fix(rules): make ds-fixed-width rule fire on absolute paths + clarify hex warn

Greptile review on PR #14 caught three real issues:

1. ds-arbitrary-fixed-width-in-ds-component used a ^-anchored file_path
   pattern that never matched at runtime — Claude Code passes absolute
   paths like /home/user/repo/src/components/ui/foo.tsx, but ^src/ only
   anchors to start-of-string. All 56 tests passed because fixtures used
   relative paths; the rule was silently inert in production. Switch to
   (^|/)src/components/ui/ so both relative and absolute paths trigger
   it. Add a regression test covering an absolute fixture path.

2. ds-raw-hex-color-in-source description started with "Block" while
   action is warn — confused both maintainers reading the manifest and
   end-users seeing the runtime stderr. Description now says "Warn".

3. The design-system/ and design-tokens not_pattern exemptions had no
   test coverage. Added two fixtures so a future regex narrow-down that
   broke them would fail CI.

Tests: 59/59 passing (was 56/56; added 3 regression cases).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: lapc506

hooks/rules/rules.json

@@ -701,7 +701,7 @@
     "match": [
       {
         "field": "file_path",
-        "pattern": "^src/components/ui/"
+        "pattern": "(^|/)src/components/ui/"
       },
       {
         "field": "content",
@@ -733,6 +733,16 @@
         },
         "expected_exit": 2
       },
+      {
+        "name": "blocks-w-pixel-in-ui-button-absolute-path",
+        "input": {
+          "tool_input": {
+            "file_path": "/home/user/repo/src/components/ui/button.tsx",
+            "content": "<button className=\"w-[120px]\">x</button>"
+          }
+        },
+        "expected_exit": 2
+      },
       {
         "name": "allows-w-pixel-outside-ds",
         "input": {
@@ -767,7 +777,7 @@
   },
   {
     "id": "ds-raw-hex-color-in-source",
-    "description": "Block raw hex color literals in TSX/TS source — colors must come from Tailwind tokens (dojo-primary-*, etc.)",
+    "description": "Warn on raw hex color literals in TSX/TS source — colors must come from Tailwind tokens (dojo-primary-*, etc.)",
     "applies_to": [
       "Edit",
       "Write",
@@ -841,6 +851,26 @@
         },
         "expected_exit": 0
       },
+      {
+        "name": "allows-design-system-folder",
+        "input": {
+          "tool_input": {
+            "file_path": "src/design-system/tokens.ts",
+            "content": "export const PRIMARY = \"#C980FC\""
+          }
+        },
+        "expected_exit": 0
+      },
+      {
+        "name": "allows-design-tokens-file",
+        "input": {
+          "tool_input": {
+            "file_path": "src/lib/design-tokens.ts",
+            "content": "export const LILAC = \"#C980FC\""
+          }
+        },
+        "expected_exit": 0
+      },
       {
         "name": "allows-bypass-marker",
         "input": {

hooks/rules/rules.yaml

@@ -534,8 +534,12 @@
   description: Block arbitrary fixed widths (w-[Xpx]) inside DS components — they must be flexible (w-full + max-w)
   applies_to: [Edit, Write, MultiEdit]
   match:
+    # Anchor on start-of-string OR a leading "/" so the rule fires for both
+    # relative paths ("src/components/ui/...") and absolute paths
+    # ("/home/user/repo/src/components/ui/..."). Claude Code's Edit/Write
+    # tools may pass either form at runtime.
     - field: file_path
-      pattern: '^src/components/ui/'
+      pattern: '(^|/)src/components/ui/'
     - field: content
       # Require the `w` to NOT be preceded by a letter/dash so we don't
       # mis-flag legitimate composite utilities like max-w-[200px] or
@@ -567,6 +571,15 @@
           file_path: 'src/components/ui/card.tsx'
           content: '<div className="w-[300px] p-4">y</div>'
       expected_exit: 2
+    # Regression: Claude Code passes absolute paths to Edit/Write at runtime.
+    # Without the (^|/) anchor the rule would silently allow these (the bug
+    # Greptile flagged in PR #14).
+    - name: blocks-w-pixel-in-ui-button-absolute-path
+      input:
+        tool_input:
+          file_path: '/home/user/repo/src/components/ui/button.tsx'
+          content: '<button className="w-[120px]">x</button>'
+      expected_exit: 2
     - name: allows-w-pixel-outside-ds
       input:
         tool_input:
@@ -587,7 +600,7 @@
       expected_exit: 0
 
 - id: ds-raw-hex-color-in-source
-  description: Block raw hex color literals in TSX/TS source — colors must come from Tailwind tokens (dojo-primary-*, etc.)
+  description: Warn on raw hex color literals in TSX/TS source — colors must come from Tailwind tokens (dojo-primary-*, etc.)
   applies_to: [Edit, Write, MultiEdit]
   match:
     - field: file_path
@@ -641,6 +654,21 @@
           file_path: 'src/components/foo.test.tsx'
           content: 'expect(color).toBe("#FF7151")'
       expected_exit: 0
+    # Lock in the design-system/ exemption so a future regex tweak that
+    # accidentally narrows not_pattern fails this test.
+    - name: allows-design-system-folder
+      input:
+        tool_input:
+          file_path: 'src/design-system/tokens.ts'
+          content: 'export const PRIMARY = "#C980FC"'
+      expected_exit: 0
+    # Lock in the design-tokens exemption (matches both folder and filename).
+    - name: allows-design-tokens-file
+      input:
+        tool_input:
+          file_path: 'src/lib/design-tokens.ts'
+          content: 'export const LILAC = "#C980FC"'
+      expected_exit: 0
     - name: allows-bypass-marker
       input:
         tool_input: