feat(token-sets): denhaag declares its bridge tokens from its own vendored source

REUSE.toml

@@ -225,3 +225,31 @@ path = "scripts/sources/denhaag/*.css"
 precedence = "override"
 SPDX-FileCopyrightText = "Gemeente Den Haag"
 SPDX-License-Identifier = "EUPL-1.2"
+
+# The Den Haag token set and the brand files it is generated from. These are
+# COMPOSITE: the palette, the component mapping and the ramp are Den Haag's own
+# values, read off the vendored CSS above, while the role layer around them and
+# the --nldesign-* semantic layer are ours. Both halves are EUPL-1.2, so the
+# licence identifier the blanket entry gives them was already right; the
+# copyright line was not, because it named only us. Two holders, one licence.
+#
+# `precedence = "override"` for the same reason the entry above uses it: these
+# files carry no SPDX header of their own (the CSS is written by
+# scripts/generate-brand-set.mjs and an SPDX comment is not valid JSON), so
+# without this they silently inherit a copyright line that leaves Den Haag out.
+#
+# css/tokens/rotterdam.css has the same shape with no entry of its own. That
+# predates this change and is not fixed here.
+[[annotations]]
+path = [
+    "css/tokens/denhaag.css",
+    "css/tokens/dark/denhaag.css",
+    "scripts/brands/denhaag.json",
+    "scripts/brands/denhaag.components.json",
+]
+precedence = "override"
+SPDX-FileCopyrightText = [
+    "2026 Conduction B.V. <info@conduction.nl>",
+    "Gemeente Den Haag",
+]
+SPDX-License-Identifier = "EUPL-1.2"

css/public-bridge.css

@@ -23,11 +23,12 @@
  *
  * MEASURED COVERAGE (a test recomputes these from token-sets.json and
  * css/tokens/, and fails when they drift):
- *   coverage: listed=59 roleLayer=25 nldesignOnly=12 denhaagComponents=17
- * Of the listed sets, 25 carry the full `--utrecht-*` role layer, 12 declare
- * only `--nldesign-*`, and 17 declare Den Haag component properties. No set
- * declares a case card property; the Den Haag section at the end of this
- * block gives every set one.
+ *   coverage: listed=59 roleLayer=26 nldesignOnly=11 denhaagComponents=18
+ * Of the listed sets, 26 carry the full `--utrecht-*` role layer, 11 declare
+ * only `--nldesign-*`, and 18 declare Den Haag component properties. Two sets
+ * declare a case card property of their own, `cunningham` and `denhaag`; the
+ * Den Haag section at the end of this block gives every other set one, and
+ * fills the properties those two leave out.
  *
  * WHO LINKS THIS FILE. Portaliq does not link it yet. Its change
  * `site-links-the-theme-bridge` (portaliq, open) adds the link, before the set.

docs/features/public-portals-as-consumers.md

@@ -50,10 +50,10 @@ Measured coverage of the listed sets (`token-sets.json`, 59 sets):
 
 | What a set declares | Sets |
 | --- | --- |
-| the full `--utrecht-*` role layer | 25 |
-| only `--nldesign-*` | 12 |
-| Den Haag component properties | 17 |
-| a case card property | 0 |
+| the full `--utrecht-*` role layer | 26 |
+| only `--nldesign-*` | 11 |
+| Den Haag component properties | 18 |
+| a case card property | 2 |
 
 ### The Den Haag components
 

docs/reference/contrast-report.json

@@ -62,8 +62,8 @@
         },
         "denhaag": {
             "verdict": "pass",
-            "textRatio": 5.39,
-            "uiRatio": 5.39,
+            "textRatio": 4.66,
+            "uiRatio": 4.66,
             "textThreshold": 4.5,
             "uiThreshold": 3.0
         },

docs/reference/contrast-report.md

@@ -26,7 +26,7 @@ system reads `--nldesign-*` tokens, computed by `ContrastService` over
 | conduction-new | 9.08:1 | 4.5:1 | 9.08:1 | 3.0:1 | pass |
 | cunningham | 7.80:1 | 4.5:1 | 6.02:1 | 3.0:1 | pass |
 | demodam | 4.60:1 | 4.5:1 | 4.56:1 | 3.0:1 | pass |
-| denhaag | 5.39:1 | 4.5:1 | 5.39:1 | 3.0:1 | pass |
+| denhaag | 4.66:1 | 4.5:1 | 4.66:1 | 3.0:1 | pass |
 | dinkelland | 5.46:1 | 4.5:1 | 5.46:1 | 3.0:1 | pass |
 | drechterland | 5.74:1 | 4.5:1 | 5.74:1 | 3.0:1 | pass |
 | duiven | 7.13:1 | 4.5:1 | 7.13:1 | 3.0:1 | pass |

docs/reference/token-set-coverage.md

@@ -39,7 +39,7 @@ that lowers the allow-list count with nothing fixed, so it has to be written dow
 | conduction-new | 26/87 | self-hosted | no (known) | pass |
 | cunningham | n/a | declared | no (known) | pass |
 | demodam | 21/87 | self-hosted | no (known) | pass |
-| denhaag | 0/87 | self-hosted | yes | pass |
+| denhaag | 81/87 | declared | yes | pass |
 | dinkelland | 53/87 | self-hosted | no (known) | pass |
 | drechterland | 19/87 | system | yes | pass |
 | duiven | 10/87 | self-hosted | no (known) | pass |
@@ -91,8 +91,8 @@ that lowers the allow-list count with nothing fixed, so it has to be written dow
 | zwolle | 0/87 | declared | no (known) | pass |
 
 - 57 sets measured; 23 pass every gated dimension (font, logo, contrast).
-- bridge (measured, NOT gated): 9 of 53 bridged sets declare none of the 87 --utrecht-* names; median 21.
-- font: 16 declared, 37 self-hosted, 4 system.
+- bridge (measured, NOT gated): 8 of 53 bridged sets declare none of the 87 --utrecht-* names; median 21.
+- font: 17 declared, 36 self-hosted, 4 system.
 - logo: 34 of 57 point Nextcloud at no logo.
 - contrast: 0 of 57 do not pass.