Fix next failing tool from audit to enforce strict Workspace V2 contract - PR_26124_002-tool-fix-next-audit

Author: DavidQ

docs/dev/codex_commands.md

@@ -278,3 +278,10 @@ PR_26123_001-project-instructions-update
 ```bash
 npx @openai/codex run --model gpt-5.3-codex --reasoning medium "Implement PROJECT_INSTRUCTIONS update: add PR naming standard, update ChatGPT output contract (command + commit comment + Playwright coverage + manual test steps), and enforce ChatGPT non-ZIP ownership language while keeping Codex ZIP ownership intact."
 ```
+
+---
+PR_26124_002-palette-manager-strict-payload-guard
+
+```bash
+npx @openai/codex run --model gpt-5.3-codex --reasoning medium "Implement PR_26124_002: fix the next failing tool from tool_completion_audit.md with a minimal single-tool palette-manager-v2 guard that rejects legacy payloadJson.paletteDocument.colors before render and validates required swatches contract."
+```

docs/dev/commit_comment.txt

@@ -1 +1 @@
-Add PR naming standard and tighten ChatGPT output contract (command, commit, Playwright coverage, manual tests) with Codex-only ZIP ownership - PR_26123_001-project-instructions-update
+Reject legacy paletteDocument.colors in Palette Manager V2 before render and require swatches contract - PR_26124_002-palette-manager-strict-payload-guard

docs/dev/reports/PR_26124_002_report.md

@@ -0,0 +1,25 @@
+# PR_26124_002 Report
+
+## Scope
+- Exactly one tool updated: `palette-manager-v2`
+- No schema changes
+- No other tool changes
+
+## Change
+- File: `tools/palette-manager-v2/index.js`
+- Added pre-render invalid JSON guard:
+  - reject `payloadJson.paletteDocument.colors`
+  - require `payloadJson.paletteDocument.swatches`
+  - visible actionable error emitted before render
+
+## Requirements Check
+- Valid JSON (`payloadJson.paletteDocument.swatches`) still loads and renders.
+- Invalid JSON (`payloadJson.paletteDocument.colors`) now rejects before render with clear visible error.
+- No fallback/default injection added.
+- Workspace payload contract remains `payloadJson` and read-only in this tool.
+- Launch paths unchanged (sample/workspace).
+
+## Validation
+- `node --check tools/palette-manager-v2/index.js` -> PASS
+- `npm run test:workspace-v2` -> PASS
+  - `Workspace V2 Playwright Gate Summary: passed=1 failed=0`

docs/pr/PR_26124_002_PALETTE_MANAGER_STRICT_PAYLOAD_GUARD/BUILD_PR.md

@@ -0,0 +1,22 @@
+# BUILD_PR — PR_26124_002
+
+## Scope
+- Single tool only: `palette-manager-v2`
+- Minimal surgical fix
+
+## Implemented
+- Added strict validation in `loadContract`:
+  - if `payloadJson.paletteDocument.colors` exists, reject session before render with a clear error:
+    - `payloadJson.paletteDocument.colors is not supported; use payloadJson.paletteDocument.swatches.`
+
+## Why
+- Keeps payload contract strict and deterministic.
+- Prevents legacy invalid palette JSON from rendering.
+
+## Validation
+- `node --check tools/palette-manager-v2/index.js` -> PASS
+- `npm run test:workspace-v2` -> PASS (`1 passed`, `failed=0`)
+
+## Samples Smoke
+- Skipped by design.
+- Reason: single-tool runtime guard update with targeted validation and no shared sample framework changes.

docs/pr/PR_26124_002_PALETTE_MANAGER_STRICT_PAYLOAD_GUARD/PLAN_PR.md

@@ -0,0 +1,24 @@
+# PLAN_PR — PR_26124_002
+
+## Goal
+Fix the next failing tool from `tool_completion_audit.md` with a minimal single-tool change.
+
+## Tool
+- `palette-manager-v2`
+
+## Scoped Issue
+- Legacy palette payload key `payloadJson.paletteDocument.colors` must be rejected before render.
+
+## Planned Change
+1. Add an explicit pre-render validation guard in `tools/palette-manager-v2/index.js`:
+   - reject `payloadJson.paletteDocument.colors`
+   - show clear visible actionable error
+
+## Out of Scope
+- No schema edits
+- No other tool edits
+- No new features
+
+## Validation
+- `node --check tools/palette-manager-v2/index.js`
+- `npm run test:workspace-v2`

tools/palette-manager-v2/index.js

@@ -182,6 +182,10 @@ class PaletteManagerV2 {
       this.renderError("Palette Manager V2 session data is invalid. Expected payloadJson.paletteDocument.");
       return;
     }
+    if (Object.prototype.hasOwnProperty.call(versionCheck.payload.payloadJson.paletteDocument, "colors")) {
+      this.renderError("Palette Manager V2 session data is invalid. payloadJson.paletteDocument.colors is not supported; use payloadJson.paletteDocument.swatches.");
+      return;
+    }
     this.renderPalette(versionCheck.payload.payloadJson.paletteDocument, versionCheck.payload);
   }