@openwop/spec-artifacts 2.42.6 → 2.42.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/spec-artifacts",
-  "version": "2.42.6",
+  "version": "2.42.8",
   "description": "The OpenWOP machine-readable contract: api/ (OpenAPI, AsyncAPI, the seams profile), schemas/ (v1 and v2 JSON Schemas), the spec/v1 and spec/v2 registries (errors, event codemap, declaration, deprecations, migrations, gaps) and CORPUS-STAMP.json — published from the openwop/openwop corpus tag; the peer dependency @openwop/openwop-conformance digest-checks at start (RFC 0168 §D.2).",
   "license": "Apache-2.0",
   "repository": {

package/schemas/audit-verify-result.schema.json

@@ -55,12 +55,12 @@
         "merkleRoot": {
           "type": "string",
           "minLength": 1,
-          "description": "Hex-encoded SHA-256 Merkle root over the canonicalized entries 0..atSequence inclusive. Verifiers re-compute and compare; mismatch implies chain mutation between two checkpoints."
+          "description": "Lowercase-hex Merkle root over the entries this checkpoint anchors: sequence in (P, atSequence], P the previous checkpoint's atSequence or 0. Leaves are the entries' hashes (SHA-256 of RFC 8785 JCS) in sequence order; a parent is SHA-256 of the ASCII bytes left ‖ right; a last odd node is promoted unchanged (auth-profiles.md §Audit-log integrity 3, RFC 0218). Verifiers re-compute and compare, holding the leaf count to atSequence − P; a mismatch implies chain mutation since the previous checkpoint."
         },
         "signature": {
           "type": "string",
           "minLength": 1,
-          "description": "Base64-encoded Ed25519 signature over the checkpoint's canonical JSON (excluding the `signature` field itself), produced with the host's advertised `auditLogIntegrity.checkpointPublicKey`."
+          "description": "Base64-encoded Ed25519 signature over the 32 bytes `merkleRoot` hex-decodes to (not its hex text, not the checkpoint object), verifiable with the host's advertised `auditLogIntegrity.checkpointPublicKey` (RFC 0218)."
         }
       },
       "additionalProperties": false

package/schemas/v2/audit-verify-result.schema.json

@@ -70,12 +70,12 @@
         "merkleRoot": {
           "type": "string",
           "minLength": 1,
-          "description": "Hex-encoded SHA-256 Merkle root over the canonicalized entries 0..atSequence inclusive. Verifiers re-compute and compare; mismatch implies chain mutation between two checkpoints."
+          "description": "Lowercase-hex Merkle root over the entries this checkpoint anchors: sequence in (P, atSequence], P the previous checkpoint's atSequence or 0. Leaves are the entries' hashes (SHA-256 of RFC 8785 JCS) in sequence order; a parent is SHA-256 of the ASCII bytes left ‖ right; a last odd node is promoted unchanged (auth-profiles.md §Audit-log integrity 3, RFC 0218). Verifiers re-compute and compare, holding the leaf count to atSequence − P; a mismatch implies chain mutation since the previous checkpoint."
         },
         "signature": {
           "type": "string",
           "minLength": 1,
-          "description": "Base64-encoded Ed25519 signature over the checkpoint's canonical JSON (excluding the `signature` field itself), produced with the host's advertised `auditLogIntegrity.checkpointPublicKey`."
+          "description": "Base64-encoded Ed25519 signature over the 32 bytes `merkleRoot` hex-decodes to (not its hex text, not the checkpoint object), verifiable with the host's advertised `auditLogIntegrity.checkpointPublicKey` (RFC 0218)."
         }
       },
       "additionalProperties": false

package/schemas/v2/capabilities.schema.json

@@ -118,7 +118,8 @@
     },
     "minClientVersion": {
       "type": "string",
-      "description": "RFC 0172 row C5.8 — MUST (426 client_version_unsupported)."
+      "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$",
+      "description": "Optional. The lowest <major>.<minor> client this host serves (versioning.md §1.5). A host MAY refuse a client below it; a refusal MUST be 426 client_version_unsupported."
     },
     "runtimeCapabilities": {
       "type": "array",
@@ -2535,10 +2536,6 @@
           "required": [
             "version"
           ],
-          "if": {
-            "properties": {}
-          },
-          "then": {},
           "properties": {
             "version": {
               "type": "integer",
@@ -7913,7 +7910,7 @@
         "export": {
           "type": "boolean",
           "default": false,
-          "description": "Host can emit an export bundle for the caller's tenant/workspace via `GET /export`."
+          "description": "Host can emit an export bundle for the caller's tenant or workspace (portability.md)."
         },
         "import": {
           "type": "boolean",
@@ -7940,7 +7937,7 @@
         "dryRun": {
           "type": "boolean",
           "default": true,
-          "description": "Import supports a no-write plan preview (`POST /import?dryRun=true`). MUST be true if `import` is true."
+          "description": "Import supports a no-write plan preview. MUST be true if `import` is true."
         }
       },
       "allOf": [

package/schemas/v2/error-envelope.schema.json

@@ -135,82 +135,157 @@
       "minLength": 1
     },
     "details": {
-      "oneOf": [
-        {
-          "type": "object",
-          "required": [
-            "supported"
-          ],
-          "properties": {
-            "supported": {
-              "type": "array",
-              "minItems": 1,
-              "items": {
-                "type": "string",
-                "enum": [
-                  "values",
-                  "updates",
-                  "messages",
-                  "debug"
-                ]
-              },
-              "description": "Each individual mode the host serves; combinations are not listed (events.md §The events channel)."
-            }
-          },
-          "additionalProperties": true,
-          "x-openwop-error": "unsupported_stream_mode"
-        },
-        {
-          "type": "object",
-          "required": [
-            "runStatus"
-          ],
-          "properties": {
-            "runStatus": {
-              "type": "string",
-              "description": "The run status that refused the transition (runs.md §Pause and resume)."
-            }
-          },
-          "additionalProperties": true,
-          "x-openwop-error": "run_state_conflict"
+      "type": "object",
+      "additionalProperties": true,
+      "description": "Error-specific contextual data. A code that registers a details schema in errors.json constrains it through the allOf below, selected by `error`; every other code accepts any object."
+    }
+  },
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "error": {
+            "const": "unsupported_stream_mode"
+          }
         },
-        {
-          "type": "object",
-          "additionalProperties": false,
-          "required": [
-            "type",
-            "keys"
-          ],
-          "properties": {
-            "type": {
-              "type": "string",
-              "description": "the event type whose payload could not be projected"
+        "required": [
+          "error"
+        ]
+      },
+      "then": {
+        "properties": {
+          "details": {
+            "type": "object",
+            "required": [
+              "supported"
+            ],
+            "properties": {
+              "supported": {
+                "type": "array",
+                "minItems": 1,
+                "items": {
+                  "type": "string",
+                  "enum": [
+                    "values",
+                    "updates",
+                    "messages",
+                    "debug"
+                  ]
+                },
+                "description": "Each individual mode the host serves; combinations are not listed (events.md §The events channel)."
+              }
             },
-            "keys": {
-              "type": "array",
-              "items": {
-                "type": "string"
-              },
-              "minItems": 1,
-              "description": "the property names the host could neither carry nor seat"
+            "additionalProperties": true,
+            "x-openwop-error": "unsupported_stream_mode"
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "error": {
+            "const": "run_state_conflict"
+          }
+        },
+        "required": [
+          "error"
+        ]
+      },
+      "then": {
+        "properties": {
+          "details": {
+            "type": "object",
+            "required": [
+              "runStatus"
+            ],
+            "properties": {
+              "runStatus": {
+                "type": "string",
+                "description": "The run status that refused the transition (runs.md §Pause and resume)."
+              }
             },
-            "eventId": {
-              "$ref": "ids.schema.json#/$defs/eventId"
+            "additionalProperties": true,
+            "x-openwop-error": "run_state_conflict"
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "error": {
+            "const": "client_version_unsupported"
+          }
+        },
+        "required": [
+          "error"
+        ]
+      },
+      "then": {
+        "properties": {
+          "details": {
+            "type": "object",
+            "properties": {
+              "minClientVersion": {
+                "type": "string",
+                "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$",
+                "description": "OPTIONAL. The host's advertised minClientVersion, so a client refused at discovery learns the floor (versioning.md §1.5)."
+              }
             },
-            "sequence": {
-              "type": "integer",
-              "minimum": 0
-            }
-          },
-          "x-openwop-error": "payload_unprojectable"
+            "additionalProperties": true,
+            "x-openwop-error": "client_version_unsupported"
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "error": {
+            "const": "payload_unprojectable"
+          }
         },
-        {
-          "type": "object",
-          "additionalProperties": true
+        "required": [
+          "error"
+        ]
+      },
+      "then": {
+        "properties": {
+          "details": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "type",
+              "keys"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "the event type whose payload could not be projected"
+              },
+              "keys": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "minItems": 1,
+                "description": "the property names the host could neither carry nor seat"
+              },
+              "eventId": {
+                "$ref": "ids.schema.json#/$defs/eventId"
+              },
+              "sequence": {
+                "type": "integer",
+                "minimum": 0
+              }
+            },
+            "x-openwop-error": "payload_unprojectable"
+          }
         }
-      ]
+      }
     }
-  },
+  ],
   "x-openwop-http-status": {
     "connection_provider_unresolved": 400,
     "connector_action_unresolved": 400,

package/spec/v1/alias-detectors.json

@@ -308,6 +308,12 @@
       "file": "spec/v2/declaration.json",
       "token": "\"deltaTransport\"",
       "deprecation": "openwop.deprecation.v2-a2ui-delta-transport-facet"
+    },
+    {
+      "alias": "optional `locale` on InterruptPayload.data and the resume payload",
+      "file": "spec/v1/i18n.md",
+      "token": "## `locale` field on `InterruptPayload`",
+      "deprecation": "openwop.deprecation.interrupt-locale-field"
     }
   ]
 }

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.42.6"
+      "version": "2.42.8"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -421,5 +421,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "30878bc2bfc8d91cdb69401176b66daf9f2684e328e7e76d703f5bd755784a38"
+  "digest": "62b69d4ef9ff05f730a2e6bc253709a13a03c336eb716c9e9752b31595751ba0"
 }

package/spec/v1/deprecations.json

@@ -1002,6 +1002,28 @@
           "token": "deltaTransport"
         }
       ]
+    },
+    {
+      "id": "openwop.deprecation.interrupt-locale-field",
+      "status": "deprecated",
+      "surface": "optional `locale` field on `InterruptPayload.data` and on the interrupt resume payload",
+      "kind": "schema-field",
+      "deprecatedIn": "RFC 0171 §Migration table row `openwop.migration.C4.17` (v2 closes interrupt data and resume bodies)",
+      "authority": "RFCS/0171-v2-wire-envelope.md §Migration table, row openwop.migration.C4.17",
+      "removeIn": "2.0",
+      "replacement": "none; the locale a host rendered in is request-scoped (`Content-Language`, spec/v2/core/i18n.md)",
+      "codemod": "openwop.codemod.interrupt-locale-drop",
+      "sources": [
+        {
+          "file": "RFCS/0171-v2-wire-envelope.md",
+          "token": "openwop.migration.C4.17"
+        },
+        {
+          "file": "spec/v1/i18n.md",
+          "token": "`locale` field on `InterruptPayload`"
+        }
+      ],
+      "removalTrigger": "v2.0-cut"
     }
   ]
 }

package/spec/v1/gaps.json

@@ -1,7 +1,7 @@
 {
   "$schema": "./gaps.schema.json",
   "version": 1,
-  "updated": "2026-09-26",
+  "updated": "2026-09-28",
   "witnessClasses": [
     "witnessable-unaided",
     "witnessable-gated",
@@ -12898,6 +12898,193 @@
         }
       ]
     },
+    {
+      "id": "openwop.gap.0218.1",
+      "rfc": "0218",
+      "local": "G1",
+      "section": "§A",
+      "surface": "`auth-profiles.md` §3's emitted checkpoint carries `ts`, but `audit-verify-result.schema.json`'s `Checkpoint` is closed over `{checkpoint, atSequence, merkleRoot, signature}`, so a verify result cannot echo it.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v1",
+      "sources": [
+        {
+          "file": "RFCS/registers/0218-audit-checkpoint-preimage.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0219.1",
+      "rfc": "0219",
+      "local": "G1",
+      "section": "§Compatibility / §C.2",
+      "surface": "Two of the three certified hosts read a malformed value as `0.0` and refuse it (`openwop-examples` v2 reference host `router.ts`, openwop-app `protocolVersion.ts`). Under §C.2 both fail the planned `malformed-not-refused` leg.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0219-client-version-header.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0219.2",
+      "rfc": "0219",
+      "local": "G2",
+      "section": "§A / Unresolved question 1",
+      "surface": "Whether the value names the corpus release the client implements (this RFC) or a product version (v1's `openwop-sdk/<v>`).",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0219-client-version-header.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0219.3",
+      "rfc": "0219",
+      "local": "G3",
+      "section": "Unresolved question 3",
+      "surface": "RFC 9110 §15.5.22 requires `Upgrade` on every `426`; none of the three hosts sends it and no v2 text names a value.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "spec/v2/core/versioning.md",
+      "sources": [
+        {
+          "file": "RFCS/registers/0219-client-version-header.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0219.4",
+      "rfc": "0219",
+      "local": "G4",
+      "section": "Unresolved question 5",
+      "surface": "`client_version_unsupported` has `details: null`. Two hosts send `details.minClientVersion`, MyndHyve sends none.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0219-client-version-header.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0219.5",
+      "rfc": "0219",
+      "local": "G5",
+      "section": "Unresolved question 2",
+      "surface": "The header's meaning on a `/v1/…` path during the overlap. The reference host applies the floor there; openwop-app does not.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0219-client-version-header.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0219.6",
+      "rfc": "0219",
+      "local": "G6",
+      "section": "§Implementation notes",
+      "surface": "No v2 SDK sends the header today (`openwop-sdks`: `sdk/typescript-v2`, `sdk/python-v2`, Go).",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "rfc-0219",
+      "sources": [
+        {
+          "file": "RFCS/registers/0219-client-version-header.gaps.md",
+          "token": "G6"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0220.1",
+      "rfc": "0220",
+      "local": "G1",
+      "section": "§C.2",
+      "surface": "`a2uiSurface` has no tier-2 witness path. MyndHyve's v2 discovery drops `schemaVersions.kinds`, it serves no `POST /conformance/seams/sample/a2ui/emit-surface`, and its seams profile is off.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "transferred",
+      "target": "myndhyve/services/workflow-runtime",
+      "sources": [
+        {
+          "file": "RFCS/registers/0220-ext-families-graduate-on-evidence.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0220.2",
+      "rfc": "0220",
+      "local": "G2",
+      "section": "§B",
+      "surface": "The 11 reservations have no portable contract, so their `Stable` means \"advertised correctly by a tier-2 host\", not interoperation.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "cross-host-demand",
+      "sources": [
+        {
+          "file": "RFCS/registers/0220-ext-families-graduate-on-evidence.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0220.3",
+      "rfc": "0220",
+      "local": "G3",
+      "section": "§D",
+      "surface": "`evidence/host-tiers.json` has no tier-3 row; the first independent host adds one.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "tier-3-host",
+      "sources": [
+        {
+          "file": "RFCS/registers/0220-ext-families-graduate-on-evidence.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0221.1",
+      "rfc": "0221",
+      "local": "G1",
+      "section": "§Implementation notes",
+      "surface": "MyndHyve's behaviour for a secret-less registration is unmeasured.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "myndhyve-next-cut",
+      "sources": [
+        {
+          "file": "RFCS/registers/0221-generated-webhook-secret-returned-once.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
     {
       "id": "openwop.gap.spec.a2a-integration.g1",
       "rfc": "0152",

package/spec/v1/migrations.json

@@ -1038,6 +1038,24 @@
       "deprecationId": null,
       "note": "Envelopes are transient; a persisted envelope.* event is read through the adapter."
     },
+    {
+      "id": "openwop.migration.C4.17",
+      "child": "C4",
+      "kind": "remove",
+      "v1": {
+        "surface": "optional `locale` on `InterruptPayload.data` and on the resume payload (i18n.md §\"`locale` field on `InterruptPayload`\")",
+        "path": "spec/v1/i18n.md"
+      },
+      "v2": {
+        "surface": "none — interrupt data and resume bodies are closed; the rendered locale is request-scoped (`Content-Language`, spec/v2/core/i18n.md)"
+      },
+      "codemod": "openwop.codemod.interrupt-locale-drop",
+      "persistedData": "translated",
+      "requirementIds": [],
+      "gapIds": [],
+      "deprecationId": "openwop.deprecation.interrupt-locale-field",
+      "note": "Recorded 2026-09-27: the v2 schema closure (C4.9) left the v1 field no place, and it is dropped rather than re-added. A v1 `interrupt.requested` event carrying `data.locale` is read through the C.9 adapter like any other extra key."
+    },
     {
       "id": "openwop.migration.C6.1",
       "child": "C6",