@openwop/openwop-conformance 2.38.0 → 2.39.1

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [2.39.1] — 2026-09-25 — the RFC 0214 delivery legs survive a tunnel, and each one leaves its own row
+
+- **`v2-a2a-push-delivery` — every requirement now records a row, and the budgets fit a public front.** The 2.39.0 public push-on cut of the v2 reference host lost three legs (§A after-Delete, §B 3xx redirect, §D replay fork) to vitest's per-test timeout, not to an assertion — deliveries were arriving through the front (`no-openwop-signature` passed). Budgets now scale when `OPENWOP_WEBHOOK_RECEIVER_URL` is wired (arrival 60 s, settle 45 s, leg 240 s, fork leg 300 s; loopback unchanged), the #1537 precedent. Separately, `0214.a2a-push-delivery-authenticated` vanished from that bundle because its `it()` also cited `0214.a2a-push-no-openwop-signature` and the ledger keeps the LAST id an `it()` cites: the delivery is now made once and read by two legs, one id each, and when the delivery cannot be made the signature leg records `blocked` with the reason instead of disappearing.
+- **`v2-lane-issuer-advertised` no longer fails a host whose anonymous lane omits `revocation`, as the schema and `identity.md` §2.2 allow.** openwop#1540 (2.38.0) made `revocation` optional on the `anonymous` lane, whose §2.2 row reads "—", but this scenario's `.members` leg still asserted `revocation` on every lane. A host that followed the schema and the prose therefore failed the published suite; openwop-app-ce measured it bumping openwop-app's pin. A "—" lane may now omit `revocation`; if it advertises one, it must still be a known member, so no new failure mode is added. `scripts/check-lane-revocation-rules.mjs` gains a fifth assertion, that the `.members` leg exempts the "—" lanes, which fails against the 2.38.0/2.39.0 scenario.
+
+## [2.39.0] — 2026-09-24 — an A2A push is measured at a receiver the suite owns
+
+- **RFC 0214 — the push legs land, and a host that advertises `a2a.pushNotifications` is now measured, not just the one that refuses.** `v2-a2a-operation-map` gains three legs gated on `pushNotifications: true`: `0214.a2a-push-register-ssrf` (a non-https, private, loopback or link-local destination is not registered), `0214.a2a-push-config-isolation` (a config read under another tenant's task, another of the caller's tasks, or an unknown id is answered byte-identically; a foreign delete deletes nothing; delete is idempotent) and `0214.a2a-push-secrets-not-returned` (the registered token and credentials are absent from Create/Get/List, `GetTask`, the run snapshot and the event log). New scenario `v2-a2a-push-delivery` measures delivery at a SUITE-OWNED scoped receiver behind the operator's public front (the RFC 0158 receiver): `0214.a2a-push-delivery-authenticated` (§A/§C — at least one POST, `Authorization: {scheme} {credentials}`, `application/a2a+json`, a `StreamResponse` naming the task), `0214.a2a-push-no-openwop-signature`, `0214.a2a-push-no-redirect` (§B — a 307 target receives nothing), `0214.a2a-push-discard-on-delete` (§A, with a live-config positive control) and `0214.a2a-push-fork-no-push` (§D). Every leg suspends its task at INPUT_REQUIRED BEFORE registering, so none can pass on a push nobody owed; without a public https front the legs record `blocked` (a conforming host refuses a loopback destination), never a pass and never a relaxed guard. Stated limit: the delivery-time DNS re-resolve arm is host-unit-tested; the suite does not control the host's resolver.
+- **Suite `2.39.0`**: 559 scenario files. `@openwop/spec-artifacts` moves in lockstep at the same exact pin.
+
 ## [2.38.0] — 2026-09-24 — two RFCs add legs, and six rows that could not pass on a conforming host now can
 
 - **Two rows the 2026-09-24 public v2-reference cut could not explain now say why, and one leg gets the time a tunnel needs.** `v2-mrtr-rounds-ceiling`'s `.refused` leg recorded only `expected 400 to be 422` on that cut, but passes on every loopback run of the host. Its failure message now carries the host's error code, how many `tools/call` the suite's MCP fake served, and the response body. Those facts separate "the host refused a round the fake answered" from "a round the tunnel failed to carry". `v2-oauth-client-pkce-state-iss`'s state leg gets a 120 s per-test timeout instead of 30 s: it makes eight sequential round trips through the AS double's tunnel, and on that cut it alone timed out while its shorter sibling legs passed. No assertion, requirement or window changes.

package/README.md

@@ -11,7 +11,7 @@
 # --legacy-peer-deps is REQUIRED, not optional: the exact peer pin is what npm's
 # default resolver refuses. npm 10.9 fails outright with
 # "Cannot read properties of null (reading 'edgesOut')" — use npm >= 11.
-npm install --legacy-peer-deps @openwop/openwop-conformance@2.38.0 @openwop/spec-artifacts@2.38.0
+npm install --legacy-peer-deps @openwop/openwop-conformance@2.39.1 @openwop/spec-artifacts@2.39.1
 # or run without install:
 npx @openwop/openwop-conformance --base-url https://api.example.com --api-key hk_test_...
 ```
@@ -135,7 +135,7 @@ Exit code is non-zero on any failed assertion. `--certify` distinguishes: `0`
 
 ## What's Covered
 
-The current suite has 558 scenario files under `src/scenarios/`.
+The current suite has 559 scenario files under `src/scenarios/`.
 - 2026-09-23 (suite 2.37.0 cycle, RFC 0213): NEW `v2-sse-last-event-id-cursor.test.ts` (a `Last-Event-ID` past the log is an exclusive cursor; a malformed id, when refused, is `400 validation_error`; the cursor never changes the answer for an unknown or foreign-tenant run — public test of `event-cursor-after-authorization`), `v2-idempotency-in-flight.test.ts` (five concurrent same-key creates yield one run; each loser is a marked replay or `409 idempotency_in_flight` with no retry timing in `details`; `partial-witness` when no loser was refused in flight) and `v2-interrupt-resolve-terminal.test.ts` (a run-scoped resolve after cancel or completion is `409 interrupt_already_resolved`, never `interrupt_cancelled`). All three sit off the core-standard floor until measured on the three bundle hosts.
 - 2026-09-03 (suite `1.157.0 -> 1.158.0`, gap G17): NEW `idempotency-concurrent-claim.test.ts` — drives the new `host-sample-test-seams.md` §25 concurrent duplicate-delivery seam for the RFC 0150 §B / `idempotency.md` §"Concurrent duplicates (Layer 2)" atomic-claim MUST, which is unconditional and had no witness of any kind. Asserts every executor mints the SAME `logicalInvocationId` **before** asserting `delivered === 1` — without the identity check a host passes by minting different ids and never colliding, one effect because nothing raced. Not profile-gated and so not opt-out-able (the obligation is unconditional); an unmounted seam records `blocked`, which is not certifiable. Graduates `layer2-invocation-claim-atomic` reference-impl -> protocol.
 - 2026-08-19 (suite `1.137.0 → 1.138.0`): NEW `durability-poison-exhaustion.test.ts` — RFC 0158 §C.8, the FIRST row of that RFC's conformance table to land. Asserts what `failure-path.test.ts` cannot: not just that deterministically failing work reaches terminal, but that attempts STOP — counted on the log, re-counted after a scaled quiet window, asserted unchanged. A host still redelivering records more. Seam-gated on the existing event-log seam (`blocked` = unobservable, not unmet) and outside every profile floor.
@@ -481,7 +481,7 @@ Server-required (added in 1.7.0):
 | ------------- | ----------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | **Redaction** | [`capabilities.md`](../spec/v1/capabilities.md) §"Secrets" + NFR-7 + §"aiProviders" | Vendor-neutral assertions that the server doesn't leak secret material. Three scenario groups: (a) discovery shape contract — `secrets` + `aiProviders` advertisements are well-formed regardless of `secrets.supported`; when `supported === true`, scopes MUST be non-empty + `resolution === 'host-managed'`; `byok ⊆ supported`. (b) bearer-token redaction — invalid Bearer canary in `Authorization` header is not echoed in the 401 response body. (c) credentialRef echo control — gated on `secrets.supported === true`; canary planted in `configurable.ai.credentialRef` MUST NOT appear in any RunEvent payload (poll-based capture; transport-agnostic). Uses runtime-built canary fixtures (`lib/canaries.ts`) that defeat static secret scanners. 6 scenarios. |
 
-Current source tree: 558 scenario files. Use [`coverage.md`](./coverage.md) for current grade/gap tracking.
+Current source tree: 559 scenario files. Use [`coverage.md`](./coverage.md) for current grade/gap tracking.
 
 ## Remaining Gaps
 

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.38.0",
-  "stampSha256": "ad88f149547eb38bb873fa63e1d18e06e8810e6427d61a72fac94c32c5e28603"
+  "version": "2.39.1",
+  "stampSha256": "d6c870ac95f4efeb1c666248d53ec1c29b55604cf16f1009da4471d1414b8ff6"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.38.0",
+  "version": "2.39.1",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.38.0"
+    "@openwop/spec-artifacts": "2.39.1"
   }
 }

package/requirements.json

@@ -2,9 +2,9 @@
   "$comment": "GENERATED by conformance/scripts/generate-requirement-registry.mjs — do not edit. One record per it()/test() in src/scenarios. Ids: openwop.it.<file-stem>.<title-slug>[~n] (src/lib/requirement-ids.ts). A record with id null has an interpolated title; its run-time row is keyed by the rendered title and maps here by file+line only. Renamed ids need a row in requirement-aliases.json.",
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
-    "files": 632,
-    "tests": 2415,
-    "withStableId": 2415,
+    "files": 633,
+    "tests": 2423,
+    "withStableId": 2423,
     "interpolatedTitles": 0,
     "explicitIds": 2304
   },
@@ -26602,7 +26602,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.a-message-carrying-taskid-without-contextid-is-answered-with-the-task-s-contexti",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 135,
+      "line": 136,
       "title": "a message carrying taskId without contextId is answered with the task's contextId",
       "explicitId": null,
       "citations": [
@@ -26633,7 +26633,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.a-message-whose-contextid-is-not-its-task-s-is-refused-invalid-parameters-and-ch",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 149,
+      "line": 150,
       "title": "a message whose contextId is not its task's is refused invalid-parameters and changes nothing",
       "explicitId": null,
       "citations": [
@@ -26660,7 +26660,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.a-message-to-a-retained-terminal-task-is-refused-unsupportedoperationerror-and-a",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 164,
+      "line": 165,
       "title": "a message to a retained terminal task is refused UnsupportedOperationError, and appends no event",
       "explicitId": null,
       "citations": [
@@ -26687,7 +26687,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.an-unknown-task-and-another-tenant-s-task-are-answered-by-the-same-tasknotfounde",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 179,
+      "line": 180,
       "title": "an unknown task and another tenant's task are answered by the same TaskNotFoundError",
       "explicitId": null,
       "citations": [
@@ -26720,7 +26720,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.task-status-state-is-the-map-s-projection-of-the-run-status-at-every-observed-st",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 201,
+      "line": 202,
       "title": "Task.status.state is the map's projection of the run status at every observed state",
       "explicitId": null,
       "citations": [
@@ -26743,7 +26743,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.the-json-rpc-error-codes-the-suite-can-cause-are-the-a2a-1-0-1-codes",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 226,
+      "line": 227,
       "title": "the JSON-RPC error codes the suite can cause are the A2A 1.0.1 codes",
       "explicitId": null,
       "citations": [
@@ -26766,7 +26766,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.a-row-whose-requires-facet-is-not-advertised-is-refused-with-the-row-s-error",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 240,
+      "line": 241,
       "title": "a row whose requires facet is not advertised is refused with the row's error",
       "explicitId": null,
       "citations": [
@@ -26784,7 +26784,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.a-host-not-advertising-a2a-pushnotifications-refuses-all-four-push-config-operat",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 253,
+      "line": 254,
       "title": "a host not advertising a2a.pushNotifications refuses all four push-config operations with PushNotificationNotSupportedError",
       "explicitId": null,
       "citations": [
@@ -26805,10 +26805,106 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-a2a-operation-map.rfc-0214-createtaskpushnotificationconfig-refuses-a-non-https-or-private-destina",
+      "file": "v2-a2a-operation-map.test.ts",
+      "line": 285,
+      "title": "RFC 0214 — CreateTaskPushNotificationConfig refuses a non-https or private destination",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/interop.md §\"The operation mappings\" (RFC 0208)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-a2a-operation-map.rfc-0214-e-a-push-config-of-another-tenant-s-task-of-another-task-or-unknown-is",
+      "file": "v2-a2a-operation-map.test.ts",
+      "line": 303,
+      "title": "RFC 0214 §E — a push config of another tenant's task, of another task, or unknown, is answered identically",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/interop.md §\"The operation mappings\" (RFC 0208)",
+          "requirement": "SendMessage MUST start two tasks with tenant-bound ids"
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": "a delete naming another tenant's task MUST NOT delete the caller's config",
+          "interpolated": true
+        },
+        {
+          "section": "A2A v1.0.1 §3.1.10 (\"MUST be idempotent\")",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-a2a-operation-map.rfc-0214-a-a-push-config-s-token-and-credentials-are-never-returned-and-never-re",
+      "file": "v2-a2a-operation-map.test.ts",
+      "line": 347,
+      "title": "RFC 0214 §A — a push config's token and credentials are never returned, and never reach task, events or state",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/interop.md §\"The operation mappings\" (RFC 0208)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-a2a-operation-map.listtasks-returns-only-what-listruns-returns-to-the-same-subject-tenant-and-cont",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 280,
+      "line": 381,
       "title": "ListTasks returns only what listRuns returns to the same Subject; tenant and contextId never select",
       "explicitId": null,
       "citations": [
@@ -26845,7 +26941,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.an-a2a-error-s-data-is-an-array-carrying-one-errorinfo-with-the-map-row-s-reason",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 313,
+      "line": 414,
       "title": "an A2A error's data is an array carrying one ErrorInfo with the map row's reason and the A2A domain",
       "explicitId": null,
       "citations": [
@@ -26879,7 +26975,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.no-response-on-the-card-s-json-rpc-interface-url-is-the-openwop-error-envelope",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 334,
+      "line": 435,
       "title": "no response on the card's JSON-RPC interface URL is the OpenWOP error envelope",
       "explicitId": null,
       "citations": [
@@ -26897,7 +26993,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.versionnotsupportederror-carries-errorinfo-version-not-supported-and-supportedve",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 354,
+      "line": 455,
       "title": "VersionNotSupportedError carries ErrorInfo VERSION_NOT_SUPPORTED, and supportedVersions is a comma-joined subset of the card",
       "explicitId": null,
       "citations": [
@@ -26921,7 +27017,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.an-http-json-interface-answers-an-a2a-error-with-google-rpc-status-carrying-the",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 372,
+      "line": 473,
       "title": "an HTTP+JSON interface answers an A2A error with google.rpc.Status carrying the ErrorInfo",
       "explicitId": null,
       "citations": [
@@ -26940,7 +27036,7 @@
     {
       "id": "openwop.it.v2-a2a-operation-map.a-run-suspended-on-a-credential-interrupt-projects-to-task-state-auth-required-n",
       "file": "v2-a2a-operation-map.test.ts",
-      "line": 387,
+      "line": 488,
       "title": "a run suspended on a credential interrupt projects to TASK_STATE_AUTH_REQUIRED, naming the provider and carrying connectUrl",
       "explicitId": null,
       "citations": [
@@ -26973,6 +27069,128 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-a2a-push-delivery.a-c-a-transition-after-registration-is-posted-to-the-registered-destination-with",
+      "file": "v2-a2a-push-delivery.test.ts",
+      "line": 189,
+      "title": "§A/§C — a transition after registration is POSTed to the registered destination with the registered Authorization",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "A2A v1.0.1 §4.3.3",
+          "requirement": "a push is an HTTP POST"
+        },
+        {
+          "section": null,
+          "requirement": "the push MUST carry the registered credential as Authorization: {scheme} {credentials}",
+          "interpolated": true
+        },
+        {
+          "section": "A2A v1.0.1 §4.3.3",
+          "requirement": "the push body is application/a2a+json"
+        },
+        {
+          "section": "A2A v1.0.1 §4.3.3 (StreamResponse)",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-a2a-push-delivery.c-an-a2a-push-carries-no-openwop-signature",
+      "file": "v2-a2a-push-delivery.test.ts",
+      "line": 203,
+      "title": "§C — an A2A push carries no OpenWOP signature",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/interop.md §\"A2A push delivery\" (RFC 0214)",
+          "requirement": "positive control: at least one push arrived to read headers from"
+        },
+        {
+          "section": null,
+          "requirement": "an A2A push MUST NOT carry an OpenWOP-Signature — A2A defines no secret exchange to verify it",
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-a2a-push-delivery.b-a-3xx-from-the-destination-is-a-failed-delivery-the-redirect-target-receives-n",
+      "file": "v2-a2a-push-delivery.test.ts",
+      "line": 215,
+      "title": "§B — a 3xx from the destination is a failed delivery: the redirect target receives nothing, credential or not",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/interop.md §\"A2A push delivery\" (RFC 0214)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/interop.md §\"A2A push delivery\" (RFC 0214)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": "the redirect target MUST receive nothing: a 3xx is a delivery failure and the credential MUST NOT be sent after a redirect",
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-a2a-push-delivery.a-after-delete-no-further-push-reaches-that-destination-while-a-live-config-on-t",
+      "file": "v2-a2a-push-delivery.test.ts",
+      "line": 237,
+      "title": "§A — after Delete no further push reaches that destination, while a live config on the same task still receives",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/interop.md §\"A2A push delivery\" (RFC 0214)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/interop.md §\"A2A push delivery\" (RFC 0214)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "spec/v2/core/interop.md §\"A2A push delivery\" (RFC 0214)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": "a deleted config MUST receive nothing further — its destination credential is discarded with it",
+          "interpolated": true
+        }
+      ]
+    },
+    {
+      "id": "openwop.it.v2-a2a-push-delivery.d-a-replay-fork-of-a-pushed-run-delivers-nothing-to-the-source-run-s-destination",
+      "file": "v2-a2a-push-delivery.test.ts",
+      "line": 263,
+      "title": "§D — a replay fork of a pushed run delivers nothing to the source run's destination",
+      "explicitId": null,
+      "citations": [
+        {
+          "section": "spec/v2/core/interop.md §\"A2A push delivery\" (RFC 0214)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": null,
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-a2ui-v09-surface.a-version-2-envelope-carrying-a-version-1-body-is-refused-the-positive-is-admitt",
       "file": "v2-a2ui-v09-surface.test.ts",
@@ -29438,7 +29656,7 @@
     {
       "id": "openwop.it.v2-lane-issuer-advertised.a-windowed-revocation-rule-advertises-revocationwindowseconds",
       "file": "v2-lane-issuer-advertised.test.ts",
-      "line": 85,
+      "line": 93,
       "title": "a windowed revocation rule advertises revocationWindowSeconds",
       "explicitId": "openwop.requirement.0170.lane-issuer-advertised.window",
       "citations": [
@@ -29452,7 +29670,7 @@
     {
       "id": "openwop.it.v2-lane-issuer-advertised.a-lane-advertises-only-a-revocation-rule-its-identity-md-2-2-row-lists",
       "file": "v2-lane-issuer-advertised.test.ts",
-      "line": 96,
+      "line": 104,
       "title": "a lane advertises only a revocation rule its identity.md §2.2 row lists",
       "explicitId": "openwop.requirement.0170.lane-issuer-advertised.lane-rule",
       "citations": [

package/scenario-majors.json

@@ -1,9 +1,9 @@
 {
   "$comment": "GENERATED by conformance/scripts/generate-scenario-majors.mjs (RFC 0168 §D.3). Do not edit; add a file to BOTH_MAJORS in the generator to target both majors.",
   "counts": {
-    "files": 558,
+    "files": 559,
     "v1": 449,
-    "v2": 118
+    "v2": 119
   },
   "majors": {
     "a2a-1-0-agent-card.test.ts": [
@@ -1260,6 +1260,9 @@
     "v2-a2a-operation-map.test.ts": [
       2
     ],
+    "v2-a2a-push-delivery.test.ts": [
+      2
+    ],
     "v2-a2ui-v09-surface.test.ts": [
       2
     ],

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.38.0",
-  "corpusTag": "v2.38.0",
+  "version": "2.39.1",
+  "corpusTag": "v2.39.1",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "6366b5514be71098e9ea41fc81ff52bc39db1a547b353c0b344cc2a2bf5370aa",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "4d7a6a93b84ad4d8602021fb1417c1436b168002d9e9811079cdd8f42af1f68e",
-    "api/v2/asyncapi.yaml": "c8bc549b600c858a97ec7f9638ab89bdae08d4e5adf9dd78f8ce412921b2a7e0",
-    "api/v2/openapi.yaml": "e36c19ccb3d107b3afb8b45c5107a5d9ac56e6e6c23202d83d3bed14518825b8",
+    "api/seams-v2.yaml": "edff974e28c055f4d3f605078a32315475053cf4aeb4565f461ac6fe65462bdb",
+    "api/v2/asyncapi.yaml": "8dc0060855a0edf49a7f235016657f86ae3ba2d04bed99d0d9579d4f01f65c11",
+    "api/v2/openapi.yaml": "5c673efed4d9c350882b85d88f6c8e934793a2238b2f316ba66278ba7a75d121",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -204,7 +204,7 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "2401fcb1c18cdd688c018b3d716ae6bca85c5e356220ee2b793bd9d81872412d",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "30feee3e0480c4102801c55e49830974e021be2284f01171e1327c8ac3e56e87",
+    "spec/v1/core-standard-manifest.json": "ffb07755718c26e734e30cd674469d232bdd9fca4e8743886090ab4a81df90a5",
     "spec/v1/deprecations.json": "2d03f4729810280147ea08c630ea65434f2dc5370567d0aac41c3595f8337d40",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
@@ -292,9 +292,9 @@
     "spec/v2/path-manifest.json": "ae9b56d03a701061fd48ad0b73cb0373493f6a4547da92763b422295b5e19535",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "0636f19fceae625390003a347e70ef4797d84766b5c24ce8a02cea52aadebca4",
-    "spec/v2/release.json": "602da823b9231be131b63eb8a2570958a7a90ab0d64a472e5927b47ec6ed2a35",
+    "spec/v2/release.json": "c1c2d051b65444c959464ce385bf9851f3438a72a17a03405fc492421d454114",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "3f375c183236e2b5cf50029a0d998101c4a3c3766db50f940f50f7039a81ef3f"
+    "spec/v2/surface-baseline.json": "648c5e22fea9eaae6c900d7de1656209af0b5a8f5fa76b64885c0e6ab7cc3089"
   },
-  "corpusCommit": "d9ac404fd5724f9baf2adc568ee3b7f7e03a0347"
+  "corpusCommit": "64073df2c4d11a5b8a165ead4281d2557495e25b"
 }

package/src/scenarios/v2-a2a-operation-map.test.ts

@@ -39,9 +39,10 @@ import { softSkip } from '../lib/soft-skip.js';
 import { SCHEMAS_DIR } from '../lib/paths.js';
 import { req } from '../lib/requirement-ids.js';
 import { SEAMS_PREFIX } from '../lib/seams.js';
+import { unservedDestination } from '../lib/scoped-receiver.js';
 import { errorInfos, normaliseErrorData, isOpenwopEnvelope, A2A_ERROR_DOMAIN } from '../lib/a2a-error-info.js';
 
-export const HOST_CALLBACK_NOT_REQUIRED = 'the suite is the A2A client: every leg POSTs JSON-RPC to the interface the host\'s own card lists; nothing harness-hosted is handed to the host';
+export const HOST_CALLBACK_NOT_REQUIRED = 'the suite is the A2A client: every leg POSTs JSON-RPC to the interface the host\'s own card lists; the RFC 0214 push-config legs register an UNSERVED destination (lib/scoped-receiver unservedDestination) whose deliveries are neither required nor read — delivery is v2-a2a-push-delivery\'s claim';
 
 const DOC = 'spec/v2/core/interop.md §"The operation mappings" (RFC 0208)';
 const PROFILE = 'a2a-1.0';
@@ -277,6 +278,106 @@ describe('RFC 0208 — v2-a2a-operation-map (host as A2A 1.0 server, gated on a2
     await rpc(t.url, 'CancelTask', { id });
   });
 
+  // ── RFC 0214 — push-config legs on a host that ADVERTISES a2a.pushNotifications ──
+  // Delivery itself (credential at the destination, no redirect, discard, fork) needs
+  // a public receiver and lives in v2-a2a-push-delivery.test.ts; these three need none.
+
+  it('RFC 0214 — CreateTaskPushNotificationConfig refuses a non-https or private destination', async () => {
+    const rid = 'openwop.requirement.0214.a2a-push-register-ssrf';
+    const doc = 'interop-map.json a2a.operations CreateTaskPushNotificationConfig ("the url MUST pass the webhooks.md egress guard"); webhooks.md §Egress; RFC 0214 §B';
+    const t = await target(true);
+    if (!t.ok) return skip(t, rid);
+    const a2a = (await familyAdvertised('a2a'))!;
+    if (a2a['pushNotifications'] !== true) return softSkip('inapplicable', 'a2a.pushNotifications is not advertised — the refusal row (a2a-push-unadvertised-refused) applies instead');
+    const first = await startApprovalTask(t.url);
+    const id = first.task?.id;
+    expect(typeof id, req(rid, DOC, `SendMessage MUST start a task: ${JSON.stringify(first.rpc.error)}`)).toBe('string');
+    for (const bad of ['http://push.example.com/openwop-conformance', 'https://10.0.0.1/openwop-conformance', 'https://127.0.0.1/openwop-conformance', 'https://169.254.169.254/latest/meta-data']) {
+      const r = await rpc(t.url, 'CreateTaskPushNotificationConfig', { taskId: id, url: bad });
+      expect(r.result, req(rid, doc, `a push destination the egress guard refuses (${bad}) MUST NOT be registered (got result ${JSON.stringify(r.result)})`)).toBeUndefined();
+      expect(typeof r.error?.code, req(rid, doc, `the refusal of ${bad} MUST be a JSON-RPC error (got ${JSON.stringify(r)})`)).toBe('number');
+    }
+    await rpc(t.url, 'CancelTask', { id });
+  });
+
+  it('RFC 0214 §E — a push config of another tenant\'s task, of another task, or unknown, is answered identically', async () => {
+    const rid = 'openwop.requirement.0214.a2a-push-config-isolation';
+    const doc = 'interop.md §"A2A push delivery" (RFC 0214 §E); interop.md §"The operation mappings" Isolation';
+    const t = await target(true);
+    if (!t.ok) return skip(t, rid);
+    const a2a = (await familyAdvertised('a2a'))!;
+    if (a2a['pushNotifications'] !== true) return softSkip('inapplicable', 'a2a.pushNotifications is not advertised — no push config can exist to isolate');
+    const one = (await startApprovalTask(t.url)).task?.id;
+    const two = (await startApprovalTask(t.url)).task?.id;
+    expect(typeof one === 'string' && typeof two === 'string' && one.includes('/'), req(rid, DOC, 'SendMessage MUST start two tasks with tenant-bound ids')).toBe(true);
+    const dest = unservedDestination('https://example.com/openwop-conformance-push');
+    const created = await rpc(t.url, 'CreateTaskPushNotificationConfig', { taskId: one, url: dest.url });
+    const cfg = (created.result ?? {}) as { id?: string };
+    if (created.error !== undefined && !dest.tunnelled) {
+      await rpc(t.url, 'CancelTask', { id: one }); await rpc(t.url, 'CancelTask', { id: two });
+      return softSkip('blocked', `Create was refused for ${dest.url} and no public front (OPENWOP_WEBHOOK_RECEIVER_URL) is wired — the isolation leg needs one config to exist (${JSON.stringify(created.error)})`);
+    }
+    expect(typeof cfg.id, req(rid, doc, `positive control: Create on the caller's own task with a public destination MUST return a config id (got ${JSON.stringify(created.error ?? created.result)})`)).toBe('string');
+    const own = await rpc(t.url, 'GetTaskPushNotificationConfig', { taskId: one, id: cfg.id });
+    expect(own.error, req(rid, doc, `positive control: the caller MUST read its own config back (got ${JSON.stringify(own.error)})`)).toBeUndefined();
+    const opaque = one!.slice(one!.indexOf('/') + 1);
+    const foreignTask = `zz-conformance-foreign/${opaque}`;
+    const unknownId = `pnc-${randomBytes(12).toString('hex')}`;
+    const answers: Array<[string, Rpc, string]> = [
+      ['unknown config id', await rpc(t.url, 'GetTaskPushNotificationConfig', { taskId: one, id: unknownId }), unknownId],
+      ['config id under another of the caller\'s tasks', await rpc(t.url, 'GetTaskPushNotificationConfig', { taskId: two, id: cfg.id }), cfg.id!],
+      ['config id under another tenant\'s task segment', await rpc(t.url, 'GetTaskPushNotificationConfig', { taskId: foreignTask, id: cfg.id }), cfg.id!],
+    ];
+    const shape = (r: Rpc, echo: string): string => JSON.stringify({ status: r.status, code: r.error?.code, message: (r.error?.message ?? '').split(echo).join('<id>'), data: normaliseErrorData(r.error?.data, echo), result: r.result });
+    const base = shape(answers[0]![1], answers[0]![2]);
+    expect(answers[0]![1].error?.code, req(rid, doc, `an unknown config id MUST be refused (got ${JSON.stringify(answers[0]![1].result)})`)).toBeTypeOf('number');
+    for (const [what, r, echo] of answers.slice(1)) {
+      expect(shape(r, echo), req(rid, doc, `a read of a ${what} MUST be answered exactly as an unknown id — same status, code, message and error details (minus an echo of the requested id)`)).toBe(base);
+    }
+    const foreignDelete = await rpc(t.url, 'DeleteTaskPushNotificationConfig', { taskId: foreignTask, id: cfg.id });
+    expect(foreignDelete.result === undefined || JSON.stringify(foreignDelete.result) === '{}', req(rid, doc, `a delete naming another tenant's task MUST NOT disclose anything beyond the idempotent answer (got ${JSON.stringify(foreignDelete)})`)).toBe(true);
+    const still = await rpc(t.url, 'GetTaskPushNotificationConfig', { taskId: one, id: cfg.id });
+    expect(still.error, req(rid, doc, 'a delete naming another tenant\'s task MUST NOT delete the caller\'s config')).toBeUndefined();
+    await rpc(t.url, 'DeleteTaskPushNotificationConfig', { taskId: one, id: cfg.id });
+    const again = await rpc(t.url, 'DeleteTaskPushNotificationConfig', { taskId: one, id: cfg.id });
+    expect(again.error, req(rid, 'A2A v1.0.1 §3.1.10 ("MUST be idempotent")', `a second delete of the same config MUST succeed idempotently (got ${JSON.stringify(again.error)})`)).toBeUndefined();
+    await rpc(t.url, 'CancelTask', { id: one }); await rpc(t.url, 'CancelTask', { id: two });
+  });
+
+  it('RFC 0214 §A — a push config\'s token and credentials are never returned, and never reach task, events or state', async () => {
+    const rid = 'openwop.requirement.0214.a2a-push-secrets-not-returned';
+    const doc = 'interop-map.json a2a.operations push rows ("secrets are never returned"); security-defaults.md §"Onward hops" (RFC 0214 §A)';
+    const t = await target(true);
+    if (!t.ok) return skip(t, rid);
+    const a2a = (await familyAdvertised('a2a'))!;
+    if (a2a['pushNotifications'] !== true) return softSkip('inapplicable', 'a2a.pushNotifications is not advertised — no push credential can be registered');
+    const first = await startApprovalTask(t.url);
+    const id = first.task?.id;
+    expect(typeof id, req(rid, DOC, `SendMessage MUST start a task: ${JSON.stringify(first.rpc.error)}`)).toBe('string');
+    const credSentinel = `owcred${randomBytes(12).toString('hex')}`;
+    const tokenSentinel = `owtok${randomBytes(12).toString('hex')}`;
+    const dest = unservedDestination('https://example.com/openwop-conformance-push');
+    const created = await rpc(t.url, 'CreateTaskPushNotificationConfig', { taskId: id, url: dest.url, token: tokenSentinel, authentication: { scheme: 'Bearer', credentials: credSentinel } });
+    if (created.error !== undefined && !dest.tunnelled) {
+      await rpc(t.url, 'CancelTask', { id });
+      return softSkip('blocked', `Create was refused for ${dest.url} and no public front (OPENWOP_WEBHOOK_RECEIVER_URL) is wired (${JSON.stringify(created.error)})`);
+    }
+    const cfgId = (created.result as { id?: string } | undefined)?.id;
+    expect(typeof cfgId, req(rid, doc, `positive control: Create with a credential MUST succeed (got ${JSON.stringify(created.error ?? created.result)})`)).toBe('string');
+    const leaks = (what: string, v: unknown): void => {
+      const text = JSON.stringify(v ?? null);
+      expect(text.includes(credSentinel) || text.includes(tokenSentinel), req(rid, doc, `${what} MUST NOT carry the registered token or credentials`)).toBe(false);
+    };
+    leaks('the Create response', created.result);
+    leaks('GetTaskPushNotificationConfig', (await rpc(t.url, 'GetTaskPushNotificationConfig', { taskId: id, id: cfgId })).result);
+    leaks('ListTaskPushNotificationConfigs', (await rpc(t.url, 'ListTaskPushNotificationConfigs', { taskId: id })).result);
+    leaks('GetTask', (await rpc(t.url, 'GetTask', { id })).result);
+    leaks('the run snapshot (getRun)', (await driver.get(`/runs/${encodeURIComponent(id!)}`)).json);
+    leaks('the run event log (pollRunEvents)', (await driver.get(`/runs/${encodeURIComponent(id!)}/events/poll?timeout=1`)).json);
+    await rpc(t.url, 'DeleteTaskPushNotificationConfig', { taskId: id, id: cfgId });
+    await rpc(t.url, 'CancelTask', { id });
+  });
+
   it('ListTasks returns only what listRuns returns to the same Subject; tenant and contextId never select', async () => {
     const other = process.env.OPENWOP_TEST_TENANT_B_API_KEY;
     if (!other) return softSkip('blocked', 'OPENWOP_TEST_TENANT_B_API_KEY (a credential bound to a second tenant) is not set — the cross-caller leg cannot run');

package/src/scenarios/v2-a2a-push-delivery.test.ts

@@ -0,0 +1,291 @@
+/**
+ * RFC 0214 — A2A push delivery, measured at a SUITE-OWNED receiver.
+ * Target major 2.
+ *
+ * Gate: the v2 `a2a` record lists profile `a2a-1.0` AND advertises
+ * `pushNotifications: true`. Otherwise `inapplicable` — the unadvertised host's
+ * obligation is the refusal row (`v2-a2a-operation-map`
+ * `a2a-push-unadvertised-refused`).
+ *
+ * Receiver: `lib/scoped-receiver.ts`, one nonce per exercise behind the
+ * operator's public front (`OPENWOP_WEBHOOK_RECEIVER_URL`, the RFC 0158
+ * receiver). A conforming host REFUSES a loopback, private or plain-http push
+ * destination (RFC 0214 §B, webhooks.md §Egress), so without a public https
+ * front no leg here can be witnessed and each records `blocked` — never a pass,
+ * and never a relaxation of the guard under test.
+ *
+ * Non-vacuity: every leg drives its task to INPUT_REQUIRED FIRST, registers the
+ * config there, and only then resumes — a task that finished before the config
+ * existed would owe no push, and a leg reading "nothing arrived" off it would
+ * measure nothing. On a public front a missing delivery is a FAILURE, except
+ * when other traffic provably reached the listener (`absenceIsUnmeasured`),
+ * which records `blocked`.
+ *
+ * Limit, stated: the delivery-time DNS re-resolve arm of §B cannot be driven
+ * from outside the host (the suite does not control the host's resolver); it is
+ * witnessed by host unit tests, not here. The `token`-only carriage is a SHOULD
+ * (RFC 0214 §C, open question 1) and is not asserted.
+ *
+ * @see RFCS/0214-a2a-push-credential-is-a-destination-credential.md §A–§D
+ * @see spec/v2/core/interop.md §"A2A push delivery"
+ * @see spec/v2/core/security-defaults.md §"Onward hops"
+ */
+import { afterAll, describe, it, expect } from 'vitest';
+import { randomBytes } from 'node:crypto';
+import type { ServerResponse } from 'node:http';
+import { driver } from '../lib/driver.js';
+import { v2Discovery, familyAdvertised } from '../lib/v2.js';
+import { isFixtureAdvertised } from '../lib/fixtures.js';
+import { softSkip } from '../lib/soft-skip.js';
+import { req } from '../lib/requirement-ids.js';
+import { absenceIsUnmeasured, noDeliveryCause, startScopedReceiver, type ScopedHit, type ScopedReceiver } from '../lib/scoped-receiver.js';
+
+export const REQUIRES_HOST_CALLBACK = 'the host POSTs A2A push notifications (StreamResponse statusUpdate) to the suite-owned scoped receiver behind OPENWOP_WEBHOOK_RECEIVER_URL';
+
+const DOC = 'spec/v2/core/interop.md §"A2A push delivery" (RFC 0214)';
+const R = (slug: string): string => `openwop.requirement.0214.${slug}`;
+const PROFILE = 'a2a-1.0';
+const SKILL = 'conformance-approval';
+const ACCEPT = { action: 'accept' };
+const TERMINAL = new Set(['completed', 'failed', 'cancelled']);
+
+interface RpcError { code: number; message?: string; data?: unknown }
+interface Rpc { status: number; result?: Record<string, unknown> | undefined; error?: RpcError | undefined }
+interface Task { id?: string; contextId?: string; status?: { state?: string } }
+
+async function rpc(url: string, method: string, params: unknown): Promise<Rpc> {
+  const headers: Record<string, string> = { 'content-type': 'application/json', accept: 'application/json', 'A2A-Version': '1.0' };
+  const key = process.env.OPENWOP_API_KEY;
+  if (key) headers['authorization'] = `Bearer ${key}`;
+  const res = await fetch(url, { method: 'POST', headers, body: JSON.stringify({ jsonrpc: '2.0', id: randomBytes(4).readUInt32BE(0), method, params }) });
+  const body = (await res.json().catch(() => ({}))) as { result?: Record<string, unknown>; error?: RpcError };
+  return { status: res.status, ...body };
+}
+function taskOf(r: Rpc): Task | undefined {
+  const res = r.result ?? {};
+  return (res['task'] ?? (res['id'] !== undefined ? res : undefined)) as Task | undefined;
+}
+const message = (extra: Record<string, unknown> = {}): Record<string, unknown> => ({ messageId: `conf-0214-${randomBytes(8).toString('hex')}`, role: 'ROLE_USER', parts: [{ text: 'openwop conformance RFC 0214' }], ...extra });
+const acceptMessage = (taskId: string): Record<string, unknown> => message({ taskId, parts: [{ data: ACCEPT }], metadata: { openwop: { interrupt: ACCEPT } } });
+
+type Gate = { ok: true; url: string } | { ok: false; kind: 'inapplicable' | 'blocked'; reason: string };
+async function gate(): Promise<Gate> {
+  if (!(await v2Discovery())) return { ok: false, kind: 'blocked', reason: 'v2 discovery unreachable' };
+  const a2a = await familyAdvertised('a2a');
+  if (!a2a) return { ok: false, kind: 'inapplicable', reason: 'a2a not advertised at major 2' };
+  const profiles = Array.isArray(a2a['profiles']) ? (a2a['profiles'] as unknown[]) : [];
+  if (!profiles.includes(PROFILE)) return { ok: false, kind: 'inapplicable', reason: 'a2a advertised without profile a2a-1.0 — no A2A interface to register a push config on' };
+  if (a2a['pushNotifications'] !== true) return { ok: false, kind: 'inapplicable', reason: 'a2a.pushNotifications not advertised — the refusal row applies (v2-a2a-operation-map a2a-push-unadvertised-refused)' };
+  const cardUrl = a2a['agentCardUrl'];
+  if (typeof cardUrl !== 'string') return { ok: false, kind: 'blocked', reason: 'a2a.agentCardUrl is not advertised' };
+  const res = await fetch(cardUrl, { headers: { accept: 'application/json', 'A2A-Version': '1.0' } });
+  const card = (await res.json().catch(() => ({}))) as { supportedInterfaces?: Array<{ url?: string; protocolBinding?: string; protocolVersion?: string }>; skills?: Array<{ id?: string }> };
+  const iface = (card.supportedInterfaces ?? []).find((i) => i.protocolBinding === 'JSONRPC' && i.protocolVersion === '1.0');
+  if (typeof iface?.url !== 'string') return { ok: false, kind: 'blocked', reason: 'the card lists no JSONRPC 1.0 interface' };
+  const skills = (card.skills ?? []).map((s) => s.id);
+  if (skills.length !== 1 || skills[0] !== SKILL || !isFixtureAdvertised(SKILL)) return { ok: false, kind: 'blocked', reason: `the card routes skills [${skills.join(', ')}]; the legs need exactly ${SKILL} (conformance/fixtures.md)` };
+  return { ok: true, url: iface.url };
+}
+
+/** A receiver that records its own hits and answers each with `answer` (default 204). */
+async function receiver(answer?: (hit: ScopedHit, res: ServerResponse) => void): Promise<{ rx: ScopedReceiver; hits: ScopedHit[] }> {
+  const hits: ScopedHit[] = [];
+  const rx = await startScopedReceiver((hit, res) => {
+    hits.push(hit);
+    if (answer) return answer(hit, res);
+    res.writeHead(204); res.end();
+  });
+  return { rx, hits };
+}
+async function until(pred: () => boolean, ms: number): Promise<boolean> {
+  const end = Date.now() + ms;
+  while (!pred() && Date.now() < end) await new Promise((ok) => setTimeout(ok, 200));
+  return pred();
+}
+const wait = (ms: number): Promise<void> => new Promise((ok) => setTimeout(ok, ms));
+
+/**
+ * Budgets. On a public cut every step crosses the operator's tunnel (suite → host
+ * front, host → receiver front), and the 2.39.0 public cut lost three legs to
+ * vitest's per-test timeout — not to an assertion — while deliveries were in
+ * fact arriving (#1537 precedent: the RFC 0199 state leg). Loopback keeps the
+ * tight budgets; a fronted run gets room for the round trips.
+ */
+const FRONTED = Boolean(process.env.OPENWOP_WEBHOOK_RECEIVER_URL);
+const ARRIVAL_MS = FRONTED ? 60_000 : 20_000;
+const SETTLE_MS = FRONTED ? 45_000 : 10_000;
+const LEG_MS = FRONTED ? 240_000 : 60_000;
+const FORK_LEG_MS = FRONTED ? 300_000 : 90_000;
+const header = (h: ScopedHit, name: string): string | undefined => { const v = h.headers[name.toLowerCase()]; return Array.isArray(v) ? v.join(',') : v; };
+
+async function runStatus(taskId: string): Promise<string | undefined> {
+  const r = await driver.get(`/runs/${encodeURIComponent(taskId)}`);
+  return r.status === 200 ? ((r.json as { status?: string }).status) : undefined;
+}
+async function settle(taskId: string, want: (s: string | undefined) => boolean, ms = SETTLE_MS): Promise<string | undefined> {
+  const end = Date.now() + ms;
+  let s = await runStatus(taskId);
+  while (!want(s) && Date.now() < end) { await wait(150); s = await runStatus(taskId); }
+  return s;
+}
+
+/** Start an approval task and hold it at INPUT_REQUIRED — the precondition every leg needs. */
+async function suspendedTask(url: string, id: string): Promise<string> {
+  const r = await rpc(url, 'SendMessage', { message: message() });
+  const task = taskOf(r);
+  expect(typeof task?.id, req(id, DOC, `SendMessage MUST start a task (got ${JSON.stringify(r.error ?? r.result)})`)).toBe('string');
+  expect(await settle(task!.id!, (s) => s === 'waiting-approval'), req(id, DOC, 'precondition: the task MUST be suspended (INPUT_REQUIRED) BEFORE the config is registered, or the leg would measure a push nobody owed')).toBe('waiting-approval');
+  return task!.id!;
+}
+async function create(url: string, taskId: string, dest: string, extra: Record<string, unknown> = {}): Promise<Rpc> {
+  return rpc(url, 'CreateTaskPushNotificationConfig', { taskId, url: dest, ...extra });
+}
+
+/** Why a leg cannot be measured on this cut, or null when it can. */
+function unmeasurable(rx: ScopedReceiver, created: Rpc): string | null {
+  if (!rx.tunnelled) {
+    return `no public https front (OPENWOP_WEBHOOK_RECEIVER_URL) is wired — a conforming host refuses the loopback destination ${rx.url} (RFC 0214 §B), so push delivery cannot be witnessed here${created.error ? ` (Create answered ${JSON.stringify(created.error)})` : ''}`;
+  }
+  return null;
+}
+
+/**
+ * One delivery, read by two legs. Each leg cites exactly one requirement id —
+ * the ledger keeps the LAST id an it() cites, so the 2.39.0 cut, whose single
+ * §A/§C it() cited both, recorded `no-openwop-signature` and silently dropped
+ * `delivery-authenticated`. The delivery runs once (lazily, in the first leg)
+ * and the second leg reads the same hits; when the delivery cannot be made the
+ * second leg records `blocked` with the reason instead of vanishing.
+ */
+type Delivery =
+  | { kind: 'measured'; hits: ScopedHit[]; taskId: string; cred: string; rx: ScopedReceiver }
+  | { kind: 'skip'; skip: 'inapplicable' | 'blocked'; reason: string };
+let delivery: Promise<Delivery> | undefined;
+let deliveryRx: ScopedReceiver | undefined;
+function deliverOnce(id: string = R('a2a-push-delivery-authenticated')): Promise<Delivery> {
+  delivery ??= (async (): Promise<Delivery> => {
+    const g = await gate();
+    if (!g.ok) return { kind: 'skip', skip: g.kind, reason: g.reason };
+    const { rx, hits } = await receiver();
+    deliveryRx = rx;
+    const taskId = await suspendedTask(g.url, id);
+    const cred = `owpush${randomBytes(12).toString('hex')}`;
+    const created = await create(g.url, taskId, rx.url, { authentication: { scheme: 'Bearer', credentials: cred } });
+    const why = unmeasurable(rx, created);
+    if (why !== null) { await rpc(g.url, 'CancelTask', { id: taskId }); return { kind: 'skip', skip: 'blocked', reason: why }; }
+    expect(created.error, req(id, DOC, `Create on a suspended task with the public receiver MUST succeed (got ${JSON.stringify(created.error)})`)).toBeUndefined();
+    await rpc(g.url, 'SendMessage', { message: acceptMessage(taskId) });
+    await settle(taskId, (s) => s !== undefined && TERMINAL.has(s));
+    const arrived = await until(() => hits.length > 0, ARRIVAL_MS);
+    if (!arrived && absenceIsUnmeasured(rx)) return { kind: 'skip', skip: 'blocked', reason: noDeliveryCause(rx, 'A2A push') };
+    return { kind: 'measured', hits, taskId, cred, rx };
+  })();
+  return delivery;
+}
+
+describe('RFC 0214 — v2-a2a-push-delivery (host POSTs A2A push to a suite-owned receiver)', () => {
+  afterAll(async () => { await deliveryRx?.close(); });
+
+  it('§A/§C — a transition after registration is POSTed to the registered destination with the registered Authorization', async () => {
+    const id = R('a2a-push-delivery-authenticated');
+    const d = await deliverOnce(id);
+    if (d.kind === 'skip') return softSkip(d.skip, d.reason);
+    const { hits, taskId, cred, rx } = d;
+    expect(hits.length, req(id, `${DOC} §C ("at least one attempt")`, `a transition after registration MUST be POSTed at least once to the registered destination — ${noDeliveryCause(rx, 'A2A push')}`)).toBeGreaterThan(0);
+    const h = hits[0]!;
+    expect(h.method, req(id, 'A2A v1.0.1 §4.3.3', 'a push is an HTTP POST')).toBe('POST');
+    expect(header(h, 'authorization'), req(id, `${DOC} §A (A2A v1.0.1 §4.3.3 "MUST include authentication credentials")`, 'the push MUST carry the registered credential as Authorization: {scheme} {credentials}')).toBe(`Bearer ${cred}`);
+    expect((header(h, 'content-type') ?? '').split(';')[0]!.trim(), req(id, 'A2A v1.0.1 §4.3.3', 'the push body is application/a2a+json')).toBe('application/a2a+json');
+    const body = JSON.parse(h.body || '{}') as { statusUpdate?: { taskId?: string; status?: { state?: string } } };
+    expect(body.statusUpdate?.taskId, req(id, 'A2A v1.0.1 §4.3.3 (StreamResponse)', `the push body MUST be a StreamResponse statusUpdate naming the task (got ${h.body.slice(0, 200)})`)).toBe(taskId);
+  }, LEG_MS);
+
+  it('§C — an A2A push carries no OpenWOP signature', async () => {
+    const id = R('a2a-push-no-openwop-signature');
+    let d: Delivery;
+    try { d = await deliverOnce(); }
+    catch (err) { return softSkip('blocked', `the delivery this leg reads was not made — the §A/§C leg failed first: ${err instanceof Error ? err.message.slice(0, 200) : String(err)}`); }
+    if (d.kind === 'skip') return softSkip(d.skip, d.reason);
+    expect(d.hits.length, req(id, DOC, 'positive control: at least one push arrived to read headers from')).toBeGreaterThan(0);
+    for (const x of d.hits) {
+      expect(header(x, 'openwop-signature'), req(id, `${DOC} §C ("no OpenWOP signature")`, 'an A2A push MUST NOT carry an OpenWOP-Signature — A2A defines no secret exchange to verify it')).toBeUndefined();
+    }
+  }, LEG_MS);
+
+  it('§B — a 3xx from the destination is a failed delivery: the redirect target receives nothing, credential or not', async () => {
+    const id = R('a2a-push-no-redirect');
+    const g = await gate();
+    if (!g.ok) return softSkip(g.kind, g.reason);
+    const target = await receiver();
+    const origin = await receiver((_hit, res) => { res.writeHead(307, { location: target.rx.url }); res.end(); });
+    try {
+      const taskId = await suspendedTask(g.url, id);
+      const created = await create(g.url, taskId, origin.rx.url, { authentication: { scheme: 'Bearer', credentials: `owredir${randomBytes(10).toString('hex')}` } });
+      const why = unmeasurable(origin.rx, created);
+      if (why !== null) { await rpc(g.url, 'CancelTask', { id: taskId }); return softSkip('blocked', why); }
+      expect(created.error, req(id, DOC, `Create MUST succeed (got ${JSON.stringify(created.error)})`)).toBeUndefined();
+      await rpc(g.url, 'SendMessage', { message: acceptMessage(taskId) });
+      await settle(taskId, (s) => s !== undefined && TERMINAL.has(s));
+      const arrived = await until(() => origin.hits.length > 0, ARRIVAL_MS);
+      if (!arrived && absenceIsUnmeasured(origin.rx)) return softSkip('blocked', noDeliveryCause(origin.rx, 'A2A push'));
+      expect(origin.hits.length, req(id, DOC, `positive control: the registered destination MUST receive the push it then redirects — ${noDeliveryCause(origin.rx, 'A2A push')}`)).toBeGreaterThan(0);
+      await wait(4000); // any retry or followed redirect lands in this window
+      expect(target.hits.length, req(id, `${DOC} §B; webhooks.md §Egress ("refuse to follow redirects")`, 'the redirect target MUST receive nothing: a 3xx is a delivery failure and the credential MUST NOT be sent after a redirect')).toBe(0);
+    } finally { await origin.rx.close(); await target.rx.close(); }
+  }, LEG_MS);
+
+  it('§A — after Delete no further push reaches that destination, while a live config on the same task still receives', async () => {
+    const id = R('a2a-push-discard-on-delete');
+    const g = await gate();
+    if (!g.ok) return softSkip(g.kind, g.reason);
+    const kept = await receiver();
+    const dropped = await receiver();
+    try {
+      const taskId = await suspendedTask(g.url, id);
+      const a = await create(g.url, taskId, kept.rx.url, { authentication: { scheme: 'Bearer', credentials: `owkeep${randomBytes(10).toString('hex')}` } });
+      const why = unmeasurable(kept.rx, a);
+      if (why !== null) { await rpc(g.url, 'CancelTask', { id: taskId }); return softSkip('blocked', why); }
+      const b = await create(g.url, taskId, dropped.rx.url, { authentication: { scheme: 'Bearer', credentials: `owdrop${randomBytes(10).toString('hex')}` } });
+      const dropId = (b.result as { id?: string } | undefined)?.id;
+      expect(typeof dropId, req(id, DOC, `Create of the second config MUST succeed (got ${JSON.stringify(b.error ?? b.result)})`)).toBe('string');
+      const del = await rpc(g.url, 'DeleteTaskPushNotificationConfig', { taskId, id: dropId });
+      expect(del.error, req(id, DOC, `Delete of the caller's own config MUST succeed (got ${JSON.stringify(del.error)})`)).toBeUndefined();
+      await rpc(g.url, 'SendMessage', { message: acceptMessage(taskId) });
+      await settle(taskId, (s) => s !== undefined && TERMINAL.has(s));
+      const arrived = await until(() => kept.hits.length > 0, ARRIVAL_MS);
+      if (!arrived && absenceIsUnmeasured(kept.rx)) return softSkip('blocked', noDeliveryCause(kept.rx, 'A2A push'));
+      expect(kept.hits.length, req(id, DOC, `positive control: the config that was NOT deleted MUST still receive the push — ${noDeliveryCause(kept.rx, 'A2A push')}`)).toBeGreaterThan(0);
+      await wait(3000);
+      expect(dropped.hits.length, req(id, `${DOC} §A ("dropped when the config is deleted")`, 'a deleted config MUST receive nothing further — its destination credential is discarded with it')).toBe(0);
+    } finally { await kept.rx.close(); await dropped.rx.close(); }
+  }, LEG_MS);
+
+  it('§D — a replay fork of a pushed run delivers nothing to the source run\'s destination', async () => {
+    const id = R('a2a-push-fork-no-push');
+    const g = await gate();
+    if (!g.ok) return softSkip(g.kind, g.reason);
+    const replay = await familyAdvertised('replay');
+    const modes = Array.isArray(replay?.['modes']) ? (replay!['modes'] as unknown[]) : [];
+    if (!modes.includes('replay')) return softSkip('inapplicable', 'replay (mode replay) is not advertised — no fork to measure');
+    const { rx, hits } = await receiver();
+    try {
+      const taskId = await suspendedTask(g.url, id);
+      const created = await create(g.url, taskId, rx.url, { authentication: { scheme: 'Bearer', credentials: `owfork${randomBytes(10).toString('hex')}` } });
+      const why = unmeasurable(rx, created);
+      if (why !== null) { await rpc(g.url, 'CancelTask', { id: taskId }); return softSkip('blocked', why); }
+      await rpc(g.url, 'SendMessage', { message: acceptMessage(taskId) });
+      await settle(taskId, (s) => s !== undefined && TERMINAL.has(s));
+      const arrived = await until(() => hits.length > 0, ARRIVAL_MS);
+      if (!arrived && absenceIsUnmeasured(rx)) return softSkip('blocked', noDeliveryCause(rx, 'A2A push'));
+      expect(hits.length, req(id, DOC, `positive control: the source run MUST have pushed before the fork — ${noDeliveryCause(rx, 'A2A push')}`)).toBeGreaterThan(0);
+      await wait(3000);
+      const before = hits.length;
+      const fork = await driver.post(`/runs/${encodeURIComponent(taskId)}:fork`, { mode: 'replay' });
+      if (fork.status < 200 || fork.status >= 300) return softSkip('blocked', `replay is advertised but forkRun answered ${fork.status} ${JSON.stringify(fork.json)} — the fork leg is unmeasured`);
+      const child = (fork.json as { runId?: string } | undefined)?.runId;
+      if (typeof child === 'string') await settle(child, (s) => s !== undefined && TERMINAL.has(s));
+      await wait(4000);
+      expect(hits.length, req(id, `${DOC} §D; replay.md §Suppression ("MUST NOT deliver events a replay re-emits")`, `a replay fork MUST NOT push to the source run's destination (deliveries ${before} before the fork, ${hits.length} after)`)).toBe(before);
+    } finally { await rx.close(); }
+  }, FORK_LEG_MS);
+});

package/src/scenarios/v2-lane-issuer-advertised.test.ts

@@ -74,7 +74,15 @@ describe('v2 lane-issuer-advertised (RFC 0170 §B.2–§B.4)', () => {
       expect(LANES.has(name), req('openwop.requirement.0170.lane-issuer-advertised.members', DOC, `auth.lanes[].lane MUST be one of the ten lanes (got ${name})`)).toBe(true);
       const issuers = l['issuers'];
       expect(Array.isArray(issuers) && issuers.length > 0 && issuers.every((i) => typeof i === 'string' && i.length > 0), req('openwop.requirement.0170.lane-issuer-advertised.members', 'spec/v2/core/identity.md §2.2', `lane ${name} MUST advertise its trust root in issuers[] (min 1, non-empty strings)`)).toBe(true);
-      expect(REVOCATION.has(String(l['revocation'])), req('openwop.requirement.0170.lane-issuer-advertised.members', 'spec/v2/core/identity.md §2.2', `lane ${name} MUST name its revocation rule`)).toBe(true);
+      // identity.md §2.2: a lane whose row reads "—" (`anonymous`) has no
+      // revocation rule, so it MAY omit `revocation` — the schema made it
+      // optional there in 2.38.0 (openwop#1540), and until 2.39.1 this leg
+      // still demanded it, failing a host that followed the schema and the
+      // prose (measured on openwop-app). If such a lane does advertise one,
+      // it must still be a known member. Every other lane MUST name its rule.
+      if (!(LANE_RULES[name] === null && l['revocation'] === undefined)) {
+        expect(REVOCATION.has(String(l['revocation'])), req('openwop.requirement.0170.lane-issuer-advertised.members', 'spec/v2/core/identity.md §2.2', `lane ${name} MUST name its revocation rule`)).toBe(true);
+      }
       expect(ASSURANCE.has(String(l['minimumAssurance'])), req('openwop.requirement.0170.lane-issuer-advertised.members', 'spec/v2/core/identity.md §2.3', `lane ${name} MUST advertise minimumAssurance: bearer | sender-constrained | key-bound`)).toBe(true);
       if (l['delegationProofs'] !== undefined) {
         expect(Array.isArray(l['delegationProofs']) && (l['delegationProofs'] as unknown[]).every((p) => PROOFS.has(String(p))), req('openwop.requirement.0170.lane-issuer-advertised.members', 'spec/v2/core/identity.md §2.4', `lane ${name}: delegationProofs[] MUST be drawn from mtls-key-binding | dpop | svid-chain`)).toBe(true);