@qijenchen/design-system 0.1.0-beta.83 → 0.1.0-beta.85

package/ds-canonical/hooks/check_field_family_invariants.sh

@@ -1,12 +1,13 @@
 #!/bin/bash
 # Field family unified invariant hook(2026-05-08 cluster A consolidation)
 #
-# Merges PreToolUse hooks(原各檔已 retire,合併入此)— 共 5 條 sub-rules:
+# Merges PreToolUse hooks(原各檔已 retire,合併入此)— 共 6 條 sub-rules:
 #   A.1 naked row-mode propagation(原 check_naked_row_mode_propagation,P0 BLOCKER)
 #   A.2 FieldControlGroup wrapper direct child(原 check_field_control_group_direct_child,P1 WARN)
 #   A.3 Field state ring SSOT(原 check_field_state_token_consume 3 sub-rules,P0 BLOCKER)
 #   A.4 disabled placeholder color(原 check_disabled_placeholder_color,P1 stderr only)
 #   A.5 _Group child fieldCtx.id 隔離(2026-05-31 折入,M4 AR34 regression detector,P0 BLOCKER)
+#   A.6 空值顯示 SSOT(2026-07-08 user 拍板半形 hyphen,P0 BLOCKER)
 #
 # Why merge:皆 Field 家族 invariant,共用 INPUT parsing + Edit/Write filter pattern,
 #   分散在 4 個 hook 是「散裝 SSOT」(M17 + Anthropic ≤ 15 hook best practice 違反)。
@@ -19,6 +20,7 @@
 #   A.3: `// @field-state-ring-allow: <reason>`
 #   A.4: `// @disabled-color-allow: <reason>`
 #   A.5: `// @group-fieldctx-allow: <reason>`
+#   A.6: `// @empty-display-allow: <reason>`
 
 source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
 
@@ -247,4 +249,62 @@ EOF
     ;;
 esac
 
+# ── A.6 空值顯示 SSOT(P0 BLOCKER,2026-07-08 user 拍板半形 hyphen)────────────────
+# user verbatim「我從頭到尾哪裡有說要用全形的」+ 五情境空值框架。SSOT:符號常數 =
+#   field-wrapper.tsx `EMPTY_DISPLAY = '-'`(U+002D 半形);分流 hook = field-context.ts
+#   `useFieldEmptyDisplay()`。禁 2 shape:
+#   A.6.1 非 owner 檔直接 import `EMPTY_DISPLAY` 常數(應消費 hook 分流,否則 table-cell
+#         editable→'' 分流會漏);
+#   A.6.2 components/ tsx display 路徑 hardcode 全形 em dash `'—'`/`"—"`(U+2014)字面。
+# M7 broad-vs-narrow:spec wording 廣(「禁 hardcode 空值符號」);hook 取「quoted em dash 字面」
+#   高信號 subset + owner skip + comment 剝離 + `@empty-display-allow` escape,零誤判導向。
+if ! echo "$NEW_CONTENT" | grep -q '@empty-display-allow'; then
+  # A.6.1 非 owner 檔 import EMPTY_DISPLAY 常數(剝離註解行)
+  case "$FILE_PATH" in
+    */field-context.ts|*/field-wrapper.tsx) ;; # SSOT owner(定義 + 分流 hook)skip
+    *)
+      A61_CONTENT=$(echo "$NEW_CONTENT" | grep -vE '^[[:space:]]*(//|\*|/\*)')
+      if printf '%s' "$A61_CONTENT" | grep -E "import.*EMPTY_DISPLAY|EMPTY_DISPLAY.*from" >/dev/null; then
+        cat >&2 <<EOF
+
+┄┄┄ A.6.1 check_field_family_invariants — EMPTY_DISPLAY 直引 BLOCKER ┄┄┄
+
+[P0] ${FILE_PATH}
+偵測到直接 import \`EMPTY_DISPLAY\` 常數(非 field-context.ts owner)。
+空值顯示必經 \`useFieldEmptyDisplay()\` hook 分流(table-cell 可編輯→空白 / 其餘→半形 '-'),
+直引常數會漏 surface × editable 分流。
+
+修法:import { useFieldEmptyDisplay } from '@/design-system/components/Field/field-context'
+      const emptyDisplay = useFieldEmptyDisplay()
+例外:行尾 \`// @empty-display-allow: <reason>\`
+
+EOF
+        record_worst 2
+      fi
+      ;;
+  esac
+  # A.6.2 components/ tsx hardcode 全形 em dash 空值字面(剝離註解行 + owner/story skip)
+  case "$FILE_PATH" in
+    *.stories.tsx|*/field-context.ts|*/field-wrapper.tsx) ;; # doc N/A marker + SSOT owner skip
+    *components/*.tsx)
+      A62_CONTENT=$(echo "$NEW_CONTENT" | grep -vE '^[[:space:]]*(//|\*|/\*)')
+      if printf '%s' "$A62_CONTENT" | grep -E "['\"]—['\"]" >/dev/null; then
+        cat >&2 <<EOF
+
+┄┄┄ A.6.2 check_field_family_invariants — 全形 em dash 空值 BLOCKER ┄┄┄
+
+[P0] ${FILE_PATH}
+偵測到 components/ 實作檔 hardcode 全形 em dash \`'—'\`(U+2014)字面。
+user 2026-07-08 拍板:空值符號 = **半形 hyphen '-'(U+002D)**,禁全形。
+
+修法:空值一律 \`{value ?? emptyDisplay}\`(emptyDisplay = useFieldEmptyDisplay()),不 hardcode 符號。
+例外:行尾 \`// @empty-display-allow: <reason>\`
+
+EOF
+        record_worst 2
+      fi
+      ;;
+  esac
+fi
+
 exit $WORST

package/ds-canonical/hooks/check_layout_space_magic_numbers.sh

@@ -43,7 +43,31 @@ ESCAPE_MARKER='@layout-space-magic-ok:'
 
 # Detect magic spacing classes (Tailwind class strings only — NOT JSX props like size={24})
 # Match per line so we can check per-line escape comments
-MAGIC_LINES=$(echo "$NEW_CONTENT" | grep -nE '\b(p|px|py|pt|pb|pl|pr|gap|space-x|space-y|m|mx|my|mt|mb|ml|mr)-(0\.5|[1-9][0-9]?(\.[0-9])?)\b')
+# 2026-07-08 WM 戰役 R4 擴 scope(broad-vs-narrow gap 實證修補):
+#   (a) logical properties ps-/pe-/ms-/me-(WM 6 筆 ps-4 漏網實證)
+#   (b) arbitrary bracket 固定 px:gap-[7px] / p-[13px] 類(spacing 家族)
+#   (c) 固定寬度 w-[Npx](WM w-[640px] 丟失 min() viewport clamp 實證;w-[min(...)]/var()/% 不攔)
+#   (d) grid-template 固定 px 欄寬:grid-cols-[...Npx...](WM mini-table 88px/72px 黏死實證)
+MAGIC_LINES=$(echo "$NEW_CONTENT" | grep -nE '\b(p|px|py|pt|pb|pl|pr|ps|pe|gap|space-x|space-y|m|mx|my|mt|mb|ml|mr|ms|me)-(0\.5|[1-9][0-9]?(\.[0-9])?)\b|\b(p|px|py|pt|pb|pl|pr|ps|pe|gap|m|mx|my|mt|mb|ml|mr|ms|me)-\[[0-9]+(\.[0-9]+)?px\]|\bw-\[[0-9]+(\.[0-9]+)?px\]|\bgrid-(cols|rows)-\[[^]]*[0-9]+px[^]]*\]')
+
+# ── 幻覺 token 攔截(2026-07-08 WM 戰役:app 自創 var(--layout-space-distant) → CSS 未定義
+# silent 解析 0 → 區塊全黏死,PDF「全部擠在一起」根因之一。白名單 = loose|tight|bottom
+# (layoutSpace.css SSOT 僅此三顆;新增 tier 走 DS token 流程,不在 consumer 端發明)──
+PHANTOM=$(echo "$NEW_CONTENT" | grep -nE 'var\(--layout-space-[a-z-]+\)' | grep -vE 'var\(--layout-space-(loose|tight|bottom)\)' || true)
+if [ -n "$PHANTOM" ]; then
+  cat >&2 <<EOF_PH
+🚨 [P0 BLOCKER] 幻覺 layout-space token(CSS 未定義 = silent 0 = 佈局黏死):
+$PHANTOM
+→ 白名單只有 --layout-space-{loose,tight,bottom}(layoutSpace.css SSOT)。
+  要更大一級間距 → 用 loose;真需新 tier → 走 DS token 新增流程(layoutSpace.spec),禁 consumer 端自創。
+  Anchor:2026-07-08 WM --layout-space-distant ×4 處,整個 detail modal 區塊黏死。
+EOF_PH
+  exit 2
+fi
+
+# 2026-07-10 批次 A:divider 幾何 canonical(h-6 mx-1 / h-5 mx-1,action-bar.spec.md「分隔線幾何」)
+# 是**正解**,不該被 magic-number 攔(原本懲罰 canonical 修法、放行違規 = 治理自我打架)。
+MAGIC_LINES=$(echo "$MAGIC_LINES" | grep -vE '(Separator|ButtonDivider)' || true)
 
 if [ -z "$MAGIC_LINES" ]; then
   exit 0
@@ -82,9 +106,9 @@ $(echo -e "$UNJUSTIFIED" | sed 's/^/    /' | head -10)
   per app-shell.spec.md L205-219 + layoutSpace.spec.md SSOT:consumer content 必遵循
   layoutSpace 6 條規則 + 親疏 3 級,**禁** 硬寫 Tailwind magic numbers。改用:
     p-[var(--layout-space-loose)]      /* 16px 規則 1A/1B chrome / wrap */
-    p-[var(--layout-space-tight)]      /* 12px 規則 3 親 gap */
-    gap-[var(--layout-space-distant)]  /* 24px 規則 3 疏 gap */
-    space-y-[var(--layout-space-distant)]
+    gap-[var(--layout-space-tight)]    /* 12px 規則 3 親 gap(跨範疇相關) */
+    gap-[var(--layout-space-loose)]    /* 16px 規則 3 疏 gap(跨範疇 parallel;lg 密度自動 24px) */
+    (token 全集 = loose/tight/bottom,無其他級 — 自創 --layout-space-distant 類 = 幻覺 token,本 hook 會攔)
 
   修法 2 選 1:
     (a) 改 token:換成 var(--layout-space-N) N∈{loose,tight} family per 6 規則 + 親疏 3 級

package/ds-canonical/hooks/check_naming_and_abstraction.sh

@@ -136,7 +136,7 @@ case "$FILE_PATH" in
       */components/Tag/*|*/components/Avatar/*|*/components/Chart/*|*/tokens/*) ;; # codified primitive-consumer skip
       *)
         if ! echo "$NEW_CONTENT" | grep -q 'primitive-color-allow-blanket'; then
-          VIOLATIONS_D3=$(printf '%s' "$NEW_CONTENT" | grep -nE 'var\(--color-[a-z]+-[0-9](-opaque)?\)' | grep -v 'primitive-color-allow' || true)
+          VIOLATIONS_D3=$(printf '%s' "$NEW_CONTENT" | grep -nE 'var\(--color-[a-z][a-z-]*-[0-9]{1,2}(-opaque)?\)' | grep -v 'primitive-color-allow' || true)
           if [ -n "$VIOLATIONS_D3" ]; then
             cat >&2 <<EOF
 

package/ds-canonical/hooks/check_opacity_token_usage.sh

@@ -135,6 +135,24 @@ if [ -n "$HITS_PRIMITIVE" ]; then
   VIOLATIONS="${VIOLATIONS}\n   [primitive color as utility] $(echo "$HITS_PRIMITIVE" | tr '\n' ' ')"
 fi
 
+# 10) 幻覺 semantic state 尾綴(2026-07-10 批次 A C1:WM hover:bg-neutral-hovered ×3 檔 silent no-op 實證。
+#     真尾綴只有 -hover/-active/-selected(+ selected-hover/selected-active);過去式/-pressed 全幻覺,
+#     Tailwind 靜默不生成 → hover 無效果、build 不報錯)
+HITS_PHANTOM_STATE=$(echo "$NEW_CONTENT" | grep -oE "\b(hover:|active:|focus:)?(bg|text|border|ring)-[a-z][a-z-]*-(hovered|actived|focussed|pressed)\b" | sort -u || true)
+if [ -n "$HITS_PHANTOM_STATE" ]; then
+  VIOLATIONS="${VIOLATIONS}\n   [phantom state suffix(silent no-op)] $(echo "$HITS_PHANTOM_STATE" | tr '\n' ' ')"
+fi
+
+# 11) micro gap(<4px)+ registry fraction width(#71 2026-07-11 接線)——
+#     registry micro_gap / fraction 的 rationale 明寫「flag for human review」(非硬禁)→ 走
+#     SOFT WARN 非 block(避免誤殺 Calendar/Chart/FileViewer/Carousel 等 4 個既有合法 micro-gap 用途)。
+#     fraction 用 registry 明列 14 條(w-1/3.. 不含 w-1/2 = 合法留白),避免廣捕 w-N/M 誤殺。
+HITS_MICROGAP=$(echo "$NEW_CONTENT" | grep -oE "\bgap-(px|0\.5|1\.5)\b" | sort -u || true)
+HITS_FRACTION=$(echo "$NEW_CONTENT" | grep -oE "\bw-(1/3|2/3|1/4|3/4|1/5|2/5|3/5|4/5|1/6|5/6|1/12|5/12|7/12|11/12)\b" | sort -u || true)
+SOFT_NOTES=""
+[ -n "$HITS_MICROGAP" ] && SOFT_NOTES="${SOFT_NOTES}\n   [micro gap <4px] $(echo "$HITS_MICROGAP" | tr '\n' ' ')"
+[ -n "$HITS_FRACTION" ] && SOFT_NOTES="${SOFT_NOTES}\n   [fraction width] $(echo "$HITS_FRACTION" | tr '\n' ' ')"
+
 if [ -n "$VIOLATIONS" ]; then
   cat >&2 <<'EOF_HEAD'
 
@@ -160,7 +178,17 @@ EOF_HEAD
 EOF_BODY
   # P0 BLOCKER(2026-07-07 治理進化方向 2:對齊 user 2026-05-27「SSOT canonical 必 P0」doctrine;
   # 檔級豁免(anatomy/principles stories / token 自家)+ 行級 escape 已備,升級不增誤殺)
+  # micro-gap/fraction soft note 附在硬 block 訊息尾(一起讓 AI 看到,但不影響 exit code 判定)
+  [ -n "$SOFT_NOTES" ] && { echo "" >&2; echo "   （另有 soft flag,非 block 原因）:" >&2; echo -e "$SOFT_NOTES" >&2; }
   exit 2
 fi
 
+# 只有 micro-gap / fraction soft note(無硬 violation)→ WARN 非 block(registry rationale「flag for human review」)
+if [ -n "$SOFT_NOTES" ]; then
+  echo "" >&2
+  echo "⚠️  Dim 47 soft flag(registry micro_gap / fraction「flag for human review」— 非 block,#71 接線):" >&2
+  echo -e "$SOFT_NOTES" >&2
+  echo "   <4px gap / registry fraction width 常違反 item-anatomy slot 幾何 / layout SSOT → 人工 review。合理則行尾 @token-registry-ok: <rationale>。" >&2
+fi
+
 exit 0

package/ds-canonical/hooks/check_pixel_quantified_audit.sh

@@ -6,7 +6,8 @@
 #   `getAttribute('data-state')` / `class.includes('items-start')` attribute-existence
 #   = false-positive trap(DOM-structure-pass ≠ visual-pass)。
 #
-# Mechanical rule:scripts/visual-audit-*.mjs(or *.js)若有 `getAttribute(` 但沒 paired
+# Mechanical rule:scripts/visual-audit*.mjs(or *.js;含 canonical scripts/visual-audit.mjs,
+# 舊 visual-audit-<target>.mjs 家族已於 2026-05-30 a2360e99 整批 retire)若有 `getAttribute(` 但沒 paired
 # `getBoundingClientRect(` 或 `offsetTop/.offsetHeight` 量化 measurement → warn。
 #
 # 對齊 Material X-DataGrid visual regression / AG Grid playwright pixel snapshot canonical。
@@ -21,7 +22,7 @@ EVENT=$(echo "$INPUT" | jq -r '.hook_event_name // ""' 2>/dev/null)
 
 case "$TOOL" in Edit|Write|MultiEdit) ;; *) exit 0 ;; esac
 case "$FILE_PATH" in
-  */scripts/visual-audit-*.mjs|*/scripts/visual-audit-*.js) ;;
+  */scripts/visual-audit*.mjs|*/scripts/visual-audit*.js) ;;
   *) exit 0 ;;
 esac
 [ "$EVENT" != "PostToolUse" ] && exit 0

package/ds-canonical/hooks/check_post_main_ssot_propagate.sh

@@ -63,7 +63,10 @@ SSOT_COUNT=$(echo "$SSOT_DIFF" | wc -l | tr -d ' ')
 # Read current package version
 PKG_VERSION=$(jq -r '.version' "$CWD/packages/design-system/package.json" 2>/dev/null || echo "unknown")
 
-cat <<EOF
+# 2026-07-11 #79 修:PostToolUse 純 stdout **不注入 AI context**(只進 transcript)→ 原 heredoc 的
+# 「AI 必全自動執行」提議到不了 AI = 假 inject。對齊 inject_deploy_url_after_push.sh:236 root-cause fix,
+# 收進 MSG 後用 jq hookSpecificOutput.additionalContext 真注入。
+MSG=$(cat <<EOF
 🔄 SSOT propagation gate(post push origin main):
 
 📊 偵測:HEAD~1..HEAD 含 $SSOT_COUNT 個 SSOT-affecting file changes
@@ -87,4 +90,6 @@ AI 全自動執行步驟(user 已給 merge trigger → 以下不需再問;user
   - .claude/skills/knowledge-prune/SKILL.md「Phase Z」reference
   - .claude/skills/deep-audit-cross-codex/SKILL.md「Phase C」reference
 EOF
+)
+jq -n --arg ctx "$MSG" '{hookSpecificOutput:{hookEventName:"PostToolUse",additionalContext:$ctx}}'
 exit 0

package/ds-canonical/hooks/check_ssot_header_declaration.sh

@@ -3,7 +3,7 @@
 # (2026-07-07 治理進化方向 3 洞 a:原 check_ssot_consultation.sh 2026-05-XX retired 後,
 #  CLAUDE.md「# SSOT 消費 canonical」+ ssot-consultation.md:30-51 強制的檔頭宣告段
 #  **無任何機械驗證** — 內部盤點實證。本 hook = 精簡復活版,只驗「新檔有無宣告段」,
-#  不驗宣告品質(品質靠 audit dim 1 + M18/M29)。)
+#  不驗宣告品質(品質靠 audit dim 5 + dim 54 + M18/M29)。)
 #
 # Scope(ratchet,對齊 Polaris stylelint-adoption 策略):
 #   - 只攔 **Write 新檔**(components/ patterns/ 的 .tsx,磁碟上不存在)— 存量檔 Edit 豁免
@@ -11,6 +11,8 @@
 #   - escape:內容含 `@ssot-header-exempt: <rationale>`(audit 可追)
 # P0 BLOCKER(user 2026-05-27「SSOT canonical 必 P0」doctrine)。
 
+source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
+
 set -euo pipefail
 
 INPUT=$(cat)

package/ds-canonical/hooks/check_story_determinism.sh

@@ -11,6 +11,8 @@
 # 第一期 WARN(exit 0):存量 10 檔(dry-run 2026-07-07,DateGrid 家族為主)未清,
 # 誤殺率驗證期後升 P0(對齊 handcraft 偵測同節奏;roadmap 方向 1 KPI 隨頻回顧)。
 
+source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
+
 set -euo pipefail
 INPUT=$(cat)
 TOOL=$(echo "$INPUT" | jq -r '.tool_name // ""')

package/ds-canonical/hooks/check_substantive_edit_approval_preflight.sh

@@ -2,19 +2,20 @@
 # check_substantive_edit_approval_preflight.sh — Pre-action gate for substantive design edits.
 #
 # Purpose: PRE-flight 偵測 packages/design-system/src/**.{tsx,ts,css} edit + last 5 user msgs 無
-# approval keyword → SOFT inject context warning。
+# approval keyword → P0 BLOCKER(stderr + exit 2;2026-05-15 由 soft warn 升級,
+# per memory/feedback_ship_then_revert_anti_pattern.md SSOT)。
 #
-# 對比 stop_self_audit.sh post-action BLOCKER:本 hook 是 PRE-action soft warn,
-# 讓 AI 看到 context 後 self-decide(propose-only OR cite approval verbatim),
+# 對比 stop_self_audit.sh post-action BLOCKER:本 hook 是 PRE-action gate,
+# 在 edit 落地前就攔(propose-only OR cite approval verbatim + bypass env),
 # 避免「edit → stop hook BLOCKER → revert」waste cycle(user 抓 2026-05-12 anti-pattern)。
 #
 # 對齊 Option 3 hybrid(M32 split 後 (f) ship gate 的 PRE-flight 補位):
-# - PreToolUse soft warn = info inject(本 hook)
-# - Stop hook BLOCKER = enforcement(stop_self_audit.sh Mechanism 4)
+# - PreToolUse P0 BLOCKER = pre-action enforcement(本 hook)
+# - Stop hook BLOCKER = post-action backstop(stop_self_audit.sh Mechanism 4)
 # - AI inline self-statement = discipline(M31 Layer A/C marker + 本 hook context)
 #
-# Why pre-action soft instead of hard BLOCK:false-positive 風險(legit bug fix 可能撞)+
-# inject info 比 reject 更尊重 AI judgment + 配合 existing stop hook backstop。
+# False-positive escape:CLAUDE_BYPASS_DESIGN_APPROVAL=1(audit-logged → logs/approval-bypass.jsonl),
+# 需 cite user approval verbatim quote 在 commit message + reply。
 #
 # 對齊:CLAUDE.md `# 稽核 canonical` Audit-vs-execute 分權 + M31 Layer A/C + M32(f) ship gate。
 

package/ds-canonical/hooks/check_tabs_content_chrome_body_double_gap.sh

@@ -52,6 +52,34 @@ if ! echo "$FILE" | grep -qE '(packages/design-system/src/|/apps/|(^|/)apps/)';
 CONTENT=$(cat "$FILE" 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 
+# ── Check 3(2026-07-08 WM 戰役 R4:root 偵測,不只 symptom)──
+# WM 實證:app 把 TabsList 塞 DialogBody + `!pt-0` hack 對抗 primitive,TabsContent 加了 mt-0
+# 就繞過 Check 2 —— 但 root 錯誤是「沒用 DialogHeader tabsSlot canonical」(雙線 + 底線內縮 +
+# spacing owner 自組)。偵測兩個 root 簽名(任一 → BLOCK 指路 tabsSlot):
+#   (a) DialogBody/SheetBody/SurfaceBody className 含 `!pt-0`(important 對抗 primitive 的 pt owner)
+#   (b) <TabsList 出現在含 DialogBody 的同段 new content 且無 tabsSlot 字樣
+ROOT_SIG_A=$(printf '%s\n' "$CONTENT" | grep -nE '(DialogBody|SheetBody|SurfaceBody)[^>]*className=[^>]*!pt-0' | grep -v '@tabs-content-gap-ok:' || true)
+ROOT_SIG_B=""
+if printf '%s\n' "$CONTENT" | grep -q '<TabsList' && printf '%s\n' "$CONTENT" | grep -qE '<(DialogBody|SheetBody|SurfaceBody)\b' && ! printf '%s\n' "$CONTENT" | grep -q 'tabsSlot' && ! printf '%s\n' "$CONTENT" | grep -q '@tabs-content-gap-ok:'; then
+  ROOT_SIG_B=$(printf '%s\n' "$CONTENT" | grep -n '<TabsList' | head -3)
+fi
+if [ -n "$ROOT_SIG_A" ] || [ -n "$ROOT_SIG_B" ]; then
+  cat >&2 << 'EOF_C3'
+🚨 TABS-IN-BODY ROOT BLOCKER(P0,2026-07-08 WM 戰役 — 攔 root 非 symptom)
+
+  偵測到「TabsList 手塞 chrome body / body 用 !pt-0 hack」簽名 —— 這是「沒用 header tabsSlot
+  canonical」的 root 錯誤(後果:header 與 TabsList 雙底線、tabs 底線被 body padding 內縮不滿寬、
+  spacing owner 鏈自組)。WM ProjectSettings/TypeSettings 錨例。
+
+  ── 正解 ──
+  <Tabs> wrap → <DialogHeader tabsSlot={<TabsList/>}> → <DialogBody><TabsContent className="mt-0">
+  照 dialog.stories.tsx#WithTabsInHeader 逐字結構(header-canonical.spec.md Rule W2)。
+  Escape:`// @tabs-content-gap-ok: <rationale>`(例:tabs 本來就不屬 header 的內容分頁場景)
+EOF_C3
+  exit 2
+fi
+
+
 # ══ Check 2:overlay body 自身用固定 macro gap-N → 該用 layout-space token(2026-07-01 Sheet gap-4 錨例)══
 # Root(layoutSpace.spec.md 規則 2/3):浮層 body 直接堆疊內容的垂直 gap 屬 macro layout-space,該用
 #   density-scaling token(並列 = loose / functional 交互 = tight),非固定 gap-N(lg 不縮放 → 跟 DS
@@ -157,6 +185,7 @@ while IFS= read -r ln; do
   UNJUSTIFIED="${UNJUSTIFIED}${ln}: $(echo "$cur" | sed 's/^[[:space:]]*//')\n"
 done <<< "$CANDIDATES"
 
+
 if [ -z "$UNJUSTIFIED" ]; then exit 0; fi
 
 cat >&2 << EOF

package/ds-canonical/hooks/lib/_story_compile_drift.sh

@@ -41,7 +41,7 @@ OUTPUT=$(node "$COMPILE_SCRIPT" "$COMP_NAME" --check 2>&1 || true)
 if echo "$OUTPUT" | grep -qE "spec/tsx canonical drift|spec-only|tsx-only"; then
   MSG="📐 Story canonical drift detected in ${COMP_NAME}:\n\n${OUTPUT}\n\nFix tsx componentMeta export 或 spec frontmatter 讓 keys 對齊。"
   ESCAPED=$(printf '%s' "$MSG" | jq -Rs .)
-  printf '{"hookSpecificOutput":{"hookEventName":"PreToolUse","additionalContext":%s}}\n' "$ESCAPED"
+  printf '{"hookSpecificOutput":{"hookEventName":"PostToolUse","additionalContext":%s}}\n' "$ESCAPED"
 fi
 
 # Skip graceful(migration 未做的元件)不報

package/ds-canonical/hooks/lib/_token_hygiene.sh

@@ -35,10 +35,19 @@ VIOLATIONS=""
 # ── Check 1: shadcn compat alias 回流 ─────────────────────────────────────────
 # These are all shadcn safety-net aliases. Our code must use direct tokens instead.
 # bg-muted / bg-secondary / ring-ring are OUR tokens (kept), not listed here.
+# SSOT-drive(#87 2026-07-11):deny-list SSOT = utility-registry.json;優先從 registry 組 pattern
+# (未來新增 alias 只改 registry 自動傳播到本 write-time 主防線,消除「hardcoded 主 / registry 從」倒置)。
+# registry 讀不到 → 保留 hardcoded fallback(11 條)避免 hook 啞掉。
+_REG="${CLAUDE_PROJECT_DIR:-}/packages/design-system/src/tokens/utility-registry.json"
+[ -f "$_REG" ] || _REG="$(dirname "${BASH_SOURCE[0]}")/../../packages/design-system/src/tokens/utility-registry.json"
 SHADCN_PATTERN='\b(bg-popover|text-popover-foreground|text-muted-foreground|bg-accent|text-accent-foreground|bg-destructive|bg-background|bg-card|text-card-foreground|border-input|text-primary-foreground)\b'
+if [ -f "$_REG" ] && command -v jq >/dev/null 2>&1; then
+  _SHADCN_LIST=$(jq -r '.shadcn_alias.block.color_alias | join("|")' "$_REG" 2>/dev/null || true)
+  [ -n "$_SHADCN_LIST" ] && SHADCN_PATTERN="\\b(${_SHADCN_LIST})\\b"
+fi
 SHADCN_HITS=$(grep -nE "$SHADCN_PATTERN" "$FILE_PATH" 2>/dev/null | head -5)
 if [ -n "$SHADCN_HITS" ]; then
-  VIOLATIONS="${VIOLATIONS}\n⚠️ shadcn compat alias found (必須遷移為 direct token):\n${SHADCN_HITS}\n  映射: bg-popover→bg-surface-raised / text-popover-foreground→text-foreground / text-muted-foreground→text-fg-muted / bg-accent→bg-neutral-hover / text-accent-foreground→text-foreground / bg-destructive→bg-error / bg-background→bg-canvas / bg-card→bg-surface / border-input→border-border / text-primary-foreground→text-white"
+  VIOLATIONS="${VIOLATIONS}\n⚠️ shadcn compat alias found (必須遷移為 direct token):\n${SHADCN_HITS}\n  映射: bg-popover→bg-surface-raised / text-popover-foreground→text-foreground / text-muted-foreground→text-fg-muted / bg-accent→bg-neutral-hover / text-accent-foreground→text-foreground / bg-destructive→bg-error / bg-background→bg-canvas / bg-card→bg-surface / text-card-foreground→text-foreground / border-input→border-border / text-primary-foreground→text-white /（其餘 registry alias → 對應 semantic token,見 tokens/color/semantic.css）"
 fi
 
 # ── Check 2: Tailwind v4 [--foo] shorthand (silent fail) ─────────────────────

package/ds-canonical/hooks/stop_self_audit.sh

@@ -99,6 +99,20 @@ if [ "${LAST_USER_LINE:-0}" -gt 0 ] && [ -n "$LAST_ASSISTANT" ]; then
   fi
 fi
 
+# ── Mechanism 7c: Deep-audit coverage gate(2026-07-12 user verbatim「不抽樣不偷懶…現在和未來可以確保嗎」)──
+# Why: deep audit「完成」宣告前必證 91 dim × Claude+codex 雙軌全有證據。AI 自律不可靠(本 session 漏跑
+#   deterministic 24 + judgment 27 + hook 40 三層,只做 claim-vs-code + 反應式補,user 憤怒)。
+#   verify-deep-audit-coverage.mjs = 機械閘;宣告完成 + ledger 有缺口 → BLOCK。
+if [ "${LAST_USER_LINE:-0}" -gt 0 ] && [ -n "$LAST_ASSISTANT" ] && [ -f scripts/verify-deep-audit-coverage.mjs ]; then
+  DEEPAUDIT_CLAIM_RE='(deep.?audit.{0,10}(完成|完整|done)|稽核.{0,8}(完整完美|全部完成|都.?跑完)|91.{0,6}dim.{0,8}(都|全).{0,4}(跑|過|完|有證據)|Phase A.{0,6}完成)'
+  DEEPAUDIT_NEG_RE='(未完成|還沒|尚未|缺口|gap|未跑|待跑|待驗|不算完成|覆蓋.{0,4}未|還有.{0,4}dim|待補)'
+  if echo "$LAST_ASSISTANT" | grep -qE "$DEEPAUDIT_CLAIM_RE" && ! echo "$LAST_ASSISTANT" | grep -qE "$DEEPAUDIT_NEG_RE"; then
+    if ! node scripts/verify-deep-audit-coverage.mjs >/dev/null 2>&1; then
+      CRITICAL_DEEPAUDIT_COVERAGE=1
+    fi
+  fi
+fi
+
 # ── Mechanism 2: Auto-prune trigger ─────────────────────────────────────────
 if [ -f CLAUDE.md ]; then
   L=$(wc -l < CLAUDE.md | tr -d ' ')
@@ -513,4 +527,21 @@ if [ "${CRITICAL_COMPLETENESS:-0}" = "1" ] && [ -n "$LAST_ASSISTANT" ]; then
   fi
 fi
 
+# ── BLOCKER for Mechanism 7c deep-audit coverage(2026-07-12 user-authorized)──
+if [ "${CRITICAL_DEEPAUDIT_COVERAGE:-0}" = "1" ] && [ -n "$LAST_ASSISTANT" ]; then
+  DACOV_HASH=$(echo "$LAST_ASSISTANT" | tail -c 200 | shasum -a 256 | cut -c1-16)
+  LAST_BLOCKED_DACOV_FILE="$PROJECT_DIR/.claude/logs/.last-blocked-deepaudit-coverage.txt"
+  LAST_BLOCKED_DACOV=""
+  [ -f "$LAST_BLOCKED_DACOV_FILE" ] && LAST_BLOCKED_DACOV=$(cat "$LAST_BLOCKED_DACOV_FILE" 2>/dev/null || echo "")
+  if [ "$DACOV_HASH" != "$LAST_BLOCKED_DACOV" ]; then
+    echo "$DACOV_HASH" > "$LAST_BLOCKED_DACOV_FILE" 2>/dev/null || true
+    GAPLINE=$(node scripts/verify-deep-audit-coverage.mjs 2>/dev/null | grep -E '個 dim-證據缺口' | head -1)
+    REASON=$(printf '%s' \
+      "🚨 DEEP-AUDIT-COVERAGE BLOCKER(M7c,2026-07-12 user-authorized「不抽樣不偷懶…現在和未來可以確保嗎」):你宣告 deep audit 完成,但 verify-deep-audit-coverage.mjs exit 1 — ${GAPLINE:-91 dim × Claude+codex 雙軌未全有證據}。禁宣稱 done。跑 node scripts/verify-deep-audit-coverage.mjs 看缺哪些 dim,填完(judgment findings 檔 / deterministic log / hook residue verify / codex-dim-audit)才可宣稱;OR 明寫『核心做完,dim 覆蓋待補』。否則 turn 不結束。" \
+      "本機制起因:本 session AI 漏跑 91 dim 裡 deterministic 24 + judgment 27 + hook 40 三層,只做 claim-vs-code + 反應式補,user 憤怒。觸發器 = 宣告 deep audit 完成本身。")
+    printf '{"decision":"block","reason":%s}\n' "$(printf '%s' "$REASON" | jq -Rs .)"
+    exit 0
+  fi
+fi
+
 exit 0

package/ds-canonical/hooks/tests/test_block_prototype_imports.sh

@@ -131,6 +131,30 @@ echo "Test 5: nonexistent path → pass (silently skip)"
 run_hook "src/does-not-exist-$$.tsx"
 expect_pass "Test 5 nonexistent path"
 
+# ── Test 6: ABSOLUTE path with explorations import → block ───────────────────
+# Real Edit/Write events carry absolute file_path(2026-07-10 wiring-hunt:hook
+# 原本只比對相對路徑 prefix → 對真實 edits 形同虛設)。
+echo ""
+echo "Test 6: absolute path tsx imports from src/explorations/ → block"
+F6="$SANDBOX/violation-abs.tsx"
+cat >"$F6" <<'EOF'
+import { ProtoX } from '@/explorations/foo/bar'
+export const X = () => <ProtoX />
+EOF
+run_hook "$F6"
+expect_block "Test 6 absolute path explorations import blocked" "Blocked"
+
+# ── Test 7: ABSOLUTE path clean import → pass ────────────────────────────────
+echo ""
+echo "Test 7: absolute path tsx with clean import → pass"
+F7="$SANDBOX/clean-abs.tsx"
+cat >"$F7" <<'EOF'
+import { Button } from '@/design-system/components/Button/button'
+export const X = () => <Button>OK</Button>
+EOF
+run_hook "$F7"
+expect_pass "Test 7 absolute path clean import"
+
 # ── Summary ──────────────────────────────────────────────────────────────────
 echo ""
 echo "════════════════════════════════════════"

package/ds-canonical/hooks/tests/test_check_audit_post_report_validator.sh

@@ -118,6 +118,50 @@ EOF
 run_hook "$TMPDIR_TEST/.claude/memory/project_audit_progress.md" "Edit"
 expect_block_stderr "5. judgment dim 缺 prompt → Validator C exit-2 block" "VALIDATOR BLOCK"
 
+# 6/7. Validator K 決策品質四要件(2026-07-14;SSOT = deep-audit SKILL C.1「🔒 決策品質四要件」)
+#    拍板 section 內每個決策 block 必含 SSOT-check / 世界級 cite(URL)/ codex verdict / design-fit 四 marker。
+#    先補 `## 99.` prompt 讓 test 5 留下的 Validator C 條件通過,隔離 K 的判定。
+cat > "$TMPDIR_TEST/.claude/skills/design-system-audit/references/audit-prompts.md" <<'EOF'
+## 1. foo
+prompt
+## 99. test judgment dim
+prompt
+EOF
+mkdir -p "$TMPDIR_TEST/.claude/logs/deep-audit-test"
+cat > "$TMPDIR_TEST/.claude/logs/deep-audit-test/C1-final-report.md" <<'EOF'
+# Deep Audit 報告
+Dim 1: pass
+
+### 待你拍板
+1. 決策一:Popover 內距是否改 12px
+   - SSOT 理由:改跨元件 canonical 視覺結構
+   - SSOT-check:grep spec + memory,無既有拍板
+   - codex verdict:agree(辯論共識)
+   - 設計語言 fit:符合 density canonical
+EOF
+run_hook "$TMPDIR_TEST/.claude/logs/deep-audit-test/C1-final-report.md" "Write"
+expect_block_stderr "6. 決策缺世界級 cite → Validator K exit-2 block" "決策四要件不全"
+
+cat > "$TMPDIR_TEST/.claude/logs/deep-audit-test/C1-final-report.md" <<'EOF'
+# Deep Audit 報告
+Dim 1: pass
+
+### 待你拍板
+1. 決策一:Popover 內距是否改 12px
+   - SSOT 理由:改跨元件 canonical 視覺結構
+   - SSOT-check:grep spec + memory,無既有拍板
+   - 世界級:Polaris https://polaris.shopify.com/tokens/space / Material / Ant(3 家)
+   - codex verdict:agree(辯論共識)
+   - 設計語言 fit:符合 density canonical
+EOF
+run_hook "$TMPDIR_TEST/.claude/logs/deep-audit-test/C1-final-report.md" "Write"
+if [ "$EXIT" = "0" ]; then
+  echo "  PASS  7. 四要件齊 → Validator K pass(exit 0)"; PASS=$((PASS+1))
+else
+  echo "  FAIL  7. 四要件齊 → Validator K pass (expected exit 0, got $EXIT, stderr=[$STDERR_TEXT])"
+  FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - 7. 四要件齊 pass"
+fi
+
 echo ""
 echo "=== Summary ==="
 echo "Passed: $PASS / $((PASS + FAIL))"

package/ds-canonical/hooks/tests/test_check_codex_brief_invariants.sh

@@ -8,8 +8,9 @@
 #     · bare mention(`ls .../codex` / `mycodex exec` / git commit msg 含 "codex")→ silent
 #     · `--help` / `--version` 等 introspection flag → silent
 #   - 命中 codex exec/review → 擷取 brief content(cat-pipe / $(cat) / stdin `<` / inline arg)
-#   - Brief 必含 4 invariant keyword,缺任一 → exit 2 BLOCKER:
+#   - Brief 必含 7 invariant keyword,缺任一 → exit 2 BLOCKER:
 #       1️⃣ 全盤閱讀  2️⃣ Triple-verify  3️⃣ 禁抽樣  4️⃣ 禁列檔
+#       5️⃣ 輸入對等(A.0 鏡射錨點)  6️⃣ 判準對等(audit-prompts rubric)  7️⃣ A.1b(per-component claim-vs-code)
 #   - Escape:brief 含 `@codex-brief-invariant-skip:` → silent exit 0
 #
 # Positive(should BLOCK exit 2):缺 invariant 的 brief。
@@ -48,6 +49,9 @@ cat > "$GOOD_BRIEF" <<'EOF'
 2. triple-verify per finding(grep + Read + canonical exception check)
 3. 禁抽樣 — DS-wide ALL files,sub-agent sampled = reject
 4. 禁列檔 — 只讀 12 file,直接出 verdict
+5. 閱讀清單鏡射 A.0:CLAUDE.md + .claude/rules/meta-patterns.md 等 5 rules + 4 references + 全 spec.md + memory MEMORY.md index
+6. 判準對等:codex 讀 design-system-audit/references/audit-prompts.md 每 dim rubric,逐 dim 套用
+7. A.1b per-component claim-vs-code 對抗驗證:讀每元件 .tsx + wrap lib 逐句驗宣稱
 EOF
 
 # Partial brief:缺 invariant 3(禁抽樣);其餘 3 個 keyword 齊
@@ -146,7 +150,7 @@ run_hook "git commit -m \"${CX} collab notes\""
 expect_pass_silent "5. git commit msg 含 codex,無 exec/review → silent"
 
 # 6. inline codex exec WITH all 4 invariants → silent
-GOOD_INLINE="${CX} exec \"全盤閱讀全部 source。triple-verify per finding。禁抽樣 DS-wide ALL files。禁列檔 只讀 10 file 直接出 verdict。\""
+GOOD_INLINE="${CX} exec \"全盤閱讀全部 source(鏡射 A.0:meta-patterns rules + memory MEMORY.md index)。triple-verify per finding。禁抽樣 DS-wide ALL files。禁列檔 只讀 10 file 直接出 verdict。判準對等:讀 audit-prompts.md 逐 dim rubric。A.1b per-component claim-vs-code 對抗驗證讀 .tsx 逐句驗宣稱。\""
 run_hook "$GOOD_INLINE"
 expect_pass_silent "6. inline brief 全 4 invariant → silent"
 
@@ -158,6 +162,43 @@ expect_pass_silent "7. cat-pipe full-brief file → silent"
 run_hook "${CX} exec \"\$(cat $GOOD_BRIEF)\""
 expect_pass_silent "8. \$(cat) full-brief file → silent"
 
+# 8b. 4 invariant 齊但缺輸入對等錨點(泛 glob 閱讀清單)→ BLOCK(2026-07-10 5️⃣)
+NOPARITY_BRIEF="$TMP_DIR/noparity-brief.md"
+cat > "$NOPARITY_BRIEF" <<'EOF'
+# Codex deep-audit brief
+1. 全盤閱讀全部 source(.claude/rules/* 泛 glob,禁憑記憶)
+2. triple-verify per finding(grep + Read + canonical exception check)
+3. 禁抽樣 — DS-wide ALL files,sub-agent sampled = reject
+4. 禁列檔 — 只讀 12 file,直接出 verdict
+EOF
+run_hook "cat $NOPARITY_BRIEF | ${CX} exec"
+expect_block "8b. 缺輸入對等錨點(泛 glob)→ BLOCK" "5️⃣"
+
+# 8c. 5 invariant 齊但缺判準對等(audit-prompts)→ 6️⃣ BLOCK(2026-07-10)
+NORUBRIC_BRIEF="$TMP_DIR/norubric-brief.md"
+cat > "$NORUBRIC_BRIEF" <<'EOF'
+# Codex deep-audit brief
+1. 全盤閱讀全部 source(.claude/rules/meta-patterns.md + memory MEMORY.md,禁憑記憶)
+2. triple-verify per finding(grep + Read + canonical exception check)
+3. 禁抽樣 — DS-wide ALL files,sub-agent sampled = reject
+4. 禁列檔 — 只讀 12 file,直接出 verdict
+EOF
+run_hook "cat $NORUBRIC_BRIEF | ${CX} exec"
+expect_block "8c. 缺判準對等(無 audit-prompts)→ BLOCK" "6️⃣"
+
+# 8d. 1️⃣-6️⃣ 齊但缺 A.1b(per-component claim-vs-code)→ 7️⃣ BLOCK(2026-07-10)
+NOA1B_BRIEF="$TMP_DIR/noa1b-brief.md"
+cat > "$NOA1B_BRIEF" <<'EOF'
+# Codex deep-audit brief
+1. 全盤閱讀全部 source(.claude/rules/meta-patterns.md + memory MEMORY.md,禁憑記憶)
+2. triple-verify per finding(grep + Read + canonical exception check)
+3. 禁抽樣 — DS-wide ALL files,sub-agent sampled = reject
+4. 禁列檔 — 只讀 12 file,直接出 verdict
+5. 判準對等:讀 design-system-audit/references/audit-prompts.md 每 dim rubric,逐 dim 套用
+EOF
+run_hook "cat $NOA1B_BRIEF | ${CX} exec"
+expect_block "8d. 缺 A.1b(per-component claim-vs-code)→ 7️⃣ BLOCK" "7️⃣"
+
 # 9. stdin redirect full brief → silent
 run_hook "${CX} exec < $GOOD_BRIEF"
 expect_pass_silent "9. stdin redirect full-brief file → silent"