Build
Spec-driven workflow
proposal · apply · archive
Plan a change in files, build it task by task, then fold it into your specs.
›/proposal Add rate limiting to sign-in. Someone keeps guessing passwords on /api/auth.
# Change: Rate-limit sign-in attempts
## Why
Sign-in has no per-IP limit, so passwords can be
guessed without slowing down.
## What Changes
- Sliding-window limiter on /api/auth/*
- 429 with a Retry-After header
## Impact
- Specs: auth · Code: src/lib/rate-limit.ts
›/apply add-rate-limits
## 1. Limiter
✓ 1.1 Create src/lib/rate-limit.ts
✓ 1.2 Unit tests for window edges
## 2. Routes
✓ 2.1 Wire the limiter into sign-in and sign-up
◐ 2.2 Return 429 with Retry-After working
◯ 2.3 Route tests for the 429 path
3 of 5 tasks done
›/archive add-rate-limits
$ prompter archive add-rate-limits --yes
✓ Proposal and spec deltas validated
✓ auth: 1 requirement added
Change 'add-rate-limits' archived as
'archive/2026-10/2026-10-09-add-rate-limits'.
prompter/
├── specs/auth/spec.md updated
└── changes/archive/2026-10/
└── 2026-10-09-add-rate-limits/






