@erclx/canon 5.46.0 → 5.48.0

package/src/tasks/archive.ts

@@ -107,6 +107,7 @@ export interface ArchiveSuccess {
   readonly from: string
   readonly to: string
   readonly priorityRowRemoved: boolean
+  readonly backlogRowRemoved: boolean
   readonly indexRegenerated: boolean
   /** Every live plan the task cited that no other live task still holds, in line order. */
   readonly plans: readonly PlanMove[]
@@ -114,6 +115,8 @@ export interface ArchiveSuccess {
   readonly ready: ReadyMove | undefined
   readonly closed: number
   readonly cut: number
+  /** Unticked `Operator check:` outcomes the archive left as they were. */
+  readonly operatorChecks: readonly string[]
   /** Every task file whose links to the moved task were rewritten. */
   readonly relinked: readonly InboundRelink[]
   /** Every task file the pass could not read or write, left as it was. */
@@ -158,6 +161,8 @@ export interface TaskOutcomes {
   readonly open: readonly string[]
   readonly closed: readonly string[]
   readonly cut: readonly string[]
+  /** Unticked outcomes only the operator can check, which hold nothing open. */
+  readonly operator: readonly string[]
 }
 
 export function tasksDir(root: string): string {
@@ -196,6 +201,9 @@ const BULLET_PATTERN = /^- (?:\[([ xX])\] ?)?(.*)$/
  */
 const STRUCK_BODY_PATTERN = /^~~.+~~/
 
+/** The one spelling of an operator-owned outcome, anchored to the body's start. */
+const OPERATOR_BODY_PATTERN = /^Operator check: ?\S/
+
 /**
  * Marks the lines sitting inside a fenced block, the fence delimiters included.
  * A checkbox in a sample a task displays is not an outcome the task claims, and
@@ -231,6 +239,7 @@ export function readOutcomes(text: string): TaskOutcomes {
   const open: string[] = []
   const closed: string[] = []
   const cut: string[] = []
+  const operator: string[] = []
   const lines = text.split('\n')
   const fenced = fenceMask(lines)
 
@@ -251,13 +260,17 @@ export function readOutcomes(text: string): TaskOutcomes {
     if (box === undefined) continue
 
     if (box === ' ') {
-      open.push(body)
+      if (OPERATOR_BODY_PATTERN.test(body)) {
+        operator.push(body)
+      } else {
+        open.push(body)
+      }
     } else {
       closed.push(body)
     }
   }
 
-  return { open, closed, cut }
+  return { open, closed, cut, operator }
 }
 
 /**
@@ -556,7 +569,7 @@ function isRowFor(line: string, target: string): boolean {
 }
 
 /**
- * Drops the declined task's bullet from the backlog. A backlog line is a
+ * Drops the task's bullet from the backlog. A backlog line is a
  * bullet carrying a link rather than a table row, so the match is a bullet
  * prefix and the link target rather than `isRowFor`'s pipe-delimited cell.
  */
@@ -571,9 +584,17 @@ export function removeBacklogRow(
   return { text: kept.join('\n'), removed: kept.length !== lines.length }
 }
 
+/**
+ * A bullet is about a task when its first link targets it. A later link is a
+ * reference, such as a note on what the bullet waits for, and matching anywhere
+ * would drop that other task's line from a file no history backs.
+ */
 function isBulletFor(line: string, target: string): boolean {
   const trimmed = line.trimStart()
-  return /^[-*]\s/.test(trimmed) && trimmed.includes(target)
+  if (!/^[-*]\s/.test(trimmed)) return false
+
+  const first = trimmed.indexOf('](')
+  return first !== -1 && trimmed.startsWith(target, first)
 }
 
 /**
@@ -896,8 +917,8 @@ async function resolveStem(
 }
 
 /**
- * Archives one task as a single unit: the move, the ordering-row removal, and
- * the index regen. The hook and `task-complete` both call this, so every gate
+ * Archives one task as a single unit: the move, the ordering-row and backlog
+ * bullet removal, and the index regen. The hook and `task-complete` both call this, so every gate
  * refuses rather than reports. A caller with nobody watching cannot act on a
  * warning, and two callers gating differently is the drift this exists to stop.
  */
@@ -942,7 +963,7 @@ export async function archiveTask(
     )
   }
 
-  const { open, closed, cut } = readOutcomes(text)
+  const { open, closed, cut, operator } = readOutcomes(text)
 
   if (open.length > 0) {
     return refuse(
@@ -952,7 +973,7 @@ export async function archiveTask(
     )
   }
 
-  if (closed.length === 0 && cut.length === 0) {
+  if (closed.length === 0 && cut.length === 0 && operator.length === 0) {
     return refuse(
       'no-outcomes',
       `${stem} carries no outcomes, so nothing marks it shipped.`,
@@ -996,6 +1017,7 @@ export async function archiveTask(
 
   const { relinked, failed } = await repointInboundLinks(root, from, to)
   const priorityRowRemoved = await clearPriorityRow(dir, stem)
+  const backlogRowRemoved = await clearBacklogRow(dir, stem)
   const regen = await regenOne(dir, { dryRun: false })
 
   return {
@@ -1004,11 +1026,13 @@ export async function archiveTask(
     from,
     to,
     priorityRowRemoved,
+    backlogRowRemoved,
     indexRegenerated: regen.action === 'written',
     plans: plans.moves,
     ready: ready || undefined,
     closed: closed.length,
     cut: cut.length,
+    operatorChecks: operator,
     relinked,
     relinkFailed: failed,
   }

package/src/tasks/closes.ts

@@ -29,6 +29,8 @@ export interface Closure {
   readonly issues: readonly number[]
   readonly closing: boolean
   readonly reason: ClosingReason
+  /** Unticked operator checks, read once the outcome test runs. */
+  readonly operatorChecks?: readonly string[]
 }
 
 export interface TaskClosure extends Closure {
@@ -108,16 +110,18 @@ export function decideClosing(
     return { issues, closing: false, reason: 'pending-branch' }
   }
 
-  const { open, closed, cut } = readOutcomes(text)
+  const { open, closed, cut, operator } = readOutcomes(text)
+  const operatorChecks = operator
+
   if (open.length > 0) {
-    return { issues, closing: false, reason: 'open-outcomes' }
+    return { issues, closing: false, reason: 'open-outcomes', operatorChecks }
   }
 
-  if (closed.length === 0 && cut.length === 0) {
-    return { issues, closing: false, reason: 'no-outcomes' }
+  if (closed.length === 0 && cut.length === 0 && operator.length === 0) {
+    return { issues, closing: false, reason: 'no-outcomes', operatorChecks }
   }
 
-  return { issues, closing: true, reason: 'last-slice' }
+  return { issues, closing: true, reason: 'last-slice', operatorChecks }
 }
 
 /** Resolves the task through the same selector `pull-request` takes. */

package/src/tasks/validate.ts

@@ -1315,8 +1315,10 @@ async function checkCitedTask(
   }
 
   const text = await readFile(live, 'utf8')
-  const { open, closed } = readOutcomes(text)
-  if (open.length > 0 || closed.length === 0) return nothing()
+  const { open, closed, operator } = readOutcomes(text)
+  if (open.length > 0 || closed.length + operator.length === 0) {
+    return nothing()
+  }
 
   const pending = readPendingBranches(text)
   if (pending.length > 0) {

package/tooling/base/seeds/.github/pull_request_template.md

@@ -8,7 +8,7 @@
 - <Verb> <specific component/file/function>
 
 <!-- ## Technical context (optional, omit for docs/config/trivial changes) -->
-<!-- - <Why this approach was taken, not what changed> -->
+<!-- **<Decision in a few words>.** <Why this approach, what the code can't show, and any shortcoming> -->
 
 ## Testing
 

package/tooling/claude/reference.md

@@ -69,7 +69,9 @@ A project installed before the board became a folder still holds `.claude/TASKS.
 - Keep only what is project-specific in the project file, since project settings layer over user settings
 - Expect `permissions.deny` to hold `Agent` and `Task`, so no session spawns a subagent and parallel work runs as separate background sessions
 - Expect `autoMemoryEnabled` to be `false`. A person turns it back on for themselves in `settings.local.json`.
-- Run `canon migrate session-defaults` on a target seeded before those two defaults, since sync never rewrites an existing settings file
+- Run `canon migrate session-defaults` on a target seeded before those two defaults or before the merge entries below, since sync never rewrites an existing settings file
+
+The seed's deny list also holds `Bash(canon pr merge:*)` and `Bash(gh pr merge:*)`, so the operator alone merges. An existing target gets both from `canon migrate session-defaults --write`, and `canon claude sync` warns while either is absent. Neither covers more than the form an agent writes by default.
 
 ## User settings
 

package/tooling/claude/seeds/.claude/settings.json

@@ -1,7 +1,7 @@
 {
   "autoMemoryEnabled": false,
   "permissions": {
-    "deny": ["Agent", "Task"]
+    "deny": ["Agent", "Task", "Bash(canon pr merge:*)", "Bash(gh pr merge:*)"]
   },
   "hooks": {
     "PreToolUse": [