codehere 0.7.1 → 1.0.1

package/dist/infrastructure/protocols/ui/tokens.js

@@ -0,0 +1,96 @@
+/**
+ * The design tokens, in one place, for every page the daemon serves.
+ *
+ * Values AND names are DESIGN.md "Instrument" (2026-08-07). Change a token here
+ * and every surface moves together — which is the whole reason this file exists.
+ *
+ * Why this file exists: the product shipped three different "verified" greens.
+ * styles.ts said --allow:#84b594, verify-page.ts said #28c840 (a macOS traffic
+ * light), and DESIGN.md ratified a third. For a product whose claim is "green
+ * only when independently verified", one surface's green did not mean the same
+ * thing as another's.
+ *
+ * The semantic tokens say what they mean now: --verified / --caught, renamed
+ * from --allow / --block across 158 call sites. The aliases are deleted rather
+ * than left kind, because an undeclared token resolves to nothing instead of
+ * failing, so a resurrected --allow would silently drop the colour off a verdict.
+ * ui-token-gate.mjs carries a `retired-token` rule so it cannot come back.
+ *
+ * NOT DONE, do not read this file as "DESIGN.md is fully implemented":
+ *   - --accent is still named --accent, not --ember (109 call sites, its own
+ *     increment). The VALUE is right; only the name lags.
+ *   - --blue survives in the wordmark gradient only. That is the logotype and it
+ *     is synced with codehere-landing, so changing it is a cross-repo brand call
+ *     and Ega's. Every other use was deleted; the gate enforces the carve-out.
+ */
+export const DESIGN_TOKENS = `
+  :root {
+    /* ── surfaces · graphite, TRUE neutral (DESIGN.md §5) ──────────────────
+       Deliberately not the old warm ramp: every peer reviewed on 2026-08-07
+       (Linear, Vercel, Sentry, Depot) is cool or neutral, and neutral reads as
+       instrument rather than either cosy room or blue console. */
+    --bg: #0e0f10; --bg-1: #16181a; --bg-2: #1e2124; --bg-3: #282c30;
+    --glass-1: rgba(232,234,236,0.025); --glass-2: rgba(232,234,236,0.03);
+    --glass-3: rgba(232,234,236,0.06); --glass-4: rgba(232,234,236,0.12);
+    --glass-5: rgba(232,234,236,0.15);
+    --fg: #e8eaec; --fg-90: rgba(232,234,236,0.90);
+    --fg-80: rgba(232,234,236,0.80); --fg-70: rgba(232,234,236,0.70);
+    --fg-50: rgba(232,234,236,0.50); --fg-40: rgba(232,234,236,0.45);
+    --fg-30: rgba(232,234,236,0.28); --fg-20: rgba(232,234,236,0.20);
+    --border: rgba(232,234,236,0.09); --border-soft: rgba(232,234,236,0.055);
+
+    /* ── the accent · the human, and the only warm colour in the product ──
+       The named risk of an instrument aesthetic is that it goes cold. This is
+       the fix. Never decorative, never a status. */
+    --accent: #ff9a76; --accent-soft: #f5c6b0; --accent-wash: rgba(255,154,118,0.10);
+
+    /* ── semantic state (DESIGN.md §1 · the trust rule) ────────────────────
+       --verified is reachable ONLY from MEASURED evidence: something codehere
+       re-executed and can machine-check. An LLM judgement may never render in
+       it. --warn carries JUDGED as well as budget/partial. */
+    --verified: #7fc39a; --caught: #e2827f;
+    --warn: #d9a441;
+    --info: #8ab8ee;
+
+    /* DEPRECATED · DESIGN.md §5 bans a second accent. 16 var refs + 23 raw
+       #4a90e2 across ui.ts, mcp-server-impl.ts, styles.ts, app-script.ts and
+       verify-page.ts. Deleting it is its own increment; it is kept here so the
+       product does not render invalid CSS in the meantime. */
+    --blue: #4a90e2; --blue-soft: #8ab8ee; --blue-wash: rgba(74,144,226,0.08);
+
+    /* ── type scale · CLOSED at six values (DESIGN.md §6) ──────────────────
+       Closed is what makes it enforceable. scripts/ui-token-gate.mjs allows
+       exactly this set and nothing else. */
+    --fs-reading: 40px;   /* the one measured fact per card */
+    --fs-title: 20px;     /* room and section titles */
+    --fs-body: 14.5px;    /* anything said */
+    --fs-ui: 13px;        /* controls, rail, cards */
+    --fs-fact: 12px;      /* costs, counts, hashes */
+    --fs-label: 10.5px;   /* instrument marks, column heads */
+
+    /* ── spacing · 4px base, 9 steps ── */
+    --sp-0: 2px; --sp-1: 4px; --sp-2: 8px; --sp-3: 12px; --sp-4: 16px;
+    --sp-5: 24px; --sp-6: 32px; --sp-7: 48px; --sp-8: 64px;
+
+    /* ── radius · tight corners are instrument corners ── */
+    --r-sm: 2px; --r-md: 4px;
+    --radius: 4px; --radius-chip: 2px;
+
+    /* ── motion · 200ms default, 300ms max, one canonical ease ── */
+    --dur: 200ms; --dur-max: 300ms;
+    --ease: cubic-bezier(0.16, 1, 0.3, 1);
+
+    /* ── typefaces · DESIGN.md §6, one superfamily, three jobs ────────────
+       IBM Plex was drawn for an engineering company: machine authority without
+       costume, and absent from this category where everything is Inter or a
+       Geist-shaped substitute. Self-hosted base64 via FONT_FACES, zero external
+       fetch — that constraint never changes.
+       The load-bearing rule: anything SAID is sans, anything a machine RECORDED
+       is mono. --display is Mono because the biggest thing on a surface is a
+       measured fact, never a heading (DESIGN.md §0). */
+    --sans: var(--voice);
+    --mono: "IBM Plex Mono", ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", monospace;
+    --voice: "IBM Plex Sans", ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif;
+    --display: "IBM Plex Mono", ui-monospace, SFMono-Regular, Menlo, monospace;
+  }`;
+//# sourceMappingURL=tokens.js.map