@openwop/spec-artifacts 2.45.12 → 2.45.14

package/CORPUS-STAMP.json

@@ -1,17 +1,17 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.12",
-  "corpusTag": "v2.45.12",
+  "version": "2.45.14",
+  "corpusTag": "v2.45.14",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "ac6de5303872664b78ff419c035915593e01599e02835e777a0123de1baeb398",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "b971877ce1060183e49a3b6c0b9ba1b3bfbf52cceb38482bc03b8d7554231b5f",
-    "api/v2/asyncapi.yaml": "af56f052444d3ffa2b8f9c380dcdb91c903b813d8fe7941d030c785ab54cbeac",
-    "api/v2/openapi.yaml": "47e3b00c61d4ef6fc7e42b819b52648bb3a1de966f5d6e4a41c6ff4a6c2d80f3",
+    "api/seams-v2.yaml": "5aec83a34c222578bcfdd241674ce8d688890400d3a64eb1e53607be8c966464",
+    "api/v2/asyncapi.yaml": "f51a55b0517e9ce24955317c88446171cb02416debaea00d50fc2d67578b3bf4",
+    "api/v2/openapi.yaml": "42223ead2112d96bd1c268563488493e6b916be371506be312aa536d3cf28acc",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
     "schemas/README.md": "bd1c00fae7b6fda506a75aff841bbdc438d4ce092642a72041203bee999b88de",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
@@ -207,13 +207,14 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "0b2f28808ffe0b9d98a187775038c3406bb70919747a788a6e4f866e293ae6d3",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "f138120b544d0e40c9ac05dd9b77a51bb624a3212cfd5a13d97be96fbbe9b3e4",
+    "spec/v1/core-standard-manifest.json": "ae1b0f512faf1b2c4304dd5d98cd44fde76cbf8572440853a2329b2593ada468",
     "spec/v1/deprecations.json": "a3293072ea951857395d05f0437264e88965f1e9019ff61c55bacfa9c1aaa17c",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
+    "spec/v1/end-of-support.json": "35f0bf3b70fe78b16e2a2fd81a153fc27e703f6c16376c6fe7cdf1f4f2c4e6d4",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "9dd6e21e6122b292c4912028dfcc8368e3df1a8bafc81451c73c90a2a9a8fdc1",
+    "spec/v1/gaps.json": "68e23cccf787f77e31710671baa3618ca24ee6eada68df84a7b55dc746762a2a",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "4c50760be70cb644d02427bcaf5749606700edf4513f423903cf3b1d12f5c300",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -238,7 +239,7 @@
     "spec/v2/core/interrupt.md": "10f15dfe30baa0fc748aea0a067f9b271bea316fde6b598d78f77edc296f698a",
     "spec/v2/core/node-pack-runtimes.md": "e1088cb69b8c3c67256c494063328916c2980ab1aa97a7063de25bab82fdb1e5",
     "spec/v2/core/oauth.md": "c069ae4f9aae2eafe14c07c0bf709aa7ade0dcc821973d740400d49d901f7061",
-    "spec/v2/core/overview.md": "d7000fbcd2f59280870fc592f5d5ea28a5195b9eb209029f09c5de59e0f2bf9c",
+    "spec/v2/core/overview.md": "999cb657711d6c28e62032fc31a013cc175f7a981a3b012e4bf4a90a2b84344c",
     "spec/v2/core/packs.md": "0d1516c4b08fe67b85759feb9ccbafdd766216435a4a0a7e58e27e6f9fe6b6cc",
     "spec/v2/core/persistence.md": "249a1de353f421cdf92b9006a13a10afdb002f4029eb6a13520cc95252edb2ec",
     "spec/v2/core/portability.md": "ab13a6ca43544b9a6a91edfb377ec680c768d14be841c84fb79125b231426891",
@@ -247,13 +248,14 @@
     "spec/v2/core/security-defaults.md": "887d8c4bc592094e3b931c23f1c2175c18ebbd47528b074016f9d2091bc513b2",
     "spec/v2/core/storage.md": "dc94b985847c1341c7a064f04a6010f0fdbe6c3ab3e555d4362878c81d764c18",
     "spec/v2/core/tool-catalog.md": "d16a9004418719c48301804aefa4d7ab6f41112a4ed83727f552aa1b92b418b0",
-    "spec/v2/core/versioning.md": "fe48f4514b9c9f998d5da1930b8faa02ca4de89dcd49b07d95414fb04c67d438",
+    "spec/v2/core/versioning.md": "348a6dc5bd3425efc0016bb6772d5d04ebf578b73eebcdfec6c2d82346a8577e",
     "spec/v2/core/webhooks.md": "daf6ec03092f4b3fde1eb74a5e2e801ec48db5139a13fcc0fd7fb4a004635ae3",
     "spec/v2/core/workflow-chain-packs.md": "fdce7a8477e269950a2bac05ee6eddbd66eb0b670b464d00054f7196ec05d29c",
     "spec/v2/corrections.json": "3a8d93e33865b692d26a3b6bfd3819766e206b2e0c2a69669baa4bf833d05a49",
     "spec/v2/corrections.schema.json": "46bbffb954d13bd9995aebc912ceeb2544f7064331abf25fd6ab85c81a5cec94",
     "spec/v2/declaration.json": "e963d3aa73892ee08281227c8a01aa6c06f1b825cdcb26aab029b1ab3f4155bf",
     "spec/v2/declaration.schema.json": "ef951633e4070899f64828f5cf1b5f4870270a0360f81dbb49b5b4d6cd407550",
+    "spec/v2/eos-override.json": "4c72d2f6a658943b01c1de1643cf294642091933af7832f38ee5495df684cb2d",
     "spec/v2/errors.json": "83f048b0a06952b4af6f125fb66c4212acab51056b411390f1010acd6ab9cdc0",
     "spec/v2/errors.schema.json": "47404ad53e6147cf9017b813483712466573e419fb33e6c4b6c12d3e7deba1bc",
     "spec/v2/event-codemap.json": "37869a03cdfd8758b57e6f350641a6ebbd383231cebda51f5473ad85f94ab74c",
@@ -307,9 +309,9 @@
     "spec/v2/path-manifest.json": "b84c7561f50c7df0cb61b202bd6595acad3ee7edca7a45f711949bea3c69bd27",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
-    "spec/v2/release.json": "0966caad45aa4689f63ff476b863590b716c2ba264f2da20c964b0fe7f8773f2",
+    "spec/v2/release.json": "c3cd3c0540dacee237617da3da595af2ca98537cc1b0a5c4aeacfdc450c872b8",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "a00146b764f3f2f31af25cef62a1cf71f43354c55bb79a77ad38642d0ad460d5"
+    "spec/v2/surface-baseline.json": "c71180e9ca180c188a8bfbf3d300017cfb94c0976a07bd533cd7c4ad1d59d4a4"
   },
-  "corpusCommit": "f3c37c0559bd41f77fe89b00f306357b60497fb9"
+  "corpusCommit": "d0f17a74f8f3150f388dde8d46814a1ec6ced669"
 }

package/api/seams-v2.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP conformance seams profile (openwop-conformance-seams-v2)
-  version: 2.45.12
+  version: 2.45.14
   description: 'The OpenWOP conformance seams profile (`openwop-conformance-seams-v2`): test-only operations in their own
     path space, `/conformance/seams/…`. The profile is versioned and validated against the canonical v2 schemas with no tolerance
     path. It is not a capability: a host advertises the profile, never a `testSeams` flag.

package/api/v2/asyncapi.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.1.0
 info:
   title: OpenWOP v2 event streams
-  version: 2.45.12
+  version: 2.45.14
   description: 'OpenWOP v2 event streams over SSE. The run-events channel''s address is the OpenAPI path key, and the server
     pathname is empty (bare origin). `streamMode` is a stream mode from the closed set, or a comma-separated combination of
     them; `values` never combines. `hostEvents` has a default address, `/host/events`; a host MAY declare another under `heartbeat.deliveryChannel`.

package/api/v2/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP v2 API
-  version: 2.45.12
+  version: 2.45.14
   summary: REST surface for declaring, executing, suspending, resuming, and observing multi-step workflows.
   description: 'The OpenWOP v2 REST API. Paths are unversioned and served at the bare origin; a client selects a version with
     the `OpenWOP-Version` header from the host''s `protocolVersions[]`. Conformance seams and test-mode operations are not

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/spec-artifacts",
-  "version": "2.45.12",
+  "version": "2.45.14",
   "description": "The OpenWOP machine-readable contract: api/ (OpenAPI, AsyncAPI, the seams profile), schemas/ (v1 and v2 JSON Schemas), the spec/v1 and spec/v2 registries (errors, event codemap, declaration, deprecations, migrations, gaps) and CORPUS-STAMP.json — published from the openwop/openwop corpus tag; the peer dependency @openwop/openwop-conformance digest-checks at start (RFC 0168 §D.2).",
   "license": "Apache-2.0",
   "repository": {

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.45.12"
+      "version": "2.45.14"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -426,5 +426,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "74684ec2db01611e6d22eea2fb25821a30338a2a935b549ec4801a65ee9de4ab"
+  "digest": "6e9afd07a387392dd60c4be67793b0da6abc3dfa5b2f3e95e6104574dfd303d6"
 }

package/spec/v1/end-of-support.json

@@ -0,0 +1,5 @@
+{
+  "$comment": "RFC 0234 §A.3 — the old-major tree (spec/v1/, the flat schemas/) is frozen as history at v1 end-of-support. It is read-only (versioning.md §3) and is not edited token by token; check-removal-dates.mjs reads this marker.",
+  "frozenAt": "2026-10-04",
+  "rfc": "0234"
+}

package/spec/v1/gaps.json

@@ -1,7 +1,7 @@
 {
   "$schema": "./gaps.schema.json",
   "version": 1,
-  "updated": "2026-10-03",
+  "updated": "2026-10-04",
   "witnessClasses": [
     "witnessable-unaided",
     "witnessable-gated",
@@ -13977,8 +13977,8 @@
       "surface": "No host serves the read, so none of the §E rows has a witness.",
       "witness": "unclassified",
       "requirementId": null,
-      "disposition": "externally-gated",
-      "target": "openwop-app-serves-trigger-dead-letters",
+      "disposition": "closed",
+      "target": null,
       "sources": [
         {
           "file": "RFCS/registers/0232-trigger-dead-letter-read.gaps.md",
@@ -14096,8 +14096,8 @@
       "surface": "No host serves the reads or installs the fixture pair, so none of the §F rows has a witness.",
       "witness": "unclassified",
       "requirementId": null,
-      "disposition": "externally-gated",
-      "target": "openwop-app-serves-provider-registry-read",
+      "disposition": "closed",
+      "target": null,
       "sources": [
         {
           "file": "RFCS/registers/0233-connection-provider-registry-read.gaps.md",
@@ -14139,6 +14139,40 @@
         }
       ]
     },
+    {
+      "id": "openwop.gap.0234.1",
+      "rfc": "0234",
+      "local": "G1",
+      "section": "§A.1",
+      "surface": "Header-less major-1 requests on unversioned paths are not measurable from request logs, so the traffic evidence cannot rule them out.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "host-logs-capture-openwop-version",
+      "sources": [
+        {
+          "file": "RFCS/registers/0234-maintainer-set-v1-end-of-support.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0234.2",
+      "rfc": "0234",
+      "local": "G2",
+      "section": "§A.2",
+      "surface": "MyndHyve still serves first-party clients on 10 `/v1` roots with no major-2 twin.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "myndhyve-v1-only-roots-migrated",
+      "sources": [
+        {
+          "file": "RFCS/registers/0234-maintainer-set-v1-end-of-support.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
     {
       "id": "openwop.gap.spec.a2a-integration.g1",
       "rfc": "0152",

package/spec/v2/core/overview.md

@@ -59,12 +59,15 @@ v1 support ends at the later of:
 - (a) every INTEROP-MATRIX host's non-vacuous v2 bundle, plus 90 days;
 - (b) 18 months from the v2 release — applied if and only if an independent host is in the matrix at release.
 
-The date is computed from the matrix; nothing else MAY set it.
+The date is computed from the matrix, or set earlier under (c); nothing else MAY set it.
 
+- (c) An `Accepted` RFC MAY set an earlier date once every counted host has a certified non-vacuous v2 bundle in `evidence/v2-host-bundles/` and reports no old-major traffic from third parties (anyone but the host's operator and the conformance suite) over at least the 7 days before the RFC. The date and that evidence are in `spec/v2/eos-override.json`.
+- **After the date** a host MAY drop the old major from `protocolVersions[]`; it is not required to that day.
+- **The old-major tree** is then frozen as history by a marker naming the date, not edited.
 - **Counted hosts.** Those with a row in the INTEROP-MATRIX v2 table. A reference host that stays on the 1.x line through the overlap (the matrix says which) is not a v2 host and does not count.
 - **Non-vacuous.** At least one claimed profile carries `witnessCount ≥ 1`.
 - **Anchor.** The date the host's signed bundle was committed to `evidence/v2-host-bundles/` in the spec repository, read from the public history (`git log --diff-filter=A`). Never `generatedAt` inside the bundle, which nothing signs. A later re-certification replaces the file and does not move the anchor.
-- **The computed date.** `evidence/v1-end-of-support.json`, GENERATED by `scripts/generate-v1-eos-clock.mjs`. `check-removal-dates.mjs` reads it and fails the v1-tree sources of every `v1-end-of-support` row on or after it.
+- **The computed date.** `evidence/v1-end-of-support.json`, GENERATED by `scripts/generate-v1-eos-clock.mjs`, which honours a (c) override only when it meets (c). On or after the date, `check-removal-dates.mjs` fails the v1-tree sources of every `v1-end-of-support` row unless that tree is frozen.
 
 ### Old-major retention floors
 

package/spec/v2/core/versioning.md

@@ -169,7 +169,7 @@ A run minted under major 1 and read under major 2 MUST use the tenant-bound proj
 
 ### Retirement
 
-The overlap ends at v1 end-of-support ([overview.md](overview.md)): `protocolVersions[]` drops the `1.<n>` member, and every alias carrying the `v1-end-of-support` trigger is removed.
+The overlap ends at v1 end-of-support ([overview.md](overview.md)). From then a host MAY drop the `1.<n>` member from `protocolVersions[]`; when it does, every alias carrying the `v1-end-of-support` trigger goes with it.
 
 - **Retirement is atomic.** Dropping v1 retires the whole `/v1` path space at once (§1.1).
 - **Retirement changes every header-less request's default contract**, from major 1 to major 2. Before retirement, a host MUST check for collisions between manifest top-level path segments and non-protocol unversioned routes, and MUST move each colliding route or apply §1.4 content negotiation.

package/spec/v2/eos-override.json

@@ -0,0 +1,25 @@
+{
+  "$comment": "RFC 0234 (overview.md §v1 end-of-support, leg (c)). An Accepted RFC's earlier end-of-support date and the evidence for it. generate-v1-eos-clock.mjs honours this file only when it meets (c).",
+  "date": "2026-10-04",
+  "rfc": "0234",
+  "trafficEvidence": [
+    {
+      "host": "openwop-host-v2-reference",
+      "window": "to 2026-10-03, 7 days",
+      "thirdParty": 0,
+      "note": "a reference example, not a public deployment; all traffic is the conformance suite"
+    },
+    {
+      "host": "openwop-workflow-engine (openwop-app)",
+      "window": "2026-09-27 to 2026-10-03",
+      "thirdParty": 0,
+      "note": "9,997 conformance/seam requests; 1 first-party OAuth return; 4 header-less discovery reads (3 Meta AI crawler, 1 person) that are not protocol clients; 0 SDK/CLI callers"
+    },
+    {
+      "host": "myndhyve",
+      "window": "2026-09-27 to 2026-10-03",
+      "thirdParty": 0,
+      "note": "~3,564 suite/seam/operator; 475 first-party (own pack catalog, own Cloud Function resume); ~31 scanner 404s; 0 SDK/CLI clients; header-less major-1 reads not measurable from logs"
+    }
+  ]
+}

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
   "$comment": "RFC 0172 §D.1 — the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.45.12",
-  "corpusTag": "v2.45.12",
-  "updated": "2026-10-03"
+  "version": "2.45.14",
+  "corpusTag": "v2.45.14",
+  "updated": "2026-10-04"
 }

package/spec/v2/surface-baseline.json

@@ -4,7 +4,7 @@
     "schemas/v2/**/*.json",
     "spec/v2/path-manifest.json"
   ],
-  "release": "2.45.12",
+  "release": "2.45.14",
   "kinds": {
     "union": [
       "channel",