rcf-lite 0.28.4 → 0.29.0

package/rcf/code-nodes/cn-729.json

@@ -8,11 +8,19 @@
     "AC-17501-2",
     "AC-17501-3",
     "AC-17501-4",
-    "AC-17501-6"
+    "AC-17501-6",
+    "AC-17502-1",
+    "AC-17502-2",
+    "AC-17502-3",
+    "AC-17502-4",
+    "AC-17502-5",
+    "AC-17502-6",
+    "AC-17502-7",
+    "AC-17502-8"
   ],
   "dependencies": [],
   "version": "0.1.0",
   "status": "draft",
   "createdAt": "2026-09-24T14:30:00Z",
-  "updatedAt": "2026-09-24T14:30:00Z"
+  "updatedAt": "2026-10-01T14:30:00Z"
 }

package/rcf/code-nodes/cn-730.json

@@ -2,13 +2,23 @@
   "cnId": "CN-730",
   "path": "test/cli/readiness.test.js",
   "title": "CLI tests for rcf define readiness",
-  "description": "Covers AC-17501-5: text output, --json emission, --check exit codes (blocking 4, warn-with-ack 0 with [warn]), admissibility refusal path exit 4.",
+  "description": "Covers AC-17501-5 (text output, --json emission, --check exit codes), AC-17502-7 (byte-stable rcf/ tree across a readiness run) and AC-17503-1..9 (default exits 0 + both verdict lines; --level intent exits 4 iff PO fails; --level build exits 4 iff readyToBuild is false, with warn lines emitted; --check all unchanged; --persona filters text and does not change exit; unknown values exit 2; --json --level intent carries _meta.level; text report groups PO before engineer with persona in detail lines; parameterised exit matrix).",
   "implementsAcIds": [
-    "AC-17501-5"
+    "AC-17501-5",
+    "AC-17502-7",
+    "AC-17503-1",
+    "AC-17503-2",
+    "AC-17503-3",
+    "AC-17503-4",
+    "AC-17503-5",
+    "AC-17503-6",
+    "AC-17503-7",
+    "AC-17503-8",
+    "AC-17503-9"
   ],
   "dependencies": [],
   "version": "0.1.0",
   "status": "draft",
   "createdAt": "2026-09-24T14:30:00Z",
-  "updatedAt": "2026-09-24T14:30:00Z"
+  "updatedAt": "2026-10-01T16:00:00Z"
 }

package/rcf/code-nodes/cn-731.json

@@ -0,0 +1,20 @@
+{
+  "cnId": "CN-731",
+  "path": "test/cli/freeze.test.js",
+  "title": "CLI tests for rcf define freeze",
+  "description": "Covers AC-17601-1..6 and AC-17601-8: happy freeze, refusal on failing D1, --ack on D3/D5/D6 only, section 2.5 summary line, --status is read-only, admissibility refusal is informational, and the readiness CLI stage header + CHANGELOG line no longer use ' -- '.",
+  "implementsAcIds": [
+    "AC-17601-1",
+    "AC-17601-2",
+    "AC-17601-3",
+    "AC-17601-4",
+    "AC-17601-5",
+    "AC-17601-6",
+    "AC-17601-8"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-24T16:33:15Z",
+  "updatedAt": "2026-09-24T16:33:15Z"
+}

package/rcf/code-nodes/cn-732.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-732",
+  "path": "test/define/freeze-record.test.js",
+  "title": "Extension tests for freeze-record override-nullable-required contract",
+  "description": "Covers AC-17601-7: validateFreezeRecord requires override (nullable), loadFreezeRecord defaults a missing override key to null, saveFreezeRecord refuses to write a body without override.",
+  "implementsAcIds": [
+    "AC-17601-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-24T16:33:15Z",
+  "updatedAt": "2026-09-24T16:33:15Z"
+}

package/rcf/code-nodes/cn-733.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-733",
+  "path": "src/setup/identity-seed.js",
+  "title": "Identity-seed template with the ## Surface section",
+  "description": "IDENTITY_TEMPLATE carries a ## Surface section between ## Register and ## Project-scoped notes naming viewer / runningApp / prDiff, seeded to prDiff so a fresh rcf init project satisfies checkD1Brief profile:surface marker without operator edit. writeIdentityTemplate keeps the slice-1 kept contract: an existing profile.md is left byte-identical.",
+  "implementsAcIds": [
+    "AC-17401-10"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-01T13:22:37Z",
+  "updatedAt": "2026-10-01T13:22:37Z"
+}

package/rcf/code-nodes/cn-734.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-734",
+  "path": "test/setup/identity-register.test.js",
+  "title": "Identity-seed Surface section tests",
+  "description": "Covers AC-17401-10: ## Surface heading placement; three value names + prDiff default; writeIdentityTemplate on a fresh dir seeds a profile that satisfies checkD1Brief surfaceMarkers; existing profile.md with no ## Surface is left byte-identical.",
+  "implementsAcIds": [
+    "AC-17401-10"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-01T13:22:37Z",
+  "updatedAt": "2026-10-01T13:22:37Z"
+}

package/rcf/code-nodes/cn-735.json

@@ -0,0 +1,20 @@
+{
+  "cnId": "CN-735",
+  "path": "src/view/readiness.js",
+  "title": "Readiness tab panel renderer",
+  "description": "renderReadinessPanel(result, { profile, freezeRecord }) returns the eleven ordered blocks of spec section 5 for the Readiness tab: tree line, two verdict pills with formatVerdictLines labels, two per-persona next-action lines, D1..D8 state chips, blockers grouped by persona (register orders the pair; the non-register group collapses with its count visible, never omitted), delta list, per-stage check detail, coverage tree-vs-delta, decisions outstanding, Freeze now control (enabled iff levels.readyToBuild.ok), freeze record. Pure: no I/O, no recompute. pickRegister helper mirrors the CLI's contract.",
+  "implementsAcIds": [
+    "AC-18001-1",
+    "AC-18001-2",
+    "AC-18001-3",
+    "AC-18001-4",
+    "AC-18001-5",
+    "AC-18001-6",
+    "AC-18001-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-01T18:00:00Z",
+  "updatedAt": "2026-10-01T18:00:00Z"
+}

package/rcf/code-nodes/cn-736.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-736",
+  "path": "src/view/components/pill.js",
+  "title": "Shared pill component",
+  "description": "pill({ value, variant, title?, href? }) emits one markup shape across every vocabulary family (gate state, level verdict, persona, AC class) with class suffixes derived from a normalised value. Pure.",
+  "implementsAcIds": [
+    "AC-18101-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-01T18:00:00Z",
+  "updatedAt": "2026-10-01T18:00:00Z"
+}

package/rcf/code-nodes/cn-737.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-737",
+  "path": "src/view/components/findings-list.js",
+  "title": "Shared findings-list component",
+  "description": "findingsList({ heading, count, items }) emits a heading plus an id-anchor list with per-id why strings; ids are capped at 20 and the tail becomes a `... N more suppressed` line. Pure.",
+  "implementsAcIds": [
+    "AC-18101-2"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-01T18:00:00Z",
+  "updatedAt": "2026-10-01T18:00:00Z"
+}

package/rcf/code-nodes/cn-738.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-738",
+  "path": "src/view/components/diff.js",
+  "title": "Shared document-level diff component",
+  "description": "diff(before, after) renders a two-column before-and-after of two document bodies for the Readiness delta list. 0.29.0 ships document-level only; criterion-level before-and-after is deferred per ADR-4127. Pure.",
+  "implementsAcIds": [
+    "AC-18101-3"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-01T18:00:00Z",
+  "updatedAt": "2026-10-01T18:00:00Z"
+}

package/rcf/code-nodes/cn-739.json

@@ -0,0 +1,18 @@
+{
+  "cnId": "CN-739",
+  "path": "src/view/build-dag.js",
+  "title": "Build/DAG sub-tab pure renderer",
+  "description": "Pure HTML-string renderer for the Build tab's DAG sub-tab: `buildDagLayout(fbsItems, buildableIds)` projects `dependsOnFbsIds` into depth columns, `buildOrder` row ordering, upstream/downstream closures, longest-chain critical path and the no-in-no-out unconnected lane; `renderBuildDag({ layout, inspectorPayload })` emits the toolbar, canvas (HTML button nodes + inline SVG edges with cubic paths and arrowheads) and inspector shell. `buildDagInspectorPayload(layout)` builds the one-row-per-FBS payload (status, area, size, order, AC count, direct and transitive needs/waits, meta) that rides on the inspector shell as `data-rcf-dag-inspector-data` per the PR 1 contract. Cycles are excluded from the depth layout and surfaced as `cycleIds` for the toolbar finding (AC-204-6); the renderer never emits a `postMessage` call (AC-204-7).",
+  "implementsAcIds": [
+    "AC-204-1",
+    "AC-204-2",
+    "AC-204-3",
+    "AC-204-6",
+    "AC-204-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-02T19:00:00Z",
+  "updatedAt": "2026-10-02T19:00:00Z"
+}

package/rcf/code-nodes/cn-740.json

@@ -0,0 +1,19 @@
+{
+  "cnId": "CN-740",
+  "path": "src/view/page-init.js",
+  "title": "Build/DAG client wiring (page-init DAG seam)",
+  "description": "`wireBuildDag` and its helpers wire the Build/DAG sub-tab in the browser: `parseDagInspectorPayload` reads the `data-rcf-dag-inspector-data` attribute off the inspector shell (never an inline <script>), click handlers on `.rcf-dag-node` run `selectDagNode` which sets `data-rcf-dag-sel`, auto-presses Show-unconnected when the node is unconnected, outlines upstream/downstream closures via `data-rcf-dag-role` attributes and renders the inspector body from the payload. Filter chips (status, area, Buildable-now, Critical-path, Show-unconnected) run `applyDagFilters` which keeps the current selection intact (AC-204-5). `buildHashFragment` writes `#tab=build&sub=dag&entity=<id>` and `currentDagHashExtras` preserves non-DAG hash params through DAG writes; `applyBuildHash` restores the selection, auto-presses Show-unconnected when the restored node is unconnected and scrolls the node into view (AC-204-4). `renderDagInspector` lists status, area, AC count, size, buildOrder, buildable-now, Needs (direct and transitive total) and Waits (direct and transitive total) with an Open-in-Specs link that moves to `#tab=build&sub=specs&entity=<id>` (AC-204-3).",
+  "implementsAcIds": [
+    "AC-204-2",
+    "AC-204-3",
+    "AC-204-4",
+    "AC-204-5"
+  ],
+  "dependencies": [
+    "CN-739"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-02T19:00:00Z",
+  "updatedAt": "2026-10-02T19:00:00Z"
+}

package/rcf/code-nodes/cn-741.json

@@ -0,0 +1,16 @@
+{
+  "cnId": "CN-741",
+  "path": "src/view/view-index.js",
+  "title": "ID lookup pure projection + rank helper",
+  "description": "`buildViewIndex(model)` projects a BuiltTreeModel into one row per PRD/REQ/US/TAD/TAC/ADR/BS/FBS/TS plus one row per AC under each US, each `{ id, kind, title, snippet, parent, tab }`; `snippet` is the kind-specific prose field whitespace-collapsed and capped at 110 chars; `tab` is the viewer tab that owns the id. `serialiseViewIndex(model)` returns the exact JSON string the server serves (so Content-Length matches). `rankLookupRows(query, rows)` implements the design doc section 6 ranking: single-char id-only, otherwise id first (exact / prefix / contains), then every word must match title or snippet, title weighted above snippet, stable on ties by id, 20-result cap. This is the pure projection the server renders into `./index.json` on every rewalk (AC-205-1 to AC-205-3).",
+  "implementsAcIds": [
+    "AC-205-1",
+    "AC-205-2",
+    "AC-205-3"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-03T00:00:00Z"
+}

package/rcf/code-nodes/cn-742.json

@@ -0,0 +1,16 @@
+{
+  "cnId": "CN-742",
+  "path": "src/server/routes.js",
+  "title": "GET /index.json route for the viewer ID lookup",
+  "description": "`GET /index.json` returns the server-side ID index as `application/json; charset=utf-8` with `cache-control: no-store`. The handler reads `state.indexJson` (snapshotted per rewalk from `renderModelToPage().indexJson` so bytes match Content-Length) and never touches disk; before the first walk it 503s with `view server initialising`. The route is release-noted (PR 1 relative-script policy, wespa reverse-proxy allow-list adds it before the version pin bump) and is the fourth release-noted viewer route after `./page-init.js` (AC-205-1).",
+  "implementsAcIds": [
+    "AC-205-1"
+  ],
+  "dependencies": [
+    "CN-741"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-03T00:00:00Z"
+}

package/rcf/code-nodes/cn-743.json

@@ -0,0 +1,15 @@
+{
+  "cnId": "CN-743",
+  "path": "src/view/html-page.js",
+  "title": "SearchButton + LookupModal shell markup",
+  "description": "`renderSearchButton()` emits a `<button data-rcf-search>` inside the shell `<div class=\"tools\">` to the right of the tabstrip, carrying the Cmd/Ctrl+F mnemonic on `aria-label` + `title`. `renderLookupModal()` emits the modal shell once in the shell outside `#rcf-live-content` so the SSE innerHTML swap never blows it away: `<aside role=\"dialog\" aria-modal=\"true\" aria-labelledby=...>` with `<section>`, `<header>`, labelled `<input>`, aria-live status region, `<ul role=\"listbox\">` results, empty-state block and `Reload index` affordance. No `<div>` tags inside the modal, so the Phase 3.8 D13a shell invariant (`lastIndexOf(\"</div>\")` resolves to the live-content wrapper close) stays intact (AC-205-1, AC-205-7).",
+  "implementsAcIds": [
+    "AC-205-1",
+    "AC-205-7"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-03T00:00:00Z"
+}

package/rcf/code-nodes/cn-744.json

@@ -0,0 +1,22 @@
+{
+  "cnId": "CN-744",
+  "path": "src/view/page-init.js",
+  "title": "wireLookup client (ID lookup wiring)",
+  "description": "`wireLookup` lazily XHR-fetches `./index.json` on first modal open, refetches once when `window.__rcfLookupDirty` is set by live-client (SSE tree-update), ranks via a mirror of `rankLookupRows`, cycles the active row with Up / Down, picks with Enter and closes with Esc. The Router's `resolveHash` honours `?tab=&entity=` at mount so a landed URL (`?tab=requirements&entity=US-304`) opens the same position at first paint without the LookupModal (AC-205-5). Pick writes `#tab=<tab>&entity=<id>` via `writeHash` so `?embed=` and `?theme=` survive (PR 1 contract); the Router's hashchange listener activates the tab, opens ancestor DocRows and flashes the target. Cmd/Ctrl+F opens the modal from any tab; Cmd/Ctrl+Shift+F is deliberately NOT intercepted so the browser find still works. Marks every id / title / snippet substring hit by a query word (`<mark>`, escaped). Empty state shows `The index could not be loaded.` + `Reload index` on fetch failure; never calls `postMessage`, never writes to localStorage / sessionStorage / document.cookie, and never makes an outbound fetch other than `./index.json` (AC-205-4, AC-205-6, AC-205-7, AC-205-8).",
+  "implementsAcIds": [
+    "AC-205-4",
+    "AC-205-5",
+    "AC-205-6",
+    "AC-205-7",
+    "AC-205-8"
+  ],
+  "dependencies": [
+    "CN-741",
+    "CN-742",
+    "CN-743"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-03T00:00:00Z"
+}

package/rcf/code-nodes/cn-745.json

@@ -0,0 +1,16 @@
+{
+  "cnId": "CN-745",
+  "path": "src/view/live-client.js",
+  "title": "SSE tree-update dirties the ID lookup cache",
+  "description": "On every SSE `tree-update` event, live-client sets `window.__rcfLookupDirty = true`. `wireLookup` reads this flag on the next modal open and refetches `./index.json` once, then clears it. This keeps the modal consistent with the live walker without polling (AC-205-4).",
+  "implementsAcIds": [
+    "AC-205-4"
+  ],
+  "dependencies": [
+    "CN-744"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-03T00:00:00Z"
+}

package/rcf/code-nodes/cn-746.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-746",
+  "path": "src/view/readiness/question-adapter.js",
+  "title": "Readiness PO question adapter: feature-detected questions source + source-span grouping",
+  "description": "`toQuestions(readiness)` is the pure projection the Readiness PO layer reads. `preferReadinessQuestions(readiness)` feature-detects the DEFINE step 3 PR 2 `computeQuestions` output on `readiness.questions`: when present, the adapter reads from there, using `groups[]` labels and the per-question `heading` / `ask` / `hint` with phrasebook fallback per field; the group label falls back to a conservative sourceSpan prose when no `sourceSpanLabel` is given. Otherwise the adapter reads `personas.productOwner.blockers`, groups by source span (brief:<n>, REQ-N, or a plain stage label) and fills asks from the phrasebook. One source of truth for the PO ask text; nothing is fabricated that is not on the tree (AC-18002-1).",
+  "implementsAcIds": [
+    "AC-18002-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:30:00Z",
+  "updatedAt": "2026-10-03T09:30:00Z"
+}

package/rcf/code-nodes/cn-747.json

@@ -0,0 +1,18 @@
+{
+  "cnId": "CN-747",
+  "path": "src/view/readiness/po-layer.js",
+  "title": "Readiness PO layer: VerdictCards, QuestionCards grouped by source span, intent-complete empty state, For-engineers DocRow",
+  "description": "`renderReadinessPO(readiness, { persona, engineerBody })` emits the PO layer HTML: two equal-height VerdictCards (intent-complete and ready-to-build) with the chain term muted beside each plain label; one QuestionCard group per source span sourced from `toQuestions(readiness)`; a `data-rcf-empty=\"yes\"` block that renders the verbatim `formatVerdictLines(readiness).intentComplete` string when `questions[]` is empty and both levels are ok (AC-18002-2); the Requirements-that-still-need-work table; and the For-engineers DocRow that wraps the engineer rendering, closed under productOwner / unstated and open under engineer, with the data preserved in the DOM in every register (AC-18002-3). Stamps `data-rcf-source=\"readiness.questions\"` on the questions block when the real compute shape is live (AC-18002-1).",
+  "implementsAcIds": [
+    "AC-18002-1",
+    "AC-18002-2",
+    "AC-18002-3"
+  ],
+  "dependencies": [
+    "CN-746"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:30:00Z",
+  "updatedAt": "2026-10-03T09:30:00Z"
+}

package/rcf/code-nodes/cn-748.json

@@ -0,0 +1,16 @@
+{
+  "cnId": "CN-748",
+  "path": "src/view/readiness.js",
+  "title": "renderReadinessPanel wraps the PO layer around the engineer body and picks the register from profile.md",
+  "description": "`renderReadinessPanel(result, { profileText })` picks the register from `profile.md` (productOwner | engineer | unstated), renders the engineer body (the pre-PR-8 Readiness rendering: tree line, CLI verdict lines, next-action-per-persona, D1..D8 chips, PO + Engineer blocker groups, delta/diff) once, and hands it to `renderReadinessPO` as `engineerBody`. The engineer body is never removed from the DOM; `renderReadinessPO` is what folds it into the For-engineers DocRow and decides open/closed per register (AC-18002-3).",
+  "implementsAcIds": [
+    "AC-18002-3"
+  ],
+  "dependencies": [
+    "CN-747"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:30:00Z",
+  "updatedAt": "2026-10-03T09:30:00Z"
+}

package/rcf/code-nodes/cn-749.json

@@ -0,0 +1,16 @@
+{
+  "cnId": "CN-749",
+  "path": "src/view/index.js",
+  "title": "View bootstrap attaches computeQuestions output to readiness so the adapter feature-detects the real shape",
+  "description": "After `computeReadiness` returns, the view bootstrap calls `computeQuestions(readiness, { tree, ledgers, profileText, persona: 'productOwner' })` and merges the result's `questions`, `groups`, `optional` and `engineer` fields onto the readiness object before it reaches `renderPage`. `preferReadinessQuestions` then returns true and `fromReadinessQuestions` reads the real `computeQuestions` output rather than falling back to the blockers path (AC-18002-1). The phrasebook stays available as the per-field fallback when a question carries no `ask` / `hint` of its own.",
+  "implementsAcIds": [
+    "AC-18002-1"
+  ],
+  "dependencies": [
+    "CN-746"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:30:00Z",
+  "updatedAt": "2026-10-03T09:30:00Z"
+}

package/rcf/code-nodes/cn-750.json

@@ -0,0 +1,15 @@
+{
+  "cnId": "CN-750",
+  "path": "src/view/test-host/fixture.js",
+  "title": "Wespa host fixture page: 56px header, resizable sidebar, iframe mounted at ./?embed=1&theme=light with no inline script",
+  "description": "`renderTestHostPage()` returns the host-fixture HTML as a pure string: HTML5 doctype, lang='en-GB', a 56px wespa-header carrying the Light/Dark toggle buttons, a resizable sidebar shell (data-rcf-host-sidebar + drag handle) and a content pane carrying `<iframe id=\"rcf-test-host-iframe\" src=\"./?embed=1&amp;theme=light\">`. The fixture ships no inline `<script>` body (CSP-friendly, consistent with the PR 1 contract); its client-side wiring lives at /test-host.js (served via /test-host.js when the test-host route is enabled). The fixture does not persist theme or sidebar width to localStorage (ADR-4136): a passing run has to flip the iframe through the postMessage path, which is the invariant the fixture pins. Proves AC-206-1 (shell + iframe src + no inline script) and underwrites AC-206-6 (no outbound postMessage shape beyond the embed-client's single rcf-view-theme post).",
+  "implementsAcIds": [
+    "AC-206-1",
+    "AC-206-6"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:55:00Z",
+  "updatedAt": "2026-10-03T09:55:00Z"
+}

package/rcf/code-nodes/cn-751.json

@@ -0,0 +1,18 @@
+{
+  "cnId": "CN-751",
+  "path": "src/view/test-host/embed-client.js",
+  "title": "Wespa host fixture client: theme postMessage, sidebar drag + collapse/expand, same-origin message target",
+  "description": "Classic (non-module) browser script served at /test-host.js when the test-host route is on. Three fixture behaviours: (a) the theme toggle posts `{ type: 'rcf-view-theme', theme }` to `iframe.contentWindow`, targeting `window.location.origin` so a cross-origin receiver would refuse the message (underwrites AC-206-4 together with the viewer's own origin check in page-init.js); (b) the sidebar drag handle sets `--wespa-sidebar-width` on the <main> grid, clamped to 64..400 px live; (c) collapse/expand snaps the sidebar between 64 px and 200 px. Reads the iframe's `data-theme` attribute as evidence of the postMessage round-trip (AC-206-2). After the iframe's hash-only navigation, `data-embed` and the search string carry embed=1 and the theme, which the live-proof script captures (AC-206-3). The host does not read event.origin (the viewer does) and does not persist theme to localStorage (ADR-4136 invariant).",
+  "implementsAcIds": [
+    "AC-206-2",
+    "AC-206-3",
+    "AC-206-4"
+  ],
+  "dependencies": [
+    "CN-750"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:55:00Z",
+  "updatedAt": "2026-10-03T09:55:00Z"
+}

package/rcf/code-nodes/cn-752.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-752",
+  "path": "src/view/test-host/lints.js",
+  "title": "Three embedding lints: framing headers, target=_top, localStorage namespace",
+  "description": "Three pure assertions callable by any test harness; test/view/wespa-host-fixture.test.js is the suite caller. (1) `assertFramingHeaders(response)` refuses on `X-Frame-Options` or on CSP `frame-ancestors` forbidding same-origin, and accepts `frame-ancestors 'self'`. (2) `assertNoTargetTop(renderedHtml)` greps for `target=\"_top\"` / `target='_top'` / `target=_top` and refuses on any match; returns `{ ok, count }`. (3) `assertLocalStorageNamespace(sourceTreeRoot)` walks every .js file under `src/view/**` (excluding vendored and .min.js) and asserts every `localStorage.*` / `sessionStorage.*` / shared `storage.*` call site uses a key literal starting with `rcf-view:v1:` or a constant resolving to that prefix. Together they pin AC-206-5 against regressions.",
+  "implementsAcIds": [
+    "AC-206-5"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-10-03T09:55:00Z",
+  "updatedAt": "2026-10-03T09:55:00Z"
+}

package/rcf/fbs/fbs-196.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-24T14:30:00Z",
-  "updatedAt": "2026-09-24T14:30:00Z",
+  "updatedAt": "2026-10-01T13:12:16Z",
   "acIds": [
     "AC-17401-1",
     "AC-17401-2",
@@ -9,7 +9,9 @@
     "AC-17401-5",
     "AC-17401-6",
     "AC-17401-7",
-    "AC-17401-8"
+    "AC-17401-8",
+    "AC-17401-9",
+    "AC-17401-10"
   ],
   "fbsId": "FBS-196",
   "prdId": "PRD-001",
@@ -18,11 +20,17 @@
   "executionStatus": "complete",
   "title": "DEFINE slice 2: stage gates D1..D8 pure check functions",
   "summary": "Ship src/query/gates.js exposing one check function per stage D1..D8 with the section 2.4 shape { stage, gate, state, checks[] }. Blocking stages (D1, D2, D4, D7, D8) enforce the floors listed in proposal section 3.2; warn-with-ack stages (D3, D5, D6) run only the cheap data-backed checks and are acknowledgeable via freeze.gates[<gate>] at the current tree hash. AC class parses off the bracketed prefix on AC description (decision 6); D4 per-class opt-outs read manifest.baselineAcOptOuts[] with baselineKey 'defineD4:failure' or 'defineD4:mustNot' per ADR-4122.",
-  "dependsOnFbsIds": ["FBS-195"],
+  "dependsOnFbsIds": [
+    "FBS-195"
+  ],
   "approach": "One file, eight exported functions plus the STAGE_ORDER, STAGE_GATES, STAGE_SHORT_NAMES and INTERFACE_KINDS constants. Every function follows the same shape: decide notApplicable per section 3.2; assemble a checks[] list of { name, ok, over, pass, total, failing }; fold to state, honouring the warn-with-ack acknowledgement window when the stage is D3/D5/D6. Ledger reads use the emptyLedger fallback so an absent ledger contributes no findings. AC class parsing is a static regex over the description string (leading '[failure]' / '[must-not]' / '[happy]' / '[edge]' / '[non-functional]', case-sensitive). Profile parsing is a light presence check on rcf/.identity/profile.md (surface and register markers).",
   "contextRequirements": {
-    "tacIds": ["TAC-4122-define-gates"],
-    "adrIds": ["ADR-4122-define-gates-blocking-and-optout"]
+    "tacIds": [
+      "TAC-4122-define-gates"
+    ],
+    "adrIds": [
+      "ADR-4122-define-gates-blocking-and-optout"
+    ]
   },
   "deliverables": [
     "src/query/gates.js: STAGE_ORDER, STAGE_GATES, STAGE_SHORT_NAMES, INTERFACE_KINDS, checkD1Brief..checkD8Freeze, plus foldState and parseAcClass helpers",

package/rcf/fbs/fbs-198.json

@@ -0,0 +1,42 @@
+{
+  "createdAt": "2026-09-24T16:33:15Z",
+  "updatedAt": "2026-09-24T16:33:15Z",
+  "acIds": [
+    "AC-17601-1",
+    "AC-17601-2",
+    "AC-17601-3",
+    "AC-17601-4",
+    "AC-17601-5",
+    "AC-17601-6",
+    "AC-17601-7",
+    "AC-17601-8"
+  ],
+  "fbsId": "FBS-198",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 198,
+  "executionStatus": "notStarted",
+  "title": "DEFINE slice 3: rcf define freeze CLI + freeze-record override + hygiene",
+  "summary": "Ship src/cli/freeze.js implementing 'rcf define freeze' as the only freeze-record writer, wire it into bin/rcf.js and src/cli/help.js, update src/define/freeze-record.js so override is a nullable-required field (loader defaults missing keys to null; validator refuses a body without the key), and replace the ' -- ' double-dash in the readiness CLI stage header and the CHANGELOG TODO-regex line with a colon.",
+  "dependsOnFbsIds": ["FBS-197"],
+  "approach": "One CLI module composing computeReadiness (REQ-175) and saveFreezeRecord (REQ-172). Ack parsing is a small helper walking --ack and --reason multi-valued arrays in parallel. Ack folding uses the same WARN_WITH_ACK rules gates.js applies at the current tree hash. Counts derivation reuses tree.kindById and parseAcClass; interface counts walk each TAC's interfaces[]. Version reading loads packages/rcf-lite/package.json, src/ruleset/ruleset.json and node_modules/@stravica-ai/rcf-schemas/package.json. --status is a read-only branch that never runs gates. Admissibility refusal is informational per ADR-4124. The freeze-record schema fix requires an override field (nullable): validator throws on missing key, loader defaults missing keys to null on read for backward compatibility, saveFreezeRecord's own validate step catches a caller that forgets to write override.",
+  "contextRequirements": {
+    "tacIds": ["TAC-4124-define-freeze"],
+    "adrIds": ["ADR-4124-define-freeze-verb"]
+  },
+  "deliverables": [
+    "src/cli/freeze.js: HELP, main; --ack (multiple) / --reason (multiple) / --note / --litmus-attested / --status / --json / --help flags; runWithAdmissibilityGate wrap; section 2.5 summary line and --json envelope; counts derivation",
+    "src/define/freeze-record.js: validateFreezeRecord requires override (nullable); loadFreezeRecord defaults missing override to null; saveFreezeRecord unchanged (still validates first, which now catches missing override)",
+    "src/cli/readiness.js: stage header line uses ': ' between stage / gate / state (no ' -- ')",
+    "CHANGELOG.md: TODO regex line rewritten to use ': ' instead of ' -- ', plus slice-3 entries under [Unreleased]",
+    "bin/rcf.js: GROUPS.define.freeze wired to freezeMain",
+    "src/cli/help.js: HELP as FREEZE_HELP imported; HELP_MAP.define.freeze wired; DEFINE_HELP listing extended",
+    "test/cli/freeze.test.js: CLI tests covering AC-17601-1..6 and AC-17601-8",
+    "test/define/freeze-record.test.js: extension test covering AC-17601-7 (override required, loader defaults)"
+  ],
+  "riskLevel": "low",
+  "domain": "defineDetection",
+  "estimatedSize": "medium",
+  "estimatedHours": 4,
+  "notes": "Depth-2 slice: no sub-agents. Chain first, code next, tests last. Dogfood is NOT frozen in the repo (a committed freeze.json would be a product decision); prove the verb on scratch trees and run --status on the dogfood chain as evidence."
+}

package/rcf/fbs/fbs-199.json

@@ -0,0 +1,59 @@
+{
+  "createdAt": "2026-10-01T14:30:00Z",
+  "updatedAt": "2026-10-01T14:30:00Z",
+  "acIds": [
+    "AC-17402-1",
+    "AC-17402-2",
+    "AC-17402-3",
+    "AC-17402-4",
+    "AC-17402-5",
+    "AC-17402-6",
+    "AC-17402-7",
+    "AC-17403-1",
+    "AC-17403-2",
+    "AC-17403-3",
+    "AC-17403-4",
+    "AC-17403-5",
+    "AC-17403-6",
+    "AC-17403-7",
+    "AC-17403-8",
+    "AC-17502-1",
+    "AC-17502-2",
+    "AC-17502-3",
+    "AC-17502-4",
+    "AC-17502-5",
+    "AC-17502-6",
+    "AC-17502-7",
+    "AC-17502-8"
+  ],
+  "fbsId": "FBS-199",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 199,
+  "executionStatus": "complete",
+  "title": "DEFINE step 2 (0.29.0) PR A: persona tags on every gate check and two readiness levels (ADR-4126)",
+  "summary": "Ship the compute layer for ADR-4126: CHECK_PERSONA / CHECK_QUESTION maps and persona + question on every stages[].checks[] entry; split skeleton:reqFields into skeleton:reqIntent + skeleton:reqShape and decisions:allAnswered into decisions:wellFormed + decisions:allAnswered; add the new D3 shapes:draftSettled check and the parseInterfaceDraft helper; fold levels (intentComplete, readyToBuild) and personas (productOwner, engineer) on the computeReadiness result; extend deriveNextAction with an optional persona filter; add formatVerdictLines shared by the CLI (PR B) and the Readiness tab (PR C). All additions are strictly additive; the 0.28.4 top-level shape is preserved and rcf define readiness default behaviour / exit codes are unchanged.",
+  "dependsOnFbsIds": ["FBS-197"],
+  "approach": "One pass through src/query/gates.js adds the persona + question maps and plumbs them through makeCheck; the two splits are per-REQ / per-entry loops that evaluate every item independently so one failure never masks another; the shapes:draftSettled check parses the leading bracket marker on interface descriptions (whitespace tolerated). src/query/readiness.js folds levels + personas from stages[].checks[] after the eight stage functions run; deriveNextAction gains an optional persona argument; formatVerdictLines builds the two shared verdict strings. The CLI flags (--level, --persona) and the viewer tab land in PRs B and C of the same train and are out of scope here.",
+  "contextRequirements": {
+    "tacIds": [
+      "TAC-4122-define-gates",
+      "TAC-4123-define-readiness"
+    ],
+    "adrIds": [
+      "ADR-4126-persona-tagged-blockers-two-levels"
+    ]
+  },
+  "deliverables": [
+    "src/query/gates.js: CHECK_PERSONA + CHECK_QUESTION + STAGE_FALLBACK_PERSONA maps; checkPersona / checkQuestion / parseInterfaceDraft helpers; split skeleton:reqIntent / skeleton:reqShape; new shapes:draftSettled; split decisions:wellFormed / decisions:allAnswered; makeCheck adds persona + question on every emitted check; D3 doc comment fix for TAD.dataArchitecture.coreEntities",
+    "src/query/readiness.js: levels (intentComplete, readyToBuild) and personas (productOwner, engineer) fold; deriveNextAction gains an optional persona argument; formatVerdictLines builds the two shared verdict strings",
+    "src/query/index.js: re-export the new helpers (CHECK_PERSONA / CHECK_QUESTION / STAGE_FALLBACK_PERSONA / parseInterfaceDraft / deriveLevels / derivePersonas / formatVerdictLines)",
+    "test/query/gates.test.js and test/query/readiness.test.js: new cases covering AC-17402-*, AC-17403-* and AC-17502-*",
+    "CHANGELOG [Unreleased] entry describing the additive compute changes"
+  ],
+  "riskLevel": "low",
+  "domain": "defineDetection",
+  "estimatedSize": "medium",
+  "estimatedHours": 4,
+  "notes": "PR B (CLI --level / --persona + text report) and PR C (Readiness viewer tab) are the remaining 0.29.0 step-2 PRs under REQ-175 / REQ-180 / REQ-181. No file under rcf/ is created or modified by any rcf define readiness invocation; the levels and personas folds are read-only derivations over stages[].checks[]."
+}