@stravica-ai/rcf-schemas 0.7.1 → 0.8.0

package/CHANGELOG.md

@@ -4,6 +4,35 @@ All notable changes to `@stravica-ai/rcf-schemas` are documented in this file.
 
 The format roughly follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and the project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). Pre-1.0 breaking changes are signalled by a minor bump per semver 0.x convention.
 
+## 0.8.0 - 2026-10-16
+
+Minor release for rcf-lite FBS-218 (per-AC probe catalog, rcf-lite PR 370), review gate 3. A probe `{ "path": "/", "expectBody": { "contains": " " } }` validated under 0.7.1, because `minLength: 1` counts a single space, and a deterministic verify run resolved it to a vacuous pass. Every assertion string on the probe must now contain at least one non-whitespace character: `"pattern": "\\S"` alongside the existing `minLength: 1`.
+
+Semver: URLs pinned at `v0.6.0`. This is a narrowing, not an addition: a user story whose probe carries a whitespace-only assertion string validated under 0.7.1 and is rejected under 0.8.0. Under this repo's rule (`CONTRIBUTING.md` and the `README.md` Versioning section) a narrowing is a minor bump, as 0.5.0 did for the `testPointer` `minLength: 1` tightening, so this ships as `0.8.0`. The only documents rejected are ones whose assertion string asserts nothing, which is the defect this release closes; rcf-lite pins the package exact and bumps on its FBS-218 branch.
+
+### Added
+
+- **Fixtures (valid)**: `fixtures/valid/user-story/us-009-ac-probe-expect-body-contains.json` (`contains: "Welcome back"`), `fixtures/valid/user-story/us-010-ac-probe-expect-body-matches.json` (`matches` with a `\s*` class), `fixtures/valid/user-story/us-011-ac-probe-expect-header-name.json` (`name: "x-request-id"`), `fixtures/valid/user-story/us-012-ac-probe-expect-header-match.json` (`match: "public, max-age=60"`), `fixtures/valid/user-story/us-013-ac-probe-selector.json` (`selector` with a descendant combinator).
+- **Fixtures (invalid)**: `fixtures/invalid/user-story/us-014-ac-probe-expect-body-contains-whitespace.json` (a single space, the gate 3 case), `fixtures/invalid/user-story/us-015-ac-probe-expect-body-matches-whitespace.json` (a tab), `fixtures/invalid/user-story/us-016-ac-probe-expect-header-name-whitespace.json` (two spaces), `fixtures/invalid/user-story/us-017-ac-probe-expect-header-match-whitespace.json` (a newline), `fixtures/invalid/user-story/us-018-ac-probe-selector-whitespace.json` (space, tab, space). Each fails on exactly one ajv error (`pattern`), and each validates under 0.7.1, so it exercises the new constraint alone.
+- **Tests**: `test/user-story.test.js` gains 31 cases: the gate 3 regression probe; for each of the five fields, a whitespace-only value rejected on `pattern` across ten ASCII and Unicode whitespace strings, a real value accepted with inner, leading and trailing whitespace, a one-character value accepted (the `minLength: 1` boundary), and an empty string still rejected on `minLength`; and one case per new fixture, pinning its outcome and, for the invalid ones, the single `pattern` error at its instance path. Total suite grows from 402 to 433.
+
+### Changed
+
+- **`user-story.schema.json`**: `$defs.acProbeExpectBody.contains`, `$defs.acProbeExpectBody.matches`, `$defs.acProbeExpectHeader.name`, `$defs.acProbeExpectHeader.match` and `$defs.acProbe.selector` each gain `"pattern": "\\S"` next to `minLength: 1`, and each `description` says so. The pattern is unanchored, so a real value with leading, trailing or inner whitespace still validates. ajv compiles patterns with the `u` flag, so `\S` also treats Unicode whitespace (no-break space, em space, byte-order mark, line separator) as whitespace.
+- **Unchanged on purpose**: `$defs.acProbe.path` and `$defs.acProbe.parityEnv` keep `minLength: 1` only. They name the request target and the environment scope, not something the resolver checks the response against, so they sit outside this fix. `method` (enum), `expectStatus` (integer, 100..599), the `expectBody` exactly-one-of rule and every other def are untouched.
+
+### Migration
+
+- **Existing chains on 0.7.1**: bump `@stravica-ai/rcf-schemas` to `0.8.0`. A document is rejected only when a probe carries a whitespace-only `expectBody.contains`, `expectBody.matches`, `expectHeader.name`, `expectHeader.match` or `selector`. Replace the value with the text the criterion actually asserts, or remove that assertion.
+- **Consumers to bump**: `rcf-lite` (its `packages/rcf-lite/package.json` pins the schemas package exact, at `0.7.0` on `main` at this release). FBS-218 validates every probe against `$defs.acProbe`, so pinning `0.8.0` closes the whitespace-only case there without resolver-side trimming. This repo does not touch rcf-lite.
+
+### Notes
+
+- Scripted back-compat pass at authoring time: every 0.7.1 fixture at main `c34bf96` (67 valid + 95 invalid = 162 total) validates to the same outcome, with the same ajv error list, against the 0.8.0 schemas: zero drift.
+- Mutation check at authoring time: run against the 0.7.1 `user-story.schema.json`, the 11 new rejection cases fail, as does the existing invalid-fixture case for `user-story`; the 20 new acceptance and `minLength` cases pass on both.
+- `docs/user-story.md` still does not describe `probe` (deferred at 0.7.1); this release is scoped to the schema, fixtures, tests, version and changelog.
+- `back-compat-freeze.test.js` continues to pass.
+
 ## 0.7.1 - 2026-10-16
 
 Patch bump for rcf-lite issue 349 (per-AC probe catalog resolved by deterministic verify, rcf-lite TAC-4150 and FBS-218). Adds an additive, optional `probe` object on the inline `$defs.acceptanceCriterion` of the user story, so an acceptance criterion can carry a structured, deterministic probe that `rcf verify run --mode deterministic` resolves to pass, fail or skipped with evidence. An AC without a probe stays critique-only. Every change is additive: every 0.7.0-valid document keeps validating.

package/fixtures/invalid/user-story/us-014-ac-probe-expect-body-contains-whitespace.json

@@ -0,0 +1,26 @@
+{
+  "usId": "US-302",
+  "prdId": "PRD-100",
+  "reqId": "REQ-302",
+  "version": "1.0.0",
+  "status": "draft",
+  "title": "Probe expectBody.contains as a single space is rejected",
+  "asA": "author",
+  "iWant": "a body assertion that asserts something",
+  "soThat": "a whitespace-only contains cannot resolve to a vacuous pass",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-302-1",
+      "description": "expectBody.contains is a single space.",
+      "testable": true,
+      "probe": {
+        "path": "/",
+        "expectBody": {
+          "contains": " "
+        }
+      }
+    }
+  ],
+  "createdAt": "2026-01-01T00:00:00Z",
+  "updatedAt": "2026-10-16T00:00:00Z"
+}

package/fixtures/invalid/user-story/us-015-ac-probe-expect-body-matches-whitespace.json

@@ -0,0 +1,26 @@
+{
+  "usId": "US-302",
+  "prdId": "PRD-100",
+  "reqId": "REQ-302",
+  "version": "1.0.0",
+  "status": "draft",
+  "title": "Probe expectBody.matches as a tab is rejected",
+  "asA": "author",
+  "iWant": "a body pattern that asserts something",
+  "soThat": "a whitespace-only regular expression source cannot resolve to a vacuous pass",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-302-1",
+      "description": "expectBody.matches is a single tab.",
+      "testable": true,
+      "probe": {
+        "path": "/",
+        "expectBody": {
+          "matches": "\t"
+        }
+      }
+    }
+  ],
+  "createdAt": "2026-01-01T00:00:00Z",
+  "updatedAt": "2026-10-16T00:00:00Z"
+}

package/fixtures/invalid/user-story/us-016-ac-probe-expect-header-name-whitespace.json

@@ -0,0 +1,27 @@
+{
+  "usId": "US-302",
+  "prdId": "PRD-100",
+  "reqId": "REQ-302",
+  "version": "1.0.0",
+  "status": "draft",
+  "title": "Probe expectHeader.name as two spaces is rejected",
+  "asA": "author",
+  "iWant": "a header assertion keyed on a real header name",
+  "soThat": "a whitespace-only header name cannot resolve to a vacuous pass",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-302-1",
+      "description": "expectHeader.name is two spaces.",
+      "testable": true,
+      "probe": {
+        "path": "/",
+        "expectHeader": {
+          "name": "  ",
+          "match": "application/json"
+        }
+      }
+    }
+  ],
+  "createdAt": "2026-01-01T00:00:00Z",
+  "updatedAt": "2026-10-16T00:00:00Z"
+}

package/fixtures/invalid/user-story/us-017-ac-probe-expect-header-match-whitespace.json

@@ -0,0 +1,27 @@
+{
+  "usId": "US-302",
+  "prdId": "PRD-100",
+  "reqId": "REQ-302",
+  "version": "1.0.0",
+  "status": "draft",
+  "title": "Probe expectHeader.match as a newline is rejected",
+  "asA": "author",
+  "iWant": "a header assertion with a real expected value",
+  "soThat": "a whitespace-only header value cannot resolve to a vacuous pass",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-302-1",
+      "description": "expectHeader.match is a single newline.",
+      "testable": true,
+      "probe": {
+        "path": "/",
+        "expectHeader": {
+          "name": "content-type",
+          "match": "\n"
+        }
+      }
+    }
+  ],
+  "createdAt": "2026-01-01T00:00:00Z",
+  "updatedAt": "2026-10-16T00:00:00Z"
+}

package/fixtures/invalid/user-story/us-018-ac-probe-selector-whitespace.json

@@ -0,0 +1,24 @@
+{
+  "usId": "US-302",
+  "prdId": "PRD-100",
+  "reqId": "REQ-302",
+  "version": "1.0.0",
+  "status": "draft",
+  "title": "Probe selector as mixed whitespace is rejected",
+  "asA": "author",
+  "iWant": "a DOM assertion on a real selector",
+  "soThat": "a whitespace-only selector cannot resolve to a vacuous pass",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-302-1",
+      "description": "selector is a space, a tab and a space.",
+      "testable": true,
+      "probe": {
+        "path": "/",
+        "selector": " \t "
+      }
+    }
+  ],
+  "createdAt": "2026-01-01T00:00:00Z",
+  "updatedAt": "2026-10-16T00:00:00Z"
+}

package/fixtures/valid/user-story/us-009-ac-probe-expect-body-contains.json

@@ -0,0 +1,27 @@
+{
+  "usId": "US-302",
+  "prdId": "PRD-100",
+  "reqId": "REQ-302",
+  "version": "1.0.0",
+  "status": "approved",
+  "title": "Probe expectBody.contains carries real text with inner whitespace",
+  "asA": "operator running deterministic verify",
+  "iWant": "a body assertion on literal text that includes spaces",
+  "soThat": "a real phrase passes while a whitespace-only string is refused",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-302-1",
+      "description": "The home page greets the signed-in user.",
+      "testable": true,
+      "probe": {
+        "path": "/",
+        "expectStatus": 200,
+        "expectBody": {
+          "contains": "Welcome back"
+        }
+      }
+    }
+  ],
+  "createdAt": "2026-01-01T00:00:00Z",
+  "updatedAt": "2026-10-16T00:00:00Z"
+}

package/fixtures/valid/user-story/us-010-ac-probe-expect-body-matches.json

@@ -0,0 +1,26 @@
+{
+  "usId": "US-302",
+  "prdId": "PRD-100",
+  "reqId": "REQ-302",
+  "version": "1.0.0",
+  "status": "approved",
+  "title": "Probe expectBody.matches carries a real regular expression",
+  "asA": "operator running deterministic verify",
+  "iWant": "a body assertion on a pattern that includes a whitespace class",
+  "soThat": "a real pattern passes while a whitespace-only source is refused",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-302-1",
+      "description": "The notes page renders its heading.",
+      "testable": true,
+      "probe": {
+        "path": "/notes",
+        "expectBody": {
+          "matches": "<h1>\\s*Notes\\s*</h1>"
+        }
+      }
+    }
+  ],
+  "createdAt": "2026-01-01T00:00:00Z",
+  "updatedAt": "2026-10-16T00:00:00Z"
+}

package/fixtures/valid/user-story/us-011-ac-probe-expect-header-name.json

@@ -0,0 +1,27 @@
+{
+  "usId": "US-302",
+  "prdId": "PRD-100",
+  "reqId": "REQ-302",
+  "version": "1.0.0",
+  "status": "approved",
+  "title": "Probe expectHeader.name carries a real header name",
+  "asA": "operator running deterministic verify",
+  "iWant": "a header assertion keyed on a named response header",
+  "soThat": "a real header name passes while a whitespace-only name is refused",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-302-1",
+      "description": "The health endpoint carries a request id header.",
+      "testable": true,
+      "probe": {
+        "path": "/healthz",
+        "expectHeader": {
+          "name": "x-request-id",
+          "match": "^[0-9a-f-]{36}$"
+        }
+      }
+    }
+  ],
+  "createdAt": "2026-01-01T00:00:00Z",
+  "updatedAt": "2026-10-16T00:00:00Z"
+}

package/fixtures/valid/user-story/us-012-ac-probe-expect-header-match.json

@@ -0,0 +1,27 @@
+{
+  "usId": "US-302",
+  "prdId": "PRD-100",
+  "reqId": "REQ-302",
+  "version": "1.0.0",
+  "status": "approved",
+  "title": "Probe expectHeader.match carries a real value with inner whitespace",
+  "asA": "operator running deterministic verify",
+  "iWant": "a header assertion whose expected value includes a space",
+  "soThat": "a real header value passes while a whitespace-only value is refused",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-302-1",
+      "description": "The public page is cacheable for a minute.",
+      "testable": true,
+      "probe": {
+        "path": "/",
+        "expectHeader": {
+          "name": "cache-control",
+          "match": "public, max-age=60"
+        }
+      }
+    }
+  ],
+  "createdAt": "2026-01-01T00:00:00Z",
+  "updatedAt": "2026-10-16T00:00:00Z"
+}

package/fixtures/valid/user-story/us-013-ac-probe-selector.json

@@ -0,0 +1,24 @@
+{
+  "usId": "US-302",
+  "prdId": "PRD-100",
+  "reqId": "REQ-302",
+  "version": "1.0.0",
+  "status": "approved",
+  "title": "Probe selector carries a real descendant selector",
+  "asA": "operator running deterministic verify",
+  "iWant": "a DOM assertion with a descendant combinator",
+  "soThat": "a real selector passes while a whitespace-only selector is refused",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-302-1",
+      "description": "The notes list renders inside the main landmark.",
+      "testable": true,
+      "probe": {
+        "path": "/notes",
+        "selector": "main [data-testid=\"notes-list\"]"
+      }
+    }
+  ],
+  "createdAt": "2026-01-01T00:00:00Z",
+  "updatedAt": "2026-10-16T00:00:00Z"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stravica-ai/rcf-schemas",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "type": "module",
   "description": "JSON Schemas for the Requirements Confidence Framework (RCF). Language-neutral. The contract every RCF tool keys to.",
   "license": "Apache-2.0",

package/schemas/user-story.schema.json

@@ -138,7 +138,8 @@
         "selector": {
           "type": "string",
           "minLength": 1,
-          "description": "DOM selector that must be present in the rendered response."
+          "pattern": "\\S",
+          "description": "DOM selector that must be present in the rendered response. At least one non-whitespace character is required."
         },
         "parityEnv": {
           "type": "string",
@@ -156,12 +157,14 @@
         "name": {
           "type": "string",
           "minLength": 1,
-          "description": "Response header name."
+          "pattern": "\\S",
+          "description": "Response header name. At least one non-whitespace character is required."
         },
         "match": {
           "type": "string",
           "minLength": 1,
-          "description": "Value the named header must match. Match semantics belong to the consuming resolver."
+          "pattern": "\\S",
+          "description": "Value the named header must match. Match semantics belong to the consuming resolver. At least one non-whitespace character is required."
         }
       },
       "description": "Response header assertion on an acceptance-criterion probe. Both name and match are required."
@@ -173,12 +176,14 @@
         "contains": {
           "type": "string",
           "minLength": 1,
-          "description": "Literal text the response body must contain."
+          "pattern": "\\S",
+          "description": "Literal text the response body must contain. At least one non-whitespace character is required."
         },
         "matches": {
           "type": "string",
           "minLength": 1,
-          "description": "Regular expression source the response body must match."
+          "pattern": "\\S",
+          "description": "Regular expression source the response body must match. At least one non-whitespace character is required."
         }
       },
       "minProperties": 1,