@openwop/spec-artifacts 2.45.10 → 2.45.12

package/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.10",
-  "corpusTag": "v2.45.10",
+  "version": "2.45.12",
+  "corpusTag": "v2.45.12",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "ac6de5303872664b78ff419c035915593e01599e02835e777a0123de1baeb398",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "448d60e189059fe6bd4953b8c47f6941f89053707f45621d4e32b8bef0773670",
-    "api/v2/asyncapi.yaml": "8db5aa748cd4f6481055d48d0a6d66d596f20e712d2004aa86de79b4c34e9bd9",
-    "api/v2/openapi.yaml": "e3b1ed5954b8e9acd6c68cd2a924603afcebb686d07fb5a26e929b01b7f6599b",
+    "api/seams-v2.yaml": "b971877ce1060183e49a3b6c0b9ba1b3bfbf52cceb38482bc03b8d7554231b5f",
+    "api/v2/asyncapi.yaml": "af56f052444d3ffa2b8f9c380dcdb91c903b813d8fe7941d030c785ab54cbeac",
+    "api/v2/openapi.yaml": "47e3b00c61d4ef6fc7e42b819b52648bb3a1de966f5d6e4a41c6ff4a6c2d80f3",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "bd1c00fae7b6fda506a75aff841bbdc438d4ce092642a72041203bee999b88de",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -117,7 +117,7 @@
     "schemas/v2/artifact.schema.json": "85b9dc284d39b99d2a66fa8cbf47f2dd3d8526d3bd6cc411ad315b372de38975",
     "schemas/v2/audit-verify-result.schema.json": "14af8e9283510f0a40e48a2059c929ee44e0fc9fa3cc66a95bfbe90b17c48297",
     "schemas/v2/budget-policy.schema.json": "1de68095db0beb5c7a4be629de26e79f62ebbe748a88d46f36e768edfd1f0d68",
-    "schemas/v2/capabilities.schema.json": "4503d383c2b5efff532a79dabc79d17b5f6494c88d5b385bd3ca5f1a4e3f7647",
+    "schemas/v2/capabilities.schema.json": "c7a01b2f569139f99ba5e1a5329a42556fbd82bc743f8fd96963304395fc9ef0",
     "schemas/v2/certification-bundle.schema.json": "82ce31a1ed6c7e21b0ba88ff62a7b8b768fc3b176b1d06fce023203830b94725",
     "schemas/v2/channel-presence-payload.schema.json": "4eeb224910e6f7eee3ab5e7c3899559c25c83a26d0022e0ad195c4672611977a",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
@@ -127,6 +127,7 @@
     "schemas/v2/compensation-projection.schema.json": "f46977c7076347b5473faa8c4bbe73d8321c33b33c98fff2f26ee7cbada4ed98",
     "schemas/v2/configurable.schema.json": "33a6884047e2490f723733bf8b74d3b9164e00374cfea6dc3eac5a70dc368861",
     "schemas/v2/connection-pack-manifest.schema.json": "8d019de6bd0c5b14ea3b227580734ec792521493b396a850f7f9217aa7a6a547",
+    "schemas/v2/connection-provider-registry.schema.json": "5b404da328a95c45808929e233ee766ebd635cf0df6f5d15d4c19354dfd7e75d",
     "schemas/v2/conversation-event.schema.json": "9ad4c57285818edbf38b17816de0c4162f777c835f59e68702d0367a81cbccf6",
     "schemas/v2/conversation-turn.schema.json": "75bb6a4a03072a958feb5b34e2a1f40471e9e3996a81fa430b65717f0773c9a4",
     "schemas/v2/credential-provenance.schema.json": "f86b09e94b1c524dec7d1c6353965665ae8891e9517faef6e742d639c5578c99",
@@ -206,13 +207,13 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "0b2f28808ffe0b9d98a187775038c3406bb70919747a788a6e4f866e293ae6d3",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "819828fb2f978fa9e4a994652bbe16c797d36a8c4393d57d1432c8a53f2120ab",
+    "spec/v1/core-standard-manifest.json": "f138120b544d0e40c9ac05dd9b77a51bb624a3212cfd5a13d97be96fbbe9b3e4",
     "spec/v1/deprecations.json": "a3293072ea951857395d05f0437264e88965f1e9019ff61c55bacfa9c1aaa17c",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "7eab313ec80c40285e3290113f5d3fea90ea6f8bc385ef6fd15d415f52540035",
+    "spec/v1/gaps.json": "9dd6e21e6122b292c4912028dfcc8368e3df1a8bafc81451c73c90a2a9a8fdc1",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "4c50760be70cb644d02427bcaf5749606700edf4513f423903cf3b1d12f5c300",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -222,13 +223,13 @@
     "spec/v2/core/artifact-type-packs.md": "f734740cc3963f86c9f273a7dace26291bba2855161ddd3540618131a2c8d13e",
     "spec/v2/core/capabilities.md": "04feda1747ca8f97443176cbf82d7d69891322a7bbf9a9bed88f519b8fb574fe",
     "spec/v2/core/conformance.md": "3ca291e63bc70a6ef829ae8759ad0ded3741ea7aa507bbbdffc57de443ab2ae2",
-    "spec/v2/core/connection-packs.md": "1ee129d792c537bfe82393ccb92555d8e6ddc342b1aa781a13f101b27ec38171",
+    "spec/v2/core/connection-packs.md": "c80f95bd6a03698f35c72cdb2b46bd973f49203bbd786c26760e35fa86e6f23d",
     "spec/v2/core/conversation.md": "354fa57c73d11062e523a44aa75a6353c5c81aefaf306d30c42416a228c82c86",
     "spec/v2/core/errors.md": "91f46acc9c9a5532a98cf62c69285d68575c100ff6064f0b1bf94731a087e34a",
     "spec/v2/core/events.md": "c1a20e3aa6736119ea07aa2cf66faa808a1874d2cde4933033b65506d1742883",
     "spec/v2/core/execution.md": "8a0c9db1bbfb97c008ab9328b7333c1cc3318196e78bfbefb49e781bdf4f9d44",
     "spec/v2/core/form-content-packs.md": "02931227899676fd4581a27017be2a6c4953904717be9b81c29d12f87ab3917d",
-    "spec/v2/core/headers.md": "1e601c31d2c8bcb7628b7efe2b65fb53d9c79db2a60a4235c333cf85290bb0c0",
+    "spec/v2/core/headers.md": "60aee0768bb1b15cf8ff783170ba6541c8c106da417c8a066c8f85cb6a5b1ba1",
     "spec/v2/core/host-services.md": "73f26ea32891044131d63f9861d2cbddccb5d08bf76e29e47afef9bb5b646791",
     "spec/v2/core/i18n.md": "882904b7d59f992ab1e5f7346167161a54cf665b8fee47e64a3862cf9133a580",
     "spec/v2/core/idempotency.md": "adbd317a6ebb57c2759c076297b31f67def9e391576bccd0bbea787b13e85872",
@@ -246,12 +247,12 @@
     "spec/v2/core/security-defaults.md": "887d8c4bc592094e3b931c23f1c2175c18ebbd47528b074016f9d2091bc513b2",
     "spec/v2/core/storage.md": "dc94b985847c1341c7a064f04a6010f0fdbe6c3ab3e555d4362878c81d764c18",
     "spec/v2/core/tool-catalog.md": "d16a9004418719c48301804aefa4d7ab6f41112a4ed83727f552aa1b92b418b0",
-    "spec/v2/core/versioning.md": "b7acb0d8b77425cb53ea700e47ba790bf7506de600c398690e6ec5bb9c7a220e",
+    "spec/v2/core/versioning.md": "fe48f4514b9c9f998d5da1930b8faa02ca4de89dcd49b07d95414fb04c67d438",
     "spec/v2/core/webhooks.md": "daf6ec03092f4b3fde1eb74a5e2e801ec48db5139a13fcc0fd7fb4a004635ae3",
     "spec/v2/core/workflow-chain-packs.md": "fdce7a8477e269950a2bac05ee6eddbd66eb0b670b464d00054f7196ec05d29c",
     "spec/v2/corrections.json": "3a8d93e33865b692d26a3b6bfd3819766e206b2e0c2a69669baa4bf833d05a49",
     "spec/v2/corrections.schema.json": "46bbffb954d13bd9995aebc912ceeb2544f7064331abf25fd6ab85c81a5cec94",
-    "spec/v2/declaration.json": "8e5eab46ea448725b806a2395f80f5c36fa582a308f80eb09931a633a595eae1",
+    "spec/v2/declaration.json": "e963d3aa73892ee08281227c8a01aa6c06f1b825cdcb26aab029b1ab3f4155bf",
     "spec/v2/declaration.schema.json": "ef951633e4070899f64828f5cf1b5f4870270a0360f81dbb49b5b4d6cd407550",
     "spec/v2/errors.json": "83f048b0a06952b4af6f125fb66c4212acab51056b411390f1010acd6ab9cdc0",
     "spec/v2/errors.schema.json": "47404ad53e6147cf9017b813483712466573e419fb33e6c4b6c12d3e7deba1bc",
@@ -281,6 +282,7 @@
     "spec/v2/facets/aiProviders.schema.json": "4eb911c2403b8f618325194855a1326680fbda2549dfbfe86a70dd2743f8fb12",
     "spec/v2/facets/auditLogIntegrity.schema.json": "9a7f81320c8f940c6f4129bc7dd895a4063231c5458a717a08c2cbf9bb886c46",
     "spec/v2/facets/auth.schema.json": "7d98bc81a0f7d307460d039eebfebd21388091bfe1d538762583940f94c0bd2a",
+    "spec/v2/facets/connections.schema.json": "f998bb206a5814183bb4720cc34fa43b7ab64d61e39a79437b009c589ce8b78e",
     "spec/v2/facets/envelopeStrictness.schema.json": "28be0a27f880bd45ec1222a16155f5e9167bbca57bf0322970fe1eb2654562aa",
     "spec/v2/facets/heartbeat.schema.json": "81d7fa1895a8b0241bd07cf00a7e7905bef0fd14eb3427325261c62eee5746a6",
     "spec/v2/facets/interrupt.schema.json": "2110ef32c3f880bf706475ef4cf8ddf97ff06871b8e6003a5edbcf4439f1fb70",
@@ -297,17 +299,17 @@
     "spec/v2/generated/error-codes.md": "f171c0ca1be40221f9b4fbfcbce73c728c315a1e8feb8dd6bf738d6ca9e29526",
     "spec/v2/harness-trust-anchors.json": "6007b92eae16a070fbc3777424efb0abfe865fda89d096963109b96282b91205",
     "spec/v2/harness-trust-anchors.schema.json": "372b5d92337c893d3449eff3f6bfd009ac09fdac285296d8bdbe0a08fff9e34c",
-    "spec/v2/id-field-bindings.json": "cc315f9a7aa5ec552860c1a790e105502fb737dc10b57aa5641bdd7405d6b638",
+    "spec/v2/id-field-bindings.json": "aa3e7c3590a490a77286e3ae60c1ab7407e7d627e05f981c3e08f221af4bd5dc",
     "spec/v2/interop-map.json": "02255dafe7eb55f61ca7f9ae7c21f079d1848a6756991343088975ac9d184b8d",
     "spec/v2/interop-map.schema.json": "0017c882df34ee215e2e0729de051490e09d43aac3d2c949285698ed51832f12",
     "spec/v2/migrations.json": "651954938a1e154c0b6f1e3dd6e105889d30de3bb65789f21de7f77a12869e9e",
     "spec/v2/migrations.schema.json": "b91ade6320ad1b1185c9495b9424f3aa63438ed8e412c45171c227d82c0afd86",
-    "spec/v2/path-manifest.json": "36363105280139dad095dc4f64b5b272121e9759cdcf6de011358dd1c1a90540",
+    "spec/v2/path-manifest.json": "b84c7561f50c7df0cb61b202bd6595acad3ee7edca7a45f711949bea3c69bd27",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
-    "spec/v2/release.json": "044530e75b4cdec6747c1bcebe799ebc62f1f6c2a1e722369b35b2854e54049f",
+    "spec/v2/release.json": "0966caad45aa4689f63ff476b863590b716c2ba264f2da20c964b0fe7f8773f2",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "99ddcf9eb0d06967879ce7f6e54c49fe19bfabc9ee50f00f78699b401108bfd5"
+    "spec/v2/surface-baseline.json": "a00146b764f3f2f31af25cef62a1cf71f43354c55bb79a77ad38642d0ad460d5"
   },
-  "corpusCommit": "8817d7c027047bbf1aa8d9385122137396f1bdca"
+  "corpusCommit": "f3c37c0559bd41f77fe89b00f306357b60497fb9"
 }

package/api/seams-v2.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP conformance seams profile (openwop-conformance-seams-v2)
-  version: 2.45.10
+  version: 2.45.12
   description: 'The OpenWOP conformance seams profile (`openwop-conformance-seams-v2`): test-only operations in their own
     path space, `/conformance/seams/…`. The profile is versioned and validated against the canonical v2 schemas with no tolerance
     path. It is not a capability: a host advertises the profile, never a `testSeams` flag.

package/api/v2/asyncapi.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.1.0
 info:
   title: OpenWOP v2 event streams
-  version: 2.45.10
+  version: 2.45.12
   description: 'OpenWOP v2 event streams over SSE. The run-events channel''s address is the OpenAPI path key, and the server
     pathname is empty (bare origin). `streamMode` is a stream mode from the closed set, or a comma-separated combination of
     them; `values` never combines. `hostEvents` has a default address, `/host/events`; a host MAY declare another under `heartbeat.deliveryChannel`.

package/api/v2/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP v2 API
-  version: 2.45.10
+  version: 2.45.12
   summary: REST surface for declaring, executing, suspending, resuming, and observing multi-step workflows.
   description: 'The OpenWOP v2 REST API. Paths are unversioned and served at the bare origin; a client selects a version with
     the `OpenWOP-Version` header from the host''s `protocolVersions[]`. Conformance seams and test-mode operations are not
@@ -58,6 +58,8 @@ tags:
   description: 'Localized authored content: public delivery and tenant-scoped admin CRUD. Gated on `capabilities.content.supported`.'
 - name: host
   description: Host-capability resources, such as the agent workspace file store (gated on `capabilities.workspace.*`).
+- name: connections
+  description: 'Connection-pack provider registry: the definitions a host resolves against and the registrations it refused.'
 paths:
   /.well-known/openwop:
     get:
@@ -821,8 +823,8 @@ paths:
         changed the subscription''s state, the `trigger.subscription-state-changed` payload. A delivery refused by a `required`
         verification check appears with `reason: "verification_failed"` and no `stateChange`. A record MUST NOT carry the
         inbound body, the inbound headers, the signature, the signing secret, or any credential. Gated on `triggerBridge.deadLetter`:
-        a host that does not advertise it answers `404 not_found`. Another tenant''s subscription id answers `404 not_found`,
-        exactly as an id the host never minted.'
+        a host that does not advertise it answers `404 not_found`. A subscription id whose tenant segment is not the caller''s
+        is refused `403 id_tenant_mismatch` (`identity.md` §5); an id the host never minted answers `404 not_found`.'
       operationId: listTriggerDeadLetters
       security:
       - ApiKeyAuth:
@@ -3318,6 +3320,92 @@ paths:
         - webhooks:manage
       - OpenIdConnect:
         - webhooks:manage
+  /connection-providers:
+    get:
+      tags:
+      - connections
+      operationId: listConnectionProviders
+      summary: List the host's connection providers and refused pack registrations
+      description: 'Every provider definition the host resolves against, built-ins included, each bare id once, and the pack
+        registrations it refused under `connection-packs.md` §Provider identity. Host-global: no tenant data. Gated on `connections.providerRead`:
+        a host that does not advertise it answers `404 not_found`.'
+      responses:
+        '200':
+          description: The registry.
+          content:
+            application/json:
+              schema:
+                $ref: ../../schemas/v2/connection-provider-registry.schema.json
+          headers:
+            OpenWOP-Version:
+              $ref: '#/components/headers/OpenWOPVersion'
+        '401':
+          $ref: '#/components/responses/Unauthenticated'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+        '404':
+          $ref: '#/components/responses/NotFound'
+      parameters:
+      - $ref: '#/components/parameters/OpenWOPVersion'
+      - $ref: '#/components/parameters/OpenWOPClientVersion'
+      security:
+      - ApiKeyAuth:
+        - manifest:read
+      - OAuth2:
+        - manifest:read
+      - OpenIdConnect:
+        - manifest:read
+  /connection-providers/{providerId}:
+    get:
+      tags:
+      - connections
+      operationId: resolveConnectionProvider
+      summary: Resolve one connection provider reference
+      description: 'Resolves a bare provider id, or with `pack` the qualified form `<packName>#<providerId>`, to the one definition
+        it names. A bare id resolves only when exactly one definition exists; with `pack` it resolves only to that pack''s
+        definition. Not resolvable: `404` `connection_provider_unresolved`. Gated on `connections.providerRead`.'
+      parameters:
+      - name: providerId
+        in: path
+        required: true
+        schema:
+          type: string
+          minLength: 1
+          maxLength: 128
+        description: The bare provider id.
+      - name: pack
+        in: query
+        required: false
+        schema:
+          type: string
+          minLength: 1
+          maxLength: 214
+        description: 'A pack name: the qualified form, carried as a query parameter so no `#` travels in the path.'
+      - $ref: '#/components/parameters/OpenWOPVersion'
+      - $ref: '#/components/parameters/OpenWOPClientVersion'
+      responses:
+        '200':
+          description: The resolved definition.
+          content:
+            application/json:
+              schema:
+                $ref: ../../schemas/v2/connection-provider-registry.schema.json#/$defs/provider
+          headers:
+            OpenWOP-Version:
+              $ref: '#/components/headers/OpenWOPVersion'
+        '401':
+          $ref: '#/components/responses/Unauthenticated'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+        '404':
+          $ref: '#/components/responses/NotFound'
+      security:
+      - ApiKeyAuth:
+        - manifest:read
+      - OAuth2:
+        - manifest:read
+      - OpenIdConnect:
+        - manifest:read
   /host/events:
     get:
       tags:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/spec-artifacts",
-  "version": "2.45.10",
+  "version": "2.45.12",
   "description": "The OpenWOP machine-readable contract: api/ (OpenAPI, AsyncAPI, the seams profile), schemas/ (v1 and v2 JSON Schemas), the spec/v1 and spec/v2 registries (errors, event codemap, declaration, deprecations, migrations, gaps) and CORPUS-STAMP.json — published from the openwop/openwop corpus tag; the peer dependency @openwop/openwop-conformance digest-checks at start (RFC 0168 §D.2).",
   "license": "Apache-2.0",
   "repository": {

package/schemas/v2/capabilities.schema.json

@@ -1350,6 +1350,10 @@
         "packsSupported": {
           "type": "boolean",
           "description": "RFC 0095 §C. When `true`, the host installs `kind: \"connection\"` registry packs and MUST implement the §B.6 resolution contract: an RFC 0045 connector's `auth.provider` (or an RFC 0047 `host.oauth` provider string) resolves against the installed connection pack whose `provider.id` matches, with installed-vs-built-in precedence per SemVer §11 and `connection_provider_unresolved` / `connection_provider_conflict` diagnostics. When `false` or absent, connection packs are not loaded and provider resolution stays implementation-defined."
+        },
+        "providerRead": {
+          "type": "boolean",
+          "description": "RFC 0233 §A — `true` means the host serves `GET /connection-providers` and `GET /connection-providers/{providerId}`: its provider registry, the registrations it refused, and resolution of one reference (`connection-packs.md` §Observation). Advertised only with `packsSupported: true`."
         }
       },
       "allOf": [
@@ -1388,7 +1392,7 @@
         }
       ],
       "description": "core/capabilities.md#connections — witness: witnessable-gated; maturity experimental/none; RFC 0095",
-      "x-openwop-seeded-from": "v1"
+      "x-openwop-facets-from": "spec/v2/facets/connections.schema.json"
     },
     "selfHostedRunner": {
       "type": "object",

package/schemas/v2/connection-provider-registry.schema.json

@@ -0,0 +1,174 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v2/connection-provider-registry.schema.json",
+  "title": "ConnectionProviderRegistry",
+  "description": "RFC 0233 §B — the answer to `listConnectionProviders`: every provider definition the host resolves against, and the pack registrations it refused under `connection-packs.md` §Provider identity. Host-global: it carries no tenant data. Content-free: ids, pack names and codes only, never an endpoint URL, a scope catalog or credential material.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "providers",
+    "refusals"
+  ],
+  "properties": {
+    "providers": {
+      "type": "array",
+      "description": "Every definition the host resolves against, built-ins included. A bare `id` appears at most once (§Provider identity).",
+      "items": {
+        "$ref": "#/$defs/provider"
+      }
+    },
+    "refusals": {
+      "type": "array",
+      "description": "Pack registrations the host refused under §Provider identity, as attempted by the serving process. A host MAY recompute this at every start.",
+      "items": {
+        "$ref": "#/$defs/refusal"
+      }
+    }
+  },
+  "$defs": {
+    "provider": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "source"
+      ],
+      "description": "One provider definition. Also the answer to `resolveConnectionProvider`.",
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128,
+          "description": "The bare provider id."
+        },
+        "source": {
+          "type": "string",
+          "enum": [
+            "builtin",
+            "pack"
+          ],
+          "description": "`builtin`: the host's own definition. `pack`: an installed connection pack's."
+        },
+        "packName": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 214,
+          "description": "The installed pack that defines it. Present exactly when `source` is `pack`."
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "properties": {
+              "source": {
+                "const": "pack"
+              }
+            },
+            "required": [
+              "source"
+            ]
+          },
+          "then": {
+            "required": [
+              "packName"
+            ]
+          },
+          "else": {
+            "not": {
+              "required": [
+                "packName"
+              ]
+            }
+          }
+        }
+      ]
+    },
+    "refusal": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "packName",
+        "providerId",
+        "code"
+      ],
+      "description": "One refused pack registration.",
+      "properties": {
+        "packName": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 214,
+          "description": "The pack whose registration was refused."
+        },
+        "providerId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128,
+          "description": "The bare provider id it claimed or referenced."
+        },
+        "code": {
+          "type": "string",
+          "enum": [
+            "connection_provider_conflict",
+            "connection_provider_unresolved"
+          ],
+          "description": "Why it was refused (`spec/v2/errors.json`)."
+        },
+        "heldBy": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 214,
+          "description": "For a conflict: the `packName` that holds the id, or `builtin`."
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "properties": {
+              "code": {
+                "const": "connection_provider_conflict"
+              }
+            },
+            "required": [
+              "code"
+            ]
+          },
+          "then": {
+            "required": [
+              "heldBy"
+            ]
+          },
+          "else": {
+            "not": {
+              "required": [
+                "heldBy"
+              ]
+            }
+          }
+        }
+      ]
+    }
+  },
+  "examples": [
+    {
+      "providers": [
+        {
+          "id": "github",
+          "source": "builtin"
+        },
+        {
+          "id": "acme-widgets",
+          "source": "pack",
+          "packName": "core.openwop.connections.acme-widgets"
+        }
+      ],
+      "refusals": [
+        {
+          "packName": "core.openwop.connections.acme-widgets-rival",
+          "providerId": "acme-widgets",
+          "code": "connection_provider_conflict",
+          "heldBy": "core.openwop.connections.acme-widgets"
+        }
+      ]
+    }
+  ]
+}

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.45.10"
+      "version": "2.45.12"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -426,5 +426,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "177bc294edbc8d2ed1171b26b132cf40e04b53ea1d17238a78e47a46c6d3182a"
+  "digest": "74684ec2db01611e6d22eea2fb25821a30338a2a935b549ec4801a65ee9de4ab"
 }

package/spec/v1/gaps.json

@@ -13655,7 +13655,7 @@
       "witness": "unclassified",
       "requirementId": null,
       "disposition": "externally-gated",
-      "target": "myndhyve-host-cut",
+      "target": "myndhyve-run-creation-channel-validation",
       "sources": [
         {
           "file": "RFCS/registers/0228-v1-host-service-error-codes.gaps.md",
@@ -13773,8 +13773,8 @@
       "surface": "No scenario drives the normative-surface ingest path yet. `trigger-bridge-delivery.test.ts` still witnesses only through the host seams.",
       "witness": "unclassified",
       "requirementId": null,
-      "disposition": "carried",
-      "target": "openwop.gap.0230.1",
+      "disposition": "closed",
+      "target": null,
       "sources": [
         {
           "file": "RFCS/registers/0230-inbound-webhook-ingest-contract.gaps.md",
@@ -13790,8 +13790,8 @@
       "surface": "No host advertises `inboundSigning` yet. openwop-app serves an ingest route with a different contract (OpenWOP-credentialed, wrapped body, 200/422).",
       "witness": "unclassified",
       "requirementId": null,
-      "disposition": "carried",
-      "target": "openwop.gap.0230.2",
+      "disposition": "closed",
+      "target": null,
       "sources": [
         {
           "file": "RFCS/registers/0230-inbound-webhook-ingest-contract.gaps.md",
@@ -13799,6 +13799,23 @@
         }
       ]
     },
+    {
+      "id": "openwop.gap.0230.3",
+      "rfc": "0230",
+      "local": "G3",
+      "section": "§D, Falsifiability",
+      "surface": "`409 subscription_not_active` has no observation path: no wire surface or seam makes a subscription non-active. The table claimed a pause \"via the existing operator surface\"; none exists.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "trigger-subscription-pause-surface",
+      "sources": [
+        {
+          "file": "RFCS/registers/0230-inbound-webhook-ingest-contract.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
     {
       "id": "openwop.gap.0231.1",
       "rfc": "0231",
@@ -14011,8 +14028,8 @@
       "surface": "`listTriggerDeadLetters` is a new v1 operation, so `openwop-sdks` owes a parity entry. That repository vendors a published corpus tag.",
       "witness": "unclassified",
       "requirementId": null,
-      "disposition": "externally-gated",
-      "target": "openwop-sdks-revendors-a-tag-carrying-listTriggerDeadLetters",
+      "disposition": "closed",
+      "target": null,
       "sources": [
         {
           "file": "RFCS/registers/0232-trigger-dead-letter-read.gaps.md",
@@ -14028,8 +14045,8 @@
       "surface": "`trigger-bridge.md` §D and `profiles.md` still say the profile needs \"a `deadLetter` sink for exhausted deliveries\". The predicate reads the RFC 0053 run family, which after §D holds no trigger delivery.",
       "witness": "unclassified",
       "requirementId": null,
-      "disposition": "transferred",
-      "target": "TODO.md",
+      "disposition": "closed",
+      "target": null,
       "sources": [
         {
           "file": "RFCS/registers/0232-trigger-dead-letter-read.gaps.md",
@@ -14037,6 +14054,91 @@
         }
       ]
     },
+    {
+      "id": "openwop.gap.0233.1",
+      "rfc": "0233",
+      "local": "G1",
+      "section": "§B.2",
+      "surface": "Which scope reads the host-global provider registry: none beyond authentication, `packs:read`, or a new `connections:read`. Unresolved question 1.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0233-connection-provider-registry-read.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0233.2",
+      "rfc": "0233",
+      "local": "G2",
+      "section": "§F",
+      "surface": "The disposition for a host with `packsSupported` that serves neither the seams nor `providerRead` plus the fixture: keep `blocked`, or `inapplicable`. Unresolved question 2.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0233-connection-provider-registry-read.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0233.3",
+      "rfc": "0233",
+      "local": "G3",
+      "section": "§B, §C",
+      "surface": "No host serves the reads or installs the fixture pair, so none of the §F rows has a witness.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "openwop-app-serves-provider-registry-read",
+      "sources": [
+        {
+          "file": "RFCS/registers/0233-connection-provider-registry-read.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0233.4",
+      "rfc": "0233",
+      "local": "G4",
+      "section": "Alternatives",
+      "surface": "A dry-run validate endpoint would let the suite cause a conflict unaided. Unresolved question 3.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "provider-dry-run-validate-rfc",
+      "sources": [
+        {
+          "file": "RFCS/registers/0233-connection-provider-registry-read.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0233.5",
+      "rfc": "0233",
+      "local": "G5",
+      "section": "§B.5",
+      "surface": "Whether `refusals` covers a connector (not a pack) that references an undefined provider. Unresolved question 4.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "closed",
+      "target": null,
+      "sources": [
+        {
+          "file": "RFCS/registers/0233-connection-provider-registry-read.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
     {
       "id": "openwop.gap.spec.a2a-integration.g1",
       "rfc": "0152",

package/spec/v2/core/connection-packs.md

@@ -31,8 +31,19 @@ A host advertising `connections.packsSupported` MUST resolve a connector's `auth
 - An unresolvable provider MUST be refused when the dependent connector or pack is registered.
 - On a publish-path host, resolution MUST run after the idempotency short-circuit: a byte-identical re-publish of an installed pack MUST succeed even when resolution inputs have since changed.
 
+## Observation
+
+A host advertising `connections.providerRead` MUST serve two reads under `manifest:read` (`schemas/v2/connection-provider-registry.schema.json`). The registry is host-global and carries no tenant data.
+
+- `GET /connection-providers` lists every definition, built-ins included, each bare id once, and the pack registrations refused under §Provider identity, with the code and, for a conflict, the holder.
+- `GET /connection-providers/{providerId}` resolves one reference; `?pack=<packName>` is the qualified form. An unresolvable reference answers `404` `connection_provider_unresolved`.
+- A row carries ids, pack names and codes only, never an endpoint, a scope catalog or credential material.
+- Refusals MAY be recomputed at each start.
+
+A host advertising `packsSupported` SHOULD advertise `providerRead`.
+
 ## Errors
 
 Both codes are in `spec/v2/errors.json`: `connection_provider_conflict` (two claimants for one bare id) and `connection_provider_unresolved` (no definition for the referenced id).
 
-*Sources: RFCs 0095, 0177.*
+*Sources: RFCs 0095, 0177, 0233.*

package/spec/v2/core/headers.md

@@ -16,10 +16,10 @@ Standard headers keep their standard names: `Idempotency-Key`, `ETag`, `If-None-
 | `Idempotency-Key` | 15 | Per-mutation idempotency token (`idempotency.md` Layer 1). The server caches `(tenantId, endpoint, key)` → response for ≥24h. A duplicate request returns the cached response with `OpenWOP-Idempotent-Replay: true`. |
 | `If-None-Match` | 2 | Conditional request on the discovery document (capabilities.md §1) and the run snapshot (runs.md §Snapshot). A value matching the `ETag` the host sent MUST yield `304 Not Modified` with no body. The 304 carries `OpenWOP-Version` like every response (versioning.md §1.4). |
 | `Last-Event-ID` | 1 | Resume from sequence after this ID. |
-| `OpenWOP-Client-Version` | 56 | The protocol version the client implements (versioning.md §1.5). Compared with `minClientVersion` on major.minor. A malformed value is treated as absent and MUST NOT produce a 400. Never selects a contract. |
+| `OpenWOP-Client-Version` | 58 | The protocol version the client implements (versioning.md §1.5). Compared with `minClientVersion` on major.minor. A malformed value is treated as absent and MUST NOT produce a 400. Never selects a contract. |
 | `OpenWOP-Dedup` | 1 | When set, the host's cross-host claim system rejects a duplicate `(tenantId, scopeId)` pair with `409 Conflict`. |
 | `OpenWOP-Force-Engine-Version` | 1 | Test keys only. The server emits this run's events as if it ran the given engine version, which must be within `Capabilities.testing.forceEngineVersionRange`. Servers MUST reject it on production API keys with `403 force_engine_version_forbidden`. |
-| `OpenWOP-Version` | 56 | Selects one of the host's listed major.minor versions. Absent, `/.well-known/openwop` uses `preferredVersion` and every other unversioned path is v2; an unlisted value is 406 protocol_version_unsupported. |
+| `OpenWOP-Version` | 58 | Selects one of the host's listed major.minor versions. Absent, `/.well-known/openwop` uses `preferredVersion` and every other unversioned path is v2; an unlisted value is 406 protocol_version_unsupported. |
 
 ## Cross-origin preflight
 
@@ -35,9 +35,9 @@ A host that answers a CORS preflight for an operation by granting the requesting
 | `ETag` | 3 | Standard HTTP validator (RFC 9110 §8.8.3). The obligation is per operation: MUST on the discovery document (capabilities.md §1), SHOULD on the run snapshot (runs.md §Snapshot), a content hash on a prompt template (getPromptTemplate); see each operation. |
 | `Location` | 1 | Canonical URI of the new template. |
 | `OpenWOP-Idempotent-Replay` | 1 | Set when the response was served from the idempotency cache. |
-| `OpenWOP-Version` | 56 | The contract that produced this response. It MUST equal the one used. |
+| `OpenWOP-Version` | 58 | The contract that produced this response. It MUST equal the one used. |
 | `Retry-After` | 1 | Seconds until the active claim is stale-eligible. |
-| `WWW-Authenticate` | 49 | A `Bearer` challenge. On a host with an oauth2 or oidc lane it carries `resource_metadata` and `error="invalid_token"`. Never sent on a non-disclosure 404. |
+| `WWW-Authenticate` | 51 | A `Bearer` challenge. On a host with an oauth2 or oidc lane it carries `resource_metadata` and `error="invalid_token"`. Never sent on a non-disclosure 404. |
 
 ## Webhook delivery headers
 

package/spec/v2/core/versioning.md

@@ -182,6 +182,7 @@ Every vendor namespace — capability records ([capabilities.md](capabilities.md
 - An org MUST NOT be named after a manifest segment under `/host/` (`reservedOrgs`).
 - A host SHOULD advertise the mount under `extensions.<org>.<name>`.
 - A `/v1/host/<org>/…` twin MAY ride the overlap; it retires atomically with `/v1`.
+- After retirement a host MUST NOT serve an operation at the twin. It MAY answer a `GET` or `HEAD` there with `308`, no body, and `Location` set to the same `/host/<org>/…` path.
 
 ## 6. Migration rows
 

package/spec/v2/declaration.json

@@ -380,11 +380,13 @@
         "adoption": "none"
       },
       "facets": [
-        "packsSupported"
+        "packsSupported",
+        "providerRead"
       ],
       "floorScenarios": [],
       "requirementIds": [],
       "owningRfc": "0095",
+      "facetsFrom": "spec/v2/facets/connections.schema.json",
       "normativeText": [
         "spec/v2/core/connection-packs.md"
       ]

package/spec/v2/facets/connections.schema.json

@@ -0,0 +1,16 @@
+{
+  "$comment": "RFC 0095 + RFC 0233 — the connections family's facets. packsSupported is carried unchanged from the v1 seed; providerRead is v2-only (RFC 0233).",
+  "properties": {
+    "packsSupported": {
+      "type": "boolean",
+      "description": "RFC 0095 §C. When `true`, the host installs `kind: \"connection\"` registry packs and MUST implement the §B.6 resolution contract: an RFC 0045 connector's `auth.provider` (or an RFC 0047 `host.oauth` provider string) resolves against the installed connection pack whose `provider.id` matches, with installed-vs-built-in precedence per SemVer §11 and `connection_provider_unresolved` / `connection_provider_conflict` diagnostics. When `false` or absent, connection packs are not loaded and provider resolution stays implementation-defined."
+    },
+    "providerRead": {
+      "type": "boolean",
+      "description": "RFC 0233 §A — `true` means the host serves `GET /connection-providers` and `GET /connection-providers/{providerId}`: its provider registry, the registrations it refused, and resolution of one reference (`connection-packs.md` §Observation). Advertised only with `packsSupported: true`."
+    }
+  },
+  "required": [
+    "packsSupported"
+  ]
+}

package/spec/v2/id-field-bindings.json

@@ -89,6 +89,7 @@
     "pageId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
     "parentDepartmentId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
     "proposalId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
+    "providerId": "a connection provider id is author-minted in a pack manifest and host-global (connection-packs.md §Provider identity); no openwop id kind governs it",
     "roleId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
     "rosterId": "no openwop id kind governs this surface; the grammar is the owning schema's own",
     "runnerId": "no openwop id kind governs this surface; the grammar is the owning schema's own",

package/spec/v2/path-manifest.json

@@ -118,6 +118,28 @@
       "authenticated": true,
       "requestBody": false
     },
+    {
+      "method": "GET",
+      "path": "/connection-providers",
+      "operationId": "listConnectionProviders",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
+    },
+    {
+      "method": "GET",
+      "path": "/connection-providers/{providerId}",
+      "operationId": "resolveConnectionProvider",
+      "requestHeaders": [
+        "OpenWOP-Client-Version",
+        "OpenWOP-Version"
+      ],
+      "authenticated": true,
+      "requestBody": false
+    },
     {
       "method": "GET",
       "path": "/content/pages",
@@ -655,7 +677,7 @@
     }
   ],
   "counts": {
-    "operations": 56,
+    "operations": 58,
     "channels": 2
   }
 }

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
   "$comment": "RFC 0172 §D.1 — the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.45.10",
-  "corpusTag": "v2.45.10",
+  "version": "2.45.12",
+  "corpusTag": "v2.45.12",
   "updated": "2026-10-03"
 }

package/spec/v2/surface-baseline.json

@@ -4,7 +4,7 @@
     "schemas/v2/**/*.json",
     "spec/v2/path-manifest.json"
   ],
-  "release": "2.45.10",
+  "release": "2.45.12",
   "kinds": {
     "union": [
       "channel",
@@ -18,7 +18,7 @@
       "type"
     ]
   },
-  "count": 8647,
+  "count": 8688,
   "surfaces": [
     "schemas/v2/a2a-task-state.schema.json#/contextId|type|string",
     "schemas/v2/a2a-task-state.schema.json#/interruptKind|enum-member|\"approval\"",
@@ -1571,6 +1571,7 @@
     "schemas/v2/capabilities.schema.json#/conformance|property|seamsProfile",
     "schemas/v2/capabilities.schema.json#/conformance|type|object",
     "schemas/v2/capabilities.schema.json#/connections/packsSupported|type|boolean",
+    "schemas/v2/capabilities.schema.json#/connections/providerRead|type|boolean",
     "schemas/v2/capabilities.schema.json#/connections/since|type|string",
     "schemas/v2/capabilities.schema.json#/connections/status|enum-member|\"deprecated\"",
     "schemas/v2/capabilities.schema.json#/connections/status|enum-member|\"experimental\"",
@@ -1583,6 +1584,7 @@
     "schemas/v2/capabilities.schema.json#/connections/witness|enum-member|\"witnessable-unaided\"",
     "schemas/v2/capabilities.schema.json#/connections|closed|true",
     "schemas/v2/capabilities.schema.json#/connections|property|packsSupported",
+    "schemas/v2/capabilities.schema.json#/connections|property|providerRead",
     "schemas/v2/capabilities.schema.json#/connections|property|since",
     "schemas/v2/capabilities.schema.json#/connections|property|status",
     "schemas/v2/capabilities.schema.json#/connections|property|until",
@@ -4478,6 +4480,43 @@
     "schemas/v2/connection-pack-manifest.schema.json#|required|provider",
     "schemas/v2/connection-pack-manifest.schema.json#|required|version",
     "schemas/v2/connection-pack-manifest.schema.json#|type|object",
+    "schemas/v2/connection-provider-registry.schema.json#/providers/[]/id|type|string",
+    "schemas/v2/connection-provider-registry.schema.json#/providers/[]/packName|type|string",
+    "schemas/v2/connection-provider-registry.schema.json#/providers/[]/source|enum-member|\"builtin\"",
+    "schemas/v2/connection-provider-registry.schema.json#/providers/[]/source|enum-member|\"pack\"",
+    "schemas/v2/connection-provider-registry.schema.json#/providers/[]/source|type|string",
+    "schemas/v2/connection-provider-registry.schema.json#/providers/[]|closed|true",
+    "schemas/v2/connection-provider-registry.schema.json#/providers/[]|property|id",
+    "schemas/v2/connection-provider-registry.schema.json#/providers/[]|property|packName",
+    "schemas/v2/connection-provider-registry.schema.json#/providers/[]|property|source",
+    "schemas/v2/connection-provider-registry.schema.json#/providers/[]|required|id",
+    "schemas/v2/connection-provider-registry.schema.json#/providers/[]|required|packName",
+    "schemas/v2/connection-provider-registry.schema.json#/providers/[]|required|source",
+    "schemas/v2/connection-provider-registry.schema.json#/providers/[]|type|object",
+    "schemas/v2/connection-provider-registry.schema.json#/providers|type|array",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]/code|enum-member|\"connection_provider_conflict\"",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]/code|enum-member|\"connection_provider_unresolved\"",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]/code|type|string",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]/heldBy|type|string",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]/packName|type|string",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]/providerId|type|string",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]|closed|true",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]|property|code",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]|property|heldBy",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]|property|packName",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]|property|providerId",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]|required|code",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]|required|heldBy",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]|required|packName",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]|required|providerId",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals/[]|type|object",
+    "schemas/v2/connection-provider-registry.schema.json#/refusals|type|array",
+    "schemas/v2/connection-provider-registry.schema.json#|closed|true",
+    "schemas/v2/connection-provider-registry.schema.json#|property|providers",
+    "schemas/v2/connection-provider-registry.schema.json#|property|refusals",
+    "schemas/v2/connection-provider-registry.schema.json#|required|providers",
+    "schemas/v2/connection-provider-registry.schema.json#|required|refusals",
+    "schemas/v2/connection-provider-registry.schema.json#|type|object",
     "schemas/v2/conversation-event.schema.json#/capabilities/[]|enum-member|\"multi-turn\"",
     "schemas/v2/conversation-event.schema.json#/capabilities/[]|enum-member|\"streaming\"",
     "schemas/v2/conversation-event.schema.json#/capabilities/[]|type|string",
@@ -8623,6 +8662,8 @@
     "spec/v2/path-manifest.json#|operation|GET /agents/{agentId}",
     "spec/v2/path-manifest.json#|operation|GET /agents/{agentId}/deployments",
     "spec/v2/path-manifest.json#|operation|GET /audit/verify",
+    "spec/v2/path-manifest.json#|operation|GET /connection-providers",
+    "spec/v2/path-manifest.json#|operation|GET /connection-providers/{providerId}",
     "spec/v2/path-manifest.json#|operation|GET /content/pages",
     "spec/v2/path-manifest.json#|operation|GET /content/pages/{slug}",
     "spec/v2/path-manifest.json#|operation|GET /content/settings",