rcf-lite 0.26.0 → 0.28.0

package/rcf/test-suites/ts-188.json

@@ -0,0 +1,166 @@
+{
+  "createdAt": "2026-09-16T15:27:35Z",
+  "updatedAt": "2026-09-17T01:30:00Z",
+  "purpose": "Cover AC-15601-1 (rcf feedback preview renders each pending entry as the title and body that would be filed, lists the destination, and prints the redaction ledger over the full eight-rule vocabulary), AC-15601-2 (preview marks residual-secret findings so the operator sees before consenting; the submit half of AC-15601-2 lands with slice 4), AC-15601-3 (preview never mutates the stored entries.jsonl), AC-15601-4 (a final whole-text residual-secret pass on the fully rendered and normalised issue body and each bundle refuses submit on any hit) and AC-15701-1 (a stable 12-hex fingerprint is attached per entry, folds across blueprint versions when the anchor+class match, and falls back to normalised-title tokens with a warning when the anchor is absent).",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15601-1",
+    "AC-15601-2",
+    "AC-15601-3",
+    "AC-15601-4",
+    "AC-15701-1"
+  ],
+  "id": "TS-188",
+  "usId": "US-15601",
+  "title": "Slice 2 (FBS-181): rcf feedback preview renders redacted issue text, surfaces residual-secret markers, leaves the store byte-invariant, and attaches a stable fingerprint",
+  "testCases": [
+    {
+      "id": "TC-188-preview-renders-full-vocabulary-ledger",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 via the CLI test: --json emits titleRendered, bodyRendered, destination { repo, visibility } and a ledger whose rule names include project-root, absolute-path, email, hostname, private-ip, secret-token, operator-identity and size-shape; the rendered body carries none of the raw secret substrings, no private IP, no operator-name tokens, no em-dash, and stays under the byte cap.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-preview.test.js::AC-15601-1: rcf feedback preview --json emits rendered title, body, destination and full-vocabulary ledger"
+    },
+    {
+      "id": "TC-188-preview-residual-secret-refusal",
+      "acId": "AC-15601-2",
+      "description": "Cover AC-15601-2 (preview half) via the CLI test: an obfuscated token embedded in a longer identifier is caught by the second-pass residual check and surfaced with the residual-secret marker on that entry, while a clean entry reports residual: []. The submit half of the AC lands with slice 4 once the submit path exists.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-preview.test.js::AC-15601-2: preview surfaces a residual-secret line so the agent can rewrite before submit"
+    },
+    {
+      "id": "TC-188-preview-store-byte-invariant",
+      "acId": "AC-15601-3",
+      "description": "Cover AC-15601-3 via the CLI test: sha-256 of .rcf/feedback/entries.jsonl is invariant across two preview runs (text + --json).",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-preview.test.js::AC-15601-3: preview never mutates the stored entries.jsonl (sha-256 invariant)"
+    },
+    {
+      "id": "TC-188-preview-fingerprint-folds-across-entries",
+      "acId": "AC-15701-1",
+      "description": "Cover AC-15701-1 via the CLI test: two entries with the same kind, targetKey, anchor and symptomClass yield identical fingerprints.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-preview.test.js::AC-15701-1: preview attaches a stable fingerprint per entry and it does not shift across blueprint versions"
+    },
+    {
+      "id": "TC-188-preview-fingerprint-fallback-warns",
+      "acId": "AC-15701-1",
+      "description": "Cover AC-15701-1 (fallback arm) via the CLI test: an entry with no anchor triggers the fingerprintFallback flag in --json and a warning banner in text mode so the agent learns to supply an anchor.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-preview.test.js::AC-15701-1 (fallback): missing anchor triggers the fingerprintFallback flag and a warning banner in text mode"
+    },
+    {
+      "id": "TC-188-redact-eight-rule-corpus",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fixture corpus for the redactor's rule vocabulary) via the unit test: every rule name in the design section 5 ledger (project-root, absolute-path, email, hostname, private-ip, secret-token, operator-identity, size-shape) fires against the corresponding fixture and the ledger is deterministic across two calls.",
+      "status": "pending",
+      "testPointer": "test/feedback/redact.test.js::redact rule 1: project root becomes <project> and paths under it keep their tail"
+    },
+    {
+      "id": "TC-188-fingerprint-canonical-input",
+      "acId": "AC-15701-1",
+      "description": "Cover AC-15701-1 (canonical input) via the unit test: fingerprintInput uses <kind>|<targetKey>|<anchor>|<symptomClass>, upper-cases the anchor, excludes blueprint version, and switches to the <kind>|<targetKey>|<symptomClass>|<normalisedTitle> fallback when the anchor is absent.",
+      "status": "pending",
+      "testPointer": "test/feedback/fingerprint.test.js::missing anchor uses the title-fallback canonical input"
+    },
+    {
+      "id": "TC-188-render-fingerprint-twin-and-labels",
+      "acId": "AC-15701-1",
+      "description": "Cover AC-15701-1 (render surface) via the unit test: renderIssue writes the fingerprint twice (visible line and HTML comment) and requests the six-label bootstrap subset for the entry's severity and kind.",
+      "status": "pending",
+      "testPointer": "test/feedback/render.test.js::renderIssue body carries the fingerprint twice and the Environment table"
+    },
+    {
+      "id": "TC-188-safeguard-whole-text-residual",
+      "acId": "AC-15601-4",
+      "description": "Cover AC-15601-4 (safeguard, per-entry) via the unit test: findResidualSecrets detects a multiline PEM shape in a rendered-body-shaped string, which a per-line scan could not see. Binds the whole-text/multiline shape of the residual pass introduced in fix round 2 (R-P0-2 root fix + defence).",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-2.test.js::AC-15601-4 safeguard: whole-text residual scan detects a multiline PEM in the rendered surface"
+    },
+    {
+      "id": "TC-188-safeguard-submit-refuses-residual",
+      "acId": "AC-15601-4",
+      "description": "Cover AC-15601-4 (safeguard, submit half) via the CLI test: an entry whose stealth token slips the first-pass but is caught by the loose-pattern residual scan in the rendered body causes submit --yes --dry-run to exit 3 (entry stays pending; no create/comment path runs).",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-2.test.js::AC-15601-4 safeguard: submit refuses (exit 3) when a title-embedded token survives to the rendered body"
+    },
+    {
+      "id": "TC-188-vocab-shared-constant",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 4, F-P0-A) via the unit test: SECRET_KEY_VOCABULARY carries every shortname the HQ gate probes named as leaking (pw, pwd, pass, key, auth) and its regex source is right-bounded at a word edge so `keyword` and `authors` do not fold.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-A (round 4): SECRET_KEY_VOCABULARY carries every shortname the HQ gate probes named as leaking"
+    },
+    {
+      "id": "TC-188-vocab-shortname-probes",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 4, F-P0-A) via the probe suite: each of the ten HQ-gate leak inputs (pw=, pwd=, pass=, key=, auth= plus quoted / tab / caps / hyphen / JSON variants) folds under the kv-secret pass and leaves nothing on the residual scan.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-A (round 4): all ten shortname kv probes fold cleanly and leave nothing residual"
+    },
+    {
+      "id": "TC-188-vocab-keyword-authors-negative",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 4, F-P0-A negative case) via the unit test: keyword=X and authors=X are NOT folded (right-bound word-edge guard on the vocabulary alternation) so false-positive redactions do not swallow benign prose.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-A (round 4): keyword and authors kv pairs are NOT folded by the right-bound word-edge guard"
+    },
+    {
+      "id": "TC-188-url-credential-webhook",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 4, F-P0-B) via the unit test: rule 9 (url-credential) folds the Slack webhook path segment to <url-credential> before the rule-4 hostname pass folds the host to <host>, so a webhook URL in prose loses the token but keeps the surrounding text intact.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-B (round 4): Slack webhook path is folded before hostname folding (P07 from the gate)"
+    },
+    {
+      "id": "TC-188-url-credential-userinfo",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 4, F-P0-B) via the unit test: user:pass@host userinfo is dropped by rule 9 so the rule-4 hostname pass still sees a well-formed URL and folds a non-allowlisted host to <host>. The credential does not leak on the wire.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-B (round 4): userinfo (user:pass@host) is dropped and the host still folds via rule 4"
+    },
+    {
+      "id": "TC-188-url-credential-query",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 4, F-P0-B) via the unit test: URL query parameters whose name matches the shared vocabulary (`?token=`, `?api_key=`) or the presigned-URL set (`?X-Amz-Signature=`) have their values folded to <url-credential>, and a benign allowlisted URL (github.com/foo/bar) has no url-credential ledger row.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-B (round 4): presigned URL query parameter value is redacted"
+    },
+    {
+      "id": "TC-188-safeguard-shortname-webhook",
+      "acId": "AC-15601-4",
+      "description": "Cover AC-15601-4 (fix round 4, safeguard) via the unit test: findResidualSecrets catches both a shortname-key kv shape (pw=...) and a webhook-path shape (/services/.../ or /api/webhooks/.../) in one pass, proving the safeguard shares the same vocabulary as the first-pass redactor.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-A/B (round 4): findResidualSecrets catches shortname kv AND webhook-path shapes in one pass"
+    },
+    {
+      "id": "TC-188-dryrun-writes-nothing",
+      "acId": "AC-15601-4",
+      "description": "Cover AC-15601-4 (fix round 4, F-01, design R3c) via the CLI test: `rcf feedback submit --yes --dry-run` writes no files under .rcf/feedback/outbox/ even for the unresolved-destination and whole-destination-fallback branches (previously the dry-run gate on the create/comment path let the bundle write run unconditionally).",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-01 (round 4, R3c): submit --dry-run --yes writes no outbox bundle for an unresolved destination"
+    },
+    {
+      "id": "TC-188-r4-separator-probes",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 5, F-05, design amendment R4) via the unit test: every re-gate R4 probe (markdown table pipes, whitespace runs, tabs, hyphens, em-dashes, HTML numeric entities, prose is / was / set to bridges, arrows) folds a vocabulary key labelling a value-shape token, the raw value never survives, and the residual scan is clean.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-5.test.js::F-05 (round 5, R4): every re-gate R4 probe folds under the primary pass and leaves nothing residual"
+    },
+    {
+      "id": "TC-188-r4-residual-safeguard",
+      "acId": "AC-15601-4",
+      "description": "Cover AC-15601-4 (fix round 5, R4 safeguard) via the unit test: findResidualSecrets flags a raw R4 shape (markdown table, prose bridge, HTML entity, em-dash separator) as kv-secret-r4 so submit refuses fail-closed on any R4 leak the first-pass missed.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-5.test.js::F-05 (round 5, R4): findResidualSecrets flags a raw R4 shape as kv-secret-r4"
+    },
+    {
+      "id": "TC-188-r4-overredaction-guard",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 5, R4 negative case) via the unit test: ordinary prose that carries a vocabulary word (`the password field is required`, `the password is required`, `see commit abc1234 at HEAD`, `keyword=abcdef`, `authors=joe,jane`) does NOT fold because the value-shape gate rejects single-class values and values under 8 characters.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-5.test.js::F-05 (round 5, R4 guard): a vocabulary word in ordinary prose (single-class value, or short value) does NOT fold"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-189.json

@@ -0,0 +1,38 @@
+{
+  "createdAt": "2026-09-16T16:20:01Z",
+  "updatedAt": "2026-09-16T16:20:01Z",
+  "purpose": "Cover AC-15801-1 (library.json:issues object snapshotted onto rcf/blueprint-libraries.json:entries[] as issuesRepo and issuesVisibility on rcf library add; the review-on-add card prints the Feedback destination line naming repo and visibility), AC-15801-2 (destination.resolve walks entry -> manifest -> registry issuesRepo, falls back to sourceRef derivation for github URLs with derived:true, returns unresolved when neither is available; shelf and core route to Stravica/rcf-lite) and AC-15801-3 (rcf doctor --check feedback-destinations lists every registered library with no resolvable destination as a warn-only row with refusedByFix:true; exit stays 0).",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15801-1",
+    "AC-15801-2",
+    "AC-15801-3"
+  ],
+  "id": "TS-189",
+  "usId": "US-15801",
+  "title": "Slice 3 (FBS-182): library.json issues field snapshotted on library add, destination resolver walks the manifest/registry chain, and rcf doctor feedback-destinations warns on libraries with no resolvable destination",
+  "testCases": [
+    {
+      "id": "TC-189-library-add-snapshots-issues-and-prints-review-line",
+      "acId": "AC-15801-1",
+      "description": "Cover AC-15801-1 via the CLI test: a library.json with an issues object of { repo, visibility: 'private' } is added to a fresh project; rcf/blueprint-libraries.json carries issuesRepo and issuesVisibility on the entry, the review-on-add stdout matches 'Feedback destination: OWNER/REPO (private)', and a second library without an issues field neither prints the line nor writes the fields on the registry entry.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-destinations.test.js::AC-15801-1: library.json issues is snapshotted onto the registry entry and the review card prints the Feedback destination line"
+    },
+    {
+      "id": "TC-189-resolver-four-fixture-walk",
+      "acId": "AC-15801-2",
+      "description": "Cover AC-15801-2 via the unit test: destination.resolve returns the expected shape for each of the four fixture cases from the AC given: a shelf blueprint routes to CORE_REPO with derived:false; a library entry with explicit issues wins over derivation and reports source: library-manifest; a library entry with no issues but a github git+https sourceRef derives OWNER/REPO with derived:true and source: sourceRef-derivation; a library entry with neither issues nor a github source returns unresolved with reason no-github-source; a library entry that is completely absent returns unresolved with reason unknown-target.",
+      "status": "pending",
+      "testPointer": "test/feedback/destination.test.js::AC-15801-2 shelf fixture: a blueprint with no libraryPrefix routes to CORE_REPO"
+    },
+    {
+      "id": "TC-189-doctor-feedback-destinations-warn-only",
+      "acId": "AC-15801-3",
+      "description": "Cover AC-15801-3 via the CLI test: rcf doctor --check feedback-destinations --json against a project with two registered libraries (one with issues, one without) returns exactly one drift row of item unresolved-library naming the second library, whose message includes the publisher.contact from the registry entry and whose refusedByFix flag is true; the overall doctor exit code stays 0 because the check is warn-only.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-destinations.test.js::AC-15801-3: rcf doctor --check feedback-destinations warns on a library without a resolvable destination and exits 0"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-190.json

@@ -0,0 +1,30 @@
+{
+  "createdAt": "2026-09-16T16:20:01Z",
+  "updatedAt": "2026-09-16T16:20:01Z",
+  "purpose": "Cover AC-15802-1 (rcf feedback preview on a shelf blueprint entry prints Stravica/rcf-lite as the destination and the CORE_REPO constant is pinned to packages/rcf-lite/package.json:bugs.url) and AC-15802-2 (a --kind core entry routes to Stravica/rcf-lite regardless of any library manifest content, including a library that names 'define validate' as a target).",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15802-1",
+    "AC-15802-2"
+  ],
+  "id": "TS-190",
+  "usId": "US-15802",
+  "title": "Slice 3 (FBS-182): shelf blueprints and --kind core entries route to Stravica/rcf-lite via the package.json:bugs.url constant",
+  "testCases": [
+    {
+      "id": "TC-190-core-repo-pinned-to-bugs-url",
+      "acId": "AC-15802-1",
+      "description": "Cover AC-15802-1 via the unit test: CORE_REPO equals parseBugsRepo(package.json), which today is Stravica/rcf-lite; the parser accepts the bare URL, the URL with the /issues suffix and the object form { bugs: { url } } so a rename ripples through the single package.json field.",
+      "status": "pending",
+      "testPointer": "test/feedback/destination.test.js::AC-15802-1: CORE_REPO is pinned to packages/rcf-lite/package.json:bugs.url"
+    },
+    {
+      "id": "TC-190-core-kind-ignores-library-manifest-content",
+      "acId": "AC-15802-2",
+      "description": "Cover AC-15802-2 via the CLI test: a project with a registered library that declares a good issuesRepo, followed by a rcf feedback add --kind core --target 'define validate' entry; rcf feedback preview --json reports destination.repo Stravica/rcf-lite (kind: core, visibility: public) for that entry, ignoring the library declaration entirely.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-destinations.test.js::AC-15802-1: rcf feedback preview prints Stravica/rcf-lite (public) as the destination for a --kind core entry, and no library manifest content overrides it"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-191.json

@@ -0,0 +1,51 @@
+{
+  "createdAt": "2026-09-16T17:23:12Z",
+  "updatedAt": "2026-09-16T17:23:12Z",
+  "purpose": "Cover AC-15701-2 (submit calls gh search + create/comment per the zero/one/many hit table) and AC-15701-3 (search unavailable falls through to create with dedupe: unchecked; closed-state hit stamps a previously reported reference into the create body). Slice 4 arm of US-15701.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15701-2",
+    "AC-15701-3"
+  ],
+  "id": "TS-191",
+  "usId": "US-15701",
+  "title": "Slice 4 (FBS-183): dedupe search folds zero/one/many hits into create or +1 comment; search unavailable falls through with dedupe: unchecked and closed hits stamp a previously reported reference",
+  "testCases": [
+    {
+      "id": "TC-191-submit-zero-hit-creates",
+      "acId": "AC-15701-2",
+      "description": "Cover AC-15701-2 (zero-hit arm) via the CLI test: with the configurable gh fake returning { matches: [] }, submit --yes calls ghIssueCreate for each entry and stamps dedupe: new.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15901-1: submit --yes with zero-hit search creates each entry, marks submitted, prints URL"
+    },
+    {
+      "id": "TC-191-submit-one-hit-comments",
+      "acId": "AC-15701-2",
+      "description": "Cover AC-15701-2 (one-hit arm) via the CLI test: with matches returning one issue, submit calls ghIssueComment on that number and no ghIssueCreate.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15701-2: one-hit search calls gh issue comment on that number"
+    },
+    {
+      "id": "TC-191-submit-many-hit-comment-lowest",
+      "acId": "AC-15701-2",
+      "description": "Cover AC-15701-2 (many-hit arm) via the CLI test: with three matches returning numbers 30/12/47, submit comments on #12 (lowest) and the body mentions #30 and #47.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15701-2: many-hit search comments on the lowest number and names the others"
+    },
+    {
+      "id": "TC-191-submit-search-unchecked",
+      "acId": "AC-15701-3",
+      "description": "Cover AC-15701-3 (search failure arm) via the CLI test: with search returning { error: 'search-unavailable' }, submit falls through to create and stamps dedupe: unchecked on the entry state.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15701-3: search error falls through to create with dedupe:unchecked"
+    },
+    {
+      "id": "TC-191-submit-closed-reference",
+      "acId": "AC-15701-3",
+      "description": "Cover AC-15701-3 (closed-hit arm) via the CLI test: with open search empty and closed search returning #88, submit creates a new issue whose body carries 'Previously reported and closed as #88'.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15701-3: closed-state hit produces a create with previously reported reference"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-192.json

@@ -0,0 +1,37 @@
+{
+  "createdAt": "2026-09-16T17:23:12Z",
+  "updatedAt": "2026-09-16T17:23:12Z",
+  "purpose": "Cover AC-15901-1 (submit --yes files entries under the ambient gh login, stamps submitted with issueUrl and dedupe, prints one line per entry, exit 0) and AC-15901-2 (submit without --yes on a non-TTY exits 2 naming --yes; env passed to gh has no synthesised GH_TOKEN or GITHUB_TOKEN key).",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15901-1",
+    "AC-15901-2"
+  ],
+  "id": "TS-192",
+  "usId": "US-15901",
+  "title": "Slice 4 (FBS-183): submit --yes files under the reporter's ambient gh login and refuses on a non-TTY without --yes; the CLI never synthesises GH_TOKEN or GITHUB_TOKEN",
+  "testCases": [
+    {
+      "id": "TC-192-submit-yes-happy-path",
+      "acId": "AC-15901-1",
+      "description": "Cover AC-15901-1 via the CLI test: two pending entries, zero-hit search, distinct URLs returned; both entries fold to status submitted with issueUrl and dedupe: new; stdout carries two '<id> -> <url> (new)' lines.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15901-1: submit --yes with zero-hit search creates each entry, marks submitted, prints URL"
+    },
+    {
+      "id": "TC-192-submit-refuses-without-yes",
+      "acId": "AC-15901-2",
+      "description": "Cover AC-15901-2 (refusal arm) via the CLI test: submit without --yes on a non-TTY child exits 2, stderr names --yes as required, and no gh call is made.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15901-2: submit without --yes on a non-TTY exits 2, names --yes, no gh call is made"
+    },
+    {
+      "id": "TC-192-submit-no-token-synthesised",
+      "acId": "AC-15901-2",
+      "description": "Cover AC-15901-2 (env arm) via the CLI test: launch with a stripped env (no GH_TOKEN, no GITHUB_TOKEN); the fake ghIssueCreate call records ghToken:null and githubToken:null so the CLI never synthesised either.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15901-2: the CLI does not synthesise GH_TOKEN or GITHUB_TOKEN before calling gh"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-193.json

@@ -0,0 +1,60 @@
+{
+  "createdAt": "2026-09-16T17:23:12Z",
+  "updatedAt": "2026-09-16T17:23:12Z",
+  "purpose": "Cover AC-15902-1 (label pre-check drops labels the destination repo does not carry and stamps droppedLabels[] on the entry state), AC-15902-2 (scripts/bootstrap-feedback-labels.mjs idempotently creates the six labels), AC-15902-3 (rendered issue title carries the prefix and the body carries the fingerprint on its own line and inside an HTML comment) and AC-15902-4 (the six-label catalogue is exported from src/feedback/labels.js and a grep test refuses bare literals for these names outside the allowed consumers).",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15902-1",
+    "AC-15902-2",
+    "AC-15902-3",
+    "AC-15902-4"
+  ],
+  "id": "TS-193",
+  "usId": "US-15902",
+  "title": "Slice 4 (FBS-183): label pre-check + bootstrap script + title/fingerprint handles + label-catalogue single-source guard",
+  "testCases": [
+    {
+      "id": "TC-193-label-precheck-drops-missing",
+      "acId": "AC-15902-1",
+      "description": "Cover AC-15902-1 via the CLI test: the fake labelList returns { rcf-feedback, severity:major } but not area:core; submit creates the issue with the reduced label set and stamps droppedLabels: ['area:core'] on the entry state.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15902-1: submit drops labels the destination does not carry and records droppedLabels"
+    },
+    {
+      "id": "TC-193-bootstrap-creates-six",
+      "acId": "AC-15902-2",
+      "description": "Cover AC-15902-2 (first run) via the unit test: with the fake labelList returning names:[], the bootstrap script creates all six labels via ghLabelCreate with descriptions and colours.",
+      "status": "pending",
+      "testPointer": "test/feedback/bootstrap-labels.test.js::AC-15902-2: bootstrap creates every missing label on the first run"
+    },
+    {
+      "id": "TC-193-bootstrap-idempotent-full",
+      "acId": "AC-15902-2",
+      "description": "Cover AC-15902-2 (idempotency) via the unit test: with the fake labelList returning every catalogue label, the bootstrap script makes zero ghLabelCreate calls.",
+      "status": "pending",
+      "testPointer": "test/feedback/bootstrap-labels.test.js::AC-15902-2: bootstrap makes zero create calls when every label is already present"
+    },
+    {
+      "id": "TC-193-bootstrap-partial-subset",
+      "acId": "AC-15902-2",
+      "description": "Cover AC-15902-2 (partial arm) via the unit test: with only two of the six labels present, the bootstrap script creates the missing four (area:blueprint, area:core, severity:major, severity:minor).",
+      "status": "pending",
+      "testPointer": "test/feedback/bootstrap-labels.test.js::AC-15902-2: bootstrap creates only the missing subset (partial second run)"
+    },
+    {
+      "id": "TC-193-title-prefix-and-fingerprint-twin",
+      "acId": "AC-15902-3",
+      "description": "Cover AC-15902-3 via the CLI test: the ghIssueCreate call sees a title starting with [rcf-lite] and a body carrying the fingerprint on its own line and inside an HTML comment (asserted end-to-end in the render unit test at test/feedback/render.test.js and reasserted at submit time here).",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15902-3: rendered title prefix and body fingerprint twin are on the create call"
+    },
+    {
+      "id": "TC-193-labels-catalogue-single-source",
+      "acId": "AC-15902-4",
+      "description": "Cover AC-15902-4 via the unit test: FEEDBACK_LABELS is the six-label frozen catalogue exported from src/feedback/labels.js, and a scanner walks src/, scripts/, bin/ refusing any bare literal for these names outside labels.js, its tests, the bootstrap script and render.js's re-export shim.",
+      "status": "pending",
+      "testPointer": "test/feedback/labels-catalogue.test.js::AC-15902-4: no bare literal for any catalogue label appears outside labels.js and its allowed consumers"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-194.json

@@ -0,0 +1,67 @@
+{
+  "createdAt": "2026-09-16T17:23:12Z",
+  "updatedAt": "2026-09-16T17:23:12Z",
+  "purpose": "Cover AC-16001-1 (four preflight branches each routing to a bundle with a distinct one-line message), AC-16001-2 (create/comment failure retries once without labels and then bundles that entry, other entries continue, exit 0 when every entry ended submitted or bundled), AC-16001-3 (bundled entries are terminal for the ask loop: list default hides them, list --all reports status bundled, submit picks up only pending entries on a subsequent run), and AC-16001-4 (destination unresolved case writes an unresolved-slug bundle with publisher contact on the same line as the outbox path, no gh call for that entry, exit 0).",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-16001-1",
+    "AC-16001-2",
+    "AC-16001-3",
+    "AC-16001-4"
+  ],
+  "id": "TS-194",
+  "usId": "US-16001",
+  "title": "Slice 4 (FBS-183): four preflight cases + retry-then-bundle + terminal bundled entries + unresolved-destination bundle",
+  "testCases": [
+    {
+      "id": "TC-194-preflight-gh-missing",
+      "acId": "AC-16001-1",
+      "description": "Cover AC-16001-1 case (1) via the CLI test: onPath fake returns { present: false }; the entry lands in .rcf/feedback/outbox/<ISO>-stravica-rcf-lite[-<id>].md; the bundle Reason not filed line names gh; stdout carries the outbox path and the issues/new URL on one line; entry state is bundled; exit 0.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-16001-1a: gh missing on PATH routes to bundle"
+    },
+    {
+      "id": "TC-194-preflight-auth-off",
+      "acId": "AC-16001-1",
+      "description": "Cover AC-16001-1 case (2) via the CLI test: auth fake returns { authed: false }; bundle reason names 'run gh auth login'; entry state is bundled; exit 0.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-16001-1b: gh auth status non-zero routes to bundle"
+    },
+    {
+      "id": "TC-194-preflight-private-none",
+      "acId": "AC-16001-1",
+      "description": "Cover AC-16001-1 case (3) via the CLI test: repoView returns visibility PRIVATE and viewerPermission NONE; bundle reason names 'no access to private repo'; exit 0.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-16001-1c: private repo with viewerPermission NONE routes to bundle"
+    },
+    {
+      "id": "TC-194-preflight-issues-disabled",
+      "acId": "AC-16001-1",
+      "description": "Cover AC-16001-1 case (4) via the CLI test: repoView returns hasIssuesEnabled false; bundle reason names 'issues are disabled on <repo>'; exit 0.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-16001-1d: hasIssuesEnabled false routes to bundle"
+    },
+    {
+      "id": "TC-194-retry-without-labels-then-bundle",
+      "acId": "AC-16001-2",
+      "description": "Cover AC-16001-2 via the CLI test: create fake returns ratelimit twice for entry A, twice for entry B, then success for entry C; A and B end bundled, C ends submitted; two bundle files under outbox (one per bundled entry); exit 0.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-16001-2: create 429 retries without labels, still fails, bundles that entry; another submits"
+    },
+    {
+      "id": "TC-194-bundled-terminal-for-ask",
+      "acId": "AC-16001-3",
+      "description": "Cover AC-16001-3 via the CLI test: after a preflight-forced bundle for entry X, list --json (default pending) omits X; list --all --json includes X with status bundled; a subsequent submit --yes with a working fake only creates for the still-pending entry (bundled entries are terminal, not re-picked-up).",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-16001-3: list default hides bundled; submit <id> re-attempts one bundled entry"
+    },
+    {
+      "id": "TC-194-unresolved-destination-bundle",
+      "acId": "AC-16001-4",
+      "description": "Cover AC-16001-4 via the CLI test: an applied library whose registry entry carries neither issuesRepo nor a derivable github source, plus publisher.contact 'orphan-owners@example.com'; submit writes .rcf/feedback/outbox/<ISO>-unresolved[-<id>].md, prints publisher.contact on the same line as the outbox path, makes no gh create/comment/search call for that entry, entry state is bundled, exit 0.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-16001-4: unresolved destination writes an unresolved-slug bundle with publisher contact, no gh call"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-195.json

@@ -0,0 +1,52 @@
+{
+  "createdAt": "2026-09-16T19:20:00Z",
+  "updatedAt": "2026-09-16T19:20:00Z",
+  "purpose": "Cover AC-16101-1 (shouldAsk applies the design-3.5 quiet rule: silent unless not-opted-out + pending + not-asked-this-session + stop-hook-inactive AND one of ask-now/older-than-quietMinutes/queue-complete/carried-over), AC-16101-2 (Stop on Claude Code exits 2 with the ask on stderr; Stop on Codex emits { decision: 'block', reason } on stdout with exit 0; the asked ledger is appended in both cases) and AC-16101-3 (a same-session second Stop is silent, a fresh session_id re-asks, and a Stop with stop_hook_active is silent even on a fresh session).",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-16101-1",
+    "AC-16101-2",
+    "AC-16101-3"
+  ],
+  "id": "TS-195",
+  "usId": "US-16101",
+  "title": "Slice 5 (FBS-184): quiet-rule truth table plus per-harness Stop emit and same-session ledger idempotency",
+  "testCases": [
+    {
+      "id": "TC-195-quiet-rule-truth-table",
+      "acId": "AC-16101-1",
+      "description": "Cover AC-16101-1 via the unit test: shouldAsk is total, deterministic and pure; a table walks opt-out (file/env), pending count, asked-this-session, stop-hook-active, ask-now, age-vs-quietMinutes (14 min: silent; 15 min: ask; 60 min: ask; quietMinutes 0/60 boundaries), queue-complete and carried-over rows and asserts the expected 'ask'/'silent' verdict on each; buildAskReason names all four next-step verbs and the do-not-ask clause.",
+      "status": "pending",
+      "testPointer": "test/feedback/hook-quiet-rule.test.js::AC-16101-1: shouldAsk is ask when the newest pending entry crosses quietMinutes"
+    },
+    {
+      "id": "TC-195-hook-stop-claude-code",
+      "acId": "AC-16101-2",
+      "description": "Cover AC-16101-2 (Claude Code half) via the CLI test: rcf feedback hook stop --harness claude-code with one pending entry and a mock Stop payload exits 2, writes the reason (all four verbs + do-not-ask) to stderr, writes nothing on stdout, and appends exactly one asked record to .rcf/feedback/state.json for the payload session_id.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-hook.test.js::AC-16101-2: Stop on Claude Code exits 2 with the ask on stderr and appends ledger"
+    },
+    {
+      "id": "TC-195-hook-stop-codex",
+      "acId": "AC-16101-2",
+      "description": "Cover AC-16101-2 (Codex half) via the CLI test: rcf feedback hook stop --harness codex emits stdout JSON parseable as { decision: 'block', reason: <same clause> }, exits 0, writes nothing on stderr, and appends exactly one asked record to state.json for the payload session_id.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-hook.test.js::AC-16101-2: Stop on Codex emits stdout JSON block, exit 0, ledger appended"
+    },
+    {
+      "id": "TC-195-hook-same-session-silent-then-fresh-reasks",
+      "acId": "AC-16101-3",
+      "description": "Cover AC-16101-3 via the CLI test: two Stop invocations with the same session_id in sequence produce ask (exit 2) then silent (exit 0, no stderr); a third invocation with a fresh session_id re-asks (exit 2) because the pending entry is carried over; state.json ends with exactly two asked records for the two distinct sessionIds.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-hook.test.js::AC-16101-3: same-session second Stop is silent; a fresh session_id re-asks"
+    },
+    {
+      "id": "TC-195-hook-stop-hook-active-silent",
+      "acId": "AC-16101-3",
+      "description": "Cover AC-16101-3 (stop_hook_active branch) via the CLI test: a Stop payload with stop_hook_active: true and a fresh session_id and a pending --ask-now entry still exits 0 with no reason emitted; the loop-guard fires even when every other trigger would.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-hook.test.js::AC-16101-3: Stop with stop_hook_active is silent even on a fresh session"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-196.json

@@ -0,0 +1,58 @@
+{
+  "createdAt": "2026-09-16T19:20:00Z",
+  "updatedAt": "2026-09-16T19:20:00Z",
+  "purpose": "Cover AC-16102-1 (rcf feedback opt-out writes rcf/feedback-settings.json ask: false with the defaults merged, the hook returns silent under ask: false, and add/preview keep working) and AC-16102-2 (RCF_FEEDBACK_DISABLE=1 makes add a no-op that prints 'feedback disabled by env' and writes nothing; RCF_FEEDBACK_ASK=0 silences the hook while leaving add working; precedence order env DISABLE > env ASK=0 > file ask false > file ask true).",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-16102-1",
+    "AC-16102-2"
+  ],
+  "id": "TS-196",
+  "usId": "US-16102",
+  "title": "Slice 5 (FBS-184): rcf feedback opt-out / opt-in write ask false / true; env DISABLE and env ASK override the file with the documented precedence",
+  "testCases": [
+    {
+      "id": "TC-196-optout-writes-settings-and-silences-hook",
+      "acId": "AC-16102-1",
+      "description": "Cover AC-16102-1 via the CLI test: rcf feedback opt-out on a fresh project writes rcf/feedback-settings.json with { settingsVersion: 1, ask: false, quietMinutes: 15, redaction: { allowHosts: [] } }; a subsequent Stop hook on a pending --ask-now entry exits 0 silently; add and preview keep working under ask: false.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-opt-out.test.js::AC-16102-1: opt-out writes ask: false and preserves defaults; the hook goes silent"
+    },
+    {
+      "id": "TC-196-optin-restores-ask-true",
+      "acId": "AC-16102-1",
+      "description": "Cover AC-16102-1 (round-trip) via the CLI test: rcf feedback opt-in after an opt-out flips ask back to true and preserves quietMinutes and redaction.allowHosts on the file.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-opt-out.test.js::AC-16102-1: opt-in restores ask true and preserves other fields"
+    },
+    {
+      "id": "TC-196-env-disable-no-ops-add",
+      "acId": "AC-16102-2",
+      "description": "Cover AC-16102-2 (DISABLE branch) via the CLI test: rcf feedback add under RCF_FEEDBACK_DISABLE=1 prints exactly 'feedback disabled by env' on stdout, exits 0 and writes nothing under .rcf/feedback/.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-opt-out.test.js::AC-16102-2: RCF_FEEDBACK_DISABLE=1 makes `add` a no-op that prints the disabled line"
+    },
+    {
+      "id": "TC-196-env-ask-silences-hook-only",
+      "acId": "AC-16102-2",
+      "description": "Cover AC-16102-2 (ASK=0 branch) via the CLI test: with ask: true on the file, rcf feedback add works normally; rcf feedback hook stop under RCF_FEEDBACK_ASK=0 exits 0 silently on a pending --ask-now entry.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-opt-out.test.js::AC-16102-2: RCF_FEEDBACK_ASK=0 keeps add working, silences the hook"
+    },
+    {
+      "id": "TC-196-precedence-order",
+      "acId": "AC-16102-2",
+      "description": "Cover AC-16102-2 (precedence) via the CLI test: the same fixture with a pending --ask-now entry walks four combinations (no-env + file ask:true -> ask; file ask:false -> silent; file ask:true + env ASK=0 -> silent; env DISABLE -> silent) so the documented env-DISABLE > env-ASK > file precedence is asserted end-to-end.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-opt-out.test.js::AC-16102-2: env DISABLE > env ASK=0 > file ask false > file ask true (precedence)"
+    },
+    {
+      "id": "TC-196-status-reports-optout-source",
+      "acId": "AC-16102-2",
+      "description": "Cover AC-16102-2 (surfacing) via the CLI test: rcf feedback status --json reports optOutSource='file:rcf/feedback-settings.json' after opt-out; the same JSON call under env ASK=0 reports optOutSource='env:RCF_FEEDBACK_ASK=0'; under env DISABLE it reports 'env:RCF_FEEDBACK_DISABLE'.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-opt-out.test.js::AC-16102-2: status reports the opt-out source verbatim"
+    }
+  ],
+  "status": "draft"
+}