@elitedcs/ghl-mcp 3.82.0 → 3.83.1

package/src/command-os/design/rules/check-static.mjs

@@ -0,0 +1,238 @@
+#!/usr/bin/env node
+// Proof harness for anti-default.json.
+//
+// This is NOT the verifier. The real verifier (design-studio-plan.md 3.6) renders the page
+// in the automation Chrome profile and reads computed styles. This runs only the subset of
+// rules that can be decided from the source text of a single self-contained HTML file, with
+// no browser and no dependencies. Its job is to prove the ruleset fires on a slop fixture
+// and stays silent on an honest one.
+//
+// Usage: node check-static.mjs [file.html ...]        (no args = all four fixtures)
+
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, join, basename, resolve } from 'node:path';
+import { assertAntiDefaultContract } from './anti-default-contract.mjs';
+
+const here = dirname(fileURLToPath(import.meta.url));
+const RULES = JSON.parse(readFileSync(join(here, 'anti-default.json'), 'utf8'));
+assertAntiDefaultContract(RULES, JSON.parse(readFileSync(join(here, 'web.json'), 'utf8')));
+const byId = Object.fromEntries(RULES.rules.map(r => [r.id, r]));
+
+const srgb = c => { c /= 255; return c <= 0.03928 ? c / 12.92 : ((c + 0.055) / 1.055) ** 2.4; };
+const lum = hex => {
+  const h = hex.replace('#', '');
+  const f = h.length === 3 ? h.split('').map(c => c + c).join('') : h;
+  const [r, g, b] = [0, 2, 4].map(i => parseInt(f.slice(i, i + 2), 16));
+  return 0.2126 * srgb(r) + 0.7152 * srgb(g) + 0.0722 * srgb(b);
+};
+const contrast = (a, b) => { const [x, y] = [lum(a), lum(b)].sort((m, n) => n - m); return (x + 0.05) / (y + 0.05); };
+
+function parse(html) {
+  const css = [...html.matchAll(/<style[^>]*>([\s\S]*?)<\/style>/gi)].map(m => m[1]).join('\n');
+  const body = (html.match(/<body[^>]*>([\s\S]*)<\/body>/i) || [, html])[1];
+  const strip = s => s.replace(/<(script|style)[\s\S]*?<\/\1>/gi, ' ').replace(/<[^>]+>/g, ' ');
+  const text = strip(body).replace(/&nbsp;/g, ' ').replace(/[ \t]+/g, ' ');
+  const attrs = [...html.matchAll(/\b(alt|aria-label|title|placeholder)\s*=\s*"([^"]*)"/gi)].map(m => m[2]).join(' \n ');
+  const docTitle = (html.match(/<title[^>]*>([\s\S]*?)<\/title>/i) || [, ''])[1];
+  const heroBlock = (body.match(/<section[^>]*class="[^"]*hero[^"]*"[\s\S]*?<\/section>/i) || [''])[0];
+  const heroText = strip(heroBlock);
+  const headings = [...body.matchAll(/<h[1-3][^>]*>([\s\S]*?)<\/h[1-3]>/gi)].map(m => strip(m[1]));
+  const rule = sel => {
+    const re = new RegExp(sel.replace(/[.*+?^${}()|[\]\\]/g, '\\$&') + '\\s*\\{([^}]*)\\}', 'i');
+    return (css.match(re) || [, ''])[1];
+  };
+  const vars = Object.fromEntries([...css.matchAll(/(--[\w-]+)\s*:\s*([^;]+);/g)].map(m => [m[1], m[2].trim()]));
+  const resolve = v => (v || '').replace(/var\((--[\w-]+)\)/g, (_, n) => vars[n] || '');
+  const cssPresent = css.trim().length > 0;
+  const externalCss = /<link[^>]+rel\s*=\s*["']?stylesheet/i.test(html);
+  return { css, body, text, attrs, heroText, headings, rule, resolve, cssPresent, externalCss,
+           all: text + '\n' + attrs + '\n' + docTitle };
+}
+
+// A check returns one of three things, never two:
+//   null  the check ran and the page is clean
+//   U     the check could not decide from source (the subject was not visible here)
+//   text  the check ran and the page trips the rule, with what was measured
+// The third state is the whole point. "The source does not show it" is NOT
+// "the page does not do it": styles can live in an external sheet, a utility
+// framework, or JS. A harness without U reports an unreadable page as clean.
+const U = '\u0000UNDECIDABLE';
+
+// Checks that cannot be decided at all when no inline CSS is present.
+const CSS_DEPENDENT = new Set(['AD01','AD02','AD03','AD10','AD11','AD12','AD15','AD16','AD20',
+  'AD27','AD28','AD29','AD42','AD43','AD44','AD59','AD60','AD61','AD62','AD63','AD64','AD65','AD66','AD69']);
+
+// id -> (doc) => null | U | string
+const CHECKS = {
+  AD01: d => { const f = (d.rule('body').match(/font-family\s*:\s*([^;]+)/i) || [, ''])[1]
+      + ',' + (d.rule('h1, h2, h3').match(/font-family\s*:\s*([^;]+)/i) || [, ''])[1];
+    const hit = ['Inter', 'Space Grotesk', 'Roboto', 'Arial', 'Helvetica'].filter(n => new RegExp(`(^|[,'"\\s])${n}\\b`, 'i').test(f));
+    return hit.length ? `display/body face = ${hit.join(', ')}` : null; },
+  AD02: d => { const m = d.rule('body').match(/font-size\s*:\s*(\d+(?:\.\d+)?)px/i);
+    if (!m) return U;
+    return +m[1] < 18 ? `body font-size = ${m[1]}px (floor 18px)` : null; },
+  AD03: d => { const b = d.rule('body'); const hex = v => (d.resolve(v || '').match(/#[0-9a-f]{3,6}\b/i) || [])[0];
+    const fg = hex((b.match(/(?:^|;)\s*color\s*:\s*([^;]+)/i) || [])[1]);
+    const bg = hex((b.match(/background(?:-color)?\s*:\s*([^;]+)/i) || [])[1]);
+    if (!fg || !bg) return U;
+    const r = contrast(fg, bg); return r < 7 ? `body ${fg} on ${bg} = ${r.toFixed(2)}:1 (floor 7.0:1)` : null; },
+  AD10: d => /text-transform\s*:\s*uppercase/i.test(d.rule('body')) ? 'body text-transform: uppercase' : null,
+  AD11: d => /Fraunces|Instrument[_ ]Serif/i.test(d.css) ? 'reflex serif in the stack' : null,
+  AD12: d => { const b = d.rule('body'); if (!b.trim()) return U;
+    const val = re => d.resolve((b.match(re) || [])[1] || '').trim();
+    const fgRaw = val(/(?:^|;)\s*color\s*:\s*([^;]+)/i);
+    const bgRaw = val(/background(?:-color)?\s*:\s*([^;]+)/i);
+    if (!fgRaw || !bgRaw) return U;
+    const isBlack = v => /^(#0{3}|#0{6}|black)$/i.test(v), isWhite = v => /^(#f{3}|#f{6}|white)$/i.test(v);
+    const hRaw = d.resolve((d.rule('h1, h2, h3').match(/color\s*:\s*([^;]+)/i) || [])[1] || '').trim();
+    if (isBlack(fgRaw) && isWhite(bgRaw)) return `pure ${fgRaw} on ${bgRaw}`;
+    if (isWhite(fgRaw) && isBlack(bgRaw)) return `pure ${fgRaw} on ${bgRaw}`;
+    if (isBlack(hRaw) && isWhite(bgRaw)) return `pure ${hRaw} heading on ${bgRaw}`;
+    return null; },
+  AD15: d => /(?:\.hero|header)[^{]*\{[^}]*background[^;}]*(linear|radial)-gradient/i.test(d.css) ? 'gradient on the hero ground' : null,
+  AD16: d => /background-clip\s*:\s*text/i.test(d.css) && /gradient/i.test(d.css) ? 'background-clip: text over a gradient' : null,
+  AD20: d => {
+    let decided = false;
+    const sels = [...d.css.matchAll(/([^{}]+)\{([^}]*)\}/g)]
+      .filter(m => /(\bbutton|\.cta\b|\.btn\b|\[type=["']?submit)/i.test(m[1]));
+    for (const [, sel, block] of sels) {
+      const fg = d.resolve((block.match(/(?:^|;)\s*color\s*:\s*([^;]+)/i) || [, ''])[1]).trim();
+      const bg = d.resolve((block.match(/background(?:-color)?\s*:\s*([^;]+)/i) || [, ''])[1]).trim();
+      const hex = v => (v.match(/#[0-9a-f]{3,8}/i) || [])[0];
+      if (!hex(fg) || !hex(bg)) continue;
+      const r = contrast(hex(fg), hex(bg));
+      if (r < 4.5) return `CTA label ${hex(fg)} on ${hex(bg)} = ${r.toFixed(2)}:1 (floor 4.5:1) on "${sel.trim()}"`;
+      decided = true;
+    }
+    if (!decided && /<button|type=["']?submit|class="[^"]*\b(cta|btn)\b/i.test(d.body)) return U;
+    return null; },
+  AD27: d => { const m = [...d.css.matchAll(/border-radius\s*:\s*(\d+)px/gi)].map(x => +x[1]).filter(v => v >= 24);
+    return m.length ? `border-radius ${m.join('px, ')}px (cards cap at 16px)` : null; },
+  AD28: d => { const hit = [...d.css.matchAll(/\{([^}]*)\}/g)].filter(b =>
+      /border\s*:\s*1px/i.test(b[1]) && /box-shadow\s*:[^;]*?\b(\d+)px\s+(\d+)px/i.test(b[1]) &&
+      +(b[1].match(/box-shadow\s*:[^;]*?\b\d+px\s+(\d+)px/i) || [, 0])[1] >= 16);
+    return hit.length ? `1px border + ${(hit[0][1].match(/box-shadow\s*:[^;]*?\b\d+px\s+(\d+)px/i))[1]}px shadow blur on one element` : null; },
+  AD29: d => { const z = [...d.css.matchAll(/z-index\s*:\s*(\d+)/gi)].map(x => +x[1]).filter(v => v >= 999);
+    return z.length ? `z-index ${z.join(', ')}` : null; },
+  AD42: d => { const m = d.css.match(/border-(?:left|right)\s*:\s*(\d+)px/i);
+    return m && +m[1] > 1 ? `${m[1]}px side-stripe border` : null; },
+  AD43: d => /backdrop-filter\s*:[^;]*blur/i.test(d.css) ? 'backdrop-filter: blur' : null,
+  AD44: d => /repeating-(linear|radial)-gradient/i.test(d.css) ? 'repeating-gradient background' : null,
+  AD45: d => /feTurbulence|feDisplacementMap|\b(sketch|doodle|squiggle|hand-drawn)\b/i.test(d.body + d.css) ? 'sketchy-SVG marker' : null,
+  AD46: d => { const e = d.headings.filter(h => /\p{Extended_Pictographic}/u.test(h));
+    return e.length ? `emoji in heading: ${e[0].trim().slice(0, 40)}` : null; },
+  AD48: d => { const bad = d.text.split('\n').map(l => (l.match(/·/g) || []).length).filter(n => n > 1);
+    return bad.length ? `${Math.max(...bad)} middle dots on one line` : null; },
+  AD50: d => !d.heroText.trim() ? U : /(^|\s)(↓\s*)?scroll( to (explore|discover|begin|walk))?\b/i.test(d.heroText) ? 'scroll cue in the hero' : null,
+  AD53: d => { if (!d.heroText.trim()) return U; const m = d.heroText.match(/\bv\d+\.\d+(\.\d+)?\b|\b(beta|alpha|early access|invite[- ]only|preview|waitlist)\b/i);
+    return m ? `hero status label "${m[0]}"` : null; },
+  AD59: d => /cursor\s*:\s*url\(/i.test(d.css) ? 'custom cursor image' : null,
+  AD60: d => /transition\s*:\s*all\b/i.test(d.css) ? 'transition: all' : null,
+  AD61: d => { const m = [...d.css.matchAll(/scale\((0(?:\.\d+)?)\)/gi)].map(x => +x[1]).filter(v => v <= 0.5);
+    return m.length ? `entry from scale(${m[0]})` : null; },
+  AD62: d => { const m = d.css.match(/(?:transition|animation)[^;{}]*\bease-in\b(?!-out)/i);
+    return m ? 'ease-in timing on an interactive element' : null; },
+  AD63: d => { const m = [...d.css.matchAll(/(?:transition|animation)[^;{}]*?(\d{3,5})ms/gi)].map(x => +x[1]).filter(v => v > 300);
+    return m.length ? `${Math.max(...m)}ms UI duration (budget 300ms)` : null; },
+  AD64: d => { const m = d.css.match(/transition\s*:[^;{}]*\b(width|height|top|left|right|bottom|margin|padding)\b/i);
+    return m ? `animating layout property "${m[1]}"` : null; },
+  AD65: d => (/transition|@keyframes|animation\s*:/i.test(d.css) && !/prefers-reduced-motion/i.test(d.css))
+    ? 'motion present, no prefers-reduced-motion block' : null,
+  AD66: d => { const hov = [...d.css.matchAll(/:hover\s*\{([^}]*)\}/gi)].filter(m => /transform\s*:/i.test(m[1]));
+    if (!hov.length) return null;
+    const gated = /@media\s*\(hover:\s*hover\)[^{]*\{[\s\S]*?:hover\s*\{[^}]*transform/i.test(d.css);
+    return gated ? null : 'hover transform not gated by @media (hover: hover)'; },
+  AD69: d => { const off = /outline\s*:\s*(none|0)\b/i.test(d.css);
+    return off && !/:focus-visible/i.test(d.css) ? 'outline removed with no :focus-visible replacement' : null; },
+  AD70: d => { const inputs = [...d.body.matchAll(/<(input|textarea)\b[^>]*>/gi)].map(m => m[0])
+      .filter(t => /placeholder\s*=/.test(t) && !/aria-label/.test(t))
+      .filter(t => { const id = (t.match(/\bid\s*=\s*"([^"]+)"/i) || [])[1];
+        return !id || !new RegExp(`<label[^>]*for\\s*=\\s*"${id}"`, 'i').test(d.body); });
+    return inputs.length ? `${inputs.length} placeholder-as-label field(s)` : null; },
+  AD74: d => { const n = (d.all.match(/[—–]/g) || []).length;
+    return n ? `${n} em/en dash character(s) in rendered text or attributes` : null; },
+  AD75: d => { const m = d.all.match(/\b(john|jane|joe|jack)\s+(doe|smith|su|chan)\b|\blorem ipsum\b/i); return m ? `"${m[0]}"` : null; },
+  AD76: d => { const m = d.all.match(/\b(acme|nexus|smartflow|cloudly|innovatech|globex|initech)\b/i); return m ? `"${m[0]}"` : null; },
+  AD77: d => { const m = d.all.match(/\b(99\.9{1,2}%|100%|10x|50%|1,?234,?567)\b/i); return m ? `"${m[0]}"` : null; },
+  AD78: d => { const m = d.all.match(/\b(elevate|seamless(ly)?|unleash|supercharge|streamline|empower(s|ing)?|world[- ]class|next[- ]gen(eration)?|revolutioni[sz]e|cutting[- ]edge|game[- ]chang\w*)\b/i); return m ? `"${m[0]}"` : null; },
+  AD79: d => { const m = d.all.match(/\b(quietly (in use|trusted)|from the field|field notes|on our desks|currently on the bench|loose plates)\b/i); return m ? `"${m[0]}"` : null; },
+  AD80: d => { const m = d.all.match(/\b(stage|step|phase|pass)\s*(one|two|three|four|0?\d)\b/i); return m ? `"${m[0]}"` : null; },
+  AD81: d => { const m = d.all.match(/\b\w+ theat(er|re)\b|\bnot just (a |an )?\w+,? it'?s\b|\bactually \w+, not\b/i); return m ? `"${m[0]}"` : null; },
+};
+
+export const implemented = Object.keys(CHECKS);
+
+// Keep source coverage separate from canonical findings: an undecided check is
+// information even if another check of the same canonical rule finds a failure.
+export function gradeStatic(html) {
+  const doc = parse(html);
+  const results = implemented.map(id => {
+    const value = CSS_DEPENDENT.has(id) && !doc.cssPresent ? U : CHECKS[id](doc);
+    return { sourceRuleId: id, ruleId: byId[id].duplicateOf || id,
+      check: byId[id].check, method: 'static-harness',
+      state: value === U ? 'UNDECIDABLE' : value === null ? 'CLEAN' : 'FINDING',
+      detail: value === U ? 'Could not decide from source; rendered evidence is required.' : value };
+  });
+  const group = rows => {
+    const merged = new Map();
+    for (const row of rows) {
+      const prior = merged.get(row.ruleId);
+      merged.set(row.ruleId, { ruleId: row.ruleId, check: row.check, method: row.method,
+        state: row.state, sourceRuleIds: [...(prior?.sourceRuleIds || []), row.sourceRuleId],
+        detail: prior ? `${prior.detail}; ${row.detail}` : row.detail });
+    }
+    return [...merged.values()];
+  };
+  const findings = group(results.filter(row => row.state === 'FINDING'));
+  const undecided = group(results.filter(row => row.state === 'UNDECIDABLE'));
+  const undecidableCount = results.filter(row => row.state === 'UNDECIDABLE').length;
+  const judged = RULES.rules.filter(rule => rule.check === 'judged').map(rule => ({
+    ruleId: rule.id, check: 'judged', state: 'ASSERTED',
+    detail: `${rule.name}. Check: ${rule.howMeasured} Guidance: ${rule.rewrite} This rule requires model judgment and is never scored.`,
+  }));
+  return { findings, undecided, judged, results, decidedCount: results.length - undecidableCount,
+    undecidableCount, litCount: results.filter(row => row.state === 'FINDING').length,
+    externalCssUnread: doc.externalCss && !doc.cssPresent };
+}
+
+export function main(args = process.argv.slice(2)) {
+  const targets = args.length ? args
+    : ['claude-default.html', 'house-clean.html', 'generator-run-1.html', 'external-css.html']
+      .map(f => join(here, 'fixtures', f));
+  console.log(`anti-default.json  ${RULES.rules.length} rules  (${RULES.rules.filter(r => r.check === 'measured').length} measured, ` +
+    `${RULES.rules.filter(r => r.check === 'proxy').length} proxy, ${RULES.rules.filter(r => r.check === 'judged').length} judged)`);
+  console.log(`static harness     ${implemented.length} source-decidable checks; per-page coverage is reported below. The rest need the rendered DOM.\n`);
+
+  let exit = 0;
+  for (const file of targets) {
+    const report = gradeStatic(readFileSync(file, 'utf8'));
+    const { findings, undecided, judged, litCount, decidedCount, undecidableCount } = report;
+    const name = basename(file);
+    const lit = new Set(findings.flatMap(row => row.sourceRuleIds));
+    // These are fixture expectations, not a claim that the page passed design review.
+    const EXPECT = {
+      'claude-default.html': { bar: 'must trip >= 5', ok: () => litCount >= 5 },
+      'house-clean.html': { bar: 'must trip 0 with nothing undecided',
+        ok: () => litCount === 0 && undecidableCount === 0 },
+      'generator-run-1.html': { bar: 'must trip AD02 + AD20, and nothing else',
+        ok: () => lit.has('AD02') && lit.has('AD20') && litCount === 2 },
+      'external-css.html': { bar: 'must decide nothing it cannot see',
+        ok: () => litCount === 0 && undecidableCount === 26 &&
+          [...CSS_DEPENDENT, 'AD50', 'AD53'].every(id => report.results.some(row => row.sourceRuleId === id && row.state === 'UNDECIDABLE')) },
+    };
+    const spec = EXPECT[name];
+    const ok = spec?.ok();
+    if (spec && !ok) exit = 1;
+    console.log(`${spec ? (ok ? 'PASS' : 'FAIL') : 'REPORT'}  ${name}  ${litCount} lit, ${decidedCount} decided, ` +
+      `${undecidableCount} undecidable  (${spec?.bar || 'no fixture bar set'})`);
+    for (const finding of findings) console.log(`      ${finding.ruleId}  ${finding.detail}`);
+    for (const row of undecided) console.log(`      ${row.ruleId}  UNDECIDABLE  ${row.detail} (source: ${row.sourceRuleIds.join(' ')})`);
+    if (report.externalCssUnread) console.log('      Styles are in an external sheet this harness never reads.');
+    for (const rule of judged) console.log(`      ${rule.ruleId}  JUDGED  ${rule.detail}`);
+    console.log('');
+  }
+  return exit;
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) process.exitCode = main();

package/src/command-os/design/rules/fixtures/claude-default.html

@@ -0,0 +1,55 @@
+<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><title>Nexus — Elevate Your Workflow</title>
+<style>
+  :root { --brand: #7c3aed; }
+  body { font-family: Inter, sans-serif; color: #666666; background: #ffffff; font-size: 16px; margin: 0; }
+  h1, h2, h3 { font-family: 'Space Grotesk', sans-serif; color: #000000; }
+  .hero { background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); padding-top: 180px; padding-bottom: 120px; text-align: center; }
+  .hero h1 { font-size: 112px; letter-spacing: -0.06em; background: linear-gradient(90deg,#fff,#c4b5fd); -webkit-background-clip: text; background-clip: text; color: transparent; }
+  .eyebrow { text-transform: uppercase; letter-spacing: 0.18em; font-size: 12px; }
+  .card { border: 1px solid #e5e7eb; box-shadow: 0 8px 32px rgba(124,58,237,0.25); border-radius: 32px; padding: 24px; background: #fff; }
+  .card::before { content: ""; }
+  .rail { border-left: 4px solid var(--brand); padding-left: 16px; }
+  .dot { width: 8px; height: 8px; border-radius: 50%; background: var(--brand); display: inline-block; }
+  .stripes { background: repeating-linear-gradient(45deg, #f3f4f6 0 8px, #fff 8px 16px); }
+  .sticky { position: fixed; z-index: 9999; }
+  button { transition: all 420ms ease-in; outline: none; cursor: url(/cursor.png), auto; }
+  button:hover { transform: scale(1.05); }
+  .fade { animation: pop 600ms ease-in forwards; }
+  @keyframes pop { from { transform: scale(0); opacity: 0 } to { transform: scale(1); opacity: 1 } }
+  .grow { transition: height 500ms linear, padding 500ms linear; }
+</style></head>
+<body>
+<nav><span class="dot"></span> Product · Pricing · Docs · Company · Blog</nav>
+<section class="hero">
+  <p class="eyebrow">v0.6 · INVITE-ONLY PREVIEW</p>
+  <h1>Elevate Your Workflow</h1>
+  <p>The seamless, world-class platform that empowers teams to unleash their potential — built for the next generation of work.</p>
+  <button>Get Started</button> <button>Start Now</button>
+  <p class="eyebrow">BUILD. SHIP. SCALE.</p>
+  <p>Lisbon 14:23 · 18°C</p>
+  <p>↓ Scroll to explore</p>
+</section>
+<section class="stripes">
+  <p class="eyebrow">01 · Features</p>
+  <h2>Why teams choose Nexus 🚀</h2>
+  <div style="display:grid;grid-template-columns:1fr 1fr 1fr;gap:24px">
+    <div class="card"><h3>Fast</h3><p>Lorem ipsum dolor sit amet, built to scale.</p></div>
+    <div class="card"><h3>Secure</h3><p>Lorem ipsum dolor sit amet, built to scale.</p></div>
+    <div class="card"><h3>Simple</h3><p>Lorem ipsum dolor sit amet, built to scale.</p></div>
+  </div>
+</section>
+<section>
+  <p class="eyebrow">02 · Proof</p>
+  <h2>Quietly in use at</h2>
+  <p>99.99% uptime · 10x faster · trusted by 50% of the Fortune 500</p>
+  <blockquote>Productivity theater is over. — Jane Doe, VP of Operations</blockquote>
+</section>
+<section class="rail">
+  <p class="eyebrow">03 · Process</p>
+  <h2>How it works</h2>
+  <p>Stage 1: Install. Stage 2: Configure. Stage 3: Ship.</p>
+  <form><input type="email" placeholder="Enter your work email"></form>
+</section>
+<footer><p>v1.4.2 · Build 0048 · last sync 4s ago · main</p></footer>
+</body></html>

package/src/command-os/design/rules/fixtures/external-css.html

@@ -0,0 +1,7 @@
+<!doctype html><html><head><meta charset="utf-8"><title>Adversary</title>
+<link rel="stylesheet" href="/styles.css"></head>
+<body class="text-[13px] text-gray-400">
+<main><h1 class="text-6xl">Headline</h1>
+<p>Body copy that is 13px and low contrast, but you cannot see that from here.</p>
+<button class="bg-gray-100 text-white">Book an assessment</button></main>
+</body></html>

package/src/command-os/design/rules/fixtures/generator-run-1.html

@@ -0,0 +1,31 @@
+<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><title>Generator run 1, reproduction</title>
+<!--
+  Reproduction of the two failures design-run's standalone generator shipped on Jerry's own
+  brand (3 passes, 26 minutes, reported by the ghl-command-mcp lane 2026-09-08):
+  13px body text, and a call-to-action at roughly 1.15:1.
+  This fixture exists to answer one question: would anti-default.json have caught them?
+  It is deliberately clean in every other respect, so anything else that lights up is a false positive.
+-->
+<style>
+  :root { --ink: #232833; --body: #4a5163; --ground: #ffffff; --line: #e3e3df; --ease-out: cubic-bezier(0.23, 1, 0.32, 1); }
+  body { font-family: "Sora", system-ui, sans-serif; color: var(--body); background: var(--ground);
+         font-size: 13px; line-height: 1.55; margin: 0; }
+  h1 { font-family: "Sora", system-ui, sans-serif; color: var(--ink); font-size: 46px; line-height: 1.15; letter-spacing: -0.02em; }
+  main { max-width: 66ch; margin: 0 auto; padding: 48px 24px; }
+  .cta { background: #efefef; color: #ffffff; border: 0; border-radius: 6px;
+         min-height: 48px; min-width: 48px; padding: 14px 28px; font-size: 17px;
+         transition: transform 160ms var(--ease-out); }
+  .cta:active { transform: scale(0.97); }
+  .cta:focus-visible { outline: 2px solid var(--ink); outline-offset: 3px; }
+  @media (hover: hover) and (pointer: fine) { .cta:hover { transform: translateY(-1px); } }
+  label { display: block; color: var(--ink); font-size: 16px; margin-bottom: 6px; }
+  input { font-size: 17px; padding: 12px; border: 1px solid var(--line); border-radius: 6px; width: 100%; }
+  @media (prefers-reduced-motion: reduce) { .cta { transition: none; } .cta:active { transform: none; } }
+</style></head>
+<body><main>
+  <h1>A shorter recovery, planned before you pay</h1>
+  <p>We map what is happening, then treat it in a fixed number of visits you agree to up front. No open-ended plans.</p>
+  <button class="cta">Book an assessment</button>
+  <form><label for="e">Your email</label><input id="e" type="email"></form>
+</main></body></html>

package/src/command-os/design/rules/fixtures/house-clean.html

@@ -0,0 +1,59 @@
+<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><title>Copper Ridge Chiropractic</title>
+<style>
+  :root {
+    --ink: #262b36; --body: #4a5163; --ground: #f7f7f5; --surface: #ffffff;
+    --accent: #1f5f4f; --line: #dcdcd6;
+    --ease-out: cubic-bezier(0.23, 1, 0.32, 1);
+  }
+  body { font-family: "Source Serif 4", Georgia, serif; color: var(--body); background: var(--ground);
+         font-size: 19px; line-height: 1.55; margin: 0; }
+  h1, h2 { font-family: "Sora", system-ui, sans-serif; color: var(--ink); line-height: 1.15; letter-spacing: -0.02em; }
+  h1 { font-size: 58px; }
+  h2 { font-size: 34px; }
+  main { max-width: 68ch; margin: 0 auto; padding: 0 24px; }
+  .hero { background: var(--surface); padding-top: 72px; padding-bottom: 64px; border-bottom: 1px solid var(--line); }
+  .cta { background: var(--accent); color: var(--surface); border: 0; border-radius: 6px;
+         min-height: 48px; min-width: 48px; padding: 14px 28px; font-size: 18px;
+         transition: transform 160ms var(--ease-out), background-color 160ms var(--ease-out); }
+  .cta:active { transform: scale(0.97); }
+  .cta:focus-visible { outline: 2px solid var(--ink); outline-offset: 3px; }
+  @media (hover: hover) and (pointer: fine) { .cta:hover { background: #17493c; } }
+  label { display: block; color: var(--ink); font-size: 17px; margin-bottom: 6px; }
+  input { font-size: 18px; padding: 12px; border: 1px solid var(--line); border-radius: 6px; width: 100%; }
+  input:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+  .panel { background: var(--surface); border: 1px solid var(--line); border-radius: 10px; padding: 28px; }
+  .split { display: grid; grid-template-columns: 1.4fr 1fr; gap: 40px; align-items: start; }
+  @media (prefers-reduced-motion: reduce) {
+    .cta { transition: background-color 160ms linear; }
+    .cta:active { transform: none; }
+  }
+</style></head>
+<body>
+<nav><a href="/care">Care</a> <a href="/team">Our team</a> <a href="/visit">Plan a visit</a></nav>
+<section class="hero"><main>
+  <h1>Back pain that has a plan behind it</h1>
+  <p>We map what is actually happening in your spine, then treat it in a fixed number of visits you agree to up front.</p>
+  <button class="cta">Book an assessment</button>
+</main></section>
+<main>
+  <section class="split">
+    <div>
+      <h2>What the first visit covers</h2>
+      <p>Ninety minutes. A movement screen, imaging review if you have it, and a written plan with the visit count on it before you pay for anything.</p>
+    </div>
+    <div class="panel">
+      <p>Dr. Amara Okonkwo has treated 1,340 patients in Copper Ridge since 2019.</p>
+    </div>
+  </section>
+  <section>
+    <h2>Book a first visit</h2>
+    <form>
+      <label for="email">Your email</label>
+      <input id="email" type="email" name="email">
+      <button class="cta" type="submit">Request a time</button>
+    </form>
+  </section>
+</main>
+<footer><main><p>Copper Ridge Chiropractic, 118 Wexler Ave. (406) 555-0173</p></main></footer>
+</body></html>

package/src/command-os/design/rules/web.json

@@ -0,0 +1,222 @@
+[
+  {
+    "id": "W1",
+    "medium": "web",
+    "name": "Mobile-first, capped measure",
+    "threshold": "no horizontal overflow at 320; shell max-width 1200–1440; prose ≤75ch; min-width media queries",
+    "unit": "px / ch",
+    "source": "Marcotte; Frost",
+    "check": "measured",
+    "howMeasured": "Document scroll width at 320 px; the widest centred container's max-width; prose max-width; media query direction."
+  },
+  {
+    "id": "W2",
+    "medium": "web",
+    "name": "Content-driven breakpoints",
+    "threshold": "breakpoints near 640/768/1024/1280; zero horizontal scroll at 320, 390, 768, 1024, 1440",
+    "unit": "px",
+    "source": "Frost; Tailwind",
+    "check": "measured",
+    "howMeasured": "Media query widths read from the stylesheet; document scroll width at five viewports."
+  },
+  {
+    "id": "W3",
+    "medium": "web",
+    "name": "Fluid type via clamp()",
+    "threshold": "h1 and body font-size use clamp(); no bare vw on type",
+    "unit": "",
+    "source": "Utopia, Mudford & Gilyead",
+    "check": "measured",
+    "howMeasured": "Stylesheet font-size declarations on h1 and body selectors inspected for clamp() and bare vw."
+  },
+  {
+    "id": "W4",
+    "medium": "web",
+    "name": "Body size and tap targets",
+    "threshold": "body ≥16 px; buttons, form controls, CTAs and nav links ≥44×44 px; any other link ≥24×24 px",
+    "unit": "px",
+    "source": "Apple HIG (44); WCAG 2.5.8 (24)",
+    "check": "measured",
+    "howMeasured": "Computed body font-size; bounding boxes of links, buttons and inputs at 390 px, tiered by role."
+  },
+  {
+    "id": "W5",
+    "medium": "web",
+    "name": "One primary action per view",
+    "threshold": "≤1 primary control per viewport-height slice",
+    "unit": "controls",
+    "source": "Krug; Hick's Law",
+    "check": "proxy",
+    "howMeasured": "Primary controls derived by accent fill (background within a colour distance of the brand accent); the file's data-role only cross-checked."
+  },
+  {
+    "id": "W6",
+    "medium": "web",
+    "name": "The fold answers what, who, next",
+    "threshold": "h1 ≤12 words, a subline and the primary control inside the first viewport at 1366×768 and 390×844; nav ≤72 px on mobile",
+    "unit": "",
+    "source": "NN/g; Krug",
+    "check": "proxy",
+    "howMeasured": "Positions of h1, first paragraph and first primary control against the viewport; the comprehension claim is ASSERTED."
+  },
+  {
+    "id": "W7",
+    "medium": "web",
+    "name": "Scan patterns; left-aligned body",
+    "threshold": "body paragraphs never justified; prose not centred",
+    "unit": "",
+    "source": "NN/g; Butterick",
+    "check": "measured",
+    "howMeasured": "Computed text-align on paragraphs longer than 40 words."
+  },
+  {
+    "id": "W8",
+    "medium": "web",
+    "name": "Measure 45–75 characters",
+    "threshold": "45–75 characters per rendered line on prose",
+    "unit": "characters",
+    "source": "Bringhurst; Butterick",
+    "check": "measured",
+    "howMeasured": "Per rendered line via Range rectangles, as S10, on paragraphs of 40+ words at 1440 px."
+  },
+  {
+    "id": "W9",
+    "medium": "web",
+    "name": "Line height and paragraph spacing",
+    "threshold": "body ≥1.5, display 1.0–1.25, paragraph spacing ≥0.75em",
+    "unit": "ratio / em",
+    "source": "WCAG 1.4.12; Bringhurst",
+    "check": "measured",
+    "howMeasured": "Computed line-height ÷ font-size and margin-bottom ÷ font-size on paragraphs and headings."
+  },
+  {
+    "id": "W10",
+    "medium": "web",
+    "name": "8-point spacing, one type scale",
+    "threshold": "spacing in {4,8,12,16,24,32,48,64,96,128}; one modular scale",
+    "unit": "px",
+    "source": "Material; Bryn Jackson",
+    "check": "measured",
+    "howMeasured": "Computed margin, padding and gap values; distinct font sizes checked for a consistent ratio."
+  },
+  {
+    "id": "W11",
+    "medium": "web",
+    "name": "WCAG 2.2 AA contrast",
+    "threshold": "text ≥4.5:1, large text ≥3:1, UI ≥3:1",
+    "unit": "ratio",
+    "source": "WCAG 2.2 1.4.3 / 1.4.11",
+    "check": "measured",
+    "howMeasured": "WCAG formula on computed text and control colours versus effective background."
+  },
+  {
+    "id": "W12",
+    "medium": "web",
+    "name": "Semantic OKLCH tokens",
+    "threshold": "--color-bg/fg/accent/muted/border defined on :root in oklch(); component colour declarations resolve through var(--color-*)",
+    "unit": "",
+    "source": "W3C Design Tokens CG; Ottosson",
+    "check": "proxy",
+    "howMeasured": "Stylesheet: root custom properties present and in oklch(); share of colour declarations outside :root that use var()."
+  },
+  {
+    "id": "W13",
+    "medium": "web",
+    "name": "Five interaction states",
+    "threshold": "hover, focus-visible, active, disabled rules per interactive selector; focus ring ≥2 px, ≥3:1, not clipped",
+    "unit": "",
+    "source": "WCAG 2.4.11 / 2.4.13; Radix",
+    "check": "measured",
+    "howMeasured": "Stylesheet rules per interactive selector; after element.focus(), computed outline/box-shadow width, its contrast against adjacent colours, and whether its rect is clipped. Visibility under real conditions is ASSERTED."
+  },
+  {
+    "id": "W14",
+    "medium": "web",
+    "name": "Empty, loading and error states",
+    "threshold": "form error affordance present (aria-invalid styling, aria-describedby)",
+    "unit": "",
+    "source": "NN/g; Refactoring UI",
+    "check": "proxy",
+    "howMeasured": "Form error affordances measured; empty and loading states are ASSERTED."
+  },
+  {
+    "id": "W15",
+    "medium": "web",
+    "name": "Motion discipline",
+    "threshold": "transitions 150–300 ms; prefers-reduced-motion reset present; only transform and opacity animated; no autoplay without controls",
+    "unit": "ms",
+    "source": "Material motion; WCAG 2.2.2 / 2.3.3",
+    "check": "measured",
+    "howMeasured": "Transition durations, the reduced-motion media rule, animated properties in keyframes, video autoplay attributes."
+  },
+  {
+    "id": "W16",
+    "medium": "web",
+    "name": "Reserve space",
+    "threshold": "every image, video and iframe sized or given an aspect ratio; CLS reported as a lab number",
+    "unit": "",
+    "source": "web.dev Core Web Vitals",
+    "check": "proxy",
+    "howMeasured": "Size attributes and aspect-ratio measured; cumulative layout shift from a lab observer reported, not graded."
+  },
+  {
+    "id": "W17",
+    "medium": "web",
+    "name": "Performance budget",
+    "threshold": "≤2 font families; preload present; transfer size reported; LCP lab number reported; INP not measured",
+    "unit": "KB / ms",
+    "source": "web.dev; Addy Osmani",
+    "check": "proxy",
+    "howMeasured": "Font families and preload measured; transfer size and LCP reported from a lab run and labelled as such; INP is stated as not measured."
+  },
+  {
+    "id": "W18",
+    "medium": "web",
+    "name": "Landmarks, skip link, one h1",
+    "threshold": "header, nav, main, footer present; first focusable is the skip link; exactly one h1; no skipped heading levels; Tab order equals DOM order",
+    "unit": "",
+    "source": "WCAG 1.3.1 / 2.4.1",
+    "check": "measured",
+    "howMeasured": "Landmark elements, heading sequence, first focusable element, and the DOM-versus-visual order of focusable elements."
+  },
+  {
+    "id": "W19",
+    "medium": "web",
+    "name": "Forms",
+    "threshold": "every input labelled; type and autocomplete set; single column; error text linked to its field",
+    "unit": "",
+    "source": "Baymard; WCAG 3.3",
+    "check": "measured",
+    "howMeasured": "Label association, type and autocomplete attributes, input width versus form width, aria-describedby on invalid fields."
+  },
+  {
+    "id": "W20",
+    "medium": "web",
+    "name": "Meta layer",
+    "threshold": "title ≤60, description ≤155, og:image declared 1200×630, theme-color, favicon, JSON-LD parses",
+    "unit": "characters",
+    "source": "Open Graph; schema.org",
+    "check": "measured",
+    "howMeasured": "Document head read after load; JSON-LD parsed."
+  },
+  {
+    "id": "W21",
+    "medium": "web",
+    "name": "Show, do not only tell",
+    "threshold": "at least one non-decorative visual above the fold, and one visual per 2 content sections",
+    "unit": "visuals",
+    "source": "Ours, 2026-09-03",
+    "check": "measured",
+    "howMeasured": "Non-decorative images, inline SVG figures, video and embedded demos are counted per section from the rendered page; the logo and decorative marks are excluded. A page of pure text fails."
+  },
+  {
+    "id": "W22",
+    "medium": "web",
+    "name": "Evidence a stranger can check",
+    "threshold": "a proof section carrying at least one of: a named testimonial, a customer logo set, a screenshot of the thing working, or a specific number",
+    "unit": "",
+    "source": "Ours, 2026-09-03",
+    "check": "proxy",
+    "howMeasured": "Looks for a section marked proof, or a testimonial/figure/logo group, or a digit-bearing claim outside the nav and footer. Presence is measured; whether the evidence is TRUE or persuasive is not, and never claimed."
+  }
+]