rcf-lite 0.29.0 → 0.30.0

package/blueprints/observability-probe-endpoints/contributions/requirements/observability-probe-endpoints-req-006.json

@@ -5,7 +5,7 @@
   "description": "The probe response, on every profile that emits a response payload, contains no dependency name, no environment name (dev, staging, live), no hostname, no replica id, no database identifier, no queue name, no internal URL, no build hash, no commit sha, no numeric metric value, no dependency count, no latency measurement, no error rate. The response is bounded to the fields REQ-005 enumerates for the profile and to the resolved status code. A profile that adds any field beyond that set is refused by the profile validator at boot with a stable-coded error naming the offending field.",
   "deliveredBy": {
     "adrId": "ADR-1505-observability-probe-endpoints-external-response-secrecy",
-    "field": "decision.externalResponseSecrecy"
+    "field": "decision"
   },
   "category": "security",
   "domain": "observability",

package/blueprints/observability-probe-endpoints/contributions/requirements/observability-probe-endpoints-req-007.json

@@ -5,7 +5,7 @@
   "description": "For every HTTP-transport profile, the probe path set the profile resolved (e.g., `/live` and `/ready` for Kubernetes default) is exempt from the project's auth middleware on the listener the profile bound those handlers to. The exemption is scoped by exact path match and by listener, never by prefix. When the fused topology is in effect, the exemption applies on the user-traffic listener for those exact paths only; when the separate-port topology is in effect, the exemption applies on the separate probe listener for those exact paths only and no auth middleware runs on the separate listener because no other route is served there. A path near a probe path but not on the resolved set (e.g., `/ready/next` when `/ready` is the probe) receives the project's normal auth treatment.",
   "deliveredBy": {
     "tacId": "TAC-1503-observability-probe-endpoints-listener-topology",
-    "field": "interfaces.exemptListInstaller"
+    "field": "interfaces[exemptListInstaller]"
   },
   "category": "security",
   "domain": "observability",

package/blueprints/observability-probe-endpoints/contributions/requirements/observability-probe-endpoints-req-008.json

@@ -5,7 +5,7 @@
   "description": "Switching the target integration from one profile to another (for example, moving a service from a Kubernetes deployment to a Docker Compose deployment behind a load balancer) is expressed as a change to the operator-declared profile name and its per-profile options. The source tree that binds the profile handlers and the profile-resolver call site do not change; the profile shift takes effect on the next process start. A source-tree change is required only when the operator authors a new custom profile or extends the shipped profile set; existing profiles are switched by configuration alone.",
   "deliveredBy": {
     "tacId": "TAC-1501-observability-probe-endpoints-profile-resolver",
-    "field": "interfaces.contractValidator"
+    "field": "interfaces[contractValidator]"
   },
   "category": "nonFunctional",
   "domain": "observability",

package/blueprints/observability-probe-endpoints/contributions/tacs/tac-1501-observability-probe-endpoints-profile-resolver.json

@@ -18,18 +18,18 @@
   "interfaces": [
     {
       "name": "resolveProbeProfile",
-      "kind": "factory",
-      "description": "resolveProbeProfile({ config, profileLoader, contractValidator }) -> { profile, getExemptPathSet }. Called once at boot; the returned profile drives the handler-set binder (TAC-1502), the listener-topology binder (TAC-1503), and the non-HTTP adapter selector (TAC-1504)."
+      "kind": "other",
+      "description": "resolveProbeProfile({ config, profileLoader, contractValidator }) -> { profile, getExemptPathSet }. Called once at boot; the returned profile drives the handler-set binder (TAC-1502), the listener-topology binder (TAC-1503), and the non-HTTP adapter selector (TAC-1504). (legacy kind: factory)"
     },
     {
       "name": "profileLoader",
-      "kind": "read-api",
-      "description": "Function that resolves a profile name to the profile module. Shipped profiles resolve to the blueprint's own modules; a `custom:<name>` value resolves to the project's `profiles/custom/<name>` slot. Injected so the project supplies its module discovery."
+      "kind": "other",
+      "description": "Function that resolves a profile name to the profile module. Shipped profiles resolve to the blueprint's own modules; a `custom:<name>` value resolves to the project's `profiles/custom/<name>` slot. Injected so the project supplies its module discovery. (legacy kind: read-api)"
     },
     {
       "name": "contractValidator",
-      "kind": "read-api",
-      "description": "Schema-check function against the profile contract. Returns a validated frozen profile object on success and a typed error naming the missing or extraneous field on refusal."
+      "kind": "other",
+      "description": "Schema-check function against the profile contract. Returns a validated frozen profile object on success and a typed error naming the missing or extraneous field on refusal. (legacy kind: read-api)"
     }
   ],
   "dependencies": [],

package/blueprints/observability-probe-endpoints/contributions/tacs/tac-1502-observability-probe-endpoints-handler-set.json

@@ -17,13 +17,13 @@
   "interfaces": [
     {
       "name": "buildHandlerSet",
-      "kind": "factory",
-      "description": "buildHandlerSet({ profile, readinessPredicate, now }) -> { handlers }. `profile` is the frozen object from TAC-1501. `readinessPredicate` is a project-supplied `() -> 'pass' | 'fail'` function (default: strict-any-fail over declared dependency cached state). `now` is a `() -> Date` for test isolation. Returns a map of resolved path to stateless async handler. Called once at boot."
+      "kind": "other",
+      "description": "buildHandlerSet({ profile, readinessPredicate, now }) -> { handlers }. `profile` is the frozen object from TAC-1501. `readinessPredicate` is a project-supplied `() -> 'pass' | 'fail'` function (default: strict-any-fail over declared dependency cached state). `now` is a `() -> Date` for test isolation. Returns a map of resolved path to stateless async handler. Called once at boot. (legacy kind: factory)"
     },
     {
       "name": "readinessPredicate",
-      "kind": "read-api",
-      "description": "Project-supplied synchronous function returning the current readiness state as `'pass'` or `'fail'`. The handler set never reads dependency state directly; the predicate boundary is where per-project logic lives."
+      "kind": "other",
+      "description": "Project-supplied synchronous function returning the current readiness state as `'pass'` or `'fail'`. The handler set never reads dependency state directly; the predicate boundary is where per-project logic lives. (legacy kind: read-api)"
     }
   ],
   "dependencies": [

package/blueprints/observability-probe-endpoints/contributions/tacs/tac-1503-observability-probe-endpoints-listener-topology.json

@@ -17,18 +17,18 @@
   "interfaces": [
     {
       "name": "bindListenerTopology",
-      "kind": "factory",
-      "description": "bindListenerTopology({ profile, handlerSet, userTrafficListener, listenerFactory, exemptListInstaller }) -> { bound, exemptSet }. Called once at boot after TAC-1502 has built the handler set. The `userTrafficListener` is the project's HTTP router or server object; `listenerFactory(port)` is a project-supplied constructor for a fresh listener on the given port; `exemptListInstaller` is the project's auth-middleware exempt-list installer."
+      "kind": "other",
+      "description": "bindListenerTopology({ profile, handlerSet, userTrafficListener, listenerFactory, exemptListInstaller }) -> { bound, exemptSet }. Called once at boot after TAC-1502 has built the handler set. The `userTrafficListener` is the project's HTTP router or server object; `listenerFactory(port)` is a project-supplied constructor for a fresh listener on the given port; `exemptListInstaller` is the project's auth-middleware exempt-list installer. (legacy kind: factory)"
     },
     {
       "name": "listenerFactory",
-      "kind": "read-api",
-      "description": "Project-supplied `(port: number) -> Listener` factory. Called only when the separate-port topology is in effect. Returns a new HTTP listener bound to the given port with no middleware installed."
+      "kind": "other",
+      "description": "Project-supplied `(port: number) -> Listener` factory. Called only when the separate-port topology is in effect. Returns a new HTTP listener bound to the given port with no middleware installed. (legacy kind: read-api)"
     },
     {
       "name": "exemptListInstaller",
-      "kind": "write-api",
-      "description": "Project-supplied installer that receives a `{ listener, paths: string[], matcher: 'exact' }` record and registers the exempt set with the auth middleware on the named listener. Refuses on the topology component's side if the paths carry a wildcard or prefix marker."
+      "kind": "other",
+      "description": "Project-supplied installer that receives a `{ listener, paths: string[], matcher: 'exact' }` record and registers the exempt set with the auth middleware on the named listener. Refuses on the topology component's side if the paths carry a wildcard or prefix marker. (legacy kind: write-api)"
     }
   ],
   "dependencies": [

package/blueprints/observability-probe-endpoints/contributions/tacs/tac-1504-observability-probe-endpoints-non-http-adapters.json

@@ -16,13 +16,13 @@
   "interfaces": [
     {
       "name": "selectAdapter",
-      "kind": "factory",
-      "description": "selectAdapter({ profile, readinessPredicate, notifyImplementation, tcpFactory }) -> { adapter }. Returns the correct adapter object for the profile's transport. `notifyImplementation` is a project-supplied `(msg: string) -> void` wrapping the supervisor notify call for the runtime (systemd's `NOTIFY_SOCKET` on Linux, a stub in tests). `tcpFactory` is a project-supplied `(port) -> TcpListener`. Called once at boot when the profile transport is non-HTTP."
+      "kind": "other",
+      "description": "selectAdapter({ profile, readinessPredicate, notifyImplementation, tcpFactory }) -> { adapter }. Returns the correct adapter object for the profile's transport. `notifyImplementation` is a project-supplied `(msg: string) -> void` wrapping the supervisor notify call for the runtime (systemd's `NOTIFY_SOCKET` on Linux, a stub in tests). `tcpFactory` is a project-supplied `(port) -> TcpListener`. Called once at boot when the profile transport is non-HTTP. (legacy kind: factory)"
     },
     {
       "name": "notifyImplementation",
-      "kind": "write-api",
-      "description": "Project-supplied notify writer accepting a supervisor-format message string. For systemd, this writes to the `NOTIFY_SOCKET` datagram address. For tests, a stub accumulator. Injected so the blueprint holds no operating-system-specific dependency."
+      "kind": "other",
+      "description": "Project-supplied notify writer accepting a supervisor-format message string. For systemd, this writes to the `NOTIFY_SOCKET` datagram address. For tests, a stub accumulator. Injected so the blueprint holds no operating-system-specific dependency. (legacy kind: write-api)"
     }
   ],
   "dependencies": [

package/blueprints/observability-probe-endpoints/contributions/user-stories/observability-probe-endpoints-us-14101.json

@@ -30,7 +30,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "adrId": "ADR-1503-observability-probe-endpoints-kubernetes-default",
-        "field": "decision.kubernetesDefault"
+        "field": "decision"
       }
     },
     {
@@ -54,7 +54,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-1501-observability-probe-endpoints-profile-resolver",
-        "field": "interfaces.contractValidator"
+        "field": "interfaces[contractValidator]"
       }
     }
   ],

package/blueprints/observability-probe-endpoints/contributions/user-stories/observability-probe-endpoints-us-14102.json

@@ -60,7 +60,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-1502-observability-probe-endpoints-handler-set",
-        "field": "interfaces.readinessPredicate"
+        "field": "interfaces[readinessPredicate]"
       }
     }
   ],

package/blueprints/observability-probe-endpoints/contributions/user-stories/observability-probe-endpoints-us-14105.json

@@ -50,7 +50,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-1504-observability-probe-endpoints-non-http-adapters",
-        "field": "interfaces.notifyImplementation"
+        "field": "interfaces[notifyImplementation]"
       }
     },
     {
@@ -64,7 +64,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-1504-observability-probe-endpoints-non-http-adapters",
-        "field": "interfaces.selectAdapter"
+        "field": "interfaces[selectAdapter]"
       }
     },
     {
@@ -78,7 +78,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-1504-observability-probe-endpoints-non-http-adapters",
-        "field": "interfaces.selectAdapter"
+        "field": "interfaces[selectAdapter]"
       }
     }
   ],

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-001.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-1401-persistence-data-d1-facade",
-    "field": "responsibilities.facade"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-002.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-1402-persistence-data-d1-migration-catalog",
-    "field": "responsibilities.migrations"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-003.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-1403-persistence-data-d1-deploy-gate",
-    "field": "responsibilities.gate"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-004.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-10T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-1401-persistence-data-d1-facade",
-    "field": "responsibilities.prepare"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-005.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-1401-persistence-data-d1-facade",
-    "field": "responsibilities.batchAtomicity"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-006.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-1404-persistence-data-d1-recovery-runner",
-    "field": "responsibilities.timeTravel"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-007.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "adrId": "ADR-1403-persistence-data-d1-event-secrecy",
-    "field": "decision.metadataOnly"
+    "field": "decision"
   }
 }

package/blueprints/persistence-data-d1/contributions/tacs/tac-1401-persistence-data-d1-facade.json

@@ -17,18 +17,18 @@
   "interfaces": [
     {
       "name": "createStore",
-      "kind": "factory",
-      "description": "createStore({ env, bindingName, onEvent }) -> Store; the sole entry point every consumer calls. Reads env[bindingName] as the D1 binding; hands back a Store whose methods are the named CRUD verbs."
+      "kind": "other",
+      "description": "createStore({ env, bindingName, onEvent }) -> Store; the sole entry point every consumer calls. Reads env[bindingName] as the D1 binding; hands back a Store whose methods are the named CRUD verbs. (legacy kind: factory)"
     },
     {
       "name": "onEvent",
-      "kind": "callback",
-      "description": "Structured-event sink invoked with { event, ts, ... } for facadeReady and queryFailed events. Never invoked with domain-row values."
+      "kind": "other",
+      "description": "Structured-event sink invoked with { event, ts, ... } for facadeReady and queryFailed events. Never invoked with domain-row values. (legacy kind: callback)"
     },
     {
       "name": "store.verbs",
-      "kind": "read-write-api",
-      "description": "The named domain CRUD verbs the facade exposes. Each verb has typed parameters; no verb accepts a raw SQL string or a general query object from consumer code."
+      "kind": "other",
+      "description": "The named domain CRUD verbs the facade exposes. Each verb has typed parameters; no verb accepts a raw SQL string or a general query object from consumer code. (legacy kind: read-write-api)"
     }
   ],
   "dependencies": [

package/blueprints/persistence-data-d1/contributions/tacs/tac-1402-persistence-data-d1-migration-catalog.json

@@ -15,13 +15,13 @@
   "interfaces": [
     {
       "name": "migrations/",
-      "kind": "directory",
-      "description": "The source-tree directory named on `d1_databases[].migrations_dir`; holds one numbered `.sql` file per shipped migration."
+      "kind": "other",
+      "description": "The source-tree directory named on `d1_databases[].migrations_dir`; holds one numbered `.sql` file per shipped migration. (legacy kind: directory)"
     },
     {
       "name": "d1_migrations",
-      "kind": "table",
-      "description": "The D1-side bookkeeping table named on `d1_databases[].migrations_table`; wrangler writes one row per applied migration. Read via `wrangler d1 execute <database> --command \"SELECT * FROM <table>\"` for verification."
+      "kind": "other",
+      "description": "The D1-side bookkeeping table named on `d1_databases[].migrations_table`; wrangler writes one row per applied migration. Read via `wrangler d1 execute <database> --command \"SELECT * FROM <table>\"` for verification. (legacy kind: table)"
     }
   ],
   "dependencies": [],

package/blueprints/persistence-data-d1/contributions/tacs/tac-1403-persistence-data-d1-deploy-gate.json

@@ -15,13 +15,13 @@
   "interfaces": [
     {
       "name": "ciStep.migrationsApply",
-      "kind": "ci-step",
-      "description": "The CI job step that runs `wrangler d1 migrations apply <database> --env <target>`; declared as a prerequisite for the deploy step."
+      "kind": "other",
+      "description": "The CI job step that runs `wrangler d1 migrations apply <database> --env <target>`; declared as a prerequisite for the deploy step. (legacy kind: ci-step)"
     },
     {
       "name": "ciStep.deploy",
-      "kind": "ci-step",
-      "description": "The CI job step that runs `wrangler deploy --env <target>`; declares the migrations-apply step as its prerequisite (needs, depends-on, or sequential ordering per the CI tool)."
+      "kind": "other",
+      "description": "The CI job step that runs `wrangler deploy --env <target>`; declares the migrations-apply step as its prerequisite (needs, depends-on, or sequential ordering per the CI tool). (legacy kind: ci-step)"
     }
   ],
   "dependencies": [

package/blueprints/persistence-data-d1/contributions/tacs/tac-1404-persistence-data-d1-recovery-runner.json

@@ -16,13 +16,13 @@
   "interfaces": [
     {
       "name": "recovery.timeTravelRestore",
-      "kind": "ops-command",
-      "description": "recovery.timeTravelRestore({ database, env, timestamp }) invokes `wrangler d1 time-travel restore` and emits the timeTravelRestored event."
+      "kind": "other",
+      "description": "recovery.timeTravelRestore({ database, env, timestamp }) invokes `wrangler d1 time-travel restore` and emits the timeTravelRestored event. (legacy kind: ops-command)"
     },
     {
       "name": "recovery.export",
-      "kind": "ops-command",
-      "description": "recovery.export({ database, env, outputPath }) invokes `wrangler d1 export` and emits the backupExported event."
+      "kind": "other",
+      "description": "recovery.export({ database, env, outputPath }) invokes `wrangler d1 export` and emits the backupExported event. (legacy kind: ops-command)"
     }
   ],
   "dependencies": [

package/blueprints/persistence-data-d1/contributions/user-stories/persistence-data-d1-us-13101.json

@@ -49,7 +49,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-1401-persistence-data-d1-facade",
-        "field": "responsibilities.readBinding"
+        "field": "responsibilities"
       },
       "disposition": "template"
     },
@@ -63,7 +63,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-1401-persistence-data-d1-facade",
-        "field": "responsibilities.queryFailedRateLimit"
+        "field": "responsibilities"
       },
       "disposition": "template"
     }

package/blueprints/persistence-data-d1/contributions/user-stories/persistence-data-d1-us-13102.json

@@ -49,7 +49,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-1403-persistence-data-d1-deploy-gate",
-        "field": "responsibilities.gate"
+        "field": "responsibilities"
       },
       "disposition": "template",
       "vendorCitation": {

package/blueprints/persistence-data-d1/contributions/user-stories/persistence-data-d1-us-13107.json

@@ -29,7 +29,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-1401-persistence-data-d1-facade",
-        "field": "interfaces.onEvent"
+        "field": "interfaces[onEvent]"
       },
       "disposition": "fixed"
     },
@@ -43,7 +43,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-1401-persistence-data-d1-facade",
-        "field": "interfaces.onEvent"
+        "field": "interfaces[onEvent]"
       },
       "disposition": "fixed"
     }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-001.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-2801-persistence-data-postgres-facade",
-    "field": "responsibilities.facadeReady"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-002.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-2802-persistence-data-postgres-migration-runner",
-    "field": "responsibilities.migrations"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-003.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-2801-persistence-data-postgres-facade",
-    "field": "responsibilities.parameter"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-004.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-10T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-2803-persistence-data-postgres-transaction-helper",
-    "field": "responsibilities.transactionAtomicity"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-005.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-2804-persistence-data-postgres-recovery-runner",
-    "field": "responsibilities.pg_dump"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-006.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-2801-persistence-data-postgres-facade",
-    "field": "responsibilities.pool"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-007.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "adrId": "ADR-2801-persistence-data-postgres-driver",
-    "field": "decision.advisoryLock"
+    "field": "decision"
   }
 }

package/blueprints/persistence-data-postgres/contributions/tacs/tac-2801-persistence-data-postgres-facade.json

@@ -18,18 +18,18 @@
   "interfaces": [
     {
       "name": "createStore",
-      "kind": "factory",
-      "description": "createStore({ connectionUrl, onEvent, poolConfig, advisoryLockHelper }) -> Store. The sole entry point every consumer calls. Opens a pg.Pool against connectionUrl; wires the sink; hands back a Store whose methods are the named CRUD verbs plus withTransaction and (optionally) withAdvisoryLock."
+      "kind": "other",
+      "description": "createStore({ connectionUrl, onEvent, poolConfig, advisoryLockHelper }) -> Store. The sole entry point every consumer calls. Opens a pg.Pool against connectionUrl; wires the sink; hands back a Store whose methods are the named CRUD verbs plus withTransaction and (optionally) withAdvisoryLock. (legacy kind: factory)"
     },
     {
       "name": "onEvent",
-      "kind": "callback",
-      "description": "Structured-event sink invoked with { event, ts, ... } for facadeReady, migrationsApplied, transactionRolledBack, backupExported, recoveryDrillPassed, queryFailed events. Never invoked with domain-row values."
+      "kind": "other",
+      "description": "Structured-event sink invoked with { event, ts, ... } for facadeReady, migrationsApplied, transactionRolledBack, backupExported, recoveryDrillPassed, queryFailed events. Never invoked with domain-row values. (legacy kind: callback)"
     },
     {
       "name": "store.verbs",
-      "kind": "read-write-api",
-      "description": "The named domain CRUD verbs the facade exposes. Each verb has typed parameters; no verb accepts a raw SQL string or a general query object from consumer code."
+      "kind": "other",
+      "description": "The named domain CRUD verbs the facade exposes. Each verb has typed parameters; no verb accepts a raw SQL string or a general query object from consumer code. (legacy kind: read-write-api)"
     }
   ],
   "dependencies": [

package/blueprints/persistence-data-postgres/contributions/tacs/tac-2802-persistence-data-postgres-migration-runner.json

@@ -17,13 +17,13 @@
   "interfaces": [
     {
       "name": "run",
-      "kind": "cli",
-      "description": "node migrate.mjs applies every un-applied file in order; exits 0 on success, non-zero on any failure with the failing filename in stderr."
+      "kind": "other",
+      "description": "node migrate.mjs applies every un-applied file in order; exits 0 on success, non-zero on any failure with the failing filename in stderr. (legacy kind: cli)"
     },
     {
       "name": "applyAll",
-      "kind": "read-write-api",
-      "description": "applyAll({ connectionUrl, migrationsDir, bookkeepingTable, onEvent }) -> Promise<{ applied: string[] }>. Library entry point the facade may call in atBoot mode."
+      "kind": "other",
+      "description": "applyAll({ connectionUrl, migrationsDir, bookkeepingTable, onEvent }) -> Promise<{ applied: string[] }>. Library entry point the facade may call in atBoot mode. (legacy kind: read-write-api)"
     }
   ],
   "dependencies": [

package/blueprints/persistence-data-postgres/contributions/tacs/tac-2803-persistence-data-postgres-transaction-helper.json

@@ -17,8 +17,8 @@
   "interfaces": [
     {
       "name": "withTransaction",
-      "kind": "read-write-api",
-      "description": "await store.withTransaction(async (tx) => { await tx.query(...); await tx.query(...); }). The helper acquires a pg.PoolClient from the pool and issues the transaction-control primitives around the callback: `client.query('BEGIN')` before the first wrapped-client query, `client.query('COMMIT')` on the callback's successful return, and `client.query('ROLLBACK')` on any thrown error before releasing the client. On rollback the helper fires transactionRolledBack on the injected event sink with { statementIndex, code } and re-throws the underlying pg error."
+      "kind": "other",
+      "description": "await store.withTransaction(async (tx) => { await tx.query(...); await tx.query(...); }). The helper acquires a pg.PoolClient from the pool and issues the transaction-control primitives around the callback: `client.query('BEGIN')` before the first wrapped-client query, `client.query('COMMIT')` on the callback's successful return, and `client.query('ROLLBACK')` on any thrown error before releasing the client. On rollback the helper fires transactionRolledBack on the injected event sink with { statementIndex, code } and re-throws the underlying pg error. (legacy kind: read-write-api)"
     }
   ],
   "dependencies": [

package/blueprints/persistence-data-postgres/contributions/tacs/tac-2804-persistence-data-postgres-recovery-runner.json

@@ -17,13 +17,13 @@
   "interfaces": [
     {
       "name": "exportDatabase",
-      "kind": "read-write-api",
-      "description": "await exportDatabase({ connectionUrl, destination, onEvent, pgDumpArgs }) -> { artefactPath, completedAt }. Runs pg_dump, writes the artefact, fires backupExported."
+      "kind": "other",
+      "description": "await exportDatabase({ connectionUrl, destination, onEvent, pgDumpArgs }) -> { artefactPath, completedAt }. Runs pg_dump, writes the artefact, fires backupExported. (legacy kind: read-write-api)"
     },
     {
       "name": "recoveryDrill",
-      "kind": "read-write-api",
-      "description": "await recoveryDrill({ sourceUrl, destination, onEvent }) -> { count, checksum }. Runs exportDatabase, primes a fresh Postgres from the artefact, compares row-count and checksum on the fixture table, fires recoveryDrillPassed."
+      "kind": "other",
+      "description": "await recoveryDrill({ sourceUrl, destination, onEvent }) -> { count, checksum }. Runs exportDatabase, primes a fresh Postgres from the artefact, compares row-count and checksum on the fixture table, fires recoveryDrillPassed. (legacy kind: read-write-api)"
     }
   ],
   "dependencies": [

package/blueprints/persistence-data-postgres/contributions/user-stories/persistence-data-postgres-us-27101.json

@@ -39,7 +39,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-2801-persistence-data-postgres-facade",
-        "field": "interfaces.createStore"
+        "field": "interfaces[createStore]"
       },
       "disposition": "template"
     }

package/blueprints/persistence-data-postgres/contributions/user-stories/persistence-data-postgres-us-27102.json

@@ -29,7 +29,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-2802-persistence-data-postgres-migration-runner",
-        "field": "interfaces.applyAll"
+        "field": "interfaces[applyAll]"
       },
       "disposition": "template"
     },
@@ -43,7 +43,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-2802-persistence-data-postgres-migration-runner",
-        "field": "interfaces.applyAll"
+        "field": "interfaces[applyAll]"
       },
       "disposition": "template"
     },
@@ -99,7 +99,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-2802-persistence-data-postgres-migration-runner",
-        "field": "interfaces.applyAll"
+        "field": "interfaces[applyAll]"
       },
       "disposition": "template"
     },
@@ -113,7 +113,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-2802-persistence-data-postgres-migration-runner",
-        "field": "interfaces.applyAll"
+        "field": "interfaces[applyAll]"
       },
       "disposition": "template"
     },

package/blueprints/persistence-data-postgres/contributions/user-stories/persistence-data-postgres-us-27103.json

@@ -29,7 +29,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-2801-persistence-data-postgres-facade",
-        "field": "interfaces.store.verbs"
+        "field": "interfaces[store.verbs]"
       },
       "disposition": "fixed"
     }

package/blueprints/persistence-data-postgres/contributions/user-stories/persistence-data-postgres-us-27104.json

@@ -19,7 +19,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-2803-persistence-data-postgres-transaction-helper",
-        "field": "interfaces.withTransaction"
+        "field": "interfaces[withTransaction]"
       },
       "disposition": "fixed"
     },
@@ -33,7 +33,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-2803-persistence-data-postgres-transaction-helper",
-        "field": "interfaces.withTransaction"
+        "field": "interfaces[withTransaction]"
       },
       "disposition": "fixed"
     }

package/blueprints/persistence-data-postgres/contributions/user-stories/persistence-data-postgres-us-27105.json

@@ -29,7 +29,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-2804-persistence-data-postgres-recovery-runner",
-        "field": "interfaces.exportDatabase"
+        "field": "interfaces[exportDatabase]"
       },
       "disposition": "template"
     },