Two regressions from the recent token sweep, both producing low-contrast results in dark mode. ## DS::Toggle off-track PR #1843 (DS::Toggle a11y + token swaps) replaced the raw `bg-gray-100 theme-dark:bg-gray-700` off-track with `bg-surface-inset` for semantic alignment. `bg-surface-inset` resolves to gray-800 in dark mode, but the toggle typically sits inside `bg-container` (gray-900). The contrast ratio dropped from ~2.45:1 (gray-700 vs gray-900) to ~1.5:1 (gray-800 vs gray-900) — visibly worse than the pre-#1843 baseline and below WCAG 1.4.11 (3:1 for UI components). Most visible inside the transaction-edit modal SETTINGS section (`Exclude`, `One-time Expense`) where the off-state switches nearly vanished into the modal chrome. Introduce `--color-toggle-track` (light: gray-100, dark: gray-700) and swap `bg-surface-inset` → `bg-toggle-track` in DS::Toggle. Restores the pre-#1843 off-track contrast while keeping a semantic token (instead of the raw palette references the migration was trying to remove). ## border-destructive subtle borders PR #1849 (single-color tokens to @theme) flagged that `border-destructive/N` rendered the wrong shade (the `@utility border-destructive` block defined red-500 light, while `--color-destructive` in `@theme` is red-600 — `/N` resolves from @theme), and swapped a couple of callsites to solid `border-destructive`. Solid renders red-500/red-400 at full saturation in both modes, which reads as a loud error border on contexts that were meant to be subtle (left-rule on the provider-sync "view error details" pane, error-message box in SimpleFIN settings, alert-component border, provider connection error rows). Two callsites (`DS::Alert`, settings/providers/_connection_row) still carried the broken `border-destructive/20` / `/25` modifier — same off-shade footgun #1849 was meant to retire. Introduce `--color-destructive-subtle` (light: red-200, dark: red-800) and swap the four subtle-by-intent callsites to `border-destructive-subtle`: - app/components/DS/alert.rb (destructive variant) - app/views/settings/providers/_connection_row.html.erb (err status) - app/components/provider_sync_summary.html.erb (error-details left rule) - app/views/simplefin_items/edit.html.erb (error-message box) The handful of intentionally-loud `border-destructive` callsites (split-transaction over-allocation, blank-name account labels, etc.) keep the solid token. Regenerated `_generated.css` via `npm run tokens:build`.
Sure design tokens
This is where the design system actually lives. Tailwind reads from here, and any external tooling (Figma Tokens Studio, AI design tools, anything that shows up later) is meant to read the same JSON.
Files
design/tokens/sure.tokens.json: every token, hand-edited.bin/tokens.mjs: plain Node script. Compiles the JSON into Tailwind v4 CSS.app/assets/tailwind/sure-design-system/_generated.css: the build output. Generated, do not edit by hand.
Workflow
# Edit a token:
$EDITOR design/tokens/sure.tokens.json
# Regenerate the CSS:
npm run tokens:build
# Commit both files together:
git add design/tokens/sure.tokens.json app/assets/tailwind/sure-design-system/_generated.css
bin/setup runs the build automatically on a fresh checkout.
Versioning
The root $version field follows semver, scoped to the token contract:
- Major (
X.0.0): breaking changes — token removed or renamed, value type changed, dark variant removed, semantic meaning changed. - Minor (
1.X.0): additive changes — new tokens, new$extensions.sure.*keys, new top-level groups. - Patch (
1.0.X): cosmetic / value tweaks that consumers don't need to know about — a hex shifts a few points without changing intent.
Bump it when you commit. External consumers (Tokens Studio, future Figma sync, etc.) read this to decide whether their cached snapshot is stale.
Schema
The file uses the W3C DTCG token format: $value, $type, $description, $extensions. Tokens cross-reference via {path.to.token} placeholders.
{
"color": {
"white": { "$value": "#ffffff", "$type": "color" },
"gray": {
"500": { "$value": "#737373", "$type": "color" }
},
"success": {
"$value": "{color.green.600}",
"$type": "color",
"$extensions": { "sure.dark": "{color.green.500}" }
}
}
}
Top-level groups
| Key | Purpose |
|---|---|
font |
font-family stacks |
color |
base colors, semantic aliases (success, warning, destructive, shadow), full-scale ladders, alpha ladders |
budget |
budget-chart fills (need their own dark variants because Stimulus controllers reference them) |
border.radius |
corner radii |
shadow |
drop shadows, both light and dark variants |
animate |
named animations |
utility |
Tailwind @utility blocks: semantic surfaces, foregrounds, borders, button backgrounds, etc. |
Custom $extensions.sure.*
| Extension | Where | What it does |
|---|---|---|
sure.dark |
any token | Dark-mode override value. Same template syntax as $value. |
sure.alpha |
reserved | Currently unused; alpha is expressed inline via {ref|N%}. Reserved for structured alpha if it's ever needed. |
sure.utility.prefix |
utility.* only |
The Tailwind utility family (bg, text, border). Tells the build which @apply class to emit. |
sure.utility.raw |
utility.* only |
A CSS property name (background-color, box-shadow, etc.) when the utility emits raw CSS instead of @apply. |
sure.compose |
utility.* only |
Array of class names to @apply. For example, bg-loader is ["bg-surface-inset", "animate-pulse"]. |
Template strings
Anywhere a $value is a string:
{path.to.token}resolves tovar(--path-to-token)in the generated CSS.{path.to.token|N%}resolves to--alpha(var(--path-to-token) / N%)(Tailwind v4 alpha syntax).
The same syntax appears inside composite values like shadow.xs.$value: "0px 1px 2px 0px {color.black|6%}".
Alpha modifiers in views (/N syntax)
Tailwind v4's class/N modifier (bg-warning/10, text-link/70, etc.) only resolves on theme colors (anything declared under the top-level color.* group, which becomes --color-* in the generated CSS). It does not resolve on classes from this file's utility.* group, because those compile to static @apply blocks with no modifier-aware definition.
The mismatch is silent — Tailwind drops the unrecognized class and the element renders with no CSS for that property. Recently caught examples on text-inverse/70, border-secondary/30, and bg-surface-inset/40 (all of which produced no class output).
Until the build script teaches custom utilities to be modifier-aware, the convention is:
- For alpha on a custom utility: pair the base class with
opacity-N, e.g.text-inverse opacity-70instead oftext-inverse/70. - For alpha on a theme color: the
/Nmodifier works as expected, e.g.bg-warning/10,border-destructive/30.
The pre-resolved alpha tints (color.gray.tint-5, color.gray.tint-10, color.red.tint-5, etc.) are theme colors, so bg-gray-tint-5 and similar work as straight utilities and accept further /N modifiers.
Adding a new token
- Pick the right top-level group.
- Add the
$value(raw or{ref}) and$type. - If it should change in dark mode, add
$extensions.sure.dark. - If it's a utility, add
$extensions.sure.utility.prefix(orraw, orcompose). - Run
npm run tokens:build. - Look at the diff in
_generated.cssand confirm it's what you expected. - Commit both files.
Edge cases the build script handles
color.gray.DEFAULT: theDEFAULTsegment is dropped in the CSS variable name (--color-gray, not--color-gray-DEFAULT). DTCG convention; matches Tailwind.utility.border-divider: the value is a plain class string (border-tertiary) instead of a{ref}. The build treats values without{}as raw@applyarguments.utility.bg-overlay: usessure.utility.raw: "background-color"because it needs alpha rendering instead of@apply.utility.bg-loader: usessure.composeto apply two utilities together (bg-surface-inset animate-pulse).utility.button-bg-ghost-hover: its dark value is a multi-class string (bg-gray-800 text-inverse), not a single ref. The build accepts both forms.
Consumers
- Rails / Tailwind: via the generated CSS, automatically.
- Lookbook reference page:
/design-system/inspect/design_tokens/*readssure.tokens.jsonat request time. - External tools (Figma Tokens Studio, AI design tools, etc.): point them at this file.
If a consumer wants a different shape, transform the JSON in their tooling rather than editing the source here.