the argument differs on purpose.`
-        : `${found.length} tracked citations quote a client command with the wrong argument. Match each against the canonical form in src/client-commands.ts, or mark the line ${CLIENT_COMMAND_MARKER}: <reason> where the argument differs on purpose.`,
+        ? `One tracked citation quotes a client command with the wrong argument. Match it against the canonical form in src/gate/client-commands.ts, or mark the line ${CLIENT_COMMAND_MARKER}: <reason> where the argument differs on purpose.`
+        : `${found.length} tracked citations quote a client command with the wrong argument. Match each against the canonical form in src/gate/client-commands.ts, or mark the line ${CLIENT_COMMAND_MARKER}: <reason> where the argument differs on purpose.`,
   }
 }
 
@@ -1478,11 +1515,12 @@ async function collectPluginManifests(ctx: MeasureContext): Promise<string[]> {
  * A capture set spans two folders. The markup and the template beside it are
  * the authored half and sit under `assets/captures/`, while the image a
  * document points at and the stamp answering for it sit under
- * `assets/evidence/`, which is where `--out assets/evidence` sends them and where
- * `canon pr evidence` looks for a changed image.
+ * `assets/frames/`, which is where `--out assets/frames` sends them. They sit
+ * outside `assets/evidence/` so a changed marketing image is not read as dev
+ * evidence.
  */
 const CAPTURE_MARKUP_DIR = 'assets/captures'
-const CAPTURE_OUTPUT_DIR = 'assets/evidence'
+const CAPTURE_OUTPUT_DIR = 'assets/frames'
 
 /**
  * Every capture under `assets/captures/`, named by the base its three files

package/src/gate/sequencer.ts

@@ -7,7 +7,7 @@ import type {
   RunCommand,
 } from '@/gate/measures'
 import type { Check, Stage } from '@/gate/stages'
-import { gitEnv } from '@/git-env'
+import { gitEnv } from '@/git/env'
 import { PROJECT_ROOT } from '@/project-root'
 
 export type StageStatus =

package/src/gate/stages.ts

@@ -22,6 +22,7 @@ import {
   seedStandards,
   rawFieldFileReference,
   shippedReferences,
+  skillFamily,
   skillPracticeShape,
   skillProvenance,
   standardCriteria,
@@ -496,6 +497,14 @@ export const STAGES: readonly Stage[] = [
     label: 'Skill practice shape',
     checks: [{ kind: 'measure', measure: skillPracticeShape }],
   },
+  {
+    // The audit verb only reports a shipped skill with a missing or unknown
+    // family, so a target is told without failing. The landing page groups the
+    // skill map by the field, so the stage holds this corpus at zero.
+    id: 'skill-family',
+    label: 'Skill family',
+    checks: [{ kind: 'measure', measure: skillFamily }],
+  },
   {
     id: 'standard-criteria',
     label: 'Standard success criteria',

package/src/{git-files.ts → git/files.ts}

@@ -1,6 +1,6 @@
 import { $ } from 'bun'
-import { baseCandidates, isMergeBase } from '@/git-base'
-import { gitEnv } from '@/git-env'
+import { baseCandidates, isMergeBase } from '@/git/base'
+import { gitEnv } from '@/git/env'
 
 /** Runs git under `root` with the resolution variables a hook exports stripped. */
 async function git(

package/src/{git-ignore.ts → git/ignore.ts}

@@ -1,6 +1,6 @@
 import { resolve } from 'node:path'
 import { $ } from 'bun'
-import { gitEnv } from '@/git-env'
+import { gitEnv } from '@/git/env'
 
 /**
  * Reports which of `candidates` git ignores under `root`.

package/src/{worktree.ts → git/worktree.ts}

@@ -1,5 +1,5 @@
 import { $ } from 'bun'
-import { gitEnv } from '@/git-env'
+import { gitEnv } from '@/git/env'
 
 /**
  * Resolves the root of the checkout the caller is standing in, which is the

package/src/gov/citations.ts

@@ -3,7 +3,7 @@ import { readFile } from 'node:fs/promises'
 import { dirname, join, resolve } from 'node:path'
 import { $ } from 'bun'
 import { isMarked } from '@/sweep/exempt-marker'
-import { gitEnv } from '@/git-env'
+import { gitEnv } from '@/git/env'
 import { listRuleFiles } from '@/gov/payload'
 import { parseFrontmatter } from '@/indexes/frontmatter'
 import { findBacktickSpans } from '@/markdown/backticks'

package/src/gov/install.ts

@@ -1,6 +1,6 @@
 import { existsSync } from 'node:fs'
 import { basename, dirname, join, relative } from 'node:path'
-import { copyPreservingMode } from '@/copy'
+import { copyPreservingMode } from '@/sync/copy'
 
 export interface RuleSource {
   readonly rule: string

package/src/gov/superseded.ts

@@ -2,7 +2,7 @@ import { readFile } from 'node:fs/promises'
 import { join } from 'node:path'
 import { isBinary } from '@/sweep/binary'
 import { isMarked } from '@/sweep/exempt-marker'
-import { listRepositoryFiles } from '@/git-files'
+import { listRepositoryFiles } from '@/git/files'
 
 /**
  * The inline token exempting one line from this sweep, shaped on the

package/src/gov/test-order.ts

@@ -1,6 +1,6 @@
 import { execaSync } from 'execa'
-import { baseCandidates, isMergeBase } from '@/git-base'
-import { gitEnv } from '@/git-env'
+import { baseCandidates, isMergeBase } from '@/git/base'
+import { gitEnv } from '@/git/env'
 
 /**
  * The extensions this check can pair. A test sits beside its subject under one

package/src/help.ts

@@ -105,7 +105,7 @@ const EXAMPLES = [
   'canon canvas list --json',
   'canon slides render',
   'canon slides list --json',
-  'canon capture assets/captures/install.html --selector .window --out assets/evidence',
+  'canon capture assets/captures/install.html --selector .window --out assets/frames',
   'canon serve .canon/teach',
   'canon inventory focus --json',
   'canon drive http://localhost:4173 run.json --json',

package/src/hooks/post-merge.ts

@@ -1,5 +1,5 @@
 import { execa } from 'execa'
-import { gitEnv } from '@/git-env'
+import { gitEnv } from '@/git/env'
 
 /**
  * One child `canon` call. Each step runs as its own process rather than

package/src/indexes/walk.ts

@@ -1,6 +1,6 @@
 import { existsSync, statSync } from 'node:fs'
 import { dirname, resolve } from 'node:path'
-import { listIgnored } from '@/git-ignore'
+import { listIgnored } from '@/git/ignore'
 
 const INDEX_FILE = 'index.md'
 

package/src/labels/audit.ts

@@ -1,4 +1,4 @@
-import { listChangedFiles, resolveBaseRef } from '@/git-files'
+import { listChangedFiles, resolveBaseRef } from '@/git/files'
 import { type Coverage, resolveCoverage } from '@/labels/coverage'
 import { type MapRefusal, readLabelMap } from '@/labels/map'
 

package/src/markdown/files.ts

@@ -1,6 +1,6 @@
 import { existsSync, statSync } from 'node:fs'
 import { relative, resolve } from 'node:path'
-import { listRepositoryFiles } from '@/git-files'
+import { listRepositoryFiles } from '@/git/files'
 
 const MARKDOWN = /\.md$/
 

package/src/migrate/apply.ts

@@ -1,7 +1,7 @@
 import { $ } from 'bun'
 import { readFile, mkdir, rename, rmdir, writeFile } from 'node:fs/promises'
 import { dirname, join, relative } from 'node:path'
-import { gitEnv } from '@/git-env'
+import { gitEnv } from '@/git/env'
 import type { RenamePlan, RenameSource } from '@/migrate/plan'
 import { FROM_ROOT as OLD_ROOT, type RecordsPlan } from '@/migrate/records'
 

package/src/pr/bijection.ts

@@ -1,4 +1,4 @@
-import type { RenamePair } from '@/git-files'
+import type { RenamePair } from '@/git/files'
 import { extractKeyChangePaths, KEY_CHANGES, type PathClaim } from '@/pr/paths'
 
 /**

package/src/pr/evidence.ts

@@ -10,11 +10,20 @@ const SHORT_SHA_LENGTH = 7
 /** Prefix of the trailing marker this module writes and reads back. */
 const MARKER_PREFIX = '<!-- pr-evidence:'
 
-/** How the first line of a body names the branch's preview deployment. */
+/** How the address line names the branch's preview deployment. */
 const PREVIEW_PREFIX = '**Preview:**'
 
-/** How the opening block names the branch's server on the operator's own machine, under any hosted preview line. */
-export const LOCAL_PREFIX = '**Local preview:**'
+/** How the address line names the branch's server on the operator's own machine, after any hosted segment. */
+const LOCAL_PREFIX = '**Local preview:**'
+
+/** What joins the hosted and local segments on the one address line. */
+const ADDRESS_SEPARATOR = ' · '
+
+/** The heading every body opens with. */
+const EVIDENCE_HEADING = '## Evidence'
+
+/** How the visible commit line opens. */
+const BASE_PREFIX = '**Base:**'
 
 /** The heading the checklist sits under, printed outside the delimiters so a carried checklist never doubles it. */
 const CHECKLIST_HEADING = '## What to look at'
@@ -135,15 +144,15 @@ export function evidenceMarker(head: string): string {
  * pinned to a commit sha rather than a branch, so the comment keeps showing
  * what it claimed even after the branch moves.
  *
- * A preview address opens the body, and with no states it is the whole body
- * apart from the marker, so a pull request whose screenshots did not change
- * still gets one comment a later call can find and edit in place.
+ * The body opens with `## Evidence` and, under it, one address line joining
+ * whichever of the hosted and local previews apply, so the comment reads as
+ * evidence first and a preview never stands where the heading should. With no
+ * states the heading and the address are the whole body apart from the
+ * marker, so a pull request whose screenshots did not change still gets one
+ * comment a later call can find and edit in place.
  *
  * A checklist closes the body, below the comparison it annotates, so one
- * comment carries the preview address, the screenshots, and what to look at.
- *
- * A local address sits under the hosted one, never above it, so the hosted
- * line keeps the first-line position `findEvidencePreview` reads.
+ * comment carries the addresses, the screenshots, and what to look at.
  */
 export function renderEvidenceBody(
   states: readonly EvidenceState[],
@@ -154,11 +163,15 @@ export function renderEvidenceBody(
   checklist?: string,
   local?: string,
 ): string {
-  const addresses = [
+  const segments = [
     ...(preview === undefined ? [] : [`${PREVIEW_PREFIX} ${preview}`]),
     ...(local === undefined ? [] : [`${LOCAL_PREFIX} ${local}`]),
   ]
-  const opening = addresses.length === 0 ? [] : [...addresses, '']
+  const opening = [
+    EVIDENCE_HEADING,
+    '',
+    ...(segments.length === 0 ? [] : [segments.join(ADDRESS_SEPARATOR), '']),
+  ]
   const closing =
     checklist === undefined
       ? []
@@ -198,9 +211,7 @@ export function renderEvidenceBody(
 
   return [
     ...opening,
-    '## Evidence',
-    '',
-    `**Base:** \`${base.slice(0, SHORT_SHA_LENGTH)}\` · **Head:** \`${head.slice(0, SHORT_SHA_LENGTH)}\``,
+    `${BASE_PREFIX} \`${base.slice(0, SHORT_SHA_LENGTH)}\` · **Head:** \`${head.slice(0, SHORT_SHA_LENGTH)}\``,
     '',
     ...sections,
     '',
@@ -249,7 +260,8 @@ export interface OwedInput {
   readonly hasEvidenceChange: boolean
   readonly hasMarkedComment: boolean
   readonly carriedPreview: boolean
-  readonly deployWorkflowFound: boolean
+  /** A deploy workflow resolves and its push filter matches a path the pull request changed. */
+  readonly deployServesChange: boolean
 }
 
 /**
@@ -262,7 +274,7 @@ export function readOwed(input: OwedInput): OwedStep[] {
   if (input.hasEvidenceChange && !input.hasMarkedComment) owed.push('evidence')
   if (
     (input.hasMarkedComment || input.hasEvidenceChange) &&
-    input.deployWorkflowFound &&
+    input.deployServesChange &&
     !input.carriedPreview
   ) {
     owed.push('preview')
@@ -295,33 +307,78 @@ export function findEvidenceCaseCount(
   return marked === undefined ? 0 : countEvidenceCases(marked.body)
 }
 
+/** Lines that close the address region, being whatever a body carries below its addresses. */
+const REGION_ENDS = [
+  BASE_PREFIX,
+  CHECKLIST_HEADING,
+  '<details',
+  CHECKLIST_START,
+  MARKER_PREFIX,
+]
+
+export interface AddressReading {
+  /** Indexes of the lines carrying a hosted or local segment. */
+  readonly lines: readonly number[]
+  readonly preview?: string
+  readonly local?: string
+}
+
+function readSegment(segment: string, prefix: string): string | undefined {
+  return segment.startsWith(prefix)
+    ? segment.slice(prefix.length).trim() || undefined
+    : undefined
+}
+
 /**
- * The preview address the marked comment already opens with. A re-render
- * after a later push passes no address of its own, and carrying this one
- * forward keeps that edit from deleting the link a reviewer is using.
+ * Reads the addresses a body carries in the region above its commit line,
+ * checklist, comparison, or marker, matching each prefix wherever it sits in
+ * that region. One reader covers the layout that opens on the addresses as
+ * well as the one that opens on the heading, so an open pull request keeps
+ * its links across the first re-render, and a line quoted further down in a
+ * checklist is never taken for an address.
  */
-export function findEvidencePreview(
+export function readAddresses(body: string): AddressReading {
+  const lines: number[] = []
+  let preview: string | undefined
+  let local: string | undefined
+  const bodyLines = body.split('\n')
+  for (let index = 0; index < bodyLines.length; index += 1) {
+    const line = (bodyLines[index] ?? '').trim()
+    if (REGION_ENDS.some((end) => line.startsWith(end))) break
+    let isAddress = false
+    for (const segment of line.split(ADDRESS_SEPARATOR.trim())) {
+      const trimmed = segment.trim()
+      const hosted = readSegment(trimmed, PREVIEW_PREFIX)
+      const own = readSegment(trimmed, LOCAL_PREFIX)
+      if (hosted !== undefined) preview ??= hosted
+      if (own !== undefined) local ??= own
+      if (hosted !== undefined || own !== undefined) isAddress = true
+    }
+    if (isAddress) lines.push(index)
+  }
+  return {
+    lines,
+    ...(preview !== undefined && { preview }),
+    ...(local !== undefined && { local }),
+  }
+}
+
+function findMarked(
   comments: readonly EvidenceComment[],
-): string | undefined {
-  const marked = comments.find((comment) => hasEvidenceMarker(comment.body))
-  const first = marked?.body.split('\n')[0]?.trim() ?? ''
-  if (!first.startsWith(PREVIEW_PREFIX)) return undefined
-  return first.slice(PREVIEW_PREFIX.length).trim() || undefined
+): EvidenceComment | undefined {
+  return comments.find((comment) => hasEvidenceMarker(comment.body))
 }
 
 /**
- * Where the local address line sits in a body, searched only through the
- * opening block above the first blank line, so a line quoted further down in
- * a checklist is never taken for it. -1 when the block carries none.
+ * The preview address the marked comment already carries. A re-render after
+ * a later push passes no address of its own, and carrying this one forward
+ * keeps that edit from deleting the link a reviewer is using.
  */
-export function findLocalLineIndex(body: string): number {
-  const lines = body.split('\n')
-  for (let index = 0; index < lines.length; index += 1) {
-    const line = (lines[index] ?? '').trim()
-    if (line === '') return -1
-    if (line.startsWith(LOCAL_PREFIX)) return index
-  }
-  return -1
+export function findEvidencePreview(
+  comments: readonly EvidenceComment[],
+): string | undefined {
+  const marked = findMarked(comments)
+  return marked === undefined ? undefined : readAddresses(marked.body).preview
 }
 
 /**
@@ -331,12 +388,8 @@ export function findLocalLineIndex(body: string): number {
 export function findEvidenceLocal(
   comments: readonly EvidenceComment[],
 ): string | undefined {
-  const marked = comments.find((comment) => hasEvidenceMarker(comment.body))
-  if (marked === undefined) return undefined
-  const index = findLocalLineIndex(marked.body)
-  if (index === -1) return undefined
-  const line = marked.body.split('\n')[index]?.trim() ?? ''
-  return line.slice(LOCAL_PREFIX.length).trim() || undefined
+  const marked = findMarked(comments)
+  return marked === undefined ? undefined : readAddresses(marked.body).local
 }
 
 /**

package/src/pr/local.ts

@@ -1,4 +1,4 @@
-import { findLocalLineIndex } from '@/pr/evidence'
+import { readAddresses } from '@/pr/evidence'
 
 /**
  * The folder linked worktrees sit under. A listener there belongs to another
@@ -111,15 +111,21 @@ export function parseProcNetTcp(text: string): ProcSocket[] {
 }
 
 /**
- * Replaces the local address line of a marked body with `note`, leaving
- * every other byte in place so the trailing marker, the checklist delimiters,
- * and any ticked box survive. Undefined when the body carries no such line,
- * which is also what a second strip of the same body returns.
+ * Drops the address line of a marked body, hosted and local segments alike,
+ * since the close that runs this also deletes the branch's preview
+ * deployments and a link left behind points at nothing. Every other byte stays
+ * in place, so the trailing marker, the checklist delimiters, and any ticked
+ * box survive, and the blank line the address sat on is dropped with it so no
+ * gap doubles. Undefined when the body carries no address, which is also what
+ * a second drop of the same body returns.
  */
-export function stripLocalLine(body: string, note: string): string | undefined {
-  const index = findLocalLineIndex(body)
-  if (index === -1) return undefined
-  const lines = body.split('\n')
-  lines[index] = note
+export function dropAddressLine(body: string): string | undefined {
+  const { lines: indexes } = readAddresses(body)
+  const first = indexes[0]
+  if (first === undefined) return undefined
+  const dropped = new Set(indexes)
+  const lines = body.split('\n').filter((_, index) => !dropped.has(index))
+  const isGapAbove = first === 0 || (lines[first - 1] ?? '').trim() === ''
+  if (isGapAbove && (lines[first] ?? '').trim() === '') lines.splice(first, 1)
   return lines.join('\n')
 }

package/src/pr/preview.ts

@@ -16,6 +16,7 @@ const BRANCH_FENCE = '--branch=${{ github.ref_name }}'
 
 export type PreviewRefusal =
   | 'no-deploy'
+  | 'unserved'
   | 'unfenced'
   | 'no-alias'
   | 'gh-failed'
@@ -27,8 +28,77 @@ export interface WorkflowFile {
   readonly text: string
 }
 
+/**
+ * Which changed paths a deploy builds from, read off its own push trigger, so
+ * the workflow that decides when production deploys is also the one statement
+ * of what a branch preview serves.
+ */
+export type ServedFilter =
+  | { readonly kind: 'all' }
+  | { readonly kind: 'paths'; readonly patterns: readonly string[] }
+  | { readonly kind: 'paths-ignore'; readonly patterns: readonly string[] }
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value)
+}
+
+function readPatterns(value: unknown): string[] | undefined {
+  if (!Array.isArray(value)) return undefined
+  return value.filter((entry): entry is string => typeof entry === 'string')
+}
+
+/**
+ * Reads `on.push.paths` or `on.push.paths-ignore`. A workflow with neither,
+ * with no push trigger, or that does not parse serves every change, since
+ * reading unserved by mistake stops every reader asking for a preview.
+ */
+export function readServedPaths(workflowText: string): ServedFilter {
+  let parsed: unknown
+  try {
+    parsed = Bun.YAML.parse(workflowText)
+  } catch {
+    return { kind: 'all' }
+  }
+  const on = isRecord(parsed) ? parsed.on : undefined
+  const push = isRecord(on) ? on.push : undefined
+  if (!isRecord(push)) return { kind: 'all' }
+
+  const paths = readPatterns(push.paths)
+  if (paths !== undefined) return { kind: 'paths', patterns: paths }
+  const ignored = readPatterns(push['paths-ignore'])
+  if (ignored !== undefined) return { kind: 'paths-ignore', patterns: ignored }
+  return { kind: 'all' }
+}
+
+/** Whether the patterns match a path, applied in order so a later `!` pattern overrides an earlier one, as GitHub applies them. */
+function matchesInOrder(patterns: readonly string[], path: string): boolean {
+  let isMatched = false
+  for (const pattern of patterns) {
+    const isNegated = pattern.startsWith('!')
+    const glob = new Bun.Glob(isNegated ? pattern.slice(1) : pattern)
+    if (glob.match(path)) isMatched = !isNegated
+  }
+  return isMatched
+}
+
+/** Whether a push carrying `changedPaths` would run the deploy, by the filter its trigger declares. */
+export function servesChange(
+  filter: ServedFilter,
+  changedPaths: readonly string[],
+): boolean {
+  if (filter.kind === 'all') return true
+  if (filter.kind === 'paths') {
+    return changedPaths.some((path) => matchesInOrder(filter.patterns, path))
+  }
+  return changedPaths.some((path) => !matchesInOrder(filter.patterns, path))
+}
+
 export type WorkflowPick =
-  | { readonly kind: 'found'; readonly path: string }
+  | {
+      readonly kind: 'found'
+      readonly path: string
+      readonly filter: ServedFilter
+    }
   | {
       readonly kind: 'refused'
       readonly reason: 'no-deploy' | 'unfenced' | 'no-alias'
@@ -36,6 +106,7 @@ export type WorkflowPick =
 
 interface WorkflowShape {
   readonly path: string
+  readonly text: string
   readonly deployLines: readonly string[]
   readonly isDispatchable: boolean
   readonly hasMarker: boolean
@@ -51,6 +122,7 @@ function readShape(file: WorkflowFile): WorkflowShape {
     .filter((line) => !line.trimStart().startsWith('#'))
   return {
     path: file.path,
+    text: file.text,
     deployLines: lines.filter((line) => line.includes('pages deploy')),
     isDispatchable: lines.some((line) => /^\s*workflow_dispatch:/.test(line)),
     hasMarker: lines.some((line) => line.includes(ALIAS_MARKER)),
@@ -80,7 +152,11 @@ export function findDeployWorkflow(
   const marked = fenced.find((shape) => shape.hasMarker)
   if (marked === undefined) return { kind: 'refused', reason: 'no-alias' }
 
-  return { kind: 'found', path: marked.path }
+  return {
+    kind: 'found',
+    path: marked.path,
+    filter: readServedPaths(marked.text),
+  }
 }
 
 export function readPreviewAlias(log: string): string | undefined {

package/src/records/backup.ts

@@ -1,7 +1,7 @@
 import { existsSync, lstatSync, readdirSync } from 'node:fs'
 import { basename, join, relative, resolve } from 'node:path'
 import { $ } from 'bun'
-import { gitEnv } from '@/git-env'
+import { gitEnv } from '@/git/env'
 import { RECORD_ROOTS, recordRoot, SCRATCH } from '@/record-root'
 import { type BlockedPath, guardPayload } from '@/records/push-guard'
 

package/src/records/stale-canonical.ts

@@ -2,7 +2,7 @@ import { $ } from 'bun'
 import { existsSync } from 'node:fs'
 import { readFile } from 'node:fs/promises'
 import { relative } from 'node:path'
-import { gitEnv } from '@/git-env'
+import { gitEnv } from '@/git/env'
 import { readReviewed } from '@/records/stale'
 import { surfaceDir } from '@/surface-root'