rcf-lite 0.20.0 → 0.21.0

package/rcf/code-nodes/cn-122.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-122",
+  "path": "src/browser-verify/pack-browser.js#createPackBrowser",
+  "implementsAcIds": [
+    "AC-2001-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-04T22:10:00.000Z",
+  "updatedAt": "2026-09-04T22:10:00.000Z"
+}

package/rcf/code-nodes/cn-123.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-123",
+  "path": "../../blueprints/application-dashboard/blueprint.json",
+  "implementsAcIds": [
+    "AC-2001-1",
+    "AC-2001-2"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-04T22:10:00.000Z",
+  "updatedAt": "2026-09-04T22:10:00.000Z"
+}

package/rcf/code-nodes/cn-124.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-124",
+  "path": "../../blueprints/application-notifications-in-app/blueprint.json",
+  "implementsAcIds": [
+    "AC-2101-1",
+    "AC-2101-2"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-04T23:59:00.000Z",
+  "updatedAt": "2026-09-04T23:59:00.000Z"
+}

package/rcf/code-nodes/cn-125.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-125",
+  "path": "../../blueprints/application-notifications-in-app/probe-packs/application-notifications-in-app.pack.mjs",
+  "implementsAcIds": [
+    "AC-2101-3",
+    "AC-2101-5"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-04T23:59:00.000Z",
+  "updatedAt": "2026-09-04T23:59:00.000Z"
+}

package/rcf/code-nodes/cn-126.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-126",
+  "path": "test/fixtures/probe-pack-application-notifications-in-app/server.js#startServer",
+  "implementsAcIds": [
+    "AC-2101-4",
+    "AC-2101-5"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-04T23:59:00.000Z",
+  "updatedAt": "2026-09-04T23:59:00.000Z"
+}

package/rcf/code-nodes/cn-127.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-127",
+  "path": "../../blueprints/application-notifications-in-app/README.md",
+  "implementsAcIds": [
+    "AC-2101-6"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-04T23:59:00.000Z",
+  "updatedAt": "2026-09-04T23:59:00.000Z"
+}

package/rcf/code-nodes/cn-128.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-128",
+  "path": "../../packages/rcf-lite/src/blueprint/loader.js",
+  "implementsAcIds": [
+    "AC-2201-1",
+    "AC-2201-2",
+    "AC-2201-3"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z"
+}

package/rcf/code-nodes/cn-129.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-129",
+  "path": "../../packages/rcf-lite/src/blueprint/apply.js",
+  "implementsAcIds": [
+    "AC-2201-4",
+    "AC-2201-5",
+    "AC-2201-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z"
+}

package/rcf/code-nodes/cn-130.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-130",
+  "path": "../../packages/rcf-lite/src/blueprint/capabilities.js",
+  "implementsAcIds": [
+    "AC-2201-6",
+    "AC-2201-8",
+    "AC-2201-9"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z"
+}

package/rcf/code-nodes/cn-131.json

@@ -0,0 +1,15 @@
+{
+  "cnId": "CN-131",
+  "path": "../../blueprints/application-admin-console/blueprint.json",
+  "implementsAcIds": [
+    "AC-2301-1",
+    "AC-2301-2",
+    "AC-2301-3",
+    "AC-2301-4"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z"
+}

package/rcf/code-nodes/cn-132.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-132",
+  "path": "../../blueprints/application-admin-console/probe-packs/application-admin-console.pack.mjs",
+  "implementsAcIds": [
+    "AC-2301-5"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z"
+}

package/rcf/code-nodes/cn-133.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-133",
+  "path": "../../packages/rcf-lite/test/fixtures/probe-pack-application-admin-console/server.js",
+  "implementsAcIds": [
+    "AC-2301-6",
+    "AC-2301-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z"
+}

package/rcf/fbs/fbs-036.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-04T18:00:20.529Z",
+  "updatedAt": "2026-09-04T18:51:45.216Z",
+  "acIds": [
+    "AC-1701-1",
+    "AC-1701-2",
+    "AC-1701-3",
+    "AC-1701-4",
+    "AC-1701-5",
+    "AC-1701-6",
+    "AC-1701-7",
+    "AC-1701-8"
+  ],
+  "fbsId": "FBS-036",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 36,
+  "executionStatus": "notStarted",
+  "title": "Browser-verify runner extension: blueprint-shipped probe pack loader, scoping predicate, aggregate verdict and --probe-pack CLI",
+  "summary": "T-0 of the ratified visual round (spec 2026-09-04, section 2.1): the browser-verify runner extension that lets a blueprint ship a Playwright probe pack under `blueprints/<slug>/probe-packs/` and have `rcf verify browser` discover, scope-check and run it as a required ship gate. Six ACs span the loader (schema + `.pack.js` and `.pack.mjs`), the applicability predicate (source-scan for one of the three legal scoping seams: route, tacIds or `blueprint:` tag), the check-id cross-check against the shipping blueprint's contributed AC ids, the runner pass (after invariants and auth-smoke, packs receive an injected browser and fetch), the aggregate verdict extension (block on any `severity: block` pack fail), the `--probe-pack <name>` CLI restriction, and the optional `preChecks[]` fast-fail slot with `dependsOn` skip semantics. Zero new npm dependencies; the pinned Playwright MCP the launcher provisions is the browser access seam. Unblocks T-1..T-5 (datatable, charts, dashboard, notifications-in-app, admin-console).",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-037.json

@@ -0,0 +1,19 @@
+{
+  "createdAt": "2026-09-04T20:05:58.214Z",
+  "updatedAt": "2026-09-04T20:06:06.900Z",
+  "acIds": [
+    "AC-1801-1",
+    "AC-1801-2",
+    "AC-1801-3",
+    "AC-1801-4",
+    "AC-1801-5"
+  ],
+  "fbsId": "FBS-037",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 37,
+  "executionStatus": "notStarted",
+  "title": "application-datatable v1.0.0 blueprint on the shelf: 22 contributions, Playwright probe pack with six anchored checks, sample-app fixture",
+  "summary": "T-1 of the ratified visual round (spec 2026-09-04, section 5.1): the application-datatable v1.0.0 blueprint on the shelf. Ships 22 contributions (six REQs, nine USs, three TACs, four ADRs), a Playwright probe pack under blueprints/application-datatable/probe-packs/application-datatable.pack.js whose six checks (AC-17101-1 sort click, AC-17102-1 filter q, AC-17103-2 pagination aria-live, AC-17104-3 bulk-action focus return, AC-17105-1 four-state distinctness, AC-17106-1 column reorder keyboard) are anchored to blueprint AC ids per T-0 AC-1701-3, and a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-datatable/ the pack probes for real. Applies cleanly (validate 0, coverage strict 0, eval strict 0 on a scratch project). Consumes T-0's runner extension.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-038.json

@@ -0,0 +1,19 @@
+{
+  "createdAt": "2026-09-04T21:08:46.506Z",
+  "updatedAt": "2026-09-04T21:09:05.400Z",
+  "acIds": [
+    "AC-1901-1",
+    "AC-1901-2",
+    "AC-1901-3",
+    "AC-1901-4",
+    "AC-1901-5"
+  ],
+  "fbsId": "FBS-038",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 38,
+  "executionStatus": "notStarted",
+  "title": "application-charts v1.0.0 blueprint on the shelf: 15 contributions, Playwright probe pack with three anchored checks, sample-app fixture with negative-run switches",
+  "summary": "T-2 of the ratified visual round (spec 2026-09-04, section 5.2): the application-charts v1.0.0 blueprint on the shelf. Ships 15 contributions (four REQs on the chart form set, non-colour distinction, text-alternative table and keyboard traversal; six USs binding runtime-observable ACs; two TACs on the render shell and the keyboard traversal contract; three ADRs on chart engine choice, accessible palette and reduced-motion respect), a Playwright probe pack under blueprints/application-charts/probe-packs/application-charts.pack.mjs whose three checks (AC-18102-1 non-colour distinction, AC-18103-1 text-alternative table with cell-per-value contract, AC-18104-1 keyboard traversal with announced-string format and reduced-motion suppression) are anchored to blueprint AC ids per T-0 AC-1701-3 and each carries a description field per spec section 9, and a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-charts/ the pack probes for real. Applies cleanly (validate 0, coverage strict 0, eval strict 0 on a scratch project). Consumes T-0's runner extension; the leaf blueprint the T-3 application-dashboard build consumes.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-039.json

@@ -0,0 +1,21 @@
+{
+  "createdAt": "2026-09-04T22:10:00.000Z",
+  "updatedAt": "2026-09-04T22:10:00.000Z",
+  "acIds": [
+    "AC-2001-1",
+    "AC-2001-2",
+    "AC-2001-3",
+    "AC-2001-4",
+    "AC-2001-5",
+    "AC-2001-6",
+    "AC-2001-7"
+  ],
+  "fbsId": "FBS-039",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 39,
+  "executionStatus": "notStarted",
+  "title": "application-dashboard v1.0.0 blueprint on the shelf: 18 contributions, packaged design guidance, Playwright probe pack with three anchored checks, sample-app fixture with negative-run switches, pack-browser resize seam extension",
+  "summary": "T-3 of the ratified visual round (spec 2026-09-04, section 5.3): the application-dashboard v1.0.0 blueprint on the shelf. Ships 18 contributions (5 REQs on shell composition, primary-KPI visual hierarchy, per-tile four-state contract, timeframe and filter chrome refetch fan-out, and export handle with format delegation to charts; 7 USs binding runtime-observable ACs plus one on packaged-guidance adherence; 3 TACs on the tile grid with CSS Grid position semantics, the filter chrome and timeframe picker with the refetch fan-out contract, and the export handle; 3 ADRs on the primary-KPI kinds enum, the timeframe presets and the export formats), a packaged design-guidance asset carrying the eight sections and five https citations per spec 5.3.1, a Playwright probe pack whose three checks (AC-19102-1 primary-KPI position by DOM order and CSS Grid position at 1440/1024/360, AC-19104-1 timeframe refetch fan-out with same boundary and matching as-of ISO-8601 stamp, AC-19103-1 per-tile four-state contract with role region, aria-live polite and non-colour distinction) are anchored to blueprint AC ids per T-0 AC-1701-3 and each carries a description field per spec section 9, and a dependency-free sample-app fixture the pack probes for real. Extends the pack-browser seam with a resize(width, height) method the pack drives to probe the three breakpoints. Applies cleanly (validate 0, coverage strict 0, eval strict 0 on a scratch project). Consumes application-charts through the shared render shell (the dashboard's chart region reuses the charts sample-app markup shape); references application-datatable in the packaged guidance's when-a-table-beats-a-chart section.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-040.json

@@ -0,0 +1,20 @@
+{
+  "createdAt": "2026-09-04T23:59:00.000Z",
+  "updatedAt": "2026-09-04T23:59:00.000Z",
+  "acIds": [
+    "AC-2101-1",
+    "AC-2101-2",
+    "AC-2101-3",
+    "AC-2101-4",
+    "AC-2101-5",
+    "AC-2101-6"
+  ],
+  "fbsId": "FBS-040",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 40,
+  "executionStatus": "notStarted",
+  "title": "application-notifications-in-app v1.0.0 blueprint on the shelf: 19 contributions, Playwright probe pack with three anchored checks, sample-app fixture with four break switches, and the family-prefix reservation across the shelf registry",
+  "summary": "T-4 of the ratified visual round (spec 2026-09-04, section 5.4): the application-notifications-in-app v1.0.0 blueprint on the shelf. Ships 19 contributions (5 REQs on live-region preseeding, transient toast contract, notification centre inbox with acknowledge round-trip, per-user preferences UI with sibling delegation, and delivery-attempt log; 8 USs binding runtime-observable ACs plus three cross-cutting cases; 3 TACs on the live-region wrappers and toast factory, centre inbox and acknowledge round-trip, and preferences UI; 3 ADRs on the priority-to-role mapping polite/status vs assertive/alert per WCAG 4.1.3 and ARIA APG alert, the six-second toast timeout floor per WCAG 2.2.1 Timing Adjustable, and the thirty-day centre retention window), a Playwright probe pack whose three checks (AC-20101-1 live-region preseeded on every declared route, AC-20102-1 transient toast contract with priority-to-role mapping and timeout floor measured via data-shown-at/data-dismissed-at, AC-20103-1 centre acknowledge round-trip enumerated by data-notification-id with client + server request-log reconciliation) are anchored to blueprint AC ids per T-0 AC-1701-3 and each carries a description field per spec section 9 (with AC-20101-1 description carrying the word 'preseeded' per the T-4 row), and a dependency-free sample-app fixture the pack probes for real, with four break switches for the negative runs (preseed, role, timeout, ack). Reserves the family prefix application-notifications- for the sibling channels the shelf will grow into (email, push, webhook) as a doc-only reservation on the blueprint README and every applying blueprint's docs/topics.md registry row. Applies cleanly (validate 0, coverage strict 0, eval strict 0 on a scratch project).",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-041.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z",
+  "acIds": ["AC-2201-1", "AC-2201-2", "AC-2201-3", "AC-2201-4", "AC-2201-5", "AC-2201-6", "AC-2201-7", "AC-2201-8", "AC-2201-9"],
+  "fbsId": "FBS-041",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 41,
+  "executionStatus": "notStarted",
+  "title": "Capability-declaration mechanism and four shelf auth blueprint 1.1.0/1.2.0 minor bumps",
+  "summary": "T-5 mechanism track of the ratified visual round (spec 2026-09-04, section 5.5). Introduces capabilities[], elicits[] and requiresAppliedCapabilities top-level fields on blueprint.json with shape validation in the loader; apply-time discovery via source read-back on manifest.blueprints[].source; the exit-3 refusal with the spec 5.5.1 verbatim message on bare-SPA applies; --allow-no-auth-yet operator override; elicitation phase reading --answer <id>=<value> (repeatable) and --answers <file> (JSON object) with kind coercion; per-project sidecar rcf/blueprints/${slug}.applied.json capturing appliedCapabilities and appliedElicitations; pack-runner extension for per-check applicability so an absent capability records applicable:false and the aggregate verdict treats the check as neither pass nor fail (spec section 3.3 T-5 residual cure). Bumps the four shelf auth blueprints to declare capabilities[]: magic-link 1.0.0 -> 1.1.0 [principalDirectory]; clerk 1.1.0 -> 1.2.0 [principalDirectory, roleModel]; oauth2 1.0.0 -> 1.1.0 [principalDirectory, roleModel]; keycloak 1.0.0 -> 1.1.0 [principalDirectory, roleModel]. docs/blueprint-authoring.md section 6a extended with the capability vocabulary table (principalDirectory, roleModel, tenancy, auditLog) and the sidecar contract description.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-042.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z",
+  "acIds": ["AC-2301-1", "AC-2301-2", "AC-2301-3", "AC-2301-4", "AC-2301-5", "AC-2301-6", "AC-2301-7"],
+  "fbsId": "FBS-042",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 42,
+  "executionStatus": "notStarted",
+  "title": "application-admin-console v1.0.0 blueprint on the shelf with capability-gated probe pack and sample-app fixture",
+  "summary": "T-5 shelf-blueprint track of the ratified visual round (spec 2026-09-04, section 5.5): the application-admin-console v1.0.0 blueprint on the shelf. Ships 23 contributions (6 REQs on console shell + users conditional principalDirectory + roles conditional roleModel with Owner+Admin+Member+Viewer baseline + orgs conditional tenancy + audit-log conditional auditLog + access-denied and request-access WCAG 2.2 AA; 9 USs 21101-21109 binding 16 runtime-observable ACs plus the conditional-refusal apply-time behaviour; 4 TACs 2201-2204 on the console shell reading the surface manifest + apply-time capability discovery + permission matrix as an ARIA APG grid + audit view consuming datatable T-1; 4 ADRs 2201-2204 on the capability vocabulary as free labels + Owner+Admin+Member+Viewer baseline elicited additions + invite transport email default delegated to email sibling elicited + audit-log retention window elicited), a Playwright probe pack whose four capability-gated checks (AC-21102-1 users when principalDirectory, AC-21103-1 permission matrix when roleModel, AC-21104-1 org switcher when tenancy, AC-21105-1 audit-log when auditLog) each declare a per-check appliesTo predicate reading the applied capability sidecar, and a dependency-free sample-app fixture with CAPS switch selecting surfaces, ARIA APG grid permission matrix, users directory with data-user-id enumeration, org switcher, audit-log with correlationId, access-denied with request-access control, and break switches for the negative runs (matrix-grid, denied, audit-fields). Consumes application-datatable (T-1) for the users and audit surfaces; suggestedCompanions logging and errorHandling; providesRoles absent per spec 5.5.3.",
+  "dependsOnFbsIds": ["FBS-041"]
+}

package/rcf/requirements/req-017.json

@@ -0,0 +1,18 @@
+{
+  "createdAt": "2026-09-04T17:59:20.149Z",
+  "updatedAt": "2026-09-04T17:59:34.348Z",
+  "reqId": "REQ-017",
+  "prdId": "PRD-001",
+  "title": "Blueprint-shipped browser-verify probe packs with FBS-scoped applicability",
+  "description": "The rcf-lite browser-verify runner extension that lets a blueprint SHIP a Playwright probe pack under its own `probe-packs/` directory and have `rcf verify browser` load, scope and execute it as a required ship gate. The extension adds a pack loader (schema validation, applicability predicate, check-id cross-check against the blueprint's contributed AC ids), a runner pass that runs after invariants and auth-smoke, an aggregate verdict extension that blocks on any `severity: block` pack fail, a `probePacks[]` field on the composed browserVerification record, and one CLI option (`--probe-pack <name>`) that restricts one run to one pack. Enables the visual round T-1..T-5 blueprints (datatable, charts, dashboard, notifications-in-app, admin-console) to declare runtime-observable ACs and ship the browser checks that prove them, without adding any npm dependencies and without letting a pack fire on an FBS whose surface does not exist.",
+  "category": "functional",
+  "domain": "browser-verify",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [],
+    "reason": "content-pending",
+    "classifiedAt": "2026-09-04T17:59:20.168Z"
+  }
+}

package/rcf/requirements/req-018.json

@@ -0,0 +1,18 @@
+{
+  "createdAt": "2026-09-04T20:05:06.758Z",
+  "updatedAt": "2026-09-04T20:05:16.473Z",
+  "reqId": "REQ-018",
+  "prdId": "PRD-001",
+  "title": "Application-datatable v1.0.0 blueprint on the shelf with its Playwright probe pack and sample-app fixture",
+  "description": "The rcf-lite shelf ships the application-datatable v1.0.0 blueprint (blueprints/application-datatable/) with 22 contributions (6 REQs, 9 USs with 27 runtime-observable ACs, 3 TACs, 4 ADRs), a shipped Playwright probe pack (blueprints/application-datatable/probe-packs/application-datatable.pack.js) whose six checks (AC-17101-1 sort click, AC-17102-1 filter q request, AC-17103-2 pagination aria-live announcement, AC-17104-3 bulk-action confirmation focus return, AC-17105-1 four-state distinctness, AC-17106-1 column reorder keyboard alternative) are anchored to blueprint AC ids, and a dependency-free sample-app fixture (packages/rcf-lite/test/fixtures/probe-pack-application-datatable/) the pack probes at the shelf's own gate. The blueprint is the first ratification of the ratified visual round T-1 (spec 2026-09-04 section 5.1) and the first shipped consumer of T-0's probe-pack runner extension.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [],
+    "reason": "content-pending",
+    "classifiedAt": "2026-09-04T20:05:06.779Z"
+  }
+}

package/rcf/requirements/req-019.json

@@ -0,0 +1,38 @@
+{
+  "createdAt": "2026-09-04T21:08:13.117Z",
+  "updatedAt": "2026-09-04T21:08:13.139Z",
+  "description": "The rcf-lite shelf ships the application-charts v1.0.0 blueprint (blueprints/application-charts/) with 15 contributions (4 REQs, 6 USs binding runtime-observable ACs, 2 TACs, 3 ADRs), a shipped Playwright probe pack (blueprints/application-charts/probe-packs/application-charts.pack.mjs) whose three checks (AC-18102-1 non-colour distinction, AC-18103-1 text-alternative table, AC-18104-1 keyboard traversal with reduced motion) are anchored to blueprint AC ids per T-0 AC-1701-3, and a dependency-free sample-app fixture (packages/rcf-lite/test/fixtures/probe-pack-application-charts/) the pack probes at the shelf gate. The blueprint is the ratification of the visual round T-2 (spec 2026-09-04 section 5.2), the second shipped consumer of T-0's probe-pack runner extension, and the leaf blueprint the application-dashboard T-3 consumes.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "reqId": "REQ-019",
+  "prdId": "PRD-001",
+  "title": "Application-charts v1.0.0 blueprint on the shelf with its Playwright probe pack and sample-app fixture",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "persistence"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-04T21:08:13.137Z",
+    "signals": [
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "dashboard"
+      }
+    ]
+  }
+}

package/rcf/requirements/req-020.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-04T22:10:00.000Z",
+  "updatedAt": "2026-09-04T22:10:00.000Z",
+  "reqId": "REQ-020",
+  "prdId": "PRD-001",
+  "title": "Application-dashboard v1.0.0 blueprint on the shelf with its packaged design-guidance asset, Playwright probe pack and sample-app fixture",
+  "description": "The rcf-lite shelf ships the application-dashboard v1.0.0 blueprint (blueprints/application-dashboard/) with 18 contributions (5 REQs on the dashboard shell composition, the primary-KPI visual hierarchy, the per-tile four-state contract, the timeframe and filter chrome fan-out, and the export handle with format delegation to charts; 7 USs binding runtime-observable ACs plus one US on packaged-guidance adherence; 3 TACs on the tile grid with CSS Grid position semantics and breakpoint reflow, the filter chrome and timeframe picker with the refetch fan-out contract, and the export handle; 3 ADRs on the primary-KPI kinds enum, the timeframe presets and the export formats). Ships a packaged design-guidance asset at blueprints/application-dashboard/assets/guidance/dashboard-design.md covering primary KPI placement, tile density and count limits, timeframe and filter chrome, loading/empty/error states, colour and contrast, when a table beats a chart with delegation to application-datatable, refresh cadence and staleness, and anti-patterns (five https citations from NN/g, Few, Tufte, GOV.UK, WCAG). Ships a Playwright probe pack under blueprints/application-dashboard/probe-packs/application-dashboard.pack.mjs whose three checks (AC-19102-1 primary-KPI position by DOM order and CSS Grid position at 1440/1024/360, AC-19104-1 timeframe refetch fan-out with same boundary and matching as-of ISO-8601 stamp, AC-19103-1 per-tile four-state contract with role region, aria-live polite and non-colour distinction) are anchored to blueprint AC ids per T-0 AC-1701-3. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-dashboard/ with break switches for the negative runs. Extends the pack-browser seam with a resize(width, height) method (via the pinned Playwright MCP's browser_resize tool on the MCP route and page.setViewportSize on the project route) so probe packs can probe breakpoint reflow honestly. Third shipped consumer of T-0's probe-pack runner extension; consumes application-charts on the chart region and references application-datatable in the packaged guidance.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}

package/rcf/requirements/req-021.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-04T23:59:00.000Z",
+  "updatedAt": "2026-09-04T23:59:00.000Z",
+  "reqId": "REQ-021",
+  "prdId": "PRD-001",
+  "title": "Application-notifications-in-app v1.0.0 blueprint on the shelf with its Playwright probe pack and sample-app fixture",
+  "description": "The rcf-lite shelf ships the application-notifications-in-app v1.0.0 blueprint (blueprints/application-notifications-in-app/) with 19 contributions (5 REQs on live-region preseeding, the transient toast contract, the notification centre inbox with acknowledge round-trip, the per-user preferences UI with sibling-channel delegation, and the delivery-attempt log; 8 USs binding runtime-observable ACs plus three cross-cutting cases on the page load with backlog, the background event and the disjoint-content contract; 3 TACs on the live-region wrappers and the toast factory, the centre inbox with retention and acknowledge round-trip, and the preferences UI with sibling delegation; 3 ADRs on the priority-to-role mapping polite/status vs assertive/alert, the WCAG 2.2.1 six-second toast timeout floor, and the ADR-2103 thirty-day retention window). Reserves the family prefix application-notifications- for the sibling channels the shelf will grow into (email, push, webhook) as documented in the blueprint README and the shelf band registry. Ships a Playwright probe pack under blueprints/application-notifications-in-app/probe-packs/application-notifications-in-app.pack.mjs whose three checks (AC-20101-1 live-region preseeding on every declared route, AC-20102-1 transient toast contract with priority-to-role mapping and timeout floor measured via data-shown-at/data-dismissed-at timestamps, AC-20103-1 centre acknowledge round-trip through data-notification-id enumeration and reconciliation of client + server request logs) are anchored to blueprint AC ids per T-0 AC-1701-3. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-notifications-in-app/ with four break switches for the negative runs (preseed, role, timeout, ack). Fourth shipped consumer of T-0's probe-pack runner extension; consumes the logging companion for the delivery-log write path and the errorHandling companion for the assertive-slot alert boundary; adds no runner surface (reuses the T-3 pack-browser resize seam only for future minor bumps, none in v1.0.0).",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}

package/rcf/requirements/req-022.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z",
+  "reqId": "REQ-022",
+  "prdId": "PRD-001",
+  "title": "Capability-declaration mechanism (capabilities[], elicits[], apply-time discovery, refusal and custom-auth elicitation) and four auth-blueprint 1.1.0 minors adopting it",
+  "description": "The rcf-lite blueprint loader accepts two additive optional top-level fields on blueprint.json: capabilities[] (a non-empty array of lower camelCase strings on the ^[a-z][a-zA-Z0-9]*$ pattern, matching the section 6a role naming convention; a blueprint declares what identity or platform capability it provides so consumer blueprints can gate surfaces on it) and elicits[] (a non-empty array of {id, prompt, kind: enum|string|boolean, default, when?} entries the apply verb reads at apply time to prompt the operator for per-project answers). The loader validates SHAPE; the vocabulary lives in the section 6a table (principalDirectory, roleModel, tenancy, auditLog) extended in the same docs edit. A third additive top-level field requiresAppliedCapabilities[] tells apply that the blueprint refuses to apply when none of the currently-applied blueprints declares any of the required capabilities (unless an allowSkipFlag matching --allow-no-auth-yet is passed); apply then reads back each applied blueprint's source blueprint.json (the applied-blueprint-record schema is closed and refuses new fields; the source-manifest read-back precedent from the T-2 core-companions train applies here) to compute the appliedCapabilities union across the project. When the union is empty AND the blueprint is admin-console AND --allow-no-auth-yet was not passed, the apply exits 3 with a stderr message naming security-auth-* (the spec 5.5.1 verbatim message) and lists the currently-applied blueprints. When --allow-no-auth-yet is passed, apply stamps a note field onto the applied record so a later rcf define validate can flag surfaces that never activated. The elicitation phase prompts on a TTY and reads --answer <id>=<value> (repeatable) plus --answers <file> (JSON object) non-interactively; each elicit's `when` predicate evaluates against the discovered applied-capability set so elicits like the tenancy shape only prompt when the tenancy capability is applied. Apply persists appliedCapabilities and appliedElicitations into a sidecar file at rcf/blueprints/${slug}.applied.json (the applied-blueprint-record schema is closed under additionalProperties:false so the manifest cannot carry them; the sidecar is read by consumer surfaces at runtime). The four shelf auth blueprints adopt capabilities[] in v1.1.0 minor bumps landing in the same PR per spec Q2 default: security-auth-magic-link 1.0.0 -> 1.1.0 capabilities: [principalDirectory]; security-auth-clerk 1.1.0 -> 1.2.0 capabilities: [principalDirectory, roleModel]; security-auth-oauth2 1.0.0 -> 1.1.0 capabilities: [principalDirectory, roleModel]; security-auth-keycloak 1.0.0 -> 1.1.0 capabilities: [principalDirectory, roleModel]. Per section 6 of blueprint-authoring.md, an additive optional field with no global-topic change is a minor bump.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}

package/rcf/requirements/req-023.json

@@ -0,0 +1,14 @@
+{
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z",
+  "reqId": "REQ-023",
+  "prdId": "PRD-001",
+  "title": "Application-admin-console v1.0.0 blueprint on the shelf with capability-gated surfaces, a Playwright probe pack and a sample-app fixture",
+  "description": "The rcf-lite shelf ships the application-admin-console v1.0.0 blueprint (blueprints/application-admin-console/) with 23 contributions (6 REQs on the console shell with no dead links to unapplied capabilities, the users surface conditional on principalDirectory, the roles surface conditional on roleModel with Owner + Admin + Member + Viewer baseline, the orgs surface conditional on tenancy, the audit-log surface conditional on the auditLog logging companion, and the access-denied and request-access states per WCAG; 9 USs 21101-21109 binding runtime-observable ACs plus the conditional-refusal apply-time behaviour; 4 TACs 2201-2204 on the console shell reading the surface manifest, the apply-time capability discovery, the permission matrix as an ARIA APG grid, and the audit view consuming application-datatable; 4 ADRs 2201-2204 on the capability vocabulary, baseline roles with elicited additions, invite transport with email default delegated to the email sibling and elicited, and audit-log retention window elicited). The blueprint declares requiresAppliedCapabilities: [principalDirectory] and allowSkipFlag: allow-no-auth-yet so a bare-SPA apply refuses with exit 3 and the spec 5.5.1 verbatim message naming security-auth-*; the override records a note on the applied record. Declares elicits[] gating baselineRoles (only when roleModel is applied), tenancyShape (only when tenancy is applied), inviteTransport, and auditRetentionDays (only when auditLog is applied). Declares suggestedCompanions logging and errorHandling with the ratified spec section 5.5 reasons; providesRoles absent per spec 5.5.3 (the console is a consumer of principalDirectory, never a provider). Ships a Playwright probe pack under blueprints/application-admin-console/probe-packs/application-admin-console.pack.mjs whose four checks (AC-21102-1 users directory, AC-21103-1 permission matrix, AC-21104-1 org switcher, AC-21105-1 audit-log surface) each carry an appliesTo predicate that reads manifest.blueprints[] and the read-back capabilities so an inapplicable check records applicable: false and the aggregate verdict treats it as neither pass nor fail. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-admin-console/ with a CAPS env or query switch selecting which surfaces exist (mirrors the applied capability set so the sample app plays every fixture), a console shell whose nav only links applied surfaces, a users directory table with per-row invite and deactivate controls enumerated by data-user-id, a permission matrix rendered as an ARIA APG grid with role=grid, role=row, role=gridcell, role=rowheader on role rows and role=columnheader on permission columns announcing the exact permission string on focus (WCAG 4.1.3), an org switcher (only under tenancy), an audit-log table with actor / target / before / after / timestamp / correlation id enumerated by data-audit-id, an access-denied route with a request-access control, request log on window.__adminFetches and /__requests, and break switches for the negative runs (matrix-grid, denied, audit-fields). Reads applied capabilities from the rcf/blueprints/application-admin-console.applied.json sidecar or from an ADMIN_CONSOLE_CAPS env override so the fixture can play fixtures (b) SPA + magic-link, (c) SPA + clerk + logging, and (d) custom-auth elicited capabilities. Fifth shipped consumer of T-0's probe-pack runner extension; consumes application-datatable (T-1) for the users directory and audit views."
+,
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}

package/rcf/test-suites/ts-046.json

@@ -0,0 +1,78 @@
+{
+  "createdAt": "2026-09-04T18:00:42.492Z",
+  "updatedAt": "2026-09-04T18:51:45.216Z",
+  "purpose": "Cover AC-1701-1..8 via unit tests over the pack schema validator, the pack loader (both extensions, cross-check, applicability seams), the runner pack pass (aggregate verdict extension, browser and fetch injection, preChecks with dependsOn), the CLI --probe-pack option (unknown-name refusal, pack restriction, applicable=false record path), the Playwright-MCP pack-browser stdio client (evaluate-result parsing), and the boot fallback (reachability probe, spawn-and-wait, waitForSelector soft-timeout, cleanup on completion).",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-1701-1",
+    "AC-1701-2",
+    "AC-1701-3",
+    "AC-1701-4",
+    "AC-1701-5",
+    "AC-1701-6",
+    "AC-1701-7",
+    "AC-1701-8"
+  ],
+  "id": "TS-046",
+  "usId": "US-1701",
+  "title": "Blueprint-shipped probe pack loader, scoping, cross-check, runner pass and CLI --probe-pack",
+  "testCases": [
+    {
+      "id": "TC-046-pack-loader-loads-both-pack-js-and-pack",
+      "acId": "AC-1701-1",
+      "description": "Pack loader loads both .pack.js and .pack.mjs; validates packName pattern and blueprint-slug prefix; refuses non-array checks[] with exit 2 diagnostic",
+      "status": "pending",
+      "testPointer": "test/browser-verify/pack-loader.test.js::loadProbePacks accepts .pack.js and .pack.mjs and reports one loaded pack per legal module"
+    },
+    {
+      "id": "TC-046-applicability-predicate-source-scan",
+      "acId": "AC-1701-2",
+      "description": "Applicability predicate source-scan refuses unqualified predicate () => true and refuses a predicate that references none of route, tacIds, blueprint:; appliesTo returning false records applicable=false",
+      "status": "pending",
+      "testPointer": "test/browser-verify/pack-loader.test.js::applicability predicate refuses unqualified default and records applicable=false when appliesTo returns false"
+    },
+    {
+      "id": "TC-046-loader-refuses-at-exit-2-a-pack-whose",
+      "acId": "AC-1701-3",
+      "description": "Loader refuses at exit 2 a pack whose checks[].id names an AC id the blueprint does not contribute; the diagnostic names the offending id and the contributed AC ids",
+      "status": "pending",
+      "testPointer": "test/browser-verify/pack-loader.test.js::loader refuses a pack whose check id names an AC the blueprint does not contribute"
+    },
+    {
+      "id": "TC-046-runner-pack-pass-invokes-each-check-s",
+      "acId": "AC-1701-4",
+      "description": "Runner pack pass invokes each check's run with injected browser and fetch, folds results into probePacks[], and aggregate verdict extension blocks on severity block fail and warns on severity warn fail",
+      "status": "pending",
+      "testPointer": "test/browser-verify/pack-runner.test.js::runProbePacksForFbs folds probePacks[] onto the record and the aggregate verdict extension blocks on a block-severity pack fail"
+    },
+    {
+      "id": "TC-046-cli-probe-pack-option-restricts-to-one",
+      "acId": "AC-1701-5",
+      "description": "CLI --probe-pack option restricts to one pack by name; unknown name exits 2 with a diagnostic naming the discovered packs; when omitted every discovered pack runs",
+      "status": "pending",
+      "testPointer": "test/cli/browser-verify-probe-pack.test.js::rcf verify browser --probe-pack restricts to one pack and exits 2 on unknown pack name"
+    },
+    {
+      "id": "TC-046-prechecks-runs-before-browser-checks-a",
+      "acId": "AC-1701-6",
+      "description": "preChecks[] runs before browser checks; a failing pre-check skips only browser checks that name it under dependsOn with verdict skipped and detail skipped-by-pre-check; other checks still run",
+      "status": "pending",
+      "testPointer": "test/browser-verify/pack-runner.test.js::preChecks fast-fail skips browser checks that dependsOn a failing pre-check"
+    },
+    {
+      "id": "TC-046-pack-browser-evaluate-parser",
+      "acId": "AC-1701-7",
+      "description": "The Playwright-MCP stdio client parses browser_evaluate result blocks (both the '### Result' fenced form used by MCP 0.0.80+ and the legacy 'Result:' trailer) into typed JS values so a pack's check can assert on the value directly",
+      "status": "pending",
+      "testPointer": "test/browser-verify/pack-browser.test.js::parseEvaluateResult returns a parsed JSON value when the MCP block ends with Result: <json>"
+    },
+    {
+      "id": "TC-046-boot-skips-when-runtime-reachable",
+      "acId": "AC-1701-8",
+      "description": "bootIfNeeded returns already-up when the runtime URL responds with any HTTP status; returns no-boot / no-boot-command when the pack declares no boot / no bootCommand; spawns bootCommand and reports started when the URL flips to reachable; SIGTERMs the child on stop()",
+      "status": "pending",
+      "testPointer": "test/browser-verify/boot.test.js::bootIfNeeded spawns bootCommand, polls until waitForUrl responds, then reports started"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-047.json

@@ -0,0 +1,54 @@
+{
+  "createdAt": "2026-09-04T20:05:51.932Z",
+  "updatedAt": "2026-09-04T20:09:33.956Z",
+  "purpose": "Cover AC-1801-1..5 via unit tests over the shipped application-datatable blueprint's contribution counts (six REQs, nine USs, three TACs, four ADRs, 27 ACs total), the pack-loader accepting the shipped pack file with every check id cross-checked against the blueprint's contributed AC ids, the pack schema accepting the pack's applicability predicate (references route and tacIds), and the sample-app fixture's exported startServer plus /api/rows shape.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-1801-1",
+    "AC-1801-2",
+    "AC-1801-3",
+    "AC-1801-4",
+    "AC-1801-5"
+  ],
+  "id": "TS-047",
+  "usId": "US-1801",
+  "title": "application-datatable v1.0.0 shelf shape and probe pack cross-check",
+  "testCases": [
+    {
+      "id": "TC-047-blueprint-json-declares-slug-application",
+      "acId": "AC-1801-1",
+      "description": "blueprint.json declares slug application-datatable, version 1.0.0, category application, 22 contributions in 6 REQ / 9 US / 3 TAC / 4 ADR groups, and suggestedCompanions declares logging and errorHandling",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-datatable-anatomy.test.js::application-datatable: blueprint.json declares the ratified shape (TC-047-blueprint-json-shape)"
+    },
+    {
+      "id": "TC-047-fresh-init-project-applies-the-blueprint",
+      "acId": "AC-1801-2",
+      "description": "Fresh init project applies the blueprint cleanly; walkTree produces zero errors; 6 REQs and 9 USs land under the application-datatable prefix",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-datatable-anatomy.test.js::application-datatable: applies cleanly on a fresh init project and adds 22 documents to the tree (TC-047-applies-clean)"
+    },
+    {
+      "id": "TC-047-every-pack-check-id-resolves-to-an-ac-id",
+      "acId": "AC-1801-3",
+      "description": "Every pack check id resolves to an AC id contributed by the blueprint; expected six check ids in the same order as the spec",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-datatable-anatomy.test.js::application-datatable: every AC id in each contributed US matches the pack check ids and vice versa where anchored (TC-047-pack-checks-cross-check)"
+    },
+    {
+      "id": "TC-047-sample-app-fixture-startserver-serves",
+      "acId": "AC-1801-4",
+      "description": "Sample-app fixture startServer serves /api/rows honouring sort, q, page and pageSize; loaders discovery finds the shipped pack against an applied scratch project",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-datatable-anatomy.test.js::application-datatable sample-app fixture: startServer returns rows on /api/rows with sort, q, page and pageSize (TC-047-fixture-api-rows)"
+    },
+    {
+      "id": "TC-047-pack-loader-against-blueprint-discovers",
+      "acId": "AC-1801-5",
+      "description": "pack loader against blueprint discovers exactly one pack with six checks; the pack cross-check test proves the pack refuses ship on broken fixture at the section 9 T-1 row 3 gate the reviewer runs against a live server",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-datatable-anatomy.test.js::application-datatable: pack loader discovers the shipped pack against an applied scratch project (TC-047-pack-loader-discovers)"
+    }
+  ],
+  "status": "draft"
+}