@moltzap/client 2026.511.1 → 2026.519.0

package/dist/channel-base/format-group-block.js

@@ -0,0 +1,59 @@
+/**
+ * Channel-base group-block helpers.
+ *
+ * Replaces nanoclaw's inline `formatGroupBlock` at
+ * `packages/nanoclaw-channel/src/channels/moltzap.ts → formatGroupBlock`. Also
+ * extracts the shared type-narrowing predicate (`getGroupFields`) consumed by
+ * openclaw (deriving `groupSubject` / `groupMembers` for the OpenClaw context)
+ * and nanoclaw (gating the inline group-block render).
+ */
+import { sanitizeForSystemReminder } from "../service.js";
+const UNNAMED_GROUP_FALLBACK = "(unnamed)";
+const NO_PARTICIPANTS_FALLBACK = "(none listed)";
+/**
+ * Returns `{ name, participants }` when `meta?.type === "group"`; else `null`.
+ * Pure narrowing helper — callers use the non-null return to drive
+ * `formatGroupBlock` or per-channel field extraction (openclaw's
+ * `groupSubject` + `groupMembers`).
+ */
+export function getGroupFields(meta) {
+    if (meta?.type !== "group")
+        return null;
+    return { name: meta.name, participants: meta.participants };
+}
+function formatXmlSystemReminder(fields) {
+    const safeName = sanitizeForSystemReminder(fields.name ?? UNNAMED_GROUP_FALLBACK);
+    const safeParticipants = fields.participants.map(sanitizeForSystemReminder);
+    return [
+        "<system-reminder>",
+        "This is a group conversation.",
+        `Group name: ${safeName}`,
+        `Participants (${fields.participants.length}): ${safeParticipants.join(", ") || NO_PARTICIPANTS_FALLBACK}`,
+        "</system-reminder>",
+    ].join("\n");
+}
+/**
+ * Returns the formatted group block.
+ *
+ * Markup variants:
+ * - `"xml-system-reminder"`: byte-identical to the pre-refactor nanoclaw
+ *   output (a `&lt;system-reminder&gt;` block with group name + participants).
+ * - `"json-header"`: empty string. Openclaw does not render a group block;
+ *   it consumes `getGroupFields` directly to derive its OpenClaw-side
+ *   `groupSubject` / `groupMembers` fields. The empty-string return locks
+ *   the "openclaw renders no group block" behavior as an explicit,
+ *   fixtured output (see arch sub-issue #605 §3.5).
+ *
+ * Or pass a custom `formatter` callback.
+ */
+export function formatGroupBlock(fields, opts) {
+    if ("formatter" in opts)
+        return opts.formatter(fields);
+    switch (opts.markup) {
+        case "xml-system-reminder":
+            return formatXmlSystemReminder(fields);
+        case "json-header":
+            return "";
+    }
+}
+//# sourceMappingURL=format-group-block.js.map

package/dist/channel-base/format-group-block.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-group-block.js","sourceRoot":"","sources":["../../src/channel-base/format-group-block.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAW1D,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAC3C,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,IAA0C;IAE1C,IAAI,IAAI,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAmB;IAClD,MAAM,QAAQ,GAAG,yBAAyB,CACxC,MAAM,CAAC,IAAI,IAAI,sBAAsB,CACtC,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC5E,OAAO;QACL,mBAAmB;QACnB,+BAA+B;QAC/B,eAAe,QAAQ,EAAE;QACzB,iBAAiB,MAAM,CAAC,YAAY,CAAC,MAAM,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,wBAAwB,EAAE;QAC1G,oBAAoB;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAmB,EACnB,IAE0C;IAE1C,IAAI,WAAW,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvD,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,qBAAqB;YACxB,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACzC,KAAK,aAAa;YAChB,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/channel-base/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @file `@moltzap/client/channel-base` — shared scaffolding for channel adapters.
+ *
+ * Used by `@moltzap/openclaw-channel`, `@moltzap/claude-code-channel`, and
+ * `@moltzap/nanoclaw-channel` to canonicalize the lease-lifecycle primitives,
+ * the `LeaseAlreadyConsumed` tagged error, and the markup-parameterized
+ * cross-conv + group-block formatters. Detail doc:
+ * `packages/client/docs/architecture/08-channel-base.md`. Spec: #597.
+ * Architect plan: #605.
+ *
+ * Note: this subpath is opt-in. Direct `@moltzap/client` consumers
+ * (server-core, runtimes, test-utils) see no API-surface change.
+ */
+export { LeaseAlreadyConsumed, projectLeaseInvalid, catchLeaseInvalid, type LeaseInvalidProjectionError, } from "./lease.js";
+export { LeaseStore } from "./lease-store.js";
+export { LeaseGuard } from "./lease-guard.js";
+export { formatCrossConv, type CrossConvFormatter, type CrossConvMarkup, } from "./format-cross-conv.js";
+export { formatGroupBlock, getGroupFields, type GroupFields, type GroupFormatter, } from "./format-group-block.js";
+export { sanitizeForSystemReminder, type CrossConvMessage, } from "../service.js";
+export { type EnrichedConversationMeta } from "../channel-core.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/channel-base/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/channel-base/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,2BAA2B,GACjC,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EACL,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACrB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,GACpB,MAAM,yBAAyB,CAAC;AAKjC,OAAO,EACL,yBAAyB,EACzB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/channel-base/index.js

@@ -0,0 +1,24 @@
+/**
+ * @file `@moltzap/client/channel-base` — shared scaffolding for channel adapters.
+ *
+ * Used by `@moltzap/openclaw-channel`, `@moltzap/claude-code-channel`, and
+ * `@moltzap/nanoclaw-channel` to canonicalize the lease-lifecycle primitives,
+ * the `LeaseAlreadyConsumed` tagged error, and the markup-parameterized
+ * cross-conv + group-block formatters. Detail doc:
+ * `packages/client/docs/architecture/08-channel-base.md`. Spec: #597.
+ * Architect plan: #605.
+ *
+ * Note: this subpath is opt-in. Direct `@moltzap/client` consumers
+ * (server-core, runtimes, test-utils) see no API-surface change.
+ */
+export { LeaseAlreadyConsumed, projectLeaseInvalid, catchLeaseInvalid, } from "./lease.js";
+export { LeaseStore } from "./lease-store.js";
+export { LeaseGuard } from "./lease-guard.js";
+export { formatCrossConv, } from "./format-cross-conv.js";
+export { formatGroupBlock, getGroupFields, } from "./format-group-block.js";
+// Re-exports for ergonomics on the subpath (these are part of the public
+// `@moltzap/client` barrel already; channel-base callers shouldn't need to
+// import from two paths to use the formatters).
+export { sanitizeForSystemReminder, } from "../service.js";
+export {} from "../channel-core.js";
+//# sourceMappingURL=index.js.map

package/dist/channel-base/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/channel-base/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAElB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EACL,eAAe,GAGhB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,gBAAgB,EAChB,cAAc,GAGf,MAAM,yBAAyB,CAAC;AAEjC,yEAAyE;AACzE,2EAA2E;AAC3E,gDAAgD;AAChD,OAAO,EACL,yBAAyB,GAE1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAiC,MAAM,oBAAoB,CAAC"}

package/dist/channel-base/lease-guard.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Channel-base `LeaseGuard` — per-dispatch single-shot client-side dup-reply
+ * detection.
+ *
+ * Replaces openclaw's `consumedLeaseAt: number | null` closure in
+ * `packages/openclaw-channel/src/openclaw-entry.ts → createLeaseConsumingDeliver`.
+ * One `LeaseGuard` instance per inbound message (created inside the deliver
+ * wrapper); `consume()` returns true exactly once, false on every subsequent
+ * call.
+ *
+ * Backed by a private `number | null` field that records
+ * `Clock.currentTimeMillis` on the first consume.
+ */
+import { Effect, Option } from "effect";
+export declare class LeaseGuard {
+    #private;
+    /**
+     * Returns `true` on first call (transitions internal state from
+     * "not-consumed" to "consumed-at-now"); returns `false` on every later
+     * call. Reads `Clock.currentTimeMillis` inside the Effect on first call.
+     */
+    consume(): Effect.Effect<boolean, never, never>;
+    /**
+     * `Option.none` before the first `consume`; `Option.some(epochMs)` after,
+     * where `epochMs` is the value Clock returned at the first-consume moment.
+     * Idempotent on second-and-later reads.
+     */
+    get consumedAt(): Effect.Effect<Option.Option<number>, never, never>;
+}
+//# sourceMappingURL=lease-guard.d.ts.map

package/dist/channel-base/lease-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease-guard.d.ts","sourceRoot":"","sources":["../../src/channel-base/lease-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAS,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE/C,qBAAa,UAAU;;IAGrB;;;;OAIG;IACH,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC;IAS/C;;;;OAIG;IACH,IAAI,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAInE;CACF"}

package/dist/channel-base/lease-guard.js

@@ -0,0 +1,40 @@
+/**
+ * Channel-base `LeaseGuard` — per-dispatch single-shot client-side dup-reply
+ * detection.
+ *
+ * Replaces openclaw's `consumedLeaseAt: number | null` closure in
+ * `packages/openclaw-channel/src/openclaw-entry.ts → createLeaseConsumingDeliver`.
+ * One `LeaseGuard` instance per inbound message (created inside the deliver
+ * wrapper); `consume()` returns true exactly once, false on every subsequent
+ * call.
+ *
+ * Backed by a private `number | null` field that records
+ * `Clock.currentTimeMillis` on the first consume.
+ */
+import { Clock, Effect, Option } from "effect";
+export class LeaseGuard {
+    #consumedAt = null;
+    /**
+     * Returns `true` on first call (transitions internal state from
+     * "not-consumed" to "consumed-at-now"); returns `false` on every later
+     * call. Reads `Clock.currentTimeMillis` inside the Effect on first call.
+     */
+    consume() {
+        return Effect.gen(this, function* () {
+            if (this.#consumedAt !== null)
+                return false;
+            const ts = yield* Clock.currentTimeMillis;
+            this.#consumedAt = ts;
+            return true;
+        });
+    }
+    /**
+     * `Option.none` before the first `consume`; `Option.some(epochMs)` after,
+     * where `epochMs` is the value Clock returned at the first-consume moment.
+     * Idempotent on second-and-later reads.
+     */
+    get consumedAt() {
+        return Effect.sync(() => this.#consumedAt === null ? Option.none() : Option.some(this.#consumedAt));
+    }
+}
+//# sourceMappingURL=lease-guard.js.map

package/dist/channel-base/lease-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease-guard.js","sourceRoot":"","sources":["../../src/channel-base/lease-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE/C,MAAM,OAAO,UAAU;IACrB,WAAW,GAAkB,IAAI,CAAC;IAElC;;;;OAIG;IACH,OAAO;QACL,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC/B,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;YAC5C,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;YAC1C,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,IAAI,UAAU;QACZ,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACtB,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAC1E,CAAC;IACJ,CAAC;CACF"}

package/dist/channel-base/lease-store.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Channel-base `LeaseStore` — generic per-key payload tracker.
+ *
+ * Nanoclaw uses a string-keyed, string-valued store (keyed by JID, payload
+ * is the dispatchLeaseId string). The deliberate "keep stale entry to trigger
+ * server CONSUMED rejection on retry" semantic is preserved via `peek`
+ * (read-only) — see arch sub-issue #605 §3.3 and §6.3.
+ *
+ * The class wraps a private `Map`; Effect wrappers are for caller-side
+ * composition. Single-threaded by construction — one instance lives per
+ * channel runtime, accessed from the host event loop.
+ */
+import { Effect, Option } from "effect";
+export declare class LeaseStore<HostKey, T> {
+    #private;
+    /** Overwrite-on-newer-inbound. Last-write-wins per spec table. */
+    remember(key: HostKey, payload: T): Effect.Effect<void, never, never>;
+    /**
+     * Read-only lookup. Does NOT delete. Nanoclaw uses this for the
+     * stale-entry-on-retry semantic at `MoltZapChannel.sendMessage`.
+     */
+    peek(key: HostKey): Effect.Effect<Option.Option<T>, never, never>;
+    /** Read-and-delete. `Option.none` if absent (no throw). */
+    consume(key: HostKey): Effect.Effect<Option.Option<T>, never, never>;
+    /** Clears one key (when provided) or the whole store. */
+    clear(key?: HostKey): Effect.Effect<void, never, never>;
+    /** Entry count. */
+    get size(): Effect.Effect<number, never, never>;
+}
+//# sourceMappingURL=lease-store.d.ts.map

package/dist/channel-base/lease-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease-store.d.ts","sourceRoot":"","sources":["../../src/channel-base/lease-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExC,qBAAa,UAAU,CAAC,OAAO,EAAE,CAAC;;IAGhC,kEAAkE;IAClE,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC;IAMrE;;;OAGG;IACH,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC;IAOjE,2DAA2D;IAC3D,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC;IASpE,yDAAyD;IACzD,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC;IAUvD,mBAAmB;IACnB,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAE9C;CACF"}

package/dist/channel-base/lease-store.js

@@ -0,0 +1,58 @@
+/**
+ * Channel-base `LeaseStore` — generic per-key payload tracker.
+ *
+ * Nanoclaw uses a string-keyed, string-valued store (keyed by JID, payload
+ * is the dispatchLeaseId string). The deliberate "keep stale entry to trigger
+ * server CONSUMED rejection on retry" semantic is preserved via `peek`
+ * (read-only) — see arch sub-issue #605 §3.3 and §6.3.
+ *
+ * The class wraps a private `Map`; Effect wrappers are for caller-side
+ * composition. Single-threaded by construction — one instance lives per
+ * channel runtime, accessed from the host event loop.
+ */
+import { Effect, Option } from "effect";
+export class LeaseStore {
+    #entries = new Map();
+    /** Overwrite-on-newer-inbound. Last-write-wins per spec table. */
+    remember(key, payload) {
+        return Effect.sync(() => {
+            this.#entries.set(key, payload);
+        });
+    }
+    /**
+     * Read-only lookup. Does NOT delete. Nanoclaw uses this for the
+     * stale-entry-on-retry semantic at `MoltZapChannel.sendMessage`.
+     */
+    peek(key) {
+        return Effect.sync(() => {
+            const existing = this.#entries.get(key);
+            return existing === undefined ? Option.none() : Option.some(existing);
+        });
+    }
+    /** Read-and-delete. `Option.none` if absent (no throw). */
+    consume(key) {
+        return Effect.sync(() => {
+            const existing = this.#entries.get(key);
+            if (existing === undefined)
+                return Option.none();
+            this.#entries.delete(key);
+            return Option.some(existing);
+        });
+    }
+    /** Clears one key (when provided) or the whole store. */
+    clear(key) {
+        return Effect.sync(() => {
+            if (key === undefined) {
+                this.#entries.clear();
+            }
+            else {
+                this.#entries.delete(key);
+            }
+        });
+    }
+    /** Entry count. */
+    get size() {
+        return Effect.sync(() => this.#entries.size);
+    }
+}
+//# sourceMappingURL=lease-store.js.map

package/dist/channel-base/lease-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease-store.js","sourceRoot":"","sources":["../../src/channel-base/lease-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExC,MAAM,OAAO,UAAU;IACZ,QAAQ,GAAG,IAAI,GAAG,EAAc,CAAC;IAE1C,kEAAkE;IAClE,QAAQ,CAAC,GAAY,EAAE,OAAU;QAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,GAAY;QACf,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxC,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,2DAA2D;IAC3D,OAAO,CAAC,GAAY;QAClB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;YACjD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,GAAa;QACjB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB;IACnB,IAAI,IAAI;QACN,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/channel-base/lease.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Channel-base lease primitives.
+ *
+ * Public surface for spec C (#597):
+ * - `LeaseAlreadyConsumed`: canonical tagged error class. One definition site
+ *   across all three channels (claude-code, openclaw, nanoclaw).
+ * - `projectLeaseInvalid`: predicate that narrows a `RpcServerError` to
+ *   `LeaseAlreadyConsumed` when the server's wire-error payload matches the
+ *   single-use-lease shape.
+ * - `catchLeaseInvalid`: Effect-pipe convenience that runs the projection
+ *   inside `Effect.catchTag("RpcServerError", ...)` with
+ *   `Clock.currentTimeMillis` threaded into the projector as `consumedAt`.
+ */
+import { Effect } from "effect";
+import { RpcServerError } from "@moltzap/protocol";
+declare const LeaseAlreadyConsumed_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "LeaseAlreadyConsumed";
+} & Readonly<A>;
+/**
+ * The dispatch lease was already consumed (server returned the typed
+ * single-use-lease failure on a second `messages/send` for the same lease).
+ *
+ * Construction is **only** via `projectLeaseInvalid` (or `catchLeaseInvalid`).
+ * The original `RpcServerError` is preserved on `cause` so hosts can inspect
+ * the wire payload without re-fetching.
+ *
+ * See arch sub-issue #605 §3.1 for the shape rationale (cause field is the
+ * verbatim wire error; consumedAt is `Clock.currentTimeMillis` at projection
+ * time; message is derived from cause.message).
+ */
+export declare class LeaseAlreadyConsumed extends LeaseAlreadyConsumed_base<{
+    readonly leaseId: string;
+    readonly consumedAt: number;
+    readonly cause: RpcServerError;
+    readonly message: string;
+}> {
+}
+/**
+ * Named alias for the error channel produced by `catchLeaseInvalid` over an
+ * effect with residual error `E`. Equivalent to
+ * `LeaseAlreadyConsumed | RpcServerError | E`, but referencable from external
+ * consumers (per arch sub-issue #605 §5.1 named-error-union commitment).
+ */
+export type LeaseInvalidProjectionError<E> = LeaseAlreadyConsumed | RpcServerError | E;
+/**
+ * Project an `RpcServerError` to `LeaseAlreadyConsumed` if it matches the
+ * lease-invalid wire shape; otherwise return the original error unchanged.
+ *
+ * Predicate (architect-corrected per arch sub-issue #605 §3.2):
+ *   `err.data.reason === "LeaseInvalid"` OR
+ *   `err.data._tag === "LeaseAlreadyConsumed"` (forward-compat for a future
+ *   server that emits the canonical tag in data).
+ *
+ * The wire code (-32001 / generic Forbidden) is intentionally NOT part of
+ * the predicate because the code is too generic to discriminate on alone.
+ *
+ * `ctx.leaseId` (optional) is the lease the caller just sent. Caller-supplied
+ * because the server's `ForbiddenError.data` shape does NOT carry leaseId.
+ * Falls back to `"(unknown)"` when omitted (matches the pre-refactor
+ * claude-code behavior).
+ *
+ * `ctx.consumedAt` (required) is the epoch ms to stamp on the resulting
+ * `LeaseAlreadyConsumed.consumedAt`. Required because `LeaseAlreadyConsumed`
+ * requires it and this function is synchronous (no Clock access). Callers
+ * either pass `Date.now()` directly or use `catchLeaseInvalid` which reads
+ * `Clock.currentTimeMillis` inside the Effect.
+ */
+export declare function projectLeaseInvalid(err: RpcServerError, ctx: {
+    readonly leaseId?: string;
+    readonly consumedAt: number;
+}): LeaseAlreadyConsumed | RpcServerError;
+/**
+ * Effect-pipe convenience: catches `RpcServerError` and runs
+ * `projectLeaseInvalid` on each instance. Reads `Clock.currentTimeMillis`
+ * inside the catch and passes the result to `projectLeaseInvalid` as
+ * `consumedAt`. Matching errors are surfaced as the typed
+ * `LeaseAlreadyConsumed` on the failure channel; non-matching errors are
+ * re-raised unchanged so downstream `mapError`s see the original
+ * `RpcServerError`.
+ *
+ * Use at every channel's outbound `core.sendReply(...)` boundary:
+ *
+ * ```ts
+ * core.sendReply(conv, text, { dispatchLeaseId: leaseId }).pipe(
+ *   catchLeaseInvalid({ leaseId }),
+ *   // ... per-channel surfacing
+ * )
+ * ```
+ */
+export declare function catchLeaseInvalid<A, E2, R>(ctx?: {
+    readonly leaseId?: string;
+}): (eff: Effect.Effect<A, RpcServerError | E2, R>) => Effect.Effect<A, LeaseInvalidProjectionError<E2>, R>;
+export {};
+//# sourceMappingURL=lease.d.ts.map

package/dist/channel-base/lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.d.ts","sourceRoot":"","sources":["../../src/channel-base/lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAe,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;;;;AAEnD;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAqB,SAAQ,0BAExC;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAEL;;;;;GAKG;AACH,MAAM,MAAM,2BAA2B,CAAC,CAAC,IACrC,oBAAoB,GACpB,cAAc,GACd,CAAC,CAAC;AAcN;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9D,oBAAoB,GAAG,cAAc,CAQvC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,CACF,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,GAAG,EAAE,EAAE,CAAC,CAAC,KAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,2BAA2B,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAyBxD"}

package/dist/channel-base/lease.js

@@ -0,0 +1,110 @@
+/**
+ * Channel-base lease primitives.
+ *
+ * Public surface for spec C (#597):
+ * - `LeaseAlreadyConsumed`: canonical tagged error class. One definition site
+ *   across all three channels (claude-code, openclaw, nanoclaw).
+ * - `projectLeaseInvalid`: predicate that narrows a `RpcServerError` to
+ *   `LeaseAlreadyConsumed` when the server's wire-error payload matches the
+ *   single-use-lease shape.
+ * - `catchLeaseInvalid`: Effect-pipe convenience that runs the projection
+ *   inside `Effect.catchTag("RpcServerError", ...)` with
+ *   `Clock.currentTimeMillis` threaded into the projector as `consumedAt`.
+ */
+import { Clock, Data, Effect } from "effect";
+import { RpcServerError } from "@moltzap/protocol";
+/**
+ * The dispatch lease was already consumed (server returned the typed
+ * single-use-lease failure on a second `messages/send` for the same lease).
+ *
+ * Construction is **only** via `projectLeaseInvalid` (or `catchLeaseInvalid`).
+ * The original `RpcServerError` is preserved on `cause` so hosts can inspect
+ * the wire payload without re-fetching.
+ *
+ * See arch sub-issue #605 §3.1 for the shape rationale (cause field is the
+ * verbatim wire error; consumedAt is `Clock.currentTimeMillis` at projection
+ * time; message is derived from cause.message).
+ */
+export class LeaseAlreadyConsumed extends Data.TaggedError("LeaseAlreadyConsumed") {
+}
+const LEASE_ID_FALLBACK = "(unknown)";
+function isLeaseInvalidData(data) {
+    if (typeof data !== "object" || data === null)
+        return false;
+    const reason = data.reason;
+    const tag = data._tag;
+    // Today's wire shape: `ForbiddenError.data.reason === "LeaseInvalid"`
+    // (arch sub-issue #605 §3.2). The `_tag` arm is forward-compat for a
+    // future server that emits the canonical tag in `data` directly.
+    return reason === "LeaseInvalid" || tag === "LeaseAlreadyConsumed";
+}
+/**
+ * Project an `RpcServerError` to `LeaseAlreadyConsumed` if it matches the
+ * lease-invalid wire shape; otherwise return the original error unchanged.
+ *
+ * Predicate (architect-corrected per arch sub-issue #605 §3.2):
+ *   `err.data.reason === "LeaseInvalid"` OR
+ *   `err.data._tag === "LeaseAlreadyConsumed"` (forward-compat for a future
+ *   server that emits the canonical tag in data).
+ *
+ * The wire code (-32001 / generic Forbidden) is intentionally NOT part of
+ * the predicate because the code is too generic to discriminate on alone.
+ *
+ * `ctx.leaseId` (optional) is the lease the caller just sent. Caller-supplied
+ * because the server's `ForbiddenError.data` shape does NOT carry leaseId.
+ * Falls back to `"(unknown)"` when omitted (matches the pre-refactor
+ * claude-code behavior).
+ *
+ * `ctx.consumedAt` (required) is the epoch ms to stamp on the resulting
+ * `LeaseAlreadyConsumed.consumedAt`. Required because `LeaseAlreadyConsumed`
+ * requires it and this function is synchronous (no Clock access). Callers
+ * either pass `Date.now()` directly or use `catchLeaseInvalid` which reads
+ * `Clock.currentTimeMillis` inside the Effect.
+ */
+export function projectLeaseInvalid(err, ctx) {
+    if (!isLeaseInvalidData(err.data))
+        return err;
+    return new LeaseAlreadyConsumed({
+        leaseId: ctx.leaseId ?? LEASE_ID_FALLBACK,
+        consumedAt: ctx.consumedAt,
+        cause: err,
+        message: err.message,
+    });
+}
+/**
+ * Effect-pipe convenience: catches `RpcServerError` and runs
+ * `projectLeaseInvalid` on each instance. Reads `Clock.currentTimeMillis`
+ * inside the catch and passes the result to `projectLeaseInvalid` as
+ * `consumedAt`. Matching errors are surfaced as the typed
+ * `LeaseAlreadyConsumed` on the failure channel; non-matching errors are
+ * re-raised unchanged so downstream `mapError`s see the original
+ * `RpcServerError`.
+ *
+ * Use at every channel's outbound `core.sendReply(...)` boundary:
+ *
+ * ```ts
+ * core.sendReply(conv, text, { dispatchLeaseId: leaseId }).pipe(
+ *   catchLeaseInvalid({ leaseId }),
+ *   // ... per-channel surfacing
+ * )
+ * ```
+ */
+export function catchLeaseInvalid(ctx) {
+    // `Effect.catchAll` over the union (rather than `catchTag("RpcServerError",
+    // ...)`) keeps the typechecker happy when `E2` is unconstrained — without
+    // narrowing on the runtime instance, TS conservatively infers that `E2`
+    // could itself carry `_tag: "RpcServerError"`. The `instanceof` branch
+    // partitions cleanly.
+    return (eff) => Effect.catchAll(eff, (err) => {
+        if (err instanceof RpcServerError) {
+            return Effect.flatMap(Clock.currentTimeMillis, (consumedAt) => Effect.fail(projectLeaseInvalid(err, {
+                ...(ctx?.leaseId !== undefined ? { leaseId: ctx.leaseId } : {}),
+                consumedAt,
+            })));
+        }
+        // Non-RpcServerError residual (E2). Re-raise unchanged so downstream
+        // `mapError`s see it without coupling to channel-base.
+        return Effect.fail(err);
+    });
+}
+//# sourceMappingURL=lease.js.map

package/dist/channel-base/lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.js","sourceRoot":"","sources":["../../src/channel-base/lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,oBAAqB,SAAQ,IAAI,CAAC,WAAW,CACxD,sBAAsB,CAMtB;CAAG;AAaL,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAEtC,SAAS,kBAAkB,CAAC,IAAa;IACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,MAAM,GAAI,IAAsC,CAAC,MAAM,CAAC;IAC9D,MAAM,GAAG,GAAI,IAAoC,CAAC,IAAI,CAAC;IACvD,sEAAsE;IACtE,qEAAqE;IACrE,iEAAiE;IACjE,OAAO,MAAM,KAAK,cAAc,IAAI,GAAG,KAAK,sBAAsB,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAmB,EACnB,GAA+D;IAE/D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IAC9C,OAAO,IAAI,oBAAoB,CAAC;QAC9B,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,iBAAiB;QACzC,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAAW,GAE3C;IAGC,4EAA4E;IAC5E,0EAA0E;IAC1E,wEAAwE;IACxE,uEAAuE;IACvE,sBAAsB;IACtB,OAAO,CAAC,GAAG,EAAE,EAAE,CACb,MAAM,CAAC,QAAQ,CACb,GAAG,EACH,CAAC,GAAG,EAAwD,EAAE;QAC5D,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;YAClC,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,UAAU,EAAE,EAAE,CAC5D,MAAM,CAAC,IAAI,CACT,mBAAmB,CAAC,GAAG,EAAE;gBACvB,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,UAAU;aACX,CAAC,CACH,CACF,CAAC;QACJ,CAAC;QACD,qEAAqE;QACrE,uDAAuD;QACvD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAS,CAAC,CAAC;IAChC,CAAC,CACF,CAAC;AACN,CAAC"}

package/dist/channel-core-context.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=channel-core-context.test.d.ts.map

package/dist/channel-core-context.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-core-context.test.d.ts","sourceRoot":"","sources":["../src/channel-core-context.test.ts"],"names":[],"mappings":""}