@openwop/openwop-conformance 1.134.0 → 1.135.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "1.134.0",
+  "version": "1.135.1",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",

package/schemas/CORPUS-STAMP.json

@@ -1,5 +1,5 @@
 {
   "_comment": "Provenance of this vendored schemas/ copy. See conformance/README.md \u00a7\"Resolving the contract\". Compare against the stamp in your installed @openwop/openwop-conformance to detect a stale hand-copied contract.",
-  "suiteVersion": "1.134.0",
-  "corpusCommit": "fbb82fa8ea94c25358a63fda98bd49fdb528693a"
+  "suiteVersion": "1.135.1",
+  "corpusCommit": "821921ce3b4a6cbbc20fe1aafe81a7413e10c9d9"
 }

package/schemas/capabilities.schema.json

@@ -3332,6 +3332,16 @@
           "type": "boolean",
           "description": "Host advertises a client-side MCP surface (ctx.mcp.*). See spec/v1/mcp-integration.md."
         },
+        "serverUrls": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "description": "Where the host's MCP server mount(s) answer JSON-RPC \u2014 an absolute URL or a path relative to the discovery origin (S25: a path is joined to the base URL, an absolute URL is used as-is). The v1.0 conformance baseline (`mcp-discoverability.test.ts`, spec/v1/mcp-integration.md \u00a7Conformance + interop) REQUIRES a non-empty `serverUrls` whenever `supported: true`, and since suite 1.134.0 every server-side scenario POSTs to `serverUrls[0]`. Required by the scenario and absent from this schema until 2026-08-17 (S27) \u2014 the second sibling host emitted it and measured the contradiction."
+        },
         "serverMount": {
           "type": "object",
           "description": "Server-side MCP composition (workflow IS an MCP server). When supported, the host mounts an MCP endpoint and routes inbound tools/call, resources/read, prompts/get into workflows. Inbound MUST be treated as `trustBoundary: 'untrusted'`.",

package/src/lib/discovery-capabilities.ts

@@ -47,3 +47,24 @@ export async function readCapabilityFamily<T = Record<string, unknown>>(
   if (res.status !== 200) return undefined;
   return capabilityFamily<T>(res.json, name);
 }
+
+/**
+ * A root-first VIEW of the discovery document's capability families for
+ * readers that were written against the deprecated top-level `capabilities`
+ * wrapper (RFC 0073: root is the MUST; the wrapper is a v1.x-tolerated
+ * mirror that retires at v2). Root families win; a family that exists only in
+ * the wrapper is still visible so a legacy host does not lose coverage. Until
+ * suite 1.135.0 forty-four readers consulted the wrapper ONLY, which meant a
+ * root-only host — the shape RFC 0073 asks for — silently lost their legs
+ * (S26, found by the second sibling host, which had to keep its wrapper as a
+ * mirror because of it).
+ */
+export function discoveryFamilies(doc: unknown): Record<string, unknown> {
+  if (!doc || typeof doc !== 'object') return {};
+  const root = doc as Record<string, unknown>;
+  const wrapper = root['capabilities'];
+  const merged: Record<string, unknown> = {};
+  if (wrapper && typeof wrapper === 'object' && !Array.isArray(wrapper)) Object.assign(merged, wrapper as Record<string, unknown>);
+  for (const [k, v] of Object.entries(root)) if (k !== 'capabilities') merged[k] = v;
+  return merged;
+}

package/src/lib/feedback.ts

@@ -4,6 +4,7 @@
  * standard `../lib/feedback.js` path.
  */
 import { driver } from './driver.js';
+import { discoveryFamilies } from './discovery-capabilities.js';
 import { isFixtureAdvertised } from './fixtures.js';
 
 interface DiscoveryDoc {
@@ -14,7 +15,7 @@ interface DiscoveryDoc {
 export async function readFeedbackCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const fb = top && typeof top === 'object' ? (top as Record<string, unknown>)['feedback'] : undefined;
   return fb && typeof fb === 'object' ? (fb as Record<string, unknown>) : null;
 }

package/src/lib/heartbeat.ts

@@ -3,15 +3,12 @@
  * Lives in lib/ (not a *.test.ts) so scenarios import it via `../lib/heartbeat.js`.
  */
 import { driver } from './driver.js';
-
-interface DiscoveryDoc {
-  capabilities?: Record<string, unknown>;
-}
+import { discoveryFamilies } from './discovery-capabilities.js';
 
 /** Reads `capabilities.heartbeat` from discovery; null when unadvertised. */
 export async function readHeartbeatCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
-  const caps = (res.json as DiscoveryDoc | undefined)?.capabilities;
+  const caps = discoveryFamilies(res.json);
   const hb = caps && typeof caps === 'object' ? (caps as Record<string, unknown>)['heartbeat'] : undefined;
   return hb && typeof hb === 'object' ? (hb as Record<string, unknown>) : null;
 }

package/src/lib/memoryAttribution.ts

@@ -3,16 +3,13 @@
  * Lives in lib/ (not a *.test.ts) so scenarios import it via `../lib/memoryAttribution.js`.
  */
 import { driver } from './driver.js';
+import { discoveryFamilies } from './discovery-capabilities.js';
 import { isFixtureAdvertised } from './fixtures.js';
 
-interface DiscoveryDoc {
-  capabilities?: Record<string, unknown>;
-}
-
 /** Reads `capabilities.memory.attribution` from discovery; null when unadvertised. */
 export async function readMemoryAttributionCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
-  const caps = (res.json as DiscoveryDoc | undefined)?.capabilities;
+  const caps = discoveryFamilies(res.json);
   const mem = caps && typeof caps === 'object' ? (caps as Record<string, unknown>)['memory'] : undefined;
   const attr = mem && typeof mem === 'object' ? (mem as Record<string, unknown>)['attribution'] : undefined;
   return attr && typeof attr === 'object' ? (attr as Record<string, unknown>) : null;

package/src/lib/toolHooks.ts

@@ -3,15 +3,12 @@
  * Lives in lib/ (not a *.test.ts) so scenarios import it via `../lib/toolHooks.js`.
  */
 import { driver } from './driver.js';
-
-interface DiscoveryDoc {
-  capabilities?: Record<string, unknown>;
-}
+import { discoveryFamilies } from './discovery-capabilities.js';
 
 /** Reads `capabilities.toolHooks` from discovery; null when unadvertised. */
 export async function readToolHooksCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
-  const caps = (res.json as DiscoveryDoc | undefined)?.capabilities;
+  const caps = discoveryFamilies(res.json);
   const th = caps && typeof caps === 'object' ? (caps as Record<string, unknown>)['toolHooks'] : undefined;
   return th && typeof th === 'object' ? (th as Record<string, unknown>) : null;
 }

package/src/scenarios/aiEnvelope.contractRefusal.test.ts

@@ -22,6 +22,7 @@
 
 import { describe, it, expect, afterEach } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 import { setHostCapability, resetHostCapabilities, isToggleAvailable } from '../lib/host-toggle.js';
 
 interface DiscoveryDoc {
@@ -32,7 +33,7 @@ describe('aiEnvelope.contractRefusal: advertisement shape (FINAL v1.1)', () => {
   it('opted-in hosts advertise envelopeContracts.advertised as a boolean', async () => {
     const res = await driver.get('/.well-known/openwop');
     const body = res.json as DiscoveryDoc | undefined;
-    const top = body?.capabilities as Record<string, unknown> | undefined;
+    const top = discoveryFamilies(body);
     const block = top && typeof top === 'object' ? top['envelopeContracts'] : undefined;
     if (block === undefined) return; // absent — skip
     expect(

package/src/scenarios/aiEnvelope.correlationReplay.test.ts

@@ -22,6 +22,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -30,7 +31,7 @@ interface DiscoveryDoc {
 async function isEnvelopeContractsAdvertised(): Promise<boolean> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const block = top && typeof top === 'object' ? (top['envelopeContracts'] as Record<string, unknown> | undefined) : undefined;
   return Boolean(block && block['advertised'] === true);
 }

package/src/scenarios/aiEnvelope.redaction.test.ts

@@ -24,6 +24,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -32,7 +33,7 @@ interface DiscoveryDoc {
 async function isBYOKAdvertised(): Promise<boolean> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const secrets = top && typeof top === 'object' ? top['secrets'] : undefined;
   return Boolean(secrets && typeof secrets === 'object');
 }

package/src/scenarios/aiEnvelope.schemaDrift.test.ts

@@ -29,7 +29,7 @@ interface DiscoveryDoc {
 async function isEnvelopeContractsAdvertised(): Promise<boolean> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const block = top && typeof top === 'object' ? (top['envelopeContracts'] as Record<string, unknown> | undefined) : undefined;
   return Boolean(block && block['advertised'] === true);
 }
@@ -38,7 +38,7 @@ describe('aiEnvelope.schemaDrift: advertisement shape (FINAL v1.1)', () => {
   it('capabilities.envelopeStrictness is either absent (treated as "warn") or "warn" | "strict"', async () => {
     const res = await driver.get('/.well-known/openwop');
     const body = res.json as DiscoveryDoc | undefined;
-    const top = body?.capabilities as Record<string, unknown> | undefined;
+    const top = discoveryFamilies(body);
     const val = top && typeof top === 'object' ? top['envelopeStrictness'] : undefined;
     if (val === undefined) return; // absent → treated as 'warn'; skip
     expect(
@@ -189,7 +189,7 @@ describe('aiEnvelope.schemaDrift: behavioral strictness gate (FINAL v1.1)', () =
 // E.2 OTel scrape seam.
 import { queryTestSpans, isOtelSeamAvailable } from '../lib/otel-scrape.js';
 import { resetTestSeam } from '../lib/event-log-query.js';
-import { capabilityFamily } from '../lib/discovery-capabilities.js';
+import { capabilityFamily, discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 describe('aiEnvelope.schemaDrift: OTel drift attribute projection (E.2)', () => {
   it('below-floor + strictness:warn → OTel span MUST carry envelope_schema_version_drift attribute', async () => {

package/src/scenarios/aiEnvelope.trustBoundaryPropagation.test.ts

@@ -23,6 +23,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -31,7 +32,7 @@ interface DiscoveryDoc {
 async function readMcpTrustBoundary(): Promise<string | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const mcp = top && typeof top === 'object' ? (top['mcpClient'] as Record<string, unknown> | undefined) : undefined;
   if (!mcp || typeof mcp !== 'object') return null;
   const tb = mcp['trustBoundary'];

package/src/scenarios/aiEnvelope.universalKinds.test.ts

@@ -29,7 +29,7 @@ const UNIVERSALS = ['clarification.request', 'schema.request', 'schema.response'
 async function readEnvelopeContracts(): Promise<{ advertised: boolean } | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const block = top && typeof top === 'object' ? (top['envelopeContracts'] as Record<string, unknown> | undefined) : undefined;
   if (!block || typeof block !== 'object') return null;
   return { advertised: block['advertised'] === true };
@@ -166,7 +166,7 @@ describe('aiEnvelope.universalKinds: behavioral accept via /v1/host/sample/envel
 
 // E.1 engine-projection via the test-only event-log seam.
 import { queryTestEvents, isEventLogSeamAvailable, resetTestSeam } from '../lib/event-log-query.js';
-import { capabilityFamily } from '../lib/discovery-capabilities.js';
+import { capabilityFamily, discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 describe('aiEnvelope.universalKinds: engine projection via event-log seam', () => {
   it('clarification.request MUST be lifted to interrupt.requested { kind: "clarification" } per interrupt.md', async () => {

package/src/scenarios/blob-cross-tenant-isolation.test.ts

@@ -9,6 +9,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -17,7 +18,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["blobStorage"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/blob-presign-expiry.test.ts

@@ -15,6 +15,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -23,7 +24,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["blobStorage"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/cache-cross-tenant-isolation.test.ts

@@ -9,6 +9,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -17,7 +18,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["cache"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/cache-ttl-expiry.test.ts

@@ -15,6 +15,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -23,7 +24,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["cache"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/discovery-families-view.test.ts

@@ -0,0 +1,38 @@
+/**
+ * RFC 0073 — root is the normative layout; the top-level `capabilities`
+ * wrapper is a v1.x-tolerated mirror. This pins `discoveryFamilies`, the view
+ * every reader that was written against the wrapper now goes through (S26,
+ * suite 1.135.0): root families win, a wrapper-only family is still visible,
+ * and a root-only host loses nothing.
+ *
+ * Why it exists: forty-four readers consulted the wrapper ONLY, so a host that
+ * did what RFC 0073 asks — root families, no wrapper — silently lost their
+ * legs, and the second sibling host had to keep its wrapper as a mirror
+ * because of it. Server-free, always-on.
+ */
+
+import { describe, it, expect } from 'vitest';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
+
+describe('RFC 0073 — discoveryFamilies is root-first with the deprecated wrapper as fallback', () => {
+  it('a root-only document is read as-is (the RFC 0073 shape)', () => {
+    expect(discoveryFamilies({ protocolVersion: '1.0', kvStorage: { supported: true } })).toEqual({ protocolVersion: '1.0', kvStorage: { supported: true } });
+  });
+
+  it('a wrapper-only family is still visible, and the wrapper key itself is not a family', () => {
+    const v = discoveryFamilies({ protocolVersion: '1.0', capabilities: { heartbeat: { supported: true } } });
+    expect(v['heartbeat']).toEqual({ supported: true });
+    expect('capabilities' in v).toBe(false);
+  });
+
+  it('when both carry a family, the root wins', () => {
+    const v = discoveryFamilies({ feedback: { supported: true, root: true }, capabilities: { feedback: { supported: false, root: false } } });
+    expect(v['feedback']).toEqual({ supported: true, root: true });
+  });
+
+  it('a non-object document reads as empty', () => {
+    expect(discoveryFamilies(null)).toEqual({});
+    expect(discoveryFamilies('nope')).toEqual({});
+    expect(discoveryFamilies({ capabilities: ['not', 'an', 'object'] })).toEqual({});
+  });
+});

package/src/scenarios/discovery.test.ts

@@ -8,6 +8,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 
 describe('discovery: /.well-known/openwop', () => {
@@ -182,8 +183,7 @@ const AUTH_SCOPED_PROFILE = 'openwop-discovery-auth-scoped';
 
 async function readDiscoveryCaps(): Promise<DiscoveryCaps | undefined> {
   const disco = await driver.get('/.well-known/openwop', { authenticated: false });
-  return (disco.json as { capabilities?: { discovery?: DiscoveryCaps } }).capabilities
-    ?.discovery;
+  return (discoveryFamilies(disco.json) as { discovery?: DiscoveryCaps }).discovery;
 }
 
 function isAuthScopedAdvertised(disc: DiscoveryCaps | undefined): boolean {
@@ -306,13 +306,10 @@ describe('discovery: auth-scoped is not an authorization oracle', () => {
     }
     expect(unauthorized.status).toBe(200);
 
-    const primaryCaps = Object.keys(
-      (primary.json as { capabilities?: Record<string, unknown> })?.capabilities ?? {},
-    );
-    const unauthorizedCaps = Object.keys(
-      (unauthorized.json as { capabilities?: Record<string, unknown> })?.capabilities ??
-        {},
-    );
+    // Root-first (RFC 0073); the deprecated `capabilities` wrapper is folded in
+    // so a root-only host and a wrapper-only host are compared the same way (S26).
+    const primaryCaps = Object.keys(discoveryFamilies(primary.json));
+    const unauthorizedCaps = Object.keys(discoveryFamilies(unauthorized.json));
 
     // Spec annex line 69: "Hosts MUST NOT let scoped discovery become
     // an authorization oracle. A caller should learn only about

package/src/scenarios/kv-atomic-increment.test.ts

@@ -10,6 +10,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -18,7 +19,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["kvStorage"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/kv-cas.test.ts

@@ -10,6 +10,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -18,7 +19,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["kvStorage"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/kv-cross-tenant-isolation.test.ts

@@ -18,6 +18,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -26,7 +27,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["kvStorage"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/kv-ttl-expiry.test.ts

@@ -15,6 +15,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 interface DiscoveryDoc {
   capabilities?: Record<string, unknown>;
@@ -23,7 +24,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const final = (top && typeof top === 'object') ? (top as Record<string, unknown>)["kvStorage"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);
 }

package/src/scenarios/mcp-server-elicitation-bridge.test.ts

@@ -13,6 +13,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 import { seamAbsent } from '../lib/soft-skip.js';
 import { mcpServerMount } from '../lib/mcp-mount.js';
 
@@ -23,7 +24,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const cur = (top && typeof top === 'object') ? (top as Record<string, unknown>)["mcp"] : undefined;
   const final = (cur && typeof cur === 'object') ? (cur as Record<string, unknown>)["serverMount"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);

package/src/scenarios/mcp-server-prompt-roundtrip.test.ts

@@ -8,6 +8,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 import { seamAbsent } from '../lib/soft-skip.js';
 import { mcpServerMount } from '../lib/mcp-mount.js';
 
@@ -18,7 +19,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const cur = (top && typeof top === 'object') ? (top as Record<string, unknown>)["mcp"] : undefined;
   const final = (cur && typeof cur === 'object') ? (cur as Record<string, unknown>)["serverMount"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);

package/src/scenarios/mcp-server-resource-roundtrip.test.ts

@@ -10,6 +10,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 import { seamAbsent } from '../lib/soft-skip.js';
 import { mcpServerMount } from '../lib/mcp-mount.js';
 
@@ -20,7 +21,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const cur = (top && typeof top === 'object') ? (top as Record<string, unknown>)["mcp"] : undefined;
   const final = (cur && typeof cur === 'object') ? (cur as Record<string, unknown>)["serverMount"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);

package/src/scenarios/mcp-server-sampling-bridge.test.ts

@@ -16,6 +16,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 import { seamAbsent } from '../lib/soft-skip.js';
 import { mcpServerMount } from '../lib/mcp-mount.js';
 
@@ -26,7 +27,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const cur = (top && typeof top === 'object') ? (top as Record<string, unknown>)["mcp"] : undefined;
   const final = (cur && typeof cur === 'object') ? (cur as Record<string, unknown>)["serverMount"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);

package/src/scenarios/mcp-server-tool-roundtrip.test.ts

@@ -14,6 +14,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 import { seamAbsent } from '../lib/soft-skip.js';
 import { mcpServerMount } from '../lib/mcp-mount.js';
 
@@ -24,7 +25,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const cur = (top && typeof top === 'object') ? (top as Record<string, unknown>)["mcp"] : undefined;
   const final = (cur && typeof cur === 'object') ? (cur as Record<string, unknown>)["serverMount"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);

package/src/scenarios/mcp-server-untrusted-args.test.ts

@@ -12,6 +12,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoveryFamilies } from '../lib/discovery-capabilities.js';
 import { seamAbsent } from '../lib/soft-skip.js';
 import { mcpServerMount } from '../lib/mcp-mount.js';
 
@@ -22,7 +23,7 @@ interface DiscoveryDoc {
 async function readCap(): Promise<Record<string, unknown> | null> {
   const res = await driver.get('/.well-known/openwop');
   const body = res.json as DiscoveryDoc | undefined;
-  const top = body?.capabilities as Record<string, unknown> | undefined;
+  const top = discoveryFamilies(body);
   const cur = (top && typeof top === 'object') ? (top as Record<string, unknown>)["mcp"] : undefined;
   const final = (cur && typeof cur === 'object') ? (cur as Record<string, unknown>)["serverMount"] : undefined;
   return (final && typeof final === 'object' ? (final as Record<string, unknown>) : null);

package/src/scenarios/mcp-toolcall-redaction.test.ts

@@ -22,13 +22,12 @@
 import { describe, it, expect } from 'vitest';
 import { softSkip } from '../lib/soft-skip.js';
 import { driver } from '../lib/driver.js';
-import { capabilityFamily } from '../lib/discovery-capabilities.js';
+import { capabilityFamily, discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 async function isMcpClientSupported(): Promise<boolean> {
   const disco = await driver.get('/.well-known/openwop');
-  const caps = (disco.json as { capabilities?: { mcpClient?: { supported?: boolean } } })
-    .capabilities;
-  return caps?.mcpClient?.supported === true;
+  const caps = discoveryFamilies(disco.json) as { mcpClient?: { supported?: boolean } };
+  return caps.mcpClient?.supported === true;
 }
 
 describe('mcp-toolcall-redaction: capability advertisement contract', () => {

package/src/scenarios/media-url-inline-cap.test.ts

@@ -32,7 +32,7 @@ import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { driver } from '../lib/driver.js';
 import { SCHEMAS_DIR } from '../lib/paths.js';
-import { capabilityFamily } from '../lib/discovery-capabilities.js';
+import { capabilityFamily, discoveryFamilies } from '../lib/discovery-capabilities.js';
 
 const MEDIA_KINDS = ['media.image', 'media.audio', 'media.file'] as const;
 const HTTP_SKIP = !process.env.OPENWOP_BASE_URL;
@@ -136,10 +136,8 @@ describe.skipIf(HTTP_SKIP)('media-url-inline-cap: advertisement shape (RFC 0055
     // that emits a media.* envelope into a run (so no media payload appears).
     const disc = await driver.get('/.well-known/openwop');
     if (disc.status !== 200) return;
-    const caps = (disc.json as {
-      capabilities?: { aiProviders?: { maxInlineMediaBytes?: unknown }; debugBundle?: { supported?: unknown } };
-    }).capabilities;
-    if (caps?.aiProviders?.maxInlineMediaBytes === undefined || caps.debugBundle?.supported !== true) {
+    const caps = discoveryFamilies(disc.json) as { aiProviders?: { maxInlineMediaBytes?: unknown }; debugBundle?: { supported?: unknown } };
+    if (caps.aiProviders?.maxInlineMediaBytes === undefined || caps.debugBundle?.supported !== true) {
       return; // host doesn't serve media + export debug bundles — contract not exercisable
     }
     // Find a recent run and inspect its debug bundle for any media.* event.