@qijenchen/design-system 0.1.0-beta.82 → 0.1.0-beta.84

package/ds-canonical/hooks/check_escape_marker_abuse.sh

@@ -135,6 +135,33 @@ $(echo "$MARKERS_FOUND" | sed 's/^/    /')
 EOF
     exit 2
   fi
+
+  # ── Repo 級累計 ratchet(2026-07-08 WM 戰役 R4)──────────────────────────────
+  # per-file gate(≥3 distinct/≥5 total)可被「每檔 1-2 個、散多檔」繞過 → repo 級 ceiling。
+  # Ratchet 精神(Polaris stylelint migrator):存量 ≥ cap 後只擋「本次 edit 再新增 marker」,
+  # 不因存量 brick 無關 edit(本次內容無 marker → 直接放行)。
+  EDIT_ADDS_MARKER=$(echo "$CONTENT" | grep -cE "$MARKER_RE" || true)
+  if [ "${EDIT_ADDS_MARKER:-0}" -gt 0 ]; then
+    APPS_ROOT="${CLAUDE_PROJECT_DIR:-.}/apps"
+    REPO_CAP=10
+    if [ -d "$APPS_ROOT" ]; then
+      REPO_TOTAL=$(grep -rhoE "$MARKER_RE" "$APPS_ROOT" --include='*.tsx' --include='*.ts' 2>/dev/null | wc -l | tr -d ' ')
+      if [ "${REPO_TOTAL:-0}" -ge "$REPO_CAP" ]; then
+        cat >&2 << EOF
+🚨 ESCAPE-MARKER-REPO-RATCHET BLOCKER(P0,2026-07-08 WM 戰役 R4)
+
+  apps/** 全 repo escape marker 存量已 $REPO_TOTAL 個(ceiling $REPO_CAP),本次 edit 又要新增 $EDIT_ADDS_MARKER 個。
+  每檔 1-2 個散多檔 = 繞 per-file gate 的同型濫用 — repo 級 ratchet 攔。
+
+  修法 2 選 1:
+    (a) 先清既有 escape 的根因(重構走 DS canonical),存量 < $REPO_CAP 後再加真必要的
+    (b) Override env(極罕見,commit msg 必記 rationale):
+        CLAUDE_BYPASS_ESCAPE_MARKER_AUDIT=1
+EOF
+        exit 2
+      fi
+    fi
+  fi
 fi
 
 exit 0

package/ds-canonical/hooks/check_field_family_invariants.sh

@@ -1,12 +1,13 @@
 #!/bin/bash
 # Field family unified invariant hook(2026-05-08 cluster A consolidation)
 #
-# Merges PreToolUse hooks(原各檔已 retire,合併入此)— 共 5 條 sub-rules:
+# Merges PreToolUse hooks(原各檔已 retire,合併入此)— 共 6 條 sub-rules:
 #   A.1 naked row-mode propagation(原 check_naked_row_mode_propagation,P0 BLOCKER)
 #   A.2 FieldControlGroup wrapper direct child(原 check_field_control_group_direct_child,P1 WARN)
 #   A.3 Field state ring SSOT(原 check_field_state_token_consume 3 sub-rules,P0 BLOCKER)
 #   A.4 disabled placeholder color(原 check_disabled_placeholder_color,P1 stderr only)
 #   A.5 _Group child fieldCtx.id 隔離(2026-05-31 折入,M4 AR34 regression detector,P0 BLOCKER)
+#   A.6 空值顯示 SSOT(2026-07-08 user 拍板半形 hyphen,P0 BLOCKER)
 #
 # Why merge:皆 Field 家族 invariant,共用 INPUT parsing + Edit/Write filter pattern,
 #   分散在 4 個 hook 是「散裝 SSOT」(M17 + Anthropic ≤ 15 hook best practice 違反)。
@@ -19,6 +20,7 @@
 #   A.3: `// @field-state-ring-allow: <reason>`
 #   A.4: `// @disabled-color-allow: <reason>`
 #   A.5: `// @group-fieldctx-allow: <reason>`
+#   A.6: `// @empty-display-allow: <reason>`
 
 source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
 
@@ -247,4 +249,62 @@ EOF
     ;;
 esac
 
+# ── A.6 空值顯示 SSOT(P0 BLOCKER,2026-07-08 user 拍板半形 hyphen)────────────────
+# user verbatim「我從頭到尾哪裡有說要用全形的」+ 五情境空值框架。SSOT:符號常數 =
+#   field-wrapper.tsx `EMPTY_DISPLAY = '-'`(U+002D 半形);分流 hook = field-context.ts
+#   `useFieldEmptyDisplay()`。禁 2 shape:
+#   A.6.1 非 owner 檔直接 import `EMPTY_DISPLAY` 常數(應消費 hook 分流,否則 table-cell
+#         editable→'' 分流會漏);
+#   A.6.2 components/ tsx display 路徑 hardcode 全形 em dash `'—'`/`"—"`(U+2014)字面。
+# M7 broad-vs-narrow:spec wording 廣(「禁 hardcode 空值符號」);hook 取「quoted em dash 字面」
+#   高信號 subset + owner skip + comment 剝離 + `@empty-display-allow` escape,零誤判導向。
+if ! echo "$NEW_CONTENT" | grep -q '@empty-display-allow'; then
+  # A.6.1 非 owner 檔 import EMPTY_DISPLAY 常數(剝離註解行)
+  case "$FILE_PATH" in
+    */field-context.ts|*/field-wrapper.tsx) ;; # SSOT owner(定義 + 分流 hook)skip
+    *)
+      A61_CONTENT=$(echo "$NEW_CONTENT" | grep -vE '^[[:space:]]*(//|\*|/\*)')
+      if printf '%s' "$A61_CONTENT" | grep -E "import.*EMPTY_DISPLAY|EMPTY_DISPLAY.*from" >/dev/null; then
+        cat >&2 <<EOF
+
+┄┄┄ A.6.1 check_field_family_invariants — EMPTY_DISPLAY 直引 BLOCKER ┄┄┄
+
+[P0] ${FILE_PATH}
+偵測到直接 import \`EMPTY_DISPLAY\` 常數(非 field-context.ts owner)。
+空值顯示必經 \`useFieldEmptyDisplay()\` hook 分流(table-cell 可編輯→空白 / 其餘→半形 '-'),
+直引常數會漏 surface × editable 分流。
+
+修法:import { useFieldEmptyDisplay } from '@/design-system/components/Field/field-context'
+      const emptyDisplay = useFieldEmptyDisplay()
+例外:行尾 \`// @empty-display-allow: <reason>\`
+
+EOF
+        record_worst 2
+      fi
+      ;;
+  esac
+  # A.6.2 components/ tsx hardcode 全形 em dash 空值字面(剝離註解行 + owner/story skip)
+  case "$FILE_PATH" in
+    *.stories.tsx|*/field-context.ts|*/field-wrapper.tsx) ;; # doc N/A marker + SSOT owner skip
+    *components/*.tsx)
+      A62_CONTENT=$(echo "$NEW_CONTENT" | grep -vE '^[[:space:]]*(//|\*|/\*)')
+      if printf '%s' "$A62_CONTENT" | grep -E "['\"]—['\"]" >/dev/null; then
+        cat >&2 <<EOF
+
+┄┄┄ A.6.2 check_field_family_invariants — 全形 em dash 空值 BLOCKER ┄┄┄
+
+[P0] ${FILE_PATH}
+偵測到 components/ 實作檔 hardcode 全形 em dash \`'—'\`(U+2014)字面。
+user 2026-07-08 拍板:空值符號 = **半形 hyphen '-'(U+002D)**,禁全形。
+
+修法:空值一律 \`{value ?? emptyDisplay}\`(emptyDisplay = useFieldEmptyDisplay()),不 hardcode 符號。
+例外:行尾 \`// @empty-display-allow: <reason>\`
+
+EOF
+        record_worst 2
+      fi
+      ;;
+  esac
+fi
+
 exit $WORST

package/ds-canonical/hooks/check_layout_space_magic_numbers.sh

@@ -43,7 +43,31 @@ ESCAPE_MARKER='@layout-space-magic-ok:'
 
 # Detect magic spacing classes (Tailwind class strings only — NOT JSX props like size={24})
 # Match per line so we can check per-line escape comments
-MAGIC_LINES=$(echo "$NEW_CONTENT" | grep -nE '\b(p|px|py|pt|pb|pl|pr|gap|space-x|space-y|m|mx|my|mt|mb|ml|mr)-(0\.5|[1-9][0-9]?(\.[0-9])?)\b')
+# 2026-07-08 WM 戰役 R4 擴 scope(broad-vs-narrow gap 實證修補):
+#   (a) logical properties ps-/pe-/ms-/me-(WM 6 筆 ps-4 漏網實證)
+#   (b) arbitrary bracket 固定 px:gap-[7px] / p-[13px] 類(spacing 家族)
+#   (c) 固定寬度 w-[Npx](WM w-[640px] 丟失 min() viewport clamp 實證;w-[min(...)]/var()/% 不攔)
+#   (d) grid-template 固定 px 欄寬:grid-cols-[...Npx...](WM mini-table 88px/72px 黏死實證)
+MAGIC_LINES=$(echo "$NEW_CONTENT" | grep -nE '\b(p|px|py|pt|pb|pl|pr|ps|pe|gap|space-x|space-y|m|mx|my|mt|mb|ml|mr|ms|me)-(0\.5|[1-9][0-9]?(\.[0-9])?)\b|\b(p|px|py|pt|pb|pl|pr|ps|pe|gap|m|mx|my|mt|mb|ml|mr|ms|me)-\[[0-9]+(\.[0-9]+)?px\]|\bw-\[[0-9]+(\.[0-9]+)?px\]|\bgrid-(cols|rows)-\[[^]]*[0-9]+px[^]]*\]')
+
+# ── 幻覺 token 攔截(2026-07-08 WM 戰役:app 自創 var(--layout-space-distant) → CSS 未定義
+# silent 解析 0 → 區塊全黏死,PDF「全部擠在一起」根因之一。白名單 = loose|tight|bottom
+# (layoutSpace.css SSOT 僅此三顆;新增 tier 走 DS token 流程,不在 consumer 端發明)──
+PHANTOM=$(echo "$NEW_CONTENT" | grep -nE 'var\(--layout-space-[a-z-]+\)' | grep -vE 'var\(--layout-space-(loose|tight|bottom)\)' || true)
+if [ -n "$PHANTOM" ]; then
+  cat >&2 <<EOF_PH
+🚨 [P0 BLOCKER] 幻覺 layout-space token(CSS 未定義 = silent 0 = 佈局黏死):
+$PHANTOM
+→ 白名單只有 --layout-space-{loose,tight,bottom}(layoutSpace.css SSOT)。
+  要更大一級間距 → 用 loose;真需新 tier → 走 DS token 新增流程(layoutSpace.spec),禁 consumer 端自創。
+  Anchor:2026-07-08 WM --layout-space-distant ×4 處,整個 detail modal 區塊黏死。
+EOF_PH
+  exit 2
+fi
+
+# 2026-07-10 批次 A:divider 幾何 canonical(h-6 mx-1 / h-5 mx-1,action-bar.spec.md「分隔線幾何」)
+# 是**正解**,不該被 magic-number 攔(原本懲罰 canonical 修法、放行違規 = 治理自我打架)。
+MAGIC_LINES=$(echo "$MAGIC_LINES" | grep -vE '(Separator|ButtonDivider)' || true)
 
 if [ -z "$MAGIC_LINES" ]; then
   exit 0
@@ -82,9 +106,9 @@ $(echo -e "$UNJUSTIFIED" | sed 's/^/    /' | head -10)
   per app-shell.spec.md L205-219 + layoutSpace.spec.md SSOT:consumer content 必遵循
   layoutSpace 6 條規則 + 親疏 3 級,**禁** 硬寫 Tailwind magic numbers。改用:
     p-[var(--layout-space-loose)]      /* 16px 規則 1A/1B chrome / wrap */
-    p-[var(--layout-space-tight)]      /* 12px 規則 3 親 gap */
-    gap-[var(--layout-space-distant)]  /* 24px 規則 3 疏 gap */
-    space-y-[var(--layout-space-distant)]
+    gap-[var(--layout-space-tight)]    /* 12px 規則 3 親 gap(跨範疇相關) */
+    gap-[var(--layout-space-loose)]    /* 16px 規則 3 疏 gap(跨範疇 parallel;lg 密度自動 24px) */
+    (token 全集 = loose/tight/bottom,無其他級 — 自創 --layout-space-distant 類 = 幻覺 token,本 hook 會攔)
 
   修法 2 選 1:
     (a) 改 token:換成 var(--layout-space-N) N∈{loose,tight} family per 6 規則 + 親疏 3 級

package/ds-canonical/hooks/check_naming_and_abstraction.sh

@@ -136,7 +136,7 @@ case "$FILE_PATH" in
       */components/Tag/*|*/components/Avatar/*|*/components/Chart/*|*/tokens/*) ;; # codified primitive-consumer skip
       *)
         if ! echo "$NEW_CONTENT" | grep -q 'primitive-color-allow-blanket'; then
-          VIOLATIONS_D3=$(printf '%s' "$NEW_CONTENT" | grep -nE 'var\(--color-[a-z]+-[0-9](-opaque)?\)' | grep -v 'primitive-color-allow' || true)
+          VIOLATIONS_D3=$(printf '%s' "$NEW_CONTENT" | grep -nE 'var\(--color-[a-z][a-z-]*-[0-9]{1,2}(-opaque)?\)' | grep -v 'primitive-color-allow' || true)
           if [ -n "$VIOLATIONS_D3" ]; then
             cat >&2 <<EOF
 

package/ds-canonical/hooks/check_opacity_token_usage.sh

@@ -46,6 +46,10 @@ esac
 
 NEW_CONTENT=$(echo "$INPUT" | jq -r '.tool_input.content // .tool_input.new_string // ""')
 [ -z "$NEW_CONTENT" ] && exit 0
+# Per-line escape(2026-07-07 方向 2 升 P0 配套):行內含 `@token-registry-ok: <rationale>` 豁免該行
+NEW_CONTENT=$(printf '%s
+' "$NEW_CONTENT" | grep -v '@token-registry-ok:' || true)
+[ -z "$NEW_CONTENT" ] && exit 0
 
 # Resolve registry path(absolute via $CLAUDE_PROJECT_DIR or relative fallback)
 REGISTRY="${CLAUDE_PROJECT_DIR:-}/packages/design-system/src/tokens/utility-registry.json"
@@ -131,6 +135,24 @@ if [ -n "$HITS_PRIMITIVE" ]; then
   VIOLATIONS="${VIOLATIONS}\n   [primitive color as utility] $(echo "$HITS_PRIMITIVE" | tr '\n' ' ')"
 fi
 
+# 10) 幻覺 semantic state 尾綴(2026-07-10 批次 A C1:WM hover:bg-neutral-hovered ×3 檔 silent no-op 實證。
+#     真尾綴只有 -hover/-active/-selected(+ selected-hover/selected-active);過去式/-pressed 全幻覺,
+#     Tailwind 靜默不生成 → hover 無效果、build 不報錯)
+HITS_PHANTOM_STATE=$(echo "$NEW_CONTENT" | grep -oE "\b(hover:|active:|focus:)?(bg|text|border|ring)-[a-z][a-z-]*-(hovered|actived|focussed|pressed)\b" | sort -u || true)
+if [ -n "$HITS_PHANTOM_STATE" ]; then
+  VIOLATIONS="${VIOLATIONS}\n   [phantom state suffix(silent no-op)] $(echo "$HITS_PHANTOM_STATE" | tr '\n' ' ')"
+fi
+
+# 11) micro gap(<4px)+ registry fraction width(#71 2026-07-11 接線)——
+#     registry micro_gap / fraction 的 rationale 明寫「flag for human review」(非硬禁)→ 走
+#     SOFT WARN 非 block(避免誤殺 Calendar/Chart/FileViewer/Carousel 等 4 個既有合法 micro-gap 用途)。
+#     fraction 用 registry 明列 14 條(w-1/3.. 不含 w-1/2 = 合法留白),避免廣捕 w-N/M 誤殺。
+HITS_MICROGAP=$(echo "$NEW_CONTENT" | grep -oE "\bgap-(px|0\.5|1\.5)\b" | sort -u || true)
+HITS_FRACTION=$(echo "$NEW_CONTENT" | grep -oE "\bw-(1/3|2/3|1/4|3/4|1/5|2/5|3/5|4/5|1/6|5/6|1/12|5/12|7/12|11/12)\b" | sort -u || true)
+SOFT_NOTES=""
+[ -n "$HITS_MICROGAP" ] && SOFT_NOTES="${SOFT_NOTES}\n   [micro gap <4px] $(echo "$HITS_MICROGAP" | tr '\n' ' ')"
+[ -n "$HITS_FRACTION" ] && SOFT_NOTES="${SOFT_NOTES}\n   [fraction width] $(echo "$HITS_FRACTION" | tr '\n' ' ')"
+
 if [ -n "$VIOLATIONS" ]; then
   cat >&2 <<'EOF_HEAD'
 
@@ -152,7 +174,21 @@ EOF_HEAD
      bg-neutral-N  → semantic utility(bg-surface 等)或 bg-[var(--color-neutral-N)]
 
    詳 utility-registry.json `_meta.spec_sources` + M23「DS 內既有 canonical 優先」。
+   Per-line escape:行尾註解 `@token-registry-ok: <rationale>`(audit 可追)。
 EOF_BODY
+  # P0 BLOCKER(2026-07-07 治理進化方向 2:對齊 user 2026-05-27「SSOT canonical 必 P0」doctrine;
+  # 檔級豁免(anatomy/principles stories / token 自家)+ 行級 escape 已備,升級不增誤殺)
+  # micro-gap/fraction soft note 附在硬 block 訊息尾(一起讓 AI 看到,但不影響 exit code 判定)
+  [ -n "$SOFT_NOTES" ] && { echo "" >&2; echo "   （另有 soft flag,非 block 原因）:" >&2; echo -e "$SOFT_NOTES" >&2; }
+  exit 2
+fi
+
+# 只有 micro-gap / fraction soft note(無硬 violation)→ WARN 非 block(registry rationale「flag for human review」)
+if [ -n "$SOFT_NOTES" ]; then
+  echo "" >&2
+  echo "⚠️  Dim 47 soft flag(registry micro_gap / fraction「flag for human review」— 非 block,#71 接線):" >&2
+  echo -e "$SOFT_NOTES" >&2
+  echo "   <4px gap / registry fraction width 常違反 item-anatomy slot 幾何 / layout SSOT → 人工 review。合理則行尾 @token-registry-ok: <rationale>。" >&2
 fi
 
 exit 0

package/ds-canonical/hooks/check_pixel_quantified_audit.sh

@@ -6,7 +6,8 @@
 #   `getAttribute('data-state')` / `class.includes('items-start')` attribute-existence
 #   = false-positive trap(DOM-structure-pass ≠ visual-pass)。
 #
-# Mechanical rule:scripts/visual-audit-*.mjs(or *.js)若有 `getAttribute(` 但沒 paired
+# Mechanical rule:scripts/visual-audit*.mjs(or *.js;含 canonical scripts/visual-audit.mjs,
+# 舊 visual-audit-<target>.mjs 家族已於 2026-05-30 a2360e99 整批 retire)若有 `getAttribute(` 但沒 paired
 # `getBoundingClientRect(` 或 `offsetTop/.offsetHeight` 量化 measurement → warn。
 #
 # 對齊 Material X-DataGrid visual regression / AG Grid playwright pixel snapshot canonical。
@@ -21,7 +22,7 @@ EVENT=$(echo "$INPUT" | jq -r '.hook_event_name // ""' 2>/dev/null)
 
 case "$TOOL" in Edit|Write|MultiEdit) ;; *) exit 0 ;; esac
 case "$FILE_PATH" in
-  */scripts/visual-audit-*.mjs|*/scripts/visual-audit-*.js) ;;
+  */scripts/visual-audit*.mjs|*/scripts/visual-audit*.js) ;;
   *) exit 0 ;;
 esac
 [ "$EVENT" != "PostToolUse" ] && exit 0

package/ds-canonical/hooks/check_post_main_ssot_propagate.sh

@@ -63,7 +63,10 @@ SSOT_COUNT=$(echo "$SSOT_DIFF" | wc -l | tr -d ' ')
 # Read current package version
 PKG_VERSION=$(jq -r '.version' "$CWD/packages/design-system/package.json" 2>/dev/null || echo "unknown")
 
-cat <<EOF
+# 2026-07-11 #79 修:PostToolUse 純 stdout **不注入 AI context**(只進 transcript)→ 原 heredoc 的
+# 「AI 必全自動執行」提議到不了 AI = 假 inject。對齊 inject_deploy_url_after_push.sh:236 root-cause fix,
+# 收進 MSG 後用 jq hookSpecificOutput.additionalContext 真注入。
+MSG=$(cat <<EOF
 🔄 SSOT propagation gate(post push origin main):
 
 📊 偵測:HEAD~1..HEAD 含 $SSOT_COUNT 個 SSOT-affecting file changes
@@ -87,4 +90,6 @@ AI 全自動執行步驟(user 已給 merge trigger → 以下不需再問;user
   - .claude/skills/knowledge-prune/SKILL.md「Phase Z」reference
   - .claude/skills/deep-audit-cross-codex/SKILL.md「Phase C」reference
 EOF
+)
+jq -n --arg ctx "$MSG" '{hookSpecificOutput:{hookEventName:"PostToolUse",additionalContext:$ctx}}'
 exit 0

package/ds-canonical/hooks/check_propose_without_benchmark.sh

@@ -10,6 +10,10 @@
 # source,不可憑印象 propose」+ propose-options/SKILL.md。
 #
 # 注意:本 hook 走 UserPromptSubmit(在 AI reply 前 inject context),
+# ⚠️ fail-closed 設計約束(2026-07-07 治理進化方向 2 稽核結論):UserPromptSubmit 的 exit 2
+# 擋的是 user 輸入本身 = 錯誤工具語義,本 hook **不可**升 exit 2。propose 家族的 fail-closed
+# 端 = check_propose_pre_grep_verify.sh(M18 Q0 配對)+ stop_self_audit claim-verify 閘;
+# 本 hook 職責 = 事前 P0 措辭 directive 注入(非 soft 建議)。
 # 跟 check_propose_pre_grep_verify.sh(走 PostToolUse 偵測 propose 已成型後再警示)互補。
 
 source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
@@ -43,9 +47,9 @@ if [ "$HAS_FETCH" -ge 2 ]; then
   exit 0
 fi
 
-# Soft inject
+# P0-directive inject(exit 0 by design — 見檔頭 fail-closed 設計約束)
 cat <<EOF
-⚠️ M26 Propose-without-benchmark gate
+🚨 M26 Propose-without-benchmark gate(P0 directive — 未 fetch 就 propose = M26 違規,非建議)
 
 → User prompt 含 propose / visual / behavior decision trigger keyword,但過去 ~20 turns
   Web fetch / WebSearch tool_use count = $HAS_FETCH(< 2)。

package/ds-canonical/hooks/check_ssot_header_declaration.sh

@@ -0,0 +1,55 @@
+#!/bin/bash
+# check_ssot_header_declaration.sh — 新建 production tsx 必帶「── 消費的 SSOT ──」宣告段
+# (2026-07-07 治理進化方向 3 洞 a:原 check_ssot_consultation.sh 2026-05-XX retired 後,
+#  CLAUDE.md「# SSOT 消費 canonical」+ ssot-consultation.md:30-51 強制的檔頭宣告段
+#  **無任何機械驗證** — 內部盤點實證。本 hook = 精簡復活版,只驗「新檔有無宣告段」,
+#  不驗宣告品質(品質靠 audit dim 5 + dim 54 + M18/M29)。)
+#
+# Scope(ratchet,對齊 Polaris stylelint-adoption 策略):
+#   - 只攔 **Write 新檔**(components/ patterns/ 的 .tsx,磁碟上不存在)— 存量檔 Edit 豁免
+#   - stories / test / index.ts 豁免
+#   - escape:內容含 `@ssot-header-exempt: <rationale>`(audit 可追)
+# P0 BLOCKER(user 2026-05-27「SSOT canonical 必 P0」doctrine)。
+
+source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
+
+set -euo pipefail
+
+INPUT=$(cat)
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // ""')
+[ "$TOOL" = "Write" ] || exit 0
+
+FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // ""')
+case "$FILE_PATH" in
+  */packages/design-system/src/components/*.tsx|*/packages/design-system/src/patterns/*.tsx) ;;
+  *) exit 0 ;;
+esac
+case "$FILE_PATH" in
+  *.stories.tsx|*.test.tsx|*/index.ts|*/index.tsx) exit 0 ;;
+esac
+
+# Ratchet:磁碟已存在 = 存量覆寫,豁免(存量清理另走 audit)
+[ -f "$FILE_PATH" ] && exit 0
+
+CONTENT=$(echo "$INPUT" | jq -r '.tool_input.content // ""')
+[ -z "${CONTENT//[[:space:]]/}" ] && exit 0
+
+# 宣告段或 escape 任一存在 → 過
+if echo "$CONTENT" | grep -q "消費的 SSOT"; then exit 0; fi
+if echo "$CONTENT" | grep -q "@ssot-header-exempt:"; then exit 0; fi
+
+cat >&2 <<'EOF'
+🚨 [P0 BLOCKER] 新建 production tsx 缺「── 消費的 SSOT ──」檔頭宣告段
+
+CLAUDE.md「# SSOT 消費 canonical」+ .claude/references/ssot-consultation.md:30-51 強制:
+新元件 tsx 開頭必列本檔消費的 components / patterns / tokens / spec(沒列 = 自創 = mindset #2 違規)。
+
+修法 — 2 選 1:
+  (a) 檔頭補宣告段(格式見 ssot-consultation.md;近例:pagination.tsx 檔頭):
+        // ── 消費的 SSOT ──
+        // - <primitive / token / spec 清單 + 消費點一句>
+  (b) 真的零 SSOT 可消費(罕見,純 utility)→ 內容加 `// @ssot-header-exempt: <rationale>`
+
+對應:mindset #2 / M23 / 治理進化 roadmap 方向 3(planning/2026-07-07-governance-evolution-roadmap.md)
+EOF
+exit 2

package/ds-canonical/hooks/check_story_determinism.sh

@@ -0,0 +1,39 @@
+#!/bin/bash
+# check_story_determinism.sh — stories 寫入時 determinism 哨(2026-07-07 治理進化軌道 7)
+#
+# Why:story 用真實時間/亂數 → VR baseline 換日假 breach(anchor:2026-07-07 calendar 三 scenario
+# 0.07–0.51% 週期性假紅,三修才根治:story 釘日期 → 元件內部時間 → runner 偏移時鐘)。
+# runner 層已有偏移時鐘兜底(scripts/visual-audit.mjs),本 hook = 寫入層提前攔,
+# 讓 determinism 在出生點就成立(非 VR 撞到才修)。
+#
+# 偵測(新寫入內容):裸 `new Date()`(無參數)/ `Date.now()` / `Math.random()`。
+# escape:行內 `@nondeterministic-ok: <rationale>`(如「即時鐘 demo,VR 不截」)。
+# 第一期 WARN(exit 0):存量 10 檔(dry-run 2026-07-07,DateGrid 家族為主)未清,
+# 誤殺率驗證期後升 P0(對齊 handcraft 偵測同節奏;roadmap 方向 1 KPI 隨頻回顧)。
+
+source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
+
+set -euo pipefail
+INPUT=$(cat)
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // ""')
+case "$TOOL" in Edit|Write|MultiEdit) ;; *) exit 0 ;; esac
+FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // ""')
+case "$FILE_PATH" in *.stories.tsx) ;; *) exit 0 ;; esac
+
+NEW_CONTENT=$(echo "$INPUT" | jq -r '
+  (.tool_input.content // "") + "\n" +
+  (.tool_input.new_string // "") + "\n" +
+  ([.tool_input.edits[]? | .new_string] | join("\n"))
+' 2>/dev/null || echo "")
+[ -z "${NEW_CONTENT//[[:space:]]/}" ] && exit 0
+
+HITS=$(printf '%s\n' "$NEW_CONTENT" | grep -v '@nondeterministic-ok:' | grep -nE 'new Date\(\)|Date\.now\(\)|Math\.random\(\)' || true)
+[ -z "$HITS" ] && exit 0
+
+cat >&2 <<EOF
+⚠️ [第一期 WARN] story 非決定性時間/亂數(VR baseline 換日假 breach 根因):
+$HITS
+→ 釘固定值(new Date(2026, 6, 15) / 常數 seed);真需即時值 → 行內 \`@nondeterministic-ok: <rationale>\`。
+  Anchor:2026-07-07 calendar VR 三修;runner 偏移時鐘為兜底非藉口。roadmap 方向 1(planning/2026-07-07-governance-evolution-roadmap.md)。
+EOF
+exit 0

package/ds-canonical/hooks/check_substantive_edit_approval_preflight.sh

@@ -2,19 +2,20 @@
 # check_substantive_edit_approval_preflight.sh — Pre-action gate for substantive design edits.
 #
 # Purpose: PRE-flight 偵測 packages/design-system/src/**.{tsx,ts,css} edit + last 5 user msgs 無
-# approval keyword → SOFT inject context warning。
+# approval keyword → P0 BLOCKER(stderr + exit 2;2026-05-15 由 soft warn 升級,
+# per memory/feedback_ship_then_revert_anti_pattern.md SSOT)。
 #
-# 對比 stop_self_audit.sh post-action BLOCKER:本 hook 是 PRE-action soft warn,
-# 讓 AI 看到 context 後 self-decide(propose-only OR cite approval verbatim),
+# 對比 stop_self_audit.sh post-action BLOCKER:本 hook 是 PRE-action gate,
+# 在 edit 落地前就攔(propose-only OR cite approval verbatim + bypass env),
 # 避免「edit → stop hook BLOCKER → revert」waste cycle(user 抓 2026-05-12 anti-pattern)。
 #
 # 對齊 Option 3 hybrid(M32 split 後 (f) ship gate 的 PRE-flight 補位):
-# - PreToolUse soft warn = info inject(本 hook)
-# - Stop hook BLOCKER = enforcement(stop_self_audit.sh Mechanism 4)
+# - PreToolUse P0 BLOCKER = pre-action enforcement(本 hook)
+# - Stop hook BLOCKER = post-action backstop(stop_self_audit.sh Mechanism 4)
 # - AI inline self-statement = discipline(M31 Layer A/C marker + 本 hook context)
 #
-# Why pre-action soft instead of hard BLOCK:false-positive 風險(legit bug fix 可能撞)+
-# inject info 比 reject 更尊重 AI judgment + 配合 existing stop hook backstop。
+# False-positive escape:CLAUDE_BYPASS_DESIGN_APPROVAL=1(audit-logged → logs/approval-bypass.jsonl),
+# 需 cite user approval verbatim quote 在 commit message + reply。
 #
 # 對齊:CLAUDE.md `# 稽核 canonical` Audit-vs-execute 分權 + M31 Layer A/C + M32(f) ship gate。
 

package/ds-canonical/hooks/check_tabs_content_chrome_body_double_gap.sh

@@ -52,6 +52,34 @@ if ! echo "$FILE" | grep -qE '(packages/design-system/src/|/apps/|(^|/)apps/)';
 CONTENT=$(cat "$FILE" 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 
+# ── Check 3(2026-07-08 WM 戰役 R4:root 偵測,不只 symptom)──
+# WM 實證:app 把 TabsList 塞 DialogBody + `!pt-0` hack 對抗 primitive,TabsContent 加了 mt-0
+# 就繞過 Check 2 —— 但 root 錯誤是「沒用 DialogHeader tabsSlot canonical」(雙線 + 底線內縮 +
+# spacing owner 自組)。偵測兩個 root 簽名(任一 → BLOCK 指路 tabsSlot):
+#   (a) DialogBody/SheetBody/SurfaceBody className 含 `!pt-0`(important 對抗 primitive 的 pt owner)
+#   (b) <TabsList 出現在含 DialogBody 的同段 new content 且無 tabsSlot 字樣
+ROOT_SIG_A=$(printf '%s\n' "$CONTENT" | grep -nE '(DialogBody|SheetBody|SurfaceBody)[^>]*className=[^>]*!pt-0' | grep -v '@tabs-content-gap-ok:' || true)
+ROOT_SIG_B=""
+if printf '%s\n' "$CONTENT" | grep -q '<TabsList' && printf '%s\n' "$CONTENT" | grep -qE '<(DialogBody|SheetBody|SurfaceBody)\b' && ! printf '%s\n' "$CONTENT" | grep -q 'tabsSlot' && ! printf '%s\n' "$CONTENT" | grep -q '@tabs-content-gap-ok:'; then
+  ROOT_SIG_B=$(printf '%s\n' "$CONTENT" | grep -n '<TabsList' | head -3)
+fi
+if [ -n "$ROOT_SIG_A" ] || [ -n "$ROOT_SIG_B" ]; then
+  cat >&2 << 'EOF_C3'
+🚨 TABS-IN-BODY ROOT BLOCKER(P0,2026-07-08 WM 戰役 — 攔 root 非 symptom)
+
+  偵測到「TabsList 手塞 chrome body / body 用 !pt-0 hack」簽名 —— 這是「沒用 header tabsSlot
+  canonical」的 root 錯誤(後果:header 與 TabsList 雙底線、tabs 底線被 body padding 內縮不滿寬、
+  spacing owner 鏈自組)。WM ProjectSettings/TypeSettings 錨例。
+
+  ── 正解 ──
+  <Tabs> wrap → <DialogHeader tabsSlot={<TabsList/>}> → <DialogBody><TabsContent className="mt-0">
+  照 dialog.stories.tsx#WithTabsInHeader 逐字結構(header-canonical.spec.md Rule W2)。
+  Escape:`// @tabs-content-gap-ok: <rationale>`(例:tabs 本來就不屬 header 的內容分頁場景)
+EOF_C3
+  exit 2
+fi
+
+
 # ══ Check 2:overlay body 自身用固定 macro gap-N → 該用 layout-space token(2026-07-01 Sheet gap-4 錨例)══
 # Root(layoutSpace.spec.md 規則 2/3):浮層 body 直接堆疊內容的垂直 gap 屬 macro layout-space,該用
 #   density-scaling token(並列 = loose / functional 交互 = tight),非固定 gap-N(lg 不縮放 → 跟 DS
@@ -157,6 +185,7 @@ while IFS= read -r ln; do
   UNJUSTIFIED="${UNJUSTIFIED}${ln}: $(echo "$cur" | sed 's/^[[:space:]]*//')\n"
 done <<< "$CANDIDATES"
 
+
 if [ -z "$UNJUSTIFIED" ]; then exit 0; fi
 
 cat >&2 << EOF

package/ds-canonical/hooks/lib/_story_compile_drift.sh

@@ -41,7 +41,7 @@ OUTPUT=$(node "$COMPILE_SCRIPT" "$COMP_NAME" --check 2>&1 || true)
 if echo "$OUTPUT" | grep -qE "spec/tsx canonical drift|spec-only|tsx-only"; then
   MSG="📐 Story canonical drift detected in ${COMP_NAME}:\n\n${OUTPUT}\n\nFix tsx componentMeta export 或 spec frontmatter 讓 keys 對齊。"
   ESCAPED=$(printf '%s' "$MSG" | jq -Rs .)
-  printf '{"hookSpecificOutput":{"hookEventName":"PreToolUse","additionalContext":%s}}\n' "$ESCAPED"
+  printf '{"hookSpecificOutput":{"hookEventName":"PostToolUse","additionalContext":%s}}\n' "$ESCAPED"
 fi
 
 # Skip graceful(migration 未做的元件)不報

package/ds-canonical/hooks/lib/_token_hygiene.sh

@@ -35,10 +35,19 @@ VIOLATIONS=""
 # ── Check 1: shadcn compat alias 回流 ─────────────────────────────────────────
 # These are all shadcn safety-net aliases. Our code must use direct tokens instead.
 # bg-muted / bg-secondary / ring-ring are OUR tokens (kept), not listed here.
+# SSOT-drive(#87 2026-07-11):deny-list SSOT = utility-registry.json;優先從 registry 組 pattern
+# (未來新增 alias 只改 registry 自動傳播到本 write-time 主防線,消除「hardcoded 主 / registry 從」倒置)。
+# registry 讀不到 → 保留 hardcoded fallback(11 條)避免 hook 啞掉。
+_REG="${CLAUDE_PROJECT_DIR:-}/packages/design-system/src/tokens/utility-registry.json"
+[ -f "$_REG" ] || _REG="$(dirname "${BASH_SOURCE[0]}")/../../packages/design-system/src/tokens/utility-registry.json"
 SHADCN_PATTERN='\b(bg-popover|text-popover-foreground|text-muted-foreground|bg-accent|text-accent-foreground|bg-destructive|bg-background|bg-card|text-card-foreground|border-input|text-primary-foreground)\b'
+if [ -f "$_REG" ] && command -v jq >/dev/null 2>&1; then
+  _SHADCN_LIST=$(jq -r '.shadcn_alias.block.color_alias | join("|")' "$_REG" 2>/dev/null || true)
+  [ -n "$_SHADCN_LIST" ] && SHADCN_PATTERN="\\b(${_SHADCN_LIST})\\b"
+fi
 SHADCN_HITS=$(grep -nE "$SHADCN_PATTERN" "$FILE_PATH" 2>/dev/null | head -5)
 if [ -n "$SHADCN_HITS" ]; then
-  VIOLATIONS="${VIOLATIONS}\n⚠️ shadcn compat alias found (必須遷移為 direct token):\n${SHADCN_HITS}\n  映射: bg-popover→bg-surface-raised / text-popover-foreground→text-foreground / text-muted-foreground→text-fg-muted / bg-accent→bg-neutral-hover / text-accent-foreground→text-foreground / bg-destructive→bg-error / bg-background→bg-canvas / bg-card→bg-surface / border-input→border-border / text-primary-foreground→text-white"
+  VIOLATIONS="${VIOLATIONS}\n⚠️ shadcn compat alias found (必須遷移為 direct token):\n${SHADCN_HITS}\n  映射: bg-popover→bg-surface-raised / text-popover-foreground→text-foreground / text-muted-foreground→text-fg-muted / bg-accent→bg-neutral-hover / text-accent-foreground→text-foreground / bg-destructive→bg-error / bg-background→bg-canvas / bg-card→bg-surface / text-card-foreground→text-foreground / border-input→border-border / text-primary-foreground→text-white /（其餘 registry alias → 對應 semantic token,見 tokens/color/semantic.css）"
 fi
 
 # ── Check 2: Tailwind v4 [--foo] shorthand (silent fail) ─────────────────────

package/ds-canonical/hooks/stop_self_audit.sh

@@ -99,6 +99,20 @@ if [ "${LAST_USER_LINE:-0}" -gt 0 ] && [ -n "$LAST_ASSISTANT" ]; then
   fi
 fi
 
+# ── Mechanism 7c: Deep-audit coverage gate(2026-07-12 user verbatim「不抽樣不偷懶…現在和未來可以確保嗎」)──
+# Why: deep audit「完成」宣告前必證 91 dim × Claude+codex 雙軌全有證據。AI 自律不可靠(本 session 漏跑
+#   deterministic 24 + judgment 27 + hook 40 三層,只做 claim-vs-code + 反應式補,user 憤怒)。
+#   verify-deep-audit-coverage.mjs = 機械閘;宣告完成 + ledger 有缺口 → BLOCK。
+if [ "${LAST_USER_LINE:-0}" -gt 0 ] && [ -n "$LAST_ASSISTANT" ] && [ -f scripts/verify-deep-audit-coverage.mjs ]; then
+  DEEPAUDIT_CLAIM_RE='(deep.?audit.{0,10}(完成|完整|done)|稽核.{0,8}(完整完美|全部完成|都.?跑完)|91.{0,6}dim.{0,8}(都|全).{0,4}(跑|過|完|有證據)|Phase A.{0,6}完成)'
+  DEEPAUDIT_NEG_RE='(未完成|還沒|尚未|缺口|gap|未跑|待跑|待驗|不算完成|覆蓋.{0,4}未|還有.{0,4}dim|待補)'
+  if echo "$LAST_ASSISTANT" | grep -qE "$DEEPAUDIT_CLAIM_RE" && ! echo "$LAST_ASSISTANT" | grep -qE "$DEEPAUDIT_NEG_RE"; then
+    if ! node scripts/verify-deep-audit-coverage.mjs >/dev/null 2>&1; then
+      CRITICAL_DEEPAUDIT_COVERAGE=1
+    fi
+  fi
+fi
+
 # ── Mechanism 2: Auto-prune trigger ─────────────────────────────────────────
 if [ -f CLAUDE.md ]; then
   L=$(wc -l < CLAUDE.md | tr -d ' ')
@@ -513,4 +527,21 @@ if [ "${CRITICAL_COMPLETENESS:-0}" = "1" ] && [ -n "$LAST_ASSISTANT" ]; then
   fi
 fi
 
+# ── BLOCKER for Mechanism 7c deep-audit coverage(2026-07-12 user-authorized)──
+if [ "${CRITICAL_DEEPAUDIT_COVERAGE:-0}" = "1" ] && [ -n "$LAST_ASSISTANT" ]; then
+  DACOV_HASH=$(echo "$LAST_ASSISTANT" | tail -c 200 | shasum -a 256 | cut -c1-16)
+  LAST_BLOCKED_DACOV_FILE="$PROJECT_DIR/.claude/logs/.last-blocked-deepaudit-coverage.txt"
+  LAST_BLOCKED_DACOV=""
+  [ -f "$LAST_BLOCKED_DACOV_FILE" ] && LAST_BLOCKED_DACOV=$(cat "$LAST_BLOCKED_DACOV_FILE" 2>/dev/null || echo "")
+  if [ "$DACOV_HASH" != "$LAST_BLOCKED_DACOV" ]; then
+    echo "$DACOV_HASH" > "$LAST_BLOCKED_DACOV_FILE" 2>/dev/null || true
+    GAPLINE=$(node scripts/verify-deep-audit-coverage.mjs 2>/dev/null | grep -E '個 dim-證據缺口' | head -1)
+    REASON=$(printf '%s' \
+      "🚨 DEEP-AUDIT-COVERAGE BLOCKER(M7c,2026-07-12 user-authorized「不抽樣不偷懶…現在和未來可以確保嗎」):你宣告 deep audit 完成,但 verify-deep-audit-coverage.mjs exit 1 — ${GAPLINE:-91 dim × Claude+codex 雙軌未全有證據}。禁宣稱 done。跑 node scripts/verify-deep-audit-coverage.mjs 看缺哪些 dim,填完(judgment findings 檔 / deterministic log / hook residue verify / codex-dim-audit)才可宣稱;OR 明寫『核心做完,dim 覆蓋待補』。否則 turn 不結束。" \
+      "本機制起因:本 session AI 漏跑 91 dim 裡 deterministic 24 + judgment 27 + hook 40 三層,只做 claim-vs-code + 反應式補,user 憤怒。觸發器 = 宣告 deep audit 完成本身。")
+    printf '{"decision":"block","reason":%s}\n' "$(printf '%s' "$REASON" | jq -Rs .)"
+    exit 0
+  fi
+fi
+
 exit 0

package/ds-canonical/hooks/tests/test_block_prototype_imports.sh

@@ -131,6 +131,30 @@ echo "Test 5: nonexistent path → pass (silently skip)"
 run_hook "src/does-not-exist-$$.tsx"
 expect_pass "Test 5 nonexistent path"
 
+# ── Test 6: ABSOLUTE path with explorations import → block ───────────────────
+# Real Edit/Write events carry absolute file_path(2026-07-10 wiring-hunt:hook
+# 原本只比對相對路徑 prefix → 對真實 edits 形同虛設)。
+echo ""
+echo "Test 6: absolute path tsx imports from src/explorations/ → block"
+F6="$SANDBOX/violation-abs.tsx"
+cat >"$F6" <<'EOF'
+import { ProtoX } from '@/explorations/foo/bar'
+export const X = () => <ProtoX />
+EOF
+run_hook "$F6"
+expect_block "Test 6 absolute path explorations import blocked" "Blocked"
+
+# ── Test 7: ABSOLUTE path clean import → pass ────────────────────────────────
+echo ""
+echo "Test 7: absolute path tsx with clean import → pass"
+F7="$SANDBOX/clean-abs.tsx"
+cat >"$F7" <<'EOF'
+import { Button } from '@/design-system/components/Button/button'
+export const X = () => <Button>OK</Button>
+EOF
+run_hook "$F7"
+expect_pass "Test 7 absolute path clean import"
+
 # ── Summary ──────────────────────────────────────────────────────────────────
 echo ""
 echo "════════════════════════════════════════"

package/ds-canonical/hooks/tests/test_check_audit_post_report_validator.sh

@@ -118,6 +118,50 @@ EOF
 run_hook "$TMPDIR_TEST/.claude/memory/project_audit_progress.md" "Edit"
 expect_block_stderr "5. judgment dim 缺 prompt → Validator C exit-2 block" "VALIDATOR BLOCK"
 
+# 6/7. Validator K 決策品質四要件(2026-07-14;SSOT = deep-audit SKILL C.1「🔒 決策品質四要件」)
+#    拍板 section 內每個決策 block 必含 SSOT-check / 世界級 cite(URL)/ codex verdict / design-fit 四 marker。
+#    先補 `## 99.` prompt 讓 test 5 留下的 Validator C 條件通過,隔離 K 的判定。
+cat > "$TMPDIR_TEST/.claude/skills/design-system-audit/references/audit-prompts.md" <<'EOF'
+## 1. foo
+prompt
+## 99. test judgment dim
+prompt
+EOF
+mkdir -p "$TMPDIR_TEST/.claude/logs/deep-audit-test"
+cat > "$TMPDIR_TEST/.claude/logs/deep-audit-test/C1-final-report.md" <<'EOF'
+# Deep Audit 報告
+Dim 1: pass
+
+### 待你拍板
+1. 決策一:Popover 內距是否改 12px
+   - SSOT 理由:改跨元件 canonical 視覺結構
+   - SSOT-check:grep spec + memory,無既有拍板
+   - codex verdict:agree(辯論共識)
+   - 設計語言 fit:符合 density canonical
+EOF
+run_hook "$TMPDIR_TEST/.claude/logs/deep-audit-test/C1-final-report.md" "Write"
+expect_block_stderr "6. 決策缺世界級 cite → Validator K exit-2 block" "決策四要件不全"
+
+cat > "$TMPDIR_TEST/.claude/logs/deep-audit-test/C1-final-report.md" <<'EOF'
+# Deep Audit 報告
+Dim 1: pass
+
+### 待你拍板
+1. 決策一:Popover 內距是否改 12px
+   - SSOT 理由:改跨元件 canonical 視覺結構
+   - SSOT-check:grep spec + memory,無既有拍板
+   - 世界級:Polaris https://polaris.shopify.com/tokens/space / Material / Ant(3 家)
+   - codex verdict:agree(辯論共識)
+   - 設計語言 fit:符合 density canonical
+EOF
+run_hook "$TMPDIR_TEST/.claude/logs/deep-audit-test/C1-final-report.md" "Write"
+if [ "$EXIT" = "0" ]; then
+  echo "  PASS  7. 四要件齊 → Validator K pass(exit 0)"; PASS=$((PASS+1))
+else
+  echo "  FAIL  7. 四要件齊 → Validator K pass (expected exit 0, got $EXIT, stderr=[$STDERR_TEXT])"
+  FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - 7. 四要件齊 pass"
+fi
+
 echo ""
 echo "=== Summary ==="
 echo "Passed: $PASS / $((PASS + FAIL))"