mermaid.ts embedded eleven hex literals in its RENDERER_HTML data URL, and qr.ts hardcoded one. All duplicated values from packages/theme/tokens/colors.json. Palette changes drifted silently; the audit recommended single-sourcing through the token JSON. Add a small @morkdeck/theme/values export with a typed colorHex(name) helper that imports tokens/colors.json directly. The CSS variable surface in @morkdeck/theme/css remains the preferred path for styling; colorHex is the escape hatch for literal-string consumers (canvas strokeStyle, SVG color attributes, build-time HTML templating). Rewrite mermaid.ts's RENDERER_HTML as an interpolated template literal using colorHex(base/surface/overlay/text/subtle/highlight.*) and update qr.ts's QR ink generation to use colorHex("text"). Rendered SVG byte-identical to the prior output since the token values haven't changed; visually no regression. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>