rcf-lite 0.22.0 → 0.24.0

package/rcf/code-nodes/cn-294.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-294",
+  "path": "../../packages/rcf-lite/test/fixtures/cf-platform/src/do-hub.mjs",
+  "implementsAcIds": [
+    "AC-7401-1",
+    "AC-7402-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T14:14:57.462Z",
+  "updatedAt": "2026-09-07T14:14:57.462Z"
+}

package/rcf/code-nodes/cn-295.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-295",
+  "path": "../../packages/rcf-lite/test/fixtures/cf-platform/src/do-storage.mjs",
+  "implementsAcIds": [
+    "AC-7201-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T14:14:57.647Z",
+  "updatedAt": "2026-09-07T14:14:57.647Z"
+}

package/rcf/code-nodes/cn-296.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-296",
+  "path": "../../blueprints/platform-cloudflare-durable-objects/contributions/probes/probe-utils.mjs",
+  "implementsAcIds": [
+    "AC-7001-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T14:14:57.834Z",
+  "updatedAt": "2026-09-07T14:14:57.834Z"
+}

package/rcf/code-nodes/cn-297.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-297",
+  "path": "../../blueprints/platform-cloudflare-durable-objects/contributions/probes/namespace-facade-ready.mjs",
+  "implementsAcIds": [
+    "AC-7001-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T14:14:58.023Z",
+  "updatedAt": "2026-09-07T14:14:58.023Z"
+}

package/rcf/code-nodes/cn-298.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-298",
+  "path": "../../blueprints/platform-cloudflare-durable-objects/contributions/probes/single-cell-concurrent-increment.mjs",
+  "implementsAcIds": [
+    "AC-7101-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T14:14:58.220Z",
+  "updatedAt": "2026-09-07T14:14:58.220Z"
+}

package/rcf/code-nodes/cn-299.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-299",
+  "path": "../../blueprints/platform-cloudflare-durable-objects/contributions/probes/storage-round-trip.mjs",
+  "implementsAcIds": [
+    "AC-7201-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T14:14:58.410Z",
+  "updatedAt": "2026-09-07T14:14:58.410Z"
+}

package/rcf/code-nodes/cn-300.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-300",
+  "path": "../../blueprints/platform-cloudflare-durable-objects/contributions/probes/alarm-fires-once.mjs",
+  "implementsAcIds": [
+    "AC-7301-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T14:14:58.597Z",
+  "updatedAt": "2026-09-07T14:14:58.597Z"
+}

package/rcf/code-nodes/cn-301.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-301",
+  "path": "../../blueprints/platform-cloudflare-durable-objects/contributions/probes/websocket-hub-broadcast.mjs",
+  "implementsAcIds": [
+    "AC-7401-1",
+    "AC-7402-1",
+    "AC-7501-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T14:14:58.784Z",
+  "updatedAt": "2026-09-07T14:14:58.784Z"
+}

package/rcf/code-nodes/cn-302.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-302",
+  "path": "../../blueprints/platform-cloudflare-durable-objects/contributions/probes/sole-reader-scan.mjs",
+  "implementsAcIds": [
+    "AC-7601-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T14:14:58.972Z",
+  "updatedAt": "2026-09-07T14:14:58.972Z"
+}

package/rcf/code-nodes/cn-303.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-303",
+  "path": "../../blueprints/platform-cloudflare-durable-objects/contributions/probes/real-account-storage-smoke.mjs",
+  "implementsAcIds": [
+    "AC-7002-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T14:14:59.162Z",
+  "updatedAt": "2026-09-07T14:14:59.162Z"
+}

package/rcf/code-nodes/cn-304.json

@@ -0,0 +1,21 @@
+{
+  "cnId": "CN-304",
+  "path": "../../packages/rcf-lite/test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js",
+  "implementsAcIds": [
+    "AC-7001-1",
+    "AC-7002-1",
+    "AC-7101-1",
+    "AC-7201-1",
+    "AC-7301-1",
+    "AC-7401-1",
+    "AC-7402-1",
+    "AC-7501-1",
+    "AC-7601-1",
+    "AC-7701-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T14:15:21.377Z",
+  "updatedAt": "2026-09-07T14:15:21.377Z"
+}

package/rcf/code-nodes/cn-320.json

@@ -0,0 +1,20 @@
+{
+  "cnId": "CN-320",
+  "path": "../../blueprints/edge-cloudflare-access/blueprint.json",
+  "implementsAcIds": [
+    "AC-8001-1",
+    "AC-8002-1",
+    "AC-8003-1",
+    "AC-8101-1",
+    "AC-8201-1",
+    "AC-8301-1",
+    "AC-8401-1",
+    "AC-8501-1",
+    "AC-8502-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T16:53:57.879Z",
+  "updatedAt": "2026-09-07T16:53:57.879Z"
+}

package/rcf/code-nodes/cn-321.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-321",
+  "path": "../../blueprints/application-admin-console/blueprint.json",
+  "implementsAcIds": [
+    "AC-8501-1",
+    "AC-8601-1",
+    "AC-8602-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T16:53:58.062Z",
+  "updatedAt": "2026-09-07T16:53:58.062Z"
+}

package/rcf/code-nodes/cn-350.json

@@ -0,0 +1,19 @@
+{
+  "cnId": "CN-350",
+  "path": "../../blueprints/edge-cloudflare-turnstile/blueprint.json",
+  "implementsAcIds": [
+    "AC-9001-1",
+    "AC-9002-1",
+    "AC-9101-1",
+    "AC-9102-1",
+    "AC-9201-1",
+    "AC-9301-1",
+    "AC-9302-1",
+    "AC-9401-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T19:56:43.636Z",
+  "updatedAt": "2026-09-07T19:56:43.636Z"
+}

package/rcf/code-nodes/cn-380.json

@@ -0,0 +1,19 @@
+{
+  "cnId": "CN-380",
+  "path": "../../blueprints/edge-cloudflare-rate-limiting/blueprint.json",
+  "implementsAcIds": [
+    "AC-10001-1",
+    "AC-10101-1",
+    "AC-10201-1",
+    "AC-10301-1",
+    "AC-10401-1",
+    "AC-10601-1",
+    "AC-10701-1",
+    "AC-10801-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-07T21:41:49.036Z",
+  "updatedAt": "2026-09-07T21:41:49.036Z"
+}

package/rcf/fbs/fbs-062.json

@@ -0,0 +1,20 @@
+{
+  "createdAt": "2026-09-06T19:18:14.898Z",
+  "updatedAt": "2026-09-07T06:56:47.886Z",
+  "acIds": [
+    "AC-4201-1",
+    "AC-4201-2",
+    "AC-4201-3",
+    "AC-4201-4",
+    "AC-4201-5",
+    "AC-4201-6"
+  ],
+  "fbsId": "FBS-062",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 50,
+  "executionStatus": "notStarted",
+  "title": "messaging-queue-cloudflare v1.0.0 blueprint on the shelf with six Node-only probes against wrangler dev plus one accountBound real-account concurrency smoke and a shared sample-app fixture (T-3 slice)",
+  "summary": "T-3 shelf-blueprint track of the ratified infra round 5 spec (2026-09-06, section 5.3) minted with dex reserved-block chain ids via --id (REQ-042 / US-4201 / TS-072 / FBS-062 / CN-206..208) after T-1 landed at 040/4001/070/060/200..202 and T-2 landed at 041/4101/071/061/203..205. Ships the messaging-queue-cloudflare v1.0.0 blueprint on the shelf with 21 contributions in the 6 REQ / 8 US 29101-29108 / 3 TAC 3001-3003 / 4 ADR 3001-3004 groups per spec section 5.3, six Node-only probes under blueprints/messaging-queue-cloudflare/contributions/probes/ (producer-facade-ready, publish-to-delivery, retry-and-dlq, event-secrecy, real-account-concurrency-smoke plus a shared probe-utils helper module) with matching run-shims writing per-blueprint reports at .rcf/reports/blueprints/messaging-queue-cloudflare/, and the T-3 slice of the shared sample-app fixture at packages/rcf-lite/test/fixtures/infra-s3-and-queue/. Four probes local-first (accountBound false); real-account-concurrency-smoke carries accountBound true and records accountBoundSkipped shape per spec section 3.5 without CI_HAS_CLOUDFLARE_ACCOUNT. Declares capabilities [queue], suggestedCompanions logging and errorHandling, providesRoles absent, requiresAppliedCapabilities absent (composes on deploy-cloudflare-workers transitively via the wrangler binding, not through the capability mechanism). Contributes ADR-3002 as scope:global on new topic deliverySemantics per spec section 5.3. Every ADR contribution entry carries standardsTraceClause per section 8a.2 (per HQ mid-flight ruling after PR #154 gate). Extends packages/rcf-lite/docs/blueprint-authoring.md section 6a table with a queue row naming the reserved messaging-queue-postgres sibling (Baz decision 7) per spec section 5.6; appends one shelf-registry row for messaging-queue-cloudflare at 29101-29899 / 30xx to every shipped blueprint docs/topics.md.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-063.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T09:12:10.596Z",
+  "updatedAt": "2026-09-07T09:12:58.000Z",
+  "acIds": [
+    "AC-2901-1",
+    "AC-2901-2",
+    "AC-2901-3",
+    "AC-2902-1",
+    "AC-2902-2",
+    "AC-3001-1",
+    "AC-3001-2",
+    "AC-3001-3"
+  ],
+  "fbsId": "FBS-063",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 51,
+  "executionStatus": "notStarted",
+  "title": "T-0 deploy-cloudflare-workers v1.2.0 minor bump: seven-contribution additive delta on the shipped v1.1.0 blueprint, cf-platform shared sample-app fixture, assets-manifest-scan probe module, anatomy test suite",
+  "summary": "T-0 shelf-blueprint minor-bump track of the ratified Cloudflare round 6 spec (2026-09-06 section 5.0) minted with the HQ sequential chain-id block via --id (REQ-029 REQ-030 US-2901 US-2902 US-3001 TS-073 TS-074 TS-075 FBS-063 CN-209) after HQ round-4 T-5 landed at REQ-028 US-2801 TS-057 FBS-047 and Dex round-5 T-3 landed at REQ-042 US-4201 TS-072 FBS-062 CN-206..208 per HQ mid-flight ruling on repo-chain id blocks per train. Ships the deploy-cloudflare-workers v1.2.0 additive-minor delta on the shipped v1.1.0 blueprint (seven new contributions in the existing 12xx US band and 13xx suffix: 2 REQs REQ-013 and REQ-014; 3 USs US-12113 US-12114 US-12115; 1 ADR ADR-1306 with the verbatim Cloudflare Pages landing-page quote and standardsTraceClause Cloudflare Pages landing-page recommendation (2026-09-06); 1 probe module assets-manifest-scan.mjs with anchorAcId AC-12113-1 and accountBound false; 2 new elicits assets-directory string default empty and run-worker-first boolean default false, both on top-level elicits[]). Ships the cf-platform shared sample-app fixture at packages/rcf-lite/test/fixtures/cf-platform/ (wrangler.toml with [assets] directory = ./dist and run_worker_first = true, dist/index.html, src/index.mjs Worker entry, package.json declaring wrangler devDependency and wrangler dev start, run-assets-manifest-scan.mjs shim, README with the two induced-failure switches SIMULATE_MIXED_SHAPE and SIMULATE_EMPTY_ASSETS documented). Adds one anatomy test file at packages/rcf-lite/test/blueprint/deploy-cloudflare-workers-v-1-2-0-anatomy.test.js covering the 8 TCs on TS-073 TS-074 TS-075 (blueprint shape, probe contract and scan-pass, chain-slice cross-check, elicits shape, fixture files, ADR body and clause, guide section and URLs, three-state probed verdicts). Updates the blueprint README.md with a v1.2.0 delta section, ships a new blueprint CHANGELOG.md with the v1.2.0 entry, adds the guide section titled Workers-with-static-assets: the SPA-on-Workers shape linking the Cloudflare migrate-from-Pages guide and citing the static-assets docs page, bumps the deploy-cloudflare-workers row on blueprints/deploy-cloudflare-workers/docs/topics.md and on blueprints/application-spa/docs/topics.md from shipped v1.0.0 to shipped v1.2.0. Existing v1.1.0 contributions carry through unchanged; no capability minted; no new global topic; no runtime dependency added; the section 6a capability table under packages/rcf-lite/docs/blueprint-authoring.md is NOT touched (T-1 through T-6 own that). The loader's supported when block only accepts requiresCapability arrays, so the spec's intended when-elicitedNonEmpty predicate on run-worker-first is NOT shipped and is named under CONCERNS on the PR.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-064.json

@@ -0,0 +1,23 @@
+{
+  "createdAt": "2026-09-07T10:16:11.359Z",
+  "updatedAt": "2026-09-07T10:17:10.379Z",
+  "acIds": [
+    "AC-4301-1",
+    "AC-4301-2",
+    "AC-4301-3",
+    "AC-4301-4",
+    "AC-4301-5",
+    "AC-4301-6",
+    "AC-4301-7"
+  ],
+  "fbsId": "FBS-064",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 52,
+  "executionStatus": "notStarted",
+  "title": "jobs-background v1.0.0 blueprint on the shelf with five Node-only probes wired to the T-3 in-memory queue seam, a shared sample-app fixture extension carrying two toy jobs plus jobs-runtime plus scheduler, plus the CLI --allow-no-queue-yet flag and the queue-family sidecar-notes derivation on the T-5 mechanism (T-4 slice, post-#164 re-mint)",
+  "summary": "T-4 shelf-blueprint track of the ratified infra round 5 spec (2026-09-06, section 5.4) re-minted with next-free ids after HQ round-6 T-0 PR #164 landed and consumed our original block (TS-073 / FBS-063 / CN-209..212). New chain: REQ-043 / US-4301 (unchanged; did not collide) / TS-076 / FBS-064 / CN-214..217 all minted via rcf define create --id on origin/main 321371e. Ships the jobs-background v1.0.0 blueprint with 22 contributions in the 6 REQ / 9 US 30101-30109 / 3 TAC 3101-3103 / 4 ADR 3101-3104 groups per spec section 5.4, five Node-only probes under blueprints/jobs-background/contributions/probes/ (apply-time-refusal, apply-time-override, fake-clock-cron, retry-and-fail, event-secrecy) with matching run-shims writing per-blueprint reports at .rcf/reports/blueprints/jobs-background/, and the T-4 slice of the shared sample-app fixture extending packages/rcf-lite/test/fixtures/infra-s3-and-queue/ with a jobs/ directory and jobs-runtime plus scheduler modules on top of T-3's in-memory queue seam. All five probes local-first (accountBound false). Declares capabilities [backgroundJobs], suggestedCompanions logging and errorHandling, providesRoles absent, requiresAppliedCapabilities {capabilities:[queue],allowSkipFlag:allow-no-queue-yet,refusalMessageId:jobs-background-no-queue} per Baz decision 5. Contributes ADR-3101 as scope:global on new topic backgroundJobModel per spec section 5.4. Every ADR contribution entry carries standardsTraceClause per section 8a.2.",
+  "dependsOnFbsIds": [
+    "FBS-062"
+  ]
+}

package/rcf/fbs/fbs-070.json

@@ -0,0 +1,24 @@
+{
+  "createdAt": "2026-09-07T10:20:33.274Z",
+  "updatedAt": "2026-09-07T10:20:33.274Z",
+  "acIds": [
+    "AC-5001-1",
+    "AC-5002-1",
+    "AC-5101-1",
+    "AC-5101-2",
+    "AC-5102-1",
+    "AC-5201-1",
+    "AC-5201-2",
+    "AC-5301-1",
+    "AC-5302-1",
+    "AC-5401-1"
+  ],
+  "fbsId": "FBS-070",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 53,
+  "executionStatus": "notStarted",
+  "title": "T-1 platform-cloudflare-kv v1.0.0: 5 REQs 8 USs 3 TACs 3 ADRs, cf-platform fixture KV extension, 5 Node-only probes, anatomy test",
+  "summary": "HQ round-6 T-1: platform-cloudflare-kv v1.0.0 blueprint on the shelf under blueprints/platform-cloudflare-kv/ (19 contributions: 5 REQs, 8 USs, 3 TACs, 3 ADRs; contributions target 22 to 26 is guidance; sits below at 19 with well-scoped 8-US coverage per spec section 5.1). Adds cf-platform fixture extension (wrangler.toml [[kv_namespaces]] block, src/kv-facade.mjs sole reader, src/cache-aside.mjs helper, src/kv-driver.mjs in-memory driver realising the Workers KV binding shape). Ships 5 Node-only probes under contributions/probes/ (facade-round-trip, cache-aside-hit-then-miss, event-secrecy, list-with-prefix, real-account-eventual-consistency-smoke; the last is accountBound true and records accountBoundSkipped per spec section 3.5 in CI without CI_HAS_CLOUDFLARE_ACCOUNT). Ships blueprint README, guide, CHANGELOG and docs/topics.md, plus the shelf-wide topics.md registry-row for platform-cloudflare-kv on every other blueprint (29 files) and one keyValueStore row on packages/rcf-lite/docs/blueprint-authoring.md section 6a table. Anatomy test at packages/rcf-lite/test/blueprint/platform-cloudflare-kv-anatomy.test.js covers TS-080..087. Repo chain: REQ-050..054 US-5001..5401 TS-080..087 FBS-070 CN-230..234 minted via rcf define create --id per HQ round-6 T-1 reserved-block ruling 2026-09-07T10:12Z. Base commit origin/main 321371e6.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-080.json

@@ -0,0 +1,24 @@
+{
+  "createdAt": "2026-09-07T12:30:06.334Z",
+  "updatedAt": "2026-09-07T12:51:40.075Z",
+  "acIds": [
+    "AC-6001-1",
+    "AC-6002-1",
+    "AC-6003-1",
+    "AC-6101-1",
+    "AC-6101-2",
+    "AC-6201-1",
+    "AC-6201-2",
+    "AC-6301-1",
+    "AC-6301-2",
+    "AC-6302-1"
+  ],
+  "fbsId": "FBS-080",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 54,
+  "executionStatus": "notStarted",
+  "title": "T-2 platform-cloudflare-cron-triggers v1.0.0: 4 REQs 7 USs 10 ACs 3 TACs 3 ADRs, cf-platform fixture cron extension, 5 Node-only probes, anatomy test",
+  "summary": "HQ round-6 T-2: platform-cloudflare-cron-triggers v1.0.0 blueprint on the shelf under blueprints/platform-cloudflare-cron-triggers/ (17 contributions: 4 REQs, 7 USs, 3 TACs, 3 ADRs; contributions target 20 to 24 is guidance; sits below at 17 with well-scoped 7-US coverage per spec section 5.2). Adds cf-platform fixture extension (wrangler.toml [triggers] crons block additive over the T-0 [assets] and T-1 [[kv_namespaces]] blocks, src/scheduled.mjs sole reader of the Cron Trigger event, src/dispatcher.mjs expression-routed dispatcher with skew tolerance and soft budget). Ships 5 Node-only probes under contributions/probes/ (wrangler-test-scheduled drives wrangler dev --test-scheduled on the fixture; dispatcher-routing, skew-tolerance and event-secrecy drive the shipped dispatcher in-process; real-account-scheduled-smoke is accountBound true and records accountBoundSkipped per spec section 3.5 in CI without CI_HAS_CLOUDFLARE_ACCOUNT). Ships blueprint README, guide, CHANGELOG and docs/topics.md, plus the shelf-wide topics.md registry-row for platform-cloudflare-cron-triggers on every other blueprint (31 files) and one scheduledTrigger row on packages/rcf-lite/docs/blueprint-authoring.md section 6a table. Anatomy test at packages/rcf-lite/test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js covers TS-090..096. Repo chain: REQ-060..063 US-6001..6302 TS-090..096 FBS-080 CN-260..267 minted via rcf define create --id per HQ round-6 T-2 reserved-block ruling 2026-09-07T12:25Z. Base commit origin/main 09e14b4.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-090.json

@@ -0,0 +1,24 @@
+{
+  "createdAt": "2026-09-07T14:14:56.524Z",
+  "updatedAt": "2026-09-07T14:15:21.400Z",
+  "acIds": [
+    "AC-7001-1",
+    "AC-7002-1",
+    "AC-7101-1",
+    "AC-7201-1",
+    "AC-7301-1",
+    "AC-7401-1",
+    "AC-7402-1",
+    "AC-7501-1",
+    "AC-7601-1",
+    "AC-7701-1"
+  ],
+  "fbsId": "FBS-090",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 55,
+  "executionStatus": "notStarted",
+  "title": "T-3 platform-cloudflare-durable-objects v1.0.0: 8 REQs 10 USs 10 ACs 5 TACs 5 ADRs, cf-platform fixture DO extension, 7 Node-only probes, anatomy test",
+  "summary": "HQ round-6 T-3: platform-cloudflare-durable-objects v1.0.0 blueprint on the shelf under blueprints/platform-cloudflare-durable-objects/ (30 contributions: 8 REQs, 12 USs on the shipped blueprint at ids US-33101..33112, 5 TACs, 5 ADRs). Adds cf-platform fixture DO extension (wrangler.toml [[durable_objects.bindings]] and [[migrations]] blocks additive over the T-0 [assets], T-1 [[kv_namespaces]] and T-2 [triggers] crons blocks; src/do-facade.mjs sole reader of env.CELL and env.HUB; src/do-single-cell.mjs and src/do-hub.mjs shipping SingleCellObject and HubObject classes; src/do-storage.mjs in-memory storage driver realising both sql and kv backends). Ships 7 Node-only probes under contributions/probes/ (namespace-facade-ready, single-cell-concurrent-increment, storage-round-trip, alarm-fires-once, websocket-hub-broadcast folding AC-33106-1 event-secrecy as an additional result, sole-reader-scan and real-account-storage-smoke that is accountBound true and records accountBoundSkipped per spec section 3.5 in CI without CI_HAS_CLOUDFLARE_ACCOUNT). Ships blueprint README, guide, CHANGELOG and docs/topics.md, plus the shelf-wide topics.md registry-row for platform-cloudflare-durable-objects on every prior blueprint (32 files) and two capability rows on packages/rcf-lite/docs/blueprint-authoring.md section 6a table (strongConsistencyCell and hibernatableWebSocket). Anatomy test at packages/rcf-lite/test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js covers TS-100..109. Repo chain: REQ-070..077 US-7001..7002 US-7101 US-7201 US-7301 US-7401..7402 US-7501 US-7601 US-7701 TS-100..109 FBS-090 CN-290..304 minted via rcf define create --id per HQ round-6 T-3 reserved-block ruling 2026-09-07. Base commit origin/main 20cc40d.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-100.json

@@ -0,0 +1,23 @@
+{
+  "createdAt": "2026-09-07T16:53:43.560Z",
+  "updatedAt": "2026-09-07T17:14:55.992Z",
+  "acIds": [
+    "AC-8001-1",
+    "AC-8002-1",
+    "AC-8003-1",
+    "AC-8101-1",
+    "AC-8201-1",
+    "AC-8301-1",
+    "AC-8401-1",
+    "AC-8501-1",
+    "AC-8502-1"
+  ],
+  "fbsId": "FBS-100",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 56,
+  "executionStatus": "notStarted",
+  "title": "T-4 edge-cloudflare-access v1.0.0: 6 REQs 9 USs 9 ACs 4 TACs 4 ADRs, cf-edge fixture with JWT signer + JWKS, 5 Node-only probes + 1 wrangler-seam probe, anatomy test",
+  "summary": "HQ round-6 T-4: edge-cloudflare-access v1.0.0 blueprint on the shelf under blueprints/edge-cloudflare-access/. Ships cf-edge fixture with sole-reader JWT validator (Node crypto RS256), local JWKS server and fixture-JWT signer; 6 Node-only probes (4 in-process pass, 1 admin-console gate-surface, 1 accountBound real-account, 1 wrangler-seam warn-on-bind-miss); README, guide with Zero Trust dashboard walk-through and API alternative plus policy shape enum table and break-glass section, CHANGELOG, docs/topics.md; shelf-wide topics.md sweep on 33 blueprints; section 6a zeroTrustGate row on packages/rcf-lite/docs/blueprint-authoring.md. Repo chain: REQ-080..085, US-8001..8502, TS-110..119 plus TCs, FBS-100..101, CN-320..321, TAC-3501..3504, ADR-3501..3504 minted via rcf define create --id per HQ round-6 T-4 reserved-block ruling 2026-09-07. Base commit origin/main cdf84ee.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-101.json

@@ -0,0 +1,16 @@
+{
+  "createdAt": "2026-09-07T16:53:43.745Z",
+  "updatedAt": "2026-09-07T17:14:56.177Z",
+  "acIds": [
+    "AC-8601-1",
+    "AC-8602-1"
+  ],
+  "fbsId": "FBS-101",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 57,
+  "executionStatus": "notStarted",
+  "title": "T-4 application-admin-console v1.1.0 additive minor: consume zeroTrustGate optionally, Access-gated sign-in surface pack check AC-21815-1 on the existing application-admin-console.pack.mjs",
+  "summary": "HQ round-6 T-4: application-admin-console v1.1.0 additive minor riding the edge-cloudflare-access PR (round-4 T-4 capability-minor pattern). Bumps blueprint.json to 1.1.0 with 6 new contributions: REQ-014, US-21815, US-21816, TAC-2214, ADR-2214 (scope global on new topic adminConsoleSignInSurface) and pack check AC-21815-1. Extends probe-pack-application-admin-console fixture with /admin/sign-in route. Updates admin-console CHANGELOG with v1.1.0 entry and guide with Access-gate consumption section. Q4 default: consumption is OPTIONAL. Repo chain: REQ-086, US-8601..8602, TAC-2214, ADR-2214.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-110.json

@@ -0,0 +1,23 @@
+{
+  "createdAt": "2026-09-07T19:56:43.448Z",
+  "updatedAt": "2026-09-07T20:06:57.412Z",
+  "summary": "HQ round-6 T-5: edge-cloudflare-turnstile v1.0.0 blueprint on the shelf under blueprints/edge-cloudflare-turnstile/. Ships client widget mount (TAC-3601), server-side siteverify verifier plus refuse-if-token-missing guard (TAC-3602) and composition hook into security-auth-magic-link mint surface (TAC-3603). Four Node-only probes: secret-shape-scan, siteverify-fixture (drives live https://challenges.cloudflare.com/turnstile/v0/siteverify with pinned test keys), guard-shape-scan, event-secrecy. One Playwright pack (edge-cloudflare-turnstile.pack.mjs) with four checks: widgetRendered, serverVerified-pass, serverVerified-fail, magicLinkGuard. Dedicated pack fixture at packages/rcf-lite/test/fixtures/probe-pack-edge-cloudflare-turnstile/ (Node HTTP server, pinned test sitekeys plus secrets from Cloudflare public testing page, magic-link mint stub, break switches for missing-token and other-origin). README, guide with widget-mount snippet plus siteverify curl plus composition example, CHANGELOG, docs/topics.md; shelf-wide topics.md sweep; section 6a humanCheck row on packages/rcf-lite/docs/blueprint-authoring.md. Repo chain: REQ-090..094, US-9001, 9002, 9101, 9102, 9201, 9301, 9302, 9401, TS-120..127 plus TCs, FBS-110, CN-350, TAC-3601..3603, ADR-3601..3603 minted via rcf define create --id per HQ round-6 T-5 reserved-block ruling 2026-09-07. Base commit origin/main 4e25a16.",
+  "dependsOnFbsIds": [],
+  "acIds": [
+    "AC-9001-1",
+    "AC-9002-1",
+    "AC-9101-1",
+    "AC-9102-1",
+    "AC-9201-1",
+    "AC-9301-1",
+    "AC-9302-1",
+    "AC-9401-1"
+  ],
+  "fbsId": "FBS-110",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 58,
+  "executionStatus": "notStarted",
+  "title": "T-5 edge-cloudflare-turnstile v1.0.0: 5 REQs 8 USs 8 ACs 3 TACs 3 ADRs, dedicated probe-pack-edge-cloudflare-turnstile fixture with pinned test sitekeys, 4 Node-only probes and 1 Playwright pack with 4 checks",
+  "uiBearing": true
+}

package/rcf/fbs/fbs-120.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T21:41:48.747Z",
+  "updatedAt": "2026-09-07T21:42:15.451Z",
+  "acIds": [
+    "AC-10001-1",
+    "AC-10101-1",
+    "AC-10201-1",
+    "AC-10301-1",
+    "AC-10401-1",
+    "AC-10601-1",
+    "AC-10701-1",
+    "AC-10801-1"
+  ],
+  "fbsId": "FBS-120",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 59,
+  "executionStatus": "notStarted",
+  "title": "T-6 edge-cloudflare-rate-limiting v1.0.0: 5 REQs, 8 USs, 8 ACs, 3 TACs, 4 ADRs, 4 Node-only probes; cf-edge fixture extended with rate-limit manifests, schema, drift-audit runner and induced-failure switches",
+  "summary": "HQ round-6 T-6: edge-cloudflare-rate-limiting v1.0.0 blueprint on the shelf under blueprints/edge-cloudflare-rate-limiting/. Ships local rate-limit rules manifest (TAC-3701 draft-07 JSON Schema plus cf-edge fixture files cloudflare/rate-limits/example.json and api-writes.json), operator-facing management surface documentation with wrangler and dashboard flows (TAC-3702, guide), and the drift-audit runner realisation in the cf-edge fixture (TAC-3703, src/drift-audit-runner.mjs). Four Node-only probes under blueprints/edge-cloudflare-rate-limiting/contributions/probes/: manifest-presence (AC-10001-1/AC-10801-1 under SIMULATE_MANIFEST_MISSING), manifest-schema-validate (AC-10601-1; SIMULATE_SCHEMA_INVALID negative), event-secrecy (AC-10701-1; SIMULATE_EVENT_LEAK_IP negative) and real-account-burst-and-429 (AC-10201-1; accountBound: true, records accountBoundSkipped without CI_HAS_CLOUDFLARE_ACCOUNT per ruling 6). Blueprint README, guide, docs/topics.md, CHANGELOG; shelf-wide topics.md sweep adding the edge-cloudflare-rate-limiting row across every prior blueprint's docs/topics.md; section 6a edgeRateLimit row on packages/rcf-lite/docs/blueprint-authoring.md. Repo chain: REQ-100..104, US-10001, 10101, 10201, 10301, 10401, 10601, 10701, 10801, TS-130..137 plus TCs, FBS-120, CN-380, TAC-3701..3703, ADR-3701..3704 minted via rcf define create --id per HQ round-6 T-6 reserved-block ruling 2026-09-07. Base commit origin/main 5a22ca6.",
+  "dependsOnFbsIds": []
+}

package/rcf/requirements/req-029.json

@@ -0,0 +1,57 @@
+{
+  "createdAt": "2026-09-07T09:09:31.207Z",
+  "updatedAt": "2026-09-07T09:09:31.236Z",
+  "description": "T-0 track of the ratified Cloudflare round 6 spec (2026-09-06 section 5.0). The rcf-lite shelf bumps the deploy-cloudflare-workers blueprint from v1.1.0 to v1.2.0 with an additive-minor delta that blesses the Workers-with-static-assets shape as the SPA-on-Workers deploy shape. The blueprint gains two new REQ contributions (deploy-cloudflare-workers-REQ-013 for the Workers-with-static-assets shape and deploy-cloudflare-workers-REQ-014 for the SPA fallback discipline via run_worker_first), three new US contributions in the existing 12xx band (deploy-cloudflare-workers-US-12113 SPA-on-Workers deploy; deploy-cloudflare-workers-US-12114 assets-directory elicitation; deploy-cloudflare-workers-US-12115 migrate-from-Pages guidance), one new ADR contribution (ADR-1306-deploy-cloudflare-workers-spa-shape carrying the verbatim Cloudflare Pages landing-page recommendation, standardsTraceClause Cloudflare Pages landing-page recommendation 2026-09-06, recommendedDefault true), one new source-tree scan probe module (assets-manifest-scan.mjs, accountBound false, anchorAcId matching the assetsBlockEmitted AC) that parses the applied fixture wrangler.toml and asserts the [assets] block presence, the run_worker_first presence and absence of any Pages-only pages_build_output_dir field, and two new elicited parameters on blueprint.json elicits[] (assets-directory kind string default empty for the bare-Worker shape; run-worker-first kind boolean default false). The shipped v1.1.0 contribution set (REQs 001 through 012, USs 12101 through 12112, TACs 1301 through 1306, ADRs 1301 through 1305, deploymentTarget global topic, suggestedCompanions logging and errorHandling) carries through unchanged. No capability minted, no new global topic, no runtime dependency added. Ships packages/rcf-lite/test/fixtures/cf-platform/ as the shared sample-app fixture that T-1 through T-3 and T-5 extend. HQ sequential chain-id block: REQ-029 / US-2901 / US-2902 / TS-073 / TS-074 / FBS-063 / CN-209 minted via --id after HQ round-4 T-5 landed at REQ-028 and Dex round-5 T-3 landed at REQ-042 per HQ mid-flight ruling on repo-chain id blocks per train.",
+  "category": "functional",
+  "domain": "deploy",
+  "priority": "must",
+  "reqId": "REQ-029",
+  "prdId": "PRD-001",
+  "title": "The rcf-lite shelf bumps the deploy-cloudflare-workers blueprint from v1.1.0 to v1.2.0 with an additive-minor delta that blesses the Workers-with-static-assets shape and ships the cf-platform shared sample-app fixture",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-07T09:09:31.235Z",
+    "signals": [
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      }
+    ]
+  }
+}

package/rcf/requirements/req-030.json

@@ -0,0 +1,67 @@
+{
+  "createdAt": "2026-09-07T09:09:31.409Z",
+  "updatedAt": "2026-09-07T09:09:31.438Z",
+  "description": "T-0 SPA fallback discipline half of the Cloudflare round 6 T-0 delta (2026-09-06 section 5.0). The blueprint gains one new REQ contribution (deploy-cloudflare-workers-REQ-014 SPA fallback discipline via elicited run_worker_first: when true, the Worker script runs before asset lookup for arbitrary routing; when false or unanswered, static asset lookup runs first and the Worker handles only unmatched paths), one new US contribution (deploy-cloudflare-workers-US-12115 migrate-from-Pages guidance in the guide section) that links the Cloudflare migrate-from-Pages guide from the ADR-1306 verbatim landing-page quote, one new elicit (run-worker-first kind boolean default false; the spec's intended when-predicate {elicitedNonEmpty: [assets-directory]} is NOT shipped this round because the loader's supported when block only accepts requiresCapability arrays per src/blueprint/loader.js validateElicits, and the elicit fires unconditionally with the guide teaching that a non-empty assets-directory is what makes run_worker_first meaningful; the loader extension is captured under CONCERNS on the PR, not blocking T-0). The T-0 probe module assets-manifest-scan.mjs anchors AC-2902-1 (the spaFallbackShape canonical AC) via a Node-only source-tree scan of the applied fixture wrangler.toml. The one new ADR ADR-1306-deploy-cloudflare-workers-spa-shape carries the verbatim Cloudflare Pages landing-page quote (Workers supports most Pages use cases and offers a broader feature set. It is Cloudflare's primary platform for building applications. Start new projects with Workers.), standardsTraceClause Cloudflare Pages landing-page recommendation 2026-09-06, recommendedDefault true. HQ sequential chain-id block: REQ-030 / US-3001 / TS-075 minted via --id.",
+  "category": "functional",
+  "domain": "deploy",
+  "priority": "must",
+  "reqId": "REQ-030",
+  "prdId": "PRD-001",
+  "title": "T-0 SPA fallback discipline via run_worker_first elicit and migrate-from-Pages guidance on deploy-cloudflare-workers v1.2.0",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-07T09:09:31.437Z",
+    "signals": [
+      {
+        "source": "title",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "Page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      }
+    ]
+  }
+}