@openwop/openwop-conformance 2.0.0-rc.48 → 2.0.0-rc.50

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.0.0-rc.48",
-  "stampSha256": "209fc2757dfc867b83db989afa45e48404cefd7aacd015c99328a39a3aa000ec"
+  "version": "2.0.0-rc.50",
+  "stampSha256": "9047f5b272c57e56d3bae6ed8df7c6544b01b67533e069da34a1c5c4a33d3295"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.0.0-rc.48",
+  "version": "2.0.0-rc.50",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.0.0-rc.48"
+    "@openwop/spec-artifacts": "2.0.0-rc.50"
   }
 }

package/requirement-aliases.json

@@ -1,4 +1,6 @@
 {
   "$comment": "old id → new id. Add a row when a test title is reworded so bundles citing the old id still resolve.",
-  "aliases": {}
+  "aliases": {
+    "openwop.it.v2-run-cancel.cancelling-a-terminal-run-answers-409-run-terminal-or-200-idempotently-the-prose": "openwop.it.v2-run-cancel.cancelling-a-terminal-run-is-refused-409-run-terminal"
+  }
 }

package/requirements.json

@@ -28147,7 +28147,7 @@
     {
       "id": "openwop.it.v2-run-bulk-cancel.results-come-back-in-request-order-each-id-processed-independently-a-foreign-id",
       "file": "v2-run-bulk-cancel.test.ts",
-      "line": 60,
+      "line": 63,
       "title": "results[] come back in request order, each id processed independently, a foreign id refused in its entry and never as a top-level 403",
       "explicitId": null,
       "citations": [
@@ -28172,7 +28172,12 @@
           "interpolated": true
         },
         {
-          "section": null,
+          "section": "api/v2/openapi.yaml bulkCancelRuns results[].error",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/identity.md §5",
           "requirement": null,
           "interpolated": true
         },
@@ -28184,16 +28189,21 @@
       ]
     },
     {
-      "id": "openwop.it.v2-run-cancel.cancelling-a-terminal-run-answers-409-run-terminal-or-200-idempotently-the-prose",
+      "id": "openwop.it.v2-run-cancel.cancelling-a-terminal-run-is-refused-409-run-terminal",
       "file": "v2-run-cancel.test.ts",
       "line": 65,
-      "title": "cancelling a terminal run answers 409 run_terminal or 200 idempotently — the prose is silent, the leg records which",
+      "title": "cancelling a terminal run is refused 409 run_terminal",
       "explicitId": null,
       "citations": [
         {
           "section": null,
           "requirement": null,
           "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": "the refusal MUST be run_terminal",
+          "interpolated": true
         }
       ]
     },
@@ -28387,7 +28397,7 @@
           "interpolated": true
         },
         {
-          "section": "spec/v2/core/errors.md",
+          "section": null,
           "requirement": null,
           "interpolated": true
         },
@@ -28397,8 +28407,9 @@
           "interpolated": true
         },
         {
-          "section": "spec/v2/core/errors.md",
-          "requirement": "the 409 MUST carry an error envelope with a registered code"
+          "section": null,
+          "requirement": null,
+          "interpolated": true
         }
       ]
     },
@@ -28439,6 +28450,16 @@
           "requirement": null,
           "interpolated": true
         },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
         {
           "section": "spec/v2/core/events.md §run.paused",
           "requirement": null,

package/schemas/CORPUS-STAMP.json

@@ -1,7 +1,7 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.0.0-rc.48",
+  "version": "2.0.0-rc.50",
   "corpusTag": null,
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
@@ -9,9 +9,9 @@
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "39081c59fb696159806b0f2f9a42e7e9ff830d622fcf2ad4159b21357580a955",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "5bc99c81f5b08a422e0d2132c8214c00b9301bc5c4dc2c54daacdba94f26bcea",
-    "api/v2/asyncapi.yaml": "dfcee52de5dc650236c2e7707cca679f771c0699a3fcd02809fe67565f3868ab",
-    "api/v2/openapi.yaml": "789b75d23df21ddfedaa84a9a82cba028bb4eb74fd4d73482064f4eb952b8854",
+    "api/seams-v2.yaml": "cf2510ff1fa3f7f7b37221115261e7db1121cdfaa8cdc8d5a651ba367c9cf263",
+    "api/v2/asyncapi.yaml": "9488e843f433ac656d1984819dbdddfcbb95c099a57afbfe1d33ce8b039c3199",
+    "api/v2/openapi.yaml": "7b8bdf41af39f3662c90cca68e270ac9bc12318f398af0b2083a0235380ede4b",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
@@ -141,7 +141,7 @@
     "schemas/v2/envelopes/schema.request.schema.json": "be2c5f7aa881cdd252ccff47ac02193659e1393633a1541f4297383205d384a2",
     "schemas/v2/envelopes/schema.response.schema.json": "d049a081267c06c28879c331b147f3ed821b14ccfd93005c67aff64db0a8c68e",
     "schemas/v2/envelopes/ui.a2ui-surface.schema.json": "0a06fbbdc8ba797a6818c79336a98e211ac5ba5747945b4e4098072cd3974d79",
-    "schemas/v2/error-envelope.schema.json": "c08241b74e41f4e3524c25f1c611195ed0e79b49a8ecf63e304add67070bdce5",
+    "schemas/v2/error-envelope.schema.json": "2e09ac2c32a0c0b7098b0ffeaa2822b5dd82b69c23bb3c07d6be2053e2102b19",
     "schemas/v2/eval-summary.schema.json": "bcb165148531d33b7dc01de83da3a049d19ebbef6d12300b17a234c7b03d77d9",
     "schemas/v2/export-bundle.schema.json": "bd28905a7729437ab7f2ad8bb33e13a371b2bf5605a7eb2962a0d246de312d69",
     "schemas/v2/form-content-pack-manifest.schema.json": "307884e57946703b6f86ec283034bf56beb68bea4a000743ebbc9eebeed31b07",
@@ -171,7 +171,7 @@
     "schemas/v2/run-diff-response.schema.json": "6ab6cd265dc7e0a2086c6659c46aa0e7b43e6302949f0adac5d7deb1c7c0ecd3",
     "schemas/v2/run-event-payloads.schema.json": "10f56762616535d01f411afdd98a70ecafc0a961f77aa68cf164b1da458464b4",
     "schemas/v2/run-event.schema.json": "1a9946374af9323b71635d00fed22abe02c300fa2cf3ae3e9c30f3e553e408ec",
-    "schemas/v2/run-options.schema.json": "6d6052596ab0f17acfb00fdfc89907da7724f952e5ffbe1f81d94ba23d4c77cd",
+    "schemas/v2/run-options.schema.json": "ff240805478158cbd2f661979c5eb4f5eda11f9c053b7ba587cb0211a9252d74",
     "schemas/v2/run-orchestrator-decided-event.schema.json": "bb76e15ff72e669f12938684033b55dc567470e1a378e19ffc3fa0e4034ab5a7",
     "schemas/v2/run-snapshot.schema.json": "0ee8a50c6be210db415a7c4345298e70a6ae3dd0dd764ccc514bc1c501437586",
     "schemas/v2/security-advisory.schema.json": "6a382f737730a738d634266315e9d335e5760020a0cdd9f30727c2f987a01770",
@@ -199,7 +199,7 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "fee4594ef49953953ffcd0b3813300067d16b3e65ebff2aac722034ac9b3f545",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "8f3913990bcebac56db79ec3717437f940156bc05ef878ef863814faada569d4",
+    "spec/v1/core-standard-manifest.json": "418d5aea57422fc9b1d66b5373632c2bcbecf8687940cde32692bc5d6541c233",
     "spec/v1/deprecations.json": "1d5acb69a9b8ccb57275a95605f74aef1d920685f8407c9d382a46b59dc803bb",
     "spec/v1/deprecations.schema.json": "18c87e78bedc210431f795ae44c5b5d202f2f3317850d5cf86867d4f1fa1cdfb",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
@@ -213,7 +213,7 @@
     "spec/v1/spec-gaps.json": "6cc9962c6b969f632e07a78b52a4f61447ff579e2990cbae989866f584a86042",
     "spec/v2/declaration.json": "c15a6a8f08ebd326d1b60398d93d7f7d5abe5c1b8284874fdb13b59f44443210",
     "spec/v2/declaration.schema.json": "b0881a76228dfbd1b85a2ec7b7259a60197f768344535cdb475db6ff719b0e54",
-    "spec/v2/errors.json": "c2dd3fa0401efa0dc78da3b21e32b58a89ed5114cebdde96d3eb999a702118f0",
+    "spec/v2/errors.json": "63583dec5a4b6de0bacc2894b0752b3da128a0afed80f3dc244e552bc0dd0e55",
     "spec/v2/event-codemap.json": "37869a03cdfd8758b57e6f350641a6ebbd383231cebda51f5473ad85f94ab74c",
     "spec/v2/event-codemap.schema.json": "ce2d0ca085d7668d7ef745d2560b385ec6881d24a6d4b47c49931986b2ba642d",
     "spec/v2/ext/provider-idempotency/registry.json": "5b5fecad604fb4ab38da39f5abe697a4e57b05406c398f8afeb377331b2bd965",
@@ -230,8 +230,8 @@
     "spec/v2/path-manifest.json": "034152e09b1458c66810d4050e20a273b2b9b8fe2d92b66e8b819477de58a1be",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "5019ac8209540bfbeee9c3232530d4e599be0ab926d817ff48edcec8419eb209",
-    "spec/v2/release.json": "fafdf20cd6fda346c9a703aee914f79997e63299dbd7a1b66895f9ba3d29f0db",
+    "spec/v2/release.json": "7b0a86de05e0890ccaaeb4319d2b8201d08c09b5019c1cde8814295ba9967323",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624"
   },
-  "corpusCommit": "0af233770f4e6261b43fd4122d482fbed2866582"
+  "corpusCommit": "fa29c2ba4251e780acebbe199555b02d8cfa9c92"
 }

package/src/scenarios/v2-run-annotation-not-event.test.ts

@@ -51,7 +51,7 @@ describe('v2 run-annotation-not-event (runs.md §Annotations)', () => {
 
     const ann = await http(() => driver.post(`/runs/${enc(runId)}/annotations`, { signal: { kind: 'label', label: 'conformance' }, note: 'openwop conformance annotation' }));
     if (ann === null) return softSkip('blocked', 'POST /runs/{runId}/annotations unreachable (fetch failed)');
-    if (ann.status === 501 || ann.status === 404) return softSkip('inapplicable', `POST /runs/{runId}/annotations answered ${ann.status} with feedback advertised — runs.md §Surface says 501 when unadvertised and the registry names no 501 code (filed); treated as not mounted`);
+    if (ann.status === 501 || ann.status === 404) return softSkip('blocked', `POST /runs/{runId}/annotations answered ${ann.status} although feedback is advertised — the surface is not mounted (an unadvertised feedback answers 404 not_found; 501 is not a registered shape)`);
     expect(ann.status, req(ID, DOC, `createAnnotation MUST answer 201 — got ${ann.status} ${readErrorCode(ann.json) ?? ''}`.trim())).toBe(201);
     const check = v2Validator('annotation')(ann.json);
     expect(check.ok, req(ID, 'schemas/v2/annotation.schema.json', `the 201 body MUST validate: ${check.errors}`)).toBe(true);

package/src/scenarios/v2-run-bulk-cancel.test.ts

@@ -23,7 +23,7 @@
 
 import { describe, it, expect } from 'vitest';
 import { driver, type OpenWOPResponse } from '../lib/driver.js';
-import { v2Discovery } from '../lib/v2.js';
+import { v2Discovery, v2Validator } from '../lib/v2.js';
 import { readErrorCode } from '../lib/error-envelope.js';
 import { softSkip } from '../lib/soft-skip.js';
 import { req } from '../lib/requirement-ids.js';
@@ -42,7 +42,7 @@ async function create(): Promise<{ runId: string } | { reason: string }> {
   if (res.status !== 201 || typeof runId !== 'string') return { reason: `POST /runs answered ${res.status} ${readErrorCode(res.json) ?? ''} — create refused`.trim() };
   return { runId };
 }
-interface Entry { runId?: unknown; ok?: unknown; status?: unknown; error?: { code?: unknown } | null }
+interface Entry { runId?: unknown; ok?: unknown; status?: unknown; error?: unknown }
 
 describe('v2 run-bulk-cancel (runs.md §Cancel)', () => {
   it('101 ids are refused 400 validation_error with details.maxRunIds', async () => {
@@ -53,7 +53,10 @@ describe('v2 run-bulk-cancel (runs.md §Cancel)', () => {
     if (res.status === 404) return softSkip('blocked', 'POST /runs:bulk-cancel answered 404 — bulkCancelRuns is a core operation (runs.md §Surface) and is not mounted');
     expect(res.status, req(ID, DOC, `over the cap (RECOMMENDED 100) the host MUST answer 400 — got ${res.status}`)).toBe(400);
     expect(readErrorCode(res.json), req(ID, DOC, 'the refusal MUST be validation_error')).toBe('validation_error');
-    const max = (res.json as { error?: { details?: { maxRunIds?: unknown } } } | null)?.error?.details?.maxRunIds;
+    // The v2 envelope is { error: <code>, message, details? } — `details` at the ROOT
+    // (schemas/v2/error-envelope.schema.json). rc.48/rc.49 read `error.details`
+    // and reported a host defect that was this reader's; retracted in rc.50.
+    const max = (res.json as { details?: { maxRunIds?: unknown } } | null)?.details?.maxRunIds;
     expect(typeof max === 'number' && max >= 1 && max <= 100, req(ID, DOC, `details.maxRunIds MUST state the cap (got ${String(max)})`)).toBe(true);
   });
 
@@ -72,11 +75,16 @@ describe('v2 run-bulk-cancel (runs.md §Cancel)', () => {
     expect(entries.map((e) => e.runId), req(ID, DOC, 'results[] MUST be in request order')).toEqual(runIds);
     const foreign = entries[1]!;
     expect(foreign.ok, req(ID, DOC, 'the foreign-tenant entry MUST be ok: false')).toBe(false);
-    const fcode = String(foreign.error?.code);
-    expect(['run_forbidden', 'id_tenant_mismatch', 'not_found'].includes(fcode), req(ID, DOC, `the foreign entry MUST carry an error envelope with run_forbidden (runs.md) or id_tenant_mismatch / not_found (identity.md §5) — got ${fcode}; the two documents disagree (filed)`)).toBe(true);
+    // An entry's `error` IS the error envelope (api/v2/openapi.yaml: `$ref error-envelope`):
+    // { error: <code>, message, details? } nested under the entry — so the code is
+    // `entry.error.error`, read the same way as a top-level envelope.
+    const env = v2Validator('error-envelope')(foreign.error);
+    expect(env.ok, req(ID, 'api/v2/openapi.yaml bulkCancelRuns results[].error', `an ok: false entry's error MUST be the error envelope { error: <code>, message, details? } (schemas/v2/error-envelope.schema.json; the OpenAPI $refs it for results[].error) — got ${JSON.stringify(foreign.error)}: ${env.errors}`)).toBe(true);
+    const fcode = String(readErrorCode(foreign.error));
+    expect(['id_tenant_mismatch', 'not_found'].includes(fcode), req(ID, 'spec/v2/core/identity.md §5', `an id whose tenant segment is not the caller's MUST be refused inside the entry with id_tenant_mismatch (or not_found where existence is not leaked) — identity.md §5 applies inside a bulk entry exactly as on a path; run_forbidden is for a same-tenant run the caller may not cancel — got ${fcode}`)).toBe(true);
     for (const own of [entries[0]!, entries[2]!]) {
       const okShape = own.ok === true && ['cancelling', 'cancelled'].includes(String(own.status));
-      const terminalShape = own.ok === false && String(own.error?.code) === 'run_terminal';
+      const terminalShape = own.ok === false && readErrorCode(own.error) === 'run_terminal';
       expect(okShape || terminalShape, req(ID, DOC, `an own entry MUST be ok: true with cancelling|cancelled, or ok: false run_terminal when the noop already completed — got ${JSON.stringify(own)}`)).toBe(true);
     }
   });

package/src/scenarios/v2-run-cancel.test.ts

@@ -62,7 +62,7 @@ async function eventTypes(runId: string): Promise<string[] | null> {
 const TERMINAL = new Set(['completed', 'failed', 'cancelled']);
 
 describe('v2 run-cancel (runs.md §Cancel)', () => {
-  it('cancelling a terminal run answers 409 run_terminal or 200 idempotently — the prose is silent, the leg records which', async () => {
+  it('cancelling a terminal run is refused 409 run_terminal', async () => {
     if (!(await discovery())) return softSkip('blocked', 'v2 discovery unreachable');
     const c = await create({ workflowId: NOOP });
     if ('reason' in c) return softSkip('blocked', c.reason);
@@ -72,8 +72,8 @@ describe('v2 run-cancel (runs.md §Cancel)', () => {
     if (res === null) return softSkip('blocked', 'POST /runs/{runId}/cancel unreachable (fetch failed)');
     const code = readErrorCode(res.json);
     const status = (res.json as { status?: unknown } | null)?.status;
-    const ok = (res.status === 409 && code === 'run_terminal') || (res.status === 200 && status === 'cancelled');
-    expect(ok, req(ID, DOC, `cancel on a terminal (${s}) run MUST be 409 run_terminal or 200 { status: cancelled } — got ${res.status} ${code ?? String(status)}. §Cancel's 200 grammar is { runId, status: cancelling | cancelled }; a 200 echoing ${s} is outside it, so the only conforming refusal is 409 run_terminal (the prose does not say so in words — filed)`)).toBe(true);
+    expect(res.status, req(ID, DOC, `a cancel on a run that is already terminal (${s}) MUST be refused 409 run_terminal — got ${res.status} ${code ?? String(status)}; a 200 echoing the terminal state is outside §Cancel's 200 grammar { runId, status: cancelling | cancelled }`)).toBe(409);
+    expect(code, req(ID, DOC, 'the refusal MUST be run_terminal')).toBe('run_terminal');
   });
 
   it('cancelling a running run answers 200 with cancelling|cancelled, emits run.cancelled within 5 s, and the snapshot reads cancelled', async () => {

package/src/scenarios/v2-run-pause-resume.test.ts

@@ -66,11 +66,11 @@ describe('v2 run-pause-resume (runs.md §Pause and resume)', () => {
     if (pause === null) return softSkip('blocked', 'POST /runs/{runId}:pause unreachable (fetch failed)');
     if (pause.status === 404) return softSkip('blocked', 'POST /runs/{runId}:pause answered 404 — pauseRun is a core operation (runs.md §Surface) and is not mounted');
     expect(pause.status, req(ID, DOC, `pause on a terminal (${s}) run MUST answer 409 — got ${pause.status} ${readErrorCode(pause.json) ?? ''}`.trim())).toBe(409);
-    expect(typeof readErrorCode(pause.json) === 'string', req(ID, 'spec/v2/core/errors.md', `the 409 MUST carry an error envelope with a registered code (got ${String(readErrorCode(pause.json))}); runs.md names none for this case (filed)`)).toBe(true);
+    expect(readErrorCode(pause.json), req(ID, DOC, `a pause refused because the run is terminal MUST carry run_terminal (got ${String(readErrorCode(pause.json))})`)).toBe('run_terminal');
     const resume = await http(() => driver.post(`/runs/${enc(c.runId)}:resume`, {}));
     if (resume === null) return softSkip('blocked', 'POST /runs/{runId}:resume unreachable (fetch failed)');
     expect(resume.status, req(ID, DOC, `resume on a run that is not paused MUST answer 409 — got ${resume.status} ${readErrorCode(resume.json) ?? ''}`.trim())).toBe(409);
-    expect(typeof readErrorCode(resume.json) === 'string', req(ID, 'spec/v2/core/errors.md', 'the 409 MUST carry an error envelope with a registered code')).toBe(true);
+    expect(readErrorCode(resume.json), req(ID, DOC, `a resume refused because the run is terminal MUST carry run_terminal (got ${String(readErrorCode(resume.json))})`)).toBe('run_terminal');
     if (!isFixtureAdvertised(DELAY)) return softSkip('inapplicable', `${DELAY} fixture not advertised — the positive pause/resume leg cannot run, so the two 409s above are witnessed without their control (a host answering 409 to everything would pass them)`);
   });
 
@@ -91,6 +91,10 @@ describe('v2 run-pause-resume (runs.md §Pause and resume)', () => {
       expect(pb?.status, req(ID, DOC, `the 202 MUST carry status paused (got ${String(pb?.status)})`)).toBe('paused');
       const again = await http(() => driver.post(`/runs/${enc(c.runId)}:pause`, {}));
       expect(again?.status ?? null, req(ID, DOC, `a second pause on a paused run MUST answer 409 — got ${again?.status ?? 'no response'}`)).toBe(409);
+      expect(readErrorCode(again?.json), req(ID, DOC, `a pause refused on a non-terminal run MUST carry run_state_conflict (got ${String(readErrorCode(again?.json))})`)).toBe('run_state_conflict');
+      // `details` sits at the envelope ROOT (schemas/v2/error-envelope.schema.json), not under `error`.
+      const runStatus = (again?.json as { details?: { runStatus?: unknown } } | null)?.details?.runStatus;
+      expect(runStatus, req(ID, DOC, `run_state_conflict MUST carry details.runStatus naming the status that refused it (got ${String(runStatus)})`)).toBe('paused');
       const resume = await http(() => driver.post(`/runs/${enc(c.runId)}:resume`, { reason: 'conformance' }));
       expect(resume?.status ?? null, req(ID, DOC, `resumeRun on a paused run MUST answer 202 — got ${resume?.status ?? 'no response'} ${readErrorCode(resume?.json) ?? ''}`.trim())).toBe(202);
       const rb = resume?.json as { runId?: unknown; status?: unknown } | null;