@moltzap/protocol 2026.408.0 → 2026.425.1

package/dist/testing/conformance/rpc-semantics.js

@@ -0,0 +1,394 @@
+/**
+ * RPC semantics — properties that compare the real server's observable
+ * outcome against the reference-model reducer, and exercise authority
+ * + request-id + idempotence invariants end-to-end.
+ *
+ * Historical grouping note: spec #181 §5 calls this "Tier B". Code uses
+ * semantic names only.
+ *
+ * Principle 3: every property body is `Effect<void, PropertyFailure>`.
+ */
+import * as fc from "fast-check";
+import { Effect } from "effect";
+import { arbitraryAnyCall, arbitraryConfidentCall, confidentOracleMethods, } from "../arbitraries/rpc.js";
+import { applyCall, authorizationOutcome, isIdempotent, } from "../models/dispatch.js";
+import { initialReferenceState } from "../models/state.js";
+import { ErrorCodes } from "../../schema/errors.js";
+import { canonicalJson, sortJsonArray } from "../canonicalize.js";
+import { makeTestClient } from "../test-client.js";
+import { registerTestAgent } from "../agent-registration.js";
+import { allRpcMethods } from "../arbitraries/rpc.js";
+import { assertProperty, PropertyInvariantViolation, PropertyUnavailable, registerProperty, } from "./registry.js";
+const CATEGORY = "rpc-semantics";
+const DEFAULT_TIMEOUT_MS = 3000;
+const DEFAULT_CAPTURE_CAPACITY = 64;
+/**
+ * Model-equivalence — conditional oracle over the model-derived
+ * confident set (architect #195 §4.1 + #197 §2).
+ *
+ * Spec §5 B1: the server must produce what the model predicts when
+ * the model is confident. `arbitraryConfidentCall()` draws calls via
+ * the architect-literal shape `fc.constantFrom(...kept).chain(
+ * arbitraryCallFor)` — probe and execution share the same generator
+ * so confidence is checked on the same distribution the property
+ * exercises (round-8 finding: a `.map(m => ({method: m, params: {}}))`
+ * shortcut narrowed execution below the probe and hid real
+ * param-dependent divergences).
+ *
+ * Param-invariance safety net (#197 §2.2 + §6.1): if a drawn call
+ * comes back `_tag: "error"` from the model, the single-probe
+ * derivation has diverged from runtime truth (applyCall became
+ * param-sensitive for that method under a later draw). The property
+ * raises `PropertyInvariantViolation` instead of silently short-
+ * circuiting; the fix is to widen the derivation (probe with K > 1
+ * samples), not extend this property.
+ *
+ * Current K = 1 (agents/list only). Architect #197 §2.3 notes that
+ * "when K ≤ 2, the property is operating as a small number of hand-
+ * picked examples; document it in JSDoc, don't pretend it's a fuzz
+ * property." Widening K requires either teaching `applyCall` per-
+ * method param filters (e.g. `conversations/list` confident only
+ * when cursor is undefined/valid) or fixing server-side parsers that
+ * error on pathological schema-valid params (e.g. `cursor: " "` →
+ * SqlError on pglite cursor parsing). Tracked under #186.
+ *
+ * numRuns floor: `max(10, 2K)` = 10 today.
+ */
+export function registerModelEquivalence(ctx) {
+    const K = confidentOracleMethods.length;
+    const numRunsFloor = Math.max(10, 2 * K);
+    registerProperty(ctx, CATEGORY, "model-equivalence", `when model predicts ok, server MUST return ok (K=${K} confident methods)`, assertProperty(CATEGORY, "model-equivalence", () => fc.assert(
+    // #ignore-sloppy-code-next-line[async-keyword]: fast-check asyncProperty contract requires Promise-returning callback
+    fc.asyncProperty(arbitraryConfidentCall(), async (call) => {
+        const modelTag = applyCall(initialReferenceState, call).outcome._tag;
+        if (modelTag === "error") {
+            // Safety-net guard: `arbitraryConfidentCall` derived this
+            // method as confident at module load. If the model now
+            // disagrees, applyCall became param-sensitive for the
+            // kept method and the derivation must widen. Surface
+            // loudly instead of silent short-circuit.
+            throw new Error(`arbitraryConfidentCall drew ${call.method} with params ${JSON.stringify(call.params)} → model _tag: "error" — param-invariance contract broken; widen derivation to fc.sample-based check per architect #197 §2.2`);
+        }
+        const serverTag = await Effect.runPromise(Effect.scoped(Effect.gen(function* () {
+            const agent = yield* registerTestAgent({
+                baseUrl: ctx.realServer.baseUrl,
+                name: "me",
+            });
+            const client = yield* makeTestClient({
+                serverUrl: ctx.realServer.wsUrl,
+                agentKey: agent.apiKey,
+                agentId: agent.agentId,
+                defaultTimeoutMs: DEFAULT_TIMEOUT_MS,
+                captureCapacity: DEFAULT_CAPTURE_CAPACITY,
+            });
+            const outcome = yield* client
+                .sendRpc(call.method, call.params)
+                .pipe(Effect.either);
+            return outcome._tag === "Right" ? "ok" : "error";
+        })));
+        // Model is confident it's `ok`. Server MUST agree.
+        return serverTag === "ok";
+    }), { seed: ctx.seed, numRuns: ctx.opts.numRuns ?? numRunsFloor })));
+    // Keep `arbitraryAnyCall` import alive — used by sibling properties.
+    void arbitraryAnyCall;
+}
+/**
+ * Authorized caller → typed success on at least one known-safe RPC.
+ * Registers a fresh agent, completes the handshake, calls
+ * `conversations/list` (empty-collection result is defined for every
+ * newly-registered agent), asserts a Right outcome.
+ */
+export function registerAuthorityPositive(ctx) {
+    registerProperty(ctx, CATEGORY, "authority-positive", "authorized agent → typed success on conversations/list", Effect.scoped(Effect.gen(function* () {
+        const agent = yield* registerTestAgent({
+            baseUrl: ctx.realServer.baseUrl,
+            name: "ap",
+        }).pipe(Effect.mapError((e) => new PropertyInvariantViolation({
+            category: CATEGORY,
+            name: "authority-positive",
+            reason: `agent registration failed: ${e.body}`,
+        })));
+        const client = yield* makeTestClient({
+            serverUrl: ctx.realServer.wsUrl,
+            agentKey: agent.apiKey,
+            agentId: agent.agentId,
+            defaultTimeoutMs: DEFAULT_TIMEOUT_MS,
+            captureCapacity: DEFAULT_CAPTURE_CAPACITY,
+        }).pipe(Effect.mapError((e) => new PropertyInvariantViolation({
+            category: CATEGORY,
+            name: "authority-positive",
+            reason: `client acquire failed: ${String(e)}`,
+        })));
+        const outcome = yield* client
+            .sendRpc("conversations/list", {})
+            .pipe(Effect.either);
+        if (outcome._tag === "Left") {
+            return yield* Effect.fail(new PropertyInvariantViolation({
+                category: CATEGORY,
+                name: "authority-positive",
+                reason: `authorized conversations/list failed: ${outcome.left._tag}`,
+            }));
+        }
+    })));
+}
+/**
+ * Unauthenticated caller → typed denial on an auth-gated RPC. Opens a
+ * TestClient with `autoConnect: false` and calls `conversations/list`
+ * without first completing `auth/connect`; asserts the server replies
+ * with a typed error (not a success, not a crash).
+ */
+export function registerAuthorityNegative(ctx) {
+    registerProperty(ctx, CATEGORY, "authority-negative", "unauthenticated agent → typed denial on conversations/list", Effect.scoped(Effect.gen(function* () {
+        // We still need an agentKey to open the socket, but we skip
+        // `auth/connect` so the server sees an un-authed session.
+        const agent = yield* registerTestAgent({
+            baseUrl: ctx.realServer.baseUrl,
+            name: "an",
+        }).pipe(Effect.mapError((e) => new PropertyInvariantViolation({
+            category: CATEGORY,
+            name: "authority-negative",
+            reason: `agent registration failed: ${e.body}`,
+        })));
+        const client = yield* makeTestClient({
+            serverUrl: ctx.realServer.wsUrl,
+            agentKey: agent.apiKey,
+            agentId: agent.agentId,
+            defaultTimeoutMs: DEFAULT_TIMEOUT_MS,
+            captureCapacity: DEFAULT_CAPTURE_CAPACITY,
+            autoConnect: false,
+        }).pipe(Effect.mapError((e) => new PropertyInvariantViolation({
+            category: CATEGORY,
+            name: "authority-negative",
+            reason: `client acquire failed: ${String(e)}`,
+        })));
+        const outcome = yield* client
+            .sendRpc("conversations/list", {})
+            .pipe(Effect.either);
+        if (outcome._tag === "Right") {
+            return yield* Effect.fail(new PropertyInvariantViolation({
+                category: CATEGORY,
+                name: "authority-negative",
+                reason: "pre-handshake conversations/list returned success — expected typed denial",
+            }));
+        }
+        // Narrow the Left: must be a typed auth-shaped RpcResponseError
+        // (Unauthorized / Forbidden). A timeout or transport-close
+        // would also surface as `Left` but does NOT satisfy the
+        // property — it proves nothing about authorization.
+        if (outcome.left._tag !== "TestingRpcResponseError") {
+            return yield* Effect.fail(new PropertyInvariantViolation({
+                category: CATEGORY,
+                name: "authority-negative",
+                reason: `expected RpcResponseError, got ${outcome.left._tag}`,
+            }));
+        }
+        const code = outcome.left.code;
+        const isAuthShaped = code === ErrorCodes.Unauthorized || code === ErrorCodes.Forbidden;
+        if (!isAuthShaped) {
+            return yield* Effect.fail(new PropertyInvariantViolation({
+                category: CATEGORY,
+                name: "authority-negative",
+                reason: `expected Unauthorized/Forbidden code (${ErrorCodes.Unauthorized} / ${ErrorCodes.Forbidden}), got ${code}`,
+            }));
+        }
+        // Oracle cross-check: the model also predicts deny for this
+        // unauthenticated caller. Keeps the model honest alongside the
+        // server.
+        const modelVerdict = authorizationOutcome(initialReferenceState, { method: "conversations/list", params: {} }, "unknown-agent");
+        if (modelVerdict !== "deny-unauthenticated") {
+            return yield* Effect.fail(new PropertyInvariantViolation({
+                category: CATEGORY,
+                name: "authority-negative",
+                reason: `model oracle disagrees: expected deny-unauthenticated, got ${modelVerdict}`,
+            }));
+        }
+    })));
+}
+/**
+ * Request-IDs are unique per inbound response. Sends N RPCs and asserts
+ * every id in the captured response stream appears exactly once.
+ */
+export function registerRequestIdUniqueness(ctx) {
+    registerProperty(ctx, CATEGORY, "request-id-uniqueness", "every request-id appears in exactly one response", assertProperty(CATEGORY, "request-id-uniqueness", () => fc.assert(
+    // #ignore-sloppy-code-next-line[async-keyword]: fast-check asyncProperty contract requires Promise-returning callback
+    fc.asyncProperty(fc.integer({ min: 2, max: 6 }), async (n) => {
+        const counts = await Effect.runPromise(Effect.scoped(Effect.gen(function* () {
+            const agent = yield* registerTestAgent({
+                baseUrl: ctx.realServer.baseUrl,
+                name: "ru",
+            });
+            const client = yield* makeTestClient({
+                serverUrl: ctx.realServer.wsUrl,
+                agentKey: agent.apiKey,
+                agentId: agent.agentId,
+                defaultTimeoutMs: DEFAULT_TIMEOUT_MS,
+                captureCapacity: n * 4,
+            });
+            // Snapshot the capture boundary after handshake so we
+            // only tally response ids for the N RPCs below — not
+            // the auto-connect reply.
+            const handshakeEnd = (yield* client.snapshot).length;
+            yield* Effect.forEach(Array.from({ length: n }, (_, i) => i), () => client
+                .sendRpc("conversations/list", {})
+                .pipe(Effect.either), { concurrency: n });
+            const snap = (yield* client.snapshot).slice(handshakeEnd);
+            const outboundIds = new Set();
+            const inboundIds = new Set();
+            let inboundCount = 0;
+            for (const entry of snap) {
+                if (entry.frame?.type !== "request" &&
+                    entry.frame?.type !== "response")
+                    continue;
+                if (entry.kind === "outbound" &&
+                    entry.frame.type === "request") {
+                    outboundIds.add(entry.frame.id);
+                }
+                if (entry.kind === "inbound" &&
+                    entry.frame.type === "response") {
+                    inboundIds.add(entry.frame.id);
+                    inboundCount += 1;
+                }
+            }
+            return { outboundIds, inboundIds, inboundCount };
+        })));
+        // Architect §4.2 set-equality predicate. Conjunction:
+        //   - outboundIds.size === n                  (driver produced n frames)
+        //   - inboundIds.size === outboundIds.size    (cardinality match)
+        //   - every outbound id is matched inbound     (no drops, no strays)
+        //   - inboundCount === inboundIds.size         (no inbound duplicates)
+        // Stray IDs, dropped replies, and id-reuse all fail the property.
+        const { outboundIds, inboundIds, inboundCount } = counts;
+        if (outboundIds.size !== n)
+            return false;
+        if (inboundIds.size !== outboundIds.size)
+            return false;
+        if (inboundCount !== inboundIds.size)
+            return false;
+        for (const id of outboundIds) {
+            if (!inboundIds.has(id))
+                return false;
+        }
+        return true;
+    }), { seed: ctx.seed, numRuns: ctx.opts.numRuns ?? 5 })));
+}
+/**
+ * Idempotent RPCs yield equivalent responses on replay. For every
+ * list-shaped method where empty params are valid and `isIdempotent`
+ * says replay is safe, sends the same params twice and asserts both
+ * succeed with **identical results** (not just identical tags).
+ *
+ * Architect §4.4: removed `.pipe(Effect.orElseSucceed(["skip","skip"]))`
+ * masking. Transport failures now surface as `PropertyUnavailable` so
+ * the runner reports them explicitly instead of folding them into a
+ * silent pass. Predicate compares response bodies via canonical JSON
+ * — spec B5 says "identical results", not "identical outcome kinds".
+ */
+export function registerIdempotence(ctx) {
+    registerProperty(ctx, CATEGORY, "idempotence", "isIdempotent methods: two sends yield identical response bodies", Effect.gen(function* () {
+        const emptyParamIdempotents = [
+            "agents/list",
+            "conversations/list",
+        ];
+        for (const method of emptyParamIdempotents) {
+            if (!isIdempotent(method)) {
+                return yield* Effect.fail(new PropertyInvariantViolation({
+                    category: CATEGORY,
+                    name: "idempotence",
+                    reason: `isIdempotent(${method}) is false — oracle disagreement`,
+                }));
+            }
+            const pair = yield* Effect.scoped(Effect.gen(function* () {
+                const agent = yield* registerTestAgent({
+                    baseUrl: ctx.realServer.baseUrl,
+                    name: "id",
+                });
+                const client = yield* makeTestClient({
+                    serverUrl: ctx.realServer.wsUrl,
+                    agentKey: agent.apiKey,
+                    agentId: agent.agentId,
+                    defaultTimeoutMs: DEFAULT_TIMEOUT_MS,
+                    captureCapacity: DEFAULT_CAPTURE_CAPACITY,
+                });
+                const a = yield* client.sendRpc(method, {}).pipe(Effect.either);
+                const b = yield* client.sendRpc(method, {}).pipe(Effect.either);
+                return { a, b };
+            })).pipe(Effect.catchTags({
+                TestingAgentRegistrationError: (e) => Effect.fail(new PropertyUnavailable({
+                    category: CATEGORY,
+                    name: "idempotence",
+                    reason: `register: ${e.body}`,
+                })),
+                TestingTransportIoError: (e) => Effect.fail(new PropertyUnavailable({
+                    category: CATEGORY,
+                    name: "idempotence",
+                    reason: `transport io: ${String(e.cause)}`,
+                })),
+                TestingTransportClosedError: (e) => Effect.fail(new PropertyUnavailable({
+                    category: CATEGORY,
+                    name: "idempotence",
+                    reason: `transport closed: ${e.reason}`,
+                })),
+                TestingRpcResponseError: (e) => Effect.fail(new PropertyUnavailable({
+                    category: CATEGORY,
+                    name: "idempotence",
+                    reason: `rpc response error: ${e.message}`,
+                })),
+            }));
+            if (pair.a._tag !== pair.b._tag) {
+                return yield* Effect.fail(new PropertyInvariantViolation({
+                    category: CATEGORY,
+                    name: "idempotence",
+                    reason: `${method}: replay outcome-tag mismatch ${pair.a._tag} → ${pair.b._tag}`,
+                }));
+            }
+            if (pair.a._tag === "Right" && pair.b._tag === "Right") {
+                // Canonical-projection comparison per architect #197 §3.3.
+                // Direct JSON.stringify on wire-derived values is byte-
+                // equality, not semantic equality; a conforming server may
+                // return the list in a different row order across replays.
+                const aCanon = canonIdempotenceResult(method, pair.a.right);
+                const bCanon = canonIdempotenceResult(method, pair.b.right);
+                if (aCanon !== bCanon) {
+                    return yield* Effect.fail(new PropertyInvariantViolation({
+                        category: CATEGORY,
+                        name: "idempotence",
+                        reason: `${method}: replay bodies diverge under canonical projection`,
+                    }));
+                }
+            }
+        }
+    }));
+    void allRpcMethods;
+}
+/**
+ * Idempotence canonical projection — architect #197 §3.3.
+ *
+ * Spec B5: agents/list.agents and conversations/list.conversations are
+ * unordered row sets across replays. Every OTHER array (including any
+ * nested `participants`, future nested message lists, and every
+ * payload field that is not one of the two named arrays) remains
+ * order-sensitive.
+ *
+ * The projection sorts ONLY the specific top-level array the spec
+ * marks unordered, then finalizes via `canonicalJson` (which
+ * normalizes object-key order but preserves every remaining array's
+ * order). A real re-ordering regression inside nested arrays still
+ * fails the property.
+ */
+function canonIdempotenceResult(method, result) {
+    if (method === "agents/list") {
+        const r = result;
+        return canonicalJson({
+            ...r,
+            agents: Array.isArray(r.agents) ? sortJsonArray(r.agents) : r.agents,
+        });
+    }
+    const r = result;
+    return canonicalJson({
+        ...r,
+        conversations: Array.isArray(r.conversations)
+            ? sortJsonArray(r.conversations)
+            : r.conversations,
+    });
+}
+//# sourceMappingURL=rpc-semantics.js.map

package/dist/testing/conformance/rpc-semantics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-semantics.js","sourceRoot":"","sources":["../../../src/testing/conformance/rpc-semantics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAEvB,MAAM,QAAQ,GAAG,eAAwB,CAAC;AAC1C,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAA0B;IACjE,MAAM,CAAC,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,mBAAmB,EACnB,oDAAoD,CAAC,qBAAqB,EAC1E,cAAc,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,EAAE,CACjD,EAAE,CAAC,MAAM;IACP,sHAAsH;IACtH,EAAE,CAAC,aAAa,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACxD,MAAM,QAAQ,GAAG,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACrE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,0DAA0D;YAC1D,uDAAuD;YACvD,sDAAsD;YACtD,qDAAqD;YACrD,0CAA0C;YAC1C,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,CAAC,MAAM,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,8HAA8H,CACpN,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,UAAU,CACvC,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;gBACrC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO;gBAC/B,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;gBACnC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK;gBAC/B,QAAQ,EAAE,KAAK,CAAC,MAAM;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,gBAAgB,EAAE,kBAAkB;gBACpC,eAAe,EAAE,wBAAwB;aAC1C,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM;iBAC1B,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;iBACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACnD,CAAC,CAAC,CACH,CACF,CAAC;QACF,mDAAmD;QACnD,OAAO,SAAS,KAAK,IAAI,CAAC;IAC5B,CAAC,CAAC,EACF,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,YAAY,EAAE,CAC9D,CACF,CACF,CAAC;IACF,qEAAqE;IACrE,KAAK,gBAAgB,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAA0B;IAClE,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,oBAAoB,EACpB,wDAAwD,EACxD,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACrC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO;YAC/B,IAAI,EAAE,IAAI;SACX,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,0BAA0B,CAAC;YAC7B,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,8BAA8B,CAAC,CAAC,IAAI,EAAE;SAC/C,CAAC,CACL,CACF,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;YACnC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK;YAC/B,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,gBAAgB,EAAE,kBAAkB;YACpC,eAAe,EAAE,wBAAwB;SAC1C,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,0BAA0B,CAAC;YAC7B,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,0BAA0B,MAAM,CAAC,CAAC,CAAC,EAAE;SAC9C,CAAC,CACL,CACF,CAAC;QACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM;aAC1B,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;aACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,0BAA0B,CAAC;gBAC7B,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,yCAAyC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;aACrE,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAA0B;IAClE,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,oBAAoB,EACpB,4DAA4D,EAC5D,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,4DAA4D;QAC5D,0DAA0D;QAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACrC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO;YAC/B,IAAI,EAAE,IAAI;SACX,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,0BAA0B,CAAC;YAC7B,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,8BAA8B,CAAC,CAAC,IAAI,EAAE;SAC/C,CAAC,CACL,CACF,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;YACnC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK;YAC/B,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,gBAAgB,EAAE,kBAAkB;YACpC,eAAe,EAAE,wBAAwB;YACzC,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,0BAA0B,CAAC;YAC7B,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,0BAA0B,MAAM,CAAC,CAAC,CAAC,EAAE;SAC9C,CAAC,CACL,CACF,CAAC;QACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM;aAC1B,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;aACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,0BAA0B,CAAC;gBAC7B,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EACJ,2EAA2E;aAC9E,CAAC,CACH,CAAC;QACJ,CAAC;QACD,gEAAgE;QAChE,2DAA2D;QAC3D,wDAAwD;QACxD,oDAAoD;QACpD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,0BAA0B,CAAC;gBAC7B,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,kCAAkC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;aAC9D,CAAC,CACH,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/B,MAAM,YAAY,GAChB,IAAI,KAAK,UAAU,CAAC,YAAY,IAAI,IAAI,KAAK,UAAU,CAAC,SAAS,CAAC;QACpE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,0BAA0B,CAAC;gBAC7B,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,yCAAyC,UAAU,CAAC,YAAY,MAAM,UAAU,CAAC,SAAS,UAAU,IAAI,EAAE;aACnH,CAAC,CACH,CAAC;QACJ,CAAC;QACD,4DAA4D;QAC5D,+DAA+D;QAC/D,UAAU;QACV,MAAM,YAAY,GAAG,oBAAoB,CACvC,qBAAqB,EACrB,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,EAAE,EAAE,EAC5C,eAAe,CAChB,CAAC;QACF,IAAI,YAAY,KAAK,sBAAsB,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,0BAA0B,CAAC;gBAC7B,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,8DAA8D,YAAY,EAAE;aACrF,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAA0B;IACpE,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,uBAAuB,EACvB,kDAAkD,EAClD,cAAc,CAAC,QAAQ,EAAE,uBAAuB,EAAE,GAAG,EAAE,CACrD,EAAE,CAAC,MAAM;IACP,sHAAsH;IACtH,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CACpC,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;gBACrC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO;gBAC/B,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;gBACnC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK;gBAC/B,QAAQ,EAAE,KAAK,CAAC,MAAM;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,gBAAgB,EAAE,kBAAkB;gBACpC,eAAe,EAAE,CAAC,GAAG,CAAC;aACvB,CAAC,CAAC;YACH,sDAAsD;YACtD,qDAAqD;YACrD,0BAA0B;YAC1B,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;YACrD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EACtC,GAAG,EAAE,CACH,MAAM;iBACH,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;iBACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EACxB,EAAE,WAAW,EAAE,CAAC,EAAE,CACnB,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;YACtC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YACrC,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,IACE,KAAK,CAAC,KAAK,EAAE,IAAI,KAAK,SAAS;oBAC/B,KAAK,CAAC,KAAK,EAAE,IAAI,KAAK,UAAU;oBAEhC,SAAS;gBACX,IACE,KAAK,CAAC,IAAI,KAAK,UAAU;oBACzB,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAC9B,CAAC;oBACD,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAClC,CAAC;gBACD,IACE,KAAK,CAAC,IAAI,KAAK,SAAS;oBACxB,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAC/B,CAAC;oBACD,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAC/B,YAAY,IAAI,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC;YACD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QACnD,CAAC,CAAC,CACH,CACF,CAAC;QACF,sDAAsD;QACtD,yEAAyE;QACzE,kEAAkE;QAClE,qEAAqE;QACrE,uEAAuE;QACvE,kEAAkE;QAClE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;QACzD,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACvD,IAAI,YAAY,KAAK,UAAU,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACnD,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAC;QACxC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,EACF,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,CACnD,CACF,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAA0B;IAC5D,gBAAgB,CACd,GAAG,EACH,QAAQ,EACR,aAAa,EACb,iEAAiE,EACjE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,qBAAqB,GAAG;YAC5B,aAAa;YACb,oBAAoB;SACZ,CAAC;QACX,KAAK,MAAM,MAAM,IAAI,qBAAqB,EAAE,CAAC;YAC3C,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,0BAA0B,CAAC;oBAC7B,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,gBAAgB,MAAM,kCAAkC;iBACjE,CAAC,CACH,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAC/B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;oBACrC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO;oBAC/B,IAAI,EAAE,IAAI;iBACX,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;oBACnC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK;oBAC/B,QAAQ,EAAE,KAAK,CAAC,MAAM;oBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,gBAAgB,EAAE,kBAAkB;oBACpC,eAAe,EAAE,wBAAwB;iBAC1C,CAAC,CAAC;gBACH,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAChE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAChE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YAClB,CAAC,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,SAAS,CAAC;gBACf,6BAA6B,EAAE,CAAC,CAAC,EAAE,EAAE,CACnC,MAAM,CAAC,IAAI,CACT,IAAI,mBAAmB,CAAC;oBACtB,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,aAAa,CAAC,CAAC,IAAI,EAAE;iBAC9B,CAAC,CACH;gBACH,uBAAuB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC7B,MAAM,CAAC,IAAI,CACT,IAAI,mBAAmB,CAAC;oBACtB,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,iBAAiB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;iBAC3C,CAAC,CACH;gBACH,2BAA2B,EAAE,CAAC,CAAC,EAAE,EAAE,CACjC,MAAM,CAAC,IAAI,CACT,IAAI,mBAAmB,CAAC;oBACtB,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,qBAAqB,CAAC,CAAC,MAAM,EAAE;iBACxC,CAAC,CACH;gBACH,uBAAuB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC7B,MAAM,CAAC,IAAI,CACT,IAAI,mBAAmB,CAAC;oBACtB,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,uBAAuB,CAAC,CAAC,OAAO,EAAE;iBAC3C,CAAC,CACH;aACJ,CAAC,CACH,CAAC;YACF,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAChC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,0BAA0B,CAAC;oBAC7B,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,GAAG,MAAM,iCAAiC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;iBACjF,CAAC,CACH,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACvD,2DAA2D;gBAC3D,wDAAwD;gBACxD,2DAA2D;gBAC3D,2DAA2D;gBAC3D,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5D,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,0BAA0B,CAAC;wBAC7B,QAAQ,EAAE,QAAQ;wBAClB,IAAI,EAAE,aAAa;wBACnB,MAAM,EAAE,GAAG,MAAM,oDAAoD;qBACtE,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IACF,KAAK,aAAa,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,sBAAsB,CAC7B,MAA4C,EAC5C,MAAe;IAEf,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAgC,CAAC;QAC3C,OAAO,aAAa,CAAC;YACnB,GAAG,CAAC;YACJ,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;SACrE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,GAAG,MAAwD,CAAC;IACnE,OAAO,aAAa,CAAC;QACnB,GAAG,CAAC;QACJ,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;YAC3C,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;YAChC,CAAC,CAAC,CAAC,CAAC,aAAa;KACpB,CAAC,CAAC;AACL,CAAC"}

package/dist/testing/conformance/runner.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Conformance-suite runner.
+ *
+ * Orchestrates tiers A → E under one entrypoint so
+ * `pnpm -F @moltzap/protocol test:conformance` is the only command a CI
+ * job needs (AC11).
+ *
+ * Responsibilities:
+ *   - receive a real MoltZap server handle (built externally to preserve
+ *     AC13 one-way imports);
+ *   - build a Toxiproxy client when Tier D is in scope;
+ *   - pin fast-check seeds and export them on failure (AC10);
+ *   - tear everything down in reverse order.
+ */
+import { Effect, Ref, Scope } from "effect";
+import { type ToxiproxyClient } from "../toxics/client.js";
+import { RealServerAcquireError, ToxicControlError } from "../errors.js";
+/**
+ * Opaque handle to a running real MoltZap server. The conformance runner
+ * accepts this as an injected dependency so the protocol package has no
+ * compile-time import of `packages/server` (AC13). The consuming suite
+ * file supplies a concrete value built from `startCoreTestServer`.
+ */
+export interface RealServerHandle {
+    readonly wsUrl: string;
+    readonly baseUrl: string;
+    /** Teardown hook; the runner's Scope calls this on release. */
+    readonly close: () => Promise<void>;
+}
+export interface ConformanceRunOptions {
+    readonly tiers: ReadonlyArray<"A" | "B" | "C" | "D" | "E">;
+    /** Supplier for the real server; invoked once per run. */
+    readonly realServer: () => Promise<RealServerHandle>;
+    /** If provided, replay this exact fast-check seed (AC10 reproducibility). */
+    readonly replaySeed?: number;
+    /** Number of runs per property; fast-check default is 100. */
+    readonly numRuns?: number;
+    /** When `true`, bring up docker-compose Toxiproxy; else assume running. */
+    readonly manageToxiproxy?: boolean;
+    /** Toxiproxy control URL — defaults to `http://127.0.0.1:8474`. */
+    readonly toxiproxyUrl?: string;
+    /** Output directory for seed + toxic-config dump on failure. */
+    readonly artifactDir?: string;
+}
+export interface ConformanceRunContext {
+    readonly realServer: RealServerHandle;
+    readonly toxiproxy: ToxiproxyClient | null;
+    readonly opts: ConformanceRunOptions;
+    /** Seed to pin every property to. Exported on failure for replay. */
+    readonly seed: number;
+    /**
+     * Per-property artifact sink. The tier modules call `record` to stash a
+     * seed + toxic profile when a property fails; the suite post-process
+     * writes to `opts.artifactDir`.
+     */
+    readonly artifacts: Ref.Ref<ReadonlyArray<ConformanceArtifact>>;
+}
+export interface ConformanceArtifact {
+    readonly tierId: string;
+    readonly propId: string;
+    readonly seed: number;
+    readonly toxicProfile?: string;
+    readonly commandSequence?: ReadonlyArray<unknown>;
+    readonly captures?: ReadonlyArray<unknown>;
+}
+/**
+ * Acquire the full context (real server + optional Toxiproxy) under one
+ * Scope; Vitest's `beforeAll`/`afterAll` tick the scope.
+ */
+export declare function acquireRunContext(opts: ConformanceRunOptions): Effect.Effect<ConformanceRunContext, ToxicControlError | RealServerAcquireError, Scope.Scope>;
+/**
+ * Entry point the runner script calls. Iterates `opts.tiers` and writes a
+ * summary line per tier; the actual properties register themselves with
+ * Vitest via each tier module's `register*` functions — so this only
+ * orchestrates output + seed plumbing.
+ */
+export declare function runConformance(ctx: ConformanceRunContext): Effect.Effect<void>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/testing/conformance/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/testing/conformance/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC5C,OAAO,EAAuB,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGzE;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;IAC3D,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrD,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,mEAAmE;IACnE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;CAC5C;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,qBAAqB,GAC1B,MAAM,CAAC,MAAM,CACd,qBAAqB,EACrB,iBAAiB,GAAG,sBAAsB,EAC1C,KAAK,CAAC,KAAK,CACZ,CA2CA;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,qBAAqB,GACzB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAMrB"}

package/dist/testing/conformance/runner.js

@@ -0,0 +1,65 @@
+/**
+ * Conformance-suite runner.
+ *
+ * Orchestrates tiers A → E under one entrypoint so
+ * `pnpm -F @moltzap/protocol test:conformance` is the only command a CI
+ * job needs (AC11).
+ *
+ * Responsibilities:
+ *   - receive a real MoltZap server handle (built externally to preserve
+ *     AC13 one-way imports);
+ *   - build a Toxiproxy client when Tier D is in scope;
+ *   - pin fast-check seeds and export them on failure (AC10);
+ *   - tear everything down in reverse order.
+ */
+import { Effect, Ref, Scope } from "effect";
+import { makeToxiproxyClient } from "../toxics/client.js";
+import { RealServerAcquireError, ToxicControlError } from "../errors.js";
+import { conformanceNumRunsFromEnv } from "./env.js";
+/**
+ * Acquire the full context (real server + optional Toxiproxy) under one
+ * Scope; Vitest's `beforeAll`/`afterAll` tick the scope.
+ */
+export function acquireRunContext(opts) {
+    return Effect.gen(function* () {
+        const effectiveOpts = {
+            ...opts,
+            numRuns: opts.numRuns ?? conformanceNumRunsFromEnv(),
+        };
+        const seed = effectiveOpts.replaySeed ??
+            Number(process.env.FC_SEED ?? Date.now() & 0x7fffffff);
+        const artifacts = yield* Ref.make([]);
+        const realServer = yield* Effect.acquireRelease(Effect.tryPromise({
+            try: () => opts.realServer(),
+            catch: (cause) => new RealServerAcquireError({ cause }),
+        }), (handle) => Effect.tryPromise({
+            try: () => handle.close(),
+            catch: () => new Error("realServer.close() threw"),
+        }).pipe(Effect.orElseSucceed(() => undefined), Effect.asVoid));
+        let toxiproxy = null;
+        if (effectiveOpts.tiers.includes("D")) {
+            const url = effectiveOpts.toxiproxyUrl ?? "http://127.0.0.1:8474";
+            toxiproxy = yield* makeToxiproxyClient({ apiUrl: url });
+            yield* toxiproxy.ping.pipe(Effect.retry({ times: 10, schedule: undefined }));
+        }
+        return {
+            realServer,
+            toxiproxy,
+            opts: effectiveOpts,
+            seed,
+            artifacts,
+        };
+    });
+}
+/**
+ * Entry point the runner script calls. Iterates `opts.tiers` and writes a
+ * summary line per tier; the actual properties register themselves with
+ * Vitest via each tier module's `register*` functions — so this only
+ * orchestrates output + seed plumbing.
+ */
+export function runConformance(ctx) {
+    return Effect.sync(() => {
+        console.log(`[conformance] seed=${ctx.seed} tiers=${ctx.opts.tiers.join(",")} toxiproxy=${ctx.toxiproxy !== null}`);
+    });
+}
+//# sourceMappingURL=runner.js.map

package/dist/testing/conformance/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/testing/conformance/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAwB,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AAsDrD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAA2B;IAM3B,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,aAAa,GAAG;YACpB,GAAG,IAAI;YACP,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,yBAAyB,EAAE;SACrD,CAAC;QACF,MAAM,IAAI,GACR,aAAa,CAAC,UAAU;YACxB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAqC,EAAE,CAAC,CAAC;QAE1E,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CAC7C,MAAM,CAAC,UAAU,CAAC;YAChB,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE;YAC5B,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC;SACxD,CAAC,EACF,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,UAAU,CAAC;YAChB,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;YACzB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC;SACnD,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EACrC,MAAM,CAAC,MAAM,CACd,CACJ,CAAC;QAEF,IAAI,SAAS,GAA2B,IAAI,CAAC;QAC7C,IAAI,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,aAAa,CAAC,YAAY,IAAI,uBAAuB,CAAC;YAClE,SAAS,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACxD,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CACxB,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CACjD,CAAC;QACJ,CAAC;QAED,OAAO;YACL,UAAU;YACV,SAAS;YACT,IAAI,EAAE,aAAa;YACnB,IAAI;YACJ,SAAS;SACsB,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,GAA0B;IAE1B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACtB,OAAO,CAAC,GAAG,CACT,sBAAsB,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,CACvG,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/testing/conformance/schema-conformance.d.ts

@@ -0,0 +1,30 @@
+import type { ConformanceRunContext } from "./runner.js";
+/**
+ * Valid request ⇒ valid-shape response. Drives fast-check RPC calls
+ * through a real TestClient against the real server and asserts every
+ * returned frame parses against `ResponseFrameSchema`.
+ */
+export declare function registerRequestWellFormedness(ctx: ConformanceRunContext): void;
+/**
+ * Valid event frame round-trips the codec cleanly.
+ *
+ * `@pure-codec` — does NOT drive a real server or real client. Spec A2's
+ * "accepted by a real client" assertion requires a TestServer + real
+ * client driver; that property lives in the consumer package (e.g.,
+ * `packages/client` or `moltzap-arena`) and is tracked under #186.
+ *
+ * Tightened per architect §4.4: predicate demands `Right` AND schema
+ * check of the specific event variant — the previous `Right || Left`
+ * shape was a tautology over the union.
+ */
+export declare function registerEventWellFormedness(ctx: ConformanceRunContext): void;
+/** parse(serialize(frame)) ≡ frame — pure codec round-trip. */
+export declare function registerRoundTripIdentity(ctx: ConformanceRunContext): void;
+/**
+ * Malformed bytes on the wire → the server drops or returns a typed
+ * error, never crashes. Drives `sendMalformed` through a real WS and
+ * asserts the observable outcome.
+ */
+export declare function registerMalformedFrameHandling(ctx: ConformanceRunContext): void;
+export declare function registerRpcMapCoverage(ctx: ConformanceRunContext): void;
+//# sourceMappingURL=schema-conformance.d.ts.map

package/dist/testing/conformance/schema-conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-conformance.d.ts","sourceRoot":"","sources":["../../../src/testing/conformance/schema-conformance.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAWzD;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,qBAAqB,GACzB,IAAI,CAqEN;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAyB5E;AAED,+DAA+D;AAC/D,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CA6B1E;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,qBAAqB,GACzB,IAAI,CAyDN;AAgBD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAqEvE"}