feat(0.2): internal/uitokens/ design system foundation (Track 10.1)

[pmclSF]

Summary

Foundational deliverable for Track 10 (Visual & design system) from the 0.2.0 parity-gated release plan. `internal/uitokens/` is the design-system shim every user-visible renderer in 0.2.0 will consume from — terminal output, HTML report, PR-comment markdown, SARIF tags.

After this lands, ad-hoc styling outside the package becomes a parity-gate violation on the V1 (visual consistency) axis. Track 10.2 follows: migrate existing renderers + add a vet rule that flags raw ANSI codes outside `internal/uitokens/`.

What's in the package

• Color tokens — six semantic colors (muted / accent / ok / warn / alert / bold). Names describe roles, not shades.
• TTY / NO_COLOR detection — stdout TTY check + `NO_COLOR` env var + `TERM=dumb` fallback. Tests flip the flag to assert plain-text output.
• Symbol vocabulary — one vocabulary (✓ ✗ ⚠ ⓘ → • — · ─) used across every command.
• Severity model + badges — `SeverityBadge()` for the CRITICAL → INFO ladder; CRITICAL and HIGH bolded.
• Verdict badges — `VerdictBadge("PASS"|"WARN"|"FAIL")` returns the canonical glyph + label combo.
• Spacing & rules — `SectionWidth = 60`; `Heading()` / `Subheading()` return two-line blocks.
• ASCII bar renderer — `Bar()` auto-colors by proportion; `BarPlain()` for inverse-polarity callers (e.g. coverage).
• Text helpers — `Truncate` / `PadRight` / `PadLeft`; rune-aware.

Zero dependencies. Stateless. ~310 lines of code + ~280 lines of tests.

Tests (15 total, all passing)

• Color wrappers respect `ColorEnabled` in both directions
• Color wrappers no-op on empty strings (avoid escape-sequence noise)
• Severity badges produce right labels and bold ≥ HIGH
• Verdict badges canonicalize case + whitespace
• Bar rendering: full / empty / half / overflow / negative / zero-max / zero-width
• Bar coloring threshold transitions at 0.4 and 0.8
• Truncate / PadRight / PadLeft handle unicode (e.g. "café" → "café…")
• Rule and SubRule render at `SectionWidth`
• `Heading` produces two lines (title + rule)
• Color composition (`Bold(Alert(...))`) preserves both escapes

Test plan

• `go test ./internal/uitokens/ -count=1` — all 15 tests pass
• `go build ./...` clean
• `go vet ./internal/uitokens/` clean

Plan link

`/Users/pzachary/.claude/plans/kind-mapping-turing.md` (Track 10.1).

Next: Track 10.2

Renderer audit + migration. Existing `internal/reporting/` / `internal/changescope/render.go` / etc. switch to consuming from this package; a static check flags any `\x1b[` outside `internal/uitokens/`. Separate PR.

🤖 Generated with Claude Code

[github-actions]

[RISK] Terrain — Merge blocked

Significant protection gaps in changed code require attention.

Metric	Value
Changed files	2 (1 source · 1 test)
Impacted units	22
Protection gaps	3
Tests selected	1 of 773 (0% of suite)

---

Coverage gaps in changed code

• internal/uitokens/uitokens.go [MED] — Exported function BarChar has no observed test coverage.
  → Add unit tests for exported function BarChar — this is public API surface.
• internal/uitokens/uitokens.go [MED] — Exported function BarEmpty has no observed test coverage.
  → Add unit tests for exported function BarEmpty — this is public API surface.
• internal/uitokens/uitokens.go [MED] — Exported function Subheading has no observed test coverage.
  → Add unit tests for exported function Subheading — this is public API surface.

---

Pre-existing issues (2)

• internal/uitokens/uitokens_test.go [MED] — [fixtureFragilityHotspot] Fixture 'runWithColor' is used by 15 tests across 1 files. A single change cascades widely.
• internal/uitokens/uitokens_test.go [MED] — [fixtureFragilityHotspot] Fixture 'runWithoutColor' is used by 15 tests across 1 files. A single change cascades widely.

---

Recommended tests

1 test(s) with exact coverage of 19 impacted unit(s). 3 impacted unit(s) have no covering tests in the selected set.

Test	Confidence	Why
internal/uitokens/uitokens_test.go	exact	exact coverage of Accent, Alert, Bar + 16 more

---

Owners: PMCLSF

Limitations

• No coverage artifacts provided; protection gaps reflect missing data, not measured absence. Provide --coverage to improve accuracy.
• Mixed test cultures reduce cross-framework optimization confidence. Consider standardizing on fewer frameworks.

_{Generated by Terrain · terrain pr --json for machine-readable output}

Targeted Test Results

Terrain selected 1 test(s) instead of the full suite.

• Go tests: passed

[github-actions]

Terrain AI Risk Review

Metric	Value
AI surfaces	13
Eval scenarios	16
Impacted scenarios	0
Uncovered surfaces	13

Decision: PASS — AI surfaces are covered.