@openwop/openwop-conformance 1.72.2 → 1.98.0

package/schemas/workflow-definition.schema.json

@@ -4,7 +4,17 @@
   "title": "WorkflowDefinition",
   "description": "DAG of typed nodes, edges, triggers, and variables that an OpenWOP host executes. Canonical OpenWOP v1 workflow-definition shape.",
   "type": "object",
-  "required": ["id", "name", "version", "nodes", "edges", "triggers", "variables", "metadata", "settings"],
+  "required": [
+    "id",
+    "name",
+    "version",
+    "nodes",
+    "edges",
+    "triggers",
+    "variables",
+    "metadata",
+    "settings"
+  ],
   "properties": {
     "id": {
       "type": "string",
@@ -18,7 +28,9 @@
       "minLength": 1,
       "maxLength": 256
     },
-    "description": { "type": "string" },
+    "description": {
+      "type": "string"
+    },
     "version": {
       "type": "string",
       "description": "Semver-like workflow version. Tracked separately from engineVersion + eventLogSchemaVersion (see version-negotiation.md).",
@@ -28,10 +40,17 @@
       "type": "string",
       "description": "Optional category for filtering."
     },
-    "isActive": { "type": "boolean" },
+    "isActive": {
+      "type": "boolean"
+    },
     "status": {
       "type": "string",
-      "enum": ["active", "inactive", "draft", "archived"]
+      "enum": [
+        "active",
+        "inactive",
+        "draft",
+        "archived"
+      ]
     },
     "tenantId": {
       "type": "string",
@@ -48,145 +67,279 @@
     },
     "nodes": {
       "type": "array",
-      "items": { "$ref": "#/$defs/WorkflowNode" },
+      "items": {
+        "$ref": "#/$defs/WorkflowNode"
+      },
       "minItems": 1
     },
     "edges": {
       "type": "array",
-      "items": { "$ref": "#/$defs/WorkflowEdge" }
+      "items": {
+        "$ref": "#/$defs/WorkflowEdge"
+      }
     },
     "triggers": {
       "type": "array",
-      "items": { "$ref": "#/$defs/WorkflowTrigger" }
+      "items": {
+        "$ref": "#/$defs/WorkflowTrigger"
+      }
     },
     "variables": {
       "type": "array",
-      "items": { "$ref": "#/$defs/WorkflowVariable" }
+      "items": {
+        "$ref": "#/$defs/WorkflowVariable"
+      }
     },
     "groups": {
       "type": "array",
-      "items": { "$ref": "#/$defs/NodeGroup" },
+      "items": {
+        "$ref": "#/$defs/NodeGroup"
+      },
       "description": "Visual node groups (organizational only; do not affect execution)."
     },
     "channels": {
       "description": "Optional typed state channels (see channels-and-reducers.md). When present, channel-aware mode applies.",
       "type": "object",
-      "additionalProperties": { "$ref": "#/$defs/ChannelDeclaration" }
+      "additionalProperties": {
+        "$ref": "#/$defs/ChannelDeclaration"
+      }
     },
     "configurableSchema": {
-      "description": "Optional JSON Schema 2020-12 declaring which RunOptions.configurable keys this workflow accepts. When present, hosts MUST validate POST /v1/runs `configurable` payloads against this schema and reject mismatches with `validation_error`. Hosts MUST surface this schema on GET /v1/workflows/{workflowId} so clients can pre-flight-validate. See run-options.md §'Per-workflow configurableSchema'. Additive in v1.1.",
+      "description": "Optional JSON Schema 2020-12 declaring which RunOptions.configurable keys this workflow accepts. When present, hosts MUST validate POST /v1/runs `configurable` payloads against this schema and reject mismatches with `validation_error`. Hosts MUST surface this schema on GET /v1/workflows/{workflowId} so clients can pre-flight-validate. See run-options.md \u00a7'Per-workflow configurableSchema'. Additive in v1.1.",
       "type": "object"
     },
     "defaults": {
       "type": "object",
       "additionalProperties": false,
-      "description": "RFC 0029 §B. Workflow-author-controlled per-kind fallback values that apply at resolution chain layer 3 (`workflow-defaults`) per `spec/v1/prompts.md` §\"Resolution chain (normative)\". Applied when neither the node (layer 1) nor the node's bound agent (layer 2) specifies a value for the kind. Future RFCs MAY add sibling defaults (e.g., `defaults.temperature`, `defaults.modelClass`) without colliding.",
+      "description": "RFC 0029 \u00a7B. Workflow-author-controlled per-kind fallback values that apply at resolution chain layer 3 (`workflow-defaults`) per `spec/v1/prompts.md` \u00a7\"Resolution chain (normative)\". Applied when neither the node (layer 1) nor the node's bound agent (layer 2) specifies a value for the kind. Future RFCs MAY add sibling defaults (e.g., `defaults.temperature`, `defaults.modelClass`) without colliding.",
       "properties": {
         "promptRefs": {
           "type": "object",
           "additionalProperties": false,
           "description": "Per-kind PromptRef fallbacks for layer 3 of the resolution chain.",
           "properties": {
-            "system": { "$ref": "./prompt-ref.schema.json" },
-            "user": { "$ref": "./prompt-ref.schema.json" },
-            "few-shot": { "$ref": "./prompt-ref.schema.json" },
-            "schema-hint": { "$ref": "./prompt-ref.schema.json" }
+            "system": {
+              "$ref": "./prompt-ref.schema.json"
+            },
+            "user": {
+              "$ref": "./prompt-ref.schema.json"
+            },
+            "few-shot": {
+              "$ref": "./prompt-ref.schema.json"
+            },
+            "schema-hint": {
+              "$ref": "./prompt-ref.schema.json"
+            }
           }
         }
       }
     },
-    "metadata": { "$ref": "#/$defs/WorkflowMetadata" },
-    "settings": { "$ref": "#/$defs/WorkflowSettings" },
+    "metadata": {
+      "$ref": "#/$defs/WorkflowMetadata"
+    },
+    "settings": {
+      "$ref": "#/$defs/WorkflowSettings"
+    },
     "acceptsInheritedArtifacts": {
       "type": "array",
-      "items": { "type": "object" },
+      "items": {
+        "type": "object"
+      },
       "description": "Declares which inherited artifacts this workflow accepts when run as a child of a sub-workflow."
     },
-    "createdAt": { "type": "string", "format": "date-time" },
-    "updatedAt": { "type": "string", "format": "date-time" }
+    "createdAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "updatedAt": {
+      "type": "string",
+      "format": "date-time"
+    }
   },
   "additionalProperties": false,
   "$defs": {
     "WorkflowNode": {
       "type": "object",
-      "required": ["id", "typeId", "name", "position", "config", "inputs"],
+      "required": [
+        "id",
+        "typeId",
+        "name",
+        "position",
+        "config",
+        "inputs"
+      ],
       "properties": {
-        "id": { "type": "string", "minLength": 1, "description": "Node identifier, unique within the workflow. Intentionally has NO `maxLength` — RFC 0013 chain expansion mints ids of the form `${chainIdSlug}_${expansionId}_${fragmentId}` where `chainIdSlug` is an unbounded reverse-DNS string, so an expanded node id can exceed any short cap. A host MUST NOT reject or truncate a node id by length (no host-imposed `maxLength` stricter than this schema)." },
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Node identifier, unique within the workflow. Intentionally has NO `maxLength` \u2014 RFC 0013 chain expansion mints ids of the form `${chainIdSlug}_${expansionId}_${fragmentId}` where `chainIdSlug` is an unbounded reverse-DNS string, so an expanded node id can exceed any short cap. A host MUST NOT reject or truncate a node id by length (no host-imposed `maxLength` stricter than this schema)."
+        },
         "typeId": {
           "type": "string",
           "description": "Canonical node type ID (e.g., 'core.ai.callPrompt', 'core.chat.approvalGate'). Reserved prefixes: 'core.*' for spec-canonical, 'vendor.<org>.*' for third-party.",
           "minLength": 1,
           "pattern": "^[a-z][a-zA-Z0-9._-]*$"
         },
-        "name": { "type": "string", "minLength": 1 },
+        "name": {
+          "type": "string",
+          "minLength": 1
+        },
         "position": {
           "type": "object",
-          "required": ["x", "y"],
+          "required": [
+            "x",
+            "y"
+          ],
           "properties": {
-            "x": { "type": "number" },
-            "y": { "type": "number" }
+            "x": {
+              "type": "number"
+            },
+            "y": {
+              "type": "number"
+            }
           }
         },
         "config": {
           "type": "object",
-          "description": "Node configuration (pre-execution constants). The shape is per-typeId — node-pack manifests declare each typeId's `configSchema` for install-time validation. By convention, the keys `systemPromptRef`, `userPromptRef`, and `additionalPromptRefs` MAY hold PromptRef values per `spec/v1/prompts.md` §\"PromptRef\" (RFC 0027). Hosts advertising `capabilities.prompts.supported: true` MUST resolve these keys; hosts without the capability MAY treat them as opaque strings. When both an inline body (e.g., `config.systemPrompt`) and a `*PromptRef` are present, the ref wins and the host MUST emit a `log.appended` warning with `code: \"prompt_ref_supersedes_inline\"` per RFC 0027 §C."
+          "description": "Node configuration (pre-execution constants). The shape is per-typeId \u2014 node-pack manifests declare each typeId's `configSchema` for install-time validation. By convention, the keys `systemPromptRef`, `userPromptRef`, and `additionalPromptRefs` MAY hold PromptRef values per `spec/v1/prompts.md` \u00a7\"PromptRef\" (RFC 0027). Hosts advertising `capabilities.prompts.supported: true` MUST resolve these keys; hosts without the capability MAY treat them as opaque strings. When both an inline body (e.g., `config.systemPrompt`) and a `*PromptRef` are present, the ref wins and the host MUST emit a `log.appended` warning with `code: \"prompt_ref_supersedes_inline\"` per RFC 0027 \u00a7C."
         },
         "inputs": {
           "type": "object",
-          "additionalProperties": { "$ref": "#/$defs/PortValue" },
+          "additionalProperties": {
+            "$ref": "#/$defs/PortValue"
+          },
           "description": "Input port connections. Keys are port names; values are PortValue references."
         },
-        "credentialsRef": { "type": "string" },
-        "settings": { "type": "object" },
+        "credentialsRef": {
+          "type": "string"
+        },
+        "settings": {
+          "type": "object"
+        },
         "outputRole": {
           "type": "string",
-          "enum": ["primary", "secondary"],
-          "description": "RFC 0065 — author hint that this terminal node's output is the workflow's primary deliverable (`primary`) or an auxiliary output (`secondary`). Advisory: hosts MUST execute the workflow identically regardless of value. Tooling MAY use the hint to pick which of N terminal nodes' outputs to surface as the run's canonical artifact. Unknown values + absent values fall back to default behavior (show all terminal outputs)."
+          "enum": [
+            "primary",
+            "secondary"
+          ],
+          "description": "RFC 0065 \u2014 author hint that this terminal node's output is the workflow's primary deliverable (`primary`) or an auxiliary output (`secondary`). Advisory: hosts MUST execute the workflow identically regardless of value. Tooling MAY use the hint to pick which of N terminal nodes' outputs to surface as the run's canonical artifact. Unknown values + absent values fall back to default behavior (show all terminal outputs)."
+        },
+        "disabled": {
+          "type": "boolean",
+          "default": false
+        },
+        "notes": {
+          "type": "string"
+        },
+        "groupId": {
+          "type": "string"
         },
-        "disabled": { "type": "boolean", "default": false },
-        "notes": { "type": "string" },
-        "groupId": { "type": "string" },
         "agent": {
           "$ref": "agent-ref.schema.json",
           "description": "Multi-Agent Shift Phase 1. Optional compile-time pinning of which agent executes this node. When set, the engine surfaces this AgentRef on the `RunSnapshot.agent` field while the node is active, and emits an `agent.handoff` event when control transitions from the prior node's agent (if different). Resolution at runtime: the engine MAY override via dispatch (RFC 0012 / `core.dispatch`) or orchestrator decision (RFC 0011); the node's `agent?` is the default authoring-time pin, not a hard binding."
         },
-        "envelopeContract": { "type": "object" },
+        "envelopeContract": {
+          "type": "object"
+        },
         "artifactType": {
           "type": "string",
-          "description": "Artifact type this node produces or reviews (first-class typed field — replaces the deprecated config.outputArtifactType bag entry)."
+          "description": "Artifact type this node produces or reviews (first-class typed field \u2014 replaces the deprecated config.outputArtifactType bag entry)."
         },
         "cardType": {
           "type": "string",
-          "description": "Explicit chat card type override (first-class typed field — replaces the deprecated config.chatCard bag entry)."
+          "description": "Explicit chat card type override (first-class typed field \u2014 replaces the deprecated config.chatCard bag entry)."
         },
         "outputSensitivity": {
           "type": "object",
-          "additionalProperties": { "type": "boolean" },
-          "description": "Per-output-port sensitivity overrides. Map of port name → boolean. When true, the engine masks the named output value in `node.completed` event payloads. Layered on top of pack-level `nodes[].outputs[port].sensitive` declarations: workflow-level true takes precedence over pack-level false (and vice versa — last writer wins, but typically pack defaults are conservative and workflow overrides are explicit). See observability.md §Privacy classification (closes O5)."
+          "additionalProperties": {
+            "type": "boolean"
+          },
+          "description": "Per-output-port sensitivity overrides. Map of port name \u2192 boolean. When true, the engine masks the named output value in `node.completed` event payloads. Layered on top of pack-level `nodes[].outputs[port].sensitive` declarations: workflow-level true takes precedence over pack-level false (and vice versa \u2014 last writer wins, but typically pack defaults are conservative and workflow overrides are explicit). See observability.md \u00a7Privacy classification (closes O5)."
+        },
+        "compensation": {
+          "type": "object",
+          "description": "RFC 0151 \u00a7B \u2014 the inverse action for this node. OPTIONAL and closed. `nodeTypeId` MUST resolve at registration, so an unwind cannot fail on a typo discovered only during a failure. Inputs MUST derive from RECORDED FACTS: prompt or model regeneration MUST NOT construct a compensation input during replay, because a compensation built from a re-inferred value is not the inverse of what was actually done. A host MUST reject a compensation cycle.",
+          "additionalProperties": false,
+          "required": [
+            "nodeTypeId"
+          ],
+          "properties": {
+            "nodeTypeId": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Node type implementing the inverse action. MUST resolve at registration time."
+            },
+            "inputMapping": {
+              "type": "object",
+              "description": "Derived from recorded facts only \u2014 node outputs and run inputs already in the event log.",
+              "additionalProperties": true
+            },
+            "retry": {
+              "type": "object",
+              "additionalProperties": false,
+              "properties": {
+                "maxAttempts": {
+                  "type": "integer",
+                  "minimum": 1
+                },
+                "backoffMs": {
+                  "type": "integer",
+                  "minimum": 0
+                }
+              }
+            },
+            "requiresApproval": {
+              "type": "boolean",
+              "description": "RFC 0151 \u00a7C \u2014 an inverse action can itself be harmful (RFC 0147 R9), so it may be gated behind the same approval surface as a forward effect."
+            }
+          }
         }
       },
       "additionalProperties": false
     },
     "WorkflowEdge": {
       "type": "object",
-      "required": ["id", "sourceNodeId", "targetNodeId"],
+      "required": [
+        "id",
+        "sourceNodeId",
+        "targetNodeId"
+      ],
       "properties": {
-        "id": { "type": "string", "minLength": 1 },
-        "sourceNodeId": { "type": "string", "minLength": 1 },
+        "id": {
+          "type": "string",
+          "minLength": 1
+        },
+        "sourceNodeId": {
+          "type": "string",
+          "minLength": 1
+        },
         "sourceOutput": {
           "type": "string",
           "description": "Source output port key. Default 'output'."
         },
-        "targetNodeId": { "type": "string", "minLength": 1 },
+        "targetNodeId": {
+          "type": "string",
+          "minLength": 1
+        },
         "targetInput": {
           "type": "string",
           "description": "Target input port key. Default 'input'."
         },
-        "condition": { "$ref": "#/$defs/EdgeCondition" },
-        "label": { "type": "string" },
+        "condition": {
+          "$ref": "#/$defs/EdgeCondition"
+        },
+        "label": {
+          "type": "string"
+        },
         "triggerRule": {
           "type": "string",
-          "enum": ["all_success", "any_success", "all_complete", "none_failed", "any_failed"],
+          "enum": [
+            "all_success",
+            "any_success",
+            "all_complete",
+            "none_failed",
+            "any_failed"
+          ],
           "default": "all_success"
         }
       },
@@ -197,12 +350,28 @@
       "properties": {
         "type": {
           "type": "string",
-          "enum": ["expression", "equals", "notEquals", "contains", "regex", "truthy", "falsy"],
-          "description": "Operator. `equals`/`notEquals`/`contains` compare `left` to `right`; `regex` matches `left` against `right`; `expression` evaluates `expression`. RFC 0134: `truthy`/`falsy` test the resolved value at `left` for JS-style truthiness and take NO `right` operand (the edge contributes iff `left` is truthy — resp. falsy/absent). `left` is required for all operators except `expression`."
+          "enum": [
+            "expression",
+            "equals",
+            "notEquals",
+            "contains",
+            "regex",
+            "truthy",
+            "falsy"
+          ],
+          "description": "Operator. `equals`/`notEquals`/`contains` compare `left` to `right`; `regex` matches `left` against `right`; `expression` evaluates `expression`. RFC 0134: `truthy`/`falsy` test the resolved value at `left` for JS-style truthiness and take NO `right` operand (the edge contributes iff `left` is truthy \u2014 resp. falsy/absent). `left` is required for all operators except `expression`."
         },
-        "left": { "type": "string", "description": "Left operand path (e.g., 'status', 'output.approved'). Required for every operator except `expression`." },
-        "right": { "description": "Right operand value (any JSON value). Meaningless for `truthy`/`falsy` (RFC 0134) — a host MUST ignore it there, not error." },
-        "expression": { "type": "string", "description": "Used when type='expression'." }
+        "left": {
+          "type": "string",
+          "description": "Left operand path (e.g., 'status', 'output.approved'). Required for every operator except `expression`."
+        },
+        "right": {
+          "description": "Right operand value (any JSON value). Meaningless for `truthy`/`falsy` (RFC 0134) \u2014 a host MUST ignore it there, not error."
+        },
+        "expression": {
+          "type": "string",
+          "description": "Used when type='expression'."
+        }
       },
       "additionalProperties": false
     },
@@ -210,40 +379,79 @@
       "oneOf": [
         {
           "type": "object",
-          "required": ["type", "value"],
+          "required": [
+            "type",
+            "value"
+          ],
           "properties": {
-            "type": { "const": "static" },
+            "type": {
+              "const": "static"
+            },
             "value": {}
           },
           "additionalProperties": false
         },
         {
           "type": "object",
-          "required": ["type", "expression"],
+          "required": [
+            "type",
+            "expression"
+          ],
           "properties": {
-            "type": { "const": "expression" },
-            "expression": { "type": "string", "minLength": 1 }
+            "type": {
+              "const": "expression"
+            },
+            "expression": {
+              "type": "string",
+              "minLength": 1
+            }
           },
           "additionalProperties": false
         },
         {
           "type": "object",
-          "required": ["type", "nodeId", "outputKey"],
+          "required": [
+            "type",
+            "nodeId",
+            "outputKey"
+          ],
           "properties": {
-            "type": { "const": "connection" },
-            "nodeId": { "type": "string", "minLength": 1 },
-            "outputKey": { "type": "string", "minLength": 1 },
-            "optional": { "type": "boolean", "default": false }
+            "type": {
+              "const": "connection"
+            },
+            "nodeId": {
+              "type": "string",
+              "minLength": 1
+            },
+            "outputKey": {
+              "type": "string",
+              "minLength": 1
+            },
+            "optional": {
+              "type": "boolean",
+              "default": false
+            }
           },
           "additionalProperties": false
         },
         {
           "type": "object",
-          "required": ["type", "variableName"],
+          "required": [
+            "type",
+            "variableName"
+          ],
           "properties": {
-            "type": { "const": "variable" },
-            "variableName": { "type": "string", "minLength": 1 },
-            "optional": { "type": "boolean", "default": false }
+            "type": {
+              "const": "variable"
+            },
+            "variableName": {
+              "type": "string",
+              "minLength": 1
+            },
+            "optional": {
+              "type": "boolean",
+              "default": false
+            }
           },
           "additionalProperties": false
         }
@@ -251,74 +459,154 @@
     },
     "WorkflowTrigger": {
       "type": "object",
-      "required": ["id", "type"],
+      "required": [
+        "id",
+        "type"
+      ],
       "properties": {
-        "id": { "type": "string", "minLength": 1 },
+        "id": {
+          "type": "string",
+          "minLength": 1
+        },
         "type": {
           "type": "string",
-          "enum": ["manual", "schedule", "webhook", "event", "artifact", "canvas", "envelope", "command", "chat-message", "channel-write"],
-          "description": "Trigger discriminator. The `channel-write` variant fires a node when a named channel receives a write (closes C2 — reactive cross-engine pattern). Its `config` shape: `{channel: string, onlyFrom?: 'child'|'parent'|'any', debounceMs?: integer}`. See channels-and-reducers.md §Distributed reducers."
-        },
-        "name": { "type": "string" },
-        "description": { "type": "string" },
-        "config": { "type": "object" },
-        "enabled": { "type": "boolean", "default": true },
-        "nodeId": { "type": "string" },
-        "eventType": { "type": "string" }
+          "enum": [
+            "manual",
+            "schedule",
+            "webhook",
+            "event",
+            "artifact",
+            "canvas",
+            "envelope",
+            "command",
+            "chat-message",
+            "channel-write"
+          ],
+          "description": "Trigger discriminator. The `channel-write` variant fires a node when a named channel receives a write (closes C2 \u2014 reactive cross-engine pattern). Its `config` shape: `{channel: string, onlyFrom?: 'child'|'parent'|'any', debounceMs?: integer}`. See channels-and-reducers.md \u00a7Distributed reducers."
+        },
+        "name": {
+          "type": "string"
+        },
+        "description": {
+          "type": "string"
+        },
+        "config": {
+          "type": "object"
+        },
+        "enabled": {
+          "type": "boolean",
+          "default": true
+        },
+        "nodeId": {
+          "type": "string"
+        },
+        "eventType": {
+          "type": "string"
+        }
       },
       "additionalProperties": false
     },
     "WorkflowVariable": {
       "type": "object",
-      "required": ["name", "type"],
+      "required": [
+        "name",
+        "type"
+      ],
       "properties": {
-        "name": { "type": "string", "minLength": 1 },
+        "name": {
+          "type": "string",
+          "minLength": 1
+        },
         "type": {
           "type": "string",
-          "enum": ["string", "number", "boolean", "object", "array"]
+          "enum": [
+            "string",
+            "number",
+            "boolean",
+            "object",
+            "array"
+          ]
+        },
+        "description": {
+          "type": "string"
+        },
+        "required": {
+          "type": "boolean",
+          "default": false
         },
-        "description": { "type": "string" },
-        "required": { "type": "boolean", "default": false },
         "defaultValue": {},
         "sensitive": {
           "type": "boolean",
           "default": false,
-          "description": "When true, the engine masks this variable's value in persisted `variable.changed` events, `state.snapshot` projections, and `RunSnapshot.variables`. Reads inside NodeModule executors work normally; only persistence + external surfaces mask. See observability.md §Privacy classification (closes O5)."
+          "description": "When true, the engine masks this variable's value in persisted `variable.changed` events, `state.snapshot` projections, and `RunSnapshot.variables`. Reads inside NodeModule executors work normally; only persistence + external surfaces mask. See observability.md \u00a7Privacy classification (closes O5)."
         },
         "format": {
           "type": "string",
           "minLength": 1,
-          "description": "RFC 0136 (`Active`). ADVISORY presentational hint for a `type: \"string\"` variable, drawn from the JSON-Schema format vocabulary (`email`, `uri`, `date`, `date-time`, `time`, `duration` are the v1 recognised set). Hosts SHOULD use it to choose an input affordance (e.g. an email keyboard). It is NOT a validation contract: a host MUST NOT reject a run, refuse a variable write, or fail validation because a value does not match, and MUST NOT assume a value matches when reading it. DELIBERATELY NOT AN ENUM — an unrecognised value MUST round-trip and degrade to plain text rather than error (RFC 0136 requirement 2), which an enum would turn into a hard validation failure on a client-submitted (closed) shape. Ignored when `type` is not `\"string\"`. Orthogonal to `sensitive`: masking hides the VALUE on server-emitted surfaces, `format` describes the FIELD in the definition, so the two compose with no interaction."
+          "description": "RFC 0136 (`Active`). ADVISORY presentational hint for a `type: \"string\"` variable, drawn from the JSON-Schema format vocabulary (`email`, `uri`, `date`, `date-time`, `time`, `duration` are the v1 recognised set). Hosts SHOULD use it to choose an input affordance (e.g. an email keyboard). It is NOT a validation contract: a host MUST NOT reject a run, refuse a variable write, or fail validation because a value does not match, and MUST NOT assume a value matches when reading it. DELIBERATELY NOT AN ENUM \u2014 an unrecognised value MUST round-trip and degrade to plain text rather than error (RFC 0136 requirement 2), which an enum would turn into a hard validation failure on a client-submitted (closed) shape. Ignored when `type` is not `\"string\"`. Orthogonal to `sensitive`: masking hides the VALUE on server-emitted surfaces, `format` describes the FIELD in the definition, so the two compose with no interaction."
         }
       },
       "additionalProperties": false
     },
     "NodeGroup": {
       "type": "object",
-      "required": ["id", "name", "nodeIds", "position", "size"],
+      "required": [
+        "id",
+        "name",
+        "nodeIds",
+        "position",
+        "size"
+      ],
       "properties": {
-        "id": { "type": "string", "minLength": 1 },
-        "name": { "type": "string", "minLength": 1 },
-        "color": { "type": "string" },
-        "collapsed": { "type": "boolean", "default": false },
+        "id": {
+          "type": "string",
+          "minLength": 1
+        },
+        "name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "color": {
+          "type": "string"
+        },
+        "collapsed": {
+          "type": "boolean",
+          "default": false
+        },
         "nodeIds": {
           "type": "array",
-          "items": { "type": "string" }
+          "items": {
+            "type": "string"
+          }
         },
         "position": {
           "type": "object",
-          "required": ["x", "y"],
+          "required": [
+            "x",
+            "y"
+          ],
           "properties": {
-            "x": { "type": "number" },
-            "y": { "type": "number" }
+            "x": {
+              "type": "number"
+            },
+            "y": {
+              "type": "number"
+            }
           }
         },
         "size": {
           "type": "object",
-          "required": ["width", "height"],
+          "required": [
+            "width",
+            "height"
+          ],
           "properties": {
-            "width": { "type": "number" },
-            "height": { "type": "number" }
+            "width": {
+              "type": "number"
+            },
+            "height": {
+              "type": "number"
+            }
           }
         }
       },
@@ -326,24 +614,35 @@
     },
     "ChannelDeclaration": {
       "type": "object",
-      "required": ["reducer"],
+      "required": [
+        "reducer"
+      ],
       "properties": {
         "reducer": {
           "type": "string",
-          "description": "Canonical names: 'replace', 'append', 'merge', 'counter', 'votes', 'feedback', 'message' (Multi-Agent Shift Phase 1 — append-only + idempotent on `messageId`). Custom reducers MUST use 'vendor.<org>.<name>'.",
+          "description": "Canonical names: 'replace', 'append', 'merge', 'counter', 'votes', 'feedback', 'message' (Multi-Agent Shift Phase 1 \u2014 append-only + idempotent on `messageId`). Custom reducers MUST use 'vendor.<org>.<name>'.",
           "pattern": "^(replace|append|merge|counter|votes|feedback|message|vendor\\.[a-z][a-z0-9_-]*\\.[a-z][a-z0-9_-]*)$"
         },
-        "schema": { "type": "object" },
+        "schema": {
+          "type": "object"
+        },
         "default": {},
-        "maxSize": { "type": "integer", "minimum": 1 },
+        "maxSize": {
+          "type": "integer",
+          "minimum": 1
+        },
         "ttlMs": {
           "type": "integer",
           "minimum": 1,
           "maximum": 31536000000,
-          "description": "Optional entry-age TTL in milliseconds (closes C3). Applies to `append` / `votes` / `feedback` reducers; ignored on others. Engine drops entries older than this age (lazy: on read or next write). Range: 1..1 year. Replay-safe — uses original event timestamps for comparison. See channels-and-reducers.md §Channel TTL."
+          "description": "Optional entry-age TTL in milliseconds (closes C3). Applies to `append` / `votes` / `feedback` reducers; ignored on others. Engine drops entries older than this age (lazy: on read or next write). Range: 1..1 year. Replay-safe \u2014 uses original event timestamps for comparison. See channels-and-reducers.md \u00a7Channel TTL."
+        },
+        "options": {
+          "type": "object"
+        },
+        "access": {
+          "$ref": "#/$defs/ChannelAccess"
         },
-        "options": { "type": "object" },
-        "access": { "$ref": "#/$defs/ChannelAccess" },
         "schemaVersion": {
           "type": "integer",
           "minimum": 1,
@@ -352,28 +651,39 @@
         },
         "compatibleWith": {
           "type": "array",
-          "items": { "type": "integer", "minimum": 1 },
+          "items": {
+            "type": "integer",
+            "minimum": 1
+          },
           "uniqueItems": true,
-          "description": "Older schema versions whose persisted writes are forward-readable under the CURRENT schema. The engine validates each old write against the current schema during fold; pass = include, fail = hard error `channel_schema_breaking_change`. Empty/omitted = no backward compat (any older write trips the breaking-change error). For breaking edits, authors create a new channel name + a copy node — see channels-and-reducers.md §Channel schema migration."
+          "description": "Older schema versions whose persisted writes are forward-readable under the CURRENT schema. The engine validates each old write against the current schema during fold; pass = include, fail = hard error `channel_schema_breaking_change`. Empty/omitted = no backward compat (any older write trips the breaking-change error). For breaking edits, authors create a new channel name + a copy node \u2014 see channels-and-reducers.md \u00a7Channel schema migration."
         },
         "sensitive": {
           "type": "boolean",
           "default": false,
-          "description": "When true, the engine masks `channel.written` event payloads' `value` field. The reduced channel state in `RunSnapshot.channels` is also masked when read via the REST surface. See observability.md §Privacy classification (closes O5)."
+          "description": "When true, the engine masks `channel.written` event payloads' `value` field. The reduced channel state in `RunSnapshot.channels` is also masked when read via the REST surface. See observability.md \u00a7Privacy classification (closes O5)."
         }
       },
       "additionalProperties": false
     },
     "ChannelAccess": {
-      "description": "Per-channel access control. See channels-and-reducers.md §Channel access control (closes C1). Three forms: 'public' (no restriction; same as omitting), 'private' (lockdown shorthand — equivalent to {readers: [], writers: []}), or an explicit {readers?, writers?} object where each side is independently scoped (omitted = open, present = strict allowlist).",
+      "description": "Per-channel access control. See channels-and-reducers.md \u00a7Channel access control (closes C1). Three forms: 'public' (no restriction; same as omitting), 'private' (lockdown shorthand \u2014 equivalent to {readers: [], writers: []}), or an explicit {readers?, writers?} object where each side is independently scoped (omitted = open, present = strict allowlist).",
       "oneOf": [
-        { "const": "public" },
-        { "const": "private" },
+        {
+          "const": "public"
+        },
+        {
+          "const": "private"
+        },
         {
           "type": "object",
           "properties": {
-            "readers": { "$ref": "#/$defs/ChannelAccessList" },
-            "writers": { "$ref": "#/$defs/ChannelAccessList" }
+            "readers": {
+              "$ref": "#/$defs/ChannelAccessList"
+            },
+            "writers": {
+              "$ref": "#/$defs/ChannelAccessList"
+            }
           },
           "additionalProperties": false
         }
@@ -394,29 +704,71 @@
     "WorkflowMetadata": {
       "type": "object",
       "properties": {
-        "createdBy": { "type": "string" },
-        "createdAt": { "type": "string", "format": "date-time" },
-        "updatedBy": { "type": "string" },
-        "updatedAt": { "type": "string", "format": "date-time" },
+        "createdBy": {
+          "type": "string"
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "updatedBy": {
+          "type": "string"
+        },
+        "updatedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
         "tags": {
           "type": "array",
-          "items": { "type": "string", "minLength": 1, "maxLength": 256 },
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 256
+          },
           "maxItems": 100
         },
-        "category": { "type": "string" },
-        "author": { "type": "string" },
-        "codeVersion": { "type": "string" },
-        "customizedAt": { "type": "string", "format": "date-time" },
-        "customizedBy": { "type": "string" },
-        "forkedFrom": { "type": "string", "description": "ID of platform template this was forked from." },
-        "clonedFrom": { "type": "string", "description": "ID of workflow this was cloned from (project clone, not template fork)." },
-        "clonedAt": { "type": "string", "format": "date-time" },
-        "customProperties": { "type": "object" },
+        "category": {
+          "type": "string"
+        },
+        "author": {
+          "type": "string"
+        },
+        "codeVersion": {
+          "type": "string"
+        },
+        "customizedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "customizedBy": {
+          "type": "string"
+        },
+        "forkedFrom": {
+          "type": "string",
+          "description": "ID of platform template this was forked from."
+        },
+        "clonedFrom": {
+          "type": "string",
+          "description": "ID of workflow this was cloned from (project clone, not template fork)."
+        },
+        "clonedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "customProperties": {
+          "type": "object"
+        },
         "complianceClass": {
           "type": "string",
-          "enum": ["public", "pii", "phi", "pci", "regulated"],
+          "enum": [
+            "public",
+            "pii",
+            "phi",
+            "pci",
+            "regulated"
+          ],
           "default": "public",
-          "description": "Top-level workflow sensitivity tier. Sets the `openwop.compliance_class` span attribute on every span the run produces. Drives default retention / masking / export-gating policy at observability collectors. See observability.md §Privacy classification (closes O5)."
+          "description": "Top-level workflow sensitivity tier. Sets the `openwop.compliance_class` span attribute on every span the run produces. Drives default retention / masking / export-gating policy at observability collectors. See observability.md \u00a7Privacy classification (closes O5)."
         },
         "complianceConfig": {
           "type": "object",
@@ -424,7 +776,12 @@
           "properties": {
             "maskingMode": {
               "type": "string",
-              "enum": ["mask", "omit", "hash", "passthrough"],
+              "enum": [
+                "mask",
+                "omit",
+                "hash",
+                "passthrough"
+              ],
               "description": "Per-workflow override of the server's default masking mode."
             }
           },
@@ -446,7 +803,12 @@
         },
         "logLevel": {
           "type": "string",
-          "enum": ["debug", "info", "warn", "error"]
+          "enum": [
+            "debug",
+            "info",
+            "warn",
+            "error"
+          ]
         },
         "maxLoopbackIterations": {
           "type": "integer",