@qijenchen/design-system 0.1.0-beta.95 → 0.1.0-beta.99

package/ds-canonical/fork/consumer/lock.json

@@ -3,8 +3,8 @@
   "schemaVersion": 1,
   "role": "template-consumer",
   "release": {
-    "designSystem": "0.1.0-beta.95",
-    "storybookConfig": "0.1.0-beta.95"
+    "designSystem": "0.1.0-beta.99",
+    "storybookConfig": "0.1.0-beta.99"
   },
   "upgradeTrust": {
     "schemaVersion": 1,
@@ -42,23 +42,23 @@
     "implementationSha256": "98b74118fb5b410b77ad2994aa9105fa7609c7353822f8c5213cce54d94f0af4"
   },
   "payload": {
-    "forkCorpusLockSha256": "bc082ec5a102f97d16e9002ec43afb5e5f8b483d3599e0361eab7589ab90a2a9",
+    "forkCorpusLockSha256": "effada4fa83d93980edf3d81888ab17f4e682cd0ea985717ab9fcf09b4155314",
     "discoveryPolicySha256": "fba289aeeb5a3f11139b9589f7ab08b5e8c8799c7bdf8f0ea57ebfeb8e7c9da6",
     "providerMaterializersSha256": "732e85b01a12e7dd19469e26e4427f0e0cfe5117a78fc9f69c2f0f89702f463a",
-    "providerLifecycleSha256": "916c040fc796ce937c3de4030db0e441d01f6602d79b2bc12e02b9d7613c7261",
+    "providerLifecycleSha256": "56b2c0bc21a4b1ac229fe450863aafec87178eefd753e6057f4f9d5f094e8e1f",
     "providerInventorySha256": "00adf1c4f6b3367055a9cc3fdfe658660771b4c9931f696e12761a95076ad92c",
     "executionRuntimeSha256": "3fca4ba4094e855412a22308e13f2b5f91dcfeb009512eb8318b3bd1bace8d9a",
-    "commonInstructionSha256": "7e58a94ded69eeccf00422dd98ef3672be9c3b40b0cc96ff3bd0dc2f6ed5eda6",
+    "commonInstructionSha256": "3d40f4b5d3ea78f6c9ca5bd18daa531dc758d77df21a5e7ef35a3336cd71f906",
     "providerArtifactDigests": {
       "claude": {
         "instructionSha256": "f56a44c730506258cc7e2581dbdd31bfd1e6d13d60dc8a8ee8bcc398228453fb",
-        "hookSha256": "10ef17ced1b1b4dcb55672a24e880296d39b9cf0a6d7e354af633c3ff0e03d4f",
+        "hookSha256": "6398e6b20f6558392bdce1d7123815042047952be473b8fda6d2491aa1648a05",
         "skillsSha256": "163e473a872d5fa11db9ba7df27f9d316a3c20f89d1ea1cbd002e5f9ada92321",
         "treeDigests": {}
       },
       "codex": {
-        "instructionSha256": "7e58a94ded69eeccf00422dd98ef3672be9c3b40b0cc96ff3bd0dc2f6ed5eda6",
-        "hookSha256": "83d373ba11636fd6941f80f9a298056e5c862730275daf623690bf0d6be3582a",
+        "instructionSha256": "3d40f4b5d3ea78f6c9ca5bd18daa531dc758d77df21a5e7ef35a3336cd71f906",
+        "hookSha256": "697d186cfe0882ee2ce1b02ecc4c3258ab42b125bab6d70c7be868fa271132f7",
         "skillsSha256": "b80eadd9559d29a50bb7c59ca5f431077174135de79081bbc716cdf64b25bee7",
         "treeDigests": {}
       },
@@ -70,9 +70,9 @@
       }
     },
     "mergeSurfaceDigests": {
-      "claude": "10ef17ced1b1b4dcb55672a24e880296d39b9cf0a6d7e354af633c3ff0e03d4f"
+      "claude": "6398e6b20f6558392bdce1d7123815042047952be473b8fda6d2491aa1648a05"
     },
-    "governanceCheckSha256": "d0b1f050e4adcf1cb8717d4a890cc03921301107b2f53e820e5e4bdda693c122",
+    "governanceCheckSha256": "363b6af5c1e9c87cc11a53bb9868cb17e591c64f5545a09dc66f66e86f70e66f",
     "utilityRegistrySha256": "310f92cc9aa57880d8f81464ac4191907bda9c9af31847a450497e6a9f97dce3",
     "sharedSkillsSha256": "138d3bec5497e8109c47788c181f7d2ee3c856f5a84b696eb9364b73ba647bf4",
     "sharedSkillCount": 11,
@@ -90,9 +90,8 @@
       ".devcontainer/devcontainer.json": "1668412229466b1e5092218606817711c46c5307b7fc7b77abf6fff089b9b4c7",
       ".devcontainer/onboard-banner.sh": "fd87b372e48ff079afb0b257c5e5c28fcf58637b2589a508987460a66c2b8b75",
       ".devcontainer/post-create.mjs": "6bc05d2597a54e8f6a5a087901e92ccc89acc3d5873d96ad20814f8f539a146b",
-      ".github/workflows/audit.yml": "66bcee0a60de93a992131b92c20d1e397297fa109a2fe8c72dbfd62ebbbe9680",
+      ".github/workflows/audit.yml": "3cb259c8d83d8d378a6d282b0cde0a8884d96c51cf49e655405c3e416e646726",
       ".github/workflows/governance-anchor.yml": "3e280e67fd72886b0686a6d296947ee3270b4899e9914c1e3a9c61c951dcc2ee",
-      ".github/workflows/sync-design-system.yml": "f25e4d348daf1d98a0c8d0d9c1546d6b8340683ba59ed22aeb0f001378000483",
       ".npmrc": "79eff2d98653857c11ab6a0354fa62685a72ec214545e7fdfabc450e91b7ba63",
       "governance/consumer-governance.md": "abbded0a31cf3a6fb0de62975b749d10f27ac0adcc9bbf5e95ef410b64073396",
       "governance/provider-cli-toolchain.json": "6bc607cb6ac299b332d35ca871c838b54e367d96775ad0e759c827a0e3ca10cc",
@@ -110,19 +109,19 @@
       "scripts/lib/canonical-path-containment.mjs": "0244e31dc3be5015bed3efd65a5a77086a2e4676e9ac79cd0801c8cde6a74fcd",
       "scripts/lib/closed-tool-execution.mjs": "131255a302f1b403fe95dd6251e180d7f3ce920faf6cbfe90496b52d192d93c3",
       "scripts/lib/consumer-control-plane-policy.mjs": "ea8b11ddc5c964ea742ccba5e6a3bc2f215db5d165afe2cca96192812287750c",
-      "scripts/lib/governance-dependency-bootstrap.mjs": "6779f0e06b01fde7be74ff07be125405808d124811df3cfd77da428e6f618df2",
+      "scripts/lib/governance-dependency-bootstrap.mjs": "0b3c22a322174b179a2f499b0c08bbda996f90fac9be29a074bd5b1ae3435ffe",
       "scripts/lib/provider-lifecycle.mjs": "9aabb2c98efc454b8555308a34830e6590b034b10a63f76f788fbd4cf37ce7e7",
       "scripts/lib/verified-exact-npm-runtime.mjs": "50f54769a7a32fdc5b97036410018bed87808c2dbdffc47cc292967e5de3da8f",
       "scripts/lib/workspace-post-create.mjs": "f3ddc6db740d5c4d48b1c6e16c55222325e4d1c16fe6644a455e7b7e5bea0a0d",
       "scripts/lib/worktree-fingerprint.mjs": "70a8bdbceade964d009f6a46c9e57a93bc9fd58c28971ea14ad1b5ffeaaf7250",
       "scripts/lint-ds-internal-imports.mjs": "86edd952fb5c3871896515440693abeb08c1d1da9f887fa073b9ddda1363f572",
       "scripts/product-template-scaffold-lock.mjs": "9134dabf11af7a2445a6a026fc23201e8aba3ef5aeb7da1d2159e92956dd32d2",
-      "scripts/refresh-fork-launchers.mjs": "1ac397214b92b088c22dbca52495feca2382aa220ad647d93c8c077d1f9148bd",
+      "scripts/refresh-fork-launchers.mjs": "763c61964a4a971a664222e5dc0dd54564bdc9430b5a90f56021cca19d48596a",
       "scripts/release-bom-contract.mjs": "75d736f86c7f695dc88a1982d547998d510e8050c4847abe387227b6662b87c2",
       "scripts/schemas/product-template-scaffold-lock.schema.json": "1318af59f12546b3cda059a1d94923d9a969bef4c5a476ebb46e42f8c853d19a",
       "scripts/schemas/release-bom.schema.json": "6969482588a25533dc1896be63c3c9629aced1cbeb745b99822db764682dc4a4",
       "scripts/schemas/upgrade-evidence-receipt.schema.json": "e2da0a86241d8d019545b63e6285d2ca049ce95fe6aed4264149df2108c4ade0",
-      "scripts/setup-governance.mjs": "134dd20f0dee07258866c807a827785a3b96c31a6cb821e6b30ce4fe2c680db9",
+      "scripts/setup-governance.mjs": "5297a0c6dace974c1233a95825a6ffceef8823373eb4bb96947961f3979e4339",
       "scripts/setup-provider-cli-toolchain.mjs": "b34e11d02a7aa71d001ef8f1a42af4cf97d1b8b82360f5779cb927370f5ee15a",
       "scripts/setup-workspace.mjs": "95dc0fef1f7570efe277a66f7edf4640055ad6abbae0245615eceb9b041560e9",
       "scripts/sync-all.mjs": "938c706cad79a4bd538359c9b74cb9253a4c74b5f1342cbfc1625600425d8bfd",

package/ds-canonical/fork/consumer/managed-files/46f10bc55cdfdf834d0749eebff42ea0bb8576f361b36d2b6ba1851354c50150.blob

@@ -15,6 +15,10 @@ import {
 export const GOVERNANCE_DEPENDENCY_REGISTRY = 'https://registry.npmjs.org/'
 export const GOVERNANCE_DEPENDENCY_MINIMUM_NODE_VERSION = '22.13.0'
 export const GOVERNANCE_DEPENDENCY_EXACT_NPM_VERSION = '11.18.0'
+export const GOVERNANCE_CLOSED_PROJECT_NPM_CONFIG_LINES = Object.freeze([
+  'legacy-peer-deps=true',
+  'ignore-scripts=true',
+])
 export const GOVERNANCE_DEPENDENCY_REQUIRED_EXECUTABLES = Object.freeze(['bash', 'git', 'jq', 'python3'])
 export const GOVERNANCE_DEPENDENCY_NPM_STEPS = Object.freeze([
   Object.freeze(['ci', '--legacy-peer-deps', '--ignore-scripts', `--registry=${GOVERNANCE_DEPENDENCY_REGISTRY}`]),
@@ -229,25 +233,44 @@ function exactArray(value, expected) {
     && value.every((entry, index) => entry === expected[index])
 }
 
+const VERIFIED_BRACE_EXPANSION_AUDIT_PREIMAGES = Object.freeze([
+  Object.freeze({
+    source: 1124334,
+    findingRange: '<=5.0.7',
+    advisoryRange: '<=5.0.7',
+  }),
+  Object.freeze({
+    source: 1130591,
+    findingRange: '4.0.0 - 5.0.7',
+    advisoryRange: '>=4.0.0 <5.0.8',
+  }),
+])
+
+function matchesVerifiedBraceExpansionAuditPreimage(finding) {
+  return VERIFIED_BRACE_EXPANSION_AUDIT_PREIMAGES.some((preimage) => (
+    finding.range === preimage.findingRange
+      && finding.via[0]?.source === preimage.source
+      && finding.via[0]?.range === preimage.advisoryRange
+  ))
+}
+
 function assertRemediatedHighFinding(name, finding, installedOverlayReceipt) {
   invariant(finding && typeof finding === 'object' && !Array.isArray(finding), `npm audit high finding is malformed:${name}`)
   invariant(finding.name === name && finding.severity === 'high', `npm audit high finding identity drifted:${name}`)
   if (name === 'brace-expansion') {
     invariant(
       finding.isDirect === false
-        && finding.range === '<=5.0.7'
         && exactArray(finding.nodes, ['node_modules/npm/node_modules/brace-expansion'])
         && Array.isArray(finding.effects)
         && finding.effects.length <= 1
         && finding.effects.every((effect) => effect === 'minimatch')
         && Array.isArray(finding.via)
         && finding.via.length === 1
-        && finding.via[0]?.source === 1124334
         && finding.via[0]?.name === 'brace-expansion'
         && finding.via[0]?.dependency === 'brace-expansion'
         && finding.via[0]?.url === 'https://github.com/advisories/GHSA-mh99-v99m-4gvg'
         && finding.via[0]?.severity === 'high'
-        && finding.via[0]?.range === '<=5.0.7',
+        && matchesVerifiedBraceExpansionAuditPreimage(finding),
       'npm audit brace-expansion finding differs from the exact remediated bundled preimage',
     )
     return

package/ds-canonical/fork/consumer/managed-files/63061e05969667005020166ea2ae7df3c96663f7a928e7dd3eebc1471022df56.blob

@@ -250,10 +250,29 @@ export function mergeProviderHookSettings({ settings, canonicalConfig, policy, l
     throw new Error(`${label} ${hooksField} must be an object`)
   }
   const retiredIds = []
+  // F6 fail-closed:canonical hook map 必須存在、非空,且每 event 都是非空合形的 group 陣列。
+  // 寬鬆 fallback(`|| {}` / `Array.isArray ? : []`)會把「看不懂的另一世代 artifact 形狀」當
+  // 「零 hooks」:下方 strip(canonicalCommands / refsLauncher)照跑、append 卻是空 → 靜默清空
+  // 治理 hooks(WM 1f71fec 同型事故)。禁止。
+  const canonicalHookMap = canonicalConfig[hooksField]
+  if (!canonicalHookMap || typeof canonicalHookMap !== 'object' || Array.isArray(canonicalHookMap) || !Object.keys(canonicalHookMap).length) {
+    throw new Error(
+      `${label}: canonical hook artifact carries no non-empty ${JSON.stringify(hooksField)} map — the installed corpus uses a schema generation this scripts/refresh-fork-launchers.mjs does not understand; `
+      + 'refusing to write (an empty merge would silently strip every governance hook). '
+      + 'Migrate the fork scaffold to the matching generation first (npm run sync-all -- --apply --to <exact-version>).'
+    )
+  }
   const canonicalCommands = new Set()
-  for (const groups of Object.values(canonicalConfig[hooksField] || {})) for (const group of Array.isArray(groups) ? groups : []) {
-    for (const handler of Array.isArray(group?.hooks) ? group.hooks : []) {
-      if (typeof handler?.command === 'string' && handler.command) canonicalCommands.add(handler.command)
+  for (const [event, groups] of Object.entries(canonicalHookMap)) {
+    if (!Array.isArray(groups) || !groups.length) throw new Error(`${label} canonical ${hooksField}.${event} must be a non-empty array`)
+    for (const group of groups) {
+      if (!group || typeof group !== 'object' || Array.isArray(group) || !Array.isArray(group.hooks) || !group.hooks.length) {
+        throw new Error(`${label} canonical ${hooksField}.${event} contains an invalid or empty hook group`)
+      }
+      for (const handler of group.hooks) {
+        if (typeof handler?.command !== 'string' || !handler.command) throw new Error(`${label} canonical ${hooksField}.${event} contains a hook without a command`)
+        canonicalCommands.add(handler.command)
+      }
     }
   }
   const retainedHooks = {}
@@ -286,9 +305,16 @@ export function mergeProviderHookSettings({ settings, canonicalConfig, policy, l
   // the authenticated canonical groups exactly once. This keeps refresh idempotent without turning
   // a provider adapter update into authority over unrelated product automation.
   merged[hooksField] = retainedHooks
-  for (const [event, groups] of Object.entries(canonicalConfig[hooksField] || {})) {
+  for (const [event, groups] of Object.entries(canonicalHookMap)) {
     merged[hooksField][event] = [...(merged[hooksField][event] || []), ...structuredClone(groups)]
   }
+  // Never-empty postcondition(F6 迴歸絆網):merge 結果必含每個 canonical event 的註冊,
+  // 否則代表上游 shape 判定失守 → 寧可 throw 也不寫出被清空的 hook surface。
+  for (const event of Object.keys(canonicalHookMap)) {
+    if (!Array.isArray(merged[hooksField][event]) || !merged[hooksField][event].length) {
+      throw new Error(`${label}: merged ${hooksField}.${event} lost its canonical registrations — refusing to write an emptied hook surface`)
+    }
+  }
   for (const [key, value] of Object.entries(canonicalConfig)) {
     if (key === hooksField || key === 'permissions' || key === 'disableAutoMode') continue
     merged[key] = structuredClone(value)
@@ -324,7 +350,8 @@ export function mergeProviderHookSettings({ settings, canonicalConfig, policy, l
     merged.permissions.deny = nextDeny
     merged.permissions.defaultMode = canonicalPermissions.defaultMode
     merged.permissions.disableBypassPermissionsMode = canonicalPermissions.disableBypassPermissionsMode
-    merged.disableAutoMode = canonicalConfig.disableAutoMode
+    if (Object.hasOwn(canonicalConfig, 'disableAutoMode')) throw new Error(`${label} canonical permission base carries the retired disableAutoMode flag`)
+    delete merged.disableAutoMode
     delete merged.permissions.disableAutoMode
     delete merged.defaultMode
   } else if (policy.baseTemplate.engine === 'static-json-object-v1') {
@@ -336,7 +363,27 @@ export function mergeProviderHookSettings({ settings, canonicalConfig, policy, l
   return { settings: merged, retiredIds: retiredIds.sort() }
 }
 
+// ── F6 fail-closed schema generation gate(WM commit 1f71fec 教訓)──
+// 舊代 refresh 對新代 settings-hooks.json 用 `canonical.hooks || {}` 寬鬆 fallback,把「看不懂的
+// 另一世代 schema」當「零 hooks」:strip 舊治理註冊照跑、append 卻是空 → 靜默清空
+// .claude/settings.json hooks = Claude 端治理整條斷線。本 gate 是唯一 generation 判定 SSOT:
+// kind + schemaVersion 必須 exact match 本腳本世代,否則丟含遷移指引的錯誤;絕不寫檔。
+export const SETTINGS_HOOKS_KIND = 'provider-hook-merge-policies'
+export const SETTINGS_HOOKS_SCHEMA_VERSION = 1
+
+export function assertSupportedSettingsHooksGeneration(value, label = 'installed launchers/settings-hooks.json') {
+  const record = value && typeof value === 'object' && !Array.isArray(value) ? value : {}
+  if (record.kind === SETTINGS_HOOKS_KIND && record.schemaVersion === SETTINGS_HOOKS_SCHEMA_VERSION) return
+  throw new Error(
+    `${label} declares kind=${JSON.stringify(record.kind ?? null)} schemaVersion=${JSON.stringify(record.schemaVersion ?? null)}, `
+    + `but this scripts/refresh-fork-launchers.mjs generation understands exactly ${SETTINGS_HOOKS_KIND}@${SETTINGS_HOOKS_SCHEMA_VERSION}. `
+    + 'Refusing to merge provider hooks; nothing was written. Merging an ununderstood generation is exactly how an older scaffold silently emptied .claude/settings.json hooks. '
+    + 'Migrate this fork scaffold to the generation matching the installed corpus first (npm run sync-all -- --apply --to <exact-version>), then re-run.'
+  )
+}
+
 export function validateCanonicalSettingsWiring(value, manifest) {
+  assertSupportedSettingsHooksGeneration(value)
   exactKeys(value, ['_generated', 'kind', 'schemaVersion', 'sourceDigest', 'surfaces'], 'installed provider hook merge policies')
   if (
     value._generated !== 'build-fork-governance.mjs'
@@ -2050,6 +2097,15 @@ export function refreshLaunchers(projectDir, opts = {}) {
   const src = join(candidateForkRoot, 'launchers')
   assertSafeTree(projectDir, src, 'installed launcher corpus', { allowMissing: true })
   if (!existsSync(join(src, 'settings-hooks.json'))) {
+    // 只有「治理 corpus 整個不在」才是合法 skip(舊 npm / 未安裝)。corpus 在、卻沒有本世代的
+    // settings-hooks.json = 另一世代把 merge policy 搬走了 → fail-closed throw,絕不靜默 skip
+    //(F6 對偶:靜默 skip 讓 fork 永遠停在 stale 接線,治理斷線無人知)。
+    if (existsSync(join(candidateForkRoot, 'manifest.json'))) {
+      throw new Error(
+        'installed fork corpus exists but ships no launchers/settings-hooks.json — the installed release uses a scaffold generation this scripts/refresh-fork-launchers.mjs does not understand; '
+        + 'migrate the fork scaffold first (npm run sync-all -- --apply --to <exact-version>) instead of refreshing with this script generation.'
+      )
+    }
     result.skipped = 'launchers 未 ship(npm 套件版本過舊或治理本體未安裝)'
     return result
   }

package/ds-canonical/fork/consumer/managed-files/93a89f16f6717d1e4e4e27ec20ef916e3355c7aa890ca74cd9b12db30d8a899f.blob

@@ -11,6 +11,7 @@ permissions:
 
 jobs:
   audit:
+    name: Verify consumer
     runs-on: ubuntu-24.04
     timeout-minutes: 15
     steps:
@@ -22,8 +23,8 @@ jobs:
           node-version: '24.14.0'
           cache: npm
 
-      - name: Lock-verified exact npm install, audits and provider-neutral hard gate
-        run: npm run setup:governance
+      - name: Install exact locked dependencies
+        run: npm ci --ignore-scripts
 
       - name: Type-check
         run: npm run typecheck
@@ -33,11 +34,3 @@ jobs:
 
       - name: Build all apps
         run: npm run build
-
-      - name: Install Playwright browsers
-        run: npx --no-install playwright install --with-deps chromium
-
-      - name: A11y audit consumer apps(WCAG 2 A + AA)
-        # Phase 5 加 — DS repo 跑 npm run a11y:check on storybook;ds-product-template
-        # 跑 audit-consumer-a11y.mjs on apps/*/dist。對等 DS audit 嚴謹度。
-        run: npm run audit:a11y

package/ds-canonical/fork/consumer/managed-files/bc44cabad181f766611dab6a8f52d81100afadd50ac59799015e8ba7bf46d9eb.blob

@@ -27,6 +27,7 @@ import {
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import {
+  GOVERNANCE_CLOSED_PROJECT_NPM_CONFIG_LINES,
   GOVERNANCE_DEPENDENCY_EXACT_NPM_VERSION,
   GOVERNANCE_DEPENDENCY_MINIMUM_NODE_VERSION,
   GOVERNANCE_DEPENDENCY_NPM_STEPS,
@@ -392,7 +393,7 @@ function readRegularJson(path, label) {
 }
 
 function assertClosedProjectNpmConfig(root) {
-  return assertClosedProjectNpmConfigShared(root, ['legacy-peer-deps=true', 'ignore-scripts=true'], { errorPrefix: 'GOV-SETUP-001' })
+  return assertClosedProjectNpmConfigShared(root, GOVERNANCE_CLOSED_PROJECT_NPM_CONFIG_LINES, { errorPrefix: 'GOV-SETUP-001' })
 }
 
 export function assertSupportedSetupPlatform(platform = process.platform) {
@@ -476,7 +477,7 @@ async function runGovernanceDependencyBootstrap({
     runner,
     ...(runtimeFactory ? { runtimeFactory } : {}),
     authorityPaths: SETUP_AUTHORITY_PATHS,
-    expectedNpmrcLines: ['legacy-peer-deps=true', 'ignore-scripts=true'],
+    expectedNpmrcLines: GOVERNANCE_CLOSED_PROJECT_NPM_CONFIG_LINES,
     errorPrefix: 'GOV-SETUP-001',
     validateRoleRepository: assertCommittedSetupSnapshot,
     afterStage({ index }) {

package/ds-canonical/fork/governance.lock

@@ -7,7 +7,7 @@
     {
       "schemaVersion": 1,
       "file": "AGENTS.md",
-      "sha256": "7e58a94ded69eeccf00422dd98ef3672be9c3b40b0cc96ff3bd0dc2f6ed5eda6",
+      "sha256": "3d40f4b5d3ea78f6c9ca5bd18daa531dc758d77df21a5e7ef35a3336cd71f906",
       "source": "common instruction compatibility alias",
       "classification": null,
       "destination": null
@@ -255,7 +255,7 @@
     {
       "schemaVersion": 1,
       "file": "codex/hooks.json",
-      "sha256": "83d373ba11636fd6941f80f9a298056e5c862730275daf623690bf0d6be3582a",
+      "sha256": "697d186cfe0882ee2ce1b02ecc4c3258ab42b125bab6d70c7be868fa271132f7",
       "source": "providers/codex/hook-config.json",
       "classification": null,
       "destination": null
@@ -271,7 +271,7 @@
     {
       "schemaVersion": 1,
       "file": "common/instruction.md",
-      "sha256": "7e58a94ded69eeccf00422dd98ef3672be9c3b40b0cc96ff3bd0dc2f6ed5eda6",
+      "sha256": "3d40f4b5d3ea78f6c9ca5bd18daa531dc758d77df21a5e7ef35a3336cd71f906",
       "source": "scripts/fork-role-sources/AGENTS.product.md + AGENTS.md#canonical-decision-authority",
       "classification": null,
       "destination": null
@@ -279,7 +279,7 @@
     {
       "schemaVersion": 1,
       "file": "consumer/governance-check.mjs",
-      "sha256": "d0b1f050e4adcf1cb8717d4a890cc03921301107b2f53e820e5e4bdda693c122",
+      "sha256": "363b6af5c1e9c87cc11a53bb9868cb17e591c64f5545a09dc66f66e86f70e66f",
       "source": "scripts/governance-check.mjs",
       "classification": null,
       "destination": null
@@ -359,7 +359,7 @@
     {
       "schemaVersion": 1,
       "file": "consumer/managed-files/46f10bc55cdfdf834d0749eebff42ea0bb8576f361b36d2b6ba1851354c50150.blob",
-      "sha256": "6779f0e06b01fde7be74ff07be125405808d124811df3cfd77da428e6f618df2",
+      "sha256": "0b3c22a322174b179a2f499b0c08bbda996f90fac9be29a074bd5b1ae3435ffe",
       "source": "scripts/lib/governance-dependency-bootstrap.mjs",
       "classification": null,
       "destination": "scripts/lib/governance-dependency-bootstrap.mjs"
@@ -383,7 +383,7 @@
     {
       "schemaVersion": 1,
       "file": "consumer/managed-files/63061e05969667005020166ea2ae7df3c96663f7a928e7dd3eebc1471022df56.blob",
-      "sha256": "1ac397214b92b088c22dbca52495feca2382aa220ad647d93c8c077d1f9148bd",
+      "sha256": "763c61964a4a971a664222e5dc0dd54564bdc9430b5a90f56021cca19d48596a",
       "source": "scripts/refresh-fork-launchers.mjs",
       "classification": null,
       "destination": "scripts/refresh-fork-launchers.mjs"
@@ -420,14 +420,6 @@
       "classification": null,
       "destination": "scripts/lib/provider-lifecycle.mjs"
     },
-    {
-      "schemaVersion": 1,
-      "file": "consumer/managed-files/77e06f62670dfee01e9b5e8b0f8dad085ce711d75538c1fb0679d9818acaca82.blob",
-      "sha256": "f25e4d348daf1d98a0c8d0d9c1546d6b8340683ba59ed22aeb0f001378000483",
-      "source": "template/ds-product-template/.github/workflows/sync-design-system.yml",
-      "classification": null,
-      "destination": ".github/workflows/sync-design-system.yml"
-    },
     {
       "schemaVersion": 1,
       "file": "consumer/managed-files/7937321877e5c34c27dae36c0d507d21cd42fa3f46a8f11a284b8b4a52b6faa4.blob",
@@ -495,7 +487,7 @@
     {
       "schemaVersion": 1,
       "file": "consumer/managed-files/93a89f16f6717d1e4e4e27ec20ef916e3355c7aa890ca74cd9b12db30d8a899f.blob",
-      "sha256": "66bcee0a60de93a992131b92c20d1e397297fa109a2fe8c72dbfd62ebbbe9680",
+      "sha256": "3cb259c8d83d8d378a6d282b0cde0a8884d96c51cf49e655405c3e416e646726",
       "source": "template/ds-product-template/.github/workflows/audit.yml",
       "classification": null,
       "destination": ".github/workflows/audit.yml"
@@ -535,7 +527,7 @@
     {
       "schemaVersion": 1,
       "file": "consumer/managed-files/bc44cabad181f766611dab6a8f52d81100afadd50ac59799015e8ba7bf46d9eb.blob",
-      "sha256": "134dd20f0dee07258866c807a827785a3b96c31a6cb821e6b30ce4fe2c680db9",
+      "sha256": "5297a0c6dace974c1233a95825a6ffceef8823373eb4bb96947961f3979e4339",
       "source": "scripts/setup-governance.mjs",
       "classification": null,
       "destination": "scripts/setup-governance.mjs"
@@ -679,7 +671,7 @@
     {
       "schemaVersion": 1,
       "file": "hooks/check_consumer_code_quality.sh",
-      "sha256": "70a415fc8c8ee7676426a4f59c24352225ae77145b8cff7199bda32c0e6d70e9",
+      "sha256": "32b8e4d32426c0915c4afe2ad3d1e9a84a1de59549f4da68743457bebda17bfd",
       "source": "check_consumer_code_quality.sh",
       "classification": "SHIP_REWRITTEN",
       "destination": null
@@ -751,7 +743,7 @@
     {
       "schemaVersion": 1,
       "file": "hooks/check_pattern_invariants.sh",
-      "sha256": "470bb101b61a6280670315b710b955be8fd4007f642ea1d98cbf3ade40ded326",
+      "sha256": "9618abe020720ccd7e797704d66516fc019579ae32750990642047f994355a7d",
       "source": "check_pattern_invariants.sh",
       "classification": "SHIP_AS_IS",
       "destination": null
@@ -759,7 +751,7 @@
     {
       "schemaVersion": 1,
       "file": "hooks/check_sidebar_menu_button_implicit_wrap.sh",
-      "sha256": "ee890af41da3ca7981dd7dde3d86c635e507541b3a7c8ed131db39d26a5d971c",
+      "sha256": "0f435cfb643dd872c4019045b4351df05cdd62222df2bee9a70a69c6a8cdcbe8",
       "source": "check_sidebar_menu_button_implicit_wrap.sh",
       "classification": "SHIP_AS_IS",
       "destination": null
@@ -895,7 +887,7 @@
     {
       "schemaVersion": 1,
       "file": "launchers/provider-hook-normalization.mjs",
-      "sha256": "3b574773dda4b383aaeb8dc8263f0d12735445073b2b0ccb996b473eaa297278",
+      "sha256": "fe7dffbd9e3dd8a2b423765c48ef9200bbd5705870eedcae8a088575d5dd4e1a",
       "source": "packages/governance/src/provider-hook-normalization.mjs",
       "classification": null,
       "destination": null
@@ -911,7 +903,7 @@
     {
       "schemaVersion": 1,
       "file": "launchers/settings-hooks.json",
-      "sha256": "84b9191b34cb371fa7829eb846cef043ae8612b04cac6e5683395017708cf020",
+      "sha256": "41e4883c64d7e0676c49e2dc0cbeed2c85ab25e7d3574344d6cd5af4b8e79cfe",
       "source": "packages/design-system/ds-canonical/templates/product-provider-wiring.json + packages/governance/canonical/providers.json",
       "classification": null,
       "destination": null
@@ -919,23 +911,15 @@
     {
       "schemaVersion": 1,
       "file": "manifest.json",
-      "sha256": "9cacf3be73cf7c29805a37035bcbf370a6811bd910157b17f6fece5f8b19371c",
+      "sha256": "bbbc8e873f6190eca96592b7fa98ead61af0f0359036ef70917ea2c269a2a677",
       "source": null,
       "classification": null,
       "destination": null
     },
-    {
-      "schemaVersion": 1,
-      "file": "preamble.md",
-      "sha256": "70f3402061f420c9026d5cd69ac3f070fd3457cb8ad506685372fcda1b2be1fb",
-      "source": "control-plane-genesis-am-only-v1:25b39558cbf352f053948190bb28326a78562f43:packages/design-system/ds-canonical/fork/preamble.md",
-      "classification": null,
-      "destination": null
-    },
     {
       "schemaVersion": 1,
       "file": "providers/claude/hook-config.json",
-      "sha256": "10ef17ced1b1b4dcb55672a24e880296d39b9cf0a6d7e354af633c3ff0e03d4f",
+      "sha256": "6398e6b20f6558392bdce1d7123815042047952be473b8fda6d2491aa1648a05",
       "source": "packages/design-system/ds-canonical/templates/product-provider-wiring.json + providers.json:claude",
       "classification": null,
       "destination": null
@@ -1183,7 +1167,7 @@
     {
       "schemaVersion": 1,
       "file": "providers/codex/hook-config.json",
-      "sha256": "83d373ba11636fd6941f80f9a298056e5c862730275daf623690bf0d6be3582a",
+      "sha256": "697d186cfe0882ee2ce1b02ecc4c3258ab42b125bab6d70c7be868fa271132f7",
       "source": "packages/design-system/ds-canonical/templates/product-provider-wiring.json + providers.json:codex",
       "classification": null,
       "destination": null
@@ -1423,7 +1407,7 @@
     {
       "schemaVersion": 1,
       "file": "references/story-baseline-registry.json",
-      "sha256": "2d24dcee790d72742e91a4f49c2303da02c27fca6733131d235ea29551a80f5a",
+      "sha256": "cac3bbf5adff25302e78ac689c48204986c43ce41eb56161ccee1e14557ba56d",
       "source": "packages/design-system/ds-canonical/references/story-baseline-registry.json",
       "classification": null,
       "destination": null

package/ds-canonical/fork/hooks/check_consumer_code_quality.sh

@@ -133,6 +133,39 @@ if grep -Eq 'layout="primary-header"|layout=\{('\''|")primary-header('\''|")\}'
   if [ -n "$PRIMARY" ] && ! has_rationale '@app-shell-primary-header-allow'; then VIOLATIONS="${VIOLATIONS}${PRIMARY}"; fi
 fi
 
+# 帳號入口 duplicate(2026-07-30 WM F9 layer 3;app-shell.spec.md「帳號入口放置 SSOT」:帳號入口只能出現一次)。
+# 上段攔「宣告 primary-header + SidebarFooter」;本段補 mode 字面不在檔內的 dual-entry 缺口(WM 錨例 =
+# apps/work/src/App.tsx pre-fix 1a26bd1^:SidebarHeader 右上 avatar 帳號選單與 SidebarFooter user 區並存):
+#   header 帳號簽名 = SidebarHeader block 內 <AccountMenu> OR(<DropdownMenuTrigger> + <Avatar>/<ItemAvatar>
+#   + account/logout 語彙);footer user 簽名 = SidebarFooter block 內 <Avatar>/<ItemAvatar>/<AccountMenu>。
+# 零誤判 bound(M23 R9 零誤判簽名 precedent;DS apps/template/src + WM 全 corpus 實測 0 hit、錨例 fire):
+#   - workspace switcher in header(trigger+avatar、無 account/logout 語彙)不中 — 語彙 conjunction;
+#   - mobile Sheet 鏡像(header AccountMenu、footer 無 user 區,app-shell.spec.md Responsive 子句)不中;
+#   - 多 mode demo 檔(primary-header + primary-sidebar 字面並存)skip → 跨 story 誤攔防護,歸 product-ui-audit;
+#   - BODY 已 strip 註解(WM 修復檔 SidebarHeader 註解即含「帳號入口」字樣);local 同名元件不中和 —
+#     duplicate 語義違規與 primitive 來源無關。
+ACCOUNT_DUP=$(printf '%s' "$BODY" | python3 -c '
+import re, sys
+content = sys.stdin.read()
+account = re.compile(r"[Aa]ccount|[Ll]og\s?-?[Oo]ut|LogOut|[Ss]ign\s?-?[Oo]ut|SignOut|登出|個人資料|帳號")
+headers = re.findall(r"<SidebarHeader\b[^>]*>.*?</SidebarHeader>", content, re.DOTALL)
+footers = re.findall(r"<SidebarFooter\b[^>]*>.*?</SidebarFooter>", content, re.DOTALL)
+header_account = any(
+    re.search(r"<AccountMenu\b", b)
+    or (re.search(r"<DropdownMenuTrigger\b", b)
+        and re.search(r"<(Avatar|ItemAvatar)\b", b)
+        and account.search(b))
+    for b in headers)
+footer_user = any(re.search(r"<(Avatar|ItemAvatar|AccountMenu)\b", b) for b in footers)
+multi_mode = ("primary-header" in content) and ("primary-sidebar" in content)
+if header_account and footer_user and not multi_mode:
+    print("DUP")
+' 2>/dev/null) \
+  || governance_hook_integrity_fail 'consumer quality account-entry scanner failed'
+if [ "$ACCOUNT_DUP" = "DUP" ] && ! has_rationale '@account-entry-allow'; then
+  add_violation 'duplicate account entry: SidebarHeader account menu + SidebarFooter user area coexist; app-shell.spec.md 帳號入口只能出現一次(primary-sidebar → SidebarFooter / primary-header → globalHeader 右);escape @account-entry-allow: <rationale>'
+fi
+
 if [ -n "$VIOLATIONS" ]; then
   printf 'GOV-CONSUMER-QUALITY-001:%b\nFile:%s\n' "$VIOLATIONS" "$FILE_PATH" >&2
   exit 2

package/ds-canonical/fork/hooks/check_pattern_invariants.sh

@@ -6,6 +6,7 @@
 #   C.2 inline-action canonical gap(原 check_inline_action_canonical_gap,P1 WARN context)
 #   C.3 primitive wrapper padding(原 check_primitive_wrapper_padding,P0 BLOCK exit 2)
 #   C.4 row slot handcraft(原 check_row_slot_handcraft,P0 BLOCK exit 2)
+#   C.5 弱化 icon hover 階梯(2026-07-30 user 拍板,P0 BLOCK exit 2)
 #
 # Why merge:皆 element-anatomy / overlay-surface SSOT 消費紀律 invariant,共用 INPUT
 # parsing + tsx filter,散裝是 M17 + Anthropic ≤ 15 hook best-practice 偏離。
@@ -17,6 +18,7 @@
 #   C.2: `// @inline-action-gap-allow: <reason>`(any line)
 #   C.3: `// @primitive-padding-allow: <reason>`(檔案前 5 行)
 #   C.4: `// @row-slot-handcraft-allow: <reason>`(any line)
+#   C.5: `// @hover-ramp-allow: <reason>`(any line)
 
 source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
 
@@ -174,6 +176,43 @@ EOF
     ;;
 esac
 
+
+# ── C.5 弱化 icon hover 階梯(P0 BLOCK exit 2;2026-07-30 user 拍板)─────────────
+# Root invariant:hover 往前一階,不跳階。rest \`text-fg-muted\`(neutral-7)的弱化 icon
+# hover 必 \`text-fg-secondary\`(neutral-8),不得直接跳 \`text-foreground\`(neutral-9)。
+# rule owner = inline-action.spec.md「Icon 色彩」段 + tokens/color/semantic.css:53。
+# 世界級:Fluent 2 neutralForeground3Hover === neutralForeground2 / MUI Chip deleteIcon .26→.4。
+# 錨例:2026-04-08 97e62a80 為修「colored Tag 上 fg-muted 不連貫」而 unified 全 variant 繼承文字色,
+# 連中性宿主一起改且未經 user 拍板;primitive 本身也一直跳兩階,四個月無機械防線。
+# rest 已是 fg-secondary 的整列/文字 hover(→ foreground)本身就是一階,不在射程內。
+case "$FILE_PATH" in
+  *components/*.tsx|*patterns/*.tsx|*.css)
+    if ! grep -q '@hover-ramp-allow' <<<"$NEW_CONTENT"; then
+      SKIP_RAMP=$(grep -m 3 -nE 'text-fg-muted[^"'"'"'\`]*hover:text-foreground|hover:text-foreground[^"'"'"'\`]*text-fg-muted' <<<"$NEW_CONTENT" || true)
+      if [ -n "$SKIP_RAMP" ]; then
+        cat >&2 <<EOF
+
+┄┄┄ C.5 check_pattern_invariants — 弱化 icon hover 跳階 BLOCK ┄┄┄
+
+[P0] ${FILE_PATH}
+rest \`text-fg-muted\` 的弱化 icon 直接 hover 到 \`text-foreground\`(跳兩階):
+${SKIP_RAMP}
+
+❌ inline-action.spec.md「Icon 色彩」+ tokens/color/semantic.css:53:
+   弱化 icon hover 後變 \`fg-secondary\`(neutral-8),不是 \`foreground\`(neutral-9)。
+   世界級對照:Fluent 2 neutralForeground3Hover = neutralForeground2 / MUI Chip deleteIcon .26→.4。
+
+修法:\`hover:text-foreground\` → \`hover:text-fg-secondary\`(active 同步);
+      優先直接消費 \`ItemInlineActionButton\`(primitive 已內建正確階梯)而非手刻。
+      真有理由跳階 → 加 \`// @hover-ramp-allow: <rationale>\` 行豁免。
+
+EOF
+        exit 2
+      fi
+    fi
+    ;;
+esac
+
 # ── C.3 primitive wrapper padding(P0 BLOCK exit 2)───────────────────────────
 # File-level allowlist:檔頭前 5 行
 ALLOW_C3=0

package/ds-canonical/fork/hooks/check_sidebar_menu_button_implicit_wrap.sh

@@ -5,9 +5,10 @@
 #   SidebarMenuButton(sidebar.tsx L1036-1043)在沒 asChild 時把所有 children 塞進 <ItemLabel> 單一 span,
 #   Avatar + text-span 都在同 span 內 → 強迫垂直堆疊。
 #
-# Canonical:含 Avatar/ItemAvatar/icon prefix 的 SidebarMenuButton 必用 asChild + <div> wrap,
+# Canonical:含 Avatar/ItemAvatar/icon prefix 的 SidebarMenuButton 必用 asChild + 單一 wrapper
+#   (互動觸發行 <button type="button">,如 UserFooter 帳號選單;純展示 row <div role="group">),
 #   per sidebar.tsx:1025-1027 docblock:「asChild 的 consumer 自行放 icon + label」+ DS canonical
-#   sidebar.stories.tsx#UserFooter 範例 L76-104。
+#   sidebar.stories.tsx#UserFooter 範例。
 #
 # Detection:
 #   `<SidebarMenuButton ...>` (no asChild) ... `<ItemAvatar` or `<Avatar` inside → BLOCKER
@@ -81,7 +82,8 @@ cat >&2 <<'EOF'
 
   ❌ SidebarMenuButton id="..." 直接放 ItemAvatar + span 為 children
 
-  ✅ SidebarMenuButton asChild 包 div role="group" 內含 ItemAvatar + span data-sidebar="menu-label" min-w-0 flex-1 truncate
+  ✅ SidebarMenuButton asChild 包單一 wrapper 內含 ItemAvatar + span data-sidebar="menu-label" min-w-0 flex-1 truncate
+     (wrapper:互動觸發行用 <button type="button">,如 UserFooter 帳號選單;純展示 row 用 <div role="group">)
 
 Or use startIcon prop(自動 layout,不 wrap):
   ✅ SidebarMenuButton startIcon={SomeLucideIcon} 直接 children 為純文字
@@ -90,7 +92,7 @@ Bypass(極罕見):GOVERNANCE_BYPASS_SIDEBAR_MENU_BUTTON_WRAP=1 env var(audit-log
 
 Citation:
   - packages/design-system/src/components/Sidebar/sidebar.tsx:1025-1043(asChild docblock)
-  - packages/design-system/src/components/Sidebar/sidebar.stories.tsx UserFooter L76-104(canonical)
+  - packages/design-system/src/components/Sidebar/sidebar.stories.tsx UserFooter(canonical;帳號選單觸發行)
 EOF
 # 2026-05-31:exit 0 → exit 2(folded-hook-audit:原宣稱 BLOCKER 但 exit 0 = 假 enforcement;
 # SidebarMenuButton implicit-wrap 是 SSOT canonical,verified clean on 現有 sidebar code + 有 env escape)。

package/ds-canonical/fork/launchers/provider-hook-normalization.mjs

@@ -1380,17 +1380,11 @@ export function normalizeProviderHookInput({
   const selectedWriteTransports = matchingWriteTransports(provider, input)
   const shouldParseMutation = selectedWriteTransports.matches.length > 0
     && (
-      event === 'PreToolUse'
-      || (
-        event === 'PostToolUse'
-        && (
-          selectedWriteTransports.matches.length !== 1
-          || postEventCarriesDeclaredTransport(input, selectedWriteTransports.matches[0], {
-            limits,
-            checkpoint,
-          })
-        )
-      )
+      selectedWriteTransports.matches.length !== 1
+      || postEventCarriesDeclaredTransport(input, selectedWriteTransports.matches[0], {
+        limits,
+        checkpoint,
+      })
     )
   if (shouldParseMutation) {
     try {