@openwop/openwop-conformance 1.68.0 → 1.68.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "1.68.0",
+  "version": "1.68.2",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",

package/schemas/capabilities.schema.json

@@ -1773,6 +1773,66 @@
         }
       }
     },
+    "artifactTypes": {
+      "type": "object",
+      "description": "RFC 0071, amended by RFC 0075; declared by RFC 0144. Host artifact-type surface — an advertisement (no `ctx.artifactTypes.*` method) that changes how the host treats the artifact references already on the wire (`nodes[].artifact.typeId`, `WorkflowNode.artifactType`, `artifact.created.artifactType`). Carries the corpus's only emission MUST: a host advertising `store: true` MUST persist registered artifacts and emit `artifact.created`. See `host-capabilities.md` §host.artifactTypes and `artifact-type-packs.md` §\"Host capability\". The discovery key is the PLAIN family name at the document root (RFC 0137 G16); `host.artifactTypes` is the capability IDENTIFIER used in pack `peerDependencies`, not this key.",
+      "additionalProperties": false,
+      "properties": {
+        "supported": { "type": "boolean", "description": "Host honors registered artifact types — validates an artifact whose type is registered (pack-installed or host-native) against that type's schema before emitting `artifact.created`, setting `registered: true` + `registrationSource`. Unregistered types stay accepted unvalidated with `registered: false`." },
+        "store": { "type": "boolean", "description": "`true` ⇒ the host persists artifacts of registered types AND emits `artifact.created`. Advertising this is a commitment to emit; RFC 0142 leg B is the witness." },
+        "render": { "type": "boolean", "description": "Advisory — the spec defines no rendering surface. A host advertising `false` for a type it can `store` MUST still accept and store the artifact and MUST NOT fail the run for lack of a renderer (the store-without-render negotiation guarantee)." },
+        "export": { "type": "array", "items": { "type": "string" }, "description": "Export-format identifiers the host can materialize, drawn from declared `exportFormats`. Advisory." },
+        "types": {
+          "type": "object",
+          "description": "RFC 0075 per-type facets, keyed by `artifactTypeId`. Each entry overrides the global object for that type; the global object is the fallback for any type not listed (absent ⇒ host-global semantics; any facet absent ⇒ the global default — additive).",
+          "additionalProperties": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "validated": { "type": "boolean", "description": "The runtime validation guarantee — `true` ⇒ the host validates this type before emit, so emits `registered: true`. Decoupled from `schemaVersions`, which is a version DECLARATION only." },
+              "validation": { "type": "string", "enum": ["open", "closed"], "description": "Mirrors `ArtifactType.validation`, surfacing schema strictness in discovery so a consumer needn't fetch the schema. Default `\"open\"` per `COMPATIBILITY.md` §2.1." },
+              "schemaVersion": { "type": "integer", "minimum": 0 },
+              "store": { "type": "boolean" },
+              "render": { "type": "boolean" },
+              "export": { "type": "array", "items": { "type": "string" } }
+            }
+          }
+        }
+      }
+    },
+    "forms": {
+      "type": "object",
+      "description": "RFC 0137; declared by RFC 0144. Host form-content-pack surface — like `artifactTypes` it adds no `ctx.forms.*` method; it advertises that the host resolves registered form templates from installed `kind: \"form-content\"` packs and instantiates them through its own normal create path. See `host-capabilities.md` §host.forms and `form-content-packs.md`. The discovery key is the PLAIN family name at the document root (RFC 0137 G16); a host may additionally carry a deprecated dotted `\"host.forms\"` mirror during migration — root `additionalProperties` stays `true` so that document remains valid.",
+      "additionalProperties": false,
+      "properties": {
+        "contentPacks": { "type": "boolean", "description": "`true` ⇒ the host instantiates registered form templates. Normative consequences (`form-content-packs.md` §\"Instantiation\"): create through the SAME path a hand-authored form uses; degrade an unrecognized field type to a plain text input rather than failing; keep the instantiated form fully editable; execute nothing from the pack; sanitize/validate/authorize submissions exactly as hand-typed input. Pack-authored strings are UNTRUSTED and MUST propagate `meta.contentTrust: \"untrusted\"` into interpolated prompt segments (invariant `form-content-pack-string-trust-boundary`) — a signature proves authorship, not content safety." }
+      }
+    },
+    "aiEnvelope": {
+      "type": "object",
+      "description": "Declared by RFC 0144. Host typed-envelope generation surface (`ctx.aiEnvelope.generate`), routing the call through the host's BYOK provider layer. Opinionated about envelope shape, unlike the lower-level `aiProviders` capability which returns raw model output. See `host-capabilities.md` §host.aiEnvelope and `ai-envelope.md`.",
+      "additionalProperties": false,
+      "properties": {
+        "supported": { "type": "boolean", "description": "`true` ⇒ `ctx.aiEnvelope.generate` is exposed. Absent/`false` ⇒ packs binding this surface fail with `host_capability_missing`." },
+        "await": { "type": "boolean", "description": "`true` ⇒ `ctx.aiEnvelope.await` is ALSO exposed. `generate` is required whenever the family is advertised; `await` is required only when this sub-flag is." }
+      }
+    },
+    "promptLibrary": {
+      "type": "object",
+      "description": "Declared by RFC 0144. Host prompt-lookup surface (`ctx.promptLibrary.get`), returning a prompt pinned to a specific version so replay stays deterministic. Consumed by `core.ai.callPrompt`. See `host-capabilities.md` §host.promptLibrary.",
+      "additionalProperties": false,
+      "properties": {
+        "supported": { "type": "boolean", "description": "`true` ⇒ `ctx.promptLibrary.get(promptId)` resolves a `{ promptId, systemPrompt, version, envelopeType? }` record. The returned `version` MUST pin the prompt text for replay." }
+      }
+    },
+    "agentRuntime": {
+      "type": "object",
+      "description": "Declared by RFC 0144. The heavyweight swarm/consensus SUPERSET of the agent surface — spawn, delegate, consensus, message-send, skill-invoke, swarm-execute over RFC 0002/0003/0007 primitives. Advertising it IMPLIES `agents.manifestRuntime` (RFC 0070 §B), since `spawn({ manifestId })` instantiates a manifest agent; hosts needing only single-agent or crew dispatch advertise that floor and omit this family. Per-tool authorization, rate limiting, and the content-free tool-call audit trail live in the top-level `toolHooks` block, NOT under this family. See `host-capabilities.md` §host.agentRuntime.",
+      "additionalProperties": false,
+      "properties": {
+        "supported": { "type": "boolean", "description": "`true` ⇒ `ctx.agentRuntime.*` is exposed AND `agents.manifestRuntime` is implied (RFC 0070 §B). A multi-tenant host additionally advertises `agents.manifestRuntime.installScope: 'tenant'` (RFC 0074) so `GET /v1/agents` scopes to the caller's owner triple." }
+      }
+    },
     "deadLetter": {
       "type": "object",
       "description": "RFC 0053 (`Draft`). Run-level dead-letter sink for terminally-failed runs/nodes. On retry exhaustion (RFC 0009), the run is routed to a durable, inspectable sink and a `run.dead_lettered` event is emitted; dead-lettered runs remain fork-eligible (RFC 0011) for the retention window. Distinct from `queueBus.deadLetterSupported`, which dead-letters transport *messages*, not *runs*.",

package/src/lib/webhook-receiver.ts

@@ -135,3 +135,26 @@ export function signPayload(
     algorithmHeader: 'v1',
   };
 }
+
+/**
+ * Discover a tenant the calling bearer provably OWNS, by creating a probe run
+ * and reading `owner.tenantId` off its snapshot (RFC 0048). A host that scopes
+ * webhook subscriptions by tenant membership (RFC 0093) 403s a `tenantId` the
+ * bearer is not a member of — so a hard-coded tenant is wrong; the only portable
+ * owned tenant is the one on a run the bearer just created. Returns `undefined`
+ * for a single-tenant host (which omits `owner.tenantId`) or when no probe
+ * fixture is available — callers then omit `tenantId`, which single-tenant hosts
+ * accept. (RFC 0093 / webhooks.md §Register; suite defect fixed 2026-08-09.)
+ */
+export async function discoverOwnedTenant(
+  driver: { post: (p: string, b: unknown) => Promise<{ status: number; json: unknown }>; get: (p: string) => Promise<{ status: number; json: unknown }> },
+  probeWorkflowId = 'conformance-noop',
+): Promise<string | undefined> {
+  const create = await driver.post('/v1/runs', { workflowId: probeWorkflowId });
+  if (create.status !== 201) return undefined;
+  const runId = (create.json as { runId?: string } | null)?.runId;
+  if (typeof runId !== 'string') return undefined;
+  const snap = await driver.get(`/v1/runs/${encodeURIComponent(runId)}`);
+  const owner = (snap.json as { owner?: { tenantId?: unknown } } | null)?.owner;
+  return typeof owner?.tenantId === 'string' ? owner.tenantId : undefined;
+}

package/src/scenarios/webhook-negative.test.ts

@@ -22,6 +22,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver } from '../lib/driver.js';
+import { discoverOwnedTenant } from '../lib/webhook-receiver.js';
 
 async function isWebhookSupported(): Promise<boolean> {
   const disco = await driver.get('/.well-known/openwop');
@@ -40,10 +41,11 @@ describe('webhook-negative: SSRF guard rejects private destinations', () => {
     // Spec-complete except for the private URL, so validation passes and the
     // request reaches the SSRF guard. `{ url }` alone 400s `validation_error`
     // (missing `events`) before the guard runs. (Suite defect, fixed 2026-08-09.)
+    const ownedTenant = await discoverOwnedTenant(driver);
     const reg = await driver.post('/v1/webhooks', {
       url: 'http://127.0.0.1:65535/',
       events: ['run.completed'],
-      tenantId: 'conformance-tenant',
+      ...(ownedTenant ? { tenantId: ownedTenant } : {}),
     });
     if (reg.status === 201) {
       // Host accepted — SSRF guard not implemented or bypassed.

package/src/scenarios/webhook-signed-delivery.test.ts

@@ -29,6 +29,7 @@ import { createServer, type IncomingMessage, type Server, type ServerResponse }
 import { driver } from '../lib/driver.js';
 import { pollUntilTerminal } from '../lib/polling.js';
 import { isFixtureAdvertised } from '../lib/fixtures.js';
+import { discoverOwnedTenant } from '../lib/webhook-receiver.js';
 
 interface DeliveredRequest {
   readonly headers: Record<string, string>;
@@ -93,10 +94,14 @@ describe('webhook-signed-delivery: end-to-end HMAC v1', () => {
     // The pre-fix `{ url }`-only body 400s on validation before delivery can occur.
     // (Suite defect, fixed 2026-08-09.) The delivered run's tenant must match this
     // subscription's tenantId — verified end-to-end against the openwop-app host.
+    // Derive a tenant the bearer OWNS from a probe run's snapshot — a hard-coded
+    // tenantId is 403'd by a host that scopes subscriptions by membership
+    // (RFC 0093). Single-tenant hosts return undefined ⇒ omit tenantId.
+    const ownedTenant = await discoverOwnedTenant(driver);
     const reg = await driver.post('/v1/webhooks', {
       url: receiver.url,
       events: ['run.completed'],
-      tenantId: 'conformance-tenant',
+      ...(ownedTenant ? { tenantId: ownedTenant } : {}),
     });
 
     // SSRF guard skip: if the host rejects loopback destinations,
@@ -158,20 +163,35 @@ describe('webhook-signed-delivery: end-to-end HMAC v1', () => {
       'webhooks.md §"Signature algorithm versioning"',
       'every delivery MUST set X-openwop-Signature-Algorithm: v1',
     )).toBe('v1');
-    expect(first.headers['x-openwop-subscription-id']).toBe(sub.subscriptionId);
-
-    const timestamp = first.headers['x-openwop-signature-timestamp'];
-    expect(typeof timestamp).toBe('string');
-    expect((timestamp ?? '').length).toBeGreaterThan(0);
-
-    const signature = first.headers['x-openwop-signature'];
+    // Header names + signature format per webhooks.md v1.1 §"Delivery headers"
+    // (the SSoT). The pre-fix scenario asserted `x-openwop-subscription-id`,
+    // `x-openwop-signature-timestamp`, and a BARE-HEX `x-openwop-signature` —
+    // three names/shapes that appear in NO spec file or RFC. webhooks.md
+    // specifies `X-openwop-Webhook-Id`, `X-openwop-Timestamp`, and
+    // `X-openwop-Signature: sha256={hex}`. (Suite↔spec divergence fixed 2026-08-09.)
+    expect(
+      first.headers['x-openwop-webhook-id'],
+      driver.describe('webhooks.md §"Delivery headers"', 'X-openwop-Webhook-Id MUST carry the subscription id'),
+    ).toBe(sub.subscriptionId);
+
+    const timestamp = first.headers['x-openwop-timestamp'];
+    expect(
+      typeof timestamp === 'string' && timestamp.length > 0,
+      driver.describe('webhooks.md §"Delivery headers"', 'X-openwop-Timestamp MUST be a Unix-seconds integer string'),
+    ).toBe(true);
+
+    const signature = first.headers['x-openwop-signature'] ?? '';
+    expect(
+      signature.startsWith('sha256='),
+      driver.describe('webhooks.md §"Delivery headers"', 'X-openwop-Signature MUST carry the `sha256=` prefix'),
+    ).toBe(true);
     const expected = createHmac('sha256', sub.secret)
       .update(`${timestamp}.${first.body}`, 'utf8')
       .digest('hex');
-    expect(signature, driver.describe(
-      'webhooks.md §"Signature scheme"',
-      'X-openwop-Signature MUST be HMAC-SHA256(secret, `${timestamp}.${rawBody}`) hex',
-    )).toBe(expected);
+    expect(
+      signature.replace('sha256=', ''),
+      driver.describe('webhooks.md §"Delivery headers"', 'X-openwop-Signature MUST be sha256=HMAC-SHA256(secret, `${X-openwop-Timestamp}.${rawBody}`)'),
+    ).toBe(expected);
 
     // Body should parse as JSON with a run event shape.
     const event = JSON.parse(first.body) as { type?: unknown; runId?: unknown };