@qijenchen/design-system 0.1.0-beta.83 → 0.1.0-beta.85

package/ds-canonical/hooks/block_prototype_imports.py

@@ -20,6 +20,15 @@ except Exception:
 EXPLORATION_PREFIX = "src/explorations/"
 SRC_PREFIX = "src/"
 
+# Project root for absolute→relative path normalization(real Edit/Write events
+# carry absolute file_path;prefix 比對必先轉 project-root 相對,否則 hook 永不 fire)。
+PROJECT_ROOT = os.environ.get('CLAUDE_PROJECT_DIR') or os.path.dirname(os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+
+def to_project_relative(path):
+    if os.path.isabs(path):
+        return os.path.relpath(path, PROJECT_ROOT)
+    return path
+
 def load_event():
     try:
         return json.load(sys.stdin)
@@ -83,19 +92,21 @@ def main():
     offenders = []
 
     for path in touched_paths:
-        if not should_check(path):
+        rel_path = to_project_relative(path)
+        if not should_check(rel_path):
             continue
-        if not os.path.exists(path):
+        abs_path = path if os.path.isabs(path) else os.path.join(PROJECT_ROOT, path)
+        if not os.path.exists(abs_path):
             continue
 
         try:
-            with open(path, "r", encoding="utf-8") as f:
+            with open(abs_path, "r", encoding="utf-8") as f:
                 content = f.read()
         except Exception:
             continue
 
         if contains_exploration_import(content):
-            offenders.append(path)
+            offenders.append(rel_path)
 
     if offenders:
         lines = [

package/ds-canonical/hooks/check_audit_post_report_validator.sh

@@ -3,6 +3,7 @@
 # 2026-05-17 ship — codex Q4 verdict「post-audit stop hook / final report validator」最合理 trigger 位置。
 #
 # Triggers: 任何 Write/Edit 到 `.claude/logs/audit-report-*.json` OR `.claude/memory/project_audit_progress.md`
+#           OR `*/C1-final-report*.md`(2026-07-14 加:C.1 決策清單真實載體,原 scope 漏 = Validator H/K 永不 fire)
 #
 # 驗證:
 #   (a) NO-SAMPLE invariant — report 不含「sample top N / subset / pick top X」keyword
@@ -25,6 +26,7 @@ FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // ""' 2>/dev/null)
 case "$FILE_PATH" in
   */audit-report-*.json) ;;
   */project_audit_progress.md) ;;
+  */C1-final-report*.md) ;;
   *) exit 0 ;;
 esac
 
@@ -80,7 +82,7 @@ fi
 BENCH_DEBT=$(grep -rc '@benchmark-unverified-blanket' "$PROJECT_DIR/packages/design-system/src/" 2>/dev/null | awk -F: '{s+=$2} END{print s+0}')
 BENCH_DEBT=${BENCH_DEBT:-0}
 if [ "$BENCH_DEBT" -gt 0 ]; then
-  WARNINGS="${WARNINGS}\n  ⚠️ [D] Benchmark cite debt:${BENCH_DEBT} 處 `@benchmark-unverified-blanket` marker — 對應 prune D9(M22 cite debt)"
+  WARNINGS="${WARNINGS}\n  ⚠️ [D] Benchmark cite debt:${BENCH_DEBT} 處「@benchmark-unverified-blanket」marker — 對應 prune D9(M22 cite debt)"
   TRIGGER_PRUNE=1
 fi
 
@@ -119,13 +121,16 @@ if [ "$DIM_COUNT" -ge 10 ]; then   # 只對 full/deep-audit 規模 report 要求
     WARNINGS="${WARNINGS}\n  🔴 [I] D3/D4/D5 domain-skill chain 證據缺席:report 未提及${_D345_MISSING}。稽核 canonical 6-維度表(CLAUDE.md)deep 規模必 chain 三 domain skill(或明寫豁免理由 + skill 名)。補跑/補記再出 report。"
     TRIGGER_PRUNE=1; CRITICAL_FAIL=1
   fi
-fi
 
-# ─ Validator BLOCK gate(2026-05-31 fix infra-audit self-finding:原 hook 只 exit 0 + additionalContext
-#   soft-inject = 我過度宣稱「BLOCKER」。改:C/F/G critical fail → stderr + exit 2 真 block PostToolUse)─
-if [ "${CRITICAL_FAIL:-0}" -eq 1 ]; then
-  printf '🚨 AUDIT-REPORT VALIDATOR BLOCK(C/F/G critical):%b\n\n此 deep-audit report 不合格,補齊上述後重出 report。' "$WARNINGS" >&2
-  exit 2
+  # ─ Validator J: codex dim 覆蓋對帳(2026-07-10 user「codex 稽核一模一樣所有項目,有確保嗎?」)─
+  #   report 顯示 Phase B / codex 比稿有跑 → 必含「dim 覆蓋對帳」表(彙總 codex 各 brief 蓋到的
+  #   dim 號 vs dispatch 清單逐號對;SKILL B.2 Step 0 契約的報告端機械閘 — 保證鏈第三段)。
+  if grep -qiE 'Phase B|codex 比稿|cite battle|dual-track' "$FILE_PATH" 2>/dev/null; then
+    if ! grep -qiE 'dim 覆蓋對帳|dim 對帳|coverage tally' "$FILE_PATH" 2>/dev/null; then
+      WARNINGS="${WARNINGS}\n  🔴 [J] Codex dim 覆蓋對帳缺席:report 提及 Phase B/比稿但無「dim 覆蓋對帳」表(codex 各 brief 蓋到的 dim 號 vs dispatch 清單逐號對,缺號 = 補 brief)。per SKILL B.2 Step 0(2026-07-10),不齊不得宣稱雙軌全覆蓋。"
+      TRIGGER_PRUNE=1; CRITICAL_FAIL=1
+    fi
+  fi
 fi
 
 # ─ Validator H: 拍板清單 SSOT-理由 強制(2026-06-11 user 第 3 次糾正「要我拍板的都是 SSOT 的 UI/UX 嗎」)─
@@ -141,6 +146,59 @@ if grep -qE '待你拍板|拍板清單' "$FILE_PATH" 2>/dev/null; then
   fi
 fi
 
+# ─ Validator K: 決策品質四要件(2026-07-13 user verbatim「需我拍板的議題,不是應該確保你和 codex 來回
+#   討論辯論出來的共識與解法有研究過世界級的設計且符合我們需求與一致設計語言和設計原則並確保 SSOT?
+#   現在跟未來都應該要確保這件事永遠成立」;SSOT = deep-audit SKILL C.1「🔒 決策品質四要件」。
+#   命名注:SKILL 2026-07-13 初稿寫「Validator I」,但 I 已被 D3/D4/D5 chain(2026-07-04)佔用 → 定 K)─
+#   報告含「待你拍板」/「拍板清單」section 時:section 內每個決策 block(切分同 Validator H heading regex)
+#   必含全部四要件 marker:(1) SSOT-check(SSOT/既有拍板)(2) ≥3 世界級 cite(世界級/URL)
+#   (3) codex 辯論 verdict(codex)(4) design-fit(設計語言/設計原則/design-fit)。缺任一 → 該題不成熟
+#   → BLOCK(exit 2)。Detection conservative:只掃本 hook file scope(audit report / C1-final-report)
+#   的拍板 section;無決策 block(「無待拍板」)= 合法 pass。
+if grep -qE '待你拍板|拍板清單' "$FILE_PATH" 2>/dev/null; then
+  _K_MISSING=$(node -e '
+    try {
+      const fs = require("fs");
+      const txt = fs.readFileSync(process.argv[1], "utf8");
+      const m = txt.search(/待你拍板|拍板清單/);
+      if (m < 0) { console.log(""); process.exit(0); }
+      const lines = txt.slice(m).split("\n");
+      const headRe = /^\s*(?:\d+[.、)]|#{2,}\s*決策)/;
+      const blocks = []; let cur = null;
+      for (const ln of lines) {
+        if (headRe.test(ln)) { if (cur !== null) blocks.push(cur); cur = ln; }
+        else if (cur !== null) cur += "\n" + ln;
+      }
+      if (cur !== null) blocks.push(cur);
+      const req = [
+        ["SSOT-check", /SSOT|既有拍板/],
+        ["世界級cite", /世界級|https?:\/\//],
+        ["codex-verdict", /codex/i],
+        ["design-fit", /設計語言|設計原則|design-fit/],
+      ];
+      const miss = [];
+      blocks.forEach((b, i) => {
+        const lack = req.filter(([, re]) => !re.test(b)).map(([n]) => n);
+        if (lack.length) miss.push("決策" + (i + 1) + " 缺[" + lack.join("/") + "]");
+      });
+      console.log(miss.join(";"));
+    } catch (e) { console.log(""); }
+  ' "$FILE_PATH" 2>/dev/null || echo "")
+  if [ -n "$_K_MISSING" ]; then
+    CRITICAL_FAIL=1
+    WARNINGS="${WARNINGS}\n  🔴 [K] 決策四要件不全:${_K_MISSING} — 每個送 user 拍板的決策必含 (1)SSOT-check(先 grep 既有 canonical/已拍板)(2)≥3 世界級 cite(WebFetch 真 source + URL)(3)codex 辯論 verdict(4)設計語言/原則 fit。缺 = 該題不成熟,退回研究/辯論(deep-audit SKILL C.1 四要件),禁送 user。"
+  fi
+fi
+
+# ─ Validator BLOCK gate(2026-05-31 fix infra-audit self-finding:原 hook 只 exit 0 + additionalContext
+#   soft-inject = 我過度宣稱「BLOCKER」。改:critical fail → stderr + exit 2 真 block PostToolUse。
+#   2026-07-10 user「只有 SSOT UI/UX 才交拍板,要確保」:Validator H 原在本 gate 之後 = CRITICAL_FAIL 白設
+#   死旗(hunt finding #62)→ 搬到 gate 前,H 現在真擋)─
+if [ "${CRITICAL_FAIL:-0}" -eq 1 ]; then
+  printf '🚨 AUDIT-REPORT VALIDATOR BLOCK(C/F/G/H/I/J/K critical):%b\n\n此 deep-audit report 不合格,補齊上述後重出 report。' "$WARNINGS" >&2
+  exit 2
+fi
+
 # ─ Validator E: prune-chain-trigger emit ──────────────────────────────────
 # 2026-06-11 擴充(user 糾正「為何每次都要問我是否要跑 knowledge prune」機械兜底,SSOT = deep-audit SKILL C.0a):
 # deep-audit 規模 report(DIM_COUNT≥10)→ 無條件 fire prune-chain trigger,非僅 coverage 不足時。

package/ds-canonical/hooks/check_codex_brief_invariants.sh

@@ -2,10 +2,15 @@
 # Codex brief invariants enforcement(2026-05-23 永久 per user verbatim「codex 跑的稽核流程理應要跟你跑的深度稽核流程是一模一樣 SSOT 的不能偏移」)
 #
 # PreToolUse(Bash)hook:catch codex exec / cat ... | codex exec / 任何 codex CLI invocation
-# Scan codex brief content for 3 mandatory invariants(per feedback_codex_brief_invariants_2026_05_23.md):
+# Scan codex brief content for 7 mandatory invariants(per feedback_codex_brief_invariants_2026_05_23.md
+# + 2026-07-10 user directive「codex 做的任務 / 資訊 / 閱讀 / 判斷標準都要跟 Claude 一模一樣 SSOT」):
 #   1. 全盤閱讀(全部 source 列舉 or 「DS-wide」「全盤閱讀」「全 N files」 keyword)
 #   2. Triple-verify(「triple-verify」/「三重驗證」/「grep + Read + canonical exception」 keyword)
 #   3. 禁抽樣(「禁抽樣」/「禁 sample」/「NO-SAMPLE」/「DS-wide ALL files」 keyword)
+#   4. 禁列檔(「禁列檔」/「禁 rg --files」/「只讀 N file」/「直接出 verdict」 keyword)
+#   5. 輸入對等(閱讀清單逐字鏡射 A.0:含 meta-patterns rules + memory MEMORY.md index 錨點)
+#   6. 判準對等(brief 給 codex audit-prompts.md 每-dim rubric + 逐 dim 套用)
+#   7. A.1b 對等(brief 要求 codex 做 per-component claim-vs-code 對抗驗證 = Claude A.1b 鏡像)
 #
 # 缺任一 → exit 2 BLOCKER(stop codex 啟動)。Escape:brief 含 `// @codex-brief-invariant-skip: <rationale>`(極罕見)。
 
@@ -98,6 +103,28 @@ if ! echo "$BRIEF_CONTENT" | grep -qiE '禁列檔|禁 rg --files|禁 find 全|
   MISSING="${MISSING}  • 4️⃣ 禁列檔 invariant 缺(「禁列檔」/「禁 rg --files」/「只讀 N file」/「直接出 verdict」keyword)— per 2026-05-27 codex token-burn 2× anchor\n"
 fi
 
+# 5️⃣ 輸入對等(2026-07-10 user directive「codex 做的任務、擁有的資訊、閱讀的資訊要跟你一模一樣」):
+# 閱讀清單必逐字鏡射 A.0(泛 glob ≠ 對等;至少含 meta-patterns rules + memory index 兩錨點,
+# 具名鏡射時自然存在)。
+if ! echo "$BRIEF_CONTENT" | grep -qi 'meta-patterns' || ! echo "$BRIEF_CONTENT" | grep -qiE 'MEMORY\.md|memory'; then
+  MISSING="${MISSING}  • 5️⃣ 輸入對等 invariant 缺(閱讀清單必逐字鏡射 A.0 六項:含 .claude/rules/meta-patterns.md 等具名 rules + memory MEMORY.md index;泛 glob 不算)\n"
+fi
+
+# 6️⃣ 判準對等(2026-07-10 user directive「兩邊都用同樣的完美標準去稽核」):brief 必給 codex
+# 我用的每-dim 判準 rubric(audit-prompts.md,SKILL.md:257「Use prompts in audit-prompts.md」=
+# 我的 dim sub-agent 判準 SSOT),並要求逐 dim 套用 —— 只給 dim 編號 = codex 憑自己理解判 =
+# 判斷標準不對稱(user 錨:「我基於治理判、codex 可能沒有」)。
+if ! echo "$BRIEF_CONTENT" | grep -qi 'audit-prompts'; then
+  MISSING="${MISSING}  • 6️⃣ 判準對等 invariant 缺(brief 必給 codex `design-system-audit/references/audit-prompts.md` 每-dim rubric + 要求逐 dim 套用同一判準;只給 dim 編號 = codex 憑己意判 = 標準不對稱)\n"
+fi
+
+# 7️⃣ A.1b 對等(2026-07-10 user「所有稽核任務都應對等」全盤盤點抓):brief 必要求 codex 做
+# A.1b(per-component claim-vs-code 對抗驗證,讀每元件 .tsx + wrap lib 逐句驗宣稱)—— Claude
+# 最高產出 pass(2026-05-30 抓 403 findings),漏了 = codex 少做一整趟 = 任務不對等。
+if ! echo "$BRIEF_CONTENT" | grep -qiE 'A\.1b|claim-vs-code|per-component.*(對抗|逐句|verif)'; then
+  MISSING="${MISSING}  • 7️⃣ A.1b 對等 invariant 缺(brief 必要求 codex 做 per-component claim-vs-code 對抗驗證 = Claude SKILL A.1b 鏡像;漏 = 少做最高產出 pass = 任務不對等)\n"
+fi
+
 if [ -n "$MISSING" ]; then
   printf '🚨 CODEX BRIEF MISSING INVARIANTS BLOCKER(2026-05-23 user verbatim:「codex 會跑的稽核流程理應要跟你跑的深度稽核流程是一模一樣 SSOT 的不能偏移」):\n' >&2
   printf '\n  Brief 缺以下 invariant:\n' >&2

package/ds-canonical/hooks/check_consumer_app_invariants.sh

@@ -14,6 +14,31 @@ source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
 set -uo pipefail
 INPUT=$(cat 2>/dev/null || echo "{}")
 
+# ── Shared: 中和 consumer 自有 local 元件的裸 tag(named-import 除鏽的反向保護,2026-07-10 N6 根治)──
+# 多數 r2/r3 pattern 用 `<(DS\.)?X`(named-import 除鏽,抓 fork 用 named import `<Dialog>` 繞過
+# `<DS.>` 前綴)→ 但會誤殺 consumer 自有的同名 local 元件。判準:裸 <X> 只在「明確 named-import
+# 自非 DS 模組」(local './x' 或他 package)時才確定是 consumer 自有 → 中和成 <LOCAL_X;
+# 無 import(fixture 慣例)或 DS-package import → 視為 DS,保留(維持除鏽 intent)。
+# namespace <DS.X>(capture 到 "DS" token → skip)/ raw 小寫 HTML tag 不受影響。
+neutralize_local_tags() {
+  local content="$1"
+  # LOCAL_NAMED extraction 用 flattened 副本(抓跨行 import block);但**回傳保留原換行**
+  # (r2 的空 @story-baseline: marker 偵測是逐行的,flatten 會讓下一行內容誤填空 marker → P4)。
+  local local_named
+  local_named=$(printf '%s' "$content" | tr '\n' ' ' \
+    | grep -oE "import[[:space:]]*\{[^}]*\}[[:space:]]*from[[:space:]]*['\"][^'\"]+['\"]" \
+    | grep -vE "from[[:space:]]*['\"]@qijenchen/design-system" \
+    | grep -oE '\{[^}]*\}' | tr -d '{}' | tr ',' '\n' \
+    | sed -E 's/.*[[:space:]]as[[:space:]]+([A-Za-z0-9_]+).*/\1/; s/[[:space:]]//g' \
+    | grep -E '^[A-Z]' | sort -u)
+  local T
+  for T in $local_named; do
+    [ "$T" = "DS" ] && continue
+    content=$(printf '%s' "$content" | sed -E "s#<(/?)$T([[:space:]/>])#<\\1LOCAL_$T\\2#g")
+  done
+  printf '%s' "$content"
+}
+
 r1_no_ds_catalog() {
 set -uo pipefail
 
@@ -117,11 +142,15 @@ CONTENT=$(echo "$INPUT" | jq -r '.tool_input.new_string // .tool_input.content /
 # Escape clauses
 if echo "$CONTENT" | grep -qE '@story-baseline-allow:|@consumer-catalog-allow:'; then exit 0; fi
 
+# 中和 consumer 自有 local 元件的裸 tag(N6 over-broad guard;shared helper SSOT)
+CONTENT=$(neutralize_local_tags "$CONTENT")
+
 # High-risk DS primitives requiring baseline marker
 HIGH_RISK_PRIMITIVES='DataTable|Dialog|Sheet|Popover|DropdownMenu|Tooltip|HoverCard|LinkInput|RadioGroup|CircularProgress|AppShell|Sidebar'
 
-# Detect usage
-USED=$(echo "$CONTENT" | grep -oE "<DS\.($HIGH_RISK_PRIMITIVES)\\b" | sort -u | head -10)
+# Detect usage(named-import 除鏽:namespace <DS.X> + DS-named-import 的裸 <X> 皆計入;
+# consumer 自有 local 元件已由 neutralize_local_tags 中和成 <LOCAL_X 不會誤匹配)
+USED=$(echo "$CONTENT" | grep -oE "<(DS\.)?($HIGH_RISK_PRIMITIVES)\\b" | sort -u | head -10)
 
 if [ -z "$USED" ]; then exit 0; fi
 
@@ -179,33 +208,36 @@ CONTENT=$(echo "$CONTENT" | tr '\n' ' ')
 # Global escape — file-wide allowlist
 if echo "$CONTENT" | grep -q '@ds-misuse-allow:'; then exit 0; fi
 
+# 中和 consumer 自有 local 元件的裸 tag(N6 over-broad guard;shared helper SSOT,對齊 r2_story_baseline)
+CONTENT=$(neutralize_local_tags "$CONTENT")
+
 VIOLATIONS=""
 
 # Pattern 1: <CircularProgress size={N}> with literal number (override default 24)
-if echo "$CONTENT" | grep -qE '<DS\.CircularProgress[^>]+size=\{[0-9]+\}'; then
+if echo "$CONTENT" | grep -qE '<(DS\.)?CircularProgress[^>]+size=\{[0-9]+\}'; then
   VIOLATIONS="${VIOLATIONS}  - <CircularProgress size={N}> hardcoded number override default 24 (per circular-progress.spec.md:101)\n"
 fi
 
 # Pattern 2: <RadioGroupItem> NOT wrapped in <SelectionItem control={...}>
 # Approximation: file uses RadioGroupItem but doesn't reference SelectionItem
-if echo "$CONTENT" | grep -qE '<DS\.RadioGroupItem\b' && ! echo "$CONTENT" | grep -qE 'SelectionItem|<DS\.RadioGroupItem[^>]+label='; then
+if echo "$CONTENT" | grep -qE '<(DS\.)?RadioGroupItem\b' && ! echo "$CONTENT" | grep -qE 'SelectionItem|<(DS\.)?RadioGroupItem[^>]+label='; then
   VIOLATIONS="${VIOLATIONS}  - <RadioGroupItem> 沒 wrap <SelectionItem control={<RadioGroupItem>}> (per selection-item.spec.md:23 SSOT spacing/padding)\n"
 fi
 
 # Pattern 3: <DataTable columns={[…]}> with literal single column
-if echo "$CONTENT" | grep -qE '<DS\.DataTable[^>]+columns=\{\[\s*\{[^}]+\}\s*\]\}' && ! echo "$CONTENT" | grep -qE 'columns=\{[^}]*\},\s*\{'; then
+if echo "$CONTENT" | grep -qE '<(DS\.)?DataTable[^>]+columns=\{\[\s*\{[^}]+\}\s*\]\}' && ! echo "$CONTENT" | grep -qE 'columns=\{[^}]*\},\s*\{'; then
   VIOLATIONS="${VIOLATIONS}  - <DataTable columns={[single-col]}> minimal one-column = 違反 data-table.spec.md canonical(min 2 cols for meaningful render)\n"
 fi
 
 # Pattern 4: <LinkInput placeholder=...> without value prop
-if echo "$CONTENT" | grep -qE '<DS\.LinkInput[^>]+placeholder=' && ! echo "$CONTENT" | grep -qE '<DS\.LinkInput[^>]+(value|defaultValue)='; then
+if echo "$CONTENT" | grep -qE '<(DS\.)?LinkInput[^>]+placeholder=' && ! echo "$CONTENT" | grep -qE '<(DS\.)?LinkInput[^>]+(value|defaultValue)='; then
   VIOLATIONS="${VIOLATIONS}  - <LinkInput placeholder=...> 沒 value prop = placeholder-only mode 抹平 link/edit canonical (per link-input.spec.md:18,48-58)\n"
 fi
 
 # Pattern 5: <Empty title=...> without icon and without description
-if echo "$CONTENT" | grep -qE '<DS\.Empty[^>]+title=' && \
-   ! echo "$CONTENT" | grep -qE '<DS\.Empty[^>]+icon=' && \
-   ! echo "$CONTENT" | grep -qE '<DS\.Empty[^>]+description='; then
+if echo "$CONTENT" | grep -qE '<(DS\.)?Empty[^>]+title=' && \
+   ! echo "$CONTENT" | grep -qE '<(DS\.)?Empty[^>]+icon=' && \
+   ! echo "$CONTENT" | grep -qE '<(DS\.)?Empty[^>]+description='; then
   VIOLATIONS="${VIOLATIONS}  - <Empty title=...> 無 icon 無 description = 違反 Empty.tsx:11「預設只需 description」minimal mock looks weird\n"
 fi
 
@@ -219,12 +251,12 @@ if echo "$CONTENT" | grep -qE '\b[a-z][a-z-]*-\[(#[0-9a-fA-F]{3,8}|rgb|rgba|hsl|
 fi
 
 # Pattern 9(2026-06-12,user 抓 fork「四不像」G4 補洞):AppShell slot 餵 raw HTML element。
-# app-shell.spec.md:296-299 明文禁 sidebar={<div>}/header={<header>},原註「靠 audit 把關」
+# app-shell.spec.md「Consumer 紀律」段明文禁 sidebar={<div>}/header={<header>},原註「靠 audit 把關」
 # 無機械閘 → 兌現成 P0(per memory feedback_ssot_mechanical_p0_not_p1_warn)。
 # 零誤判:雙條件 = 同檔有 <DS.AppShell> + slot 屬性直接餵 raw tag(div/header/nav/aside/section)。
-if echo "$CONTENT" | grep -qE '<DS\.AppShell\b' && \
+if echo "$CONTENT" | grep -qE '<(DS\.)?AppShell\b' && \
    echo "$CONTENT" | grep -qE '\b(header|sidebar|aside)=\{ *<(div|header|nav|aside|section)\b'; then
-  VIOLATIONS="${VIOLATIONS}  - <AppShell header/sidebar/aside={<raw element>}> — slot 必餵 DS 元件(ChromeHeader / Sidebar / AppShellAside),raw div/header 漏接 border/scroll/responsive canonical(per app-shell.spec.md:296-299)\n"
+  VIOLATIONS="${VIOLATIONS}  - <AppShell header/sidebar/aside={<raw element>}> — slot 必餵 DS 元件(ChromeHeader / Sidebar / AppShellAside),raw div/header 漏接 border/scroll/responsive canonical(per app-shell.spec.md「Consumer 紀律」段)\n"
 fi
 
 # Pattern 10(2026-06-16,user 抓 fork prototype 手刻 table 不用 DataTable):RAW PRIMITIVE 手刻
@@ -236,21 +268,121 @@ fi
 if echo "$CONTENT" | grep -qE '<table\b' && echo "$CONTENT" | grep -qE '<thead\b|<tbody\b|<th\b'; then
   VIOLATIONS="${VIOLATIONS}  - 手刻 raw <table><thead>/<tbody> 資料表 → 必用 <DataTable columns={...} data={...} />(build-ui-canonicals.md:18 ❌→✅ SSOT;這是「優先消費既有元件」大原則,無理由不得手刻)\n"
 fi
+# 2026-07-08 WM 戰役 R4:偽表格視覺簽名(div-grid 表格繞過字面 <table> 偵測 — WM 5 檔
+# MINI_TABLE grid-cols + header bg + row 常數重複宣告實證,spec broad / hook narrow M34 gap)。
+# 簽名 = 同段 content 有 grid-cols-[ 且(bg-muted|bg-neutral-selected 當 header 底 或 自創
+# ROW_PAD 類常數)。escape:@handcraft-table-ok:(真非表格的 grid 佈局)。
+if echo "$CONTENT" | grep -qE 'grid-cols-\[' && echo "$CONTENT" | grep -qE '(bg-muted|bg-neutral-selected)[^a-z-]' && echo "$CONTENT" | grep -qiE 'ROW_PAD|MINI_TABLE|<div[^>]*grid[^>]*font-medium' && ! echo "$CONTENT" | grep -q '@handcraft-table-ok:'; then
+  VIOLATIONS="${VIOLATIONS}  - 偽表格簽名(div grid-cols + header bg + row 常數):div-grid 手刻資料表 → 必用 <DataTable size=\"sm\" height=\"auto\">(data-table.spec「嵌入式表格」canonical;WM MembersTab 等 5 檔錨例)。真非表格 grid 佈局 → 行內 @handcraft-table-ok: <rationale>\n"
+fi
 if echo "$CONTENT" | grep -qE '<img\b[^>]*rounded-full'; then
   VIOLATIONS="${VIOLATIONS}  - 手刻 <img ... rounded-full> 頭像 → 必用 <Avatar>(build-ui-canonicals.md:25)\n"
 fi
 if echo "$CONTENT" | grep -qE '<select\b'; then
   VIOLATIONS="${VIOLATIONS}  - native <select> 手刻下拉 → 必用 <Select> / <DropdownMenu>(build-ui-canonicals.md:15)\n"
 fi
+# 2026-07-08 WM 戰役 R4:手刻表單 validation 簽名(WM CreateWorkItemDialog 註解引 canonical
+# 卻手刻 showErrors state = M23(d)「cite 存在 ≠ consume」;useFormValidation hook 零消費偵測缺口)。
+# 簽名 = 檔內有 showErrors/submitAttempt 類 state + FieldError 渲染,但無 useFormValidation import。
+if echo "$CONTENT" | grep -q 'useState' && echo "$CONTENT" | grep -qE '\b(showErrors|showError|submitAttempt|attemptedSubmit)\b' && echo "$CONTENT" | grep -q 'FieldError' && ! echo "$CONTENT" | grep -q 'useFormValidation' && ! echo "$CONTENT" | grep -q '@form-validation-ok:'; then
+  VIOLATIONS="${VIOLATIONS}  - 手刻表單 validation state(showErrors/submitAttempt + FieldError)→ 必消費 useFormValidation hook(form-validation.spec 規則 1 blur/7 全驗/8 DOM 序 anchor 隨 hook 自帶;root barrel 有 export)。特殊表單 → 行內 @form-validation-ok: <rationale>\n"
+fi
 if echo "$CONTENT" | grep -qE '<hr\b'; then
   VIOLATIONS="${VIOLATIONS}  - 手刻 <hr> 分隔線 → 用 <Separator>(或 separator.spec 允許的 CSS border)(build-ui-canonicals.md:23)\n"
 fi
+# 2026-07-10 WM 戰役收官:手刻 menu-item 可點列簽名(WM TypeSettingsDialog 左 rail 錨例 —
+# 手刻 <button hover:bg-neutral-hover + bg-neutral-selected> nav row,未消費 MenuItem)。
+# 前置:DS API 根因已修(MenuItem startContent slot,beta.84)→ 有合法替代才上機械攔(避免
+# fork 無路可走 brick)。簽名 = hover:bg-neutral-hover 與 bg-neutral-selected 成對出現
+# (= menu-item family 狀態語義)+ 可點訊號(<button/<a/onClick),且沒在消費 <MenuItem。
+# 注意:不 tag-anchor className(WM 錨例把 class 抽 const 再 className={cls} 引用,
+# tag-anchored regex 會漏 — test 27 抓到的真實 shape)。
+if echo "$CONTENT" | grep -q 'hover:bg-neutral-hover' && \
+   echo "$CONTENT" | grep -q 'bg-neutral-selected' && \
+   echo "$CONTENT" | grep -qE '<button\b|<a\b|onClick=' && \
+   ! echo "$CONTENT" | grep -q '<MenuItem' && \
+   ! echo "$CONTENT" | grep -q '@nav-row-handcraft-ok:'; then
+  VIOLATIONS="${VIOLATIONS}  - 手刻 menu-item 可點列(hover:bg-neutral-hover + bg-neutral-selected 成對)→ 必包 <MenuItem>(subpath @qijenchen/design-system/components/Menu;selected prop + startIcon/avatar/startContent slot;menu-item.spec.md「結構」)。非 menu-item 語義 → 行內 @nav-row-handcraft-ok: <rationale>\n"
+fi
+
+# ── 2026-07-10 批次 A(治理覆蓋 matrix 收官;來源 .claude/planning/2026-07-10-consumer-coverage-remediation.md)──
+# C5 對比配對:深字桶 hue(yellow/amber/orange/lime step-6)配 text-white — 各自合法、組合對比違規
+# (tag.spec.md 深字桶 = text-on-emphasis-dark)。修 → 消費 CAT_SOLID token pair。
+if echo "$CONTENT" | grep -q 'text-white' && \
+   echo "$CONTENT" | grep -qE 'bg-\[var\(--color-(yellow|amber|orange|lime)-[0-9]' && \
+   ! echo "$CONTENT" | grep -q '@cat-solid-ok:'; then
+  VIOLATIONS="${VIOLATIONS}  - 亮色底(yellow/amber/orange/lime step-6)配 text-white = 對比違規 → 消費 CAT_SOLID / CAT_SOLID_TOKENS pair(深字桶自帶 text-on-emphasis-dark;tokens/categorical-color.ts)。特例 → @cat-solid-ok: <rationale>\n"
+fi
+# C18 計數串接:element children 出現 {label} ({count/length/total})。attr(aria-label)字串層合法
+# — regex 錨 children 的 > 前綴,attribute 不中(item-anatomy.spec.md:176 禁括號串接)。
+if echo "$CONTENT" | grep -qE '>[^<]*\{[a-zA-Z0-9_.]+\} *\(\{[a-zA-Z0-9_.]*(count|Count|length|total)[a-zA-Z0-9_.]*\}\)' && \
+   ! echo "$CONTENT" | grep -q '@count-in-label-ok:'; then
+  VIOLATIONS="${VIOLATIONS}  - 計數括號串接 {label} ({count}) → row header 用「標題左、純數字右 space-between + tabular-nums」(item-anatomy.spec.md:176);互動元素(tab/chip/button)用 badge slot。aria/純文字匯出層 → @count-in-label-ok: <rationale>\n"
+fi
+# C17 分隔線幾何:vertical Separator 無 mx- = 黏按鈕(action-bar.spec.md「分隔線幾何」h-6 mx-1;
+# ButtonGroup 內用 <ButtonDivider/>(mx built-in))。
+SEP_TAGS=$(echo "$CONTENT" | grep -oE '<(DS\.)?Separator[^>]*orientation=["'"'"']vertical["'"'"'][^>]*' || true)
+if [ -n "$SEP_TAGS" ] && echo "$SEP_TAGS" | grep -qv 'mx-' && \
+   ! echo "$CONTENT" | grep -q '@separator-geometry-ok:'; then
+  VIOLATIONS="${VIOLATIONS}  - vertical <Separator> 無 mx- = 分隔線黏按鈕 → toolbar 用 className=\"h-6 mx-1\"(dense h-5 mx-1);ButtonGroup 內用 <ButtonDivider/>(action-bar.spec.md「分隔線幾何」)。版面切分 divider → @separator-geometry-ok: <rationale>\n"
+fi
+# C20 連結字手刻 underline:color.spec.md「Action — Primary」= hover 換色不用底線;
+# dropzone 連結走 FileUpload children slot。no-underline / hover:underline 皆不中此 regex 形。
+if echo "$CONTENT" | grep -qE '<(span|a|button|div)[^>]*className="([^"]* )?underline( [^"]*)?"'; then
+  VIOLATIONS="${VIOLATIONS}  - 手刻 underline 連結字 → Action—Primary canonical = text-primary + hover 換色(text-primary-hover),不用底線(color.spec.md「Action — Primary」);dropzone 連結走 <FileUpload> children slot\n"
+fi
+# C10 業務 search 被推最右:spacer(flex-1 自閉合 / ml-auto)緊接 Search Input。
+# 過濾當前檢視的 search = 業務層,與其他操作同區(action-bar.spec.md:69/76);無標題 toolbar 靠左(:109)。
+if echo "$CONTENT" | grep -qE '(flex-1[^>]*/>|ml-auto)[^<]{0,80}<(DS\.)?Input[^>]{0,200}placeholder="(Search|搜尋)' && \
+   ! echo "$CONTENT" | grep -q '@search-right-ok:'; then
+  VIOLATIONS="${VIOLATIONS}  - 業務 search(過濾當前檢視)被 spacer 推到最右 → 歸業務層與其他操作同區(action-bar.spec.md:69/76;無標題 toolbar 業務層靠左 :109)。工具型跨頁 search 置最右合法 → @search-right-ok: <rationale>\n"
+fi
+# C11 dialog chrome 雙 X:DialogHeader 之後 250 字窗內手放 startIcon={X} 且窗內無 actions=
+# (DialogHeader 自帶 Close;header 操作走 actions slot — action-bar.spec.md:281)。
+DH_WIN=$(echo "$CONTENT" | grep -oE '<(DS\.)?DialogHeader.{0,250}' || true)  # BSD grep bound 上限 255
+if [ -n "$DH_WIN" ] && echo "$DH_WIN" | grep -qE 'startIcon=\{X\}' && ! echo "$DH_WIN" | grep -q 'actions=' && \
+   ! echo "$CONTENT" | grep -q '@dialog-chrome-ok:'; then
+  VIOLATIONS="${VIOLATIONS}  - DialogHeader 內手放 X 關閉鈕(DialogHeader 已自帶 Close = 雙 X)→ header 操作走 actions slot(自動 ButtonDivider 分隔,action-bar.spec.md:281)。特例 → @dialog-chrome-ok: <rationale>\n"
+fi
+# C7 SelectMenu internal 直用(select-menu.spec.md:53 明文禁 consumer 直用 — 它是 Select/
+# Combobox 的內部選單面,consumer 用 <Select>/<Combobox>;此為「internal 且 spec 明文禁直用」
+# 特例,非一般 internal 包裝即可)。
+if echo "$CONTENT" | grep -qE '<SelectMenu\b' && \
+   ! echo "$CONTENT" | grep -q '@selectmenu-direct-ok:'; then
+  VIOLATIONS="${VIOLATIONS}  - <SelectMenu> 直用(internal 選單面,select-menu.spec.md:53 明文禁)→ 用 <Select> / <Combobox>(自帶 trigger + 選單接線)。極特例 → @selectmenu-direct-ok: <rationale>\n"
+fi
+# C13 手刻可收合 section header(2026-07-10 收官:R3-7 拍板 SectionHeader 留產品客製、但 layout
+# 全消費 canonical — 組合鐵律 codify 於 item-anatomy.spec.md「可收合 section header」;簽名 =
+# Chevron toggle + justify-between + 可點,且檔內無 SectionHeader 共用元件)。
+if echo "$CONTENT" | grep -qE 'Chevron(Down|Right|Up)' && \
+   echo "$CONTENT" | grep -q 'justify-between' && \
+   echo "$CONTENT" | grep -qE '<button\b|onClick=' && \
+   ! echo "$CONTENT" | grep -q 'SectionHeader' && \
+   ! echo "$CONTENT" | grep -q '@section-header-ok:'; then
+  VIOLATIONS="${VIOLATIONS}  - 手刻可收合 section 標題列(Chevron + justify-between + 可點)→ 抽共用 SectionHeader 元件並照 item-anatomy.spec.md「可收合 section header 組合 canonical」(chevron = title 後 suffix inline action / desc 用 item-gap token / endSlot 垂直置中;WM SectionHeader 錨例)。非 section 標題語義 → @section-header-ok: <rationale>\n"
+fi
+# C19 兩欄 dialog 共用捲軸(2026-07-10 user 拍板:兩欄是組合非元件;組合鐵律 = 各欄自帶
+# ScrollArea,overlay-surface.spec.md「兩欄 dialog 組合 canonical」)。簽名 = Dialog body +
+# 欄分隔 border-l + ScrollArea 少於 2 = 兩欄共用單一捲軸。
+if echo "$CONTENT" | grep -qE '<(DS\.)?Dialog(Body|Content)\b' && \
+   echo "$CONTENT" | grep -q 'border-l' && \
+   echo "$CONTENT" | grep -qE 'className="[^"]*flex[^"]*"' && \
+   [ "$(echo "$CONTENT" | grep -o '<ScrollArea' | wc -l | tr -d ' ')" -lt 2 ] && \
+   ! echo "$CONTENT" | grep -q '@two-pane-dialog-ok:'; then
+  VIOLATIONS="${VIOLATIONS}  - 兩欄 dialog(border-l 欄分隔)但 ScrollArea < 2 = 共用單一捲軸 → 各欄自帶 <ScrollArea> 獨立捲(overlay-surface.spec.md「兩欄 dialog 組合 canonical」;archetype = WM WorkItemDetailDialog / FileViewer InfoPanel)。非兩欄語義 → @two-pane-dialog-ok: <rationale>\n"
+fi
+# C12 Field family 硬寬:Select/Combobox/DatePicker/PeoplePicker 帶 w-N / w-[Npx] 硬寬
+# → width="hug"/"fill" 語義軸(field-controls.spec.md「寬度」)。
+if echo "$CONTENT" | grep -qE '<(DS\.)?(Select|Combobox|DatePicker|PeoplePicker)\b[^>]*className="[^"]*\bw-([0-9]+|\[[0-9]+(px|rem)\])' && \
+   ! echo "$CONTENT" | grep -q '@field-width-ok:'; then
+  VIOLATIONS="${VIOLATIONS}  - Field 家族控件 className 硬寬(w-N / w-[Npx])→ 用 width=\"hug\"(內容自適)或預設 fill(field-controls.spec.md「寬度」;WM 詳情 metadata 全 hug 拍板錨例)。特例 → @field-width-ok: <rationale>\n"
+fi
 
 # Pattern 6: Overlay trigger without defaultOpen state for visual demo
 # (Skip in production .tsx; only enforce in .stories.tsx where visual snapshot matters)
 if echo "$FILE" | grep -qE '\.stories\.tsx$'; then
   for overlay in Tooltip Popover Dialog Sheet DropdownMenu; do
-    if echo "$CONTENT" | grep -qE "<DS\.${overlay}\b" && \
+    if echo "$CONTENT" | grep -qE "<(DS\.)?${overlay}\b" && \
        ! echo "$CONTENT" | grep -qE "(defaultOpen|open=\{(true|isOpen)\})"; then
       VIOLATIONS="${VIOLATIONS}  - Story uses <${overlay}> without defaultOpen — visual audit can't see overlay content\n"
     fi

package/ds-canonical/hooks/check_datatable_invariants.sh

@@ -85,13 +85,15 @@ EOF
 esac
 
 # ── B.3 filter↔sort sibling sync reminder(P2 reminder)────────────────────────
+# 2026-07-14 拆檔對齊:filter row/group renderer 移居 data-table-filter-group.tsx(@internal),
+# row-layout 類 sync 關注點跟著搬 → 兩檔皆觸發 filter 側 reminder(M7 hook regex 對齊 file layout)。
 case "$FILE_PATH" in
-  *data-table-filter-panel.tsx)
+  *data-table-filter-panel.tsx|*data-table-filter-group.tsx)
     cat >&2 <<EOF
 
 ┄┄┄ B.3 check_datatable_invariants — sibling sync reminder ┄┄┄
 
-[P2] 動到 filter panel → 是否需要對應修 data-table-sort-manager.tsx?
+[P2] 動到 filter panel(或其 row/group renderer)→ 是否需要對應修 data-table-sort-manager.tsx?
 Self-check:row gap / row layout / row meta button / chrome corner action /
 empty state 行為 / CTA button variant — sort row 是否同步?
 
@@ -102,7 +104,8 @@ EOF
 
 ┄┄┄ B.3 check_datatable_invariants — sibling sync reminder ┄┄┄
 
-[P2] 動到 sort manager → 是否需要對應修 data-table-filter-panel.tsx?
+[P2] 動到 sort manager → 是否需要對應修 data-table-filter-panel.tsx(row renderer 在
+data-table-filter-group.tsx)?
 Self-check:row gap / row layout / row meta button / chrome corner action /
 empty state 行為 / CTA button variant — filter row 是否同步?
 

package/ds-canonical/hooks/check_ds_anchor_preflight.sh

@@ -4,7 +4,8 @@
 #
 # Purpose: PreToolUse Edit/Write/MultiEdit 偵測 production tsx wrap DS primitive
 # (`<Sidebar>` / `<AppShell>` / `<DataTable>` / `<Dialog>` / `<Field>` 等)
-# 沒同 turn 跑過 Grep / Read DS canonical baseline → 軟 BLOCKER 提醒 propose 前必出 3-column owner table。
+# 沒同 turn 跑過 Grep / Read DS canonical baseline → P0 BLOCKER(exit 2,2026-07-07 治理進化方向 2 升級;
+# escape CLAUDE_BYPASS_DS_ANCHOR=1 audit-logged),propose 前必出 3-column owner table。
 #
 # Scope:同 check_substantive_edit_approval_preflight.sh extended scope
 #   - packages/design-system/src/**.tsx (DS internal)

package/ds-canonical/hooks/check_dynamic_tailwind_class.sh

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+# check_dynamic_tailwind_class — 攔「動態 Tailwind utility class」脆弱寫法(2026-07-09 root-cause 防線)
+#
+# 病根(user 以 GitHub Pages 對比抓出的 DataTable row-height regression):
+#   `h-table-row-${size}` 這種「class 名本身含 ${...} 插值」的模板字串,Tailwind **靜態掃描看不到**
+#   完整 class → 只能靠專案別處剛好有 literal(如 spec.md)被 content-detection 掃到才生成。
+#   一旦那個脆弱 literal 消失 / 掃描樹變動(本 case 是 .gitignore 加 reference/)→ 整組 `.h-table-row-*`
+#   規則不生成 → 元件靜默塌成內容高度(non-editable 33px / editable 44px 而非 token 40px)+ 選取控件走位。
+#   tsc / build 全綠、CI 不紅 = 沉默陷阱。
+#
+# 正解(對齊 fieldWrapperStyles 的 `h-field-md` cva-literal 慣例):class 名必須是**完整 literal**;
+#   要隨變數選 class 用 literal map:`{ sm:'h-table-row-sm', md:'h-table-row-md', lg:'h-table-row-lg' }[size]`。
+#
+# Scope:production tsx/ts(packages/design-system/src + apps)。CSS var 插值(`var(--x-${y})` / arbitrary
+#   value `[...${...}]`)不在此列(那是值,不是 class 名;且 CSS var 真存在,fail-loud 不同機制)。
+# Escape:`// @dynamic-tailwind-allow: <理由>` per-line。
+source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
+set -euo pipefail
+INPUT=$(cat)
+fp=$(printf '%s' "$INPUT" | python3 -c "import sys,json;print(json.load(sys.stdin).get('tool_input',{}).get('file_path',''))" 2>/dev/null || true)
+content=$(printf '%s' "$INPUT" | python3 -c "import sys,json;d=json.load(sys.stdin).get('tool_input',{});print(d.get('content') or d.get('new_string') or '')" 2>/dev/null || true)
+[ -z "$fp" ] && exit 0
+case "$fp" in
+  *packages/design-system/src/*.tsx|*packages/design-system/src/*.ts|*apps/*/src/*.tsx|*apps/*/src/*.ts) ;;
+  *) exit 0 ;;
+esac
+[ -z "$content" ] && exit 0
+
+# 抓:backtick 字串內、Tailwind 尺寸/間距 utility 前綴 + 之後含 `${` 讓 class 名不完整。
+#   e.g. `h-table-row-${size}` / `h-${x}` / `min-h-${y}` / `w-col-${i}` / `gap-${g}` / `py-${p}`
+# 排除:`[` 之後(arbitrary value,如 `h-[var(--x-${y})]`)、`var(` 內。
+hits=$(printf '%s' "$content" | grep -nE '`[^`]*\b(h|w|min-h|max-h|min-w|max-w|size|gap|space-[xy]|p[xytblr]?|m[xytblr]?)-[a-z0-9-]*\$\{' 2>/dev/null \
+  | grep -vE '@dynamic-tailwind-allow' \
+  | grep -vE '\[[^]]*\$\{|var\(' || true)
+
+if [ -n "$hits" ]; then
+  echo "🚨 BLOCKER: 動態 Tailwind class(class 名含 \${...} 插值)— Tailwind 靜態掃描看不到 → 靜默不生成規則" >&2
+  echo "  file: $fp" >&2
+  echo "$hits" | sed 's/^/    /' >&2
+  echo "" >&2
+  echo "  病根:2026-07-09 DataTable row-height regression(h-table-row-\${size} → utility 消失 → row 塌 + 選取走位)" >&2
+  echo "  正解:改 literal map,class 名寫完整字面 —" >&2
+  echo "    const cls = { sm: 'h-table-row-sm', md: 'h-table-row-md', lg: 'h-table-row-lg' }[size]" >&2
+  echo "  逃生:確實非 class(CSS var 值等)→ 行尾加 // @dynamic-tailwind-allow: <理由>" >&2
+  exit 2
+fi
+exit 0

package/ds-canonical/hooks/check_escape_marker_abuse.sh

@@ -135,6 +135,33 @@ $(echo "$MARKERS_FOUND" | sed 's/^/    /')
 EOF
     exit 2
   fi
+
+  # ── Repo 級累計 ratchet(2026-07-08 WM 戰役 R4)──────────────────────────────
+  # per-file gate(≥3 distinct/≥5 total)可被「每檔 1-2 個、散多檔」繞過 → repo 級 ceiling。
+  # Ratchet 精神(Polaris stylelint migrator):存量 ≥ cap 後只擋「本次 edit 再新增 marker」,
+  # 不因存量 brick 無關 edit(本次內容無 marker → 直接放行)。
+  EDIT_ADDS_MARKER=$(echo "$CONTENT" | grep -cE "$MARKER_RE" || true)
+  if [ "${EDIT_ADDS_MARKER:-0}" -gt 0 ]; then
+    APPS_ROOT="${CLAUDE_PROJECT_DIR:-.}/apps"
+    REPO_CAP=10
+    if [ -d "$APPS_ROOT" ]; then
+      REPO_TOTAL=$(grep -rhoE "$MARKER_RE" "$APPS_ROOT" --include='*.tsx' --include='*.ts' 2>/dev/null | wc -l | tr -d ' ')
+      if [ "${REPO_TOTAL:-0}" -ge "$REPO_CAP" ]; then
+        cat >&2 << EOF
+🚨 ESCAPE-MARKER-REPO-RATCHET BLOCKER(P0,2026-07-08 WM 戰役 R4)
+
+  apps/** 全 repo escape marker 存量已 $REPO_TOTAL 個(ceiling $REPO_CAP),本次 edit 又要新增 $EDIT_ADDS_MARKER 個。
+  每檔 1-2 個散多檔 = 繞 per-file gate 的同型濫用 — repo 級 ratchet 攔。
+
+  修法 2 選 1:
+    (a) 先清既有 escape 的根因(重構走 DS canonical),存量 < $REPO_CAP 後再加真必要的
+    (b) Override env(極罕見,commit msg 必記 rationale):
+        CLAUDE_BYPASS_ESCAPE_MARKER_AUDIT=1
+EOF
+        exit 2
+      fi
+    fi
+  fi
 fi
 
 exit 0