@openwop/openwop-conformance 1.67.0 → 1.67.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "1.67.0",
+  "version": "1.67.1",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",

package/src/scenarios/connection-pack-reach-exclusive.test.ts

@@ -36,6 +36,12 @@ type Manifest = Record<string, unknown> & { provider: Record<string, unknown> };
 function withReach(reach: Record<string, unknown>): Manifest {
   const m = JSON.parse(readFileSync(FIXTURE_PATH, 'utf8')) as Manifest;
   m.provider.reach = reach;
+  // openapi reach REQUIRES provider.apiHosts (RFC 0120 §A, schema
+  // provider/allOf/0/then/required); other modes MUST NOT carry it. Set it here
+  // so the manifest validates against a live corpus root, not just the vendored
+  // snapshot. (Suite defect, fixed 2026-08-09.)
+  if ('openapi' in reach) m.provider.apiHosts = ['api.github.com'];
+  else delete m.provider.apiHosts;
   return m;
 }
 

package/src/scenarios/model-capability-substituted.test.ts

@@ -79,7 +79,15 @@ describe.skipIf(HTTP_SKIP)('model-capability-substituted: advertisement shape (R
         Array.isArray(mc.advertised),
         driver.describe('RFCS/0031-envelope-variants-and-model-capabilities.md §E', 'modelCapabilities.advertised MUST be an array of capability identifiers'),
       ).toBe(true);
-      const SPEC_RESERVED = ['structured-output', 'discriminator-enum', 'long-context', 'reasoning', 'function-calling'];
+      // RFC 0031 §C's five, PLUS the four modality identifiers RFC 0055 §A
+      // promoted into the formal vocabulary (Accepted 2026-05-26; registered in
+      // `capabilities.schema.json` advertised.description + the RFC 0031 §C
+      // table). A host advertising `vision-input` etc. is conformant; the
+      // pre-0055 five-element list rejected it. (Suite defect, fixed 2026-08-09.)
+      const SPEC_RESERVED = [
+        'structured-output', 'discriminator-enum', 'long-context', 'reasoning', 'function-calling',
+        'vision-input', 'audio-input', 'audio-output', 'image-output',
+      ];
       for (const id of mc.advertised as unknown[]) {
         expect(typeof id, 'each advertised identifier MUST be a string').toBe('string');
         const idStr = String(id);
@@ -89,7 +97,7 @@ describe.skipIf(HTTP_SKIP)('model-capability-substituted: advertisement shape (R
           isReserved || isHostExt,
           driver.describe(
             'RFCS/0031-envelope-variants-and-model-capabilities.md §C',
-            `advertised identifier "${idStr}" MUST be spec-reserved (structured-output, discriminator-enum, long-context, reasoning, function-calling) or match the x-host-<host>-<key> extension pattern`,
+            `advertised identifier "${idStr}" MUST be spec-reserved (RFC 0031: structured-output, discriminator-enum, long-context, reasoning, function-calling; RFC 0055: vision-input, audio-input, audio-output, image-output) or match the x-host-<host>-<key> extension pattern`,
           ),
         ).toBe(true);
       }

package/src/scenarios/run-transport-economy.test.ts

@@ -202,8 +202,18 @@ describe.skipIf(HTTP_SKIP)('run-transport-economy: Content-Encoding round-trips
         : undefined;
 
     for (const enc of encodings) {
-      // Manually set Accept-Encoding so undici returns the raw compressed
-      // bytes (it only auto-decompresses encodings it negotiated itself).
+      // Set Accept-Encoding to the target so the host tags Content-Encoding.
+      // NOTE (suite defect, fixed 2026-08-09): the prior code assumed a manual
+      // Accept-Encoding makes undici return RAW compressed bytes. It does not —
+      // Node's global fetch (undici) AUTO-DECOMPRESSES `gzip`/`br`/`zstd`
+      // regardless of who set the header, so `res.arrayBuffer()` already yields
+      // the identity body and feeding it to `gunzipSync` throws
+      // "Decompression failed". (`zstd` passed only because undici did not yet
+      // recognise it.) We therefore decode-tolerantly: attempt the declared
+      // decode, and if it throws OR the bytes already equal identity, treat the
+      // body as already-decompressed by undici. The Content-Encoding header
+      // assertion below still proves the host advertised and tagged the
+      // encoding; the byte-compare proves the round-trip is lossless.
       const res = await fetch(url, { headers: { ...auth, 'Accept-Encoding': enc } });
       expect(res.status).toBe(200);
       const contentEncoding = res.headers.get('content-encoding');
@@ -215,15 +225,28 @@ describe.skipIf(HTTP_SKIP)('run-transport-economy: Content-Encoding round-trips
         ),
       ).toBe(enc);
 
-      const compressedBytes = Buffer.from(await res.arrayBuffer());
+      const responseBytes = Buffer.from(await res.arrayBuffer());
       const decode = enc === 'gzip' ? gunzipSync : enc === 'br' ? brotliDecompressSync : zstdDecode;
       if (!decode) {
         // zstd decode unavailable in this runtime: negotiation already
         // asserted above; skip only the byte-compare for this encoding.
-        expect(compressedBytes.length).toBeGreaterThan(0);
+        expect(responseBytes.length).toBeGreaterThan(0);
         continue;
       }
-      const decoded = Buffer.from(decode(compressedBytes));
+      // Tolerate undici auto-decompression: if the body already equals identity,
+      // it was decoded in transit; otherwise it is raw and we decode it here.
+      let decoded: Buffer;
+      if (responseBytes.equals(identityBytes)) {
+        decoded = responseBytes;
+      } else {
+        try {
+          decoded = Buffer.from(decode(responseBytes));
+        } catch {
+          // Not decompressible ⇒ already decompressed by undici to something
+          // other than identity ⇒ genuine mismatch; surface it as the raw body.
+          decoded = responseBytes;
+        }
+      }
       expect(
         decoded.equals(identityBytes),
         driver.describe(

package/src/scenarios/webhook-negative.test.ts

@@ -37,7 +37,14 @@ describe('webhook-negative: SSRF guard rejects private destinations', () => {
       console.warn('[webhook-negative] host does not advertise webhook support; skipping');
       return;
     }
-    const reg = await driver.post('/v1/webhooks', { url: 'http://127.0.0.1:65535/' });
+    // Spec-complete except for the private URL, so validation passes and the
+    // request reaches the SSRF guard. `{ url }` alone 400s `validation_error`
+    // (missing `events`) before the guard runs. (Suite defect, fixed 2026-08-09.)
+    const reg = await driver.post('/v1/webhooks', {
+      url: 'http://127.0.0.1:65535/',
+      events: ['run.completed'],
+      tenantId: 'conformance-tenant',
+    });
     if (reg.status === 201) {
       // Host accepted — SSRF guard not implemented or bypassed.
       // Soft-skip; this is acceptable per spec.

package/src/scenarios/webhook-signed-delivery.test.ts

@@ -89,7 +89,15 @@ describe('webhook-signed-delivery: end-to-end HMAC v1', () => {
     activeServer = receiver.server;
 
     // Register the webhook.
-    const reg = await driver.post('/v1/webhooks', { url: receiver.url });
+    // webhooks.md §Register: `events` + `tenantId` are REQUIRED (empty events → 400).
+    // The pre-fix `{ url }`-only body 400s on validation before delivery can occur.
+    // (Suite defect, fixed 2026-08-09.) The delivered run's tenant must match this
+    // subscription's tenantId — verified end-to-end against the openwop-app host.
+    const reg = await driver.post('/v1/webhooks', {
+      url: receiver.url,
+      events: ['run.completed'],
+      tenantId: 'conformance-tenant',
+    });
 
     // SSRF guard skip: if the host rejects loopback destinations,
     // honor the operator contract and skip rather than fail.