@openwop/openwop-conformance 2.1.6 → 2.2.0

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.1.6",
-  "corpusTag": "v2.1.6",
+  "version": "2.2.0",
+  "corpusTag": "v2.2.0",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "39081c59fb696159806b0f2f9a42e7e9ff830d622fcf2ad4159b21357580a955",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "d2ae13db2ec6511d29836235f5955c9ff65fcd910ff67a6837e0eafb1cc1098c",
-    "api/v2/asyncapi.yaml": "8e723c03dd65f2fcc33b6b337c18d32f2ca5d18d9883d95c33614eabbfb99ad8",
-    "api/v2/openapi.yaml": "eb9c2d25f537d383d8c5e0d6ae05572bd5da80aac4e7a7a70eb44163d984d73c",
+    "api/seams-v2.yaml": "5d074016ed82dda66ec00016a06aef595f6688e47d95690d1eb395e3bf217c56",
+    "api/v2/asyncapi.yaml": "11107def567fc6188b29c267a2f5488fd92c59fb3433fd4124fdf63f9aca4981",
+    "api/v2/openapi.yaml": "303752410cc4b0be42206a678c08d7aeb14333ab9e354e2e021356d468e8c3e7",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
@@ -82,7 +82,7 @@
     "schemas/residency.schema.json": "b45fdc91ae88091251914dbd6787a1e2ce687580b91d31a759217b7a1f0010c0",
     "schemas/run-ancestry-response.schema.json": "963a5763b03216aa72fc2854560c778e53994f8cb06ea9a4053e541273c87f5c",
     "schemas/run-diff-response.schema.json": "d9d196730b5d5d8a04a591d21a8fc6b44be7fa134f11827ff7e4f1a86d47e83d",
-    "schemas/run-event-payloads.schema.json": "37cdbdb5038e148056c104a49b8d28a9668479e06d401309d354a8b0a70921a3",
+    "schemas/run-event-payloads.schema.json": "2f2a5192a6262758bbffb358d2044ebe4ad234b388ddcd47b818602897efb93f",
     "schemas/run-event.schema.json": "c70c06932b9831295042836213e617c8e946f20ddd49cf4e889b74d89d2175a8",
     "schemas/run-options.schema.json": "f8241ece6ddc6527de9160d811d42c231b4f77b935f2e107b3c05608545c59ab",
     "schemas/run-orchestrator-decided-event.schema.json": "17a43a3c44680a24d411141357a867b3caed6107d56de88fe2e062eaf93fa2c1",
@@ -149,7 +149,7 @@
     "schemas/v2/goal.schema.json": "146c4182e36d3538778f947e668a92cdb69ec42ee0820104b00063b035e342d7",
     "schemas/v2/heartbeat-evaluated.schema.json": "4086b1ba1d0547c08b038dfb263ac89416a3e406430db1250156fb2f9b74f8d6",
     "schemas/v2/heartbeat-state-changed.schema.json": "eb68d0082aa996650e3a6b8ccf32457f959cebc7e6728cc7c331b9d171a4bef6",
-    "schemas/v2/ids.schema.json": "05c98e3f8a72fa79be123765bd9c2ea7c6620188d69df8524160399225316cd6",
+    "schemas/v2/ids.schema.json": "6481cab16c9b89fab168627502dcbf2ee7489b5a636a4080ea8cfd2670d7b17e",
     "schemas/v2/localized-content-language-settings.schema.json": "92240f19a2b4b2f05ab41a797f703485a28813848035478e72f395edd04c1d35",
     "schemas/v2/localized-content-page-response.schema.json": "ef48329749758afb21e4d3cbc3f017abb911f75726819457f35b9f1390332c75",
     "schemas/v2/localized-content-page.schema.json": "e0f97660121955d6705d935f34e748adb739ac70f8536a009cd8d6f303735151",
@@ -169,7 +169,7 @@
     "schemas/v2/residency.schema.json": "3fd23c9732beb140504e81560fc426eb6764d547e56da5fb92c5a5c7bf04db3a",
     "schemas/v2/run-ancestry-response.schema.json": "334c17f2062dea62726ca1d07b8be3f169cdc422af843c1def5fb317039814c9",
     "schemas/v2/run-diff-response.schema.json": "8bdb2045c274580038bd74781f7d062f5049839797c164a89de4ed89edc53a74",
-    "schemas/v2/run-event-payloads.schema.json": "1d3ccffc4e506d3109c17990e01976ba935e61672562684b9635743d56af3f57",
+    "schemas/v2/run-event-payloads.schema.json": "38dd47929f0245c865e4850aab453e073bb717bc81590d68a91bd7b490536d63",
     "schemas/v2/run-event.schema.json": "1a9946374af9323b71635d00fed22abe02c300fa2cf3ae3e9c30f3e553e408ec",
     "schemas/v2/run-list-response.schema.json": "c2dbc34768dcf64528914a213aa3cb55952e8e3e90a64b04a9423b2a19749d38",
     "schemas/v2/run-options.schema.json": "f0e9f494d80086c2ed2cf9fe87df54e5b4e66601699c4a1089f4edbc7ba58867",
@@ -200,11 +200,11 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "fee4594ef49953953ffcd0b3813300067d16b3e65ebff2aac722034ac9b3f545",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "9d3cb4dc2f8b65a9282d1673a5030d7960eb193d73fcfd789e4cbbd93aff5588",
+    "spec/v1/core-standard-manifest.json": "9220156eee1d465b371af344f19fe7ad151e492da3be066f43032d7bd451b0a0",
     "spec/v1/deprecations.json": "a2022c2d6eb501bf406b5d75fe2d431a3fe0158e8509125d2453985eb1bf511a",
     "spec/v1/deprecations.schema.json": "18c87e78bedc210431f795ae44c5b5d202f2f3317850d5cf86867d4f1fa1cdfb",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
-    "spec/v1/event-codemap.schema.json": "d52caf29071e3784d4c20259cdbd5a7b533986548a440bb632a80b82cadd7ea5",
+    "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
     "spec/v1/gaps.json": "96ca051cb20f1a669b355d67a89421c56fef28aa5e6710c9519f592f26af33a3",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
@@ -212,16 +212,16 @@
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
     "spec/v1/operation-path-manifest.json": "5f5f4e3842669371730ebbd1aace3fb794192615f0018dc144f484ba5db82ac3",
     "spec/v1/spec-gaps.json": "6cc9962c6b969f632e07a78b52a4f61447ff579e2990cbae989866f584a86042",
-    "spec/v2/README.md": "75a576b3ec0e4ce85ea393f88be358055e7324fb2d196de2809d49122e85f6cf",
+    "spec/v2/README.md": "e2a3e769eec448a50b41d910805d31ccc173bbebf79b2418a7734d70d2ad828e",
     "spec/v2/core/capabilities.md": "c5107a4964e487c20bbb5254cfe1f706e0d9ba7e34da9070bc43b50b385e7948",
     "spec/v2/core/conformance.md": "622084e3c74c4549087f4d861b1bb98cec201a0c5aec23788d27f53a355fde3b",
     "spec/v2/core/connection-packs.md": "1d759681e2962f5103228c52c45f24607ed4bb9ae73e30605f690c1d5a59e9ee",
     "spec/v2/core/errors.md": "74fdb5862f432a831cf0c2eadbe0c8cca6b2660ec578180ae33db54773a1df28",
-    "spec/v2/core/events.md": "defe0969d6ec7c980f415cc0d78b9d065782ac7e5638b12a44aa4895a35d6126",
+    "spec/v2/core/events.md": "3b7d1ad34f9e438c9825d60c0114b9a21c82a468f15ccbd7567022641a4537ad",
     "spec/v2/core/form-content-packs.md": "6ffaae85d4550be48dd53fb6e2959af8aceb35bd87c5343b722885084f197713",
-    "spec/v2/core/headers.md": "16e865d6f47f87ac63cdf3010c13661ee1db498ecc422ae913fa99032cbfa7a7",
+    "spec/v2/core/headers.md": "f8dd0d285e73906059cd815f18ecc068a0f1339a3755cf6319f0ee5d8da607d2",
     "spec/v2/core/idempotency.md": "b86c352d964aebad532727f314e26ed2177d49de382076fa64d3162e2f56118d",
-    "spec/v2/core/identity.md": "dd5299f9cdf54640870e1fffae11edb820cf6396ea298c4ebd14c649c4bd4a87",
+    "spec/v2/core/identity.md": "9d2b823eb899463807452fe5721dcf09881837c161be024175957db27870b243",
     "spec/v2/core/interop.md": "d4c404e469e1d9d9be88bc2c939d777e7d7c1d0419b1251c18770f039838a401",
     "spec/v2/core/interrupt.md": "d872e0652a938594eeb2a19e86cf64e64e29b234f5d9c4fbe2970ab5fb191b9c",
     "spec/v2/core/overview.md": "69377c90bbb87b6bfe4b8be4f1b65810094b0759c8d4f93ca6df92cc530ea023",
@@ -233,11 +233,11 @@
     "spec/v2/core/versioning.md": "d731782eeabb953919c7c7057340b7f9c2916b6186790e6b04c7d8ea60767189",
     "spec/v2/core/webhooks.md": "d360da78336afa837bddf515e289e445808bca02e1e4b493f81fa51ce4a545c4",
     "spec/v2/core/workflow-chain-packs.md": "ef2b07d2d99334eaec0cc370314e2ad2f84ea58deb699e5d92e6e52d6056613f",
-    "spec/v2/declaration.json": "63dd351a87439241bc744ce62fdc498b7621292c11a4ad42c3f41429d72366b9",
-    "spec/v2/declaration.schema.json": "eac5f8080bd572f147bd57d0c4ac8ad73b14536d9236222490ae29a33b21e184",
+    "spec/v2/declaration.json": "a09bac61c1b825e4a77b5abc0f86f1f8c20c381e0650eb08c2f6d0ef0aaec1dc",
+    "spec/v2/declaration.schema.json": "c86e3083fb9789c1958ecb4576cc6f71aa90e6f339521139238543ed08211dd4",
     "spec/v2/errors.json": "f179414a92f30b5dadf26e9e57699649a67324bd7186d5287647d17605d137d3",
     "spec/v2/event-codemap.json": "37869a03cdfd8758b57e6f350641a6ebbd383231cebda51f5473ad85f94ab74c",
-    "spec/v2/event-codemap.schema.json": "ce2d0ca085d7668d7ef745d2560b385ec6881d24a6d4b47c49931986b2ba642d",
+    "spec/v2/event-codemap.schema.json": "b173f2a9bcc0bf9b62a474ce3b91e1431d597e64fd1560fc58662cd8606eaf9c",
     "spec/v2/ext/a2uiSurface/README.md": "176cb0542e1c236ffcd6d682536ba0081242684444e2dec790abd480a44a571e",
     "spec/v2/ext/brand/README.md": "1a80102a9cd766dcb6098c999e552af88f5b83c88951acde18d17cc0b29aa09d",
     "spec/v2/ext/canvas/README.md": "a2d5f28523753e8e85cc9042db39faf9207a2eebce1a8553be22e341f7ea58d9",
@@ -266,12 +266,12 @@
     "spec/v2/facets/runList.schema.json": "6223e1baaebbb9f4faa71bfe968f8d22b4aa88046d0e43e8d5f56409e7f86e90",
     "spec/v2/facets/sandbox.schema.json": "e75f54486d387b2d089791aa93b5093cd1450f1920753a0f97fc23acdfe978ed",
     "spec/v2/facets/webhooks.schema.json": "0b766033ef4b4c6c2ac6f9979a19843ba024d3a1d1576972dcb55aaba52f1b9a",
-    "spec/v2/id-field-bindings.json": "d9d1f8e266660b581f11020b9511a65c677e026b1a71ada870682ad77e18555d",
+    "spec/v2/id-field-bindings.json": "eecadfd11581ba2e075ccb320d85fc033b816edfdd51edb5c5727a181e55dcb4",
     "spec/v2/path-manifest.json": "a6f4e652e866889e8bde815874062f62929aee95dc8e58e7152c56adee262163",
-    "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
+    "spec/v2/peer-dependency-aliases.json": "10fcab53c65305e9b6bae4a40d30176091dca68739ac8a78291510c77b50ca6b",
     "spec/v2/profiles.json": "0636f19fceae625390003a347e70ef4797d84766b5c24ce8a02cea52aadebca4",
-    "spec/v2/release.json": "972de6d9a79fe5ed397197e1ae54e722e476845e1ea12a484f46ce0e7df12fb6",
+    "spec/v2/release.json": "ce7a6bb9f4337e3063147edcd609c28c12cc26599ee4ffcfe32e816d85ddc399",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624"
   },
-  "corpusCommit": "b9b70e63a9c5efc0e5bc7a3efbb675eb551bfce1"
+  "corpusCommit": "e2db4047ee81b8f31ffee84238ebdd551d65b34c"
 }

package/src/lib/bound-id.ts

@@ -0,0 +1,69 @@
+/**
+ * The bound-id path projection (`spec/v2/core/identity.md` §5, RFC 0184 §A.1).
+ *
+ * A tenant-bound id is TWO segments joined by `/`; a URL path parameter is ONE
+ * segment. Something has to carry the separator across, and the corpus used to
+ * say `%2F`. That is what a tier-1 host's front door decoded back to `/` before
+ * forwarding, leaving every bound id unreachable at its own origin
+ * (`v2-created-run-readable.test.ts` records the measurement).
+ *
+ * So the escape marker is `~`, which RFC 3986 §2.3 lists as UNRESERVED. An
+ * intermediary has no license to rewrite an unreserved character, so `~2F`
+ * arrives byte-for-byte. `%2F` has no such protection in practice: handling it
+ * correctly requires a front door to distinguish a percent-encoded RESERVED
+ * octet (§6.2.2.2: MUST NOT decode) from an unreserved one (SHOULD decode), and
+ * deployed front doors do not.
+ *
+ * The codec is TOTAL over bytes rather than conditional on the current id
+ * grammar. That is deliberate: a conditional encoding is only unambiguous while
+ * the grammar holds still, and this grammar has already moved once (the `anon:`
+ * tenant prefix). Encoding every non-passthrough byte means a later widening
+ * cannot invalidate a projection already on the wire.
+ */
+
+/** RFC 3986 unreserved MINUS `~`, which is reserved here as the escape marker. */
+const PASSTHROUGH = /^[A-Za-z0-9._-]$/;
+
+/** Encode a bound id into exactly one path segment. Identity on already-safe input. */
+export function projectBoundId(id: string): string {
+  let out = '';
+  for (const byte of new TextEncoder().encode(id)) {
+    const ch = String.fromCharCode(byte);
+    out += byte < 0x80 && PASSTHROUGH.test(ch) ? ch : `~${byte.toString(16).toUpperCase().padStart(2, '0')}`;
+  }
+  return out;
+}
+
+/**
+ * Decode one path segment back to the bound id.
+ *
+ * Throws on a `~` that does not introduce two hex digits — the wire rule is
+ * `400 validation_error`, and a decoder that silently passed a lone `~` through
+ * would make the codec non-injective in exactly the direction that matters.
+ */
+export function unprojectBoundId(segment: string): string {
+  for (let i = 0; i < segment.length; i++) {
+    if (segment[i] !== '~') continue;
+    if (!/^[0-9A-Fa-f]{2}$/.test(segment.slice(i + 1, i + 3))) {
+      throw new Error(`bound-id projection: '~' at index ${i} is not followed by two hex digits`);
+    }
+    i += 2;
+  }
+  const bytes: number[] = [];
+  let i = 0;
+  while (i < segment.length) {
+    if (segment[i] === '~') { bytes.push(parseInt(segment.slice(i + 1, i + 3), 16)); i += 3; }
+    else { bytes.push(...new TextEncoder().encode(segment[i]!)); i += 1; }
+  }
+  return new TextDecoder('utf-8', { fatal: true }).decode(new Uint8Array(bytes));
+}
+
+/**
+ * The tenant-bound id grammar, mirrored from `ids.schema.json` `$defs.runId`.
+ *
+ * Exported because four scenarios each kept their own copy, and copies drift:
+ * all four still spelled the tenant segment `[A-Za-z0-9._~-]{1,128}` after
+ * `tenantId` grew its `anon:` prefix, so every one of them would have rejected
+ * a runId the schema accepts (RFC 0184 §A.3).
+ */
+export const BOUND_ID = /^(anon:)?[A-Za-z0-9._~-]{1,128}\/[A-Za-z0-9._~-]{16,128}$/;

package/src/scenarios/envelope-completion-distinguishes-truncation.test.ts

@@ -36,7 +36,16 @@ import { req } from '../lib/requirement-ids.js';
 import { softSkip } from '../lib/soft-skip.js';
 
 const HTTP_SKIP = !process.env.OPENWOP_BASE_URL;
-const NODE_ID = 'structured-call';
+/**
+ * The mock-AI program seam is keyed by `nodeId` alone, so a node id is the
+ * unit of isolation between scenarios — see `host-sample-test-seams.md` §5.
+ * This file drives two fixtures, so it resolves the node per fixture rather
+ * than holding one shared id.
+ */
+const NODE_OF: Record<string, string> = {
+  'conformance-envelope-truncated': 'truncated-structured-call',
+  'conformance-envelope-retry-attempted': 'retry-attempted-structured-call',
+};
 
 interface DiscoveryDoc {
   capabilities?: {
@@ -68,8 +77,8 @@ async function readDiscovery(): Promise<DiscoveryDoc | null> {
   }
 }
 
-async function programMock(program: Array<Record<string, unknown>>): Promise<{ status: number }> {
-  const res = await driver.post('/v1/host/sample/test/mock-ai/program', { nodeId: NODE_ID, program });
+async function programMock(fixture: string, program: Array<Record<string, unknown>>): Promise<{ status: number }> {
+  const res = await driver.post('/v1/host/sample/test/mock-ai/program', { nodeId: NODE_OF[fixture], program });
   return { status: res.status };
 }
 
@@ -84,8 +93,8 @@ async function startRunAndRead(workflowId: string): Promise<{ events: RunEvent[]
   return { events, terminal };
 }
 
-async function lastBudget(): Promise<number | null> {
-  const res = await driver.get(`/v1/host/sample/test/mock-ai/last-dispatch-budget?nodeId=${encodeURIComponent(NODE_ID)}`);
+async function lastBudget(fixture: string): Promise<number | null> {
+  const res = await driver.get(`/v1/host/sample/test/mock-ai/last-dispatch-budget?nodeId=${encodeURIComponent(NODE_OF[fixture] as string)}`);
   if (res.status !== 200) return null;
   return (res.json as { maxTokens?: number | null }).maxTokens ?? null;
 }
@@ -118,7 +127,7 @@ describe.skipIf(HTTP_SKIP)('envelope-completion-distinguishes-truncation: trunca
     if (!isFixtureAdvertised(TRUNCATED_FIXTURE)) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!isFixtureAdvertised(TRUNCATED_FIXTURE)` returned early');
     const d = await readDiscovery();
     if (capabilityFamily<{ reasoning?: Record<string, unknown>; tierOneSubsetCompliance?: unknown; reliability?: { completion?: Record<string, unknown> } & Record<string, unknown> }>(d, 'envelopes')?.reliability?.completion?.distinguishesTruncation !== true) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `capabilityFamily<{ reasoning?: Record<string, unknown>; tierOneSubsetCompliance?: unknown; reliability?: { completion?: Record<string, unknown> } & Record<stri…');
-    const seed = await programMock([
+    const seed = await programMock(TRUNCATED_FIXTURE, [
       { stopReason: 'max_tokens', content: '{"partial' },
       { stopReason: 'end_turn', content: '{"valid":true}' },
     ]);
@@ -143,14 +152,14 @@ describe.skipIf(HTTP_SKIP)('envelope-completion-distinguishes-truncation: trunca
     if (!isFixtureAdvertised(TRUNCATED_FIXTURE)) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!isFixtureAdvertised(TRUNCATED_FIXTURE)` returned early');
     const d = await readDiscovery();
     if (capabilityFamily<{ reasoning?: Record<string, unknown>; tierOneSubsetCompliance?: unknown; reliability?: { completion?: Record<string, unknown> } & Record<string, unknown> }>(d, 'envelopes')?.reliability?.completion?.distinguishesTruncation !== true) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `capabilityFamily<{ reasoning?: Record<string, unknown>; tierOneSubsetCompliance?: unknown; reliability?: { completion?: Record<string, unknown> } & Record<stri…');
-    const seed = await programMock([
+    const seed = await programMock(TRUNCATED_FIXTURE, [
       { stopReason: 'max_tokens', content: '{"partial' },
       { stopReason: 'end_turn', content: '{"valid":true}' },
     ]);
     if (seed.status === 404) return softSkip('blocked', 'precondition not met — `seed.status === 404` returned early (seam, prior step, or fixture unavailable)');
 
     await startRunAndRead(TRUNCATED_FIXTURE);
-    const budget = await lastBudget();
+    const budget = await lastBudget(TRUNCATED_FIXTURE);
     if (budget === null) return softSkip('blocked', 'precondition not met — `budget === null` returned early (seam, prior step, or fixture unavailable)');
     expect(
       budget,
@@ -165,7 +174,7 @@ describe.skipIf(HTTP_SKIP)('envelope-completion-distinguishes-truncation: trunca
 describe.skipIf(HTTP_SKIP)('envelope-completion-distinguishes-truncation: schema-violation path (RFC 0033 §C)', () => {
   it('schema-violation: NO envelope.truncated; envelope.retry.attempted reason ∈ {schema-violation, parse-error}', async () => {
     if (!isFixtureAdvertised(SCHEMA_VIOLATION_FIXTURE)) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!isFixtureAdvertised(SCHEMA_VIOLATION_FIXTURE)` returned early');
-    const seed = await programMock([
+    const seed = await programMock(SCHEMA_VIOLATION_FIXTURE, [
       { content: 'not valid json' },
       { content: '{"valid":true}' },
     ]);
@@ -195,14 +204,14 @@ describe.skipIf(HTTP_SKIP)('envelope-completion-distinguishes-truncation: schema
 
   it('schema-violation: retry budget UNCHANGED from initial (no budget multiplication on this path)', async () => {
     if (!isFixtureAdvertised(SCHEMA_VIOLATION_FIXTURE)) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!isFixtureAdvertised(SCHEMA_VIOLATION_FIXTURE)` returned early');
-    const seed = await programMock([
+    const seed = await programMock(SCHEMA_VIOLATION_FIXTURE, [
       { content: 'not valid json' },
       { content: '{"valid":true}' },
     ]);
     if (seed.status === 404) return softSkip('blocked', 'precondition not met — `seed.status === 404` returned early (seam, prior step, or fixture unavailable)');
 
     await startRunAndRead(SCHEMA_VIOLATION_FIXTURE);
-    const budget = await lastBudget();
+    const budget = await lastBudget(SCHEMA_VIOLATION_FIXTURE);
     if (budget === null) return softSkip('blocked', 'precondition not met — `budget === null` returned early (seam, prior step, or fixture unavailable)');
     // The schema-violation fixture doesn't set maxTokens explicitly →
     // budget snapshots whatever the host's default is on each call.

package/src/scenarios/envelope-nl-to-format-engaged.test.ts

@@ -33,7 +33,7 @@ import { softSkip } from '../lib/soft-skip.js';
 
 const HTTP_SKIP = !process.env.OPENWOP_BASE_URL;
 const FIXTURE = 'conformance-envelope-nl-to-format-engaged';
-const NODE_ID = 'structured-call';
+const NODE_ID = 'nl-to-format-structured-call';
 
 interface RunEvent {
   type: string;

package/src/scenarios/envelope-recovery-applied.test.ts

@@ -126,7 +126,7 @@ import { req } from '../lib/requirement-ids.js';
 import { softSkip } from '../lib/soft-skip.js';
 
 const RECOVERY_FIXTURE = 'conformance-envelope-recovery-applied';
-const RECOVERY_NODE_ID = 'structured-call';
+const RECOVERY_NODE_ID = 'recovery-applied-structured-call';
 
 interface ProgrammedRunEvent {
   type: string;

package/src/scenarios/envelope-refusal-shape.test.ts

@@ -196,7 +196,7 @@ import { req } from '../lib/requirement-ids.js';
 import { softSkip } from '../lib/soft-skip.js';
 
 const E2E_FIXTURE = 'conformance-envelope-refusal';
-const E2E_NODE_ID = 'structured-call';
+const E2E_NODE_ID = 'refusal-structured-call';
 
 interface E2eEvent {
   type: string;

package/src/scenarios/envelope-retry-attempted.test.ts

@@ -119,7 +119,7 @@ import { req } from '../lib/requirement-ids.js';
 import { softSkip } from '../lib/soft-skip.js';
 
 const FIXTURE = 'conformance-envelope-retry-attempted';
-const NODE_ID = 'structured-call';
+const NODE_ID = 'retry-attempted-structured-call';
 
 const RFC_0032_REASONS = new Set([
   'schema-violation',

package/src/scenarios/envelope-retry-exhausted.test.ts

@@ -33,7 +33,7 @@ import { softSkip } from '../lib/soft-skip.js';
 
 const HTTP_SKIP = !process.env.OPENWOP_BASE_URL;
 const FIXTURE = 'conformance-envelope-retry-exhausted';
-const NODE_ID = 'structured-call';
+const NODE_ID = 'retry-exhausted-structured-call';
 
 const RFC_0032_REASONS = new Set([
   'schema-violation',

package/src/scenarios/envelope-truncated.test.ts

@@ -25,7 +25,7 @@ import { softSkip } from '../lib/soft-skip.js';
 
 const HTTP_SKIP = !process.env.OPENWOP_BASE_URL;
 const FIXTURE = 'conformance-envelope-truncated';
-const NODE_ID = 'structured-call';
+const NODE_ID = 'truncated-structured-call';
 
 interface RunEvent {
   type: string;

package/src/scenarios/envelope-truncation-cap-exhaustion.test.ts

@@ -24,7 +24,7 @@ import { softSkip } from '../lib/soft-skip.js';
 
 const HTTP_SKIP = !process.env.OPENWOP_BASE_URL;
 const FIXTURE = 'conformance-envelope-truncation-cap-exhaustion';
-const NODE_ID = 'structured-call';
+const NODE_ID = 'truncation-cap-structured-call';
 
 interface RunEvent {
   type: string;

package/src/scenarios/interrupt-approval.test.ts

@@ -17,6 +17,9 @@ const WORKFLOW_ID = 'conformance-approval';
 const NODE_ID = 'gate';
 const SKIP_NO_FIXTURE = !isFixtureAdvertised(WORKFLOW_ID);
 
+const REFINE_WORKFLOW_ID = 'conformance-approval-refine';
+const SKIP_NO_REFINE = !isFixtureAdvertised(REFINE_WORKFLOW_ID);
+
 describe.skipIf(SKIP_NO_FIXTURE)('interrupt: approval accept resumes to `completed`', () => {
   it('run suspends at gate, accept resolution drives terminal completed', async () => {
     const create = await driver.post('/v1/runs', { workflowId: WORKFLOW_ID });
@@ -96,3 +99,87 @@ describe.skipIf(SKIP_NO_FIXTURE)('interrupt: resolving an unknown interrupt retu
     });
   });
 });
+
+/**
+ * RFC 0183 §A.1/§A.2 — a `refine` resolution must be recordable.
+ *
+ * Before RFC 0183, `interruptResolved` was `additionalProperties: false` with no
+ * seat for the resume action and no seat for the feedback a refine REQUIRES, and
+ * `decision` was an unconstrained string whose documented vocabulary is a
+ * different axis (governance: granted|rejected|overridden). A host resolving by
+ * refine could record neither what the approver did nor the feedback they gave.
+ *
+ * Uses its own fixture rather than widening `conformance-approval`, because
+ * adding `refine` to that fixture's `actions` would change a registered workflow
+ * definition every host already serves.
+ */
+describe.skipIf(SKIP_NO_REFINE)('interrupt: refine resolution carries action + refineFeedback (RFC 0183)', () => {
+  it('a refine resolve round-trips `action` and the structured feedback it requires', async () => {
+    const create = await driver.post('/v1/runs', { workflowId: REFINE_WORKFLOW_ID });
+    expect(create.status).toBe(201);
+    const runId = (create.json as { runId: string }).runId;
+
+    const suspended = await pollUntilStatus(runId, 'waiting-approval', { timeoutMs: 10_000 });
+    expect(suspended.currentNodeId).toBe(NODE_ID);
+
+    const refineFeedback = { scope: 'whole', text: 'conformance: please tighten the summary' };
+    const resolve = await driver.post(
+      `/v1/runs/${encodeURIComponent(runId)}/interrupts/${encodeURIComponent(NODE_ID)}`,
+      { resumeValue: { action: 'refine', refineFeedback } },
+    );
+    expect(
+      resolve.status,
+      req('openwop.it.interrupt-approval.a-refine-resolve-round-trips-action-and-the-structured-feedback-it-requires',
+        'RFCS/0183-interrupt-resolved-action-fidelity.md §A.1',
+        'a gate offering `refine` MUST accept a refine resolution carrying refineFeedback',
+      ),
+    ).toBe(200);
+
+    const events = await driver.get(`/v1/runs/${encodeURIComponent(runId)}/events`);
+    expect(events.status).toBe(200);
+    const rows = ((events.json as { events?: Array<Record<string, unknown>> } | undefined)?.events ?? []);
+    const resolved = rows.find((e) => String(e.type).endsWith('interrupt.resolved') || String(e.type).endsWith('approval.received'));
+    expect(
+      resolved,
+      req('openwop.it.interrupt-approval.a-refine-resolve-round-trips-action-and-the-structured-feedback-it-requires',
+        'RFCS/0183-interrupt-resolved-action-fidelity.md §A.1',
+        'the resolution MUST be recorded as an event',
+      ),
+    ).toBeDefined();
+
+    const payload = (resolved?.payload ?? {}) as Record<string, unknown>;
+    expect(
+      payload.action,
+      req('openwop.it.interrupt-approval.a-refine-resolve-round-trips-action-and-the-structured-feedback-it-requires',
+        'RFCS/0183-interrupt-resolved-action-fidelity.md §A.1',
+        'the resolved payload MUST carry `action: "refine"` — the seat RFC 0183 adds',
+      ),
+    ).toBe('refine');
+    expect(
+      payload.refineFeedback,
+      req('openwop.it.interrupt-approval.a-refine-resolve-round-trips-action-and-the-structured-feedback-it-requires',
+        'RFCS/0183-interrupt-resolved-action-fidelity.md §A.2',
+        'a refine resolution MUST carry the refineFeedback it was given — an action whose meaning is incomplete without it',
+      ),
+    ).toBeTruthy();
+  });
+
+  it('refuses a refine resolution that supplies no refineFeedback', async () => {
+    const create = await driver.post('/v1/runs', { workflowId: REFINE_WORKFLOW_ID });
+    expect(create.status).toBe(201);
+    const runId = (create.json as { runId: string }).runId;
+    await pollUntilStatus(runId, 'waiting-approval', { timeoutMs: 10_000 });
+
+    const resolve = await driver.post(
+      `/v1/runs/${encodeURIComponent(runId)}/interrupts/${encodeURIComponent(NODE_ID)}`,
+      { resumeValue: { action: 'refine' } },
+    );
+    expect(
+      [400, 422].includes(resolve.status),
+      req('openwop.it.interrupt-approval.refuses-a-refine-resolution-that-supplies-no-refinefeedback',
+        'RFCS/0183-interrupt-resolved-action-fidelity.md §A.2',
+        'refine without refineFeedback MUST be refused — the feedback is what the action means',
+      ),
+    ).toBe(true);
+  });
+});

package/src/scenarios/replay-divergence-at-refusal.test.ts

@@ -227,7 +227,7 @@ describe.skipIf(HTTP_SKIP)('replay-divergence-at-refusal: behavioral (RFC 0041
   it('Phase 4 host MUST emit replay.divergedAtRefusal + fail with replay_diverged_at_refusal when original=valid + replay=refusal', async (ctx) => {
     if (!(await gateOnPhase4(ctx))) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!(await gateOnPhase4(ctx))` returned early');
 
-    const NODE_ID = 'structured-call';
+    const NODE_ID = 'divergence-structured-call';
     // Original program: valid envelope. Replay program (set after the
     // original completes): refusal. Programming twice is the spec-canonical
     // pattern — see spec/v1/host-sample-test-seams.md §5.
@@ -320,7 +320,7 @@ describe.skipIf(HTTP_SKIP)('replay-divergence-at-refusal: behavioral (RFC 0041
   it('Phase 4 host MUST emit replay.divergedAtRefusal + fail with replay_diverged_at_refusal when original=refusal + replay=valid (symmetric case)', async (ctx) => {
     if (!(await gateOnPhase4(ctx))) return softSkip('inapplicable', 'capability or profile not advertised by this host — gate `!(await gateOnPhase4(ctx))` returned early');
 
-    const NODE_ID = 'structured-call';
+    const NODE_ID = 'divergence-structured-call';
     // Symmetric: original=refusal, replay=valid.
     const programStatus = await programMock(NODE_ID, [
       { content: 'safety-refused-for-conformance', stopReason: 'safety' as const, refusalText: 'safety-refused-for-conformance' },

package/src/scenarios/v2-bound-id-path-projection.test.ts

@@ -0,0 +1,121 @@
+/**
+ * `spec/v2/core/identity.md` §5 + RFC 0184 §A.1 — a tenant-bound id travels as
+ * ONE path segment under the `~`-escape projection (suite 2.2.0, target major
+ * 2; unaided; creates one run).
+ *
+ * A tenant-bound id is two segments joined by `/`. A path parameter is one. The
+ * corpus used to say `%2F` carries the separator across, and
+ * `v2-created-run-readable.test.ts` records what that cost: a tier-1 host's
+ * hosting layer decoded `%2F` back to `/` before forwarding, the backend
+ * correctly had no route for a literal slash, and EVERY bound id was
+ * unreachable through the host's own front door. One hop behind, the direct
+ * service URL answered 200.
+ *
+ * The projection escapes with `~`, which RFC 3986 §2.3 lists as UNRESERVED — an
+ * intermediary has no license to rewrite it, so `~2F` reaches the origin
+ * byte-for-byte. That is the whole argument: `%2F` needs a front door to tell a
+ * percent-encoded RESERVED octet (§6.2.2.2 says MUST NOT decode) from an
+ * unreserved one (SHOULD decode), and deployed front doors do not.
+ *
+ * **What this file does NOT assert.** The percent-encoded form still MUST work
+ * — `identity.md` §5 keeps it, removing it would be breaking, and
+ * `v2-created-run-readable` already witnesses it. Duplicating it here would red
+ * two rows for one defect and tell a bundle reader nothing new.
+ *
+ * The codec's own edge cases (marker escaping, UTF-8 vs UTF-16, malformed
+ * decode) are a unit concern and live in `src/lib/bound-id.test.ts`, which is
+ * sabotage-checked. This file asserts only what needs a HOST to answer.
+ *
+ * @see spec/v2/core/identity.md §5
+ * @see RFCS/0184-bound-id-path-projection.md §A.1
+ */
+
+import { describe, it, expect } from 'vitest';
+import { driver, type OpenWOPResponse } from '../lib/driver.js';
+import { v2Discovery } from '../lib/v2.js';
+import { readErrorCode } from '../lib/error-envelope.js';
+import { softSkip } from '../lib/soft-skip.js';
+import { req } from '../lib/requirement-ids.js';
+import { projectBoundId } from '../lib/bound-id.js';
+import { BOUND_ID as BOUND } from '../lib/bound-id.js';
+
+const ID = 'openwop.requirement.0184.bound-id-path-projection';
+const DOC = 'spec/v2/core/identity.md §5';
+const NOOP_WORKFLOW_ID = 'conformance-noop';
+
+async function http(fn: () => Promise<OpenWOPResponse>): Promise<OpenWOPResponse | null> {
+  try { return await fn(); } catch { return null; }
+}
+
+describe('v2 bound-id path projection (identity.md §5)', () => {
+  it('a tenant-bound id is readable at its ~-escaped path segment, links carry that form, and a malformed escape is refused', async () => {
+    try { if (!(await v2Discovery())) return softSkip('blocked', 'v2 discovery unreachable'); } catch { return softSkip('blocked', 'v2 discovery unreachable'); }
+
+    const created = await http(() => driver.post('/runs', { workflowId: NOOP_WORKFLOW_ID }));
+    if (created === null) return softSkip('blocked', 'POST /runs unreachable (fetch failed)');
+    if (created.status === 429) return softSkip('blocked', 'POST /runs answered 429 — the run budget, not the wire');
+    const body = (created.json ?? {}) as { runId?: unknown; eventsUrl?: unknown };
+    if (created.status !== 201 || typeof body.runId !== 'string') {
+      return softSkip('blocked', `POST /runs {workflowId: ${NOOP_WORKFLOW_ID}} answered ${created.status} ${readErrorCode(created.json) ?? ''} — the smallest valid create was refused (fixture not seeded?)`.trim());
+    }
+    const runId = body.runId;
+    if (!BOUND.test(runId)) return softSkip('blocked', `the created runId is not tenant-bound (${runId}) — nothing to project`);
+
+    const projected = projectBoundId(runId);
+
+    // The projection MUST leave nothing for an intermediary to decode. If this
+    // fails the encoder is wrong, not the host — assert it before blaming a 404.
+    expect(
+      encodeURIComponent(projected),
+      req(ID, DOC, `the projection MUST contain only RFC 3986 unreserved characters, so no intermediary can rewrite it (${projected})`),
+    ).toBe(projected);
+
+    // ACCEPT SIDE (the new MUST). A 404 here means the host has not implemented
+    // the projection: it is not a routing accident, because the segment that
+    // reached it is byte-identical to the one sent.
+    const read = await http(() => driver.get(`/runs/${projected}`));
+    expect(
+      read?.status ?? null,
+      req(ID, DOC, `GET /runs/{projected} MUST answer 200 — the host MUST accept a tenant-bound id as one ~-escaped segment. Got ${read?.status ?? 'no response'} ${readErrorCode(read?.json) ?? ''} for ${projected} (runId ${runId})`.trim()),
+    ).toBe(200);
+    expect(
+      (read?.json as { runId?: unknown } | undefined)?.runId,
+      req(ID, DOC, 'the run read at the projected segment MUST be the run that was created — a host that decodes the escape to a DIFFERENT id has a non-injective decoder'),
+    ).toBe(runId);
+
+    // EMIT SIDE. A host MUST hand back the form it wants clients to use; a link
+    // still spelling %2F re-creates the front-door defect for every follower.
+    if (typeof body.eventsUrl === 'string' && body.eventsUrl.includes(runId.split('/')[1]!)) {
+      expect(
+        body.eventsUrl.includes('%2F') || body.eventsUrl.includes('%2f'),
+        req(ID, DOC, `a link carrying a tenant-bound id MUST use the ~-escaped projection, not %2F — a front door may decode %2F and strand every client that follows this link (eventsUrl ${body.eventsUrl})`),
+      ).toBe(false);
+      expect(
+        body.eventsUrl.includes(projected),
+        req(ID, DOC, `eventsUrl MUST carry the runId in its projected form ${projected} (got ${body.eventsUrl})`),
+      ).toBe(true);
+    }
+
+    // APPLY-ONCE. The codec is deliberately NOT idempotent — escaping the
+    // marker is what makes it injective — so a host that projects twice breaks
+    // its OWN links. Both reporting hosts found they already compose payload
+    // projections on a single read path, so this is a live shape, not a
+    // thought experiment. Asserting 404 (not merely "not 200") keeps the leg
+    // from passing on a 500.
+    const twice = projectBoundId(projected);
+    const doubled = await http(() => driver.get(`/runs/${twice}`));
+    expect(
+      doubled?.status ?? null,
+      req(ID, DOC, `a DOUBLE-projected segment MUST NOT resolve — the codec is not idempotent, so projecting twice yields a different id and a host that does it strands its own links. Expected 404 for ${twice}, got ${doubled?.status ?? 'no response'}`),
+    ).toBe(404);
+
+    // DECODER RULE. A `~` not introducing two hex digits is malformed input, so
+    // 400 — not 404, which would say "no such run" about a request that never
+    // named one.
+    const malformed = await http(() => driver.get(`/runs/${runId.split('/')[0]}~2`));
+    expect(
+      malformed?.status ?? null,
+      req(ID, DOC, `a path segment whose '~' is not followed by two hex digits MUST be refused 400 validation_error — got ${malformed?.status ?? 'no response'} ${readErrorCode(malformed?.json) ?? ''}`.trim()),
+    ).toBe(400);
+  });
+});

package/src/scenarios/v2-created-run-readable.test.ts

@@ -38,11 +38,11 @@ import { v2Discovery } from '../lib/v2.js';
 import { readErrorCode } from '../lib/error-envelope.js';
 import { softSkip } from '../lib/soft-skip.js';
 import { req } from '../lib/requirement-ids.js';
+import { BOUND_ID as RUN_ID } from '../lib/bound-id.js';
 
 const ID = 'openwop.requirement.0172.created-run-readable';
 const DOC = 'spec/v2/core/runs.md §Create';
 const NOOP_WORKFLOW_ID = 'conformance-noop';
-const RUN_ID = /^[A-Za-z0-9._~-]{1,128}\/[A-Za-z0-9._~-]{16,128}$/;
 
 async function http(fn: () => Promise<OpenWOPResponse>): Promise<OpenWOPResponse | null> {
   try { return await fn(); } catch { return null; }

package/src/scenarios/v2-id-grammar.test.ts

@@ -27,10 +27,10 @@ import { v2Discovery, v2Validator } from '../lib/v2.js';
 import { readErrorCode } from '../lib/error-envelope.js';
 import { softSkip } from '../lib/soft-skip.js';
 import { req } from '../lib/requirement-ids.js';
+import { BOUND_ID as RUN_ID } from '../lib/bound-id.js';
 
 const DOC = 'spec/v2/core/identity.md §5';
 const NOOP_WORKFLOW_ID = 'conformance-noop';
-const RUN_ID = /^[A-Za-z0-9._~-]{1,128}\/[A-Za-z0-9._~-]{16,128}$/;
 const FOREIGN_RUN_ID = 'openwop-conformance-foreign-tenant/foreignopaque0123456789abcdef';
 
 async function discovery(): Promise<Record<string, unknown> | null> {

package/src/scenarios/v2-stream-sse-projection.test.ts

@@ -29,11 +29,11 @@ import { streamEvents } from '../lib/era2-seed.js';
 import { readErrorCode } from '../lib/error-envelope.js';
 import { softSkip } from '../lib/soft-skip.js';
 import { req } from '../lib/requirement-ids.js';
+import { BOUND_ID as RUN_ID } from '../lib/bound-id.js';
 
 const ID = 'openwop.requirement.0171.stream-sse-projection';
 const DOC = 'spec/v2/core/events.md §SSE frames';
 const NOOP_WORKFLOW_ID = 'conformance-noop';
-const RUN_ID = /^[A-Za-z0-9._~-]{1,128}\/[A-Za-z0-9._~-]{16,128}$/;
 
 async function http(fn: () => Promise<OpenWOPResponse>): Promise<OpenWOPResponse | null> {
   try { return await fn(); } catch { return null; }