@moltzap/client 2026.518.0 → 2026.519.1

package/dist/channel-base/format-cross-conv.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Channel-base `formatCrossConv` — shared cross-conversation message
+ * formatter parameterized by markup variant or per-channel formatter
+ * callback.
+ *
+ * Replaces:
+ * - `packages/openclaw-channel/src/format-cross-conv.ts → formatCrossConvOpenClaw`
+ *   (markup variant: `"json-header"`)
+ * - `packages/nanoclaw-channel/src/channels/moltzap.ts → formatCrossConvNanoclaw`
+ *   (markup variant: `"xml-system-reminder"`)
+ *
+ * Behavioral parity is locked via the golden-snapshot fixtures captured
+ * pre-refactor — see arch sub-issue #605 §3.5 and §4.6.
+ */
+import { type CrossConvMessage } from "../service.js";
+export type { CrossConvMessage };
+export type CrossConvMarkup = "json-header" | "xml-system-reminder";
+export type CrossConvFormatter = (messages: readonly CrossConvMessage[], opts: {
+    readonly ownAgentId: string;
+}) => string;
+/**
+ * Returns the formatted block, or `null` when `messages` is empty.
+ *
+ * Markup variants:
+ * - `"json-header"`: byte-identical to the pre-refactor openclaw output.
+ *   Header is `"Messages (untrusted metadata):"` followed by a ` ```json `
+ *   fenced JSON array.
+ * - `"xml-system-reminder"`: byte-identical to the pre-refactor nanoclaw
+ *   output. `<messages>` wrapper around `<message>` entries with
+ *   `sender`/`conversation`/`time` attributes; sender/conv/time/text all
+ *   run through `sanitizeForSystemReminder`.
+ *
+ * Or pass a custom `formatter` callback — channel-base owns the empty-check
+ * + ownAgentId disambiguation; the callback owns the markup.
+ */
+export declare function formatCrossConv(messages: readonly CrossConvMessage[], opts: {
+    readonly ownAgentId: string;
+    readonly markup: CrossConvMarkup;
+} | {
+    readonly ownAgentId: string;
+    readonly formatter: CrossConvFormatter;
+}): string | null;
+//# sourceMappingURL=format-cross-conv.d.ts.map

package/dist/channel-base/format-cross-conv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-cross-conv.d.ts","sourceRoot":"","sources":["../../src/channel-base/format-cross-conv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,KAAK,gBAAgB,EAEtB,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAEjC,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,qBAAqB,CAAC;AAEpE,MAAM,MAAM,kBAAkB,GAAG,CAC/B,QAAQ,EAAE,SAAS,gBAAgB,EAAE,EACrC,IAAI,EAAE;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,KAClC,MAAM,CAAC;AAmDZ;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,SAAS,gBAAgB,EAAE,EACrC,IAAI,EACA;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GACjE;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAA;CAAE,GAC1E,MAAM,GAAG,IAAI,CAWf"}

package/dist/channel-base/format-cross-conv.js

@@ -0,0 +1,69 @@
+/**
+ * Channel-base `formatCrossConv` — shared cross-conversation message
+ * formatter parameterized by markup variant or per-channel formatter
+ * callback.
+ *
+ * Replaces:
+ * - `packages/openclaw-channel/src/format-cross-conv.ts → formatCrossConvOpenClaw`
+ *   (markup variant: `"json-header"`)
+ * - `packages/nanoclaw-channel/src/channels/moltzap.ts → formatCrossConvNanoclaw`
+ *   (markup variant: `"xml-system-reminder"`)
+ *
+ * Behavioral parity is locked via the golden-snapshot fixtures captured
+ * pre-refactor — see arch sub-issue #605 §3.5 and §4.6.
+ */
+import { sanitizeForSystemReminder, } from "../service.js";
+const CROSS_CONV_HEADER_JSON = "Messages (untrusted metadata):";
+const JSON_INDENT_SPACES = 2;
+function normalizeMessage(message, opts) {
+    return {
+        conversation: message.conversationName ?? `DM with @${message.senderName}`,
+        sender: message.senderId === opts.ownAgentId ? "You" : message.senderName,
+        text: message.text,
+        timestamp: message.timestamp,
+    };
+}
+function formatJsonHeader(messages, opts) {
+    const items = messages.map((m) => normalizeMessage(m, opts));
+    return `${CROSS_CONV_HEADER_JSON}\n\`\`\`json\n${JSON.stringify(items, null, JSON_INDENT_SPACES)}\n\`\`\``;
+}
+function formatXmlSystemReminder(messages, opts) {
+    const lines = messages.map((m) => {
+        const item = normalizeMessage(m, opts);
+        const sender = sanitizeForSystemReminder(item.sender);
+        const conv = sanitizeForSystemReminder(item.conversation);
+        const text = sanitizeForSystemReminder(item.text);
+        const time = sanitizeForSystemReminder(item.timestamp);
+        return `<message sender="${sender}" conversation="${conv}" time="${time}">${text}</message>`;
+    });
+    return ["<messages>", ...lines, "</messages>"].join("\n");
+}
+/**
+ * Returns the formatted block, or `null` when `messages` is empty.
+ *
+ * Markup variants:
+ * - `"json-header"`: byte-identical to the pre-refactor openclaw output.
+ *   Header is `"Messages (untrusted metadata):"` followed by a ` ```json `
+ *   fenced JSON array.
+ * - `"xml-system-reminder"`: byte-identical to the pre-refactor nanoclaw
+ *   output. `&lt;messages&gt;` wrapper around `&lt;message&gt;` entries with
+ *   `sender`/`conversation`/`time` attributes; sender/conv/time/text all
+ *   run through `sanitizeForSystemReminder`.
+ *
+ * Or pass a custom `formatter` callback — channel-base owns the empty-check
+ * + ownAgentId disambiguation; the callback owns the markup.
+ */
+export function formatCrossConv(messages, opts) {
+    if (messages.length === 0)
+        return null;
+    if ("formatter" in opts) {
+        return opts.formatter(messages, { ownAgentId: opts.ownAgentId });
+    }
+    switch (opts.markup) {
+        case "json-header":
+            return formatJsonHeader(messages, { ownAgentId: opts.ownAgentId });
+        case "xml-system-reminder":
+            return formatXmlSystemReminder(messages, { ownAgentId: opts.ownAgentId });
+    }
+}
+//# sourceMappingURL=format-cross-conv.js.map

package/dist/channel-base/format-cross-conv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-cross-conv.js","sourceRoot":"","sources":["../../src/channel-base/format-cross-conv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAEL,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AAWvB,MAAM,sBAAsB,GAAG,gCAAgC,CAAC;AAChE,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAS7B,SAAS,gBAAgB,CACvB,OAAyB,EACzB,IAAqC;IAErC,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,gBAAgB,IAAI,YAAY,OAAO,CAAC,UAAU,EAAE;QAC1E,MAAM,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU;QACzE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAqC,EACrC,IAAqC;IAErC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7D,OAAO,GAAG,sBAAsB,iBAAiB,IAAI,CAAC,SAAS,CAC7D,KAAK,EACL,IAAI,EACJ,kBAAkB,CACnB,UAAU,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAqC,EACrC,IAAqC;IAErC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,OAAO,oBAAoB,MAAM,mBAAmB,IAAI,WAAW,IAAI,KAAK,IAAI,YAAY,CAAC;IAC/F,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,YAAY,EAAE,GAAG,KAAK,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAqC,EACrC,IAE2E;IAE3E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,aAAa;YAChB,OAAO,gBAAgB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACrE,KAAK,qBAAqB;YACxB,OAAO,uBAAuB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/channel-base/format-group-block.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Channel-base group-block helpers.
+ *
+ * Replaces nanoclaw's inline `formatGroupBlock` at
+ * `packages/nanoclaw-channel/src/channels/moltzap.ts → formatGroupBlock`. Also
+ * extracts the shared type-narrowing predicate (`getGroupFields`) consumed by
+ * openclaw (deriving `groupSubject` / `groupMembers` for the OpenClaw context)
+ * and nanoclaw (gating the inline group-block render).
+ */
+import type { EnrichedConversationMeta } from "../channel-core.js";
+import type { CrossConvMarkup } from "./format-cross-conv.js";
+export interface GroupFields {
+    readonly name: string | undefined;
+    readonly participants: readonly string[];
+}
+export type GroupFormatter = (fields: GroupFields) => string;
+/**
+ * Returns `{ name, participants }` when `meta?.type === "group"`; else `null`.
+ * Pure narrowing helper — callers use the non-null return to drive
+ * `formatGroupBlock` or per-channel field extraction (openclaw's
+ * `groupSubject` + `groupMembers`).
+ */
+export declare function getGroupFields(meta: EnrichedConversationMeta | undefined): GroupFields | null;
+/**
+ * Returns the formatted group block.
+ *
+ * Markup variants:
+ * - `"xml-system-reminder"`: byte-identical to the pre-refactor nanoclaw
+ *   output (a `<system-reminder>` block with group name + participants).
+ * - `"json-header"`: empty string. Openclaw does not render a group block;
+ *   it consumes `getGroupFields` directly to derive its OpenClaw-side
+ *   `groupSubject` / `groupMembers` fields. The empty-string return locks
+ *   the "openclaw renders no group block" behavior as an explicit,
+ *   fixtured output (see arch sub-issue #605 §3.5).
+ *
+ * Or pass a custom `formatter` callback.
+ */
+export declare function formatGroupBlock(fields: GroupFields, opts: {
+    readonly markup: CrossConvMarkup;
+} | {
+    readonly formatter: GroupFormatter;
+}): string;
+//# sourceMappingURL=format-group-block.d.ts.map

package/dist/channel-base/format-group-block.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-group-block.d.ts","sourceRoot":"","sources":["../../src/channel-base/format-group-block.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM,CAAC;AAK7D;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,wBAAwB,GAAG,SAAS,GACzC,WAAW,GAAG,IAAI,CAGpB;AAgBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,WAAW,EACnB,IAAI,EACA;IAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;CAAE,GACzC,MAAM,CAQR"}

package/dist/channel-base/format-group-block.js

@@ -0,0 +1,59 @@
+/**
+ * Channel-base group-block helpers.
+ *
+ * Replaces nanoclaw's inline `formatGroupBlock` at
+ * `packages/nanoclaw-channel/src/channels/moltzap.ts → formatGroupBlock`. Also
+ * extracts the shared type-narrowing predicate (`getGroupFields`) consumed by
+ * openclaw (deriving `groupSubject` / `groupMembers` for the OpenClaw context)
+ * and nanoclaw (gating the inline group-block render).
+ */
+import { sanitizeForSystemReminder } from "../service.js";
+const UNNAMED_GROUP_FALLBACK = "(unnamed)";
+const NO_PARTICIPANTS_FALLBACK = "(none listed)";
+/**
+ * Returns `{ name, participants }` when `meta?.type === "group"`; else `null`.
+ * Pure narrowing helper — callers use the non-null return to drive
+ * `formatGroupBlock` or per-channel field extraction (openclaw's
+ * `groupSubject` + `groupMembers`).
+ */
+export function getGroupFields(meta) {
+    if (meta?.type !== "group")
+        return null;
+    return { name: meta.name, participants: meta.participants };
+}
+function formatXmlSystemReminder(fields) {
+    const safeName = sanitizeForSystemReminder(fields.name ?? UNNAMED_GROUP_FALLBACK);
+    const safeParticipants = fields.participants.map(sanitizeForSystemReminder);
+    return [
+        "<system-reminder>",
+        "This is a group conversation.",
+        `Group name: ${safeName}`,
+        `Participants (${fields.participants.length}): ${safeParticipants.join(", ") || NO_PARTICIPANTS_FALLBACK}`,
+        "</system-reminder>",
+    ].join("\n");
+}
+/**
+ * Returns the formatted group block.
+ *
+ * Markup variants:
+ * - `"xml-system-reminder"`: byte-identical to the pre-refactor nanoclaw
+ *   output (a `&lt;system-reminder&gt;` block with group name + participants).
+ * - `"json-header"`: empty string. Openclaw does not render a group block;
+ *   it consumes `getGroupFields` directly to derive its OpenClaw-side
+ *   `groupSubject` / `groupMembers` fields. The empty-string return locks
+ *   the "openclaw renders no group block" behavior as an explicit,
+ *   fixtured output (see arch sub-issue #605 §3.5).
+ *
+ * Or pass a custom `formatter` callback.
+ */
+export function formatGroupBlock(fields, opts) {
+    if ("formatter" in opts)
+        return opts.formatter(fields);
+    switch (opts.markup) {
+        case "xml-system-reminder":
+            return formatXmlSystemReminder(fields);
+        case "json-header":
+            return "";
+    }
+}
+//# sourceMappingURL=format-group-block.js.map

package/dist/channel-base/format-group-block.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-group-block.js","sourceRoot":"","sources":["../../src/channel-base/format-group-block.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAW1D,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAC3C,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,IAA0C;IAE1C,IAAI,IAAI,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAmB;IAClD,MAAM,QAAQ,GAAG,yBAAyB,CACxC,MAAM,CAAC,IAAI,IAAI,sBAAsB,CACtC,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC5E,OAAO;QACL,mBAAmB;QACnB,+BAA+B;QAC/B,eAAe,QAAQ,EAAE;QACzB,iBAAiB,MAAM,CAAC,YAAY,CAAC,MAAM,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,wBAAwB,EAAE;QAC1G,oBAAoB;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAmB,EACnB,IAE0C;IAE1C,IAAI,WAAW,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvD,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,qBAAqB;YACxB,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACzC,KAAK,aAAa;YAChB,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/channel-base/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @file `@moltzap/client/channel-base` — shared scaffolding for channel adapters.
+ *
+ * Used by `@moltzap/openclaw-channel`, `@moltzap/claude-code-channel`, and
+ * `@moltzap/nanoclaw-channel` to canonicalize the lease-lifecycle primitives,
+ * the `LeaseAlreadyConsumed` tagged error, and the markup-parameterized
+ * cross-conv + group-block formatters. Detail doc:
+ * `packages/client/docs/architecture/08-channel-base.md`. Spec: #597.
+ * Architect plan: #605.
+ *
+ * Note: this subpath is opt-in. Direct `@moltzap/client` consumers
+ * (server-core, runtimes, test-utils) see no API-surface change.
+ */
+export { LeaseAlreadyConsumed, projectLeaseInvalid, catchLeaseInvalid, type LeaseInvalidProjectionError, } from "./lease.js";
+export { LeaseStore } from "./lease-store.js";
+export { LeaseGuard } from "./lease-guard.js";
+export { formatCrossConv, type CrossConvFormatter, type CrossConvMarkup, } from "./format-cross-conv.js";
+export { formatGroupBlock, getGroupFields, type GroupFields, type GroupFormatter, } from "./format-group-block.js";
+export { sanitizeForSystemReminder, type CrossConvMessage, } from "../service.js";
+export { type EnrichedConversationMeta } from "../channel-core.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/channel-base/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/channel-base/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,2BAA2B,GACjC,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EACL,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACrB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,GACpB,MAAM,yBAAyB,CAAC;AAKjC,OAAO,EACL,yBAAyB,EACzB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/channel-base/index.js

@@ -0,0 +1,24 @@
+/**
+ * @file `@moltzap/client/channel-base` — shared scaffolding for channel adapters.
+ *
+ * Used by `@moltzap/openclaw-channel`, `@moltzap/claude-code-channel`, and
+ * `@moltzap/nanoclaw-channel` to canonicalize the lease-lifecycle primitives,
+ * the `LeaseAlreadyConsumed` tagged error, and the markup-parameterized
+ * cross-conv + group-block formatters. Detail doc:
+ * `packages/client/docs/architecture/08-channel-base.md`. Spec: #597.
+ * Architect plan: #605.
+ *
+ * Note: this subpath is opt-in. Direct `@moltzap/client` consumers
+ * (server-core, runtimes, test-utils) see no API-surface change.
+ */
+export { LeaseAlreadyConsumed, projectLeaseInvalid, catchLeaseInvalid, } from "./lease.js";
+export { LeaseStore } from "./lease-store.js";
+export { LeaseGuard } from "./lease-guard.js";
+export { formatCrossConv, } from "./format-cross-conv.js";
+export { formatGroupBlock, getGroupFields, } from "./format-group-block.js";
+// Re-exports for ergonomics on the subpath (these are part of the public
+// `@moltzap/client` barrel already; channel-base callers shouldn't need to
+// import from two paths to use the formatters).
+export { sanitizeForSystemReminder, } from "../service.js";
+export {} from "../channel-core.js";
+//# sourceMappingURL=index.js.map

package/dist/channel-base/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/channel-base/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAElB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EACL,eAAe,GAGhB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,gBAAgB,EAChB,cAAc,GAGf,MAAM,yBAAyB,CAAC;AAEjC,yEAAyE;AACzE,2EAA2E;AAC3E,gDAAgD;AAChD,OAAO,EACL,yBAAyB,GAE1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAiC,MAAM,oBAAoB,CAAC"}

package/dist/channel-base/lease-guard.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Channel-base `LeaseGuard` — per-dispatch single-shot client-side dup-reply
+ * detection.
+ *
+ * Replaces openclaw's `consumedLeaseAt: number | null` closure in
+ * `packages/openclaw-channel/src/openclaw-entry.ts → createLeaseConsumingDeliver`.
+ * One `LeaseGuard` instance per inbound message (created inside the deliver
+ * wrapper); `consume()` returns true exactly once, false on every subsequent
+ * call.
+ *
+ * Backed by a private `number | null` field that records
+ * `Clock.currentTimeMillis` on the first consume.
+ */
+import { Effect, Option } from "effect";
+export declare class LeaseGuard {
+    #private;
+    /**
+     * Returns `true` on first call (transitions internal state from
+     * "not-consumed" to "consumed-at-now"); returns `false` on every later
+     * call. Reads `Clock.currentTimeMillis` inside the Effect on first call.
+     */
+    consume(): Effect.Effect<boolean, never, never>;
+    /**
+     * `Option.none` before the first `consume`; `Option.some(epochMs)` after,
+     * where `epochMs` is the value Clock returned at the first-consume moment.
+     * Idempotent on second-and-later reads.
+     */
+    get consumedAt(): Effect.Effect<Option.Option<number>, never, never>;
+}
+//# sourceMappingURL=lease-guard.d.ts.map

package/dist/channel-base/lease-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease-guard.d.ts","sourceRoot":"","sources":["../../src/channel-base/lease-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAS,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE/C,qBAAa,UAAU;;IAGrB;;;;OAIG;IACH,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC;IAS/C;;;;OAIG;IACH,IAAI,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAInE;CACF"}

package/dist/channel-base/lease-guard.js

@@ -0,0 +1,40 @@
+/**
+ * Channel-base `LeaseGuard` — per-dispatch single-shot client-side dup-reply
+ * detection.
+ *
+ * Replaces openclaw's `consumedLeaseAt: number | null` closure in
+ * `packages/openclaw-channel/src/openclaw-entry.ts → createLeaseConsumingDeliver`.
+ * One `LeaseGuard` instance per inbound message (created inside the deliver
+ * wrapper); `consume()` returns true exactly once, false on every subsequent
+ * call.
+ *
+ * Backed by a private `number | null` field that records
+ * `Clock.currentTimeMillis` on the first consume.
+ */
+import { Clock, Effect, Option } from "effect";
+export class LeaseGuard {
+    #consumedAt = null;
+    /**
+     * Returns `true` on first call (transitions internal state from
+     * "not-consumed" to "consumed-at-now"); returns `false` on every later
+     * call. Reads `Clock.currentTimeMillis` inside the Effect on first call.
+     */
+    consume() {
+        return Effect.gen(this, function* () {
+            if (this.#consumedAt !== null)
+                return false;
+            const ts = yield* Clock.currentTimeMillis;
+            this.#consumedAt = ts;
+            return true;
+        });
+    }
+    /**
+     * `Option.none` before the first `consume`; `Option.some(epochMs)` after,
+     * where `epochMs` is the value Clock returned at the first-consume moment.
+     * Idempotent on second-and-later reads.
+     */
+    get consumedAt() {
+        return Effect.sync(() => this.#consumedAt === null ? Option.none() : Option.some(this.#consumedAt));
+    }
+}
+//# sourceMappingURL=lease-guard.js.map

package/dist/channel-base/lease-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease-guard.js","sourceRoot":"","sources":["../../src/channel-base/lease-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE/C,MAAM,OAAO,UAAU;IACrB,WAAW,GAAkB,IAAI,CAAC;IAElC;;;;OAIG;IACH,OAAO;QACL,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC/B,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;YAC5C,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;YAC1C,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,IAAI,UAAU;QACZ,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACtB,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAC1E,CAAC;IACJ,CAAC;CACF"}

package/dist/channel-base/lease-store.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Channel-base `LeaseStore` — generic per-key payload tracker.
+ *
+ * Nanoclaw uses a string-keyed, string-valued store (keyed by JID, payload
+ * is the dispatchLeaseId string). The deliberate "keep stale entry to trigger
+ * server CONSUMED rejection on retry" semantic is preserved via `peek`
+ * (read-only) — see arch sub-issue #605 §3.3 and §6.3.
+ *
+ * The class wraps a private `Map`; Effect wrappers are for caller-side
+ * composition. Single-threaded by construction — one instance lives per
+ * channel runtime, accessed from the host event loop.
+ */
+import { Effect, Option } from "effect";
+export declare class LeaseStore<HostKey, T> {
+    #private;
+    /** Overwrite-on-newer-inbound. Last-write-wins per spec table. */
+    remember(key: HostKey, payload: T): Effect.Effect<void, never, never>;
+    /**
+     * Read-only lookup. Does NOT delete. Nanoclaw uses this for the
+     * stale-entry-on-retry semantic at `MoltZapChannel.sendMessage`.
+     */
+    peek(key: HostKey): Effect.Effect<Option.Option<T>, never, never>;
+    /** Read-and-delete. `Option.none` if absent (no throw). */
+    consume(key: HostKey): Effect.Effect<Option.Option<T>, never, never>;
+    /** Clears one key (when provided) or the whole store. */
+    clear(key?: HostKey): Effect.Effect<void, never, never>;
+    /** Entry count. */
+    get size(): Effect.Effect<number, never, never>;
+}
+//# sourceMappingURL=lease-store.d.ts.map

package/dist/channel-base/lease-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease-store.d.ts","sourceRoot":"","sources":["../../src/channel-base/lease-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExC,qBAAa,UAAU,CAAC,OAAO,EAAE,CAAC;;IAGhC,kEAAkE;IAClE,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC;IAMrE;;;OAGG;IACH,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC;IAOjE,2DAA2D;IAC3D,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC;IASpE,yDAAyD;IACzD,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC;IAUvD,mBAAmB;IACnB,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAE9C;CACF"}

package/dist/channel-base/lease-store.js

@@ -0,0 +1,58 @@
+/**
+ * Channel-base `LeaseStore` — generic per-key payload tracker.
+ *
+ * Nanoclaw uses a string-keyed, string-valued store (keyed by JID, payload
+ * is the dispatchLeaseId string). The deliberate "keep stale entry to trigger
+ * server CONSUMED rejection on retry" semantic is preserved via `peek`
+ * (read-only) — see arch sub-issue #605 §3.3 and §6.3.
+ *
+ * The class wraps a private `Map`; Effect wrappers are for caller-side
+ * composition. Single-threaded by construction — one instance lives per
+ * channel runtime, accessed from the host event loop.
+ */
+import { Effect, Option } from "effect";
+export class LeaseStore {
+    #entries = new Map();
+    /** Overwrite-on-newer-inbound. Last-write-wins per spec table. */
+    remember(key, payload) {
+        return Effect.sync(() => {
+            this.#entries.set(key, payload);
+        });
+    }
+    /**
+     * Read-only lookup. Does NOT delete. Nanoclaw uses this for the
+     * stale-entry-on-retry semantic at `MoltZapChannel.sendMessage`.
+     */
+    peek(key) {
+        return Effect.sync(() => {
+            const existing = this.#entries.get(key);
+            return existing === undefined ? Option.none() : Option.some(existing);
+        });
+    }
+    /** Read-and-delete. `Option.none` if absent (no throw). */
+    consume(key) {
+        return Effect.sync(() => {
+            const existing = this.#entries.get(key);
+            if (existing === undefined)
+                return Option.none();
+            this.#entries.delete(key);
+            return Option.some(existing);
+        });
+    }
+    /** Clears one key (when provided) or the whole store. */
+    clear(key) {
+        return Effect.sync(() => {
+            if (key === undefined) {
+                this.#entries.clear();
+            }
+            else {
+                this.#entries.delete(key);
+            }
+        });
+    }
+    /** Entry count. */
+    get size() {
+        return Effect.sync(() => this.#entries.size);
+    }
+}
+//# sourceMappingURL=lease-store.js.map

package/dist/channel-base/lease-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease-store.js","sourceRoot":"","sources":["../../src/channel-base/lease-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExC,MAAM,OAAO,UAAU;IACZ,QAAQ,GAAG,IAAI,GAAG,EAAc,CAAC;IAE1C,kEAAkE;IAClE,QAAQ,CAAC,GAAY,EAAE,OAAU;QAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,GAAY;QACf,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxC,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,2DAA2D;IAC3D,OAAO,CAAC,GAAY;QAClB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;YACjD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,GAAa;QACjB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB;IACnB,IAAI,IAAI;QACN,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/channel-base/lease.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Channel-base lease primitives.
+ *
+ * Public surface for spec C (#597):
+ * - `LeaseAlreadyConsumed`: canonical tagged error class. One definition site
+ *   across all three channels (claude-code, openclaw, nanoclaw).
+ * - `projectLeaseInvalid`: predicate that narrows a `RpcServerError` to
+ *   `LeaseAlreadyConsumed` when the server's wire-error payload matches the
+ *   single-use-lease shape.
+ * - `catchLeaseInvalid`: Effect-pipe convenience that runs the projection
+ *   inside `Effect.catchTag("RpcServerError", ...)` with
+ *   `Clock.currentTimeMillis` threaded into the projector as `consumedAt`.
+ */
+import { Effect } from "effect";
+import { RpcServerError } from "@moltzap/protocol";
+declare const LeaseAlreadyConsumed_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "LeaseAlreadyConsumed";
+} & Readonly<A>;
+/**
+ * The dispatch lease was already consumed (server returned the typed
+ * single-use-lease failure on a second `messages/send` for the same lease).
+ *
+ * Construction is **only** via `projectLeaseInvalid` (or `catchLeaseInvalid`).
+ * The original `RpcServerError` is preserved on `cause` so hosts can inspect
+ * the wire payload without re-fetching.
+ *
+ * See arch sub-issue #605 §3.1 for the shape rationale (cause field is the
+ * verbatim wire error; consumedAt is `Clock.currentTimeMillis` at projection
+ * time; message is derived from cause.message).
+ */
+export declare class LeaseAlreadyConsumed extends LeaseAlreadyConsumed_base<{
+    readonly leaseId: string;
+    readonly consumedAt: number;
+    readonly cause: RpcServerError;
+    readonly message: string;
+}> {
+}
+/**
+ * Named alias for the error channel produced by `catchLeaseInvalid` over an
+ * effect with residual error `E`. Equivalent to
+ * `LeaseAlreadyConsumed | RpcServerError | E`, but referencable from external
+ * consumers (per arch sub-issue #605 §5.1 named-error-union commitment).
+ */
+export type LeaseInvalidProjectionError<E> = LeaseAlreadyConsumed | RpcServerError | E;
+/**
+ * Project an `RpcServerError` to `LeaseAlreadyConsumed` if it matches the
+ * lease-invalid wire shape; otherwise return the original error unchanged.
+ *
+ * Predicate (architect-corrected per arch sub-issue #605 §3.2):
+ *   `err.data.reason === "LeaseInvalid"` OR
+ *   `err.data._tag === "LeaseAlreadyConsumed"` (forward-compat for a future
+ *   server that emits the canonical tag in data).
+ *
+ * The wire code (-32001 / generic Forbidden) is intentionally NOT part of
+ * the predicate because the code is too generic to discriminate on alone.
+ *
+ * `ctx.leaseId` (optional) is the lease the caller just sent. Caller-supplied
+ * because the server's `ForbiddenError.data` shape does NOT carry leaseId.
+ * Falls back to `"(unknown)"` when omitted (matches the pre-refactor
+ * claude-code behavior).
+ *
+ * `ctx.consumedAt` (required) is the epoch ms to stamp on the resulting
+ * `LeaseAlreadyConsumed.consumedAt`. Required because `LeaseAlreadyConsumed`
+ * requires it and this function is synchronous (no Clock access). Callers
+ * either pass `Date.now()` directly or use `catchLeaseInvalid` which reads
+ * `Clock.currentTimeMillis` inside the Effect.
+ */
+export declare function projectLeaseInvalid(err: RpcServerError, ctx: {
+    readonly leaseId?: string;
+    readonly consumedAt: number;
+}): LeaseAlreadyConsumed | RpcServerError;
+/**
+ * Effect-pipe convenience: catches `RpcServerError` and runs
+ * `projectLeaseInvalid` on each instance. Reads `Clock.currentTimeMillis`
+ * inside the catch and passes the result to `projectLeaseInvalid` as
+ * `consumedAt`. Matching errors are surfaced as the typed
+ * `LeaseAlreadyConsumed` on the failure channel; non-matching errors are
+ * re-raised unchanged so downstream `mapError`s see the original
+ * `RpcServerError`.
+ *
+ * Use at every channel's outbound `core.sendReply(...)` boundary:
+ *
+ * ```ts
+ * core.sendReply(conv, text, { dispatchLeaseId: leaseId }).pipe(
+ *   catchLeaseInvalid({ leaseId }),
+ *   // ... per-channel surfacing
+ * )
+ * ```
+ */
+export declare function catchLeaseInvalid<A, E2, R>(ctx?: {
+    readonly leaseId?: string;
+}): (eff: Effect.Effect<A, RpcServerError | E2, R>) => Effect.Effect<A, LeaseInvalidProjectionError<E2>, R>;
+export {};
+//# sourceMappingURL=lease.d.ts.map

package/dist/channel-base/lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.d.ts","sourceRoot":"","sources":["../../src/channel-base/lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAe,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;;;;AAEnD;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAqB,SAAQ,0BAExC;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAEL;;;;;GAKG;AACH,MAAM,MAAM,2BAA2B,CAAC,CAAC,IACrC,oBAAoB,GACpB,cAAc,GACd,CAAC,CAAC;AAcN;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9D,oBAAoB,GAAG,cAAc,CAQvC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,CACF,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,GAAG,EAAE,EAAE,CAAC,CAAC,KAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,2BAA2B,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAyBxD"}