@openwop/openwop-conformance 1.0.0

package/schemas/debug-bundle.schema.json

@@ -0,0 +1,196 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v1/debug-bundle.schema.json",
+  "title": "RunDebugBundle",
+  "description": "Portable JSON export of a single run's diagnostic state. See spec/v1/debug-bundle.md. Additive over v1 per COMPATIBILITY.md §2.1: optional endpoint; hosts MAY omit.",
+  "type": "object",
+  "required": [
+    "bundleVersion",
+    "generatedAt",
+    "host",
+    "run",
+    "events",
+    "redactionApplied",
+    "redactionMode"
+  ],
+  "properties": {
+    "bundleVersion": {
+      "type": "string",
+      "description": "Schema version of the bundle. v1.x bundles are '1'.",
+      "pattern": "^[0-9]+\\.[0-9]+$"
+    },
+    "generatedAt": {
+      "type": "string",
+      "format": "date-time",
+      "description": "ISO 8601 timestamp when the host generated this response."
+    },
+    "host": {
+      "type": "object",
+      "description": "Identifies the host that produced the bundle.",
+      "required": ["name", "version"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "version": { "type": "string", "minLength": 1 },
+        "vendor": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "run": {
+      "type": "object",
+      "description": "Run snapshot — same shape as GET /v1/runs/{runId}. See run-snapshot.schema.json.",
+      "required": ["runId", "workflowId", "status"],
+      "properties": {
+        "runId": { "type": "string", "minLength": 1 },
+        "workflowId": { "type": "string", "minLength": 1 },
+        "status": {
+          "type": "string",
+          "enum": [
+            "pending",
+            "running",
+            "completed",
+            "failed",
+            "cancelled",
+            "waiting-approval",
+            "waiting-clarification"
+          ]
+        },
+        "startedAt": { "type": "string", "format": "date-time" },
+        "endedAt": {
+          "oneOf": [
+            { "type": "string", "format": "date-time" },
+            { "type": "null" }
+          ]
+        },
+        "error": {
+          "oneOf": [
+            { "type": "null" },
+            {
+              "type": "object",
+              "required": ["code"],
+              "properties": {
+                "code": { "type": "string", "minLength": 1 },
+                "message": { "type": "string" }
+              },
+              "additionalProperties": true
+            }
+          ]
+        },
+        "inputs": { "type": "object" },
+        "variables": { "type": "object" },
+        "currentNodeId": {
+          "oneOf": [{ "type": "string" }, { "type": "null" }]
+        },
+        "nodeStates": { "type": "object" },
+        "metrics": { "type": "object" }
+      },
+      "additionalProperties": true
+    },
+    "events": {
+      "type": "array",
+      "description": "Full event log for this run, in order. Each entry follows run-event.schema.json.",
+      "items": {
+        "type": "object",
+        "properties": {
+          "sequence": {
+            "oneOf": [
+              { "type": "integer", "minimum": 0 },
+              { "type": "null" }
+            ]
+          },
+          "seq": {
+            "oneOf": [
+              { "type": "integer", "minimum": 0 },
+              { "type": "null" }
+            ],
+            "description": "Legacy alias for `sequence`. Hosts that pre-date the rename emit `seq`. Clients accept either."
+          },
+          "type": { "type": "string", "minLength": 1 },
+          "timestamp": { "type": "string", "format": "date-time" },
+          "nodeId": {
+            "oneOf": [{ "type": "string" }, { "type": "null" }]
+          },
+          "data": {}
+        },
+        "additionalProperties": true
+      }
+    },
+    "spans": {
+      "type": "array",
+      "description": "OTel-format spans per spec/v1/observability.md. Empty array if host doesn't emit spans.",
+      "items": {
+        "type": "object",
+        "required": ["name"],
+        "properties": {
+          "name": { "type": "string", "minLength": 1 },
+          "spanId": { "type": "string" },
+          "parentSpanId": {
+            "oneOf": [{ "type": "string" }, { "type": "null" }]
+          },
+          "startedAt": { "type": "string", "format": "date-time" },
+          "endedAt": {
+            "oneOf": [
+              { "type": "string", "format": "date-time" },
+              { "type": "null" }
+            ]
+          },
+          "attributes": { "type": "object" }
+        },
+        "additionalProperties": true
+      }
+    },
+    "metrics": {
+      "type": "object",
+      "description": "Aggregate metrics for the run.",
+      "properties": {
+        "openwopCost": {
+          "oneOf": [
+            { "type": "null" },
+            {
+              "type": "object",
+              "properties": {
+                "usd": { "type": "number", "minimum": 0 },
+                "tokens": {
+                  "type": "object",
+                  "properties": {
+                    "input": { "type": "integer", "minimum": 0 },
+                    "output": { "type": "integer", "minimum": 0 }
+                  },
+                  "additionalProperties": false
+                },
+                "model": { "type": "string" },
+                "provider": { "type": "string" },
+                "duration_ms": { "type": "number", "minimum": 0 }
+              },
+              "additionalProperties": true
+            }
+          ]
+        },
+        "nodeCount": { "type": "integer", "minimum": 0 },
+        "eventCount": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "MUST equal events.length per spec/v1/debug-bundle.md."
+        }
+      },
+      "additionalProperties": true
+    },
+    "redactionApplied": {
+      "type": "boolean",
+      "description": "True if any field in this bundle was masked/omitted/hashed by the host's redaction harness."
+    },
+    "redactionMode": {
+      "type": "string",
+      "enum": ["mask", "omit", "hash", "passthrough"],
+      "description": "Masking mode in effect per capabilities.compliance.defaultMode."
+    },
+    "truncated": {
+      "type": "boolean",
+      "description": "True when the bundle was truncated to fit the host's size cap."
+    },
+    "truncatedReason": {
+      "type": "string",
+      "description": "Why truncation occurred (e.g., 'events_truncated_to_size_cap')."
+    }
+  },
+  "additionalProperties": true
+}

package/schemas/dispatch-config.schema.json

@@ -0,0 +1,46 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v1/dispatch-config.schema.json",
+  "title": "DispatchConfig",
+  "description": "Configuration for the `core.dispatch` node typeId (RFC 0007). Pins per-`kind` routing strategies for the dispatch loop. The dispatch node consumes the latest `OrchestratorDecision` (RFC 0006 §C) from the run's projection and acts on it per the per-`kind` semantics in RFC 0007 §D.",
+  "type": "object",
+  "required": [],
+  "properties": {
+    "askUserRouting": {
+      "type": "string",
+      "enum": ["conversation", "clarification", "auto"],
+      "default": "auto",
+      "description": "Routing surface for `kind: 'ask-user'` decisions. `'conversation'` requires the host to advertise `capabilities.conversationPrimitive: true` (RFC 0005) and uses `conversation.exchange`; `'clarification'` uses the existing `clarification.requested` interrupt (pre-RFC-0010 path); `'auto'` selects `conversation` when the host advertises the conversation-primitive capability and `clarification` otherwise. Hosts that select `'conversation'` without advertising the capability MUST surface a `validation_error` at workflow registration time."
+    },
+    "workerDispatchModel": {
+      "type": "string",
+      "enum": ["child-run"],
+      "default": "child-run",
+      "description": "How `kind: 'next-worker'` is dispatched. v1.x normates only `'child-run'` — each `nextWorkerIds[i]` resolves to a workflow id and is dispatched as a child run via the existing `core.subWorkflow` machinery. Same-run DAG navigation is OUT OF SCOPE for v1.x (deferred to RFC 0013 / v1.3+). Hosts MAY add vendor-extension dispatch models under `vendor.<host>.<model>`; conformance scenarios validate `'child-run'` only."
+    },
+    "fanOutPolicy": {
+      "type": "string",
+      "enum": ["sequential", "reject"],
+      "default": "sequential",
+      "description": "Behavior when `decision.kind === 'next-worker'` and `nextWorkerIds.length > 1`. `'sequential'` dispatches each in array order, blocking on each child terminal before starting the next; the dispatch node's output reports the LAST child's `childRunId`/`childStatus` (intermediate child-run identifiers surface in the run's event log via standard `node.*` events). `'reject'` fails the dispatch with a structured `'fan_out_unsupported'` error envelope per `error-envelope.md`. Parallel fan-out is OUT OF SCOPE for v1.x — see RFC 0007 §K3 (unresolved question)."
+    },
+    "iterationCap": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "Optional per-run hard cap on dispatch-node executions (across all dispatch nodes in the same run). Independent of `RunOptions.configurable.recursionLimit` / `Capabilities.limits.maxNodeExecutions` — when set, the engine MUST surface a `cap.breached` event with `kind: 'dispatch-iterations'` once exceeded and transition the run to `'failed'`. When absent, the run-level `recursionLimit` cap applies normally (each dispatch counts as one node execution against the run total)."
+    }
+  },
+  "additionalProperties": false,
+  "examples": [
+    {
+      "askUserRouting": "auto",
+      "workerDispatchModel": "child-run",
+      "fanOutPolicy": "sequential"
+    },
+    {
+      "askUserRouting": "clarification",
+      "fanOutPolicy": "reject",
+      "iterationCap": 25
+    }
+  ]
+}

package/schemas/error-envelope.schema.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v1/error-envelope.schema.json",
+  "title": "ErrorEnvelope",
+  "description": "Canonical error response shape returned by every OpenWOP-compliant server on a non-2xx response. See rest-endpoints.md §error-envelope and auth.md §3.",
+  "type": "object",
+  "required": ["error", "message"],
+  "properties": {
+    "error": {
+      "type": "string",
+      "description": "Machine-readable error code (e.g., `unauthenticated`, `validation_error`, `not_found`, `run_already_active`, `unsupported_stream_mode`). Servers SHOULD use snake_case; spec-canonical codes are listed in `rest-endpoints.md`.",
+      "minLength": 1
+    },
+    "message": {
+      "type": "string",
+      "description": "Human-readable error description. Localizable per `Accept-Language` request header (servers MAY ignore).",
+      "minLength": 1
+    },
+    "details": {
+      "type": "object",
+      "description": "Error-specific contextual data. Schema varies by `error` code — readers MUST tolerate missing/unknown fields (forward-compat). Examples: `{retryAfter: 30}` for rate-limit errors, `{activeRunId, activeHost}` for run_already_active conflicts."
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/memory-entry.schema.json

@@ -0,0 +1,36 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v1/memory-entry.schema.json",
+  "title": "MemoryEntry",
+  "description": "A single memory entry returned by `MemoryAdapter.list` or `MemoryAdapter.get` (RFC 0004). Hosts that ship cross-run memory expose entries in this shape regardless of their internal storage format. Mid-run mutations to the underlying store are NOT visible to the same run — `list` returns entries that existed at run start (preserves replay determinism per RFC 0004 §A).",
+  "type": "object",
+  "required": ["id", "content", "tags", "createdAt"],
+  "properties": {
+    "id": {
+      "type": "string",
+      "description": "Memory entry id. Stable for the lifetime of the entry. Hosts MAY tenant-prefix (`mem_<wsId>_<id>`) for defense in depth, but the protocol is silent on the id shape — see RFC 0004 §Unresolved questions #1. Length cap matches Firestore document-id limit (1500 octets) so adapters that pass-through native Firestore IDs validate cleanly.",
+      "minLength": 1,
+      "maxLength": 1500
+    },
+    "content": {
+      "type": "string",
+      "description": "Memory body. UTF-8 plaintext. Hosts MUST honor the redaction invariant SR-1 (RFC 0004 §D) at write time — content reaching this projection MUST NOT contain plaintext secret values that flowed through the run's BYOK harness."
+    },
+    "tags": {
+      "type": "array",
+      "items": { "type": "string", "maxLength": 256 },
+      "description": "Free-form tags for filtering. Hosts MAY enforce caps. Empty strings are tolerated by the schema (matches reference-impl behavior) but hosts SHOULD filter them at write time. The `MemoryListOptions.tag` filter is a set-membership check against this array. Hosts that want to surface their internal `MemorySource` (or similar host-defined classification) MAY do so via tags (e.g., `tags: ['source:session']`) per RFC 0004 §G."
+    },
+    "createdAt": {
+      "type": "string",
+      "format": "date-time",
+      "description": "ISO 8601 timestamp of entry creation. Never mutated post-create; subsequent edits to the entry are out-of-spec at the read-path layer."
+    },
+    "expiresAt": {
+      "type": "string",
+      "format": "date-time",
+      "description": "Optional TTL. When the host's clock passes this value, the entry MUST NOT be returned by `list` / `get`. Hosts MAY also delete expired entries from storage as a side effect."
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/memory-list-options.schema.json

@@ -0,0 +1,21 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v1/memory-list-options.schema.json",
+  "title": "MemoryListOptions",
+  "description": "Options accepted by `MemoryAdapter.list` (RFC 0004). All fields optional; default is \"all entries, newest first.\" Hosts MAY further bound results per their scale-profile.",
+  "type": "object",
+  "properties": {
+    "limit": {
+      "type": "integer",
+      "minimum": 0,
+      "description": "Cap on entries returned. `0` means \"no limit\" (treated identically to omission); positive integers cap the result. Hosts MAY further bound the effective cap per their scale-profile. When omitted, the host applies its own default cap (typical: 100 entries)."
+    },
+    "tag": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256,
+      "description": "Filter to entries whose `tags` array contains this string (set-membership check). Hosts MAY support more advanced filtering as a host extension under a `vendor.<host>.*` field."
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/node-pack-manifest.schema.json

@@ -0,0 +1,235 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v1/node-pack-manifest.schema.json",
+  "title": "NodePackManifest",
+  "description": "Manifest for a published OpenWOP node pack — `pack.json` at the pack root. Language-neutral. See node-packs.md for the canonical contract.",
+  "type": "object",
+  "required": ["name", "version", "engines", "runtime"],
+  "anyOf": [
+    { "properties": { "nodes": { "type": "array", "minItems": 1 } }, "required": ["nodes"] },
+    { "properties": { "agents": { "type": "array", "minItems": 1 } }, "required": ["agents"] }
+  ],
+  "properties": {
+    "name": {
+      "type": "string",
+      "description": "Reverse-DNS pack name. Reserved scopes: `core.*` (spec-canonical), `vendor.<org>.*` (vendor-published), `community.<author>.*` (individual), `private.<host>.*` (host-internal — MUST NOT appear in `packs.openwop.dev`). `local.*` is for in-repo unpublished packs and MUST NOT appear in any registry. See node-packs.md §Naming for the full reservation table.",
+      "pattern": "^(core|vendor|community|private)\\.[a-z][a-z0-9_-]*(\\.[a-z][a-zA-Z0-9_-]*)+$",
+      "minLength": 1,
+      "maxLength": 256
+    },
+    "version": {
+      "type": "string",
+      "description": "Pack version per Semantic Versioning 2.0.0.",
+      "pattern": "^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$"
+    },
+    "description": { "type": "string", "maxLength": 1024 },
+    "author": { "type": "string" },
+    "license": { "type": "string", "description": "SPDX license identifier (e.g., `Apache-2.0`, `MIT`)." },
+    "homepage": { "type": "string", "format": "uri" },
+    "repository": { "type": "string", "format": "uri" },
+    "keywords": {
+      "type": "array",
+      "items": { "type": "string", "maxLength": 64 },
+      "maxItems": 50
+    },
+    "engines": {
+      "type": "object",
+      "required": ["openwop"],
+      "properties": {
+        "openwop": {
+          "type": "string",
+          "description": "Semver range — which openwop protocol versions this pack works against. Example: `>=1.0 <2.0.0`."
+        }
+      },
+      "additionalProperties": true
+    },
+    "dependencies": {
+      "type": "object",
+      "additionalProperties": { "type": "string" },
+      "description": "Other node packs this pack depends on. Map of pack name → semver range. Engine resolves transitively at workflow-register time."
+    },
+    "peerDependencies": {
+      "type": "object",
+      "additionalProperties": { "type": "string" },
+      "description": "Engine-supplied capabilities the pack consumes (e.g., a particular AI provider extension). Resolved against `Capabilities` at register time."
+    },
+    "nodes": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/PackNode" },
+      "description": "Node typeIds the pack contributes. Each MUST have a unique `typeId` within the pack. A pack MAY omit `nodes` entirely if it ships only `agents[]` — the top-level `anyOf` constraint requires at least one of `nodes` or `agents` to be non-empty."
+    },
+    "agents": {
+      "type": "array",
+      "items": { "$ref": "agent-manifest.schema.json" },
+      "description": "Optional agent manifests shipped alongside this pack. Each entry is an AgentManifest (see agent-manifest.schema.json + RFC 0003 §`agents[]` extension). Pure-agent packs MUST set `runtime.language: 'remote'` — agents are interpreted by the host, not bundled as executable artifacts. Mixed packs (nodes + agents) declare the runtime that loads the node implementations; agents remain host-interpreted."
+    },
+    "runtime": { "$ref": "#/$defs/Runtime" },
+    "signing": { "$ref": "#/$defs/Signing" }
+  },
+  "additionalProperties": false,
+  "$defs": {
+    "PackNode": {
+      "type": "object",
+      "required": ["typeId", "version", "category", "role"],
+      "properties": {
+        "typeId": {
+          "type": "string",
+          "description": "Canonical node type ID. MUST match the same pattern as `WorkflowNode.typeId` in workflow-definition.schema.json. The pack's `name` prefix is recommended (e.g., a pack `vendor.acme.salesforce-tools` exposing `vendor.acme.salesforce.upsert`).",
+          "pattern": "^[a-z][a-zA-Z0-9._-]*$",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "version": {
+          "type": "string",
+          "description": "Per-node semver. MAY differ from the pack's overall version — useful when a single pack ships multiple nodes that evolve independently."
+        },
+        "label": { "type": "string", "minLength": 1 },
+        "description": { "type": "string" },
+        "category": {
+          "type": "string",
+          "enum": ["chat", "control", "data", "canvas", "coordination", "integration"],
+          "description": "Engine-side classification used for scheduling and UI grouping."
+        },
+        "role": {
+          "type": "string",
+          "description": "Semantic role from the `NodeRole` taxonomy. Drives engine scheduling. Common values: `pure`, `side-effect`, `human-input`, `streaming-output`, `gate`."
+        },
+        "capabilities": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": ["streamable", "cacheable", "side-effectful", "mcp-exportable"]
+          },
+          "uniqueItems": true,
+          "description": "Orthogonal capability traits. The engine uses these to decide caching, MCP exposure, idempotency enforcement."
+        },
+        "configSchemaRef": {
+          "type": "string",
+          "description": "Path inside the pack tarball to the JSON Schema for the node's config. Server fetches the file when resolving the pack."
+        },
+        "inputSchemaRef": {
+          "type": "string",
+          "description": "Path to the JSON Schema for the node's input ports."
+        },
+        "outputSchemaRef": {
+          "type": "string",
+          "description": "Path to the JSON Schema for the node's output ports."
+        },
+        "outputs": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "object",
+            "properties": {
+              "sensitive": {
+                "type": "boolean",
+                "default": false,
+                "description": "When true, the engine masks this output port's value in `node.completed` event payloads. Use when a NodeModule ALWAYS handles sensitive data (e.g., a Salesforce upsert always touches PII). Workflows MAY override per-instance via `WorkflowNode.outputSensitivity`. See observability.md §Privacy classification (closes O5)."
+              }
+            },
+            "additionalProperties": true
+          },
+          "description": "Per-output-port metadata. Keys are output port names; values are per-port markers. Currently the only marker is `sensitive`; future additions live alongside (additionalProperties: true on each port)."
+        },
+        "envelopeContractRef": {
+          "type": "string",
+          "description": "Optional path to a JSON document declaring the LLM envelope contract for AI-backed nodes."
+        },
+        "artifact": {
+          "type": "object",
+          "properties": {
+            "typeId": { "type": "string" },
+            "syncOn": { "type": "string", "enum": ["completion", "approval", "manual"] },
+            "supportsCheckpoint": { "type": "boolean" }
+          },
+          "additionalProperties": false
+        },
+        "mcp": {
+          "type": "object",
+          "properties": {
+            "exposeAsTool": { "type": "boolean" },
+            "toolName": { "type": "string" }
+          },
+          "additionalProperties": false
+        },
+        "requiresSecrets": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/SecretRequirement" },
+          "description": "Secrets the node needs to execute. Resolved by the host's secret-resolution adapter at dispatch time. Hosts that don't advertise `Capabilities.secrets.supported` MUST refuse to dispatch a node with non-empty `requiresSecrets` and return `credential_unavailable`."
+        }
+      },
+      "additionalProperties": false
+    },
+    "SecretRequirement": {
+      "type": "object",
+      "required": ["id", "kind"],
+      "description": "Declared secret requirement. The engine surfaces this to the host's `SecretResolver` which returns an opaque `ResolvedSecret` reference; the executor passes the reference to provider adapters that dereference internally. Raw key material NEVER reaches the protocol surface (events, logs, traces, etc.).",
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Stable identifier the node executor uses to look up the resolved secret (e.g., `'primary-anthropic-key'`)."
+        },
+        "kind": {
+          "type": "string",
+          "enum": ["ai-provider", "api-key", "oauth-token", "custom"],
+          "description": "Coarse classification driving host-side resolution policy. `ai-provider` triggers the BYOK / aiProviders flow; `api-key` is generic; `oauth-token` integrates with the host's OAuth refresh flow; `custom` is host-extensible."
+        },
+        "provider": {
+          "type": "string",
+          "description": "For `kind: 'ai-provider'`, the provider id (`anthropic`, `openai`, `gemini`, etc.). MUST be in `Capabilities.aiProviders.supported`. Optional for other kinds."
+        },
+        "scope": {
+          "type": "string",
+          "enum": ["tenant", "user", "run"],
+          "description": "Where the host should look up the secret. MUST match a scope in `Capabilities.secrets.scopes`. Defaults to `tenant` when omitted."
+        }
+      },
+      "additionalProperties": false
+    },
+    "Runtime": {
+      "type": "object",
+      "required": ["language", "entry"],
+      "properties": {
+        "language": {
+          "type": "string",
+          "enum": ["javascript", "python", "go", "wasm", "remote"],
+          "description": "How the engine loads the pack. See node-packs.md §runtime formats."
+        },
+        "entry": {
+          "type": "string",
+          "description": "Path inside the tarball to the runtime artifact, OR a URL when `language: remote`."
+        },
+        "format": {
+          "type": "string",
+          "enum": ["esm", "cjs", "wheel", "binary", "shared-library", "wasm"],
+          "description": "Runtime-specific format hint. `esm`/`cjs` for JS, `wheel` for Python, `binary`/`shared-library` for Go, `wasm` for wasm."
+        },
+        "minRuntimeVersion": {
+          "type": "string",
+          "description": "Minimum host runtime version (e.g., `node>=20`, `python>=3.10`, `go>=1.22`)."
+        }
+      },
+      "additionalProperties": false
+    },
+    "Signing": {
+      "type": "object",
+      "description": "Optional signing metadata. See node-packs.md §signing.",
+      "properties": {
+        "publicKeyRef": {
+          "type": "string",
+          "description": "Path inside the tarball to the Ed25519 public key (PEM-encoded)."
+        },
+        "signatureRef": {
+          "type": "string",
+          "description": "Path to the detached signature over `pack.json`."
+        },
+        "method": {
+          "type": "string",
+          "enum": ["manual", "sigstore"],
+          "description": "Signing method. `manual` uses publicKeyRef + signatureRef; `sigstore` uses a Sigstore bundle at `pack.json.sigstore`."
+        }
+      },
+      "additionalProperties": false
+    }
+  }
+}

package/schemas/orchestrator-decision.schema.json

@@ -0,0 +1,60 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v1/orchestrator-decision.schema.json",
+  "title": "OrchestratorDecision",
+  "description": "Routing decision emitted by an orchestrator-supervisor node. Carried in the `runOrchestrator.decided` event payload's `decision` field (run-orchestrator-decided-event.schema.json). Three canonical kinds form a closed canonical enum at the protocol layer: `'next-worker'` (continue dispatch), `'ask-user'` (route a question to the human party), `'terminate'` (clean run completion). Vendor-extension decision kinds MAY ship under `vendor.<host>.<kind>` per host-extensions.md but conformance MUST validate against the closed canonical set. See RFC 0006 §C.",
+  "type": "object",
+  "required": ["kind"],
+  "oneOf": [
+    {
+      "title": "NextWorkerDecision",
+      "description": "Dispatch one or more next workers. Phase-5 hosts MAY treat the `nextWorkerIds` array as length-1 only and ignore the tail; Phase-6 hosts (RFC 0007 / `core.dispatch`) SHOULD honor full fan-out semantics. The interpretation of array entries (node-id vs agent-id) is left to host capability advertisement; see RFC 0006 §C unresolved-question 1.",
+      "type": "object",
+      "required": ["kind", "nextWorkerIds"],
+      "properties": {
+        "kind": { "const": "next-worker" },
+        "nextWorkerIds": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 256
+          },
+          "description": "Ordered list of worker node-ids OR agent-ids to dispatch. Hosts that interpret entries as node-ids dispatch in DAG order; hosts that interpret as agent-ids resolve to nodes via the run's static DAG."
+        }
+      },
+      "additionalProperties": false
+    },
+    {
+      "title": "AskUserDecision",
+      "description": "Route a human-targeted question. Hosts that adopted RFC 0005 (Phase 4) SHOULD route through `conversation.exchange`; pre-RFC-0005 hosts MAY surface as a `'clarification'` interrupt. The transport is host-policy; the protocol-layer decision shape is the same.",
+      "type": "object",
+      "required": ["kind", "prompt"],
+      "properties": {
+        "kind": { "const": "ask-user" },
+        "prompt": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Human-targeted question. Free-form text; the protocol does NOT structure the prompt further."
+        }
+      },
+      "additionalProperties": false
+    },
+    {
+      "title": "TerminateDecision",
+      "description": "Clean run termination driven by orchestrator judgement. Distinct from `run.failed` (uncaught executor error) and `run.cancelled` (operator cancellation) — see RFC 0006 §H. The terminate `reason?` is informational; the protocol does NOT close the value enum.",
+      "type": "object",
+      "required": ["kind"],
+      "properties": {
+        "kind": { "const": "terminate" },
+        "reason": {
+          "type": "string",
+          "description": "Optional free-form rationale captured for audit/debug. Common values: `'goal-reached'`, `'max-iterations'`, `'unrecoverable-error'`. Spec does NOT close this enum.",
+          "minLength": 1
+        }
+      },
+      "additionalProperties": false
+    }
+  ]
+}