@openwop/openwop 1.8.0 → 2.0.0

package/src/cost-attribution.ts

@@ -1,6 +1,6 @@
 /**
  * Cost-attribution allowlist + sanitizer helpers
- * (`spec/v1/observability.md §"Cost attribution attributes"`).
+ * (`spec/v2/core/observability.md §"Cost attribution attributes"`).
  *
  * The spec MUSTs that hosts emitting `openwop.cost.*` OTel span attrs
  * route them through an allowlist sanitizer that drops any attribute
@@ -18,7 +18,7 @@
  * eighth attribute, one PR updates the constant and both surfaces
  * pick it up.
  *
- * @see spec/v1/observability.md §"Cost attribution attributes"
+ * @see spec/v2/core/observability.md §"Cost attribution attributes"
  * @see SECURITY/invariants.yaml row `cost-attribution-allowlist-redaction`
  * @see conformance/src/scenarios/cost-attribution.test.ts
  */

package/src/envelope-directive.ts

@@ -26,7 +26,7 @@
  * active model class confirms `"mandatory"` doesn't trigger refusals.
  *
  * @see RFCS/0030-envelope-reasoning-and-tier-one-subset.md §A
- * @see spec/v1/ai-envelope.md §"Reasoning field (normative)"
+ * @see spec/v2/core/ai-envelope.md §"Reasoning field (normative)"
  */
 
 /**

package/src/event-helpers.ts

@@ -367,7 +367,7 @@ export function subscribeToAgentReasoning(
   void (async () => {
     try {
       // streamModes default to 'updates' — agent.* events flow there
-      // per `spec/v1/stream-modes.md`.
+      // per `spec/v2/core/stream-modes.md`.
       const events = streamEvents(ctx, runId, {
         ...options,
         streamMode: options.streamMode ?? 'updates',

package/src/generated.ts

@@ -0,0 +1,322 @@
+// GENERATED by scripts/generate.mjs — do not edit.
+//
+// Sources: spec/v2/errors.json (registry version 2.0, updated 2026-09-05,
+// 97 codes) and schemas/v2/capabilities.schema.json (71 families,
+// 17 metadata keys), both vendored at CORPUS_TAG.
+// `npm run generate` rewrites this file; `npm run generate:check` fails on drift.
+
+/** Every registered v2 error code (`spec/v2/errors.json`), sorted. */
+export const ERROR_CODES = [
+  'audience_mismatch',
+  'capability_not_provided',
+  'capability_required',
+  'client_version_unsupported',
+  'connection_provider_conflict',
+  'connection_provider_unresolved',
+  'connector_action_unresolved',
+  'connector_auth_expired',
+  'credential_forbidden',
+  'credential_not_found',
+  'credential_required',
+  'credential_revoked',
+  'credential_scope_unsupported',
+  'credential_unavailable',
+  'delegation_chain_cyclic',
+  'delegation_chain_too_long',
+  'delegation_expired',
+  'delegation_scope_amplified',
+  'envelope_correlation_conflict',
+  'envelope_invalid',
+  'envelope_refusal',
+  'envelope_truncation_unrecoverable',
+  'event_type_unmapped',
+  'forbidden',
+  'force_engine_version_forbidden',
+  'fork_point_invalid',
+  'id_tenant_mismatch',
+  'idempotency_in_flight',
+  'idempotency_key_invalid',
+  'idempotency_key_mismatch',
+  'identity_unresolvable',
+  'identity_unverified',
+  'internal_error',
+  'interop_version_unsupported',
+  'interrupt_already_resolved',
+  'interrupt_cancelled',
+  'interrupt_expired',
+  'interrupt_not_found',
+  'interrupt_token_invalid',
+  'key_revoked',
+  'loop_limit_exceeded',
+  'mcp_mrtr_rounds_exceeded',
+  'mock_provider_forbidden',
+  'not_found',
+  'oauth_provider_unsupported',
+  'oauth_scope_unsupported',
+  'pack_dependency_conflict',
+  'pack_dependency_cycle',
+  'pack_engine_unsupported',
+  'pack_integrity_failure',
+  'pack_integrity_mismatch',
+  'pack_kind_invalid',
+  'pack_load_failure',
+  'pack_lockfile_incomplete',
+  'pack_namespace_unauthorized',
+  'pack_peer_dependency_missing',
+  'pack_peer_dependency_undefined',
+  'pack_registry_unreachable',
+  'pack_runtime_requirement_unmet',
+  'pack_signature_invalid',
+  'pack_validation_failed',
+  'pack_version_not_found',
+  'payload_too_large',
+  'protocol_version_mismatch',
+  'protocol_version_unsupported',
+  'rate_limited',
+  'recursion_limit_exceeded',
+  'replay_diverged_at_refusal',
+  'replay_memory_snapshot_unavailable',
+  'replay_source_missing',
+  'residency_unavailable',
+  'run_already_active',
+  'run_forbidden',
+  'run_state_conflict',
+  'run_terminal',
+  'run_timeout',
+  'runner_unavailable',
+  'sandbox_capability_denied',
+  'sandbox_escape_attempt',
+  'sandbox_memory_exceeded',
+  'sandbox_timeout',
+  'schedule_horizon_exceeded',
+  'sender_constraint_missing',
+  'signature_not_available',
+  'sub_chain_cycle',
+  'sub_chain_depth_exceeded',
+  'token_budget_exceeded',
+  'unauthenticated',
+  'unsupported_media_type',
+  'unsupported_stream_mode',
+  'until_in_past',
+  'validation_error',
+  'version_conflict',
+  'webhook_url_rejected',
+  'workspace_conflict',
+  'workspace_membership_required',
+  'workspace_too_large',
+] as const;
+
+/** A registered protocol error code. A vendor code is `<org>.<name>` (see {@link VENDOR_ERROR_CODE_PATTERN}). */
+export type ErrorCode = (typeof ERROR_CODES)[number];
+
+/** The registered HTTP status for each code (RFC 0171 §B.1 — a host MUST answer with it). */
+export const ERROR_CODE_HTTP_STATUS: Readonly<Record<ErrorCode, number>> = {
+  'audience_mismatch': 401,
+  'capability_not_provided': 422,
+  'capability_required': 422,
+  'client_version_unsupported': 426,
+  'connection_provider_conflict': 409,
+  'connection_provider_unresolved': 400,
+  'connector_action_unresolved': 400,
+  'connector_auth_expired': 401,
+  'credential_forbidden': 403,
+  'credential_not_found': 404,
+  'credential_required': 422,
+  'credential_revoked': 401,
+  'credential_scope_unsupported': 400,
+  'credential_unavailable': 501,
+  'delegation_chain_cyclic': 400,
+  'delegation_chain_too_long': 400,
+  'delegation_expired': 401,
+  'delegation_scope_amplified': 403,
+  'envelope_correlation_conflict': 409,
+  'envelope_invalid': 422,
+  'envelope_refusal': 422,
+  'envelope_truncation_unrecoverable': 422,
+  'event_type_unmapped': 500,
+  'forbidden': 403,
+  'force_engine_version_forbidden': 403,
+  'fork_point_invalid': 422,
+  'id_tenant_mismatch': 403,
+  'idempotency_in_flight': 409,
+  'idempotency_key_invalid': 400,
+  'idempotency_key_mismatch': 409,
+  'identity_unresolvable': 401,
+  'identity_unverified': 401,
+  'internal_error': 500,
+  'interop_version_unsupported': 400,
+  'interrupt_already_resolved': 409,
+  'interrupt_cancelled': 410,
+  'interrupt_expired': 410,
+  'interrupt_not_found': 404,
+  'interrupt_token_invalid': 401,
+  'key_revoked': 401,
+  'loop_limit_exceeded': 422,
+  'mcp_mrtr_rounds_exceeded': 422,
+  'mock_provider_forbidden': 403,
+  'not_found': 404,
+  'oauth_provider_unsupported': 400,
+  'oauth_scope_unsupported': 400,
+  'pack_dependency_conflict': 409,
+  'pack_dependency_cycle': 400,
+  'pack_engine_unsupported': 400,
+  'pack_integrity_failure': 400,
+  'pack_integrity_mismatch': 409,
+  'pack_kind_invalid': 400,
+  'pack_load_failure': 500,
+  'pack_lockfile_incomplete': 400,
+  'pack_namespace_unauthorized': 403,
+  'pack_peer_dependency_missing': 400,
+  'pack_peer_dependency_undefined': 400,
+  'pack_registry_unreachable': 503,
+  'pack_runtime_requirement_unmet': 422,
+  'pack_signature_invalid': 400,
+  'pack_validation_failed': 400,
+  'pack_version_not_found': 404,
+  'payload_too_large': 413,
+  'protocol_version_mismatch': 400,
+  'protocol_version_unsupported': 406,
+  'rate_limited': 429,
+  'recursion_limit_exceeded': 422,
+  'replay_diverged_at_refusal': 409,
+  'replay_memory_snapshot_unavailable': 409,
+  'replay_source_missing': 404,
+  'residency_unavailable': 422,
+  'run_already_active': 409,
+  'run_forbidden': 403,
+  'run_state_conflict': 409,
+  'run_terminal': 409,
+  'run_timeout': 422,
+  'runner_unavailable': 503,
+  'sandbox_capability_denied': 403,
+  'sandbox_escape_attempt': 403,
+  'sandbox_memory_exceeded': 422,
+  'sandbox_timeout': 422,
+  'schedule_horizon_exceeded': 400,
+  'sender_constraint_missing': 401,
+  'signature_not_available': 404,
+  'sub_chain_cycle': 400,
+  'sub_chain_depth_exceeded': 400,
+  'token_budget_exceeded': 422,
+  'unauthenticated': 401,
+  'unsupported_media_type': 415,
+  'unsupported_stream_mode': 400,
+  'until_in_past': 400,
+  'validation_error': 400,
+  'version_conflict': 409,
+  'webhook_url_rejected': 400,
+  'workspace_conflict': 409,
+  'workspace_membership_required': 403,
+  'workspace_too_large': 413,
+};
+
+/** The codes registered `retriable: true`; retry timing lives in `Retry-After` only (RFC 0171 §B.2). */
+export const RETRIABLE_ERROR_CODES = [
+  'internal_error',
+  'pack_registry_unreachable',
+  'rate_limited',
+  'residency_unavailable',
+  'runner_unavailable',
+] as const;
+
+/** Grammar of a vendor error code: `<org>.<name>`, `openwop.` reserved (`spec/v2/errors.json` `vendorCodePattern`). */
+export const VENDOR_ERROR_CODE_PATTERN = /^(?!openwop\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\.[a-z][a-z0-9_]*$/;
+
+/** Root metadata keys of the closed v2 discovery document (capabilities.md §3.1). */
+export const CAPABILITY_METADATA_KEYS = [
+  'compliance',
+  'configurable',
+  'conformance',
+  'discovery',
+  'engineVersion',
+  'eventLogSchemaVersion',
+  'extensions',
+  'fixtures',
+  'implementation',
+  'minClientVersion',
+  'observability',
+  'preferredVersion',
+  'protocolVersion',
+  'protocolVersions',
+  'runtimeCapabilities',
+  'signingKeys',
+  'testing',
+] as const;
+
+/** Root capability-record keys of the closed v2 discovery document (capabilities.md §5–§6). */
+export const CAPABILITY_FAMILY_KEYS = [
+  'a2a',
+  'agentRuntime',
+  'agents',
+  'aiEnvelope',
+  'aiProviders',
+  'anonymousActor',
+  'artifactTypes',
+  'auth',
+  'authorization',
+  'blobStorage',
+  'budget',
+  'cache',
+  'channelPresence',
+  'compensation',
+  'connections',
+  'content',
+  'conversationPrimitive',
+  'conversationTurnModelProvenance',
+  'credentials',
+  'dataResidency',
+  'deadLetter',
+  'envelopeContracts',
+  'envelopeStrictness',
+  'envelopes',
+  'eventLog',
+  'feedback',
+  'forms',
+  'fs',
+  'heartbeat',
+  'httpClient',
+  'i18n',
+  'idempotency',
+  'interrupt',
+  'kvStorage',
+  'limits',
+  'mcp',
+  'memory',
+  'modelCapabilities',
+  'multiAgent',
+  'multiPartyConversation',
+  'nodePackRuntimes',
+  'nondeterminismPolicy',
+  'nosql',
+  'oauth',
+  'packs',
+  'portability',
+  'production',
+  'promptLibrary',
+  'prompts',
+  'providerUsage',
+  'purposePropagation',
+  'queueBus',
+  'replay',
+  'sandbox',
+  'scheduling',
+  'schemaVersions',
+  'searchIndex',
+  'secrets',
+  'selfHostedRunner',
+  'sql',
+  'subWorkflow',
+  'supportedEnvelopes',
+  'tableStorage',
+  'toolCatalog',
+  'toolHooks',
+  'triggerBridge',
+  'uiPlugins',
+  'vectorStore',
+  'webhooks',
+  'workflowChainPacks',
+  'workspace',
+] as const;
+
+export type CapabilityMetadataKey = (typeof CAPABILITY_METADATA_KEYS)[number];
+export type CapabilityFamilyKey = (typeof CAPABILITY_FAMILY_KEYS)[number];

package/src/index.ts

@@ -1,16 +1,17 @@
 /**
- * @openwop/openwop — TypeScript reference SDK for OpenWOP-compliant servers.
+ * @openwop/openwop 2.x — TypeScript reference SDK for OpenWOP v2 hosts.
  *
  * Public surface:
- *   - OpenwopClient (auth + endpoint methods)
- *   - WopError (typed error wrapping ErrorEnvelope)
- *   - All request/response types mirroring the OpenAPI spec
- *   - streamEvents helper for advanced SSE use cases
+ *   - OpenwopClient (auth + one method per `spec/v2/path-manifest.json` operation)
+ *   - WopError (typed error wrapping the v2 ErrorEnvelope)
+ *   - Generated ERROR_CODES / ErrorCode + capability-key unions (`generated.ts`)
+ *   - All request/response types mirroring `api/v2/openapi.yaml` + `schemas/v2/`
+ *   - streamEvents / streamHostEvents SSE helpers
  *
  * See README.md for usage examples.
  */
 
-export { OpenwopClient } from './client.js';
+export { OpenwopClient, SDK_PROTOCOL_MAJOR, protocolVersionHeader } from './client.js';
 export type { OpenwopClientOptions, MutationOptions } from './client.js';
 export { WopError } from './types.js';
 export type {
@@ -20,20 +21,20 @@ export type {
   BulkCancelRunResult,
   BulkCancelRunsRequest,
   BulkCancelRunsResponse,
+  // The closed v2 discovery root (capabilities.md)
   Capabilities,
-  // RFC 0007 + RFC 0118 — top-level dispatch fan-out/join capability
-  DispatchCapability,
-  // RFC 0117 + RFC 0119 — front-end plugin packs capability
-  UiPluginsCapability,
+  CapabilityRecord,
+  CapabilityStatus,
+  WitnessClass,
+  ProtocolVersion,
   CancelRunRequest,
   CancelRunResponse,
   CreateRunRequest,
   CreateRunResponse,
   ErrorEnvelope,
+  VendorErrorCode,
   ForkRunRequest,
   ForkRunResponse,
-  DebugBundle,
-  DebugBundleOptions,
   RegisterWebhookRequest,
   RegisterWebhookResponse,
   InterruptByTokenInspection,
@@ -49,14 +50,20 @@ export type {
   RunDiffEventDiff,
   RunDiffResponse,
   RunEventDoc,
+  RunOwner,
   RunSnapshot,
   RunStatus,
   CompensationStatus,
   StreamMode,
   TypedRunEvent,
-  // RFC 0059 — agent workspace (spec/v1/agent-workspace.md)
-  WorkspaceFile,
-  PutWorkspaceFileRequest,
+  // RFC 0173 — compensation / effect ledger / effect seams
+  CompensationProjection,
+  EffectLedgerProjection,
+  EffectSeamManifest,
+  // `/host/events` channel
+  HostEventDoc,
+  HeartbeatEvaluatedPayload,
+  HeartbeatStateChangedPayload,
   AgentReasonedPayload,
   AgentReasoningDeltaPayload,
   AgentToolCalledPayload,
@@ -64,9 +71,7 @@ export type {
   AgentHandoffPayload,
   AgentDecidedPayload,
   MemoryWrittenPayload,
-  // RFC 0094 §D — streaming output chunk (`output.chunk` / `ai.message.chunk`)
   OutputChunkPayload,
-  // RFC 0106 — voice.* run-event payloads
   VoiceSpeechStartPayload,
   VoiceTranscriptPayload,
   VoiceEndpointCandidatePayload,
@@ -74,14 +79,11 @@ export type {
   VoiceSynthesisChunkPayload,
   VoiceBargeInPayload,
   VoiceCancelledPayload,
-  // RFC 0110 — channel.presence run-event payload
   ChannelPresencePayload,
-  // RFC 0118 — core.dispatch.fanOut / core.dispatch.join run-event payloads
   DispatchFanOutPayload,
   DispatchJoinPayload,
-  // RFC 0111 — context.summarized run-event payload
   ContextSummarizedPayload,
-  // RFC 0027 + RFC 0028 — Prompt library (spec/v1/prompts.md)
+  // RFC 0027 + RFC 0028 — Prompt library
   GetPromptRequest,
   ListPromptsRequest,
   ListPromptsResponse,
@@ -91,42 +93,52 @@ export type {
   PromptVariable,
   RenderPromptRequest,
   RenderPromptResponse,
-  // RFC 0072 §A — Manifest-agent inventory (GET /v1/agents).
-  // Consumed by the workflow-engine sample app's Agents tab + chat
-  // `@` mention picker (2026-05-28 mention-symbol swap).
+  // RFC 0072 §A — Manifest-agent inventory
   AgentInventoryEntry,
   AgentInventoryResponse,
-  // RFC 0081 — Agent evaluation (spec/v1/agent-evaluation.md). EvalSummary
-  // scorecard read via `client.runs.evalSummary(runId)` for a `mode:'eval'` run.
+  AgentRef,
+  // RFC 0081 — Agent evaluation
   AgentModelClass,
   EvalSafetyFinding,
   EvalTaskResult,
   EvalRegression,
   EvalSummary,
-  // RFC 0078 — Portable tool catalog (spec/v1/tool-catalog.md).
-  // `client.tools.list` / `client.tools.get`.
+  // RFC 0078 — Portable tool catalog
   ToolDescriptor,
-  // RFC 0082 — Agent deployment lifecycle (spec/v1/agent-deployment.md).
-  // `client.agents.listDeployments` / `transitionDeployment`.
+  CompactToolDescriptor,
+  // RFC 0082 — Agent deployment lifecycle
   DeploymentState,
   AgentDeployment,
   AgentDeploymentTransition,
-  // Sample-extension surface — user-authored agents
-  // (`POST /v1/host/sample/agents`) + agent-pack registry browser
-  // (`GET/POST /v1/host/sample/registry/agent-packs`). Non-normative;
-  // wraps host-extension routes the sample app authors against.
-  CreateUserAgentRequest,
-  UserAgentRecord,
-  AgentPackSummary,
-  AgentPackRegistryResponse,
-  InstallAgentPackRequest,
-  InstallAgentPackResponse,
+  // RFC 0086 / 0087 — roster + org chart
+  AgentRosterEntry,
+  AgentRosterResponse,
+  AgentOrgChart,
+  OrgChartDepartment,
+  OrgChartMember,
+  OrgChartResponsibilityView,
+  // RFC 0056 — annotations
+  Annotation,
+  AnnotationSignal,
+  CreateAnnotationRequest,
+  RunAncestryResponse,
 } from './types.js';
-export { streamEvents } from './sse.js';
-export type { EventsStreamContext, EventsStreamOptions } from './sse.js';
+export { streamEvents, streamHostEvents } from './sse.js';
+export type { EventsStreamContext, EventsStreamOptions, HostEventsStreamOptions } from './sse.js';
 
-// RFC 0002 + RFC 0024 typed event helpers — type guards over `RunEventDoc`
-// plus a high-level streaming-reasoning subscription helper.
+// Generated from spec/v2/errors.json + schemas/v2/capabilities.schema.json.
+export {
+  ERROR_CODES,
+  ERROR_CODE_HTTP_STATUS,
+  RETRIABLE_ERROR_CODES,
+  VENDOR_ERROR_CODE_PATTERN,
+  CAPABILITY_FAMILY_KEYS,
+  CAPABILITY_METADATA_KEYS,
+} from './generated.js';
+export type { ErrorCode, CapabilityFamilyKey, CapabilityMetadataKey } from './generated.js';
+
+// Typed event helpers — type guards over `RunEventDoc` plus a high-level
+// streaming-reasoning subscription helper.
 export {
   isAgentReasoned,
   isAgentReasoningDelta,
@@ -154,15 +166,18 @@ export type {
   Unsubscribe,
 } from './event-helpers.js';
 
-// Run-status + run-error helpers (added in 1). Forward-compat predicates
-// over the wire-format unions declared above; full design + rationale in
-// `run-helpers.ts`.
+// Run-status + error-code helpers. `HTTP_ERROR_CODES` is the generated
+// registry; `isErrorCode` narrows to it, `isRetriableErrorCode` to the
+// `retriable: true` rows.
 export {
   ACTIVE_RUN_STATUSES,
   TERMINAL_RUN_STATUSES,
   isTerminalRunStatus,
   HTTP_ERROR_CODES,
   isHttpErrorCode,
+  isErrorCode,
+  isRetriableErrorCode,
+  isVendorErrorCode,
   RUN_ERROR_CODES,
   isRunErrorCode,
 } from './run-helpers.js';
@@ -174,56 +189,26 @@ export type {
   RunError,
 } from './run-helpers.js';
 
-// Cost-attribution allowlist + sanitizer helpers
-// (`spec/v1/observability.md §"Cost attribution attributes"`). Single
-// source of truth for the canonical attribute names so independent
-// hosts share one list instead of each re-deriving it.
+// Cost-attribution allowlist + sanitizer helpers.
 export {
   OPENWOP_COST_ATTRIBUTE_NAMES,
   sanitizeCostAttributes,
 } from './cost-attribution.js';
 export type { OpenwopCostAttributeName } from './cost-attribution.js';
 
-// Webhook-delivery verification helpers (SDK-3 close-out 2026-05-15).
-// HMAC-SHA256 + timestamp freshness window verification per
-// spec/v1/webhooks.md §"Signature recipe". Receivers MUST verify both
-// the HMAC AND the timestamp to defeat replay attacks.
-//
-// DEPRECATED ON THE BARREL (openwop-sdks#30). These re-exports are why a
-// browser consumer importing anything at all from `@openwop/openwop` dragged
-// in `node:crypto` and failed the build. Import them from
-// `@openwop/openwop/webhooks` instead; the barrel re-export is retained for
-// compatibility and will be removed in the next major.
-//
-// Until then the `browser` field in package.json substitutes a stub that
-// throws with an explanatory message, so a browser build succeeds and only a
-// browser CALL fails — which is the correct outcome either way, since the
-// subscription secret must never reach a browser.
-/** @deprecated Import from `@openwop/openwop/webhooks` — server-only; removed from the barrel in the next major. */
+// Webhook verification is server-only (`node:crypto`) and lives on the
+// `@openwop/openwop/webhooks` subpath — it is no longer re-exported from the
+// barrel (the 1.x deprecation, removed in this major). The browser-safe
+// header-family readers stay here.
 export {
-  DEFAULT_WEBHOOK_FRESHNESS_WINDOW_SECONDS,
-  verifyWebhookSignature,
-  signWebhookDelivery,
-} from './webhook-helpers.js';
-export type {
-  VerifyWebhookSignatureOptions,
-  VerifyWebhookOutcome,
-} from './webhook-helpers.js';
-
-// Public-registry read helpers (SDK-5 close-out 2026-05-15). Read-only
-// typed client for the public node-pack registry at packs.openwop.dev
-// per spec/v1/registry-operations.md.
-export { RegistryClient } from './registry-helpers.js';
-export type {
-  RegistryClientOptions,
-  RegistryDiscovery,
-  RegistryIndex,
-  RegistryIndexEntry,
-  RegistryPackMetadata,
-  RegistryVersionManifest,
-} from './registry-helpers.js';
+  WEBHOOK_HEADER_FAMILIES,
+  WEBHOOK_SIGNATURE_ALGORITHMS,
+  parseSignatureValue,
+  readWebhookHeaders,
+} from './webhook-header-families.js';
+export type { WebhookHeaderRead, WebhookSignatureAlgorithm } from './webhook-header-families.js';
 
-// AI Envelope types (DRAFT v1.x — spec/v1/ai-envelope.md). Inbound LLM-emission
+// AI Envelope types (events.md §AI envelopes). Inbound LLM-emission
 // envelope, distinct from RunEventDoc (outbound) and ErrorEnvelope (host HTTP).
 export type {
   A2UISurfacePayload,
@@ -234,7 +219,6 @@ export type {
   ClarificationRequestPayload,
   EnvelopeContract,
   EnvelopeContractRefusal,
-  EnvelopeContractsCapability,
   EnvelopeMeta,
   EnvelopeOutcome,
   EnvelopeStrictness,
@@ -255,23 +239,12 @@ export type {
   CreateTriggerSubscriptionResponse,
 } from './types.js';
 
-// RFC 0030 §A `reasoning` field prompt-directive helper. Hosts that
-// advertise `capabilities.envelopes.reasoning.supported: true` use this
-// to synthesize the system-prompt fragment that instructs the model to
-// populate the OPTIONAL `reasoning` field. See `envelope-directive.ts`
-// for the operational note on `"mandatory"` strength (provider-side
-// refusal risk per the 2026-05-21 RFC 0030 amendment).
+// RFC 0030 §A `reasoning` field prompt-directive helper.
 export { buildReasoningDirective } from './envelope-directive.js';
 export type { ReasoningDirectiveStrength } from './envelope-directive.js';
 
-// RFC 0032 §B.3 + RFC 0033 §D refusal detection helper. Normalizes
-// per-provider safety-stop signals (Anthropic `stop_reason: "refusal"`,
-// OpenAI `message.refusal` + `finish_reason: "content_filter"`, Gemini
-// `finishReason: "SAFETY"` + `promptFeedback.blockReason: "SAFETY"`)
-// to a canonical `{ refusalText, safetyCategory?, provider }` shape.
-// Hosts route the non-null return through `envelope.refusal` emission
-// + the `envelope_refusal` terminal error code (RFC 0033 §F).
-// **SECURITY:** Pass `refusalText` through the BYOK redaction harness
-// BEFORE persistence — this helper does NOT redact.
+// RFC 0032 §B.3 + RFC 0033 §D refusal detection helper. **SECURITY:** pass
+// `refusalText` through the BYOK redaction harness BEFORE persistence — this
+// helper does NOT redact.
 export { parseRefusal } from './parse-refusal.js';
 export type { RefusalProvider, RefusalSignal } from './parse-refusal.js';