@openwop/openwop-conformance 2.4.0 → 2.4.2

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # `@openwop/openwop-conformance` Changelog
 
+## [2.4.2] — 2026-09-18 — an id no host could ever witness
+
+**Why a patch.** One assertion moves into its own `it`; no scenario file is
+added or removed and no host obligation changes.
+
+### Fixed
+
+- **`openwop.requirement.0173.pack-isolation.seam`** was minted inside
+  `v2-pack-isolation`'s shared `invoke()` helper.
+  `generate-requirement-registry.mjs` harvests `req(…)` only within an `it`, so
+  the id never reached `requirements.json` and no bundle could carry a row for
+  it — while `check-cut-gates.mjs` scans every `req(` in the source and went on
+  demanding one, failing RFC 0167 §G.2 on a row no host could supply. The seam
+  contract now has its own `it`, which is the copy the registry can see. The
+  helper keeps its `req(…)` call — RFC 0168 §A.1 makes `req(…)` the only
+  assertion-message form in `src/scenarios`, so the fix is the extra `it`, not
+  a quieter assertion.
+
+## [2.4.1] — 2026-09-18 — the leg that reads the host, not the schema
+
+**Why a patch.** A leg is added to an existing scenario file; no file is added or removed.
+
+### Fixed
+
+- **`v2-chain-pin-exact`** gains a third leg: an EXTERNAL `subChainRef` carrying
+  `version: "^1.0.0"`. The existing legs are satisfied by schema validation
+  alone (sabotage-proved: delete the reference host's pin rule and both stay
+  green); `SubChainRef.ref` types the external `version` as a semver range, so
+  this leg is the only one that reads the host's rule.
+
 ## [2.4.0] — 2026-09-18 — every bound kind, not just runId
 
 **Why a minor.** One scenario file is added (`PROTOCOL-STATUS.md` §suite version).

package/dist/spec-artifacts.lock.json

@@ -1,5 +1,5 @@
 {
   "package": "@openwop/spec-artifacts",
-  "version": "2.4.0",
-  "stampSha256": "5b68f54de94dc0d6693867080f33f9004a4d4455648f899cd7ae8f7a6276ef38"
+  "version": "2.4.2",
+  "stampSha256": "cb840f92cef6dbff3beed39b860bde984adf1080e830dab5088487f2bf17d767"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/openwop-conformance",
-  "version": "2.4.0",
+  "version": "2.4.2",
   "description": "Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.",
   "repository": {
     "type": "git",
@@ -56,6 +56,6 @@
     "@openwop/spec-artifacts": "file:../spec-artifacts"
   },
   "peerDependencies": {
-    "@openwop/spec-artifacts": "2.4.0"
+    "@openwop/spec-artifacts": "2.4.2"
   }
 }

package/requirements.json

@@ -3,10 +3,10 @@
   "generatedFrom": "src/scenarios/*.test.ts",
   "counts": {
     "files": 571,
-    "tests": 2172,
-    "withStableId": 2172,
+    "tests": 2174,
+    "withStableId": 2174,
     "interpolatedTitles": 0,
-    "explicitIds": 2125
+    "explicitIds": 2127
   },
   "records": [
     {
@@ -26310,7 +26310,7 @@
     {
       "id": "openwop.it.v2-chain-pin-exact.a-chain-reference-carrying-a-range-core-ai-callprompt-1-is-refused-at-register",
       "file": "v2-chain-pin-exact.test.ts",
-      "line": 102,
+      "line": 116,
       "title": "a chain reference carrying a range (core.ai.callPrompt@^1) is refused at register",
       "explicitId": "openwop.requirement.0177.chain-pin-exact.range-refused",
       "citations": [
@@ -26325,10 +26325,28 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-chain-pin-exact.an-external-sub-chain-reference-carrying-a-range-is-refused-the-one-pin-the-sche",
+      "file": "v2-chain-pin-exact.test.ts",
+      "line": 125,
+      "title": "an EXTERNAL sub-chain reference carrying a range is refused — the one pin the schema cannot catch",
+      "explicitId": "openwop.requirement.0177.chain-pin-exact.external-range-refused",
+      "citations": [
+        {
+          "section": "workflow-chain-packs.md §\"Exact pins\" (RFC 0177 §E.1)",
+          "requirement": null,
+          "interpolated": true
+        },
+        {
+          "section": "workflow-chain-packs.md §\"Exact pins\" (RFC 0177 §E.1)",
+          "requirement": "the refusal MUST carry an error code in the canonical envelope"
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-chain-pin-exact.a-chain-reference-pinning-an-exact-version-core-ai-callprompt-1-0-0-registers",
       "file": "v2-chain-pin-exact.test.ts",
-      "line": 111,
+      "line": 140,
       "title": "a chain reference pinning an exact version (core.ai.callPrompt@1.0.0) registers",
       "explicitId": "openwop.requirement.0177.chain-pin-exact.exact-accepted",
       "citations": [
@@ -27663,7 +27681,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.sandbox-isolationmodel-names-a-real-mechanism-never-node-vm",
       "file": "v2-pack-isolation.test.ts",
-      "line": 70,
+      "line": 78,
       "title": "sandbox.isolationModel names a real mechanism, never node:vm",
       "explicitId": "openwop.requirement.0173.pack-isolation",
       "citations": [
@@ -27678,10 +27696,24 @@
         }
       ]
     },
+    {
+      "id": "openwop.it.v2-pack-isolation.the-sandbox-invoke-seam-answers-the-seam-contract",
+      "file": "v2-pack-isolation.test.ts",
+      "line": 92,
+      "title": "the sandbox-invoke seam answers the seam contract",
+      "explicitId": "openwop.requirement.0173.pack-isolation.seam",
+      "citations": [
+        {
+          "section": "host-sample-test-seams.md §8",
+          "requirement": null,
+          "interpolated": true
+        }
+      ]
+    },
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-fs-gated-a-host-filesystem-read-is-refused",
       "file": "v2-pack-isolation.test.ts",
-      "line": 84,
+      "line": 104,
       "title": "node-pack-sandbox-fs-gated: a host filesystem read is refused",
       "explicitId": null,
       "citations": []
@@ -27689,7 +27721,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-fs-gated-a-host-filesystem-write-is-refused",
       "file": "v2-pack-isolation.test.ts",
-      "line": 91,
+      "line": 111,
       "title": "node-pack-sandbox-fs-gated: a host filesystem write is refused",
       "explicitId": null,
       "citations": []
@@ -27697,7 +27729,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-no-env-the-host-environment-does-not-leak",
       "file": "v2-pack-isolation.test.ts",
-      "line": 98,
+      "line": 118,
       "title": "node-pack-sandbox-no-env: the host environment does not leak",
       "explicitId": null,
       "citations": []
@@ -27705,7 +27737,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-network-gated-ungated-network-egress-is-refused",
       "file": "v2-pack-isolation.test.ts",
-      "line": 105,
+      "line": 125,
       "title": "node-pack-sandbox-network-gated: ungated network egress is refused",
       "explicitId": null,
       "citations": []
@@ -27713,7 +27745,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-no-process-host-process-access-is-refused",
       "file": "v2-pack-isolation.test.ts",
-      "line": 112,
+      "line": 132,
       "title": "node-pack-sandbox-no-process: host process access is refused",
       "explicitId": null,
       "citations": []
@@ -27721,7 +27753,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-timeout-exceeding-wallclocklimitms-fails-with-sandbox-timeout",
       "file": "v2-pack-isolation.test.ts",
-      "line": 119,
+      "line": 139,
       "title": "node-pack-sandbox-timeout: exceeding wallClockLimitMs fails with sandbox_timeout",
       "explicitId": "openwop.requirement.0173.pack-isolation.timeout",
       "citations": [
@@ -27734,7 +27766,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-memory-cap-exceeding-memorylimitbytes-fails-with-sandbox-memor",
       "file": "v2-pack-isolation.test.ts",
-      "line": 126,
+      "line": 146,
       "title": "node-pack-sandbox-memory-cap: exceeding memoryLimitBytes fails with sandbox_memory_exceeded",
       "explicitId": "openwop.requirement.0173.pack-isolation.memory-cap",
       "citations": [
@@ -27747,7 +27779,7 @@
     {
       "id": "openwop.it.v2-pack-isolation.node-pack-sandbox-isolated-context-a-pack-cannot-mutate-state-another-invocation",
       "file": "v2-pack-isolation.test.ts",
-      "line": 133,
+      "line": 153,
       "title": "node-pack-sandbox-isolated-context: a pack cannot mutate state another invocation sees",
       "explicitId": "openwop.requirement.0173.pack-isolation.isolated-context",
       "citations": [

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.4.0",
-  "corpusTag": "v2.4.0",
+  "version": "2.4.2",
+  "corpusTag": "v2.4.2",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "39081c59fb696159806b0f2f9a42e7e9ff830d622fcf2ad4159b21357580a955",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "d7297c933f4987c085f1427b1cb245c0e7f88d0ab91a1d1534c7959bb659940e",
-    "api/v2/asyncapi.yaml": "5730b64974958076b2da1e77990011228465c088334a8a5c6005e136cf86e20d",
-    "api/v2/openapi.yaml": "cc94e454854f28d7aae5f0cab264a21dfdc8ce43259dfd30ea4e2340ede756fc",
+    "api/seams-v2.yaml": "2a94a4195377913107f884aacd48605e71804f151333de8a8a0abc7b2799c5e2",
+    "api/v2/asyncapi.yaml": "930bd4ea705b35ec37605f139a0be7b08b39d8d9c7628c9756c4fdbe47f4655f",
+    "api/v2/openapi.yaml": "33298f7981473111ce767695367e44fa3eaa3cbdda9a52badc2b198efcd8259d",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
@@ -200,7 +200,7 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "e90916db12d2297e2e560b2d54d2c4702d6cb3bef7179a575844687a7ec17262",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "41af65d02636d651a99f0f48caa5dd5ed45be576f745166bd1510908674997e0",
+    "spec/v1/core-standard-manifest.json": "1575d6d8b801b3d84c65c63d55a4f0563a3350a754e403ee06ffb853b996b639",
     "spec/v1/deprecations.json": "c81c8f71460936c8d489d8270477c7661cf4a5d7b7bad86c98899750b5656027",
     "spec/v1/deprecations.schema.json": "18c87e78bedc210431f795ae44c5b5d202f2f3317850d5cf86867d4f1fa1cdfb",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
@@ -219,7 +219,7 @@
     "spec/v2/core/errors.md": "ad85fc830139e587f20deabf88297b91b1fb6ce31e80d5442624a650246ab16e",
     "spec/v2/core/events.md": "f1bac16419740f3b722febb6f5caaabed8838e092cba3d080fe9184024049dcf",
     "spec/v2/core/form-content-packs.md": "6ffaae85d4550be48dd53fb6e2959af8aceb35bd87c5343b722885084f197713",
-    "spec/v2/core/headers.md": "6f350e4a6893e82fcab40aec6cb515b989e8b56a20a74f6d10d24a0d3fdf5cf0",
+    "spec/v2/core/headers.md": "d34646a59632a79e9907439d0521c90e613ed968578af02129bad7002063de99",
     "spec/v2/core/idempotency.md": "b86c352d964aebad532727f314e26ed2177d49de382076fa64d3162e2f56118d",
     "spec/v2/core/identity.md": "9d2b823eb899463807452fe5721dcf09881837c161be024175957db27870b243",
     "spec/v2/core/interop.md": "d4c404e469e1d9d9be88bc2c939d777e7d7c1d0419b1251c18770f039838a401",
@@ -271,8 +271,8 @@
     "spec/v2/path-manifest.json": "a6f4e652e866889e8bde815874062f62929aee95dc8e58e7152c56adee262163",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "0636f19fceae625390003a347e70ef4797d84766b5c24ce8a02cea52aadebca4",
-    "spec/v2/release.json": "975e8d6100d4c0697384dd093eb586eed3f41481a26b954e052fa321525a0273",
+    "spec/v2/release.json": "4fdf29fe944e63528cdf5dc108e22e5006b2d7fcb1349c33caee85a1cacdd81e",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624"
   },
-  "corpusCommit": "5f410d86a87e25473f8e1d63ce08e9b0947c7e43"
+  "corpusCommit": "164711f69c396daffb6a300a94e89242640b4087"
 }

package/src/scenarios/v2-chain-pin-exact.test.ts

@@ -76,6 +76,20 @@ function chainPack(name: string, reference: string): Record<string, unknown> {
     }],
   };
 }
+/**
+ * The same fixture with an EXTERNAL sub-chain reference. `SubChainRef.ref`
+ * oneOf[1] types `version` as a semver RANGE, so — unlike the node reference
+ * above — the schema cannot refuse a range here. A host either carries the
+ * §Exact pins rule or it does not, and this is the only shape that tells the
+ * two apart.
+ */
+function externalRefPack(name: string, version: string): Record<string, unknown> {
+  const pack = chainPack(name, 'core.ai.callPrompt@1.0.0');
+  const chain = (pack['chains'] as Array<Record<string, unknown>>)[0] as Record<string, unknown>;
+  chain['subChains'] = [{ ref: { packName: 'core.openwop.v2-pin-external', chainId: 'c.remote', version } }];
+  return pack;
+}
+
 async function publish(manifest: Record<string, unknown>) {
   const name = manifest['name'] as string;
   const version = manifest['version'] as string;
@@ -108,6 +122,21 @@ describe('v2-chain-pin-exact (RFC 0177 §E.1)', () => {
     expect(typeof readErrorCode(res.json), req('openwop.requirement.0177.chain-pin-exact.range-refused', SECTION, 'the refusal MUST carry an error code in the canonical envelope')).toBe('string');
   });
 
+  it('an EXTERNAL sub-chain reference carrying a range is refused — the one pin the schema cannot catch', async () => {
+    const skip = await preflight();
+    if (skip) return softSkip(skip.kind, skip.reason);
+    // Measured 2026-09-18 on both production hosts: the external branch is
+    // typed, reachable and UNEXERCISED — every shipped pack uses the sibling
+    // string form — so nothing on either host would have noticed a range here.
+    // The two legs above are satisfied by schema validation alone (sabotage on
+    // the reference host: delete its pin rule and they stay green), which is
+    // why this leg exists: it is the only one that reads the HOST's rule.
+    const res = await publish(externalRefPack(freshName('chain-ext-range'), '^1.0.0'));
+    if (res.status === 404) return softSkip('blocked', 'packs-test publish seam answered 404 — seams profile advertised but the seam is not mounted');
+    expect(res.status >= 400 && res.status < 500, req('openwop.requirement.0177.chain-pin-exact.external-range-refused', SECTION, `an external reference carrying a range MUST be refused at register — the schema types this field as a semver range, so only the host's rule can refuse it (got ${res.status})`)).toBe(true);
+    expect(typeof readErrorCode(res.json), req('openwop.requirement.0177.chain-pin-exact.external-range-refused', SECTION, 'the refusal MUST carry an error code in the canonical envelope')).toBe('string');
+  });
+
   it('a chain reference pinning an exact version (core.ai.callPrompt@1.0.0) registers', async () => {
     const skip = await preflight();
     if (skip) return softSkip(skip.kind, skip.reason);

package/src/scenarios/v2-pack-isolation.test.ts

@@ -57,6 +57,14 @@ async function invoke(typeId: string, extra: Record<string, unknown> = {}): Prom
   if (!doc || !seamsProfileAdvertised(doc)) { softSkip('inapplicable', `the ${typeId} leg is seam-driven — seams profile (conformance.seamsProfile = openwop-conformance-seams-v2) not advertised`); return null; }
   const res = await driver.post(INVOKE, { typeId, ...extra });
   if (res.status === 404 || res.status === 403 || res.status === 405) { seamAbsent(`host advertises packs + sandbox but ${INVOKE} answered ${res.status} — the ${typeId} leg is unobservable (host-sample-test-seams.md §8)`); return null; }
+  // The same id is ALSO asserted by its own `it` above, and that is the copy the
+  // registry can see: `generate-requirement-registry.mjs` harvests `req(…)` only
+  // within an `it`, so this helper-level call alone left the id out of
+  // requirements.json — and no bundle could carry a row for it — while
+  // `check-cut-gates.mjs`, which scans every `req(` in the source, went on
+  // demanding one. §G.2 failed on a row no host could supply. RFC 0168 §A.1
+  // requires `req(…)` here rather than a bare describe, so the fix is the extra
+  // `it`, not a quieter assertion.
   expect(res.status, req('openwop.requirement.0173.pack-isolation.seam', 'host-sample-test-seams.md §8', `${INVOKE} MUST answer 200 { result } | 200 { error } for ${typeId}`)).toBe(200);
   return (res.json ?? {}) as InvokeResult;
 }
@@ -81,6 +89,18 @@ describe('RFC 0173 §B — pack-isolation (gated on packs + sandbox)', () => {
     ).toContain(model);
   });
 
+  it('the sandbox-invoke seam answers the seam contract', async () => {
+    if (!(await gated())) return softSkip('inapplicable', 'gate not met (reason recorded above)');
+    const doc = await discovery();
+    if (!doc || !seamsProfileAdvertised(doc)) return softSkip('inapplicable', 'seam-driven — seams profile (conformance.seamsProfile = openwop-conformance-seams-v2) not advertised');
+    const res = await driver.post(INVOKE, { typeId: 'misbehave.fs-escape-read' });
+    if (res.status === 404 || res.status === 403 || res.status === 405) return seamAbsent(`host advertises packs + sandbox but ${INVOKE} answered ${res.status}`);
+    expect(
+      res.status,
+      req('openwop.requirement.0173.pack-isolation.seam', 'host-sample-test-seams.md §8', `${INVOKE} MUST answer 200 { result } | 200 { error } — the eight behavioural legs are unobservable otherwise`),
+    ).toBe(200);
+  });
+
   it('node-pack-sandbox-fs-gated: a host filesystem read is refused', async () => {
     if (!(await gated())) return softSkip('inapplicable', 'gate not met (reason recorded above)');
     const r = await invoke('misbehave.fs-escape-read');