Asserts the palette by calculation rather than by eye: WCAG 2.1 relative
luminance and contrast ratio over the colour sets as they ship, resolved for
all four appearances.

AA is required in the high-contrast appearances only. The standard palette is
instead held to a monotonicity invariant — high contrast may never render a
pairing worse than standard — which is what stops the accessible palette
drifting behind the default one.

Pairings are hand-maintained rather than a cross-product; requiring success
green to stay legible on the error tint would cost chroma for a combination no
screen renders.

The catalogue is parsed from source rather than resolved through NSColor:
SwiftPM copies .xcassets into the test bundle uncompiled, so a runtime lookup
returns nil under `swift test`. Resolution is exact-match-or-universal, with a
test enforcing that no colour set can declare a dark value without a
high-contrast dark one.

WarningGlyphTests pins an SF Symbols detail Apple owns rather than we do — that
palette layer 1 is the inner mark — by rendering offscreen and sampling pixels.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EgwyUSxEn786mZUfZx8bCv

Both colours were doing two jobs at once, which is why neither could be tuned
without breaking the other.

Brand amber was only ever used as a foreground — the sidebar's selected item,
the console status dot, badge labels — while brand.primary is defined as a fill.
Those call sites move to text.brand, leaving brand.primary free to stay the
undiluted Homebrew amber for filled surfaces.

Warning splits the same way: status.warning stays the text colour and darkens
under high contrast, status.warningBold stays vivid for glyphs, dots and fills.
Doctor needed both, so severity styling grows a glyph alongside its foreground.

brewWarningGlyphStyle() renders those glyphs monochrome normally and knocks the
inner mark out in near-black under high contrast, where the enclosure alone is
1.8:1 on a light surface.

The console maps ANSI magenta and cyan to tokens instead of SwiftUI's .purple
and .cyan, which drop under 2:1 on white — output renders on an app surface,
not the terminal surface.

The upgrades badge keeps its white count on yellow and only goes black under
high contrast, so it no longer needs to branch on colour scheme.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EgwyUSxEn786mZUfZx8bCv

The chip was a pale tint behind an accent glyph, which barely separated from
the row and disappeared entirely once the row was selected and the background
became the brand tint.

It is now an outline: the accent draws both the glyph and a 1pt ring, with the
row showing through. As a non-text graphic the bar is 3:1, which it clears on
every row background including a selected one; the pale tint never did.
PackageKindIconBackgroundToken goes away with the fill it named.

The chip is also centred against the row rather than pinned to the first line,
and hidden while a placeholder is on screen — SwiftUI redacts text and images
but leaves Shape alone, so the ring stayed crisp and coloured around redacted
content.

Package views pick up the foreground roles from the previous commit at the same
time: text.brand for amber, status.warningBold for the upgrade-available glyph
and the dependents dots, and black on yellow for the uninstall-blocked badge.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EgwyUSxEn786mZUfZx8bCv

The command text sat light-on-dark on the terminal surface, which put it under
a system selection highlight drawn for dark-on-light: selecting a command
measured 1.01:1. SwiftUI offers no hook to restyle that highlight, so the
surface changes instead.

The code well now uses the sidebar's surface, with the header and footer
recessed around it — so the card reads as chrome wrapped around an inset well,
and the well matches a surface the eye already knows from the sidebar. Command
text measures 16.7:1 in light and 13.9:1 in dark.

The footer keeps the raised contrast it needs as the line explaining what the
command does, moving from tertiary to secondary text along with the step
numbers.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EgwyUSxEn786mZUfZx8bCv

Captures what the diff cannot: why there are two palettes and which one is held
to AA, why the audit parses the catalogue instead of resolving NSColor, why the
warning yellow is deliberately below the non-text guideline, and the probe that
looks like it confirms high-contrast fallback but confirms nothing.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EgwyUSxEn786mZUfZx8bCv

Installed rows marked an available upgrade with a bare warning glyph sitting
between the package name and its kind pill. That put a status indicator ahead
of the label it qualifies, and gave the same information a different shape from
Discover's INSTALLED pill.

Outdated is now a pill of its own, outlined like the kind pill beside it and
placed after it. The green installed check moves to the same slot so both
states read from the same position.

Neutral grey rather than warning-coloured: an available upgrade is routine, and
the version line underneath already carries the amber.

Applied to the list row and the detail hero, which shared the glyph.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EgwyUSxEn786mZUfZx8bCv