@openwop/openwop-conformance 1.133.0 → 1.135.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "1.133.0",
+  "version": "1.135.0",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",

package/schemas/CORPUS-STAMP.json

@@ -1,5 +1,5 @@
 {
   "_comment": "Provenance of this vendored schemas/ copy. See conformance/README.md \u00a7\"Resolving the contract\". Compare against the stamp in your installed @openwop/openwop-conformance to detect a stale hand-copied contract.",
-  "suiteVersion": "1.133.0",
-  "corpusCommit": "01d2c45b0cc72ac953bc3c996f9bc3004d3ec297"
+  "suiteVersion": "1.135.0",
+  "corpusCommit": "1b8327c673b8a11c004c17b848ba0a8d2128c2b8"
 }

package/src/lib/discovery-capabilities.ts

@@ -47,3 +47,24 @@ export async function readCapabilityFamily<T = Record<string, unknown>>(
   if (res.status !== 200) return undefined;
   return capabilityFamily<T>(res.json, name);
 }
+
+/**
+ * A root-first VIEW of the discovery document's capability families for
+ * readers that were written against the deprecated top-level `capabilities`
+ * wrapper (RFC 0073: root is the MUST; the wrapper is a v1.x-tolerated
+ * mirror that retires at v2). Root families win; a family that exists only in
+ * the wrapper is still visible so a legacy host does not lose coverage. Until
+ * suite 1.135.0 forty-four readers consulted the wrapper ONLY, which meant a
+ * root-only host — the shape RFC 0073 asks for — silently lost their legs
+ * (S26, found by the second sibling host, which had to keep its wrapper as a
+ * mirror because of it).
+ */
+export function discoveryFamilies(doc: unknown): Record<string, unknown> {
+  if (!doc || typeof doc !== 'object') return {};
+  const root = doc as Record<string, unknown>;
+  const wrapper = root['capabilities'];
+  const merged: Record<string, unknown> = {};
+  if (wrapper && typeof wrapper === 'object' && !Array.isArray(wrapper)) Object.assign(merged, wrapper as Record<string, unknown>);
+  for (const [k, v] of Object.entries(root)) if (k !== 'capabilities') merged[k] = v;
+  return merged;
+}

package/src/lib/driver.ts

@@ -35,7 +35,9 @@ class OpenWOPDriver {
     init: OpenWOPRequestInit = {},
   ): Promise<OpenWOPResponse> {
     const env = loadEnv();
-    const url = `${env.baseUrl}${path}`;
+    // An absolute URL is used as-is (a host may advertise its MCP server mount or
+    // an A2A endpoint on another origin); a path is joined to the base URL.
+    const url = /^https?:\/\//i.test(path) ? path : `${env.baseUrl}${path}`;
 
     const headers: Record<string, string> = {
       Accept: 'application/json',

package/src/lib/feedback.ts

@@ -4,6 +4,7 @@
  * standard `../lib/feedback.js` path.
  */
 import { driver } from './driver.js';
+import { discoveryFamilies } from './discovery-capabilities.js';
 import { isFixtureAdvertised } from './fixtures.js';
 
 interface DiscoveryDoc {
@@ -14,7 +15,7 @@ interface DiscoveryDoc {
 export async function readFeedbackCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const fb = top && typeof top === 'object' ? (top as Record<string, unknown>)['feedback'] : undefined;
   return fb && typeof fb === 'object' ? (fb as Record<string, unknown>) : null;
 }

package/src/lib/heartbeat.ts

@@ -3,15 +3,12 @@
  * Lives in lib/ (not a *.test.ts) so scenarios import it via `../lib/heartbeat.js`.
  */
 import { driver } from './driver.js';
-
-interface DiscoveryDoc {
-  capabilities?: Record<string, unknown>;
-}
+import { discoveryFamilies } from './discovery-capabilities.js';
 
 /** Reads `capabilities.heartbeat` from discovery; null when unadvertised. */
 export async function readHeartbeatCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
-  const caps = (res.json as DiscoveryDoc | undefined)?.capabilities;
+  const caps = discoveryFamilies(res.json);
   const hb = caps && typeof caps === 'object' ? (caps as Record<string, unknown>)['heartbeat'] : undefined;
   return hb && typeof hb === 'object' ? (hb as Record<string, unknown>) : null;
 }

package/src/lib/mcp-mount.ts

@@ -0,0 +1,39 @@
+/**
+ * Where a host mounts its MCP server (RFC 0153 §B / `mcp-integration.md`
+ * §"MCP server composition").
+ *
+ * The reference boots mount it at the sample-seam path
+ * `/v1/host/sample/mcp`, and until suite 1.134.0 every server-side MCP
+ * scenario hard-coded that path. The v1.0 discovery baseline has always let a
+ * host SAY where its mount is — `capabilities.mcp.serverUrls: string[]`
+ * (`mcp-discoverability.test.ts`) — and the first deployed host to advertise
+ * `mcp-2026-07-28` mounted at `/v1/host/openwop-app/mcp`, advertised exactly
+ * that, and watched ten `server/discover` legs 404 against the sample path and
+ * return early (S25, openwop-app H38, 2026-08-17). So: read the advert first,
+ * fall back to the sample path, and never treat "the mount answered 404" as a
+ * pass — that is `seamAbsent` (the host advertised a server mount it does not
+ * serve where it said).
+ */
+import { driver } from './driver.js';
+import { capabilityFamily } from './discovery-capabilities.js';
+
+export const SAMPLE_MCP_MOUNT = '/v1/host/sample/mcp';
+
+interface McpAdvert {
+  readonly supported?: boolean;
+  readonly serverUrls?: unknown;
+  readonly serverMount?: { readonly supported?: boolean };
+}
+
+/**
+ * The MCP server mount to POST JSON-RPC to: `capabilities.mcp.serverUrls[0]`
+ * when the host advertises one (a path is joined to the base URL by the driver;
+ * an absolute URL is used as-is), else the sample-seam path.
+ */
+export async function mcpServerMount(): Promise<string> {
+  const disco = await driver.get('/.well-known/openwop');
+  const mcp = capabilityFamily<McpAdvert>(disco.json, 'mcp');
+  const urls = Array.isArray(mcp?.serverUrls) ? (mcp?.serverUrls as unknown[]) : [];
+  const first = urls.find((u): u is string => typeof u === 'string' && u.length > 0);
+  return first ?? SAMPLE_MCP_MOUNT;
+}

package/src/lib/memoryAttribution.ts

@@ -3,16 +3,13 @@
  * Lives in lib/ (not a *.test.ts) so scenarios import it via `../lib/memoryAttribution.js`.
  */
 import { driver } from './driver.js';
+import { discoveryFamilies } from './discovery-capabilities.js';
 import { isFixtureAdvertised } from './fixtures.js';
 
-interface DiscoveryDoc {
-  capabilities?: Record<string, unknown>;
-}
-
 /** Reads `capabilities.memory.attribution` from discovery; null when unadvertised. */
 export async function readMemoryAttributionCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
-  const caps = (res.json as DiscoveryDoc | undefined)?.capabilities;
+  const caps = discoveryFamilies(res.json);
   const mem = caps && typeof caps === 'object' ? (caps as Record<string, unknown>)['memory'] : undefined;
   const attr = mem && typeof mem === 'object' ? (mem as Record<string, unknown>)['attribution'] : undefined;
   return attr && typeof attr === 'object' ? (attr as Record<string, unknown>) : null;

package/src/lib/toolHooks.ts

@@ -3,15 +3,12 @@
  * Lives in lib/ (not a *.test.ts) so scenarios import it via `../lib/toolHooks.js`.
  */
 import { driver } from './driver.js';
-
-interface DiscoveryDoc {
-  capabilities?: Record<string, unknown>;
-}
+import { discoveryFamilies } from './discovery-capabilities.js';
 
 /** Reads `capabilities.toolHooks` from discovery; null when unadvertised. */
 export async function readToolHooksCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
-  const caps = (res.json as DiscoveryDoc | undefined)?.capabilities;
+  const caps = discoveryFamilies(res.json);
   const th = caps && typeof caps === 'object' ? (caps as Record<string, unknown>)['toolHooks'] : undefined;
   return th && typeof th === 'object' ? (th as Record<string, unknown>) : null;
 }

package/src/scenarios/aiEnvelope.contractRefusal.test.ts

@@ -22,6 +22,7 @@
 
 import { describe, it, expect, afterEach } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 import { setHostCapability, resetHostCapabilities, isToggleAvailable } from '../lib/host-toggle.js';
 
 interface DiscoveryDoc {
@@ -32,7 +33,7 @@ describe('aiEnvelope.contractRefusal: advertisement shape (FINAL v1.1)', () => {
   it('opted-in hosts advertise envelopeContracts.advertised as a boolean', async () => {
     const res = await driver.get('/.well-known/openwop');
     const body = res.json as DiscoveryDoc | undefined;
-    const top = body?.capabilities as Record<string, unknown> | undefined;
+    const top = discoveryFamilies(body);
     const block = top && typeof top === 'object' ? top['envelopeContracts'] : undefined;
     if (block === undefined) return; // absent — skip
     expect(

package/src/scenarios/aiEnvelope.correlationReplay.test.ts

@@ -22,6 +22,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -30,7 +31,7 @@ interface DiscoveryDoc {
 async function isEnvelopeContractsAdvertised(): Promise<boolean> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const block = top && typeof top === 'object' ? (top['envelopeContracts'] as Record<string, unknown> | undefined) : undefined;
   return Boolean(block && block['advertised'] === true);
 }

package/src/scenarios/aiEnvelope.redaction.test.ts

@@ -24,6 +24,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -32,7 +33,7 @@ interface DiscoveryDoc {
 async function isBYOKAdvertised(): Promise<boolean> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const secrets = top && typeof top === 'object' ? top['secrets'] : undefined;
   return Boolean(secrets && typeof secrets === 'object');
 }

package/src/scenarios/aiEnvelope.schemaDrift.test.ts

@@ -29,7 +29,7 @@ interface DiscoveryDoc {
 async function isEnvelopeContractsAdvertised(): Promise<boolean> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const block = top && typeof top === 'object' ? (top['envelopeContracts'] as Record<string, unknown> | undefined) : undefined;
   return Boolean(block && block['advertised'] === true);
 }
@@ -38,7 +38,7 @@ describe('aiEnvelope.schemaDrift: advertisement shape (FINAL v1.1)', () => {
   it('capabilities.envelopeStrictness is either absent (treated as "warn") or "warn" | "strict"', async () => {
     const res = await driver.get('/.well-known/openwop');
     const body = res.json as DiscoveryDoc | undefined;
-    const top = body?.capabilities as Record<string, unknown> | undefined;
+    const top = discoveryFamilies(body);
     const val = top && typeof top === 'object' ? top['envelopeStrictness'] : undefined;
     if (val === undefined) return; // absent → treated as 'warn'; skip
     expect(
@@ -189,7 +189,7 @@ describe('aiEnvelope.schemaDrift: behavioral strictness gate (FINAL v1.1)', () =
 // E.2 OTel scrape seam.
 import { queryTestSpans, isOtelSeamAvailable } from '../lib/otel-scrape.js';
 import { resetTestSeam } from '../lib/event-log-query.js';
-import { capabilityFamily } from '../lib/discovery-capabilities.js';
+import { capabilityFamily, discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 describe('aiEnvelope.schemaDrift: OTel drift attribute projection (E.2)', () => {
   it('below-floor + strictness:warn → OTel span MUST carry envelope_schema_version_drift attribute', async () => {

package/src/scenarios/aiEnvelope.trustBoundaryPropagation.test.ts

@@ -23,6 +23,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -31,7 +32,7 @@ interface DiscoveryDoc {
 async function readMcpTrustBoundary(): Promise<string | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const mcp = top && typeof top === 'object' ? (top['mcpClient'] as Record<string, unknown> | undefined) : undefined;
   if (!mcp || typeof mcp !== 'object') return null;
   const tb = mcp['trustBoundary'];

package/src/scenarios/aiEnvelope.universalKinds.test.ts

@@ -29,7 +29,7 @@ const UNIVERSALS = ['clarification.request', 'schema.request', 'schema.response'
 async function readEnvelopeContracts(): Promise<{ advertised: boolean } | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const block = top && typeof top === 'object' ? (top['envelopeContracts'] as Record<string, unknown> | undefined) : undefined;
   if (!block || typeof block !== 'object') return null;
   return { advertised: block['advertised'] === true };
@@ -166,7 +166,7 @@ describe('aiEnvelope.universalKinds: behavioral accept via /v1/host/sample/envel
 
 // E.1 engine-projection via the test-only event-log seam.
 import { queryTestEvents, isEventLogSeamAvailable, resetTestSeam } from '../lib/event-log-query.js';
-import { capabilityFamily } from '../lib/discovery-capabilities.js';
+import { capabilityFamily, discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 describe('aiEnvelope.universalKinds: engine projection via event-log seam', () => {
   it('clarification.request MUST be lifted to interrupt.requested { kind: "clarification" } per interrupt.md', async () => {

package/src/scenarios/blob-cross-tenant-isolation.test.ts

@@ -9,6 +9,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -17,7 +18,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["blobStorage"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/blob-presign-expiry.test.ts

@@ -15,6 +15,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -23,7 +24,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["blobStorage"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/cache-cross-tenant-isolation.test.ts

@@ -9,6 +9,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -17,7 +18,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["cache"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/cache-ttl-expiry.test.ts

@@ -15,6 +15,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -23,7 +24,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["cache"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/discovery-families-view.test.ts

@@ -0,0 +1,38 @@
+/**
+ * RFC 0073 — root is the normative layout; the top-level `capabilities`
+ * wrapper is a v1.x-tolerated mirror. This pins `discoveryFamilies`, the view
+ * every reader that was written against the wrapper now goes through (S26,
+ * suite 1.135.0): root families win, a wrapper-only family is still visible,
+ * and a root-only host loses nothing.
+ *
+ * Why it exists: forty-four readers consulted the wrapper ONLY, so a host that
+ * did what RFC 0073 asks — root families, no wrapper — silently lost their
+ * legs, and the second sibling host had to keep its wrapper as a mirror
+ * because of it. Server-free, always-on.
+ */
+
+import { describe, it, expect } from 'vitest';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
+
+describe('RFC 0073 — discoveryFamilies is root-first with the deprecated wrapper as fallback', () => {
+  it('a root-only document is read as-is (the RFC 0073 shape)', () => {
+    expect(discoveryFamilies({ protocolVersion: '1.0', kvStorage: { supported: true } })).toEqual({ protocolVersion: '1.0', kvStorage: { supported: true } });
+  });
+
+  it('a wrapper-only family is still visible, and the wrapper key itself is not a family', () => {
+    const v = discoveryFamilies({ protocolVersion: '1.0', capabilities: { heartbeat: { supported: true } } });
+    expect(v['heartbeat']).toEqual({ supported: true });
+    expect('capabilities' in v).toBe(false);
+  });
+
+  it('when both carry a family, the root wins', () => {
+    const v = discoveryFamilies({ feedback: { supported: true, root: true }, capabilities: { feedback: { supported: false, root: false } } });
+    expect(v['feedback']).toEqual({ supported: true, root: true });
+  });
+
+  it('a non-object document reads as empty', () => {
+    expect(discoveryFamilies(null)).toEqual({});
+    expect(discoveryFamilies('nope')).toEqual({});
+    expect(discoveryFamilies({ capabilities: ['not', 'an', 'object'] })).toEqual({});
+  });
+});

package/src/scenarios/discovery.test.ts

@@ -8,6 +8,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 
 describe('discovery: /.well-known/openwop', () => {
@@ -306,13 +307,10 @@ describe('discovery: auth-scoped is not an authorization oracle', () => {
     }
     expect(unauthorized.status).toBe(200);
 
-    const primaryCaps = Object.keys(
-      (primary.json as { capabilities?: Record<string, unknown> })?.capabilities ?? {},
-    );
-    const unauthorizedCaps = Object.keys(
-      (unauthorized.json as { capabilities?: Record<string, unknown> })?.capabilities ??
-        {},
-    );
+    // Root-first (RFC 0073); the deprecated `capabilities` wrapper is folded in
+    // so a root-only host and a wrapper-only host are compared the same way (S26).
+    const primaryCaps = Object.keys(discoveryFamilies(primary.json));
+    const unauthorizedCaps = Object.keys(discoveryFamilies(unauthorized.json));
 
     // Spec annex line 69: "Hosts MUST NOT let scoped discovery become
     // an authorization oracle. A caller should learn only about

package/src/scenarios/kv-atomic-increment.test.ts

@@ -10,6 +10,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -18,7 +19,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["kvStorage"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/kv-cas.test.ts

@@ -10,6 +10,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -18,7 +19,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["kvStorage"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/kv-cross-tenant-isolation.test.ts

@@ -18,6 +18,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -26,7 +27,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["kvStorage"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/kv-ttl-expiry.test.ts

@@ -15,6 +15,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -23,7 +24,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["kvStorage"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/mcp-2026-07-28-discover.test.ts

@@ -25,6 +25,8 @@
 
 import { describe, it, expect, beforeAll, afterAll } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { seamAbsent } from '../lib/soft-skip.js';
+import { mcpServerMount } from '../lib/mcp-mount.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { capabilityFamily } from '../lib/discovery-capabilities.js';
 import { McpFakeServer, MCP_ERR } from '../lib/mcp-fake-server.js';
@@ -170,7 +172,7 @@ async function claimsCurrent(): Promise<boolean> {
 }
 async function hostRpc(method: string, params: Record<string, unknown>, headers: Record<string, string>) {
   // The reference host mounts its MCP server at /v1/host/sample/mcp (mcp-server-* scenarios).
-  const res = await driver.post('/v1/host/sample/mcp', { jsonrpc: '2.0', id: 1, method, params }, { headers });
+  const res = await driver.post(await mcpServerMount(), { jsonrpc: '2.0', id: 1, method, params }, { headers });
   return { status: res.status, body: res.json as { result?: Record<string, unknown>; error?: { code: number; data?: Record<string, unknown> } } };
 }
 
@@ -179,7 +181,7 @@ describe.skipIf(!process.env.OPENWOP_BASE_URL)('RFC 0153 §B — host as MCP ser
     if (!behaviorGate(PROFILE, await claimsCurrent())) return;
     const caps = (await mcp())!;
     const r = await hostRpc('server/discover', { _meta: { [META_V]: '2026-07-28', [META_C]: {} } }, { 'MCP-Protocol-Version': '2026-07-28', 'Mcp-Method': 'server/discover' });
-    if (r.status === 404 || r.status === 403) return; // mount not wired at the sample path — the mcp-server-* legs cover that gap
+    if (r.status === 404 || r.status === 403) return seamAbsent(`host advertises an MCP server mount but the mount (capabilities.mcp.serverUrls[0], else /v1/host/sample/mcp) answered ${r.status} — RFC 0153 §B is unobservable at the path the host itself advertised`);
     expect(r.status, driver.describe('mcp-integration.md §B', 'server/discover is a server MUST under 2026-07-28')).toBe(200);
     expect(r.body.result?.['resultType']).toBe('complete');
     expect([...((r.body.result?.['supportedVersions'] as string[] | undefined) ?? [])].sort(), driver.describe('mcp-integration.md §B', 'server/discover.supportedVersions MUST equal capabilities.mcp.protocolVersions — two documents, one fact')).toEqual([...(caps.protocolVersions ?? [])].sort());
@@ -196,7 +198,7 @@ describe.skipIf(!process.env.OPENWOP_BASE_URL)('RFC 0153 §B — host as MCP ser
     // answered -32022 — the leg was testing an unstated precedence
     // (mcp-integration.md §B: agreement is checked before selection).
     const mismatch = await hostRpc('tools/list', { _meta: { [META_V]: '2025-06-18', [META_C]: {} } }, { 'MCP-Protocol-Version': '2026-07-28', 'Mcp-Method': 'tools/list' });
-    if (mismatch.status === 404 || mismatch.status === 403) return;
+    if (mismatch.status === 404 || mismatch.status === 403) return seamAbsent(`host advertises an MCP server mount but the mount (capabilities.mcp.serverUrls[0], else /v1/host/sample/mcp) answered ${mismatch.status} — RFC 0153 §B is unobservable at the path the host itself advertised`);
     expect(mismatch.status, driver.describe('mcp-integration.md §B', 'header ≠ body MUST be refused 400 (HeaderMismatchError -32020) — fail closed')).toBe(400);
     expect(mismatch.body.error?.code).toBe(MCP_ERR.HEADER_MISMATCH);
     const unsupported = await hostRpc('tools/list', { _meta: { [META_V]: '1999-01-01', [META_C]: {} } }, { 'MCP-Protocol-Version': '1999-01-01', 'Mcp-Method': 'tools/list' });

package/src/scenarios/mcp-cache-tenant-scope.test.ts

@@ -22,6 +22,8 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { seamAbsent } from '../lib/soft-skip.js';
+import { mcpServerMount } from '../lib/mcp-mount.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { capabilityFamily } from '../lib/discovery-capabilities.js';
 
@@ -38,7 +40,7 @@ async function claimsCurrent(): Promise<boolean> {
 async function listAs(bearer?: string) {
   const headers: Record<string, string> = { 'MCP-Protocol-Version': '2026-07-28', 'Mcp-Method': 'tools/list' };
   if (bearer) headers['authorization'] = `Bearer ${bearer}`;
-  const res = await driver.post('/v1/host/sample/mcp', { jsonrpc: '2.0', id: 1, method: 'tools/list', params: { _meta: { [META_V]: '2026-07-28', [META_C]: {} } } }, { headers });
+  const res = await driver.post(await mcpServerMount(), { jsonrpc: '2.0', id: 1, method: 'tools/list', params: { _meta: { [META_V]: '2026-07-28', [META_C]: {} } } }, { headers });
   return { status: res.status, body: res.json as { result?: { tools?: unknown[]; cacheScope?: string; ttlMs?: number } } };
 }
 
@@ -46,7 +48,7 @@ describe.skipIf(!process.env.OPENWOP_BASE_URL)('RFC 0153 §D — mcp-cache-tenan
   it('a per-caller list is cacheScope private; a public list is byte-identical across callers', async () => {
     if (!behaviorGate(PROFILE, await claimsCurrent())) return;
     const mine = await listAs();
-    if (mine.status === 404 || mine.status === 403) return;
+    if (mine.status === 404 || mine.status === 403) return seamAbsent(`host advertises an MCP server mount but the mount (capabilities.mcp.serverUrls[0], else /v1/host/sample/mcp) answered ${mine.status} — RFC 0153 §B is unobservable at the path the host itself advertised`);
     expect(['public', 'private'], driver.describe('mcp-integration.md §D', 'cacheScope MUST be present on tools/list')).toContain(mine.body.result?.cacheScope);
     const other = process.env.OPENWOP_TEST_SECONDARY_API_KEY;
     if (!other) {

package/src/scenarios/mcp-current-auth-boundary.test.ts

@@ -18,6 +18,8 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { seamAbsent } from '../lib/soft-skip.js';
+import { mcpServerMount } from '../lib/mcp-mount.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { capabilityFamily } from '../lib/discovery-capabilities.js';
 
@@ -38,10 +40,10 @@ describe.skipIf(!process.env.OPENWOP_BASE_URL)('RFC 0153 §E — mcp-current-aut
     const { mcp, anon } = await disco();
     const claims = mcp?.supported === true && (mcp.profiles ?? []).includes(PROFILE) && mcp.serverMount?.supported === true;
     if (!behaviorGate(PROFILE, claims)) return;
-    const authed = await driver.post('/v1/host/sample/mcp', REQ, { headers: HDR });
-    if (authed.status === 404 || authed.status === 403) return; // mount not at the sample path
+    const authed = await driver.post(await mcpServerMount(), REQ, { headers: HDR });
+    if (authed.status === 404 || authed.status === 403) return seamAbsent(`host advertises an MCP server mount but the mount (capabilities.mcp.serverUrls[0], else /v1/host/sample/mcp) answered ${authed.status} — RFC 0153 §B is unobservable at the path the host itself advertised`);
     expect(authed.status, driver.describe('mcp-integration.md §E', 'the authenticated call MUST succeed at the same path, so a refusal below is not a wrong path')).toBe(200);
-    const anonymous = await driver.post('/v1/host/sample/mcp', REQ, { headers: HDR, authenticated: false });
+    const anonymous = await driver.post(await mcpServerMount(), REQ, { headers: HDR, authenticated: false });
     if (anon?.supported === true) {
       // Anonymous is permitted only through the RFC 0132 surface; a 200 here is that surface answering.
       expect([200, 401, 403]).toContain(anonymous.status);

package/src/scenarios/mcp-extension-opacity.test.ts

@@ -23,6 +23,7 @@
 import { describe, it, expect } from 'vitest';
 import { softSkip, seamAbsent } from '../lib/soft-skip.js';
 import { driver } from '../lib/driver.js';
+import { mcpServerMount } from '../lib/mcp-mount.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { capabilityFamily } from '../lib/discovery-capabilities.js';
 import { getMcpFakeServer } from '../lib/mcp-fake-server.js';
@@ -66,7 +67,7 @@ describe.skipIf(!process.env.OPENWOP_BASE_URL)('RFC 0153 §D — mcp-extension-o
     const caps = await mcp();
     const claims = caps?.supported === true && (caps.profiles ?? []).includes('mcp-2026-07-28') && caps.serverMount?.supported === true;
     if (!behaviorGate('mcp-2026-07-28', claims)) return;
-    const res = await driver.post('/v1/host/sample/mcp', {
+    const res = await driver.post(await mcpServerMount(), {
       jsonrpc: '2.0', id: 1, method: 'tools/list',
       params: { _meta: { [META_V]: '2026-07-28', [META_C]: { extensions: { 'io.example/authority': { admin: true } } }, 'io.example/authority': { grantScopes: ['*'] } } },
     }, { headers: { 'MCP-Protocol-Version': '2026-07-28', 'Mcp-Method': 'tools/list' } });