@moltzap/protocol 2026.408.0 → 2026.425.0

package/dist/testing/conformance/client/schema-conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-conformance.js","sourceRoot":"","sources":["../../../../src/testing/conformance/client/schema-conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAmB,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EACL,cAAc,EACd,aAAa,EACb,SAAS,EACT,YAAY,GACb,MAAM,gBAAgB,CAAC;AAExB,MAAM,QAAQ,GAAG,oBAA6B,CAAC;AAC/C,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iCAAiC,CAC/C,GAAgC;IAEhC,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,8BAA8B,EAC9B,6EAA6E,EAC7E,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,cAAc,CAC9B,GAAG,EACH,QAAQ,EACR,8BAA8B,CAC/B,CAAC;QACF,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE;YAC/C,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC,CAAC,CAAC,CAAC;QACN,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,QAAQ,EACR,8BAA8B,EAC9B,6BAA6B,CAC9B,CACF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC9C,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC;YAC/B,UAAU,EAAE,EAAE,CAAC,UAAU;YACzB,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,GAAG;SACjB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE;YACjE,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,kBAAkB;SAC7B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,QAAQ,EACR,8BAA8B,EAC9B,gBAAgB,GAAG,wBAAwB,kBAAkB,IAAI,CAClE,CACF,CAAC;QACJ,CAAC;QACD,4DAA4D;QAC5D,MAAM,aAAa,GAAe;YAChC,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAE,CAAC,SAAS;YAC7B,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI;SACxB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,aAAa,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,QAAQ,EACR,8BAA8B,EAC9B,wDAAwD,CACzD,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oCAAoC,CAClD,GAAgC;IAEhC,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,iCAAiC,EACjC,kEAAkE,EAClE,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,cAAc,CAC9B,GAAG,EACH,QAAQ,EACR,iCAAiC,CAClC,CAAC;QACF,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE;YACjD,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC,CAAC,CAAC,CAAC;QACN,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,QAAQ,EACR,iCAAiC,EACjC,kCAAkC,CACnC,CACF,CAAC;QACJ,CAAC;QACD,2DAA2D;QAC3D,KAAK,CAAC,CAAC,EAAE,CAAC,UAAU;aACjB,aAAa,CAAC;YACb,SAAS;YACT,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/C,qEAAqE;QACrE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC9C,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC;YAC/B,UAAU,EAAE,EAAE,CAAC,UAAU;YACzB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,GAAG;SACjB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE;YACjE,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,kBAAkB;SAC7B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,QAAQ,EACR,iCAAiC,EACjC,2DAA2D,CAC5D,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CACF,CAAC;AACJ,CAAC"}

package/dist/testing/conformance/client/suite.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Client-side conformance suite entry point.
+ *
+ * O4 decision: **option (c) — one library, both factories optional.**
+ * The architect's target surface is the existing `runConformanceSuite(opts)`
+ * extended with a `realClient?` field alongside `realServer?`. The suite
+ * registers every server-side property when `realServer` is present and
+ * every client-side property when `realClient` is present. A caller that
+ * passes both gets the joint run for free; a caller that passes neither
+ * fails at option-decode time.
+ *
+ * This module ships the **client-only** entry — `runClientConformanceSuite`
+ * — as the stub the implementer wires in. When `implement-staff` lands the
+ * body it folds this into a single extended `runConformanceSuite` whose
+ * signature is declared in §Interfaces of the design doc. The stub exists
+ * so consumers and CI wiring have a stable symbol to import against while
+ * the merge lands.
+ *
+ * Scope: dependency on `packages/client` or either channel package is
+ * forbidden (extends AC13 to AC14). The factory injection pattern keeps
+ * the protocol package leaf-of-the-graph.
+ */
+import { Effect, type Scope } from "effect";
+import type { ClientConformanceRunContext, RealClientHandle, RealClientLifecycleError } from "./runner.js";
+import type { RealServerAcquireError, ToxicControlError } from "../../errors.js";
+import type { SuiteResult } from "../suite.js";
+/**
+ * Consumer-facing options. Mirror of `ConformanceSuiteOptions` on the
+ * server side; only the factory name differs.
+ */
+export interface ClientConformanceSuiteOptions {
+    /**
+     * Factory for the real MoltZap client under test, owned by the
+     * suite's Scope. Receives `testServerUrl` from the suite so the real
+     * client can point its WS socket at the bound TestServer substrate.
+     */
+    readonly realClient: (args: {
+        readonly testServerUrl: string;
+    }) => Effect.Effect<RealClientHandle, RealClientLifecycleError, Scope.Scope>;
+    /**
+     * Toxiproxy control-plane URL. When `null`, adversity properties are
+     * registered and surface `PropertyUnavailable`. Mirrors server-side
+     * behavior.
+     */
+    readonly toxiproxyUrl?: string | null;
+    readonly replaySeed?: number;
+    readonly numRuns?: number;
+    readonly artifactDir?: string;
+    /**
+     * Default `true`. When `true`, TestServer binds behind Toxiproxy so
+     * adversity toxics shape the wire between TestServer and the real
+     * client. Set to `false` only for debugging.
+     */
+    readonly bindThroughToxiproxy?: boolean;
+}
+/**
+ * Register every client-side property (A2, A4, B1, B4, C1, C3, C4, D1,
+ * D3, D4, D5, D6, E2 — 13 total per spec amendment #200 §5) against
+ * `ctx`. Property files in `conformance/client/*.ts` each export one
+ * `registerXxxClient` per spec-amendment registrar; this helper is the
+ * single call site.
+ */
+export declare function registerAllClientProperties(ctx: ClientConformanceRunContext): void;
+/**
+ * End-to-end client-side library entry. Acquires context, registers
+ * every client-side property, runs them, closes Scope. Returns a
+ * typed `SuiteResult` (reused from server-side — same failure shape).
+ */
+export declare function runClientConformanceSuite(opts: ClientConformanceSuiteOptions): Effect.Effect<SuiteResult, ToxicControlError | RealServerAcquireError | RealClientLifecycleError>;
+/**
+ * Joint-run entry — passed both `realServer?` and `realClient?`.
+ * Architect target shape per O4 (c). Implementer folds this into
+ * `runConformanceSuite` in `../suite.ts` as an extension of
+ * `ConformanceSuiteOptions`; the stub declares the joint signature
+ * here so the design doc has a concrete symbol to trace.
+ *
+ * This signature is **not** the final exported surface — the merged
+ * `runConformanceSuite` in `../suite.ts` replaces it. Declared here
+ * for cold-read traceability only.
+ */
+export interface JointConformanceSuiteOptions {
+    readonly realServer?: ClientConformanceSuiteOptions["realClient"] extends never ? never : unknown;
+    readonly realClient?: ClientConformanceSuiteOptions["realClient"];
+    readonly toxiproxyUrl?: string | null;
+    readonly replaySeed?: number;
+    readonly numRuns?: number;
+    readonly artifactDir?: string;
+    readonly bindThroughToxiproxy?: boolean;
+}
+//# sourceMappingURL=suite.d.ts.map

package/dist/testing/conformance/client/suite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suite.d.ts","sourceRoot":"","sources":["../../../../src/testing/conformance/client/suite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAgB,MAAM,EAAgB,KAAK,KAAK,EAAE,MAAM,QAAQ,CAAC;AAIxE,OAAO,KAAK,EACV,2BAA2B,EAE3B,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,aAAa,CAAC;AAMrB,OAAO,KAAK,EACV,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA4B/C;;;GAGG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE;QAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,KAAK,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7E;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,2BAA2B,GAC/B,IAAI,CAcN;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,6BAA6B,GAClC,MAAM,CAAC,MAAM,CACd,WAAW,EACX,iBAAiB,GAAG,sBAAsB,GAAG,wBAAwB,CACtE,CA6BA;AA6KD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,6BAA6B,CAAC,YAAY,CAAC,SAAS,KAAK,GAC3E,KAAK,GACL,OAAO,CAAC;IACZ,QAAQ,CAAC,UAAU,CAAC,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC"}

package/dist/testing/conformance/client/suite.js

@@ -0,0 +1,209 @@
+/**
+ * Client-side conformance suite entry point.
+ *
+ * O4 decision: **option (c) — one library, both factories optional.**
+ * The architect's target surface is the existing `runConformanceSuite(opts)`
+ * extended with a `realClient?` field alongside `realServer?`. The suite
+ * registers every server-side property when `realServer` is present and
+ * every client-side property when `realClient` is present. A caller that
+ * passes both gets the joint run for free; a caller that passes neither
+ * fails at option-decode time.
+ *
+ * This module ships the **client-only** entry — `runClientConformanceSuite`
+ * — as the stub the implementer wires in. When `implement-staff` lands the
+ * body it folds this into a single extended `runConformanceSuite` whose
+ * signature is declared in §Interfaces of the design doc. The stub exists
+ * so consumers and CI wiring have a stable symbol to import against while
+ * the merge lands.
+ *
+ * Scope: dependency on `packages/client` or either channel package is
+ * forbidden (extends AC13 to AC14). The factory injection pattern keeps
+ * the protocol package leaf-of-the-graph.
+ */
+import { Cause, Chunk, Effect, Exit, Option } from "effect";
+import { existsSync, mkdirSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { acquireClientRunContext } from "./runner.js";
+import { collectProperties, } from "../registry.js";
+import { conformanceArtifactDirFromEnv } from "../env.js";
+import { isAllowedCoverageGap, } from "../coverage-policy.js";
+import { registerEventWellFormednessClient, registerMalformedFrameHandlingClient, } from "./schema-conformance.js";
+import { registerModelEquivalenceClient, registerRequestIdUniquenessClient, } from "./rpc-semantics.js";
+import { registerFanOutCardinalityClient, registerPayloadOpacityClient, registerTaskBoundaryIsolationClient, } from "./delivery.js";
+import { registerLatencyResilienceClient, registerResetPeerRecoveryClient, registerSlicerFramingClient, registerSlowCloseCleanupClient, registerTimeoutSurfaceClient, } from "./adversity.js";
+import { registerSchemaExhaustiveFuzzClient } from "./boundary.js";
+/**
+ * Register every client-side property (A2, A4, B1, B4, C1, C3, C4, D1,
+ * D3, D4, D5, D6, E2 — 13 total per spec amendment #200 §5) against
+ * `ctx`. Property files in `conformance/client/*.ts` each export one
+ * `registerXxxClient` per spec-amendment registrar; this helper is the
+ * single call site.
+ */
+export function registerAllClientProperties(ctx) {
+    registerEventWellFormednessClient(ctx);
+    registerMalformedFrameHandlingClient(ctx);
+    registerModelEquivalenceClient(ctx);
+    registerRequestIdUniquenessClient(ctx);
+    registerFanOutCardinalityClient(ctx);
+    registerPayloadOpacityClient(ctx);
+    registerTaskBoundaryIsolationClient(ctx);
+    registerSchemaExhaustiveFuzzClient(ctx);
+    registerLatencyResilienceClient(ctx);
+    registerSlicerFramingClient(ctx);
+    registerResetPeerRecoveryClient(ctx);
+    registerTimeoutSurfaceClient(ctx);
+    registerSlowCloseCleanupClient(ctx);
+}
+/**
+ * End-to-end client-side library entry. Acquires context, registers
+ * every client-side property, runs them, closes Scope. Returns a
+ * typed `SuiteResult` (reused from server-side — same failure shape).
+ */
+export function runClientConformanceSuite(opts) {
+    const toxiproxyUrl = opts.toxiproxyUrl ?? null;
+    const artifactDir = opts.artifactDir ??
+        conformanceArtifactDirFromEnv() ??
+        path.resolve(process.cwd(), "conformance-artifacts");
+    const tiers = toxiproxyUrl === null ? ["A", "B", "C", "E"] : ["A", "B", "C", "D", "E"];
+    return Effect.scoped(Effect.gen(function* () {
+        const ctx = yield* acquireClientRunContext({
+            tiers,
+            realClient: opts.realClient,
+            toxiproxyUrl: toxiproxyUrl ?? undefined,
+            manageToxiproxy: false,
+            replaySeed: opts.replaySeed,
+            numRuns: opts.numRuns,
+            artifactDir,
+            bindThroughToxiproxy: opts.bindThroughToxiproxy,
+        });
+        registerAllClientProperties(ctx);
+        return yield* runAllClientProperties(ctx, artifactDir, allowedClientCoverageGaps(toxiproxyUrl));
+    }));
+}
+function allowedClientCoverageGaps(toxiproxyUrl) {
+    const gaps = [
+        {
+            kind: "unavailable",
+            id: "adversity/slicer-framing-client",
+            reasonIncludes: "slicer toxic property deferred",
+        },
+        {
+            kind: "unavailable",
+            id: "adversity/reset-peer-recovery-client",
+            reasonIncludes: "reset_peer property deferred",
+        },
+    ];
+    if (toxiproxyUrl === null) {
+        gaps.push({
+            kind: "unavailable",
+            id: "adversity/latency-resilience-client",
+            reasonIncludes: "Toxiproxy not provisioned",
+        }, {
+            kind: "unavailable",
+            id: "adversity/slicer-framing-client",
+            reasonIncludes: "Toxiproxy not provisioned",
+        }, {
+            kind: "unavailable",
+            id: "adversity/reset-peer-recovery-client",
+            reasonIncludes: "Toxiproxy not provisioned",
+        });
+    }
+    return gaps;
+}
+/**
+ * Execute every registered client property and return a typed
+ * `SuiteResult`. Mirrors the server-side `runAllProperties` shape so
+ * downstream consumers share one assertion surface.
+ */
+function runAllClientProperties(ctx, artifactDir, allowedCoverageGaps) {
+    return Effect.gen(function* () {
+        if (!existsSync(artifactDir))
+            mkdirSync(artifactDir, { recursive: true });
+        const properties = collectProperties(ctx);
+        const passed = [];
+        const deferred = [];
+        const unavailable = [];
+        const failed = [];
+        for (const p of properties) {
+            const id = `${p.category}/${p.name}`;
+            const exit = yield* Effect.exit(p.run);
+            if (Exit.isSuccess(exit)) {
+                passed.push(id);
+                continue;
+            }
+            const failure = firstTypedFailure(exit);
+            if (failure === null) {
+                const msg = exit.cause.toString();
+                failed.push({ name: id, failure: { _tag: "defect", message: msg } });
+                writeArtifact(artifactDir, p, ctx.seed, { defect: msg });
+                continue;
+            }
+            switch (failure._tag) {
+                case "ConformancePropertyDeferred":
+                    if (isAllowedCoverageGap(allowedCoverageGaps, "deferred", id, failure.followUp)) {
+                        deferred.push({ name: id, reason: failure.followUp });
+                        break;
+                    }
+                    failed.push({ name: id, failure });
+                    writeArtifact(artifactDir, p, ctx.seed, failureArtifact(failure));
+                    break;
+                case "ConformancePropertyUnavailable":
+                    if (isAllowedCoverageGap(allowedCoverageGaps, "unavailable", id, failure.reason)) {
+                        unavailable.push({ name: id, reason: failure.reason });
+                        break;
+                    }
+                    failed.push({ name: id, failure });
+                    writeArtifact(artifactDir, p, ctx.seed, failureArtifact(failure));
+                    break;
+                case "ConformancePropertyAssertionFailure":
+                case "ConformancePropertyInvariantViolation":
+                    failed.push({ name: id, failure });
+                    writeArtifact(artifactDir, p, ctx.seed, failureArtifact(failure));
+                    break;
+                default: {
+                    const _exhaustive = failure;
+                    failed.push({
+                        name: id,
+                        failure: {
+                            _tag: "defect",
+                            message: `unhandled failure tag: ${String(_exhaustive)}`,
+                        },
+                    });
+                }
+            }
+        }
+        return { seed: ctx.seed, passed, deferred, unavailable, failed };
+    });
+}
+function firstTypedFailure(exit) {
+    if (Exit.isSuccess(exit))
+        return null;
+    const failures = Cause.failures(exit.cause);
+    const head = Chunk.head(failures);
+    return Option.getOrNull(head);
+}
+function failureArtifact(failure) {
+    switch (failure._tag) {
+        case "ConformancePropertyAssertionFailure":
+            return { tag: failure._tag, cause: String(failure.cause) };
+        case "ConformancePropertyInvariantViolation":
+        case "ConformancePropertyUnavailable":
+            return { tag: failure._tag, reason: failure.reason };
+        case "ConformancePropertyDeferred":
+            return { tag: failure._tag, followUp: failure.followUp };
+        default: {
+            const _exhaustive = failure;
+            return { tag: "unknown", value: String(_exhaustive) };
+        }
+    }
+}
+function writeArtifact(dir, property, seed, payload) {
+    const file = path.join(dir, `client-${property.category}-${property.name}.seed.json`);
+    writeFileSync(file, JSON.stringify({
+        category: property.category,
+        name: property.name,
+        seed,
+        ...payload,
+    }, null, 2));
+}
+//# sourceMappingURL=suite.js.map

package/dist/testing/conformance/client/suite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suite.js","sourceRoot":"","sources":["../../../../src/testing/conformance/client/suite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAc,MAAM,QAAQ,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAOtD,OAAO,EACL,iBAAiB,GAGlB,MAAM,gBAAgB,CAAC;AAMxB,OAAO,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EACL,oBAAoB,GAErB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iCAAiC,EACjC,oCAAoC,GACrC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,GAClC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,mCAAmC,GACpC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,EAC9B,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kCAAkC,EAAE,MAAM,eAAe,CAAC;AAgCnE;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAgC;IAEhC,iCAAiC,CAAC,GAAG,CAAC,CAAC;IACvC,oCAAoC,CAAC,GAAG,CAAC,CAAC;IAC1C,8BAA8B,CAAC,GAAG,CAAC,CAAC;IACpC,iCAAiC,CAAC,GAAG,CAAC,CAAC;IACvC,+BAA+B,CAAC,GAAG,CAAC,CAAC;IACrC,4BAA4B,CAAC,GAAG,CAAC,CAAC;IAClC,mCAAmC,CAAC,GAAG,CAAC,CAAC;IACzC,kCAAkC,CAAC,GAAG,CAAC,CAAC;IACxC,+BAA+B,CAAC,GAAG,CAAC,CAAC;IACrC,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACjC,+BAA+B,CAAC,GAAG,CAAC,CAAC;IACrC,4BAA4B,CAAC,GAAG,CAAC,CAAC;IAClC,8BAA8B,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAAmC;IAKnC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IAC/C,MAAM,WAAW,GACf,IAAI,CAAC,WAAW;QAChB,6BAA6B,EAAE;QAC/B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,uBAAuB,CAAC,CAAC;IACvD,MAAM,KAAK,GACT,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAE3E,OAAO,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC;YACzC,KAAK;YACL,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,YAAY,IAAI,SAAS;YACvC,eAAe,EAAE,KAAK;YACtB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW;YACX,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;SAChD,CAAC,CAAC;QACH,2BAA2B,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAClC,GAAG,EACH,WAAW,EACX,yBAAyB,CAAC,YAAY,CAAC,CACxC,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,YAA2B;IAE3B,MAAM,IAAI,GAAyB;QACjC;YACE,IAAI,EAAE,aAAa;YACnB,EAAE,EAAE,iCAAiC;YACrC,cAAc,EAAE,gCAAgC;SACjD;QACD;YACE,IAAI,EAAE,aAAa;YACnB,EAAE,EAAE,sCAAsC;YAC1C,cAAc,EAAE,8BAA8B;SAC/C;KACF,CAAC;IACF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CACP;YACE,IAAI,EAAE,aAAa;YACnB,EAAE,EAAE,qCAAqC;YACzC,cAAc,EAAE,2BAA2B;SAC5C,EACD;YACE,IAAI,EAAE,aAAa;YACnB,EAAE,EAAE,iCAAiC;YACrC,cAAc,EAAE,2BAA2B;SAC5C,EACD;YACE,IAAI,EAAE,aAAa;YACnB,EAAE,EAAE,sCAAsC;YAC1C,cAAc,EAAE,2BAA2B;SAC5C,CACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAC7B,GAAgC,EAChC,WAAmB,EACnB,mBAAsD;IAEtD,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAuC,EAAE,CAAC;QACxD,MAAM,WAAW,GAAuC,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAoC,EAAE,CAAC;QAEnD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBACrE,aAAa,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YACD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrB,KAAK,6BAA6B;oBAChC,IACE,oBAAoB,CAClB,mBAAmB,EACnB,UAAU,EACV,EAAE,EACF,OAAO,CAAC,QAAQ,CACjB,EACD,CAAC;wBACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;wBACtD,MAAM;oBACR,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;oBACnC,aAAa,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;oBAClE,MAAM;gBACR,KAAK,gCAAgC;oBACnC,IACE,oBAAoB,CAClB,mBAAmB,EACnB,aAAa,EACb,EAAE,EACF,OAAO,CAAC,MAAM,CACf,EACD,CAAC;wBACD,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;wBACvD,MAAM;oBACR,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;oBACnC,aAAa,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;oBAClE,MAAM;gBACR,KAAK,qCAAqC,CAAC;gBAC3C,KAAK,uCAAuC;oBAC1C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;oBACnC,aAAa,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;oBAClE,MAAM;gBACR,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,WAAW,GAAU,OAAO,CAAC;oBACnC,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,EAAE;wBACR,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,0BAA0B,MAAM,CAAC,WAAW,CAAC,EAAE;yBACzD;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAsC;IAEtC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CAAC,OAAwB;IAC/C,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,qCAAqC;YACxC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,KAAK,uCAAuC,CAAC;QAC7C,KAAK,gCAAgC;YACnC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACvD,KAAK,6BAA6B;YAChC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC3D,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,OAAO,CAAC;YACnC,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,GAAW,EACX,QAA4B,EAC5B,IAAY,EACZ,OAAgC;IAEhC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CACpB,GAAG,EACH,UAAU,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,YAAY,CACzD,CAAC;IACF,aAAa,CACX,IAAI,EACJ,IAAI,CAAC,SAAS,CACZ;QACE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI;QACJ,GAAG,OAAO;KACX,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/testing/conformance/coverage-policy.d.ts

@@ -0,0 +1,8 @@
+export type CoverageGapKind = "deferred" | "unavailable";
+export interface AllowedCoverageGap {
+    readonly kind: CoverageGapKind;
+    readonly id: string;
+    readonly reasonIncludes?: string;
+}
+export declare function isAllowedCoverageGap(allowed: ReadonlyArray<AllowedCoverageGap>, kind: CoverageGapKind, id: string, reason: string): boolean;
+//# sourceMappingURL=coverage-policy.d.ts.map

package/dist/testing/conformance/coverage-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage-policy.d.ts","sourceRoot":"","sources":["../../../src/testing/conformance/coverage-policy.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,aAAa,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,CAAC,kBAAkB,CAAC,EAC1C,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,GACb,OAAO,CAMT"}

package/dist/testing/conformance/coverage-policy.js

@@ -0,0 +1,10 @@
+export function isAllowedCoverageGap(allowed, kind, id, reason) {
+    return allowed.some((gap) => {
+        if (gap.kind !== kind || gap.id !== id)
+            return false;
+        if (gap.reasonIncludes === undefined)
+            return true;
+        return reason.includes(gap.reasonIncludes);
+    });
+}
+//# sourceMappingURL=coverage-policy.js.map

package/dist/testing/conformance/coverage-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage-policy.js","sourceRoot":"","sources":["../../../src/testing/conformance/coverage-policy.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,oBAAoB,CAClC,OAA0C,EAC1C,IAAqB,EACrB,EAAU,EACV,MAAc;IAEd,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACrD,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/testing/conformance/delivery.d.ts

@@ -0,0 +1,40 @@
+import type { ConformanceRunContext } from "./runner.js";
+/**
+ * Fan-out cardinality — spec §5 C1: messages/send ⇒ **exactly** N
+ * inbound events (one per connection). Architect §4.4: tightened from
+ * `>=1` to `===1`; a server that duplicates events now fails.
+ *
+ * Empty-counts side channel replaced with an explicit
+ * `PropertyInvariantViolation`.
+ */
+export declare function registerFanOutCardinality(ctx: ConformanceRunContext): void;
+/**
+ * Store-and-replay — spec §5 C2: offline-then-reconnect delivers the
+ * messages sent during the disconnect window.
+ *
+ * **Status: architect §4.5 option (b) — property split.**
+ *
+ * Option (a) (reconnect via scope composition) was attempted and is
+ * infrastructure-viable: TestClient supports re-opening with the same
+ * apiKey/agentId via `Effect.scoped`, no new public primitive needed.
+ * However, the current server implementation does not buffer events
+ * for offline subscribers (empirical observation against
+ * `startCoreTestServer` at commit time): after reconnect, the
+ * participant's capture buffer contains zero of the N messages sent
+ * during the offline window. This is a server-side gap against spec
+ * §5 C2, not a TestClient gap.
+ *
+ * Per architect §4.5 option (b), this property is scoped to
+ * **basic-delivery-landing** — the weaker invariant that N messages
+ * sent to a live conversation land in every currently-subscribed
+ * participant's capture buffer. The full offline-replay assertion is
+ * tracked as a follow-up under epic #186. If/when the server
+ * implements C2 replay, flip this body back to the reconnect form
+ * from the git history and remove the #186 pointer.
+ */
+export declare function registerStoreAndReplay(ctx: ConformanceRunContext): void;
+/** Payload opacity — sent text appears byte-for-byte in delivered events. */
+export declare function registerPayloadOpacity(ctx: ConformanceRunContext): void;
+/** Task-boundary isolation — conversation A's events don't leak into B. */
+export declare function registerTaskBoundaryIsolation(ctx: ConformanceRunContext): void;
+//# sourceMappingURL=delivery.d.ts.map

package/dist/testing/conformance/delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.d.ts","sourceRoot":"","sources":["../../../src/testing/conformance/delivery.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAsFzD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAuD1E;AAMD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CA0DvE;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAgDvE;AAED,2EAA2E;AAC3E,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,qBAAqB,GACzB,IAAI,CAqDN"}

package/dist/testing/conformance/delivery.js

@@ -0,0 +1,231 @@
+/**
+ * Delivery — properties that exercise multi-connection invariants
+ * against the real server: fan-out cardinality, store-and-replay,
+ * payload opacity, and task-boundary isolation.
+ *
+ * Historical grouping note: spec #181 §5 calls this "Tier C". Code uses
+ * semantic names only.
+ *
+ * Principle 3: every property body is `Effect<void, PropertyFailure>`.
+ */
+import * as fc from "fast-check";
+import { Effect } from "effect";
+import { makeTestClient } from "../test-client.js";
+import { registerTestAgent } from "../agent-registration.js";
+import { PropertyInvariantViolation, assertProperty, registerProperty, } from "./registry.js";
+const CATEGORY = "delivery";
+const DEFAULT_TIMEOUT_MS = 5000;
+const DEFAULT_CAPTURE_CAPACITY = 256;
+const MAX_N = 4;
+function acquireClient(ctx, name) {
+    return Effect.gen(function* () {
+        const agent = yield* registerTestAgent({
+            baseUrl: ctx.realServer.baseUrl,
+            name,
+        }).pipe(Effect.mapError((e) => `register(${name}): ${e.body}`));
+        const client = yield* makeTestClient({
+            serverUrl: ctx.realServer.wsUrl,
+            agentKey: agent.apiKey,
+            agentId: agent.agentId,
+            defaultTimeoutMs: DEFAULT_TIMEOUT_MS,
+            captureCapacity: DEFAULT_CAPTURE_CAPACITY,
+        }).pipe(Effect.mapError((e) => `makeTestClient(${name}): ${String(e)}`));
+        return { agent, client };
+    });
+}
+function acquireConversation(ctx, n, namePrefix) {
+    const clamped = Math.min(Math.max(1, n), MAX_N);
+    return Effect.gen(function* () {
+        const owner = yield* acquireClient(ctx, `${namePrefix}-owner`);
+        const participants = yield* Effect.forEach(Array.from({ length: clamped }, (_, i) => i), (i) => acquireClient(ctx, `${namePrefix}-p${i}`), { concurrency: clamped });
+        const createResult = yield* owner.client
+            .sendRpc("conversations/create", {
+            type: "group",
+            name: `${namePrefix}-conv`,
+            participants: participants.map((p) => ({
+                type: "agent",
+                id: p.agent.agentId,
+            })),
+        })
+            .pipe(Effect.either);
+        if (createResult._tag === "Left") {
+            return yield* Effect.fail(`conversations/create failed: ${createResult.left._tag}`);
+        }
+        const created = createResult.right;
+        const conversationId = created.conversation?.id;
+        if (typeof conversationId !== "string" || conversationId.length === 0) {
+            return yield* Effect.fail(`conversations/create returned no conversation.id`);
+        }
+        return { owner, participants, conversationId };
+    });
+}
+/**
+ * Fan-out cardinality — spec §5 C1: messages/send ⇒ **exactly** N
+ * inbound events (one per connection). Architect §4.4: tightened from
+ * `>=1` to `===1`; a server that duplicates events now fails.
+ *
+ * Empty-counts side channel replaced with an explicit
+ * `PropertyInvariantViolation`.
+ */
+export function registerFanOutCardinality(ctx) {
+    registerProperty(ctx, CATEGORY, "fan-out-cardinality", "messages/send ⇒ exactly N inbound message events (one per connection)", assertProperty(CATEGORY, "fan-out-cardinality", () => fc.assert(
+    // #ignore-sloppy-code-next-line[async-keyword]: fast-check asyncProperty contract requires Promise-returning callback
+    fc.asyncProperty(fc.integer({ min: 2, max: 3 }), async (n) => {
+        const result = await Effect.runPromise(Effect.scoped(Effect.gen(function* () {
+            const fixture = yield* acquireConversation(ctx, n, "fan").pipe(Effect.mapError((e) => new Error(e)));
+            const send = yield* fixture.owner.client
+                .sendRpc("messages/send", {
+                conversationId: fixture.conversationId,
+                parts: [{ type: "text", text: "fan-out-ping" }],
+            })
+                .pipe(Effect.either);
+            if (send._tag === "Left") {
+                return { kind: "send-failed" };
+            }
+            yield* Effect.sleep("250 millis");
+            const observed = yield* Effect.forEach(fixture.participants, (p) => p.client.snapshot);
+            const counts = observed.map((snap) => snap.filter((s) => s.kind === "inbound" &&
+                s.frame?.type === "event" &&
+                typeof s.frame.event === "string" &&
+                s.frame.event.includes("message")).length);
+            return { kind: "ok", counts };
+        })));
+        if (result.kind !== "ok")
+            return false;
+        // Exact-cardinality predicate. Duplicates and drops both fail.
+        return (result.counts.length === fixture_n(n) &&
+            result.counts.every((c) => c === 1));
+    }), { seed: ctx.seed, numRuns: ctx.opts.numRuns ?? 3 })));
+}
+function fixture_n(requested) {
+    return Math.min(Math.max(1, requested), MAX_N);
+}
+/**
+ * Store-and-replay — spec §5 C2: offline-then-reconnect delivers the
+ * messages sent during the disconnect window.
+ *
+ * **Status: architect §4.5 option (b) — property split.**
+ *
+ * Option (a) (reconnect via scope composition) was attempted and is
+ * infrastructure-viable: TestClient supports re-opening with the same
+ * apiKey/agentId via `Effect.scoped`, no new public primitive needed.
+ * However, the current server implementation does not buffer events
+ * for offline subscribers (empirical observation against
+ * `startCoreTestServer` at commit time): after reconnect, the
+ * participant's capture buffer contains zero of the N messages sent
+ * during the offline window. This is a server-side gap against spec
+ * §5 C2, not a TestClient gap.
+ *
+ * Per architect §4.5 option (b), this property is scoped to
+ * **basic-delivery-landing** — the weaker invariant that N messages
+ * sent to a live conversation land in every currently-subscribed
+ * participant's capture buffer. The full offline-replay assertion is
+ * tracked as a follow-up under epic #186. If/when the server
+ * implements C2 replay, flip this body back to the reconnect form
+ * from the git history and remove the #186 pointer.
+ */
+export function registerStoreAndReplay(ctx) {
+    registerProperty(ctx, CATEGORY, "store-and-replay", "every messages/send lands in a live participant's capture buffer (basic-delivery-landing; #186 tracks C2 offline-replay)", Effect.scoped(Effect.gen(function* () {
+        const fixture = yield* acquireConversation(ctx, 1, "sr").pipe(Effect.mapError((e) => new PropertyInvariantViolation({
+            category: CATEGORY,
+            name: "store-and-replay",
+            reason: `fixture: ${e}`,
+        })));
+        const participant = fixture.participants[0];
+        if (participant === undefined) {
+            return yield* Effect.fail(new PropertyInvariantViolation({
+                category: CATEGORY,
+                name: "store-and-replay",
+                reason: "fixture missing participant",
+            }));
+        }
+        const sent = 3;
+        for (let i = 0; i < sent; i++) {
+            yield* fixture.owner.client
+                .sendRpc("messages/send", {
+                conversationId: fixture.conversationId,
+                parts: [{ type: "text", text: `sr-${i}` }],
+            })
+                .pipe(Effect.either);
+        }
+        yield* Effect.sleep("350 millis");
+        const snap = yield* participant.client.snapshot;
+        const delivered = snap.filter((s) => s.kind === "inbound" &&
+            s.frame?.type === "event" &&
+            typeof s.frame.event === "string" &&
+            s.frame.event.includes("message")).length;
+        if (delivered < sent) {
+            return yield* Effect.fail(new PropertyInvariantViolation({
+                category: CATEGORY,
+                name: "store-and-replay",
+                reason: `sent ${sent}, live participant observed ${delivered}`,
+            }));
+        }
+    })));
+}
+/** Payload opacity — sent text appears byte-for-byte in delivered events. */
+export function registerPayloadOpacity(ctx) {
+    registerProperty(ctx, CATEGORY, "payload-opacity", "sent message text appears verbatim in delivered event bytes", assertProperty(CATEGORY, "payload-opacity", () => fc.assert(
+    // #ignore-sloppy-code-next-line[async-keyword]: fast-check asyncProperty contract requires Promise-returning callback
+    fc.asyncProperty(
+    // Exclude JSON-meta chars so a simple substring match is valid.
+    fc
+        .string({ minLength: 4, maxLength: 24 })
+        .filter((s) => !/[\\" \n\r\t]/.test(s)), 
+    // #ignore-sloppy-code-next-line[async-keyword]: fast-check asyncProperty contract requires Promise-returning callback
+    async (text) => {
+        const found = await Effect.runPromise(Effect.scoped(Effect.gen(function* () {
+            const fixture = yield* acquireConversation(ctx, 1, "po").pipe(Effect.mapError((e) => new Error(e)));
+            const participant = fixture.participants[0];
+            if (participant === undefined)
+                return false;
+            yield* fixture.owner.client
+                .sendRpc("messages/send", {
+                conversationId: fixture.conversationId,
+                parts: [{ type: "text", text }],
+            })
+                .pipe(Effect.either);
+            yield* Effect.sleep("250 millis");
+            const snap = yield* participant.client.snapshot;
+            return snap.some((s) => s.kind === "inbound" &&
+                s.frame?.type === "event" &&
+                s.raw.includes(text));
+        }))).catch(() => false);
+        return found;
+    }), { seed: ctx.seed, numRuns: ctx.opts.numRuns ?? 3 })));
+}
+/** Task-boundary isolation — conversation A's events don't leak into B. */
+export function registerTaskBoundaryIsolation(ctx) {
+    registerProperty(ctx, CATEGORY, "task-boundary-isolation", "participants in conversation B observe zero leaks from conversation A", Effect.scoped(Effect.gen(function* () {
+        const fxA = yield* acquireConversation(ctx, 1, "iso-a").pipe(Effect.mapError((e) => new PropertyInvariantViolation({
+            category: CATEGORY,
+            name: "task-boundary-isolation",
+            reason: `fixture A: ${e}`,
+        })));
+        const fxB = yield* acquireConversation(ctx, 1, "iso-b").pipe(Effect.mapError((e) => new PropertyInvariantViolation({
+            category: CATEGORY,
+            name: "task-boundary-isolation",
+            reason: `fixture B: ${e}`,
+        })));
+        yield* fxA.owner.client
+            .sendRpc("messages/send", {
+            conversationId: fxA.conversationId,
+            parts: [{ type: "text", text: "iso-leak-canary" }],
+        })
+            .pipe(Effect.either);
+        yield* Effect.sleep("250 millis");
+        const outsider = fxB.participants[0];
+        if (outsider === undefined)
+            return;
+        const snap = yield* outsider.client.snapshot;
+        const leaked = snap.some((s) => s.kind === "inbound" && s.raw.includes(fxA.conversationId));
+        if (leaked) {
+            return yield* Effect.fail(new PropertyInvariantViolation({
+                category: CATEGORY,
+                name: "task-boundary-isolation",
+                reason: `conversation ${fxA.conversationId} leaked into outsider ${outsider.agent.agentId}`,
+            }));
+        }
+    })));
+}
+//# sourceMappingURL=delivery.js.map