@openwop/spec-artifacts 2.0.0-rc.0

package/schemas/v2/envelopes/ui.a2ui-surface.schema.json

@@ -0,0 +1,292 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v2/envelopes/ui.a2ui-surface.schema.json",
+  "title": "UiA2uiSurfacePayload",
+  "description": "Payload for the OPTIONAL, advertised `ui.a2ui-surface` AI Envelope kind (RFC 0102). Carries a declarative A2UI interface surface — a closed component tree the consumer renders with native widgets, routing user actions back to the producing agent WITHOUT executing any agent-supplied code. `ui.*` is a core, un-namespaced content-primitive family beside `media.*` (ai-envelope.md §\"A2UI surfaces\" / §\"Vendor-namespaced kinds\"). Not one of the four MUST-recognize universal kinds; an unrecognizing consumer falls back to store-without-render.",
+  "type": "object",
+  "required": [
+    "catalogVersion",
+    "surface"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "reasoning": {
+      "type": "string",
+      "description": "OPTIONAL per RFC 0030 §A — the model's reasoning, conventionally the first property of a kind whose payload benefits from multi-step composition."
+    },
+    "catalogVersion": {
+      "type": "string",
+      "enum": [
+        "0.9.1"
+      ],
+      "description": "REQUIRED — the A2UI catalog version the surface targets. This enum IS the host's supported-version set (ai-envelope.md §\"A2UI surfaces\"); it is never a free string the producer invents. A consumer MUST refuse an unknown/higher version with `unknown_schema_version`. Pinning the version in the payload keeps `:fork`/replay deterministic after the external A2UI standard ships a breaking version."
+    },
+    "surface": {
+      "$ref": "#/$defs/surface",
+      "description": "REQUIRED — the A2UI surface document: a closed component tree (ai-envelope.md §\"A2UI surfaces\"). Self-contained: renderable from the payload alone, never a live reference into an external catalog."
+    }
+  },
+  "$defs": {
+    "surface": {
+      "type": "object",
+      "required": [
+        "components"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "title": {
+          "type": "string",
+          "description": "OPTIONAL display title for the surface."
+        },
+        "components": {
+          "type": "array",
+          "description": "The flat, ordered component list. Each element is one of the host's day-1 catalog components, discriminated by the single-string-enum `component` field. `anyOf` (not `oneOf`) per ai-envelope.md §\"Schema discipline\".",
+          "items": {
+            "$ref": "#/$defs/component"
+          }
+        }
+      }
+    },
+    "component": {
+      "description": "A single A2UI component. Closed set (day-1 catalog 0.9.1); the `component` discriminator is a single-string-enum per branch.",
+      "anyOf": [
+        {
+          "$ref": "#/$defs/heading"
+        },
+        {
+          "$ref": "#/$defs/text"
+        },
+        {
+          "$ref": "#/$defs/fieldText"
+        },
+        {
+          "$ref": "#/$defs/fieldDate"
+        },
+        {
+          "$ref": "#/$defs/fieldSelect"
+        },
+        {
+          "$ref": "#/$defs/fieldCheckbox"
+        },
+        {
+          "$ref": "#/$defs/actionButton"
+        }
+      ]
+    },
+    "heading": {
+      "type": "object",
+      "required": [
+        "component",
+        "text"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "component": {
+          "type": "string",
+          "enum": [
+            "heading"
+          ]
+        },
+        "text": {
+          "type": "string"
+        },
+        "level": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 6
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "required": [
+        "component",
+        "text"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "component": {
+          "type": "string",
+          "enum": [
+            "text"
+          ]
+        },
+        "text": {
+          "type": "string"
+        }
+      }
+    },
+    "fieldText": {
+      "type": "object",
+      "required": [
+        "component",
+        "id",
+        "label"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "component": {
+          "type": "string",
+          "enum": [
+            "field.text"
+          ]
+        },
+        "id": {
+          "type": "string",
+          "description": "Binding key; the collected value is keyed by `id` in the resume value."
+        },
+        "label": {
+          "type": "string"
+        },
+        "placeholder": {
+          "type": "string"
+        },
+        "required": {
+          "type": "boolean"
+        }
+      }
+    },
+    "fieldDate": {
+      "type": "object",
+      "required": [
+        "component",
+        "id",
+        "label"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "component": {
+          "type": "string",
+          "enum": [
+            "field.date"
+          ]
+        },
+        "id": {
+          "type": "string"
+        },
+        "label": {
+          "type": "string"
+        },
+        "required": {
+          "type": "boolean"
+        }
+      }
+    },
+    "fieldSelect": {
+      "type": "object",
+      "required": [
+        "component",
+        "id",
+        "label",
+        "options"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "component": {
+          "type": "string",
+          "enum": [
+            "field.select"
+          ]
+        },
+        "id": {
+          "type": "string"
+        },
+        "label": {
+          "type": "string"
+        },
+        "required": {
+          "type": "boolean"
+        },
+        "options": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "required": [
+              "value",
+              "label"
+            ],
+            "additionalProperties": false,
+            "properties": {
+              "value": {
+                "type": "string"
+              },
+              "label": {
+                "type": "string"
+              }
+            }
+          }
+        }
+      }
+    },
+    "fieldCheckbox": {
+      "type": "object",
+      "required": [
+        "component",
+        "id",
+        "label"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "component": {
+          "type": "string",
+          "enum": [
+            "field.checkbox"
+          ]
+        },
+        "id": {
+          "type": "string"
+        },
+        "label": {
+          "type": "string"
+        },
+        "default": {
+          "type": "boolean"
+        }
+      }
+    },
+    "actionButton": {
+      "type": "object",
+      "required": [
+        "component",
+        "id",
+        "label",
+        "action"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "component": {
+          "type": "string",
+          "enum": [
+            "action.button"
+          ]
+        },
+        "id": {
+          "type": "string"
+        },
+        "label": {
+          "type": "string"
+        },
+        "action": {
+          "type": "object",
+          "required": [
+            "target"
+          ],
+          "additionalProperties": false,
+          "description": "Confined action (ai-envelope.md §\"A2UI surfaces\" rule 2). `target` resolves to exactly one host-allowlisted destination — a run interrupt resume or a conversation exchange — never an arbitrary URL, endpoint, or network egress. Enforced by the `a2ui-action-confinement` + `a2ui-surface-no-network-egress` SECURITY invariants.",
+          "properties": {
+            "target": {
+              "type": "string",
+              "enum": [
+                "resume",
+                "exchange"
+              ],
+              "description": "`resume` → the collected field values become the interrupt `resumeValue` (interrupt.md). `exchange` → the values become a conversation exchange message (RFC 0005)."
+            }
+          }
+        }
+      }
+    }
+  },
+  "x-openwop-seeded-from": "v1"
+}

package/schemas/v2/error-envelope.schema.json

@@ -0,0 +1,229 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v2/error-envelope.schema.json",
+  "title": "ErrorEnvelope (v2)",
+  "description": "GENERATED from spec/v2/errors.json by scripts/generate-error-envelope.mjs (RFC 0171 §B.1). 92 registered codes; vendor codes match ^(?!openwop\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9_]*$. Consumers MUST accept an unknown registered member and MUST NOT act on it (RFC 0171 §A.5).",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "error",
+    "message"
+  ],
+  "properties": {
+    "error": {
+      "oneOf": [
+        {
+          "type": "string",
+          "enum": [
+            "audience_mismatch",
+            "capability_not_provided",
+            "capability_required",
+            "client_version_unsupported",
+            "connection_provider_conflict",
+            "connection_provider_unresolved",
+            "connector_action_unresolved",
+            "connector_auth_expired",
+            "credential_forbidden",
+            "credential_not_found",
+            "credential_required",
+            "credential_revoked",
+            "credential_scope_unsupported",
+            "credential_unavailable",
+            "delegation_chain_cyclic",
+            "delegation_chain_too_long",
+            "delegation_expired",
+            "delegation_scope_amplified",
+            "envelope_correlation_conflict",
+            "envelope_invalid",
+            "envelope_refusal",
+            "envelope_truncation_unrecoverable",
+            "event_type_unmapped",
+            "forbidden",
+            "force_engine_version_forbidden",
+            "id_tenant_mismatch",
+            "idempotency_in_flight",
+            "idempotency_key_invalid",
+            "idempotency_key_mismatch",
+            "identity_unresolvable",
+            "identity_unverified",
+            "internal_error",
+            "interop_version_unsupported",
+            "interrupt_already_resolved",
+            "interrupt_cancelled",
+            "interrupt_expired",
+            "interrupt_not_found",
+            "interrupt_token_invalid",
+            "key_revoked",
+            "loop_limit_exceeded",
+            "mcp_mrtr_rounds_exceeded",
+            "mock_provider_forbidden",
+            "not_found",
+            "oauth_provider_unsupported",
+            "oauth_scope_unsupported",
+            "pack_dependency_conflict",
+            "pack_dependency_cycle",
+            "pack_engine_unsupported",
+            "pack_integrity_failure",
+            "pack_integrity_mismatch",
+            "pack_kind_invalid",
+            "pack_load_failure",
+            "pack_lockfile_incomplete",
+            "pack_namespace_unauthorized",
+            "pack_peer_dependency_missing",
+            "pack_peer_dependency_undefined",
+            "pack_registry_unreachable",
+            "pack_runtime_requirement_unmet",
+            "pack_signature_invalid",
+            "pack_validation_failed",
+            "pack_version_not_found",
+            "protocol_version_mismatch",
+            "protocol_version_unsupported",
+            "rate_limited",
+            "recursion_limit_exceeded",
+            "replay_diverged_at_refusal",
+            "replay_memory_snapshot_unavailable",
+            "replay_source_missing",
+            "residency_unavailable",
+            "run_already_active",
+            "run_forbidden",
+            "run_terminal",
+            "run_timeout",
+            "runner_unavailable",
+            "sandbox_capability_denied",
+            "sandbox_escape_attempt",
+            "sandbox_memory_exceeded",
+            "sandbox_timeout",
+            "schedule_horizon_exceeded",
+            "sender_constraint_missing",
+            "signature_not_available",
+            "sub_chain_cycle",
+            "sub_chain_depth_exceeded",
+            "token_budget_exceeded",
+            "unauthenticated",
+            "unsupported_stream_mode",
+            "until_in_past",
+            "validation_error",
+            "version_conflict",
+            "workspace_conflict",
+            "workspace_membership_required",
+            "workspace_too_large"
+          ]
+        },
+        {
+          "type": "string",
+          "pattern": "^(?!openwop\\.)[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9_]*$"
+        }
+      ]
+    },
+    "message": {
+      "type": "string",
+      "minLength": 1
+    },
+    "details": {
+      "type": "object",
+      "additionalProperties": true,
+      "description": "Error-specific contextual data. No code has registered a details schema yet (errors.json rows carry details: null); when one does, this becomes a oneOf discriminated on error."
+    }
+  },
+  "x-openwop-http-status": {
+    "audience_mismatch": 401,
+    "capability_not_provided": 422,
+    "capability_required": 422,
+    "client_version_unsupported": 426,
+    "connection_provider_conflict": 409,
+    "connection_provider_unresolved": 400,
+    "connector_action_unresolved": 400,
+    "connector_auth_expired": 401,
+    "credential_forbidden": 403,
+    "credential_not_found": 404,
+    "credential_required": 422,
+    "credential_revoked": 401,
+    "credential_scope_unsupported": 400,
+    "credential_unavailable": 501,
+    "delegation_chain_cyclic": 400,
+    "delegation_chain_too_long": 400,
+    "delegation_expired": 401,
+    "delegation_scope_amplified": 403,
+    "envelope_correlation_conflict": 409,
+    "envelope_invalid": 422,
+    "envelope_refusal": 422,
+    "envelope_truncation_unrecoverable": 422,
+    "event_type_unmapped": 500,
+    "forbidden": 403,
+    "force_engine_version_forbidden": 403,
+    "id_tenant_mismatch": 403,
+    "idempotency_in_flight": 409,
+    "idempotency_key_invalid": 400,
+    "idempotency_key_mismatch": 409,
+    "identity_unresolvable": 401,
+    "identity_unverified": 401,
+    "internal_error": 500,
+    "interop_version_unsupported": 400,
+    "interrupt_already_resolved": 409,
+    "interrupt_cancelled": 410,
+    "interrupt_expired": 410,
+    "interrupt_not_found": 404,
+    "interrupt_token_invalid": 401,
+    "key_revoked": 401,
+    "loop_limit_exceeded": 422,
+    "mcp_mrtr_rounds_exceeded": 422,
+    "mock_provider_forbidden": 403,
+    "not_found": 404,
+    "oauth_provider_unsupported": 400,
+    "oauth_scope_unsupported": 400,
+    "pack_dependency_conflict": 409,
+    "pack_dependency_cycle": 400,
+    "pack_engine_unsupported": 400,
+    "pack_integrity_failure": 400,
+    "pack_integrity_mismatch": 409,
+    "pack_kind_invalid": 400,
+    "pack_load_failure": 500,
+    "pack_lockfile_incomplete": 400,
+    "pack_namespace_unauthorized": 403,
+    "pack_peer_dependency_missing": 400,
+    "pack_peer_dependency_undefined": 400,
+    "pack_registry_unreachable": 503,
+    "pack_runtime_requirement_unmet": 422,
+    "pack_signature_invalid": 400,
+    "pack_validation_failed": 400,
+    "pack_version_not_found": 404,
+    "protocol_version_mismatch": 400,
+    "protocol_version_unsupported": 406,
+    "rate_limited": 429,
+    "recursion_limit_exceeded": 422,
+    "replay_diverged_at_refusal": 409,
+    "replay_memory_snapshot_unavailable": 409,
+    "replay_source_missing": 404,
+    "residency_unavailable": 422,
+    "run_already_active": 409,
+    "run_forbidden": 403,
+    "run_terminal": 409,
+    "run_timeout": 422,
+    "runner_unavailable": 503,
+    "sandbox_capability_denied": 403,
+    "sandbox_escape_attempt": 403,
+    "sandbox_memory_exceeded": 422,
+    "sandbox_timeout": 422,
+    "schedule_horizon_exceeded": 400,
+    "sender_constraint_missing": 401,
+    "signature_not_available": 404,
+    "sub_chain_cycle": 400,
+    "sub_chain_depth_exceeded": 400,
+    "token_budget_exceeded": 422,
+    "unauthenticated": 401,
+    "unsupported_stream_mode": 400,
+    "until_in_past": 400,
+    "validation_error": 400,
+    "version_conflict": 409,
+    "workspace_conflict": 409,
+    "workspace_membership_required": 403,
+    "workspace_too_large": 413
+  },
+  "x-openwop-retriable": [
+    "internal_error",
+    "pack_registry_unreachable",
+    "rate_limited",
+    "residency_unavailable",
+    "runner_unavailable"
+  ]
+}

package/schemas/v2/eval-summary.schema.json

@@ -0,0 +1,166 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v2/eval-summary.schema.json",
+  "title": "EvalSummary",
+  "description": "RFC 0081 §C. The terminal scorecard of an eval run (the `mode: \"eval\"` projection over `POST /v1/runs`, RFC 0081 §B): the aggregate + per-task scores, cost, latency, schema-validity, and safety findings, plus the suite provenance and (for `regression` mode) the score delta vs a baseline. Set as the eval run's output and served by `GET /v1/runs/{runId}/eval-summary`. SECURITY invariant `eval-summary-no-content-leak`: the summary carries scores, ids, counts, and redaction-safe safety descriptors only — NEVER task output bodies, rubric prose, model completions, prompts, or credential material (SR-1). A consumer reads the run's normal projection for any body.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "suiteId",
+    "suiteVersion",
+    "aggregateScore",
+    "passed",
+    "taskCount",
+    "passedCount",
+    "tasks"
+  ],
+  "properties": {
+    "suiteId": {
+      "type": "string",
+      "pattern": "^[a-z0-9.-]+\\.evals\\.[a-z0-9-]+$",
+      "description": "The `agent-eval-suite.schema.json#suiteId` this summary scores."
+    },
+    "suiteVersion": {
+      "type": "string",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$",
+      "description": "The pinned suite version the run executed (mirrors `eval.started.suiteVersion`)."
+    },
+    "evaluatedModelClass": {
+      "type": "string",
+      "enum": [
+        "reasoning",
+        "writing",
+        "coding",
+        "research",
+        "classification",
+        "general"
+      ],
+      "description": "MAY. The `AgentManifest.modelClass` (RFC 0002) the run was evaluated against, so a score is read against its model. Present when the host resolves a concrete class."
+    },
+    "aggregateScore": {
+      "type": "number",
+      "minimum": 0,
+      "maximum": 1,
+      "description": "The suite-level score (0.0–1.0): the aggregation (host-defined, typically the mean) of per-task scores."
+    },
+    "passed": {
+      "type": "boolean",
+      "description": "Whether the run cleared the suite's `thresholds` (RFC 0081 §A) — `aggregateScore >= passScore` AND, when declared, `totalCostUsd <= maxCostUsd` AND the p95 latency bar. The load-bearing flag an RFC 0082 deployment gate may require (`requiredEval`)."
+    },
+    "taskCount": {
+      "type": "integer",
+      "minimum": 0,
+      "description": "Number of tasks executed."
+    },
+    "passedCount": {
+      "type": "integer",
+      "minimum": 0,
+      "description": "Number of tasks that individually passed."
+    },
+    "totalCostUsd": {
+      "type": "number",
+      "minimum": 0,
+      "description": "MAY. Total cost of the run, summed from the per-task RFC 0026 `provider.usage` events (the scalar only — never a pricing breakdown or rate card; `eval-summary-no-content-leak`)."
+    },
+    "tasks": {
+      "type": "array",
+      "description": "Per-task results, in suite order. Each entry is content-free: scores, scalars, ids, and redaction-safe safety descriptors only.",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "taskId",
+          "score",
+          "passed"
+        ],
+        "properties": {
+          "taskId": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$",
+            "description": "The `agent-eval-suite` task id."
+          },
+          "score": {
+            "type": "number",
+            "minimum": 0,
+            "maximum": 1,
+            "description": "Task score (0.0–1.0)."
+          },
+          "passed": {
+            "type": "boolean",
+            "description": "Whether this task individually met its bar."
+          },
+          "costUsd": {
+            "type": "number",
+            "minimum": 0,
+            "description": "MAY. Task cost (scalar)."
+          },
+          "latencyMs": {
+            "type": "integer",
+            "minimum": 0,
+            "description": "MAY. Task wall-clock latency."
+          },
+          "schemaValid": {
+            "type": "boolean",
+            "description": "MAY. Whether the task output validated against the agent's `handoff.returnSchemaRef` (when structured-output enforcement is in effect)."
+          },
+          "safetyFindings": {
+            "type": "array",
+            "description": "MAY. Redaction-safe safety findings (primarily `adversarial` mode). Each is a `{kind, severity}` descriptor — NO excerpted content, prompt, or completion text (`eval-summary-no-content-leak`).",
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "kind",
+                "severity"
+              ],
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Finding category (e.g. `jailbreak`, `pii-leak`, `unsafe-tool-call`) — a category label, not excerpted content."
+                },
+                "severity": {
+                  "type": "string",
+                  "enum": [
+                    "low",
+                    "medium",
+                    "high",
+                    "critical"
+                  ],
+                  "description": "Finding severity."
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "regression": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "MAY. Present for `regression` mode. The score delta vs a baseline eval run, plus a pointer to the RFC 0054 `:diff` for the structural divergence. Content-free.",
+      "required": [
+        "baselineRunId",
+        "scoreDelta"
+      ],
+      "properties": {
+        "baselineRunId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The prior eval run this run is compared against."
+        },
+        "scoreDelta": {
+          "type": "number",
+          "minimum": -1,
+          "maximum": 1,
+          "description": "`aggregateScore` minus the baseline's (negative ⇒ regression)."
+        },
+        "diffRef": {
+          "type": "string",
+          "description": "MAY. A pointer to `GET /v1/runs/{runId}:diff?against={baselineRunId}` (RFC 0054) for the structural delta."
+        }
+      }
+    }
+  },
+  "x-openwop-seeded-from": "v1"
+}