rcf-lite 0.28.2 → 0.29.0

package/rcf/code-nodes/cn-730.json

@@ -0,0 +1,24 @@
+{
+  "cnId": "CN-730",
+  "path": "test/cli/readiness.test.js",
+  "title": "CLI tests for rcf define readiness",
+  "description": "Covers AC-17501-5 (text output, --json emission, --check exit codes), AC-17502-7 (byte-stable rcf/ tree across a readiness run) and AC-17503-1..9 (default exits 0 + both verdict lines; --level intent exits 4 iff PO fails; --level build exits 4 iff readyToBuild is false, with warn lines emitted; --check all unchanged; --persona filters text and does not change exit; unknown values exit 2; --json --level intent carries _meta.level; text report groups PO before engineer with persona in detail lines; parameterised exit matrix).",
+  "implementsAcIds": [
+    "AC-17501-5",
+    "AC-17502-7",
+    "AC-17503-1",
+    "AC-17503-2",
+    "AC-17503-3",
+    "AC-17503-4",
+    "AC-17503-5",
+    "AC-17503-6",
+    "AC-17503-7",
+    "AC-17503-8",
+    "AC-17503-9"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-24T14:30:00Z",
+  "updatedAt": "2026-10-01T16:00:00Z"
+}

package/rcf/code-nodes/cn-731.json

@@ -0,0 +1,20 @@
+{
+  "cnId": "CN-731",
+  "path": "test/cli/freeze.test.js",
+  "title": "CLI tests for rcf define freeze",
+  "description": "Covers AC-17601-1..6 and AC-17601-8: happy freeze, refusal on failing D1, --ack on D3/D5/D6 only, section 2.5 summary line, --status is read-only, admissibility refusal is informational, and the readiness CLI stage header + CHANGELOG line no longer use ' -- '.",
+  "implementsAcIds": [
+    "AC-17601-1",
+    "AC-17601-2",
+    "AC-17601-3",
+    "AC-17601-4",
+    "AC-17601-5",
+    "AC-17601-6",
+    "AC-17601-8"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-24T16:33:15Z",
+  "updatedAt": "2026-09-24T16:33:15Z"
+}

package/rcf/code-nodes/cn-732.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-732",
+  "path": "test/define/freeze-record.test.js",
+  "title": "Extension tests for freeze-record override-nullable-required contract",
+  "description": "Covers AC-17601-7: validateFreezeRecord requires override (nullable), loadFreezeRecord defaults a missing override key to null, saveFreezeRecord refuses to write a body without override.",
+  "implementsAcIds": [
+    "AC-17601-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-24T16:33:15Z",
+  "updatedAt": "2026-09-24T16:33:15Z"
+}

package/rcf/code-nodes/cn-733.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-733",
+  "path": "src/setup/identity-seed.js",
+  "title": "Identity-seed template with the ## Surface section",
+  "description": "IDENTITY_TEMPLATE carries a ## Surface section between ## Register and ## Project-scoped notes naming viewer / runningApp / prDiff, seeded to prDiff so a fresh rcf init project satisfies checkD1Brief profile:surface marker without operator edit. writeIdentityTemplate keeps the slice-1 kept contract: an existing profile.md is left byte-identical.",
+  "implementsAcIds": [
+    "AC-17401-10"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-01T13:22:37Z",
+  "updatedAt": "2026-10-01T13:22:37Z"
+}

package/rcf/code-nodes/cn-734.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-734",
+  "path": "test/setup/identity-register.test.js",
+  "title": "Identity-seed Surface section tests",
+  "description": "Covers AC-17401-10: ## Surface heading placement; three value names + prDiff default; writeIdentityTemplate on a fresh dir seeds a profile that satisfies checkD1Brief surfaceMarkers; existing profile.md with no ## Surface is left byte-identical.",
+  "implementsAcIds": [
+    "AC-17401-10"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-01T13:22:37Z",
+  "updatedAt": "2026-10-01T13:22:37Z"
+}

package/rcf/code-nodes/cn-735.json

@@ -0,0 +1,20 @@
+{
+  "cnId": "CN-735",
+  "path": "src/view/readiness.js",
+  "title": "Readiness tab panel renderer",
+  "description": "renderReadinessPanel(result, { profile, freezeRecord }) returns the eleven ordered blocks of spec section 5 for the Readiness tab: tree line, two verdict pills with formatVerdictLines labels, two per-persona next-action lines, D1..D8 state chips, blockers grouped by persona (register orders the pair; the non-register group collapses with its count visible, never omitted), delta list, per-stage check detail, coverage tree-vs-delta, decisions outstanding, Freeze now control (enabled iff levels.readyToBuild.ok), freeze record. Pure: no I/O, no recompute. pickRegister helper mirrors the CLI's contract.",
+  "implementsAcIds": [
+    "AC-18001-1",
+    "AC-18001-2",
+    "AC-18001-3",
+    "AC-18001-4",
+    "AC-18001-5",
+    "AC-18001-6",
+    "AC-18001-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-01T18:00:00Z",
+  "updatedAt": "2026-10-01T18:00:00Z"
+}

package/rcf/code-nodes/cn-736.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-736",
+  "path": "src/view/components/pill.js",
+  "title": "Shared pill component",
+  "description": "pill({ value, variant, title?, href? }) emits one markup shape across every vocabulary family (gate state, level verdict, persona, AC class) with class suffixes derived from a normalised value. Pure.",
+  "implementsAcIds": [
+    "AC-18101-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-01T18:00:00Z",
+  "updatedAt": "2026-10-01T18:00:00Z"
+}

package/rcf/code-nodes/cn-737.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-737",
+  "path": "src/view/components/findings-list.js",
+  "title": "Shared findings-list component",
+  "description": "findingsList({ heading, count, items }) emits a heading plus an id-anchor list with per-id why strings; ids are capped at 20 and the tail becomes a `... N more suppressed` line. Pure.",
+  "implementsAcIds": [
+    "AC-18101-2"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-01T18:00:00Z",
+  "updatedAt": "2026-10-01T18:00:00Z"
+}

package/rcf/code-nodes/cn-738.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-738",
+  "path": "src/view/components/diff.js",
+  "title": "Shared document-level diff component",
+  "description": "diff(before, after) renders a two-column before-and-after of two document bodies for the Readiness delta list. 0.29.0 ships document-level only; criterion-level before-and-after is deferred per ADR-4127. Pure.",
+  "implementsAcIds": [
+    "AC-18101-3"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-01T18:00:00Z",
+  "updatedAt": "2026-10-01T18:00:00Z"
+}

package/rcf/code-nodes/cn-739.json

@@ -0,0 +1,18 @@
+{
+  "cnId": "CN-739",
+  "path": "src/view/build-dag.js",
+  "title": "Build/DAG sub-tab pure renderer",
+  "description": "Pure HTML-string renderer for the Build tab's DAG sub-tab: `buildDagLayout(fbsItems, buildableIds)` projects `dependsOnFbsIds` into depth columns, `buildOrder` row ordering, upstream/downstream closures, longest-chain critical path and the no-in-no-out unconnected lane; `renderBuildDag({ layout, inspectorPayload })` emits the toolbar, canvas (HTML button nodes + inline SVG edges with cubic paths and arrowheads) and inspector shell. `buildDagInspectorPayload(layout)` builds the one-row-per-FBS payload (status, area, size, order, AC count, direct and transitive needs/waits, meta) that rides on the inspector shell as `data-rcf-dag-inspector-data` per the PR 1 contract. Cycles are excluded from the depth layout and surfaced as `cycleIds` for the toolbar finding (AC-204-6); the renderer never emits a `postMessage` call (AC-204-7).",
+  "implementsAcIds": [
+    "AC-204-1",
+    "AC-204-2",
+    "AC-204-3",
+    "AC-204-6",
+    "AC-204-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-02T19:00:00Z",
+  "updatedAt": "2026-10-02T19:00:00Z"
+}

package/rcf/code-nodes/cn-740.json

@@ -0,0 +1,19 @@
+{
+  "cnId": "CN-740",
+  "path": "src/view/page-init.js",
+  "title": "Build/DAG client wiring (page-init DAG seam)",
+  "description": "`wireBuildDag` and its helpers wire the Build/DAG sub-tab in the browser: `parseDagInspectorPayload` reads the `data-rcf-dag-inspector-data` attribute off the inspector shell (never an inline <script>), click handlers on `.rcf-dag-node` run `selectDagNode` which sets `data-rcf-dag-sel`, auto-presses Show-unconnected when the node is unconnected, outlines upstream/downstream closures via `data-rcf-dag-role` attributes and renders the inspector body from the payload. Filter chips (status, area, Buildable-now, Critical-path, Show-unconnected) run `applyDagFilters` which keeps the current selection intact (AC-204-5). `buildHashFragment` writes `#tab=build&sub=dag&entity=<id>` and `currentDagHashExtras` preserves non-DAG hash params through DAG writes; `applyBuildHash` restores the selection, auto-presses Show-unconnected when the restored node is unconnected and scrolls the node into view (AC-204-4). `renderDagInspector` lists status, area, AC count, size, buildOrder, buildable-now, Needs (direct and transitive total) and Waits (direct and transitive total) with an Open-in-Specs link that moves to `#tab=build&sub=specs&entity=<id>` (AC-204-3).",
+  "implementsAcIds": [
+    "AC-204-2",
+    "AC-204-3",
+    "AC-204-4",
+    "AC-204-5"
+  ],
+  "dependencies": [
+    "CN-739"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-02T19:00:00Z",
+  "updatedAt": "2026-10-02T19:00:00Z"
+}

package/rcf/code-nodes/cn-741.json

@@ -0,0 +1,16 @@
+{
+  "cnId": "CN-741",
+  "path": "src/view/view-index.js",
+  "title": "ID lookup pure projection + rank helper",
+  "description": "`buildViewIndex(model)` projects a BuiltTreeModel into one row per PRD/REQ/US/TAD/TAC/ADR/BS/FBS/TS plus one row per AC under each US, each `{ id, kind, title, snippet, parent, tab }`; `snippet` is the kind-specific prose field whitespace-collapsed and capped at 110 chars; `tab` is the viewer tab that owns the id. `serialiseViewIndex(model)` returns the exact JSON string the server serves (so Content-Length matches). `rankLookupRows(query, rows)` implements the design doc section 6 ranking: single-char id-only, otherwise id first (exact / prefix / contains), then every word must match title or snippet, title weighted above snippet, stable on ties by id, 20-result cap. This is the pure projection the server renders into `./index.json` on every rewalk (AC-205-1 to AC-205-3).",
+  "implementsAcIds": [
+    "AC-205-1",
+    "AC-205-2",
+    "AC-205-3"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-03T00:00:00Z"
+}

package/rcf/code-nodes/cn-742.json

@@ -0,0 +1,16 @@
+{
+  "cnId": "CN-742",
+  "path": "src/server/routes.js",
+  "title": "GET /index.json route for the viewer ID lookup",
+  "description": "`GET /index.json` returns the server-side ID index as `application/json; charset=utf-8` with `cache-control: no-store`. The handler reads `state.indexJson` (snapshotted per rewalk from `renderModelToPage().indexJson` so bytes match Content-Length) and never touches disk; before the first walk it 503s with `view server initialising`. The route is release-noted (PR 1 relative-script policy, wespa reverse-proxy allow-list adds it before the version pin bump) and is the fourth release-noted viewer route after `./page-init.js` (AC-205-1).",
+  "implementsAcIds": [
+    "AC-205-1"
+  ],
+  "dependencies": [
+    "CN-741"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-03T00:00:00Z"
+}

package/rcf/code-nodes/cn-743.json

@@ -0,0 +1,15 @@
+{
+  "cnId": "CN-743",
+  "path": "src/view/html-page.js",
+  "title": "SearchButton + LookupModal shell markup",
+  "description": "`renderSearchButton()` emits a `<button data-rcf-search>` inside the shell `<div class=\"tools\">` to the right of the tabstrip, carrying the Cmd/Ctrl+F mnemonic on `aria-label` + `title`. `renderLookupModal()` emits the modal shell once in the shell outside `#rcf-live-content` so the SSE innerHTML swap never blows it away: `<aside role=\"dialog\" aria-modal=\"true\" aria-labelledby=...>` with `<section>`, `<header>`, labelled `<input>`, aria-live status region, `<ul role=\"listbox\">` results, empty-state block and `Reload index` affordance. No `<div>` tags inside the modal, so the Phase 3.8 D13a shell invariant (`lastIndexOf(\"</div>\")` resolves to the live-content wrapper close) stays intact (AC-205-1, AC-205-7).",
+  "implementsAcIds": [
+    "AC-205-1",
+    "AC-205-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-03T00:00:00Z"
+}

package/rcf/code-nodes/cn-744.json

@@ -0,0 +1,22 @@
+{
+  "cnId": "CN-744",
+  "path": "src/view/page-init.js",
+  "title": "wireLookup client (ID lookup wiring)",
+  "description": "`wireLookup` lazily XHR-fetches `./index.json` on first modal open, refetches once when `window.__rcfLookupDirty` is set by live-client (SSE tree-update), ranks via a mirror of `rankLookupRows`, cycles the active row with Up / Down, picks with Enter and closes with Esc. The Router's `resolveHash` honours `?tab=&entity=` at mount so a landed URL (`?tab=requirements&entity=US-304`) opens the same position at first paint without the LookupModal (AC-205-5). Pick writes `#tab=<tab>&entity=<id>` via `writeHash` so `?embed=` and `?theme=` survive (PR 1 contract); the Router's hashchange listener activates the tab, opens ancestor DocRows and flashes the target. Cmd/Ctrl+F opens the modal from any tab; Cmd/Ctrl+Shift+F is deliberately NOT intercepted so the browser find still works. Marks every id / title / snippet substring hit by a query word (`<mark>`, escaped). Empty state shows `The index could not be loaded.` + `Reload index` on fetch failure; never calls `postMessage`, never writes to localStorage / sessionStorage / document.cookie, and never makes an outbound fetch other than `./index.json` (AC-205-4, AC-205-6, AC-205-7, AC-205-8).",
+  "implementsAcIds": [
+    "AC-205-4",
+    "AC-205-5",
+    "AC-205-6",
+    "AC-205-7",
+    "AC-205-8"
+  ],
+  "dependencies": [
+    "CN-741",
+    "CN-742",
+    "CN-743"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-03T00:00:00Z"
+}

package/rcf/code-nodes/cn-745.json

@@ -0,0 +1,16 @@
+{
+  "cnId": "CN-745",
+  "path": "src/view/live-client.js",
+  "title": "SSE tree-update dirties the ID lookup cache",
+  "description": "On every SSE `tree-update` event, live-client sets `window.__rcfLookupDirty = true`. `wireLookup` reads this flag on the next modal open and refetches `./index.json` once, then clears it. This keeps the modal consistent with the live walker without polling (AC-205-4).",
+  "implementsAcIds": [
+    "AC-205-4"
+  ],
+  "dependencies": [
+    "CN-744"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-03T00:00:00Z"
+}

package/rcf/code-nodes/cn-746.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-746",
+  "path": "src/view/readiness/question-adapter.js",
+  "title": "Readiness PO question adapter: feature-detected questions source + source-span grouping",
+  "description": "`toQuestions(readiness)` is the pure projection the Readiness PO layer reads. `preferReadinessQuestions(readiness)` feature-detects the DEFINE step 3 PR 2 `computeQuestions` output on `readiness.questions`: when present, the adapter reads from there, using `groups[]` labels and the per-question `heading` / `ask` / `hint` with phrasebook fallback per field; the group label falls back to a conservative sourceSpan prose when no `sourceSpanLabel` is given. Otherwise the adapter reads `personas.productOwner.blockers`, groups by source span (brief:<n>, REQ-N, or a plain stage label) and fills asks from the phrasebook. One source of truth for the PO ask text; nothing is fabricated that is not on the tree (AC-18002-1).",
+  "implementsAcIds": [
+    "AC-18002-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:30:00Z",
+  "updatedAt": "2026-10-03T09:30:00Z"
+}

package/rcf/code-nodes/cn-747.json

@@ -0,0 +1,18 @@
+{
+  "cnId": "CN-747",
+  "path": "src/view/readiness/po-layer.js",
+  "title": "Readiness PO layer: VerdictCards, QuestionCards grouped by source span, intent-complete empty state, For-engineers DocRow",
+  "description": "`renderReadinessPO(readiness, { persona, engineerBody })` emits the PO layer HTML: two equal-height VerdictCards (intent-complete and ready-to-build) with the chain term muted beside each plain label; one QuestionCard group per source span sourced from `toQuestions(readiness)`; a `data-rcf-empty=\"yes\"` block that renders the verbatim `formatVerdictLines(readiness).intentComplete` string when `questions[]` is empty and both levels are ok (AC-18002-2); the Requirements-that-still-need-work table; and the For-engineers DocRow that wraps the engineer rendering, closed under productOwner / unstated and open under engineer, with the data preserved in the DOM in every register (AC-18002-3). Stamps `data-rcf-source=\"readiness.questions\"` on the questions block when the real compute shape is live (AC-18002-1).",
+  "implementsAcIds": [
+    "AC-18002-1",
+    "AC-18002-2",
+    "AC-18002-3"
+  ],
+  "dependencies": [
+    "CN-746"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:30:00Z",
+  "updatedAt": "2026-10-03T09:30:00Z"
+}

package/rcf/code-nodes/cn-748.json

@@ -0,0 +1,16 @@
+{
+  "cnId": "CN-748",
+  "path": "src/view/readiness.js",
+  "title": "renderReadinessPanel wraps the PO layer around the engineer body and picks the register from profile.md",
+  "description": "`renderReadinessPanel(result, { profileText })` picks the register from `profile.md` (productOwner | engineer | unstated), renders the engineer body (the pre-PR-8 Readiness rendering: tree line, CLI verdict lines, next-action-per-persona, D1..D8 chips, PO + Engineer blocker groups, delta/diff) once, and hands it to `renderReadinessPO` as `engineerBody`. The engineer body is never removed from the DOM; `renderReadinessPO` is what folds it into the For-engineers DocRow and decides open/closed per register (AC-18002-3).",
+  "implementsAcIds": [
+    "AC-18002-3"
+  ],
+  "dependencies": [
+    "CN-747"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:30:00Z",
+  "updatedAt": "2026-10-03T09:30:00Z"
+}

package/rcf/code-nodes/cn-749.json

@@ -0,0 +1,16 @@
+{
+  "cnId": "CN-749",
+  "path": "src/view/index.js",
+  "title": "View bootstrap attaches computeQuestions output to readiness so the adapter feature-detects the real shape",
+  "description": "After `computeReadiness` returns, the view bootstrap calls `computeQuestions(readiness, { tree, ledgers, profileText, persona: 'productOwner' })` and merges the result's `questions`, `groups`, `optional` and `engineer` fields onto the readiness object before it reaches `renderPage`. `preferReadinessQuestions` then returns true and `fromReadinessQuestions` reads the real `computeQuestions` output rather than falling back to the blockers path (AC-18002-1). The phrasebook stays available as the per-field fallback when a question carries no `ask` / `hint` of its own.",
+  "implementsAcIds": [
+    "AC-18002-1"
+  ],
+  "dependencies": [
+    "CN-746"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:30:00Z",
+  "updatedAt": "2026-10-03T09:30:00Z"
+}

package/rcf/code-nodes/cn-750.json

@@ -0,0 +1,15 @@
+{
+  "cnId": "CN-750",
+  "path": "src/view/test-host/fixture.js",
+  "title": "Wespa host fixture page: 56px header, resizable sidebar, iframe mounted at ./?embed=1&theme=light with no inline script",
+  "description": "`renderTestHostPage()` returns the host-fixture HTML as a pure string: HTML5 doctype, lang='en-GB', a 56px wespa-header carrying the Light/Dark toggle buttons, a resizable sidebar shell (data-rcf-host-sidebar + drag handle) and a content pane carrying `<iframe id=\"rcf-test-host-iframe\" src=\"./?embed=1&amp;theme=light\">`. The fixture ships no inline `<script>` body (CSP-friendly, consistent with the PR 1 contract); its client-side wiring lives at /test-host.js (served via /test-host.js when the test-host route is enabled). The fixture does not persist theme or sidebar width to localStorage (ADR-4136): a passing run has to flip the iframe through the postMessage path, which is the invariant the fixture pins. Proves AC-206-1 (shell + iframe src + no inline script) and underwrites AC-206-6 (no outbound postMessage shape beyond the embed-client's single rcf-view-theme post).",
+  "implementsAcIds": [
+    "AC-206-1",
+    "AC-206-6"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:55:00Z",
+  "updatedAt": "2026-10-03T09:55:00Z"
+}

package/rcf/code-nodes/cn-751.json

@@ -0,0 +1,18 @@
+{
+  "cnId": "CN-751",
+  "path": "src/view/test-host/embed-client.js",
+  "title": "Wespa host fixture client: theme postMessage, sidebar drag + collapse/expand, same-origin message target",
+  "description": "Classic (non-module) browser script served at /test-host.js when the test-host route is on. Three fixture behaviours: (a) the theme toggle posts `{ type: 'rcf-view-theme', theme }` to `iframe.contentWindow`, targeting `window.location.origin` so a cross-origin receiver would refuse the message (underwrites AC-206-4 together with the viewer's own origin check in page-init.js); (b) the sidebar drag handle sets `--wespa-sidebar-width` on the <main> grid, clamped to 64..400 px live; (c) collapse/expand snaps the sidebar between 64 px and 200 px. Reads the iframe's `data-theme` attribute as evidence of the postMessage round-trip (AC-206-2). After the iframe's hash-only navigation, `data-embed` and the search string carry embed=1 and the theme, which the live-proof script captures (AC-206-3). The host does not read event.origin (the viewer does) and does not persist theme to localStorage (ADR-4136 invariant).",
+  "implementsAcIds": [
+    "AC-206-2",
+    "AC-206-3",
+    "AC-206-4"
+  ],
+  "dependencies": [
+    "CN-750"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:55:00Z",
+  "updatedAt": "2026-10-03T09:55:00Z"
+}

package/rcf/code-nodes/cn-752.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-752",
+  "path": "src/view/test-host/lints.js",
+  "title": "Three embedding lints: framing headers, target=_top, localStorage namespace",
+  "description": "Three pure assertions callable by any test harness; test/view/wespa-host-fixture.test.js is the suite caller. (1) `assertFramingHeaders(response)` refuses on `X-Frame-Options` or on CSP `frame-ancestors` forbidding same-origin, and accepts `frame-ancestors 'self'`. (2) `assertNoTargetTop(renderedHtml)` greps for `target=\"_top\"` / `target='_top'` / `target=_top` and refuses on any match; returns `{ ok, count }`. (3) `assertLocalStorageNamespace(sourceTreeRoot)` walks every .js file under `src/view/**` (excluding vendored and .min.js) and asserts every `localStorage.*` / `sessionStorage.*` / shared `storage.*` call site uses a key literal starting with `rcf-view:v1:` or a constant resolving to that prefix. Together they pin AC-206-5 against regressions.",
+  "implementsAcIds": [
+    "AC-206-5"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:55:00Z",
+  "updatedAt": "2026-10-03T09:55:00Z"
+}

package/rcf/fbs/fbs-190.json

@@ -0,0 +1,37 @@
+{
+  "fbsId": "FBS-190",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 190,
+  "executionStatus": "complete",
+  "title": "Product Map tab on the review surface",
+  "summary": "Deliver REQ-170: a new \"Product Map\" tab with five groupings (shape, status filter, component-first, trace coverage, capability) drilling group -> REQ -> US -> AC, hash-addressable.",
+  "approach": "Add a product-map tab to src/view/html-page.js after Build sequence. Extend inline script TAB list. Write src/view/product-map.js: pure bucketing over the BuiltTreeModel, one function per grouping, returning {buckets, unclassifiedCount} shapes the renderer consumes. Reuse the existing detailsWrap/renderReq helpers so REQ blocks match the Requirements tab. Deep-link hash pattern #tab=product-map&group=<g>&status=<s> handled by extending resolveHash + status filter client-side.",
+  "acIds": [
+    "AC-17001-1",
+    "AC-17001-2",
+    "AC-17002-1",
+    "AC-17003-1",
+    "AC-17004-1",
+    "AC-17005-1"
+  ],
+  "dependsOnFbsIds": [],
+  "contextRequirements": {
+    "tacIds": [],
+    "adrIds": []
+  },
+  "deliverables": [
+    "src/view/product-map.js: pure bucketing (groupByShape, groupByComponent, groupByTraceCoverage, groupByCapability)",
+    "src/view/html-page.js: fifth tab wired, panel renderer, inline script TAB list extended, status filter handling",
+    "test/view/product-map.test.js: 5 grouping tests + status filter + hash routing shape",
+    "test/view/fixtures/phase-3-6-static.html: regenerated baseline (product-map tab is a whitelisted additive delta)",
+    "test/view/tabs.test.js: expect the fifth tab in order"
+  ],
+  "riskLevel": "low",
+  "domain": "reviewSurface",
+  "estimatedSize": "medium",
+  "estimatedHours": 8,
+  "notes": "No schema changes. Capability grouping consumes REQ.tags[] convention (FBS-191 populates the data).",
+  "createdAt": "2026-09-21T17:00:00.000Z",
+  "updatedAt": "2026-09-21T17:00:00.000Z"
+}

package/rcf/fbs/fbs-191.json

@@ -0,0 +1,34 @@
+{
+  "fbsId": "FBS-191",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 191,
+  "executionStatus": "complete",
+  "title": "Capability tag convention: taxonomy + dogfood application",
+  "summary": "Deliver REQ-171: tag every dogfood REQ with at least one capability:<slug> tag, document the taxonomy and the rule for adding a new capability.",
+  "approach": "Author a compact taxonomy (10-12 slugs) derived from the actual REQ set, hand-map each of the 103 dogfood REQs (or via a small offline script commit-editing the tags[] arrays), and add a capability-tags.md doc linked from docs/README.md.",
+  "acIds": [
+    "AC-17101-1",
+    "AC-17102-1"
+  ],
+  "dependsOnFbsIds": [
+    "FBS-190"
+  ],
+  "contextRequirements": {
+    "tacIds": [],
+    "adrIds": []
+  },
+  "deliverables": [
+    "packages/rcf-lite/rcf/requirements/*.json: every REQ has >= 1 capability:<slug> tag",
+    "packages/rcf-lite/docs/capability-tags.md: the taxonomy and the rule",
+    "packages/rcf-lite/docs/README.md: link to capability-tags.md",
+    "test/view/product-map.test.js: capability grouping assertion runs on real data"
+  ],
+  "riskLevel": "low",
+  "domain": "reviewSurface",
+  "estimatedSize": "small",
+  "estimatedHours": 3,
+  "notes": "A classifier verb (rcf discover req-capability-classify) is a follow-up, not part of this PR.",
+  "createdAt": "2026-09-21T17:00:00.000Z",
+  "updatedAt": "2026-09-21T17:00:00.000Z"
+}

package/rcf/fbs/fbs-192.json

@@ -0,0 +1,17 @@
+{
+  "createdAt": "2026-09-21T19:43:56.521Z",
+  "updatedAt": "2026-09-21T19:44:37.430Z",
+  "acIds": [
+    "AC-17006-1",
+    "AC-17007-1"
+  ],
+  "fbsId": "FBS-192",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 192,
+  "executionStatus": "complete",
+  "title": "Product Map UX rescue pass",
+  "summary": "Turn the Product Map from function-emitted to usable-every-day: sticky styled controls, collapsed-by-default buckets, jump-nav, per-status mini counts, hash-encoded open buckets, live-refresh persistence via stable data-doc-id, and a lazy first-load payload that ships only bucket-heading skeletons.",
+  "dependsOnFbsIds": [],
+  "approach": "Restyle pm-controls with the viewer indigo/rounded tokens. Wrap each bucket in <details class=\"pm-bucket\"> with a summary carrying label + count + per-status mini pills. Emit a pm-jump-nav chip row per grouping. Extend the hash schema to carry &open=<bucketIds>. Suppress raw-JSON disclosures inside pm-req cards via a suppressRawJson flag on renderReq/renderUserStory. Add a /product-map/<name> partial endpoint; the client fetches groupings on demand and invalidates the cache on every SSE swap."
+}

package/rcf/fbs/fbs-193.json

@@ -0,0 +1,37 @@
+{
+  "createdAt": "2026-09-22T11:59:39Z",
+  "updatedAt": "2026-09-22T15:00:00Z",
+  "acIds": [
+    "AC-17008-1"
+  ],
+  "fbsId": "FBS-193",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 193,
+  "executionStatus": "complete",
+  "title": "Product Map: blueprint badge and by-blueprint grouping",
+  "summary": "Add a sixth grouping to the Product Map tab: 'By blueprint', with one bucket per applied blueprint plus an Application bucket for the project's own (non-blueprint) requirements. Every REQ row contributed by an applied blueprint carries a compact blueprint badge in every grouping. The by-blueprint bucket's second level is capability, then the usual REQ->US->AC drill-down.",
+  "dependsOnFbsIds": [
+    "FBS-192"
+  ],
+  "approach": "Extend GROUPINGS with 'blueprint'. Read manifest.blueprints[].contributions[] via scope.contributionsForBlueprint as the source of truth for blueprint attribution; fall back to reqId's kebab-slug prefix only when no contributions record is present. Add renderBlueprintGrouping that emits jump-nav + one <details class=pm-bucket> per applied blueprint plus an Application bucket, each carrying a capability sub-heading before its REQ rows. Add a pm-blueprint-badge span into renderReqWrapper (or a wrapping helper) so every grouping's REQ rows render the badge when attributed. Extend inline script PM_GROUPS to include 'blueprint'; renderProductMapPanel adds a blueprint <section>; view/index.js adds a 'blueprint' partial to pmPartials.",
+  "contextRequirements": {
+    "tacIds": [],
+    "adrIds": []
+  },
+  "deliverables": [
+    "src/view/product-map.js: groupByBlueprint, blueprintForReq, renderBlueprintGrouping, badge in renderReqWrapper",
+    "src/view/html-page.js: PM_GROUPS extended, blueprint <section>, group label 'Blueprint'",
+    "src/view/index.js: pmPartials.blueprint",
+    "src/view/style.css: .pm-blueprint-badge token",
+    "test/view/fixtures/blueprint-applied/: fixture project with one applied blueprint (2 contributed REQs) + 2 project REQs",
+    "test/view/product-map.test.js: five tests covering AC-17008-1",
+    "test/view/fixtures/phase-3-6-static.html: regenerated baseline (blueprint grouping is a whitelisted additive delta)",
+    "docs/capability-tags.md, docs/how-it-works.md: short line about the by-blueprint grouping and badge"
+  ],
+  "riskLevel": "low",
+  "domain": "reviewSurface",
+  "estimatedSize": "medium",
+  "estimatedHours": 5,
+  "notes": "No schema change. Uses manifest.blueprints[].contributions[] as truth (project-local); id-prefix fallback only when contributions absent. Dogfood tree applies no blueprints, so the by-blueprint tab shows one Application bucket - fixture proves the multi-bucket path."
+}

package/rcf/fbs/fbs-194.json

@@ -0,0 +1,35 @@
+{
+  "createdAt": "2026-09-24T12:00:00Z",
+  "updatedAt": "2026-09-24T12:00:00Z",
+  "acIds": [
+    "AC-17201-1",
+    "AC-17201-2",
+    "AC-17201-3",
+    "AC-17201-4"
+  ],
+  "fbsId": "FBS-194",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 194,
+  "executionStatus": "complete",
+  "title": "DEFINE slice 1: delta module and freeze record I/O",
+  "summary": "Ship src/query/delta.js (hashDocument, computeTreeHash, computeDelta) and src/define/freeze-record.js (load, save, validate). Export the delta primitives from src/query/index.js. Cover every AC with unit tests in test/query/delta.test.js and test/define/freeze-record.test.js.",
+  "dependsOnFbsIds": [],
+  "approach": "Pure module with SHA-256 over canonical JSON per proposal 2026-09-22 v3 section 2.1 / 2.2. Canonicalise recurses over the parsed value, sorting object keys and stripping whitespace. Tree hash is SHA-256 over the sorted (id, docHash) pairs. Delta enumerates tree.byId once and classifies each id against the freeze docHashes, appending ledger:<name> entries for the sidecars the caller passes. Freeze record I/O treats a missing file as null; a malformed body raises FreezeRecordError with a coded reason and a named field. The writer validates first so a bad in-memory record never lands on disk.",
+  "contextRequirements": {
+    "tacIds": ["TAC-4120-define-delta-and-freeze"],
+    "adrIds": ["ADR-4120-canonical-json-hashing"]
+  },
+  "deliverables": [
+    "src/query/delta.js: canonicaliseJson, hashDocument, computeTreeHash, computeDelta (§2.2 shape)",
+    "src/query/index.js: re-export the four delta primitives",
+    "src/define/freeze-record.js: FREEZE_RECORD_REL_PATH, FreezeRecordError, validateFreezeRecord, loadFreezeRecord, saveFreezeRecord",
+    "test/query/delta.test.js: eleven tests covering AC-17201-1 and AC-17201-2",
+    "test/define/freeze-record.test.js: nine tests covering AC-17201-3 and AC-17201-4"
+  ],
+  "riskLevel": "low",
+  "domain": "defineDetection",
+  "estimatedSize": "small",
+  "estimatedHours": 3,
+  "notes": "Pure module: no filesystem I/O beyond the freeze reader / writer. computeDelta signature and return shape are the contract every later slice reads."
+}