@qijenchen/design-system 0.1.0-beta.10 → 0.1.0-beta.13

package/ds-canonical/hooks/check_substantive_edit_approval_preflight.sh

@@ -0,0 +1,105 @@
+#!/bin/bash
+# check_substantive_edit_approval_preflight.sh — Pre-action gate for substantive design edits.
+#
+# Purpose: PRE-flight 偵測 packages/design-system/src/**.{tsx,ts,css} edit + last 5 user msgs 無
+# approval keyword → SOFT inject context warning。
+#
+# 對比 stop_self_audit.sh post-action BLOCKER:本 hook 是 PRE-action soft warn,
+# 讓 AI 看到 context 後 self-decide(propose-only OR cite approval verbatim),
+# 避免「edit → stop hook BLOCKER → revert」waste cycle(user 抓 2026-05-12 anti-pattern)。
+#
+# 對齊 Option 3 hybrid(M32 split 後 (f) ship gate 的 PRE-flight 補位):
+# - PreToolUse soft warn = info inject(本 hook)
+# - Stop hook BLOCKER = enforcement(stop_self_audit.sh Mechanism 4)
+# - AI inline self-statement = discipline(M31 Layer A/C marker + 本 hook context)
+#
+# Why pre-action soft instead of hard BLOCK:false-positive 風險(legit bug fix 可能撞)+
+# inject info 比 reject 更尊重 AI judgment + 配合 existing stop hook backstop。
+#
+# 對齊:CLAUDE.md `# 稽核 canonical` Audit-vs-execute 分權 + M31 Layer A/C + M32(f) ship gate。
+
+source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
+
+set -uo pipefail
+INPUT=$(cat 2>/dev/null || echo "{}")
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // ""' 2>/dev/null)
+FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // ""' 2>/dev/null)
+TRANSCRIPT_PATH=$(echo "$INPUT" | jq -r '.transcript_path // ""' 2>/dev/null)
+EVENT=$(echo "$INPUT" | jq -r '.hook_event_name // ""' 2>/dev/null)
+
+# Only PreToolUse for Edit|Write|MultiEdit
+[ "$EVENT" != "PreToolUse" ] && exit 0
+case "$TOOL" in Edit|Write|MultiEdit) ;; *) exit 0 ;; esac
+
+# Substantive scope:packages/design-system/src/**.{tsx,ts,css} only
+case "$FILE_PATH" in
+  */packages/design-system/src/*.tsx|*/packages/design-system/src/*.ts|*/packages/design-system/src/*.css) ;;
+  *) exit 0 ;;
+esac
+
+# Allowlist:storybook config / scripts / tests 等非 production code
+case "$FILE_PATH" in
+  *.stories.tsx|*.test.ts|*.spec.ts) exit 0 ;;
+esac
+
+[ -z "$TRANSCRIPT_PATH" ] || [ ! -f "$TRANSCRIPT_PATH" ] && exit 0
+
+# Scan last 5 真 user msgs(transcript role=user 且 content 非 tool_result)
+RECENT_USER_MSGS=$(tail -200 "$TRANSCRIPT_PATH" 2>/dev/null | \
+  jq -r 'select(.message.role=="user") |
+    .message.content // empty |
+    if type=="string" then .
+    else (.[]? | select(.type != "tool_result") | .text // empty)
+    end' 2>/dev/null | tail -5)
+
+# Approval keywords(對齊 stop_self_audit.sh:172)+ 2026-05-15 升 numbered directive
+# (`#1 A` / `#1 ship` 等)+ 「照建議」/「照共識」/「照我的」等 reference style approval
+# 2026-05-21 M34 fix(per user verbatim「都給我做到好」approval blocked by 妳/決策N coverage gap):
+#   (a) 加「妳」變體(`照妳`= `照你` 文書通用 variant)
+#   (b) 加「決策[一二三四五六七八九十1-9]」numbered directive(eg.「決策一改…」「決策3做」)
+#   (c) 加「做到好」/「都做」/「全做」auto-approve 變體
+APPROVAL_RE='(同意|採用|採納|拍板|拍\s*[A-Z0-9]|可以|改成|改為|執行|上吧|push|implement|go ahead|approved|OK|好|沒問題|做一做|就做|做吧|做完|全部做完|做到完|做到好|都做|全做|馬不停蹄|建議做|ship|合 main|^#[0-9]+|照你|照妳|照建議|照共識|照我的|按照|決策[一二三四五六七八九十1-9]|[A-Z][0-9]+\s*(做|改|修)|先\s*[A-Z][0-9]+)'
+HAS_APPROVAL=$(echo "$RECENT_USER_MSGS" | grep -cE "$APPROVAL_RE" 2>/dev/null)
+HAS_APPROVAL=${HAS_APPROVAL:-0}
+
+# Substantive-discuss keywords(若 user 在 discuss mode → 提示 propose-only)
+DISCUSS_RE='(propose|提案|建議|討論|比稿|看法|思考|評估|要不要|該不該|是否|怎麼想)'
+HAS_DISCUSS=$(echo "$RECENT_USER_MSGS" | grep -cE "$DISCUSS_RE" 2>/dev/null)
+HAS_DISCUSS=${HAS_DISCUSS:-0}
+
+# Approval present → silent pass
+if [ "$HAS_APPROVAL" -gt 0 ]; then
+  exit 0
+fi
+
+# 2026-05-15 upgrade per user verbatim:「上述的問題請你務必確實確保永遠他媽不要再給我犯了」
+# (memory/feedback_ship_then_revert_anti_pattern.md SSOT)
+# Soft warn → P0 BLOCKER on packages/design-system/src/**/*.tsx production substantive without approval。
+# Override env var:CLAUDE_BYPASS_DESIGN_APPROVAL=1(audit-logged below)
+REL_PATH=${FILE_PATH#*/my-project/}
+
+if [ "${CLAUDE_BYPASS_DESIGN_APPROVAL:-0}" = "1" ]; then
+  # Audit log override
+  mkdir -p "$(dirname "$0")/../logs" 2>/dev/null
+  printf '{"ts":"%s","event":"design-approval-bypass","file":"%s","tool":"%s"}\n' \
+    "$(date -u +%Y-%m-%dT%H:%M:%SZ)" "$REL_PATH" "$TOOL" \
+    >> "$(dirname "$0")/../logs/approval-bypass.jsonl" 2>/dev/null || true
+  exit 0
+fi
+
+# BLOCKER:stderr + exit 2 = halt PreToolUse(Edit/Write/MultiEdit)
+echo "🚨 BLOCKER: Pre-action gate(check_substantive_edit_approval_preflight,2026-05-15 P0 升級)" >&2
+echo "  - 目標: ${REL_PATH}" >&2
+echo "  - 範圍: packages/design-system/src production code(substantive SSOT change)" >&2
+echo "  - 近 5 條 user msg approval keyword: ${HAS_APPROVAL} 次 / discuss keyword: ${HAS_DISCUSS} 次" >&2
+echo "" >&2
+echo "→ SSOT-affecting UI/UX edit without verbatim approval = ship-then-revert anti-pattern" >&2
+echo "  (memory/feedback_ship_then_revert_anti_pattern.md SSOT)" >&2
+echo "" >&2
+echo "修法 — 2 選 1:" >&2
+echo "  (a) Convert to propose-only:列 option + 4-Q 自檢 + 等 user 拍板,撤回 edit" >&2
+echo "  (b) Cite user approval verbatim quote 在 commit message + reply,然後設" >&2
+echo "      \`CLAUDE_BYPASS_DESIGN_APPROVAL=1\` env var 跑 edit(audit-logged)" >&2
+echo "" >&2
+echo "「user echo hypothesis」≠「user approve」— M4 sub-check enforces。" >&2
+exit 2

package/ds-canonical/hooks/check_tab_lg_chrome_header_equal.sh

@@ -0,0 +1,66 @@
+#!/bin/bash
+set -uo pipefail
+# Header canonical W3 Token alignment enforcement(per header-canonical.spec.md W3):
+#   --tab-height-lg(uiSize.css)與 --chrome-header-height(globals.css)必像素相等。
+#   兩 token scope 不同(uiSize 是 component-size reset / chrome-header-height 是 app-density)
+#   不該 CSS alias(綁死兩個不同 scope)— 改用 assert: parse 兩檔 md/lg 值對等。
+#
+# PreToolUse(Edit / Write)hook —— 編輯 `packages/design-system/src/tokens/uiSize/uiSize.css` 或
+# `src/globals.css` 時 assert 兩值仍相等。動一方未同步 = BLOCKER。
+#
+# 對齊 M31 codex 比稿 Step 5「保留 duplicated literals + audit hook assert equality」decision。
+
+source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
+
+set -euo pipefail
+
+INPUT=$(cat)
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // ""')
+FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // ""')
+
+case "$TOOL" in
+  Edit|Write|MultiEdit) ;;
+  *) exit 0 ;;
+esac
+
+case "$FILE_PATH" in
+  */packages/design-system/src/tokens/uiSize/uiSize.css|*/src/globals.css) ;;
+  *) exit 0 ;;
+esac
+
+PROJECT_ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
+UISIZE_CSS="$PROJECT_ROOT/packages/design-system/src/tokens/uiSize/uiSize.css"
+GLOBALS_CSS="$PROJECT_ROOT/src/globals.css"
+
+# Extract value of --tab-height-lg in md context(default :root block)
+TAB_LG_MD=$(grep -oE '\--tab-height-lg:[[:space:]]*[0-9.]+rem' "$UISIZE_CSS" | head -1 | grep -oE '[0-9.]+')
+# Extract --tab-height-lg in lg density override(2nd occurrence)
+TAB_LG_LG=$(grep -oE '\--tab-height-lg:[[:space:]]*[0-9.]+rem' "$UISIZE_CSS" | sed -n '2p' | grep -oE '[0-9.]+')
+
+# Extract --chrome-header-height md(1st occurrence)
+CH_MD=$(grep -oE '\--chrome-header-height:[[:space:]]*[0-9.]+rem' "$GLOBALS_CSS" | head -1 | grep -oE '[0-9.]+')
+# Extract --chrome-header-height lg(2nd occurrence in lg override)
+CH_LG=$(grep -oE '\--chrome-header-height:[[:space:]]*[0-9.]+rem' "$GLOBALS_CSS" | sed -n '2p' | grep -oE '[0-9.]+')
+
+ERRORS=()
+
+if [ "$TAB_LG_MD" != "$CH_MD" ]; then
+  ERRORS+=("md: --tab-height-lg=$TAB_LG_MD rem ≠ --chrome-header-height=$CH_MD rem")
+fi
+
+if [ "$TAB_LG_LG" != "$CH_LG" ]; then
+  ERRORS+=("lg: --tab-height-lg=$TAB_LG_LG rem ≠ --chrome-header-height=$CH_LG rem")
+fi
+
+if [ ${#ERRORS[@]} -gt 0 ]; then
+  printf '🚨 TAB_LG vs CHROME_HEADER_HEIGHT EQUAL BLOCKER(header-canonical.spec.md W3):\n' >&2
+  for E in "${ERRORS[@]}"; do
+    printf '   • %s\n' "$E" >&2
+  done
+  printf '\n  動一方必同步另一方(兩 token 像素相等是「lg tabs 取代 chrome header」SSOT linkage 鐵證)\n' >&2
+  printf '  SSOT: packages/design-system/src/patterns/header-canonical/header-canonical.spec.md W3\n' >&2
+  printf '  修方向: 改 uiSize.css 的 --tab-height-lg OR globals.css 的 --chrome-header-height 讓兩邊相等\n' >&2
+  exit 2
+fi
+
+exit 0

package/ds-canonical/hooks/check_wrapper_primitive_schema_drift.sh

@@ -0,0 +1,104 @@
+#!/bin/bash
+set -uo pipefail
+# M30 機械強制:wrapper-vs-primitive schema unify invariant。
+#
+# PreToolUse(Edit / Write)hook —— 編輯 `packages/design-system/src/components/**/*.tsx` 時掃:
+#   (a) 檢查同 file 是否 declare `export interface XxxOption` 同名於其他 file
+#   (b) 若同名且未 `extends XxxOption from primitive`/`extends YyyOption` → BLOCKER
+#   (c) 若 wrapper 用 `SelectMenuOption`(import from SelectMenu)但內部 `menuOptions` mapping
+#       未 forward `avatar` / `description` / `disabled`(只 forward value+label)→ WARN
+#
+# Bug 史(2026-05-10):
+#   `Select.SelectOption` Issue 4 補 avatar / description / disabled,但 `Combobox.SelectOption`
+#   是同名 weak schema `{ value, label }`。TypeScript 不抓(不同 file 同名各 export);consumer
+#   import 哪個版本看 import path 決定 → drift。PeoplePicker multi-mode dropdown 漏 avatar。
+#
+# Allow escape:
+#   檔頭 `// @wrapper-schema-allow: <reason>` 整檔豁免(legacy migration 過渡期)。
+
+source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
+
+set -euo pipefail
+
+INPUT=$(cat)
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // ""')
+FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // ""')
+
+case "$TOOL" in
+  Edit|Write|MultiEdit) ;;
+  *) exit 0 ;;
+esac
+
+case "$FILE_PATH" in
+  */packages/design-system/src/components/**/*.tsx) ;;
+  *) exit 0 ;;
+esac
+
+NEW_CONTENT=$(echo "$INPUT" | jq -r '
+  if .tool_input.new_string then .tool_input.new_string
+  elif .tool_input.content then .tool_input.content
+  else "" end
+')
+
+# Allow escape
+if echo "$NEW_CONTENT" | grep -qE '@wrapper-schema-allow:'; then
+  exit 0
+fi
+
+# Check 1: new file declares `export interface XxxOption {` ?
+DECLARES=$(echo "$NEW_CONTENT" | grep -oE 'export interface [A-Z][a-zA-Z]*Option\b[^{]*\{' || true)
+if [ -z "$DECLARES" ]; then
+  exit 0
+fi
+
+# For each declared OptionLike interface, check if same name declared elsewhere
+DS_COMPONENTS_DIR="$(dirname "$0")/../../packages/design-system/src/components"
+
+# normalize FILE_PATH relative to project for self-skip
+SELF_BASENAME="$(basename "$FILE_PATH")"
+
+WARNINGS=()
+BLOCKERS=()
+
+while IFS= read -r decl; do
+  IFACE_NAME=$(echo "$decl" | grep -oE '[A-Z][a-zA-Z]*Option' | head -1)
+  [ -z "$IFACE_NAME" ] && continue
+  # Skip if extends another OptionLike interface(M30 compliant)
+  if echo "$NEW_CONTENT" | grep -qE "interface $IFACE_NAME\b.*extends [A-Z][a-zA-Z]*Option"; then
+    continue
+  fi
+  # Find other files declaring same name(skip self by basename — imperfect but Edit context is single-file)
+  OTHER_DECLS=$(grep -rlE "export interface $IFACE_NAME\b" "$DS_COMPONENTS_DIR" 2>/dev/null | grep -v "/$SELF_BASENAME$" || true)
+  if [ -n "$OTHER_DECLS" ]; then
+    BLOCKERS+=("M30 schema drift: \`$IFACE_NAME\` declared in this file (no extends) + also in: $(echo "$OTHER_DECLS" | head -3 | xargs -n1 basename | tr '\n' ',' | sed 's/,$//')")
+  fi
+done <<< "$DECLARES"
+
+# Check 2: imports SelectMenuOption but menuOptions mapping drops fields(WARN)
+if echo "$NEW_CONTENT" | grep -qE 'import.*SelectMenuOption.*from.*SelectMenu'; then
+  # Look for `menuOptions: SelectMenuOption[]` mapping that misses fields
+  MAP_BLOCK=$(echo "$NEW_CONTENT" | grep -A5 -E 'menuOptions.*SelectMenuOption\[\]' | head -30)
+  if [ -n "$MAP_BLOCK" ]; then
+    # Heuristic: should forward at least `avatar` OR `description` OR `disabled` field
+    if ! echo "$MAP_BLOCK" | grep -qE '(avatar|description|disabled)'; then
+      WARNINGS+=("M30 schema partial-forward: \`menuOptions\` mapping seems to drop avatar/description/disabled. Forward 全 SelectMenuOption surface or annotate \`// @wrapper-schema-allow: <reason>\`.")
+    fi
+  fi
+fi
+
+# Output
+if [ ${#BLOCKERS[@]} -gt 0 ]; then
+  echo "🚨 M30 wrapper-vs-primitive schema drift BLOCKER:" >&2
+  for b in "${BLOCKERS[@]}"; do echo "  • $b" >&2; done
+  echo "" >&2
+  echo "Fix: declare \`interface $IFACE_NAME extends <PrimitiveSSoT>\` (e.g. \`extends SelectMenuOption\`)" >&2
+  echo "  詳 .claude/rules/meta-patterns.md M30 + Polaris ChoiceList / Material Autocomplete idiom" >&2
+  exit 2
+fi
+
+if [ ${#WARNINGS[@]} -gt 0 ]; then
+  echo "⚠️  M30 wrapper schema forward warning:" >&2
+  for w in "${WARNINGS[@]}"; do echo "  • $w" >&2; done
+fi
+
+exit 0

package/ds-canonical/hooks/enforce_home_charter.sh

@@ -0,0 +1,44 @@
+#!/bin/bash
+# PreToolUse Write hook: gate new files in classification dirs.
+# 確保新檔放對 home(8-home flowchart canonical)。
+#
+# Silent on pass(2026-04-26 noise reduction):only fire if charter README
+# missing OR file-name pattern violates dir convention(no charter inject).
+
+source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
+
+set -uo pipefail
+
+INPUT=$(cat 2>/dev/null || echo "{}")
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // ""' 2>/dev/null)
+[ "$TOOL" = "Write" ] || exit 0
+
+FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // ""' 2>/dev/null)
+[ -n "$FILE_PATH" ] && [ ! -e "$FILE_PATH" ] || exit 0  # only NEW files
+
+# Classification dirs requiring charter
+DIRS=(.claude/hooks .claude/skills .claude/agents .claude/commands .claude/rules packages/design-system/src/components packages/design-system/src/patterns packages/design-system/src/tokens)
+
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+REL=$(echo "$FILE_PATH" | sed "s|$PROJECT_DIR/||")
+
+for d in "${DIRS[@]}"; do
+  case "$REL" in
+    "$d"/*)
+      # Charter README itself escape(2026-05-17 chicken-and-egg fix):
+      # 不能擋 README 本身建立(否則 charter 永遠無法被 init)
+      case "$REL" in "$d"/README.md) exit 0 ;; esac
+      CHARTER="$PROJECT_DIR/$d/README.md"
+      if [ ! -f "$CHARTER" ]; then
+        # P0:charter missing → block via stderr + exit 2
+        echo "❌ Charter missing for $d/. Create $CHARTER first per # 治理 canonical 8-home flowchart." >&2
+        exit 2
+      fi
+      # Charter exists → silent pass(content placement is AI's responsibility,
+      # audit Dim 19 periodic verify;no per-write nag)
+      exit 0
+      ;;
+  esac
+done
+
+exit 0

package/ds-canonical/hooks/inject_pending_self_audit.sh

@@ -0,0 +1,204 @@
+#!/bin/bash
+set -uo pipefail
+# UserPromptSubmit hook: 把上 turn Stop hook 累積的 warnings inject 到 next turn additionalContext.
+#
+# 修補 known issue:Stop hook silent-log 沒 inject → AI 看不到 self-audit warnings → reactive 模式持續。
+# 對齊 CLAUDE.md M14 / M20「auto-inject corrective prompt」原意。
+#
+# Reads:
+#   .claude/logs/self-audit-warnings.jsonl(stop_self_audit 寫入,behavioral check)
+#   .claude/logs/score-history.jsonl(stop_meta_self_audit 寫入,infra-score regression)
+# State:
+#   .claude/logs/last-inject-ts.txt — 上次 inject 的 timestamp
+#
+# Logic:
+#   1. 讀 LAST_TS,撈兩個 log 中 ts > LAST_TS 的條目
+#   2. 有條目 → format 成 additionalContext,inject 給 AI
+#   3. 不論有無條目,更新 LAST_TS = NOW(避免 stuck on 舊 warnings)
+
+source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
+
+set -uo pipefail
+
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+cd "$PROJECT_DIR" || exit 0
+
+LAST_TS_FILE=".claude/logs/last-inject-ts.txt"
+NOW=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+# Default LAST_TS: 30 分鐘前(防呆 — session cutoff,老 warning 自動 expire 避免 echo)
+# 之前 24h 太寬,session 跨 hour 仍 inject 老 warning。30m sliding window 讓 fresh
+# warning 進 inject,old warning 自動老化。Cross-platform GNU + BSD date。
+DEFAULT_AGO=$(date -u -d '30 minutes ago' +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || \
+              date -u -v-30M +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || \
+              date -u -d '24 hours ago' +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || \
+              echo "1970-01-01T00:00:00Z")
+LAST_TS="$DEFAULT_AGO"
+if [ -f "$LAST_TS_FILE" ]; then
+  STORED=$(cat "$LAST_TS_FILE" 2>/dev/null)
+  # 用 stored OR 30m-ago 較新者(避免被重置成 1970)
+  [ -n "$STORED" ] && [[ "$STORED" > "$LAST_TS" ]] && LAST_TS="$STORED"
+fi
+
+# ── Acknowledge detection(防呆)──────────────────────────────────────────
+# 若 last user msg(transcript)含 acknowledge keyword,stop inject 該類 warning
+# 這 turn — 表示 user 已 see + 接受該 warning,持續 inject 是 spam。
+ACK_DETECTED=0
+TRANSCRIPT_PATH=$(echo "${1:-}" | jq -r '.transcript_path // ""' 2>/dev/null || echo "")
+if [ -z "$TRANSCRIPT_PATH" ]; then
+  # UserPromptSubmit hook 從 stdin JSON 讀 transcript_path
+  TRANSCRIPT_PATH=$(cat 2>/dev/null | jq -r '.transcript_path // ""' 2>/dev/null || echo "")
+fi
+if [ -n "$TRANSCRIPT_PATH" ] && [ -f "$TRANSCRIPT_PATH" ]; then
+  LAST_USER=$(tail -50 "$TRANSCRIPT_PATH" 2>/dev/null | \
+    jq -r 'select(.message.role=="user") | .message.content // empty | if type=="string" then . else (.[]? | .text // empty) end' 2>/dev/null | tail -3)
+  ACK_RE='(收到|知道了|了解|acknowledged|ok 撤回|不用再 inject|停止 inject|skip warning|不要再警告)'
+  if echo "$LAST_USER" | grep -qiE "$ACK_RE"; then
+    ACK_DETECTED=1
+  fi
+fi
+
+# ── Aggregate warnings 去重 + 計數(extract_warnings_dedup helper)─────────
+# Reads stdin JSONL, filters by ts > LAST_TS, extracts .warnings, dedups bullet lines, prepends count.
+extract_warnings_dedup() {
+  awk -v cutoff="$LAST_TS" '
+    BEGIN { in_str=0; for(k in seen) delete seen[k]; for(k in count) delete count[k]; n=0 }
+    {
+      # crude jsonl ts extract
+      if (match($0, /"ts":"[^"]+"/)) {
+        ts=substr($0, RSTART+6, RLENGTH-7)
+        if (ts <= cutoff) next
+      }
+      # extract warnings field(may contain \n escape)
+      if (match($0, /"warnings":"[^"]*"/)) {
+        w=substr($0, RSTART+12, RLENGTH-13)
+        # split by \\n
+        nlines=split(w, lines, "\\\\n")
+        for (i=1; i<=nlines; i++) {
+          line=lines[i]
+          gsub(/^[[:space:]]+/, "", line)
+          # strip leading "• " from source(避免 double bullet)
+          gsub(/^•[[:space:]]*/, "", line)
+          if (line == "") continue
+          if (!(line in seen)) {
+            seen[line] = 1
+            count[line] = 1
+            order[++n] = line
+          } else {
+            count[line]++
+          }
+        }
+      }
+    }
+    END {
+      for (i=1; i<=n; i++) {
+        l = order[i]
+        c = count[l]
+        if (c > 1) printf "  • [×%d] %s\n", c, l
+        else printf "  • %s\n", l
+      }
+    }
+  '
+}
+
+WARNINGS_BEHAVIORAL=""
+WARNINGS_SCORE=""
+LATEST_SCORE=""
+
+# ── Read behavioral warnings since LAST_TS ─────────────────────────────────
+if [ -f .claude/logs/self-audit-warnings.jsonl ]; then
+  WARNINGS_BEHAVIORAL=$(extract_warnings_dedup < .claude/logs/self-audit-warnings.jsonl)
+fi
+
+# ── Read infra-score warnings since LAST_TS ─────────────────────────────────
+if [ -f .claude/logs/score-history.jsonl ]; then
+  WARNINGS_SCORE=$(extract_warnings_dedup < .claude/logs/score-history.jsonl)
+  # Latest score(取 file 最後一行 ts > cutoff 的)
+  LATEST_SCORE=$(awk -v cutoff="$LAST_TS" '
+    {
+      if (match($0, /"ts":"[^"]+"/)) {
+        ts=substr($0, RSTART+6, RLENGTH-7)
+        if (ts <= cutoff) next
+      }
+      if (match($0, /"score":[0-9]+/)) {
+        s=substr($0, RSTART+8, RLENGTH-8)
+        last_s=s
+      }
+    }
+    END { print last_s }
+  ' .claude/logs/score-history.jsonl)
+fi
+
+# Update LAST_TS regardless(若 inject 失敗,下 turn 會重看到 — 但 jq 出錯就靜默)
+mkdir -p .claude/logs 2>/dev/null
+echo "$NOW" > "$LAST_TS_FILE"
+
+# Silent exit if nothing accumulated
+if [ -z "$WARNINGS_BEHAVIORAL" ] && [ -z "$WARNINGS_SCORE" ]; then
+  exit 0
+fi
+
+# 防呆 layer 2:user 已 acknowledge → silent skip inject 本 turn
+if [ "$ACK_DETECTED" = "1" ]; then
+  exit 0
+fi
+
+# ── Format additionalContext ────────────────────────────────────────────────
+CTX_PARTS=""
+if [ -n "$WARNINGS_BEHAVIORAL" ]; then
+  CTX_PARTS="${CTX_PARTS}## Behavioral self-audit(stop_self_audit):
+${WARNINGS_BEHAVIORAL}
+
+"
+fi
+if [ -n "$WARNINGS_SCORE" ]; then
+  SCORE_LABEL=""
+  [ -n "$LATEST_SCORE" ] && SCORE_LABEL=" current=${LATEST_SCORE}/100"
+  CTX_PARTS="${CTX_PARTS}## Infra-score audit(stop_meta_self_audit,${SCORE_LABEL}):
+${WARNINGS_SCORE}
+
+"
+fi
+
+# ── 偵測 directive 觸發類型,加 explicit 指示 ─────────────────────────────
+DIRECTIVE=""
+if echo "${WARNINGS_BEHAVIORAL}${WARNINGS_SCORE}" | grep -q "trigger-phrase 累計"; then
+  DIRECTIVE="${DIRECTIVE}
+🚨 **DIRECTIVE — M19 trigger phrase auto-pipeline 啟動**:
+  當 user 反覆問「確保 / 一定 / 不會 / 是否能 / 永遠 / 是否符合原則」之類問題時(本 case 已累計多次),你**必須立刻 invoke \`/ensure-canonical\` skill** 跑 5-layer pipeline,不可只給 verbal 答覆 / 不可只 quote score / 不可只「下次承諾」。
+  不確定主題 → 就用最近 user 提到的關鍵字當 ensure-canonical args。"
+fi
+if echo "${WARNINGS_BEHAVIORAL}${WARNINGS_SCORE}" | grep -q "Topic.*repeated"; then
+  DIRECTIVE="${DIRECTIVE}
+🚨 **DIRECTIVE — M10 proactive exhaustive scan**:
+  Topic 重複表示 prior turns 落地不徹底。**必須 grep DS-wide 同 pattern 批量修**(不只 user 點到的那個 case),否則持續 reactive。"
+fi
+if echo "${WARNINGS_BEHAVIORAL}${WARNINGS_SCORE}" | grep -q "Claim-verify gap"; then
+  DIRECTIVE="${DIRECTIVE}
+🚨 **DIRECTIVE — Claim-verify gap**:
+  你說 done / verified / 通過 但本 turn 沒跑 \`tsc -b\` / hook test / score script。**現在立刻跑驗證**或在回答中明撤回 claim。"
+fi
+
+ADDITIONAL_CONTEXT=$(printf '⚠️ 來自上 turn(s) 的 governance self-audit warnings — M14/M20 auto-inject:
+
+%s%s
+
+→ 這些是 stop hook 偵測到、應該主動處理的事項。在你回答 user prompt 前先處理(grep / fix / invoke skill / 跑驗證),不要等 user 提醒。' "$CTX_PARTS" "$DIRECTIVE")
+
+# Safety cap:max 3KB(避免 inject context 過大)
+MAX_LEN=3000
+CTX_LEN=${#ADDITIONAL_CONTEXT}
+if [ "$CTX_LEN" -gt "$MAX_LEN" ]; then
+  ADDITIONAL_CONTEXT="${ADDITIONAL_CONTEXT:0:$MAX_LEN}
+
+[truncated — 原 ${CTX_LEN}B,顯示前 ${MAX_LEN}B。如要看全文 grep .claude/logs/self-audit-warnings.jsonl + score-history.jsonl]"
+fi
+
+# Output JSON for Claude Code to inject
+jq -n --arg ctx "$ADDITIONAL_CONTEXT" '{
+  hookSpecificOutput: {
+    hookEventName: "UserPromptSubmit",
+    additionalContext: $ctx
+  }
+}'
+
+exit 0

package/ds-canonical/hooks/lib/_approval_re.sh

@@ -0,0 +1,33 @@
+#!/bin/bash
+# SSOT approval keyword regex(M17 + M34,2026-05-18 codify per audit GAP 6)
+#
+# Used by:
+#   - check_substantive_edit_approval_preflight.sh(pre-flight Edit/Write production)
+#   - stop_self_audit.sh Mechanism 4(post-flight codex-design ship verify)
+#   - check_solo_workflow.sh R3(push main trigger detect)
+#
+# Background:GAP 6 audit(2026-05-18) found approval regex duplicated 3 places + drift:
+# preflight 已加 `#[N] A` numbered directive + 照建議 / 照共識 reference-style
+# 但 stop_self_audit / solo_workflow 沒 sync。
+# 抽出 single SSOT,source from all consumers,確保未來 update 自動 propagate。
+
+# 完整 approval keyword regex(extended POSIX)
+#
+# 涵蓋:
+# (1) 明確同意:同意 / 採用 / 採納 / 拍板 / 可以 / OK / 好 / approved / approve / 沒問題
+# (2) 動作指令:改成 / 改為 / 執行 / 上吧 / push / implement / go ahead / ship / 上 main
+# (3) 大批做:做一做 / 就做 / 做吧 / 做完 / 全部做完 / 做到完 / 馬不停蹄 / 全部照建議做
+# (4) 建議認可:建議做 / 照你建議 / 照建議 / 照共識 / 照我的 / 按照(代詞 reference)
+# (5) Numbered directive:#1 A / #2 B / 1. B / 2. A 類 user 點選 option
+# (6) 合 main trigger(R3 solo workflow specific):合進去 / 合 main / merge / 上 main
+# (7) Past-tense 認可:好了 / OK 了 / 可以了 / 沒問題了 / 同意了 / 拍板了
+# 2026-05-18 syntactic fix:加 closing `)` 收尾(原 `grep: parentheses not balanced`
+# 錯誤造成 hook silent fail-closed BLOCKER。純語法 bug,**不** widen 偵測 scope —
+# 既有 keyword list 不動。
+export APPROVAL_KEYWORD_RE='(同意|採用|採納|拍板|可以|改成|改為|執行|上吧|push|implement|go ahead|approved|approve|OK|好|沒問題|做一做|就做|做吧|做完|全部做完|做到完|馬不停蹄|全部照建議做|建議做|照你建議|照建議|照共識|照我的|按照|合進去|合\s*main|merge|上\s*main|ship|好了|OK\s*了|可以了|沒問題了|同意了|拍板了|#[0-9]+\s*[A-Za-z]|^[0-9]+\.\s*[A-Za-z])'
+
+# Helper:check input string contains approval keyword
+# Usage: if has_approval "$user_msg"; then ...
+has_approval() {
+  echo "$1" | grep -qE "$APPROVAL_KEYWORD_RE"
+}

package/ds-canonical/hooks/lib/_code_quality.sh

@@ -0,0 +1,73 @@
+#!/bin/bash
+# PostToolUse hook: lightweight code quality check on tsx/ts edit.
+# Only runs the 2 fastest checks:
+#   1. `any` usage without `// any-allow:` escape hatch
+#   2. tsx file-size P0 (> 800 transition cap)
+#
+# Full audit (dead export / circular / long function) — use `/code-quality-audit` skill.
+
+# Per-hook fire logging(enables /knowledge-prune D2 dead-hook detection)
+source "$(dirname "$0")/../_log-fire.sh" 2>/dev/null && log_hook_fire
+
+set -euo pipefail
+
+FILE_PATH=$(jq -r '.tool_input.file_path // empty')
+
+# Scope: only src/ .tsx / .ts files (not stories, not specs)
+if ! echo "$FILE_PATH" | grep -qE 'src/.*\.tsx?$'; then
+  exit 0
+fi
+if echo "$FILE_PATH" | grep -qE '\.(stories|anatomy\.stories|principles\.stories)\.tsx$'; then
+  exit 0
+fi
+if [ ! -f "$FILE_PATH" ]; then
+  exit 0
+fi
+
+VIOLATIONS=""
+
+# ── Check 1: `any` usage ────────────────────────────────────────────────────
+# Flag `: any` / `as any` / `<any>` / `any[]` / `Record<X, any>`
+# Skip lines with `any-allow` OR previous line with `any-allow`.
+ANY_HITS=$(perl -ne '
+  BEGIN { our $prev_allow = 0; }
+  my $has_allow = /any-allow/;
+  my $line = $_;
+  if (!$prev_allow && !$has_allow) {
+    next if m{^\s*//};
+    next if m{^\s*\*};
+    next if m{/\* ?@ts-};
+    # Patterns
+    if (/:\s*any\b/ || /\bas\s+any\b/ || /<any>/ || /\bany\[\]/ || /Record<[^,]+,\s*any>/) {
+      # String literal FPs
+      unless (/[\x27"](any|many)[\x27"]/i) {
+        print "$.:$line";
+      }
+    }
+  }
+  $prev_allow = $has_allow;
+' "$FILE_PATH" 2>/dev/null | head -5)
+
+if [ -n "$ANY_HITS" ]; then
+  VIOLATIONS="${VIOLATIONS}\n⚠️ TypeScript \`any\` usage(無 \`// any-allow: {rationale}\`):\n${ANY_HITS}\n  修法:改 proper type;真沒辦法(e.g. 3rd-party 類型外部化)→ 在同行或上一行加 \`// any-allow: {具體 rationale}\`"
+fi
+
+# ── Check 2: tsx file size ──────────────────────────────────────────────────
+if echo "$FILE_PATH" | grep -qE '\.tsx$'; then
+  LINES=$(wc -l < "$FILE_PATH" | tr -d ' ')
+  # Exemption marker in top 20 lines: `// code-quality-allow: file-size {rationale}`
+  EXEMPT=$(head -20 "$FILE_PATH" | grep -cE 'code-quality-allow:\s*file-size' || true)
+  if [ "$LINES" -gt 800 ] && [ "$EXEMPT" -eq 0 ]; then
+    VIOLATIONS="${VIOLATIONS}\n⚠️ tsx file-size P0:${LINES} 行 > 800 transition cap(budget 500)。架構性拆分考慮:分 sub-component tsx(e.g. sidebar.tsx → sidebar.tsx + sidebar-menu.tsx + sidebar-group.tsx)。若係 foundational composite(Sidebar/TreeView 等),tsx 頂部加 \`// code-quality-allow: file-size {rationale}\` 明文豁免。"
+  fi
+fi
+
+# ── Emit warning ─────────────────────────────────────────────────────────
+if [ -n "$VIOLATIONS" ]; then
+  ESCAPED=$(printf "%b" "$VIOLATIONS" | jq -Rs .)
+  cat <<EOJSON
+{"hookSpecificOutput":{"hookEventName":"PostToolUse","additionalContext":"Code quality lite check(full audit via /code-quality-audit):${ESCAPED}"}}
+EOJSON
+fi
+
+exit 0