@openwop/openwop-conformance 1.136.2 → 1.136.4

package/dist/cli.js

@@ -12,6 +12,7 @@
  *   openwop-conformance --filter discovery               # category filter
  *   openwop-conformance --base-url ... --api-key ... --filter "interrupt|cancellation"
  *   openwop-conformance --base-url ... --api-key ... --certify out.json   # RFC 0089 bundle
+ *   openwop-conformance --base-url ... --api-key ... --max-workers 4    # cap parallel scenario files
  *
  * Environment variables override flags (per the conformance harness's
  * existing convention):
@@ -46,6 +47,7 @@ function parseArgs(argv) {
     let implVersion;
     let certify;
     let bundleVersion = '1';
+    let maxWorkers = parseMaxWorkers(process.env.OPENWOP_MAX_WORKERS, 'OPENWOP_MAX_WORKERS');
     for (let i = 0; i < argv.length; i++) {
         const arg = argv[i] ?? '';
         if (arg === '-h' || arg === '--help') {
@@ -99,13 +101,42 @@ function parseArgs(argv) {
             case '--certify':
                 certify = nextValue();
                 break;
+            case '--max-workers':
+                maxWorkers = parseMaxWorkers(nextValue(), '--max-workers');
+                break;
             default:
                 if (arg.startsWith('-')) {
                     // Unknown flag — pass through to vitest by ignoring here.
                 }
         }
     }
-    return { baseUrl, apiKey, offline, filter, help, impl, implVersion, certify, bundleVersion };
+    return {
+        baseUrl,
+        apiKey,
+        offline,
+        filter,
+        help,
+        impl,
+        implVersion,
+        certify,
+        bundleVersion,
+        maxWorkers,
+    };
+}
+/** Parse a `--max-workers` / `OPENWOP_MAX_WORKERS` value: a positive integer, else exit 2. */
+function parseMaxWorkers(raw, source) {
+    if (raw === undefined || raw === '')
+        return undefined;
+    const n = Number(raw);
+    if (!Number.isInteger(n) || n < 1) {
+        process.stderr.write(`${source} must be a positive integer (got '${raw}')\n`);
+        process.exit(2);
+    }
+    return n;
+}
+/** The vitest argv fragment for the resolved worker cap (empty when uncapped). */
+function maxWorkersArgs(maxWorkers) {
+    return maxWorkers === undefined ? [] : ['--maxWorkers', String(maxWorkers)];
 }
 const HELP_TEXT = `openwop-conformance — run the openwop conformance suite against a server
 
@@ -129,6 +160,10 @@ Certification (RFC 0089):
                         §C) records per-requirement DISPOSITIONS instead of pass/fail/skip
                         file lists, so "we could not check" stops being indistinguishable
                         from "checked and it holds". See the note it prints.
+  --max-workers <n>     Cap concurrently running scenario files (vitest --maxWorkers).
+                        Default: one worker per CPU. Use a small number against a
+                        rate-limited production origin so 429s don't read as failures.
+                        (env: OPENWOP_MAX_WORKERS)
   --certify <out.json>  Generate a machine-readable conformance certification
                         bundle: fetch /.well-known/openwop (captured verbatim +
                         SHA-256), derive claimedProfiles from it, run the suite
@@ -271,6 +306,7 @@ async function runCertify(args, baseUrl, apiKey) {
         resolvePath(conformanceRoot, 'vitest.config.ts'),
         '--reporter=json',
         `--outputFile=${reportFile}`,
+        ...maxWorkersArgs(args.maxWorkers),
     ];
     const runResult = spawnSync('npx', vitestArgs, { cwd: conformanceRoot, env, stdio: 'inherit' });
     if (runResult.error) {
@@ -528,6 +564,7 @@ async function main() {
     if (args.filter) {
         vitestArgs.push('--testNamePattern', args.filter);
     }
+    vitestArgs.push(...maxWorkersArgs(args.maxWorkers));
     const result = spawnSync('npx', ['vitest', ...vitestArgs], {
         cwd: conformanceRoot,
         env,

package/dist/lib/profiles.js

@@ -542,6 +542,31 @@ export const PROFILE_FLOOR_SCENARIOS = {
     // `profiles.md` §`openwop-trigger-bridge`: "The runtime conformance scenarios
     // (`trigger-bridge-delivery.test.ts`, profile-gated) verify …" plus the shape.
     'openwop-trigger-bridge': { required: ['trigger-bridge-shape.test.ts', 'trigger-bridge-delivery.test.ts'] },
+    // `agent-platform-profile.md` §C — the operational annex's aggregate-evidence
+    // rule: the platform claim is BACKED BY the constituent capabilities' runtime
+    // scenarios, never asserted on shape alone. S42 (2026-08-17): the profile was
+    // pushed onto `claimedProfiles` by the discovery predicate but had NO entry
+    // here, so `requirementsFor()` returned null and the verdict was always
+    // "NOT certifiable (no floor defined)" — a host on which every `agent-*`
+    // scenario passed could never certify. Floor = the §C list; replay is
+    // discovery-conditional ("or the host's declared nondeterminism").
+    'openwop-agent-platform': {
+        required: [
+            'agent-platform-aggregate-evidence.test.ts',
+            'agent-manifest-runtime.test.ts',
+            'agent-live-runtime-shape.test.ts',
+            'tool-descriptor-shape.test.ts',
+            'tool-hooks-shape.test.ts',
+            'safefetch-behavior.test.ts',
+            'provider-usage.test.ts',
+            'prompt-list-and-fetch.test.ts',
+            'memory-capability-model-shape.test.ts',
+            'feedback-capability-shape.test.ts',
+        ],
+        conditional: [
+            { path: 'replay.modes', includes: 'replay', required: ['replayDeterminism.test.ts'] },
+        ],
+    },
     // `profiles.md` §`openwop-replay-fork`: "This profile gates
     // `replayDeterminism.test.ts` and `replay-fork.test.ts` … the conformance
     // scenarios pass on whichever mode the host advertises." Discovery-conditional

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "1.136.2",
+  "version": "1.136.4",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",

package/schemas/CORPUS-STAMP.json

@@ -1,5 +1,5 @@
 {
   "_comment": "Provenance of this vendored schemas/ copy. See conformance/README.md \u00a7\"Resolving the contract\". Compare against the stamp in your installed @openwop/openwop-conformance to detect a stale hand-copied contract.",
-  "suiteVersion": "1.136.2",
-  "corpusCommit": "4123dfae532f80231763fc43f8d3df3022c58c3d"
+  "suiteVersion": "1.136.4",
+  "corpusCommit": "abb3c77ccf7f952fbaa66b06463964fa9dd3ad36"
 }

package/src/cli.ts

@@ -12,6 +12,7 @@
  *   openwop-conformance --filter discovery               # category filter
  *   openwop-conformance --base-url ... --api-key ... --filter "interrupt|cancellation"
  *   openwop-conformance --base-url ... --api-key ... --certify out.json   # RFC 0089 bundle
+ *   openwop-conformance --base-url ... --api-key ... --max-workers 4    # cap parallel scenario files
  *
  * Environment variables override flags (per the conformance harness's
  * existing convention):
@@ -55,6 +56,13 @@ interface ParsedArgs {
   /** RFC 0089 — emit a conformance certification bundle to this path. */
   readonly certify: string | undefined;
   readonly bundleVersion: '1' | '2';
+  /**
+   * S43 (2026-08-18) — cap on concurrently running scenario FILES, forwarded to
+   * vitest `--maxWorkers`. Unset = vitest's default (one worker per CPU), which
+   * hammers a rate-limited production origin with ~460 files at once and turns
+   * `429`s into spurious reds. Env: `OPENWOP_MAX_WORKERS`.
+   */
+  readonly maxWorkers: number | undefined;
 }
 
 function parseArgs(argv: readonly string[]): ParsedArgs {
@@ -67,6 +75,7 @@ function parseArgs(argv: readonly string[]): ParsedArgs {
   let implVersion: string | undefined;
   let certify: string | undefined;
   let bundleVersion: '1' | '2' = '1';
+  let maxWorkers: number | undefined = parseMaxWorkers(process.env.OPENWOP_MAX_WORKERS, 'OPENWOP_MAX_WORKERS');
 
   for (let i = 0; i < argv.length; i++) {
     const arg = argv[i] ?? '';
@@ -121,6 +130,9 @@ function parseArgs(argv: readonly string[]): ParsedArgs {
       case '--certify':
         certify = nextValue();
         break;
+      case '--max-workers':
+        maxWorkers = parseMaxWorkers(nextValue(), '--max-workers');
+        break;
       default:
         if (arg.startsWith('-')) {
           // Unknown flag — pass through to vitest by ignoring here.
@@ -128,7 +140,34 @@ function parseArgs(argv: readonly string[]): ParsedArgs {
     }
   }
 
-  return { baseUrl, apiKey, offline, filter, help, impl, implVersion, certify, bundleVersion };
+  return {
+    baseUrl,
+    apiKey,
+    offline,
+    filter,
+    help,
+    impl,
+    implVersion,
+    certify,
+    bundleVersion,
+    maxWorkers,
+  };
+}
+
+/** Parse a `--max-workers` / `OPENWOP_MAX_WORKERS` value: a positive integer, else exit 2. */
+function parseMaxWorkers(raw: string | undefined, source: string): number | undefined {
+  if (raw === undefined || raw === '') return undefined;
+  const n = Number(raw);
+  if (!Number.isInteger(n) || n < 1) {
+    process.stderr.write(`${source} must be a positive integer (got '${raw}')\n`);
+    process.exit(2);
+  }
+  return n;
+}
+
+/** The vitest argv fragment for the resolved worker cap (empty when uncapped). */
+function maxWorkersArgs(maxWorkers: number | undefined): string[] {
+  return maxWorkers === undefined ? [] : ['--maxWorkers', String(maxWorkers)];
 }
 
 const HELP_TEXT = `openwop-conformance — run the openwop conformance suite against a server
@@ -153,6 +192,10 @@ Certification (RFC 0089):
                         §C) records per-requirement DISPOSITIONS instead of pass/fail/skip
                         file lists, so "we could not check" stops being indistinguishable
                         from "checked and it holds". See the note it prints.
+  --max-workers <n>     Cap concurrently running scenario files (vitest --maxWorkers).
+                        Default: one worker per CPU. Use a small number against a
+                        rate-limited production origin so 429s don't read as failures.
+                        (env: OPENWOP_MAX_WORKERS)
   --certify <out.json>  Generate a machine-readable conformance certification
                         bundle: fetch /.well-known/openwop (captured verbatim +
                         SHA-256), derive claimedProfiles from it, run the suite
@@ -306,6 +349,7 @@ async function runCertify(args: ParsedArgs, baseUrl: string, apiKey: string): Pr
     resolvePath(conformanceRoot, 'vitest.config.ts'),
     '--reporter=json',
     `--outputFile=${reportFile}`,
+    ...maxWorkersArgs(args.maxWorkers),
   ];
   const runResult = spawnSync('npx', vitestArgs, { cwd: conformanceRoot, env, stdio: 'inherit' });
   if (runResult.error) {
@@ -605,6 +649,7 @@ async function main(): Promise<never> {
   if (args.filter) {
     vitestArgs.push('--testNamePattern', args.filter);
   }
+  vitestArgs.push(...maxWorkersArgs(args.maxWorkers));
 
   const result = spawnSync('npx', ['vitest', ...vitestArgs], {
     cwd: conformanceRoot,

package/src/lib/feedback.ts

@@ -24,9 +24,16 @@ const SEED_FIXTURE = 'conformance-noop';
 
 /** Seeds a run via the basic `conformance-noop` fixture; null (soft-skip)
  *  when the fixture isn't advertised or creation fails. */
-export async function seedRun(tenantId: string): Promise<string | null> {
+export async function seedRun(_label: string): Promise<string | null> {
   if (!isFixtureAdvertised(SEED_FIXTURE)) return null;
-  const r = await driver.post('/v1/runs', { workflowId: SEED_FIXTURE, tenantId, inputs: {} });
+  // S41 (2026-08-17): the argument used to be sent as `tenantId` on POST /v1/runs. It was
+  // a fabricated label (`mem-attr-emit`, `feedback-cti`, …), and a host that enforces
+  // "tenantId MUST match the principal's accessible workspaces" answers 403 — MyndHyve did,
+  // which left every scenario on this helper `blocked` and kept `openwop-memory` from
+  // certifying. No caller ever needed a SECOND tenant: every leg reads back its own run.
+  // The tenant is the credential's own tenant (the host defaults it from the API key —
+  // rest-endpoints.md), which is what "a run the bearer provably owns" means.
+  const r = await driver.post('/v1/runs', { workflowId: SEED_FIXTURE, inputs: {} });
   if (r.status !== 200 && r.status !== 201) return null;
   return (r.json as { runId?: string } | undefined)?.runId ?? null;
 }

package/src/lib/memoryAttribution.ts

@@ -24,9 +24,16 @@ const SEED_FIXTURE = 'conformance-noop';
 
 /** Seeds a basic run (the host writes a run-summary on completion); null
  *  (soft-skip) when the fixture isn't advertised or creation fails. */
-export async function seedRun(tenantId: string): Promise<string | null> {
+export async function seedRun(_label: string): Promise<string | null> {
   if (!isFixtureAdvertised(SEED_FIXTURE)) return null;
-  const r = await driver.post('/v1/runs', { workflowId: SEED_FIXTURE, tenantId, inputs: {} });
+  // S41 (2026-08-17): the argument used to be sent as `tenantId` on POST /v1/runs. It was
+  // a fabricated label (`mem-attr-emit`, `feedback-cti`, …), and a host that enforces
+  // "tenantId MUST match the principal's accessible workspaces" answers 403 — MyndHyve did,
+  // which left every scenario on this helper `blocked` and kept `openwop-memory` from
+  // certifying. No caller ever needed a SECOND tenant: every leg reads back its own run.
+  // The tenant is the credential's own tenant (the host defaults it from the API key —
+  // rest-endpoints.md), which is what "a run the bearer provably owns" means.
+  const r = await driver.post('/v1/runs', { workflowId: SEED_FIXTURE, inputs: {} });
   if (r.status !== 200 && r.status !== 201) return null;
   return (r.json as { runId?: string } | undefined)?.runId ?? null;
 }

package/src/lib/profiles.ts

@@ -621,6 +621,32 @@ export const PROFILE_FLOOR_SCENARIOS: Readonly<Record<string, ProfileFloor>> = {
   // (`trigger-bridge-delivery.test.ts`, profile-gated) verify …" plus the shape.
   'openwop-trigger-bridge': { required: ['trigger-bridge-shape.test.ts', 'trigger-bridge-delivery.test.ts'] },
 
+  // `agent-platform-profile.md` §C — the operational annex's aggregate-evidence
+  // rule: the platform claim is BACKED BY the constituent capabilities' runtime
+  // scenarios, never asserted on shape alone. S42 (2026-08-17): the profile was
+  // pushed onto `claimedProfiles` by the discovery predicate but had NO entry
+  // here, so `requirementsFor()` returned null and the verdict was always
+  // "NOT certifiable (no floor defined)" — a host on which every `agent-*`
+  // scenario passed could never certify. Floor = the §C list; replay is
+  // discovery-conditional ("or the host's declared nondeterminism").
+  'openwop-agent-platform': {
+    required: [
+      'agent-platform-aggregate-evidence.test.ts',
+      'agent-manifest-runtime.test.ts',
+      'agent-live-runtime-shape.test.ts',
+      'tool-descriptor-shape.test.ts',
+      'tool-hooks-shape.test.ts',
+      'safefetch-behavior.test.ts',
+      'provider-usage.test.ts',
+      'prompt-list-and-fetch.test.ts',
+      'memory-capability-model-shape.test.ts',
+      'feedback-capability-shape.test.ts',
+    ],
+    conditional: [
+      { path: 'replay.modes', includes: 'replay', required: ['replayDeterminism.test.ts'] },
+    ],
+  },
+
   // `profiles.md` §`openwop-replay-fork`: "This profile gates
   // `replayDeterminism.test.ts` and `replay-fork.test.ts` … the conformance
   // scenarios pass on whichever mode the host advertises." Discovery-conditional

package/src/scenarios/chain-subchain-unsupported-refused.test.ts

@@ -23,16 +23,20 @@
 import { describe, it, expect } from 'vitest';
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { SCHEMAS_DIR } from '../lib/paths.js';
+import { V1_DIR } from '../lib/paths.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { readCapabilityFamily } from '../lib/discovery-capabilities.js';
 
 const cite = (section: string, requirement: string): string => `${section} — ${requirement}`;
-const CHAIN_DOC = join(SCHEMAS_DIR, '..', 'spec', 'v1', 'workflow-chain-packs.md');
+// S38 (2026-08-17): `spec/` is NOT in the published package (`files`), so a path built
+// from SCHEMAS_DIR/../spec ENOENTs for every npm consumer — five always-on legs reddened
+// MyndHyve's bundle for a reason that had nothing to do with the host. Prose legs are
+// repo-layout only: `null` in the published layout and skipped, never thrown.
+const CHAIN_DOC: string | null = V1_DIR === null ? null : join(V1_DIR, 'workflow-chain-packs.md');
 
 describe('chain-subchain-unsupported-refused §A: corpus contract (RFC 0133, always-on)', () => {
-  it('spec corpus pins sub_chain_unsupported as a 422 refusal (never flatten)', () => {
-    const doc = readFileSync(CHAIN_DOC, 'utf8');
+  it.skipIf(CHAIN_DOC === null)('spec corpus pins sub_chain_unsupported as a 422 refusal (never flatten)', () => {
+    const doc = readFileSync(CHAIN_DOC as string, 'utf8');
     expect(doc.includes('sub_chain_unsupported'), cite('§Error codes', 'the code MUST be registered')).toBe(true);
     // The normative refusal-not-flatten rule MUST appear in the composition section.
     expect(

package/src/scenarios/edge-condition-truthy-falsy.test.ts

@@ -22,14 +22,18 @@ import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import Ajv2020 from 'ajv/dist/2020.js';
 import addFormats from 'ajv-formats';
-import { SCHEMAS_DIR } from '../lib/paths.js';
+import { SCHEMAS_DIR, V1_DIR } from '../lib/paths.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { readCapabilityFamily } from '../lib/discovery-capabilities.js';
 
 const cite = (section: string, requirement: string): string => `${section} — ${requirement}`;
 const WORKFLOW_DEF = join(SCHEMAS_DIR, 'workflow-definition.schema.json');
 const MANIFEST = join(SCHEMAS_DIR, 'workflow-chain-pack-manifest.schema.json');
-const CHAIN_DOC = join(SCHEMAS_DIR, '..', 'spec', 'v1', 'workflow-chain-packs.md');
+// S38 (2026-08-17): `spec/` is NOT in the published package (`files`), so a path built
+// from SCHEMAS_DIR/../spec ENOENTs for every npm consumer — five always-on legs reddened
+// MyndHyve's bundle for a reason that had nothing to do with the host. Prose legs are
+// repo-layout only: `null` in the published layout and skipped, never thrown.
+const CHAIN_DOC: string | null = V1_DIR === null ? null : join(V1_DIR, 'workflow-chain-packs.md');
 
 function loadSchema(path: string): Record<string, unknown> {
   return JSON.parse(readFileSync(path, 'utf8')) as Record<string, unknown>;
@@ -77,8 +81,8 @@ describe('edge-condition-truthy-falsy §A: corpus (RFC 0134, always-on)', () =>
     expect(validate(pack), cite('§EdgeCondition', `truthy/falsy edges validate: ${ajv.errorsText(validate.errors)}`)).toBe(true);
   });
 
-  it('the spec documents the no-`right` + required-`left` truthy/falsy semantics', () => {
-    const doc = readFileSync(CHAIN_DOC, 'utf8');
+  it.skipIf(CHAIN_DOC === null)('the spec documents the no-`right` + required-`left` truthy/falsy semantics', () => {
+    const doc = readFileSync(CHAIN_DOC as string, 'utf8');
     expect(doc.includes('truthy'), cite('§Edge-condition operators', 'documents truthy')).toBe(true);
     expect(
       /truthy[\s\S]{0,400}(no|without).{0,20}`?right`?/i.test(doc) || /(no|without).{0,20}`?right`?[\s\S]{0,400}truthy/i.test(doc),

package/src/scenarios/self-hosted-runner.test.ts

@@ -30,6 +30,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { readFileSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
 import { join } from 'node:path';
 import { driver } from '../lib/driver.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
@@ -39,6 +40,17 @@ import { readErrorCode, readRetriable } from '../lib/error-envelope.js';
 
 const GATE = 'openwop-self-hosted-runner';
 
+// S40 (2026-08-18): every registration / dispatch id carries a per-run nonce. The
+// seam drives the host's REAL runner registry + `{runId, stepId}` result store
+// (host-sample-test-seams.md §19), so fixed ids (`runner_a_1`, `run_idem`/`step_1`)
+// collide with the previous certification run on any host whose store outlives
+// the process: the second run's FIRST dispatch is already `deduped:true` and the
+// at-most-once leg no longer proves anything, and re-registering a fixed runnerId
+// may be refused. Fresh ids per run keep both legs non-vacuous on a durable host.
+const NONCE = randomUUID().slice(0, 8);
+const SUBJECT_A = `subject_A_${NONCE}`;
+const SUBJECT_B = `subject_B_${NONCE}`;
+
 interface JsonSchema {
   properties?: Record<string, JsonSchema>;
   required?: string[];
@@ -155,15 +167,15 @@ describe('self-hosted-runner: behavioral (seam-gated, soft-skip 404)', () => {
     // MUST NOT fall back to B's runner (subject-first isolation); with no runner
     // for A the dispatch MUST fail with the retriable `runner_unavailable`.
     const reg = await driver.post(REGISTER, {
-      runnerId: 'runner_b_1',
-      subject: 'subject_B',
+      runnerId: `runner_b_${NONCE}`,
+      subject: SUBJECT_B,
       capabilities: { providers: ['anthropic'] },
     });
     if (reg.status === 404) return; // seam unwired — soft-skip
 
     const res = await driver.post(DISPATCH, {
-      subject: 'subject_A',
-      runId: 'run_iso',
+      subject: SUBJECT_A,
+      runId: `run_iso_${NONCE}`,
       stepId: 'step_0',
       seq: 0,
       kind: 'model',
@@ -189,15 +201,15 @@ describe('self-hosted-runner: behavioral (seam-gated, soft-skip 404)', () => {
 
   it('a redelivered {runId, stepId} dispatch is dropped, not re-executed (at-most-once)', async () => {
     const reg = await driver.post(REGISTER, {
-      runnerId: 'runner_a_1',
-      subject: 'subject_A',
+      runnerId: `runner_a_${NONCE}`,
+      subject: SUBJECT_A,
       capabilities: { providers: ['anthropic'] },
     });
     if (reg.status === 404) return;
 
     const frame = {
-      subject: 'subject_A',
-      runId: 'run_idem',
+      subject: SUBJECT_A,
+      runId: `run_idem_${NONCE}`,
       stepId: 'step_1',
       seq: 0,
       kind: 'model',

package/src/scenarios/workflow-chain-deferred-parameters.test.ts

@@ -40,7 +40,7 @@
 import { describe, it, expect } from 'vitest';
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { SCHEMAS_DIR } from '../lib/paths.js';
+import { SCHEMAS_DIR, V1_DIR } from '../lib/paths.js';
 import { driver } from '../lib/driver.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { readCapabilityFamily } from '../lib/discovery-capabilities.js';
@@ -53,7 +53,11 @@ import {
 
 const CAPS = join(SCHEMAS_DIR, 'capabilities.schema.json');
 const MANIFEST = join(SCHEMAS_DIR, 'workflow-chain-pack-manifest.schema.json');
-const CHAIN_DOC = join(SCHEMAS_DIR, '..', 'spec', 'v1', 'workflow-chain-packs.md');
+// S38 (2026-08-17): `spec/` is NOT in the published package (`files`), so a path built
+// from SCHEMAS_DIR/../spec ENOENTs for every npm consumer — five always-on legs reddened
+// MyndHyve's bundle for a reason that had nothing to do with the host. Prose legs are
+// repo-layout only: `null` in the published layout and skipped, never thrown.
+const CHAIN_DOC: string | null = V1_DIR === null ? null : join(V1_DIR, 'workflow-chain-packs.md');
 
 /** Spec-cited assertion message. Unlike `driver.describe`, this does NOT load
  *  env, so it is safe in always-on server-free legs (no OPENWOP_BASE_URL). */
@@ -240,8 +244,8 @@ describe('workflow-chain-deferred: schema + spec surface (always-on, server-free
     ).toBe(true);
   });
 
-  it('the spec pins the error code + the per-run credentialRef (not plaintext) supply shape', () => {
-    const spec = readFileSync(CHAIN_DOC, 'utf8');
+  it.skipIf(CHAIN_DOC === null)('the spec pins the error code + the per-run credentialRef (not plaintext) supply shape', () => {
+    const spec = readFileSync(CHAIN_DOC as string, 'utf8');
     expect(spec.includes('sensitive_param_not_deferrable'), 'error code MUST be documented').toBe(true);
     expect(
       spec.includes('credentialRef'),

package/src/scenarios/workflow-chain-internal-flag.test.ts

@@ -20,11 +20,15 @@ import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import Ajv2020 from 'ajv/dist/2020.js';
 import addFormats from 'ajv-formats';
-import { SCHEMAS_DIR } from '../lib/paths.js';
+import { SCHEMAS_DIR, V1_DIR } from '../lib/paths.js';
 
 const cite = (section: string, requirement: string): string => `${section} — ${requirement}`;
 const MANIFEST = join(SCHEMAS_DIR, 'workflow-chain-pack-manifest.schema.json');
-const CHAIN_DOC = join(SCHEMAS_DIR, '..', 'spec', 'v1', 'workflow-chain-packs.md');
+// S38 (2026-08-17): `spec/` is NOT in the published package (`files`), so a path built
+// from SCHEMAS_DIR/../spec ENOENTs for every npm consumer — five always-on legs reddened
+// MyndHyve's bundle for a reason that had nothing to do with the host. Prose legs are
+// repo-layout only: `null` in the published layout and skipped, never thrown.
+const CHAIN_DOC: string | null = V1_DIR === null ? null : join(V1_DIR, 'workflow-chain-packs.md');
 
 function packWith(internal: unknown): Record<string, unknown> {
   return {
@@ -65,8 +69,8 @@ describe('workflow-chain-internal-flag §A: corpus (RFC 0135, always-on)', () =>
     expect(validate(packWith('yes')), cite('§WorkflowChain', 'non-boolean internal rejected')).toBe(false);
   });
 
-  it('the spec documents the MUST-omit-from-default-gallery + not-an-authz-boundary rules', () => {
-    const doc = readFileSync(CHAIN_DOC, 'utf8');
+  it.skipIf(CHAIN_DOC === null)('the spec documents the MUST-omit-from-default-gallery + not-an-authz-boundary rules', () => {
+    const doc = readFileSync(CHAIN_DOC as string, 'utf8');
     expect(doc.includes('Chain visibility (RFC 0135)'), cite('§Chain visibility', 'section present')).toBe(true);
     expect(
       /internal[\s\S]{0,600}MUST omit/i.test(doc),

package/src/scenarios/workflow-variable-format.test.ts

@@ -43,7 +43,7 @@ import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import Ajv2020 from 'ajv/dist/2020.js';
 import addFormats from 'ajv-formats';
-import { SCHEMAS_DIR } from '../lib/paths.js';
+import { SCHEMAS_DIR, V1_DIR } from '../lib/paths.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { readCapabilityFamily } from '../lib/discovery-capabilities.js';
 import { isFixtureAdvertised } from '../lib/fixtures.js';
@@ -51,7 +51,12 @@ import { driver } from '../lib/driver.js';
 
 const cite = (section: string, requirement: string): string => `${section} — ${requirement}`;
 const WORKFLOW_DEF = join(SCHEMAS_DIR, 'workflow-definition.schema.json');
-const CHAIN_DOC = join(SCHEMAS_DIR, '..', 'spec', 'v1', 'workflow-chain-packs.md');
+// S38 (2026-08-17): `spec/` is NOT in the published package (`files`), so a path built
+// from SCHEMAS_DIR/../spec ENOENTs for every npm consumer — five always-on legs reddened
+// MyndHyve's bundle for a reason that had nothing to do with the host. Prose legs are
+// repo-layout only: `null` in the published layout and skipped, never thrown.
+const CHAIN_DOC: string | null = V1_DIR === null ? null : join(V1_DIR, 'workflow-chain-packs.md');
+const RFC_DOC: string | null = V1_DIR === null ? null : join(V1_DIR, '..', '..', 'RFCS', '0136-workflow-variable-format.md');
 
 function loadSchema(path: string): Record<string, unknown> {
   return JSON.parse(readFileSync(path, 'utf8')) as Record<string, unknown>;
@@ -115,8 +120,8 @@ describe('workflow-variable-format §A: corpus (RFC 0136, always-on)', () => {
     ).toBe(true);
   });
 
-  it('A4 — chain-pack spec documents deferred-mode `format` propagation as mode-scoped', () => {
-    const doc = readFileSync(CHAIN_DOC, 'utf8');
+  it.skipIf(CHAIN_DOC === null)('A4 — chain-pack spec documents deferred-mode `format` propagation as mode-scoped', () => {
+    const doc = readFileSync(CHAIN_DOC as string, 'utf8');
     const step1 = doc.slice(doc.indexOf('Materialize parameters as variables'));
     expect(step1.length > 0, cite('§Deferred-parameter expansion', 'step 1 present')).toBe(true);
     expect(
@@ -129,8 +134,8 @@ describe('workflow-variable-format §A: corpus (RFC 0136, always-on)', () => {
     ).toBe(true);
   });
 
-  it('A5 — the RFC forbids `format` participating in a `configurable` validation decision', () => {
-    const rfc = readFileSync(join(SCHEMAS_DIR, '..', 'RFCS', '0136-workflow-variable-format.md'), 'utf8');
+  it.skipIf(RFC_DOC === null)('A5 — the RFC forbids `format` participating in a `configurable` validation decision', () => {
+    const rfc = readFileSync(RFC_DOC as string, 'utf8');
     expect(
       /configurableSchema/.test(rfc),
       cite('RFC 0136', 'names the configurableSchema propagation path'),