@openwop/spec-artifacts 2.15.0 → 2.15.1

package/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.15.0",
-  "corpusTag": "v2.15.0",
+  "version": "2.15.1",
+  "corpusTag": "v2.15.1",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "39081c59fb696159806b0f2f9a42e7e9ff830d622fcf2ad4159b21357580a955",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "2d36c5b143c3dbbd7e96f37a3dd135678ea02b3ff8e361ec4b290a21f1c90a59",
-    "api/v2/asyncapi.yaml": "3f6f1f023841bb7d33fff2169a38734e10d1ede267d8cef38f8a94e86d317e45",
-    "api/v2/openapi.yaml": "808f2519d3fbfaa6efd9563ca2990e5bf80f1fff3fc76945d59ce13708ab3016",
+    "api/seams-v2.yaml": "19e11230ff1a810f9823c201d42c1a2536cda87aa504810133875031d77f4fef",
+    "api/v2/asyncapi.yaml": "6666709a2531773e17d2860c42c7b137d210e4fd86d8981912ee13c11ecf62c8",
+    "api/v2/openapi.yaml": "b4b66f477b2e8b1bba7d6602572b1ce400ea369b0defcd7bcf30f92fed57a12e",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "c9365918f993f943b4b619d42551eb066a1ed33a08d895d51b395432a5b1f1bc",
@@ -115,7 +115,7 @@
     "schemas/v2/artifact-type-pack-manifest.schema.json": "85630d1b760d0b41cf5a6fad2acfada39abaf7f0befd95cc4334e1e883e9615d",
     "schemas/v2/audit-verify-result.schema.json": "a748dfadb5155adfde8a91045e76b0db6695005fe559035d71670fdd55edb3ba",
     "schemas/v2/budget-policy.schema.json": "c7449daeb6e1d95e7a047b8c2814d3d54748697c27046972834874867d9b5f4c",
-    "schemas/v2/capabilities.schema.json": "ae1ece0c55cf467f11fe54d1374b42a249db57d8d69e45afc6f8d40e3712ca90",
+    "schemas/v2/capabilities.schema.json": "f342fe8d31b0d09c8878cefb446fa0db6346b952578081bd6005a981e8bdd1bf",
     "schemas/v2/certification-bundle.schema.json": "0bcf8f297266505ca39d30eea8100e3c0fb048f2651717fd746da8129fcb7920",
     "schemas/v2/channel-presence-payload.schema.json": "1c20ad810cb311d47aa0b95d928490826b2468fd161f884cd29e867053e6782f",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
@@ -201,7 +201,7 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "40069d5976eeb6ba1384a648e57e5cfd673db3fce36175115fb8293bee9664d4",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "0478005e74f33a8b5c456805be12b9c34e5e3ab5be80569e007fb616fb29608f",
+    "spec/v1/core-standard-manifest.json": "10321df4eba5cf5bb786a19ff020ca75906af236ee3cbec660f69e010ece5d47",
     "spec/v1/deprecations.json": "307083ce29c23fd406015951f99a30d78d6187ff061d38dc9732f62191b40f3f",
     "spec/v1/deprecations.schema.json": "18c87e78bedc210431f795ae44c5b5d202f2f3317850d5cf86867d4f1fa1cdfb",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
@@ -274,8 +274,8 @@
     "spec/v2/path-manifest.json": "c123c9fd77dc1b3f9c2e9346ace80cdae007e6511138894956abda01e61ec1c6",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "0636f19fceae625390003a347e70ef4797d84766b5c24ce8a02cea52aadebca4",
-    "spec/v2/release.json": "172c377ac413214f0d0ce857fdaf030526fd1085434b69e3b755e088b5be08f9",
+    "spec/v2/release.json": "ee35337620a638018452876f8878ae6f546ad18cbbcffb9f9be4cee5e2f51a37",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624"
   },
-  "corpusCommit": "a60d21de057c9a096e960c13fb0d83950e037e24"
+  "corpusCommit": "8c28c3dfa264bc8a38ef3f9cae61b5f27bb45b72"
 }

package/api/seams-v2.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP conformance seams profile (openwop-conformance-seams-v2)
-  version: 2.15.0
+  version: 2.15.1
   description: 'GENERATED by scripts/derive-v2-api.py. RFC 0168 §C: the seams are a versioned conformance profile with their
     own document and path space (/conformance/seams/…), validated against the canonical v2 schemas with no tolerance path,
     forbidden from the capability namespace (a host advertises the profile, never a testSeams flag). This document carries

package/api/v2/asyncapi.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.1.0
 info:
   title: OpenWOP v2 event streams
-  version: 2.15.0
+  version: 2.15.1
   description: GENERATED by scripts/derive-v2-api.py (RFC 0171 §E.1, RFC 0172 §C.2). One run-events channel whose address
     is the OpenAPI path key; the server pathname is empty (bare origin). streamMode is a pattern over the closed set and its
     comma-separated combinations (`values` never combines). hostEvents has a real address (RFC 0171 §E.1) — the documented

package/api/v2/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP v2 API
-  version: 2.15.0
+  version: 2.15.1
   summary: REST surface for declaring, executing, suspending, resuming, and observing multi-step workflows.
   description: GENERATED by scripts/derive-v2-api.py from api/openapi.yaml and the RFC 0167 children (v2 charter Phase 3,
     P3-C). Bare origin, unversioned path keys, negotiation by `OpenWOP-Version` + `protocolVersions[]` (RFC 0172 §A). No seam

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/spec-artifacts",
-  "version": "2.15.0",
+  "version": "2.15.1",
   "description": "The OpenWOP machine-readable contract: api/ (OpenAPI, AsyncAPI, the seams profile), schemas/ (v1 and v2 JSON Schemas), the spec/v1 and spec/v2 registries (errors, event codemap, declaration, deprecations, migrations, gaps) and CORPUS-STAMP.json — published from the openwop/openwop corpus tag; the peer dependency @openwop/openwop-conformance digest-checks at start (RFC 0168 §D.2).",
   "license": "Apache-2.0",
   "repository": {

package/schemas/v2/capabilities.schema.json

@@ -458,7 +458,10 @@
       "required": [
         "status",
         "since",
-        "witness"
+        "witness",
+        "clarificationRounds",
+        "schemaRounds",
+        "envelopesPerTurn"
       ],
       "properties": {
         "status": {
@@ -649,7 +652,8 @@
       "required": [
         "status",
         "since",
-        "witness"
+        "witness",
+        "advertised"
       ],
       "properties": {
         "status": {
@@ -1244,7 +1248,8 @@
       "required": [
         "status",
         "since",
-        "witness"
+        "witness",
+        "packsSupported"
       ],
       "properties": {
         "status": {
@@ -1483,7 +1488,8 @@
       "required": [
         "status",
         "since",
-        "witness"
+        "witness",
+        "regions"
       ],
       "properties": {
         "status": {
@@ -1565,7 +1571,8 @@
       "required": [
         "status",
         "since",
-        "witness"
+        "witness",
+        "tiers"
       ],
       "properties": {
         "status": {
@@ -1655,6 +1662,33 @@
               "until"
             ]
           }
+        },
+        {
+          "$comment": "RFC 0132 §B.2 — writeEgressControls is REQUIRED and non-empty when bounded-write-egress is advertised, and MUST be absent otherwise (a control-less write/egress tier is the fail-open shape this RFC forbids).",
+          "if": {
+            "properties": {
+              "tiers": {
+                "contains": {
+                  "const": "bounded-write-egress"
+                }
+              }
+            },
+            "required": [
+              "tiers"
+            ]
+          },
+          "then": {
+            "required": [
+              "writeEgressControls"
+            ]
+          },
+          "else": {
+            "not": {
+              "required": [
+                "writeEgressControls"
+              ]
+            }
+          }
         }
       ],
       "description": "core/capabilities.md#anonymousActor — witness: seam-gated; maturity experimental/none; RFC 0132",
@@ -2450,6 +2484,10 @@
           "required": [
             "version"
           ],
+          "if": {
+            "properties": {}
+          },
+          "then": {},
           "properties": {
             "version": {
               "type": "integer",
@@ -2476,6 +2514,17 @@
             },
             "confidenceEscalationInterruptKind": {
               "type": "string",
+              "anyOf": [
+                {
+                  "const": "clarification"
+                },
+                {
+                  "const": "approval"
+                },
+                {
+                  "pattern": "^x-host-[a-z][a-z0-9-]*-[a-z][a-z0-9-]*$"
+                }
+              ],
               "description": "RFC 0044 — the literal `interrupt.kind` the host emits when escalating a below-floor confidence decision per RFC 0039 §A. `clarification` and `approval` are the canonical values matching the clarify-OR-approval choice in RFC 0039 §A; vendor-extension kinds use the canonical host-extension namespace `^x-host-<host>-<kind>$` per `spec/v1/host-extensions.md` §\"Canonical prefixes\". When advertised, hosts MUST emit an interrupt of the advertised kind on every confidence-escalation event AND the host's downstream `interrupt.md` mapping determines the `waiting-*` terminal status. Absent: conformance assumes the host uses one of the two canonical kinds (the relaxed assertion accepts either). Hosts using vendor kinds MUST also publish a non-normative kind-mapping document per RFC 0044 §C."
             },
             "crossChildMemoryConcurrency": {
@@ -2509,6 +2558,14 @@
               "properties": {
                 "llmCacheKeyRecipe": {
                   "type": "string",
+                  "anyOf": [
+                    {
+                      "const": "spec-rfc-0041"
+                    },
+                    {
+                      "pattern": "^x-host-[a-z][a-z0-9-]*-[a-z][a-z0-9-]*$"
+                    }
+                  ],
                   "description": "The LLM cache-key recipe the host honors. `spec-rfc-0041` = the canonical recipe in `replay.md` §\"LLM cache-key recipe\" §A + §B + §C. Vendor-specific recipes use the canonical host-extension namespace string matching `^x-host-<host>-<recipe-name>$` per `spec/v1/host-extensions.md` §\"Canonical prefixes\"; the matching algorithm MUST be documented at the host's discovery doc."
                 },
                 "refusalDivergenceEmission": {
@@ -2567,6 +2624,17 @@
                     }
                   }
                 }
+              },
+              "if": {
+                "required": [
+                  "transcriptTokenBudget"
+                ]
+              },
+              "then": {
+                "required": [
+                  "transcriptTokenBudget",
+                  "tokenCounter"
+                ]
               }
             }
           }
@@ -5616,7 +5684,8 @@
       "required": [
         "status",
         "since",
-        "witness"
+        "witness",
+        "declared"
       ],
       "properties": {
         "status": {
@@ -5815,6 +5884,20 @@
         },
         "isolation": {
           "type": "string",
+          "anyOf": [
+            {
+              "enum": [
+                "cross-origin-iframe",
+                "wasm",
+                "process",
+                "container",
+                "vm"
+              ]
+            },
+            {
+              "pattern": "^x-host-[a-z0-9-]+-[a-z0-9-]+$"
+            }
+          ],
           "default": "cross-origin-iframe",
           "description": "RFC 0117 (amended by RFC 0119). The categorical isolation model the host enforces for plugin bytes. `cross-origin-iframe` = a distinct-origin sandboxed browser frame (the browser default; §Isolation). `wasm`/`process`/`container`/`vm` mirror `sandbox.isolationModel` (RFC 0035) for non-browser hosts that enforce the SAME isolation property. Vendor-specific models advertise `^x-host-<host>-<key>$` per `host-extensions.md`. ALL values denote the SAME mandatory property (`frontend-plugin-isolation`): plugin bytes execute in a boundary with no access to the host's execution context / DOM / origin-storage / credentials, deny-egress by default, and all host interaction mediated by the closed `ui-plugin/1` RPC. The field names the MECHANISM, never relaxes the property. In-process / same-origin / module-federation loading is a protocol-tier MUST NOT regardless of the advertised value."
         },
@@ -7003,6 +7086,16 @@
             },
             "partitionRecoveryStrategy": {
               "type": "string",
+              "anyOf": [
+                {
+                  "enum": [
+                    "lexicographic-min-run-id"
+                  ]
+                },
+                {
+                  "pattern": "^x-host-[a-z][a-z0-9-]*-[a-z][a-z0-9-]*$"
+                }
+              ],
               "description": "RFC 0150 §D — deterministic resolution rule for conflicting idempotency-key records after a partition heals. `lexicographic-min-run-id` is the rule spec/v1/idempotency.md §'Guarantees under partition' MUSTs: the lower runId wins, deterministic without coordination. Vendor strategies use `^x-host-<host>-<key>$` and MUST still satisfy the reproducible-survivor requirement. The time-ordered `last-writer-wins` / `first-writer-wins` values were REMOVED as a safety-fix: under a partition there is no shared clock, so both regions believe they wrote last, which cannot satisfy the annex MUST that re-running the same conflict input produces the same survivor — and both select a different survivor than the lex-min rule the same document requires. Resolving a RECORD never authorizes an EFFECT; see `crossRegion`."
             }
           }
@@ -7512,7 +7605,9 @@
       "required": [
         "status",
         "since",
-        "witness"
+        "witness",
+        "baseLocale",
+        "supportedLocales"
       ],
       "properties": {
         "status": {
@@ -7693,6 +7788,28 @@
               "until"
             ]
           }
+        },
+        {
+          "if": {
+            "properties": {
+              "import": {
+                "const": true
+              }
+            },
+            "required": [
+              "import"
+            ]
+          },
+          "then": {
+            "properties": {
+              "dryRun": {
+                "const": true
+              }
+            },
+            "required": [
+              "dryRun"
+            ]
+          }
         }
       ],
       "description": "core/capabilities.md#portability — witness: witnessable-gated; maturity experimental/none; RFC 0098",

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.15.0"
+      "version": "2.15.1"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -419,5 +419,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "4ff5b4a569f1ff03c71f0aec32ce5cb443cb4129a8d8cf5753c7808bd48afe58"
+  "digest": "dd8d53292972adac8f3034668083d87a47165d1007a87fdd6450bcd857468a98"
 }

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
   "$comment": "RFC 0172 §D.1 — the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.15.0",
-  "corpusTag": "v2.15.0",
+  "version": "2.15.1",
+  "corpusTag": "v2.15.1",
   "updated": "2026-09-18"
 }