rcf-lite 0.21.0 → 0.23.0

package/rcf/requirements/req-024.json

@@ -0,0 +1,69 @@
+{
+  "createdAt": "2026-09-06T15:38:14.226Z",
+  "updatedAt": "2026-09-06T15:38:14.250Z",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "rationale": "Per visual round 4 spec section 5.1 (2026-09-06).",
+  "description": "The rcf-lite shelf ships the application-empty-error-states v1.0.0 blueprint (blueprints/application-empty-error-states/) with 19 to 24 contributions (5 REQs on the state catalogue with eight named states, the recovery-action contract per state, the announcement contract with role=region and aria-live=polite, the server-error surface with no stack-trace and no resource-id leak in production, and the offline state with a write-buffer and navigator.onLine reconnection semantics; 8 USs 22101 to 22108 binding runtime-observable ACs one per named state; 3 TACs 2301 state-machine from FBS render to state render to recovery, 2302 recovery-action router across parent-surface search request-access retry, 2303 offline write-buffer with reconciliation semantics; 3 ADRs 2301 HTTP status to rendered state mapping with standardsTraceClause RFC 9110 and recommendedDefault true, 2302 production hides stack traces with recommendedDefault true and elicited true, 2303 offline strategy across write-buffer read-only-banner refuse-writes with elicited true). Declares suggestedCompanions logging and errorHandling with reasons from spec section 5.1; providesRoles absent; capabilities empty; requiresAppliedCapabilities absent (no auth required). Ships a Playwright probe pack under blueprints/application-empty-error-states/probe-packs/application-empty-error-states.pack.mjs whose eight checks (AC-22101-1 not-found, AC-22102-1 forbidden, AC-22103-1 server-error, AC-22104-1 permission-denied, AC-22105-1 offline, AC-22106-1 empty-list, AC-22107-1 no-search-results, AC-22108-1 error-boundary) each anchor one named state via TAC-2301 or an operator-configured error-shell path glob; pack URLs composed by the withUrl(runtimeUrl, path) helper per round 3 T-3 fix train. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-empty-error-states/ realising all eight states honestly with a query switch ?state=<name> and break switches ?break=stack-trace, ?break=leak-id, ?break=no-recovery and ?break=no-live-region so each check refuses on its own defect. Sixth shipped consumer of T-0s probe-pack runner extension; T-3 forms-wizard and T-4 account-settings both compose this blueprint.",
+  "reqId": "REQ-024",
+  "prdId": "PRD-001",
+  "title": "Application-empty-error-states v1.0.0 blueprint on the shelf with the eight-state contract, Playwright probe pack and sample-app fixture",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "auth"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T15:38:14.249Z",
+    "signals": [
+      {
+        "source": "description",
+        "shape": "auth",
+        "match": "role"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "aria-"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "nav"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "render"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "render"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "route"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "rendered"
+      },
+      {
+        "source": "description",
+        "shape": "auth",
+        "match": "permission"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      }
+    ]
+  }
+}

package/rcf/requirements/req-025.json

@@ -0,0 +1,59 @@
+{
+  "createdAt": "2026-09-06T16:55:02.404Z",
+  "updatedAt": "2026-09-06T16:56:22.580Z",
+  "description": "The rcf-lite shelf ships the application-file-upload v1.0.0 blueprint (blueprints/application-file-upload/) with 18 to 22 contributions (5 REQs on the input contract with a labelled file input plus drop-zone plus keyboard alternative per WCAG 2.5.7, the progress contract with per-file percent plus aggregate percent plus polite live-region tick, the refusal contract with MIME-type refusal and size-limit refusal and virus-scan hit and aria-describedby error binding and focus-to-retry, the transport contract with chunked-and-resumable and multipart POST default and tus.io elicited alternative, and the completion contract with an assertive-slot announcement on success per WCAG 4.1.3 and per-file remove and retry; 7 USs 23101 to 23107 one per REQ plus two cross-cutting cases network-interruption resumption and background-tab progress; 3 TACs 2401 input surface, 2402 transport contract, 2403 progress announcer; 3 ADRs 2401 transport across multipart POST and tus.io and per-vendor SDK with recommendedDefault true on multipart and elicited true, 2402 accepted MIME set and per-file size cap with elicited true, 2403 virus-scan integration via operator-supplied verifier through a capability plus elicit with elicited true). Declares suggestedCompanions logging and errorHandling with reasons from spec section 5.2; providesRoles absent; capabilities absent; requiresAppliedCapabilities absent. Ships a Playwright probe pack under blueprints/application-file-upload/probe-packs/application-file-upload.pack.mjs with four surface-observable checks anchored to TAC-2401 or an operator-configured upload-route glob. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-file-upload/ realising both transport branches multipart POST and tus.io honestly plus break switches so each check refuses on its own defect. Seventh shipped consumer of T-0's probe-pack runner extension.",
+  "reqId": "REQ-025",
+  "prdId": "PRD-001",
+  "title": "Application-file-upload v1.0.0 blueprint on the shelf with the file-input plus drop-zone contract, chunked-resumable transport, refusal semantics and Playwright probe pack",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "httpApi"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T16:55:02.427Z",
+    "signals": [
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "aria-"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "POST"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "POST"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "route"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "POST"
+      }
+    ]
+  },
+  "rationale": "Per visual round 4 spec section 5.2 (2026-09-06)."
+}

package/rcf/requirements/req-026.json

@@ -0,0 +1,154 @@
+{
+  "createdAt": "2026-09-06T19:03:15.348Z",
+  "updatedAt": "2026-09-06T19:07:15.107Z",
+  "description": "The rcf-lite shelf ships the application-forms-wizard v1.0.0 blueprint (blueprints/application-forms-wizard/) with 19 contributions (5 REQs on the task-list contract with the closed GOV.UK vocabulary Cannot start yet plus Not started plus In progress plus Completed with an ARIA progressbar wrapper, the per-step validation timing rule on-blur before first submit then on-change after first failure and a full pass on submit reusing SPA forms-engine TAC-205 per WCAG 2.2 SC 3.3.1 and 3.3.3, the error-summary contract with a top-of-page summary and skip links per failed field with aria-invalid true on the field and aria-describedby to the per-field error message and focus moved to the summary heading on submit failure, the summary-review contract with a summary-list rendering per step with Change links returning to each step and every other answer retained on save per WCAG 2.2 SC 3.3.4, the save-and-return contract with a server-side draft table or a client-side local buffer with a per-write ISO-8601 sync tick with the pack refusing to ship if neither is wired per WCAG 2.2 SC 3.3.7; 8 USs 24101 to 24108 one per REQ plus three cross-cutting cases linear-vs-free navigation, in-progress list and no-in-progress empty state delegated to application-empty-error-states; 3 TACs 2501 task-list shell and 2502 error-summary contract and 2503 draft store; 3 ADRs 2501 navigation posture linear default with elicited free branch, 2502 save-and-return transport across server-draft-table and client-local-buffer elicited with NO recommendedDefault because the abandoned-draft loss class does not ship silently, 2503 step indicator across task-list ARIA progressbar and breadcrumb with recommendedDefault true on task-list). Declares suggestedCompanions logging and errorHandling with reasons from spec section 5.3; providesRoles absent; capabilities absent; requiresAppliedCapabilities absent. Ships a Playwright probe pack under blueprints/application-forms-wizard/probe-packs/application-forms-wizard.pack.mjs with four surface-observable checks anchored to TAC-2501 or an operator-configured wizard-route glob. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-forms-wizard/ realising the four wizard surfaces honestly plus both save-and-return transports server default and local elicited plus four break switches so each check refuses on its own defect. Eighth shipped consumer of T-0 probe-pack runner extension. Consumes application-empty-error-states for the no-in-progress empty state on the /in-progress list surface.",
+  "reqId": "REQ-026",
+  "prdId": "PRD-001",
+  "title": "Application-forms-wizard v1.0.0 blueprint on the shelf with the task-list contract, error-summary contract, summary-review pattern, save-and-return draft store and Playwright probe pack",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "httpApi",
+      "persistence"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T19:03:15.372Z",
+    "signals": [
+      {
+        "source": "title",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "title",
+        "shape": "persistence",
+        "match": "store"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "aria-"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "aria-"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "rendering"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "nav"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "navigation"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "store"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "nav"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "navigation"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "post"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "route"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      }
+    ]
+  }
+}

package/rcf/requirements/req-027.json

@@ -0,0 +1,33 @@
+{
+  "createdAt": "2026-09-06T21:11:33.252Z",
+  "updatedAt": "2026-09-06T21:11:33.281Z",
+  "description": "T-4 shelf-blueprint track: application-account-settings v1.0.0 with 24 contributions 6 REQs 10 USs 25101 to 25110 4 TACs 2601 to 2604 4 ADRs 2601 to 2604; requiresAppliedCapabilities principalDirectory with allow-no-auth-yet override; 8 elicits; probe pack with 5 capability-gated checks anchored to AC-25101-1 AC-25102-1 AC-25105-1 AC-25106-1 AC-25108-1; sample-app fixture with 5 conditional surfaces and 4 break switches; rides with clerk 1.3.0 keycloak 1.2.0 oauth2 1.2.0 magic-link 1.2.0 doc-only observability-logging 1.2.0; mechanism minor for Q3 refusal and refusal template. Ninth shipped consumer of T-0 probe-pack runner.",
+  "reqId": "REQ-027",
+  "prdId": "PRD-001",
+  "title": "application-account-settings v1.0.0 blueprint on the shelf with 5-check pack, 4 auth-blueprint minor bumps and observability-logging minor",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "auth"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T21:11:33.280Z",
+    "signals": [
+      {
+        "source": "description",
+        "shape": "auth",
+        "match": "magic-link"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "template"
+      }
+    ]
+  }
+}

package/rcf/requirements/req-028.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-06T23:02:59.779Z",
+  "updatedAt": "2026-09-06T23:21:56.789Z",
+  "description": "T-5 shelf-blueprint track of the ratified visual round 4 spec (2026-09-06 section 5.5): the application-onboarding-tour v1.0.0 blueprint on the shelf with 17 contributions (4 REQs step-manifest + tooltip-as-dialog + checklist-slot + completion-state; 7 USs 26101 to 26107; 3 TACs 2701 step-runner / 2702 checklist-slot / 2703 completion-store; 3 ADRs 2701 dismissal-policy / 2702 completion-store-shape / 2703 checklist-anchor). No requiresAppliedCapabilities (composes on SPA, dashboard, notifications-in-app, account-settings, any auth without hard dependency; documented fallback per Q4 spa-local-storage). Ships a Playwright probe pack with four surface-observable checks anchored to AC-26101-1 AC-26102-1 AC-26103-1 AC-26104-1, and a dependency-free sample-app fixture with the three-to-five step tour honestly realised plus four break switches (no-role, focus-escape, no-collapse, no-persist). Composes on application-dashboard for the dashboard-top anchor slot (with settings-page fallback), application-notifications-in-app for the checklist-completion announcement, application-account-settings for the restart-tour control home, application-spa for routing and iconography. suggestedCompanions logging and errorHandling; providesRoles absent; capabilities absent. Tenth shipped consumer of the T-0 probe-pack runner extension.",
+  "reqId": "REQ-028",
+  "prdId": "PRD-001",
+  "title": "application-onboarding-tour v1.0.0 blueprint on the shelf with 4-check pack and dependency-free sample-app fixture",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}

package/rcf/requirements/req-029.json

@@ -0,0 +1,57 @@
+{
+  "createdAt": "2026-09-07T09:09:31.207Z",
+  "updatedAt": "2026-09-07T09:09:31.236Z",
+  "description": "T-0 track of the ratified Cloudflare round 6 spec (2026-09-06 section 5.0). The rcf-lite shelf bumps the deploy-cloudflare-workers blueprint from v1.1.0 to v1.2.0 with an additive-minor delta that blesses the Workers-with-static-assets shape as the SPA-on-Workers deploy shape. The blueprint gains two new REQ contributions (deploy-cloudflare-workers-REQ-013 for the Workers-with-static-assets shape and deploy-cloudflare-workers-REQ-014 for the SPA fallback discipline via run_worker_first), three new US contributions in the existing 12xx band (deploy-cloudflare-workers-US-12113 SPA-on-Workers deploy; deploy-cloudflare-workers-US-12114 assets-directory elicitation; deploy-cloudflare-workers-US-12115 migrate-from-Pages guidance), one new ADR contribution (ADR-1306-deploy-cloudflare-workers-spa-shape carrying the verbatim Cloudflare Pages landing-page recommendation, standardsTraceClause Cloudflare Pages landing-page recommendation 2026-09-06, recommendedDefault true), one new source-tree scan probe module (assets-manifest-scan.mjs, accountBound false, anchorAcId matching the assetsBlockEmitted AC) that parses the applied fixture wrangler.toml and asserts the [assets] block presence, the run_worker_first presence and absence of any Pages-only pages_build_output_dir field, and two new elicited parameters on blueprint.json elicits[] (assets-directory kind string default empty for the bare-Worker shape; run-worker-first kind boolean default false). The shipped v1.1.0 contribution set (REQs 001 through 012, USs 12101 through 12112, TACs 1301 through 1306, ADRs 1301 through 1305, deploymentTarget global topic, suggestedCompanions logging and errorHandling) carries through unchanged. No capability minted, no new global topic, no runtime dependency added. Ships packages/rcf-lite/test/fixtures/cf-platform/ as the shared sample-app fixture that T-1 through T-3 and T-5 extend. HQ sequential chain-id block: REQ-029 / US-2901 / US-2902 / TS-073 / TS-074 / FBS-063 / CN-209 minted via --id after HQ round-4 T-5 landed at REQ-028 and Dex round-5 T-3 landed at REQ-042 per HQ mid-flight ruling on repo-chain id blocks per train.",
+  "category": "functional",
+  "domain": "deploy",
+  "priority": "must",
+  "reqId": "REQ-029",
+  "prdId": "PRD-001",
+  "title": "The rcf-lite shelf bumps the deploy-cloudflare-workers blueprint from v1.1.0 to v1.2.0 with an additive-minor delta that blesses the Workers-with-static-assets shape and ships the cf-platform shared sample-app fixture",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-07T09:09:31.235Z",
+    "signals": [
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      }
+    ]
+  }
+}

package/rcf/requirements/req-030.json

@@ -0,0 +1,67 @@
+{
+  "createdAt": "2026-09-07T09:09:31.409Z",
+  "updatedAt": "2026-09-07T09:09:31.438Z",
+  "description": "T-0 SPA fallback discipline half of the Cloudflare round 6 T-0 delta (2026-09-06 section 5.0). The blueprint gains one new REQ contribution (deploy-cloudflare-workers-REQ-014 SPA fallback discipline via elicited run_worker_first: when true, the Worker script runs before asset lookup for arbitrary routing; when false or unanswered, static asset lookup runs first and the Worker handles only unmatched paths), one new US contribution (deploy-cloudflare-workers-US-12115 migrate-from-Pages guidance in the guide section) that links the Cloudflare migrate-from-Pages guide from the ADR-1306 verbatim landing-page quote, one new elicit (run-worker-first kind boolean default false; the spec's intended when-predicate {elicitedNonEmpty: [assets-directory]} is NOT shipped this round because the loader's supported when block only accepts requiresCapability arrays per src/blueprint/loader.js validateElicits, and the elicit fires unconditionally with the guide teaching that a non-empty assets-directory is what makes run_worker_first meaningful; the loader extension is captured under CONCERNS on the PR, not blocking T-0). The T-0 probe module assets-manifest-scan.mjs anchors AC-2902-1 (the spaFallbackShape canonical AC) via a Node-only source-tree scan of the applied fixture wrangler.toml. The one new ADR ADR-1306-deploy-cloudflare-workers-spa-shape carries the verbatim Cloudflare Pages landing-page quote (Workers supports most Pages use cases and offers a broader feature set. It is Cloudflare's primary platform for building applications. Start new projects with Workers.), standardsTraceClause Cloudflare Pages landing-page recommendation 2026-09-06, recommendedDefault true. HQ sequential chain-id block: REQ-030 / US-3001 / TS-075 minted via --id.",
+  "category": "functional",
+  "domain": "deploy",
+  "priority": "must",
+  "reqId": "REQ-030",
+  "prdId": "PRD-001",
+  "title": "T-0 SPA fallback discipline via run_worker_first elicit and migrate-from-Pages guidance on deploy-cloudflare-workers v1.2.0",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-07T09:09:31.437Z",
+    "signals": [
+      {
+        "source": "title",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      }
+    ]
+  }
+}

package/rcf/requirements/req-040.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-06T16:59:00.000Z",
+  "updatedAt": "2026-09-06T16:59:00.000Z",
+  "reqId": "REQ-040",
+  "prdId": "PRD-001",
+  "title": "Persistence-data-postgres v1.0.0 blueprint on the shelf with six Node-only probes proven against a postgres:17-alpine container",
+  "description": "The rcf-lite shelf ships the persistence-data-postgres v1.0.0 blueprint (blueprints/persistence-data-postgres/) with 26 contributions per the ratified infra round 5 spec section 5.1: 7 REQs (facade sole-reader over the pg client; numbered forward-only .sql migrations with one file one transaction; prepared-statement discipline via static string literals with $N parameters; transactional atomicity via a helper wrapping BEGIN and COMMIT; two-path recovery via scheduled pg_dump plus vendor point-in-time recovery; connection-pool posture per deploy target; optional advisory-lock helper elicited default off per Baz Q1 default), 10 USs 27101-27110 binding runtime-observable ACs, 4 TACs 2801-2804 (facade, migration runner, transaction helper, recovery runner), 5 ADRs 2801-2805 (driver choice pg with elicited alternatives, numbered forward-only migrations, runner mode atBoot or ciStep, recovery pg_dump plus PITR both required, pool posture per deploy target). The blueprint declares suggestedCompanions logging and errorHandling with spec section 5.1 reasons, providesRoles absent, capabilities [relationalStore], requiresAppliedCapabilities absent. Contributes ADR-2801 and ADR-2802 as scope:global on the persistenceStore and migrationDiscipline topics reused from persistence-data-sqlite and persistence-data-d1 so applying persistence-data-postgres alongside either of them surfaces a DELIBERATE conflict per the round-2 pattern. Ships six Node-only probes under blueprints/persistence-data-postgres/contributions/probes/ (facade-round-trip, migration-apply, prepared-statement-scan, transaction-atomicity, recovery-restore-round-trip, pool-posture-smoke) each exporting the spec section 3.2 verdict envelope with an anchorAcId matching a contributed AC id, and matching run-<probe-name>.mjs shims that drive the probe against the applied fixture and write the per-blueprint probe report at .rcf/reports/blueprints/persistence-data-postgres/<probe-name>.json per spec section 3.4. None of the six probes carry accountBound:true; Postgres is local-first per Baz decision 8. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/infra-postgres/. Extends packages/rcf-lite/docs/blueprint-authoring.md section 6a capability-declaration table with one row for relationalStore per spec section 5.6. Appends one row for persistence-data-postgres at US band 27101-27899 / ADR-TAC suffix block 28xx to the shelf-wide id-band registry table under docs/topics.md on every shipped blueprint. Reserves the round-6 Hyperdrive v1.1.0 adapter slot at ADR-2801 by keeping the driver reference opaque at the facade boundary per spec section 5.7. Re-minted with HQ's reserved round-5 chain-id block (REQ-040 / US-4001 / TS-070 / FBS-060 / CN-200..202) after HQ's round-4 T-1 landed first at origin/main 784d12f and the coordinator ruling changed to reserved-block minting via --id (no more max+1 racing).",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}

package/rcf/requirements/req-041.json

@@ -0,0 +1,125 @@
+{
+  "createdAt": "2026-09-06T17:49:13.077Z",
+  "updatedAt": "2026-09-06T17:49:13.110Z",
+  "description": "The rcf-lite shelf ships the object-storage-s3 v1.0.0 blueprint (blueprints/object-storage-s3/) with 21 contributions per the ratified infra round 5 spec section 5.2: 6 REQs (facade sole-reader over the S3 client; put / get / delete / list on typed keys; presigned GET URL with bounded TTL; multipart-upload above elicited threshold; four lifecycle events with metadata-only fields; credential-pair discipline via security-secrets-management), 8 USs 28101-28108 binding runtime-observable ACs, 3 TACs (2901 facade, 2902 multipart uploader, 2903 event sink), 4 ADRs (2901 adapter elicited between @aws-sdk/client-s3 and aws4fetch, 2902 presigned TTL default 15 minutes floor 1 minute, 2903 multipart threshold default 8 MiB, 2904 objectStorageContract scope global). The blueprint declares suggestedCompanions logging and errorHandling with spec section 5.2 reasons, providesRoles absent, capabilities [objectStorage], requiresAppliedCapabilities absent. Contributes ADR-2904 as scope:global on new topic objectStorageContract so future non-S3-shape siblings (object-storage-native-gcs, object-storage-native-azure) conflict here by design. Ships six Node-only probes under blueprints/object-storage-s3/contributions/probes/ (facade-round-trip, put-get-round-trip, presigned-url, multipart-upload, event-secrecy, r2-real-account-smoke) each exporting the spec section 3.2 verdict envelope with an anchorAcId matching a contributed AC id, and matching run-<probe-name>.mjs shims writing per-blueprint reports at .rcf/reports/blueprints/object-storage-s3/<probe-name>.json per spec section 3.4. Five probes are local-first (accountBound false); r2-real-account-smoke carries accountBound:true and records the accountBoundSkipped shape per spec section 3.5 without CI_HAS_CLOUDFLARE_ACCOUNT. Ships the T-2 side of the shared sample-app fixture at packages/rcf-lite/test/fixtures/infra-s3-and-queue/ (T-3 shares the fixture and adds its own wrangler-dev src branch) with MinIO under docker compose, @aws-sdk/client-s3 as the fixture's own runtime dep, an S3 facade over MinIO, a security-secrets-management shim realising the secretRef opaque-string contract from a project-local .rcf/secrets/dev.env file, and a README naming docker and podman incantations plus four wired induced-failure switches. Extends packages/rcf-lite/docs/blueprint-authoring.md section 6a capability-declaration table with one row for objectStorage per spec section 5.6. Appends one row for object-storage-s3 at US band 28101-28899 / ADR-TAC suffix block 29xx to the shelf-wide id-band registry table under docs/topics.md on every shipped blueprint. Refuses composition when security-secrets-management is not applied with exit 3 and stable message id object-storage-s3-no-secrets on stderr; --allow-no-secrets-yet override records a note on source.notes for later reconciliation. Minted with HQ's reserved round-5 chain-id block via --id (REQ-041 / US-4101 / TS-071 / FBS-061 / CN-203..205) after T-1 minted at 040 / 4001 / 070 / 060 / 200..202; the block reservation avoids next-id racing with HQ's train while T-1 sits open.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "reqId": "REQ-041",
+  "prdId": "PRD-001",
+  "title": "Object-storage-s3 v1.0.0 blueprint on the shelf",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "httpApi",
+      "auth",
+      "persistence"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T17:49:13.108Z",
+    "signals": [
+      {
+        "source": "title",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "put"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "get"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "delete"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "GET"
+      },
+      {
+        "source": "description",
+        "shape": "auth",
+        "match": "credential"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "put"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "get"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      }
+    ]
+  }
+}