@erclx/canon 5.54.0 → 5.56.0

package/src/cli/ui.ts

@@ -53,7 +53,38 @@ export function palette(stream: { isTTY?: boolean }): Palette {
   return supportsColor(stream) ? COLOR : PLAIN
 }
 
+let quiet = false
+
+/**
+ * Silences the progress frame for a caller that asked for a record, since an
+ * agent reads both streams and the frame outweighed the data. Warnings and
+ * errors still write, since diagnostics reach stderr in every mode.
+ */
+export function setQuiet(on: boolean): void {
+  quiet = on
+}
+
+/**
+ * The frame is drawn only for a terminal. A pipe or a file gets each line's
+ * mark alone, since a reader there gains nothing from `┌ │ ├ └` and an agent
+ * pays for every one of them.
+ */
+function framed(): boolean {
+  return process.stderr.isTTY === true
+}
+
+function markLine(color: keyof Palette, mark: string, message: string): string {
+  if (!framed()) return `${mark} ${message}\n`
+  const { GREY, NC, [color]: tint } = palette(process.stderr)
+  return `${GREY}│${NC} ${tint}${mark}${NC} ${message}\n`
+}
+
 export function intro(title: string): void {
+  if (quiet) return
+  if (!framed()) {
+    process.stderr.write(`${title}\n`)
+    return
+  }
   const { GREY, NC, WHITE } = palette(process.stderr)
   process.stderr.write(`${GREY}┌${NC}\n${GREY}│${NC} ${WHITE}${title}${NC}\n`)
 }
@@ -64,23 +95,22 @@ export function intro(title: string): void {
  * leaving stdout clean for JSON and lists.
  */
 export function logInfo(message: string): void {
-  const { GREEN, GREY, NC } = palette(process.stderr)
-  process.stderr.write(`${GREY}│${NC} ${GREEN}✓${NC} ${message}\n`)
+  if (quiet) return
+  process.stderr.write(markLine('GREEN', '✓', message))
 }
 
 export function logWarn(message: string): void {
-  const { GREY, NC, YELLOW } = palette(process.stderr)
-  process.stderr.write(`${GREY}│${NC} ${YELLOW}!${NC} ${message}\n`)
+  process.stderr.write(markLine('YELLOW', '!', message))
 }
 
 export function logAdd(message: string): void {
-  const { GREEN, GREY, NC } = palette(process.stderr)
-  process.stderr.write(`${GREY}│${NC} ${GREEN}+${NC} ${message}\n`)
+  if (quiet) return
+  process.stderr.write(markLine('GREEN', '+', message))
 }
 
 export function logRemove(message: string): void {
-  const { GREY, NC, RED } = palette(process.stderr)
-  process.stderr.write(`${GREY}│${NC} ${RED}-${NC} ${message}\n`)
+  if (quiet) return
+  process.stderr.write(markLine('RED', '-', message))
 }
 
 /**
@@ -89,31 +119,48 @@ export function logRemove(message: string): void {
  * exit code rather than terminating mid-write.
  */
 export function logError(message: string): void {
-  const { GREY, NC, RED } = palette(process.stderr)
-  process.stderr.write(`${GREY}│${NC} ${RED}✗${NC} ${message}\n`)
+  process.stderr.write(markLine('RED', '✗', message))
 }
 
 export function logStep(message: string): void {
+  if (quiet) return
+  if (!framed()) {
+    process.stderr.write(`${message}\n`)
+    return
+  }
   const { GREY, NC, WHITE } = palette(process.stderr)
   process.stderr.write(`${GREY}│${NC}\n${GREY}├${NC} ${WHITE}${message}${NC}\n`)
 }
 
 export function outro(): void {
+  if (quiet || !framed()) return
   const { GREY, NC } = palette(process.stderr)
   process.stderr.write(`${GREY}└${NC}\n`)
 }
 
+/**
+ * Closes the frame on the green line a command ends a success on. The line
+ * sits below the frame rather than inside it, and a quiet run writes neither.
+ */
+export function outroSuccess(message: string, detail?: string): void {
+  if (quiet) return
+  outro()
+  const { GREEN, GREY, NC } = palette(process.stderr)
+  const suffix = detail === undefined ? '' : ` ${GREY}${detail}${NC}`
+  process.stderr.write(`${GREEN}✓ ${message}${NC}${suffix}\n`)
+}
+
 /**
  * Indents borrowed output inside an open frame, matching `pipe_output` in
  * `scripts/lib/ui.sh`. Used for a document the command did not compose itself,
  * such as a pull request body or the output of a git mutation.
  */
 export function pipeOutput(text: string): void {
+  if (quiet) return
   const { GREY, NC } = palette(process.stderr)
+  const bar = framed() ? `${GREY}│${NC}` : ''
   const lines = text.replace(/\n$/, '').split('\n')
-  process.stderr.write(
-    `${lines.map((line) => `${GREY}│${NC}  ${line}`).join('\n')}\n`,
-  )
+  process.stderr.write(`${lines.map((line) => `${bar}  ${line}`).join('\n')}\n`)
 }
 
 /** Counts a noun for a report line, where the plural is the bare `s` form. */
@@ -122,6 +169,10 @@ export function plural(count: number, noun: string): string {
 }
 
 export function frameError(message: string): void {
+  if (!framed()) {
+    process.stderr.write(`✗ ${message}\n`)
+    return
+  }
   const { GREY, NC, RED } = palette(process.stderr)
   process.stderr.write(
     `${GREY}┌${NC}\n${GREY}│${NC} ${RED}✗${NC} ${message}\n${GREY}└${NC}\n`,
@@ -129,6 +180,11 @@ export function frameError(message: string): void {
 }
 
 export function frameSuccess(command: string, target: string): void {
+  if (quiet) return
+  if (!framed()) {
+    process.stderr.write(`${command}\n✓ ${target}\n`)
+    return
+  }
   const { GREEN, GREY, NC, WHITE } = palette(process.stderr)
   process.stderr.write(
     `${GREY}┌${NC}\n${GREY}│${NC} ${WHITE}${command}${NC}\n${GREY}│${NC}\n${GREY}│${NC} ${GREEN}✓${NC} ${target}\n${GREY}└${NC}\n`,
@@ -136,17 +192,17 @@ export function frameSuccess(command: string, target: string): void {
 }
 
 /**
- * The retired spelling is still honored, and permanently.
+ * A caller with no terminal on stdin is headless, since nobody can answer a
+ * prompt there.
  *
- * This variable is the documented way to drive any command headlessly, so
- * every skill body, CI job, and operator script already written sets the old
- * name. Those callers live in other repositories and in plugin caches this
- * release cannot reach, and the failure mode of dropping the fallback is a
- * command that quietly waits for a TTY nobody is watching rather than one that
- * refuses and says why.
+ * Both variables are retired overrides that force headless on a terminal and
+ * stay readable permanently. Skill bodies, CI jobs, and operator scripts in
+ * other repositories and plugin caches this release cannot reach still set
+ * them, and dropping the read turns their call into a prompt nobody watches.
  */
 export function isNonInteractive(): boolean {
   return (
+    !process.stdin.isTTY ||
     process.env.CANON_NON_INTERACTIVE === '1' ||
     // canon-keep-retired
     process.env.AITK_NON_INTERACTIVE === '1'
@@ -155,8 +211,8 @@ export function isNonInteractive(): boolean {
 
 /**
  * `nonInteractiveDefault` opts a prompt into resolving to its first option
- * under `CANON_NON_INTERACTIVE=1` instead of failing. Callers that would rather fail loudly than pick
- * for the user leave it off.
+ * when the caller is headless instead of failing. Callers that would rather
+ * fail loudly than pick for the user leave it off.
  */
 export async function select<Value>(opts: {
   message: string
@@ -171,9 +227,11 @@ export async function select<Value>(opts: {
   let cursor = 0
 
   if (opts.nonInteractiveDefault && isNonInteractive()) {
-    process.stderr.write(
-      `${GREY}│${NC}\n${GREY}◇${NC} ${message} ${WHITE}${options[0].label}${NC}\n`,
-    )
+    if (!quiet) {
+      process.stderr.write(
+        markLine('GREY', '◇', `${message} ${options[0].label}`),
+      )
+    }
     return options[0].value
   }
 
@@ -196,10 +254,11 @@ export async function select<Value>(opts: {
   }
 
   return new Promise<Value>((resolve) => {
-    if (!process.stdin.isTTY) {
-      process.stderr.write(
-        `${GREY}│${NC} ${RED}✗${NC} ${message} requires a TTY. ${opts.ttyHint ?? 'Pass an argument'} or set CANON_NON_INTERACTIVE=1.\n${GREY}└${NC}\n`,
+    if (isNonInteractive()) {
+      logError(
+        `${message} requires a TTY. ${opts.ttyHint ?? 'Pass an argument'}.`,
       )
+      outro()
       process.exit(1)
     }
 

package/src/cli.ts

@@ -40,6 +40,7 @@ import { register as changelog } from '@/commands/changelog'
 import { readInstalled, UNKNOWN_LABEL } from '@/version/installed'
 import { renderHelp } from '@/cli/help'
 import { renderAll, routeHelp } from '@/cli/help-all'
+import { setQuiet } from '@/cli/ui'
 
 function showHelp(): void {
   console.log(renderHelp(process.stdout))
@@ -57,6 +58,11 @@ program.on('option:help', () => {
   process.exit(0)
 })
 program.option('-h, --help', 'Show help')
+// A caller asking for a record reads it from stdout, so the frame on stderr is
+// noise it pays for. Warnings and errors still write.
+program.hook('preAction', (_program, action) => {
+  if (action.opts().json === true) setQuiet(true)
+})
 
 init(program)
 sandbox(program)

package/src/commands/claude.ts

@@ -91,6 +91,7 @@ import {
   logStep,
   logWarn,
   outro,
+  outroSuccess,
   palette,
   pipeOutput,
   plural,
@@ -604,9 +605,7 @@ export function register(program: Command): void {
 }
 
 function succeed(message: string): number {
-  const { GREEN, NC } = palette(process.stderr)
-  outro()
-  process.stderr.write(`${GREEN}✓ ${message}${NC}\n`)
+  outroSuccess(message)
   return 0
 }
 

package/src/commands/design.ts

@@ -5,7 +5,7 @@ import { buildDesignCss } from '@/design/css'
 import { HAND_DRAWN_FONT_FACES } from '@/design/fonts'
 import { DESIGN_DOCUMENT, regenDesign } from '@/design/regen'
 import { checkoutMismatchWarning, PROJECT_ROOT } from '@/roots/project'
-import { logWarn, palette } from '@/cli/ui'
+import { intro, logError, logInfo, logWarn, outro } from '@/cli/ui'
 
 export function register(program: Command): void {
   const design = program
@@ -29,8 +29,6 @@ export function register(program: Command): void {
       ].join('\n'),
     )
     .action(() => {
-      const { GREEN, GREY, NC, RED, WHITE } = palette(process.stderr)
-
       // The guard below catches a `PROJECT_ROOT` with no record at all, which
       // is an installed package. It cannot catch a second real checkout that
       // has one, so both paths carry the warning. It is a frame-interior line,
@@ -42,24 +40,21 @@ export function register(program: Command): void {
       // The record is already committed here and ships with no package, so
       // its absence is what separates the two.
       if (!existsSync(join(PROJECT_ROOT, DESIGN_DOCUMENT))) {
-        process.stderr.write(`${GREY}┌${NC}\n`)
+        intro('Regenerate design source')
         if (mismatch !== undefined) logWarn(mismatch)
-        process.stderr.write(
-          `${GREY}│${NC} ${RED}✗${NC} No ${DESIGN_DOCUMENT} at ${PROJECT_ROOT}. Regen runs in the toolkit checkout, not against a target.\n${GREY}└${NC}\n`,
+        logError(
+          `No ${DESIGN_DOCUMENT} at ${PROJECT_ROOT}. Regen runs in the toolkit checkout, not against a target.`,
         )
+        outro()
         process.exitCode = 1
         return
       }
 
-      process.stderr.write(
-        `${GREY}┌${NC}\n${GREY}│${NC} ${WHITE}Regenerate design source${NC}\n`,
-      )
+      intro('Regenerate design source')
       if (mismatch !== undefined) logWarn(mismatch)
       const result = regenDesign(PROJECT_ROOT)
-      process.stderr.write(
-        `${GREY}│${NC} ${GREEN}✓${NC} ${relative(PROJECT_ROOT, result.documentPath)}\n`,
-      )
-      process.stderr.write(`${GREY}└${NC}\n`)
+      logInfo(relative(PROJECT_ROOT, result.documentPath))
+      outro()
     })
 
   design

package/src/commands/gate.ts

@@ -19,6 +19,7 @@ import {
   logStep,
   logWarn,
   outro,
+  outroSuccess,
   palette,
   pipeOutput,
   plural,
@@ -216,20 +217,21 @@ function report(result: StageResult): void {
  * against.
  */
 function close(summary: Summary, code: number): void {
-  const { GREEN, NC, RED, YELLOW } = palette(process.stderr)
-  outro()
+  const { NC, RED, YELLOW } = palette(process.stderr)
 
   if (code !== 0) {
+    outro()
     process.stderr.write(`${RED}✗ Verification failed${NC}\n\n`)
     return
   }
 
   if (summary.unmeasured > 0) {
+    outro()
     process.stderr.write(
       `${YELLOW}! Verification passed, ${plural(summary.unmeasured, 'stage')} measured nothing${NC}\n\n`,
     )
     return
   }
 
-  process.stderr.write(`${GREEN}✓ Verification passed${NC}\n\n`)
+  outroSuccess('Verification passed')
 }

package/src/commands/gov.ts

@@ -75,7 +75,7 @@ import {
   logStep,
   logWarn,
   outro,
-  palette,
+  outroSuccess,
   select,
 } from '@/cli/ui'
 
@@ -184,9 +184,9 @@ export function register(program: Command): void {
         'Copies each rule into .claude/rules/canon/, replacing a copy already',
         'there. Rules under .claude/rules/project/ are never read.',
         '',
-        'The install confirm needs a TTY. --yes answers it, so a headless call',
-        'installs without setting CANON_NON_INTERACTIVE=1. It does not pick a',
-        'stack, so a headless call still names one.',
+        'The install confirm needs a TTY. --yes answers it, and a call with no',
+        'terminal on stdin takes Yes. It does not pick a stack, so a headless',
+        'call still names one.',
         '',
         'Exit codes:',
         '  0  installed, the stack held no rules, or the prompt was cancelled',
@@ -1160,7 +1160,7 @@ function runTestOrder(opts: TestOrderOptions): number {
   const report = readTestOrder(root, { base: opts.base })
   const emitJson = opts.json ?? false
 
-  // The frame renders on stderr in both modes and the record goes to stdout
+  // The refusal reaches stderr in both modes and the record goes to stdout
   // alone, which is the split `docs/agents/output-shape.md` fixes. A consumer
   // reading stdout sees pure data either way, and an operator reading the
   // terminal sees the refusal rather than a command that appeared to do nothing.
@@ -1455,8 +1455,8 @@ function displayPath(target: string, rel: string): string {
 }
 
 /**
- * Refuses rather than picking. `select_option` returned `options[0]` under
- * `CANON_NON_INTERACTIVE=1`, so a headless `canon gov install` with no stack
+ * Refuses rather than picking. `select_option` returned `options[0]` with no
+ * terminal to answer it, so a headless `canon gov install` with no stack
  * installed whichever stack sorted first, measured as 26 astro rules into an
  * empty directory. Every documented agent path already passes the argument.
  */
@@ -1558,16 +1558,13 @@ async function runInstall(
     now,
   )
 
-  const { GREEN, NC } = palette(process.stderr)
-  outro()
-  process.stderr.write(`${GREEN}✓ Rules installed${NC}\n`)
+  outroSuccess('Rules installed')
   return 0
 }
 
 /**
  * The install confirm. `--yes` answers it without a prompt, so the line it
- * would have printed is skipped rather than duplicated under
- * `CANON_NON_INTERACTIVE=1`.
+ * would have printed is skipped rather than duplicated on a headless call.
  */
 async function confirmInstall(
   count: number,
@@ -1582,7 +1579,6 @@ async function confirmInstall(
       { value: false, label: 'No' },
     ],
     nonInteractiveDefault: true,
-    ttyHint: 'Pass --yes',
   })
 }
 
@@ -1638,9 +1634,7 @@ async function installExtras(
 
   await recordStamp(createGovAdapter(PROJECT_ROOT), resolved, new Date())
 
-  const { GREEN, NC } = palette(process.stderr)
-  outro()
-  process.stderr.write(`${GREEN}✓ Rules installed${NC}\n`)
+  outroSuccess('Rules installed')
   return 0
 }
 
@@ -1689,10 +1683,6 @@ async function runBuild(target: string): Promise<number> {
   await writeFile(output, buildRulesPayload(files))
   logAdd(payload)
 
-  const { GREEN, NC } = palette(process.stderr)
-  outro()
-  process.stderr.write(
-    `${GREEN}✓ Rules built (${files.length} rules → ${payload})${NC}\n`,
-  )
+  outroSuccess(`Rules built (${files.length} rules → ${payload})`)
   return 0
 }

package/src/commands/labels.ts

@@ -311,7 +311,7 @@ async function runAudit(paths: string[], opts: AuditOptions): Promise<number> {
 
   intro('canon labels audit')
 
-  // The frame renders on stderr in both modes and the record goes to stdout
+  // The refusal reaches stderr in both modes and the record goes to stdout
   // alone, so an operator reading the terminal sees the refusal rather than a
   // command that appeared to do nothing.
   if (report.kind === 'refused') {

package/src/commands/markdown.ts

@@ -141,9 +141,10 @@ export function register(program: Command): void {
         'Depth weight is a judgment a reader settles, so it reports and never',
         'fails a run.',
         '',
-        'Density holds six limits: a 350-character paragraph, 2 paragraphs in',
-        'a row, a 200-character bullet, 5 plain bullets in a row, no H4, and a',
-        'paragraph or table opening every H3. Only context, docs, skills, tooling',
+        'Density holds eight limits: a 350-character paragraph, 2 paragraphs in',
+        'a row, a 200-character bullet, 5 plain bullets in a row, no H4, a',
+        'paragraph or table opening every H3, a 120-character table cell, and no',
+        'list as the block after a table. Only context, docs, skills, tooling',
         'seeds and references, the wiki, README.md, and CONTRIBUTING.md take a',
         'finding. CLAUDE.md and its seed take only the bullet run and the H3',
         'opening, inside Key paths. In a canon checkout one gates under a',
@@ -154,10 +155,9 @@ export function register(program: Command): void {
         'and none gates.',
         'A config that does not parse refuses with its path named.',
         '',
-        'Tables take four limits on the same paths, CLAUDE.md aside: a',
-        '120-character cell, 8 body rows, a list as the next block, and a code',
-        'span with a run past 30 characters. A table finding reports and never',
-        'fails a run.',
+        'Tables take two more limits on the same paths, CLAUDE.md aside: 8 body',
+        'rows, and a code span with a run past 30 characters. Each reports and',
+        'never fails a run.',
         '',
         'A page whose frontmatter carries kind: reference takes the reference',
         'shape: no H2 beyond Output, Refusals, and See also, each at most once',
@@ -637,15 +637,19 @@ const DENSITY_LABELS: Record<DensityKind, string> = {
   'bullet-run': 'bullets in a row',
   'heading-depth': 'heading depth',
   'h3-opening': 'H3 opening',
+  'table-cell': 'cell length',
+  'table-then-list': 'list after table',
 }
 
 function describeDensity(finding: GatedDensityFinding): string {
   const measured =
     finding.kind === 'h3-opening'
       ? 'opens with neither a paragraph nor a table'
-      : finding.kind === 'heading-depth'
-        ? `H${finding.value} past H${finding.limit}`
-        : `${finding.value} past ${finding.limit}`
+      : finding.kind === 'table-then-list'
+        ? 'follows the table with no lead sentence'
+        : finding.kind === 'heading-depth'
+          ? `H${finding.value} past H${finding.limit}`
+          : `${finding.value} past ${finding.limit}`
   const gate = finding.gating ? '  gating' : ''
   return `  :${finding.line}  ${DENSITY_LABELS[finding.kind]}  ${measured}${gate}`
 }
@@ -662,10 +666,10 @@ function reportDensity(
 ): void {
   logStep('Density')
   logInfo(
-    `Paragraphs past ${CHECKPOINTS.paragraph} characters, more than 2 paragraphs in a row, bullets past ${CHECKPOINTS.bullet} characters, more than 5 plain bullets in a row, a heading past H3, and an H3 opening with neither a paragraph nor a table.`,
+    `Paragraphs past ${CHECKPOINTS.paragraph} characters, more than 2 paragraphs in a row, bullets past ${CHECKPOINTS.bullet} characters, more than 5 plain bullets in a row, a heading past H3, an H3 opening with neither a paragraph nor a table, a table cell past ${TABLE_CELL} characters, and a list directly after a table.`,
   )
   logInfo(
-    'Measured on context entries, docs, skill bodies, references, and requirements, tooling seeds and stack references, the wiki, README.md, and CONTRIBUTING.md. CLAUDE.md and its seed take the bullet run and the H3 opening inside Key paths alone. Every other path takes no density finding.',
+    'Measured on context entries, docs, skill bodies, references, and requirements, tooling seeds and stack references, the wiki, README.md, and CONTRIBUTING.md. CLAUDE.md and its seed take the bullet run and the H3 opening inside Key paths alone, with no table finding. Every other path takes no density finding.',
   )
   logInfo(densityGatingLine(gated, source))
 
@@ -689,7 +693,7 @@ function reportDensity(
   )
   if (gating > 0) logWarn('A gating finding fails the run.')
   logInfo(
-    'Split a long block at its seam, put a heading or a table between paragraphs, give a long list H3s, and open each H3 with a sentence or a table.',
+    'Split a long block at its seam, put a heading or a table between paragraphs, give a long list H3s, open each H3 with a sentence or a table, move a long cell into a bullet under the lead, and give a trailing list its own lead sentence.',
   )
   pipeOutput(
     carrying
@@ -718,29 +722,23 @@ function densityGatingLine(
 }
 
 const TABLE_LABELS: Record<TableKind, string> = {
-  'table-cell': 'cell length',
   'table-rows': 'rows',
-  'table-then-list': 'list after table',
   'table-token': 'wide token',
 }
 
 function describeTable(finding: TableFinding): string {
-  const measured =
-    finding.kind === 'table-then-list'
-      ? 'follows the table with no lead sentence'
-      : `${finding.value} past ${finding.limit}`
-  return `  :${finding.line}  ${TABLE_LABELS[finding.kind]}  ${measured}`
+  return `  :${finding.line}  ${TABLE_LABELS[finding.kind]}  ${finding.value} past ${finding.limit}`
 }
 
 /**
- * Lists every table finding on the density scope's paths. None gates yet,
- * since a gate is decided per path rather than per kind, and a new density
- * kind would fail every gated folder carrying a table hit at once.
+ * Lists the table findings that only report, on the density scope's paths. The
+ * cell and the trailing list gate as density kinds, so `reportDensity` lists
+ * them.
  */
 function reportTables(reports: readonly FileReport[]): void {
   logStep('Tables')
   logInfo(
-    `Cells past ${TABLE_CELL} characters, tables past ${TABLE_ROWS} body rows, a list directly after a table, and a code span in a cell holding a run past ${TABLE_TOKEN} characters.`,
+    `Tables past ${TABLE_ROWS} body rows and a code span in a cell holding a run past ${TABLE_TOKEN} characters.`,
   )
   logInfo(
     'Measured on the paths density measures in full, so never on CLAUDE.md, outside fenced blocks. This never fails a run.',
@@ -760,7 +758,7 @@ function reportTables(reports: readonly FileReport[]): void {
     `${plural(total, 'finding')} across ${plural(carrying.length, 'file')}`,
   )
   logInfo(
-    'Move a long cell into a bullet under the lead, split a long table into groups each under a lead sentence, give a trailing list its own lead, and move a wide token out of the table.',
+    'Split a long table into groups each under a lead sentence, and move a wide token out of the table.',
   )
   pipeOutput(
     carrying
@@ -917,11 +915,9 @@ function reportBullets(
 ): void {
   logStep('Bullets')
   logInfo(
-    'Top-level bullets measure characters, folding in continuation lines.',
-  )
-  logInfo(
-    'Nested items and fenced blocks are excluded. Weight is a judgment, never a defect.',
+    'Bullets measure characters, folding in continuation lines, and a nested bullet measures on its own.',
   )
+  logInfo('Fenced blocks are excluded. Weight is a judgment, never a defect.')
 
   const carrying = reports
     .filter((report) => report.structure.heavyBullets.length > 0)

package/src/commands/pr.ts

@@ -3839,7 +3839,7 @@ async function readEvidenceGate(
       cwd: root,
       reject: false,
       timeout: GH_TIMEOUT_MS * 2,
-      env: { ...gitEnv(), CANON_NON_INTERACTIVE: '1' },
+      env: gitEnv(),
       extendEnv: false,
     },
   )

package/src/commands/sync.ts

@@ -423,7 +423,7 @@ async function runSync(target: string): Promise<number> {
 /**
  * Each domain sync runs as its own process. They open their own frames and
  * prompt for their own changes, so stdin stays inherited. Claude is the one
- * exception: it runs headless because the combined pull request preview is the
+ * exception: its stdin is closed because the combined pull request preview is the
  * single confirmation gate for the whole sync, and `canon claude sync` writes
  * only `.gitignore`.
  */

package/src/commands/tooling.ts

@@ -36,7 +36,7 @@ import {
   logStep,
   logWarn,
   outro,
-  palette,
+  outroSuccess,
   select,
 } from '@/cli/ui'
 
@@ -101,7 +101,7 @@ export function register(program: Command): void {
         'Examples:',
         '  canon tooling sync base',
         '  canon tooling sync base --check',
-        '  CANON_NON_INTERACTIVE=1 canon tooling sync base --write',
+        '  canon tooling sync base --write',
         '  canon tooling sync vite-react web --skip base',
         '',
         'A target below its git root syncs as a subfolder. It withholds',
@@ -412,7 +412,6 @@ async function runSync(
   }
 
   const mode = resolveWriteMode(opts)
-  const { GREEN, NC } = palette(process.stderr)
 
   if (result.totalChanges === 0) {
     // The stamp is a write like any other, so a run with no authority to write
@@ -421,8 +420,7 @@ async function runSync(
     if (mode === 'apply' || mode === 'prompt') {
       await stampChain(prepared.chain, prepared.target)
     }
-    outro()
-    process.stderr.write(`${GREEN}✓ Everything up to date${NC}\n`)
+    outroSuccess('Everything up to date')
     return 0
   }
 
@@ -450,8 +448,7 @@ async function runSync(
 
   await stampChain(prepared.chain, prepared.target)
 
-  outro()
-  process.stderr.write(`${GREEN}✓ Tooling sync complete${NC}\n`)
+  outroSuccess('Tooling sync complete')
   return 0
 }
 
@@ -607,7 +604,7 @@ async function promptForStack(): Promise<string | undefined> {
   return select({
     message: 'Select tooling stack:',
     options: stacks.map((name) => ({ value: name, label: name })),
-    nonInteractiveDefault: true,
+    ttyHint: `Pass a stack, one of: ${stacks.join(', ')}`,
   })
 }