@ggui-ai/protocol 0.2.0-alpha.3 → 0.2.0-alpha.4

package/dist/types/handshake-suggestion.d.ts

@@ -205,11 +205,17 @@ export interface HandshakeSuggestion {
      */
     readonly amendments?: SuggestionAmendments;
     /**
-     * Populated iff validators ran AND produced findings. On `origin:
-     * 'cache'` these surface as a soft warning (the agent's draft
-     * WOULD have had issues, but the cached blueprint is being served);
-     * on `agent` / `synth` they're absent (agent path's validators
-     * passed; synth path's amendments already addressed them).
+     * Deterministic-gate findings surfaced to the agent so it learns what
+     * its draft got wrong (even though the server repaired it). Populated:
+     *   - `origin: 'agent'` — hygiene WARN findings on the (already-valid)
+     *     draft, if any.
+     *   - `origin: 'synth'` — the ERROR findings that rejected the draft
+     *     and triggered the repair loop.
+     *   - `origin: 'cache'` — absent (a registered blueprint is served;
+     *     the draft was not the basis).
+     * The repaired contract itself is delivered via `blueprintMeta` /
+     * the handshake's stored effectiveContract — these findings are
+     * advisory, not the contract.
      */
     readonly validationFindings?: readonly SuggestionFinding[];
 }

package/dist/types/handshake-suggestion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handshake-suggestion.d.ts","sourceRoot":"","sources":["../../src/types/handshake-suggestion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,+DAA+D;QAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,iEAAiE;QACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,2CAA2C;QAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE;YAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;SAAE,CAAC;QACrE,oCAAoC;QACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,SAAS,GAAG,SAAS,WAAW,EAAE,CAAC;AAE/C,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GACxE;IAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC;AAEjF;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAC3C;;;;;;OAMG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC5D;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;CAAE,CAAC;AAE3E;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,SAAS,CAIpE;AA2DD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,sBAAsB,GAAG,SAAS,SAAS,EAAE,CAAC"}
+{"version":3,"file":"handshake-suggestion.d.ts","sourceRoot":"","sources":["../../src/types/handshake-suggestion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,+DAA+D;QAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,iEAAiE;QACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,2CAA2C;QAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE;YAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;SAAE,CAAC;QACrE,oCAAoC;QACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,SAAS,GAAG,SAAS,WAAW,EAAE,CAAC;AAE/C,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GACxE;IAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC;AAEjF;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAC3C;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC5D;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;CAAE,CAAC;AAE3E;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,SAAS,CAIpE;AA2DD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,sBAAsB,GAAG,SAAS,SAAS,EAAE,CAAC"}

package/dist/validation/hygiene-rules.d.ts

@@ -237,8 +237,11 @@ export declare function checkRetiredContractFields(contract: DataContract): Hygi
 /**
  * Run every WIRE-side hygiene rule on a `DataContract`. Aggregates
  * warnings; order is stable (orphans → usage → example → gadget
- * hook-names → duplicate-hook → retired fields) so authoring tools
- * render a predictable checklist.
+ * hook-names → duplicate-hook) so authoring tools render a predictable
+ * checklist. Retired-field detection is NOT here — it is promoted to an
+ * ERROR phase (`phaseRetired` in lint-contract.ts); the detector
+ * `checkRetiredContractFields` stays exported for the author-time
+ * surface and the push-gate assert.
  *
  * Registry-side gadget lints (`lintGadgetCatalog`) are NOT run here:
  * they need an `App.gadgets` descriptor array, not a contract, and

package/dist/validation/hygiene-rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hygiene-rules.d.ts","sourceRoot":"","sources":["../../src/validation/hygiene-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAW7E;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AACnE,eAAO,MAAM,4BAA4B,iCAAiC,CAAC;AAC3E,eAAO,MAAM,2BAA2B,gCAAgC,CAAC;AAEzE,eAAO,MAAM,8BAA8B,mCAAmC,CAAC;AAC/E,eAAO,MAAM,8BAA8B,mCAAmC,CAAC;AAC/E,eAAO,MAAM,4BAA4B,iCAAiC,CAAC;AAC3E,eAAO,MAAM,8BAA8B,mCAAmC,CAAC;AAC/E,eAAO,MAAM,uCAAuC,4CACT,CAAC;AAC5C,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAE7E;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,CAIvD,CAAC;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAO3D,CAAC;AAoBX;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,0RAoBzB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAsB1E;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAoCD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,YAAY,GACrB,cAAc,EAAE,CAkBlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,YAAY,GAAG,cAAc,EAAE,CAmB1E;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,YAAY,GACrB,cAAc,EAAE,CAiBlB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,YAAY,GACrB,cAAc,EAAE,CAgClB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,YAAY,GACrB,cAAc,EAAE,CAmBlB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,SAAS,gBAAgB,EAAE,GACvC,cAAc,EAAE,CAoHlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,YAAY,GACrB,cAAc,EAAE,CAiBlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,YAAY,GACrB,cAAc,EAAE,CASlB"}
+{"version":3,"file":"hygiene-rules.d.ts","sourceRoot":"","sources":["../../src/validation/hygiene-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAW7E;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AACnE,eAAO,MAAM,4BAA4B,iCAAiC,CAAC;AAC3E,eAAO,MAAM,2BAA2B,gCAAgC,CAAC;AAEzE,eAAO,MAAM,8BAA8B,mCAAmC,CAAC;AAC/E,eAAO,MAAM,8BAA8B,mCAAmC,CAAC;AAC/E,eAAO,MAAM,4BAA4B,iCAAiC,CAAC;AAC3E,eAAO,MAAM,8BAA8B,mCAAmC,CAAC;AAC/E,eAAO,MAAM,uCAAuC,4CACT,CAAC;AAC5C,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAE7E;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,CAIvD,CAAC;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAO3D,CAAC;AAoBX;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,0RAoBzB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAsB1E;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAoCD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,YAAY,GACrB,cAAc,EAAE,CAkBlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,YAAY,GAAG,cAAc,EAAE,CAmB1E;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,YAAY,GACrB,cAAc,EAAE,CAiBlB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,YAAY,GACrB,cAAc,EAAE,CAgClB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,YAAY,GACrB,cAAc,EAAE,CAmBlB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,SAAS,gBAAgB,EAAE,GACvC,cAAc,EAAE,CAoHlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,YAAY,GACrB,cAAc,EAAE,CAiBlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,YAAY,GACrB,cAAc,EAAE,CAYlB"}

package/dist/validation/hygiene-rules.js

@@ -543,8 +543,11 @@ export function checkRetiredContractFields(contract) {
 /**
  * Run every WIRE-side hygiene rule on a `DataContract`. Aggregates
  * warnings; order is stable (orphans → usage → example → gadget
- * hook-names → duplicate-hook → retired fields) so authoring tools
- * render a predictable checklist.
+ * hook-names → duplicate-hook) so authoring tools render a predictable
+ * checklist. Retired-field detection is NOT here — it is promoted to an
+ * ERROR phase (`phaseRetired` in lint-contract.ts); the detector
+ * `checkRetiredContractFields` stays exported for the author-time
+ * surface and the push-gate assert.
  *
  * Registry-side gadget lints (`lintGadgetCatalog`) are NOT run here:
  * they need an `App.gadgets` descriptor array, not a contract, and
@@ -559,6 +562,9 @@ export function checkHygiene(contract) {
         ...checkMissingExample(contract),
         ...checkGadgetHookNames(contract),
         ...checkDuplicateGadgetHooks(contract),
-        ...checkRetiredContractFields(contract),
+        // Retired-field detection is promoted to an ERROR phase
+        // (`phaseRetired` in lint-contract.ts) — not a hygiene warning.
+        // `checkRetiredContractFields` stays exported for the author-time
+        // surface + the push-gate assert.
     ];
 }

package/dist/validation/lint-contract.d.ts

@@ -17,9 +17,11 @@
  *
  *   ```
  *   phase 1: shape          (zod wire-shape validation)
- *   phase 2: references     (CTR_REF_*, CTR_DUP_NAME, CTR_RESERVED_NAME)
- *   phase 3: schema compat  (CTR_SCHEMA_INCOMPAT)
- *   phase 4: hygiene        (LINT_*  — graded, warnings only today)
+ *   phase 2: retired        (CTR_RETIRED_FIELD — dead top-level fields)
+ *   phase 3: schema-meta    (CTR_SCHEMA_META_INVALID — Ajv strict on inner schemas)
+ *   phase 4: references     (CTR_REF_*, CTR_DUP_NAME, CTR_RESERVED_NAME)
+ *   phase 5: schema compat  (CTR_SCHEMA_INCOMPAT)
+ *   phase 6: hygiene        (LINT_*  — graded, warnings only)
  *   ```
  *
  * Errors are reported one phase at a time during strict validation so
@@ -28,7 +30,6 @@
  * graded mode emits every issue at once so authoring tools can
  * present a complete checklist.
  */
-import type { DataContract } from '../types/data-contract';
 /**
  * Severity classification for a {@link ContractIssue}. Strict
  * `validateContract` throws on `'error'`; graded `lintContract`
@@ -40,7 +41,7 @@ export type ContractIssueSeverity = 'error' | 'warn';
  * authoring tools can render issues grouped by phase + drive the
  * "fix one phase at a time" UX.
  */
-export type ContractLintPhase = 'shape' | 'references' | 'schema-compat' | 'hygiene';
+export type ContractLintPhase = 'shape' | 'retired' | 'schema-meta' | 'references' | 'schema-compat' | 'hygiene';
 /**
  * One observation about a contract from the linter's perspective.
  *
@@ -114,7 +115,7 @@ export declare class ContractValidationError extends Error {
  * Hygiene-only contracts (warnings without errors) pass the strict
  * gate. Use {@link lintContract} when warnings matter.
  */
-export declare function validateContract(contract: DataContract): void;
+export declare function validateContract(contract: unknown): void;
 /**
  * Graded-mode linter. Runs ALL phases unconditionally and returns
  * errors + warnings partitioned. Suitable for authoring tools that
@@ -126,5 +127,5 @@ export declare function validateContract(contract: DataContract): void;
  * author seeing a phase-2 reference error also sees the phase-4
  * hygiene warnings on the same contract.
  */
-export declare function lintContract(contract: DataContract): ContractLintResult;
+export declare function lintContract(contract: unknown): ContractLintResult;
 //# sourceMappingURL=lint-contract.d.ts.map

package/dist/validation/lint-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lint-contract.d.ts","sourceRoot":"","sources":["../../src/validation/lint-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAgB3D;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,YAAY,GACZ,eAAe,GACf,SAAS,CAAC;AAEd;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;CAC7C;AAED;;;;;;;;GAQG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EAAG,4BAA4B,CAAU;IACtD,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;gBAE9B,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,aAAa,EAAE;CAOvE;AAwHD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAiB7D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,YAAY,GAAG,kBAAkB,CAsBvE"}
+{"version":3,"file":"lint-contract.d.ts","sourceRoot":"","sources":["../../src/validation/lint-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAwBH;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,SAAS,GACT,aAAa,GACb,YAAY,GACZ,eAAe,GACf,SAAS,CAAC;AAEd;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;CAC7C;AAED;;;;;;;;GAQG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EAAG,4BAA4B,CAAU;IACtD,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;gBAE9B,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,aAAa,EAAE;CAOvE;AA4KD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CA2BxD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,OAAO,GAAG,kBAAkB,CAyBlE"}

package/dist/validation/lint-contract.js

@@ -17,9 +17,11 @@
  *
  *   ```
  *   phase 1: shape          (zod wire-shape validation)
- *   phase 2: references     (CTR_REF_*, CTR_DUP_NAME, CTR_RESERVED_NAME)
- *   phase 3: schema compat  (CTR_SCHEMA_INCOMPAT)
- *   phase 4: hygiene        (LINT_*  — graded, warnings only today)
+ *   phase 2: retired        (CTR_RETIRED_FIELD — dead top-level fields)
+ *   phase 3: schema-meta    (CTR_SCHEMA_META_INVALID — Ajv strict on inner schemas)
+ *   phase 4: references     (CTR_REF_*, CTR_DUP_NAME, CTR_RESERVED_NAME)
+ *   phase 5: schema compat  (CTR_SCHEMA_INCOMPAT)
+ *   phase 6: hygiene        (LINT_*  — graded, warnings only)
  *   ```
  *
  * Errors are reported one phase at a time during strict validation so
@@ -32,7 +34,8 @@ import { dataContractSchema } from '../schemas/data-contract.js';
 import { checkCrossReferences, } from './cross-references.js';
 import { checkNameInvariants, } from './name-invariants.js';
 import { checkSchemaCompat, } from './schema-compat-invariants.js';
-import { checkHygiene } from './hygiene-rules.js';
+import { checkContractSchemasValid } from './schema-meta-validation.js';
+import { checkHygiene, checkRetiredContractFields, } from './hygiene-rules.js';
 /**
  * Strict-mode failure. Carries the offending phase + every issue
  * the failing phase produced so error renderers can show every fix
@@ -60,8 +63,8 @@ export class ContractValidationError extends Error {
 function phaseShape(contract) {
     const parsed = dataContractSchema.safeParse(contract);
     if (parsed.success)
-        return [];
-    return zodErrorToIssues(parsed.error);
+        return { issues: [], parsed: parsed.data };
+    return { issues: zodErrorToIssues(parsed.error), parsed: null };
 }
 function zodErrorToIssues(error) {
     return error.issues.map((issue) => ({
@@ -89,6 +92,52 @@ function zodIssueCode(zodCode) {
     }
 }
 // =============================================================================
+// Phase — retired fields (CTR_RETIRED_FIELD)
+// =============================================================================
+/**
+ * Retired top-level field carriers (`wiredTools`, `libraries`,
+ * `dispatch`, …) are a fatal contract bug: the field rides through the
+ * `.passthrough()` schema but names dead protocol surface. Promoted
+ * from a hygiene WARNING to an ERROR so it routes through the same gate
+ * as every other contract error — the handshake repair loop remaps it
+ * (an LLM correctly re-nests `wiredTools` → `agentCapabilities.tools`),
+ * and `ggui_render`'s override path rejects it. Shares the one detector
+ * (`checkRetiredContractFields`) with the author-time surface + the
+ * push-gate assert, so the retired vocabulary can't drift across sites.
+ */
+function phaseRetired(contract) {
+    return checkRetiredContractFields(contract).map((w) => ({
+        code: 'CTR_RETIRED_FIELD',
+        severity: 'error',
+        phase: 'retired',
+        path: w.path,
+        message: w.message,
+        ...(w.fixHint !== undefined ? { fixHint: w.fixHint } : {}),
+    }));
+}
+// =============================================================================
+// Phase — schema-meta (CTR_SCHEMA_META_INVALID, Ajv strict meta-validation)
+// =============================================================================
+/**
+ * Inner JSON Schema meta-validation — each `schema:` field must compile
+ * under Ajv strict mode. Distinct from phase-1 shape: zod validates the
+ * WRAPPER shape, but the wrapped JSON Schema rides through
+ * `.passthrough()` unvalidated. Runs before references / schema-compat,
+ * which read these schemas. This is the check the push/handshake assert
+ * set had that `validateContract` was previously missing — folding it in
+ * here is what makes the strict gate complete (and therefore safe to use
+ * as the single boundary gate).
+ */
+function phaseSchemaMeta(contract) {
+    return checkContractSchemasValid(contract).map((v) => ({
+        code: 'CTR_SCHEMA_META_INVALID',
+        severity: 'error',
+        phase: 'schema-meta',
+        path: v.field,
+        message: v.message,
+    }));
+}
+// =============================================================================
 // Phase 2 — references (CTR_REF_*, CTR_DUP_NAME, CTR_RESERVED_NAME)
 // =============================================================================
 function phaseReferences(contract) {
@@ -171,18 +220,29 @@ function hygieneWarningToIssue(w) {
  * gate. Use {@link lintContract} when warnings matter.
  */
 export function validateContract(contract) {
-    const shapeIssues = phaseShape(contract);
-    if (shapeIssues.length > 0) {
-        throw new ContractValidationError('shape', shapeIssues);
+    const shape = phaseShape(contract);
+    if (shape.issues.length > 0) {
+        throw new ContractValidationError('shape', shape.issues);
+    }
+    // Shape passed ⇒ a parsed DataContract is available for the deeper,
+    // type-dependent phases. The null check narrows `c` to DataContract
+    // without a cast (unreachable: no shape issues ⇒ parsed present).
+    const c = shape.parsed;
+    if (c === null)
+        return;
+    const retiredIssues = phaseRetired(c);
+    if (retiredIssues.length > 0) {
+        throw new ContractValidationError('retired', retiredIssues);
+    }
+    const schemaMetaIssues = phaseSchemaMeta(c);
+    if (schemaMetaIssues.length > 0) {
+        throw new ContractValidationError('schema-meta', schemaMetaIssues);
     }
-    // After phase 1 we know the contract structurally parses; safe to
-    // cast through into the phase-2 / phase-3 helpers (they accept
-    // `DataContract` directly).
-    const refIssues = phaseReferences(contract);
+    const refIssues = phaseReferences(c);
     if (refIssues.length > 0) {
         throw new ContractValidationError('references', refIssues);
     }
-    const compatIssues = phaseSchemaCompat(contract);
+    const compatIssues = phaseSchemaCompat(c);
     if (compatIssues.length > 0) {
         throw new ContractValidationError('schema-compat', compatIssues);
     }
@@ -201,18 +261,21 @@ export function validateContract(contract) {
  */
 export function lintContract(contract) {
     const issues = [];
-    issues.push(...phaseShape(contract));
-    // Phase 2 + 3 produce shape-dependent errors. When the shape
-    // phase already failed, the contract may not match the type
-    // signatures these phases assume — skip downstream phases in that
-    // case to avoid throwing during the lint run. Authoring tools see
-    // "fix shape first" via the shape issues; once those are clean
-    // the next `lintContract` run reaches the deeper phases.
-    if (issues.length === 0) {
-        issues.push(...phaseReferences(contract));
-        issues.push(...phaseSchemaCompat(contract));
+    const shape = phaseShape(contract);
+    issues.push(...shape.issues);
+    // Phases beyond shape are shape-dependent and need a parsed
+    // DataContract. When shape failed, skip them (the contract may not
+    // match the type signatures these phases assume); authoring tools see
+    // "fix shape first" via the shape issues, and the next run reaches the
+    // deeper phases once shape is clean.
+    if (shape.issues.length === 0 && shape.parsed !== null) {
+        const c = shape.parsed;
+        issues.push(...phaseRetired(c));
+        issues.push(...phaseSchemaMeta(c));
+        issues.push(...phaseReferences(c));
+        issues.push(...phaseSchemaCompat(c));
+        issues.push(...phaseHygiene(c));
     }
-    issues.push(...phaseHygiene(contract));
     const errors = [];
     const warnings = [];
     for (const issue of issues) {

package/dist/validation/schema-meta-validation.d.ts

@@ -50,11 +50,24 @@ export declare class ContractSchemaMetaError extends Error {
     constructor(violations: readonly SchemaMetaViolation[]);
 }
 /**
- * Walks the contract's six inner JSON Schema fields and asserts
- * each compiles cleanly under Ajv's strict mode. Throws
- * {@link ContractSchemaMetaError} on the first push attempt that
- * smuggles a malformed schema; collects every offender in one pass
- * before throwing so the agent sees the full list.
+ * Walks the contract's six inner JSON Schema fields and collects a
+ * {@link SchemaMetaViolation} for each that does not compile cleanly
+ * under Ajv's strict mode (unknown keyword, missing `items`, a
+ * non-schema `properties` value, or a missing `schema:` wrapper). Pure
+ * check — returns the full list so callers can either repair (the
+ * handshake repair loop) or throw (see {@link assertContractSchemasValid}).
+ *
+ * This is the inner-schema validity check folded into the unified
+ * `validateContract` gate (lint-contract.ts `phaseSchemaMeta`) — the
+ * one check the strict linter was previously missing relative to the
+ * push/handshake assert set.
+ */
+export declare function checkContractSchemasValid(contract: DataContract): SchemaMetaViolation[];
+/**
+ * Throwable wrapper around {@link checkContractSchemasValid}. Throws
+ * {@link ContractSchemaMetaError} (collecting every malformed schema in
+ * one pass) when any inner JSON Schema fails Ajv strict-mode
+ * compilation. No-op when all schemas are well-formed.
  */
 export declare function assertContractSchemasValid(contract: DataContract): void;
 //# sourceMappingURL=schema-meta-validation.d.ts.map

package/dist/validation/schema-meta-validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-meta-validation.d.ts","sourceRoot":"","sources":["../../src/validation/schema-meta-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAG3D,MAAM,WAAW,mBAAmB;IAClC,sFAAsF;IACtF,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EAAG,yBAAyB,CAAU;IACnD,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,UAAU,EAAE,SAAS,mBAAmB,EAAE;CAWvD;AAmCD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAuDvE"}
+{"version":3,"file":"schema-meta-validation.d.ts","sourceRoot":"","sources":["../../src/validation/schema-meta-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAG3D,MAAM,WAAW,mBAAmB;IAClC,sFAAsF;IACtF,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EAAG,yBAAyB,CAAU;IACnD,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,UAAU,EAAE,SAAS,mBAAmB,EAAE;CAWvD;AAmCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,YAAY,GACrB,mBAAmB,EAAE,CAqDvB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAKvE"}

package/dist/validation/schema-meta-validation.js

@@ -81,13 +81,19 @@ function truncate(s, max) {
     return s.length > max ? `${s.slice(0, max - 1)}…` : s;
 }
 /**
- * Walks the contract's six inner JSON Schema fields and asserts
- * each compiles cleanly under Ajv's strict mode. Throws
- * {@link ContractSchemaMetaError} on the first push attempt that
- * smuggles a malformed schema; collects every offender in one pass
- * before throwing so the agent sees the full list.
+ * Walks the contract's six inner JSON Schema fields and collects a
+ * {@link SchemaMetaViolation} for each that does not compile cleanly
+ * under Ajv's strict mode (unknown keyword, missing `items`, a
+ * non-schema `properties` value, or a missing `schema:` wrapper). Pure
+ * check — returns the full list so callers can either repair (the
+ * handshake repair loop) or throw (see {@link assertContractSchemasValid}).
+ *
+ * This is the inner-schema validity check folded into the unified
+ * `validateContract` gate (lint-contract.ts `phaseSchemaMeta`) — the
+ * one check the strict linter was previously missing relative to the
+ * push/handshake assert set.
  */
-export function assertContractSchemasValid(contract) {
+export function checkContractSchemasValid(contract) {
     const violations = [];
     if (contract.propsSpec?.properties) {
         for (const [name, entry] of Object.entries(contract.propsSpec.properties)) {
@@ -125,6 +131,16 @@ export function assertContractSchemasValid(contract) {
             }
         }
     }
+    return violations;
+}
+/**
+ * Throwable wrapper around {@link checkContractSchemasValid}. Throws
+ * {@link ContractSchemaMetaError} (collecting every malformed schema in
+ * one pass) when any inner JSON Schema fails Ajv strict-mode
+ * compilation. No-op when all schemas are well-formed.
+ */
+export function assertContractSchemasValid(contract) {
+    const violations = checkContractSchemasValid(contract);
     if (violations.length > 0) {
         throw new ContractSchemaMetaError(violations);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ggui-ai/protocol",
-  "version": "0.2.0-alpha.3",
+  "version": "0.2.0-alpha.4",
   "description": "ggui protocol types — events, renders, WebSocket, MCP, LLM models",
   "license": "Apache-2.0",
   "keywords": [