@moltzap/protocol 2026.408.0 → 2026.425.1

package/dist/testing/conformance/client/runner.d.ts

@@ -0,0 +1,258 @@
+/**
+ * Client-side conformance runner — acquires a TestServer substrate plus the
+ * consumer-provided real-client factory under a single Scope, pinned to an
+ * FC seed.
+ *
+ * Parallel to `conformance/runner.ts` (server-side: real server + TestClient).
+ * This module's input is `realClient: () => Effect<RealClientHandle, E,
+ * Scope>`; scope teardown closes the real client, drains the handshake-noise
+ * guard (see `ClientHandshakeWindow` below), and releases the TestServer.
+ *
+ * Architect O5 decision: the factory returns an `Effect` that owns the real
+ * client's lifetime via `Scope`. Consumers that already ship an Effect-native
+ * construction path (`packages/client/MoltZapWsClient` via its internal
+ * `ManagedRuntime`) wrap it in `Effect.acquireRelease`. Channel packages
+ * (`openclaw-channel`, `nanoclaw-channel`) add a narrow test-support subpath
+ * export (see §4 O5 resolution in the design doc) that returns the same
+ * factory shape.
+ */
+import { Context, Effect, Ref, type Scope } from "effect";
+import type { EventFrame, ResponseFrame } from "../../../schema/frames.js";
+import { type TestServer, type TestServerConnection } from "../../test-server.js";
+import { type ToxiproxyClient } from "../../toxics/client.js";
+import { RealServerAcquireError, TransportIoError, type ToxicControlError } from "../../errors.js";
+import type { ConformanceArtifact } from "../runner.js";
+/**
+ * Opaque handle to a live real MoltZap client connected to `TestServer`.
+ * The consumer's factory returns this under a `Scope`; scope release runs
+ * `close()`.
+ *
+ * Invariant I9: every field below is a **public** observable surface on
+ * the real client — no private reads, no monkey-patching, no log
+ * scraping. When a channel package's client is private, the consumer
+ * exposes it via a test-support subpath export (O5 resolution).
+ */
+export interface RealClientHandle {
+    /**
+     * Stable identifier emitted in the connect frame's `agentId` field.
+     * Used to correlate TestServer-observed inbound frames to this client.
+     */
+    readonly agentId: string;
+    /**
+     * Fully-connected promise — resolves after the handshake completes and
+     * the client is ready to receive events. Property bodies await this
+     * before scripting TestServer emissions so the handshake-noise guard
+     * window is closed (see `ClientHandshakeWindow`).
+     */
+    readonly ready: Effect.Effect<void, RealClientLifecycleError>;
+    /**
+     * Real client's public event-subscriber surface. Every captured event
+     * is tagged with the property-authored `emissionId` when the property
+     * uses `ClientHandshakeWindow.emitTaggedEvent`; predicates filter by
+     * that tag to exclude handshake-noise frames.
+     */
+    readonly events: RealClientEventSubscriber;
+    /**
+     * Real client's documented RPC caller. B1 / B4 / D5 predicates invoke
+     * this and assert on the returned promise's resolution / rejection.
+     */
+    readonly call: RealClientRpcCaller;
+    /**
+     * Real client's documented close / disconnect lifecycle signal. D6
+     * predicate awaits this on slow-close and asserts it resolves within
+     * the reap deadline.
+     */
+    readonly closeSignal: Effect.Effect<RealClientCloseEvent>;
+    /**
+     * Scope-release hook. The runner's Scope calls this on teardown; a
+     * close that throws surfaces as `RealClientLifecycleError`.
+     */
+    readonly close: Effect.Effect<void, RealClientLifecycleError>;
+}
+/**
+ * Real client's public event-subscriber surface. Property bodies `subscribe`
+ * once per fixture and drain via `snapshot`. Concrete shape is per-consumer
+ * (packages/client's `waitForEvent` + `onEvent`, channel packages' native
+ * event pipe); the wrapper adapts it to this interface.
+ */
+export interface RealClientEventSubscriber {
+    readonly subscribe: (filter: RealClientEventFilter) => Effect.Effect<RealClientSubscription, RealClientLifecycleError>;
+    readonly snapshot: Effect.Effect<ReadonlyArray<ObservedEvent>>;
+}
+export interface RealClientSubscription {
+    readonly id: string;
+    readonly unsubscribe: Effect.Effect<void>;
+}
+export interface RealClientEventFilter {
+    /**
+     * Property-authored emission tag. The real client surfaces only
+     * events whose payload carries this tag, excluding handshake-noise.
+     * Implementations match on the event payload's `__emissionId` field
+     * (set by `ClientHandshakeWindow.emitTaggedEvent`).
+     */
+    readonly emissionTag?: string;
+    /** Restrict to a specific conversation / task. */
+    readonly conversationId?: string;
+    /** Restrict to a specific event-name family. */
+    readonly eventNamePrefix?: string;
+}
+/**
+ * Observed event after the real client has surfaced it on its public
+ * subscriber API. `rawBytes` carries the payload byte-for-byte (C3);
+ * `decoded` is the schema-decoded frame (A2 validation target).
+ */
+export interface ObservedEvent {
+    readonly emissionTag: string | null;
+    readonly decoded: EventFrame;
+    readonly rawBytes: Uint8Array;
+    readonly observedAtMs: number;
+}
+/**
+ * Real client's RPC caller. Takes the raw JSON-RPC method + params;
+ * returns the decoded response or a typed error. Contract: the real
+ * client itself generates request IDs — the property does not mint
+ * them — and records the outbound ID via `outboundIdFeed` so the
+ * property can assert ID-set equality (B4, O7 idempotence).
+ */
+export interface RealClientRpcCaller {
+    readonly call: (method: string, params: unknown) => Effect.Effect<ResponseFrame, RealClientRpcError>;
+    /** Stream of outbound request IDs the real client has minted. */
+    readonly outboundIdFeed: Effect.Effect<ReadonlyArray<string>>;
+}
+/**
+ * Real-client lifecycle error tag. All three cover the Principle 3 error
+ * channel; no raw throws escape the factory's Scope.
+ */
+export declare class RealClientLifecycleError {
+    readonly cause: unknown;
+    readonly _tag = "RealClientLifecycleError";
+    constructor(cause: unknown);
+}
+/** Typed error surface for real-client RPC calls (D5 predicate target). */
+export declare class RealClientRpcError {
+    readonly kind: "timeout" | "server-error" | "malformed-response" | "disconnected";
+    readonly method: string;
+    readonly documentedErrorTag: string | null;
+    readonly cause: unknown;
+    readonly _tag = "RealClientRpcError";
+    constructor(kind: "timeout" | "server-error" | "malformed-response" | "disconnected", method: string, documentedErrorTag: string | null, cause: unknown);
+}
+/** Close-event shape surfaced by `RealClientHandle.closeSignal`. */
+export interface RealClientCloseEvent {
+    readonly code: number;
+    readonly reason: string;
+    readonly observedAtMs: number;
+}
+/**
+ * Handshake-noise guard window (O7 resolution).
+ *
+ * When a real client connects to TestServer, `packages/client` and the
+ * channel packages emit hello + subscribe + presence frames **before**
+ * the property's first scripted emission. Those frames must not be
+ * accepted as satisfying a later sampled predicate.
+ *
+ * Every client-side property that observes frames requests a
+ * `ClientHandshakeWindow` on its fixture and emits via
+ * `emitTaggedEvent` / `emitTaggedResponse`. The window stamps each
+ * emission with a property-authored `emissionTag`; the
+ * `RealClientEventSubscriber` filter drops untagged events.
+ *
+ * D6 is the only client-side property exempt (observes lifecycle
+ * signals, not frames).
+ */
+export interface ClientHandshakeWindow {
+    readonly freshEmissionTag: Effect.Effect<string>;
+    readonly emitTaggedEvent: (opts: {
+        readonly connection: TestServerConnection;
+        readonly base: EventFrame;
+        readonly emissionTag: string;
+    }) => Effect.Effect<string>;
+    readonly emitTaggedResponse: (opts: {
+        readonly connection: TestServerConnection;
+        readonly base: ResponseFrame;
+        readonly emissionTag: string;
+    }) => Effect.Effect<string>;
+    readonly awaitHandshakeComplete: Effect.Effect<void, RealClientLifecycleError>;
+}
+export declare const ClientHandshakeWindow: Context.Tag<ClientHandshakeWindow, ClientHandshakeWindow>;
+/**
+ * Context a client-side property receives. Parallel to server-side
+ * `ConformanceRunContext` — same `seed`, `toxiproxy`, `artifacts`
+ * plumbing; different factory pair.
+ */
+/**
+ * Factory arguments the suite passes to every `realClient()` invocation.
+ * The factory uses `testServerUrl` to point its WS client at the bound
+ * TestServer substrate.
+ */
+export interface RealClientFactoryArgs {
+    readonly testServerUrl: string;
+}
+export interface ClientConformanceRunContext {
+    readonly testServer: TestServer;
+    readonly realClientFactory: (args: RealClientFactoryArgs) => Effect.Effect<RealClientHandle, RealClientLifecycleError, Scope.Scope>;
+    readonly handshakeWindow: ClientHandshakeWindow;
+    readonly toxiproxy: ToxiproxyClient | null;
+    readonly opts: ClientConformanceRunOptions;
+    readonly seed: number;
+    readonly artifacts: Ref.Ref<ReadonlyArray<ConformanceArtifact>>;
+}
+export interface ClientConformanceRunOptions {
+    readonly tiers: ReadonlyArray<"A" | "B" | "C" | "D" | "E">;
+    readonly realClient: (args: RealClientFactoryArgs) => Effect.Effect<RealClientHandle, RealClientLifecycleError, Scope.Scope>;
+    readonly replaySeed?: number;
+    readonly numRuns?: number;
+    readonly manageToxiproxy?: boolean;
+    readonly toxiproxyUrl?: string;
+    readonly artifactDir?: string;
+    /**
+     * If `true`, TestServer binds behind a Toxiproxy upstream matching the
+     * adversity-tier `downstream` port; otherwise a direct bind. Default:
+     * `true` when `tiers` includes `"D"`.
+     */
+    readonly bindThroughToxiproxy?: boolean;
+}
+/**
+ * Acquire the full client-side context under one Scope. Returns a
+ * live TestServer, a real-client factory ready to call, and a
+ * handshake-noise guard window.
+ *
+ * The TestServer binds on an ephemeral port. Optional Toxiproxy is
+ * acquired when `manageToxiproxy` is set or `toxiproxyUrl` is provided
+ * alongside tier "D".
+ *
+ * Errors are typed; no raw throws.
+ */
+export declare function acquireClientRunContext(opts: ClientConformanceRunOptions): Effect.Effect<ClientConformanceRunContext, ToxicControlError | RealServerAcquireError | RealClientLifecycleError, Scope.Scope>;
+/**
+ * Build a `ClientHandshakeWindow` from a real-client handle. Returns a
+ * window whose `awaitHandshakeComplete` resolves when `handle.ready`
+ * does; emissions are passed through to the connection the property
+ * body chooses (TestServer may have multiple connections).
+ */
+export declare function makeClientHandshakeWindow(handle: RealClientHandle): Effect.Effect<ClientHandshakeWindow, never, Scope.Scope>;
+/**
+ * Auto-handshake responder. Spawned as a background fiber by property
+ * bodies; watches a TestServer connection's inbound capture buffer for
+ * `auth/connect` RPC requests and responds with a minimal valid
+ * `HelloOkSchema`. Required because `MoltZapWsClient.connect()` blocks
+ * on the auth/connect response before `ready` resolves.
+ *
+ * Exposed as a helper so each property body can choose whether to run
+ * the auto-responder or assert directly against the raw inbound stream
+ * (e.g., B4 spurious-id test wants to observe the inbound ids).
+ */
+export declare function runAutoHandshakeResponder(connection: TestServerConnection, agentId: string): Effect.Effect<void, never, Scope.Scope>;
+/**
+ * Utility: resolve a fresh tag from a handshake window in synchronous-
+ * friendly Effect code. Property bodies call this at the top of each
+ * fast-check iteration.
+ */
+export declare function freshTag(window: ClientHandshakeWindow): Effect.Effect<string>;
+/**
+ * Fiber-safe helper to await a TestServer connection. Times out so a
+ * never-connecting real client doesn't block the property body
+ * indefinitely.
+ */
+export declare function awaitConnection(testServer: TestServer, timeoutMs?: number): Effect.Effect<TestServerConnection, TransportIoError>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/testing/conformance/client/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../../src/testing/conformance/client/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAEL,KAAK,UAAU,EACf,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGxD;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;IAC9D;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC1D;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;CAC/D;AAED;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,CAClB,MAAM,EAAE,qBAAqB,KAC1B,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;IACrE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,kDAAkD;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,gDAAgD;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,CACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,KACZ,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IACtD,iEAAiE;IACjE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;CAC/D;AAED;;;GAGG;AACH,qBAAa,wBAAwB;IAEvB,QAAQ,CAAC,KAAK,EAAE,OAAO;IADnC,QAAQ,CAAC,IAAI,8BAA8B;gBACtB,KAAK,EAAE,OAAO;CACpC;AAED,2EAA2E;AAC3E,qBAAa,kBAAkB;IAG3B,QAAQ,CAAC,IAAI,EACT,SAAS,GACT,cAAc,GACd,oBAAoB,GACpB,cAAc;IAClB,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI;IAC1C,QAAQ,CAAC,KAAK,EAAE,OAAO;IATzB,QAAQ,CAAC,IAAI,wBAAwB;gBAE1B,IAAI,EACT,SAAS,GACT,cAAc,GACd,oBAAoB,GACpB,cAAc,EACT,MAAM,EAAE,MAAM,EACd,kBAAkB,EAAE,MAAM,GAAG,IAAI,EACjC,KAAK,EAAE,OAAO;CAE1B;AAED,oEAAoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE;QAC/B,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;QAC1C,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE;QAClC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;QAC1C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAC5C,IAAI,EACJ,wBAAwB,CACzB,CAAC;CACH;AAED,eAAO,MAAM,qBAAqB,2DAEjC,CAAC;AAEF;;;;GAIG;AACH;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,CAC1B,IAAI,EAAE,qBAAqB,KACxB,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5E,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;IAC3D,QAAQ,CAAC,UAAU,EAAE,CACnB,IAAI,EAAE,qBAAqB,KACxB,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,2BAA2B,GAChC,MAAM,CAAC,MAAM,CACd,2BAA2B,EAC3B,iBAAiB,GAAG,sBAAsB,GAAG,wBAAwB,EACrE,KAAK,CAAC,KAAK,CACZ,CAgEA;AA0CD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,gBAAgB,GACvB,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAc1D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,oBAAoB,EAChC,OAAO,EAAE,MAAM,GACd,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CA8CzC;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAE7E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,UAAU,EACtB,SAAS,SAAO,GACf,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAavD"}

package/dist/testing/conformance/client/runner.js

@@ -0,0 +1,228 @@
+/**
+ * Client-side conformance runner — acquires a TestServer substrate plus the
+ * consumer-provided real-client factory under a single Scope, pinned to an
+ * FC seed.
+ *
+ * Parallel to `conformance/runner.ts` (server-side: real server + TestClient).
+ * This module's input is `realClient: () => Effect<RealClientHandle, E,
+ * Scope>`; scope teardown closes the real client, drains the handshake-noise
+ * guard (see `ClientHandshakeWindow` below), and releases the TestServer.
+ *
+ * Architect O5 decision: the factory returns an `Effect` that owns the real
+ * client's lifetime via `Scope`. Consumers that already ship an Effect-native
+ * construction path (`packages/client/MoltZapWsClient` via its internal
+ * `ManagedRuntime`) wrap it in `Effect.acquireRelease`. Channel packages
+ * (`openclaw-channel`, `nanoclaw-channel`) add a narrow test-support subpath
+ * export (see §4 O5 resolution in the design doc) that returns the same
+ * factory shape.
+ */
+import { Context, Effect, Ref } from "effect";
+import { makeTestServer, } from "../../test-server.js";
+import { makeToxiproxyClient, } from "../../toxics/client.js";
+import { RealServerAcquireError, TransportIoError, } from "../../errors.js";
+import { conformanceNumRunsFromEnv } from "../env.js";
+import { PROTOCOL_VERSION } from "../../../version.js";
+/**
+ * Real-client lifecycle error tag. All three cover the Principle 3 error
+ * channel; no raw throws escape the factory's Scope.
+ */
+export class RealClientLifecycleError {
+    cause;
+    _tag = "RealClientLifecycleError";
+    constructor(cause) {
+        this.cause = cause;
+    }
+}
+/** Typed error surface for real-client RPC calls (D5 predicate target). */
+export class RealClientRpcError {
+    kind;
+    method;
+    documentedErrorTag;
+    cause;
+    _tag = "RealClientRpcError";
+    constructor(kind, method, documentedErrorTag, cause) {
+        this.kind = kind;
+        this.method = method;
+        this.documentedErrorTag = documentedErrorTag;
+        this.cause = cause;
+    }
+}
+export const ClientHandshakeWindow = Context.GenericTag("@moltzap/protocol/testing/ClientHandshakeWindow");
+/**
+ * Acquire the full client-side context under one Scope. Returns a
+ * live TestServer, a real-client factory ready to call, and a
+ * handshake-noise guard window.
+ *
+ * The TestServer binds on an ephemeral port. Optional Toxiproxy is
+ * acquired when `manageToxiproxy` is set or `toxiproxyUrl` is provided
+ * alongside tier "D".
+ *
+ * Errors are typed; no raw throws.
+ */
+export function acquireClientRunContext(opts) {
+    return Effect.gen(function* () {
+        const effectiveOpts = {
+            ...opts,
+            numRuns: opts.numRuns ?? conformanceNumRunsFromEnv(),
+        };
+        const seed = effectiveOpts.replaySeed ??
+            Number(process.env.FC_SEED ?? Date.now() & 0x7fffffff);
+        const artifacts = yield* Ref.make([]);
+        // Bind the TestServer under the ambient Scope. Server-close on teardown.
+        const testServer = yield* makeTestServer({
+            port: 0,
+            host: "127.0.0.1",
+            captureCapacity: 256,
+        }).pipe(Effect.mapError((err) => new RealServerAcquireError({
+            cause: new Error(`TestServer bind failed: ${String(err)}`),
+        })));
+        // Optional Toxiproxy acquisition — matches the server-side runner's
+        // contract (only allocate when tier "D" is present).
+        let toxiproxy = null;
+        if (effectiveOpts.tiers.includes("D") &&
+            effectiveOpts.toxiproxyUrl !== undefined) {
+            const tp = yield* makeToxiproxyClient({
+                apiUrl: effectiveOpts.toxiproxyUrl,
+            });
+            yield* tp.ping.pipe(Effect.orElseSucceed(() => undefined));
+            toxiproxy = tp;
+        }
+        // Build a placeholder handshake window; property bodies overwrite it
+        // via `makeClientHandshakeWindow(handle)` once they have a handle.
+        // The context carries the initial no-op shape so type-system contracts
+        // hold; each property body still binds a per-handle window.
+        const handshakeWindow = {
+            freshEmissionTag: Effect.sync(() => `tag-${Math.random().toString(36).slice(2, 10)}`),
+            emitTaggedEvent: ({ connection, base, emissionTag }) => emitTaggedEventDefault(connection, base, emissionTag),
+            emitTaggedResponse: ({ connection, base, emissionTag }) => emitTaggedResponseDefault(connection, base, emissionTag),
+            awaitHandshakeComplete: Effect.void,
+        };
+        return {
+            testServer,
+            realClientFactory: effectiveOpts.realClient,
+            handshakeWindow,
+            toxiproxy,
+            opts: effectiveOpts,
+            seed,
+            artifacts,
+        };
+    });
+}
+/**
+ * Default tagged-event emission: stamp the event payload with the
+ * caller's `emissionTag` under the reserved `__emissionTag` key, then
+ * forward to the connection's real `emitEvent`. Returns the tag so the
+ * caller can filter subscriber observations by the same string.
+ *
+ * `EventFrame.data` is `Type.Optional(Type.Unknown())`; injecting an
+ * object field is schema-valid. The real clients under test are
+ * payload-opaque (C3 predicate), so the extra field round-trips cleanly.
+ */
+function emitTaggedEventDefault(connection, base, emissionTag) {
+    const base_data = (base.data ?? {}); // #ignore-sloppy-code[record-cast]: EventFrame.data is Type.Optional(Type.Unknown()); opaque-payload merge, not a Kysely row
+    const tagged = {
+        ...base,
+        data: { ...base_data, __emissionTag: emissionTag },
+    };
+    return connection.emitEvent(tagged).pipe(Effect.orElseSucceed(() => undefined), Effect.as(emissionTag));
+}
+function emitTaggedResponseDefault(connection, base, _emissionTag) {
+    // Response frames don't carry a free-form `data` field; responses are
+    // correlated by `id` instead — the response's `id` IS its emission tag
+    // from the property's perspective (see B1 / B4 / D5 predicates).
+    return connection.emitResponse(base).pipe(Effect.orElseSucceed(() => undefined), Effect.as(base.id));
+}
+/**
+ * Build a `ClientHandshakeWindow` from a real-client handle. Returns a
+ * window whose `awaitHandshakeComplete` resolves when `handle.ready`
+ * does; emissions are passed through to the connection the property
+ * body chooses (TestServer may have multiple connections).
+ */
+export function makeClientHandshakeWindow(handle) {
+    return Effect.gen(function* () {
+        const tagCounter = yield* Ref.make(0);
+        return {
+            freshEmissionTag: Ref.updateAndGet(tagCounter, (n) => n + 1).pipe(Effect.map((n) => `emit-${handle.agentId}-${n}`)),
+            emitTaggedEvent: ({ connection, base, emissionTag }) => emitTaggedEventDefault(connection, base, emissionTag),
+            emitTaggedResponse: ({ connection, base, emissionTag }) => emitTaggedResponseDefault(connection, base, emissionTag),
+            awaitHandshakeComplete: handle.ready,
+        };
+    });
+}
+/**
+ * Auto-handshake responder. Spawned as a background fiber by property
+ * bodies; watches a TestServer connection's inbound capture buffer for
+ * `auth/connect` RPC requests and responds with a minimal valid
+ * `HelloOkSchema`. Required because `MoltZapWsClient.connect()` blocks
+ * on the auth/connect response before `ready` resolves.
+ *
+ * Exposed as a helper so each property body can choose whether to run
+ * the auto-responder or assert directly against the raw inbound stream
+ * (e.g., B4 spurious-id test wants to observe the inbound ids).
+ */
+export function runAutoHandshakeResponder(connection, agentId) {
+    return Effect.forkScoped(Effect.gen(function* () {
+        let handshakeHandled = false;
+        while (!handshakeHandled) {
+            yield* Effect.sleep("10 millis");
+            const snap = yield* connection.inbound.snapshot;
+            for (const entry of snap) {
+                if (entry.kind === "inbound" &&
+                    entry.frame !== null &&
+                    entry.frame.type === "request" &&
+                    entry.frame.method === "auth/connect") {
+                    const helloOk = {
+                        protocolVersion: PROTOCOL_VERSION,
+                        agentId,
+                        conversations: [],
+                        unreadCounts: {},
+                        policy: {
+                            maxMessageBytes: 65536,
+                            maxPartsPerMessage: 32,
+                            maxTextLength: 4096,
+                            maxGroupParticipants: 64,
+                            heartbeatIntervalMs: 30_000,
+                            rateLimits: {
+                                messagesPerMinute: 60,
+                                requestsPerMinute: 300,
+                            },
+                        },
+                    };
+                    yield* connection
+                        .emitResponse({
+                        jsonrpc: "2.0",
+                        type: "response",
+                        id: entry.frame.id,
+                        result: helloOk,
+                    })
+                        .pipe(Effect.orElseSucceed(() => undefined));
+                    handshakeHandled = true;
+                    break;
+                }
+            }
+        }
+    })).pipe(Effect.asVoid);
+}
+/**
+ * Utility: resolve a fresh tag from a handshake window in synchronous-
+ * friendly Effect code. Property bodies call this at the top of each
+ * fast-check iteration.
+ */
+export function freshTag(window) {
+    return window.freshEmissionTag;
+}
+/**
+ * Fiber-safe helper to await a TestServer connection. Times out so a
+ * never-connecting real client doesn't block the property body
+ * indefinitely.
+ */
+export function awaitConnection(testServer, timeoutMs = 5000) {
+    return testServer.accept.pipe(Effect.timeoutFail({
+        duration: `${timeoutMs} millis`,
+        onTimeout: () => new TransportIoError({
+            direction: "inbound",
+            cause: new Error(`TestServer accept timeout after ${timeoutMs}ms (no real client connected)`),
+        }),
+    }));
+}
+//# sourceMappingURL=runner.js.map

package/dist/testing/conformance/client/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../../src/testing/conformance/client/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAc,MAAM,QAAQ,CAAC;AAE1D,OAAO,EACL,cAAc,GAGf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,GAEpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,EACtB,gBAAgB,GAEjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AA8GvD;;;GAGG;AACH,MAAM,OAAO,wBAAwB;IAEd;IADZ,IAAI,GAAG,0BAA0B,CAAC;IAC3C,YAAqB,KAAc;QAAd,UAAK,GAAL,KAAK,CAAS;IAAG,CAAC;CACxC;AAED,2EAA2E;AAC3E,MAAM,OAAO,kBAAkB;IAGlB;IAKA;IACA;IACA;IATF,IAAI,GAAG,oBAAoB,CAAC;IACrC,YACW,IAIS,EACT,MAAc,EACd,kBAAiC,EACjC,KAAc;QAPd,SAAI,GAAJ,IAAI,CAIK;QACT,WAAM,GAAN,MAAM,CAAQ;QACd,uBAAkB,GAAlB,kBAAkB,CAAe;QACjC,UAAK,GAAL,KAAK,CAAS;IACtB,CAAC;CACL;AA4CD,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC,UAAU,CACrD,iDAAiD,CAClD,CAAC;AA8CF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAiC;IAMjC,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,aAAa,GAAG;YACpB,GAAG,IAAI;YACP,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,yBAAyB,EAAE;SACrD,CAAC;QACF,MAAM,IAAI,GACR,aAAa,CAAC,UAAU;YACxB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAqC,EAAE,CAAC,CAAC;QAE1E,yEAAyE;QACzE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;YACvC,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,WAAW;YACjB,eAAe,EAAE,GAAG;SACrB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,sBAAsB,CAAC;YACzB,KAAK,EAAE,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;SAC3D,CAAC,CACL,CACF,CAAC;QAEF,oEAAoE;QACpE,qDAAqD;QACrD,IAAI,SAAS,GAA2B,IAAI,CAAC;QAC7C,IACE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YACjC,aAAa,CAAC,YAAY,KAAK,SAAS,EACxC,CAAC;YACD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC;gBACpC,MAAM,EAAE,aAAa,CAAC,YAAY;aACnC,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3D,SAAS,GAAG,EAAE,CAAC;QACjB,CAAC;QAED,qEAAqE;QACrE,mEAAmE;QACnE,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,eAAe,GAA0B;YAC7C,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAC3B,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACvD;YACD,eAAe,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CACrD,sBAAsB,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC;YACvD,kBAAkB,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CACxD,yBAAyB,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC;YAC1D,sBAAsB,EAAE,MAAM,CAAC,IAAI;SACpC,CAAC;QAEF,OAAO;YACL,UAAU;YACV,iBAAiB,EAAE,aAAa,CAAC,UAAU;YAC3C,eAAe;YACf,SAAS;YACT,IAAI,EAAE,aAAa;YACnB,IAAI;YACJ,SAAS;SAC4B,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,sBAAsB,CAC7B,UAAgC,EAChC,IAAgB,EAChB,WAAmB;IAEnB,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,CAAC,6HAA6H;IAC7L,MAAM,MAAM,GAAe;QACzB,GAAG,IAAI;QACP,IAAI,EAAE,EAAE,GAAG,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE;KACnD,CAAC;IACF,OAAO,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CACtC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EACrC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,UAAgC,EAChC,IAAmB,EACnB,YAAoB;IAEpB,sEAAsE;IACtE,uEAAuE;IACvE,iEAAiE;IACjE,OAAO,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CACvC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EACrC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CACnB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAwB;IAExB,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,OAAO;YACL,gBAAgB,EAAE,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAC/D,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,MAAM,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,CACjD;YACD,eAAe,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CACrD,sBAAsB,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC;YACvD,kBAAkB,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CACxD,yBAAyB,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC;YAC1D,sBAAsB,EAAE,MAAM,CAAC,KAAK;SACrC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAAgC,EAChC,OAAe;IAEf,OAAO,MAAM,CAAC,UAAU,CACtB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACzB,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC;YAChD,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,IACE,KAAK,CAAC,IAAI,KAAK,SAAS;oBACxB,KAAK,CAAC,KAAK,KAAK,IAAI;oBACpB,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;oBAC9B,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,cAAc,EACrC,CAAC;oBACD,MAAM,OAAO,GAAG;wBACd,eAAe,EAAE,gBAAgB;wBACjC,OAAO;wBACP,aAAa,EAAE,EAAE;wBACjB,YAAY,EAAE,EAAE;wBAChB,MAAM,EAAE;4BACN,eAAe,EAAE,KAAK;4BACtB,kBAAkB,EAAE,EAAE;4BACtB,aAAa,EAAE,IAAI;4BACnB,oBAAoB,EAAE,EAAE;4BACxB,mBAAmB,EAAE,MAAM;4BAC3B,UAAU,EAAE;gCACV,iBAAiB,EAAE,EAAE;gCACrB,iBAAiB,EAAE,GAAG;6BACvB;yBACF;qBACF,CAAC;oBACF,KAAK,CAAC,CAAC,UAAU;yBACd,YAAY,CAAC;wBACZ,OAAO,EAAE,KAAK;wBACd,IAAI,EAAE,UAAU;wBAChB,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;wBAClB,MAAM,EAAE,OAAO;qBAChB,CAAC;yBACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC/C,gBAAgB,GAAG,IAAI,CAAC;oBACxB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,MAA6B;IACpD,OAAO,MAAM,CAAC,gBAAgB,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,UAAsB,EACtB,SAAS,GAAG,IAAI;IAEhB,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAC3B,MAAM,CAAC,WAAW,CAAC;QACjB,QAAQ,EAAE,GAAG,SAAS,SAAS;QAC/B,SAAS,EAAE,GAAG,EAAE,CACd,IAAI,gBAAgB,CAAC;YACnB,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,IAAI,KAAK,CACd,mCAAmC,SAAS,+BAA+B,CAC5E;SACF,CAAC;KACL,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/testing/conformance/client/schema-conformance.d.ts

@@ -0,0 +1,25 @@
+import type { ClientConformanceRunContext } from "./runner.js";
+/**
+ * A2 client-side — TestServer emits a property-sampled valid
+ * `EventFrame` with a property-authored `emissionTag`; real client's
+ * subscriber surfaces an event whose payload schema-matches within
+ * deadline.
+ *
+ * Predicate: `Value.Check(EventFrameSchema, observed.decoded)` passes
+ * AND `data.__emissionTag === emissionTag`.
+ *
+ * Discriminates: a client that strips or reorders required schema
+ * fields when surfacing events fails.
+ */
+export declare function registerEventWellFormednessClient(ctx: ClientConformanceRunContext): void;
+/**
+ * A4 client half — TestServer emits a bit-flipped / truncated /
+ * oversized frame; real client drops it silently. A subsequent tagged
+ * valid event still surfaces (liveness proof, mirrors #187 round-5
+ * guard). A client that crashes on the malformed frame disconnects,
+ * preventing the liveness probe from surfacing within the deadline.
+ *
+ * Predicate: liveness — next tagged event surfaces within deadline.
+ */
+export declare function registerMalformedFrameHandlingClient(ctx: ClientConformanceRunContext): void;
+//# sourceMappingURL=schema-conformance.d.ts.map

package/dist/testing/conformance/client/schema-conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-conformance.d.ts","sourceRoot":"","sources":["../../../../src/testing/conformance/client/schema-conformance.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAY/D;;;;;;;;;;;GAWG;AACH,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,2BAA2B,GAC/B,IAAI,CAiEN;AAED;;;;;;;;GAQG;AACH,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,2BAA2B,GAC/B,IAAI,CA0DN"}

package/dist/testing/conformance/client/schema-conformance.js

@@ -0,0 +1,123 @@
+/**
+ * Client-side schema-conformance properties.
+ *
+ * Covers spec-amendment #200 §5:
+ *   A2 — event-well-formedness (client-side new)
+ *   A4 — malformed-frame-handling (client half of both-sides)
+ *
+ * Predicate-authoring discipline:
+ *   - P1 (#195): every predicate names a client-realistic misbehaviour.
+ *     Here it's "real client surfaces a malformed or dropped event."
+ *   - P2 (#195): executable divergence proofs live under
+ *     `__divergence_proofs__/*-executable.proofs.test.ts`.
+ *   - O7 (#200): every observation filters by property-authored
+ *     `emissionTag` via `ClientHandshakeWindow.emitTaggedEvent` — auto-
+ *     subscribe / hello / resume frames never satisfy a predicate.
+ *   - O6 (#200): when spec names a typed error, assert exact match.
+ *     A4 client half: `MalformedFrameError` is documented; the adapter
+ *     exposes no typed error channel, so the predicate checks liveness
+ *     only — a client that crashes on a malformed frame will disconnect,
+ *     preventing the subsequent liveness probe from surfacing.
+ */
+import { Effect } from "effect";
+import { Value } from "@sinclair/typebox/value";
+import { EventFrameSchema } from "../../../schema/frames.js";
+import { arbitraryEventFrame } from "../../arbitraries/frames.js";
+import * as fc from "fast-check";
+import { registerProperty } from "../registry.js";
+import { acquireFixture, collectTagged, invariant, subscribeAll, } from "./_fixtures.js";
+const CATEGORY = "schema-conformance";
+const PROPERTY_BUDGET_MS = 8_000;
+/**
+ * A2 client-side — TestServer emits a property-sampled valid
+ * `EventFrame` with a property-authored `emissionTag`; real client's
+ * subscriber surfaces an event whose payload schema-matches within
+ * deadline.
+ *
+ * Predicate: `Value.Check(EventFrameSchema, observed.decoded)` passes
+ * AND `data.__emissionTag === emissionTag`.
+ *
+ * Discriminates: a client that strips or reorders required schema
+ * fields when surfacing events fails.
+ */
+export function registerEventWellFormednessClient(ctx) {
+    registerProperty(ctx, CATEGORY, "event-well-formedness-client", "valid EventFrame emitted by TestServer surfaces schema-clean on real client", Effect.scoped(Effect.gen(function* () {
+        const fx = yield* acquireFixture(ctx, CATEGORY, "event-well-formedness-client");
+        yield* subscribeAll(fx.handle);
+        const sampled = fc.sample(arbitraryEventFrame(), {
+            numRuns: 1,
+            seed: ctx.seed,
+        })[0];
+        if (sampled === undefined) {
+            return yield* Effect.fail(invariant(CATEGORY, "event-well-formedness-client", "failed to sample EventFrame"));
+        }
+        const tag = yield* fx.window.freshEmissionTag;
+        yield* fx.window.emitTaggedEvent({
+            connection: fx.connection,
+            base: sampled,
+            emissionTag: tag,
+        });
+        const observed = yield* collectTagged(fx.handle, (t) => t === tag, {
+            expected: 1,
+            budgetMs: PROPERTY_BUDGET_MS,
+        });
+        if (observed.length === 0) {
+            return yield* Effect.fail(invariant(CATEGORY, "event-well-formedness-client", `tagged event ${tag} not surfaced within ${PROPERTY_BUDGET_MS}ms`));
+        }
+        // Reconstruct the expected event shape and re-check schema.
+        const reconstructed = {
+            jsonrpc: "2.0",
+            type: "event",
+            event: observed[0].eventName,
+            data: observed[0].data,
+        };
+        if (!Value.Check(EventFrameSchema, reconstructed)) {
+            return yield* Effect.fail(invariant(CATEGORY, "event-well-formedness-client", "real client surfaced event that fails EventFrameSchema"));
+        }
+    })));
+}
+/**
+ * A4 client half — TestServer emits a bit-flipped / truncated /
+ * oversized frame; real client drops it silently. A subsequent tagged
+ * valid event still surfaces (liveness proof, mirrors #187 round-5
+ * guard). A client that crashes on the malformed frame disconnects,
+ * preventing the liveness probe from surfacing within the deadline.
+ *
+ * Predicate: liveness — next tagged event surfaces within deadline.
+ */
+export function registerMalformedFrameHandlingClient(ctx) {
+    registerProperty(ctx, CATEGORY, "malformed-frame-handling-client", "malformed TestServer emission absorbed silently; liveness intact", Effect.scoped(Effect.gen(function* () {
+        const fx = yield* acquireFixture(ctx, CATEGORY, "malformed-frame-handling-client");
+        yield* subscribeAll(fx.handle);
+        const baseEvent = fc.sample(arbitraryEventFrame(), {
+            numRuns: 1,
+            seed: ctx.seed,
+        })[0];
+        if (baseEvent === undefined) {
+            return yield* Effect.fail(invariant(CATEGORY, "malformed-frame-handling-client", "failed to sample base EventFrame"));
+        }
+        // Emit a malformed frame — the real client must absorb it.
+        yield* fx.connection
+            .emitMalformed({
+            baseEvent,
+            kind: "bit-flip",
+            seed: ctx.seed,
+        })
+            .pipe(Effect.orElseSucceed(() => undefined));
+        // Liveness probe: emit a valid tagged event after the malformed one.
+        const tag = yield* fx.window.freshEmissionTag;
+        yield* fx.window.emitTaggedEvent({
+            connection: fx.connection,
+            base: baseEvent,
+            emissionTag: tag,
+        });
+        const observed = yield* collectTagged(fx.handle, (t) => t === tag, {
+            expected: 1,
+            budgetMs: PROPERTY_BUDGET_MS,
+        });
+        if (observed.length === 0) {
+            return yield* Effect.fail(invariant(CATEGORY, "malformed-frame-handling-client", "liveness failed: no tagged event after malformed emission"));
+        }
+    })));
+}
+//# sourceMappingURL=schema-conformance.js.map