@bendyline/gilde 0.1.16 → 0.1.18

package/README.md

@@ -6,7 +6,10 @@ The open catalog that powers [gezel](https://github.com/bendyline/gezel). Browse
 npm install @bendyline/gilde
 ```
 
-The package is this repo, verbatim: raw JSON, Markdown and implementations, no tools, no dependencies.
+The package is raw JSON, Markdown, and implementations with no runtime
+dependencies. It includes the released `data/`, exported schemas, and the
+small authoring source trees consumers need to verify generated families
+against their inputs; repository tooling and CI files are not published.
 
 ## What's inside
 
@@ -21,6 +24,7 @@ The package is this repo, verbatim: raw JSON, Markdown and implementations, no t
 | Video models | data/video-models/ | Video generation model manifests |
 | Toolsets | data/toolsets/ | Hand-curated first-party toolsets |
 | Community toolsets | data/community/toolsets/ | Auto-imported from the MCP registry, permissive licenses only — bot-managed |
+| Authoring sources | authoring/ | Reproducible source material for generated catalog families; inert at runtime |
 
 Every item follows the same layout:
 

package/authoring/gstack/LICENSE.gstack

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Garry Tan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/authoring/gstack/README.md

@@ -0,0 +1,50 @@
+# gstack-derived craftbook authoring
+
+This directory is the reproducible source for the nine craftbooks adapted
+from [garrytan/gstack](https://github.com/garrytan/gstack). The frozen
+snapshots match upstream revision
+`a3259400a366593e0c909dd9ac3e59752efd2488`; its MIT terms and attribution are
+preserved in [LICENSE.gstack](LICENSE.gstack). The released, fully expanded
+catalog payloads remain under `data/craftbook-templates/`.
+
+```
+wave.json                  release metadata and source-to-craftbook mapping
+snapshots/<source>/SKILL.md  frozen upstream inputs
+overlays/<source>.json     Gezel-native workflow definitions and patches
+evals/<source>.json        source form of each released test.json
+persona-drafts/*.about.md  inert review drafts; never indexed as templates
+```
+
+The schema-aware compiler remains in the Gezel repository at
+`packages/catalog/scripts/import-gstack-skills.ts`; it depends on Gezel's
+skill parser, craftbook schemas, and graph validator. It reads this directory
+and writes into the same Gilde checkout, so source and generated output cannot
+silently come from different revisions.
+
+From a sibling `gezel` checkout:
+
+```sh
+pnpm --filter @bendyline/gezel-catalog exec tsx scripts/import-gstack-skills.ts --dry-run
+pnpm --filter @bendyline/gezel-catalog exec tsx scripts/import-gstack-skills.ts
+pnpm --filter @bendyline/gezel-catalog run build-index --kind=craftbook-template
+```
+
+Set `GILDE_DIR` when the checkouts are not siblings. Generation is
+append-only: change `version` and `releasedAt` in `wave.json`, add a new
+version, and never rewrite a released `versions/<version>/` directory.
+
+The authoring tree is included in `@bendyline/gilde` so Gezel's exact-pinned
+regeneration test can compare these inputs with the generated payload from
+the same package. The product runtime and catalog index never read it.
+
+That test resolves the tree from the installed package by default and only
+falls back to a checkout via `GILDE_DIR` or `pnpm link:gilde`, so a release
+without it does not fail Gezel CI — the fidelity suite just stops running.
+`tools/check-package-size.mjs` therefore fails the publish when these sources
+are missing from the tarball, and caps how large the tree may grow.
+
+Gilde's dependency-light check validates the authoring sets, release metadata,
+license notice, eval schema, and generated metadata. The Gezel-side fidelity
+test performs the deeper byte-for-byte compiler comparison. Land and publish
+the Gilde change first, then bump Gezel's exact `@bendyline/gilde` pin and
+lockfile.

package/authoring/gstack/evals/cso.json

@@ -0,0 +1,152 @@
+{
+  "schemaVersion": 1,
+  "title": "Security Architecture Review — admin export surface",
+  "objective": "Exercise the Security Architecture Review craftbook against a self-contained service slice and require a prioritized, evidence-linked report that includes both confirmed vulnerabilities and working controls.",
+  "tags": [
+    "workflow",
+    "security",
+    "architecture-review",
+    "typescript"
+  ],
+  "prompt": "Use the Security Architecture Review craftbook to review the seeded service slice. This is report-only: do not modify source files. Model assets, actors, trust boundaries, and data flows; audit authorization, command/SQL construction, secrets handling, and relevant common vulnerability classes. Produce the scope and findings register, then write `security/security-architecture-review.md`. Every confirmed finding must name severity, confidence, concrete workspace evidence, exploit preconditions, impact, and a specific remediation plus verification. Include working controls and rejected hypotheses. Do not invent CVEs, dependency versions, scans, or tests you did not run, and do not reproduce the example secret value in the report.",
+  "setup": {
+    "projectName": "Admin export security review",
+    "about": "A hermetic source-review fixture. No network or dependency lookup is needed or authorized; conclusions must come from seeded files.",
+    "missionObjectives": "Deliver an actionable risk posture that distinguishes confirmed source defects, positive controls, and unverified areas without changing implementation.",
+    "files": [
+      {
+        "path": "docs/architecture.md",
+        "content": "# Service slice\n\nAn authenticated HTTP handler receives an export name and email filter from a browser operated by support staff. The handler calls local process and database adapters. `requireUser` is the shared authentication boundary. Only administrators should reach backup export; ordinary authenticated users may search their own customer records. Deployment injects `SESSION_SECRET` from environment configuration.\n"
+      },
+      {
+        "path": "src/auth.ts",
+        "content": "export interface User { id: string; role: 'member' | 'admin' }\n\nexport function requireUser(value: User | undefined): User {\n  if (!value) throw new Error('unauthorized');\n  return value;\n}\n\nexport function requireAdmin(user: User): void {\n  if (user.role !== 'admin') throw new Error('forbidden');\n}\n"
+      },
+      {
+        "path": "src/admin-export.ts",
+        "content": "import { exec } from 'node:child_process';\nimport type { User } from './auth.js';\nimport { requireAdmin, requireUser } from './auth.js';\n\nexport function exportBackup(currentUser: User | undefined, requestedName: string): void {\n  const user = requireUser(currentUser);\n  requireAdmin(user);\n  exec(`tar -czf backups/${requestedName}.tgz data/`);\n}\n"
+      },
+      {
+        "path": "src/customer-search.ts",
+        "content": "export interface Db { query(sql: string): Promise<unknown[]> }\n\nexport function findCustomerByEmail(db: Db, email: string): Promise<unknown[]> {\n  return db.query(`SELECT id, email FROM customers WHERE email = '${email}'`);\n}\n"
+      },
+      {
+        "path": "src/safe-audit-log.ts",
+        "content": "export interface AuditSink { write(event: { actorId: string; action: string; target: string }): void }\n\nexport function recordExport(sink: AuditSink, actorId: string, target: string): void {\n  sink.write({ actorId, action: 'backup.exported', target });\n}\n"
+      },
+      {
+        "path": "config/example.env",
+        "content": "# Example only; deployment replaces this value\nSESSION_SECRET=local-dev-only-not-a-real-secret\n"
+      }
+    ]
+  },
+  "mocks": [],
+  "success": {
+    "taskGraph": {
+      "requireCraftbookTask": true,
+      "requireTerminalStep": true
+    },
+    "summary": "The named craftbook produces a source-grounded risk posture with prioritized findings, positive controls, remediation, verification, and terminal task evidence.",
+    "deliverables": [
+      {
+        "path": "security/security-architecture-review.md",
+        "kind": "security-report",
+        "minBytes": 1700,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "security/security-architecture-review.md",
+            "pattern": "^#{1,3}\\s+Executive risk posture\\b[\\s\\S]*^#{1,3}\\s+What is working\\b[\\s\\S]*^#{1,3}\\s+Prioritized findings\\b[\\s\\S]*^#{1,3}\\s+Remediation plan\\b[\\s\\S]*^#{1,3}\\s+Verification\\b[\\s\\S]*^#{1,3}\\s+Unverified areas\\b",
+            "flags": "im",
+            "label": "complete security-review structure"
+          },
+          {
+            "kind": "contains",
+            "file": "security/security-architecture-review.md",
+            "pattern": "(command injection|shell injection)[\\s\\S]{0,500}src/admin-export\\.ts[\\s\\S]*(severity)[\\s\\S]*(confidence)",
+            "flags": "is",
+            "label": "command-injection finding with evidence metadata"
+          },
+          {
+            "kind": "contains",
+            "file": "security/security-architecture-review.md",
+            "pattern": "(SQL injection|parameteri[sz]ed quer)[\\s\\S]{0,500}src/customer-search\\.ts",
+            "flags": "is",
+            "label": "SQL-injection finding and remediation"
+          },
+          {
+            "kind": "contains",
+            "file": "security/security-architecture-review.md",
+            "pattern": "(requireUser|requireAdmin)[\\s\\S]{0,300}(working|control|authorization|authentication)[\\s\\S]*(safe-audit-log|audit)",
+            "flags": "is",
+            "label": "positive auth and audit controls"
+          },
+          {
+            "kind": "citationsResolve",
+            "file": "security/security-architecture-review.md",
+            "minCitations": 4
+          },
+          {
+            "kind": "notContains",
+            "file": "security/security-architecture-review.md",
+            "pattern": "CVE-\\d{4}-\\d+",
+            "label": "no invented CVEs"
+          },
+          {
+            "kind": "notContains",
+            "file": "security/security-architecture-review.md",
+            "pattern": "local-dev-only-not-a-real-secret",
+            "label": "example secret value is not reproduced"
+          }
+        ]
+      }
+    ],
+    "taskNotes": {
+      "minBytes": 180,
+      "requireCraftbookTask": true,
+      "checks": [
+        {
+          "kind": "contains",
+          "file": "task-notes.md",
+          "pattern": "\\bDONE\\b[\\s\\S]*security/security-architecture-review\\.md[\\s\\S]*(command|SQL)",
+          "flags": "i",
+          "label": "terminal note records report and principal risks"
+        }
+      ]
+    },
+    "unchangedFixtures": [
+      "docs/architecture.md",
+      "src/auth.ts",
+      "src/admin-export.ts",
+      "src/customer-search.ts",
+      "src/safe-audit-log.ts",
+      "config/example.env"
+    ]
+  },
+  "rubric": {
+    "artifact": {
+      "path": "security/security-architecture-review.md",
+      "kind": "markdown"
+    },
+    "axes": [
+      {
+        "name": "Threat-model coverage",
+        "description": "The report connects assets, actors, trust boundaries, privileges, and data flows to the reviewed attack surface."
+      },
+      {
+        "name": "Finding rigor",
+        "description": "Confirmed findings cite exact source evidence, state preconditions and impact, and calibrate severity and confidence without overclaiming."
+      },
+      {
+        "name": "Remediation utility",
+        "description": "Recommendations are prioritized, source-specific, verifiable, and preserve or strengthen the controls that already work."
+      }
+    ],
+    "contextNote": "No live dependency or dynamic scan is part of this hermetic source-review scenario; the report should say so."
+  },
+  "qualityFocus": [
+    "Both injection paths are found and tied to exact source",
+    "Working authentication, authorization, and audit controls are recognized",
+    "Unverified areas and evidence limits are explicit"
+  ]
+}

package/authoring/gstack/evals/design-consultation.json

@@ -0,0 +1,201 @@
+{
+  "schemaVersion": 1,
+  "title": "Design System Consultation — Harbor Ops dashboard",
+  "objective": "Exercise the Design System Consultation craftbook on a seeded operations dashboard and require a grounded, accessible DESIGN.md plus a complete HTML state preview.",
+  "tags": [
+    "workflow",
+    "design-system",
+    "html-page",
+    "accessibility"
+  ],
+  "prompt": "Use the Design System Consultation craftbook for the Harbor Ops dashboard. This is an unattended evaluation: the product and taste decisions in `source/design-brief.md` are authoritative, so proceed without asking questions and label any remaining assumptions. Audit the supplied interface, preserve its useful density, then produce the workflow artifacts, `DESIGN.md`, and `previews/design-system.html`. The preview must be self-contained and show navigation, typography, controls, data cards, table content, empty/loading/error/success states, keyboard focus, disabled controls, and responsive behavior. Use no external assets or live research.",
+  "setup": {
+    "projectName": "Harbor Ops design system",
+    "about": "Harbor Ops is a desktop-first operations dashboard for coordinators monitoring time-sensitive berth assignments. The fixture is complete and must be handled without live research.",
+    "missionObjectives": "Run the Design System Consultation craftbook as a real task. Ground every design decision in the seeded brief and current interface, then deliver DESIGN.md and the self-contained preview.",
+    "files": [
+      {
+        "path": "README.md",
+        "content": "# Harbor Ops\n\nHarbor Ops helps port coordinators scan berth conflicts, assign an owner, and clear exceptions during a shift. It is dense desktop software used in bright control rooms; the core job is spotting the one item that needs action now.\n"
+      },
+      {
+        "path": "source/design-brief.md",
+        "content": "# Locked design brief\n\nAudience: experienced port coordinators working 8-hour shifts on desktop, with occasional tablet use.\n\nMemorable intent: **calm command under pressure**. The interface should feel serious and precise, never playful or luxurious.\n\nPreserve: dense scan-friendly tables, the navy header, status labels, and explicit timestamps.\n\nChange: inconsistent spacing, low-contrast muted text, color-only severity, invisible keyboard focus, and one-off button styles.\n\nBrand constraints: deep navy `#10233f`; signal amber `#d97706`; off-white canvas. Do not use pure black.\n\nAccessibility: WCAG AA text contrast, visible `:focus-visible`, shape/text in addition to status color, 44px primary touch targets on tablet, reduced-motion support.\n\nProduct states that must be designed: normal, loading, empty, permission error, delayed-data warning, success acknowledgement, selected row, disabled action.\n\nTaste: compact Swiss/industrial typography, restrained motion, square-to-soft corners (4-8px), clear dividers. Avoid gradients, glass effects, giant hero type, and decorative illustrations.\n"
+      },
+      {
+        "path": "src/dashboard.html",
+        "content": "<!doctype html><html lang=\"en\"><head><meta charset=\"utf-8\"><title>Harbor Ops</title><link rel=\"stylesheet\" href=\"styles.css\"></head><body><header>Harbor Ops <small>Shift A · 07:42 UTC</small></header><main><aside><button>Overview</button><button>Berths</button><button>Exceptions</button></aside><section><h1>Berth exceptions</h1><button class=\"primary\">Assign owner</button><table><tr><th>Vessel</th><th>Berth</th><th>Status</th><th>Updated</th></tr><tr><td>MV Juniper</td><td>B-14</td><td><span class=\"status\">Delayed</span></td><td>07:38 UTC</td></tr></table></section></main></body></html>\n"
+      },
+      {
+        "path": "src/styles.css",
+        "content": ":root{--navy:#10233f;--amber:#d97706}body{margin:0;font:14px Arial;background:#f7f5ef;color:#27364a}header{background:var(--navy);color:white;padding:13px 18px}header small{color:#7e8aa0}main{display:flex}aside{width:190px;padding:12px}section{flex:1;padding:19px}button{border:0;padding:7px;margin:3px}.primary{background:var(--amber);color:white}.status{color:#d97706}table{width:100%;border-collapse:collapse}td,th{text-align:left;border-bottom:1px solid #ddd;padding:9px}button:focus{outline:none}\n"
+      }
+    ]
+  },
+  "mocks": [],
+  "success": {
+    "taskGraph": {
+      "requireCraftbookTask": true,
+      "requireTerminalStep": true
+    },
+    "summary": "The real craftbook produces a grounded design audit and brief, an accessible token specification, a valid multi-state preview, and terminal review evidence.",
+    "deliverables": [
+      {
+        "path": "design/current-state-audit.md",
+        "kind": "markdown-report",
+        "minBytes": 750,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "design/current-state-audit.md",
+            "pattern": "^#{1,3}\\s+Product and users\\b[\\s\\S]*^#{1,3}\\s+Existing language\\b[\\s\\S]*^#{1,3}\\s+Accessibility\\b",
+            "flags": "im",
+            "label": "grounded current-state audit"
+          },
+          {
+            "kind": "citationsResolve",
+            "file": "design/current-state-audit.md",
+            "minCitations": 2
+          }
+        ]
+      },
+      {
+        "path": "DESIGN.md",
+        "kind": "markdown-doc",
+        "minBytes": 1800,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "DESIGN.md",
+            "pattern": "^#{1,3}\\s+Design intent\\b[\\s\\S]*^#{1,3}\\s+Tokens\\b[\\s\\S]*^#{1,3}\\s+Typography\\b[\\s\\S]*^#{1,3}\\s+Color\\b[\\s\\S]*^#{1,3}\\s+Components and states\\b[\\s\\S]*^#{1,3}\\s+Accessibility\\b[\\s\\S]*^#{1,3}\\s+Adoption\\b",
+            "flags": "im",
+            "label": "complete design-system specification"
+          },
+          {
+            "kind": "valueGrounding",
+            "file": "DESIGN.md",
+            "facts": [
+              {
+                "id": "intent",
+                "label": "memorable intent",
+                "required": [
+                  "calm command under pressure"
+                ]
+              },
+              {
+                "id": "brand-navy",
+                "label": "locked navy",
+                "required": [
+                  "#10233f"
+                ]
+              },
+              {
+                "id": "brand-amber",
+                "label": "locked signal amber",
+                "required": [
+                  "#d97706"
+                ]
+              },
+              {
+                "id": "keyboard-focus",
+                "label": "visible keyboard focus",
+                "required": [
+                  "focus-visible"
+                ]
+              },
+              {
+                "id": "reduced-motion",
+                "label": "reduced-motion behavior",
+                "required": [
+                  "reduced-motion|prefers-reduced-motion"
+                ]
+              },
+              {
+                "id": "touch-target",
+                "label": "tablet touch target",
+                "required": [
+                  "44\\s*(?:px|pixel)"
+                ]
+              }
+            ]
+          }
+        ]
+      },
+      {
+        "path": "previews/design-system.html",
+        "kind": "html-page",
+        "minBytes": 3000,
+        "checks": [
+          {
+            "kind": "htmlLint",
+            "file": "previews/design-system.html"
+          },
+          {
+            "kind": "cssMinBytes",
+            "file": "previews/design-system.html",
+            "bytes": 900
+          },
+          {
+            "kind": "contains",
+            "file": "previews/design-system.html",
+            "pattern": "loading[\\s\\S]*empty[\\s\\S]*(error|permission)[\\s\\S]*(success|acknowledge)[\\s\\S]*disabled",
+            "flags": "i",
+            "label": "representative application states"
+          },
+          {
+            "kind": "contains",
+            "file": "previews/design-system.html",
+            "pattern": "focus-visible|prefers-reduced-motion",
+            "flags": "i",
+            "label": "keyboard focus and reduced motion"
+          }
+        ]
+      }
+    ],
+    "taskNotes": {
+      "minBytes": 180,
+      "requireCraftbookTask": true,
+      "checks": [
+        {
+          "kind": "contains",
+          "file": "task-notes.md",
+          "pattern": "\\bDONE\\b[\\s\\S]*DESIGN\\.md[\\s\\S]*previews/design-system\\.html",
+          "flags": "i",
+          "label": "terminal note records both design deliverables"
+        }
+      ]
+    },
+    "unchangedFixtures": [
+      "README.md",
+      "source/design-brief.md",
+      "src/dashboard.html",
+      "src/styles.css"
+    ]
+  },
+  "rubric": {
+    "artifact": {
+      "path": "DESIGN.md",
+      "kind": "markdown"
+    },
+    "axes": [
+      {
+        "name": "Product fit",
+        "description": "The system reinforces calm command under pressure and the actual coordinator workflows rather than generic visual taste."
+      },
+      {
+        "name": "System coherence",
+        "description": "Tokens, typography, color, density, components, states, and motion form a reusable system with explicit rationale."
+      },
+      {
+        "name": "Accessibility and preview",
+        "description": "The specification and preview cover contrast, focus, non-color status, touch size, reduced motion, responsiveness, and real application states."
+      }
+    ],
+    "contextNote": "Judge against the seeded brief and current dashboard; decorative novelty that violates the locked taste is a defect."
+  },
+  "qualityFocus": [
+    "Preserve useful density while correcting current accessibility failures",
+    "Use exact reusable tokens with reasons",
+    "Preview representative responsive and interaction states without external assets"
+  ]
+}

package/authoring/gstack/evals/document-generate.json

@@ -0,0 +1,174 @@
+{
+  "schemaVersion": 1,
+  "title": "Technical Documentation — rate limiter Diataxis set",
+  "objective": "Exercise the Technical Documentation craftbook on a small real code surface and require a coherent, cross-linked Diataxis documentation set grounded in source behavior.",
+  "tags": [
+    "workflow",
+    "documentation",
+    "diataxis",
+    "typescript"
+  ],
+  "prompt": "Use the Technical Documentation craftbook to document the dependency-free rate limiter in this workspace. Inspect the source and test rather than guessing. Produce the craftbook inventory and plan plus a coherent set under `docs/`: `documentation-index.md`, `tutorial-rate-limit.md`, `how-to-configure-rate-limit.md`, `reference-rate-limit.md`, and `explanation-fixed-window.md`. The index must clearly organize tutorials, how-to, reference, and explanation, link to every page, cite the implementation/test where claims come from, and state how the documented examples were verified.",
+  "setup": {
+    "projectName": "Rate limiter documentation",
+    "about": "A hermetic TypeScript library documentation exercise. There are no external APIs or package dependencies.",
+    "missionObjectives": "Create accurate, navigable documentation that helps a first-time adopter use `createFixedWindowLimiter` and understand its tradeoffs without reading all source code.",
+    "files": [
+      {
+        "path": "README.md",
+        "content": "# tiny-limit\n\nA dependency-free fixed-window request limiter. Public behavior is defined by `src/rate-limit.ts` and its test. Documentation is intentionally incomplete.\n"
+      },
+      {
+        "path": "src/rate-limit.ts",
+        "content": "export interface RateLimitOptions {\n  windowMs: number;\n  max: number;\n}\n\nexport interface RateLimitDecision {\n  allowed: boolean;\n  remaining: number;\n  resetAt: number;\n}\n\nexport function createFixedWindowLimiter(options: RateLimitOptions) {\n  if (!Number.isInteger(options.max) || options.max < 1) throw new RangeError('max must be a positive integer');\n  if (!Number.isFinite(options.windowMs) || options.windowMs <= 0) throw new RangeError('windowMs must be positive');\n  const buckets = new Map<string, { count: number; resetAt: number }>();\n\n  return function check(key: string, now = Date.now()): RateLimitDecision {\n    const current = buckets.get(key);\n    const bucket = !current || now >= current.resetAt\n      ? { count: 0, resetAt: now + options.windowMs }\n      : current;\n    bucket.count += 1;\n    buckets.set(key, bucket);\n    return {\n      allowed: bucket.count <= options.max,\n      remaining: Math.max(0, options.max - bucket.count),\n      resetAt: bucket.resetAt,\n    };\n  };\n}\n"
+      },
+      {
+        "path": "test/rate-limit.test.ts",
+        "content": "import { strict as assert } from 'node:assert';\nimport { createFixedWindowLimiter } from '../src/rate-limit.js';\n\nconst check = createFixedWindowLimiter({ windowMs: 1000, max: 2 });\nassert.deepEqual(check('ada', 100), { allowed: true, remaining: 1, resetAt: 1100 });\nassert.deepEqual(check('ada', 200), { allowed: true, remaining: 0, resetAt: 1100 });\nassert.deepEqual(check('ada', 300), { allowed: false, remaining: 0, resetAt: 1100 });\nassert.deepEqual(check('ada', 1100), { allowed: true, remaining: 1, resetAt: 2100 });\n"
+      }
+    ]
+  },
+  "mocks": [],
+  "success": {
+    "taskGraph": {
+      "requireCraftbookTask": true,
+      "requireTerminalStep": true
+    },
+    "summary": "The craftbook produces a complete, grounded five-page Diataxis set with a navigable index and terminal task evidence.",
+    "deliverables": [
+      {
+        "path": "docs/documentation-index.md",
+        "kind": "markdown-doc",
+        "minBytes": 850,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "docs/documentation-index.md",
+            "pattern": "^#{1,3}\\s+Tutorials?\\b[\\s\\S]*^#{1,3}\\s+How-to guides?\\b[\\s\\S]*^#{1,3}\\s+Reference\\b[\\s\\S]*^#{1,3}\\s+Explanation\\b[\\s\\S]*^#{1,3}\\s+Verification\\b",
+            "flags": "im",
+            "label": "Diataxis map and verification"
+          },
+          {
+            "kind": "contains",
+            "file": "docs/documentation-index.md",
+            "pattern": "tutorial-rate-limit\\.md[\\s\\S]*how-to-configure-rate-limit\\.md[\\s\\S]*reference-rate-limit\\.md[\\s\\S]*explanation-fixed-window\\.md",
+            "flags": "i",
+            "label": "all requested pages linked"
+          },
+          {
+            "kind": "citationsResolve",
+            "file": "docs/documentation-index.md",
+            "minCitations": 4
+          }
+        ]
+      },
+      {
+        "path": "docs/tutorial-rate-limit.md",
+        "kind": "markdown-doc",
+        "minBytes": 650,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "docs/tutorial-rate-limit.md",
+            "pattern": "createFixedWindowLimiter[\\s\\S]*windowMs[\\s\\S]*max[\\s\\S]*(allowed|remaining|resetAt)",
+            "label": "runnable API walkthrough"
+          }
+        ]
+      },
+      {
+        "path": "docs/how-to-configure-rate-limit.md",
+        "kind": "markdown-doc",
+        "minBytes": 550,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "docs/how-to-configure-rate-limit.md",
+            "pattern": "windowMs[\\s\\S]*max[\\s\\S]*(positive|greater than|at least)[\\s\\S]*(integer|finite)",
+            "flags": "i",
+            "label": "configuration constraints"
+          }
+        ]
+      },
+      {
+        "path": "docs/reference-rate-limit.md",
+        "kind": "markdown-doc",
+        "minBytes": 650,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "docs/reference-rate-limit.md",
+            "pattern": "RateLimitOptions[\\s\\S]*RateLimitDecision[\\s\\S]*allowed[\\s\\S]*remaining[\\s\\S]*resetAt",
+            "label": "public type reference"
+          }
+        ]
+      },
+      {
+        "path": "docs/explanation-fixed-window.md",
+        "kind": "markdown-doc",
+        "minBytes": 600,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "docs/explanation-fixed-window.md",
+            "pattern": "fixed[- ]window[\\s\\S]*(boundary|burst|trade[- ]?off)[\\s\\S]*(memory|Map|process)",
+            "flags": "i",
+            "label": "mechanism and tradeoffs"
+          }
+        ]
+      }
+    ],
+    "checks": [
+      {
+        "kind": "fileCount",
+        "dir": "docs",
+        "ext": [
+          ".md"
+        ],
+        "min": 5
+      }
+    ],
+    "taskNotes": {
+      "minBytes": 180,
+      "requireCraftbookTask": true,
+      "checks": [
+        {
+          "kind": "contains",
+          "file": "task-notes.md",
+          "pattern": "\\bDONE\\b[\\s\\S]*docs/documentation-index\\.md[\\s\\S]*(5|five)\\s+(pages|documents)",
+          "flags": "i",
+          "label": "terminal note records the documentation set"
+        }
+      ]
+    },
+    "unchangedFixtures": [
+      "README.md",
+      "src/rate-limit.ts",
+      "test/rate-limit.test.ts"
+    ]
+  },
+  "rubric": {
+    "artifact": {
+      "path": "docs/documentation-index.md",
+      "kind": "markdown"
+    },
+    "axes": [
+      {
+        "name": "Source fidelity",
+        "description": "Claims, examples, inputs, outputs, and edge cases agree with the supplied implementation and test."
+      },
+      {
+        "name": "Diataxis separation",
+        "description": "Tutorial, how-to, reference, and explanation pages each serve their distinct reader need without becoming duplicate summaries."
+      },
+      {
+        "name": "Navigation and verification",
+        "description": "The set is cross-linked, easy to scan, and transparent about how examples and factual claims were checked."
+      }
+    ]
+  },
+  "qualityFocus": [
+    "Every public option and result field matches the source",
+    "Each Diataxis page has a distinct job",
+    "The index links the complete set and explains verification"
+  ]
+}