fix(01-design-tokens-rams-foundation): WR-01 scope @source to mockup files + disable deprecated bare shadow/blur keys

theme/scripts/audit.test.mjs

@@ -18,7 +18,9 @@
  *       offending declaration listed as file:line: declaration
  *   T3  tokens.css drifting below 40 colors         → exit 2 (drift guard)
  *   T4  any --radius-* token other than 0           → exit 2 (drift guard)
- *   T5  real build (dist/rams.css)                  → exit 0
+ *   T5  real build (dist/rams.css)                  → exit 0, and the
+ *       shipped vocabulary carries no bare shadow/blur
+ *       utilities, no off-token radius default (WR-01)
  *   T6  off-token values inside @layer components   → flagged (exit 1)
  *   T7  @layer utilities: only classes used by the
  *       implementation pages are audited (compiled
@@ -207,6 +209,16 @@ writeFileSync(styleAttrPage, `<!DOCTYPE html>
   const r = runAudit([]);
   check('T5 audit of real build → exit 0', r.status === 0,
     `status=${r.status} error=${r.error} out=${r.out.slice(0, 400)}`);
+
+  /* WR-01: the shipped compiled vocabulary carries no prose-minted
+   * bare Rams-forbidden utilities and no off-token radius default. */
+  const dist = readFileSync(join(THEME, 'dist', 'rams.css'), 'utf8');
+  check('T5 no bare .shadow utility in shipped vocabulary', !/\.shadow\{/.test(dist),
+    'bare .shadow compiled into dist/rams.css — prose leakage or a re-enabled bare --shadow key');
+  check('T5 no bare .blur utility in shipped vocabulary', !/\.blur\{/.test(dist),
+    'bare .blur compiled into dist/rams.css — prose leakage or a re-enabled bare --blur key');
+  check('T5 no v3 .25rem radius default anywhere in dist', !/border-radius:\.25rem/.test(dist),
+    'border-radius:.25rem present in dist/rams.css — an off-token radius default escaped');
 }
 
 // T6 — @layer components is implementation-owned: fully audited