rcf-lite 0.21.0 → 0.23.0

package/blueprints/application-onboarding-tour/probe-packs/application-onboarding-tour.pack.mjs

@@ -0,0 +1,231 @@
+// application-onboarding-tour probe pack (v1.0.0).
+//
+// Four surface-observable checks anchored to the blueprint AC ids:
+//   AC-26101-1 step-container focus lifecycle and Escape (drives the tour open,
+//              asserts the first step renders, walks Tab through the tour
+//              controls, presses Escape, asserts dismissal)
+//   AC-26102-1 tooltip-as-dialog contract (opens a step, reads the DOM, asserts
+//              role="dialog" and aria-labelledby; asserts focus moves to the
+//              tooltip on open; asserts focus is not obscured at breakpoints
+//              1440 and 360 via the browser.resize seam)
+//   AC-26103-1 checklist slot (asserts the checklist renders inside <details open>
+//              on the dashboard-top anchor when application-dashboard is applied
+//              and inside a <details> closed on the settings-page anchor when not)
+//   AC-26104-1 completion-state persistence (completes the tour, reads the
+//              completion-state store per the elicited shape, activates restart
+//              from the settings surface, asserts the tour re-opens)
+//
+// Every check drives the real Playwright browser the T-0 runner injects and
+// reads its per-check applicability from the blueprint applied sidecar
+// (rcf/blueprints/application-onboarding-tour.applied.json) written by the apply
+// verb. T-5 has no requiresAppliedCapabilities, but the checklist-slot check
+// gates its dashboard-vs-settings branch on the applied-blueprint set
+// (application-dashboard present or not), and the persistence check gates its
+// backend on the elicited completion-state-store answer (with the Q4 fallback
+// spa-local-storage when no persistence blueprint is applied).
+//
+// Sample-app fixture: packages/rcf-lite/test/fixtures/probe-pack-application-onboarding-tour/.
+// The fixture ships APPS and STORE env / ?apps= / ?store= query switches
+// mirroring the applied-blueprint set and the elicited completion-state store,
+// plus four break switches (?break=no-role, ?break=focus-escape,
+// ?break=no-collapse, ?break=no-persist) driving the negative runs.
+
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+
+async function readAppliedSidecar(projectRoot) {
+  if (!projectRoot) return { appliedCapabilities: [], appliedElicitations: {}, appliedBlueprints: [] };
+  try {
+    const raw = await readFile(join(projectRoot, 'rcf', 'blueprints', 'application-onboarding-tour.applied.json'), 'utf8');
+    const doc = JSON.parse(raw);
+    return {
+      appliedCapabilities: Array.isArray(doc.appliedCapabilities) ? doc.appliedCapabilities.slice() : [],
+      appliedElicitations: typeof doc.appliedElicitations === 'object' && doc.appliedElicitations ? doc.appliedElicitations : {},
+      appliedBlueprints: Array.isArray(doc.appliedBlueprints) ? doc.appliedBlueprints.slice() : [],
+    };
+  } catch {
+    return { appliedCapabilities: [], appliedElicitations: {}, appliedBlueprints: [] };
+  }
+}
+
+function withUrl(runtimeUrl, path) {
+  return new URL(path, runtimeUrl).toString();
+}
+
+function appsQuery(sidecar) {
+  // The sidecar's appliedBlueprints[] is the truth; on a fixture where the
+  // sidecar is absent (a bare test run) the fixture defaults route through
+  // the ?apps= query so the check still runs against the honest branch.
+  return sidecar.appliedBlueprints.join(',');
+}
+
+export default {
+  packName: 'application-onboarding-tour',
+  version: '1.0.0',
+  blueprintSlug: 'application-onboarding-tour',
+  // Applies to any FBS that realises the step-runner TAC or whose navModel
+  // routes match the operator-configured tour-anchor path glob (any /tour,
+  // /welcome, /getting-started, /onboarding path is a legal anchor).
+  appliesTo: ({ fbs }) => {
+    const routes = fbs?.designStage?.navModel?.routes ?? [];
+    const tacIds = fbs?.contextRequirements?.tacIds ?? [];
+    if (tacIds.includes('TAC-2701-application-onboarding-tour-step-runner')) return true;
+    return routes.some((r) => typeof r?.path === 'string' && /\/(tour|welcome|getting-started|onboarding)(\/|$)/.test(r.path));
+  },
+  boot: { bootCommand: null, waitForUrl: null, waitForSelector: null },
+  checks: [
+    {
+      id: 'AC-26101-1',
+      severity: 'block',
+      description: 'Step-container focus lifecycle: the tour opens the first step on a first-run principal, Tab reaches every tour control inside the tooltip in DOM order without escaping to the underlying surface, and Escape dismisses the tour and returns focus to the anchor (WCAG 2.1.1 Keyboard, 2.1.2 No Keyboard Trap, 2.4.3 Focus Order)',
+      appliesTo: async () => true,
+      run: async ({ browser, runtimeUrl, projectRoot }) => {
+        if (!browser) return { verdict: 'fail', detail: 'no packBrowser wired' };
+        const sidecar = await readAppliedSidecar(projectRoot);
+        const apps = appsQuery(sidecar);
+        await browser.goto(withUrl(runtimeUrl, `/tour?first-run=1&apps=${encodeURIComponent(apps)}`));
+        const open = await browser.evaluate(() => {
+          const tip = document.querySelector('[data-role="onboarding-tour-tooltip"]');
+          if (!tip) return { present: false };
+          const role = tip.getAttribute('role');
+          const step = tip.getAttribute('data-step-id');
+          const controls = Array.from(tip.querySelectorAll('[data-tour-control]')).map((c) => c.getAttribute('data-tour-control'));
+          const focusInside = tip.contains(document.activeElement);
+          return { present: true, role, step, controls, focusInside };
+        });
+        if (!open.present) return { verdict: 'fail', detail: 'onboarding tooltip [data-role="onboarding-tour-tooltip"] not rendered on first run' };
+        if (open.role !== 'dialog') return { verdict: 'fail', detail: `tooltip role expected dialog, got ${open.role}` };
+        if (!open.focusInside) return { verdict: 'fail', detail: 'focus did not move into the tooltip on open' };
+        const requiredControls = ['previous', 'next', 'dismiss'];
+        const missingControls = requiredControls.filter((c) => !open.controls.includes(c));
+        if (missingControls.length > 0) return { verdict: 'fail', detail: `tooltip missing tour controls: ${JSON.stringify(missingControls)} present=${JSON.stringify(open.controls)}` };
+        // Walk Tab across every control; refuse if focus escapes the tooltip.
+        for (let i = 0; i < open.controls.length + 1; i += 1) {
+          await browser.press('Tab');
+        }
+        const walk = await browser.evaluate(() => {
+          const tip = document.querySelector('[data-role="onboarding-tour-tooltip"]');
+          return { focusInside: tip ? tip.contains(document.activeElement) : false };
+        });
+        if (!walk.focusInside) return { verdict: 'fail', detail: 'Tab traversal escaped the tooltip (focus trap failed)' };
+        await browser.press('Escape');
+        const closed = await browser.evaluate(() => {
+          const tip = document.querySelector('[data-role="onboarding-tour-tooltip"]');
+          return { present: !!tip };
+        });
+        if (closed.present) return { verdict: 'fail', detail: 'tooltip still present after Escape (dismiss did not fire)' };
+        return { verdict: 'pass', detail: `step=${open.step} controls=${JSON.stringify(open.controls)} focus trapped and Escape dismissed cleanly` };
+      },
+    },
+    {
+      id: 'AC-26102-1',
+      severity: 'block',
+      description: 'Tooltip-as-dialog contract per the ARIA APG dialog-modal pattern: role="dialog", aria-labelledby to the step heading, aria-describedby to the step body, focus moves in on open, focus not obscured at the 1440 wide and 360 narrow breakpoints (WCAG 2.4.11 Focus Not Obscured Minimum)',
+      appliesTo: async () => true,
+      run: async ({ browser, runtimeUrl, projectRoot }) => {
+        if (!browser) return { verdict: 'fail', detail: 'no packBrowser wired' };
+        const sidecar = await readAppliedSidecar(projectRoot);
+        const apps = appsQuery(sidecar);
+        // Wide breakpoint first.
+        await browser.resize(1440, 900);
+        await browser.goto(withUrl(runtimeUrl, `/tour?first-run=1&apps=${encodeURIComponent(apps)}`));
+        const wide = await browser.evaluate(() => {
+          const tip = document.querySelector('[data-role="onboarding-tour-tooltip"]');
+          if (!tip) return { present: false };
+          const headingId = tip.getAttribute('aria-labelledby');
+          const bodyId = tip.getAttribute('aria-describedby');
+          const headingEl = headingId ? document.getElementById(headingId) : null;
+          const bodyEl = bodyId ? document.getElementById(bodyId) : null;
+          const rect = tip.getBoundingClientRect();
+          const inViewport = rect.top >= 0 && rect.left >= 0 && rect.bottom <= window.innerHeight && rect.right <= window.innerWidth;
+          return { present: true, role: tip.getAttribute('role'), headingId, bodyId, headingText: headingEl ? headingEl.textContent : null, bodyText: bodyEl ? bodyEl.textContent : null, inViewport, rect: { top: rect.top, left: rect.left, right: rect.right, bottom: rect.bottom }, viewport: { w: window.innerWidth, h: window.innerHeight } };
+        });
+        if (!wide.present) return { verdict: 'fail', detail: 'tooltip not rendered at 1440x900' };
+        if (wide.role !== 'dialog') return { verdict: 'fail', detail: `tooltip role expected dialog at 1440, got ${wide.role}` };
+        if (!wide.headingId || !wide.headingText) return { verdict: 'fail', detail: `tooltip aria-labelledby ("${wide.headingId}") does not point at a live heading element` };
+        if (!wide.bodyId || !wide.bodyText) return { verdict: 'fail', detail: `tooltip aria-describedby ("${wide.bodyId}") does not point at a live body element` };
+        if (!wide.inViewport) return { verdict: 'fail', detail: `tooltip focus obscured at 1440x900: rect=${JSON.stringify(wide.rect)} viewport=${JSON.stringify(wide.viewport)}` };
+        // Narrow breakpoint.
+        await browser.resize(360, 640);
+        await browser.goto(withUrl(runtimeUrl, `/tour?first-run=1&apps=${encodeURIComponent(apps)}`));
+        const narrow = await browser.evaluate(() => {
+          const tip = document.querySelector('[data-role="onboarding-tour-tooltip"]');
+          if (!tip) return { present: false };
+          const rect = tip.getBoundingClientRect();
+          const inViewport = rect.top >= 0 && rect.left >= 0 && rect.bottom <= window.innerHeight && rect.right <= window.innerWidth;
+          return { present: true, rect: { top: rect.top, left: rect.left, right: rect.right, bottom: rect.bottom }, viewport: { w: window.innerWidth, h: window.innerHeight }, inViewport };
+        });
+        if (!narrow.present) return { verdict: 'fail', detail: 'tooltip not rendered at 360x640' };
+        if (!narrow.inViewport) return { verdict: 'fail', detail: `tooltip focus obscured at 360x640: rect=${JSON.stringify(narrow.rect)} viewport=${JSON.stringify(narrow.viewport)}` };
+        return { verdict: 'pass', detail: `dialog contract clean at 1440 and 360; aria-labelledby="${wide.headingId}" aria-describedby="${wide.bodyId}"` };
+      },
+    },
+    {
+      id: 'AC-26103-1',
+      severity: 'block',
+      description: 'Checklist slot: renders inside <details open> on the dashboard-top anchor when application-dashboard is applied, and inside <details> (closed) on the settings-page anchor when not; both branches carry data-role="onboarding-tour-checklist"',
+      appliesTo: async () => true,
+      run: async ({ browser, runtimeUrl, projectRoot }) => {
+        if (!browser) return { verdict: 'fail', detail: 'no packBrowser wired' };
+        const sidecar = await readAppliedSidecar(projectRoot);
+        const apps = appsQuery(sidecar);
+        const dashboardApplied = sidecar.appliedBlueprints.includes('application-dashboard');
+        const targetPath = dashboardApplied ? '/dashboard' : '/settings';
+        await browser.goto(withUrl(runtimeUrl, `${targetPath}?apps=${encodeURIComponent(apps)}`));
+        const dom = await browser.evaluate((expectedAnchor) => {
+          const checklist = document.querySelector('details[data-role="onboarding-tour-checklist"]');
+          if (!checklist) return { present: false };
+          const isOpen = checklist.hasAttribute('open');
+          const anchor = checklist.getAttribute('data-anchor');
+          const items = Array.from(checklist.querySelectorAll('[data-checklist-item]')).map((el) => el.getAttribute('data-checklist-item'));
+          return { present: true, isOpen, anchor, items, expectedAnchor };
+        }, dashboardApplied ? 'dashboard-top' : 'settings-page');
+        if (!dom.present) return { verdict: 'fail', detail: `details[data-role="onboarding-tour-checklist"] not found at ${targetPath} (apps=${apps})` };
+        if (dashboardApplied && !dom.isOpen) return { verdict: 'fail', detail: `checklist on dashboard-top anchor is not <details open> (anchor="${dom.anchor}")` };
+        if (!dashboardApplied && dom.isOpen) return { verdict: 'fail', detail: `checklist on settings-page anchor rendered <details open> but should default closed (anchor="${dom.anchor}")` };
+        if (dom.anchor !== dom.expectedAnchor) return { verdict: 'fail', detail: `data-anchor expected "${dom.expectedAnchor}", got "${dom.anchor}"` };
+        return { verdict: 'pass', detail: `anchor=${dom.anchor} open=${dom.isOpen} items=${JSON.stringify(dom.items)} (dashboardApplied=${dashboardApplied})` };
+      },
+    },
+    {
+      id: 'AC-26104-1',
+      severity: 'block',
+      description: 'Completion-state persistence: completing the tour writes to the elicited completion-state store (spa-local-storage per the Q4 fallback when no persistence blueprint is applied; spa-session-storage or server-side-per-principal per the elicit); the restart-tour control on the settings surface clears the record and re-opens the tour on the next principal load',
+      appliesTo: async () => true,
+      run: async ({ browser, runtimeUrl, projectRoot }) => {
+        if (!browser) return { verdict: 'fail', detail: 'no packBrowser wired' };
+        const sidecar = await readAppliedSidecar(projectRoot);
+        const apps = appsQuery(sidecar);
+        const store = sidecar.appliedElicitations['completion-state-store'] || 'spa-local-storage';
+        await browser.goto(withUrl(runtimeUrl, `/tour?first-run=1&apps=${encodeURIComponent(apps)}&store=${encodeURIComponent(store)}&complete=1`));
+        const afterComplete = await browser.evaluate((s) => {
+          const marker = document.querySelector('[data-role="onboarding-tour-completion-marker"]');
+          const writtenAttr = marker ? marker.getAttribute('data-written-to') : null;
+          const key = 'onboarding-tour:completion';
+          let readBack = null;
+          try {
+            if (s === 'spa-local-storage') readBack = window.localStorage.getItem(key);
+            else if (s === 'spa-session-storage') readBack = window.sessionStorage.getItem(key);
+          } catch (e) {
+            readBack = `storage-error: ${e.message}`;
+          }
+          return { markerPresent: !!marker, writtenAttr, readBack };
+        }, store);
+        if (!afterComplete.markerPresent) return { verdict: 'fail', detail: `completion marker [data-role="onboarding-tour-completion-marker"] not present after complete flow (store=${store})` };
+        if (afterComplete.writtenAttr !== store) return { verdict: 'fail', detail: `completion marker data-written-to expected "${store}", got "${afterComplete.writtenAttr}"` };
+        if ((store === 'spa-local-storage' || store === 'spa-session-storage') && !afterComplete.readBack) {
+          return { verdict: 'fail', detail: `store "${store}" reports no persisted record under key onboarding-tour:completion` };
+        }
+        // Drive the restart control.
+        await browser.goto(withUrl(runtimeUrl, `/settings?apps=${encodeURIComponent(apps)}&store=${encodeURIComponent(store)}`));
+        const restartBtn = await browser.evaluate(() => !!document.querySelector('button[data-action="restart-tour"]'));
+        if (!restartBtn) return { verdict: 'fail', detail: 'restart-tour control not reachable on settings surface' };
+        await browser.click('button[data-action="restart-tour"]');
+        await browser.goto(withUrl(runtimeUrl, `/tour?apps=${encodeURIComponent(apps)}&store=${encodeURIComponent(store)}`));
+        const reopen = await browser.evaluate(() => !!document.querySelector('[data-role="onboarding-tour-tooltip"]'));
+        if (!reopen) return { verdict: 'fail', detail: 'tour did not re-open on the highest-value surface after restart' };
+        return { verdict: 'pass', detail: `store=${store} completion persisted, restart cleared, tour re-opened` };
+      },
+    },
+  ],
+};

package/blueprints/application-spa/docs/topics.md

@@ -34,11 +34,11 @@ This table is maintained shelf-wide across every blueprint's `docs/topics.md`. R
 | persistence-data-sqlite | 5101-5899 | 6xx | shipped v1.0.0 | `persistenceStore`, `migrationDiscipline` |
 | delivery-ci-workflows | 6101-6899 | 7xx | shipped v2.0.0 (renamed from ci-pipeline) | `ciGates`, `strictCoverageGate`, `releaseArtefacts` |
 | observability-essentials | 7101-7899 | 8xx | shipped v2.0.0 | `statusPageContract` |
-| security-secrets-management | 8101-8899 | 9xx | shipped v1.0.0 | `secretsSource` |
+| security-secrets-management | 8101-8899 | 9xx | shipped v1.0.1 | `secretsSource` |
 | security-auth-clerk | 9101-9899 | 10xx | shipped v1.0.0 | `authModel` |
 | security-auth-oauth2 | 10101-10899 | 11xx | shipped v1.0.0 | `authModel` |
 | security-auth-keycloak | 11101-11899 | 12xx | shipped v1.0.0 | `authModel` |
-| deploy-cloudflare-workers | 12101-12899 | 13xx | shipped v1.0.0 | `deploymentTarget` |
+| deploy-cloudflare-workers | 12101-12899 | 13xx | shipped v1.2.0 | `deploymentTarget` |
 | persistence-data-d1 | 13101-13899 | 14xx | shipped v1.0.0 | `persistenceStore`, `migrationDiscipline` |
 | observability-probe-endpoints | 14101-14899 | 15xx | shipped v1.1.0 | `healthProbes`, `readinessSemantics` |
 | observability-logging | 15101-15899 | 16xx | shipped v1.0.0 | `logging` |
@@ -48,6 +48,15 @@ This table is maintained shelf-wide across every blueprint's `docs/topics.md`. R
 | application-dashboard | 19101-19899 | 20xx | shipped v1.0.0 | none |
 | application-notifications-in-app | 20101-20899 | 21xx | shipped v1.0.0 | none |
 | application-admin-console | 21101-21899 | 22xx | shipped v1.0.0 | none |
+| application-empty-error-states | 22101-22899 | 23xx | shipped v1.0.0 | none |
+| application-file-upload | 23101-23899 | 24xx | shipped v1.0.0 | none |
+| application-forms-wizard | 24101-24899 | 25xx | shipped v1.0.0 | none |
+| application-account-settings | 25101-25899 | 26xx | shipped v1.0.0 | none |
+| application-onboarding-tour | 26101-26899 | 27xx | shipped v1.0.0 | none |
+| persistence-data-postgres | 27101-27899 | 28xx | shipped v1.0.0 | `persistenceStore`, `migrationDiscipline` |
+| object-storage-s3 | 28101-28899 | 29xx | shipped v1.0.0 | `objectStorageContract` |
+| messaging-queue-cloudflare | 29101-29899 | 30xx | shipped v1.0.0 | `deliverySemantics` |
+| jobs-background | 30101-30899 | 31xx | shipped v1.0.0 | `backgroundJobModel` |
 
 SPA v1.1.0 stays on the LOW end of its band: v1.0.0 occupied US-1101 through US-1128; v1.1.0 adds US-1129 and US-1130, leaving headroom above 1130 for future minor bumps and for project-side stories that mechanically derive to the 11xx numeric range.
 

package/blueprints/delivery-ci-workflows/docs/topics.md

@@ -42,7 +42,7 @@ This table is maintained shelf-wide across every blueprint's `docs/topics.md`. R
 | persistence-data-sqlite | 5101-5899 | 6xx | shipped v1.0.0 | `persistenceStore`, `migrationDiscipline` |
 | delivery-ci-workflows | 6101-6899 | 7xx | shipped v2.0.0 (renamed from ci-pipeline) | `ciGates`, `strictCoverageGate`, `releaseArtefacts` |
 | observability-essentials | 7101-7899 | 8xx | shipped v2.0.0 | `statusPageContract` |
-| security-secrets-management | 8101-8899 | 9xx | shipped v1.0.0 | `secretsSource` |
+| security-secrets-management | 8101-8899 | 9xx | shipped v1.0.1 | `secretsSource` |
 | security-auth-clerk | 9101-9899 | 10xx | shipped v1.0.0 | `authModel` |
 | security-auth-oauth2 | 10101-10899 | 11xx | shipped v1.0.0 | `authModel` |
 | security-auth-keycloak | 11101-11899 | 12xx | shipped v1.0.0 | `authModel` |
@@ -54,6 +54,15 @@ This table is maintained shelf-wide across every blueprint's `docs/topics.md`. R
 | application-dashboard | 19101-19899 | 20xx | shipped v1.0.0 | none |
 | application-notifications-in-app | 20101-20899 | 21xx | shipped v1.0.0 | none |
 | application-admin-console | 21101-21899 | 22xx | shipped v1.0.0 | none |
+| application-empty-error-states | 22101-22899 | 23xx | shipped v1.0.0 | none |
+| application-file-upload | 23101-23899 | 24xx | shipped v1.0.0 | none |
+| application-forms-wizard | 24101-24899 | 25xx | shipped v1.0.0 | none |
+| application-account-settings | 25101-25899 | 26xx | shipped v1.0.0 | none |
+| application-onboarding-tour | 26101-26899 | 27xx | shipped v1.0.0 | none |
+| persistence-data-postgres | 27101-27899 | 28xx | shipped v1.0.0 | `persistenceStore`, `migrationDiscipline` |
+| object-storage-s3 | 28101-28899 | 29xx | shipped v1.0.0 | `objectStorageContract` |
+| messaging-queue-cloudflare | 29101-29899 | 30xx | shipped v1.0.0 | `deliverySemantics` |
+| jobs-background | 30101-30899 | 31xx | shipped v1.0.0 | `backgroundJobModel` |
 
 US 6101-6110 sit at the LOW end of the 6101-6899 band on purpose. A project-side story that mechanically derives from `delivery-ci-workflows-REQ-011` into the number `6111` would collide against delivery-ci-workflows-US-6111 in this package; the band leaves headroom at the HIGH end (US 6181-6899) so a project's own stories anchored to delivery-ci-workflows REQs can allocate without conflict. The watchpost run4 lesson applies here too.
 

package/blueprints/deploy-cloudflare-workers/CHANGELOG.md

@@ -0,0 +1,69 @@
+# Changelog
+
+All notable changes to the `deploy-cloudflare-workers` blueprint are recorded here.
+The format follows Keep a Changelog. Versions are semver, per
+`packages/rcf-lite/docs/blueprint-authoring.md` section 6.
+
+## 1.2.0 - 2026-09-07
+
+Additive minor bump. Blesses the Workers-with-static-assets shape as the
+ratified SPA-on-Workers deploy shape, per the Cloudflare Pages
+landing-page recommendation (2026-09-06). Seven new contributions in the
+existing 12xx US band and 13xx suffix block; every shipped v1.1.0
+contribution carries through unchanged.
+
+Added
+
+- REQ `deploy-cloudflare-workers-REQ-013`: Workers-with-static-assets
+  shape. An elicited `[assets] directory` value is emitted on
+  `wrangler.toml`; the manifest never carries `pages_build_output_dir`
+  alongside `[assets]`.
+- REQ `deploy-cloudflare-workers-REQ-014`: SPA fallback discipline via
+  elicited `run_worker_first`. A truthy answer emits
+  `run_worker_first = true` under `[assets]`; a falsy or unanswered
+  answer omits the field and lets Cloudflare's runtime serve assets
+  before the Worker fetch handler runs.
+- US `-US-12113`: SPA-on-Workers deploy. Runtime-observable ACs on the
+  emitted `[assets]` block shape.
+- US `-US-12114`: assets-directory elicitation. Recorded on the applied
+  sidecar as `appliedElicitations.assets-directory`.
+- US `-US-12115`: migrate-from-Pages guidance. Guide section links
+  Cloudflare's own migrate-from-Pages walkthrough.
+- ADR `ADR-1306-deploy-cloudflare-workers-spa-shape`: Workers-with-
+  static-assets as the ratified SPA-on-Workers deploy shape.
+  Contribution entry carries `recommendedDefault: true` and
+  `standardsTraceClause: Cloudflare Pages landing-page recommendation
+  (2026-09-06)`. Body quotes the landing-page recommendation verbatim
+  (fetched 2026-09-06 in the round-6 proposal and re-verified at
+  ratification).
+- Elicits (top-level `elicits[]`): `assets-directory` (string, default
+  empty) and `run-worker-first` (boolean, default false). The spec's
+  intended `when: {elicitedNonEmpty: [assets-directory]}` predicate on
+  `run-worker-first` is not shipped this round because the loader's
+  supported `when` block only accepts `requiresCapability` arrays; the
+  guide teaches that `run-worker-first` is only meaningful when
+  `assets-directory` is non-empty.
+- Probe module `contributions/probes/assets-manifest-scan.mjs`
+  (`anchorAcId: AC-12113-1`, `accountBound: false`): parses the applied
+  fixture `wrangler.toml`, asserts `[assets] directory` matches the
+  elicited answer, asserts `run_worker_first` matches the elicited
+  answer, and refuses on any `pages_build_output_dir` presence.
+
+Changed
+
+- Existing ADR contribution entries (`ADR-1301` through `ADR-1305`)
+  gain the `generic enterprise practice` sentinel on
+  `standardsTraceClause` at the contribution entry, per
+  `blueprint-authoring.md` section 8a.4. The ADR bodies are not touched.
+
+Notes
+
+- No new capability minted; `capabilities` remains absent.
+- No new global topic minted; the existing `deploymentTarget` topic on
+  ADR-1301 covers the deploy shape unchanged.
+- No runtime dependency added to applying projects.
+- `suggestedCompanions` unchanged (`logging`, `errorHandling`).
+- The shared `cf-platform` sample-app fixture at
+  `packages/rcf-lite/test/fixtures/cf-platform/` ships alongside this
+  bump as the probe target. T-1 (KV), T-2 (cron), T-3 (Durable Objects)
+  and T-5's Turnstile sub-fixture extend the same fixture later.

package/blueprints/deploy-cloudflare-workers/README.md

@@ -44,6 +44,18 @@ See `docs/topics.md` for the exact strings, the expected resolutions, the deline
 
 Repo-root wrangler manifest as the sole declaration of Worker name, entry, compatibility settings, and every binding; one Deploy Adapter as the sole caller of the vendor CLI on the boundary; every merge to main uploads a Worker version reachable at both a permanent per-version-id URL and a stable preview alias URL; the uploaded version never serves production traffic; production only changes when the `promote` workflow runs on an explicit operator trigger; the promote workflow accepts one input `versionId` (empty defaults to newest-of-main); rollback IS a promote of a prior version id, on the same workflow, with the same audit shape; every promote runs the Served-surface Verifier against the production URL with bounded retries; a promote whose verifier fails is not marked successful; every uploaded version carries build provenance (commit sha, build timestamp, CI run URL) readable at a fixed health-probe path; the health probe's `versionSha` field is the served-surface verifier's confirmation that the promoted version is the version being served; no secret value ever lives in the wrangler manifest, in a committed environment file, in a CI variable readable outside the promote job, or in any CI log line; a probe against a dev-mode local URL is refused as coverage for a `deployed`-scope AC; the manifest loader refuses a wrangler config whose production route resolves to the same host as the preview alias URL. Every bar is carried by ACs in the doc set, not by this README.
 
+## What v1.2.0 adds
+
+v1.2.0 is an additive-minor bump. Every shipped v1.1.0 contribution carries through unchanged; the compose invocation is identical (`rcf define blueprint add <path-to>/blueprints/deploy-cloudflare-workers` unchanged); no capability minted; no new global topic; no runtime dependency added; `suggestedCompanions` unchanged (`logging`, `errorHandling`). The bump blesses the Workers-with-static-assets shape as the ratified SPA-on-Workers deploy shape, per the Cloudflare Pages landing-page recommendation (fetched 2026-09-06, verbatim quote on `ADR-1306`).
+
+- **Workers-with-static-assets shape (`REQ-013`, `REQ-014`).** Two new REQs cover the `[assets] directory` block on `wrangler.toml` and the SPA fallback discipline via `run_worker_first`. Three new USs in the existing 12xx band (`US-12113` SPA-on-Workers deploy, `US-12114` assets-directory elicitation, `US-12115` migrate-from-Pages guidance) bind the runtime-observable ACs to `TAC-1302-deploy-cloudflare-workers-wrangler-manifest`.
+- **Ratified shape decision (`ADR-1306-deploy-cloudflare-workers-spa-shape`).** Body carries the Cloudflare landing-page quote verbatim; the contribution entry carries `recommendedDefault: true` and `standardsTraceClause: Cloudflare Pages landing-page recommendation (2026-09-06)` per `blueprint-authoring.md` section 8a.2. The ADR names a project-level supersede path for projects that keep the bare-Worker shape or stay on Pages.
+- **Two new elicits.** `assets-directory` (kind `string`, default empty) picks the static-assets root; `run-worker-first` (kind `boolean`, default `false`) picks the SPA fallback discipline. The loader-side `when-elicitedNonEmpty` predicate the spec calls for is a mechanism follow-up, so `run-worker-first` fires unconditionally in v1.2.0; the guide teaches that the elicit is only meaningful when `assets-directory` is non-empty.
+- **Probe module (`contributions/probes/assets-manifest-scan.mjs`).** `accountBound: false`, `anchorAcId: AC-12113-1`. Source-tree parser reads the applied fixture's `wrangler.toml` and asserts the `[assets]` shape against the elicited answers; refuses on `pages_build_output_dir` presence anywhere on the manifest (the Workers-with-static-assets shape and the Pages shape are mutually exclusive per the Cloudflare static-assets doc).
+- **Shared sample-app fixture (`packages/rcf-lite/test/fixtures/cf-platform/`).** T-0 mints the fixture; T-1 (KV), T-2 (cron), T-3 (Durable Objects) and T-5's Turnstile sub-fixture extend it later. Ships `wrangler.toml` with the ratified `[assets]` block, `dist/index.html`, a minimal `src/index.mjs` Worker entry, `package.json` with `wrangler` as a devDependency and `wrangler dev` as the start script, a `run-assets-manifest-scan.mjs` shim wiring the probe against the fixture, and a `README.md` naming the manual `wrangler dev` boot line and the two induced-failure switches (`SIMULATE_MIXED_SHAPE`, `SIMULATE_EMPTY_ASSETS`). The fixture never binds port 4200.
+
+A project on v1.1.0 picks up v1.2.0 with the same compose invocation; a fresh apply on a project answering both elicits reads the applied sidecar at `rcf/blueprints/deploy-cloudflare-workers.applied.json`. A project on Pages that wants to migrate reads the guide's new `Workers-with-static-assets: the SPA-on-Workers shape` section for the Cloudflare migrate-from-Pages link.
+
 ## What v1.1.0 adds
 
 v1.1.0 is an additive-non-global minor bump. No global topics change; no contribution is removed; the compose invocation is unchanged. The bump cures seven content findings that the round-2 dogfood acceptance build surfaced when a stranger followed the v1.0.0 teaching against wrangler 4.x reality (three HIGH, three MEDIUM, one LOW). Every fixed teaching is execution-verified against the shipped vendor CLI, with one depth-stop caveat: the bootstrap flow taught in `assets/wrangler-samples/bootstrap-vs-steady-state.md` (F-006) is composed from vendor CLI refusals reproduced against a real Worker (the three refusal-message excerpts in the asset are byte-verified against the shipped CLI's output) and each individual vendor primitive it composes is verified in isolation, but the composed `wrangler deploy --secrets-file <tmp>` bootstrap sequence itself is not end-to-end executed as a single verified run in this ship. A project applying the blueprint exercises the composed sequence the first time it bootstraps a Worker.