@openwop/spec-artifacts 2.0.0-rc.9 → 2.0.0

package/spec/v2/id-field-bindings.json

@@ -0,0 +1,105 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "//": "The explicit coverage map for spec/v2/core/identity.md §5 ('every id field in every v2 schema and every api/v2/openapi.yaml parameter and response body MUST $ref its kind'). It exists because the obvious check — fire when a property NAME equals a $def name — enforces §5 only where naming happens to align. 88 *Id properties live in schemas/v2/; only 20 share a name with a kind. childRunId sat as {type:string,minLength:1} in the same file where parentRunId was correctly $ref'd, so a child run's identifier carried no tenant segment for the mandatory 403 id_tenant_mismatch refusal to read. A name-matching check would have reported green over it. Every *Id property MUST appear here exactly once: under `bindings` (it IS that kind and MUST $ref it) or under `notAKind` (nothing in ids.schema.json governs it, with the reason). A property in neither fails the check, so a new id field cannot be added without someone deciding which it is. PLURAL ARRAYS: a `*Ids` property is covered through its `items` schema, which MUST $ref the kind. The first version of this map saw only `/Id$/`, and a tier-1 host found `POST /runs:bulk-cancel` taking runIds[] from the body untyped — every tenant-bound id a v2 client owned answered not_found, silently.",
+  "bindings": {
+    "agentId": "agentId",
+    "artifactTypeId": "typeId",
+    "baselineRunId": "runId",
+    "cardTypeId": "typeId",
+    "causationId": "eventId",
+    "chainId": "chainId",
+    "childRunId": "runId",
+    "childWorkflowId": "workflowId",
+    "contributingRunIds": "runId",
+    "currentNodeId": "nodeId",
+    "deliveryId": "deliveryId",
+    "effectId": "effectId",
+    "enqueuedRunId": "runId",
+    "evalRunId": "runId",
+    "eventId": "eventId",
+    "failedNodeId": "nodeId",
+    "fromAgentId": "agentId",
+    "interruptId": "interruptId",
+    "keyId": "keyId",
+    "lastNodeId": "nodeId",
+    "libraryId": "libraryId",
+    "nodeId": "nodeId",
+    "nodeIds": "nodeId",
+    "nodeTypeId": "typeId",
+    "originalEventId": "eventId",
+    "parentRunId": "runId",
+    "parentSpanId": "spanId",
+    "pinnedNodeIds": "nodeId",
+    "pluginId": "pluginId",
+    "runId": "runId",
+    "signingKeyId": "keyId",
+    "sourceNodeId": "nodeId",
+    "sourceRunId": "runId",
+    "sourceRunIds": "runId",
+    "spanId": "spanId",
+    "subjectId": "subjectId",
+    "subscriptionId": "subscriptionId",
+    "targetAgentId": "agentId",
+    "targetNodeId": "nodeId",
+    "templateId": "templateId",
+    "tenantId": "tenantId",
+    "toAgentId": "agentId",
+    "traceId": "traceId",
+    "triggerSubscriptionId": "subscriptionId",
+    "typeId": "typeId",
+    "workflowId": "workflowId",
+    "workspaceId": "workspaceId",
+    "interruptedNodeId": "nodeId"
+  },
+  "notAKind": {
+    "annotationId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "approvalGateId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "approvalId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "artifactId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "auditCorrelationId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "callId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "causationHostId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "changeId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "changelogId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "commitmentId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "compensationId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "contextId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "conversationId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "correlationId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "credentialId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "cveIds": "CVE identifiers; the owning schema carries the ^CVE-[0-9]{4}-[0-9]+$ grammar",
+    "departmentId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "envelopeId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "goalId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "groupId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "heartbeatId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "hostId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "instanceId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "invocationId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "leaseId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "memoryId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "mergedIds": "memory-entry ids (agentMemoryConsolidated); no openwop id kind governs memory entries",
+    "messageId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "nextWorkerIds": "a UNION — \"worker node-ids OR agent-ids\", so no single kind can bind it; binding to either would reject the other legitimate form",
+    "outputId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "pageId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "parentDepartmentId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "proposalId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "roleId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "rosterId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "runnerId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "scopeId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "sectionId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "sessionId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "sourceEngineId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "sourceIds": "memory-entry ids (memoryCompacted); no openwop id kind governs memory entries",
+    "sourceManifestId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "speakerId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "stepId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "suiteId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "taskId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "toolId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "webhookId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "workerId": "no openwop id kind governs this surface; the grammar is the owning schema's own"
+  }
+}

package/spec/v2/profiles.json

@@ -12,10 +12,12 @@
         ]
       },
       "floorScenarios": [
-        "planned:capabilities-root-closed"
+        "v2-capabilities-root-closed",
+        "v2-preferred-version-default",
+        "v2-version-header-honored"
       ],
       "requirementIds": [],
-      "note": "discovery only; the alias openwop-core is deleted (row C2.3)"
+      "note": "discovery only; the alias openwop-core is deleted (row C2.3). Floor minted rc.45: the closed root, the preferredVersion default, and the header honoured-or-refused — each unaided. v2-well-known-one-resource is deliberately absent: it is inapplicable by design for a host advertising one major, which every host becomes at v1 end-of-support, and a floor that expires is not a floor."
     },
     {
       "id": "openwop-core-standard",
@@ -28,18 +30,40 @@
           "eventLog"
         ]
       },
-      "floorScenarios": [],
+      "floorScenarios": [
+        "v2-interrupt-token-scheme",
+        "v2-effect-seam-manifest",
+        "v2-webhook-durable-delivery",
+        "v2-idempotency-key-grammar",
+        "v2-era-key",
+        "v2-era-stamp-universal",
+        "v2-event-type-closed",
+        "v2-poll-cursor-v2",
+        "v2-run-cancel",
+        "v2-run-bulk-cancel",
+        "v2-run-pause-resume",
+        "v2-run-options-limits",
+        "v2-sse-last-event-id"
+      ],
       "requirementIds": [],
-      "note": "seeded from spec/v1/core-standard-manifest.json at P3-B; the floor is minted with the 2.0.0 scenarios (planned)"
+      "note": "rc.59: five unaided run-surface witnesses joined the floor — v2-run-cancel (runs.md §Cancel: 409 run_terminal on a terminal run), v2-run-bulk-cancel (§Cancel: per-entry envelopes, id_tenant_mismatch / not_found, details.maxRunIds), v2-run-pause-resume (§Pause and resume: 409 run_terminal / run_state_conflict, the literal drainPolicy echo, the immediate cut), v2-run-options-limits (capabilities.md limits metadata honoured on create), v2-sse-last-event-id (events.md §SSE frames: Last-Event-ID resumes at the next sequence, never re-emits the resumption point). cancelRun, bulkCancelRuns and pauseRun are core operations by the runs.md surface table (only ancestry, annotations and eval-summary are 404-when-unadvertised), so a host that omits one is blocked, not inapplicable, and the floor refuses it — the prose's outcome. Their optional legs (values mode, the conformance-delay / conformance-cancellable fixtures) record inapplicable with the reason and the file row stays a witnessed pass. Measured before the change: the reference host passes all five (rc.58, 179 / 0 / 0 / 42); neither production host satisfies this predicate, so no existing claim moves. seeded from spec/v1/core-standard-manifest.json at P3-B; floor minted rc.45, one or more unaided witnesses per predicate family: interrupt (token scheme), replay (the effect-seam manifest — its seam-driven no-re-fire leg lives in v2-effect-seam-no-refire on the seams floor), webhooks (durable delivery), idempotency (Layer-1 key grammar), eventLog (era key, era stamp, closed event type, poll cursor). Deliberately absent: v2-pinned-run-disposition (seam-gated and opt-in), v2-v1-signed-webhook-accepted (a coexistence scenario, driven through the seam; the cut gate is its home), v2-effect-identity-business-key (retry leg seam-driven), v2-approver-enforced (conditional on the refKinds facet)."
     },
     {
       "id": "openwop-conformance-seams-v2",
       "predicate": {
-        "families": []
+        "families": [],
+        "metadata": [
+          "conformance"
+        ]
       },
-      "floorScenarios": [],
+      "floorScenarios": [
+        "v2-fork-a-v1-run",
+        "v2-effect-identity-business-key",
+        "v2-v1-signed-webhook-accepted",
+        "v2-effect-seam-no-refire"
+      ],
       "requirementIds": [],
-      "note": "RFC 0168 §C.1 — the seams profile; its own api/seams-v2.yaml; forbidden from the capability namespace"
+      "note": "RFC 0168 §C.1 — the seams profile; its own api/seams-v2.yaml; forbidden from the capability namespace. Floor minted rc.45: the four scenarios driven through a seam. rc.62 CLAIM FIX: the predicate now requires `conformance` at the discovery root. Until rc.62 the predicate was EMPTY, and `claimedProfilesForV2` treats an empty predicate as vacuously satisfied, so this profile was CLAIMED BY EVERY v2 HOST — including two production hosts that never advertised it and carried it at `certified: false`. A profile claimed by a host that never advertised it is a claim the host did not make. The predicate is deliberately NECESSARY, not sufficient: it tests that a `conformance` block exists, while the exact advert (`conformance.seamsProfile === openwop-conformance-seams-v2`) is tested per scenario by `seamsProfileAdvertised`. The two compose honestly — no conformance block means NOT CLAIMED; a block naming some other profile means claimed, every floor row `inapplicable`, witnessCount 0, and therefore not certified and not blocked. This profile is the instrument, not a capability predicate: each floor file is ALSO gated on the family it witnesses (fork-a-v1-run and effect-seam-no-refire on replay, effect-identity-business-key on idempotency, v1-signed-webhook-accepted on webhooks), records `inapplicable` when that family is absent, and the profile certifies only on a witnessed pass — a seams host advertising none of those families witnesses nothing through the seam and certifies nothing."
     }
   ]
 }

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
   "$comment": "RFC 0172 \u00a7D.1 \u2014 the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.0.0-rc.9",
-  "corpusTag": null,
-  "updated": "2026-09-03"
+  "version": "2.0.0",
+  "corpusTag": "v2.0.0",
+  "updated": "2026-09-05"
 }

package/spec/v2/retention-floors.json

@@ -0,0 +1,35 @@
+{
+  "$comment": "spec/v2/core/overview.md §v1 end-of-support, Old-major retention floors (charter Phase 5). Each row is a published old-major artifact and the last 1.x version a consumer may be pinned to; every row MUST stay installable for `windowMonths` from the 2.0.0 publish (the v2.0.0 tag's commit date — read from git by check-retention-floors.mjs, never written here). Hand-kept: a new 1.x release of an old-major line bumps `lastOldMajor`; nothing else changes. `probe` is the registry document the check reads with --network and the JSON path it expects the version at.",
+  "windowMonths": 12,
+  "releaseTag": "v2.0.0",
+  "artifacts": [
+    {
+      "ecosystem": "npm",
+      "name": "@openwop/openwop",
+      "oldMajor": 1,
+      "lastOldMajor": "1.9.0",
+      "probe": { "url": "https://registry.npmjs.org/@openwop%2Fopenwop", "versionsAt": "versions" }
+    },
+    {
+      "ecosystem": "npm",
+      "name": "@openwop/openwop-conformance",
+      "oldMajor": 1,
+      "lastOldMajor": "1.163.0",
+      "probe": { "url": "https://registry.npmjs.org/@openwop%2Fopenwop-conformance", "versionsAt": "versions" }
+    },
+    {
+      "ecosystem": "pypi",
+      "name": "openwop-client",
+      "oldMajor": 1,
+      "lastOldMajor": "1.7.0",
+      "probe": { "url": "https://pypi.org/pypi/openwop-client/json", "versionsAt": "releases" }
+    },
+    {
+      "ecosystem": "go",
+      "name": "github.com/openwop/openwop-sdks/go",
+      "oldMajor": 1,
+      "lastOldMajor": "v1.6.0",
+      "probe": { "url": "https://proxy.golang.org/github.com/openwop/openwop-sdks/go/@v/list", "versionsAt": "lines" }
+    }
+  ]
+}