@stravica-ai/rcf-schemas 0.6.2 → 0.6.3

package/CHANGELOG.md

@@ -4,6 +4,32 @@ All notable changes to `@stravica-ai/rcf-schemas` are documented in this file.
 
 The format roughly follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and the project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). Pre-1.0 breaking changes are signalled by a minor bump per semver 0.x convention.
 
+## 0.6.3 - 2026-09-17
+
+Patch bump for the last two schema-shaped claims on the rcf-lite 0.28.0 referee-guarantees train (docs claims C-33 and C-38). Adds an additive, optional `shipWithoutEval[]` carrier on the manifest (sister of `shipWithoutVerified`, written by `rcf finalise --ship-without-eval`), and an additive, optional `applicable` boolean on `browserVerificationProbePackCheck` (mirrors the pack-level `applicable`, so a check whose own `appliesTo` predicate returned false records `applicable: false` at the check level without a stray verdict or severity). Every change is additive: every 0.6.2-valid manifest keeps validating.
+
+Patch semver convention: URLs pinned at `v0.6.0`. No breaking change; every 0.6.2-valid document keeps validating.
+
+### Added
+
+- **`manifest.schema.json`**: new optional `shipWithoutEval` array on the top-level properties. Items are the new `$defs.shipWithoutEvalRecord` def: required `id` (pattern `^swe-FBS-\d{3,}(?:-[a-z0-9]+(?:-[a-z0-9]+)*)?-\d+$`, mirroring the `swv-` family and accepting both numeric-only and kebab-slug FBS ids), `fbsId`, `ackedAt` (ISO timestamp), `reason` (min-length-1 string, the operator's `--ship-without-eval "<reason>"` argument), `declaredAcs` (min-items-1, items are the new `$defs.shipWithoutEvalDeclaredAc` def with required `acId` and `verdict` enum `EVAL-MISSING | EVAL-BELOW-THRESHOLD`, plus an optional verify-supplied `reason`), and `reportPath` (min-length-1 string). `additionalProperties: false` on both new objects. Written by `packages/rcf-lite/src/finalise/ship-without-eval.js`; the writer's file header (rcf-lite `main` at time of this release) already names the exact deltas landed here.
+- **`manifest.schema.json`**: new optional `applicable` boolean on `$defs.browserVerificationProbePackCheck`. When present and false, `verdict` and `severity` are omitted and the aggregate verdict rule (per spec section 3.4) treats the check as neither pass nor fail. When absent or true, the pre-0.6.3 requiredness of `verdict` and `severity` is preserved via an `if/then` guard, so every 0.6.1-valid check keeps validating. Mirrors the pack-level `applicable` on `browserVerificationProbePack`. Emitted by `packages/rcf-lite/src/browser-verify/pack-runner.js` from rcf-lite 0.28.0 for a check whose own `appliesTo` predicate returned false (rcf-lite `main` file header names the check-level `applicable: false` write path that this schema addition unblocks).
+- **`manifest.schema.json`**: top-level `description` extended to name the new `shipWithoutEval[]` field and the check-level `applicable` flag, following the "From 0.X.Y the manifest additionally carries..." precedent set at 0.4.1, 0.4.4, 0.4.5, and 0.5.1.
+- **Fixtures (valid)**: `fixtures/valid/manifest/manifest-015-ship-without-eval.json` (one ack with two `declaredAcs`, one carrying an optional verify-supplied `reason`, both verdict enum values exercised), `fixtures/valid/manifest/manifest-016-probe-pack-check-applicable-false.json` (a probe-pack with three checks: two normal `pass`, one `applicable: false` with a detail and no verdict / severity).
+- **Fixtures (invalid)**: `fixtures/invalid/manifest/manifest-024-ship-without-eval-bad-id.json` (id does not match the `swe-FBS-<n>` pattern), `fixtures/invalid/manifest/manifest-025-ship-without-eval-missing-reason.json` (record missing the required `reason`), `fixtures/invalid/manifest/manifest-026-probe-pack-check-applicable-omitted-no-verdict.json` (a check omits `applicable` and omits `verdict` / `severity`, so the back-compat requiredness fires).
+- **Tests**: `test/manifest.test.js` gains 15 cases: 11 for `shipWithoutEval` (positive shape, both verdict enum values, slugged FBS id, id-pattern rejection, verdict enum restriction, `reason` requiredness with both missing and empty-string, empty `declaredAcs` rejection, missing `fbsId`, empty `reportPath`, unknown-property rejection on the record, and a back-compat absent-`shipWithoutEval` case); 4 for the check-level `applicable` field (positive `applicable: false` with no verdict / severity, `applicable: true` still requires verdict + severity, back-compat check without `applicable` still requires verdict + severity, `applicable` typed as boolean not string). Total suite grows from 350 to 365.
+
+### Migration
+
+- **Existing chains on 0.6.2**: bump `@stravica-ai/rcf-schemas` to `0.6.3`. Every existing document keeps validating; both additions are optional and unknown to pre-0.6.3 callers.
+- **rcf-lite consumer bump**: `rcf-lite` pins `@stravica-ai/rcf-schemas` exactly. rcf-lite 0.28.0 already emits both shapes (the `shipWithoutEval[]` writer and the check-level `applicable: false` path); the follow-up rcf-lite PR bumps its schema pin to `0.6.3` and drops the two "schema-skipped" workarounds (the manifest-write validator skip in `ship-without-eval.js` and the `verdict: 'skipped'` fallback in the check-level applicability arm of `pack-runner.js`) so both writers persist through the strict validator.
+
+### Notes
+
+- Traces to work item `w-2026-09-16-dave-019` (project `rcf-lite-wsd`) and the referee-guarantees train that shipped rcf-lite 0.28.0 (referee page docs claims C-33 for `shipWithoutEval` and C-38 for check-level `applicable`).
+- The check-level `applicable` change uses a JSON Schema `if / then` conditional (mirroring the pattern set by the `uiBaselineDrift` per-kind `tsId` requiredness rule at 0.4.2): the `if` matches only when `applicable` is present with value `false`, so the `then` clause requiring `verdict` and `severity` is applied to every other case (absent `applicable` and `applicable: true` alike). Back-compat for every pre-0.6.3 probe-pack check is preserved.
+- Sub-defs for `shipWithoutEval` sit alongside the existing `shipWithoutVerifiedRecord` and `shipWithoutVerifiedDeclaredAc` peers; the id family (`swe-FBS-<n>`) and verdict enum (`EVAL-MISSING | EVAL-BELOW-THRESHOLD`) are the eval-node analogues of the verify-integrity `swv-FBS-<n>` and `MOCK-ONLY-DECLARED | BLOCKED-BY-DECLARATION` shapes.
+
 ## 0.6.2 - 2026-09-09
 
 Patch bump for four additive, optional fields that let a blueprint's own layers point at their owning artefacts rather than restating shapes and promises inline. Adds `deliveredBy` on the requirement record (naming the TAC or ADR that delivers the requirement's externally promised property), and `ownerRef`, `disposition`, and `vendorCitation` on the acceptance criterion inline on a user story. Every change is additive: every 0.6.1-valid document remains valid.

package/fixtures/invalid/manifest/manifest-024-ship-without-eval-bad-id.json

@@ -0,0 +1,19 @@
+{
+  "version": "2.0.0",
+  "projectName": "Ship-without-eval bad id",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "shipWithoutEval": [
+    {
+      "id": "not-a-swe-id",
+      "fbsId": "FBS-015",
+      "ackedAt": "2026-09-16T14:20:00Z",
+      "reason": "reason string",
+      "declaredAcs": [
+        { "acId": "AC-1501-2", "verdict": "EVAL-MISSING" }
+      ],
+      "reportPath": ".rcf-verify-report.json"
+    }
+  ]
+}

package/fixtures/invalid/manifest/manifest-025-ship-without-eval-missing-reason.json

@@ -0,0 +1,18 @@
+{
+  "version": "2.0.0",
+  "projectName": "Ship-without-eval missing reason",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "shipWithoutEval": [
+    {
+      "id": "swe-FBS-015-1",
+      "fbsId": "FBS-015",
+      "ackedAt": "2026-09-16T14:20:00Z",
+      "declaredAcs": [
+        { "acId": "AC-1501-2", "verdict": "EVAL-MISSING" }
+      ],
+      "reportPath": ".rcf-verify-report.json"
+    }
+  ]
+}

package/fixtures/invalid/manifest/manifest-026-probe-pack-check-applicable-omitted-no-verdict.json

@@ -0,0 +1,35 @@
+{
+  "version": "2.0.0",
+  "projectName": "Probe-pack check omits verdict without applicable:false",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "browserVerification": [
+    {
+      "id": "bv-FBS-042-3",
+      "fbsId": "FBS-042",
+      "createdAt": "2026-09-16T15:10:00Z",
+      "mode": "agentScreenshotCritique",
+      "runtimeProfile": "local-dev",
+      "runtimeUrl": "http://127.0.0.1:3000",
+      "routesChecked": [
+        { "path": "/", "screenshotPath": ".rcf/artefacts/x.png", "themeApplied": "light" }
+      ],
+      "invariantChecks": [
+        { "invariant": "sharedNavPresent", "verdict": "pass" }
+      ],
+      "probePacks": [
+        {
+          "packName": "application-datatable-grid-shell",
+          "packVersion": "1.0.0",
+          "blueprintSlug": "application-datatable",
+          "applicable": true,
+          "checks": [
+            { "id": "AC-17101-2" }
+          ]
+        }
+      ],
+      "verdict": "pass"
+    }
+  ]
+}

package/fixtures/valid/manifest/manifest-015-ship-without-eval.json

@@ -0,0 +1,27 @@
+{
+  "version": "2.0.0",
+  "projectName": "Ship-without-eval ack coverage",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "shipWithoutEval": [
+    {
+      "id": "swe-FBS-015-1",
+      "fbsId": "FBS-015",
+      "ackedAt": "2026-09-16T14:20:00Z",
+      "reason": "grading rubric still needs an operator pass; ship the FBS on shape review only",
+      "declaredAcs": [
+        {
+          "acId": "AC-1501-2",
+          "verdict": "EVAL-MISSING",
+          "reason": "no EVAL doc authored for the non-deterministic AC"
+        },
+        {
+          "acId": "AC-1501-3",
+          "verdict": "EVAL-BELOW-THRESHOLD"
+        }
+      ],
+      "reportPath": ".rcf-verify-report.json"
+    }
+  ]
+}

package/fixtures/valid/manifest/manifest-016-probe-pack-check-applicable-false.json

@@ -0,0 +1,37 @@
+{
+  "version": "2.0.0",
+  "projectName": "Probe-pack check-level applicable:false coverage",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "browserVerification": [
+    {
+      "id": "bv-FBS-042-1",
+      "fbsId": "FBS-042",
+      "createdAt": "2026-09-16T15:00:00Z",
+      "mode": "agentScreenshotCritique",
+      "runtimeProfile": "local-dev",
+      "runtimeUrl": "http://127.0.0.1:3000",
+      "routesChecked": [
+        { "path": "/", "screenshotPath": ".rcf/artefacts/bv-FBS-042-1/root.png", "themeApplied": "light" }
+      ],
+      "invariantChecks": [
+        { "invariant": "sharedNavPresent", "verdict": "pass" }
+      ],
+      "probePacks": [
+        {
+          "packName": "application-datatable-grid-shell",
+          "packVersion": "1.0.0",
+          "blueprintSlug": "application-datatable",
+          "applicable": true,
+          "checks": [
+            { "id": "AC-17101-1", "verdict": "pass", "severity": "block" },
+            { "id": "AC-17101-2", "applicable": false, "detail": "check-level appliesTo: capability datatable-server-side-sort not applied" },
+            { "id": "AC-17101-3", "verdict": "pass", "severity": "warn" }
+          ]
+        }
+      ],
+      "verdict": "pass"
+    }
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stravica-ai/rcf-schemas",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "type": "module",
   "description": "JSON Schemas for the Requirements Confidence Framework (RCF). Language-neutral. The contract every RCF tool keys to.",
   "license": "Apache-2.0",

package/schemas/manifest.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://schemas.stravica.io/rcf/v0.6.0/manifest.schema.json",
   "title": "RCF Project Manifest",
-  "description": "Project manifest. Roots-only shape: declares prd, tad, bs. Children are owned by their parents and discovered by walking from the roots. From 0.4.0 the manifest also carries optional records for pre-flight configuration, review audits, UI baselines, browser verification, baseline-AC opt-outs, intake classification, register-regression canaries, and the review-surface state. From 0.4.1 the manifest additionally carries optional shipWithoutVerified acknowledgements written by rcf finalise --ship-without-verified. From 0.4.2 the testTheatreFinding shape carries an optional anchorId and drops tsId from its required list when kind is uiBaselineDrift (the drift finding is not anchored on a test suite); every other kind still requires tsId, and any 0.4.0- or 0.4.1-valid record remains valid. From 0.4.4 the manifest carries two optional additive sections that host the blueprint-library mechanism: blueprints[] (applied-blueprints registry written by rcf blueprint add / remove / upgrade) and standards[] (standards-pack registry written at rcf init and rcf standards add). From 0.4.5 the manifest additionally carries an optional resolutions[] section: one entry per operator-authored resolution of a cross-blueprint conflict, keyed at first by the globalAdrTopic conflict class (two applied blueprints each contributing a scope:global ADR on the same topic, resolved by a project-level ADR that supersedes both). Written by rcf blueprint supersede and by rcf blueprint add --resolve; read by the conflict detector so the resolved conflict is honoured and both blueprint ADRs may co-reside as superseded history. From 0.5.1 the appliedBlueprintRecord carries an optional libraryPrefix (blueprintSlug), stamped when an apply resolves through a registered external blueprint library so the library-registered ownership is durable on the record itself rather than derived by string-matching source; absent for shelf or path applies. Every added field is optional; pre-0.4.0 manifests remain valid.",
+  "description": "Project manifest. Roots-only shape: declares prd, tad, bs. Children are owned by their parents and discovered by walking from the roots. From 0.4.0 the manifest also carries optional records for pre-flight configuration, review audits, UI baselines, browser verification, baseline-AC opt-outs, intake classification, register-regression canaries, and the review-surface state. From 0.4.1 the manifest additionally carries optional shipWithoutVerified acknowledgements written by rcf finalise --ship-without-verified. From 0.4.2 the testTheatreFinding shape carries an optional anchorId and drops tsId from its required list when kind is uiBaselineDrift (the drift finding is not anchored on a test suite); every other kind still requires tsId, and any 0.4.0- or 0.4.1-valid record remains valid. From 0.4.4 the manifest carries two optional additive sections that host the blueprint-library mechanism: blueprints[] (applied-blueprints registry written by rcf blueprint add / remove / upgrade) and standards[] (standards-pack registry written at rcf init and rcf standards add). From 0.4.5 the manifest additionally carries an optional resolutions[] section: one entry per operator-authored resolution of a cross-blueprint conflict, keyed at first by the globalAdrTopic conflict class (two applied blueprints each contributing a scope:global ADR on the same topic, resolved by a project-level ADR that supersedes both). Written by rcf blueprint supersede and by rcf blueprint add --resolve; read by the conflict detector so the resolved conflict is honoured and both blueprint ADRs may co-reside as superseded history. From 0.5.1 the appliedBlueprintRecord carries an optional libraryPrefix (blueprintSlug), stamped when an apply resolves through a registered external blueprint library so the library-registered ownership is durable on the record itself rather than derived by string-matching source; absent for shelf or path applies. From 0.6.3 the manifest additionally carries an optional shipWithoutEval[] section written by rcf finalise --ship-without-eval (sister of shipWithoutVerified; acknowledges EVAL-MISSING or EVAL-BELOW-THRESHOLD per-AC verdicts on the verify report and carries the operator's reason string); and the browserVerificationProbePackCheck item accepts an optional applicable:boolean flag, letting a check-level appliesTo predicate record applicable:false without a verdict or severity (aggregate verdict treats such a check as neither pass nor fail). Every added field is optional; pre-0.4.0 manifests remain valid.",
   "type": "object",
   "additionalProperties": false,
   "required": ["version", "projectName", "prd", "tad", "bs"],
@@ -56,6 +56,11 @@
       "items": { "$ref": "#/$defs/shipWithoutVerifiedRecord" },
       "description": "Operator acknowledgements recorded when rcf finalise --ship-without-verified acknowledges a MOCK-ONLY-DECLARED or BLOCKED-BY-DECLARATION verdict on the verify report and ships the FBS at complete without promoting to verified. One entry per acknowledgement (verification-integrity-cluster-spec section 5.2). The ack is durable and greppable at ship time."
     },
+    "shipWithoutEval": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/shipWithoutEvalRecord" },
+      "description": "Operator acknowledgements recorded when rcf finalise --ship-without-eval acknowledges an EVAL-MISSING or EVAL-BELOW-THRESHOLD per-AC verdict on the verify report and ships the FBS at complete without a passing EVAL. One entry per acknowledgement. Sister of shipWithoutVerified; carries the operator's --ship-without-eval reason string on the record (rcf-eval-node spec sections 5.2 and 8). The ack is durable and greppable at ship time."
+    },
     "blueprints": {
       "type": "array",
       "items": { "$ref": "#/$defs/appliedBlueprintRecord" },
@@ -502,23 +507,44 @@
     "browserVerificationProbePackCheck": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["id", "verdict", "severity"],
+      "required": ["id"],
       "properties": {
         "id": {
           "type": "string",
           "minLength": 1,
           "description": "Check id. For a browser check the id equals an AC id contributed by the same blueprint (loader cross-checks this at pack load time)."
         },
+        "applicable": {
+          "type": "boolean",
+          "description": "Optional check-level applicability flag. When present and false, the check's own appliesTo predicate returned false (typically because the applied capability set does not include a capability the check depends on); verdict and severity are then omitted and the aggregate verdict treats the check as neither pass nor fail. When absent or true, verdict and severity are required as before. Mirrors the pack-level applicable boolean on browserVerificationProbePack. Emitted by packages/rcf-lite/src/browser-verify/pack-runner.js from rcf-lite 0.28.0."
+        },
         "verdict": {
           "enum": ["pass", "warn", "fail", "skipped"],
-          "description": "Check verdict. skipped is emitted by the pack-runner when a browser check's dependsOn pre-check failed."
+          "description": "Check verdict. skipped is emitted by the pack-runner when a browser check's dependsOn pre-check failed. Required when applicable is absent or true; omitted when applicable is false."
         },
         "severity": {
           "enum": ["block", "warn", "advisory"],
-          "description": "Check severity, copied from the pack declaration. Feeds the aggregate verdict rule per spec section 3.4."
+          "description": "Check severity, copied from the pack declaration. Feeds the aggregate verdict rule per spec section 3.4. Required when applicable is absent or true; omitted when applicable is false."
         },
         "detail": { "type": "string" }
-      }
+      },
+      "allOf": [
+        {
+          "if": {
+            "not": {
+              "properties": { "applicable": { "const": false } },
+              "required": ["applicable"]
+            }
+          },
+          "then": {
+            "properties": {
+              "verdict": true,
+              "severity": true
+            },
+            "required": ["verdict", "severity"]
+          }
+        }
+      ]
     },
     "browserVerificationRoute": {
       "type": "object",
@@ -846,6 +872,53 @@
         }
       }
     },
+    "shipWithoutEvalRecord": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "fbsId", "ackedAt", "reason", "declaredAcs", "reportPath"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^swe-FBS-\\d{3,}(?:-[a-z0-9]+(?:-[a-z0-9]+)*)?-\\d+$",
+          "description": "Ship-without-eval acknowledgement id. Format: swe-<fbsId>-<n>; the trailing integer increments per acknowledgement of the same FBS. Accepts both numeric-only and kebab-slug FBS ids. Sister of the shipWithoutVerified swv- id family."
+        },
+        "fbsId": { "$ref": "https://schemas.stravica.io/rcf/v0.6.0/common.schema.json#/$defs/fbsId" },
+        "ackedAt": { "$ref": "https://schemas.stravica.io/rcf/v0.6.0/common.schema.json#/$defs/timestamp" },
+        "reason": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Operator-supplied reason string passed on the finalise command (rcf finalise --ship-without-eval \"<reason>\"). Required and non-empty; the acknowledgement's purpose is to record why the operator shipped without a passing EVAL."
+        },
+        "declaredAcs": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/$defs/shipWithoutEvalDeclaredAc" },
+          "description": "The per-AC verdicts on the verify report that the operator acknowledged. At least one entry, otherwise there is nothing to acknowledge."
+        },
+        "reportPath": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Path (repo-relative or absolute as recorded by finalise) to the verify report file that carried the acknowledged verdicts."
+        }
+      },
+      "description": "Operator acknowledgement recorded on rcf finalise --ship-without-eval. Records the FBS, the operator's reason string, the verify verdicts acknowledged, and the report they came from, so the ack is durable and greppable at ship time. Written by packages/rcf-lite/src/finalise/ship-without-eval.js."
+    },
+    "shipWithoutEvalDeclaredAc": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["acId", "verdict"],
+      "properties": {
+        "acId": { "$ref": "https://schemas.stravica.io/rcf/v0.6.0/common.schema.json#/$defs/acId" },
+        "verdict": {
+          "enum": ["EVAL-MISSING", "EVAL-BELOW-THRESHOLD"],
+          "description": "The verify per-AC verdict class the operator acknowledged. Only these two verdict classes are legitimately acknowledgeable via --ship-without-eval."
+        },
+        "reason": {
+          "type": "string",
+          "description": "Optional verify-supplied reason string carried through from the report entry."
+        }
+      }
+    },
     "appliedBlueprintRecord": {
       "type": "object",
       "additionalProperties": false,