@afokapu/atdd-bun 0.10.96 → 0.10.97

package/conventions/_profiles/coder.yaml

@@ -399,7 +399,7 @@ relationships:
     control: "internal"
     foundation: "finish_to_start"
     origin: "@afokapu/atdd-bun"
-    reason: "Bun realization of the core obligation coder.design.primitives, checked over .tsx, .jsx, .html and .css"
+    reason: "Bun realization of the core obligation coder.design.primitives, checked over .tsx, .jsx, .html, .css and HTML authored in .ts/.mts literals"
     source_ref: "coder.bun.design-primitives"
     strength: "important"
     target_ref: "coder.design.primitives"
@@ -429,7 +429,7 @@ relationships:
     control: "internal"
     foundation: "finish_to_start"
     origin: "@afokapu/atdd-bun"
-    reason: "Bun realization of the core obligation coder.design.token-color, checked over .tsx, .jsx, .html and .css"
+    reason: "Bun realization of the core obligation coder.design.token-color, checked over .tsx, .jsx, .html, .css and HTML authored in .ts/.mts literals"
     source_ref: "coder.bun.design-token-color"
     strength: "important"
     target_ref: "coder.design.token-color"
@@ -439,7 +439,7 @@ relationships:
     control: "internal"
     foundation: "finish_to_start"
     origin: "@afokapu/atdd-bun"
-    reason: "Bun realization of the core obligation coder.design.token-hardcoded, checked over .tsx, .jsx, .html and .css"
+    reason: "Bun realization of the core obligation coder.design.token-hardcoded, checked over .tsx, .jsx, .html, .css and HTML authored in .ts/.mts literals"
     source_ref: "coder.bun.design-token-hardcoded"
     strength: "important"
     target_ref: "coder.design.token-hardcoded"

package/conventions/_profiles/design.yaml

@@ -92,7 +92,7 @@ relationships:
     control: "internal"
     foundation: "finish_to_start"
     origin: "@afokapu/atdd-bun"
-    reason: "Bun realization of the core obligation coder.design.primitives, checked over .tsx, .jsx, .html and .css"
+    reason: "Bun realization of the core obligation coder.design.primitives, checked over .tsx, .jsx, .html, .css and HTML authored in .ts/.mts literals"
     source_ref: "coder.bun.design-primitives"
     strength: "important"
     target_ref: "coder.design.primitives"
@@ -122,7 +122,7 @@ relationships:
     control: "internal"
     foundation: "finish_to_start"
     origin: "@afokapu/atdd-bun"
-    reason: "Bun realization of the core obligation coder.design.token-color, checked over .tsx, .jsx, .html and .css"
+    reason: "Bun realization of the core obligation coder.design.token-color, checked over .tsx, .jsx, .html, .css and HTML authored in .ts/.mts literals"
     source_ref: "coder.bun.design-token-color"
     strength: "important"
     target_ref: "coder.design.token-color"
@@ -132,7 +132,7 @@ relationships:
     control: "internal"
     foundation: "finish_to_start"
     origin: "@afokapu/atdd-bun"
-    reason: "Bun realization of the core obligation coder.design.token-hardcoded, checked over .tsx, .jsx, .html and .css"
+    reason: "Bun realization of the core obligation coder.design.token-hardcoded, checked over .tsx, .jsx, .html, .css and HTML authored in .ts/.mts literals"
     source_ref: "coder.bun.design-token-hardcoded"
     strength: "important"
     target_ref: "coder.design.token-hardcoded"

package/conventions/coder.bun/coder.bun.design-primitives.convention.yaml

@@ -5,16 +5,20 @@ status: active
 name: App components compose design-system primitives for interactive controls
 statement: An app component (`.tsx`/`.jsx` outside the design root) MUST render interactive controls through a design-system
   primitive rather than a raw `<button>`, `<input>`, `<select>`, or `<textarea>`, so controls stay themed, accessible,
-  and consistent. Bun realization of `coder.design.primitives`, mirroring `coder.vite.design-primitives`.
+  and consistent. The same obligation covers controls authored as HTML in the bodies of string, template, and
+  tagged-template literals in `.ts`/`.mts` files outside the design root — the shape an htmx/Bun server-rendered
+  app writes. Bun realization of `coder.design.primitives`, mirroring `coder.vite.design-primitives`.
 terms:
 - term_id: design_root
   text: 'a directory named `design`, `design_system`, or `design-system`. The first directory beneath it names the
     layer: `tokens` or `foundations`, `primitives`, `components`, `templates`. A repository with no design root
     is not judged (self-scoping): there is no system to connect to yet.'
 - term_id: raw_control
-  text: a lowercase `<button`, `<input`, `<select`, or `<textarea` element written in app code.
+  text: 'a lowercase `<button`, `<input`, `<select`, or `<textarea` element written in app code — in JSX, or in the
+    body of a string/template/tagged-template literal in a `.ts`/`.mts` file, followed by whitespace, `>`, or `/`.'
 content:
-  summary: Flags raw interactive platform elements in component source outside the design root.
+  summary: Flags raw interactive platform elements in component source and in `.ts`/`.mts` literal HTML outside the
+    design root.
   normative_text: Controls are where focus, disabled, error, and loading states live. Each raw control re-implements
     them, and each re-implementation diverges.
   fix_hint: |
@@ -38,6 +42,9 @@ content:
   - Test files (`*.test.*`, `*.spec.*`) and vendored/build directories are never scanned.
   - The design system's own primitives render the raw elements and are not scanned.
   - Plain `.html` templates cannot import components and are out of scope.
+  - 'Only literal text is judged in `.ts`/`.mts` files: code position (comparisons, angle-bracket type
+    assertions), comments, and regex literals are never treated as markup, and a control spanning a `${…}`
+    interpolation is read on its literal chunks alone.'
 metadata:
   aliases:
   - BUN-DESIGN-PRIMITIVES-001

package/conventions/coder.bun/coder.bun.design-token-color.convention.yaml

@@ -5,8 +5,10 @@ status: active
 name: UI files use color tokens, not raw color literals
 statement: Outside the tokens layer, a UI file (`.tsx`, `.jsx`, `.html`, `.htm`, `.css`) MUST NOT write a raw color
   literal — `#rgb`/`#rrggbb`/`#rrggbbaa`, `rgb()`/`rgba()`, `hsl()`/`hsla()` — in a CSS declaration, a `style` attribute,
-  a `<style>` block, a JSX `style={{…}}` object, or a `fill`/`stroke`/`bgcolor` attribute. Colors come from tokens
-  (`var(--…)`). Bun realization of `coder.design.token-color`, mirroring `coder.vite.design-token-color`.
+  a `<style>` block, a JSX `style={{…}}` object, or a `fill`/`stroke`/`bgcolor` attribute. The same declarations are
+  judged in inline `style="…"` attributes and `<style>` text authored in the HTML a `.ts`/`.mts` file renders from
+  string/template/tagged-template literals. Colors come from tokens (`var(--…)`). Bun realization of
+  `coder.design.token-color`, mirroring `coder.vite.design-token-color`.
 terms:
 - term_id: design_root
   text: 'a directory named `design`, `design_system`, or `design-system`. The first directory beneath it names the
@@ -16,8 +18,8 @@ terms:
   text: 'a hex, rgb(a), or hsl(a) color written in a declaration value. Selectors are not values: `#fade:hover {`
     is never read as a color.'
 content:
-  summary: Reads declarations from stylesheets, style attributes, style blocks, and JSX style objects, and flags
-    raw color literals in their values.
+  summary: Reads declarations from stylesheets, style attributes, style blocks, JSX style objects, and `.ts`/`.mts`
+    literal HTML, and flags raw color literals in their values.
   normative_text: A raw color is a theme decision made in one place. It does not follow dark mode, it drifts from
     the palette, and nobody can find it when the palette changes.
   fix_hint: |
@@ -42,6 +44,8 @@ content:
   - 'Custom property definitions (`--danger: #b91c1c`) define tokens wherever they live and are not flagged.'
   - The tokens/foundations layer is where raw colors are defined and is not scanned.
   - Named colors (`red`, `white`) and `currentColor`/`transparent` are not flagged.
+  - 'Only literal text is judged in `.ts`/`.mts` files: code, comments, and regex literals are never read as
+    declarations, and a value spanning a `${…}` interpolation is judged on its literal chunks alone.'
 metadata:
   aliases:
   - BUN-DESIGN-TOKEN-COLOR-001

package/conventions/coder.bun/coder.bun.design-token-hardcoded.convention.yaml

@@ -6,8 +6,9 @@ name: UI files take spacing, radii, and durations from foundations
 statement: Outside the tokens layer, a UI file MUST NOT hardcode a spacing, inset, or border-radius length greater
   than 1px (`margin`, `padding`, `gap`, `inset`, `top`/`right`/`bottom`/`left`, `border-radius`), nor a non-zero
   duration in `transition`/`animation`. A bare number in a JSX style object for those properties counts as a length.
-  These values come from foundations tokens. Bun realization of `coder.design.token-hardcoded` and of the raw-pixel
-  part of `coder.design.foundations`.
+  The same declarations are judged in inline `style="…"` attributes and `<style>` text authored in the HTML a
+  `.ts`/`.mts` file renders from string/template/tagged-template literals. These values come from foundations
+  tokens. Bun realization of `coder.design.token-hardcoded` and of the raw-pixel part of `coder.design.foundations`.
 terms:
 - term_id: design_root
   text: 'a directory named `design`, `design_system`, or `design-system`. The first directory beneath it names the
@@ -43,6 +44,8 @@ content:
   - 'Custom property definitions (`--space-3: 12px`) define tokens wherever they live and are not flagged.'
   - The tokens/foundations layer defines these values and is not scanned.
   - Widths, heights, and font sizes are out of scope for this rule.
+  - 'Only literal text is judged in `.ts`/`.mts` files: code, comments, and regex literals are never read as
+    declarations, and a value spanning a `${…}` interpolation is judged on its literal chunks alone.'
 metadata:
   aliases:
   - BUN-DESIGN-TOKEN-HARDCODED-001

package/detectors/bun_design_system_detector/checks/_design.mjs

@@ -71,14 +71,17 @@ export function designTarget(file, specifier) {
   return d ? { layer: d.layer, layerName: d.layerName, root: d.root, path: t.path } : null;
 }
 
-export function masked(file) {
+export function masked(file, opts) {
   const text = readText(file);
   if (text === null) return null;
-  return { text, code: extname(file) === ".css" ? text.replace(/\/\*[\s\S]*?\*\//g, (c) => c.replace(/[^\n]/g, " ")) : maskLiteralsAndComments(text) };
+  return { text, code: extname(file) === ".css" ? text.replace(/\/\*[\s\S]*?\*\//g, (c) => c.replace(/[^\n]/g, " ")) : maskLiteralsAndComments(text, opts) };
 }
 
 export const isUi = (file) => UI_EXT.has(extname(file));
 export const isComponentSource = (file) => extname(file) === ".tsx" || extname(file) === ".jsx";
+// `.ts`/`.mts` app files render HTML from string/template/tagged-template literals: the
+// literals-only mask keeps those bodies visible for the design rules that judge rendered markup.
+export const isTsSource = (file) => { const e = extname(file); return e === ".ts" || e === ".mts"; };
 export const hasDesignRoot = (files) => files.some((file) => designOf(file));
 
 const kebab = (prop) => prop.replace(/[A-Z]/g, (c) => "-" + c.toLowerCase());

package/detectors/bun_design_system_detector/checks/design_primitives.mjs

@@ -1,16 +1,25 @@
 #!/usr/bin/env bun
 // Detector: coder.bun.design-primitives
 // App components (outside the design root) render interactive controls through the
-// design-system primitive, not raw <button>/<input>/<select>/<textarea>.
-import { readRoots, readExcludes, readText, emit, locate } from "../../../lib/scan.mjs";
-import { scope, designOf, isComponentSource, masked } from "./_design.mjs";
+// design-system primitive, not raw <button>/<input>/<select>/<textarea> — including the
+// HTML an app renders from string/template/tagged-template literals in .ts/.mts files,
+// the shape an htmx/Bun server-rendered app actually writes.
+import { readRoots, readExcludes, emit, locate } from "../../../lib/scan.mjs";
+import { scope, designOf, isComponentSource, isTsSource, masked } from "./_design.mjs";
 
 const RULE_ID = "coder.bun.design-primitives";
 const violations = [];
 for (const file of scope(readRoots(), readExcludes())) {
-  if (!isComponentSource(file) || designOf(file)) continue;
-  const m = masked(file);
-  for (const c of (m?.code ?? "").matchAll(/<(button|input|select|textarea)\b/g)) violations.push({ rule_id: RULE_ID, file, ...locate(m.text, c.index), evidence: `raw <${c[1]}> in app code; compose the design-system primitive instead` });
+  if (designOf(file)) continue;
+  // Component sources are judged on code with literals masked; .ts/.mts sources on literal
+  // bodies with code masked (the keepLiterals mode), so a match is always authored markup.
+  const component = isComponentSource(file), literalHtml = !component && isTsSource(file);
+  if (!component && !literalHtml) continue;
+  const m = masked(file, literalHtml ? { keepLiterals: true } : undefined);
+  if (!m) continue;
+  const pattern = component ? /<(button|input|select|textarea)\b/g : /<(button|input|select|textarea)(?=[\s/>])/g;
+  for (const c of m.code.matchAll(pattern))
+    violations.push({ rule_id: RULE_ID, file, ...locate(m.text, c.index), evidence: `raw <${c[1]}> in app code; compose the design-system primitive instead` });
 }
 process.stderr.write(`bun-detector[design-primitives]: ${violations.length} violation(s)\n`);
 emit(violations);

package/detectors/bun_design_system_detector/checks/design_token_color.mjs

@@ -3,19 +3,23 @@
 // Outside the tokens layer, UI files (.tsx/.jsx/.html/.css) take colors from tokens
 // (`var(--…)`), never raw hex, rgb(), or hsl() literals. Defining a custom
 // property (`--danger: #b91c1c`) is defining a token, not using a raw value.
-import { readRoots, readExcludes, readText, emit, locate } from "../../../lib/scan.mjs";
-import { scope, designOf, isUi, declarations } from "./_design.mjs";
+// The same declarations are judged in the HTML a .ts/.mts file renders from
+// string/template/tagged-template literals, read through the literals-only mask.
+import { readRoots, readExcludes, emit, locate } from "../../../lib/scan.mjs";
+import { scope, designOf, isUi, isTsSource, masked, declarations } from "./_design.mjs";
 
 const RULE_ID = "coder.bun.design-token-color";
 const COLOR_RE = /#[0-9a-fA-F]{3,8}\b|\b(?:rgba?|hsla?)\s*\(/;
 const violations = [];
 for (const file of scope(readRoots(), readExcludes())) {
-  if (!isUi(file) || designOf(file)?.layer === 0) continue;
-  const text = readText(file);
-  for (const d of declarations(file, text ?? "")) {
+  const literalHtml = !isUi(file) && isTsSource(file);
+  if ((!isUi(file) && !literalHtml) || designOf(file)?.layer === 0) continue;
+  const src = masked(file, literalHtml ? { keepLiterals: true } : undefined);
+  if (!src) continue;
+  for (const d of declarations(file, literalHtml ? src.code : src.text)) {
     if (d.prop.startsWith("--")) continue;
     const hit = d.value.match(COLOR_RE);
-    if (hit) violations.push({ rule_id: RULE_ID, file, ...locate(text, d.index), evidence: `${d.prop} uses the raw color ${hit[0].replace(/\s*\($/, "()")}; reference a color token (var(--…)) instead` });
+    if (hit) violations.push({ rule_id: RULE_ID, file, ...locate(src.text, d.index), evidence: `${d.prop} uses the raw color ${hit[0].replace(/\s*\($/, "()")}; reference a color token (var(--…)) instead` });
   }
 }
 process.stderr.write(`bun-detector[design-token-color]: ${violations.length} violation(s)\n`);

package/detectors/bun_design_system_detector/checks/design_token_hardcoded.mjs

@@ -3,8 +3,10 @@
 // Outside the tokens layer, spacing, radii, and durations come from foundations.
 // 0 and 1px (hairline borders) are not design decisions and are allowed. Custom
 // property definitions (`--space-3: 12px`) define tokens and are never judged.
-import { readRoots, readExcludes, readText, emit, locate } from "../../../lib/scan.mjs";
-import { scope, designOf, isUi, declarations } from "./_design.mjs";
+// The same declarations are judged in the HTML a .ts/.mts file renders from
+// string/template/tagged-template literals, read through the literals-only mask.
+import { readRoots, readExcludes, emit, locate } from "../../../lib/scan.mjs";
+import { scope, designOf, isUi, isTsSource, masked, declarations } from "./_design.mjs";
 
 const RULE_ID = "coder.bun.design-token-hardcoded";
 const LENGTH_PROP = /^(margin|padding|gap|row-gap|column-gap|inset|top|right|bottom|left|border-radius)(-|$)/;
@@ -12,16 +14,18 @@ const DURATION_PROP = /^(transition|animation)(-|$)/;
 const violations = [];
 const report = (file, text, d, value) => violations.push({ rule_id: RULE_ID, file, ...locate(text, d.index), evidence: `${d.prop}: ${value} is hardcoded; use a foundations token (var(--…))` });
 for (const file of scope(readRoots(), readExcludes())) {
-  if (!isUi(file) || designOf(file)?.layer === 0) continue;
-  const text = readText(file);
-  for (const d of declarations(file, text ?? "")) {
+  const literalHtml = !isUi(file) && isTsSource(file);
+  if ((!isUi(file) && !literalHtml) || designOf(file)?.layer === 0) continue;
+  const src = masked(file, literalHtml ? { keepLiterals: true } : undefined);
+  if (!src) continue;
+  for (const d of declarations(file, literalHtml ? src.code : src.text)) {
     if (LENGTH_PROP.test(d.prop)) {
-      if (d.numeric) { if (Math.abs(Number(d.value)) > 1) report(file, text, d, d.value); continue; }
+      if (d.numeric) { if (Math.abs(Number(d.value)) > 1) report(file, src.text, d, d.value); continue; }
       const px = [...d.value.matchAll(/(-?\d*\.?\d+)px\b/g)].find((m) => Math.abs(Number(m[1])) > 1);
-      if (px) report(file, text, d, px[0]);
+      if (px) report(file, src.text, d, px[0]);
     } else if (DURATION_PROP.test(d.prop)) {
       const time = [...d.value.matchAll(/(\d*\.?\d+)(ms|s)\b/g)].find((m) => Number(m[1]) > 0);
-      if (time) report(file, text, d, time[0]);
+      if (time) report(file, src.text, d, time[0]);
     }
   }
 }

package/integrity.json

@@ -1,13 +1,13 @@
 {
-  "version": "0.10.96",
+  "version": "0.10.97",
   "files": {
     "HOOK_AUDIT.md": "5329d840db37671b1918f688ead26865473b87db73dbc75f7c8b2a8bbe8d6d43",
     "PLANNER_PORT.md": "fb5935bac8b7ac18994de21e43ace3a5ef8cd55f85b0e3349fca261280054f11",
     "README.md": "8f0e45595fc10bb6f033b81b67246e57bb3f5bbaf62b35ba950beb5f9f82a938",
     "bunfig.toml": "b9fc65eca9014c5179380259d70e76385a6a80788fa9a2df5fb3eaa5554fd2fe",
     "conventions/_profiles/architecture.yaml": "f1808768b720a4e476047e4a0912002ca673946562cea9aeef5d0c214828d93a",
-    "conventions/_profiles/coder.yaml": "3fb191556a64c9ebcf249516afa189afca24da9b22fd40b2fc66908196cdfb78",
-    "conventions/_profiles/design.yaml": "25a02a67152d49728ad3517f6510da7285116fa69c56cbda55613a7cfcfd3b89",
+    "conventions/_profiles/coder.yaml": "53693363c6623b5b12ece1c746c8cf4f052615310fc5683160d8de8be7d8e0c9",
+    "conventions/_profiles/design.yaml": "e76c87d2fbf1c1f1ecc9a24247be93b6915062939636678a9983ec23fe5f7af6",
     "conventions/_profiles/docs.yaml": "05485c3b32f1757e77c42e331eec1db651cb52ef57fc4e8607bb2f73b056cbb3",
     "conventions/_profiles/flow.yaml": "ca23ee662bf2fff590fee7a5b06816d720969531510bb35fb4ae3289c2871802",
     "conventions/_profiles/htmx.yaml": "38fc8b3e1a53429e16977ed63e83e751b203deffe9b338ea171050fb64641559",
@@ -51,9 +51,9 @@
     "conventions/coder.bun/coder.bun.design-dependency-flow.convention.yaml": "8c99a0293f6a3e527c8aa99b2d5634695627c6daf8e37398fa25667a0e47dbff",
     "conventions/coder.bun/coder.bun.design-hierarchy-import.convention.yaml": "59ca34fb9c6ec72b6ad7a099a5a8bceaa79a646226cf05eb0bb5c99854804dd2",
     "conventions/coder.bun/coder.bun.design-orphan-export.convention.yaml": "ca36d04d8cc961e04974f65fd774c2dbfab92fe64846010cdb27fc220fb0d935",
-    "conventions/coder.bun/coder.bun.design-primitives.convention.yaml": "e54b431ffa6c9f501b3160d49b660590954f0446c43ade9141ac5ebce2adc095",
-    "conventions/coder.bun/coder.bun.design-token-color.convention.yaml": "cd2270f3e94f958f529aa3e56b79037a87b8eddfb22d9a3244e12fcd32dcda9e",
-    "conventions/coder.bun/coder.bun.design-token-hardcoded.convention.yaml": "908173a1f715d7f4826855df1b668f9db363fc6e89900a9a764911f55e73c3f8",
+    "conventions/coder.bun/coder.bun.design-primitives.convention.yaml": "b32a5bbbcc4f515fee2cb5f545e142f30ff610d87eca0d25d224dad100644282",
+    "conventions/coder.bun/coder.bun.design-token-color.convention.yaml": "d0deecd6b7cf6b770af4ce6954a8c9e3470e1040dd2143dd648746ad43d875fb",
+    "conventions/coder.bun/coder.bun.design-token-hardcoded.convention.yaml": "c46afb4a4c8babcce0a4ffcf361c1e0181343b8c76b73311f094380fd4285a22",
     "conventions/coder.bun/coder.bun.design-tokens-pure.convention.yaml": "8f7e768ac3041dc3d3285a03fdcabd0d376695bcfab0233166e107fb2f1419c8",
     "conventions/coder.bun/coder.bun.design-wagons-import.convention.yaml": "76595759544ce81bf9b0e0ee1d59f7a2f5cc446105697b23a5c545a8939bcb28",
     "conventions/coder.bun/coder.bun.dto-mapper.convention.yaml": "c524b5f37db6ae4f7558fc3ec672aa1c5b764738a0f25a20062d736fed6bbcb3",
@@ -231,14 +231,14 @@
     "detectors/bun_clean_architecture_detector/fixtures/dirty/features/billing/integration/client.ts": "51ed50a6489f782fa8d5de2c1c3863bd7554a5918d2f6d26c0f65a86228e482c",
     "detectors/bun_clean_architecture_detector/fixtures/dirty/features/billing/presentation/api.ts": "109fdfcff0043c1cfea5e8faef029a2398f82cb852c6ab96bfaa113b05c47ece",
     "detectors/bun_design_system_detector/atdd.implementation.yaml": "3370a481643a736a5309c9ca77f08b89c60a559bbfb898d4c8b64fbe59fc31c6",
-    "detectors/bun_design_system_detector/checks/_design.mjs": "e39190baa3c7e1daa353c2891c0a7e2fa69dd6ae6d8b685e9b1d09cf8fc0c909",
+    "detectors/bun_design_system_detector/checks/_design.mjs": "a05659748126f8bddb567ec2cda4afc8f5647e42ca488f5874436af861396842",
     "detectors/bun_design_system_detector/checks/_map.json": "564138c6a771f052023ec93f3c47832fd5e7511c5b13f6a40a09c25ccc3c4fb5",
     "detectors/bun_design_system_detector/checks/design_connected.mjs": "ff7976f22efe5957a3c8b6c29b8c950b5877336ab3870a232b1e42d49d97060c",
     "detectors/bun_design_system_detector/checks/design_dependency_flow.mjs": "159121d5a158b50dcf0c585153adb94c2207e9b07ae05b1eb78cd5ffc9cf7027",
     "detectors/bun_design_system_detector/checks/design_orphan_export.mjs": "655da3f5592f6e8e6719c01532acf2424da6a3fcf255891d7dd52483cc6b17ce",
-    "detectors/bun_design_system_detector/checks/design_primitives.mjs": "825daa3e19033ccb7224eae4f1f1656c5c9e87293d8729fe612415ae4fbda52e",
-    "detectors/bun_design_system_detector/checks/design_token_color.mjs": "aaed884142185f55d101016904b93635dc3d7f657bb7894487a419e264cb1b72",
-    "detectors/bun_design_system_detector/checks/design_token_hardcoded.mjs": "d5c800bacbb7eeb80e0cbc016e08bff99b4f6940b3e8704f19534daf2d58920f",
+    "detectors/bun_design_system_detector/checks/design_primitives.mjs": "bc534e1b6b01c9157f91f9f32bbef1be059fba0f3a6e604b82464ff4c7cc7142",
+    "detectors/bun_design_system_detector/checks/design_token_color.mjs": "6624e87b6f496219ed6649e296e1782d74b5837a3437e6539bbefb82b8f295cd",
+    "detectors/bun_design_system_detector/checks/design_token_hardcoded.mjs": "1698b5c2ab10d669a3d8bd44190b92c6ebd73367b9f92c2dda73d2a79d85ffd6",
     "detectors/bun_design_system_detector/checks/design_tokens_pure.mjs": "9fd668df42c7a6a7d7949bb5975ba3c6925abcb908d626a573f56800f96e32d9",
     "detectors/bun_design_system_detector/checks/design_wagons_import.mjs": "5cbd9776bcc3defdd4f28cbc228b3164ef1a694c64c86b151a1cd67f9687dd21",
     "detectors/bun_design_system_detector/detect.mjs": "f8eb9cda3e35b8a808614a9655fd80574e506d1a438fcc15e68c0b7fdd833dcc",
@@ -1035,7 +1035,7 @@
     "lib/imports.mjs": "3db4979269488fa26f6e7aefded6ece9c646be6587a10e249821a5a208109962",
     "lib/interlocking.mjs": "d0803d080ac7d7477c51be70112df1e85213d339fd3c6b71f75f26145fa8accd",
     "lib/journey-chain.mjs": "bdafc9cc3da4ade644aebacc6e1015e29285b764465588d764b7c581bade9025",
-    "lib/scan.mjs": "02b0fa864cab24157a8f27b50a87a2bb66a875f90cf6632c753c4627d61456ef",
+    "lib/scan.mjs": "b6973e411ecd14c548a055c871e01e948f002b772042136be8401f38d998e687",
     "planner-nodes/ENFORCEMENT_SCOPE.yaml": "d8ec7039c219857f3d77af5d4d84612b533b69c1a5fcef935fbf46470adafed4",
     "planner-nodes/nodes/planner.acceptance.abstract-fields-required.convention.yaml": "bd565693f0ae861f0561ad2f7a91a8c55f9a209c3acd59c5750cfcffd96a85d8",
     "planner-nodes/nodes/planner.acceptance.authoring-guidelines.convention.yaml": "16348dceed5868041b832bde766e9c8d4a950d4032f1f3066b357644081a3b17",
@@ -1255,7 +1255,7 @@
     "planner-schemas/train.schema.json": "d6fbac9067c1bffeb84eb79a71228441055af6e6e7ba141dd4e0bcb079345ec0",
     "planner-schemas/wagon.schema.json": "12353e46d2216d2deef754615b629a696bd8a7bb35326379e7ef2b221a5ece3a",
     "planner-schemas/wmbt.schema.json": "7a3a5693bfcf01340667c2be4a3c48e74f34b1af7e8dc13372c0de06b7f4fe12",
-    "relationships.yaml": "5860a308ebc3ee7fa8172fc2c6633984000ab3003f0ae4b6fa28db48879eda22",
+    "relationships.yaml": "fccaf745b383fe527b7db9022233037bdf5b5cc3d495bb40da3cca4746f5e241",
     "src/agent.ts": "6d6c6e75908af8fbab13432f0001b0374bb25cf3dee46ba218dfd67e0090cb56",
     "src/ci.ts": "b5c57dd87fc780b2b272156b68830d14e695a1a28300dec46a06f71864e0c59e",
     "src/cli.ts": "d93c3aebb78e752fd96347a5b177c0ed0697010c6e2533e116de93e772cd65a8",

package/lib/scan.mjs

@@ -132,6 +132,29 @@ function regexMayStart(text, i) {
   return false;
 }
 
+// The index just past the `${` substitution opening at `i` (text[i] === "$", text[i+1] === "{").
+// A `${ … }` substitution is code: it may hold strings, braces and templates of its own
+// (escaped backticks included), so the substitution ends only at the matching `}` outside them.
+function substitutionEnd(text, i) {
+  const n = text.length;
+  let depth = 1;
+  let j = i + 2;
+  while (j < n && depth > 0) {
+    const d = text[j];
+    if (d === "`") { j = templateEnd(text, j); continue; }
+    if (d === '"' || d === "'") {
+      let k = j + 1;
+      while (k < n && text[k] !== d && text[k] !== "\n") k += text[k] === "\\" ? 2 : 1;
+      j = k + 1;
+      continue;
+    }
+    if (d === "{") depth++;
+    else if (d === "}") depth--;
+    j++;
+  }
+  return j;
+}
+
 // The index just past the template literal opening at `start`. A `${ … }` substitution is code: it may hold strings,
 // braces and templates of its own (escaped backticks included), so the template ends only at a backtick outside them.
 function templateEnd(text, start) {
@@ -141,30 +164,39 @@ function templateEnd(text, start) {
     const c = text[j];
     if (c === "\\") { j += 2; continue; }
     if (c === "`") return j + 1;
-    if (c === "$" && text[j + 1] === "{") {
-      let depth = 1;
-      j += 2;
-      while (j < n && depth > 0) {
-        const d = text[j];
-        if (d === "`") { j = templateEnd(text, j); continue; }
-        if (d === '"' || d === "'") {
-          let k = j + 1;
-          while (k < n && text[k] !== d && text[k] !== "\n") k += text[k] === "\\" ? 2 : 1;
-          j = k + 1;
-          continue;
-        }
-        if (d === "{") depth++;
-        else if (d === "}") depth--;
-        j++;
-      }
-      continue;
-    }
+    if (c === "$" && text[j + 1] === "{") { j = substitutionEnd(text, j); continue; }
     j++;
   }
   return n;
 }
 
-export function maskLiteralsAndComments(text) {
+// Inside the template literal spanning [from, to): keep the literal text (already in `out`),
+// blank the `${` / `}` delimiters, and mask the substitution code by the same rule — a string
+// or template of its own inside the substitution is still a literal body, and stays kept.
+function maskTemplateLiterals(text, out, from, to, blank) {
+  let j = from;
+  while (j < to) {
+    if (text[j] === "\\") { j += 2; continue; }
+    if (text[j] !== "$" || text[j + 1] !== "{") { j++; continue; }
+    const k = Math.min(substitutionEnd(text, j), to);   // just past the closing `}`
+    const body = j + 2, end = k - 1;
+    blank(j, body);
+    if (end > body) out.splice(body, end - body, ...maskLiteralsAndComments(text.slice(body, end), KEEP_LITERALS).split(""));
+    blank(end, k);
+    j = k;
+  }
+}
+
+// Mask string literals, template literals and comments with spaces of equal
+// length, preserving every line and column offset. A check that greps raw source
+// otherwise fires on the rule's own name inside a comment or a doc string — the
+// classic detector false positive.
+// With `keepLiterals` the payload inverts: literal BODIES stay while code, comments and
+// regex literals are blanked — the mode for checks whose subject is the HTML a `.ts` file
+// renders from string/template/tagged-template literals, so a match can only ever come
+// from markup an author wrote in a literal.
+const KEEP_LITERALS = { keepLiterals: true };
+export function maskLiteralsAndComments(text, { keepLiterals = false } = {}) {
   const out = text.split("");
   let i = 0;
   const n = text.length;
@@ -199,7 +231,8 @@ export function maskLiteralsAndComments(text) {
       i = j + 1;
     } else if (ch === "`") {
       const j = templateEnd(text, i);
-      blank(i + 1, j - 1 >= i + 1 ? j - 1 : i + 1);
+      if (keepLiterals) maskTemplateLiterals(text, out, i + 1, j - 1 >= i + 1 ? j - 1 : i + 1, blank);
+      else blank(i + 1, j - 1 >= i + 1 ? j - 1 : i + 1);
       i = j;
     } else if (ch === '"' || ch === "'") {
       let j = i + 1;
@@ -208,9 +241,10 @@ export function maskLiteralsAndComments(text) {
         if (text[j] === ch) { j++; break; }
         j++;
       }
-      blank(i + 1, j - 1 >= i + 1 ? j - 1 : i + 1);
+      if (!keepLiterals) blank(i + 1, j - 1 >= i + 1 ? j - 1 : i + 1);
       i = j;
     } else {
+      if (keepLiterals) blank(i, i + 1);
       i++;
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@afokapu/atdd-bun",
-  "version": "0.10.96",
+  "version": "0.10.97",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/afokapu/atdd-bun.git"

package/relationships.yaml

@@ -4413,7 +4413,7 @@ edges:
     constraint: mandatory
     control: internal
     foundation: finish_to_start
-    reason: "Bun realization of the core obligation coder.design.token-color, checked over .tsx, .jsx, .html and .css"
+    reason: "Bun realization of the core obligation coder.design.token-color, checked over .tsx, .jsx, .html, .css and HTML authored in .ts/.mts literals"
     source_ref: coder.bun.design-token-color
     strength: important
     target_ref: coder.design.token-color
@@ -4423,7 +4423,7 @@ edges:
     constraint: mandatory
     control: internal
     foundation: finish_to_start
-    reason: "Bun realization of the core obligation coder.design.token-hardcoded, checked over .tsx, .jsx, .html and .css"
+    reason: "Bun realization of the core obligation coder.design.token-hardcoded, checked over .tsx, .jsx, .html, .css and HTML authored in .ts/.mts literals"
     source_ref: coder.bun.design-token-hardcoded
     strength: important
     target_ref: coder.design.token-hardcoded
@@ -4433,7 +4433,7 @@ edges:
     constraint: mandatory
     control: internal
     foundation: finish_to_start
-    reason: "Bun realization of the core obligation coder.design.primitives, checked over .tsx, .jsx, .html and .css"
+    reason: "Bun realization of the core obligation coder.design.primitives, checked over .tsx, .jsx, .html, .css and HTML authored in .ts/.mts literals"
     source_ref: coder.bun.design-primitives
     strength: important
     target_ref: coder.design.primitives