@erclx/canon 5.37.0 → 5.39.0

package/src/markdown/structure.ts

@@ -1,6 +1,6 @@
 import { type BodyLine, visibleText } from '@/markdown/scan'
 
-const HEADING = /^#{1,6}\s/
+export const HEADING = /^#{1,6}\s/
 
 /**
  * A section marker holding its line alone, which is the signpost a document
@@ -65,10 +65,10 @@ const BOLD_LINE = /^\*\*([^*]+)\*\*\s*$/
 const SPAN_LABEL = /^`[^`]+`$/
 const MARKER_WIDTH = 20
 
-const LIST_ITEM = /^(\s*)([-*+]|\d+\.)\s+/
-const TABLE_ROW = /^\s*\|/
+export const LIST_ITEM = /^(\s*)([-*+]|\d+\.)\s+/
+export const TABLE_ROW = /^\s*\|/
 const TABLE_SEPARATOR = /^\s*\|[\s:|-]+\|\s*$/
-const BLOCKQUOTE = /^\s*>/
+export const BLOCKQUOTE = /^\s*>/
 
 /**
  * A sentence ends on terminal punctuation followed by the start of another
@@ -86,7 +86,7 @@ const BLOCKQUOTE = /^\s*>/
  * follows, and the price is that a span opening a fragment mid-paragraph reads
  * as a sentence start.
  */
-const SENTENCE_END = /[.!?]["'’”)\]]*(?=\s+(?:["'“(\[]*[A-Z]|`)|\s*$)/g
+const SENTENCE_END = /[.!?]["'’”)\]]*(?=\s+(?:["'“([]*[A-Z]|`)|\s*$)/g
 
 /**
  * Checkpoints the structural measures run against.
@@ -109,8 +109,8 @@ const SENTENCE_END = /[.!?]["'’”)\]]*(?=\s+(?:["'“(\[]*[A-Z]|`)|\s*$)/g
 export const CHECKPOINTS = {
   run: 40,
   peerBullet: 130,
-  bullet: 250,
-  paragraph: 700,
+  bullet: 200,
+  paragraph: 350,
   sentences: 4,
   renderWidth: 80,
   cadence: 3,
@@ -336,7 +336,7 @@ function isTableRun(run: readonly BodyLine[]): boolean {
  * what lets a linked path reach the span test at all, since the markup around
  * it would fail the pattern the destination is still attached.
  */
-function isSectionMarker(text: string): boolean {
+export function isSectionMarker(text: string): boolean {
   const marker = text.match(BOLD_LINE)
   if (!marker) return false
 
@@ -438,11 +438,7 @@ interface FoldedBullet extends BulletFinding {
   readonly text: string
 }
 
-/**
- * The walk `heavyBullets` reports from, keeping each past-checkpoint bullet's
- * text so `longBlocks` can ask whether a base copy of it exists. One walk
- * rather than two, for the reason `paragraphBlocks` is shared.
- */
+/** The walk `heavyBullets` reports from. */
 function foldBullets(
   lines: readonly BodyLine[],
   checkpoints: Checkpoints,
@@ -579,10 +575,7 @@ function paragraphText(block: readonly BodyLine[]): string {
  * paragraph rule whenever the bullet rule was changed, and an author reading
  * the sentence cap would find no weight rule to read at all.
  *
- * The two numbers coincide today because paragraph and bullet weight measure
- * one population, sharing a median near 170 characters with no gap behind
- * either candidate. They are separate checkpoints regardless, so either moves
- * without dragging the other.
+ * They are separate checkpoints, so either moves without dragging the other.
  */
 export function heavyParagraphs(
   lines: readonly BodyLine[],
@@ -606,49 +599,6 @@ export function heavyParagraphs(
   return findings
 }
 
-export interface LongBlock {
-  readonly kind: 'paragraph' | 'bullet'
-  readonly line: number
-  readonly characters: number
-  /** The block's source lines folded into one, as the paragraph and bullet folds read it. */
-  readonly text: string
-}
-
-/**
- * The paragraphs past the paragraph checkpoint and the top-level bullets past
- * the bullet checkpoint, each with its text.
- *
- * Weight alone, never the sentence cap, since the growth stage asks about the
- * two numbers the standard states in characters. The definitions are the
- * audit's own, so a block this names and a block the weight report names are
- * one set.
- */
-export function longBlocks(
-  lines: readonly BodyLine[],
-  checkpoints: Checkpoints,
-): LongBlock[] {
-  const blocks: LongBlock[] = []
-
-  for (const block of paragraphBlocks(lines)) {
-    const text = paragraphText(block)
-    const characters = visibleText(text).length
-    if (characters > checkpoints.paragraph) {
-      blocks.push({
-        kind: 'paragraph',
-        line: block[0].number,
-        characters,
-        text,
-      })
-    }
-  }
-
-  for (const bullet of foldBullets(lines, checkpoints)) {
-    blocks.push({ kind: 'bullet', ...bullet })
-  }
-
-  return blocks.sort((a, b) => a.line - b.line)
-}
-
 /** Punctuation either side of a word, so an opener is compared on its letters. */
 const WORD_EDGE = /^[^\p{L}\p{N}]+|[^\p{L}\p{N}]+$/gu
 

package/src/sandbox/equivalence.ts

@@ -674,7 +674,7 @@ async function pool<T, R>(
   size: number,
   work: (item: T, index: number) => Promise<R>,
 ): Promise<R[]> {
-  const results: R[] = new Array(items.length)
+  const results: R[] = Array.from({ length: items.length })
   let next = 0
 
   async function lane(): Promise<void> {
@@ -827,14 +827,12 @@ export async function runEquivalence(
     const records: ArmRecord[] = [
       ...offline,
       ...anchored,
-      ...skipped.map(
-        (arm): ArmRecord => ({
-          arm: armKey(arm),
-          state: 'skipped-anchor',
-          differs: [],
-          masked: [],
-        }),
-      ),
+      ...skipped.map((arm): ArmRecord => ({
+        arm: armKey(arm),
+        state: 'skipped-anchor',
+        differs: [],
+        masked: [],
+      })),
     ].sort((x, y) => x.arm.localeCompare(y.arm))
 
     const counts: Record<ArmState, number> = {

package/src/shipped/references.ts

@@ -132,7 +132,7 @@ const SAME_REPOSITORY =
  * `canon/context/` carries no equivalent pattern. The same resolution test
  * cannot separate a path every scaffolded project holds, such as
  * `canon/context/index.md`, from this repository's own domain entry, such
- * as `canon/context/context-model/indexes.md`, since both resolve here and only the
+ * as `canon/context/context-model.md`, since both resolve here and only the
  * second is a defect. That is a semantic read no pattern makes, so it stays
  * with the rule and the review checklist rather than joining this reader.
  */

package/src/teach/browser/head.ts

@@ -19,12 +19,12 @@ export function head(page: 'index' | 'lesson', breakpoint: number): void {
   }
   try {
     s = localStorage.getItem('teach-sb')
-  } catch (e) {}
+  } catch {}
   var idx = r.dataset.page === 'index'
   if (s === 'shut' || (s === null && idx)) r.classList.add('sb-shut')
   var w: string | null = null
   try {
     w = localStorage.getItem('teach-sb-w')
-  } catch (e) {}
+  } catch {}
   if (w) r.style.setProperty('--sb-w', w + 'px')
 }

package/src/teach/browser/sidebar.ts

@@ -34,7 +34,7 @@ export function sidebar(breakpoint: number): void {
     root.classList.add('sb-shut')
     try {
       localStorage.setItem('teach-sb', 'shut')
-    } catch (e) {}
+    } catch {}
     if (inside && fold) fold.focus()
   }
 
@@ -46,7 +46,7 @@ export function sidebar(breakpoint: number): void {
           'teach-sb',
           root.classList.contains('sb-shut') ? 'shut' : 'open',
         )
-      } catch (e) {}
+      } catch {}
       /* An overlay takes focus with it. Without this a keyboard reader opens the
        panel and goes on tabbing through the lesson behind the scrim. */
       if (!narrow.matches || root.classList.contains('sb-shut')) return
@@ -112,7 +112,7 @@ export function sidebar(breakpoint: number): void {
     if (save) {
       try {
         localStorage.setItem('teach-sb-w', String(w))
-      } catch (e) {}
+      } catch {}
     }
   }
 

package/src/teach/browser/theme.ts

@@ -3,7 +3,7 @@ export function theme(): void {
   try {
     var s = localStorage.getItem('course-theme')
     if (s) r.dataset.theme = s
-  } catch (e) {}
+  } catch {}
   document.addEventListener('click', function (e) {
     var b = (e.target as Element).closest('.theme')
     if (!b) return
@@ -13,6 +13,6 @@ export function theme(): void {
     r.dataset.theme = d ? 'light' : 'dark'
     try {
       localStorage.setItem('course-theme', r.dataset.theme)
-    } catch (e) {}
+    } catch {}
   })
 }

package/src/tooling/inject.ts

@@ -16,7 +16,6 @@ import {
 import {
   applyScripts,
   collectDeps,
-  collectScripts,
   readPackage,
   serializePackage,
 } from '@/tooling/package'
@@ -198,7 +197,8 @@ export async function injectManifest(
 
 function warnSkippedInstalls(chain: readonly Manifest[], target: string): void {
   const deps = collectDeps(chain, {}).map((dep) => dep.spec)
-  const scripts = collectScripts(chain, {}).map((script) => script.key)
+  const skipped = applyScripts({}, chain)
+  const scripts = [...new Set([...skipped.added, ...skipped.overridden])]
   if (deps.length === 0 && scripts.length === 0) return
 
   logStep('Skipped installs')

package/src/tooling/package.ts

@@ -101,34 +101,31 @@ export function collectDeps(
 }
 
 /**
- * Compares manifest scripts against package.json, nearest stack first, so a
- * child definition shadows the parent it extends.
+ * Compares manifest scripts and `[scripts.override]` keys against
+ * package.json. The expected value of each key comes from `applyScripts`, so
+ * the scan and the write path agree on which stack wins. Plain keys come
+ * first, nearest stack first, then override-only keys.
  */
 export function collectScripts(
   chain: readonly Manifest[],
   pkg: PackageJson,
 ): ScriptState[] {
   const scripts = pkg.scripts ?? {}
-  const seen = new Set<string>()
-  const states: ScriptState[] = []
+  const expected = applyScripts({}, chain).pkg.scripts ?? {}
+  const keys = new Set<string>()
 
   for (const manifest of chain) {
-    for (const [key, value] of Object.entries(manifest.scripts)) {
-      if (seen.has(key)) continue
-      seen.add(key)
-
-      const current = scripts[key]
-      if (current === undefined) {
-        states.push({ key, state: 'missing' })
-      } else if (current !== value) {
-        states.push({ key, state: 'drifted' })
-      } else {
-        states.push({ key, state: 'matching' })
-      }
-    }
+    for (const key of Object.keys(manifest.scripts)) keys.add(key)
+  }
+  for (const manifest of chain) {
+    for (const key of Object.keys(manifest.scriptOverrides)) keys.add(key)
   }
 
-  return states
+  return [...keys].map((key): ScriptState => {
+    const current = scripts[key]
+    if (current === undefined) return { key, state: 'missing' }
+    return { key, state: current === expected[key] ? 'matching' : 'drifted' }
+  })
 }
 
 /**

package/src/tooling/verify-stack.ts

@@ -32,7 +32,8 @@ interface Run {
 /**
  * Scaffolds a stack into `.canon/tmp/runs/verify-<stack>/`, syncs its chain
  * from the checkout at `root`, and runs the scaffold's own `lint:fix`,
- * `check`, `test:e2e`, and `screenshot` scripts. Every line goes to stderr.
+ * `format`, `check`, `test:e2e`, and `screenshot` scripts. Every line goes
+ * to stderr.
  *
  * A failed phase is recorded and the run carries on, so the Results block
  * reports every phase rather than the first failure. The tmp dir is removed
@@ -153,11 +154,13 @@ async function run({
 }
 
 /**
- * `lint:fix` runs first and reformats the scaffold, so `check` reads the
- * reformatted tree.
+ * `lint:fix` and `format` run first and rewrite the scaffold, so `check`
+ * reads the tree a project would commit. `check` itself writes nothing, and a
+ * fresh scaffold ships files its own generator formatted another way.
  */
 async function runScripts(state: Run, scripts: Set<string>): Promise<void> {
   await phase(state, 'lint:fix', () => bunRun('lint:fix', state.dir))
+  await phase(state, 'format', () => bunRun('format', state.dir))
   await phase(state, 'check', () => bunRun('check', state.dir))
 
   if (scripts.has('test:e2e')) {

package/tooling/astro/configs/.oxfmtrc.json

@@ -0,0 +1,8 @@
+{
+  "$schema": "./node_modules/oxfmt/configuration_schema.json",
+  "semi": false,
+  "singleQuote": true,
+  "printWidth": 80,
+  "sortPackageJson": false,
+  "ignorePatterns": ["**/*.astro"]
+}

package/tooling/astro/configs/.prettierrc

@@ -0,0 +1,13 @@
+{
+  "semi": false,
+  "singleQuote": true,
+  "plugins": ["prettier-plugin-astro", "prettier-plugin-tailwindcss"],
+  "overrides": [
+    {
+      "files": "*.astro",
+      "options": {
+        "parser": "astro"
+      }
+    }
+  ]
+}

package/tooling/astro/manifest.toml

@@ -9,9 +9,18 @@ packages = [
   "astro",
   "@astrojs/react",
   "@astrojs/check",
+  "eslint@^9",
+  "@eslint/js",
+  "typescript-eslint",
+  "eslint-config-prettier",
+  "eslint-plugin-react-hooks",
+  "eslint-plugin-vitest",
+  "globals",
   "eslint-plugin-astro",
   "astro-eslint-parser",
+  "prettier",
   "prettier-plugin-astro",
+  "prettier-plugin-tailwindcss",
 ]
 
 [scripts]
@@ -24,6 +33,10 @@ packages = [
 "card:check" = "bash scripts/check-card-exclusion.sh"
 
 [scripts.override]
+"lint" = "eslint . --max-warnings 0"
+"lint:fix" = "eslint . --fix --max-warnings 0"
+"check:format" = "oxfmt --check . && prettier --check --log-level warn '**/*.astro'"
+"format" = "oxfmt . && prettier --write --log-level warn '**/*.astro'"
 "screenshot" = "PREVIEW_PORT=$(bash scripts/worktree-port.sh 4321) && export PREVIEW_PORT && bash scripts/screenshot.sh"
 "readme-screenshot" = "PREVIEW_PORT=$(bash scripts/worktree-port.sh 4321) && export PREVIEW_PORT && bash scripts/readme-screenshot.sh"
 "dev" = "WORKTREE_PORT_OFFSET=$(bash scripts/worktree-port.sh) && export WORKTREE_PORT_OFFSET && astro dev"

package/tooling/astro/reference.md

@@ -4,7 +4,7 @@
 
 ## Overview
 
-The astro stack covers Astro + TypeScript projects: content sites, marketing sites, blogs, and docs. Interactive islands use React only. Output is static. It ships golden configs for `astro.config.mjs`, `vitest.config.ts` (using `getViteConfig` from `astro/config`), `playwright.config.ts` (preview-server backed), a `tsconfig.json` that extends `astro/tsconfigs/strict`, and an `eslint.config.js` that overrides the web layer's config to include `eslint-plugin-astro` and exclude React-refresh rules.
+The astro stack covers Astro + TypeScript projects: content sites, marketing sites, blogs, and docs. Interactive islands use React only. Output is static. It ships golden configs for `astro.config.mjs`, `vitest.config.ts` (using `getViteConfig` from `astro/config`), `playwright.config.ts` (preview-server backed), a `tsconfig.json` that extends `astro/tsconfigs/strict`, an `eslint.config.js` that keeps ESLint for this stack alone, and a `.prettierrc` that formats `.astro` files alone.
 
 ## Scaffold checklist
 
@@ -13,7 +13,7 @@ The astro stack covers Astro + TypeScript projects: content sites, marketing sit
 3. Install web tooling: `canon tooling sync web . --write`
 4. Install astro adapter: `canon tooling sync astro . --write`
 5. Extend the `ci` and `development` context entries under `canon/context/` per the web reference's extend sections plus the astro rows below.
-6. Run `bun run lint:fix` then `bun run check`.
+6. Run `bun run lint:fix`, then `bun run format`, then `bun run check`.
 
 ## What ships as golden configs
 
@@ -22,7 +22,7 @@ The astro stack covers Astro + TypeScript projects: content sites, marketing sit
 - `playwright.config.ts`: all browsers, `webServer` runs `bun run build && bun run preview` on port `4321` plus `WORKTREE_PORT_OFFSET`, `reuseExistingServer: false`. Astro's dev/prod gap is wide (MDX, island hydration, asset optimization), so E2E always tests the built `dist/`. `DIST_PREBUILT` set in the environment drops the `build` half, running `bun run preview` alone against a `dist/` a prior CI job already produced.
 - `tsconfig.json`: extends `astro/tsconfigs/strict`, adds `skipLibCheck`, `vitest/globals` and `@testing-library/jest-dom/vitest` in types, `@/` paths.
 - `card.config.mjs`, `card-src/pages/og-card.astro`, and `scripts/check-card-exclusion.sh`: the social card route, its structural build exclusion, and the check enforcing it. See `## Social card route` below.
-- `eslint.config.js`: overrides the web layer. Adds `eslint-plugin-astro` (`.astro` parser via `astro-eslint-parser`). React-hooks scoped to `.jsx`/`.tsx` only (`.astro` is not React). The shared block's `files` selector includes `.astro`, so `check-file/filename-naming-convention` reaches `.ts`, `.tsx`, and `.astro` under `KEBAB_CASE`, overriding Astro's own PascalCase component convention deliberately, on the ground that a component's name in markup comes from the import binding rather than the filename. `.js` and `.jsx` stay out of the rule's own pattern, matching `web` and `nextjs`. `check-file/folder-naming-convention` reaches every `src/**` folder except `__tests__` and the whole `pages/` subtree, which carries its own off-block for the bracket-named dynamic routes and nested slug folders Astro's file-based routing produces. See `canon/context/tooling/stacks.md` for the measurement.
+- `eslint.config.js`: this stack's own flat config, since the web layer lints with oxlint, which parses no `.astro` file. Adds `eslint-plugin-astro` (`.astro` parser via `astro-eslint-parser`). React-hooks scoped to `.jsx`/`.tsx` only (`.astro` is not React). The shared block's `files` selector includes `.astro`, so `check-file/filename-naming-convention` reaches `.ts`, `.tsx`, and `.astro` under `KEBAB_CASE`, overriding Astro's own PascalCase component convention deliberately, on the ground that a component's name in markup comes from the import binding rather than the filename. `.js` and `.jsx` stay out of the rule's own pattern, matching `web` and `nextjs`. `check-file/folder-naming-convention` reaches every `src/**` folder except `__tests__` and the whole `pages/` subtree, which carries its own off-block for the bracket-named dynamic routes and nested slug folders Astro's file-based routing produces. See `canon/context/tooling/stacks.md` for the measurement.
 
 ## Typecheck
 
@@ -34,9 +34,19 @@ Unit-test React island components (`.tsx`) only. Do not test `.astro` files. Pag
 
 Vitest is pinned to `^5` in the web manifest, which supports the Vite 8 that Astro 7 bundles. The earlier `^3` pin avoided `^4` bundling rolldown-vite, which ignored the esbuild JSX config in `@vitejs/plugin-react`. Astro now bundles Vite 8 itself, so that conflict no longer applies.
 
-## Prettier (extend)
+## Formatting (extend)
 
-Add `prettier-plugin-astro` first in plugins, then `prettier-plugin-tailwindcss` last (per its docs). Add a parser override for `.astro` files.
+- Format `.astro` files with Prettier and every other file with oxfmt. oxfmt loads no Prettier plugin, so it cannot parse `.astro`.
+- Load `prettier-plugin-astro` first in `.prettierrc`'s plugins, then `prettier-plugin-tailwindcss` last (per its docs), with a parser override for `.astro` files.
+- Ignore `**/*.astro` in this stack's `.oxfmtrc.json`, so the two formatters never touch one file.
+- Copy every other option from base's `.oxfmtrc.json` into this one by hand. Scan takes the child config over the parent's whole file, so a change to base's options is lost here until it is copied.
+- Override `check:format` and `format` to run oxfmt, then Prettier over `**/*.astro`.
+
+## ESLint
+
+- Override `lint` and `lint:fix` back to `eslint . --max-warnings 0`, since the web layer sets them to oxlint.
+- Install the ESLint packages here (`eslint@^9`, `@eslint/js`, `typescript-eslint`, `eslint-config-prettier`, `eslint-plugin-react-hooks`, `eslint-plugin-vitest`, `globals`), since the web layer no longer ships them. Pin `eslint@^9`: ESLint 10 dropped the `LegacyESLint` shim `typescript-eslint@8` still imports.
+- Expect the web layer's `.oxlintrc.json` in the target. Nothing runs it here.
 
 ## Development docs (extend)
 

package/tooling/base/configs/.oxfmtrc.json

@@ -0,0 +1,7 @@
+{
+  "$schema": "./node_modules/oxfmt/configuration_schema.json",
+  "semi": false,
+  "singleQuote": true,
+  "printWidth": 80,
+  "sortPackageJson": false
+}

package/tooling/base/configs/scripts/verify.ts

@@ -1,6 +1,6 @@
 // Runs this folder's verify phases in a fixed order. The phases a stack
 // requires come from scripts/verify.json, which each stack ships and the
-// nearest one wins. Only node: modules, since a target's own eslint and
+// nearest one wins. Only node: modules, since a target's own linter and
 // tsc --noEmit read this file with no Bun types.
 import { spawnSync } from 'node:child_process'
 import { accessSync, constants, existsSync, readFileSync } from 'node:fs'

package/tooling/base/manifest.toml

@@ -10,19 +10,19 @@ per_root = ["scripts/verify.ts", "scripts/verify.json"]
 
 [dependencies.dev]
 packages = [
-    "prettier",
-    "husky",
-    "@commitlint/cli",
-    "@commitlint/config-conventional",
+  "oxfmt@0.72.0",
+  "husky",
+  "@commitlint/cli",
+  "@commitlint/config-conventional",
 ]
 
 [scripts]
-"check:format" = "prettier --check --log-level warn --ignore-path .gitignore --ignore-path .prettierignore ."
-"format" = "prettier --write --log-level warn --ignore-path .gitignore --ignore-path .prettierignore ."
 "prepare" = "husky"
 
 [scripts.override]
 "check" = "bun scripts/verify.ts"
+"check:format" = "oxfmt --check ."
+"format" = "oxfmt ."
 
 [gitignore]
 "# System" = [".DS_Store"]

package/tooling/base/reference.md

@@ -10,7 +10,7 @@ A repository with several language roots layers this stack once at the root and
 
 Golden config files live in `tooling/base/configs/` and are copied into the target on `canon tooling sync base . --write`, replacing whatever sits at those paths. They are the source of truth. The reference covers rationale and tradeoffs. Configs show the concrete setup.
 
-- `.prettierrc`: `semi: false`, `singleQuote: true`, plus a parser override per non-standard extension (`.mdx` to `markdown`).
+- `.oxfmtrc.json`: `semi: false`, `singleQuote: true`, `printWidth: 80`, and `sortPackageJson: false`, which keep the output Prettier wrote. The `astro` stack repeats these options in its own copy, so copy a change here into it.
 - `commitlint.config.js`: ESM default export extending `@commitlint/config-conventional`. Rules are `header-max-length: 72`, `scope-case: lower-case`, `subject-full-stop: never`, `subject-case` disabled, and a local `no-claude-co-author` rule refusing a `Co-authored-by` trailer that names Claude or Anthropic.
 - `.husky/`: `pre-commit`, `commit-msg`, `pre-push`, `post-merge`, `post-rewrite`.
 - `scripts/verify.ts`: the one verify runner every stack shares, and the command behind `check`. It runs typecheck, lint, format check, shell, unit tests, build, markdown bans, then card exclusion, always in that order, and skips any phase the folder's `scripts/verify.json` leaves out. Node modules only, since a target's own lint and typecheck read it.
@@ -21,7 +21,6 @@ Golden config files live in `tooling/base/configs/` and are copied into the targ
 Seeds live in `tooling/base/seeds/`. Sync drops each once on first install and never overwrites it, so a project extends them freely.
 
 - `.lintstagedrc`: the glob map below.
-- `.prettierignore`: created empty. Projects add their own entries.
 - `.github/workflows/verify.yml`: runs on pull requests targeting `main` and on `workflow_dispatch`. A project with more than one language root adds its own jobs here.
 - `.github/pull_request_template.md`: `## Summary`, `## Key changes`, `## Technical context`, `## Testing`. A project adds the checklist lines its own review needs.
 - `canon/context/`: extend the `ci` and `development` entries with project-specific commands, workflows, or deploy steps. Canonical rationale stays in this reference.
@@ -29,9 +28,14 @@ Seeds live in `tooling/base/seeds/`. Sync drops each once on first install and n
 ## Tool pairing
 
 - Runtime: `bun` as package manager and script runner, `bunx` over `npx` for a one-off executable.
-- Formatting: Prettier for what it parses. Prettier has no shell parser, so shell formatting is the `shell` stack's.
+- Formatting: oxfmt for what it parses, pinned to an exact version so an upgrade arrives as a reviewed diff. oxfmt has no shell parser, so shell formatting is the `shell` stack's.
 - Commits: commitlint against conventional commits, wired through the husky `commit-msg` hook. Format is `<type>(<scope>): <subject>` in imperative mood with no trailing period.
-- Dev dependencies: `prettier`, `husky`, `@commitlint/cli`, `@commitlint/config-conventional`. Install via `bun add -D`.
+- Dev dependencies: `oxfmt`, `husky`, `@commitlint/cli`, `@commitlint/config-conventional`. Install via `bun add -D`.
+
+## oxfmt
+
+- Add a project's own ignores to `.prettierignore`, which oxfmt reads beside `.gitignore` by default. Sync overwrites `.oxfmtrc.json`, so an entry in its `ignorePatterns` is lost on the next sync.
+- Delete a leftover `.prettierrc` and run `bun remove prettier` by hand after the first sync onto oxfmt. Sync deletes nothing a stack stopped shipping, and the script overrides already stop Prettier from running.
 
 ## File layout
 
@@ -50,7 +54,7 @@ Seeds live in `tooling/base/seeds/`. Sync drops each once on first install and n
 
 Seeded baseline globs:
 
-- `**/*.{json,md,mdc}` runs `prettier --write --ignore-path .gitignore --ignore-path .prettierignore`
+- `**/*.{json,md}` runs `oxfmt --no-error-on-unmatched-pattern`. Without the flag, a staged file every pattern ignores, such as `CHANGELOG.md`, exits 2 and fails the commit.
 - `**/*.md` runs `canon indexes regen`
 
 ## CI
@@ -69,8 +73,7 @@ Seeded baseline globs:
 
 Sticky negative knowledge. Do not relearn.
 
-- Do NOT invoke prettier without both `--ignore-path .gitignore --ignore-path .prettierignore`. Passing one drops the other, since the flag replaces the default rather than adding to it.
-- Do NOT omit `--log-level warn` from a prettier invocation. The default prints a line per unchanged file.
+- Do NOT pass `--ignore-path` to oxfmt. It replaces the default `.gitignore` and `.prettierignore` pair rather than adding to it.
 - Do NOT put logic in a husky hook and expect its shebang to hold. Husky runs hooks as `sh -e`, so a hook carrying logic is POSIX sh under errexit whatever the first line says.
 
 ## CLI
@@ -78,8 +81,8 @@ Sticky negative knowledge. Do not relearn.
 | Script                 | What it does                                                                                                                                               |
 | ---------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `bun run check`        | Gates a checkout through `scripts/verify.ts` and writes nothing. Honors `VERIFY_NESTED=true` to suppress timeline boundaries when another script calls it. |
-| `bun run check:format` | Asserts prettier formatting without writing                                                                                                                |
-| `bun run format`       | Writes prettier formatting in place                                                                                                                        |
+| `bun run check:format` | Asserts oxfmt formatting without writing                                                                                                                   |
+| `bun run format`       | Writes oxfmt formatting in place                                                                                                                           |
 | `bun run prepare`      | Initializes husky hooks, run automatically on `bun install`                                                                                                |
 
 Base writes `check` as a `[scripts.override]`, so a sync replaces whatever `check` a target declared, including one that chained further checks after the runner. Re-add a chained check as its own script after a sync.

package/tooling/base/seeds/.lintstagedrc

@@ -1,6 +1,4 @@
 {
-  "**/*.{json,md,mdc}": [
-    "prettier --write --ignore-path .gitignore --ignore-path .prettierignore"
-  ],
+  "**/*.{json,md}": ["oxfmt --no-error-on-unmatched-pattern"],
   "**/*.md": ["canon indexes regen"]
 }

package/tooling/base/seeds/canon/context/ci.md

@@ -22,9 +22,9 @@ Owns the GitHub Actions workflow that gates a merge: which events start a run, a
 
 Defined in `.github/workflows/verify.yml`. All jobs must pass before merge.
 
-| Check  | Command                | What it asserts   |
-| ------ | ---------------------- | ----------------- |
-| Format | `bun run check:format` | prettier is clean |
+| Check  | Command                | What it asserts |
+| ------ | ---------------------- | --------------- |
+| Format | `bun run check:format` | oxfmt is clean  |
 
 ### Running CI locally
 

package/tooling/base/seeds/canon/context/development.md

@@ -24,7 +24,7 @@ Owns how the project runs on a developer machine: installing the toolchain, the
 | Command          | Purpose                                                                                  |
 | ---------------- | ---------------------------------------------------------------------------------------- |
 | `bun run check`  | Gates locally and writes nothing. Fails on formatting drift until `bun run format` runs. |
-| `bun run format` | Auto-fix prettier formatting.                                                            |
+| `bun run format` | Auto-fix oxfmt formatting.                                                               |
 
 ### Shell scripts
 
@@ -32,6 +32,6 @@ All `.sh` files live under `scripts/`. Do not place shell scripts outside `scrip
 
 ### Husky hooks
 
-- `pre-commit` runs `lint-staged` (prettier on staged files).
+- `pre-commit` runs `lint-staged` (oxfmt on staged files).
 - `commit-msg` runs `commitlint` against the conventional commit format.
 - `pre-push` runs `bun run check`. When a markdown-bans audit tool is on PATH, it also gates on banned characters across every tracked markdown file except `CHANGELOG.md`. A push fails on formatting drift until `bun run format` runs, since the hook writes nothing.

package/tooling/claude/manifest.toml

@@ -21,4 +21,8 @@ scaffold = ""
 # array no longer tells it to ignore them, so the first sign is a memory file or
 # a task board appearing in someone's commit.
 [gitignore]
-"# Claude" = [".canon/", ".claude/worktrees/", ".claude/.tmp/"] # canon-keep-record-root
+"# Claude" = [
+  ".canon/",
+  ".claude/worktrees/",
+  ".claude/.tmp/", # canon-keep-record-root
+]