rcf-lite 0.20.0 → 0.22.0

package/rcf/code-nodes/cn-171.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-171",
+  "path": "../../blueprints/security-auth-magic-link/blueprint.json",
+  "implementsAcIds": [
+    "AC-2701-8"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T21:13:59.942Z",
+  "updatedAt": "2026-09-06T21:13:59.942Z"
+}

package/rcf/code-nodes/cn-172.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-172",
+  "path": "../../blueprints/security-auth-magic-link/CHANGELOG.md",
+  "implementsAcIds": [
+    "AC-2701-8"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T21:14:00.117Z",
+  "updatedAt": "2026-09-06T21:14:00.117Z"
+}

package/rcf/code-nodes/cn-173.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-173",
+  "path": "../../blueprints/observability-logging/blueprint.json",
+  "implementsAcIds": [
+    "AC-2701-8"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T21:14:00.291Z",
+  "updatedAt": "2026-09-06T21:14:00.291Z"
+}

package/rcf/code-nodes/cn-174.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-174",
+  "path": "../../blueprints/observability-logging/CHANGELOG.md",
+  "implementsAcIds": [
+    "AC-2701-8"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T21:14:00.466Z",
+  "updatedAt": "2026-09-06T21:14:00.466Z"
+}

package/rcf/code-nodes/cn-175.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-175",
+  "path": "../../blueprints/application-onboarding-tour/blueprint.json",
+  "implementsAcIds": [
+    "AC-2801-1",
+    "AC-2801-3"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:18.939Z",
+  "updatedAt": "2026-09-06T23:59:16.338Z"
+}

package/rcf/code-nodes/cn-176.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-176",
+  "path": "../../blueprints/application-onboarding-tour/contributions/adrs/adr-2701-application-onboarding-tour-dismissal-policy.json",
+  "implementsAcIds": [
+    "AC-2801-2"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:19.097Z",
+  "updatedAt": "2026-09-06T23:20:19.097Z"
+}

package/rcf/code-nodes/cn-177.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-177",
+  "path": "../../blueprints/application-onboarding-tour/contributions/adrs/adr-2702-application-onboarding-tour-completion-store-shape.json",
+  "implementsAcIds": [
+    "AC-2801-2"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:19.255Z",
+  "updatedAt": "2026-09-06T23:20:19.255Z"
+}

package/rcf/code-nodes/cn-178.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-178",
+  "path": "../../blueprints/application-onboarding-tour/contributions/adrs/adr-2703-application-onboarding-tour-checklist-anchor.json",
+  "implementsAcIds": [
+    "AC-2801-2"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:19.415Z",
+  "updatedAt": "2026-09-06T23:20:19.415Z"
+}

package/rcf/code-nodes/cn-179.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-179",
+  "path": "../../blueprints/application-onboarding-tour/probe-packs/application-onboarding-tour.pack.mjs",
+  "implementsAcIds": [
+    "AC-2801-4"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:19.573Z",
+  "updatedAt": "2026-09-06T23:20:19.573Z"
+}

package/rcf/code-nodes/cn-180.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-180",
+  "path": "../../blueprints/application-onboarding-tour/README.md",
+  "implementsAcIds": [
+    "AC-2801-7",
+    "AC-2801-8"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:19.734Z",
+  "updatedAt": "2026-09-06T23:20:19.734Z"
+}

package/rcf/code-nodes/cn-181.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-181",
+  "path": "../../blueprints/application-onboarding-tour/CHANGELOG.md",
+  "implementsAcIds": [
+    "AC-2801-8"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:19.893Z",
+  "updatedAt": "2026-09-06T23:20:19.893Z"
+}

package/rcf/code-nodes/cn-182.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-182",
+  "path": "../../blueprints/application-onboarding-tour/guide/application-onboarding-tour.md",
+  "implementsAcIds": [
+    "AC-2801-7",
+    "AC-2801-8"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:20.051Z",
+  "updatedAt": "2026-09-06T23:20:20.051Z"
+}

package/rcf/code-nodes/cn-183.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-183",
+  "path": "../../blueprints/application-onboarding-tour/docs/topics.md",
+  "implementsAcIds": [
+    "AC-2801-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:20.211Z",
+  "updatedAt": "2026-09-06T23:20:20.211Z"
+}

package/rcf/code-nodes/cn-184.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-184",
+  "path": "test/fixtures/probe-pack-application-onboarding-tour/server.js",
+  "implementsAcIds": [
+    "AC-2801-5",
+    "AC-2801-6"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:20.371Z",
+  "updatedAt": "2026-09-06T23:20:20.371Z"
+}

package/rcf/code-nodes/cn-185.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-185",
+  "path": "test/fixtures/probe-pack-application-onboarding-tour/README.md",
+  "implementsAcIds": [
+    "AC-2801-5"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:20.530Z",
+  "updatedAt": "2026-09-06T23:20:20.530Z"
+}

package/rcf/code-nodes/cn-186.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-186",
+  "path": "docs/blueprint-authoring.md",
+  "implementsAcIds": [
+    "AC-2801-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:20.688Z",
+  "updatedAt": "2026-09-06T23:20:20.688Z"
+}

package/rcf/code-nodes/cn-200.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-200",
+  "path": "../../blueprints/persistence-data-postgres/blueprint.json",
+  "implementsAcIds": [
+    "AC-4001-1",
+    "AC-4001-2",
+    "AC-4001-3"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T17:02:46.031Z",
+  "updatedAt": "2026-09-06T17:02:46.031Z"
+}

package/rcf/code-nodes/cn-201.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-201",
+  "path": "../../blueprints/persistence-data-postgres/contributions/probes/facade-round-trip.mjs",
+  "implementsAcIds": [
+    "AC-4001-4",
+    "AC-4001-5"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T17:02:46.386Z",
+  "updatedAt": "2026-09-06T17:02:46.386Z"
+}

package/rcf/code-nodes/cn-202.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-202",
+  "path": "../../packages/rcf-lite/test/fixtures/infra-postgres/src/store.mjs",
+  "implementsAcIds": [
+    "AC-4001-4",
+    "AC-4001-5",
+    "AC-4001-6"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T17:02:46.746Z",
+  "updatedAt": "2026-09-06T17:02:46.746Z"
+}

package/rcf/code-nodes/cn-203.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-203",
+  "path": "../../blueprints/object-storage-s3/blueprint.json",
+  "implementsAcIds": [
+    "AC-4101-1",
+    "AC-4101-2",
+    "AC-4101-3"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T17:51:53.270Z",
+  "updatedAt": "2026-09-06T17:51:53.270Z"
+}

package/rcf/code-nodes/cn-204.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-204",
+  "path": "../../blueprints/object-storage-s3/contributions/probes/facade-round-trip.mjs",
+  "implementsAcIds": [
+    "AC-4101-4",
+    "AC-4101-5"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T17:51:53.619Z",
+  "updatedAt": "2026-09-06T17:51:53.619Z"
+}

package/rcf/code-nodes/cn-205.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-205",
+  "path": "../../packages/rcf-lite/test/fixtures/infra-s3-and-queue/src/object-store.mjs",
+  "implementsAcIds": [
+    "AC-4101-4",
+    "AC-4101-5",
+    "AC-4101-6"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T17:51:53.986Z",
+  "updatedAt": "2026-09-06T17:51:53.986Z"
+}

package/rcf/fbs/fbs-036.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-04T18:00:20.529Z",
+  "updatedAt": "2026-09-04T18:51:45.216Z",
+  "acIds": [
+    "AC-1701-1",
+    "AC-1701-2",
+    "AC-1701-3",
+    "AC-1701-4",
+    "AC-1701-5",
+    "AC-1701-6",
+    "AC-1701-7",
+    "AC-1701-8"
+  ],
+  "fbsId": "FBS-036",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 36,
+  "executionStatus": "notStarted",
+  "title": "Browser-verify runner extension: blueprint-shipped probe pack loader, scoping predicate, aggregate verdict and --probe-pack CLI",
+  "summary": "T-0 of the ratified visual round (spec 2026-09-04, section 2.1): the browser-verify runner extension that lets a blueprint ship a Playwright probe pack under `blueprints/<slug>/probe-packs/` and have `rcf verify browser` discover, scope-check and run it as a required ship gate. Six ACs span the loader (schema + `.pack.js` and `.pack.mjs`), the applicability predicate (source-scan for one of the three legal scoping seams: route, tacIds or `blueprint:` tag), the check-id cross-check against the shipping blueprint's contributed AC ids, the runner pass (after invariants and auth-smoke, packs receive an injected browser and fetch), the aggregate verdict extension (block on any `severity: block` pack fail), the `--probe-pack <name>` CLI restriction, and the optional `preChecks[]` fast-fail slot with `dependsOn` skip semantics. Zero new npm dependencies; the pinned Playwright MCP the launcher provisions is the browser access seam. Unblocks T-1..T-5 (datatable, charts, dashboard, notifications-in-app, admin-console).",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-037.json

@@ -0,0 +1,19 @@
+{
+  "createdAt": "2026-09-04T20:05:58.214Z",
+  "updatedAt": "2026-09-04T20:06:06.900Z",
+  "acIds": [
+    "AC-1801-1",
+    "AC-1801-2",
+    "AC-1801-3",
+    "AC-1801-4",
+    "AC-1801-5"
+  ],
+  "fbsId": "FBS-037",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 37,
+  "executionStatus": "notStarted",
+  "title": "application-datatable v1.0.0 blueprint on the shelf: 22 contributions, Playwright probe pack with six anchored checks, sample-app fixture",
+  "summary": "T-1 of the ratified visual round (spec 2026-09-04, section 5.1): the application-datatable v1.0.0 blueprint on the shelf. Ships 22 contributions (six REQs, nine USs, three TACs, four ADRs), a Playwright probe pack under blueprints/application-datatable/probe-packs/application-datatable.pack.js whose six checks (AC-17101-1 sort click, AC-17102-1 filter q, AC-17103-2 pagination aria-live, AC-17104-3 bulk-action focus return, AC-17105-1 four-state distinctness, AC-17106-1 column reorder keyboard) are anchored to blueprint AC ids per T-0 AC-1701-3, and a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-datatable/ the pack probes for real. Applies cleanly (validate 0, coverage strict 0, eval strict 0 on a scratch project). Consumes T-0's runner extension.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-038.json

@@ -0,0 +1,19 @@
+{
+  "createdAt": "2026-09-04T21:08:46.506Z",
+  "updatedAt": "2026-09-04T21:09:05.400Z",
+  "acIds": [
+    "AC-1901-1",
+    "AC-1901-2",
+    "AC-1901-3",
+    "AC-1901-4",
+    "AC-1901-5"
+  ],
+  "fbsId": "FBS-038",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 38,
+  "executionStatus": "notStarted",
+  "title": "application-charts v1.0.0 blueprint on the shelf: 15 contributions, Playwright probe pack with three anchored checks, sample-app fixture with negative-run switches",
+  "summary": "T-2 of the ratified visual round (spec 2026-09-04, section 5.2): the application-charts v1.0.0 blueprint on the shelf. Ships 15 contributions (four REQs on the chart form set, non-colour distinction, text-alternative table and keyboard traversal; six USs binding runtime-observable ACs; two TACs on the render shell and the keyboard traversal contract; three ADRs on chart engine choice, accessible palette and reduced-motion respect), a Playwright probe pack under blueprints/application-charts/probe-packs/application-charts.pack.mjs whose three checks (AC-18102-1 non-colour distinction, AC-18103-1 text-alternative table with cell-per-value contract, AC-18104-1 keyboard traversal with announced-string format and reduced-motion suppression) are anchored to blueprint AC ids per T-0 AC-1701-3 and each carries a description field per spec section 9, and a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-charts/ the pack probes for real. Applies cleanly (validate 0, coverage strict 0, eval strict 0 on a scratch project). Consumes T-0's runner extension; the leaf blueprint the T-3 application-dashboard build consumes.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-039.json

@@ -0,0 +1,21 @@
+{
+  "createdAt": "2026-09-04T22:10:00.000Z",
+  "updatedAt": "2026-09-04T22:10:00.000Z",
+  "acIds": [
+    "AC-2001-1",
+    "AC-2001-2",
+    "AC-2001-3",
+    "AC-2001-4",
+    "AC-2001-5",
+    "AC-2001-6",
+    "AC-2001-7"
+  ],
+  "fbsId": "FBS-039",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 39,
+  "executionStatus": "notStarted",
+  "title": "application-dashboard v1.0.0 blueprint on the shelf: 18 contributions, packaged design guidance, Playwright probe pack with three anchored checks, sample-app fixture with negative-run switches, pack-browser resize seam extension",
+  "summary": "T-3 of the ratified visual round (spec 2026-09-04, section 5.3): the application-dashboard v1.0.0 blueprint on the shelf. Ships 18 contributions (5 REQs on shell composition, primary-KPI visual hierarchy, per-tile four-state contract, timeframe and filter chrome refetch fan-out, and export handle with format delegation to charts; 7 USs binding runtime-observable ACs plus one on packaged-guidance adherence; 3 TACs on the tile grid with CSS Grid position semantics, the filter chrome and timeframe picker with the refetch fan-out contract, and the export handle; 3 ADRs on the primary-KPI kinds enum, the timeframe presets and the export formats), a packaged design-guidance asset carrying the eight sections and five https citations per spec 5.3.1, a Playwright probe pack whose three checks (AC-19102-1 primary-KPI position by DOM order and CSS Grid position at 1440/1024/360, AC-19104-1 timeframe refetch fan-out with same boundary and matching as-of ISO-8601 stamp, AC-19103-1 per-tile four-state contract with role region, aria-live polite and non-colour distinction) are anchored to blueprint AC ids per T-0 AC-1701-3 and each carries a description field per spec section 9, and a dependency-free sample-app fixture the pack probes for real. Extends the pack-browser seam with a resize(width, height) method the pack drives to probe the three breakpoints. Applies cleanly (validate 0, coverage strict 0, eval strict 0 on a scratch project). Consumes application-charts through the shared render shell (the dashboard's chart region reuses the charts sample-app markup shape); references application-datatable in the packaged guidance's when-a-table-beats-a-chart section.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-040.json

@@ -0,0 +1,20 @@
+{
+  "createdAt": "2026-09-04T23:59:00.000Z",
+  "updatedAt": "2026-09-04T23:59:00.000Z",
+  "acIds": [
+    "AC-2101-1",
+    "AC-2101-2",
+    "AC-2101-3",
+    "AC-2101-4",
+    "AC-2101-5",
+    "AC-2101-6"
+  ],
+  "fbsId": "FBS-040",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 40,
+  "executionStatus": "notStarted",
+  "title": "application-notifications-in-app v1.0.0 blueprint on the shelf: 19 contributions, Playwright probe pack with three anchored checks, sample-app fixture with four break switches, and the family-prefix reservation across the shelf registry",
+  "summary": "T-4 of the ratified visual round (spec 2026-09-04, section 5.4): the application-notifications-in-app v1.0.0 blueprint on the shelf. Ships 19 contributions (5 REQs on live-region preseeding, transient toast contract, notification centre inbox with acknowledge round-trip, per-user preferences UI with sibling delegation, and delivery-attempt log; 8 USs binding runtime-observable ACs plus three cross-cutting cases; 3 TACs on the live-region wrappers and toast factory, centre inbox and acknowledge round-trip, and preferences UI; 3 ADRs on the priority-to-role mapping polite/status vs assertive/alert per WCAG 4.1.3 and ARIA APG alert, the six-second toast timeout floor per WCAG 2.2.1 Timing Adjustable, and the thirty-day centre retention window), a Playwright probe pack whose three checks (AC-20101-1 live-region preseeded on every declared route, AC-20102-1 transient toast contract with priority-to-role mapping and timeout floor measured via data-shown-at/data-dismissed-at, AC-20103-1 centre acknowledge round-trip enumerated by data-notification-id with client + server request-log reconciliation) are anchored to blueprint AC ids per T-0 AC-1701-3 and each carries a description field per spec section 9 (with AC-20101-1 description carrying the word 'preseeded' per the T-4 row), and a dependency-free sample-app fixture the pack probes for real, with four break switches for the negative runs (preseed, role, timeout, ack). Reserves the family prefix application-notifications- for the sibling channels the shelf will grow into (email, push, webhook) as a doc-only reservation on the blueprint README and every applying blueprint's docs/topics.md registry row. Applies cleanly (validate 0, coverage strict 0, eval strict 0 on a scratch project).",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-041.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z",
+  "acIds": ["AC-2201-1", "AC-2201-2", "AC-2201-3", "AC-2201-4", "AC-2201-5", "AC-2201-6", "AC-2201-7", "AC-2201-8", "AC-2201-9"],
+  "fbsId": "FBS-041",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 41,
+  "executionStatus": "notStarted",
+  "title": "Capability-declaration mechanism and four shelf auth blueprint 1.1.0/1.2.0 minor bumps",
+  "summary": "T-5 mechanism track of the ratified visual round (spec 2026-09-04, section 5.5). Introduces capabilities[], elicits[] and requiresAppliedCapabilities top-level fields on blueprint.json with shape validation in the loader; apply-time discovery via source read-back on manifest.blueprints[].source; the exit-3 refusal with the spec 5.5.1 verbatim message on bare-SPA applies; --allow-no-auth-yet operator override; elicitation phase reading --answer <id>=<value> (repeatable) and --answers <file> (JSON object) with kind coercion; per-project sidecar rcf/blueprints/${slug}.applied.json capturing appliedCapabilities and appliedElicitations; pack-runner extension for per-check applicability so an absent capability records applicable:false and the aggregate verdict treats the check as neither pass nor fail (spec section 3.3 T-5 residual cure). Bumps the four shelf auth blueprints to declare capabilities[]: magic-link 1.0.0 -> 1.1.0 [principalDirectory]; clerk 1.1.0 -> 1.2.0 [principalDirectory, roleModel]; oauth2 1.0.0 -> 1.1.0 [principalDirectory, roleModel]; keycloak 1.0.0 -> 1.1.0 [principalDirectory, roleModel]. docs/blueprint-authoring.md section 6a extended with the capability vocabulary table (principalDirectory, roleModel, tenancy, auditLog) and the sidecar contract description.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-042.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z",
+  "acIds": ["AC-2301-1", "AC-2301-2", "AC-2301-3", "AC-2301-4", "AC-2301-5", "AC-2301-6", "AC-2301-7"],
+  "fbsId": "FBS-042",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 42,
+  "executionStatus": "notStarted",
+  "title": "application-admin-console v1.0.0 blueprint on the shelf with capability-gated probe pack and sample-app fixture",
+  "summary": "T-5 shelf-blueprint track of the ratified visual round (spec 2026-09-04, section 5.5): the application-admin-console v1.0.0 blueprint on the shelf. Ships 23 contributions (6 REQs on console shell + users conditional principalDirectory + roles conditional roleModel with Owner+Admin+Member+Viewer baseline + orgs conditional tenancy + audit-log conditional auditLog + access-denied and request-access WCAG 2.2 AA; 9 USs 21101-21109 binding 16 runtime-observable ACs plus the conditional-refusal apply-time behaviour; 4 TACs 2201-2204 on the console shell reading the surface manifest + apply-time capability discovery + permission matrix as an ARIA APG grid + audit view consuming datatable T-1; 4 ADRs 2201-2204 on the capability vocabulary as free labels + Owner+Admin+Member+Viewer baseline elicited additions + invite transport email default delegated to email sibling elicited + audit-log retention window elicited), a Playwright probe pack whose four capability-gated checks (AC-21102-1 users when principalDirectory, AC-21103-1 permission matrix when roleModel, AC-21104-1 org switcher when tenancy, AC-21105-1 audit-log when auditLog) each declare a per-check appliesTo predicate reading the applied capability sidecar, and a dependency-free sample-app fixture with CAPS switch selecting surfaces, ARIA APG grid permission matrix, users directory with data-user-id enumeration, org switcher, audit-log with correlationId, access-denied with request-access control, and break switches for the negative runs (matrix-grid, denied, audit-fields). Consumes application-datatable (T-1) for the users and audit surfaces; suggestedCompanions logging and errorHandling; providesRoles absent per spec 5.5.3.",
+  "dependsOnFbsIds": ["FBS-041"]
+}

package/rcf/fbs/fbs-043.json

@@ -0,0 +1,23 @@
+{
+  "createdAt": "2026-09-06T15:39:29.571Z",
+  "updatedAt": "2026-09-06T15:47:21.202Z",
+  "dependsOnFbsIds": [
+    "FBS-042"
+  ],
+  "acIds": [
+    "AC-2401-1",
+    "AC-2401-2",
+    "AC-2401-3",
+    "AC-2401-4",
+    "AC-2401-5",
+    "AC-2401-6",
+    "AC-2401-7"
+  ],
+  "fbsId": "FBS-043",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 43,
+  "executionStatus": "notStarted",
+  "title": "application-empty-error-states v1.0.0 blueprint on the shelf with the eight-state probe pack and sample-app fixture",
+  "summary": "T-1 shelf-blueprint track of the ratified visual round 4 (spec 2026-09-06, section 5.1): the application-empty-error-states v1.0.0 blueprint on the shelf. Ships 19 contributions (5 REQs on state catalogue and recovery-action contract and announcement contract and least-privilege 5xx and 403 posture and offline write-buffer; 8 USs 22101-22108 binding runtime-observable ACs one per named state; 3 TACs 2301 state-machine and 2302 recovery-router and 2303 offline write-buffer; 3 ADRs 2301 HTTP status contract RFC 9110 and 2302 stack-trace visibility elicited and 2303 offline strategy elicited), a Playwright probe pack whose eight checks (AC-22101-1 through AC-22108-1) each anchor one named state via TAC-2301 or the operator-configured error-shell path glob with URLs composed by withUrl(runtimeUrl, path), and a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-empty-error-states/ serving all eight states honestly on /probe/<name> plus break switches (?break=stack-trace, ?break=leak-id, ?break=no-recovery, ?break=no-live-region) driving the negative runs. suggestedCompanions logging and errorHandling; providesRoles absent; requiresAppliedCapabilities absent (no auth required); capabilities absent. Sixth shipped consumer of T-0s probe-pack runner extension; T-3 forms-wizard and T-4 account-settings consume this blueprint."
+}

package/rcf/fbs/fbs-044.json

@@ -0,0 +1,23 @@
+{
+  "createdAt": "2026-09-06T16:57:28.764Z",
+  "updatedAt": "2026-09-06T18:03:22.207Z",
+  "acIds": [
+    "AC-2501-1",
+    "AC-2501-2",
+    "AC-2501-3",
+    "AC-2501-4",
+    "AC-2501-5",
+    "AC-2501-6",
+    "AC-2501-7"
+  ],
+  "fbsId": "FBS-044",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 45,
+  "executionStatus": "notStarted",
+  "title": "application-file-upload v1.0.0 blueprint on the shelf with the four-check probe pack and sample-app fixture",
+  "summary": "T-2 shelf-blueprint track of the ratified visual round 4 (spec 2026-09-06, section 5.2): the application-file-upload v1.0.0 blueprint on the shelf. Ships 18 contributions (5 REQs on the input contract with a labelled file input plus drop-zone plus keyboard alternative per WCAG 2.5.7, the progress contract with per-file percent and aggregate percent and polite live-region tick, the refusal contract with MIME-type refusal and size-limit refusal and virus-scan hit and aria-describedby error binding and focus-to-retry, the transport contract with chunked-and-resumable and multipart POST default and tus.io elicited alternative, and the completion contract with an assertive-slot announcement on success per WCAG 4.1.3 and per-file remove and retry; 7 USs 23101-23107 one per REQ plus two cross-cutting cases network-interruption resumption and background-tab progress; 3 TACs 2401 input surface and 2402 transport contract and 2403 progress announcer; 3 ADRs 2401 transport across multipart POST and tus.io and per-vendor SDK with recommendedDefault true on multipart and elicited true, 2402 accepted MIME set and per-file size cap elicited, 2403 virus-scan integration via operator-supplied verifier through a capability plus elicit elicited), a Playwright probe pack whose four checks (AC-23101-1 input surface, AC-23102-1 progress announcer, AC-23103-1 refusal contract, AC-23104-1 chunked transport) each bind TAC-2401 or the operator-configured upload-route glob with URLs composed by withUrl(runtimeUrl, path), and a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-file-upload/ realising both transports honestly on /upload with a ?transport=multipart default and ?transport=tus alternative plus break switches (?break=no-input, ?break=no-live-region, ?break=send-refused, ?break=no-chunks) driving the negative runs. suggestedCompanions logging and errorHandling; providesRoles absent; requiresAppliedCapabilities absent; capabilities absent. Seventh shipped consumer of T-0's probe-pack runner extension.",
+  "dependsOnFbsIds": [
+    "FBS-043"
+  ]
+}

package/rcf/fbs/fbs-045.json

@@ -0,0 +1,23 @@
+{
+  "createdAt": "2026-09-06T19:04:36.272Z",
+  "updatedAt": "2026-09-06T20:09:17.380Z",
+  "acIds": [
+    "AC-2601-1",
+    "AC-2601-2",
+    "AC-2601-3",
+    "AC-2601-4",
+    "AC-2601-5",
+    "AC-2601-6",
+    "AC-2601-7"
+  ],
+  "fbsId": "FBS-045",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 47,
+  "executionStatus": "notStarted",
+  "title": "application-forms-wizard v1.0.0 blueprint on the shelf with the four-check probe pack and sample-app fixture",
+  "summary": "T-3 shelf-blueprint track of the ratified visual round 4 (spec 2026-09-06, section 5.3): the application-forms-wizard v1.0.0 blueprint on the shelf. Ships 19 contributions (5 REQs on the task-list contract with the closed GOV.UK vocabulary Cannot start yet plus Not started plus In progress plus Completed with an ARIA progressbar wrapper, the per-step validation timing rule on-blur before first submit then on-change after first failure and a full pass on submit reusing SPA forms-engine TAC-205 per WCAG 2.2 SC 3.3.1 and 3.3.3, the error-summary contract with a top-of-page summary and skip links per failed field with aria-invalid true on the field and aria-describedby to the per-field error message and focus moved to the summary heading on submit failure, the summary-review contract with a summary-list rendering per step with Change links returning to each step and every other answer retained on save per WCAG 2.2 SC 3.3.4, the save-and-return contract with a server-side draft table or a client-side local buffer with a per-write ISO-8601 sync tick with the pack refusing to ship if neither is wired per WCAG 2.2 SC 3.3.7; 8 USs 24101 to 24108 one per REQ plus three cross-cutting cases linear-vs-free navigation, in-progress list and no-in-progress empty state delegated to application-empty-error-states; 3 TACs 2501 task-list shell and 2502 error-summary contract and 2503 draft store; 3 ADRs 2501 navigation posture linear default with elicited free branch, 2502 save-and-return transport across server-draft-table and client-local-buffer elicited with NO recommendedDefault, 2503 step indicator across task-list ARIA progressbar and breadcrumb with recommendedDefault true on task-list), a Playwright probe pack whose four checks (AC-24101-1 task-list, AC-24103-1 error-summary, AC-24104-1 summary-review, AC-24105-1 save-and-return) each bind TAC-2501 or the operator-configured wizard-route glob with URLs composed by withUrl(runtimeUrl, path), and a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-forms-wizard/ realising the four wizard surfaces honestly on /task-list, /step/<n>, /summary and /in-progress plus both save-and-return transports server default and local elicited plus four break switches (?break=task-list-vocab, ?break=no-summary, ?break=no-retain, ?break=no-draft) driving the negative runs. suggestedCompanions logging and errorHandling; providesRoles absent; requiresAppliedCapabilities absent; capabilities absent. Eighth shipped consumer of T-0 probe-pack runner extension.",
+  "dependsOnFbsIds": [
+    "FBS-044"
+  ]
+}

package/rcf/fbs/fbs-046.json

@@ -0,0 +1,24 @@
+{
+  "createdAt": "2026-09-06T21:13:14.813Z",
+  "updatedAt": "2026-09-06T21:13:14.813Z",
+  "acIds": [
+    "AC-2701-1",
+    "AC-2701-2",
+    "AC-2701-3",
+    "AC-2701-4",
+    "AC-2701-5",
+    "AC-2701-6",
+    "AC-2701-7",
+    "AC-2701-8"
+  ],
+  "fbsId": "FBS-046",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 48,
+  "executionStatus": "notStarted",
+  "title": "application-account-settings v1.0.0 blueprint on the shelf with 5-check probe pack, sample-app fixture, four auth-blueprint minor bumps, observability-logging minor and mechanism minor for Q3 refusal",
+  "summary": "T-4 shelf-blueprint track of the ratified visual round 4 spec (2026-09-06 section 5.4): the application-account-settings v1.0.0 blueprint on the shelf with 24 contributions (6 REQs shell + profile + security + sessions + notifications + theme; 10 USs 25101 to 25110; 4 TACs 2601 shell / 2602 capability-discovery / 2603 hosted-ui-bridge / 2604 session-store; 4 ADRs 2601 capability-vocabulary extension / 2602 security-surface-shape elicited no default / 2603 theme-persistence spa-local-storage default / 2604 reauth-window 15m default). Declares requiresAppliedCapabilities principalDirectory with the application-account-settings-bare-spa refusal template and the allow-no-auth-yet override; 8 elicits (4 custom-auth-provides plus security-surface-shape hosted-identity-url theme-persistence reauth-window). Ships a Playwright probe pack with five capability-gated checks anchored to AC-25101-1 AC-25102-1 AC-25105-1 AC-25106-1 AC-25108-1, and a dependency-free sample-app fixture with the five conditional surfaces plus four break switches. Rides with the auth-blueprint minor bumps clerk 1.3.0 (adds sessionInventory hostedIdentityUi) keycloak 1.2.0 (adds credentialSelfService sessionInventory) oauth2 1.2.0 (adds credentialSelfService sessionInventory hostedIdentityUi provider-conditional) magic-link 1.2.0 (doc-only) and the observability-logging 1.2.0 minor bump (adds sessionInventory as the logging-projection provider). Extends the section 6a capability table in packages/rcf-lite/docs/blueprint-authoring.md with three new capability strings. Mechanism minor: buildRefusalMessage carries the application-account-settings-bare-spa template; runElicitationPhase refuses when an operator answers a gated elicit whose when predicate did not fire (Q3 refusal). Composes on application-empty-error-states T-1 for the forbidden and empty-history states; no bespoke access-denied UI. Ninth shipped consumer of T-0 probe-pack runner extension. suggestedCompanions logging and errorHandling; providesRoles absent; capabilities absent.",
+  "dependsOnFbsIds": [
+    "FBS-045"
+  ]
+}

package/rcf/fbs/fbs-047.json

@@ -0,0 +1,24 @@
+{
+  "createdAt": "2026-09-06T23:04:41.707Z",
+  "updatedAt": "2026-09-06T23:05:11.042Z",
+  "acIds": [
+    "AC-2801-1",
+    "AC-2801-2",
+    "AC-2801-3",
+    "AC-2801-4",
+    "AC-2801-5",
+    "AC-2801-6",
+    "AC-2801-7",
+    "AC-2801-8"
+  ],
+  "fbsId": "FBS-047",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 49,
+  "executionStatus": "notStarted",
+  "title": "application-onboarding-tour v1.0.0 blueprint on the shelf with 4-check probe pack, dependency-free sample-app fixture composing on dashboard notifications-in-app account-settings SPA and Q4 fallback (spa-local-storage) when no persistence blueprint is applied",
+  "summary": "T-5 shelf-blueprint track of the ratified visual round 4 spec (2026-09-06 section 5.5): application-onboarding-tour v1.0.0 on the shelf with 17 contributions (4 REQs step-manifest + tooltip-as-dialog + checklist-slot + completion-state; 7 USs 26101 to 26107; 3 TACs 2701 step-runner / 2702 checklist-slot / 2703 completion-store; 3 ADRs 2701 dismissal-policy / 2702 completion-store-shape (Q4 default spa-local-storage) / 2703 checklist-anchor). No requiresAppliedCapabilities (composes on SPA, application-dashboard, application-notifications-in-app, application-account-settings and any auth without hard dependency; per Q4 the completion-state falls back to spa-local-storage when no persistence blueprint is applied). Ships a Playwright probe pack with four surface-observable checks anchored to AC-26101-1 AC-26102-1 AC-26103-1 AC-26104-1, and a dependency-free sample-app fixture with a three-to-five step tour, per-step tooltip-as-dialog per the ARIA APG dialog-modal pattern, a checklist slot switchable between dashboard-top and settings-page, a completion-state store switchable across the three shapes, and four break switches (no-role, focus-escape, no-collapse, no-persist). Composes on application-dashboard for the dashboard-top anchor (with settings-page fallback), application-notifications-in-app for the checklist-completion announcement, application-account-settings for the restart-tour control home, and application-spa for routing and iconography. Tenth shipped consumer of the T-0 probe-pack runner extension. suggestedCompanions logging and errorHandling; providesRoles absent; capabilities absent.",
+  "dependsOnFbsIds": [
+    "FBS-046"
+  ]
+}

package/rcf/fbs/fbs-060.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-06T17:02:45.649Z",
+  "updatedAt": "2026-09-06T17:04:08.054Z",
+  "acIds": [
+    "AC-4001-1",
+    "AC-4001-2",
+    "AC-4001-3",
+    "AC-4001-4",
+    "AC-4001-5",
+    "AC-4001-6"
+  ],
+  "fbsId": "FBS-060",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 44,
+  "executionStatus": "notStarted",
+  "title": "persistence-data-postgres v1.0.0 blueprint on the shelf with six Node-only probes against a live postgres:17-alpine container and a sample-app fixture",
+  "summary": "T-1 shelf-blueprint track of the ratified infra round 5 spec (2026-09-06, section 5.1) re-minted with HQ reserved-block ids (REQ-040 / US-4001 / TS-070 / FBS-060 / CN-200..202) after HQ round-4 T-1 (application-empty-error-states) merged first to origin/main at 784d12f. Ships the persistence-data-postgres v1.0.0 blueprint on the shelf with 26 contributions in the 7 REQ / 10 US 27101-27110 / 4 TAC 2801-2804 / 5 ADR 2801-2805 groups per spec section 5.1, six Node-only probes under blueprints/persistence-data-postgres/contributions/probes/ (facade-round-trip, migration-apply, prepared-statement-scan, transaction-atomicity, recovery-restore-round-trip, pool-posture-smoke) with matching run-<probe-name>.mjs shims writing per-blueprint reports at .rcf/reports/blueprints/persistence-data-postgres/<probe-name>.json, and a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/infra-postgres/ with docker-compose declaring postgres:17-alpine, three toy forward-only migrations, src/store.mjs realising the facade as sole reader of pg, src/migrate.mjs realising the migration runner (with SIMULATE_MIGRATION_FAILURE switch), src/recovery.mjs realising the scheduled export runner via pg_dump, package.json with pg as runtime dep, and a README naming docker and podman incantations plus induced-failure switches. Declares capabilities [relationalStore], suggestedCompanions logging and errorHandling, providesRoles absent, requiresAppliedCapabilities absent. Contributes ADR-2801 and ADR-2802 as scope:global on persistenceStore and migrationDiscipline reused from persistence-data-sqlite and persistence-data-d1 so composition with either surfaces a DELIBERATE conflict per the round-2 pattern. Extends packages/rcf-lite/docs/blueprint-authoring.md section 6a table with a relationalStore row per spec section 5.6; appends one shelf-registry row for persistence-data-postgres at 27101-27899 / 28xx to every shipped blueprint docs/topics.md. Reserves the round-6 Hyperdrive v1.1.0 adapter slot at ADR-2801 by keeping the driver reference opaque at the facade boundary per spec section 5.7. None of the six probes carry accountBound:true; Postgres is local-first per Baz decision 8.",
+  "dependsOnFbsIds": [
+    "FBS-043"
+  ]
+}