@erclx/canon 5.44.0 → 5.46.0

package/src/markdown/gated.ts

@@ -0,0 +1,250 @@
+import {
+  chmodSync,
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  statSync,
+  writeFileSync,
+} from 'node:fs'
+import { readFile } from 'node:fs/promises'
+import { dirname, join } from 'node:path'
+import { listRepositoryFiles } from '@/git/files'
+import { densityFindings, type DensityKind } from '@/markdown/density'
+import { referenceShapeGates } from '@/markdown/gate'
+import {
+  type ReferenceShapeKind,
+  referenceShapeFindings,
+} from '@/markdown/reference-shape'
+import { bodyLines } from '@/markdown/scan'
+import {
+  densityGates,
+  GATED_PATHS,
+  GATED_SCOPE_ROOTS,
+  inDensityScope,
+} from '@/markdown/scope'
+import { isOwnCheckout } from '@/roots/project'
+
+/** Where a target keeps the prefixes its density findings gate under. */
+export const GATED_CONFIG_REL = join('canon', 'config', 'markdown.toml')
+
+/**
+ * An absent file is today's target default and gates nothing. A malformed one
+ * refuses rather than reading as empty, since an empty list would silently
+ * drop every gate a project had turned on.
+ */
+export type GatedConfig =
+  | { readonly kind: 'absent' }
+  | { readonly kind: 'listed'; readonly prefixes: readonly string[] }
+  | { readonly kind: 'malformed'; readonly message: string }
+
+export function readGatedConfig(root: string): GatedConfig {
+  const path = join(root, GATED_CONFIG_REL)
+  if (!existsSync(path)) return { kind: 'absent' }
+
+  let parsed: Record<string, unknown>
+  try {
+    parsed = Bun.TOML.parse(readFileSync(path, 'utf8')) as Record<
+      string,
+      unknown
+    >
+  } catch (error) {
+    return {
+      kind: 'malformed',
+      message: `${GATED_CONFIG_REL} is not valid TOML: ${error instanceof Error ? error.message : String(error)}`,
+    }
+  }
+
+  const table = parsed.markdown
+  if (table === undefined) return { kind: 'listed', prefixes: [] }
+  if (typeof table !== 'object' || table === null || Array.isArray(table)) {
+    return {
+      kind: 'malformed',
+      message: `${GATED_CONFIG_REL}: [markdown] is not a table`,
+    }
+  }
+
+  const gated = (table as Record<string, unknown>).gated
+  if (gated === undefined) return { kind: 'listed', prefixes: [] }
+  if (
+    !Array.isArray(gated) ||
+    !gated.every((each): each is string => typeof each === 'string')
+  ) {
+    return {
+      kind: 'malformed',
+      message: `${GATED_CONFIG_REL}: markdown.gated is not a list of strings`,
+    }
+  }
+
+  return { kind: 'listed', prefixes: gated }
+}
+
+/**
+ * Whether `prefix` can be listed. A folder ends in a slash, since a bare
+ * `docs` would also gate `docs-old/`. A path without one has to name an
+ * existing file, which is how a requirement gates by its own path.
+ */
+export function prefixShapeError(
+  root: string,
+  prefix: string,
+): string | undefined {
+  if (prefix === '' || prefix.startsWith('/') || prefix.includes('..')) {
+    return `${prefix || '(empty)'} is not a repository-relative path`
+  }
+  // A listed prefix is a `startsWith` match against repository paths, so either
+  // shape below matches no file and would gate nothing while reading as clean.
+  if (prefix.includes('//')) {
+    return `${prefix} carries a doubled slash, so it matches no file`
+  }
+  const path = join(root, prefix.replace(/\/$/, ''))
+  const isFile = existsSync(path) && !statSync(path).isDirectory()
+  if (prefix.endsWith('/')) {
+    return isFile
+      ? `${prefix} names a file, so drop the trailing slash`
+      : undefined
+  }
+  if (isFile) return undefined
+  return `${prefix} names no file. End a folder prefix with a slash.`
+}
+
+/**
+ * Appends `prefix` to the target's list, creating the file when absent. A
+ * prefix already listed writes nothing. Preserves an existing file's mode.
+ */
+export function appendGatedPrefix(
+  root: string,
+  current: readonly string[],
+  prefix: string,
+): 'appended' | 'present' {
+  if (current.includes(prefix)) return 'present'
+  writeGatedList(root, [...current, prefix])
+  return 'appended'
+}
+
+/** Written by hand rather than serialized, the way `classifier.toml` is. */
+function writeGatedList(root: string, prefixes: readonly string[]): void {
+  const path = join(root, GATED_CONFIG_REL)
+  const mode = existsSync(path) ? statSync(path).mode : undefined
+  const lines = prefixes.map((each) => `  ${JSON.stringify(each)},`)
+
+  mkdirSync(dirname(path), { recursive: true })
+  writeFileSync(path, `[markdown]\ngated = [\n${lines.join('\n')}\n]\n`)
+  if (mode !== undefined) chmodSync(path, mode)
+}
+
+/** The prefixes a root gates under, and whether a bullet run gates unlisted. */
+export interface GatedList {
+  readonly prefixes: readonly string[]
+  readonly alwaysGated: boolean
+}
+
+export type GatedResolution =
+  | {
+      readonly kind: 'resolved'
+      readonly source: 'canon' | 'config' | 'absent'
+      readonly list: GatedList
+    }
+  | { readonly kind: 'malformed'; readonly message: string }
+
+/**
+ * The list a root gates under: `GATED_PATHS` in canon's own checkout, which
+ * tracks its rewrite progress, and the target's config everywhere else.
+ */
+export function resolveGatedList(
+  root: string,
+  own: boolean = isOwnCheckout(root),
+): GatedResolution {
+  if (own) {
+    return {
+      kind: 'resolved',
+      source: 'canon',
+      list: { prefixes: GATED_PATHS, alwaysGated: true },
+    }
+  }
+
+  const config = readGatedConfig(root)
+  if (config.kind === 'malformed') return config
+  return {
+    kind: 'resolved',
+    source: config.kind === 'absent' ? 'absent' : 'config',
+    list: {
+      prefixes: config.kind === 'listed' ? config.prefixes : [],
+      alwaysGated: false,
+    },
+  }
+}
+
+export interface BlockingFinding {
+  readonly path: string
+  readonly kind: DensityKind | ReferenceShapeKind
+  readonly line: number
+}
+
+/**
+ * Every density and reference shape finding that would gate once `prefix` is
+ * listed, read from the files the audit reads. An absent folder carries none.
+ * Undefined when the tree cannot be listed, since an empty answer there would
+ * gate a corpus nobody measured.
+ */
+export async function findingsUnder(
+  root: string,
+  prefix: string,
+): Promise<BlockingFinding[] | undefined> {
+  const listed = await listRepositoryFiles(root)
+  if (!listed) return undefined
+
+  const under = listed.filter(
+    (rel) => rel.endsWith('.md') && rel.startsWith(prefix),
+  )
+  const found = await Promise.all(
+    under.map(async (rel) => {
+      const source = await readFile(join(root, rel), 'utf8')
+      const density = inDensityScope(rel)
+        ? densityFindings(bodyLines(source)).filter((finding) =>
+            densityGates(rel, finding.kind, [prefix], false),
+          )
+        : []
+      const shape = referenceShapeGates(rel, [prefix])
+        ? referenceShapeFindings(source)
+        : []
+      return [...density, ...shape].map((finding) => ({
+        path: rel,
+        kind: finding.kind,
+        line: finding.line,
+      }))
+    }),
+  )
+
+  return found.flat()
+}
+
+export type ScopeRootsResult =
+  | { readonly kind: 'exists' }
+  | { readonly kind: 'unavailable' }
+  | {
+      readonly kind: 'gated'
+      readonly gated: readonly string[]
+      readonly left: readonly { prefix: string; findings: number }[]
+    }
+
+/**
+ * Gates each of `GATED_SCOPE_ROOTS` that carries no finding, for a new
+ * project. A root with one is left out and named, since gating it would fail
+ * the first push on prose a scaffolder wrote. An existing config is a list
+ * someone chose, so it is never touched.
+ */
+export async function gateScopeRoots(root: string): Promise<ScopeRootsResult> {
+  if (existsSync(join(root, GATED_CONFIG_REL))) return { kind: 'exists' }
+
+  const gated: string[] = []
+  const left: { prefix: string; findings: number }[] = []
+
+  for (const prefix of GATED_SCOPE_ROOTS) {
+    const findings = await findingsUnder(root, prefix)
+    if (!findings) return { kind: 'unavailable' }
+    if (findings.length === 0) gated.push(prefix)
+    else left.push({ prefix, findings: findings.length })
+  }
+
+  writeGatedList(root, gated)
+  return { kind: 'gated', gated, left }
+}

package/src/markdown/scope.ts

@@ -36,12 +36,27 @@ const DENSITY_SCOPE = [
   /^(?:README|CONTRIBUTING)\.md$/,
 ]
 
+/**
+ * The roots `canon init` gates in a new project when each passes at init time:
+ * every density surface a target authors itself, leaving out the toolkit's own
+ * `claude/skills/` and `tooling/` trees.
+ */
+export const GATED_SCOPE_ROOTS: readonly string[] = [
+  'canon/context/',
+  'docs/',
+  '.claude/skills/',
+  'wiki/',
+  'README.md',
+  'CONTRIBUTING.md',
+]
+
 /**
  * The path prefixes whose density findings fail a run, each added by the
  * rewrite batch that brought its folders to zero.
  *
  * It describes this repository's rewrite progress and nothing about a target's
- * corpus, which is why the audit reads it only inside a canon checkout.
+ * corpus, which is why the audit reads it only inside a canon checkout. A
+ * target keeps its own list in the file `src/markdown/gated.ts` reads.
  */
 export const GATED_PATHS: readonly string[] = [
   'canon/context/surfaces/',
@@ -50,8 +65,10 @@ export const GATED_PATHS: readonly string[] = [
   'canon/context/features/',
   'canon/context/context-model.md',
   'canon/context/index.md',
+  'claude/skills/api-design/REQUIREMENT.md',
   'claude/skills/api-design/SKILL.md',
   'claude/skills/api-design/references/adopted.md',
+  'claude/skills/auto-ship/REQUIREMENT.md',
   'claude/skills/auto-ship/SKILL.md',
   'claude/skills/auto-ship/references/draft-mark.md',
   'claude/skills/auto-ship/references/failure-recovery.md',
@@ -60,33 +77,45 @@ export const GATED_PATHS: readonly string[] = [
   'claude/skills/auto-ship/references/ui-checklist.md',
   'claude/skills/auto-ship/references/verb-absent.md',
   'claude/skills/auto-ship/references/worktree-name.md',
+  'claude/skills/backlog-triage/REQUIREMENT.md',
   'claude/skills/backlog-triage/SKILL.md',
   'claude/skills/backlog-triage/references/apply.md',
+  'claude/skills/build-in-slices/REQUIREMENT.md',
   'claude/skills/build-in-slices/SKILL.md',
   'claude/skills/build-in-slices/references/adopted.md',
+  'claude/skills/canon-cli/REQUIREMENT.md',
   'claude/skills/canon-cli/SKILL.md',
+  'claude/skills/canon-feedback-triage/REQUIREMENT.md',
   'claude/skills/canon-feedback-triage/SKILL.md',
+  'claude/skills/canon-feedback/REQUIREMENT.md',
   'claude/skills/canon-feedback/SKILL.md',
   'claude/skills/canon-feedback/references/template.md',
+  'claude/skills/canvas-board/REQUIREMENT.md',
   'claude/skills/canvas-board/SKILL.md',
   'claude/skills/canvas-board/references/canvas.md',
   'claude/skills/canvas-board/references/design.md',
+  'claude/skills/ci-workflow/REQUIREMENT.md',
   'claude/skills/ci-workflow/SKILL.md',
   'claude/skills/ci-workflow/references/workflows.md',
+  'claude/skills/code-craft/REQUIREMENT.md',
   'claude/skills/code-craft/SKILL.md',
   'claude/skills/code-craft/references/adopted.md',
+  'claude/skills/codebase-layout/REQUIREMENT.md',
   'claude/skills/codebase-layout/SKILL.md',
   'claude/skills/codebase-layout/references/adopted.md',
   'claude/skills/codebase-layout/references/frontend.md',
   'claude/skills/codebase-layout/references/tests.md',
+  'claude/skills/context-fold/REQUIREMENT.md',
   'claude/skills/context-fold/SKILL.md',
   'claude/skills/context-fold/references/classify.md',
   'claude/skills/context-fold/references/completion-report.md',
   'claude/skills/context-fold/references/context-refresh.md',
   'claude/skills/context-fold/references/context.md',
   'claude/skills/context-fold/references/unusable-baseline.md',
+  'claude/skills/create-rule/REQUIREMENT.md',
   'claude/skills/create-rule/SKILL.md',
   'claude/skills/create-rule/references/rule.md',
+  'claude/skills/create-skill/REQUIREMENT.md',
   'claude/skills/create-skill/SKILL.md',
   'claude/skills/create-skill/references/skill-disclosure.md',
   'claude/skills/create-skill/references/skill-frontmatter.md',
@@ -95,12 +124,16 @@ export const GATED_PATHS: readonly string[] = [
   'claude/skills/create-skill/references/skill-reference.md',
   'claude/skills/create-skill/references/skill-requirement.md',
   'claude/skills/create-skill/references/skill.md',
+  'claude/skills/decision-escalate/REQUIREMENT.md',
   'claude/skills/decision-escalate/SKILL.md',
+  'claude/skills/deploy-app/REQUIREMENT.md',
   'claude/skills/deploy-app/SKILL.md',
   'claude/skills/deploy-app/references/cloudflare.md',
   'claude/skills/deploy-app/references/vercel.md',
+  'claude/skills/deprecation-migration/REQUIREMENT.md',
   'claude/skills/deprecation-migration/SKILL.md',
   'claude/skills/deprecation-migration/references/adopted.md',
+  'claude/skills/design-taste/REQUIREMENT.md',
   'claude/skills/design-taste/SKILL.md',
   'claude/skills/design-taste/references/adopted.md',
   'claude/skills/design-taste/references/craft.md',
@@ -109,13 +142,27 @@ export const GATED_PATHS: readonly string[] = [
   'claude/skills/design-taste/references/systems.md',
   'claude/skills/design-taste/references/tells.md',
   'claude/skills/design-taste/references/vocabulary.md',
+  'claude/skills/docs-sync/REQUIREMENT.md',
   'claude/skills/docs-sync/SKILL.md',
   'claude/skills/docs-sync/references/docs.md',
   'claude/skills/docs-sync/references/readme.md',
+  'claude/skills/document-health/REQUIREMENT.md',
   'claude/skills/document-health/SKILL.md',
   'claude/skills/document-health/references/axes.md',
+  'claude/skills/document-repair/REQUIREMENT.md',
+  'claude/skills/document-repair/SKILL.md',
+  'claude/skills/document-repair/references/batches.md',
+  'claude/skills/draft-and-pick/REQUIREMENT.md',
+  'claude/skills/draft-doc/REQUIREMENT.md',
+  'claude/skills/draft-figure/REQUIREMENT.md',
+  'claude/skills/draft-identity/REQUIREMENT.md',
+  'claude/skills/draft-ready/REQUIREMENT.md',
+  'claude/skills/draft-screencast/REQUIREMENT.md',
+  'claude/skills/draft-slides/REQUIREMENT.md',
+  'claude/skills/pick-by-eye/REQUIREMENT.md',
   'claude/skills/pick-by-eye/SKILL.md',
   'claude/skills/pick-by-eye/references/live-arms.md',
+  'claude/skills/write-doc/REQUIREMENT.md',
   'claude/skills/write-doc/SKILL.md',
   'claude/skills/write-doc/references/context.md',
   'claude/skills/write-doc/references/docs.md',
@@ -128,82 +175,109 @@ export const GATED_PATHS: readonly string[] = [
   'claude/skills/write-doc/references/requirements.md',
   'claude/skills/write-doc/references/wiki-kind.md',
   'claude/skills/write-doc/references/wiki.md',
+  'claude/skills/draw-figure/REQUIREMENT.md',
   'claude/skills/draw-figure/SKILL.md',
   'claude/skills/draw-figure/references/architecture-set.md',
   'claude/skills/draw-figure/references/figures.md',
   'claude/skills/draw-figure/references/hand-drawn.md',
   'claude/skills/draw-figure/references/mermaid-path.md',
   'claude/skills/draw-figure/references/mermaid.md',
+  'claude/skills/design-identity/REQUIREMENT.md',
   'claude/skills/design-identity/SKILL.md',
   'claude/skills/design-identity/references/card-route.md',
+  'claude/skills/plan-ready/REQUIREMENT.md',
   'claude/skills/plan-ready/SKILL.md',
   'claude/skills/plan-ready/references/assembly.md',
   'claude/skills/plan-ready/references/ready.md',
+  'claude/skills/script-screencast/REQUIREMENT.md',
   'claude/skills/script-screencast/SKILL.md',
   'claude/skills/script-screencast/references/beats-template.md',
+  'claude/skills/make-deck/REQUIREMENT.md',
   'claude/skills/make-deck/SKILL.md',
   'claude/skills/make-deck/references/deck.md',
+  'claude/skills/git-branch/REQUIREMENT.md',
   'claude/skills/git-branch/SKILL.md',
   'claude/skills/git-branch/references/branch.md',
   'claude/skills/git-branch/references/slug.md',
+  'claude/skills/git-commit/REQUIREMENT.md',
   'claude/skills/git-commit/SKILL.md',
   'claude/skills/git-commit/references/commit.md',
   'claude/skills/git-commit/references/versioning.md',
+  'claude/skills/git-followup/REQUIREMENT.md',
   'claude/skills/git-followup/SKILL.md',
+  'claude/skills/git-issue/REQUIREMENT.md',
   'claude/skills/git-issue/SKILL.md',
   'claude/skills/git-issue/references/issue.md',
+  'claude/skills/git-pr/REQUIREMENT.md',
   'claude/skills/git-pr/SKILL.md',
   'claude/skills/git-pr/references/final-command.md',
   'claude/skills/git-pr/references/labels.md',
   'claude/skills/git-pr/references/pr.md',
   'claude/skills/git-pr/references/publish.md',
   'claude/skills/git-pr/references/task-number.md',
+  'claude/skills/git-ship/REQUIREMENT.md',
   'claude/skills/git-ship/SKILL.md',
   'claude/skills/git-ship/references/ci-watch.md',
+  'claude/skills/git-split/REQUIREMENT.md',
   'claude/skills/git-split/SKILL.md',
   'claude/skills/git-split/references/independent.md',
   'claude/skills/git-split/references/stacked.md',
+  'claude/skills/git-stage/REQUIREMENT.md',
   'claude/skills/git-stage/SKILL.md',
+  'claude/skills/git-worktree/REQUIREMENT.md',
   'claude/skills/git-worktree/SKILL.md',
   'claude/skills/git-worktree/references/cleanup.md',
+  'claude/skills/markdown-craft/REQUIREMENT.md',
   'claude/skills/markdown-craft/SKILL.md',
   'claude/skills/markdown-craft/references/markdown.md',
+  'claude/skills/plan-feature/REQUIREMENT.md',
   'claude/skills/plan-feature/SKILL.md',
   'claude/skills/plan-feature/references/batches.md',
   'claude/skills/plan-feature/references/plan-lifecycle.md',
   'claude/skills/plan-feature/references/plan.md',
+  'claude/skills/plan-groundwork/REQUIREMENT.md',
   'claude/skills/plan-groundwork/SKILL.md',
   'claude/skills/plan-groundwork/references/groundwork-spikes.md',
   'claude/skills/plan-groundwork/references/groundwork.md',
   'claude/skills/plan-groundwork/references/output.md',
+  'claude/skills/plan-intake-answer/REQUIREMENT.md',
   'claude/skills/plan-intake-answer/SKILL.md',
+  'claude/skills/plan-intake/REQUIREMENT.md',
   'claude/skills/plan-intake/SKILL.md',
   'claude/skills/plan-intake/references/intake.md',
+  'claude/skills/pr-evidence/REQUIREMENT.md',
   'claude/skills/pr-evidence/SKILL.md',
   'claude/skills/pr-evidence/references/evidence.md',
+  'claude/skills/read-frames/REQUIREMENT.md',
   'claude/skills/read-frames/SKILL.md',
+  'claude/skills/record-screencast/REQUIREMENT.md',
   'claude/skills/record-screencast/SKILL.md',
+  'claude/skills/review-address/REQUIREMENT.md',
   'claude/skills/review-address/SKILL.md',
   'claude/skills/review-address/references/post-review-findings.md',
   'claude/skills/review-address/references/rebase-conflicts.md',
   'claude/skills/review-address/references/rebase-only.md',
   'claude/skills/review-address/references/rest-reads.md',
+  'claude/skills/review-craft/REQUIREMENT.md',
   'claude/skills/review-craft/SKILL.md',
   'claude/skills/review-craft/references/adopted.md',
   'claude/skills/review-craft/references/security.md',
   'claude/skills/review-craft/references/ui.md',
+  'claude/skills/review-pr/REQUIREMENT.md',
   'claude/skills/review-pr/SKILL.md',
   'claude/skills/review-pr/references/body-variants.md',
   'claude/skills/review-pr/references/close-out.md',
   'claude/skills/review-pr/references/key-changes.md',
   'claude/skills/review-pr/references/post.md',
   'claude/skills/review-pr/references/scope.md',
+  'claude/skills/review-ui/REQUIREMENT.md',
   'claude/skills/review-ui/SKILL.md',
   'claude/skills/review-ui/references/close-out.md',
   'claude/skills/review-ui/references/driving.md',
   'claude/skills/review-ui/references/hosted-preview.md',
   'claude/skills/review-ui/references/post.md',
   'claude/skills/review-ui/references/tick.md',
+  'claude/skills/role-orchestrator/REQUIREMENT.md',
   'claude/skills/role-orchestrator/SKILL.md',
   'claude/skills/role-orchestrator/references/orchestrator-cloud-launch.md',
   'claude/skills/role-orchestrator/references/orchestrator-dispatch.md',
@@ -221,38 +295,53 @@ export const GATED_PATHS: readonly string[] = [
   'claude/skills/role-orchestrator/references/orchestrator-reviewer-launch.md',
   'claude/skills/role-orchestrator/references/orchestrator-sweep.md',
   'claude/skills/role-orchestrator/references/orchestrator-watch.md',
+  'claude/skills/role-planner/REQUIREMENT.md',
   'claude/skills/role-planner/SKILL.md',
+  'claude/skills/role-reviewer/REQUIREMENT.md',
   'claude/skills/role-reviewer/SKILL.md',
+  'claude/skills/role-worker/REQUIREMENT.md',
   'claude/skills/role-worker/SKILL.md',
+  'claude/skills/search-craft/REQUIREMENT.md',
   'claude/skills/search-craft/SKILL.md',
   'claude/skills/search-craft/references/adopted.md',
+  'claude/skills/session-compact/REQUIREMENT.md',
   'claude/skills/session-compact/SKILL.md',
   'claude/skills/session-compact/references/handoff-note.md',
+  'claude/skills/session-map/REQUIREMENT.md',
   'claude/skills/session-map/SKILL.md',
   'claude/skills/session-map/references/session.md',
+  'claude/skills/session-relay/REQUIREMENT.md',
   'claude/skills/session-relay/SKILL.md',
+  'claude/skills/session-resume/REQUIREMENT.md',
   'claude/skills/session-resume/SKILL.md',
+  'claude/skills/session-worktree/REQUIREMENT.md',
   'claude/skills/session-worktree/SKILL.md',
   'claude/skills/session-worktree/references/install-command.md',
   'claude/skills/session-worktree/references/main-root-writes.md',
+  'claude/skills/systematic-debugging/REQUIREMENT.md',
   'claude/skills/systematic-debugging/SKILL.md',
   'claude/skills/systematic-debugging/references/adopted.md',
+  'claude/skills/target-check/REQUIREMENT.md',
   'claude/skills/target-check/SKILL.md',
   'claude/skills/target-check/references/domains.md',
+  'claude/skills/target-setup/REQUIREMENT.md',
   'claude/skills/target-setup/SKILL.md',
   'claude/skills/target-setup/references/detect.md',
   'claude/skills/target-setup/references/indexes.md',
   'claude/skills/target-setup/references/verify.md',
+  'claude/skills/task-board/REQUIREMENT.md',
   'claude/skills/task-board/SKILL.md',
   'claude/skills/task-board/references/board.md',
   'claude/skills/task-board/references/create-report.md',
   'claude/skills/task-board/references/decline.md',
   'claude/skills/task-board/references/tasks-decline.md',
   'claude/skills/task-board/references/tasks.md',
+  'claude/skills/task-complete/REQUIREMENT.md',
   'claude/skills/task-complete/SKILL.md',
   'claude/skills/task-complete/references/archive.md',
   'claude/skills/task-complete/references/receipt-sweep.md',
   'claude/skills/task-complete/references/unusable-baseline.md',
+  'claude/skills/teach-workspace/REQUIREMENT.md',
   'claude/skills/teach-workspace/SKILL.md',
   'claude/skills/teach-workspace/references/glossary.md',
   'claude/skills/teach-workspace/references/lesson-build.md',
@@ -262,23 +351,43 @@ export const GATED_PATHS: readonly string[] = [
   'claude/skills/teach-workspace/references/promotion.md',
   'claude/skills/teach-workspace/references/revisit.md',
   'claude/skills/teach-workspace/references/teach.md',
+  'claude/skills/test-craft/REQUIREMENT.md',
   'claude/skills/test-craft/SKILL.md',
   'claude/skills/test-craft/references/adopted.md',
   'claude/skills/test-craft/references/component.md',
   'claude/skills/test-craft/references/e2e.md',
   'claude/skills/test-craft/references/unit.md',
+  'claude/skills/test-first/REQUIREMENT.md',
   'claude/skills/test-first/SKILL.md',
   'claude/skills/test-first/references/adopted.md',
+  'claude/skills/ui-checklist/REQUIREMENT.md',
   'claude/skills/ui-checklist/SKILL.md',
+  'claude/skills/ux-audit/REQUIREMENT.md',
   'claude/skills/ux-audit/SKILL.md',
+  'claude/skills/ux-measure/REQUIREMENT.md',
   'claude/skills/ux-measure/SKILL.md',
+  'claude/skills/video-craft/REQUIREMENT.md',
   'claude/skills/video-craft/SKILL.md',
   'claude/skills/video-craft/references/adopted.md',
+  'claude/skills/write-human/REQUIREMENT.md',
   'claude/skills/write-human/SKILL.md',
   'claude/skills/write-human/references/adopted.md',
   'claude/skills/write-human/references/density.md',
   'claude/skills/write-human/references/machine-tells.md',
+  'claude/skills/youtube-transcripts/REQUIREMENT.md',
   'claude/skills/youtube-transcripts/SKILL.md',
+  '.claude/skills/internal-canvas/REQUIREMENT.md',
+  '.claude/skills/internal-claude/REQUIREMENT.md',
+  '.claude/skills/internal-docs/REQUIREMENT.md',
+  '.claude/skills/internal-governance/REQUIREMENT.md',
+  '.claude/skills/internal-rule-audit/REQUIREMENT.md',
+  '.claude/skills/internal-sandbox-check/REQUIREMENT.md',
+  '.claude/skills/internal-scripts/REQUIREMENT.md',
+  '.claude/skills/internal-shipped-reference/REQUIREMENT.md',
+  '.claude/skills/internal-teach/REQUIREMENT.md',
+  '.claude/skills/internal-tooling/REQUIREMENT.md',
+  '.claude/skills/internal-upstream-digest/REQUIREMENT.md',
+  '.claude/skills/internal-web/REQUIREMENT.md',
   '.claude/skills/internal-',
   'docs/',
   'tooling/',
@@ -303,15 +412,23 @@ export function inDensityScope(rel: string): boolean {
   return DENSITY_SCOPE.some((pattern) => pattern.test(rel))
 }
 
-/** Whether a density finding of this kind on this path fails the run. */
+/**
+ * Whether a density finding of this kind on this path fails the run.
+ *
+ * `alwaysGated` is off for a target's list, since no stage of a target's ever
+ * failed a push on a bullet run, and gating one unlisted would fail an older
+ * project's push on prose it has not touched since the limit landed.
+ */
 export function densityGates(
   rel: string,
   kind: DensityKind,
   gated: readonly string[] = GATED_PATHS,
+  alwaysGated = true,
 ): boolean {
   if (!inDensityScope(rel)) return false
   if (REQUIREMENT_SCOPE.test(rel)) return gated.includes(rel)
   if (
+    alwaysGated &&
     ALWAYS_GATED.includes(kind) &&
     BULLET_RUN_SCOPE.some((pattern) => pattern.test(rel))
   )

package/src/migrate/rename.ts

@@ -12,6 +12,12 @@
  * sweeps sharing a module constant would have to agree on a single map, and
  * the second rename this repository needed shares nothing with the first
  * except the scanning discipline above.
+ *
+ * Two misses survive a clean run. The sweep reads spelled text only, so a path
+ * assembled as `join('.claude', ...)` is never joined back into a token and
+ * keeps its old spelling. And rewriting a test's fixtures can collapse a
+ * fallback test into a copy of its neighbor, which keeps passing while it
+ * covers nothing, so read the rewritten fixtures rather than trusting the run.
  */
 
 /**

package/src/migrate/scratch-evidence.ts

@@ -34,7 +34,7 @@ import {
   slugOf,
 } from '@/migrate/evidence-ordinal'
 import { presentFolders } from '@/records/backup'
-import { recordDir, SCRATCH } from '@/roots/record'
+import { LEGACY_SCRATCH_REL, recordDir, SCRATCH } from '@/roots/record'
 
 /**
  * Every folder this promotion moves, at the name it carries under scratch.
@@ -64,9 +64,17 @@ export const PROMOTED_FOLDERS: readonly string[] = [
   'target-survey',
 ]
 
-/** Where a promoted folder sits before the move. */
+/**
+ * Where a promoted folder sits before the move: `.canon/tmp` when it holds the
+ * folder, so a target part-way through a move promotes the newer copy, and the
+ * retired scratch folder otherwise. The verb is a migration, so it reads an
+ * unmigrated target where it is.
+ */
 export function sourcePath(root: string, folder: string): string {
-  return recordDir(root, SCRATCH, folder)
+  const current = recordDir(root, SCRATCH, folder)
+  const legacy = join(root, LEGACY_SCRATCH_REL, folder)
+
+  return !existsSync(current) && existsSync(legacy) ? legacy : current
 }
 
 /** The folder a promoted one lands inside, under whichever root carries it. */
@@ -85,7 +93,7 @@ function escape(value: string): string {
  * swallowing a sibling folder whose name extends it.
  */
 const OLD_PREFIXES = [
-  '.claude/.tmp/',
+  '.claude/.tmp/', // canon-keep-record-root
   '.canon/tmp/',
   '../.tmp/',
   '../tmp/',