@openwop/spec-artifacts 2.44.9 → 2.45.1

package/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.44.9",
-  "corpusTag": "v2.44.9",
+  "version": "2.45.1",
+  "corpusTag": "v2.45.1",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "69464bc0e1e71ef3b543a73d4fa4f67202343d2603c80af8033f6c3619ef1b30",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "57cf1d472f2bf9bf61bcd2239b9fd43277072d02a367d7a85725aea0e01300db",
-    "api/v2/asyncapi.yaml": "40cb3ee66657a736b92c6f79241169e3669486058a65e143d99509d41d691d67",
-    "api/v2/openapi.yaml": "08581315aa90da54f9a1c56f8b972a801eec99bda752d92c3ea2b16113b33a92",
+    "api/seams-v2.yaml": "c2d7c5d68c7358229149d2552da95e32798b9c21b21a56e19d561f29eab3633e",
+    "api/v2/asyncapi.yaml": "e9c0e3cc27f8d72a6f7704de24cb81f39175b8e6bc3ae5e4ad87d46fb0be6b0c",
+    "api/v2/openapi.yaml": "622817c49d5977b51bb83685e6cb0fe27a5e087b63c3a31621959670d6829a2d",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "0c0b737ffcf8f30e7d2809cec8a498232de710f41443212922ad8337cdde0b51",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -204,13 +204,13 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "0b2f28808ffe0b9d98a187775038c3406bb70919747a788a6e4f866e293ae6d3",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "cdc802f553a24b2ea8288370a54a9cf9a88d65bb80ec33c258c8fe2d2737edd1",
+    "spec/v1/core-standard-manifest.json": "4aa1dbeec20dc51fb727ad85e2012af1235bac608e41836db256e7816916f898",
     "spec/v1/deprecations.json": "a3293072ea951857395d05f0437264e88965f1e9019ff61c55bacfa9c1aaa17c",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "7ba482a850d94e185f12b69929e35054d24b72131a997d0ef70d59c10b83f7eb",
+    "spec/v1/gaps.json": "5be0fd0a8055f5cac76346fc2a98c44553f73d3f28a39ce12dcf1979d55d1409",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "4c50760be70cb644d02427bcaf5749606700edf4513f423903cf3b1d12f5c300",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -226,7 +226,7 @@
     "spec/v2/core/events.md": "c1a20e3aa6736119ea07aa2cf66faa808a1874d2cde4933033b65506d1742883",
     "spec/v2/core/execution.md": "8a0c9db1bbfb97c008ab9328b7333c1cc3318196e78bfbefb49e781bdf4f9d44",
     "spec/v2/core/form-content-packs.md": "02931227899676fd4581a27017be2a6c4953904717be9b81c29d12f87ab3917d",
-    "spec/v2/core/headers.md": "5cb1624fa63acc81992b6a6d842ec392cf7271aaf2f65d1f83c8c4fa286e6730",
+    "spec/v2/core/headers.md": "21d6c8220c3ac75b10e31c4cf6179abb539e2558af5006e40228d8c383ed5c92",
     "spec/v2/core/host-services.md": "18389b55286875922c26e13fbcd6c787fca2568f68b7e6f65176f1938404a218",
     "spec/v2/core/i18n.md": "882904b7d59f992ab1e5f7346167161a54cf665b8fee47e64a3862cf9133a580",
     "spec/v2/core/idempotency.md": "adbd317a6ebb57c2759c076297b31f67def9e391576bccd0bbea787b13e85872",
@@ -300,12 +300,12 @@
     "spec/v2/interop-map.schema.json": "0017c882df34ee215e2e0729de051490e09d43aac3d2c949285698ed51832f12",
     "spec/v2/migrations.json": "651954938a1e154c0b6f1e3dd6e105889d30de3bb65789f21de7f77a12869e9e",
     "spec/v2/migrations.schema.json": "b91ade6320ad1b1185c9495b9424f3aa63438ed8e412c45171c227d82c0afd86",
-    "spec/v2/path-manifest.json": "17298a245c5da9a70aa7ab0b7f2db4277e06209d6fcdd7187a8b4cea179c08f3",
+    "spec/v2/path-manifest.json": "27c2307b84376b2f22bea4e2213fc7e33ef3bf8fd1d18039f7955edb00dc9c9a",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
-    "spec/v2/release.json": "0219a1874302b4f3f2e8494d3c972cb649483838f53076e612c04bdf298c56dd",
+    "spec/v2/release.json": "e6a344ecc48e172a585fafeb83631c26629373e847b144a86cc01628693ea3ad",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "88e9e211ec1c8d532c413b7407a15f15a3001099b9cda77f2bcc694028a72544"
+    "spec/v2/surface-baseline.json": "b70b9f22313a99ea4853f8ffee1c4f6659b89e8cbba7317c52771fe9dfd40330"
   },
-  "corpusCommit": "16a175bf4ad0485d8c1eefe97a83bfbc8d1057bc"
+  "corpusCommit": "11a23de713fd4d56d9514a753d25229b029fb461"
 }

package/api/seams-v2.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP conformance seams profile (openwop-conformance-seams-v2)
-  version: 2.44.9
+  version: 2.45.1
   description: 'The OpenWOP conformance seams profile (`openwop-conformance-seams-v2`): test-only operations in their own
     path space, `/conformance/seams/…`. The profile is versioned and validated against the canonical v2 schemas with no tolerance
     path. It is not a capability: a host advertises the profile, never a `testSeams` flag.

package/api/v2/asyncapi.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.1.0
 info:
   title: OpenWOP v2 event streams
-  version: 2.44.9
+  version: 2.45.1
   description: 'OpenWOP v2 event streams over SSE. The run-events channel''s address is the OpenAPI path key, and the server
     pathname is empty (bare origin). `streamMode` is a stream mode from the closed set, or a comma-separated combination of
     them; `values` never combines. `hostEvents` has a default address, `/host/events`; a host MAY declare another under `heartbeat.deliveryChannel`.

package/api/v2/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP v2 API
-  version: 2.44.9
+  version: 2.45.1
   summary: REST surface for declaring, executing, suspending, resuming, and observing multi-step workflows.
   description: 'The OpenWOP v2 REST API. Paths are unversioned and served at the bare origin; a client selects a version with
     the `OpenWOP-Version` header from the host''s `protocolVersions[]`. Conformance seams and test-mode operations are not

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/spec-artifacts",
-  "version": "2.44.9",
+  "version": "2.45.1",
   "description": "The OpenWOP machine-readable contract: api/ (OpenAPI, AsyncAPI, the seams profile), schemas/ (v1 and v2 JSON Schemas), the spec/v1 and spec/v2 registries (errors, event codemap, declaration, deprecations, migrations, gaps) and CORPUS-STAMP.json — published from the openwop/openwop corpus tag; the peer dependency @openwop/openwop-conformance digest-checks at start (RFC 0168 §D.2).",
   "license": "Apache-2.0",
   "repository": {

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.44.9"
+      "version": "2.45.1"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -421,5 +421,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "1e96109ecd6b08d7d78b71ac89d708894152acdb554c948d7f6c21babd84c444"
+  "digest": "06d32e48f479d7327fcd76bfa1bd4c05ff86c254f0c1e9a46095839f6ccd3d34"
 }

package/spec/v1/gaps.json

@@ -13127,8 +13127,8 @@
       "surface": "A browser preflights the new request header. A host whose `Access-Control-Allow-Headers` is an explicit list, and which serves browsers cross-origin, fails every request from a client that sends it. Found at the SDK 2.5.0 release: openwop-app's list omitted it (as it once omitted `OpenWOP-Version`), and so did MyndHyve's public pack reads (fixed in myndhyve#549). v2 says nothing about CORS.",
       "witness": "unclassified",
       "requirementId": null,
-      "disposition": "transferred",
-      "target": "openwop#1763",
+      "disposition": "closed",
+      "target": null,
       "sources": [
         {
           "file": "RFCS/registers/0219-client-version-header.gaps.md",

package/spec/v2/core/headers.md

@@ -21,6 +21,10 @@ Standard headers keep their standard names: `Idempotency-Key`, `ETag`, `If-None-
 | `OpenWOP-Force-Engine-Version` | 1 | Test keys only. The server emits this run's events as if it ran the given engine version, which must be within `Capabilities.testing.forceEngineVersionRange`. Servers MUST reject it on production API keys with `403 force_engine_version_forbidden`. |
 | `OpenWOP-Version` | 55 | Selects one of the host's listed major.minor versions. Absent, `/.well-known/openwop` uses `preferredVersion` and every other unversioned path is v2; an unlisted value is 406 protocol_version_unsupported. |
 
+## Cross-origin preflight
+
+A host that answers a CORS preflight for an operation by granting the requesting origin (`Access-Control-Allow-Origin`) MUST admit the operation's method in `Access-Control-Allow-Methods` and, in `Access-Control-Allow-Headers`, every request header `api/v2/openapi.yaml` declares for it, `Authorization` when it is authenticated and `Content-Type` when it takes a body, by listing them or by reflecting `Access-Control-Request-Headers`. A `*` does not admit `Authorization`. Which origins a host grants, and whether with credentials, is host policy. Admitting this table's union on every operation conforms.
+
 ## Response headers
 
 | Header | Operations | Meaning |

package/spec/v2/path-manifest.json

@@ -1,5 +1,5 @@
 {
-  "$comment": "GENERATED by scripts/derive-v2-api.py (RFC 0172 §C.2 / RFC 0168 §C.2): the canonical v2 operations and channels; no seam or test-mode operation; every path unversioned. check-path-parity.mjs compares this to both API documents.",
+  "$comment": "GENERATED by scripts/derive-v2-api.py (RFC 0172 §C.2 / RFC 0168 §C.2): the canonical v2 operations and channels; no seam or test-mode operation; every path unversioned. check-path-parity.mjs compares this to both API documents. Per operation, requestHeaders / authenticated / requestBody are the facts headers.md §Cross-origin preflight derives the admitted set from.",
   "generatedFrom": [
     "api/v2/openapi.yaml",
     "api/v2/asyncapi.yaml"
@@ -9,277 +9,628 @@
     {
       "method": "GET",
       "path": "/.well-known/openwop",
-      "operationId": "getCapabilities"
+      "operationId": "getCapabilities",
+      "requestHeaders": [
+        "If-None-Match",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": false,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/agents",
-      "operationId": "listAgents"
+      "operationId": "listAgents",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/agents/org-chart",
-      "operationId": "getAgentOrgChart"
+      "operationId": "getAgentOrgChart",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/agents/org-chart/{departmentId}",
-      "operationId": "getAgentOrgChartDepartment"
+      "operationId": "getAgentOrgChartDepartment",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/agents/roster",
-      "operationId": "listAgentRoster"
+      "operationId": "listAgentRoster",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/agents/roster/{rosterId}",
-      "operationId": "getAgentRosterEntry"
+      "operationId": "getAgentRosterEntry",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/agents/{agentId}",
-      "operationId": "getAgent"
+      "operationId": "getAgent",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/agents/{agentId}/deployments",
-      "operationId": "listAgentDeployments"
+      "operationId": "listAgentDeployments",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "POST",
       "path": "/agents/{agentId}/deployments",
-      "operationId": "transitionAgentDeployment"
+      "operationId": "transitionAgentDeployment",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "GET",
       "path": "/audit/verify",
-      "operationId": "verifyAuditLog"
+      "operationId": "verifyAuditLog",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/content/pages",
-      "operationId": "listContentPages"
+      "operationId": "listContentPages",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "POST",
       "path": "/content/pages",
-      "operationId": "createContentPage"
+      "operationId": "createContentPage",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "PUT",
       "path": "/content/pages/{pageId}/sections/{sectionId}",
-      "operationId": "putContentSection"
+      "operationId": "putContentSection",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "DELETE",
       "path": "/content/pages/{slug}",
-      "operationId": "deleteContentPage"
+      "operationId": "deleteContentPage",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/content/pages/{slug}",
-      "operationId": "getContentPage"
+      "operationId": "getContentPage",
+      "requestHeaders": [
+        "Accept-Language",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": false,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/content/settings",
-      "operationId": "getContentSettings"
+      "operationId": "getContentSettings",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "PUT",
       "path": "/content/settings",
-      "operationId": "putContentSettings"
+      "operationId": "putContentSettings",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "GET",
       "path": "/host/effect-seams",
-      "operationId": "getEffectSeamManifest"
+      "operationId": "getEffectSeamManifest",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/host/events",
-      "operationId": "streamHostEvents"
+      "operationId": "streamHostEvents",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/interrupts/{token}",
-      "operationId": "inspectInterruptByToken"
+      "operationId": "inspectInterruptByToken",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": false,
+      "requestBody": false
     },
     {
       "method": "POST",
       "path": "/interrupts/{token}",
-      "operationId": "resolveInterruptByToken"
+      "operationId": "resolveInterruptByToken",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": false,
+      "requestBody": true
     },
     {
       "method": "GET",
       "path": "/openapi.json",
-      "operationId": "getOpenApiSpec"
+      "operationId": "getOpenApiSpec",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": false,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/prompts",
-      "operationId": "listPromptTemplates"
+      "operationId": "listPromptTemplates",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "POST",
       "path": "/prompts",
-      "operationId": "createPromptTemplate"
+      "operationId": "createPromptTemplate",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "DELETE",
       "path": "/prompts/{templateId}",
-      "operationId": "deletePromptTemplate"
+      "operationId": "deletePromptTemplate",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/prompts/{templateId}",
-      "operationId": "getPromptTemplate"
+      "operationId": "getPromptTemplate",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "PUT",
       "path": "/prompts/{templateId}",
-      "operationId": "updatePromptTemplate"
+      "operationId": "updatePromptTemplate",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "POST",
       "path": "/prompts:render",
-      "operationId": "renderPromptTemplate"
+      "operationId": "renderPromptTemplate",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "GET",
       "path": "/runs",
-      "operationId": "listRuns"
+      "operationId": "listRuns",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "POST",
       "path": "/runs",
-      "operationId": "createRun"
+      "operationId": "createRun",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Dedup",
+        "OpenWOP-Force-Engine-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "GET",
       "path": "/runs/{runId}",
-      "operationId": "getRun"
+      "operationId": "getRun",
+      "requestHeaders": [
+        "If-None-Match",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/runs/{runId}/ancestry",
-      "operationId": "getRunAncestry"
+      "operationId": "getRunAncestry",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/runs/{runId}/annotations",
-      "operationId": "listAnnotations"
+      "operationId": "listAnnotations",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "POST",
       "path": "/runs/{runId}/annotations",
-      "operationId": "createAnnotation"
+      "operationId": "createAnnotation",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "GET",
       "path": "/runs/{runId}/artifacts/{artifactId}",
-      "operationId": "getArtifact"
+      "operationId": "getArtifact",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "POST",
       "path": "/runs/{runId}/cancel",
-      "operationId": "cancelRun"
+      "operationId": "cancelRun",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "GET",
       "path": "/runs/{runId}/compensation",
-      "operationId": "getRunCompensation"
+      "operationId": "getRunCompensation",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/runs/{runId}/effects",
-      "operationId": "getRunEffects"
+      "operationId": "getRunEffects",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/runs/{runId}/eval-summary",
-      "operationId": "getEvalSummary"
+      "operationId": "getEvalSummary",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/runs/{runId}/events",
-      "operationId": "streamRunEvents"
+      "operationId": "streamRunEvents",
+      "requestHeaders": [
+        "Last-Event-ID",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/runs/{runId}/events/poll",
-      "operationId": "pollRunEvents"
+      "operationId": "pollRunEvents",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "POST",
       "path": "/runs/{runId}/interrupts/{nodeId}",
-      "operationId": "resolveInterruptByRun"
+      "operationId": "resolveInterruptByRun",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "GET",
       "path": "/runs/{runId}:diff",
-      "operationId": "diffRun"
+      "operationId": "diffRun",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "POST",
       "path": "/runs/{runId}:fork",
-      "operationId": "forkRun"
+      "operationId": "forkRun",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "POST",
       "path": "/runs/{runId}:pause",
-      "operationId": "pauseRun"
+      "operationId": "pauseRun",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "POST",
       "path": "/runs/{runId}:resume",
-      "operationId": "resumeRun"
+      "operationId": "resumeRun",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "POST",
       "path": "/runs:bulk-cancel",
-      "operationId": "bulkCancelRuns"
+      "operationId": "bulkCancelRuns",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "GET",
       "path": "/tools",
-      "operationId": "listTools"
+      "operationId": "listTools",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/tools/{toolId}",
-      "operationId": "getTool"
+      "operationId": "getTool",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "POST",
       "path": "/trigger-subscriptions",
-      "operationId": "createTriggerSubscription"
+      "operationId": "createTriggerSubscription",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "POST",
       "path": "/webhooks",
-      "operationId": "registerWebhook"
+      "operationId": "registerWebhook",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "DELETE",
       "path": "/webhooks/{webhookId}",
-      "operationId": "unregisterWebhook"
+      "operationId": "unregisterWebhook",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "GET",
       "path": "/webhooks/{webhookId}/dead-letters",
-      "operationId": "listWebhookDeadLetters"
+      "operationId": "listWebhookDeadLetters",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     },
     {
       "method": "POST",
       "path": "/webhooks/{webhookId}/rotate-secret",
-      "operationId": "rotateWebhookSecret"
+      "operationId": "rotateWebhookSecret",
+      "requestHeaders": [
+        "Idempotency-Key",
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": true
     },
     {
       "method": "GET",
       "path": "/workflows/{workflowId}",
-      "operationId": "getWorkflow"
+      "operationId": "getWorkflow",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
     }
   ],
   "channels": [

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
   "$comment": "RFC 0172 §D.1 — the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.44.9",
-  "corpusTag": "v2.44.9",
+  "version": "2.45.1",
+  "corpusTag": "v2.45.1",
   "updated": "2026-09-29"
 }

package/spec/v2/surface-baseline.json

@@ -4,7 +4,7 @@
     "schemas/v2/**/*.json",
     "spec/v2/path-manifest.json"
   ],
-  "release": "2.44.9",
+  "release": "2.45.1",
   "kinds": {
     "union": [
       "channel",