@openwop/spec-artifacts 2.42.6 → 2.42.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/spec-artifacts",
-  "version": "2.42.6",
+  "version": "2.42.7",
   "description": "The OpenWOP machine-readable contract: api/ (OpenAPI, AsyncAPI, the seams profile), schemas/ (v1 and v2 JSON Schemas), the spec/v1 and spec/v2 registries (errors, event codemap, declaration, deprecations, migrations, gaps) and CORPUS-STAMP.json — published from the openwop/openwop corpus tag; the peer dependency @openwop/openwop-conformance digest-checks at start (RFC 0168 §D.2).",
   "license": "Apache-2.0",
   "repository": {

package/schemas/audit-verify-result.schema.json

@@ -55,12 +55,12 @@
         "merkleRoot": {
           "type": "string",
           "minLength": 1,
-          "description": "Hex-encoded SHA-256 Merkle root over the canonicalized entries 0..atSequence inclusive. Verifiers re-compute and compare; mismatch implies chain mutation between two checkpoints."
+          "description": "Lowercase-hex Merkle root over the entries this checkpoint anchors: sequence in (P, atSequence], P the previous checkpoint's atSequence or 0. Leaves are the entries' hashes (SHA-256 of RFC 8785 JCS) in sequence order; a parent is SHA-256 of the ASCII bytes left ‖ right; a last odd node is promoted unchanged (auth-profiles.md §Audit-log integrity 3, RFC 0218). Verifiers re-compute and compare, holding the leaf count to atSequence − P; a mismatch implies chain mutation since the previous checkpoint."
         },
         "signature": {
           "type": "string",
           "minLength": 1,
-          "description": "Base64-encoded Ed25519 signature over the checkpoint's canonical JSON (excluding the `signature` field itself), produced with the host's advertised `auditLogIntegrity.checkpointPublicKey`."
+          "description": "Base64-encoded Ed25519 signature over the 32 bytes `merkleRoot` hex-decodes to (not its hex text, not the checkpoint object), verifiable with the host's advertised `auditLogIntegrity.checkpointPublicKey` (RFC 0218)."
         }
       },
       "additionalProperties": false

package/schemas/v2/audit-verify-result.schema.json

@@ -70,12 +70,12 @@
         "merkleRoot": {
           "type": "string",
           "minLength": 1,
-          "description": "Hex-encoded SHA-256 Merkle root over the canonicalized entries 0..atSequence inclusive. Verifiers re-compute and compare; mismatch implies chain mutation between two checkpoints."
+          "description": "Lowercase-hex Merkle root over the entries this checkpoint anchors: sequence in (P, atSequence], P the previous checkpoint's atSequence or 0. Leaves are the entries' hashes (SHA-256 of RFC 8785 JCS) in sequence order; a parent is SHA-256 of the ASCII bytes left ‖ right; a last odd node is promoted unchanged (auth-profiles.md §Audit-log integrity 3, RFC 0218). Verifiers re-compute and compare, holding the leaf count to atSequence − P; a mismatch implies chain mutation since the previous checkpoint."
         },
         "signature": {
           "type": "string",
           "minLength": 1,
-          "description": "Base64-encoded Ed25519 signature over the checkpoint's canonical JSON (excluding the `signature` field itself), produced with the host's advertised `auditLogIntegrity.checkpointPublicKey`."
+          "description": "Base64-encoded Ed25519 signature over the 32 bytes `merkleRoot` hex-decodes to (not its hex text, not the checkpoint object), verifiable with the host's advertised `auditLogIntegrity.checkpointPublicKey` (RFC 0218)."
         }
       },
       "additionalProperties": false

package/schemas/v2/capabilities.schema.json

@@ -118,7 +118,8 @@
     },
     "minClientVersion": {
       "type": "string",
-      "description": "RFC 0172 row C5.8 — MUST (426 client_version_unsupported)."
+      "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$",
+      "description": "Optional. The lowest <major>.<minor> client this host serves (versioning.md §1.5). A host MAY refuse a client below it; a refusal MUST be 426 client_version_unsupported."
     },
     "runtimeCapabilities": {
       "type": "array",
@@ -2535,10 +2536,6 @@
           "required": [
             "version"
           ],
-          "if": {
-            "properties": {}
-          },
-          "then": {},
           "properties": {
             "version": {
               "type": "integer",

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.42.6"
+      "version": "2.42.7"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -421,5 +421,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "30878bc2bfc8d91cdb69401176b66daf9f2684e328e7e76d703f5bd755784a38"
+  "digest": "2da5e56166f26214299fff10d28db4e2c2d0c5e42f81aebcc20d66dc9a28c3c0"
 }

package/spec/v1/gaps.json

@@ -1,7 +1,7 @@
 {
   "$schema": "./gaps.schema.json",
   "version": 1,
-  "updated": "2026-09-26",
+  "updated": "2026-09-27",
   "witnessClasses": [
     "witnessable-unaided",
     "witnessable-gated",
@@ -12898,6 +12898,176 @@
         }
       ]
     },
+    {
+      "id": "openwop.gap.0218.1",
+      "rfc": "0218",
+      "local": "G1",
+      "section": "§A",
+      "surface": "`auth-profiles.md` §3's emitted checkpoint carries `ts`, but `audit-verify-result.schema.json`'s `Checkpoint` is closed over `{checkpoint, atSequence, merkleRoot, signature}`, so a verify result cannot echo it.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v1",
+      "sources": [
+        {
+          "file": "RFCS/registers/0218-audit-checkpoint-preimage.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0219.1",
+      "rfc": "0219",
+      "local": "G1",
+      "section": "§Compatibility / §C.2",
+      "surface": "Two of the three certified hosts read a malformed value as `0.0` and refuse it (`openwop-examples` v2 reference host `router.ts`, openwop-app `protocolVersion.ts`). Under §C.2 both fail the planned `malformed-not-refused` leg.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0219",
+      "sources": [
+        {
+          "file": "RFCS/registers/0219-client-version-header.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0219.2",
+      "rfc": "0219",
+      "local": "G2",
+      "section": "§A / Unresolved question 1",
+      "surface": "Whether the value names the corpus release the client implements (this RFC) or a product version (v1's `openwop-sdk/<v>`).",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0219",
+      "sources": [
+        {
+          "file": "RFCS/registers/0219-client-version-header.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0219.3",
+      "rfc": "0219",
+      "local": "G3",
+      "section": "Unresolved question 3",
+      "surface": "RFC 9110 §15.5.22 requires `Upgrade` on every `426`; none of the three hosts sends it and no v2 text names a value.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v2/core/versioning.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0219-client-version-header.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0219.4",
+      "rfc": "0219",
+      "local": "G4",
+      "section": "Unresolved question 5",
+      "surface": "`client_version_unsupported` has `details: null`. Two hosts send `details.minClientVersion`, MyndHyve sends none.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v2/core/errors.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0219-client-version-header.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0219.5",
+      "rfc": "0219",
+      "local": "G5",
+      "section": "Unresolved question 2",
+      "surface": "The header's meaning on a `/v1/…` path during the overlap. The reference host applies the floor there; openwop-app does not.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0219",
+      "sources": [
+        {
+          "file": "RFCS/registers/0219-client-version-header.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0219.6",
+      "rfc": "0219",
+      "local": "G6",
+      "section": "§Implementation notes",
+      "surface": "No v2 SDK sends the header today (`openwop-sdks`: `sdk/typescript-v2`, `sdk/python-v2`, Go).",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0219",
+      "sources": [
+        {
+          "file": "RFCS/registers/0219-client-version-header.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0220.1",
+      "rfc": "0220",
+      "local": "G1",
+      "section": "§C.2",
+      "surface": "`a2uiSurface` has no tier-2 witness path. MyndHyve's v2 discovery drops `schemaVersions.kinds`, it serves no `POST /conformance/seams/sample/a2ui/emit-surface`, and its seams profile is off.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "myndhyve/services/workflow-runtime",
+      "sources": [
+        {
+          "file": "RFCS/registers/0220-ext-families-graduate-on-evidence.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0220.2",
+      "rfc": "0220",
+      "local": "G2",
+      "section": "§B",
+      "surface": "The 11 reservations have no portable contract, so their `Stable` means \"advertised correctly by a tier-2 host\", not interoperation.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "cross-host-demand",
+      "sources": [
+        {
+          "file": "RFCS/registers/0220-ext-families-graduate-on-evidence.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0220.3",
+      "rfc": "0220",
+      "local": "G3",
+      "section": "§D",
+      "surface": "`evidence/host-tiers.json` has no tier-3 row; the first independent host adds one.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "tier-3-host",
+      "sources": [
+        {
+          "file": "RFCS/registers/0220-ext-families-graduate-on-evidence.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
     {
       "id": "openwop.gap.spec.a2a-integration.g1",
       "rfc": "0152",

package/spec/v2/README.md

@@ -3,15 +3,15 @@
 > **Status: released · current corpus.** The authoritative version is
 > [`release.json`](./release.json). Target v2 for new implementations.
 
-OpenWOP v2 is the current protocol major. Its contract consists of this
-directory, [`schemas/v2/`](../../schemas/v2/), and
-[`api/v2/`](../../api/v2/). Those artifacts are published together in
-`@openwop/spec-artifacts` and measured by `@openwop/openwop-conformance` 2.x.
+OpenWOP v2 is the current protocol major. Its contract is this directory,
+[`schemas/v2/`](../../schemas/v2/), and [`api/v2/`](../../api/v2/). They are
+published together as `@openwop/spec-artifacts` and tested by
+`@openwop/openwop-conformance` 2.x.
 
-v1 remains available during the overlap period. Dual-stack requirements and
-the retirement rule are defined in
-[`core/versioning.md`](./core/versioning.md#5-the-overlap-rfc-0167-b5-rfc-0176)
-and [`core/overview.md`](./core/overview.md).
+v1 is still supported during the overlap period.
+[`core/versioning.md`](./core/versioning.md#5-the-overlap)
+and [`core/overview.md`](./core/overview.md) define how a host serves both and
+when v1 ends.
 
 ## Start here
 
@@ -19,43 +19,41 @@ and [`core/overview.md`](./core/overview.md).
    lifecycle.
 2. [`core/versioning.md`](./core/versioning.md) — discovery and major-version
    negotiation.
-3. [`core/capabilities.md`](./core/capabilities.md) — the closed discovery
-   document.
+3. [`core/capabilities.md`](./core/capabilities.md) — the discovery document.
 4. [`core/runs.md`](./core/runs.md), [`core/events.md`](./core/events.md), and
    [`core/interrupt.md`](./core/interrupt.md) — the execution model.
 5. [`core/security-defaults.md`](./core/security-defaults.md) and
    [`core/conformance.md`](./core/conformance.md) — mandatory safety defaults
    and evidence rules.
 
-## Source-of-truth map
-
-| Path | Purpose |
-| --- | --- |
-| [`declaration.json`](./declaration.json) | Hand-reviewed inventory of discovery keys, capability families, maturity, witnesses, facets, profiles, and peer-dependency identifiers. |
-| [`declaration.schema.json`](./declaration.schema.json) | Schema for the declaration. |
-| [`core/`](./core/) | Normative protocol prose. |
-| [`ext/`](./ext/) | Optional extensions and explicitly non-core notes. See the extension maturity rules in [`ext/README.md`](./ext/README.md). |
-| [`facets/`](./facets/) | Hand-reviewed capability facet schemas. |
-| [`errors.json`](./errors.json) | Error-code registry. |
-| [`event-codemap.json`](./event-codemap.json) | v1-to-v2 event-name mapping. |
-| [`path-manifest.json`](./path-manifest.json) | Canonical operation and channel paths. |
-| [`profiles.json`](./profiles.json) | Generated profile predicates. |
-| [`peer-dependency-aliases.json`](./peer-dependency-aliases.json) | Generated v1 alias mapping. |
-| [`release.json`](./release.json) | Authoritative corpus release identity. |
-| [`migrations.json`](./migrations.json) | RFC 0197 — the v2→v2 migration register: what a 2.x minor replaced and which deprecation row schedules the old surface out. Empty is a legal state. |
-| [`corrections.json`](./corrections.json) | RFC 0197 §A.4 — W3C Class-3 corrections that changed a v2 shape, each with the bundle and registry census that showed nothing conforming stopped conforming. |
-| [`surface-baseline.json`](./surface-baseline.json) | RFC 0197 §A.1 — GENERATED census of every v2 surface, enumerated by instance path; `check-v2-surface-monotone.mjs` diffs the tree against it. Regenerated by the release PR. |
-
-Generated files identify their generator in `$comment` or their header. Do not
-edit generated outputs directly. Machine artifacts are published in
-`@openwop/spec-artifacts`; the conformance package consumes them as an
-exact-version peer dependency.
-
 ## Core documents
 
 | Area | Documents |
 | --- | --- |
 | Foundation | [`overview`](./core/overview.md), [`versioning`](./core/versioning.md), [`headers`](./core/headers.md), [`identity`](./core/identity.md), [`oauth`](./core/oauth.md), [`capabilities`](./core/capabilities.md) |
-| Execution | [`runs`](./core/runs.md), [`events`](./core/events.md), [`interrupt`](./core/interrupt.md), [`persistence`](./core/persistence.md), [`idempotency`](./core/idempotency.md), [`replay`](./core/replay.md) |
-| Integration | [`webhooks`](./core/webhooks.md), [`interop`](./core/interop.md), [`packs`](./core/packs.md), [`node-pack runtimes`](./core/node-pack-runtimes.md), [`connection packs`](./core/connection-packs.md), [`form-content packs`](./core/form-content-packs.md), [`workflow-chain packs`](./core/workflow-chain-packs.md) |
+| Execution | [`runs`](./core/runs.md), [`events`](./core/events.md), [`interrupt`](./core/interrupt.md), [`conversation`](./core/conversation.md), [`persistence`](./core/persistence.md), [`idempotency`](./core/idempotency.md), [`replay`](./core/replay.md) |
+| Integration | [`webhooks`](./core/webhooks.md), [`interop`](./core/interop.md), [`host services`](./core/host-services.md), [`tool catalog`](./core/tool-catalog.md), [`packs`](./core/packs.md), [`node-pack runtimes`](./core/node-pack-runtimes.md), [`connection packs`](./core/connection-packs.md), [`form-content packs`](./core/form-content-packs.md), [`workflow-chain packs`](./core/workflow-chain-packs.md) |
 | Reliability | [`errors`](./core/errors.md), [`security defaults`](./core/security-defaults.md), [`conformance`](./core/conformance.md) |
+
+## Source-of-truth map
+
+| Path | Contents |
+| --- | --- |
+| [`core/`](./core/) | The normative protocol documents |
+| [`ext/`](./ext/) | Optional extensions and non-core notes ([maturity rules](./ext/README.md)) |
+| [`declaration.json`](./declaration.json) | Inventory of discovery keys, capability families, maturity, witnesses, facets, profiles, and peer-dependency ids |
+| [`declaration.schema.json`](./declaration.schema.json) | Schema for the declaration |
+| [`facets/`](./facets/) | Capability facet schemas |
+| [`errors.json`](./errors.json) | Error-code registry |
+| [`event-codemap.json`](./event-codemap.json) | v1-to-v2 event-name mapping |
+| [`path-manifest.json`](./path-manifest.json) | Canonical operation and channel paths |
+| [`profiles.json`](./profiles.json) | Profile predicates (generated) |
+| [`peer-dependency-aliases.json`](./peer-dependency-aliases.json) | v1 alias mapping (generated) |
+| [`release.json`](./release.json) | Corpus release identity |
+| [`migrations.json`](./migrations.json) | Surfaces a 2.x minor replaced, and the deprecation row that retires each |
+| [`corrections.json`](./corrections.json) | Corrections that changed a v2 shape without breaking a conforming host |
+| [`surface-baseline.json`](./surface-baseline.json) | Every v2 surface, used to check that minors only add (generated) |
+
+Do not edit generated files by hand; each names its generator in `$comment` or
+its header. Machine artifacts are published in `@openwop/spec-artifacts`, which
+the conformance package consumes as an exact-version peer dependency.