@openwop/spec-artifacts 2.35.1 → 2.36.1

package/schemas/v2/agent-eval-suite.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/agent-eval-suite.schema.json",
   "title": "AgentEvalSuite",
-  "description": "RFC 0081 \u00a7A. A portable, host-agnostic evaluation suite for a manifest agent (RFC 0003/0070): the tasks, the expected outputs or rubrics, the deterministic tool/memory fixtures, the allowed model classes, and the pass/fail thresholds that answer \"is this agent good enough to deploy?\". Distributed inside a pack tarball and referenced by URI exactly like `systemPromptRef` / `handoff.*SchemaRef` (RFC 0003 \u00a7C/\u00a7D) \u2014 NOT embedded in `AgentManifest`. A host advertising `capabilities.agents.evalSuite.supported: true` executes a suite as an eval run (a `mode: \"eval\"` projection over `POST /runs`, RFC 0081 \u00a7B) and terminates with an `eval-summary.schema.json` scorecard. The suite carries NO secret material and NO host-internal identifiers (it is authored offline and shipped in a signed pack).",
+  "description": "RFC 0081 §A. A portable, host-agnostic evaluation suite for a manifest agent (RFC 0003/0070): the tasks, the expected outputs or rubrics, the deterministic tool/memory fixtures, the allowed model classes, and the pass/fail thresholds that answer \"is this agent good enough to deploy?\". Distributed inside a pack tarball and referenced by URI exactly like `systemPromptRef` / `handoff.*SchemaRef` (RFC 0003 §C/§D) — NOT embedded in `AgentManifest`. A host advertising `capabilities.agents.evalSuite.supported: true` executes a suite as an eval run (a `mode: \"eval\"` projection over `POST /runs`, RFC 0081 §B) and terminates with an `eval-summary.schema.json` scorecard. The suite carries NO secret material and NO host-internal identifiers (it is authored offline and shipped in a signed pack).",
   "type": "object",
   "additionalProperties": false,
   "required": [
@@ -20,11 +20,11 @@
     "version": {
       "type": "string",
       "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$",
-      "description": "SemVer of the suite. A suite version is pinned on an eval run (carried on `eval.started.suiteVersion` and `eval-summary.suiteVersion`) so a regression comparison (\u00a7D `regression` mode) is between like versions."
+      "description": "SemVer of the suite. A suite version is pinned on an eval run (carried on `eval.started.suiteVersion` and `eval-summary.suiteVersion`) so a regression comparison (§D `regression` mode) is between like versions."
     },
     "targetAgentId": {
       "$ref": "ids.schema.json#/$defs/agentId",
-      "description": "MAY. The `AgentManifest.id` this suite is authored for. Absent \u21d2 the suite is agent-agnostic and MAY be pointed at any `agentId` at run time (the run request carries the `agentId`). When present, a host SHOULD reject an eval run whose target `agentId` differs, unless the caller explicitly overrides."
+      "description": "MAY. The `AgentManifest.id` this suite is authored for. Absent ⇒ the suite is agent-agnostic and MAY be pointed at any `agentId` at run time (the run request carries the `agentId`). When present, a host SHOULD reject an eval run whose target `agentId` differs, unless the caller explicitly overrides."
     },
     "modes": {
       "type": "array",
@@ -40,7 +40,7 @@
           "live-shadow"
         ]
       },
-      "description": "The eval modes this suite exercises (RFC 0081 \u00a7D closed vocabulary). `golden`: exact / contains / json-match against each task's `expected`. `rubric`: a host-chosen judge scores against weighted criteria (nondeterministic \u2014 a recorded-fact score). `adversarial`: tasks probe for unsafe / jailbreak behavior; `safetyFindings` is the primary output. `regression`: re-run against a new agent/model/prompt version and diff scores vs a `baselineRunId` (composes RFC 0054 `:diff`). `live-shadow`: run against LIVE tools/memory instead of `fixtures` \u2014 the only mode that bypasses fixture injection; explicitly nondeterministic. A run MUST request only modes the suite declares here AND the host advertises (`capabilities.agents.evalSuite.modes`); an unadvertised mode is rejected at run-create with `400 validation_error`."
+      "description": "The eval modes this suite exercises (RFC 0081 §D closed vocabulary). `golden`: exact / contains / json-match against each task's `expected`. `rubric`: a host-chosen judge scores against weighted criteria (nondeterministic — a recorded-fact score). `adversarial`: tasks probe for unsafe / jailbreak behavior; `safetyFindings` is the primary output. `regression`: re-run against a new agent/model/prompt version and diff scores vs a `baselineRunId` (composes RFC 0054 `:diff`). `live-shadow`: run against LIVE tools/memory instead of `fixtures` — the only mode that bypasses fixture injection; explicitly nondeterministic. A run MUST request only modes the suite declares here AND the host advertises (`capabilities.agents.evalSuite.modes`); an unadvertised mode is rejected at run-create with `400 validation_error`."
     },
     "allowedModels": {
       "type": "array",
@@ -56,18 +56,18 @@
           "general"
         ]
       },
-      "description": "MAY. The `AgentManifest.modelClass` values (RFC 0002) the suite is valid for. Absent \u21d2 valid for any class. A host SHOULD record the `evaluatedModelClass` on the summary so a score is interpreted against the model it was produced with."
+      "description": "MAY. The `AgentManifest.modelClass` values (RFC 0002) the suite is valid for. Absent ⇒ valid for any class. A host SHOULD record the `evaluatedModelClass` on the summary so a score is interpreted against the model it was produced with."
     },
     "thresholds": {
       "type": "object",
       "additionalProperties": false,
-      "description": "MAY. The pass/fail bar for the suite. A task or the aggregate `passed` flag is computed against these. Absent \u21d2 the host's default bar (the summary still carries raw scores).",
+      "description": "MAY. The pass/fail bar for the suite. A task or the aggregate `passed` flag is computed against these. Absent ⇒ the host's default bar (the summary still carries raw scores).",
       "properties": {
         "passScore": {
           "type": "number",
           "minimum": 0,
           "maximum": 1,
-          "description": "The minimum aggregate score (0.0\u20131.0) for `EvalSummary.passed: true`."
+          "description": "The minimum aggregate score (0.0–1.0) for `EvalSummary.passed: true`."
         },
         "maxCostUsd": {
           "type": "number",
@@ -100,7 +100,7 @@
             "description": "Suite-unique task identifier (kebab-case). Carried verbatim on `eval.scored.taskId` and the per-task summary entry."
           },
           "input": {
-            "description": "The run input for the task, validated against the agent's input schema by the host. An opaque object/value \u2014 content is task-defined."
+            "description": "The run input for the task, validated against the agent's input schema by the host. An opaque object/value — content is task-defined."
           },
           "expected": {
             "type": "object",
@@ -144,7 +144,7 @@
               "rubric": {
                 "type": "array",
                 "minItems": 1,
-                "description": "Present when `kind: \"rubric\"`. Weighted criteria a judge scores the output against; the task score is the weighted sum of met criteria, normalized to 0.0\u20131.0. Judge selection + scoring is host-internal (nondeterministic \u2014 the score is a recorded fact).",
+                "description": "Present when `kind: \"rubric\"`. Weighted criteria a judge scores the output against; the task score is the weighted sum of met criteria, normalized to 0.0–1.0. Judge selection + scoring is host-internal (nondeterministic — the score is a recorded fact).",
                 "items": {
                   "type": "object",
                   "additionalProperties": false,
@@ -172,7 +172,7 @@
           "fixtures": {
             "type": "object",
             "additionalProperties": false,
-            "description": "MAY. Deterministic substitutes for live tool/memory I/O so a `golden`/`regression` eval is reproducible. When present, the eval host MUST inject `toolResponses` in place of live tool calls and seed `memorySeed` before the invocation. The `live-shadow` mode is the explicit exception \u2014 it ignores `fixtures` and runs against live tools/memory.",
+            "description": "MAY. Deterministic substitutes for live tool/memory I/O so a `golden`/`regression` eval is reproducible. When present, the eval host MUST inject `toolResponses` in place of live tool calls and seed `memorySeed` before the invocation. The `live-shadow` mode is the explicit exception — it ignores `fixtures` and runs against live tools/memory.",
             "properties": {
               "toolResponses": {
                 "type": "array",

package/schemas/v2/agent-inventory-response.schema.json

@@ -164,9 +164,15 @@
               }
             }
           }
+        },
+        "a2aTenant": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128,
+          "pattern": "^[A-Za-z0-9._~-]+$",
+          "description": "RFC 0202. Opaque A2A routing value for this agent: the `tenant` of its AgentInterface entries and of GetExtendedAgentCard. Stable for the agent and host version; encodes no tenant, workspace or principal. Present only when the host advertises a2a.agentCards and routes at least one workflow to the agent. Path-segment-safe because the A2A HTTP+JSON binding carries it as `/{tenant}/…`."
         }
       }
     }
-  },
-  "x-openwop-seeded-from": "v1"
+  }
 }

package/schemas/v2/artifact-type-pack-manifest.schema.json

@@ -146,11 +146,11 @@
           "items": {
             "type": "string",
             "minLength": 1,
-            "maxLength": 64,
-            "pattern": "^([a-z][a-z0-9]*|vendor\\.[a-z][a-z0-9-]*\\.[a-z][a-z0-9-]*|x-[a-z][a-z0-9-]*)$"
+            "maxLength": 255,
+            "pattern": "^([a-z][a-z0-9]*|vendor\\.[a-z][a-z0-9-]*\\.[a-z][a-z0-9-]*|x-[a-z][a-z0-9-]*|[a-z0-9][a-z0-9!#$&^_.+-]{0,126}/[a-z0-9][a-z0-9!#$&^_.+-]{0,126})$"
           },
           "uniqueItems": true,
-          "description": "Export-format identifiers (hints) a renderer MAY offer. Spec-reserved core identifiers carry interoperable meaning (the lowercase file-extension / common name): `pdf`, `pptx`, `docx`, `xlsx`, `md`, `html`, `txt`, `csv`, `json`, `png`, `svg`, `jpeg`, `step`, `stl`, `dxf`. Domain-specific formats outside the core set MUST be `vendor.<org>.<format>`- or `x-<format>`-prefixed (mirrors the `requiredModelCapabilities` reserved-core + extension idiom). Advisory: this spec assigns no byte-level production semantics to any identifier \u2014 it standardizes the identifier so two hosts agree what `pptx` names, not how the bytes are produced."
+          "description": "Export-format identifiers (hints) a renderer MAY offer. Spec-reserved core identifiers carry interoperable meaning (the lowercase file-extension / common name): `pdf`, `pptx`, `docx`, `xlsx`, `md`, `html`, `txt`, `csv`, `json`, `png`, `svg`, `jpeg`, `step`, `stl`, `dxf`. Domain-specific formats outside the core set MUST be `vendor.<org>.<format>`- or `x-<format>`-prefixed (mirrors the `requiredModelCapabilities` reserved-core + extension idiom). An entry MAY instead be a lowercase RFC 6838 media type (`type/subtype`, no parameters; RFC 0205 §C); each reserved alias names exactly one media type per artifact-type-packs.md §\"Export-format aliases\", and a consumer MUST treat the two spellings as one format. Advisory: this spec assigns no byte-level production semantics to any identifier \u2014 it standardizes the identifier so two hosts agree what `pptx` names, not how the bytes are produced."
         },
         "syncOn": {
           "type": "string",

package/schemas/v2/artifact.schema.json

@@ -0,0 +1,84 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v2/artifact.schema.json",
+  "title": "Artifact",
+  "description": "RFC 0205 §A/§D. An A2A v1.0.1 `Artifact`, transcribed from `specification/a2a.proto` `message Artifact` at tag v1.0.1 (camelCase per A2A spec §5.5). The body of `getArtifact` when it is served as `application/a2a+json` (spec/v2/core/runs.md); `artifactId` equals the path segment. The same shape a2a-integration.md D.3 projects over A2A, so one decoder reads both.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "artifactId",
+    "parts"
+  ],
+  "properties": {
+    "artifactId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "a2a.proto: \"Unique identifier (e.g. UUID) for the artifact. It must be unique within a task.\" On `getArtifact` it MUST equal the `{artifactId}` path segment."
+    },
+    "name": {
+      "type": "string",
+      "description": "a2a.proto: \"A human readable name for the artifact.\""
+    },
+    "description": {
+      "type": "string",
+      "description": "a2a.proto: \"Optional. A human readable description of the artifact.\""
+    },
+    "parts": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "$ref": "part.schema.json"
+      },
+      "description": "a2a.proto: \"The content of the artifact. Must contain at least one part.\" A registered artifact's JSON payload is a `data` Part with `mediaType: application/json`."
+    },
+    "metadata": {
+      "type": "object",
+      "description": "a2a.proto: \"Optional. Metadata included with the artifact.\" OpenWOP identity for a registered type SHOULD be carried as `metadata.openwop.artifactTypeId` and `metadata.openwop.schemaVersion` (RFC 0205 §A.2).",
+      "properties": {
+        "openwop": {
+          "type": "object",
+          "properties": {
+            "artifactTypeId": {
+              "$ref": "ids.schema.json#/$defs/typeId",
+              "description": "The registered artifact type (`artifact.created.artifactType`), bound to the `typeId` kind (identity.md §5)."
+            },
+            "schemaVersion": {
+              "type": "integer",
+              "minimum": 0
+            }
+          },
+          "additionalProperties": {}
+        }
+      },
+      "additionalProperties": {}
+    },
+    "extensions": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "format": "uri"
+      },
+      "description": "a2a.proto: \"The URIs of extensions that are present or contributed to this Artifact.\""
+    }
+  },
+  "examples": [
+    {
+      "artifactId": "art-1",
+      "name": "Launch brief",
+      "parts": [
+        {
+          "data": {
+            "title": "Q3 launch"
+          },
+          "mediaType": "application/json"
+        }
+      ],
+      "metadata": {
+        "openwop": {
+          "artifactTypeId": "vendor.acme.brief",
+          "schemaVersion": 1
+        }
+      }
+    }
+  ]
+}

package/schemas/v2/capabilities.schema.json

@@ -39,7 +39,8 @@
     },
     "implementation": {
       "type": "object",
-      "description": "Optional v1 server identity (name + version + vendor).",
+      "additionalProperties": false,
+      "description": "RFC 0208 §G — self-reported server identity; informational (capabilities.md §3.1): a client SHOULD NOT change behaviour because of it or authorize from it.",
       "properties": {
         "name": {
           "type": "string"
@@ -49,10 +50,13 @@
         },
         "vendor": {
           "type": "string"
+        },
+        "url": {
+          "type": "string",
+          "format": "uri",
+          "description": "The operator's site — A2A AgentProvider.url, MCP Implementation.websiteUrl. Informational."
         }
-      },
-      "additionalProperties": false,
-      "x-openwop-seeded-from": "v1"
+      }
     },
     "engineVersion": {
       "type": "integer",
@@ -2071,7 +2075,7 @@
             ]
           },
           "uniqueItems": true,
-          "description": "OAuth 2.0 grant types the host performs on a node's behalf."
+          "description": "OAuth 2.0 grant types the host performs on a node's behalf (oauth.md §Token lifecycle)."
         },
         "providers": {
           "type": "array",
@@ -2103,10 +2107,27 @@
                   "type": "string"
                 },
                 "description": "Scopes this provider exposes."
+              },
+              "issuer": {
+                "type": "string",
+                "format": "uri",
+                "description": "RFC 0199 §A.4. The provider's authorization-server issuer identifier (RFC 8414 / RFC 9207). Absent ⇒ the host uses a provider-unique redirect URI (RFC 9700 §4.4.2.2)."
+              },
+              "pkce": {
+                "type": "string",
+                "enum": [
+                  "S256",
+                  "unsupported"
+                ],
+                "description": "RFC 0199 §A.1. Absent or `S256` ⇒ the host sends PKCE S256. `unsupported` ⇒ the host sends no PKCE for this provider; such a provider cannot back an MCP reach."
               }
             },
             "additionalProperties": false
           }
+        },
+        "credentialInterrupt": {
+          "const": true,
+          "description": "RFC 0199 §C.1 (oauth.md §The credential interrupt). Present ⇒ the host suspends a node on a `credential` interrupt instead of failing it when no credential resolves or refresh fails terminally. Absent ⇒ it fails the node with `connector_auth_expired`."
         }
       },
       "allOf": [
@@ -2145,7 +2166,7 @@
         }
       ],
       "description": "core/capabilities.md#oauth — witness: witnessable-gated; maturity experimental/none; RFC 0047",
-      "x-openwop-seeded-from": "v1"
+      "x-openwop-facets-from": "spec/v2/facets/oauth.schema.json"
     },
     "authorization": {
       "type": "object",
@@ -5280,12 +5301,17 @@
         "signatureAlgorithms": {
           "type": "array",
           "minItems": 1,
+          "contains": {
+            "const": "v1"
+          },
           "items": {
             "type": "string",
             "enum": [
-              "v1"
+              "v1",
+              "standard-webhooks-1"
             ]
-          }
+          },
+          "description": "RFC 0201 §A.3 — `v1` MUST be listed (schema-enforced by `contains`); `standard-webhooks-1` names the Standard Webhooks 1.0.0 companion scheme a subscriber opts into per subscription at registerWebhook."
         },
         "retryPolicy": {
           "type": "object",
@@ -5331,6 +5357,22 @@
               "description": "Ceiling the host clamps `limit` to (RFC 0182 §A.3 page-ceiling idiom)."
             }
           }
+        },
+        "secretRotation": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "overlapSeconds"
+          ],
+          "description": "RFC 0201 §E — zero-downtime rotation for subscriptions opted into `standard-webhooks-1`; advertised only by a host serving `rotateWebhookSecret` (`POST /webhooks/{webhookId}/rotate-secret`). A host that does not advertise it answers that route `404 not_found`.",
+          "properties": {
+            "overlapSeconds": {
+              "type": "integer",
+              "minimum": 60,
+              "maximum": 604800,
+              "description": "How long after a rotation `webhook-signature` carries an entry under the previous secret beside the new one; `previousSecretExpiresAt = rotatedAt + overlapSeconds`."
+            }
+          }
         }
       },
       "allOf": [
@@ -5621,6 +5663,10 @@
         },
         "durableTasks": {
           "type": "boolean"
+        },
+        "agentCards": {
+          "const": true,
+          "description": "RFC 0202. Present ⇒ each inventory entry with an `a2aTenant` is published as an A2A 1.0 AgentCard through GetExtendedAgentCard with tenant = a2aTenant (interop.md §Per-agent cards). Requires the a2a-1.0 profile and agents.manifestRuntime. Omit when not offered (RFC 0192)."
         }
       },
       "allOf": [
@@ -6902,6 +6948,10 @@
               "maximum": 16
             }
           }
+        },
+        "client": {
+          "const": true,
+          "description": "RFC 0204. Present ⇒ the host exposes ctx.mcp.callTool / listTools / readResource / serverHealth to pack code (host-services.md §mcp). Omit when not offered (RFC 0192)."
         }
       },
       "allOf": [
@@ -7523,6 +7573,7 @@
                 "enum": [
                   "next-request",
                   "exp-and-recheck",
+                  "exp-only",
                   "crl",
                   "ocsp",
                   "short-lived",
@@ -7555,6 +7606,29 @@
                   ]
                 }
               }
+            },
+            "$comment": "RFC 0210 §C — `exp-only` MUST NOT be advertised on `api-key` or `session`: there the host issued the credential itself, so revocation is in its own hands. The antecedent is the NEW member only, so no document that validates today can be invalidated by it. The full lane -> rule binding is deliberately NOT here (it would retroactively invalidate a committed bundle); it lives in the suite, and scripts/check-lane-revocation-rules.mjs keeps the table, this enum and the suite map in lockstep.",
+            "if": {
+              "properties": {
+                "revocation": {
+                  "const": "exp-only"
+                }
+              },
+              "required": [
+                "revocation"
+              ]
+            },
+            "then": {
+              "properties": {
+                "lane": {
+                  "not": {
+                    "enum": [
+                      "api-key",
+                      "session"
+                    ]
+                  }
+                }
+              }
             }
           }
         },

package/schemas/v2/certification-bundle.schema.json

@@ -259,7 +259,7 @@
             "properties": {
               "id": {
                 "type": "string",
-                "pattern": "^openwop\\.(?!it\\.(?:artifact-schema-compile-bounded|artifact-type-legacy-ids|capability-example-root-layout|certification-floor-enforcement|chain-subchain-unsupported-refused|compensation-profile|core-manifest-and-extension-registry|discovery-canonical-family-no-shadow|edge-condition-truthy-falsy|effect-identity-composition|effect-identity-cross-scope|error-envelope-canonical-shape|event-codemap-complete|form-content-packs|multi-region-effect-vocabulary|normative-example-extraction|openapi-asyncapi-sdk-parity|pack-manifest-extensions|protocol-version-grammar|registry-declarative-kinds|rfc-0147-self-audit|rfc-lifecycle-coherence|semantic-digest-v2|spec-corpus-validity|spec-section-citations|tool-result-trust-monotone|v2-alias-covers-reword|v2-bundle-signature-attributable|v2-corpus-tag-pinned|v2-declaration-parity|v2-envelope-catalog|v2-eos-clock|v2-error-registry-prose-parity|v2-event-naming-rule|v2-events-channel-parity|v2-externally-gated-never-stable|v2-facet-advertisement|v2-front-door-counts|v2-id-kinds-bound|v2-normative-home-gate|v2-one-signing-scheme|v2-path-parity|v2-release-identity|v2-req-only-assertions|v2-retention-floors|v2-seams-not-in-canonical|v2-security-defaults-table|v2-spec-artifacts-digest|v2-threat-model-template|v2-umbrella-alias-covered|v2-umbrella-child-parts|v2-umbrella-codemod-at-active|v2-umbrella-codemod-legs|v2-umbrella-migration-deprecation|v2-witness-required|versioned-composition-profiles|workflow-chain-internal-flag|workload-identity-profile)\\.)(requirement|it|scenario|floor|profile|family)\\.[a-z0-9]",
+                "pattern": "^openwop\\.(?!it\\.(?:a2a-parts-schemas|a2ui-v09-profile|artifact-schema-compile-bounded|artifact-type-legacy-ids|bundle-maturity-gate|capability-example-root-layout|certification-floor-enforcement|chain-subchain-unsupported-refused|compensation-profile|core-manifest-and-extension-registry|discovery-canonical-family-no-shadow|edge-condition-truthy-falsy|effect-identity-composition|effect-identity-cross-scope|error-envelope-canonical-shape|event-codemap-complete|form-content-packs|locale-key-grammar|multi-region-effect-vocabulary|node-pack-mcp-server-record|normative-example-extraction|openapi-asyncapi-sdk-parity|openapi-security-declared|pack-manifest-extensions|protocol-version-grammar|registry-declarative-kinds|removal-dates-minor|rfc-0147-self-audit|rfc-lifecycle-coherence|semantic-digest-v2|spec-corpus-validity|spec-section-citations|tool-descriptor-annotations|tool-result-trust-monotone|v2-alias-covers-reword|v2-bundle-signature-attributable|v2-corpus-tag-pinned|v2-declaration-parity|v2-envelope-catalog|v2-eos-clock|v2-error-registry-prose-parity|v2-event-naming-rule|v2-events-channel-parity|v2-externally-gated-never-stable|v2-facet-advertisement|v2-front-door-counts|v2-id-kinds-bound|v2-interop-map-coherent|v2-lane-exp-only-schema|v2-normative-home-gate|v2-one-signing-scheme|v2-path-parity|v2-release-identity|v2-req-only-assertions|v2-retention-floors|v2-retirement-gate|v2-seams-not-in-canonical|v2-security-defaults-table|v2-spec-artifacts-digest|v2-surface-monotone-gate|v2-threat-model-template|v2-umbrella-alias-covered|v2-umbrella-child-parts|v2-umbrella-codemod-at-active|v2-umbrella-codemod-legs|v2-umbrella-migration-deprecation|v2-witness-required|versioned-composition-profiles|workflow-chain-internal-flag|workload-identity-profile)\\.)(requirement|it|scenario|floor|profile|family)\\.[a-z0-9]",
                 "description": "RFC 0168 §A.1 — `openwop.<area>.<slug>`. The suite mints six areas: `requirement` (an explicit `req()` id), `it` (a per-test id from the scenario file and title), `scenario` and `floor` (per-file rows), `profile` (a claimed-profile row) and `family` (a capability gate). The lookahead refuses every id minted from a corpus-coherence file: those run in the spec repo’s CI and MUST NOT appear in a host bundle (conformance.md §\"Two products, two ledgers\"; RFC 0168 §D.1). `scripts/check-req-only.mjs` fails when the list drifts from `conformance/src/coherence/`."
               },
               "scenario": {

package/schemas/v2/channel-presence-payload.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/channel-presence-payload.schema.json",
   "title": "ChannelPresencePayload",
-  "description": "Payload of the OPTIONAL `channel.presence` RunEvent (RFC 0110). EPHEMERAL live presence for a `type:'channel'` conversation \u2014 who is currently present + (optionally) who is typing. A host MUST NOT persist this event to the replayable event log / transcript, and it MUST NOT affect replay or `:fork` determinism (presence is live state, the load-bearing distinction from the persisted `conversation.exchanged` turn \u2014 see replay.md). Membership-gated: every ref MUST be a current channel participant and the event MUST NOT be delivered to a non-member (the same DEFAULT-DENY visibility as the channel's messages; cross-tenant delivery is forbidden, CTI-1). NON-PII: subject refs are the opaque RFC 0041 vocabulary only \u2014 no IP/location/device. A host MAY emit; if it advertises `channelPresence.supported` it MUST. Gated on `channelPresence.supported` (capabilities.schema.json). See RFC 0110.",
+  "description": "Payload of the OPTIONAL `channel.presence` RunEvent (RFC 0110). EPHEMERAL live presence for a `type:'channel'` conversation — who is currently present + (optionally) who is typing. A host MUST NOT persist this event to the replayable event log / transcript, and it MUST NOT affect replay or `:fork` determinism (presence is live state, the load-bearing distinction from the persisted `conversation.exchanged` turn — see replay.md). Membership-gated: every ref MUST be a current channel participant and the event MUST NOT be delivered to a non-member (the same DEFAULT-DENY visibility as the channel's messages; cross-tenant delivery is forbidden, CTI-1). NON-PII: subject refs are the opaque RFC 0041 vocabulary only — no IP/location/device. A host MAY emit; if it advertises `channelPresence.supported` it MUST. Gated on `channelPresence.supported` (capabilities.schema.json). See RFC 0110.",
   "type": "object",
   "required": [
     "conversationId",
@@ -18,7 +18,7 @@
     },
     "present": {
       "type": "array",
-      "description": "Subject refs (RFC 0041 vocabulary `user:<id>` / `agent:<id>` \u2014 opaque, non-PII) of members CURRENTLY present in the channel. MUST be a subset of the channel's current participants; a non-member MUST NOT appear.",
+      "description": "Subject refs (RFC 0041 vocabulary `user:<id>` / `agent:<id>` — opaque, non-PII) of members CURRENTLY present in the channel. MUST be a subset of the channel's current participants; a non-member MUST NOT appear.",
       "items": {
         "type": "string",
         "minLength": 1,
@@ -53,6 +53,6 @@
       ]
     }
   ],
-  "$comment": "RFC 0110 NEGATIVE (not validatable as an examples[] entry, which must be VALID): a payload carrying any field beyond conversationId/present/typing (e.g. `ip`, `location`) MUST FAIL validation via `additionalProperties: false` \u2014 the no-PII guard; see conformance/src/scenarios/channel-presence-shape.test.ts.",
+  "$comment": "RFC 0110 NEGATIVE (not validatable as an examples[] entry, which must be VALID): a payload carrying any field beyond conversationId/present/typing (e.g. `ip`, `location`) MUST FAIL validation via `additionalProperties: false` — the no-PII guard; see conformance/src/scenarios/channel-presence-shape.test.ts.",
   "x-openwop-seeded-from": "v1"
 }

package/schemas/v2/connection-pack-manifest.schema.json

@@ -218,6 +218,20 @@
             "instanceUrlTemplate": {
               "type": "string",
               "description": "For per-account-host providers (Snowflake/NetSuite/ServiceNow): a template the host fills per connection, e.g. `https://{account}.snowflakecomputing.com`. Its presence signals the provider cannot use a single global OAuth app."
+            },
+            "issuer": {
+              "type": "string",
+              "format": "uri",
+              "pattern": "^https://",
+              "description": "RFC 0199 §A.4/§B.3. The authorization server's issuer identifier. Fixed and manifest-declared, like `endpoints`. OPTIONAL in the schema; a host MUST NOT authorize a `reach.mcp` + `oauth2` provider whose manifest omits it (refused `connection_auth_metadata_mismatch` before any authorization URL is issued)."
+            },
+            "pkce": {
+              "type": "string",
+              "enum": [
+                "S256",
+                "unsupported"
+              ],
+              "description": "RFC 0199 §A.1. Absent or `S256` ⇒ the host sends PKCE S256. `unsupported` ⇒ no PKCE; a host MUST NOT authorize such a provider when it is reached as an MCP server (§B.2)."
             }
           }
         },

package/schemas/v2/conversation-event.schema.json

@@ -72,6 +72,14 @@
             "null"
           ]
         },
+        "parts": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "$ref": "part.schema.json"
+          },
+          "description": "RFC 0205 §B. OPTIONAL. The turn's content as A2A `Part`s (A2A v1.0.1 `Message.parts`). PRESENCE IS THE DISCRIMINATOR: a turn carrying `parts` is A2A-shaped and projects to an A2A `Message` via `messageId`, `role` (user→ROLE_USER, agent→ROLE_AGENT) and `parts`. A producer SHOULD emit it and keep `content` displayable to readers that predate it. A turn without `parts` stays valid on emission, read, replay and fork for the life of the major. Kept in sync with `conversation-event.schema.json#/$defs/ConversationTurn/properties/parts`."
+        },
         "ts": {
           "type": "integer",
           "minimum": 0
@@ -254,6 +262,5 @@
       },
       "additionalProperties": false
     }
-  },
-  "x-openwop-seeded-from": "v1"
+  }
 }

package/schemas/v2/conversation-turn.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/conversation-turn.schema.json",
   "title": "ConversationTurn",
-  "description": "One turn in a multi-turn conversation. Structural superset of `ConversationMessage` (RFC 0002 \u00a7G \u2014 append-only, idempotent on `messageId`, replay-deterministic). Adds `role`, optional `agent` reference, and `turnIndex` discriminators. Folds through the existing `applyMessage` reducer unchanged. See RFC 0005 \u00a7C.",
+  "description": "One turn in a multi-turn conversation. Structural superset of `ConversationMessage` (RFC 0002 §G — append-only, idempotent on `messageId`, replay-deterministic). Adds `role`, optional `agent` reference, and `turnIndex` discriminators. Folds through the existing `applyMessage` reducer unchanged. See RFC 0005 §C.",
   "type": "object",
   "required": [
     "messageId",
@@ -21,7 +21,7 @@
     },
     "from": {
       "type": "string",
-      "description": "Sender identity. Either an agent ID (RFC 0002 \u00a7A1) or the literal `'user'` for human-originated turns.",
+      "description": "Sender identity. Either an agent ID (RFC 0002 §A1) or the literal `'user'` for human-originated turns.",
       "minLength": 1,
       "maxLength": 256
     },
@@ -32,7 +32,7 @@
     },
     "groupId": {
       "type": "string",
-      "description": "Optional shared-agent group ID. When set, the turn is scoped to the `shared:<groupId>` agent context per RFC 0002 \u00a7A8.",
+      "description": "Optional shared-agent group ID. When set, the turn is scoped to the `shared:<groupId>` agent context per RFC 0002 §A8.",
       "maxLength": 256
     },
     "content": {
@@ -46,6 +46,14 @@
         "null"
       ]
     },
+    "parts": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "$ref": "part.schema.json"
+      },
+      "description": "RFC 0205 §B. OPTIONAL. The turn's content as A2A `Part`s (A2A v1.0.1 `Message.parts`). PRESENCE IS THE DISCRIMINATOR: a turn carrying `parts` is A2A-shaped and projects to an A2A `Message` via `messageId`, `role` (user→ROLE_USER, agent→ROLE_AGENT) and `parts`. A producer SHOULD emit it and keep `content` displayable to readers that predate it. A turn without `parts` stays valid on emission, read, replay and fork for the life of the major. Kept in sync with `conversation-event.schema.json#/$defs/ConversationTurn/properties/parts`."
+    },
     "ts": {
       "type": "integer",
       "minimum": 0,
@@ -58,11 +66,11 @@
         "agent",
         "system"
       ],
-      "description": "Discriminator distinguishing human-originated turns (`'user'`), AI-agent-originated turns (`'agent'`), and host-emitted procedural turns (`'system'` \u2014 e.g., `'conversation timed out'`)."
+      "description": "Discriminator distinguishing human-originated turns (`'user'`), AI-agent-originated turns (`'agent'`), and host-emitted procedural turns (`'system'` — e.g., `'conversation timed out'`)."
     },
     "agent": {
       "type": "object",
-      "description": "Optional agent reference (RFC 0002 \u00a7A1 `AgentRef`) for `role: 'agent'` turns. The same shape RFC 0002 reserves on `RunSnapshot.agent` and `node.started.payload.agent` \u2014 propagated through inheritance.",
+      "description": "Optional agent reference (RFC 0002 §A1 `AgentRef`) for `role: 'agent'` turns. The same shape RFC 0002 reserves on `RunSnapshot.agent` and `node.started.payload.agent` — propagated through inheritance.",
       "properties": {
         "agentId": {
           "$ref": "ids.schema.json#/$defs/agentId"
@@ -74,15 +82,15 @@
             "shared",
             "shared:%shared%"
           ],
-          "description": "Per RFC 0002 \u00a7A8 \u2014 `shared:<groupId>` requires a `groupId` field on the message."
+          "description": "Per RFC 0002 §A8 — `shared:<groupId>` requires a `groupId` field on the message."
         },
         "memoryRef": {
           "type": "string",
-          "description": "Opaque memory reference per RFC 0002 \u00a7A + RFC 0004 \u00a7A. Resolves to `MemoryEntry[]` via host `MemoryAdapter` for cross-run conversation continuity."
+          "description": "Opaque memory reference per RFC 0002 §A + RFC 0004 §A. Resolves to `MemoryEntry[]` via host `MemoryAdapter` for cross-run conversation continuity."
         },
         "model": {
           "type": "object",
-          "description": "RFC 0109 \u2014 OPTIONAL provenance: which model produced this `role: 'agent'` turn. NON-SECRET, NON-PII: provider + model identifiers ONLY (`additionalProperties: false` forbids any credential/endpoint/prompt leaking in \u2014 the SR-1 secret-redaction guard). Stamped at emit; read VERBATIM on `:fork` (never re-resolved). A host that stamps it MUST advertise `conversationTurnModelProvenance.supported: true`. Absent \u21d2 no advertisement; clients MUST tolerate its absence.",
+          "description": "RFC 0109 — OPTIONAL provenance: which model produced this `role: 'agent'` turn. NON-SECRET, NON-PII: provider + model identifiers ONLY (`additionalProperties: false` forbids any credential/endpoint/prompt leaking in — the SR-1 secret-redaction guard). Stamped at emit; read VERBATIM on `:fork` (never re-resolved). A host that stamps it MUST advertise `conversationTurnModelProvenance.supported: true`. Absent ⇒ no advertisement; clients MUST tolerate its absence.",
           "additionalProperties": false,
           "required": [
             "provider",
@@ -115,12 +123,12 @@
       "type": "string",
       "minLength": 1,
       "maxLength": 256,
-      "description": "RFC 0101. Stable speaker identity of this turn \u2014 the roster INSTANCE id of the agent that produced it (the `host:<id>` AgentRef agentId per `agent-roster-entry.schema.json` \u00a7A / RFC 0086), NOT the manifest/class `AgentRef.agentId`. REQUIRED when `role: 'agent'` (the conditional below) so that 'turn N was spoken by agent X' is an observable, replay-stable, cross-host-projectable fact in a multi-party transcript. When a `participants` roster is declared on `conversation.opened` (RFC 0101), `speakerId` MUST be a member of that roster; a turn whose `speakerId` is not a participant MUST be rejected (host-enforced, capability-gated on `multiPartyConversation.supported`). For `role: 'user'` / `role: 'system'` turns the field is OPTIONAL and carries no normative meaning. Additive-safe: pre-RFC-0101 `role: 'agent'` turns that omit it are accepted by hosts that do NOT advertise `multiPartyConversation`."
+      "description": "RFC 0101. Stable speaker identity of this turn — the roster INSTANCE id of the agent that produced it (the `host:<id>` AgentRef agentId per `agent-roster-entry.schema.json` §A / RFC 0086), NOT the manifest/class `AgentRef.agentId`. REQUIRED when `role: 'agent'` (the conditional below) so that 'turn N was spoken by agent X' is an observable, replay-stable, cross-host-projectable fact in a multi-party transcript. When a `participants` roster is declared on `conversation.opened` (RFC 0101), `speakerId` MUST be a member of that roster; a turn whose `speakerId` is not a participant MUST be rejected (host-enforced, capability-gated on `multiPartyConversation.supported`). For `role: 'user'` / `role: 'system'` turns the field is OPTIONAL and carries no normative meaning. Additive-safe: pre-RFC-0101 `role: 'agent'` turns that omit it are accepted by hosts that do NOT advertise `multiPartyConversation`."
     }
   },
   "allOf": [
     {
-      "$comment": "RFC 0101 \u2014 agent turns MUST carry speaker attribution. Conditional (not unconditional `required`) so the field is only mandatory for `role: 'agent'`; `user`/`system` turns and pre-RFC-0101 producers on non-multi-party hosts are unaffected. Capability-gated: hosts enforce this only when advertising `multiPartyConversation.supported` (capabilities.schema.json).",
+      "$comment": "RFC 0101 — agent turns MUST carry speaker attribution. Conditional (not unconditional `required`) so the field is only mandatory for `role: 'agent'`; `user`/`system` turns and pre-RFC-0101 producers on non-multi-party hosts are unaffected. Capability-gated: hosts enforce this only when advertising `multiPartyConversation.supported` (capabilities.schema.json).",
       "if": {
         "properties": {
           "role": {
@@ -158,6 +166,5 @@
     }
   ],
   "$comment": "RFC 0101 NEGATIVE (covered by the `allOf`/`if` conditional + conversation scenarios, NOT validatable as an `examples[]` entry which must be VALID): a `{ role: 'agent', ... }` turn that OMITS `speakerId` MUST FAIL validation; see conformance/src/scenarios/multi-party-conversation-shape.test.ts.",
-  "additionalProperties": false,
-  "x-openwop-seeded-from": "v1"
+  "additionalProperties": false
 }

package/schemas/v2/dispatch-config.schema.json

@@ -22,7 +22,7 @@
         "child-run"
       ],
       "default": "child-run",
-      "description": "How `kind: 'next-worker'` is dispatched. v1.x normates only `'child-run'` — each `nextWorkerIds[i]` resolves to a workflow id and is dispatched as a child run via the existing `core.subWorkflow` machinery. Same-run DAG navigation is OUT OF SCOPE for v1.x (deferred to RFC 0013 / v1.3+). Hosts MAY add vendor-extension dispatch models under `vendor.<host>.<model>`; conformance scenarios validate `'child-run'` only."
+      "description": "How `kind: 'next-worker'` is dispatched. v1.x normates only `'child-run'` — each `nextWorkerIds[i]` resolves to a workflow id and is dispatched as a child run via the existing `core.subWorkflow` machinery. Same-run DAG navigation is OUT OF SCOPE for v1.x (deferred to RFC 0013 / v1.3+). The enum is closed: any other value, including a `vendor.<host>.<model>` name, fails validation against this schema, so a host cannot add a dispatch model without an additive schema change. Conformance scenarios validate `'child-run'` only."
     },
     "fanOutPolicy": {
       "type": "string",