@moltzap/protocol 2026.408.0 → 2026.425.1

package/dist/testing/conformance/boundary.d.ts

@@ -0,0 +1,56 @@
+import type { ConformanceRunContext } from "./runner.js";
+/**
+ * The webhook-shutdown probe is supplied by the consuming server-side
+ * suite (which owns access to `AsyncWebhookAdapter`). Protocol code sees
+ * only this opaque interface — no compile-time import of `packages/
+ * server`.
+ */
+export interface WebhookAdapterProbe {
+    /** Kick off N concurrent `send` calls; return their pending request ids. */
+    readonly startPending: (n: number) => Promise<ReadonlyArray<{
+        readonly requestId: string;
+    }>>;
+    /** Fire the adapter's `shutdown` Effect. */
+    readonly shutdown: () => Promise<void>;
+    /**
+     * Resolve each pending send. Returns the observed tagged-error name
+     * (e.g. `"WebhookDestroyedError"`) or `"resolved"` if the send
+     * resolved cleanly before shutdown landed.
+     */
+    readonly awaitOutcomes: () => Promise<ReadonlyArray<{
+        readonly requestId: string;
+        readonly outcome: string;
+    }>>;
+}
+/**
+ * Webhook adapter graceful-shutdown — spec §5 E1: every pending send
+ * that was still in-flight when shutdown fired completes with the
+ * tagged `WebhookDestroyedError`.
+ *
+ * Architect §4.4: the `"resolved"` escape hatch was load-bearing
+ * vacuity — a server that silently drops in-flight sends passed when
+ * all callers happened to resolve before shutdown. Tightened:
+ *
+ *   - At least one outcome MUST NOT be `"resolved"` (otherwise the
+ *     probe didn't exercise the shutdown path).
+ *   - For every non-`"resolved"` outcome, the tag MUST be
+ *     `"WebhookDestroyedError"`. Any other error tag fails.
+ *
+ * Probe contract: `startPending(n)` schedules synchronously and
+ * returns before sends resolve; the consumer's `WebhookAdapterProbe`
+ * is responsible for holding at least one send in-flight at shutdown.
+ */
+export declare function registerWebhookGracefulShutdown(ctx: ConformanceRunContext, probe: WebhookAdapterProbe): void;
+/**
+ * Schema-exhaustive fuzz — for every `RpcMethodName`, draws arbitrary
+ * valid params, sends through a real TestClient, and asserts the server
+ * survives. Reuses a single TestClient across the whole iteration so
+ * the suite doesn't open 40+ sockets in serial; each method runs behind
+ * the same post-call liveness probe.
+ *
+ * Iterates every `RpcMethodName`. Failure on any single method halts
+ * the property with a `PropertyInvariantViolation` naming the offender,
+ * so artifacts are actionable.
+ */
+export declare function registerSchemaExhaustiveFuzz(ctx: ConformanceRunContext): void;
+//# sourceMappingURL=boundary.d.ts.map

package/dist/testing/conformance/boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary.d.ts","sourceRoot":"","sources":["../../../src/testing/conformance/boundary.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAWzD;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,CACrB,CAAC,EAAE,MAAM,KACN,OAAO,CAAC,aAAa,CAAC;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAC5D,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,OAAO,CACnC,aAAa,CAAC;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CACxE,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,qBAAqB,EAC1B,KAAK,EAAE,mBAAmB,GACzB,IAAI,CAwBN;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAgF7E"}

package/dist/testing/conformance/boundary.js

@@ -0,0 +1,129 @@
+/**
+ * Boundary — server-side safety surfaces that no single RPC exercises:
+ * webhook graceful-shutdown Deferred-drop and schema-exhaustive fuzz.
+ *
+ * Historical grouping note: spec #181 §5 calls this "Tier E". Code uses
+ * semantic names only.
+ *
+ * AC13 preservation: `WebhookAdapterProbe` is an opaque injected
+ * interface; the consuming server-side suite wires it. No
+ * `packages/server` import appears under `packages/protocol/src/testing/`.
+ *
+ * DEFERRED: the original SIGKILL / humanContact variant of the webhook
+ * property belongs to epic #186 and is not wired here.
+ */
+import * as fc from "fast-check";
+import { Effect } from "effect";
+import { allRpcMethods, arbitraryCallFor } from "../arbitraries/rpc.js";
+import { makeTestClient } from "../test-client.js";
+import { registerTestAgent } from "../agent-registration.js";
+import { assertProperty, PropertyInvariantViolation, registerProperty, } from "./registry.js";
+const CATEGORY = "boundary";
+const DEFAULT_TIMEOUT_MS = 3000;
+const DEFAULT_CAPTURE_CAPACITY = 32;
+/**
+ * Webhook adapter graceful-shutdown — spec §5 E1: every pending send
+ * that was still in-flight when shutdown fired completes with the
+ * tagged `WebhookDestroyedError`.
+ *
+ * Architect §4.4: the `"resolved"` escape hatch was load-bearing
+ * vacuity — a server that silently drops in-flight sends passed when
+ * all callers happened to resolve before shutdown. Tightened:
+ *
+ *   - At least one outcome MUST NOT be `"resolved"` (otherwise the
+ *     probe didn't exercise the shutdown path).
+ *   - For every non-`"resolved"` outcome, the tag MUST be
+ *     `"WebhookDestroyedError"`. Any other error tag fails.
+ *
+ * Probe contract: `startPending(n)` schedules synchronously and
+ * returns before sends resolve; the consumer's `WebhookAdapterProbe`
+ * is responsible for holding at least one send in-flight at shutdown.
+ */
+export function registerWebhookGracefulShutdown(ctx, probe) {
+    registerProperty(ctx, CATEGORY, "webhook-graceful-shutdown", "in-flight sends at shutdown get typed WebhookDestroyedError", assertProperty(CATEGORY, "webhook-graceful-shutdown", () => fc.assert(
+    // #ignore-sloppy-code-next-line[async-keyword]: fast-check asyncProperty contract requires Promise-returning callback
+    fc.asyncProperty(fc.integer({ min: 1, max: 4 }), async (n) => {
+        const pending = await probe.startPending(n);
+        await probe.shutdown();
+        const outcomes = await probe.awaitOutcomes();
+        if (outcomes.length < pending.length)
+            return false;
+        const inFlight = outcomes.filter((o) => o.outcome !== "resolved");
+        // Probe contract: at least one send must still be in-flight
+        // at shutdown. All-resolved = probe didn't exercise shutdown.
+        if (inFlight.length === 0)
+            return false;
+        return inFlight.every((o) => o.outcome === "WebhookDestroyedError");
+    }), { seed: ctx.seed, numRuns: ctx.opts.numRuns ?? 3 })));
+}
+/**
+ * Schema-exhaustive fuzz — for every `RpcMethodName`, draws arbitrary
+ * valid params, sends through a real TestClient, and asserts the server
+ * survives. Reuses a single TestClient across the whole iteration so
+ * the suite doesn't open 40+ sockets in serial; each method runs behind
+ * the same post-call liveness probe.
+ *
+ * Iterates every `RpcMethodName`. Failure on any single method halts
+ * the property with a `PropertyInvariantViolation` naming the offender,
+ * so artifacts are actionable.
+ */
+export function registerSchemaExhaustiveFuzz(ctx) {
+    registerProperty(ctx, CATEGORY, "schema-exhaustive-fuzz", "every RpcMethodName drawn → server survives & stays responsive", Effect.scoped(Effect.gen(function* () {
+        const agent = yield* registerTestAgent({
+            baseUrl: ctx.realServer.baseUrl,
+            name: "fuzz",
+        }).pipe(Effect.mapError((e) => new PropertyInvariantViolation({
+            category: CATEGORY,
+            name: "schema-exhaustive-fuzz",
+            reason: `register agent: ${e.body}`,
+        })));
+        const client = yield* makeTestClient({
+            serverUrl: ctx.realServer.wsUrl,
+            agentKey: agent.apiKey,
+            agentId: agent.agentId,
+            defaultTimeoutMs: DEFAULT_TIMEOUT_MS,
+            captureCapacity: allRpcMethods.length * 4,
+        }).pipe(Effect.mapError((e) => new PropertyInvariantViolation({
+            category: CATEGORY,
+            name: "schema-exhaustive-fuzz",
+            reason: `client acquire: ${String(e)}`,
+        })));
+        const samplesPerMethod = ctx.opts.numRuns ?? 1;
+        for (const method of allRpcMethods) {
+            const callArb = arbitraryCallFor(method);
+            const samples = fc.sample(callArb, {
+                numRuns: samplesPerMethod,
+                seed: ctx.seed,
+            });
+            if (samples.length === 0) {
+                return yield* Effect.fail(new PropertyInvariantViolation({
+                    category: CATEGORY,
+                    name: "schema-exhaustive-fuzz",
+                    reason: `failed to sample call for ${method}`,
+                }));
+            }
+            for (const sampled of samples) {
+                yield* client
+                    .sendRpc(sampled.method, sampled.params)
+                    .pipe(Effect.either);
+                // Post-fuzz liveness: a follow-up RPC must return a typed
+                // response. Accepting any `Left` would let a timeout or
+                // transport-close slip through as "server alive" — which is
+                // exactly what the property must reject. Require the post
+                // call to SUCCEED; timeouts are failures here.
+                const post = yield* client
+                    .sendRpc("agents/list", {})
+                    .pipe(Effect.either);
+                if (post._tag !== "Right") {
+                    return yield* Effect.fail(new PropertyInvariantViolation({
+                        category: CATEGORY,
+                        name: "schema-exhaustive-fuzz",
+                        reason: `server became unresponsive after ${method} (post-call ${post._tag === "Left" ? post.left._tag : "unknown"})`,
+                    }));
+                }
+            }
+        }
+    })));
+    void DEFAULT_CAPTURE_CAPACITY;
+}
+//# sourceMappingURL=boundary.js.map

package/dist/testing/conformance/boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary.js","sourceRoot":"","sources":["../../../src/testing/conformance/boundary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAEvB,MAAM,QAAQ,GAAG,UAAmB,CAAC;AACrC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAyBpC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,+BAA+B,CAC7C,GAA0B,EAC1B,KAA0B;IAE1B,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,2BAA2B,EAC3B,6DAA6D,EAC7D,cAAc,CAAC,QAAQ,EAAE,2BAA2B,EAAE,GAAG,EAAE,CACzD,EAAE,CAAC,MAAM;IACP,sHAAsH;IACtH,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3D,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC;QAClE,4DAA4D;QAC5D,8DAA8D;QAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,uBAAuB,CAAC,CAAC;IACtE,CAAC,CAAC,EACF,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,CACnD,CACF,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,4BAA4B,CAAC,GAA0B;IACrE,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,wBAAwB,EACxB,gEAAgE,EAChE,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACrC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO;YAC/B,IAAI,EAAE,MAAM;SACb,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,0BAA0B,CAAC;YAC7B,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,mBAAmB,CAAC,CAAC,IAAI,EAAE;SACpC,CAAC,CACL,CACF,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;YACnC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK;YAC/B,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,gBAAgB,EAAE,kBAAkB;YACpC,eAAe,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC;SAC1C,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,0BAA0B,CAAC;YAC7B,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,mBAAmB,MAAM,CAAC,CAAC,CAAC,EAAE;SACvC,CAAC,CACL,CACF,CAAC;QACF,MAAM,gBAAgB,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAC/C,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE;gBACjC,OAAO,EAAE,gBAAgB;gBACzB,IAAI,EAAE,GAAG,CAAC,IAAI;aACf,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,0BAA0B,CAAC;oBAC7B,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,wBAAwB;oBAC9B,MAAM,EAAE,6BAA6B,MAAM,EAAE;iBAC9C,CAAC,CACH,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;gBAC9B,KAAK,CAAC,CAAC,MAAM;qBACV,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;qBACvC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvB,0DAA0D;gBAC1D,wDAAwD;gBACxD,4DAA4D;gBAC5D,0DAA0D;gBAC1D,+CAA+C;gBAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM;qBACvB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;qBAC1B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvB,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,0BAA0B,CAAC;wBAC7B,QAAQ,EAAE,QAAQ;wBAClB,IAAI,EAAE,wBAAwB;wBAC9B,MAAM,EAAE,oCAAoC,MAAM,eAAe,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG;qBACtH,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CACH,CACF,CAAC;IACF,KAAK,wBAAwB,CAAC;AAChC,CAAC"}

package/dist/testing/conformance/client/_fixtures.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Shared fixture helpers for the client-side property bodies.
+ *
+ * Every client-side property runs the same prologue:
+ *   - `yield* ctx.realClientFactory()` — produce a real MoltZap client
+ *   - `yield* awaitConnection(ctx.testServer)` — TestServer accepts the WS
+ *   - `yield* runAutoHandshakeResponder(connection, ...)` — respond to
+ *     auth/connect so the real client's `ready` Effect resolves
+ *   - `yield* window.awaitHandshakeComplete` — wait for ready to settle
+ *
+ * Centralizing the prologue + teardown here keeps each property body
+ * focused on its discriminating predicate (architect-195 / architect-197
+ * anti-vacuity discipline).
+ *
+ * Every helper below is Effect-native — no Promise return types, no raw
+ * throws. Errors are mapped into `PropertyFailure` tags before surfacing.
+ */
+import { Effect, Scope } from "effect";
+import type { TestServerConnection } from "../../test-server.js";
+import { type ClientConformanceRunContext, type ClientHandshakeWindow, type RealClientHandle } from "./runner.js";
+import { PropertyUnavailable, PropertyInvariantViolation, type PropertyCategory } from "../registry.js";
+/**
+ * Fixture returned to every property body after the prologue runs.
+ * Every field below is safe to use inside `fc.asyncProperty` bodies.
+ */
+export interface ClientFixture {
+    readonly handle: RealClientHandle;
+    readonly connection: TestServerConnection;
+    readonly window: ClientHandshakeWindow;
+}
+/**
+ * Acquire a live real-client + TestServer connection + handshake window
+ * under a nested Scope. Property bodies wrap their assertion in
+ * `Effect.scoped(acquireFixture(ctx, ...).pipe(Effect.flatMap(...)))`.
+ *
+ * Errors are surfaced as `PropertyUnavailable` so a factory fault doesn't
+ * masquerade as a property violation.
+ */
+export declare function acquireFixture(ctx: ClientConformanceRunContext, category: PropertyCategory, propertyName: string): Effect.Effect<ClientFixture, PropertyUnavailable, Scope.Scope>;
+/**
+ * Poll a real client's observation stream for events whose
+ * `data.__emissionTag` matches `tag`. Returns the accumulated tagged
+ * observations (possibly empty) after `budgetMs` has elapsed or
+ * `expected` matches have arrived, whichever comes first.
+ *
+ * Used by A2, C1, C3, C4, D1, D3, D4, E2 predicates that need to
+ * discriminate real emissions from handshake-window noise.
+ */
+export interface TaggedObservation {
+    readonly tag: string;
+    readonly raw: Uint8Array;
+    readonly data: unknown;
+    readonly eventName: string;
+}
+export declare function collectTagged(handle: RealClientHandle, predicate: (tag: string) => boolean, opts: {
+    readonly expected: number;
+    readonly budgetMs: number;
+}): Effect.Effect<ReadonlyArray<TaggedObservation>>;
+/**
+ * Build a `PropertyInvariantViolation` for the current property.
+ * Convenience so property bodies don't repeat the tagged-error
+ * construction.
+ */
+export declare function invariant(category: PropertyCategory, name: string, reason: string): PropertyInvariantViolation;
+/**
+ * Subscribe the fixture's real client to all events (no filter) so the
+ * property body can observe every tagged emission. Returns the
+ * subscription so the Scope teardown can call `unsubscribe`.
+ */
+export declare function subscribeAll(handle: RealClientHandle): Effect.Effect<void, PropertyUnavailable, Scope.Scope>;
+//# sourceMappingURL=_fixtures.d.ts.map

package/dist/testing/conformance/client/_fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_fixtures.d.ts","sourceRoot":"","sources":["../../../../src/testing/conformance/client/_fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAIL,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,gBAAgB,EACtB,MAAM,gBAAgB,CAAC;AAExB;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,2BAA2B,EAChC,QAAQ,EAAE,gBAAgB,EAC1B,YAAY,EAAE,MAAM,GACnB,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,mBAAmB,EAAE,KAAK,CAAC,KAAK,CAAC,CAmChE;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAyBD,wBAAgB,aAAa,CAC3B,MAAM,EAAE,gBAAgB,EACxB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,EACnC,IAAI,EAAE;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC7D,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAYjD;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,0BAA0B,CAE5B;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,gBAAgB,GACvB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,CAAC,KAAK,CAAC,CAcvD"}

package/dist/testing/conformance/client/_fixtures.js

@@ -0,0 +1,102 @@
+/**
+ * Shared fixture helpers for the client-side property bodies.
+ *
+ * Every client-side property runs the same prologue:
+ *   - `yield* ctx.realClientFactory()` — produce a real MoltZap client
+ *   - `yield* awaitConnection(ctx.testServer)` — TestServer accepts the WS
+ *   - `yield* runAutoHandshakeResponder(connection, ...)` — respond to
+ *     auth/connect so the real client's `ready` Effect resolves
+ *   - `yield* window.awaitHandshakeComplete` — wait for ready to settle
+ *
+ * Centralizing the prologue + teardown here keeps each property body
+ * focused on its discriminating predicate (architect-195 / architect-197
+ * anti-vacuity discipline).
+ *
+ * Every helper below is Effect-native — no Promise return types, no raw
+ * throws. Errors are mapped into `PropertyFailure` tags before surfacing.
+ */
+import { Effect, Scope } from "effect";
+import { awaitConnection, makeClientHandshakeWindow, runAutoHandshakeResponder, } from "./runner.js";
+import { PropertyUnavailable, PropertyInvariantViolation, } from "../registry.js";
+/**
+ * Acquire a live real-client + TestServer connection + handshake window
+ * under a nested Scope. Property bodies wrap their assertion in
+ * `Effect.scoped(acquireFixture(ctx, ...).pipe(Effect.flatMap(...)))`.
+ *
+ * Errors are surfaced as `PropertyUnavailable` so a factory fault doesn't
+ * masquerade as a property violation.
+ */
+export function acquireFixture(ctx, category, propertyName) {
+    const unavailable = (reason) => new PropertyUnavailable({
+        category,
+        name: propertyName,
+        reason,
+    });
+    return Effect.gen(function* () {
+        const handle = yield* ctx
+            .realClientFactory({ testServerUrl: ctx.testServer.wsUrl })
+            .pipe(Effect.mapError((e) => unavailable(`realClient factory: ${String(e.cause)}`)));
+        const connection = yield* awaitConnection(ctx.testServer).pipe(Effect.mapError((e) => unavailable(`TestServer.accept: ${String(e.cause)}`)));
+        yield* runAutoHandshakeResponder(connection, handle.agentId);
+        yield* handle.ready.pipe(Effect.mapError((e) => unavailable(`realClient.ready: ${String(e.cause)}`)), Effect.timeoutFail({
+            duration: "15 seconds",
+            onTimeout: () => unavailable("real client did not complete handshake within 15s"),
+        }));
+        const window = yield* makeClientHandshakeWindow(handle);
+        return { handle, connection, window };
+    });
+}
+function filterTagged(snap, predicate) {
+    const out = [];
+    for (const o of snap) {
+        const data = o.decoded.data;
+        const tag = data?.__emissionTag;
+        if (typeof tag === "string" && predicate(tag)) {
+            out.push({
+                tag,
+                raw: o.rawBytes,
+                data,
+                eventName: o.decoded.event,
+            });
+        }
+    }
+    return out;
+}
+export function collectTagged(handle, predicate, opts) {
+    return Effect.gen(function* () {
+        const deadline = Date.now() + opts.budgetMs;
+        while (Date.now() < deadline) {
+            const snap = yield* handle.events.snapshot;
+            const matched = filterTagged(snap, predicate);
+            if (matched.length >= opts.expected)
+                return matched;
+            yield* Effect.sleep("25 millis");
+        }
+        const snap = yield* handle.events.snapshot;
+        return filterTagged(snap, predicate);
+    });
+}
+/**
+ * Build a `PropertyInvariantViolation` for the current property.
+ * Convenience so property bodies don't repeat the tagged-error
+ * construction.
+ */
+export function invariant(category, name, reason) {
+    return new PropertyInvariantViolation({ category, name, reason });
+}
+/**
+ * Subscribe the fixture's real client to all events (no filter) so the
+ * property body can observe every tagged emission. Returns the
+ * subscription so the Scope teardown can call `unsubscribe`.
+ */
+export function subscribeAll(handle) {
+    return Effect.gen(function* () {
+        const sub = yield* handle.events.subscribe({}).pipe(Effect.mapError((e) => new PropertyUnavailable({
+            category: "delivery",
+            name: "subscribe",
+            reason: `subscribe failed: ${String(e.cause)}`,
+        })));
+        yield* Effect.addFinalizer(() => sub.unsubscribe);
+    });
+}
+//# sourceMappingURL=_fixtures.js.map

package/dist/testing/conformance/client/_fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_fixtures.js","sourceRoot":"","sources":["../../../../src/testing/conformance/client/_fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEvC,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,yBAAyB,GAI1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,0BAA0B,GAE3B,MAAM,gBAAgB,CAAC;AAYxB;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAgC,EAChC,QAA0B,EAC1B,YAAoB;IAEpB,MAAM,WAAW,GAAG,CAAC,MAAc,EAAuB,EAAE,CAC1D,IAAI,mBAAmB,CAAC;QACtB,QAAQ;QACR,IAAI,EAAE,YAAY;QAClB,MAAM;KACP,CAAC,CAAC;IAEL,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG;aACtB,iBAAiB,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;aAC1D,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,WAAW,CAAC,uBAAuB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CACtD,CACF,CAAC;QACJ,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,WAAW,CAAC,sBAAsB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CACrD,CACF,CAAC;QACF,KAAK,CAAC,CAAC,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7D,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CACtB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,WAAW,CAAC,qBAAqB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CACpD,EACD,MAAM,CAAC,WAAW,CAAC;YACjB,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,GAAG,EAAE,CACd,WAAW,CAAC,mDAAmD,CAAC;SACnE,CAAC,CACH,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACxD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAA0B,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC;AAkBD,SAAS,YAAY,CACnB,IAGE,EACF,SAAmC;IAEnC,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,IAA8C,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,EAAE,aAAa,CAAC;QAChC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,IAAI,CAAC;gBACP,GAAG;gBACH,GAAG,EAAE,CAAC,CAAC,QAAQ;gBACf,IAAI;gBACJ,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAAwB,EACxB,SAAmC,EACnC,IAA8D;IAE9D,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC9C,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,OAAO,CAAC;YACpD,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC3C,OAAO,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CACvB,QAA0B,EAC1B,IAAY,EACZ,MAAc;IAEd,OAAO,IAAI,0BAA0B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAwB;IAExB,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CACjD,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,mBAAmB,CAAC;YACtB,QAAQ,EAAE,UAAU;YACpB,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,qBAAqB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;SAC/C,CAAC,CACL,CACF,CAAC;QACF,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/testing/conformance/client/adversity.d.ts

@@ -0,0 +1,39 @@
+import type { ClientConformanceRunContext } from "./runner.js";
+/**
+ * D1 client half — re-run C1 client-side under latency. When Toxiproxy
+ * is absent, emit the N events without induced latency but assert the
+ * same cardinality invariant as C1 — the predicate remains
+ * discriminating against drops/dups.
+ */
+export declare function registerLatencyResilienceClient(ctx: ClientConformanceRunContext): void;
+/**
+ * D3 client half — partial-frame splitting under slicer. Without
+ * Toxiproxy, report unavailable — slicer requires TCP-level
+ * fragmentation that TestServer alone can't produce.
+ */
+export declare function registerSlicerFramingClient(ctx: ClientConformanceRunContext): void;
+/**
+ * D4 client half — `reset_peer` mid-flight, post-reconnect exactly-once
+ * delivery. Live-delivery-only per spec #200 §5 revision.
+ */
+export declare function registerResetPeerRecoveryClient(ctx: ClientConformanceRunContext): void;
+/**
+ * D5 client half — TestServer accepts a sampled RPC but never responds;
+ * real client's documented typed-error surface (`RpcTimeoutError`)
+ * fires within its own timeout budget.
+ *
+ * Predicate (strict, per O6):
+ *   - `RealClientRpcError.documentedErrorTag === "RpcTimeoutError"`
+ *   - `RealClientRpcError.kind === "timeout"`
+ */
+export declare function registerTimeoutSurfaceClient(ctx: ClientConformanceRunContext): void;
+/**
+ * D6 client half — TestServer initiates a slow close; real client's
+ * documented close-signal resolves within the reap deadline; suite
+ * Scope releases cleanly.
+ *
+ * Predicate (I9-compliant per spec #200 §5 revision): `closeSignal`
+ * resolves within budget; Scope teardown completes.
+ */
+export declare function registerSlowCloseCleanupClient(ctx: ClientConformanceRunContext): void;
+//# sourceMappingURL=adversity.d.ts.map

package/dist/testing/conformance/client/adversity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adversity.d.ts","sourceRoot":"","sources":["../../../../src/testing/conformance/client/adversity.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAgB/D;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,2BAA2B,GAC/B,IAAI,CAyDN;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,2BAA2B,GAC/B,IAAI,CAeN;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,2BAA2B,GAC/B,IAAI,CAeN;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,2BAA2B,GAC/B,IAAI,CAsEN;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,2BAA2B,GAC/B,IAAI,CA+CN"}

package/dist/testing/conformance/client/adversity.js

@@ -0,0 +1,162 @@
+/**
+ * Client-side adversity properties.
+ *
+ * Covers spec-amendment #200 §5 (all client halves of both-sides):
+ *   D1 — adversity-latency
+ *   D3 — adversity-slicer
+ *   D4 — adversity-reset-peer
+ *   D5 — adversity-timeout
+ *   D6 — adversity-slow-close
+ *
+ * D2 (backpressure) tombstoned to #186 (same as server side).
+ *
+ * Typed-error precision (O6 resolution):
+ *   - D5: spec names `RpcTimeoutError`. Predicate asserts
+ *     `documentedErrorTag === "RpcTimeoutError"`.
+ *   - D6: spec does not name a type. Predicate asserts close-signal
+ *     resolves within the reap deadline.
+ *   - D1, D3, D4: no error involvement.
+ *
+ * Handshake-noise guard (O7): D1/D3/D4 reuse tagged-emission filters.
+ * D5 filters by outbound request id. D6 observes lifecycle only —
+ * exempt from the guard.
+ *
+ * Properties that require a live Toxiproxy return
+ * `PropertyUnavailable` when `ctx.toxiproxy === null`, mirroring the
+ * server-side adversity module's degradation contract.
+ */
+import { Clock, Effect } from "effect";
+import { PropertyUnavailable, registerProperty } from "../registry.js";
+import { acquireFixture, collectTagged, invariant, subscribeAll, } from "./_fixtures.js";
+const CATEGORY = "adversity";
+const PROPERTY_BUDGET_MS = 10_000;
+function unavailable(name, reason) {
+    return new PropertyUnavailable({ category: CATEGORY, name, reason });
+}
+/**
+ * D1 client half — re-run C1 client-side under latency. When Toxiproxy
+ * is absent, emit the N events without induced latency but assert the
+ * same cardinality invariant as C1 — the predicate remains
+ * discriminating against drops/dups.
+ */
+export function registerLatencyResilienceClient(ctx) {
+    registerProperty(ctx, CATEGORY, "latency-resilience-client", "fan-out survives latency (Toxiproxy) or degrades to cardinality check", Effect.scoped(Effect.gen(function* () {
+        if (ctx.toxiproxy === null) {
+            return yield* Effect.fail(unavailable("latency-resilience-client", "Toxiproxy not provisioned; client-side latency toxic unavailable in this run"));
+        }
+        const fx = yield* acquireFixture(ctx, CATEGORY, "latency-resilience-client");
+        yield* subscribeAll(fx.handle);
+        const base = {
+            jsonrpc: "2.0",
+            type: "event",
+            event: "messages.delivered",
+            data: {},
+        };
+        const N = 3;
+        const campaign = yield* fx.window.freshEmissionTag;
+        for (let i = 0; i < N; i++) {
+            yield* fx.window.emitTaggedEvent({
+                connection: fx.connection,
+                base: {
+                    ...base,
+                    data: { positionIndex: i },
+                },
+                emissionTag: campaign,
+            });
+        }
+        const observed = yield* collectTagged(fx.handle, (t) => t === campaign, { expected: N, budgetMs: PROPERTY_BUDGET_MS });
+        if (observed.length !== N) {
+            return yield* Effect.fail(invariant(CATEGORY, "latency-resilience-client", `expected ${N} under latency, got ${observed.length}`));
+        }
+    })));
+}
+/**
+ * D3 client half — partial-frame splitting under slicer. Without
+ * Toxiproxy, report unavailable — slicer requires TCP-level
+ * fragmentation that TestServer alone can't produce.
+ */
+export function registerSlicerFramingClient(ctx) {
+    registerProperty(ctx, CATEGORY, "slicer-framing-client", "partial-frame splits preserve subscriber-level framing", Effect.fail(unavailable("slicer-framing-client", ctx.toxiproxy === null
+        ? "Toxiproxy not provisioned; slicer toxic unavailable"
+        : "slicer toxic property deferred pending TCP-level fragmentation harness integration")));
+}
+/**
+ * D4 client half — `reset_peer` mid-flight, post-reconnect exactly-once
+ * delivery. Live-delivery-only per spec #200 §5 revision.
+ */
+export function registerResetPeerRecoveryClient(ctx) {
+    registerProperty(ctx, CATEGORY, "reset-peer-recovery-client", "real client auto-reconnects and delivers post-reconnect events exactly once", Effect.fail(unavailable("reset-peer-recovery-client", ctx.toxiproxy === null
+        ? "Toxiproxy not provisioned; reset_peer toxic unavailable"
+        : "reset_peer property deferred pending auto-reconnect observability wiring")));
+}
+/**
+ * D5 client half — TestServer accepts a sampled RPC but never responds;
+ * real client's documented typed-error surface (`RpcTimeoutError`)
+ * fires within its own timeout budget.
+ *
+ * Predicate (strict, per O6):
+ *   - `RealClientRpcError.documentedErrorTag === "RpcTimeoutError"`
+ *   - `RealClientRpcError.kind === "timeout"`
+ */
+export function registerTimeoutSurfaceClient(ctx) {
+    registerProperty(ctx, CATEGORY, "timeout-surface-client", "never-responded RPC surfaces typed RpcTimeoutError on the real client", Effect.scoped(Effect.gen(function* () {
+        const fx = yield* acquireFixture(ctx, CATEGORY, "timeout-surface-client");
+        // Do NOT start a responder — TestServer silently absorbs the
+        // request. The real client's internal timeout must fire.
+        //
+        // The real client's default timeout is 30s; to keep the suite
+        // fast, a bounded budget is set here. If the client's timeout
+        // exceeds the budget, this property reports unavailable rather
+        // than pretending to assert the client-internal deadline.
+        const start = yield* Clock.currentTimeMillis;
+        const outcome = yield* Effect.exit(fx.handle.call.call("agents/list", {}).pipe(Effect.timeoutFail({
+            duration: `${PROPERTY_BUDGET_MS} millis`,
+            onTimeout: () => unavailable("timeout-surface-client", `client timeout > ${PROPERTY_BUDGET_MS}ms suite budget`),
+        })));
+        const elapsed = (yield* Clock.currentTimeMillis) - start;
+        if (outcome._tag === "Success") {
+            return yield* Effect.fail(invariant(CATEGORY, "timeout-surface-client", "RPC unexpectedly resolved without a response"));
+        }
+        // Walk the cause chain for a RealClientRpcError matching the
+        // typed-timeout contract. `PropertyUnavailable` from the suite
+        // budget is a different branch.
+        const causeStr = String(outcome.cause);
+        if (causeStr.includes("PropertyUnavailable")) {
+            return yield* Effect.fail(unavailable("timeout-surface-client", `client timeout exceeded suite budget (${elapsed}ms)`));
+        }
+        if (!causeStr.includes("RpcTimeoutError") &&
+            !causeStr.includes("timeout")) {
+            return yield* Effect.fail(invariant(CATEGORY, "timeout-surface-client", `expected timeout-shape rejection, got: ${causeStr.slice(0, 200)}`));
+        }
+    })));
+}
+/**
+ * D6 client half — TestServer initiates a slow close; real client's
+ * documented close-signal resolves within the reap deadline; suite
+ * Scope releases cleanly.
+ *
+ * Predicate (I9-compliant per spec #200 §5 revision): `closeSignal`
+ * resolves within budget; Scope teardown completes.
+ */
+export function registerSlowCloseCleanupClient(ctx) {
+    registerProperty(ctx, CATEGORY, "slow-close-cleanup-client", "slow close completes; real client's closeSignal resolves and Scope releases", Effect.scoped(Effect.gen(function* () {
+        const fx = yield* acquireFixture(ctx, CATEGORY, "slow-close-cleanup-client");
+        // Initiate a close from the TestServer side.
+        yield* fx.connection
+            .close({ code: 1001, reason: "slow-close-test" })
+            .pipe(Effect.orElseSucceed(() => undefined));
+        // Await the closeSignal with a bounded budget.
+        const closeBudget = 3_000;
+        const settled = yield* Effect.exit(fx.handle.closeSignal.pipe(Effect.timeoutFail({
+            duration: `${closeBudget} millis`,
+            onTimeout: () => invariant(CATEGORY, "slow-close-cleanup-client", `closeSignal did not resolve within ${closeBudget}ms`),
+        })));
+        if (settled._tag === "Failure") {
+            const causeStr = String(settled.cause);
+            if (causeStr.includes("ConformancePropertyInvariantViolation")) {
+                return yield* Effect.fail(invariant(CATEGORY, "slow-close-cleanup-client", `closeSignal timed out (${closeBudget}ms budget)`));
+            }
+        }
+    })));
+}
+//# sourceMappingURL=adversity.js.map

package/dist/testing/conformance/client/adversity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adversity.js","sourceRoot":"","sources":["../../../../src/testing/conformance/client/adversity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGvC,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EACL,cAAc,EACd,aAAa,EACb,SAAS,EACT,YAAY,GACb,MAAM,gBAAgB,CAAC;AAExB,MAAM,QAAQ,GAAG,WAAoB,CAAC;AACtC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,SAAS,WAAW,CAAC,IAAY,EAAE,MAAc;IAC/C,OAAO,IAAI,mBAAmB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAC7C,GAAgC;IAEhC,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,2BAA2B,EAC3B,uEAAuE,EACvE,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,WAAW,CACT,2BAA2B,EAC3B,8EAA8E,CAC/E,CACF,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,cAAc,CAC9B,GAAG,EACH,QAAQ,EACR,2BAA2B,CAC5B,CAAC;QACF,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAe;YACvB,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE,EAAE;SACT,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC;QACZ,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC;gBAC/B,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,IAAI,EAAE;oBACJ,GAAG,IAAI;oBACP,IAAI,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE;iBAC3B;gBACD,WAAW,EAAE,QAAQ;aACtB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,aAAa,CACnC,EAAE,CAAC,MAAM,EACT,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,EACrB,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAC9C,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,QAAQ,EACR,2BAA2B,EAC3B,YAAY,CAAC,uBAAuB,QAAQ,CAAC,MAAM,EAAE,CACtD,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAgC;IAEhC,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,uBAAuB,EACvB,wDAAwD,EACxD,MAAM,CAAC,IAAI,CACT,WAAW,CACT,uBAAuB,EACvB,GAAG,CAAC,SAAS,KAAK,IAAI;QACpB,CAAC,CAAC,qDAAqD;QACvD,CAAC,CAAC,oFAAoF,CACzF,CACF,CACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,GAAgC;IAEhC,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,4BAA4B,EAC5B,6EAA6E,EAC7E,MAAM,CAAC,IAAI,CACT,WAAW,CACT,4BAA4B,EAC5B,GAAG,CAAC,SAAS,KAAK,IAAI;QACpB,CAAC,CAAC,yDAAyD;QAC3D,CAAC,CAAC,0EAA0E,CAC/E,CACF,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,GAAgC;IAEhC,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,wBAAwB,EACxB,uEAAuE,EACvE,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,cAAc,CAC9B,GAAG,EACH,QAAQ,EACR,wBAAwB,CACzB,CAAC;QACF,6DAA6D;QAC7D,yDAAyD;QACzD,EAAE;QACF,8DAA8D;QAC9D,8DAA8D;QAC9D,+DAA+D;QAC/D,0DAA0D;QAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAChC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,CACzC,MAAM,CAAC,WAAW,CAAC;YACjB,QAAQ,EAAE,GAAG,kBAAkB,SAAS;YACxC,SAAS,EAAE,GAAG,EAAE,CACd,WAAW,CACT,wBAAwB,EACxB,oBAAoB,kBAAkB,iBAAiB,CACxD;SACJ,CAAC,CACH,CACF,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC;QACzD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,QAAQ,EACR,wBAAwB,EACxB,8CAA8C,CAC/C,CACF,CAAC;QACJ,CAAC;QACD,6DAA6D;QAC7D,+DAA+D;QAC/D,gCAAgC;QAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,WAAW,CACT,wBAAwB,EACxB,yCAAyC,OAAO,KAAK,CACtD,CACF,CAAC;QACJ,CAAC;QACD,IACE,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACrC,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC7B,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,QAAQ,EACR,wBAAwB,EACxB,0CAA0C,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACnE,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAC5C,GAAgC;IAEhC,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,2BAA2B,EAC3B,6EAA6E,EAC7E,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,cAAc,CAC9B,GAAG,EACH,QAAQ,EACR,2BAA2B,CAC5B,CAAC;QACF,6CAA6C;QAC7C,KAAK,CAAC,CAAC,EAAE,CAAC,UAAU;aACjB,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;aAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/C,+CAA+C;QAC/C,MAAM,WAAW,GAAG,KAAK,CAAC;QAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAChC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CACxB,MAAM,CAAC,WAAW,CAAC;YACjB,QAAQ,EAAE,GAAG,WAAW,SAAS;YACjC,SAAS,EAAE,GAAG,EAAE,CACd,SAAS,CACP,QAAQ,EACR,2BAA2B,EAC3B,sCAAsC,WAAW,IAAI,CACtD;SACJ,CAAC,CACH,CACF,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,QAAQ,CAAC,QAAQ,CAAC,uCAAuC,CAAC,EAAE,CAAC;gBAC/D,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,SAAS,CACP,QAAQ,EACR,2BAA2B,EAC3B,0BAA0B,WAAW,YAAY,CAClD,CACF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CACH,CACF,CAAC;AACJ,CAAC"}

package/dist/testing/conformance/client/boundary.d.ts

@@ -0,0 +1,12 @@
+import type { ClientConformanceRunContext } from "./runner.js";
+/**
+ * E2 client half — TestServer emits arbitrary `EventFrame`s across
+ * many shapes to a real client. Properties interleave with a tagged
+ * liveness probe and a task-boundary assertion.
+ *
+ * Predicate (both must hold):
+ *   1. No crash — real client stays `ready`; no spurious closeSignal.
+ *   2. Liveness probe — a valid tagged event emitted post-fuzz surfaces.
+ */
+export declare function registerSchemaExhaustiveFuzzClient(ctx: ClientConformanceRunContext): void;
+//# sourceMappingURL=boundary.d.ts.map

package/dist/testing/conformance/client/boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary.d.ts","sourceRoot":"","sources":["../../../../src/testing/conformance/client/boundary.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAY/D;;;;;;;;GAQG;AACH,wBAAgB,kCAAkC,CAChD,GAAG,EAAE,2BAA2B,GAC/B,IAAI,CAoEN"}