@openwop/openwop-conformance 1.131.0 → 1.133.0

package/fixtures/pack-manifests/workflow-chain-sample.pack.json

@@ -1,6 +1,6 @@
 {
   "name": "vendor.openwop.workflow-chain-sample",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "kind": "workflow-chain",
   "description": "Reference workflow-chain pack proving the RFC 0013 manifest format works end-to-end across schema validation, registry indexing, and the reference expansion library. Two chains: a 1-node 'summarize text' chain showing literal parameter substitution, and a 2-node 'fetch-and-summarize' chain showing multi-node DAG composition with edge wiring and capability propagation. In-tree only (NOT published to packs.openwop.dev); the canonical proof that the chain-pack contract is implementable with real-world-shaped content.",
   "author": "openwop project",
@@ -18,7 +18,9 @@
       "description": "Drag-tile that expands to a single core.ai.callPrompt with the summarization system prompt + author-supplied length / tone parameters substituted in. Mirrors the 'Generate PRD' positive example from workflow-chain-packs.md §Examples — the canonical 1-node chain shape.",
       "parameters": {
         "type": "object",
-        "required": ["sourceText"],
+        "required": [
+          "sourceText"
+        ],
         "properties": {
           "sourceText": {
             "type": "string",
@@ -26,7 +28,11 @@
           },
           "targetLength": {
             "type": "string",
-            "enum": ["one-sentence", "one-paragraph", "executive-summary"],
+            "enum": [
+              "one-sentence",
+              "one-paragraph",
+              "executive-summary"
+            ],
             "default": "one-paragraph",
             "description": "How long the summary should be."
           },
@@ -43,7 +49,10 @@
             "id": "summarize-call",
             "typeId": "core.ai.callPrompt",
             "name": "Summarize",
-            "position": { "x": 0, "y": 0 },
+            "position": {
+              "x": 0,
+              "y": 0
+            },
             "config": {
               "systemPrompt": "You are an expert summarizer. Produce a {{params.targetLength}} summary in a {{params.tone}} tone. Avoid lists unless the source uses them. Avoid hedging.\n\nSource text:\n{{params.sourceText}}",
               "envelopeType": "summary.v1",
@@ -60,7 +69,9 @@
           "description": "The summarized text from the AI call's envelope payload."
         }
       },
-      "capabilities": ["cacheable"]
+      "capabilities": [
+        "cacheable"
+      ]
     },
     {
       "chainId": "vendor.openwop.workflow-chain-sample.fetch-and-summarize",
@@ -69,7 +80,9 @@
       "description": "Drag-tile that expands to a two-node DAG: core.openwop.http.get fetches the URL, then core.ai.callPrompt summarizes the response body. Demonstrates multi-node chain composition with edge wiring, parameter substitution across multiple nodes, and capability propagation (side-effectful from the HTTP fetch propagates to both expanded nodes per spec §Capability propagation).",
       "parameters": {
         "type": "object",
-        "required": ["url"],
+        "required": [
+          "url"
+        ],
         "properties": {
           "url": {
             "type": "string",
@@ -78,7 +91,11 @@
           },
           "targetLength": {
             "type": "string",
-            "enum": ["one-sentence", "one-paragraph", "executive-summary"],
+            "enum": [
+              "one-sentence",
+              "one-paragraph",
+              "executive-summary"
+            ],
             "default": "one-paragraph"
           }
         }
@@ -89,7 +106,10 @@
             "id": "fetch",
             "typeId": "core.openwop.http.get",
             "name": "Fetch URL",
-            "position": { "x": 0, "y": 0 },
+            "position": {
+              "x": 0,
+              "y": 0
+            },
             "config": {
               "url": "{{params.url}}",
               "timeoutMs": 30000
@@ -100,7 +120,10 @@
             "id": "summarize",
             "typeId": "core.ai.callPrompt",
             "name": "Summarize",
-            "position": { "x": 280, "y": 0 },
+            "position": {
+              "x": 280,
+              "y": 0
+            },
             "config": {
               "systemPrompt": "Produce a {{params.targetLength}} summary of the fetched page content. Strip navigation, ads, and boilerplate. Focus on the article body.",
               "envelopeType": "summary.v1",
@@ -110,7 +133,10 @@
           }
         ],
         "edges": [
-          { "from": "fetch.body", "to": "summarize.sourceText" }
+          {
+            "from": "fetch.body",
+            "to": "summarize.sourceText"
+          }
         ]
       },
       "outputs": {
@@ -123,7 +149,173 @@
           "description": "Echo of the input URL for downstream reference."
         }
       },
-      "capabilities": ["side-effectful"]
+      "capabilities": [
+        "side-effectful"
+      ]
+    },
+    {
+      "chainId": "vendor.openwop.workflow-chain-sample.reserve-and-notify",
+      "version": "1.0.0",
+      "label": "Reserve & Notify (compensating)",
+      "description": "RFC 0157 fixture — a two-node chain whose first node declares an RFC 0151 §B inverse action (`compensation`, retry-bounded, `inputMapping` derived from the recorded reserve output + a {{params.*}} literal) and whose second node declares `irreversibleEffect: true` (RFC 0151 UQ4). Carries NO chain-level policy, so it is acceptable on any host — the node declaration describes an inverse action; only a policy requests an unwind. The host-expansion witness asserts both declarations survive verbatim onto the expanded nodes (params substituted, node-id refs re-prefixed) and that neither is silently dropped by a node-rebuilding allowlist.",
+      "parameters": {
+        "type": "object",
+        "required": [
+          "reservationUrl"
+        ],
+        "properties": {
+          "reservationUrl": {
+            "type": "string",
+            "format": "uri",
+            "description": "Reservation endpoint. Surfaced via {{params.reservationUrl}} in the reserve node config and its inverse action's inputMapping."
+          }
+        }
+      },
+      "dag": {
+        "nodes": [
+          {
+            "id": "reserve",
+            "typeId": "core.openwop.http.get",
+            "name": "Reserve",
+            "position": {
+              "x": 0,
+              "y": 0
+            },
+            "config": {
+              "url": "{{params.reservationUrl}}",
+              "timeoutMs": 30000
+            },
+            "inputs": {},
+            "compensation": {
+              "nodeTypeId": "core.openwop.http.get",
+              "inputMapping": {
+                "url": "{{params.reservationUrl}}",
+                "reservationId": "${nodes.reserve.output.body}"
+              },
+              "retry": {
+                "maxAttempts": 3,
+                "backoffMs": 250
+              },
+              "requiresApproval": false
+            }
+          },
+          {
+            "id": "notify",
+            "typeId": "core.ai.callPrompt",
+            "name": "Notify",
+            "position": {
+              "x": 280,
+              "y": 0
+            },
+            "config": {
+              "systemPrompt": "Write a one-line confirmation that the reservation at {{params.reservationUrl}} was placed.",
+              "envelopeType": "summary.v1",
+              "provider": "anthropic"
+            },
+            "inputs": {},
+            "irreversibleEffect": true
+          }
+        ],
+        "edges": [
+          {
+            "from": "reserve",
+            "to": "notify"
+          }
+        ]
+      },
+      "capabilities": [
+        "side-effectful"
+      ]
+    },
+    {
+      "chainId": "vendor.openwop.workflow-chain-sample.reserve-and-notify-with-policy",
+      "version": "1.0.0",
+      "label": "Reserve & Notify (compensating, with unwind policy)",
+      "description": "RFC 0157 fixture — the same two-node chain PLUS a chain-level compensation POLICY (a mirror of `compensation-policy.schema.json`). On a host that advertises `capabilities.compensation` the policy becomes the registered definition's `settings.compensation`; on a host that does NOT advertise it, expansion of this chain MUST be refused with `capability_required` (`compensation.md` §\"Workflow policy\") rather than accepted silently. The host-expansion witness accepts either outcome and asserts it matches the advert.",
+      "parameters": {
+        "type": "object",
+        "required": [
+          "reservationUrl"
+        ],
+        "properties": {
+          "reservationUrl": {
+            "type": "string",
+            "format": "uri",
+            "description": "Reservation endpoint. Surfaced via {{params.reservationUrl}} in the reserve node config and its inverse action's inputMapping."
+          }
+        }
+      },
+      "dag": {
+        "nodes": [
+          {
+            "id": "reserve",
+            "typeId": "core.openwop.http.get",
+            "name": "Reserve",
+            "position": {
+              "x": 0,
+              "y": 0
+            },
+            "config": {
+              "url": "{{params.reservationUrl}}",
+              "timeoutMs": 30000
+            },
+            "inputs": {},
+            "compensation": {
+              "nodeTypeId": "core.openwop.http.get",
+              "inputMapping": {
+                "url": "{{params.reservationUrl}}",
+                "reservationId": "${nodes.reserve.output.body}"
+              },
+              "retry": {
+                "maxAttempts": 3,
+                "backoffMs": 250
+              },
+              "requiresApproval": false
+            }
+          },
+          {
+            "id": "notify",
+            "typeId": "core.ai.callPrompt",
+            "name": "Notify",
+            "position": {
+              "x": 280,
+              "y": 0
+            },
+            "config": {
+              "systemPrompt": "Write a one-line confirmation that the reservation at {{params.reservationUrl}} was placed.",
+              "envelopeType": "summary.v1",
+              "provider": "anthropic"
+            },
+            "inputs": {},
+            "irreversibleEffect": true
+          }
+        ],
+        "edges": [
+          {
+            "from": "reserve",
+            "to": "notify"
+          }
+        ]
+      },
+      "capabilities": [
+        "side-effectful"
+      ],
+      "compensation": {
+        "profileVersion": "1",
+        "orderingModel": "reverse-completion",
+        "triggers": [
+          "node-failure",
+          "run-cancel"
+        ],
+        "retry": {
+          "maxAttempts": 3,
+          "backoffMs": 250
+        },
+        "timeoutMs": 30000,
+        "exhaustedDisposition": "record-outcome",
+        "approvalScope": "declared",
+        "onParentCancel": "continue"
+      }
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "1.131.0",
+  "version": "1.133.0",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",

package/schemas/CORPUS-STAMP.json

@@ -1,5 +1,5 @@
 {
   "_comment": "Provenance of this vendored schemas/ copy. See conformance/README.md \u00a7\"Resolving the contract\". Compare against the stamp in your installed @openwop/openwop-conformance to detect a stale hand-copied contract.",
-  "suiteVersion": "1.131.0",
-  "corpusCommit": "b2a25cf7013d21838b8b5abeaea7dff12355bfc5"
+  "suiteVersion": "1.133.0",
+  "corpusCommit": "01d2c45b0cc72ac953bc3c996f9bc3004d3ec297"
 }

package/src/scenarios/compensation-recovery.test.ts

@@ -31,24 +31,29 @@
  * (soft-skips without the advert, HARD-FAILS under `OPENWOP_REQUIRE_BEHAVIOR=true`)
  * and records its RFC 0148 §A disposition. The three sub-features are
  * INDEPENDENTLY optional: a host that wires the base seams but not this
- * extension is `blocked` here (named as such via `seamAbsent`) and keeps its
+ * extension is `blocked` here (named as such via `softSkip`) and keeps its
  * `compensation-behavior` witness — the base and the extension are different
  * claims and are recorded separately.
  *
- * Mode matters, and the first host to advertise pointed it out: `seamAbsent`
- * records `blocked` in DEFAULT mode but THROWS under
- * `OPENWOP_REQUIRE_BEHAVIOR=true` (RFC 0148 §B — an advertised capability
- * whose witness seam is missing is a failure in strict certification, not a
- * disposition). So a host that flips `compensation.supported` on without the
- * §21 recovery extension is honest-red here in strict runs. Wire the extension
- * with the advert, or run default mode and read the `blocked` rows.
+ * Mode does NOT change that (S24, corrected 2026-08-16 after the first host to
+ * wire §21 read the contract back to us): the recovery extension has NO advert
+ * flag — `capabilities.compensation` is closed over `supported` /
+ * `profileVersion` / `orderingModels` / `manualIntervention` — so a host cannot
+ * claim or disclaim it, and `seamAbsent` (whose contract is "an ADVERTISED
+ * capability whose observation seam is absent", strict-failing) is the wrong
+ * tool for it. An absent extension is `softSkip('blocked', …)` in both modes,
+ * exactly as §21 says; the ledger still refuses to certify the three §G
+ * invariants, so nothing weakens. The BASE seams (`unwind` / `replay`) are a
+ * different matter: `compensation.supported` promises them, and a 404 there
+ * stays `seamAbsent` (strict-fails) — that is `compensation-behavior`'s wall,
+ * not this file's.
  */
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { capabilityFamily } from '../lib/discovery-capabilities.js';
-import { seamAbsent } from '../lib/soft-skip.js';
+import { seamAbsent, softSkip } from '../lib/soft-skip.js';
 import { readErrorCode, readRetriable } from '../lib/error-envelope.js';
 
 const PROFILE = 'openwop-compensation';
@@ -93,9 +98,14 @@ async function post(path: string, body: Record<string, unknown>): Promise<{ stat
   return { status: r.status, json: r.json };
 }
 
-/** The recovery extension is optional; a base seam that ignores the new fields is `blocked` here, not failed. */
+/**
+ * The recovery extension is optional and has no advert flag, so its absence is
+ * `blocked` in BOTH modes — `softSkip`, never `seamAbsent` (S24). The three §G
+ * invariants stay uncertified either way; strict mode is not entitled to fail
+ * a host for a sub-seam it was never asked to claim.
+ */
 function extensionAbsent(what: string): undefined {
-  return seamAbsent(`the §21 recovery extension is not wired: ${what} (host-sample-test-seams.md §21 "Recovery extension") — retry-stability / operator authority / recorded-facts are unobservable`);
+  return softSkip('blocked', `the §21 recovery extension is not wired: ${what} (host-sample-test-seams.md §21 "Recovery extension") — retry-stability / operator authority / recorded-facts are unobservable`);
 }
 
 describe('RFC 0151 §C — inverse-action identity is retry-stable (capability-gated behavior)', () => {

package/src/scenarios/workflow-chain-host-expansion.test.ts

@@ -45,7 +45,10 @@ import { driver } from '../lib/driver.js';
 import { loadEnv } from '../lib/env.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { FIXTURES_DIR } from '../lib/paths.js';
-import { expandChain, type WorkflowChain } from '../lib/workflow-chain-expansion.js';
+import { expandChain, expandChainWithCompensation, type WorkflowChain, type WorkflowChainWithCompensation } from '../lib/workflow-chain-expansion.js';
+import { capabilityFamily } from '../lib/discovery-capabilities.js';
+import { softSkip } from '../lib/soft-skip.js';
+import { readErrorCode } from '../lib/error-envelope.js';
 
 const PROFILE = 'workflowChainPacks.hostExpansionSeam';
 const EXPAND_PATH = '/v1/host/sample/workflow-chain:expand';
@@ -64,6 +67,9 @@ const PACK = JSON.parse(
 const SAMPLE_PACK = PACK.name; // vendor.openwop.workflow-chain-sample
 const CHAIN_1_NODE = 'vendor.openwop.workflow-chain-sample.summarize-text';
 const CHAIN_2_NODE = 'vendor.openwop.workflow-chain-sample.fetch-and-summarize';
+// RFC 0157 fixtures (pack 1.1.0, suite 1.133.0): node declarations + irreversibleEffect, without / with a chain policy.
+const CHAIN_COMP = 'vendor.openwop.workflow-chain-sample.reserve-and-notify';
+const CHAIN_COMP_POLICY = 'vendor.openwop.workflow-chain-sample.reserve-and-notify-with-policy';
 
 function chainById(chainId: string): WorkflowChain {
   const c = PACK.chains.find((x) => x.chainId === chainId);
@@ -154,7 +160,19 @@ describe('workflow-chain-host-expansion: live host wraps expansion algorithm cor
 
     expect(body.chainId).toBe(CHAIN_1_NODE);
     expect(body.packName).toBe(SAMPLE_PACK);
-    expect(body.packVersion).toBe(PACK.version);
+    // The host serves the fixture from ITS conformance pin; the fixture gained two
+    // RFC 0157 chains at pack 1.1.0 (suite 1.133.0) without touching the two
+    // chains these legs expand, so an older pin is a note, not a mismatch — the
+    // expansions below still compare like for like. A NEWER pack than this suite
+    // knows is a mismatch (the suite cannot vouch for chains it has not seen).
+    expect(typeof body.packVersion).toBe('string');
+    if (body.packVersion !== PACK.version) {
+      const [hm, hn] = body.packVersion.split('.').map(Number);
+      const [fm, fn] = PACK.version.split('.').map(Number);
+      const older = hm! < fm! || (hm === fm && hn! < fn!);
+      expect(older, driver.describe('workflow-chain-host-expansion', `host bundles workflow-chain-sample ${body.packVersion}; this suite's fixture is ${PACK.version} — a host pack NEWER than the suite is unaccounted for`)).toBe(true);
+      softSkip('blocked', `host bundles workflow-chain-sample ${body.packVersion} (suite fixture ${PACK.version}) — the RFC 0157 chains are absent there until its conformance pin catches up`);
+    }
     expect(typeof body.expansionId).toBe('string');
     expect(body.expansionId.length).toBeGreaterThan(0);
 
@@ -250,4 +268,79 @@ describe('workflow-chain-host-expansion: live host wraps expansion algorithm cor
     expect(res.status).toBe(422);
     expect((res.json as { error: string }).error).toBe('invalid_request');
   });
+  it('RFC 0157 — a compensating chain expands through the live path with `compensation` and `irreversibleEffect` carried verbatim onto the expanded nodes', async () => {
+    if (!behaviorGate(PROFILE, await isExpansionAdvertised())) return;
+    const parameters = { reservationUrl: 'https://example.com/reservations' };
+    const res = await driver.post(EXPAND_PATH, { packName: SAMPLE_PACK, chainId: CHAIN_COMP, parameters });
+    if (res.status === 404 && readErrorCode(res.json) === 'chain_not_found') {
+      // The host serves the bundled fixture from its PINNED conformance package;
+      // the RFC 0157 chains arrived with pack 1.1.0 (suite 1.133.0). Older pin ⇒
+      // the chain does not exist there yet — unobservable, not a failure.
+      return softSkip('blocked', `host's bundled workflow-chain-sample pack predates 1.1.0 (chain ${CHAIN_COMP} answered chain_not_found) — the RFC 0157 carry is unobservable until the host's conformance pin reaches 1.133.0`);
+    }
+    expect(res.status, driver.describe('workflow-chain-packs.md §"Compensation (RFC 0157)"', 'a chain whose nodes declare an inverse action / irreversibleEffect (no policy) is acceptable on ANY host — the declaration describes, only the policy requests an unwind')).toBe(200);
+    const body = res.json as unknown as {
+      expansionId: string;
+      nodes: Array<{ id: string; compensation?: unknown; irreversibleEffect?: boolean }>;
+    };
+    const expected = expandChainWithCompensation(chainById(CHAIN_COMP) as unknown as WorkflowChainWithCompensation, {
+      expansionId: body.expansionId,
+      params: parameters,
+      isTypeIdResolvable: () => true,
+    });
+    expect(body.nodes).toHaveLength(expected.nodes.length);
+    for (const ref of expected.nodes) {
+      const node = body.nodes.find((n) => n.id === ref.id);
+      expect(node, driver.describe('workflow-chain-packs.md §Expansion semantics', `expanded node ${ref.id} present`)).toBeDefined();
+      const refC = (ref as unknown as { compensation?: unknown }).compensation;
+      expect(
+        node?.compensation,
+        driver.describe('workflow-chain-packs.md §"Compensation (RFC 0157)" rules 5b/6b', `node ${ref.id}: the inverse-action declaration MUST survive expansion verbatim (params substituted, node-id refs re-prefixed) — a node-rebuilding allowlist that drops it silently loses the unwind`),
+      ).toEqual(refC);
+      expect(
+        node?.irreversibleEffect,
+        driver.describe('workflow-chain-packs.md §"Compensation (RFC 0157)" rule 6c', `node ${ref.id}: irreversibleEffect MUST be copied unchanged`),
+      ).toEqual((ref as unknown as { irreversibleEffect?: boolean }).irreversibleEffect);
+    }
+    // Non-vacuity: the fixture DOES declare both, so at least one node of each kind was compared.
+    expect(expected.nodes.some((n) => (n as unknown as { compensation?: unknown }).compensation !== undefined)).toBe(true);
+    expect(expected.nodes.some((n) => (n as unknown as { irreversibleEffect?: boolean }).irreversibleEffect === true)).toBe(true);
+  });
+
+  it('RFC 0157 — a chain carrying an unwind POLICY is refused with capability_required on a host that does not advertise compensation, and expands on one that does', async () => {
+    if (!behaviorGate(PROFILE, await isExpansionAdvertised())) return;
+    const disco = await driver.get('/.well-known/openwop');
+    const advertises = capabilityFamily<{ supported?: boolean }>(disco.json, 'compensation')?.supported === true;
+    const parameters = { reservationUrl: 'https://example.com/reservations' };
+    const res = await driver.post(EXPAND_PATH, { packName: SAMPLE_PACK, chainId: CHAIN_COMP_POLICY, parameters });
+    if (res.status === 404 && readErrorCode(res.json) === 'chain_not_found') {
+      return softSkip('blocked', `host's bundled workflow-chain-sample pack predates 1.1.0 (chain ${CHAIN_COMP_POLICY} answered chain_not_found) — unobservable until the host's conformance pin reaches 1.133.0`);
+    }
+    if (!advertises) {
+      // compensation.md §"Workflow policy": a host that does NOT advertise the family
+      // MUST refuse a chain carrying a policy rather than accept a promise it will
+      // never honour. Accepting silently is the advertise-and-opt-out failure with
+      // the sign flipped.
+      expect(res.status >= 400, driver.describe('compensation.md §"Workflow policy"', 'a non-advertising host MUST refuse a chain carrying `compensation` (policy) — 4xx, not 200')).toBe(true);
+      expect(readErrorCode(res.json), driver.describe('capabilities.md §"Unsupported capability — refusal contract"', '`capability_required`')).toBe('capability_required');
+      return;
+    }
+    expect(res.status, driver.describe('workflow-chain-packs.md §"Compensation (RFC 0157)"', 'an advertising host expands the policy-carrying chain')).toBe(200);
+    const body = res.json as unknown as { expansionId: string; nodes: unknown[]; settings?: { compensation?: unknown } };
+    const expected = expandChainWithCompensation(chainById(CHAIN_COMP_POLICY) as unknown as WorkflowChainWithCompensation, {
+      expansionId: body.expansionId,
+      params: parameters,
+      isTypeIdResolvable: () => true,
+    });
+    expect(body.nodes).toHaveLength(expected.nodes.length);
+    // The policy's destination is the registered definition's settings.compensation
+    // (rule 9b). This seam returns the expanded fragment; whether it echoes
+    // `settings` is host-optional, so the policy carry is asserted when visible
+    // and noted when not — never assumed.
+    if (body.settings?.compensation !== undefined) {
+      expect(body.settings.compensation, driver.describe('workflow-chain-packs.md §"Compensation (RFC 0157)" rule 9b', 'the chain policy becomes settings.compensation, copied verbatim')).toEqual(expected.settingsCompensation);
+    } else {
+      softSkip('blocked', 'the expand seam does not echo `settings`, so the policy → settings.compensation carry (rule 9b) is unobservable through it; the node carry above was witnessed');
+    }
+  });
 });