@openwop/openwop-conformance 1.37.0 → 1.44.0

package/schemas/run-event-payloads.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v1/run-event-payloads.schema.json",
   "title": "RunEventPayloads",
-  "description": "Per-RunEventType payload schemas. The base RunEventDoc shape (run-event.schema.json) leaves `payload` permissive for forward-compat. This schema defines the canonical payload contract for each known RunEventType. Consumers MAY pin strict payload validation via `$defs.<typeId>` and `ajv.validate(schema.$defs[event.type], event.payload)`. Unknown event types MUST be tolerated (no $defs match → fold best-effort).\n\n107 variants from `run-event.schema.json#$defs.RunEventType` are covered, grouped into ~20 shape families with shared $defs. Naming convention: camelCase keys mirror dotted RunEventType names (e.g., `run.started` → `runStarted`).",
+  "description": "Per-RunEventType payload schemas. The base RunEventDoc shape (run-event.schema.json) leaves `payload` permissive for forward-compat. This schema defines the canonical payload contract for each known RunEventType. Consumers MAY pin strict payload validation via `$defs.<typeId>` and `ajv.validate(schema.$defs[event.type], event.payload)`. Unknown event types MUST be tolerated (no $defs match → fold best-effort).\n\n109 variants from `run-event.schema.json#$defs.RunEventType` are covered, grouped into ~20 shape families with shared $defs. Naming convention: camelCase keys mirror dotted RunEventType names (e.g., `run.started` → `runStarted`).",
   "type": "object",
   "$defs": {
     "_typeIndex": {
@@ -38,6 +38,8 @@
         "interrupt.requested":       { "$ref": "#/$defs/interruptRequested" },
         "interrupt.resolved":        { "$ref": "#/$defs/interruptResolved" },
         "channel.written":           { "$ref": "#/$defs/channelWritten" },
+        "channel.presence":          { "$ref": "#/$defs/channelPresence" },
+        "context.summarized":        { "$ref": "#/$defs/contextSummarized" },
         "artifact.created":          { "$ref": "#/$defs/artifactCreated" },
         "output.chunk":              { "$ref": "#/$defs/outputChunk" },
         "variable.changed":          { "$ref": "#/$defs/variableChanged" },
@@ -781,6 +783,25 @@
       "$ref": "https://openwop.dev/spec/v1/channel-written-payload.schema.json"
     },
 
+    "channelPresence": {
+      "$ref": "https://openwop.dev/spec/v1/channel-presence-payload.schema.json"
+    },
+
+    "contextSummarized": {
+      "type": "object",
+      "description": "RFC 0111. Emitted when the host replaces older in-window orchestrator transcript turns with a host-produced summary to honor `multiAgent.executionModel.contextBudget.transcriptTokenBudget`. CONTENT-FREE: the summary text is NEVER inlined — `summaryRef` is an artifactId resolved via `GET /v1/runs/{runId}/artifacts/{artifactId}`. The summary is a NONDETERMINISTIC host output governed like an RFC 0041 envelope: on `:fork mode:replay` the host MUST reuse this recorded `summaryRef` and MUST NOT re-summarize (see multi-agent-execution.md §\"Context economy (RFC 0111)\"). `replacedTurns` lists the event ids the summary stands in for, so a replay engine reconstructs the exact transcript.",
+      "required": ["iteration", "replacedTurns", "summaryRef", "tokenCounter", "tokensBefore", "tokensAfter"],
+      "properties": {
+        "iteration":     { "type": "integer", "minimum": 0, "description": "The orchestrator-loop iteration (the `runOrchestrator.decided.iteration` counter) whose transcript assembly triggered this summarization." },
+        "replacedTurns": { "type": "array", "items": { "type": "string", "minLength": 1 }, "description": "Event ids (run event-log entries) the summary stands in for. A replay engine reconstructs the exact model-facing transcript by substituting the `summaryRef` artifact for this contiguous range." },
+        "summaryRef":    { "type": "string", "minLength": 1, "description": "ArtifactId of the persisted summary (read via `GET /v1/runs/{runId}/artifacts/{artifactId}`). The summary text is NOT on the wire. MUST be persisted/readable as-of the iteration's event-log index; a host that cannot serve it at the requested `fromSeq` MUST refuse the fork (mirrors `replay_memory_snapshot_unavailable`)." },
+        "tokenCounter":  { "type": "string", "enum": ["o200k_base", "cl100k_base", "chars", "host-defined"], "description": "The unit `tokensBefore`/`tokensAfter` are denominated in. MUST equal the advertised `contextBudget.tokenCounter`." },
+        "tokensBefore":  { "type": "integer", "minimum": 0, "description": "Token count of the `replacedTurns` range before summarization, in `tokenCounter` units." },
+        "tokensAfter":   { "type": "integer", "minimum": 0, "description": "Token count of the summary that replaced the range, in `tokenCounter` units. Expected ≤ `tokensBefore`." }
+      },
+      "additionalProperties": false
+    },
+
     "artifactCreated": {
       "type": "object",
       "description": "Emitted when a node produces a typed artifact (PRD, theme, plan, etc.).",
@@ -1049,7 +1070,7 @@
 
     "providerUsage": {
       "type": "object",
-      "description": "RFC 0026. Per-call usage record emitted after every LLM provider invocation. Durably persisted in the run event log; consumed by replay, webhook subscribers, billing reconciliation. The OTel `openwop.cost.*` attribute group (per `observability.md §\"Cost attribution attributes\"`) is the observability sibling — this event type is the durable record. Replay determinism: `inputTokens` + `outputTokens` MUST replay identically; `costEstimateUsd` MAY be omitted on replay. The payload MUST NOT carry credentialRefs, hashed credential identifiers, or prompt/response substrings per `SECURITY/threat-model-secret-leakage.md §SR-1` (enforced by SECURITY invariant `provider-usage-no-credential-leak`).",
+      "description": "RFC 0026. Per-call usage record emitted after every LLM provider invocation. Durably persisted in the run event log; consumed by replay, webhook subscribers, billing reconciliation. The OTel `openwop.cost.*` attribute group (per `observability.md §\"Cost attribution attributes\"`) is the observability sibling — this event type is the durable record. Replay determinism: `inputTokens` + `outputTokens` MUST replay identically; `costEstimateUsd` MAY be omitted on replay, and so MAY the RFC 0116 cost-only `cacheReadTokens`/`cacheWriteTokens` (they are NOT replay-asserted — a prompt-prefix cache hit vs miss MUST NOT change `inputTokens`/`outputTokens` or the recorded envelope). The payload MUST NOT carry credentialRefs, hashed credential identifiers, or prompt/response substrings per `SECURITY/threat-model-secret-leakage.md §SR-1` (enforced by SECURITY invariant `provider-usage-no-credential-leak`).",
       "required": ["provider", "model", "inputTokens", "outputTokens"],
       "properties": {
         "provider":        { "type": "string", "minLength": 1, "description": "Canonical provider id (lowercase ASCII, e.g. \"anthropic\", \"openai\", \"google\"). Same value as the `openwop.cost.provider` OTel attribute." },
@@ -1060,6 +1081,8 @@
         "costEstimateUsd": { "type": "number", "minimum": 0, "description": "ADVISORY estimate in USD computed by the host's static rate table. MUST NOT be used for billing — real billing is external. Hosts SHOULD omit when no rate is known rather than emit 0." },
         "currency":        { "type": "string", "pattern": "^[A-Z]{3}$", "description": "ISO 4217 code when `costEstimateUsd` is non-USD; the field name stays `costEstimateUsd` for back-compat but `currency` overrides the implied denomination." },
         "cacheHit":        { "type": "boolean", "description": "True iff this call was served from the LLM response cache per `replay.md §\"LLM cache-key recipe\"`. When true, inputTokens/outputTokens reflect the ORIGINAL call's billed values; the cached invocation incurred zero new provider cost." },
+        "cacheReadTokens":  { "type": "integer", "minimum": 0, "description": "RFC 0116. Optional, cost-only. Provider-reported tokens served from the prompt-prefix context cache on this call — a cache HIT shows > 0. This is a cost hint, NOT a semantic input: it MAY be omitted on replay (NOT replay-asserted, like `costEstimateUsd`), and a hit-vs-miss difference MUST NOT change `inputTokens`/`outputTokens` or the recorded envelope (RFC 0116 replay-invariance MUST). MUST NOT carry prompt/response substrings per `SECURITY/threat-model-secret-leakage.md §SR-1`." },
+        "cacheWriteTokens": { "type": "integer", "minimum": 0, "description": "RFC 0116. Optional, cost-only. Provider-reported tokens written to the prompt-prefix context cache on this call (a cache PRIME). MAY be omitted on replay (NOT replay-asserted). MUST NOT change `inputTokens`/`outputTokens` or the recorded envelope, and MUST NOT carry prompt/response substrings (SR-1)." },
         "nodeId":          { "type": "string", "description": "The node id that initiated the provider call. Required for per-node cost attribution dashboards." },
         "traceId":         { "type": "string", "description": "OTel trace id linking this event to the matching `openwop.cost.*` span. Lets observability backends correlate event-log entries with traces." }
       },

package/schemas/run-event.schema.json

@@ -100,6 +100,8 @@
         "interrupt.requested",
         "interrupt.resolved",
         "channel.written",
+        "channel.presence",
+        "context.summarized",
         "artifact.created",
         "output.chunk",
         "variable.changed",

package/schemas/ui-plugin-message.schema.json

@@ -0,0 +1,90 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v1/ui-plugin-message.schema.json",
+  "title": "UiPluginMessage",
+  "description": "RFC 0117. The `ui-plugin/1` `postMessage` host-RPC envelope exchanged between a sandboxed front-end plugin and its host across the cross-origin-iframe boundary. Every message carries `openwop: \"ui-plugin/1\"` (the protocol version tag — a host MUST ignore messages whose tag it does not recognize) and is one of: a plugin→host `request` (a `method` from the closed allowlist + a monotonic `id` for response correlation), a host→plugin `response` (`ok` + `result` on success, or `ok:false` + `error` on failure), or a host→plugin `event` (a one-way notification, e.g. `host.themeChanged`). The host exposes ONLY the methods the plugin declared in its manifest `hostApi` AND that the host recognizes; any other method MUST be rejected with an `error` response, never silently executed (`frontend-plugin-rpc-allowlist`). `artifact.write` carries the optimistic-concurrency `version` token (RFC 0117 §Concurrency, modeled on the RFC 0059 `host.workspace` `If-Match`/ETag pattern). See `spec/v1/frontend-plugin-packs.md`.",
+  "oneOf": [
+    { "$ref": "#/$defs/request" },
+    { "$ref": "#/$defs/response" },
+    { "$ref": "#/$defs/event" }
+  ],
+  "$defs": {
+    "request": {
+      "type": "object",
+      "title": "UiPluginRequest",
+      "description": "Plugin→host RPC call. The host MUST reject any `method` not in BOTH the plugin's declared `hostApi` allowlist AND the host's advertised `capabilities.uiPlugins.hostApi` set, returning a `response` with `ok:false` and `error.code: \"method_not_allowed\"`.",
+      "required": ["openwop", "type", "id", "method"],
+      "additionalProperties": false,
+      "properties": {
+        "openwop": { "const": "ui-plugin/1" },
+        "type": { "const": "request" },
+        "id": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Monotonic, plugin-minted correlation id. The host's `response` echoes it verbatim."
+        },
+        "method": {
+          "type": "string",
+          "enum": ["artifact.read", "artifact.write", "host.toast", "host.navigate"]
+        },
+        "params": {
+          "type": "object",
+          "description": "Method arguments. For `artifact.write`, `params.version` is REQUIRED and carries the opaque token last returned by `artifact.read`/a prior `artifact.write` (optimistic concurrency, §Concurrency). The host MUST reject a `version` it did not mint with `error.code: \"artifact_conflict\"`.",
+          "additionalProperties": true
+        }
+      }
+    },
+    "response": {
+      "type": "object",
+      "title": "UiPluginResponse",
+      "description": "Host→plugin reply to a `request`, correlated by `id`. Exactly one of `result` (when `ok:true`) or `error` (when `ok:false`).",
+      "required": ["openwop", "type", "id", "ok"],
+      "additionalProperties": false,
+      "properties": {
+        "openwop": { "const": "ui-plugin/1" },
+        "type": { "const": "response" },
+        "id": { "type": "integer", "minimum": 0 },
+        "ok": { "type": "boolean" },
+        "result": {
+          "description": "Present iff `ok:true`. For `artifact.read` the result object carries the typed artifact payload (RFC 0071) plus an opaque `version` token. For a successful `artifact.write` the result carries the NEW opaque `version` (so the editor continues without a re-read).",
+          "type": "object",
+          "additionalProperties": true
+        },
+        "error": {
+          "description": "Present iff `ok:false`.",
+          "$ref": "#/$defs/error"
+        }
+      }
+    },
+    "event": {
+      "type": "object",
+      "title": "UiPluginEvent",
+      "description": "Host→plugin one-way notification (no `id`, no response). E.g. `host.themeChanged`. A plugin MUST tolerate unknown event names.",
+      "required": ["openwop", "type", "event"],
+      "additionalProperties": false,
+      "properties": {
+        "openwop": { "const": "ui-plugin/1" },
+        "type": { "const": "event" },
+        "event": { "type": "string" },
+        "data": { "type": "object", "additionalProperties": true }
+      }
+    },
+    "error": {
+      "type": "object",
+      "required": ["code"],
+      "additionalProperties": false,
+      "properties": {
+        "code": {
+          "type": "string",
+          "description": "Stable error code. `method_not_allowed`: the requested `method` is not in the plugin+host allowlist (`frontend-plugin-rpc-allowlist`). `artifact_conflict`: an `artifact.write` carried a stale/unknown `version` — the host MUST NOT persist and MUST return the current `version` in `currentVersion` (optimistic concurrency, parallel to RFC 0059 `workspace_conflict`). `artifact_not_found` / `unauthorized` / `internal`: standard host-mediated failures.",
+          "enum": ["method_not_allowed", "artifact_conflict", "artifact_not_found", "unauthorized", "internal"]
+        },
+        "message": { "type": "string", "description": "Human-readable detail. MUST NOT carry secret material." },
+        "currentVersion": {
+          "type": "string",
+          "description": "Present iff `code: \"artifact_conflict\"`. The host's current opaque `version` for the artifact, so the plugin can re-read/merge and retry. Opaque: the plugin MUST round-trip it verbatim and MUST NOT parse or mint it."
+        }
+      }
+    }
+  }
+}

package/src/lib/toolCatalog.ts

@@ -72,6 +72,95 @@ export async function driveToolSession(
   return (res.json as ToolSessionResult | undefined) ?? {};
 }
 
+/** A compact descriptor (RFC 0112) — the lossy `?view=compact` projection.
+ *  Closed field set: `toolId`/`source`/`safetyTier` (+ optional
+ *  `title`/`description`/`inputSchema`). The index signature lets a scenario
+ *  assert the heavy fields are ABSENT without a cast. */
+export interface CompactToolDescriptor {
+  toolId?: string;
+  source?: string;
+  safetyTier?: string;
+  title?: string;
+  description?: string;
+  inputSchema?: Record<string, unknown>;
+  [k: string]: unknown;
+}
+
+/** GET the compact tool catalog (RFC 0112 `GET /v1/tools?view=compact`).
+ *  Returns the `{ tools: CompactToolDescriptor[] }` envelope's `tools` array;
+ *  null when the host doesn't serve the read (404/405/501) or the body isn't
+ *  the expected envelope shape. */
+export async function listToolsCompact(): Promise<CompactToolDescriptor[] | null> {
+  const res = await driver.get('/v1/tools?view=compact');
+  if (res.status === 404 || res.status === 405 || res.status === 501) return null;
+  const body = res.json;
+  if (!body || typeof body !== 'object') return null;
+  const tools = (body as { tools?: unknown }).tools;
+  return Array.isArray(tools) ? (tools as CompactToolDescriptor[]) : null;
+}
+
+/** Heavy `ToolDescriptor` fields that a `CompactToolDescriptor` MUST drop
+ *  (RFC 0112). */
+export const COMPACT_DROPPED_FIELDS = [
+  'outputSchema',
+  'auth',
+  'egress',
+  'approval',
+  'replayPolicy',
+  'costHint',
+  'latencyHint',
+];
+
+/** JSON-Schema keywords a compact `inputSchema` MUST NOT use (RFC 0112 compact
+ *  structural subset). */
+export const COMPACT_INPUT_SCHEMA_BANNED = [
+  '$ref',
+  'oneOf',
+  'allOf',
+  'anyOf',
+  'not',
+  'patternProperties',
+  'dependentSchemas',
+];
+
+/** Schema-bearing keywords whose VALUES are subschemas the compact subset still
+ *  permits (object/array nesting). We recurse into these — but NOT into property
+ *  *names* — so a tool field literally named `oneOf` is not a false positive. */
+const COMPACT_SUBSCHEMA_KEYWORDS = ['items', 'additionalProperties', 'contains', 'propertyNames'];
+
+/** Recursively searches a compact `inputSchema` for any banned keyword in SCHEMA
+ *  position at ANY nesting depth (RFC 0112's structural subset is total, not just
+ *  top-level — a nested `oneOf`/`$ref` is exactly the verbosity the compact view
+ *  exists to drop). Schema-aware: it checks keywords in schema position and
+ *  recurses only into subschema-bearing positions (`properties` values, `items`,
+ *  `additionalProperties`, `prefixItems`, …), never treating a property NAME as a
+ *  keyword. Returns the first offending keyword, or null when clean. */
+export function findBannedInputSchemaKeyword(schema: unknown): string | null {
+  if (!schema || typeof schema !== 'object' || Array.isArray(schema)) return null;
+  const obj = schema as Record<string, unknown>;
+  for (const kw of COMPACT_INPUT_SCHEMA_BANNED) {
+    if (kw in obj) return kw;
+  }
+  const props = obj.properties;
+  if (props && typeof props === 'object' && !Array.isArray(props)) {
+    for (const sub of Object.values(props as Record<string, unknown>)) {
+      const hit = findBannedInputSchemaKeyword(sub);
+      if (hit) return hit;
+    }
+  }
+  for (const key of COMPACT_SUBSCHEMA_KEYWORDS) {
+    const hit = findBannedInputSchemaKeyword(obj[key]);
+    if (hit) return hit;
+  }
+  if (Array.isArray(obj.prefixItems)) {
+    for (const sub of obj.prefixItems) {
+      const hit = findBannedInputSchemaKeyword(sub);
+      if (hit) return hit;
+    }
+  }
+  return null;
+}
+
 /** The closed tool-source vocabulary (RFC 0078 §C). */
 export const TOOL_SOURCES = ['node-pack', 'workflow', 'mcp', 'connector', 'host-extension'];
 /** The closed safety-tier vocabulary (RFC 0078 §C). */