milestone 17: real deadlines, validator holes, upstream editor, trusted proxies, contract samples, badvers

AGENTS.md

@@ -64,3 +64,17 @@ One trap: running a cached test binary by hand with `--listen=-` aborts with
 `internal test runner failure: EndOfStream`. That is not a teardown bug; the
 IPC runner is talking to a closed stdin because no build runner is on the other
 end. Run the binary with no arguments to get the plain stdio report.
+
+## Regenerating the contract samples
+
+`web/src/lib/contractSamples.gen.ts` is a committed golden of canonicalized
+API responses, byte-compared against the live server by a `-Dintegration`
+test and type-checked by `tsc`. After a deliberate API contract change,
+regenerate it with:
+
+```
+zig build test -Dintegration -Dcontract-samples-out="$PWD/web/src/lib/contractSamples.gen.ts"
+```
+
+then update `web/src/lib/types.ts` to match and commit both. Never edit the
+generated file by hand.