rcf-lite 0.21.0 → 0.22.0

package/rcf/code-nodes/cn-183.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-183",
+  "path": "../../blueprints/application-onboarding-tour/docs/topics.md",
+  "implementsAcIds": [
+    "AC-2801-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:20.211Z",
+  "updatedAt": "2026-09-06T23:20:20.211Z"
+}

package/rcf/code-nodes/cn-184.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-184",
+  "path": "test/fixtures/probe-pack-application-onboarding-tour/server.js",
+  "implementsAcIds": [
+    "AC-2801-5",
+    "AC-2801-6"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:20.371Z",
+  "updatedAt": "2026-09-06T23:20:20.371Z"
+}

package/rcf/code-nodes/cn-185.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-185",
+  "path": "test/fixtures/probe-pack-application-onboarding-tour/README.md",
+  "implementsAcIds": [
+    "AC-2801-5"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:20.530Z",
+  "updatedAt": "2026-09-06T23:20:20.530Z"
+}

package/rcf/code-nodes/cn-186.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-186",
+  "path": "docs/blueprint-authoring.md",
+  "implementsAcIds": [
+    "AC-2801-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T23:20:20.688Z",
+  "updatedAt": "2026-09-06T23:20:20.688Z"
+}

package/rcf/code-nodes/cn-200.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-200",
+  "path": "../../blueprints/persistence-data-postgres/blueprint.json",
+  "implementsAcIds": [
+    "AC-4001-1",
+    "AC-4001-2",
+    "AC-4001-3"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T17:02:46.031Z",
+  "updatedAt": "2026-09-06T17:02:46.031Z"
+}

package/rcf/code-nodes/cn-201.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-201",
+  "path": "../../blueprints/persistence-data-postgres/contributions/probes/facade-round-trip.mjs",
+  "implementsAcIds": [
+    "AC-4001-4",
+    "AC-4001-5"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T17:02:46.386Z",
+  "updatedAt": "2026-09-06T17:02:46.386Z"
+}

package/rcf/code-nodes/cn-202.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-202",
+  "path": "../../packages/rcf-lite/test/fixtures/infra-postgres/src/store.mjs",
+  "implementsAcIds": [
+    "AC-4001-4",
+    "AC-4001-5",
+    "AC-4001-6"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T17:02:46.746Z",
+  "updatedAt": "2026-09-06T17:02:46.746Z"
+}

package/rcf/code-nodes/cn-203.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-203",
+  "path": "../../blueprints/object-storage-s3/blueprint.json",
+  "implementsAcIds": [
+    "AC-4101-1",
+    "AC-4101-2",
+    "AC-4101-3"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T17:51:53.270Z",
+  "updatedAt": "2026-09-06T17:51:53.270Z"
+}

package/rcf/code-nodes/cn-204.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-204",
+  "path": "../../blueprints/object-storage-s3/contributions/probes/facade-round-trip.mjs",
+  "implementsAcIds": [
+    "AC-4101-4",
+    "AC-4101-5"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T17:51:53.619Z",
+  "updatedAt": "2026-09-06T17:51:53.619Z"
+}

package/rcf/code-nodes/cn-205.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-205",
+  "path": "../../packages/rcf-lite/test/fixtures/infra-s3-and-queue/src/object-store.mjs",
+  "implementsAcIds": [
+    "AC-4101-4",
+    "AC-4101-5",
+    "AC-4101-6"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-06T17:51:53.986Z",
+  "updatedAt": "2026-09-06T17:51:53.986Z"
+}

package/rcf/fbs/fbs-043.json

@@ -0,0 +1,23 @@
+{
+  "createdAt": "2026-09-06T15:39:29.571Z",
+  "updatedAt": "2026-09-06T15:47:21.202Z",
+  "dependsOnFbsIds": [
+    "FBS-042"
+  ],
+  "acIds": [
+    "AC-2401-1",
+    "AC-2401-2",
+    "AC-2401-3",
+    "AC-2401-4",
+    "AC-2401-5",
+    "AC-2401-6",
+    "AC-2401-7"
+  ],
+  "fbsId": "FBS-043",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 43,
+  "executionStatus": "notStarted",
+  "title": "application-empty-error-states v1.0.0 blueprint on the shelf with the eight-state probe pack and sample-app fixture",
+  "summary": "T-1 shelf-blueprint track of the ratified visual round 4 (spec 2026-09-06, section 5.1): the application-empty-error-states v1.0.0 blueprint on the shelf. Ships 19 contributions (5 REQs on state catalogue and recovery-action contract and announcement contract and least-privilege 5xx and 403 posture and offline write-buffer; 8 USs 22101-22108 binding runtime-observable ACs one per named state; 3 TACs 2301 state-machine and 2302 recovery-router and 2303 offline write-buffer; 3 ADRs 2301 HTTP status contract RFC 9110 and 2302 stack-trace visibility elicited and 2303 offline strategy elicited), a Playwright probe pack whose eight checks (AC-22101-1 through AC-22108-1) each anchor one named state via TAC-2301 or the operator-configured error-shell path glob with URLs composed by withUrl(runtimeUrl, path), and a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-empty-error-states/ serving all eight states honestly on /probe/<name> plus break switches (?break=stack-trace, ?break=leak-id, ?break=no-recovery, ?break=no-live-region) driving the negative runs. suggestedCompanions logging and errorHandling; providesRoles absent; requiresAppliedCapabilities absent (no auth required); capabilities absent. Sixth shipped consumer of T-0s probe-pack runner extension; T-3 forms-wizard and T-4 account-settings consume this blueprint."
+}

package/rcf/fbs/fbs-044.json

@@ -0,0 +1,23 @@
+{
+  "createdAt": "2026-09-06T16:57:28.764Z",
+  "updatedAt": "2026-09-06T18:03:22.207Z",
+  "acIds": [
+    "AC-2501-1",
+    "AC-2501-2",
+    "AC-2501-3",
+    "AC-2501-4",
+    "AC-2501-5",
+    "AC-2501-6",
+    "AC-2501-7"
+  ],
+  "fbsId": "FBS-044",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 45,
+  "executionStatus": "notStarted",
+  "title": "application-file-upload v1.0.0 blueprint on the shelf with the four-check probe pack and sample-app fixture",
+  "summary": "T-2 shelf-blueprint track of the ratified visual round 4 (spec 2026-09-06, section 5.2): the application-file-upload v1.0.0 blueprint on the shelf. Ships 18 contributions (5 REQs on the input contract with a labelled file input plus drop-zone plus keyboard alternative per WCAG 2.5.7, the progress contract with per-file percent and aggregate percent and polite live-region tick, the refusal contract with MIME-type refusal and size-limit refusal and virus-scan hit and aria-describedby error binding and focus-to-retry, the transport contract with chunked-and-resumable and multipart POST default and tus.io elicited alternative, and the completion contract with an assertive-slot announcement on success per WCAG 4.1.3 and per-file remove and retry; 7 USs 23101-23107 one per REQ plus two cross-cutting cases network-interruption resumption and background-tab progress; 3 TACs 2401 input surface and 2402 transport contract and 2403 progress announcer; 3 ADRs 2401 transport across multipart POST and tus.io and per-vendor SDK with recommendedDefault true on multipart and elicited true, 2402 accepted MIME set and per-file size cap elicited, 2403 virus-scan integration via operator-supplied verifier through a capability plus elicit elicited), a Playwright probe pack whose four checks (AC-23101-1 input surface, AC-23102-1 progress announcer, AC-23103-1 refusal contract, AC-23104-1 chunked transport) each bind TAC-2401 or the operator-configured upload-route glob with URLs composed by withUrl(runtimeUrl, path), and a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-file-upload/ realising both transports honestly on /upload with a ?transport=multipart default and ?transport=tus alternative plus break switches (?break=no-input, ?break=no-live-region, ?break=send-refused, ?break=no-chunks) driving the negative runs. suggestedCompanions logging and errorHandling; providesRoles absent; requiresAppliedCapabilities absent; capabilities absent. Seventh shipped consumer of T-0's probe-pack runner extension.",
+  "dependsOnFbsIds": [
+    "FBS-043"
+  ]
+}

package/rcf/fbs/fbs-045.json

@@ -0,0 +1,23 @@
+{
+  "createdAt": "2026-09-06T19:04:36.272Z",
+  "updatedAt": "2026-09-06T20:09:17.380Z",
+  "acIds": [
+    "AC-2601-1",
+    "AC-2601-2",
+    "AC-2601-3",
+    "AC-2601-4",
+    "AC-2601-5",
+    "AC-2601-6",
+    "AC-2601-7"
+  ],
+  "fbsId": "FBS-045",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 47,
+  "executionStatus": "notStarted",
+  "title": "application-forms-wizard v1.0.0 blueprint on the shelf with the four-check probe pack and sample-app fixture",
+  "summary": "T-3 shelf-blueprint track of the ratified visual round 4 (spec 2026-09-06, section 5.3): the application-forms-wizard v1.0.0 blueprint on the shelf. Ships 19 contributions (5 REQs on the task-list contract with the closed GOV.UK vocabulary Cannot start yet plus Not started plus In progress plus Completed with an ARIA progressbar wrapper, the per-step validation timing rule on-blur before first submit then on-change after first failure and a full pass on submit reusing SPA forms-engine TAC-205 per WCAG 2.2 SC 3.3.1 and 3.3.3, the error-summary contract with a top-of-page summary and skip links per failed field with aria-invalid true on the field and aria-describedby to the per-field error message and focus moved to the summary heading on submit failure, the summary-review contract with a summary-list rendering per step with Change links returning to each step and every other answer retained on save per WCAG 2.2 SC 3.3.4, the save-and-return contract with a server-side draft table or a client-side local buffer with a per-write ISO-8601 sync tick with the pack refusing to ship if neither is wired per WCAG 2.2 SC 3.3.7; 8 USs 24101 to 24108 one per REQ plus three cross-cutting cases linear-vs-free navigation, in-progress list and no-in-progress empty state delegated to application-empty-error-states; 3 TACs 2501 task-list shell and 2502 error-summary contract and 2503 draft store; 3 ADRs 2501 navigation posture linear default with elicited free branch, 2502 save-and-return transport across server-draft-table and client-local-buffer elicited with NO recommendedDefault, 2503 step indicator across task-list ARIA progressbar and breadcrumb with recommendedDefault true on task-list), a Playwright probe pack whose four checks (AC-24101-1 task-list, AC-24103-1 error-summary, AC-24104-1 summary-review, AC-24105-1 save-and-return) each bind TAC-2501 or the operator-configured wizard-route glob with URLs composed by withUrl(runtimeUrl, path), and a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-forms-wizard/ realising the four wizard surfaces honestly on /task-list, /step/<n>, /summary and /in-progress plus both save-and-return transports server default and local elicited plus four break switches (?break=task-list-vocab, ?break=no-summary, ?break=no-retain, ?break=no-draft) driving the negative runs. suggestedCompanions logging and errorHandling; providesRoles absent; requiresAppliedCapabilities absent; capabilities absent. Eighth shipped consumer of T-0 probe-pack runner extension.",
+  "dependsOnFbsIds": [
+    "FBS-044"
+  ]
+}

package/rcf/fbs/fbs-046.json

@@ -0,0 +1,24 @@
+{
+  "createdAt": "2026-09-06T21:13:14.813Z",
+  "updatedAt": "2026-09-06T21:13:14.813Z",
+  "acIds": [
+    "AC-2701-1",
+    "AC-2701-2",
+    "AC-2701-3",
+    "AC-2701-4",
+    "AC-2701-5",
+    "AC-2701-6",
+    "AC-2701-7",
+    "AC-2701-8"
+  ],
+  "fbsId": "FBS-046",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 48,
+  "executionStatus": "notStarted",
+  "title": "application-account-settings v1.0.0 blueprint on the shelf with 5-check probe pack, sample-app fixture, four auth-blueprint minor bumps, observability-logging minor and mechanism minor for Q3 refusal",
+  "summary": "T-4 shelf-blueprint track of the ratified visual round 4 spec (2026-09-06 section 5.4): the application-account-settings v1.0.0 blueprint on the shelf with 24 contributions (6 REQs shell + profile + security + sessions + notifications + theme; 10 USs 25101 to 25110; 4 TACs 2601 shell / 2602 capability-discovery / 2603 hosted-ui-bridge / 2604 session-store; 4 ADRs 2601 capability-vocabulary extension / 2602 security-surface-shape elicited no default / 2603 theme-persistence spa-local-storage default / 2604 reauth-window 15m default). Declares requiresAppliedCapabilities principalDirectory with the application-account-settings-bare-spa refusal template and the allow-no-auth-yet override; 8 elicits (4 custom-auth-provides plus security-surface-shape hosted-identity-url theme-persistence reauth-window). Ships a Playwright probe pack with five capability-gated checks anchored to AC-25101-1 AC-25102-1 AC-25105-1 AC-25106-1 AC-25108-1, and a dependency-free sample-app fixture with the five conditional surfaces plus four break switches. Rides with the auth-blueprint minor bumps clerk 1.3.0 (adds sessionInventory hostedIdentityUi) keycloak 1.2.0 (adds credentialSelfService sessionInventory) oauth2 1.2.0 (adds credentialSelfService sessionInventory hostedIdentityUi provider-conditional) magic-link 1.2.0 (doc-only) and the observability-logging 1.2.0 minor bump (adds sessionInventory as the logging-projection provider). Extends the section 6a capability table in packages/rcf-lite/docs/blueprint-authoring.md with three new capability strings. Mechanism minor: buildRefusalMessage carries the application-account-settings-bare-spa template; runElicitationPhase refuses when an operator answers a gated elicit whose when predicate did not fire (Q3 refusal). Composes on application-empty-error-states T-1 for the forbidden and empty-history states; no bespoke access-denied UI. Ninth shipped consumer of T-0 probe-pack runner extension. suggestedCompanions logging and errorHandling; providesRoles absent; capabilities absent.",
+  "dependsOnFbsIds": [
+    "FBS-045"
+  ]
+}

package/rcf/fbs/fbs-047.json

@@ -0,0 +1,24 @@
+{
+  "createdAt": "2026-09-06T23:04:41.707Z",
+  "updatedAt": "2026-09-06T23:05:11.042Z",
+  "acIds": [
+    "AC-2801-1",
+    "AC-2801-2",
+    "AC-2801-3",
+    "AC-2801-4",
+    "AC-2801-5",
+    "AC-2801-6",
+    "AC-2801-7",
+    "AC-2801-8"
+  ],
+  "fbsId": "FBS-047",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 49,
+  "executionStatus": "notStarted",
+  "title": "application-onboarding-tour v1.0.0 blueprint on the shelf with 4-check probe pack, dependency-free sample-app fixture composing on dashboard notifications-in-app account-settings SPA and Q4 fallback (spa-local-storage) when no persistence blueprint is applied",
+  "summary": "T-5 shelf-blueprint track of the ratified visual round 4 spec (2026-09-06 section 5.5): application-onboarding-tour v1.0.0 on the shelf with 17 contributions (4 REQs step-manifest + tooltip-as-dialog + checklist-slot + completion-state; 7 USs 26101 to 26107; 3 TACs 2701 step-runner / 2702 checklist-slot / 2703 completion-store; 3 ADRs 2701 dismissal-policy / 2702 completion-store-shape (Q4 default spa-local-storage) / 2703 checklist-anchor). No requiresAppliedCapabilities (composes on SPA, application-dashboard, application-notifications-in-app, application-account-settings and any auth without hard dependency; per Q4 the completion-state falls back to spa-local-storage when no persistence blueprint is applied). Ships a Playwright probe pack with four surface-observable checks anchored to AC-26101-1 AC-26102-1 AC-26103-1 AC-26104-1, and a dependency-free sample-app fixture with a three-to-five step tour, per-step tooltip-as-dialog per the ARIA APG dialog-modal pattern, a checklist slot switchable between dashboard-top and settings-page, a completion-state store switchable across the three shapes, and four break switches (no-role, focus-escape, no-collapse, no-persist). Composes on application-dashboard for the dashboard-top anchor (with settings-page fallback), application-notifications-in-app for the checklist-completion announcement, application-account-settings for the restart-tour control home, and application-spa for routing and iconography. Tenth shipped consumer of the T-0 probe-pack runner extension. suggestedCompanions logging and errorHandling; providesRoles absent; capabilities absent.",
+  "dependsOnFbsIds": [
+    "FBS-046"
+  ]
+}

package/rcf/fbs/fbs-060.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-06T17:02:45.649Z",
+  "updatedAt": "2026-09-06T17:04:08.054Z",
+  "acIds": [
+    "AC-4001-1",
+    "AC-4001-2",
+    "AC-4001-3",
+    "AC-4001-4",
+    "AC-4001-5",
+    "AC-4001-6"
+  ],
+  "fbsId": "FBS-060",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 44,
+  "executionStatus": "notStarted",
+  "title": "persistence-data-postgres v1.0.0 blueprint on the shelf with six Node-only probes against a live postgres:17-alpine container and a sample-app fixture",
+  "summary": "T-1 shelf-blueprint track of the ratified infra round 5 spec (2026-09-06, section 5.1) re-minted with HQ reserved-block ids (REQ-040 / US-4001 / TS-070 / FBS-060 / CN-200..202) after HQ round-4 T-1 (application-empty-error-states) merged first to origin/main at 784d12f. Ships the persistence-data-postgres v1.0.0 blueprint on the shelf with 26 contributions in the 7 REQ / 10 US 27101-27110 / 4 TAC 2801-2804 / 5 ADR 2801-2805 groups per spec section 5.1, six Node-only probes under blueprints/persistence-data-postgres/contributions/probes/ (facade-round-trip, migration-apply, prepared-statement-scan, transaction-atomicity, recovery-restore-round-trip, pool-posture-smoke) with matching run-<probe-name>.mjs shims writing per-blueprint reports at .rcf/reports/blueprints/persistence-data-postgres/<probe-name>.json, and a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/infra-postgres/ with docker-compose declaring postgres:17-alpine, three toy forward-only migrations, src/store.mjs realising the facade as sole reader of pg, src/migrate.mjs realising the migration runner (with SIMULATE_MIGRATION_FAILURE switch), src/recovery.mjs realising the scheduled export runner via pg_dump, package.json with pg as runtime dep, and a README naming docker and podman incantations plus induced-failure switches. Declares capabilities [relationalStore], suggestedCompanions logging and errorHandling, providesRoles absent, requiresAppliedCapabilities absent. Contributes ADR-2801 and ADR-2802 as scope:global on persistenceStore and migrationDiscipline reused from persistence-data-sqlite and persistence-data-d1 so composition with either surfaces a DELIBERATE conflict per the round-2 pattern. Extends packages/rcf-lite/docs/blueprint-authoring.md section 6a table with a relationalStore row per spec section 5.6; appends one shelf-registry row for persistence-data-postgres at 27101-27899 / 28xx to every shipped blueprint docs/topics.md. Reserves the round-6 Hyperdrive v1.1.0 adapter slot at ADR-2801 by keeping the driver reference opaque at the facade boundary per spec section 5.7. None of the six probes carry accountBound:true; Postgres is local-first per Baz decision 8.",
+  "dependsOnFbsIds": [
+    "FBS-043"
+  ]
+}

package/rcf/fbs/fbs-061.json

@@ -0,0 +1,20 @@
+{
+  "createdAt": "2026-09-06T17:51:45.444Z",
+  "updatedAt": "2026-09-06T17:52:15.196Z",
+  "acIds": [
+    "AC-4101-1",
+    "AC-4101-2",
+    "AC-4101-3",
+    "AC-4101-4",
+    "AC-4101-5",
+    "AC-4101-6"
+  ],
+  "fbsId": "FBS-061",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 46,
+  "executionStatus": "notStarted",
+  "title": "object-storage-s3 v1.0.0 blueprint on the shelf with six Node-only probes against MinIO plus one accountBound R2 smoke and a shared sample-app fixture (T-2 slice)",
+  "summary": "T-2 shelf-blueprint track of the ratified infra round 5 spec (2026-09-06, section 5.2) minted with HQ reserved-block chain ids via --id (REQ-041 / US-4101 / TS-071 / FBS-061 / CN-203..205) after T-1 landed at 040/4001/070/060/200..202. Ships the object-storage-s3 v1.0.0 blueprint on the shelf with 21 contributions in the 6 REQ / 8 US 28101-28108 / 3 TAC 2901-2903 / 4 ADR 2901-2904 groups per spec section 5.2, six Node-only probes under blueprints/object-storage-s3/contributions/probes/ (facade-round-trip, put-get-round-trip, presigned-url, multipart-upload, event-secrecy, r2-real-account-smoke) with matching run-shims writing per-blueprint reports at .rcf/reports/blueprints/object-storage-s3/, and the T-2 slice of the shared sample-app fixture at packages/rcf-lite/test/fixtures/infra-s3-and-queue/. Five probes local-first (accountBound false); r2-real-account-smoke carries accountBound:true and records accountBoundSkipped shape per spec section 3.5 without CI_HAS_CLOUDFLARE_ACCOUNT. Declares capabilities [objectStorage], suggestedCompanions logging and errorHandling, providesRoles absent, requiresAppliedCapabilities absent. Contributes ADR-2904 as scope:global on new topic objectStorageContract per spec section 5.2. Every ADR contribution entry carries standardsTraceClause per section 8a.2 (per HQ mid-flight ruling after PR #154 gate). Extends packages/rcf-lite/docs/blueprint-authoring.md section 6a table with an objectStorage row per spec section 5.6; appends one shelf-registry row for object-storage-s3 at 28101-28899 / 29xx to every shipped blueprint docs/topics.md. Refuses composition when security-secrets-management is not applied with exit 3 and stable message id object-storage-s3-no-secrets on stderr; --allow-no-secrets-yet override records a note on source.notes.",
+  "dependsOnFbsIds": []
+}

package/rcf/requirements/req-024.json

@@ -0,0 +1,69 @@
+{
+  "createdAt": "2026-09-06T15:38:14.226Z",
+  "updatedAt": "2026-09-06T15:38:14.250Z",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "rationale": "Per visual round 4 spec section 5.1 (2026-09-06).",
+  "description": "The rcf-lite shelf ships the application-empty-error-states v1.0.0 blueprint (blueprints/application-empty-error-states/) with 19 to 24 contributions (5 REQs on the state catalogue with eight named states, the recovery-action contract per state, the announcement contract with role=region and aria-live=polite, the server-error surface with no stack-trace and no resource-id leak in production, and the offline state with a write-buffer and navigator.onLine reconnection semantics; 8 USs 22101 to 22108 binding runtime-observable ACs one per named state; 3 TACs 2301 state-machine from FBS render to state render to recovery, 2302 recovery-action router across parent-surface search request-access retry, 2303 offline write-buffer with reconciliation semantics; 3 ADRs 2301 HTTP status to rendered state mapping with standardsTraceClause RFC 9110 and recommendedDefault true, 2302 production hides stack traces with recommendedDefault true and elicited true, 2303 offline strategy across write-buffer read-only-banner refuse-writes with elicited true). Declares suggestedCompanions logging and errorHandling with reasons from spec section 5.1; providesRoles absent; capabilities empty; requiresAppliedCapabilities absent (no auth required). Ships a Playwright probe pack under blueprints/application-empty-error-states/probe-packs/application-empty-error-states.pack.mjs whose eight checks (AC-22101-1 not-found, AC-22102-1 forbidden, AC-22103-1 server-error, AC-22104-1 permission-denied, AC-22105-1 offline, AC-22106-1 empty-list, AC-22107-1 no-search-results, AC-22108-1 error-boundary) each anchor one named state via TAC-2301 or an operator-configured error-shell path glob; pack URLs composed by the withUrl(runtimeUrl, path) helper per round 3 T-3 fix train. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-empty-error-states/ realising all eight states honestly with a query switch ?state=<name> and break switches ?break=stack-trace, ?break=leak-id, ?break=no-recovery and ?break=no-live-region so each check refuses on its own defect. Sixth shipped consumer of T-0s probe-pack runner extension; T-3 forms-wizard and T-4 account-settings both compose this blueprint.",
+  "reqId": "REQ-024",
+  "prdId": "PRD-001",
+  "title": "Application-empty-error-states v1.0.0 blueprint on the shelf with the eight-state contract, Playwright probe pack and sample-app fixture",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "auth"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T15:38:14.249Z",
+    "signals": [
+      {
+        "source": "description",
+        "shape": "auth",
+        "match": "role"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "aria-"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "nav"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "render"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "render"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "route"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "rendered"
+      },
+      {
+        "source": "description",
+        "shape": "auth",
+        "match": "permission"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      }
+    ]
+  }
+}

package/rcf/requirements/req-025.json

@@ -0,0 +1,59 @@
+{
+  "createdAt": "2026-09-06T16:55:02.404Z",
+  "updatedAt": "2026-09-06T16:56:22.580Z",
+  "description": "The rcf-lite shelf ships the application-file-upload v1.0.0 blueprint (blueprints/application-file-upload/) with 18 to 22 contributions (5 REQs on the input contract with a labelled file input plus drop-zone plus keyboard alternative per WCAG 2.5.7, the progress contract with per-file percent plus aggregate percent plus polite live-region tick, the refusal contract with MIME-type refusal and size-limit refusal and virus-scan hit and aria-describedby error binding and focus-to-retry, the transport contract with chunked-and-resumable and multipart POST default and tus.io elicited alternative, and the completion contract with an assertive-slot announcement on success per WCAG 4.1.3 and per-file remove and retry; 7 USs 23101 to 23107 one per REQ plus two cross-cutting cases network-interruption resumption and background-tab progress; 3 TACs 2401 input surface, 2402 transport contract, 2403 progress announcer; 3 ADRs 2401 transport across multipart POST and tus.io and per-vendor SDK with recommendedDefault true on multipart and elicited true, 2402 accepted MIME set and per-file size cap with elicited true, 2403 virus-scan integration via operator-supplied verifier through a capability plus elicit with elicited true). Declares suggestedCompanions logging and errorHandling with reasons from spec section 5.2; providesRoles absent; capabilities absent; requiresAppliedCapabilities absent. Ships a Playwright probe pack under blueprints/application-file-upload/probe-packs/application-file-upload.pack.mjs with four surface-observable checks anchored to TAC-2401 or an operator-configured upload-route glob. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-file-upload/ realising both transport branches multipart POST and tus.io honestly plus break switches so each check refuses on its own defect. Seventh shipped consumer of T-0's probe-pack runner extension.",
+  "reqId": "REQ-025",
+  "prdId": "PRD-001",
+  "title": "Application-file-upload v1.0.0 blueprint on the shelf with the file-input plus drop-zone contract, chunked-resumable transport, refusal semantics and Playwright probe pack",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "httpApi"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T16:55:02.427Z",
+    "signals": [
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "aria-"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "POST"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "POST"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "route"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "POST"
+      }
+    ]
+  },
+  "rationale": "Per visual round 4 spec section 5.2 (2026-09-06)."
+}

package/rcf/requirements/req-026.json

@@ -0,0 +1,154 @@
+{
+  "createdAt": "2026-09-06T19:03:15.348Z",
+  "updatedAt": "2026-09-06T19:07:15.107Z",
+  "description": "The rcf-lite shelf ships the application-forms-wizard v1.0.0 blueprint (blueprints/application-forms-wizard/) with 19 contributions (5 REQs on the task-list contract with the closed GOV.UK vocabulary Cannot start yet plus Not started plus In progress plus Completed with an ARIA progressbar wrapper, the per-step validation timing rule on-blur before first submit then on-change after first failure and a full pass on submit reusing SPA forms-engine TAC-205 per WCAG 2.2 SC 3.3.1 and 3.3.3, the error-summary contract with a top-of-page summary and skip links per failed field with aria-invalid true on the field and aria-describedby to the per-field error message and focus moved to the summary heading on submit failure, the summary-review contract with a summary-list rendering per step with Change links returning to each step and every other answer retained on save per WCAG 2.2 SC 3.3.4, the save-and-return contract with a server-side draft table or a client-side local buffer with a per-write ISO-8601 sync tick with the pack refusing to ship if neither is wired per WCAG 2.2 SC 3.3.7; 8 USs 24101 to 24108 one per REQ plus three cross-cutting cases linear-vs-free navigation, in-progress list and no-in-progress empty state delegated to application-empty-error-states; 3 TACs 2501 task-list shell and 2502 error-summary contract and 2503 draft store; 3 ADRs 2501 navigation posture linear default with elicited free branch, 2502 save-and-return transport across server-draft-table and client-local-buffer elicited with NO recommendedDefault because the abandoned-draft loss class does not ship silently, 2503 step indicator across task-list ARIA progressbar and breadcrumb with recommendedDefault true on task-list). Declares suggestedCompanions logging and errorHandling with reasons from spec section 5.3; providesRoles absent; capabilities absent; requiresAppliedCapabilities absent. Ships a Playwright probe pack under blueprints/application-forms-wizard/probe-packs/application-forms-wizard.pack.mjs with four surface-observable checks anchored to TAC-2501 or an operator-configured wizard-route glob. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-forms-wizard/ realising the four wizard surfaces honestly plus both save-and-return transports server default and local elicited plus four break switches so each check refuses on its own defect. Eighth shipped consumer of T-0 probe-pack runner extension. Consumes application-empty-error-states for the no-in-progress empty state on the /in-progress list surface.",
+  "reqId": "REQ-026",
+  "prdId": "PRD-001",
+  "title": "Application-forms-wizard v1.0.0 blueprint on the shelf with the task-list contract, error-summary contract, summary-review pattern, save-and-return draft store and Playwright probe pack",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "httpApi",
+      "persistence"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T19:03:15.372Z",
+    "signals": [
+      {
+        "source": "title",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "title",
+        "shape": "persistence",
+        "match": "store"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "aria-"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "aria-"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "rendering"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "nav"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "navigation"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "store"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "nav"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "navigation"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "post"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "route"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      }
+    ]
+  }
+}