@erclx/canon 5.47.0 → 5.49.0

package/docs/workflow/operating-model.md

@@ -32,9 +32,9 @@ One warm session holds the cross-feature call and reviews. Cold worker sessions
 5. The reviewer tells the session holding the branch to run `review-address`, found with `canon sessions list --branch`, once a pass posts a finding at any severity.
 6. The worker addresses the findings, rebases onto `origin/main` if a sibling landed on its files, pushes, and asks that reviewer for a re-review of the added commits.
 7. A pass posts `## Review` while anything is open and `## Review closed` when nothing is. The reviewer then runs `canon pr lift`.
-8. The human merges. The orchestrator tells any trailing worker whose files the merge touched to run `review-address`, which rebases.
+8. The human merges with `canon pr merge <number>`. The orchestrator tells any trailing worker whose files the merge touched to run `review-address`, which rebases.
 
-Each worker halts at the PR, and the merge stays a human gate.
+Each worker halts at the PR, and the merge stays a human gate. `canon pr merge` squashes with the body's Summary, Key changes, and Technical context as the message, and the seeded deny rule covers the forms an agent writes by default. The merge button stays for a bot's pull request, such as a dependency bump or a release.
 
 ## The review layer
 

package/docs/workflow/parallel-features.md

@@ -32,7 +32,7 @@ Assert the orchestrator role in one warm session with `canon:role-orchestrator`.
 
 - To pick otherwise, rewrite that line as `overridden at execution to <pick>,` plus the measurement, and add one line to the open task's `## Findings`
 
-- `canon records validate plans` reports a plan breaking its standard, and takes `groundwork`, `intake`, and `teach`
+- `canon records validate plans [plan]` reports a plan breaking its standard, plus `structure` misses that never set the exit, and takes `groundwork`, `intake`, and `teach`
 - `canon records push` and `canon records pull` carry `.canon/` to and from a private repository. See [records](../agents/records.md).
 - `canon records size`, `canon records prune-tmp`, and `canon records stale canonical` report folder size, idle scratch, and releases since the requirements review
 - `canon tasks archive` moves a shipped plan to `.canon/plans/archive/` and retargets the task's `Plan:` line
@@ -58,6 +58,6 @@ Merge order matters only when two branches touch the same file. Expect to rebase
 - A parked row is reported when its cited task reached the trunk, whether the cell links it or names its bare label
 - A group header must be the columns the group owns, a `Touches` cell must match its plan, and a `Waiting on` cell renders at most 120 characters
 
-`canon:task-board` creates a task file, and `canon:task-complete` marks outcomes. The `post-merge` hook archives the task a merged pull request closed, with its plan, and a `post-rewrite` hook does the same for a rebase pull. Both archive only when the merge carried a PR number and the task is closed.
+`canon:task-board` creates a task file, and `canon:task-complete` marks outcomes. The `post-merge` hook archives the task a merged pull request closed, with its plan, and a `post-rewrite` hook does the same for a rebase pull. Both archive a closed task whose merge carried a PR number, and a slice merged before then moves only its own plan.
 
 `CANON_SKIP_RECLAIM`, `CANON_SKIP_UPGRADE`, and `CANON_SKIP_PLUGIN_UPDATE` turn off the three hook steps that act on the machine.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@erclx/canon",
   "type": "module",
-  "version": "5.47.0",
+  "version": "5.49.0",
   "description": "Runs your agent's work and keeps its code good, on one setup for every repo.",
   "license": "MIT",
   "bin": {

package/src/commands/claude.ts

@@ -673,6 +673,10 @@ async function runSync(target: string): Promise<number> {
     logWarn(
       'settings.json lacks the session defaults. Run `canon migrate session-defaults --write`',
     )
+  } else if (defaults.kind === 'planned' && defaults.plan.lacksMergeDeny) {
+    logWarn(
+      'settings.json lacks the merge deny entries. Run `canon migrate session-defaults --write`',
+    )
   }
 
   logStep('Scanning .gitignore')

package/src/commands/migrate.ts

@@ -1421,10 +1421,11 @@ export function register(program: Command): void {
       'after',
       [
         '',
-        'Adds Agent and Task to permissions.deny in .claude/settings.json,',
-        'appending to the list without reordering it, and sets',
-        'autoMemoryEnabled to false only when the key is absent. A deny entry',
-        'is never removed and an existing autoMemoryEnabled is never changed.',
+        'Adds Agent, Task, Bash(canon pr merge:*), and Bash(gh pr merge:*) to',
+        'permissions.deny in .claude/settings.json, appending only the ones',
+        'the list lacks without reordering it, and sets autoMemoryEnabled to',
+        'false only when the key is absent. A deny entry is never removed and',
+        'an existing autoMemoryEnabled is never changed.',
         '',
         'A missing settings file is nothing to do. A file that is not valid',
         'JSON, or whose permissions or deny has an unexpected shape, is',