@erclx/canon 5.31.0 → 5.33.0

package/src/context/requirements.ts

@@ -1,17 +1,26 @@
 import { readFile } from 'node:fs/promises'
 import { join, relative } from 'node:path'
-import { wordCount } from '@/context/architecture'
 import { bodyLines } from '@/markdown/scan'
 import { surfaceDir } from '@/roots/surface'
 
 /**
  * The record this measures, relative to `root`, resolved at either surface
- * root for the reason `architectureRel` gives.
+ * root, since a project that has moved holds it under either.
  */
 export function requirementsRel(root: string): string {
   return relative(root, surfaceDir(root, 'REQUIREMENTS.md'))
 }
 
+/**
+ * Counts whitespace-delimited tokens, the unit the record's word cap is stated
+ * in. A code span counts as the tokens it holds, so a line citing a long path
+ * pays for it the way a reader does. A caller gating on the count hands in
+ * prose with fenced lines already dropped.
+ */
+export function wordCount(text: string): number {
+  return text.match(/\S+/g)?.length ?? 0
+}
+
 export interface RequirementsReport {
   readonly rel: string
   /** The whole record's word count, frontmatter left out. */
@@ -43,8 +52,8 @@ function isMissing(error: unknown): boolean {
 /**
  * Measures the record, or reports nothing when the project carries none.
  *
- * Absent rather than zeroed, for the reason `measureArchitecture` gives, and a
- * record present and unreadable propagates the same way.
+ * Absent rather than zeroed, so a project with no record is never told it holds an
+ * empty one, and a record present and unreadable propagates.
  */
 export async function measureRequirements(
   root: string,

package/src/counts/scan.ts

@@ -35,8 +35,8 @@ export type CountsReport =
 
 /**
  * A calendar date, which reads a sentence as a historical record rather than
- * a live claim about the tree. `canon/ARCHITECTURE.md` and the context
- * entries carry a figure this way deliberately, and every one of them stays
+ * a live claim about the tree. The context entries
+ * carry a figure this way deliberately, and every one of them stays
  * correct forever, so a sentence carrying one is read past rather than
  * matched.
  */
@@ -142,7 +142,7 @@ const QUANTIFIERS = ['all']
  * match at all. No syntactic rule tells a qualifier that narrows a catalog
  * from one that only restates it, and the sentence was true when written, so
  * the fix was not a narrower matcher: the clause was dated as a past state,
- * the way `canon/ARCHITECTURE.md` dates its own figures, which is the class
+ * the way a context entry dates its own figures, which is the class
  * the date exclusion below already reads past.
  */
 const ARTICLES = ['the', 'a', 'an']

package/src/design/budget.ts

@@ -1,5 +1,5 @@
 /**
- * The prose budget `standards/design.md` sets for a design record, and the
+ * The prose budget `claude/skills/canvas-board/references/design.md` sets for a design record, and the
  * counter the `design` gate stage reads it through.
  *
  * The limits live here and in the standard, never in the stage, so the stage

package/src/design/components.ts

@@ -15,7 +15,7 @@
  * `buildDesignCss`'s `components` option, which is what widening that option
  * from a boolean to `boolean | readonly Component[]` bought.
  *
- * It does not live in `canon/DESIGN.md`. `standards/design.md` keeps CSS class
+ * It does not live in `canon/DESIGN.md`. `claude/skills/canvas-board/references/design.md` keeps CSS class
  * names out of that record and says they live in code, which is here.
  */
 
@@ -250,8 +250,8 @@ const TEACH_CHROME: Component = {
     'navigation shared by every teach page. Recovered from two gitignored',
     'course.css files that predate a regression that dropped this layer from the',
     "generator, and rewritten onto this module's tokens rather than the",
-    'incompatible palette they carried. See canon/wireframes/teach/chrome.md for',
-    'the shape.',
+    'incompatible palette they carried. See canon/context/features/teach/chrome.md',
+    'for the shape.',
   ].join('\n   '),
   reads: [
     '--color-background',

package/src/design/document.ts

@@ -94,7 +94,7 @@ function borderRows(tokens: readonly BorderToken[]): string[][] {
  * and every reason behind them lives in the entry.
  */
 const LEAD = [
-  'Authoring guidance: `standards/design.md`. Rendered from `src/design/tokens.ts` by `canon design regen`, so edit the module and never this file.',
+  'Authoring guidance: `claude/skills/canvas-board/references/design.md`. Rendered from `src/design/tokens.ts` by `canon design regen`, so edit the module and never this file.',
   'Why each value was chosen lives in `canon/context/design/tokens.md`.',
 ].join(' ')
 

package/src/design/regen.ts

@@ -16,7 +16,7 @@ import { NEUTRAL_TOKENS } from '@/design/neutral'
  * gate stage is what keeps silently out of it.
  */
 
-/** The rendered record, at the path `standards/design.md` fixes for it. */
+/** The rendered record, at the path `claude/skills/canvas-board/references/design.md` fixes for it. */
 export const DESIGN_DOCUMENT = join('canon', 'DESIGN.md')
 
 /**

package/src/design/render.ts

@@ -105,7 +105,7 @@ interface Confidence {
 }
 
 /**
- * The columns the confidence ratio reads, fixed by `standards/design.md`. The
+ * The columns the confidence ratio reads, fixed by `claude/skills/canvas-board/references/design.md`. The
  * first column of each table names its row, and `Multiplier` and `When used`
  * restate what the row already carries, so none of them is something a source
  * could anchor and none belongs in the denominator.

package/src/feedback/body.ts

@@ -1,5 +1,3 @@
-const SLUG_FALLBACK = 'general'
-const SLUG_MAX_LENGTH = 40
 const TITLE_MAX_LENGTH = 72
 
 /**
@@ -79,16 +77,6 @@ function surfaceField(body: string): string | undefined {
   return readField(body, 'Surface')?.split('\n')[0]?.trim()
 }
 
-export function deriveSlug(body: string): string {
-  const slug = (surfaceField(body) ?? '')
-    .toLowerCase()
-    .replace(/[^a-z0-9]+/g, '-')
-    .replace(/^-+|-+$/g, '')
-    .slice(0, SLUG_MAX_LENGTH)
-    .replace(/-+$/g, '')
-  return slug || SLUG_FALLBACK
-}
-
 /**
  * Each label must exist on the toolkit repository, because `gh issue create`
  * refuses the whole issue on an unknown label rather than dropping it.

package/src/gate/measures.ts

@@ -7,14 +7,6 @@ import {
   type ClientCommand,
   clientCommandCitationsIn,
 } from '@/gate/client-commands'
-import {
-  isOverCount,
-  isOverLength,
-  isOverRisks,
-  measureArchitecture,
-  missingRevisit,
-  overWords,
-} from '@/context/architecture'
 import { isOverWordCap, measureRequirements } from '@/context/requirements'
 import {
   auditSkills,
@@ -253,62 +245,19 @@ function citedPaths(record: { paths?: unknown } | undefined): string[] {
 }
 
 /**
- * The canonical records against the caps each states for itself. The
- * architecture record carries five: the line ceiling its allowances derive,
- * the entry cap, the revisit sentence closing each decision, the words a
- * decision may hold, and the bullets its Risks section may hold. The
- * requirements record carries one, its own word count.
+ * The requirements record against the word cap it states for itself.
  *
  * Read in-process rather than through `context audit`, whose one gating stage
- * here runs `--citations-only` and never opens either record, which is why
- * the line ceiling went unenforced by `bun run check` until this stage. A
- * project carrying neither record, or records stating none of the caps,
- * passes, since each rule belongs to the record rather than to the toolkit.
+ * here runs `--citations-only` and never opens the record. A project carrying
+ * no record, or a record stating no cap, passes, since the rule belongs to the
+ * record rather than to the toolkit.
  */
 export const canonicalRecords: Measure = async (ctx) => {
-  const [report, requirements] = await Promise.all([
-    measureArchitecture(ctx.root),
-    measureRequirements(ctx.root),
-  ])
+  const requirements = await measureRequirements(ctx.root)
 
   const failures: string[] = []
   const emissions: Emission[] = []
 
-  if (report === undefined) {
-    emissions.push(info('No architecture record to measure'))
-  } else {
-    const decisions = report.decisions.length
-    const lackingRevisit = missingRevisit(report)
-    const longDecisions = overWords(report)
-    failures.push(
-      ...[
-        isOverCount(report) &&
-          `${decisions} decisions against a cap of ${report.entryCap}. Merge two or retire one in ${report.rel}, never compress.`,
-        isOverLength(report) &&
-          `${report.lines} lines against a ceiling of ${report.ceiling} in ${report.rel}.`,
-        lackingRevisit.length > 0 &&
-          `No revisit sentence in ${lackingRevisit.map((heading) => `"${heading}"`).join(', ')}. Close each with one opening "Revisit when" in ${report.rel}.`,
-        longDecisions.length > 0 &&
-          `${longDecisions.map((entry) => `"${entry.heading}" (${entry.words})`).join(', ')} past ${report.wordCap} words a decision in ${report.rel}. Cut the reasoning to the trade, never split one decision across two headings.`,
-        isOverRisks(report) &&
-          `${report.risksBullets} risk bullets against a cap of ${report.riskCap} in ${report.rel}. Drop what is no longer open.`,
-      ].filter((failure): failure is string => typeof failure === 'string'),
-    )
-
-    const cap =
-      report.entryCap === undefined
-        ? 'no entry cap stated'
-        : `a cap of ${report.entryCap}`
-    emissions.push(info(`${decisions} decisions against ${cap}`))
-    if (report.riskCap !== undefined && report.risksBullets === undefined) {
-      emissions.push(
-        info(
-          `No Risks section to count against a cap of ${report.riskCap} in ${report.rel}`,
-        ),
-      )
-    }
-  }
-
   if (requirements === undefined) {
     emissions.push(info('No requirements record to measure'))
   } else if (isOverWordCap(requirements)) {
@@ -368,7 +317,7 @@ export const designProse: Measure = async (ctx) => {
   if (failures.length > 0) {
     return {
       emissions: [],
-      failure: `${failures.join(' ')} Cut to the budget in standards/design.md, moving the why to the context entry.`,
+      failure: `${failures.join(' ')} Cut to the budget in claude/skills/canvas-board/references/design.md, moving the why to the context entry.`,
     }
   }
   if (emissions.length === 0)
@@ -415,7 +364,7 @@ export const skillProvenance: Measure = async (ctx) => {
 /**
  * Every listed practice skill against the closing sections, and every skill on
  * the wider ledger list against the ledger, both of which
- * `standards/skill-practice.md` requires.
+ * `claude/skills/create-skill/references/skill-practice.md` requires.
  *
  * Read in-process for the reason `skillProvenance` is, so the verb keeps its
  * missing-requirement-only exit. The list names shipped folders alone, so a

package/src/gate/sequencer.ts

@@ -1,3 +1,5 @@
+import { readFileSync } from 'node:fs'
+import { availableParallelism } from 'node:os'
 import { join } from 'node:path'
 import { execa } from 'execa'
 import type {
@@ -44,6 +46,28 @@ export interface StageResult {
   readonly queuedMs?: number
 }
 
+export interface LoadReading {
+  /** The 1-minute load average. */
+  readonly loadAverage: number
+  readonly cores: number
+}
+
+/**
+ * Reads the 1-minute load average from `/proc/loadavg`. A platform without
+ * it, as macOS, has no reading to give, so this answers `undefined` rather
+ * than throwing into a stage that has already failed.
+ */
+export function readProcLoad(): LoadReading | undefined {
+  try {
+    const first = readFileSync('/proc/loadavg', 'utf8').split(' ')[0]
+    const loadAverage = Number.parseFloat(first)
+    if (!Number.isFinite(loadAverage)) return undefined
+    return { loadAverage, cores: availableParallelism() }
+  } catch {
+    return undefined
+  }
+}
+
 export interface GateContext extends MeasureContext {
   /** Whether the format stage writes or checks. */
   readonly write: boolean
@@ -58,6 +82,11 @@ export interface GateContext extends MeasureContext {
    * wait and reads as a hung suite.
    */
   readonly onQueue?: (label: string, holder: LockHolder) => void
+  /**
+   * Reads the machine load a failed locked stage ran under. Defaults to
+   * `/proc/loadavg`, and answers `undefined` where there is none.
+   */
+  readonly readLoad?: () => LoadReading | undefined
 }
 
 export interface ChangedSet {
@@ -195,7 +224,11 @@ async function executeStage(
         ]
 
   try {
-    const outcome = await runChecks(stage, ctx, queued)
+    const outcome = withLoadLine(
+      await runChecks(stage, ctx, queued),
+      stage,
+      ctx,
+    )
     return held.waitedOn === undefined
       ? outcome
       : { ...outcome, queuedMs: held.waitedMs }
@@ -204,6 +237,28 @@ async function executeStage(
   }
 }
 
+/**
+ * The lock serializes suites and does nothing about the rest of the box, so a
+ * starved spawn test and a real failure read alike. The load beside the
+ * failure is what lets a report tell them apart.
+ */
+function withLoadLine(
+  outcome: StageOutcome,
+  stage: Stage,
+  ctx: GateContext,
+): StageOutcome {
+  if (outcome.status !== 'failed') return outcome
+
+  const reading = (ctx.readLoad ?? readProcLoad)()
+  if (reading === undefined) return outcome
+
+  const text = `Load average ${reading.loadAverage} on ${reading.cores} cores when the ${stage.label} stage failed`
+  return {
+    ...outcome,
+    emissions: [...outcome.emissions, { kind: 'info', text }],
+  }
+}
+
 async function runChecks(
   stage: Stage,
   ctx: GateContext,

package/src/gate/stages.ts

@@ -198,17 +198,11 @@ export const STAGES: readonly Stage[] = [
         argv: ['gov', 'regen'],
         failure: 'Consumed-copy regen failed',
       },
-      {
-        kind: 'drift',
-        pathspec: 'governance/rules/standards',
-        failure:
-          'Standard-pointer rules drifted. Run bun run check and commit governance/rules/standards and .claude/rules.',
-      },
       {
         kind: 'drift',
         pathspec: '.claude/rules',
         failure:
-          'Consumed copies drifted. Run bun run check and commit governance/rules/standards and .claude/rules.',
+          'Consumed copies drifted. Run bun run check and commit .claude/rules.',
       },
     ],
     success: 'Consumed copies clean',

package/src/gov/citations.ts

@@ -6,6 +6,7 @@ import { isMarked } from '@/sweep/exempt-marker'
 import { gitEnv } from '@/git/env'
 import { listRuleFiles } from '@/gov/payload'
 import { parseFrontmatter } from '@/indexes/frontmatter'
+import { movedStandardPath } from '@/standards/read'
 import { findBacktickSpans } from '@/markdown/backticks'
 
 /**
@@ -177,8 +178,9 @@ export function classifySpan(span: string): CitationForm | undefined {
  *
  * A standard name takes the authoring root alone, matching `standardRoots` in
  * `@/standards/read`, which reads `standards/` at the working root and then the
- * package corpus. This verb refuses a tree holding no rule corpus, so it runs
- * only where those two roots are one directory. `internal/standards/` is
+ * package corpus, plus the skill reference a retired name moved to. This verb
+ * refuses a tree holding no rule corpus, so it runs only where those two roots
+ * are one directory. `internal/standards/` is
  * deliberately absent: `canon standards <name>` never reaches it, so admitting it
  * here would pass a citation that refuses for the session opening it, which is a
  * gate failing open.
@@ -191,7 +193,11 @@ function candidatesFor(
   cited: string,
   ruleFile: string,
 ): string[] {
-  if (form === 'standard') return [join('standards', `${cited}.md`)]
+  if (form === 'standard') {
+    const moved = movedStandardPath(cited)
+
+    return [join('standards', `${cited}.md`), ...(moved ? [moved] : [])]
+  }
   if (form === 'sibling') return [join(dirname(ruleFile), cited)]
   return [cited]
 }

package/src/gov/install.ts

@@ -66,9 +66,8 @@ export function installedRuleNames(
 }
 
 /**
- * Mirrors `rule_subdir` in `scripts/lib/gov.sh`, which stays in bash for the
- * sandbox loops. A rule sitting directly under `governance/rules/` has no
- * subdirectory and installs flat.
+ * A rule sitting directly under `governance/rules/` has no subdirectory and
+ * installs flat.
  */
 export function ruleSubdir(src: string, rulesRoot: string): string {
   const subdir = dirname(relative(rulesRoot, src))

package/src/gov/restated.ts

@@ -36,8 +36,8 @@ const SKILL_ROOTS: readonly string[] = [SHIPPED_SKILLS_REL, PROJECT_SKILLS_REL]
 /**
  * Path pairs whose duplication is deliberate and already recorded.
  *
- * The seed is authored from the always-loaded file and `seed-sync`
- * exists to reconcile the two, so a bullet appearing in both is the design
+ * The seed is authored from the always-loaded file and a hand merge
+ * reconciles the two, so a bullet appearing in both is the design
  * rather than a defect. Excluding by pair rather than by content is what the
  * plan settled on: the duplication is a location fact this repository already
  * records, and a content test would have to rediscover it on every run.
@@ -611,7 +611,7 @@ function authorityFor(
   if (candidate.kind === 'seed') {
     return {
       authority: 'claude-md',
-      reason: `${INSTRUCTIONS_REL} is authored first and the seed carries it to a target, so an edit starts there and reaches the seed through seed-sync`,
+      reason: `${INSTRUCTIONS_REL} is authored first and the seed carries it to a target, so an edit starts there and reaches the seed through a hand merge`,
     }
   }
 

package/src/gov/stacks.ts

@@ -79,7 +79,7 @@ export function loadGovStack(
  * shape rather than two the caller has to tell apart.
  *
  * The directory wins over a rule file of the same name. They cannot collide
- * while `standards/rule.md` requires a numeric prefix on a rule slug, since a
+ * while `claude/skills/create-rule/references/rule.md` requires a numeric prefix on a rule slug, since a
  * band folder carries none.
  */
 export function expandStackEntry(root: string, entry: string): string[] {

package/src/hooks/post-merge.ts

@@ -163,7 +163,7 @@ function archiveLines(
   }
   return (
     `\n📋 Task not archived for #${number}: ${text(fields, 'message') ?? reason}\n` +
-    'Run /task-board to resolve it by hand.\n\n'
+    `Run /task-complete archive #${number} to resolve it by hand.\n\n`
   )
 }
 

package/src/labels/apply.ts

@@ -0,0 +1,39 @@
+/** What a label apply decided to do, before any write. */
+export interface LabelDiff {
+  /** Earned labels the pull request lacks and the remote carries, so addable. */
+  readonly toAdd: readonly string[]
+  /** Every earned label the pull request lacks, whether or not it is addable. */
+  readonly owed: readonly string[]
+  /** Owed labels the remote does not carry, which are reported and never created. */
+  readonly missingOnRemote: readonly string[]
+}
+
+/**
+ * Diffs what a branch earns against what its pull request already carries and
+ * what the remote can attach.
+ *
+ * The diff only adds. A label on the pull request that the map does not earn
+ * is a person's decision and never appears here, so nothing in the result can
+ * be turned into a removal. Order follows `earned`, which the map declares, so
+ * two runs over one branch produce one list.
+ *
+ * A label the remote lacks is separated from the addable set rather than
+ * dropped, because the REST add endpoint creates any label it is handed and
+ * that write to the repository settings is not the map's call.
+ */
+export function diffLabels(
+  earned: readonly string[],
+  present: readonly string[],
+  remote: readonly string[],
+): LabelDiff {
+  const has = new Set(present)
+  const carried = new Set(remote)
+
+  const owed = earned.filter((label) => !has.has(label))
+
+  return {
+    owed,
+    toAdd: owed.filter((label) => carried.has(label)),
+    missingOnRemote: owed.filter((label) => !carried.has(label)),
+  }
+}

package/src/labels/format.ts

@@ -1,5 +1,5 @@
 /**
- * Which rule in `standards/pr.md`'s `## Title` section a title breaks.
+ * Which rule in `claude/skills/git-pr/references/pr.md`'s `## Title` section a title breaks.
  *
  * `structure` stands alone rather than beside the other three, because a
  * title failing the shape match has no parsed `<type>`, `<scope>`, or
@@ -28,9 +28,9 @@ const LEADING_LETTERS = /^[A-Za-z]+/
 
 /**
  * Grades a pull request title, or a commit subject sharing the same form,
- * against `standards/pr.md`'s structure, casing, and length rules.
+ * against `claude/skills/git-pr/references/pr.md`'s structure, casing, and length rules.
  *
- * Does not check `<type>` against `standards/commit.md`'s fixed enum.
+ * Does not check `<type>` against `claude/skills/git-commit/references/commit.md`'s fixed enum.
  * `pr.md`'s own `## Title` section states format, casing, and length only,
  * and names no type list of its own to check against.
  */

package/src/labels/phase.ts

@@ -3,7 +3,7 @@ import { RECORD_ENTRIES, RECORD_ROOTS } from '@/roots/record'
 import type { RecordRoot } from '@/roots/record'
 
 /**
- * The two version namespaces `standards/versioning.md` keeps apart, and why a
+ * The two version namespaces `claude/skills/git-commit/references/versioning.md` keeps apart, and why a
  * pull request cannot be sorted between them by pattern alone.
  *
  * A phase label (`v68.5`) and a semver reference (`v3.44`) both match
@@ -186,7 +186,7 @@ const RELEASE_TITLE_PREFIX = 'chore(main): release '
  * phase label past this check. Together they name release-please's own act of
  * opening the pull request, which nothing else on the remote can perform.
  */
-function isReleasePullRequest(input: PhaseScanInput): boolean {
+export function isReleasePullRequest(input: PhaseScanInput): boolean {
   return (
     input.headRefName.startsWith(RELEASE_HEAD_PREFIX) &&
     input.title.startsWith(RELEASE_TITLE_PREFIX)
@@ -265,7 +265,7 @@ function sessionLinks(text: string): string[] {
  * The split runs on the pull request rather than on each token. A release
  * pull request's tokens are read as the semver references its generated body
  * legitimately carries, and every other pull request's tokens are read as
- * leaked phase labels, which is what `standards/versioning.md` names the
+ * leaked phase labels, which is what `claude/skills/git-commit/references/versioning.md` names the
  * defect this exists to catch.
  *
  * A release pull request reports no board reference either, and the ground is

package/src/labels/sections.ts

@@ -0,0 +1,43 @@
+import { linesOutsideFences } from '@/markdown/scan'
+
+/**
+ * The closed list of section headings a pull request body may carry, in the
+ * sentence case `claude/skills/git-pr/references/pr.md` states.
+ */
+const ALLOWED_HEADINGS: readonly string[] = [
+  '## Summary',
+  '## Key changes',
+  '## Technical context',
+  '## Testing',
+  '## For the reviewer',
+]
+
+const REQUIRED_HEADINGS: readonly string[] = ['## Summary', '## Key changes']
+
+const H2 = /^##\s/
+
+export interface SectionsCheck {
+  /** Level-two headings the closed list does not hold, as written. */
+  readonly outside: readonly string[]
+  /** Required headings the body never carries. */
+  readonly missing: readonly string[]
+}
+
+/**
+ * Grades the level-two headings of a pull request body against the closed list.
+ *
+ * The comparison is exact, so `## Key Changes` fails. `canon pr key-changes`
+ * reads its section case-insensitively, which keeps a body posted before the
+ * rename parsing while the scan holds new text to one spelling. Subheadings and
+ * fenced lines are not headings, so the list governs level two alone.
+ */
+export function checkSections(body: string): SectionsCheck {
+  const headings = linesOutsideFences(body)
+    .map((line) => line.trim())
+    .filter((line) => H2.test(line))
+
+  return {
+    outside: headings.filter((heading) => !ALLOWED_HEADINGS.includes(heading)),
+    missing: REQUIRED_HEADINGS.filter((heading) => !headings.includes(heading)),
+  }
+}

package/src/markdown/structure.ts

@@ -6,7 +6,7 @@ const HEADING = /^#{1,6}\s/
  * A section marker holding its line alone, which is the signpost a document
  * uses where its own template asks for bold rather than a heading.
  *
- * `standards/plan.md` gives `## Summary` a heading and marks the four sections
+ * `claude/skills/plan-feature/references/plan.md` gives `## Summary` a heading and marks the four sections
  * below it this way, so a conforming plan read as one run from its first line
  * to its last and all seven live plans reported past the depth checkpoint, at
  * 106 to 166 rendered lines. A measure firing on a whole corpus says nothing
@@ -659,7 +659,7 @@ function measureParagraph(block: readonly BodyLine[]): CadenceFinding {
  *
  * `compromise` reported 2 percent. It tags a fronted past participle as a
  * finite past-tense verb, so all twelve of those sentences in
- * `.claude/ARCHITECTURE.md` read as carrying one, eleven opening `Measured at`
+ * the repository's architecture record at that commit read as carrying one, eleven opening `Measured at`
  * and one `Overturned by`, which is the exact shape the measure exists to
  * catch. It is not even consistent with itself there: `Measured at` tags a verb
  * and `Measured against` tags an adjective.

package/src/migrate/record-layout.ts

@@ -346,9 +346,9 @@ function entriesOf(dir: string, isDirectory: boolean): string[] {
 }
 
 /**
- * What `draft-and-pick` Step 6 and `sketch-design` write into the folder they
- * archive a choice to: a capture per arm, named `arm-<id>`, and a design
- * handoff. A folder carrying neither is evidence.
+ * What `draft-and-pick` Step 6 writes into the folder it archives a choice to:
+ * a capture per canvas frame, named `arm-<id>`. A design handoff marks a pick
+ * folder an earlier skill wrote. A folder carrying neither is evidence.
  */
 const PICK_FILE = /^(?:arm-[^.]+\..+|design-handoff\.md)$/
 

package/src/migrate/skill-names.ts

@@ -99,6 +99,25 @@ export const SKILL_NAME_MAP: Readonly<Record<string, string>> = {
   'draft-diagram': 'draft-figure',
 }
 
+/**
+ * The skills that took a two-word name from a single word, which the map above
+ * may not carry as a bare key.
+ *
+ * `canvas` became `canvas-board`, and a bare `canvas` key would rewrite every
+ * unrelated use of the word: `canon canvas serve`, `src/canvas/`,
+ * `.canon/canvas/`, and the `internal-canvas` skill. So each row keys on a form
+ * only the skill spells, a plugin invocation or a skill folder path. The tail
+ * guard rejects a following `-`, so a rewritten `canon:canvas-board` is not
+ * matched again.
+ *
+ * What this leaves behind is a prose mention of the skill by its bare name,
+ * which has no token for a sweep to find and is fixed by hand.
+ */
+export const SKILL_CITATION_MAP: Readonly<Record<string, string>> = {
+  'canon:canvas': 'canon:canvas-board',
+  'skills/canvas': 'skills/canvas-board',
+}
+
 /**
  * The skill rename.
  *
@@ -132,7 +151,7 @@ export const SKILL_NAME_MAP: Readonly<Record<string, string>> = {
  * listing every sweep reads never reaches them.
  */
 export const SKILL_NAME_RULES: RenameRules = defineRenameRules({
-  replacements: SKILL_NAME_MAP,
+  replacements: { ...SKILL_NAME_MAP, ...SKILL_CITATION_MAP },
   keepMarker: 'canon-keep-retired',
   wholeToken: true,
   excludedPrefixes: ['scripts/eval/result-'],