@openwop/openwop-conformance 2.45.24 → 2.45.26

package/scenario-majors.json

@@ -1,9 +1,9 @@
 {
   "$comment": "GENERATED by conformance/scripts/generate-scenario-majors.mjs (RFC 0168 §D.3). Do not edit; add a file to BOTH_MAJORS in the generator to target both majors.",
   "counts": {
-    "files": 649,
+    "files": 650,
     "v1": 455,
-    "v2": 209
+    "v2": 210
   },
   "majors": {
     "a2a-1-0-agent-card.test.ts": [
@@ -1818,6 +1818,9 @@
     "v2-version-header-honored.test.ts": [
       2
     ],
+    "v2-wasm-abi-reject.test.ts": [
+      2
+    ],
     "v2-wasm-memory-cap.test.ts": [
       2
     ],

package/schemas/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.24",
-  "corpusTag": "v2.45.24",
+  "version": "2.45.26",
+  "corpusTag": "v2.45.26",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "ac6de5303872664b78ff419c035915593e01599e02835e777a0123de1baeb398",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "139cd5f7411c714ef1f207ee3284dc75633be3817d9946c1bdd998220fa79eec",
-    "api/v2/asyncapi.yaml": "e9cc564d30c8ff03da39e2c1b64fa33f2f2e627dc6afebf2fddc4262e3b0a7c5",
-    "api/v2/openapi.yaml": "15fb4ae5e02a5366b9bb60a3c9eb05f79695d1ae3669c0746bcae34cc04c77a2",
+    "api/seams-v2.yaml": "d3b59eb1f87f42ba118bdbbdfb74e6f499081d8d5ed5fba3b06d5ae561bc90bd",
+    "api/v2/asyncapi.yaml": "dc2ed7cd47e0ca326e89badc1f0b0c3a64b2030859559786c711230e5e7474f1",
+    "api/v2/openapi.yaml": "3fbb8672105a847d457e13cde09bf65b02b02163cf1082f08b3cec68088a416a",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "276fc1d51eb08e14e9127b9fd27761d7046ee33c12000f3a64a801322db8bf58",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -118,7 +118,7 @@
     "schemas/v2/audit-verify-result.schema.json": "14af8e9283510f0a40e48a2059c929ee44e0fc9fa3cc66a95bfbe90b17c48297",
     "schemas/v2/budget-policy.schema.json": "1de68095db0beb5c7a4be629de26e79f62ebbe748a88d46f36e768edfd1f0d68",
     "schemas/v2/capabilities.schema.json": "d859a413ff463ec39acc32a9cb76f2e8c7419e45683d6b7f886861765a9c36c7",
-    "schemas/v2/certification-bundle.schema.json": "ee3b10966458a10568a32b8a7eb4ab7bdb2f2d00da3ef6b698cd06462d52de40",
+    "schemas/v2/certification-bundle.schema.json": "93fcdfe54b1db168b702bfaf632b60c7a8a602be92c3fe48c81cf25408c2332b",
     "schemas/v2/channel-presence-payload.schema.json": "fc03df0c20cc12a25f7ee6a47503a4c5931d79fe3d5ff24815e8fd7c1bcb9a87",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
     "schemas/v2/chat-card-pack-manifest.schema.json": "92a57db2fd4b2463f14ef155fef8e3f18afc78960b646459dcf32efc79ff6bf5",
@@ -152,7 +152,7 @@
     "schemas/v2/goal.schema.json": "ad104ed5a3866736b8fed9d7c0b23dc82af526b5bef4afe848f01fc3af2161e9",
     "schemas/v2/heartbeat-evaluated.schema.json": "c897b0792fd518d6e12879851027252af1529f5e420c3eaf434ad7af284ecc05",
     "schemas/v2/heartbeat-state-changed.schema.json": "eb68d0082aa996650e3a6b8ccf32457f959cebc7e6728cc7c331b9d171a4bef6",
-    "schemas/v2/host-event.schema.json": "d2e2233d6464442c761ca985b0302c8350cabe2d694d3894f65d1696d80bdc98",
+    "schemas/v2/host-event.schema.json": "655b5475b1aeb41c8fc4ff7b6fc7e31a0fcc18fd59f368336ccbc138e6ba395e",
     "schemas/v2/ids.schema.json": "65cfaa193be0ca9cf48af39c18c553979e3ec1f7fc04509aaa513b322d7b7e4a",
     "schemas/v2/localized-content-language-settings.schema.json": "3c8350a178037a460f5d87466ccaf9ed5fe3d41497786d2504cc66e42152c8cc",
     "schemas/v2/localized-content-page-response.schema.json": "ef48329749758afb21e4d3cbc3f017abb911f75726819457f35b9f1390332c75",
@@ -208,14 +208,14 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "22444c22bb88c568339ef512553f9fc38146e22b566d11ab8608f655d688d19c",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "b1d32d221b43e1897cd65fc22bdac4384376fa720733be1a736dea31141eeee9",
+    "spec/v1/core-standard-manifest.json": "cd739e168fa36dd811fd9ed1f506e0716c592e7a61c0d12164f82732ca366177",
     "spec/v1/deprecations.json": "e723bc11d7272c71789ad1303bb7f21809a8a024abf57594f9d5c35dc199ece9",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/end-of-support.json": "35f0bf3b70fe78b16e2a2fd81a153fc27e703f6c16376c6fe7cdf1f4f2c4e6d4",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "ab22f506255eef90fba09585776dce09faa803207807eccbb3ea1c1a6cc80480",
+    "spec/v1/gaps.json": "a0aec8f5ddf1002d46a461a9c7d930c8f0656a19b68bb1f52d183b97cc1962cf",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "4c50760be70cb644d02427bcaf5749606700edf4513f423903cf3b1d12f5c300",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -228,10 +228,10 @@
     "spec/v2/core/connection-packs.md": "c80f95bd6a03698f35c72cdb2b46bd973f49203bbd786c26760e35fa86e6f23d",
     "spec/v2/core/conversation.md": "8d6abedf6af408a74577753bfca24719d318e2632e10b45ff5d63bdcf31a8aaa",
     "spec/v2/core/errors.md": "e48838701b86bbfe0ffee77b18a8ffc4e5f04724b4318507d9771da653f8da0f",
-    "spec/v2/core/events.md": "3eb297c1ca8a4c20017248051fbe9c5319bb51ef1ba4cb476e29840cbbe141a6",
+    "spec/v2/core/events.md": "d0f902edc080e9789e4fd05850a1264d905ebe5b06045b6a7a22486e22ef3091",
     "spec/v2/core/execution.md": "8a0c9db1bbfb97c008ab9328b7333c1cc3318196e78bfbefb49e781bdf4f9d44",
     "spec/v2/core/form-content-packs.md": "02931227899676fd4581a27017be2a6c4953904717be9b81c29d12f87ab3917d",
-    "spec/v2/core/headers.md": "18e52477898e67b0b3778d1fdd22e07bc43d561c03b501573404cd53245edef6",
+    "spec/v2/core/headers.md": "f69fe81e4a3ad21879bb85948660c16860eb05bf152928c31aa4898f6d7d1887",
     "spec/v2/core/host-services.md": "168a40935a03867ee82461b5d83d05578be25ee3e5af4eb080587b891231e242",
     "spec/v2/core/i18n.md": "882904b7d59f992ab1e5f7346167161a54cf665b8fee47e64a3862cf9133a580",
     "spec/v2/core/idempotency.md": "adbd317a6ebb57c2759c076297b31f67def9e391576bccd0bbea787b13e85872",
@@ -310,12 +310,12 @@
     "spec/v2/interop-map.schema.json": "0017c882df34ee215e2e0729de051490e09d43aac3d2c949285698ed51832f12",
     "spec/v2/migrations.json": "651954938a1e154c0b6f1e3dd6e105889d30de3bb65789f21de7f77a12869e9e",
     "spec/v2/migrations.schema.json": "b91ade6320ad1b1185c9495b9424f3aa63438ed8e412c45171c227d82c0afd86",
-    "spec/v2/path-manifest.json": "50fc251f296b06ec5fad35724f5c63b1a32e0e8fc222a85cd29b785cebdb9c98",
+    "spec/v2/path-manifest.json": "7b5679a4dad98c80d855361d88a98c8a4e045af15e310862a05b285b815dc9fc",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
-    "spec/v2/release.json": "013b562cc396f4c6f000ed977be781f6f3ace49f609ee5fae045ff57aacb53a1",
+    "spec/v2/release.json": "7ce8ba7234bfe7eff4c767cc0aa4ddea0495fae08212fe98f63ae312cab06c74",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "1bc7b1cbf33591b9e9f406d2ce2de08b306dc6986e365a29d20a78331bce7344"
+    "spec/v2/surface-baseline.json": "da9da09f5133be09b75820d138c5b4422365b2b8d113597c7fa89c99913069b3"
   },
-  "corpusCommit": "2941c09ee028be32e129b96dde8b269e2a098854"
+  "corpusCommit": "906642cfb7cea6d4be59f0471866f8ffa3e4c702"
 }

package/src/lib/host-event-witness.ts

@@ -4,7 +4,7 @@
  * self-test (`host-event-witness.test.ts`) can feed each one a defect and show
  * it convicts.
  *
- * The scenario owns the I/O (the `/host/events` stream, the emit seam, the
+ * The scenario owns the I/O (the `/host/events` stream, the RFC 0241 trigger or the emit seam, the
  * scoped webhook receiver). This file owns only "given what arrived, which
  * `events.md` §Host events / `webhooks.md` §Delivery rule failed?".
  */
@@ -30,6 +30,52 @@ export function exampleType(types: readonly AdvertisedType[], delivery: Advertis
   return types.find((t) => t.type.startsWith('example.') && t.delivery === delivery)?.type ?? null;
 }
 
+/**
+ * Any advertised type of the class, preferring the conformance `example.*` one. For a leg
+ * that only names a type and causes no event, so it runs on a host without the §G seam.
+ */
+export function advertisedTypeOf(types: readonly AdvertisedType[], delivery: AdvertisedType['delivery']): string | null {
+  return exampleType(types, delivery) ?? types.find((t) => t.delivery === delivery)?.type ?? null;
+}
+
+/** RFC 0241 §A — the reserved test types, one per delivery class. */
+export const TEST_TYPES = { durable: 'host-test.durable-triggered', ephemeral: 'host-test.ephemeral-triggered' } as const;
+
+/** The reserved test type of a class, when the host lists it (RFC 0241 §B.1: listing it binds the trigger). */
+export function testTypeListed(types: readonly AdvertisedType[], delivery: AdvertisedType['delivery']): string | null {
+  return types.some((t) => t.type === TEST_TYPES[delivery] && t.delivery === delivery) ? TEST_TYPES[delivery] : null;
+}
+
+/** How the suite causes a host event: the normative trigger when a test type is listed, else the §G seam. */
+export type Trigger = 'normative' | 'seam';
+export function triggerOf(types: readonly AdvertisedType[], seamsProfile: boolean): Trigger | null {
+  if (testTypeListed(types, 'durable') !== null || testTypeListed(types, 'ephemeral') !== null) return 'normative';
+  return seamsProfile ? 'seam' : null;
+}
+
+/**
+ * RFC 0241 §B.1–§B.2 — `emitTestHostEvent` is served exactly for the listed classes: a class whose
+ * type is not listed is refused (`404`/`405` when none is listed, `400 validation_error` otherwise),
+ * and a listed class is accepted with `202` and its reserved type.
+ */
+export function judgeTriggerBinding(types: readonly AdvertisedType[], delivery: AdvertisedType['delivery'], status: number, code: string | undefined, returnedType: unknown): Finding[] {
+  const listed = testTypeListed(types, delivery) !== null;
+  const anyListed = triggerOf(types, false) === 'normative';
+  if (listed) {
+    return [status === 202 && returnedType === TEST_TYPES[delivery]
+      ? ok(`emitTestHostEvent accepts the listed ${delivery} class`)
+      : bad(`emitTestHostEvent MUST accept the listed ${delivery} class with 202 and type ${TEST_TYPES[delivery]}; got ${status} ${String(code ?? returnedType ?? '')}`.trim())];
+  }
+  if (!anyListed) {
+    return [status === 404 || status === 405
+      ? ok('emitTestHostEvent is not served while no host-test type is listed')
+      : bad(`a host listing no host-test.* type MUST NOT serve emitTestHostEvent; got ${status}`)];
+  }
+  return [status === 400 && code === 'validation_error'
+    ? ok(`emitTestHostEvent refuses the unlisted ${delivery} class`)
+    : bad(`emitTestHostEvent MUST refuse the unlisted ${delivery} class with 400 validation_error; got ${status} ${code ?? ''}`.trim())];
+}
+
 /** The frame carrying `eventId`, parsed, or null. */
 export function frameFor(frames: readonly Frame[], eventId: string): { frame: Frame; envelope: Record<string, unknown> } | null {
   for (const frame of frames) {

package/src/lib/wasm-abi-reject-witness.ts

@@ -0,0 +1,66 @@
+/**
+ * The WASM ABI check (`spec/v2/core/node-pack-runtimes.md` §WASM: a host "MUST
+ * reject at load a pack whose `openwop_abi_version()` is not listed"; RFC 0008
+ * §H), observed through discovery and run creation against the
+ * operator-installed `vendor.openwop.misbehaving-abi` fixture pack
+ * (`conformance/fixtures/wasm-packs/misbehaving-abi/`), whose module reports
+ * ABI version 999.
+ *
+ * Loading is not a protocol operation, so the refusal is read from what it
+ * makes impossible. A host advertising `conformance-wasm-pack-abi-mismatch`
+ * says its operator offered the pack to its loader. Rejected at load, the pack
+ * is absent from `nodePackRuntimes.wasm.loadedPacks` (when advertised), and its
+ * one node never runs: the fixture's run is refused at creation or ends
+ * without that node completing.
+ *
+ * `abiRejectLeg` observes and returns findings or the reason it could not run;
+ * `judgeAbiReject` is pure. The scenario and the self-test double run the same code.
+ */
+
+import { v2Discovery } from './v2.js';
+import { majorProfile } from './major-profile.js';
+import { completionsOf, observeRun, type ObservedRun } from './fixture-run-observer.js';
+
+export const ABI_FIXTURE = 'conformance-wasm-pack-abi-mismatch';
+export const ABI_PACK = 'vendor.openwop.misbehaving-abi';
+export const ABI_NODE = 'abi';
+
+export type Skip = { readonly kind: 'skip'; readonly skip: 'blocked' | 'inapplicable'; readonly reason: string };
+export type LegOutcome = { readonly kind: 'observed'; readonly findings: string[] } | Skip;
+const skip = (s: 'blocked' | 'inapplicable', reason: string): Skip => ({ kind: 'skip', skip: s, reason });
+const isRecord = (v: unknown): v is Record<string, unknown> => typeof v === 'object' && v !== null && !Array.isArray(v);
+const TERMINAL = new Set(['completed', 'failed', 'cancelled']);
+
+/** A create the host refused on its merits, not for want of access or by its own fault. */
+const refusedAtCreate = (status: number): boolean => status >= 400 && status < 500 && status !== 401 && status !== 403 && status !== 429;
+
+/** The pack is not loaded, and its node never completes. */
+export function judgeAbiReject(loadedPacks: unknown, o: ObservedRun): string[] {
+  const out: string[] = [];
+  if (Array.isArray(loadedPacks) && loadedPacks.includes(ABI_PACK)) out.push(`nodePackRuntimes.wasm.loadedPacks MUST NOT list ${ABI_PACK}, whose openwop_abi_version() 999 no host lists; it does`);
+  if (o.createStatus === 201 || o.createStatus === 202) {
+    if (completionsOf(o.events, ABI_NODE).length > 0 || o.terminalStatus === 'completed') {
+      out.push(`the ${ABI_PACK} node ran (node.completed, run ${String(o.terminalStatus)}): a pack whose ABI version is not listed MUST be rejected at load, so its node cannot execute`);
+    } else if (o.terminalStatus === undefined || !TERMINAL.has(o.terminalStatus)) {
+      out.push(`the ${ABI_FIXTURE} run MUST be refused at creation or end without the node completing; it is still ${String(o.terminalStatus)}`);
+    }
+  } else if (!refusedAtCreate(o.createStatus)) {
+    out.push(`createRun of ${ABI_FIXTURE} answered ${o.createStatus}; a refusal of an unloaded node is a 4xx`);
+  }
+  return out;
+}
+
+/** node-pack-runtimes.md §WASM bullet 1 — `openwop.requirement.node-pack-runtimes.wasm-abi-reject`. */
+export async function abiRejectLeg(): Promise<LegOutcome> {
+  let doc: Record<string, unknown> | null = null;
+  try { doc = await v2Discovery(); } catch { doc = null; }
+  if (!doc) return skip('blocked', 'v2 discovery unreachable');
+  const fam = doc['nodePackRuntimes'];
+  const wasm = isRecord(fam) ? fam['wasm'] : undefined;
+  if (!isRecord(wasm)) return skip('inapplicable', 'the host does not advertise nodePackRuntimes.wasm');
+  const fixtures = Array.isArray(doc['fixtures']) ? (doc['fixtures'] as unknown[]) : [];
+  if (!fixtures.includes(ABI_FIXTURE)) return skip('inapplicable', `the host does not advertise ${ABI_FIXTURE}; the operator offers conformance/fixtures/wasm-packs/misbehaving-abi/ to the loader to run it`);
+  const o = await observeRun(majorProfile(2), ABI_FIXTURE, { timeoutMs: 30_000 });
+  if (o.createStatus === 401 || o.createStatus === 403 || o.createStatus === 429 || o.createStatus >= 500) return skip('blocked', `createRun of ${ABI_FIXTURE} answered ${o.createStatus}`);
+  return { kind: 'observed', findings: judgeAbiReject(wasm['loadedPacks'], o) };
+}

package/src/scenarios/frontend-plugin-packs.test.ts

@@ -5,25 +5,17 @@
  * plus the manifest shape and the `ui-plugin/1` host-RPC + version-token concurrency
  * contract.
  *
- * Two layers:
+ * The always-on schema layer (manifest and `ui-plugin/1` message shapes) reads
+ * only the corpus, so it lives in `src/coherence/frontend-plugin-schemas.test.ts`
+ * (RFC 0238 G3). What stays here reads a host:
  *
- *   A. Always-on, server-free schema probe — `frontend-plugin-manifest.schema.json`
- *      and `ui-plugin-message.schema.json` enforce the wire shape: a valid manifest /
- *      message validates; a backend `runtime` member, a `uiPlugins[]` entry missing
- *      `entry`, an out-of-allowlist `method`, and any envelope `additionalProperties`
- *      are rejected. The `version`-token concurrency contract (the `artifact_conflict`
- *      error code + `currentVersion`) is schema-pinned. No credential-bearing field is
- *      admitted on the envelope (`frontend-plugin-no-byok`).
- *
- *   B. Capability-gated behavioral leg — on a host advertising
- *      `capabilities.uiPlugins.supported: true` that exposes the
- *      `POST /v1/host/sample/ui-plugin/rpc` test seam, an undeclared-method request
- *      MUST be refused with `method_not_allowed` (`frontend-plugin-rpc-allowlist`), and
- *      a stale `artifact.write` MUST be refused with `artifact_conflict` + `currentVersion`
- *      and MUST NOT persist (§Concurrency). Hosts without the seam soft-skip (404);
- *      unadvertised hosts skip via the behavior gate. (No conformant host advertises
- *      `uiPlugins` yet — these legs soft-skip until the openwop-app reference host (ADR
- *      0153) lands, the first witness that graduates the invariants to protocol.)
+ *   - the `uiPlugins` isolation advertisement, on a host that advertises it; and
+ *   - the capability-gated host-RPC legs over the v1 test seam
+ *     `POST /v1/host/sample/ui-plugin/rpc`: an undeclared method is refused with
+ *     `method_not_allowed` (`frontend-plugin-rpc-allowlist`), and a stale
+ *     `artifact.write` is refused with `artifact_conflict` + `currentVersion` and
+ *     does not persist. Hosts without the seam soft-skip (404). The v2 witness is
+ *     `v2-ui-plugin-boundary` (RFC 0238).
  *
  * @see spec/v1/frontend-plugin-packs.md
  * @see SECURITY/invariants.yaml ids: frontend-plugin-{isolation,egress,rpc-allowlist,no-byok}
@@ -31,161 +23,12 @@
  */
 
 import { describe, it, expect } from 'vitest';
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import Ajv2020 from 'ajv/dist/2020.js';
-import addFormats from 'ajv-formats';
-import { SCHEMAS_DIR } from '../lib/paths.js';
 import { driver } from '../lib/driver.js';
 import { behaviorGate } from '../lib/behavior-gate.js';
 import { readCapabilityFamily } from '../lib/discovery-capabilities.js';
 import { req } from '../lib/requirement-ids.js';
 import { softSkip } from '../lib/soft-skip.js';
 
-const MANIFEST_SCHEMA = join(SCHEMAS_DIR, 'frontend-plugin-manifest.schema.json');
-const MESSAGE_SCHEMA = join(SCHEMAS_DIR, 'ui-plugin-message.schema.json');
-
-function validManifest(): Record<string, unknown> {
-  return {
-    name: 'vendor.acme.canvas-editor',
-    version: '1.0.0',
-    kind: 'frontend-plugin',
-    engines: { openwop: '>=1.2.0' },
-    uiPlugins: [
-      {
-        pluginId: 'app-builder',
-        surface: 'artifact-viewer',
-        entry: 'ui/app-builder.mjs',
-        hostApi: ['artifact.read', 'artifact.write'],
-      },
-    ],
-  };
-}
-
-describe('frontend-plugin manifest: schema layer (always-on, server-free)', () => {
-  const ajv = new Ajv2020({ allErrors: true, strict: false });
-  addFormats(ajv);
-  const validate = ajv.compile(JSON.parse(readFileSync(MANIFEST_SCHEMA, 'utf8')));
-
-  it('a well-formed frontend-plugin manifest validates', () => {
-    expect(
-      validate(validManifest()),
-      req('openwop.it.frontend-plugin-packs.a-well-formed-frontend-plugin-manifest-validates', 'frontend-plugin-packs.md', `frontend-plugin-packs.md §The pack — a valid manifest MUST validate. Errors: ${JSON.stringify(validate.errors)}`),
-    ).toBe(true);
-  });
-
-  it('a backend `runtime` member is rejected (a plugin is sandboxed UI, not a node entry)', () => {
-    const m = { ...validManifest(), runtime: { language: 'javascript', entry: 'index.mjs' } };
-    expect(
-      validate(m),
-      req('openwop.it.frontend-plugin-packs.a-backend-runtime-member-is-rejected-a-plugin-is-sandboxed-ui-not-a-node-entry', 'frontend-plugin-packs.md', 'node-packs.md §Pack kinds — a kind:"frontend-plugin" manifest carrying `runtime` MUST be rejected (pack_kind_invalid)'),
-    ).toBe(false);
-  });
-
-  it('a uiPlugins[] entry missing `entry` is rejected', () => {
-    const m = validManifest();
-    delete (m.uiPlugins as Array<Record<string, unknown>>)[0].entry;
-    expect(validate(m), req('openwop.it.frontend-plugin-packs.a-uiplugins-entry-missing-entry-is-rejected', 'frontend-plugin-packs.md', 'a uiPlugins[] entry missing `entry` MUST NOT validate')).toBe(false);
-  });
-
-  it('an `entry` path with `..` traversal is rejected', () => {
-    const m = validManifest();
-    (m.uiPlugins as Array<Record<string, unknown>>)[0].entry = '../escape.mjs';
-    expect(validate(m), req('openwop.it.frontend-plugin-packs.an-entry-path-with-traversal-is-rejected', 'frontend-plugin-packs.md', 'an `entry` path MUST NOT contain `..` (path-traversal)')).toBe(false);
-  });
-
-  it('a hostApi method outside the closed allowlist is rejected (frontend-plugin-rpc-allowlist)', () => {
-    const m = validManifest();
-    (m.uiPlugins as Array<Record<string, unknown>>)[0].hostApi = ['artifact.read', 'host.exec'];
-    expect(
-      validate(m),
-      req('openwop.it.frontend-plugin-packs.a-hostapi-method-outside-the-closed-allowlist-is-rejected-frontend-plugin-rpc-al', 'frontend-plugin-packs.md', 'frontend-plugin-packs.md §Host-RPC — only the closed allowlist methods are permitted; `host.exec` MUST NOT validate'),
-    ).toBe(false);
-  });
-
-  it('an empty uiPlugins[] is rejected (a pack MUST declare at least one plugin)', () => {
-    const m = { ...validManifest(), uiPlugins: [] };
-    expect(validate(m), req('openwop.it.frontend-plugin-packs.an-empty-uiplugins-is-rejected-a-pack-must-declare-at-least-one-plugin', 'frontend-plugin-packs.md', 'a frontend-plugin pack MUST declare at least one uiPlugins[] entry')).toBe(false);
-  });
-
-  it('a canvas-preview entry with canvasTypes + host.announce validates (RFC 0130)', () => {
-    const m = validManifest();
-    (m.uiPlugins as Array<Record<string, unknown>>)[0] = {
-      pluginId: 'gantt-preview',
-      surface: 'canvas-preview',
-      canvasTypes: ['canvas.gantt'],
-      entry: 'ui/preview.html',
-      hostApi: ['artifact.read', 'host.announce'],
-    };
-    expect(
-      validate(m),
-      req('openwop.it.frontend-plugin-packs.a-canvas-preview-entry-with-canvastypes-host-announce-validates-rfc-0130', 'RFC 0130', `frontend-plugin-packs.md §The pack (RFC 0130) — a canvas-preview entry MUST validate. Errors: ${JSON.stringify(validate.errors)}`),
-    ).toBe(true);
-  });
-
-  it('a surface outside the closed set is still rejected (RFC 0130 keeps the enum closed)', () => {
-    const m = validManifest();
-    (m.uiPlugins as Array<Record<string, unknown>>)[0].surface = 'omni-panel';
-    expect(
-      validate(m),
-      req('openwop.it.frontend-plugin-packs.a-surface-outside-the-closed-set-is-still-rejected-rfc-0130-keeps-the-enum-close', 'RFC 0130', 'frontend-plugin-packs.md §The pack — the surface enum stays closed; an unknown surface MUST NOT validate'),
-    ).toBe(false);
-  });
-});
-
-describe('ui-plugin/1 message: schema layer (always-on, server-free)', () => {
-  const ajv = new Ajv2020({ allErrors: true, strict: false });
-  addFormats(ajv);
-  const validate = ajv.compile(JSON.parse(readFileSync(MESSAGE_SCHEMA, 'utf8')));
-
-  it('a valid artifact.write request carrying a version token validates', () => {
-    const reqBody = {
-      openwop: 'ui-plugin/1',
-      type: 'request',
-      id: 7,
-      method: 'artifact.write',
-      params: { artifactId: 'a-1', version: 'opaque-v1', payload: {} },
-    };
-    expect(validate(reqBody), req('openwop.it.frontend-plugin-packs.a-valid-artifact-write-request-carrying-a-version-token-validates', 'frontend-plugin-packs.md', `a valid artifact.write request MUST validate. Errors: ${JSON.stringify(validate.errors)}`)).toBe(true);
-  });
-
-  it('an artifact_conflict response carries currentVersion (version-token concurrency)', () => {
-    const res = {
-      openwop: 'ui-plugin/1',
-      type: 'response',
-      id: 7,
-      ok: false,
-      error: { code: 'artifact_conflict', currentVersion: 'opaque-v2' },
-    };
-    expect(
-      validate(res),
-      req('openwop.it.frontend-plugin-packs.an-artifact-conflict-response-carries-currentversion-version-token-concurrency', 'frontend-plugin-packs.md', `frontend-plugin-packs.md §Concurrency — a stale write surfaces artifact_conflict + currentVersion. Errors: ${JSON.stringify(validate.errors)}`),
-    ).toBe(true);
-  });
-
-  it('a request with a method outside the allowlist is schema-rejected', () => {
-    const reqBody = { openwop: 'ui-plugin/1', type: 'request', id: 1, method: 'host.exec' };
-    expect(validate(reqBody), req('openwop.it.frontend-plugin-packs.a-request-with-a-method-outside-the-allowlist-is-schema-rejected', 'frontend-plugin-packs.md', 'a method outside the ui-plugin/1 allowlist MUST NOT validate')).toBe(false);
-  });
-
-  it('a message without the ui-plugin/1 protocol tag is rejected', () => {
-    const reqBody = { openwop: 'ui-plugin/2', type: 'request', id: 1, method: 'artifact.read' };
-    expect(validate(reqBody), req('openwop.it.frontend-plugin-packs.a-message-without-the-ui-plugin-1-protocol-tag-is-rejected', 'frontend-plugin-packs.md', 'a host MUST ignore messages whose ui-plugin tag it does not recognize')).toBe(false);
-  });
-
-  it('no credential-bearing field is admitted on the envelope (frontend-plugin-no-byok)', () => {
-    // additionalProperties:false on every envelope variant — a stray apiKey/token at the
-    // envelope root cannot ride the boundary.
-    for (const leak of ['apiKey', 'token', 'clientSecret', 'authorization']) {
-      const reqBody = { openwop: 'ui-plugin/1', type: 'request', id: 1, method: 'artifact.read', [leak]: 'xxx' };
-      expect(
-        validate(reqBody),
-        req('openwop.it.frontend-plugin-packs.no-credential-bearing-field-is-admitted-on-the-envelope-frontend-plugin-no-byok', 'frontend-plugin-packs.md', `frontend-plugin-no-byok — a credential-named envelope field ("${leak}") MUST NOT validate (additionalProperties:false)`),
-      ).toBe(false);
-    }
-  });
-});
-
 describe('frontend-plugin: isolation advertisement (always-on, capability shape)', () => {
   // RFC 0119: `isolation` is a categorical model, not a single browser const. A conformant host
   // advertises a member of the enum (cross-origin-iframe default) or an x-host-* vendor model —