ui: brand-grounded terminal style system (truecolor + light/dark + fallback)

[LukasWodka]

Summary

Turns the CLI's ad-hoc colour into one brand-grounded style system, built from the design-system tokens and confirmed against tracebloc.io. Organising idea = the homepage gradient: cyan orients (structure), lime moves (action). This is surface 1 of 2 (the bash installer mirrors it next).

Design spec + mock terminals (real colour): the style proposal artifact shared in the thread.

Engine (internal/ui)

• colorMode {none,16,true} + termBg {dark,light}, detected in New:
  • NO_COLOR / non-TTY / TERM=dumb → none; COLORTERM=truecolor|24bit → 24-bit; else ANSI-16.
  • COLORFGBG picks the background; unknown → dark (the dev norm).
• A tone table maps each role to its exact 24-bit hex on dark and light terminals (primary/secondary ramps) + the nearest ANSI-16 fallback. hue() is the single brand-colour chokepoint — bright shades on dark, deep shades (primary.700/secondary.700) on light so it stays legible on white.
• Colour is never load-bearing: headings/commands also carry Bold and alerts a distinct glyph, so it still reads under NO_COLOR / for colour-blindness.

Roles → the existing Printer methods (decisions A–D)

Role	Treatment
Section / Banner / Step	cyan #01a5cc (structure)
MenuRow command	lime #91e947 bold (A)
MenuRow description	soft lime #a7ed6c(B)
✔ / ✓ success	brand lime — "green = go", unified with commands (A)
✗ offline · ⚠ warn · ✖ error	soft red · amber · bold red
label : value	dim neutral
inline run <cmd> (home)	command tone

Light-terminal deep-shade swap (C) + truecolor-with-16-fallback (D) are both in the engine.

Test plan

• brand_tones_test.go pins the exact SGR: #01a5cc/#91e947 on dark, #01637a/#578c2b on light, ANSI-16 (36/32) fallback with no truecolor escape — a token drift fails CI.
• Existing colour-matrix / plain / NO_COLOR / spinner tests unchanged and green.
• go build ./..., go vet, gofmt -s, goimports -local, staticcheck (all,-ST1005), deadcode, file-budget all clean.

🤖 Generated with Claude Code

---

Note

Low Risk
Terminal presentation only with NO_COLOR/TTY/plain fallbacks and CI-pinned tones; no changes to auth, cluster logic, or command behavior beyond how strings are colored.

Overview
Replaces ad-hoc fatih/color usage with a single brand tone pipeline in internal/ui: colorMode (none / 16-color / 24-bit via COLORTERM), termBg from COLORFGBG (deep primary/secondary on light backgrounds), and hue() as the chokepoint for headings, commands, warnings, and labels across existing Printer methods.

Adds Printer.Command for inline actionable text; the home screen’s “run … doctor” tails now pass one styled fragment (p.Command(inv+" "+doctorPath)) instead of separate unstyled pieces.

New brand_tones_test.go locks expected SGR (e.g. #01a5cc / #91e947 on dark, deep shades on light, ANSI 36/32 without 38;2). Spinner/UI tests follow detectMode (replacing autoColor) and honor TERM=dumb as plain output.

^{Reviewed by Cursor Bugbot for commit 468fcb4. Bugbot is set up for automated code reviews on this repo. Configure here.}

[LukasWodka]

@BugBot run

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 468fcb4. Configure here.}

[aptracebloc]

LGTM 👍

[LukasWodka]

/fr-pass — verified live: SGR tones render inside a PTY and NO_COLOR=1 strips every escape sequence to clean text (no raw codes leak).