@cloudgrid-io/ui 0.6.0 → 0.7.0

package/dist/blocks/entity-status.d.ts

@@ -8,7 +8,7 @@
  *
  * ## The mapping is a table, and the table is the thing a designer edits
  *
- * Nine statuses, five tones. `ENTITY_STATUS_TONE` is the whole mapping and
+ * Ten statuses, six tones. `ENTITY_STATUS_TONE` is the whole mapping and
  * nothing else in this file branches on a status, so retuning what colour
  * `paused` is means editing one line. `ENTITY_STATUS_LABEL` is the same
  * arrangement for the words.
@@ -41,7 +41,7 @@
  *
  * ## Grounds
  *
- * Four tones sit on their own fill. `offline` sits on the card ground with a
+ * Five tones sit on their own fill. `offline` sits on the card ground with a
  * control border instead, which is #111's decision rather than this component's:
  * the muted neutral on a neutral tint measures 2.90:1, under the bar, so absence
  * of state deliberately has no fill of its own.
@@ -55,10 +55,10 @@
  * both tables below and typecheck says so, which is the only arrangement where
  * a half-added status cannot ship.
  */
-export declare const ENTITY_STATUS_ORDER: readonly ["live", "building", "charged", "draft", "paused", "stopped", "archived", "expired", "error"];
+export declare const ENTITY_STATUS_ORDER: readonly ["live", "unhealthy", "building", "charged", "draft", "paused", "stopped", "archived", "expired", "error"];
 export type EntityStatusName = (typeof ENTITY_STATUS_ORDER)[number];
-/** The five families of the state palette. One token pair each. */
-export type EntityStatusTone = "online" | "pending" | "offline" | "expired" | "danger";
+/** The six families of the state palette. One token pair each. */
+export type EntityStatusTone = "online" | "unhealthy" | "pending" | "offline" | "expired" | "danger";
 /**
  * THE MAPPING. Edit this to change what a status looks like.
  *
@@ -80,6 +80,14 @@ export type EntityStatusTone = "online" | "pending" | "offline" | "expired" | "d
  * `live` is the library's green, explicitly not the console's lime: the brand
  * has already spent lime on decoration, so a lime "live" would not read as a
  * signal.
+ *
+ * `unhealthy` is its OWN tone, added 2026-08-25 (#122). Before it existed the
+ * console had nowhere to put `live_unhealthy` and folded it onto `live`, so a
+ * degraded entity rendered green and a broken app looked healthy unless you
+ * read the word. It is deliberately not `expired` and not `danger`: expired is
+ * terminal, danger is failed, and this one is still serving and still fixable.
+ * `--cg-unhealthy` is a real value rather than an alias, so retuning it cannot
+ * move either of them.
  */
 export declare const ENTITY_STATUS_TONE: Record<EntityStatusName, EntityStatusTone>;
 /**

package/dist/blocks/entity-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity-status.d.ts","sourceRoot":"","sources":["../../src/blocks/entity-status.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,wGAUtB,CAAA;AAEV,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEnE,mEAAmE;AACnE,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAA;AAEtF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,EAAE,gBAAgB,CAUzE,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAUhE,CAAA;AAkBD,iBAAS,YAAY,CAAC,EACpB,MAAM,EACN,KAAK,EACL,SAAS,EACT,GAAG,KAAK,EACT,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,GAAG;IAClD,MAAM,EAAE,gBAAgB,CAAA;IACxB,sFAAsF;IACtF,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;CACxB,+BAqCA;AAED,OAAO,EAAE,YAAY,EAAE,CAAA"}
+{"version":3,"file":"entity-status.d.ts","sourceRoot":"","sources":["../../src/blocks/entity-status.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,qHAWtB,CAAA;AAEV,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEnE,kEAAkE;AAClE,MAAM,MAAM,gBAAgB,GACxB,QAAQ,GACR,WAAW,GACX,SAAS,GACT,SAAS,GACT,SAAS,GACT,QAAQ,CAAA;AAEZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,EAAE,gBAAgB,CAWzE,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAehE,CAAA;AAmBD,iBAAS,YAAY,CAAC,EACpB,MAAM,EACN,KAAK,EACL,SAAS,EACT,GAAG,KAAK,EACT,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,GAAG;IAClD,MAAM,EAAE,gBAAgB,CAAA;IACxB,sFAAsF;IACtF,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;CACxB,+BAqCA;AAED,OAAO,EAAE,YAAY,EAAE,CAAA"}

package/dist/blocks/entity-status.js

@@ -10,7 +10,7 @@ import { cn } from "../lib/cloudgrid-cn.js";
  *
  * ## The mapping is a table, and the table is the thing a designer edits
  *
- * Nine statuses, five tones. `ENTITY_STATUS_TONE` is the whole mapping and
+ * Ten statuses, six tones. `ENTITY_STATUS_TONE` is the whole mapping and
  * nothing else in this file branches on a status, so retuning what colour
  * `paused` is means editing one line. `ENTITY_STATUS_LABEL` is the same
  * arrangement for the words.
@@ -43,7 +43,7 @@ import { cn } from "../lib/cloudgrid-cn.js";
  *
  * ## Grounds
  *
- * Four tones sit on their own fill. `offline` sits on the card ground with a
+ * Five tones sit on their own fill. `offline` sits on the card ground with a
  * control border instead, which is #111's decision rather than this component's:
  * the muted neutral on a neutral tint measures 2.90:1, under the bar, so absence
  * of state deliberately has no fill of its own.
@@ -59,6 +59,7 @@ import { cn } from "../lib/cloudgrid-cn.js";
  */
 export const ENTITY_STATUS_ORDER = [
     "live",
+    "unhealthy",
     "building",
     "charged",
     "draft",
@@ -89,9 +90,18 @@ export const ENTITY_STATUS_ORDER = [
  * `live` is the library's green, explicitly not the console's lime: the brand
  * has already spent lime on decoration, so a lime "live" would not read as a
  * signal.
+ *
+ * `unhealthy` is its OWN tone, added 2026-08-25 (#122). Before it existed the
+ * console had nowhere to put `live_unhealthy` and folded it onto `live`, so a
+ * degraded entity rendered green and a broken app looked healthy unless you
+ * read the word. It is deliberately not `expired` and not `danger`: expired is
+ * terminal, danger is failed, and this one is still serving and still fixable.
+ * `--cg-unhealthy` is a real value rather than an alias, so retuning it cannot
+ * move either of them.
  */
 export const ENTITY_STATUS_TONE = {
     live: "online",
+    unhealthy: "unhealthy",
     building: "pending",
     charged: "offline",
     draft: "offline",
@@ -108,6 +118,11 @@ export const ENTITY_STATUS_TONE = {
  */
 export const ENTITY_STATUS_LABEL = {
     live: "Live",
+    // Not "Live, degraded". The word is the whole meaning when the colour is
+    // unfamiliar, and a comma makes it read as a variant of Live rather than as
+    // its own state. A surface that knows more passes `label`, e.g. "Failing
+    // health checks".
+    unhealthy: "Unhealthy",
     building: "Building",
     charged: "Charged",
     draft: "Draft",
@@ -126,6 +141,7 @@ export const ENTITY_STATUS_LABEL = {
  */
 const TONE_STYLE = {
     online: { chip: "border-transparent bg-online-fill", dot: "bg-online" },
+    unhealthy: { chip: "border-transparent bg-unhealthy-fill", dot: "bg-unhealthy" },
     pending: { chip: "border-transparent bg-pending-fill", dot: "bg-pending" },
     expired: { chip: "border-transparent bg-expired-fill", dot: "bg-expired" },
     danger: { chip: "border-transparent bg-danger-fill", dot: "bg-danger" },

package/dist/blocks/entity-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"entity-status.js","sourceRoot":"","sources":["../../src/blocks/entity-status.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,MAAM;IACN,UAAU;IACV,SAAS;IACT,OAAO;IACP,QAAQ;IACR,SAAS;IACT,UAAU;IACV,SAAS;IACT,OAAO;CACC,CAAA;AAOV;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA+C;IAC5E,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,SAAS;IACnB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,SAAS;IACnB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,QAAQ;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAqC;IACnE,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACf,CAAA;AAED;;;;;;GAMG;AACH,MAAM,UAAU,GAA4D;IAC1E,MAAM,EAAE,EAAE,IAAI,EAAE,mCAAmC,EAAE,GAAG,EAAE,WAAW,EAAE;IACvE,OAAO,EAAE,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,EAAE,YAAY,EAAE;IAC1E,OAAO,EAAE,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,EAAE,YAAY,EAAE;IAC1E,MAAM,EAAE,EAAE,IAAI,EAAE,mCAAmC,EAAE,GAAG,EAAE,WAAW,EAAE;IACvE,8DAA8D;IAC9D,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,YAAY,EAAE;CAC5D,CAAA;AAED,SAAS,YAAY,CAAC,EACpB,MAAM,EACN,KAAK,EACL,SAAS,EACT,GAAG,KAAK,EAKT;IACC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAE9B,OAAO,CACL,6BACY,eAAe,iBAIZ,MAAM,eACR,IAAI,EACf,SAAS,EAAE,EAAE,CACX,uIAAuI,EACvI,KAAK,CAAC,IAAI,EACV,SAAS,CACV,KACG,KAAK,aAET,8BAGc,MAAM,eACR,mBAAmB,EAC7B,SAAS,EAAE,EAAE,CACX,gCAAgC,EAChC,KAAK,CAAC,GAAG;gBACT,uEAAuE;gBACvE,uEAAuE;gBACvE,qEAAqE;gBACrE,8CAA8C;gBAC9C,MAAM,KAAK,UAAU,IAAI,2BAA2B,CACrD,GACD,EACD,KAAK,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAChC,CACR,CAAA;AACH,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,CAAA"}
+{"version":3,"file":"entity-status.js","sourceRoot":"","sources":["../../src/blocks/entity-status.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,MAAM;IACN,WAAW;IACX,UAAU;IACV,SAAS;IACT,OAAO;IACP,QAAQ;IACR,SAAS;IACT,UAAU;IACV,SAAS;IACT,OAAO;CACC,CAAA;AAaV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA+C;IAC5E,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,SAAS;IACnB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,SAAS;IACnB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,QAAQ;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAqC;IACnE,IAAI,EAAE,MAAM;IACZ,yEAAyE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,kBAAkB;IAClB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACf,CAAA;AAED;;;;;;GAMG;AACH,MAAM,UAAU,GAA4D;IAC1E,MAAM,EAAE,EAAE,IAAI,EAAE,mCAAmC,EAAE,GAAG,EAAE,WAAW,EAAE;IACvE,SAAS,EAAE,EAAE,IAAI,EAAE,sCAAsC,EAAE,GAAG,EAAE,cAAc,EAAE;IAChF,OAAO,EAAE,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,EAAE,YAAY,EAAE;IAC1E,OAAO,EAAE,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,EAAE,YAAY,EAAE;IAC1E,MAAM,EAAE,EAAE,IAAI,EAAE,mCAAmC,EAAE,GAAG,EAAE,WAAW,EAAE;IACvE,8DAA8D;IAC9D,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,YAAY,EAAE;CAC5D,CAAA;AAED,SAAS,YAAY,CAAC,EACpB,MAAM,EACN,KAAK,EACL,SAAS,EACT,GAAG,KAAK,EAKT;IACC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAE9B,OAAO,CACL,6BACY,eAAe,iBAIZ,MAAM,eACR,IAAI,EACf,SAAS,EAAE,EAAE,CACX,uIAAuI,EACvI,KAAK,CAAC,IAAI,EACV,SAAS,CACV,KACG,KAAK,aAET,8BAGc,MAAM,eACR,mBAAmB,EAC7B,SAAS,EAAE,EAAE,CACX,gCAAgC,EAChC,KAAK,CAAC,GAAG;gBACT,uEAAuE;gBACvE,uEAAuE;gBACvE,qEAAqE;gBACrE,8CAA8C;gBAC9C,MAAM,KAAK,UAAU,IAAI,2BAA2B,CACrD,GACD,EACD,KAAK,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAChC,CACR,CAAA;AACH,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,CAAA"}

package/dist/theme.css

@@ -98,7 +98,8 @@
   --color-danger: var(--cg-danger);
 
   /* ---- state ----
-     What an entity IS: online, offline, pending, expired, and danger above.
+     What an entity IS: online, offline, pending, unhealthy, expired, and danger
+     above.
 
      #111 added the tokens and stopped there, so for one release the state
      palette was reachable only as raw var(--cg-online). That is the shape #30
@@ -117,12 +118,21 @@
      #111's note explains why, and it is a design decision rather than an
      omission: the muted neutral on a neutral tint measures 2.90:1, under the
      3:1 bar, so an unplugged chip uses the card ground and border-control
-     instead. A utility here would have to invent the value it maps. */
+     instead. A utility here would have to invent the value it maps.
+
+     unhealthy (#122) arrives with its token rather than a release later, which
+     is the whole point of the guard that walks this block. #113 shipped the
+     `indicator` group with no bridge at all and nothing went red, because that
+     guard walks the `state` group and only that one. A token whose utility
+     lands in a later version is a token the first consumer reaches for and
+     does not find. */
   --color-online: var(--cg-online);
   --color-online-fill: var(--cg-online-fill);
   --color-offline: var(--cg-offline);
   --color-pending: var(--cg-pending);
   --color-pending-fill: var(--cg-pending-fill);
+  --color-unhealthy: var(--cg-unhealthy);
+  --color-unhealthy-fill: var(--cg-unhealthy-fill);
   --color-expired: var(--cg-expired);
   --color-expired-fill: var(--cg-expired-fill);
   --color-danger-fill: var(--cg-danger-fill);

package/dist/tokens/base.json

@@ -52,7 +52,7 @@
     }
   },
   "state": {
-    "$description": "state: what an entity IS, not what it means editorially.\n\nAdopted from the Console rather than invented, 2026-08-24 (#96). The Console\nhad already chosen and contrast-tested these — --color-live and\n--color-attention — while the brand carried no state colour at all beyond the\ndanger placeholder. Taking its values means the Console's appearance does not\nchange when it starts consuming this package, and the two stop disagreeing\nabout what 'live' looks like.\n\nEach carries per-surface values in surface-panel and surface-ink, for the same\nreason danger does: measured against all three grounds, no single value works.\nThe live green is 1.72:1 on the purple panel, and the brand's own lime is\n1.54:1 on white. A flat value would be invisible somewhere.\n\nNo --cg-offline-fill, deliberately. Measured, the pair does not work: the\nmuted neutral on a neutral tint is 2.90:1, under the 3:1 bar for a dot or a\nborder. Rather than invent a value to satisfy the ratio, an unplugged chip\nuses the existing surface-card ground with border-control, and --cg-offline\nis the dot on that ground, where it measures 3.28:1. Absence of state should\nnot need a colour of its own.\n\npending joined them on 2026-08-24 (#114) as an ALIAS of expired rather than a\nnew value. Same amber today, separate name, so the two can diverge later with\na one-line edit here and no change in any consumer. Aliases compile to var(),\nso the flip survives.",
+    "$description": "state: what an entity IS, not what it means editorially.\n\nAdopted from the Console rather than invented, 2026-08-24 (#96). The Console\nhad already chosen and contrast-tested these — --color-live and\n--color-attention — while the brand carried no state colour at all beyond the\ndanger placeholder. Taking its values means the Console's appearance does not\nchange when it starts consuming this package, and the two stop disagreeing\nabout what 'live' looks like.\n\nEach carries per-surface values in surface-panel and surface-ink, for the same\nreason danger does: measured against all three grounds, no single value works.\nThe live green is 1.72:1 on the purple panel, and the brand's own lime is\n1.54:1 on white. A flat value would be invisible somewhere.\n\nNo --cg-offline-fill, deliberately. Measured, the pair does not work: the\nmuted neutral on a neutral tint is 2.90:1, under the 3:1 bar for a dot or a\nborder. Rather than invent a value to satisfy the ratio, an unplugged chip\nuses the existing surface-card ground with border-control, and --cg-offline\nis the dot on that ground, where it measures 3.28:1. Absence of state should\nnot need a colour of its own.\n\npending joined them on 2026-08-24 (#114) as an ALIAS of expired rather than a\nnew value. Same amber today, separate name, so the two can diverge later with\na one-line edit here and no change in any consumer. Aliases compile to var(),\nso the flip survives.\n\nunhealthy joined them on 2026-08-25 (#122) as a REAL value, not an alias, and\nit is the one tone here that was searched for rather than adopted. Founder\ndecision: expired is terminal, unhealthy is live-and-fixable, and sharing a\ntoken would mean retuning one silently retunes the other. It is a warmer,\nbrighter gold on the same ramp as the amber rather than a new hue family,\nbecause green/amber/red is the traffic light an operator already reads and\n'serving but degraded' is its middle rung. Its own note carries the numbers\nand the three families that were measured and rejected.",
     "online": {
       "$value": "#00a05c",
       "$type": "color",
@@ -91,6 +91,16 @@
         }
       }
     },
+    "unhealthy": {
+      "$value": "#7F7301",
+      "$type": "color",
+      "$description": "Serving, and degraded. The entity is up and answering; its health checks are not. 4.82:1 on white and 4.46:1 on its own fill — an indicator, like every tone here, never body text.\n\nA REAL value rather than an alias, which is the whole decision. Founder, 2026-08-25, issue #122: expired is terminal, unhealthy is live-and-fixable, and one token for both would mean a designer retuning one silently retunes the other. That is the same reasoning that gave pending its own NAME in #114 — this one also needs its own VALUE, because it must not read as either of the states it sits between.\n\nWHY A GOLD, measured rather than asserted. Green/amber/red is the traffic light an operator already reads, and this palette's amber is spent on two states that are both benign: pending is transitional, expired is terminal. Unhealthy is the warning rung, so it takes the warmer, brighter, more saturated seat on the same ramp rather than a different hue family.\n\nThe alternatives were searched, not guessed, over every hue at 5-degree steps against all four existing tones on all three surfaces:\n\n  magenta h339   13.7 from danger on the panel, where danger is a pale pink.\n                 The one confusion that matters most, and a new palette worst.\n  azure   h235   the best normal-vision numbers of anything measured (21.5),\n                 and 1.2 from panel offline for a deuteranope — a degraded\n                 entity would be indistinguishable from a stopped one.\n  chartreuse     10-14 from --cg-secondary and --cg-volt. It IS the brand lime,\n                 and #114 already ruled a lime cannot signal state.\n\ndE2000 on white: online 28.4, offline 26.6, expired/pending 22.3, danger 43.1. The tightest pair is expired, as expected for the neighbouring rung, and 22.3 is wider than the tightest pair this palette already ships on white (19.4, expired/danger).\n\nKNOWN, and recorded rather than tuned away: on ink the pair is 18.3, which is a new worst for that surface (was 25.3). It stays above the palette's global floor of 16.5, and buying more would mean walking into --cg-secondary (16.5 away) or --cg-volt (17.8). A light amber and a light gold have the least room on a dark ground; that is the cost of putting them on one ramp deliberately.",
+      "$extensions": {
+        "io.cloudgrid": {
+          "css": "--cg-unhealthy"
+        }
+      }
+    },
     "online-fill": {
       "$value": "#e6f7ef",
       "$type": "color",
@@ -120,6 +130,16 @@
         }
       }
     },
+    "unhealthy-fill": {
+      "$value": "#fdf6df",
+      "$type": "color",
+      "$description": "The chip ground for unhealthy. --cg-unhealthy measures 4.46:1 on it.\n\nA pale tint of its own foreground, in the same family as online-fill and expired-fill, so the five chips read as one set rather than as four tints and an exception. It is deliberately NOT expired-fill: a shared ground would put the two warm states on the same card and undo half of what the separate foreground buys.",
+      "$extensions": {
+        "io.cloudgrid": {
+          "css": "--cg-unhealthy-fill"
+        }
+      }
+    },
     "danger-fill": {
       "$value": "#fceded",
       "$type": "color",

package/dist/tokens/surface-ink.json

@@ -134,7 +134,7 @@
     }
   },
   "state": {
-    "$description": "state: the per-surface values for online/offline/expired. Same necessity as danger — measured, not assumed. pending is an alias of expired (#114), declared here so it flips rather than freezing to the base scope.",
+    "$description": "state: the per-surface values for online/offline/expired. Same necessity as danger — measured, not assumed. pending is an alias of expired (#114), declared here so it flips rather than freezing to the base scope. unhealthy (#122) is a real value rather than an alias, and needs the same per-surface treatment for the same reason every other tone here does: its base gold is unreadable on this ground.",
     "online": {
       "$value": "#5FD99A",
       "$type": "color",
@@ -174,6 +174,16 @@
         }
       }
     },
+    "unhealthy": {
+      "$value": "#F1DC03",
+      "$type": "color",
+      "$description": "11.35:1 on #222, 8.88:1 on its own fill. Ink has headroom, so the gold stays a gold instead of washing to cream.\n\nThis is the tightest the tone gets anywhere: 18.3 from expired, which is a new worst pair for this surface (was 25.3, offline/danger) while staying above the palette's global floor of 16.5. Recorded rather than tuned away — a light amber and a light gold have the least room on a dark ground, and the next 2 points of separation would walk into --cg-secondary (16.5 away) or --cg-volt (17.8). The pair that matters most is unaffected: 31.3 from online.",
+      "$extensions": {
+        "io.cloudgrid": {
+          "css": "--cg-unhealthy"
+        }
+      }
+    },
     "online-fill": {
       "$value": "rgba(255, 255, 255, 0.08)",
       "$type": "color",
@@ -203,6 +213,16 @@
         }
       }
     },
+    "unhealthy-fill": {
+      "$value": "rgba(255, 255, 255, 0.08)",
+      "$type": "color",
+      "$description": "Translucent white; the ink foreground measures 11.42:1 on it.",
+      "$extensions": {
+        "io.cloudgrid": {
+          "css": "--cg-unhealthy-fill"
+        }
+      }
+    },
     "danger-fill": {
       "$value": "rgba(255, 255, 255, 0.08)",
       "$type": "color",

package/dist/tokens/surface-panel.json

@@ -118,7 +118,7 @@
     }
   },
   "state": {
-    "$description": "state: the per-surface values for online/offline/expired. Same necessity as danger — measured, not assumed. pending is an alias of expired (#114), declared here so it flips rather than freezing to the base scope.",
+    "$description": "state: the per-surface values for online/offline/expired. Same necessity as danger — measured, not assumed. pending is an alias of expired (#114), declared here so it flips rather than freezing to the base scope. unhealthy (#122) is a real value rather than an alias, and needs the same per-surface treatment for the same reason every other tone here does: its base gold is unreadable on this ground.",
     "online": {
       "$value": "#C8F5DC",
       "$type": "color",
@@ -158,6 +158,16 @@
         }
       }
     },
+    "unhealthy": {
+      "$value": "#F7E20C",
+      "$type": "color",
+      "$description": "4.41:1 on the purple, 3.27:1 on its own fill. The source gold is 1.09:1 on this ground — invisible, same class as the danger override.\n\nThis is the surface that DECIDED the value. A dot on a panel chip has to clear 3:1 against rgba(255,255,255,0.16) over #5a47f0, whose relative luminance is 0.192; that forces the dot's own luminance above 0.677, i.e. Lab L >= 86, which is why every state value here is a near-white tint. Four already occupy that sliver at hues 29, 81, 159 and 297, and a fifth has to fit between them. The gold sits at hue 97, 20.0 from expired and 29.5 from online.\n\nIt is louder than its four siblings, deliberately: a warning that recedes is not doing its job, and chroma is the only axis left once lightness is pinned by the contrast floor.",
+      "$extensions": {
+        "io.cloudgrid": {
+          "css": "--cg-unhealthy"
+        }
+      }
+    },
     "online-fill": {
       "$value": "rgba(255, 255, 255, 0.16)",
       "$type": "color",
@@ -187,6 +197,16 @@
         }
       }
     },
+    "unhealthy-fill": {
+      "$value": "rgba(255, 255, 255, 0.16)",
+      "$type": "color",
+      "$description": "Translucent white rather than a tint, like every other chip ground here; the panel foreground measures 4.33:1 on it. Written out rather than aliased to online-fill for the same reason the others are: four tokens that happen to share a value are not one token.",
+      "$extensions": {
+        "io.cloudgrid": {
+          "css": "--cg-unhealthy-fill"
+        }
+      }
+    },
     "danger-fill": {
       "$value": "rgba(255, 255, 255, 0.16)",
       "$type": "color",

package/dist/tokens.css

@@ -98,7 +98,16 @@
      pending joined them on 2026-08-24 (#114) as an ALIAS of expired rather than a
      new value. Same amber today, separate name, so the two can diverge later with
      a one-line edit here and no change in any consumer. Aliases compile to var(),
-     so the flip survives. */
+     so the flip survives.
+
+     unhealthy joined them on 2026-08-25 (#122) as a REAL value, not an alias, and
+     it is the one tone here that was searched for rather than adopted. Founder
+     decision: expired is terminal, unhealthy is live-and-fixable, and sharing a
+     token would mean retuning one silently retunes the other. It is a warmer,
+     brighter gold on the same ramp as the amber rather than a new hue family,
+     because green/amber/red is the traffic light an operator already reads and
+     'serving but degraded' is its middle rung. Its own note carries the numbers
+     and the three families that were measured and rejected. */
   /*
      Serving. From the Console's --color-live. 3.40:1 on white — clears the 3:1 bar for an indicator, which is all this is ever used as. Never body text on white. */
   --cg-online: #00a05c;
@@ -115,6 +124,27 @@
 
      Founder decision 2026-08-24, issue #114: "building is like something in progress, something in between amber and yellow and orange." */
   --cg-pending: var(--cg-expired);
+  /*
+     Serving, and degraded. The entity is up and answering; its health checks are not. 4.82:1 on white and 4.46:1 on its own fill — an indicator, like every tone here, never body text.
+
+     A REAL value rather than an alias, which is the whole decision. Founder, 2026-08-25, issue #122: expired is terminal, unhealthy is live-and-fixable, and one token for both would mean a designer retuning one silently retunes the other. That is the same reasoning that gave pending its own NAME in #114 — this one also needs its own VALUE, because it must not read as either of the states it sits between.
+
+     WHY A GOLD, measured rather than asserted. Green/amber/red is the traffic light an operator already reads, and this palette's amber is spent on two states that are both benign: pending is transitional, expired is terminal. Unhealthy is the warning rung, so it takes the warmer, brighter, more saturated seat on the same ramp rather than a different hue family.
+
+     The alternatives were searched, not guessed, over every hue at 5-degree steps against all four existing tones on all three surfaces:
+
+       magenta h339   13.7 from danger on the panel, where danger is a pale pink.
+                      The one confusion that matters most, and a new palette worst.
+       azure   h235   the best normal-vision numbers of anything measured (21.5),
+                      and 1.2 from panel offline for a deuteranope — a degraded
+                      entity would be indistinguishable from a stopped one.
+       chartreuse     10-14 from --cg-secondary and --cg-volt. It IS the brand lime,
+                      and #114 already ruled a lime cannot signal state.
+
+     dE2000 on white: online 28.4, offline 26.6, expired/pending 22.3, danger 43.1. The tightest pair is expired, as expected for the neighbouring rung, and 22.3 is wider than the tightest pair this palette already ships on white (19.4, expired/danger).
+
+     KNOWN, and recorded rather than tuned away: on ink the pair is 18.3, which is a new worst for that surface (was 25.3). It stays above the palette's global floor of 16.5, and buying more would mean walking into --cg-secondary (16.5 away) or --cg-volt (17.8). A light amber and a light gold have the least room on a dark ground; that is the cost of putting them on one ramp deliberately. */
+  --cg-unhealthy: #7F7301;
   /*
      From the Console's --color-live-fill. --cg-online measures 3.06:1 on it. */
   --cg-online-fill: #e6f7ef;
@@ -124,6 +154,11 @@
   /*
      The chip ground for pending, aliased to expired's for the same reason the foreground is. Splitting pending from expired later means editing these two entries and nothing else. */
   --cg-pending-fill: var(--cg-expired-fill);
+  /*
+     The chip ground for unhealthy. --cg-unhealthy measures 4.46:1 on it.
+
+     A pale tint of its own foreground, in the same family as online-fill and expired-fill, so the five chips read as one set rather than as four tints and an exception. It is deliberately NOT expired-fill: a shared ground would put the two warm states on the same card and undo half of what the separate foreground buys. */
+  --cg-unhealthy-fill: #fdf6df;
   /*
      From the Console's --color-error-fill. --cg-danger measures 3.72:1 on it. danger had no fill before; a chip needs one. */
   --cg-danger-fill: #fceded;
@@ -388,7 +423,7 @@
   --cg-danger: #FFDAD6;
 
   /* ---- state ----
-     state: the per-surface values for online/offline/expired. Same necessity as danger — measured, not assumed. pending is an alias of expired (#114), declared here so it flips rather than freezing to the base scope. */
+     state: the per-surface values for online/offline/expired. Same necessity as danger — measured, not assumed. pending is an alias of expired (#114), declared here so it flips rather than freezing to the base scope. unhealthy (#122) is a real value rather than an alias, and needs the same per-surface treatment for the same reason every other tone here does: its base gold is unreadable on this ground. */
   /*
      4.88:1 on the purple. The source green is 1.72:1 here — invisible, same class as the danger override. */
   --cg-online: #C8F5DC;
@@ -401,6 +436,13 @@
   /*
      Aliased to expired, which is 4.68:1 on the purple. Declared here as well as at :root because an alias is substituted where it is DECLARED — a :root-only pending would freeze to the white-surface amber and stop flipping, with no error. */
   --cg-pending: var(--cg-expired);
+  /*
+     4.41:1 on the purple, 3.27:1 on its own fill. The source gold is 1.09:1 on this ground — invisible, same class as the danger override.
+
+     This is the surface that DECIDED the value. A dot on a panel chip has to clear 3:1 against rgba(255,255,255,0.16) over #5a47f0, whose relative luminance is 0.192; that forces the dot's own luminance above 0.677, i.e. Lab L >= 86, which is why every state value here is a near-white tint. Four already occupy that sliver at hues 29, 81, 159 and 297, and a fifth has to fit between them. The gold sits at hue 97, 20.0 from expired and 29.5 from online.
+
+     It is louder than its four siblings, deliberately: a warning that recedes is not doing its job, and chroma is the only axis left once lightness is pinned by the contrast floor. */
+  --cg-unhealthy: #F7E20C;
   /*
      Translucent white rather than a tint; the panel foreground measures 3.62:1 on it. */
   --cg-online-fill: rgba(255, 255, 255, 0.16);
@@ -410,6 +452,9 @@
   /*
      Aliased to expired-fill. Declared per scope for the same reason the foreground is. */
   --cg-pending-fill: var(--cg-expired-fill);
+  /*
+     Translucent white rather than a tint, like every other chip ground here; the panel foreground measures 4.33:1 on it. Written out rather than aliased to online-fill for the same reason the others are: four tokens that happen to share a value are not one token. */
+  --cg-unhealthy-fill: rgba(255, 255, 255, 0.16);
   /*
      Translucent white rather than a tint; the panel foreground measures 3.35:1 on it. */
   --cg-danger-fill: rgba(255, 255, 255, 0.16);
@@ -451,7 +496,7 @@
   --cg-danger: #FF8A80;
 
   /* ---- state ----
-     state: the per-surface values for online/offline/expired. Same necessity as danger — measured, not assumed. pending is an alias of expired (#114), declared here so it flips rather than freezing to the base scope. */
+     state: the per-surface values for online/offline/expired. Same necessity as danger — measured, not assumed. pending is an alias of expired (#114), declared here so it flips rather than freezing to the base scope. unhealthy (#122) is a real value rather than an alias, and needs the same per-surface treatment for the same reason every other tone here does: its base gold is unreadable on this ground. */
   /*
      9.00:1 on #222. Ink has headroom, so this stays a recognisable green rather than washing to mint. */
   --cg-online: #5FD99A;
@@ -462,6 +507,11 @@
   /*
      Aliased to expired, which is 8.63:1 on #222. Declared here as well as at :root because an alias is substituted where it is DECLARED — a :root-only pending would freeze to the white-surface amber and stop flipping, with no error. */
   --cg-pending: var(--cg-expired);
+  /*
+     11.35:1 on #222, 8.88:1 on its own fill. Ink has headroom, so the gold stays a gold instead of washing to cream.
+
+     This is the tightest the tone gets anywhere: 18.3 from expired, which is a new worst pair for this surface (was 25.3, offline/danger) while staying above the palette's global floor of 16.5. Recorded rather than tuned away — a light amber and a light gold have the least room on a dark ground, and the next 2 points of separation would walk into --cg-secondary (16.5 away) or --cg-volt (17.8). The pair that matters most is unaffected: 31.3 from online. */
+  --cg-unhealthy: #F1DC03;
   /* Translucent white; the ink foreground measures 7.04:1 on it. */
   --cg-online-fill: rgba(255, 255, 255, 0.08);
   /* Translucent white; the ink foreground measures 6.76:1 on it. */
@@ -469,6 +519,8 @@
   /*
      Aliased to expired-fill. Declared per scope for the same reason the foreground is. */
   --cg-pending-fill: var(--cg-expired-fill);
+  /* Translucent white; the ink foreground measures 11.42:1 on it. */
+  --cg-unhealthy-fill: rgba(255, 255, 255, 0.08);
   /* Translucent white; the ink foreground measures 5.45:1 on it. */
   --cg-danger-fill: rgba(255, 255, 255, 0.08);
 

package/dist/tokens.json

@@ -12,9 +12,11 @@
       "--cg-offline": "var(--cg-neutral-500)",
       "--cg-expired": "#b0662a",
       "--cg-pending": "var(--cg-expired)",
+      "--cg-unhealthy": "#7F7301",
       "--cg-online-fill": "#e6f7ef",
       "--cg-expired-fill": "#fdf3e0",
       "--cg-pending-fill": "var(--cg-expired-fill)",
+      "--cg-unhealthy-fill": "#fdf6df",
       "--cg-danger-fill": "#fceded",
       "--cg-primary-press": "#4b39db",
       "--cg-primary-tint": "#eeecfe",
@@ -147,9 +149,11 @@
       "--cg-offline": "#D9D4FB",
       "--cg-expired": "#FFE2B8",
       "--cg-pending": "var(--cg-expired)",
+      "--cg-unhealthy": "#F7E20C",
       "--cg-online-fill": "rgba(255, 255, 255, 0.16)",
       "--cg-expired-fill": "rgba(255, 255, 255, 0.16)",
       "--cg-pending-fill": "var(--cg-expired-fill)",
+      "--cg-unhealthy-fill": "rgba(255, 255, 255, 0.16)",
       "--cg-danger-fill": "rgba(255, 255, 255, 0.16)",
       "--cg-hover": "rgba(255, 255, 255, 0.10)"
     },
@@ -172,9 +176,11 @@
       "--cg-offline": "#9A9A9A",
       "--cg-expired": "#F0B45E",
       "--cg-pending": "var(--cg-expired)",
+      "--cg-unhealthy": "#F1DC03",
       "--cg-online-fill": "rgba(255, 255, 255, 0.08)",
       "--cg-expired-fill": "rgba(255, 255, 255, 0.08)",
       "--cg-pending-fill": "var(--cg-expired-fill)",
+      "--cg-unhealthy-fill": "rgba(255, 255, 255, 0.08)",
       "--cg-danger-fill": "rgba(255, 255, 255, 0.08)",
       "--cg-hover": "rgba(255, 255, 255, 0.06)"
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloudgrid-io/ui",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "CloudGrid design system: React components, brand design tokens, Tailwind theme, self-hosted fonts.",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",