@openwop/spec-artifacts 2.45.19 → 2.45.20

package/CORPUS-STAMP.json

@@ -1,19 +1,19 @@
 {
   "_comment": "Provenance of @openwop/spec-artifacts (RFC 0168 §D.2). files: SHA-256 per file; the conformance suite compares the installed peer against dist/spec-artifacts.lock.json at start.",
   "package": "@openwop/spec-artifacts",
-  "version": "2.45.19",
-  "corpusTag": "v2.45.19",
+  "version": "2.45.20",
+  "corpusTag": "v2.45.20",
   "files": {
     "api/.redocly.lint-ignore.yaml": "bf5a8350b88a72fa43f59605ed8d903ed24b6cfccda5e45509c9f6ed9ee4e712",
     "api/asyncapi.yaml": "d5ecb9ee6114582be3b1f662c84bfac9ae96dae7bacb853e461168f70a8e1c7d",
     "api/grpc/openwop.proto": "c3e72bb17cba514ee98feb6434e6c9b6ea6795bfd086489ec69fd882dd1ad977",
     "api/openapi.yaml": "ac6de5303872664b78ff419c035915593e01599e02835e777a0123de1baeb398",
     "api/redocly.yaml": "b0604c89b2ca6d5076ec25725c539dad44a741a811fe524439ee6daef8baa09f",
-    "api/seams-v2.yaml": "f240b4205e4f1205b80278806db17fff394e5b4ef21a7ad1d2c3bda8ee080b5a",
-    "api/v2/asyncapi.yaml": "525ed38e2e0c5c0cb0785fb940f97ee3335c837f5797351ee954c3e312174bdb",
-    "api/v2/openapi.yaml": "9971c6250f45f8ea6f8b16d3f3e1a86556d65968342e9ec370f23018c118c872",
+    "api/seams-v2.yaml": "3d62475a6e5d2f0e005aa58b95c197f8846104d8cb7753c2161d7b6948cb89b4",
+    "api/v2/asyncapi.yaml": "44ea76f380b18c54ccdb51eaa091289212cd044e656c4d97e94df7bf048972e9",
+    "api/v2/openapi.yaml": "4ebf762aabf5d25318923ac0c8a2b865e11d7e07b2a2456ab6b535d91e56da33",
     "api/v2/redocly.yaml": "1e66b60e6118ad11a823bb620678be464d99dfe50a40e3e6f93ec9429b88b34c",
-    "schemas/README.md": "bd1c00fae7b6fda506a75aff841bbdc438d4ce092642a72041203bee999b88de",
+    "schemas/README.md": "a829e3208413062388e52ab6ba714d35889c9c7645db38a290b0c4f4992cd3da",
     "schemas/a2a-task-state.schema.json": "75d5049dea8bd873ff0e7546f1c60c8d36c219bec7084264360be54a8be30ae1",
     "schemas/a2ui-surface-delta-frame.schema.json": "970d434e4fdcb925de64aaace91eb83bfbcfd8f76757a9ce9f339eda5fb3f4e8",
     "schemas/agent-deployment-transition.schema.json": "1ac987fed0f380fa5b4e9a40e8e13316e5ae42d03a0ff42db4be6273e1bfe9f4",
@@ -117,9 +117,9 @@
     "schemas/v2/artifact.schema.json": "85b9dc284d39b99d2a66fa8cbf47f2dd3d8526d3bd6cc411ad315b372de38975",
     "schemas/v2/audit-verify-result.schema.json": "14af8e9283510f0a40e48a2059c929ee44e0fc9fa3cc66a95bfbe90b17c48297",
     "schemas/v2/budget-policy.schema.json": "1de68095db0beb5c7a4be629de26e79f62ebbe748a88d46f36e768edfd1f0d68",
-    "schemas/v2/capabilities.schema.json": "c7a01b2f569139f99ba5e1a5329a42556fbd82bc743f8fd96963304395fc9ef0",
+    "schemas/v2/capabilities.schema.json": "a24c99d07971dde0e4596eba0bf5616e3df4459dc2174e8aebb2c544f964337c",
     "schemas/v2/certification-bundle.schema.json": "9a3c67860f3b0867ff4733d3f8ae0f5d5d747b815ab39b6c255589f103119fa6",
-    "schemas/v2/channel-presence-payload.schema.json": "9a5227f8bcdb2ecd6c606938c8d835781f4654b88a7a30b0d7e8cd4dde1975ad",
+    "schemas/v2/channel-presence-payload.schema.json": "fc03df0c20cc12a25f7ee6a47503a4c5931d79fe3d5ff24815e8fd7c1bcb9a87",
     "schemas/v2/channel-written-payload.schema.json": "ccecff3c71a3275ad8db035ac0e04db25e6f8d23cf091ddbcd5a60d1be1cbb6b",
     "schemas/v2/chat-card-pack-manifest.schema.json": "92a57db2fd4b2463f14ef155fef8e3f18afc78960b646459dcf32efc79ff6bf5",
     "schemas/v2/compact-tool-descriptor.schema.json": "b5c418d72082d5b713bf318212a83397e5be98e56d25ca056302b41b8dd8273b",
@@ -152,6 +152,7 @@
     "schemas/v2/goal.schema.json": "ad104ed5a3866736b8fed9d7c0b23dc82af526b5bef4afe848f01fc3af2161e9",
     "schemas/v2/heartbeat-evaluated.schema.json": "c897b0792fd518d6e12879851027252af1529f5e420c3eaf434ad7af284ecc05",
     "schemas/v2/heartbeat-state-changed.schema.json": "eb68d0082aa996650e3a6b8ccf32457f959cebc7e6728cc7c331b9d171a4bef6",
+    "schemas/v2/host-event.schema.json": "d2e2233d6464442c761ca985b0302c8350cabe2d694d3894f65d1696d80bdc98",
     "schemas/v2/ids.schema.json": "65cfaa193be0ca9cf48af39c18c553979e3ec1f7fc04509aaa513b322d7b7e4a",
     "schemas/v2/localized-content-language-settings.schema.json": "3c8350a178037a460f5d87466ccaf9ed5fe3d41497786d2504cc66e42152c8cc",
     "schemas/v2/localized-content-page-response.schema.json": "ef48329749758afb21e4d3cbc3f017abb911f75726819457f35b9f1390332c75",
@@ -192,8 +193,8 @@
     "schemas/v2/trigger-subscription-registration.schema.json": "5f7959f3e13f49399783e47f73101d6af95e5abccea1af2f0014ccbe3e51006c",
     "schemas/v2/trigger-subscription.schema.json": "06abe021712a4bfc5a107a067053cd3cc9704f47ae7066d8449a508c368a0ab2",
     "schemas/v2/ui-plugin-message.schema.json": "879d65867c01656b3962d64283e66364dcb8f626ad26c5fcf2d2d55a79ae0ce9",
-    "schemas/v2/webhook-dead-letter-page.schema.json": "543f5ccc26d8f777684a037172ab7b9fdf70735e5394eeb42e5fa6569503f528",
-    "schemas/v2/webhook-delivery.schema.json": "4e8ab3b722ad1731adf0548c1217f0de62da40de14e8abf77533aee4ace4c079",
+    "schemas/v2/webhook-dead-letter-page.schema.json": "78f3284722c2b42d52ff8a1e6d9b9092ba1ac35c2dbe036f3ff2470b34086d1e",
+    "schemas/v2/webhook-delivery.schema.json": "5f5361ede12098b5c2d685f0aa70fcb07219fd6b68c6ad6af393ca8dd266d56a",
     "schemas/v2/webhook-verification.schema.json": "76e4e0d81143ffd2649bc7adba2aa34f2525e2c4e9f0300a425d908b3163196b",
     "schemas/v2/workflow-chain-pack-manifest.schema.json": "c0e38aa96b029c539415fb7e8a793fd770c3eb5a1b44a818661f9c127c99191b",
     "schemas/v2/workflow-definition.schema.json": "cb1194631d2b96b0975940b916be43a70363b78b1b6716f9cd84b162d3c96615",
@@ -207,14 +208,14 @@
     "schemas/workspace-file.schema.json": "464de85c2a068243084ee9c1d969bc7cd5d8f7948574e58450d6493c38a0e1e4",
     "spec/v1/alias-detectors.json": "0b2f28808ffe0b9d98a187775038c3406bb70919747a788a6e4f866e293ae6d3",
     "spec/v1/capability-declaration-classes.json": "e7729aed5c4b4e1dd02abab0530f14cc95f5d4070fe51fb139e7f5cccefa00c6",
-    "spec/v1/core-standard-manifest.json": "806e07cd5de0684b09db910394d8713d0f6f45dc318803374a183cc57d07bf86",
+    "spec/v1/core-standard-manifest.json": "d7c4865e30b6eed18c932ca0c4e4bbcbcb3f4cfedfdd560876a436d0ed774ba0",
     "spec/v1/deprecations.json": "a3293072ea951857395d05f0437264e88965f1e9019ff61c55bacfa9c1aaa17c",
     "spec/v1/deprecations.schema.json": "3e393c405d2a41b467d8c5e3c468549078df1ce6a6d2588fc488097b95d9b55b",
     "spec/v1/end-of-support.json": "35f0bf3b70fe78b16e2a2fd81a153fc27e703f6c16376c6fe7cdf1f4f2c4e6d4",
     "spec/v1/event-codemap.json": "3da60d884157793a360da532a9fcbbfb5285636db325a74cec94b34622186d97",
     "spec/v1/event-codemap.schema.json": "d05933b2e88103aff51a2f774df97b9bda065e0fc88dbd9b114cc47a32189174",
     "spec/v1/extensions.json": "79a60754aa16cbdbdb604f8e5c00038af535a1690a4d07bd5ff7c38f0256a7bc",
-    "spec/v1/gaps.json": "9271f9796be51dc5182ad7ed00445b50c67e1c3d33fc76b47f080a985dd647d7",
+    "spec/v1/gaps.json": "b745aa2620ae8c9f79e7df7bd7c81559b8929f0bdfae62a7ea15debc29e8f19a",
     "spec/v1/gaps.schema.json": "8fd83259f556553c9df0f53e7a82ca8c2a4771d471197f69b4e2ae0ceeacfd66",
     "spec/v1/migrations.json": "4c50760be70cb644d02427bcaf5749606700edf4513f423903cf3b1d12f5c300",
     "spec/v1/migrations.schema.json": "886779aa6c22e646db097f5df210adb018a4dd14a7b815465a18c8a7056c8f72",
@@ -222,12 +223,12 @@
     "spec/v1/spec-gaps.json": "ea9612af55bea9dae3e82223d4f714243f8f590b0193f1188257b13491a38afc",
     "spec/v2/README.md": "ddea90d7cf14aefffe1a43eeeecd4222dadad1d1e5ac64dceb073990eb93d9ef",
     "spec/v2/core/artifact-type-packs.md": "f734740cc3963f86c9f273a7dace26291bba2855161ddd3540618131a2c8d13e",
-    "spec/v2/core/capabilities.md": "ed4664a38f53cee32d0082d9fe99091ce13a9874081150fdc72b9b41d4ef9e72",
+    "spec/v2/core/capabilities.md": "503fd78ce55aca2cf83b872a5d6086f016470df2d9bcd7fb427b8f16fb9d044a",
     "spec/v2/core/conformance.md": "3ca291e63bc70a6ef829ae8759ad0ded3741ea7aa507bbbdffc57de443ab2ae2",
     "spec/v2/core/connection-packs.md": "c80f95bd6a03698f35c72cdb2b46bd973f49203bbd786c26760e35fa86e6f23d",
-    "spec/v2/core/conversation.md": "354fa57c73d11062e523a44aa75a6353c5c81aefaf306d30c42416a228c82c86",
+    "spec/v2/core/conversation.md": "e0351883a57e90f13d2e9f6f5d3e80080b46be4988617448cb7a0e0c7c0bfbad",
     "spec/v2/core/errors.md": "91f46acc9c9a5532a98cf62c69285d68575c100ff6064f0b1bf94731a087e34a",
-    "spec/v2/core/events.md": "c1a20e3aa6736119ea07aa2cf66faa808a1874d2cde4933033b65506d1742883",
+    "spec/v2/core/events.md": "00746062621ec98052ee323755fbdb10f4fb070439058039e44feb6bb19b073a",
     "spec/v2/core/execution.md": "8a0c9db1bbfb97c008ab9328b7333c1cc3318196e78bfbefb49e781bdf4f9d44",
     "spec/v2/core/form-content-packs.md": "02931227899676fd4581a27017be2a6c4953904717be9b81c29d12f87ab3917d",
     "spec/v2/core/headers.md": "24b0d84ab5521e20f2669fca8006a11f9faf5c2311199e57375b8fa64ce763ed",
@@ -249,11 +250,11 @@
     "spec/v2/core/storage.md": "dc94b985847c1341c7a064f04a6010f0fdbe6c3ab3e555d4362878c81d764c18",
     "spec/v2/core/tool-catalog.md": "d16a9004418719c48301804aefa4d7ab6f41112a4ed83727f552aa1b92b418b0",
     "spec/v2/core/versioning.md": "348a6dc5bd3425efc0016bb6772d5d04ebf578b73eebcdfec6c2d82346a8577e",
-    "spec/v2/core/webhooks.md": "daf6ec03092f4b3fde1eb74a5e2e801ec48db5139a13fcc0fd7fb4a004635ae3",
+    "spec/v2/core/webhooks.md": "b3be00624d07466606c81ff5069744428d16761e16d79807517b171d8293c262",
     "spec/v2/core/workflow-chain-packs.md": "fdce7a8477e269950a2bac05ee6eddbd66eb0b670b464d00054f7196ec05d29c",
     "spec/v2/corrections.json": "3a8d93e33865b692d26a3b6bfd3819766e206b2e0c2a69669baa4bf833d05a49",
     "spec/v2/corrections.schema.json": "46bbffb954d13bd9995aebc912ceeb2544f7064331abf25fd6ab85c81a5cec94",
-    "spec/v2/declaration.json": "e963d3aa73892ee08281227c8a01aa6c06f1b825cdcb26aab029b1ab3f4155bf",
+    "spec/v2/declaration.json": "5ae9b7c84ab841930dd2885f048d99342ee81ba08cf6a6c07015070f8e17b9d1",
     "spec/v2/declaration.schema.json": "ef951633e4070899f64828f5cf1b5f4870270a0360f81dbb49b5b4d6cd407550",
     "spec/v2/eos-override.json": "4c72d2f6a658943b01c1de1643cf294642091933af7832f38ee5495df684cb2d",
     "spec/v2/errors.json": "83f048b0a06952b4af6f125fb66c4212acab51056b411390f1010acd6ab9cdc0",
@@ -287,6 +288,7 @@
     "spec/v2/facets/connections.schema.json": "f998bb206a5814183bb4720cc34fa43b7ab64d61e39a79437b009c589ce8b78e",
     "spec/v2/facets/envelopeStrictness.schema.json": "28be0a27f880bd45ec1222a16155f5e9167bbca57bf0322970fe1eb2654562aa",
     "spec/v2/facets/heartbeat.schema.json": "81d7fa1895a8b0241bd07cf00a7e7905bef0fd14eb3427325261c62eee5746a6",
+    "spec/v2/facets/hostEvents.schema.json": "973ff452cb91356b4c625d0b06c8d2ef335e18183de09e1afde8acead22290b3",
     "spec/v2/facets/interrupt.schema.json": "2110ef32c3f880bf706475ef4cf8ddf97ff06871b8e6003a5edbcf4439f1fb70",
     "spec/v2/facets/mcp.schema.json": "7060657dfcff170f079beed160e3db7c1d3cc4410cd3cf64863baf6459f781cd",
     "spec/v2/facets/oauth.schema.json": "3a0cbe249d3bd5a5982349ae7ba2534776cc958e4a57e0fbeabf2bdab6e99e69",
@@ -309,9 +311,9 @@
     "spec/v2/path-manifest.json": "b84c7561f50c7df0cb61b202bd6595acad3ee7edca7a45f711949bea3c69bd27",
     "spec/v2/peer-dependency-aliases.json": "d10299280abee08258502925bc327293ee413e0108cd6e6ec75ff6110653308d",
     "spec/v2/profiles.json": "180beb9ef2d161766fa23b2987e7e829851e3d316273147cf6a4a3f324befd6b",
-    "spec/v2/release.json": "9e25694dc4997c4291d86a3e65346a9db37af36cff411155de29b9619a169c90",
+    "spec/v2/release.json": "84c88ee17dd416060ba7d564fb3d47fdb528c4efa9cd8e483749b77557dac816",
     "spec/v2/retention-floors.json": "eaf3722d95c79947af1d4269ef85117e126518c588cfcf1a2b21b97269f51624",
-    "spec/v2/surface-baseline.json": "97a0dc8dc715ed872d766aceb91f991e031b0bd160421037d6927fa21e9646b5"
+    "spec/v2/surface-baseline.json": "11600f3b5d689962b34aaa1bdfa4c3e2a47632b914a945b356b825dd494ec9db"
   },
-  "corpusCommit": "d1ece01b982dd1ad4eee4bd29b144e4a82b0db22"
+  "corpusCommit": "d6b2495ddf9ac4b82580a9e0f055f29beccfe24a"
 }

package/api/seams-v2.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP conformance seams profile (openwop-conformance-seams-v2)
-  version: 2.45.19
+  version: 2.45.20
   description: 'The OpenWOP conformance seams profile (`openwop-conformance-seams-v2`): test-only operations in their own
     path space, `/conformance/seams/…`. The profile is versioned and validated against the canonical v2 schemas with no tolerance
     path. It is not a capability: a host advertises the profile, never a `testSeams` flag.
@@ -1327,6 +1327,102 @@ paths:
           $ref: '#/components/responses/Unauthenticated'
         '404':
           $ref: '#/components/responses/NotFound'
+  /conformance/seams/sample/channel-presence/snapshot:
+    post:
+      tags:
+      - Seams
+      operationId: snapshotChannelPresence
+      summary: Read one live channel.presence snapshot as a given observer would receive it
+      description: 'Transiently joins `member` to the channel conversation `conversationId`, then returns the `channel.presence`
+        payload the host would deliver to `observer` (default: `member`). It MUST route through the same membership gate and
+        closed payload the host applies in production, and MUST NOT branch on the seam.
+
+
+        When `observer` is not a current member, the host MUST refuse as its production delivery gate does (`403` or `404`)
+        and MUST NOT answer `200`: presence is never delivered to a non-member (conversation.md §channelPresence). An unwired
+        seam answers `404`/`405`; a scenario tells the two apart by first asking as `member`.'
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              additionalProperties: false
+              required:
+              - conversationId
+              - member
+              properties:
+                conversationId:
+                  type: string
+                  minLength: 1
+                member:
+                  type: string
+                  pattern: ^(user|agent):.+
+                  description: The subject transiently joined, so `present` is non-vacuous.
+                observer:
+                  type: string
+                  pattern: ^(user|agent):.+
+                  description: The subject the snapshot is delivered to; default `member`.
+      responses:
+        '200':
+          description: The snapshot delivered to `observer`, who is a member.
+          content:
+            application/json:
+              schema:
+                $ref: ../schemas/v2/channel-presence-payload.schema.json
+        '400':
+          $ref: '#/components/responses/ValidationError'
+        '401':
+          $ref: '#/components/responses/Unauthenticated'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+        '404':
+          $ref: '#/components/responses/NotFound'
+  /conformance/seams/sample/host-events/emit:
+    post:
+      tags:
+      - Seams
+      operationId: emitHostEvent
+      summary: Produce one host event of an advertised type
+      description: Produces one host event of `type`, which MUST be a type the host advertises in its `hostEvents` record,
+        under the caller's tenant (and `workspaceId`, when given). The host MUST produce it through its production path, delivery
+        class and tenant gate included, and MUST NOT branch on the seam. A host serving the seams profile advertises an `example.*`
+        durable type and an `example.*` ephemeral type for the suite to drive. An unadvertised `type` is `400 validation_error`;
+        an unwired seam answers `404`/`405`.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              additionalProperties: false
+              required:
+              - type
+              properties:
+                type:
+                  type: string
+                  minLength: 1
+                workspaceId:
+                  $ref: ../schemas/v2/ids.schema.json#/$defs/workspaceId
+      responses:
+        '202':
+          description: Produced; `eventId` is the envelope's.
+          content:
+            application/json:
+              schema:
+                type: object
+                additionalProperties: false
+                required:
+                - eventId
+                properties:
+                  eventId:
+                    $ref: ../schemas/v2/ids.schema.json#/$defs/eventId
+        '400':
+          $ref: '#/components/responses/ValidationError'
+        '401':
+          $ref: '#/components/responses/Unauthenticated'
+        '404':
+          $ref: '#/components/responses/NotFound'
 components:
   securitySchemes:
     ApiKeyAuth:

package/api/v2/asyncapi.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.1.0
 info:
   title: OpenWOP v2 event streams
-  version: 2.45.19
+  version: 2.45.20
   description: 'OpenWOP v2 event streams over SSE. The run-events channel''s address is the OpenAPI path key, and the server
     pathname is empty (bare origin). `streamMode` is a stream mode from the closed set, or a comma-separated combination of
     them; `values` never combines. `hostEvents` has a default address, `/host/events`; a host MAY declare another under `heartbeat.deliveryChannel`.
@@ -29,12 +29,14 @@ channels:
         $ref: '#/components/messages/RunEvent'
   hostEvents:
     address: /host/events
-    title: Host-scoped events (`heartbeat.*`)
+    title: Host-scoped events (`heartbeat.*` and host events)
     messages:
       heartbeatEvaluated:
         $ref: '#/components/messages/HeartbeatEvaluated'
       heartbeatStateChanged:
         $ref: '#/components/messages/HeartbeatStateChanged'
+      hostEvent:
+        $ref: '#/components/messages/HostEvent'
 operations:
   subscribeRunEvents:
     action: receive
@@ -445,6 +447,15 @@ components:
       contentType: application/json
       payload:
         $ref: '#/components/schemas/RunEventDoc'
+    HostEvent:
+      name: hostEvent
+      title: Host event
+      contentType: text/event-stream
+      payload:
+        $ref: ../../schemas/v2/host-event.schema.json
+      description: 'One SSE frame per host event (RFC 0236): `event:` is the host-event `type`, `data:` the envelope. A durable
+        event''s frame carries `id:` = `eventId`; an ephemeral event''s frame carries no `id:` and is never redelivered. Every
+        message on this channel is delivered only within the subscriber''s tenant.'
     RunEvent:
       name: runEvent
       title: Run event

package/api/v2/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OpenWOP v2 API
-  version: 2.45.19
+  version: 2.45.20
   summary: REST surface for declaring, executing, suspending, resuming, and observing multi-step workflows.
   description: 'The OpenWOP v2 REST API. Paths are unversioned and served at the bare origin; a client selects a version with
     the `OpenWOP-Version` header from the host''s `protocolVersions[]`. Conformance seams and test-mode operations are not
@@ -3411,9 +3411,9 @@ paths:
       tags:
       - host
       operationId: streamHostEvents
-      summary: Stream host-scoped events (`heartbeat.*`) as SSE
-      description: The default `hostEvents` address; a host MAY declare another under `heartbeat.deliveryChannel`. Carries
-        no run data.
+      summary: Stream host-scoped events (`heartbeat.*` and host events) as SSE
+      description: The default `hostEvents` address; a host MAY declare another under `heartbeat.deliveryChannel`. Every message
+        is delivered only within the caller's tenant (RFC 0236 §D). Carries no run data.
       responses:
         '200':
           description: '`text/event-stream` of `hostEvents` messages.'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openwop/spec-artifacts",
-  "version": "2.45.19",
+  "version": "2.45.20",
   "description": "The OpenWOP machine-readable contract: api/ (OpenAPI, AsyncAPI, the seams profile), schemas/ (v1 and v2 JSON Schemas), the spec/v1 and spec/v2 registries (errors, event codemap, declaration, deprecations, migrations, gaps) and CORPUS-STAMP.json — published from the openwop/openwop corpus tag; the peer dependency @openwop/openwop-conformance digest-checks at start (RFC 0168 §D.2).",
   "license": "Apache-2.0",
   "repository": {

package/schemas/README.md

@@ -40,7 +40,7 @@
 | `audit-verify-result.schema.json` | `auth-profiles.md` §`openwop-audit-log-integrity` | Response payload from `GET /v1/audit/verify` — chain-validity verdict + checkpoints + anomalies |
 | `capabilities.schema.json` | `capabilities.md` | `/.well-known/openwop` response — protocolVersion + supportedEnvelopes + schemaVersions + limits + optional v1 discovery surface |
 | `channel-written-payload.schema.json` | `channels-and-reducers.md` §Channel write event | Payload of the `channel.written` RunEvent — write input + reducer name |
-| `channel-presence-payload.schema.json` | RFC 0110 | Payload of the OPTIONAL `channel.presence` RunEvent — ephemeral channel presence (online + typing), membership-gated, non-persisted |
+| `channel-presence-payload.schema.json` | RFC 0110 | Payload of the `channel.presence` ephemeral host event (RFC 0236 §F) — ephemeral channel presence (online + typing), membership-gated, non-persisted |
 | `chat-card-pack-manifest.schema.json` | `chat-card-packs.md` + RFC 0071 | DRAFT — manifest for `kind: "card"` registry packs (RFC 0071 Phase 2). Peer to the node/workflow-chain/prompt/artifact-type pack manifests; disjoint via the `kind` discriminator. Distributes AI chat cards: a prompt template + typed input subset bound to a typed `outputArtifactType`. |
 | `form-content-pack-manifest.schema.json` | `form-content-packs.md` + RFC 0137 | DRAFT — manifest for `kind: "form-content"` registry packs (RFC 0137). Peer to the node/workflow-chain/prompt/artifact-type/chat-card pack manifests; disjoint via the `kind` discriminator. Distributes form templates: a versioned, ordered list of typed fields a host instantiates through its normal create path. `fields[].type` reuses the RFC 0071 portable subset verbatim rather than defining a second vocabulary. |
 | `connection-pack-manifest.schema.json` | `connection-packs.md` + RFC 0095 | DRAFT — manifest for `kind: "connection"` registry packs (RFC 0095). Peer to the node/workflow-chain/prompt/artifact-type/chat-card pack manifests; disjoint via the `kind` discriminator. Distributes a portable provider definition — auth endpoints, read/write scope groups, exactly-one reach (`mcp`/`openapi`/`integration`) — that the RFC 0045/0047 `provider` string resolves against. Carries NO credential material (`connection-pack-no-credential-material`). |

package/schemas/v2/capabilities.schema.json

@@ -4485,6 +4485,105 @@
       "description": "core/capabilities.md#heartbeat — witness: witnessable-gated; maturity experimental/none; RFC 0060",
       "x-openwop-facets-from": "spec/v2/facets/heartbeat.schema.json"
     },
+    "hostEvents": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "status",
+        "since",
+        "witness",
+        "types"
+      ],
+      "properties": {
+        "status": {
+          "enum": [
+            "stable",
+            "experimental",
+            "deprecated"
+          ]
+        },
+        "since": {
+          "type": "string",
+          "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$",
+          "description": "The minor of THIS HOST's own contract at which it began serving the family — a point on its protocolVersions[] timeline, not the corpus minor that introduced the family. The corpus states no per-family since (spec/v2/declaration.json carries witness and maturity and no since), and `status`/`until` are the host's stability claim absorbed from v1 tier/experimentalUntil, so all three describe the host's offering and `witness` is the record's one corpus-derived field. A since naming a minor absent from protocolVersions[] puts adjacent same-grammar fields on two different timelines and is a defect. Ruled 2026-09-11."
+        },
+        "until": {
+          "type": "string",
+          "pattern": "^((0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)|\\d{4}-\\d{2}-\\d{2})$"
+        },
+        "witness": {
+          "enum": [
+            "witnessable-unaided",
+            "witnessable-gated",
+            "seam-gated",
+            "claims-check",
+            "negative-existence"
+          ]
+        },
+        "types": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "type",
+              "delivery"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9]*(-[a-z0-9]+)*$"
+              },
+              "delivery": {
+                "type": "string",
+                "enum": [
+                  "durable",
+                  "ephemeral"
+                ]
+              }
+            }
+          }
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "properties": {
+              "status": {
+                "const": "stable"
+              }
+            }
+          },
+          "then": {
+            "not": {
+              "required": [
+                "until"
+              ]
+            }
+          }
+        },
+        {
+          "if": {
+            "properties": {
+              "status": {
+                "enum": [
+                  "experimental",
+                  "deprecated"
+                ]
+              }
+            }
+          },
+          "then": {
+            "required": [
+              "until"
+            ]
+          }
+        }
+      ],
+      "description": "core/capabilities.md#hostEvents — witness: witnessable-gated; maturity experimental/none; RFC 0236",
+      "x-openwop-facets-from": "spec/v2/facets/hostEvents.schema.json"
+    },
     "toolHooks": {
       "type": "object",
       "additionalProperties": false,

package/schemas/v2/channel-presence-payload.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/channel-presence-payload.schema.json",
   "title": "ChannelPresencePayload",
-  "description": "Payload of the OPTIONAL `channel.presence` RunEvent (RFC 0110). EPHEMERAL live presence for a `type:'channel'` conversation — who is currently present + (optionally) who is typing. A host MUST NOT persist this event to the replayable event log / transcript, and it MUST NOT affect replay or `:fork` determinism (presence is live state, the load-bearing distinction from the persisted `conversation.exchanged` turn — see replay.md). Membership-gated: every ref MUST be a current channel participant and the event MUST NOT be delivered to a non-member (the same DEFAULT-DENY visibility as the channel's messages; cross-tenant delivery is forbidden, CTI-1). NON-PII: subject refs are the opaque RFC 0041 vocabulary only — no IP/location/device. A host MAY emit; if it advertises `channelPresence` it MUST. Gated on the host advertising `channelPresence` (capabilities.schema.json). See RFC 0110.",
+  "description": "Payload of the `channel.presence` ephemeral host event (RFC 0110; RFC 0236 §F: a host event, not a run event, so it has no log position). EPHEMERAL live presence for a `type:'channel'` conversation — who is currently present + (optionally) who is typing. A host MUST NOT persist this event to the replayable event log / transcript, and it MUST NOT affect replay or `:fork` determinism (presence is live state, the load-bearing distinction from the persisted `conversation.exchanged` turn — see replay.md). Membership-gated: every ref MUST be a current channel participant and the event MUST NOT be delivered to a non-member (the same DEFAULT-DENY visibility as the channel's messages; cross-tenant delivery is forbidden, CTI-1). NON-PII: subject refs are the opaque RFC 0041 vocabulary only — no IP/location/device. A host MAY emit; if it advertises `channelPresence` it MUST. Gated on the host advertising `channelPresence` (capabilities.schema.json). See RFC 0110.",
   "type": "object",
   "required": [
     "conversationId",
@@ -53,6 +53,5 @@
       ]
     }
   ],
-  "$comment": "RFC 0110 NEGATIVE (not validatable as an examples[] entry, which must be VALID): a payload carrying any field beyond conversationId/present/typing (e.g. `ip`, `location`) MUST FAIL validation via `additionalProperties: false` — the no-PII guard; see conformance/src/scenarios/channel-presence-shape.test.ts.",
-  "x-openwop-seeded-from": "v1"
+  "$comment": "RFC 0110 NEGATIVE (not validatable as an examples[] entry, which must be VALID): a payload carrying any field beyond conversationId/present/typing (e.g. `ip`, `location`) MUST FAIL validation via `additionalProperties: false` — the no-PII guard; see conformance/src/scenarios/channel-presence-shape.test.ts."
 }

package/schemas/v2/host-event.schema.json

@@ -0,0 +1,81 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openwop.dev/spec/v2/host-event.schema.json",
+  "title": "HostEvent",
+  "description": "RFC 0236 §A — an event that belongs to no run. It carries no `runId` and no `sequence`, and no run's log contains it. Delivered on the `hostEvents` channel and, when durable, through webhooks (`events.md` §Host events, `webhooks.md` §Delivery). `delivery` MUST equal the class the host advertises for `type` in its `hostEvents` record.",
+  "type": "object",
+  "required": [
+    "eventId",
+    "type",
+    "timestamp",
+    "delivery",
+    "payload"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "eventId": {
+      "$ref": "ids.schema.json#/$defs/eventId",
+      "description": "Unique per host; identical on every delivery attempt of this event."
+    },
+    "type": {
+      "type": "string",
+      "pattern": "^[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9]*(-[a-z0-9]+)*$",
+      "description": "A protocol host-event type (`channel.presence`) or a vendor type `org.name` whose org is registered (`events.md` §Naming)."
+    },
+    "timestamp": {
+      "type": "string",
+      "format": "date-time",
+      "description": "When the host produced the event (RFC 3339)."
+    },
+    "delivery": {
+      "type": "string",
+      "enum": [
+        "durable",
+        "ephemeral"
+      ],
+      "description": "`ephemeral`: never persisted, never redelivered, never fanned out. `durable`: resumable by `eventId` and webhook-deliverable."
+    },
+    "workspaceId": {
+      "$ref": "ids.schema.json#/$defs/workspaceId",
+      "description": "Present exactly when the event belongs to a workspace (`identity.md` §1)."
+    },
+    "payload": {
+      "type": "object",
+      "additionalProperties": true,
+      "description": "For a protocol type, its registered payload schema. A vendor payload MUST NOT carry secret material (SR-1)."
+    }
+  },
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "type": {
+            "const": "channel.presence"
+          }
+        }
+      },
+      "then": {
+        "properties": {
+          "delivery": {
+            "const": "ephemeral"
+          },
+          "payload": {
+            "$ref": "channel-presence-payload.schema.json"
+          }
+        }
+      }
+    }
+  ],
+  "examples": [
+    {
+      "eventId": "hev-01J9ZK3Q8W2M4N6P7R8S",
+      "type": "example.thing-happened",
+      "timestamp": "2026-10-05T12:00:00Z",
+      "delivery": "durable",
+      "workspaceId": "ws-acme",
+      "payload": {
+        "thingId": "t-1"
+      }
+    }
+  ]
+}

package/schemas/v2/webhook-dead-letter-page.schema.json

@@ -10,7 +10,7 @@
     "deliveries": {
       "type": "array",
       "description": "Dead-lettered deliveries, newest first. Empty when the subscription has none within `retentionDays`.",
-      "items": { "$ref": "#/$defs/deadLetteredDelivery" }
+      "items": { "oneOf": [{ "$ref": "#/$defs/deadLetteredDelivery" }, { "$ref": "#/$defs/deadLetteredHostDelivery" }] }
     },
     "nextCursor": {
       "type": "string",
@@ -20,6 +20,23 @@
     }
   },
   "$defs": {
+    "deadLetteredHostDelivery": {
+      "description": "RFC 0236 §E — a dead-lettered delivery of a durable host event. It names no run, so it carries no `runId`; `eventId` is the host event's. Only a subscription whose `events[]` names a host-event type can have one.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["deliveryId", "webhookId", "eventId", "eventType", "attempts", "deadLetteredAt", "expiresAt", "reason"],
+      "properties": {
+        "deliveryId": { "$ref": "ids.schema.json#/$defs/deliveryId" },
+        "webhookId": { "$ref": "ids.schema.json#/$defs/subscriptionId" },
+        "eventId": { "$ref": "ids.schema.json#/$defs/eventId" },
+        "eventType": { "$ref": "#/$defs/deadLetteredDelivery/properties/eventType" },
+        "attempts": { "$ref": "#/$defs/deadLetteredDelivery/properties/attempts" },
+        "deadLetteredAt": { "$ref": "#/$defs/deadLetteredDelivery/properties/deadLetteredAt" },
+        "expiresAt": { "$ref": "#/$defs/deadLetteredDelivery/properties/expiresAt" },
+        "reason": { "$ref": "#/$defs/deadLetteredDelivery/properties/reason" },
+        "lastStatus": { "$ref": "#/$defs/deadLetteredDelivery/properties/lastStatus" }
+      }
+    },
     "deadLetteredDelivery": {
       "type": "object",
       "additionalProperties": false,

package/schemas/v2/webhook-delivery.schema.json

@@ -2,25 +2,52 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://openwop.dev/spec/v2/webhook-delivery.schema.json",
   "title": "Webhook delivery envelope (webhooks.md §Delivery)",
-  "description": "The body of an outbound webhook delivery. Written 2026-09-04 because it did not exist: the envelope was specified by one sentence in webhooks.md §Delivery ('the body is `{ runId, workspaceId, event }` where `event` is the verbatim run event') and no artifact bound it, while the NESTED event.runId was bound all along through run-event.schema.json. Two production hosts arrived at that asymmetry independently — one asking what major an outbound payload speaks, the other answering from the $ref graph — and both concluded the gap was a missing artifact rather than a missing paragraph. An emitter that projects correctly could be asserted but not checked, which is the wrong way round.",
-  "type": "object",
-  "additionalProperties": false,
-  "required": [
-    "runId",
-    "event"
-  ],
-  "properties": {
-    "runId": {
-      "$ref": "ids.schema.json#/$defs/runId",
-      "description": "The run this delivery is about, tenant-bound per identity.md §5. An outbound emission is not a response to a versioned request, so nothing about the request cycle supplies the form — the grammar does, and it is the same grammar everywhere a v2 runId is rendered. A host that projects on responses and not on emissions hands the subscriber an id the client never saw: the correlation filter matches nothing, with no error, no 4xx and no log line. A tier-1 host hit exactly that, and the silence is why this field is bound here rather than left to the prose. A host that projects on responses and not on emissions hands the subscriber an identifier the client has never seen, and the failure is silent: the correlation matches nothing, with no error, no 4xx and no log line. Until 2026-09-04 the nested `event.runId` was bound by run-event.schema.json while the envelope's own was carried by one paragraph of prose, which is how a real host shipped the split (webhooks.md §Delivery)."
+  "description": "The body of an outbound webhook delivery. Written 2026-09-04 because it did not exist: the envelope was specified by one sentence in webhooks.md §Delivery ('the body is `{ runId, workspaceId, event }` where `event` is the verbatim run event') and no artifact bound it, while the NESTED event.runId was bound all along through run-event.schema.json. Two production hosts arrived at that asymmetry independently — one asking what major an outbound payload speaks, the other answering from the $ref graph — and both concluded the gap was a missing artifact rather than a missing paragraph. An emitter that projects correctly could be asserted but not checked, which is the wrong way round. RFC 0236 §E adds a second body, for a durable host event; the run body is unchanged.",
+  "oneOf": [
+    {
+      "$ref": "#/$defs/runDelivery"
     },
-    "workspaceId": {
-      "$ref": "ids.schema.json#/$defs/workspaceId",
-      "description": "The workspace the run belongs to. OPTIONAL, and present exactly when RunSnapshot.owner.workspace is (identity.md §1: owner is { tenant, workspace?, subject }). This field was REQUIRED for the first six hours of the schema's life, which made the envelope tighter than the identity model it renders: a run in a single-workspace tenant has no workspace, and the only way a host could satisfy the envelope was to put its tenant id in this field. A tier-1 host proposed exactly that — `owner.workspace ?? tenantId` — and asked for a veto. This is the veto. A tenant id in a workspace field is two facts wearing one name, and every consumer downstream would have to know which host lied."
+    {
+      "$ref": "#/$defs/hostDelivery"
+    }
+  ],
+  "$defs": {
+    "runDelivery": {
+      "description": "A run event delivery: `{ runId, workspaceId?, event }`. Unchanged by RFC 0236.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "runId",
+        "event"
+      ],
+      "properties": {
+        "runId": {
+          "$ref": "ids.schema.json#/$defs/runId",
+          "description": "The run this delivery is about, tenant-bound per identity.md §5. An outbound emission is not a response to a versioned request, so nothing about the request cycle supplies the form — the grammar does, and it is the same grammar everywhere a v2 runId is rendered. A host that projects on responses and not on emissions hands the subscriber an id the client never saw: the correlation filter matches nothing, with no error, no 4xx and no log line. A tier-1 host hit exactly that, and the silence is why this field is bound here rather than left to the prose. A host that projects on responses and not on emissions hands the subscriber an identifier the client has never seen, and the failure is silent: the correlation matches nothing, with no error, no 4xx and no log line. Until 2026-09-04 the nested `event.runId` was bound by run-event.schema.json while the envelope's own was carried by one paragraph of prose, which is how a real host shipped the split (webhooks.md §Delivery)."
+        },
+        "workspaceId": {
+          "$ref": "ids.schema.json#/$defs/workspaceId",
+          "description": "The workspace the run belongs to. OPTIONAL, and present exactly when RunSnapshot.owner.workspace is (identity.md §1: owner is { tenant, workspace?, subject }). This field was REQUIRED for the first six hours of the schema's life, which made the envelope tighter than the identity model it renders: a run in a single-workspace tenant has no workspace, and the only way a host could satisfy the envelope was to put its tenant id in this field. A tier-1 host proposed exactly that — `owner.workspace ?? tenantId` — and asked for a veto. This is the veto. A tenant id in a workspace field is two facts wearing one name, and every consumer downstream would have to know which host lied."
+        },
+        "event": {
+          "$ref": "run-event.schema.json",
+          "description": "The verbatim run event (events.md). 'Verbatim' is load-bearing: the envelope is one of the three renderings generated from a single payload definition (RFC 0171 §A.4), so this is the event as persisted, not a re-serialization. Its own runId is bound by run-event.schema.json to the same $def as the envelope's, which is what made the envelope's omission survivable for as long as it did — and invisible for just as long."
+        }
+      }
     },
-    "event": {
-      "$ref": "run-event.schema.json",
-      "description": "The verbatim run event (events.md). 'Verbatim' is load-bearing: the envelope is one of the three renderings generated from a single payload definition (RFC 0171 §A.4), so this is the event as persisted, not a re-serialization. Its own runId is bound by run-event.schema.json to the same $def as the envelope's, which is what made the envelope's omission survivable for as long as it did — and invisible for just as long."
+    "hostDelivery": {
+      "description": "RFC 0236 §E — a durable host event delivery. Sent only to a subscription whose `events[]` names the host-event type, so no subscription registered before host events existed receives it. The workspace, when there is one, is inside the envelope.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "hostEvent"
+      ],
+      "properties": {
+        "hostEvent": {
+          "$ref": "host-event.schema.json",
+          "description": "The host event, verbatim; `delivery` is always `durable` here (an ephemeral host event is never fanned out)."
+        }
+      }
     }
   }
 }

package/spec/v1/core-standard-manifest.json

@@ -4,7 +4,7 @@
   "provenance": {
     "suite": {
       "package": "@openwop/openwop-conformance",
-      "version": "2.45.19"
+      "version": "2.45.20"
     },
     "note": "Derived from the corpus at generation time. Regenerate with --write; verify with --check."
   },
@@ -426,5 +426,5 @@
       "$id": "https://openwop.dev/spec/v1/workspace-file.schema.json"
     }
   ],
-  "digest": "902047907690f4c43c35cc77a9f6d55db02412faed058da8c052a95f8730426f"
+  "digest": "e75839d9f2c59d0ca85c572fbbaafcb8dbc304bfa3bff904fb99f11938ca9c00"
 }

package/spec/v1/gaps.json

@@ -14207,6 +14207,91 @@
         }
       ]
     },
+    {
+      "id": "openwop.gap.0236.1",
+      "rfc": "0236",
+      "local": "G1",
+      "section": "§G, §A–§E",
+      "surface": "The v2 reference host serves `/host/events` and durable webhooks but no host-event envelope, tenant gate on the stream, emit seam or webhook host body.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "v2-reference-host-events",
+      "sources": [
+        {
+          "file": "RFCS/registers/0236-host-events.gaps.md",
+          "token": "G1"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0236.2",
+      "rfc": "0236",
+      "local": "G2",
+      "section": "§Conformance",
+      "surface": "No host bundle records the six `openwop.requirement.0236.*` ids, because the legs are not written yet.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "carried",
+      "target": "openwop.gap.0236.2",
+      "sources": [
+        {
+          "file": "RFCS/registers/0236-host-events.gaps.md",
+          "token": "G2"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0236.3",
+      "rfc": "0236",
+      "local": "G3",
+      "section": "§B",
+      "surface": "The two heartbeat messages keep their bare shape on the `hostEvents` channel and are not §A envelopes; `heartbeat.stateChanged` also breaks the `events.md` §Naming grammar.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "next-major",
+      "sources": [
+        {
+          "file": "RFCS/registers/0236-host-events.gaps.md",
+          "token": "G3"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0236.4",
+      "rfc": "0236",
+      "local": "G4",
+      "section": "§F",
+      "surface": "`channel.presence` stays in the v2 run-event union, deprecated.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "next-major",
+      "sources": [
+        {
+          "file": "RFCS/registers/0236-host-events.gaps.md",
+          "token": "G4"
+        }
+      ]
+    },
+    {
+      "id": "openwop.gap.0236.5",
+      "rfc": "0236",
+      "local": "G5",
+      "section": "Motivation",
+      "surface": "openwop-app delivers runless host events to major-2 webhooks under a pseudo `runId` and three-segment type names.",
+      "witness": "unclassified",
+      "requirementId": null,
+      "disposition": "externally-gated",
+      "target": "openwop-app-adr-0812",
+      "sources": [
+        {
+          "file": "RFCS/registers/0236-host-events.gaps.md",
+          "token": "G5"
+        }
+      ]
+    },
     {
       "id": "openwop.gap.spec.a2a-integration.g1",
       "rfc": "0152",

package/spec/v2/core/capabilities.md

@@ -111,7 +111,7 @@ These keys are not part of the v2 root:
 
 Operation paths live in `spec/v2/path-manifest.json` ([`versioning.md`](versioning.md)). The declaration is generated from nothing and checked against everything (`scripts/check-declaration.mjs`).
 
-## 5. Core families (73)
+## 5. Core families (74)
 
 Each heading below is a `spec/v2/declaration.json` row with `anchor: core`. `scripts/check-declaration.mjs` MUST fail when a heading here, a root key in the generated schema, or a pack peer-dependency identifier names a family the declaration does not. The peer-dependency identifier is identical to the key ([`packs.md`](packs.md)).
 
@@ -261,6 +261,10 @@ Witness `witnessable-gated`.
 
 Witness `witnessable-gated`.
 
+### § hostEvents
+
+Witness `witnessable-gated`; see [events.md](events.md) §Host events.
+
 ### § toolHooks
 
 Witness `witnessable-gated`.

package/spec/v2/core/conversation.md

@@ -17,10 +17,12 @@ A host advertising `multiPartyConversation`:
 
 ## `channelPresence`
 
-A host advertising `channelPresence` MUST report present members as a subset of the channel's roster, and MUST NOT include a subject that is not a member. The payload is closed: it carries opaque, non-PII subject references and nothing else.
+A host advertising `channelPresence` MUST emit `channel.presence`; otherwise it omits it. The closed payload carries only opaque, non-PII references to roster members. A host MUST NOT include a non-member, deliver to one, or deliver across tenants.
+
+A host MUST list it under `hostEvents` as ephemeral ([events.md](events.md) §Host events) and MUST NOT emit it as a run event.
 
 ## `conversationTurnModelProvenance`
 
 A host that stamps model provenance on an agent turn MUST advertise `conversationTurnModelProvenance`. The stamp is non-secret and non-PII (provider and model identifiers only), and a host MUST NOT place prompt or completion content in it.
 
-*Sources: RFCs 0101, 0109, 0110.*
+*Sources: RFCs 0101, 0109, 0110, 0236.*

package/spec/v2/core/events.md

@@ -1,7 +1,7 @@
 # Events
 
 > **Status: Stable.**
-> **Normative home:** `heartbeat`, `envelopeContracts`, `envelopes`, `feedback`, `providerUsage`, `supportedEnvelopes`, `schemaVersions`, `envelopeStrictness`.
+> **Normative home:** `heartbeat`, `hostEvents`, `envelopeContracts`, `envelopes`, `feedback`, `providerUsage`, `supportedEnvelopes`, `schemaVersions`, `envelopeStrictness`.
 
 ## Why this exists
 
@@ -123,7 +123,16 @@ With `bufferMs` (0..5000) the host accumulates events into one `event: batch` fr
 
 ### Host events
 
-`hostEvents` carries the heartbeat messages (`schemas/v2/heartbeat-evaluated.schema.json`, `schemas/v2/heartbeat-state-changed.schema.json`) at the default address `/host/events` (`streamHostEvents`). A host MAY declare another address under `heartbeat.deliveryChannel` ([capabilities.md](capabilities.md)); every channel has an address. The channel carries no run data.
+`hostEvents` carries the heartbeat messages (`schemas/v2/heartbeat-evaluated.schema.json`, `schemas/v2/heartbeat-state-changed.schema.json`) and host events at the default address `/host/events` (`streamHostEvents`). A host MAY declare another address under `heartbeat.deliveryChannel` ([capabilities.md](capabilities.md)); every channel has an address. The channel carries no run data. Every host event, and every heartbeat a tenant owns, MUST reach only that tenant's subscribers.
+
+#### `hostEvents`
+
+A host event belongs to no run: its envelope (`schemas/v2/host-event.schema.json`) has no `runId` or `sequence`. `hostEvents.types[]` lists each emitted type and its `delivery`, `durable` or `ephemeral`. A host advertising it:
+
+- MUST deliver each listed type here, `event:` being the type and `data:` the envelope, and MUST emit no other type or class;
+- MUST confine an event naming a `workspaceId` to that workspace, and an ephemeral event to subscribers it is visible to.
+
+An ephemeral event MUST NOT be persisted, redelivered on reconnection, or sent through webhooks, A2A push or any sink; its frame has no `id:`. A durable event's `id:` is its `eventId`, and a host SHOULD honour `Last-Event-ID` for it within retention. A vendor payload MUST NOT carry secrets.
 
 #### `heartbeat`
 
@@ -241,4 +250,4 @@ Under `reliability.completion.distinguishesTruncation`, an envelope is complete
 - On exhaustion the host MUST emit `envelope.retry-exhausted` with that `finalReason` and `cap.breached` `kind: "schema"`, and fail the node with `envelope_truncation_unrecoverable` or `envelope_invalid`.
 - Lenient-parse recovery consumes no retry. It emits `envelope.recovery-applied` once per recovery, carrying only the path and an optional byte offset.
 
-*Sources: RFCs 0026, 0030, 0032, 0033, 0056, 0060, 0171, 0172, 0176, 0185, 0194, 0213.*
+*Sources: RFCs 0026, 0030, 0032, 0033, 0056, 0060, 0171, 0172, 0176, 0185, 0194, 0213, 0236.*

package/spec/v2/core/webhooks.md

@@ -16,17 +16,17 @@ A host that advertises `webhooks` ([capabilities.md](capabilities.md)) serves `r
 | `registerWebhook` | `{ url, events[], secret?, tags?, signatureAlgorithms? }` | `201 { webhookId, secret? }` |
 | `unregisterWebhook` | path `webhookId` | `204`; `404` when unknown; `403` when the caller is outside the subscription's tenant |
 
-On `registerWebhook`, `url` MUST be `https://` and `events[]` MUST be non-empty v2 event type names ([events.md](events.md)).
+On `registerWebhook`, `url` MUST be `https://` and `events[]` MUST be non-empty v2 event type names ([events.md](events.md)). `events[]` MAY name a durable host-event type the host advertises; an ephemeral or unadvertised one MUST be refused `400 validation_error`.
 
 When `registerWebhook` omits `secret`, the host MUST generate one and return it as `secret` in the `201`. That response is the only one that carries it. A supplied secret MUST NOT be echoed.
 
 A `204` from `unregisterWebhook` ends the subscription's deliveries, including retries already scheduled (§Durability).
 
-A subscription MUST receive only events from runs within its tenant scope; cross-tenant delivery is a protocol violation whatever the filter says (invariant `webhook-cross-tenant-isolation`). `tags` narrows delivery to runs whose options carry an overlapping tag.
+A subscription MUST receive only events from runs within its tenant scope, and only host events of its tenant; cross-tenant delivery is a protocol violation whatever the filter says (invariant `webhook-cross-tenant-isolation`). `tags` narrows delivery to runs whose options carry an overlapping tag.
 
 ## Delivery
 
-The delivery envelope is generated from the event's payload definition (events.md §Payloads). The body is `{ runId, workspaceId?, event }`, where `event` is the verbatim run event.
+The delivery envelope is generated from the event's payload definition (events.md §Payloads). The body is `{ runId, workspaceId?, event }`, where `event` is the verbatim run event. A durable host event's body is `{ hostEvent }`, deduplicated on `(OpenWOP-Webhook-Id, eventId)`; its `webhook-id` MUST NOT change across attempts.
 
 - The body MUST validate against `schemas/v2/webhook-delivery.schema.json`.
 - `workspaceId` is present exactly when `RunSnapshot.owner.workspace` is ([identity.md §1](identity.md)); a host MUST NOT substitute its tenant id for an absent workspace.
@@ -162,4 +162,4 @@ With `triggerBridge.ingestion`, each `externalSources` entry MUST turn an extern
 - MUST refuse private, link-local and loopback targets and cap the body on any ingestion fetch, and never hand the run a URL (invariant `trigger-ingestion-ssrf`);
 - SHOULD key `stream` by topic, partition and offset, `change` by table and changelog id; a key MUST survive broker redelivery.
 
-*Sources: RFCs 0053, 0083, 0099, 0127, 0165, 0171, 0173, 0176, 0188, 0196, 0201, 0215, 0217, 0230, 0232.*
+*Sources: RFCs 0053, 0083, 0099, 0127, 0165, 0171, 0173, 0176, 0188, 0196, 0201, 0215, 0217, 0230, 0232, 0236.*

package/spec/v2/declaration.json

@@ -957,6 +957,26 @@
       "owningRfc": "0060",
       "facetsFrom": "spec/v2/facets/heartbeat.schema.json"
     },
+    {
+      "key": "hostEvents",
+      "kind": "family",
+      "normativeText": ["spec/v2/core/events.md"],
+      "anchor": "core",
+      "section": "core/capabilities.md#hostEvents",
+      "peerDependencyId": "hostEvents",
+      "witness": "witnessable-gated",
+      "maturity": {
+        "technical": "experimental",
+        "adoption": "none"
+      },
+      "facets": [
+        "types"
+      ],
+      "floorScenarios": [],
+      "requirementIds": [],
+      "owningRfc": "0236",
+      "facetsFrom": "spec/v2/facets/hostEvents.schema.json"
+    },
     {
       "key": "toolHooks",
       "kind": "family",

package/spec/v2/facets/hostEvents.schema.json

@@ -0,0 +1,33 @@
+{
+  "$comment": "RFC 0236 §B — every host-event type the host emits, with its delivery class; a type's class never varies",
+  "properties": {
+    "types": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "type",
+          "delivery"
+        ],
+        "properties": {
+          "type": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9]*(-[a-z0-9]+)*\\.[a-z][a-z0-9]*(-[a-z0-9]+)*$"
+          },
+          "delivery": {
+            "type": "string",
+            "enum": [
+              "durable",
+              "ephemeral"
+            ]
+          }
+        }
+      }
+    }
+  },
+  "required": [
+    "types"
+  ]
+}

package/spec/v2/release.json

@@ -1,6 +1,6 @@
 {
   "$comment": "RFC 0172 §D.1 — the one release identity the v2 artifacts derive from. `version` is the next corpus tag `v<version>` (the publish workflow's coordinated-release tag pattern `v*`; RFC 0172's `openwop/v2.<minor>.<patch>` spelling is amended to this at its flip). api/v2/*.yaml info.version, the suite's 2.x version and @openwop/spec-artifacts read it. Bumped by the release PR that cuts the tag, never by hand elsewhere.",
-  "version": "2.45.19",
-  "corpusTag": "v2.45.19",
+  "version": "2.45.20",
+  "corpusTag": "v2.45.20",
   "updated": "2026-10-05"
 }

package/spec/v2/surface-baseline.json

@@ -4,7 +4,7 @@
     "schemas/v2/**/*.json",
     "spec/v2/path-manifest.json"
   ],
-  "release": "2.45.19",
+  "release": "2.45.20",
   "kinds": {
     "union": [
       "channel",
@@ -18,7 +18,7 @@
       "type"
     ]
   },
-  "count": 8705,
+  "count": 8746,
   "surfaces": [
     "schemas/v2/a2a-task-state.schema.json#/contextId|type|string",
     "schemas/v2/a2a-task-state.schema.json#/interruptKind|enum-member|\"approval\"",
@@ -2023,6 +2023,39 @@
     "schemas/v2/capabilities.schema.json#/heartbeat|required|until",
     "schemas/v2/capabilities.schema.json#/heartbeat|required|witness",
     "schemas/v2/capabilities.schema.json#/heartbeat|type|object",
+    "schemas/v2/capabilities.schema.json#/hostEvents/since|type|string",
+    "schemas/v2/capabilities.schema.json#/hostEvents/status|enum-member|\"deprecated\"",
+    "schemas/v2/capabilities.schema.json#/hostEvents/status|enum-member|\"experimental\"",
+    "schemas/v2/capabilities.schema.json#/hostEvents/status|enum-member|\"stable\"",
+    "schemas/v2/capabilities.schema.json#/hostEvents/types/[]/delivery|enum-member|\"durable\"",
+    "schemas/v2/capabilities.schema.json#/hostEvents/types/[]/delivery|enum-member|\"ephemeral\"",
+    "schemas/v2/capabilities.schema.json#/hostEvents/types/[]/delivery|type|string",
+    "schemas/v2/capabilities.schema.json#/hostEvents/types/[]/type|type|string",
+    "schemas/v2/capabilities.schema.json#/hostEvents/types/[]|closed|true",
+    "schemas/v2/capabilities.schema.json#/hostEvents/types/[]|property|delivery",
+    "schemas/v2/capabilities.schema.json#/hostEvents/types/[]|property|type",
+    "schemas/v2/capabilities.schema.json#/hostEvents/types/[]|required|delivery",
+    "schemas/v2/capabilities.schema.json#/hostEvents/types/[]|required|type",
+    "schemas/v2/capabilities.schema.json#/hostEvents/types/[]|type|object",
+    "schemas/v2/capabilities.schema.json#/hostEvents/types|type|array",
+    "schemas/v2/capabilities.schema.json#/hostEvents/until|type|string",
+    "schemas/v2/capabilities.schema.json#/hostEvents/witness|enum-member|\"claims-check\"",
+    "schemas/v2/capabilities.schema.json#/hostEvents/witness|enum-member|\"negative-existence\"",
+    "schemas/v2/capabilities.schema.json#/hostEvents/witness|enum-member|\"seam-gated\"",
+    "schemas/v2/capabilities.schema.json#/hostEvents/witness|enum-member|\"witnessable-gated\"",
+    "schemas/v2/capabilities.schema.json#/hostEvents/witness|enum-member|\"witnessable-unaided\"",
+    "schemas/v2/capabilities.schema.json#/hostEvents|closed|true",
+    "schemas/v2/capabilities.schema.json#/hostEvents|property|since",
+    "schemas/v2/capabilities.schema.json#/hostEvents|property|status",
+    "schemas/v2/capabilities.schema.json#/hostEvents|property|types",
+    "schemas/v2/capabilities.schema.json#/hostEvents|property|until",
+    "schemas/v2/capabilities.schema.json#/hostEvents|property|witness",
+    "schemas/v2/capabilities.schema.json#/hostEvents|required|since",
+    "schemas/v2/capabilities.schema.json#/hostEvents|required|status",
+    "schemas/v2/capabilities.schema.json#/hostEvents|required|types",
+    "schemas/v2/capabilities.schema.json#/hostEvents|required|until",
+    "schemas/v2/capabilities.schema.json#/hostEvents|required|witness",
+    "schemas/v2/capabilities.schema.json#/hostEvents|type|object",
     "schemas/v2/capabilities.schema.json#/httpClient/egressPolicy/decisions/[]|enum-member|\"allowed\"",
     "schemas/v2/capabilities.schema.json#/httpClient/egressPolicy/decisions/[]|enum-member|\"approval-required\"",
     "schemas/v2/capabilities.schema.json#/httpClient/egressPolicy/decisions/[]|enum-member|\"denied\"",
@@ -3685,6 +3718,7 @@
     "schemas/v2/capabilities.schema.json#|property|forms",
     "schemas/v2/capabilities.schema.json#|property|fs",
     "schemas/v2/capabilities.schema.json#|property|heartbeat",
+    "schemas/v2/capabilities.schema.json#|property|hostEvents",
     "schemas/v2/capabilities.schema.json#|property|httpClient",
     "schemas/v2/capabilities.schema.json#|property|i18n",
     "schemas/v2/capabilities.schema.json#|property|idempotency",
@@ -5951,6 +5985,25 @@
     "schemas/v2/heartbeat-state-changed.schema.json#|required|heartbeatId",
     "schemas/v2/heartbeat-state-changed.schema.json#|required|to",
     "schemas/v2/heartbeat-state-changed.schema.json#|type|object",
+    "schemas/v2/host-event.schema.json#/delivery|enum-member|\"durable\"",
+    "schemas/v2/host-event.schema.json#/delivery|enum-member|\"ephemeral\"",
+    "schemas/v2/host-event.schema.json#/delivery|type|string",
+    "schemas/v2/host-event.schema.json#/payload|type|object",
+    "schemas/v2/host-event.schema.json#/timestamp|type|string",
+    "schemas/v2/host-event.schema.json#/type|type|string",
+    "schemas/v2/host-event.schema.json#|closed|true",
+    "schemas/v2/host-event.schema.json#|property|delivery",
+    "schemas/v2/host-event.schema.json#|property|eventId",
+    "schemas/v2/host-event.schema.json#|property|payload",
+    "schemas/v2/host-event.schema.json#|property|timestamp",
+    "schemas/v2/host-event.schema.json#|property|type",
+    "schemas/v2/host-event.schema.json#|property|workspaceId",
+    "schemas/v2/host-event.schema.json#|required|delivery",
+    "schemas/v2/host-event.schema.json#|required|eventId",
+    "schemas/v2/host-event.schema.json#|required|payload",
+    "schemas/v2/host-event.schema.json#|required|timestamp",
+    "schemas/v2/host-event.schema.json#|required|type",
+    "schemas/v2/host-event.schema.json#|type|object",
     "schemas/v2/ids.schema.json#|closed|true",
     "schemas/v2/ids.schema.json#|type|object",
     "schemas/v2/localized-content-language-settings.schema.json#/autoTranslateOnPublish|type|boolean",
@@ -7943,7 +7996,6 @@
     "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]/reason|enum-member|\"payload_unprojectable\"",
     "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]/reason|enum-member|\"retries_exhausted\"",
     "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]/reason|type|string",
-    "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|closed|true",
     "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|property|attempts",
     "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|property|deadLetteredAt",
     "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|property|deliveryId",
@@ -7954,15 +8006,6 @@
     "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|property|reason",
     "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|property|runId",
     "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|property|webhookId",
-    "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|required|attempts",
-    "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|required|deadLetteredAt",
-    "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|required|deliveryId",
-    "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|required|eventId",
-    "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|required|eventType",
-    "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|required|expiresAt",
-    "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|required|reason",
-    "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|required|runId",
-    "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|required|webhookId",
     "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries/[]|type|object",
     "schemas/v2/webhook-dead-letter-page.schema.json#/deliveries|type|array",
     "schemas/v2/webhook-dead-letter-page.schema.json#/nextCursor|type|string",
@@ -7971,12 +8014,10 @@
     "schemas/v2/webhook-dead-letter-page.schema.json#|property|nextCursor",
     "schemas/v2/webhook-dead-letter-page.schema.json#|required|deliveries",
     "schemas/v2/webhook-dead-letter-page.schema.json#|type|object",
-    "schemas/v2/webhook-delivery.schema.json#|closed|true",
     "schemas/v2/webhook-delivery.schema.json#|property|event",
+    "schemas/v2/webhook-delivery.schema.json#|property|hostEvent",
     "schemas/v2/webhook-delivery.schema.json#|property|runId",
     "schemas/v2/webhook-delivery.schema.json#|property|workspaceId",
-    "schemas/v2/webhook-delivery.schema.json#|required|event",
-    "schemas/v2/webhook-delivery.schema.json#|required|runId",
     "schemas/v2/webhook-delivery.schema.json#|type|object",
     "schemas/v2/webhook-verification.schema.json#/challenge|type|string",
     "schemas/v2/webhook-verification.schema.json#/type|enum-member|\"openwop.webhook.verification\"",