@bgord/bun 1.4.21 → 1.4.24

package/dist/visitor-id-hash-hono.adapter.d.ts

@@ -3,6 +3,6 @@ import type { VisitorIdPort } from "./visitor-id.port";
 export declare class VisitorIdHashHonoAdapter implements VisitorIdPort {
     private readonly delegate;
     constructor(context: Context);
-    get(): Promise<string>;
+    get(): Promise<string & import("zod").$brand<"VisitorId">>;
 }
 //# sourceMappingURL=visitor-id-hash-hono.adapter.d.ts.map

package/dist/visitor-id-hash-hono.adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"visitor-id-hash-hono.adapter.d.ts","sourceRoot":"","sources":["../src/visitor-id-hash-hono.adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvD,qBAAa,wBAAyB,YAAW,aAAa;IAC5D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;gBAEpC,OAAO,EAAE,OAAO;IAItB,GAAG;CAGV"}
+{"version":3,"file":"visitor-id-hash-hono.adapter.d.ts","sourceRoot":"","sources":["../src/visitor-id-hash-hono.adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAIvD,qBAAa,wBAAyB,YAAW,aAAa;IAC5D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;gBAEpC,OAAO,EAAE,OAAO;IAItB,GAAG;CAGV"}

package/dist/visitor-id-hash-hono.adapter.js

@@ -1,4 +1,5 @@
 import { ClientFromHonoAdapter } from "./client-from-hono.adapter";
+import { VisitorId } from "./visitor-id.vo";
 import { VisitorIdHashAdapter } from "./visitor-id-hash.adapter";
 export class VisitorIdHashHonoAdapter {
     delegate;
@@ -6,7 +7,7 @@ export class VisitorIdHashHonoAdapter {
         this.delegate = new VisitorIdHashAdapter(ClientFromHonoAdapter.extract(context));
     }
     async get() {
-        return this.delegate.get();
+        return VisitorId.parse(await this.delegate.get());
     }
 }
 //# sourceMappingURL=visitor-id-hash-hono.adapter.js.map

package/dist/visitor-id-hash-hono.adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"visitor-id-hash-hono.adapter.js","sourceRoot":"","sources":["../src/visitor-id-hash-hono.adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,OAAO,wBAAwB;IAClB,QAAQ,CAAuB;IAEhD,YAAY,OAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,oBAAoB,CAAC,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,GAAG;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;IAC7B,CAAC;CACF"}
+{"version":3,"file":"visitor-id-hash-hono.adapter.js","sourceRoot":"","sources":["../src/visitor-id-hash-hono.adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,OAAO,wBAAwB;IAClB,QAAQ,CAAuB;IAEhD,YAAY,OAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,oBAAoB,CAAC,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,GAAG;QACP,OAAO,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/visitor-id-hash.adapter.d.ts

@@ -3,6 +3,6 @@ import type { VisitorIdPort } from "./visitor-id.port";
 export declare class VisitorIdHashAdapter implements VisitorIdPort {
     private readonly client;
     constructor(client: Client);
-    get(): Promise<string>;
+    get(): Promise<string & import("zod").$brand<"VisitorId">>;
 }
 //# sourceMappingURL=visitor-id-hash.adapter.d.ts.map

package/dist/visitor-id-hash.adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"visitor-id-hash.adapter.d.ts","sourceRoot":"","sources":["../src/visitor-id-hash.adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,qBAAa,oBAAqB,YAAW,aAAa;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,GAAG;CAWV"}
+{"version":3,"file":"visitor-id-hash.adapter.d.ts","sourceRoot":"","sources":["../src/visitor-id-hash.adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvD,qBAAa,oBAAqB,YAAW,aAAa;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,GAAG;CAaV"}

package/dist/visitor-id-hash.adapter.js

@@ -1,3 +1,4 @@
+import { VisitorId } from "./visitor-id.vo";
 export class VisitorIdHashAdapter {
     client;
     constructor(client) {
@@ -7,10 +8,11 @@ export class VisitorIdHashAdapter {
         const { ip, ua } = this.client.toJSON();
         const value = `${ip}|${ua}`;
         const buffer = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(value));
-        return Array.from(new Uint8Array(buffer))
+        const result = Array.from(new Uint8Array(buffer))
             .slice(0, 8)
             .map((b) => b.toString(16).padStart(2, "0"))
             .join("");
+        return VisitorId.parse(result);
     }
 }
 //# sourceMappingURL=visitor-id-hash.adapter.js.map

package/dist/visitor-id-hash.adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"visitor-id-hash.adapter.js","sourceRoot":"","sources":["../src/visitor-id-hash.adapter.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAExC,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAEtF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;aACtC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;CACF"}
+{"version":3,"file":"visitor-id-hash.adapter.js","sourceRoot":"","sources":["../src/visitor-id-hash.adapter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAExC,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAEtF,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;aAC9C,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;QAEZ,OAAO,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;CACF"}

package/dist/visitor-id.port.d.ts

@@ -1,4 +1,4 @@
-export type VisitorIdType = string;
+import type { VisitorIdType } from "./visitor-id.vo";
 export interface VisitorIdPort {
     get(): Promise<VisitorIdType>;
 }

package/dist/visitor-id.port.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"visitor-id.port.d.ts","sourceRoot":"","sources":["../src/visitor-id.port.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AAEnC,MAAM,WAAW,aAAa;IAC5B,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;CAC/B"}
+{"version":3,"file":"visitor-id.port.d.ts","sourceRoot":"","sources":["../src/visitor-id.port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,WAAW,aAAa;IAC5B,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;CAC/B"}

package/dist/visitor-id.vo.d.ts

@@ -0,0 +1,9 @@
+import { z } from "zod/v4";
+export declare const VisitorIdError: {
+    readonly Type: "visitor.id.type";
+    readonly Empty: "visitor.id.empty";
+    readonly TooLong: "visitor.id.too.long";
+};
+export declare const VisitorId: z.core.$ZodBranded<z.ZodString, "VisitorId">;
+export type VisitorIdType = z.infer<typeof VisitorId>;
+//# sourceMappingURL=visitor-id.vo.d.ts.map

package/dist/visitor-id.vo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"visitor-id.vo.d.ts","sourceRoot":"","sources":["../src/visitor-id.vo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,eAAO,MAAM,cAAc;;;;CAIjB,CAAC;AAEX,eAAO,MAAM,SAAS,8CAID,CAAC;AAEtB,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC"}

package/dist/visitor-id.vo.js

@@ -0,0 +1,12 @@
+import { z } from "zod/v4";
+export const VisitorIdError = {
+    Type: "visitor.id.type",
+    Empty: "visitor.id.empty",
+    TooLong: "visitor.id.too.long",
+};
+export const VisitorId = z
+    .string(VisitorIdError.Type)
+    .min(1, VisitorIdError.Empty)
+    .max(16, VisitorIdError.TooLong)
+    .brand("VisitorId");
+//# sourceMappingURL=visitor-id.vo.js.map

package/dist/visitor-id.vo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visitor-id.vo.js","sourceRoot":"","sources":["../src/visitor-id.vo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,iBAAiB;IACvB,KAAK,EAAE,kBAAkB;IACzB,OAAO,EAAE,qBAAqB;CACtB,CAAC;AAEX,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;KAC3B,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC;KAC5B,GAAG,CAAC,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;KAC/B,KAAK,CAAC,WAAW,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bgord/bun",
-  "version": "1.4.21",
+  "version": "1.4.24",
   "license": "MIT",
   "type": "module",
   "author": "Bartosz Gordon",
@@ -38,7 +38,7 @@
   },
   "dependencies": {
     "@axiomhq/winston": "1.3.1",
-    "@bgord/tools": "1.1.20",
+    "@bgord/tools": "1.2.0",
     "@hono/ua-blocker": "0.1.21",
     "better-auth": "1.4.7",
     "croner": "9.1.0",

package/readme.md

@@ -88,6 +88,7 @@ src/
 ├── file-cleaner.port.ts
 ├── file-draft-zip.service.ts
 ├── file-draft.service.ts
+├── file-etag.vo.ts
 ├── file-hash-noop.adapter.ts
 ├── file-hash-sha256-bun.adapter.ts
 ├── file-hash.port.ts
@@ -266,6 +267,7 @@ src/
 ├── visitor-id-hash-hono.adapter.ts
 ├── visitor-id-hash.adapter.ts
 ├── visitor-id.port.ts
+├── visitor-id.vo.ts
 └── weak-etag-extractor.middleware.ts
 ```
 

package/src/file-etag.vo.ts

@@ -0,0 +1,13 @@
+import { z } from "zod/v4";
+
+export const FileEtagError = { Type: "file.etag.type", InvalidHex: "file.etag.invalid.hex" } as const;
+
+// 64 hex chars allowed
+const CHARS_WHITELIST = /^[a-fA-F0-9]{64}$/;
+
+export const FileEtag = z
+  .string(FileEtagError.Type)
+  .regex(CHARS_WHITELIST, FileEtagError.InvalidHex)
+  .brand("FileEtag");
+
+export type FileEtagType = z.infer<typeof FileEtag>;

package/src/file-hash-noop.adapter.ts

@@ -1,10 +1,11 @@
 import * as tools from "@bgord/tools";
+import { FileEtag } from "./file-etag.vo";
 import type { FileHashPort } from "./file-hash.port";
 
 export class FileHashNoopAdapter implements FileHashPort {
   async hash(_path: tools.FilePathAbsolute | tools.FilePathRelative) {
     return {
-      etag: "noop",
+      etag: FileEtag.parse("0000000000000000000000000000000000000000000000000000000000000000"),
       size: tools.Size.fromBytes(10),
       lastModified: tools.Timestamp.fromNumber(1000),
       mime: tools.MIMES.text,

package/src/file-hash-sha256-bun.adapter.ts

@@ -1,4 +1,5 @@
 import * as tools from "@bgord/tools";
+import { FileEtag } from "./file-etag.vo";
 import type { FileHashPort } from "./file-hash.port";
 
 export class FileHashSha256BunAdapter implements FileHashPort {
@@ -8,10 +9,9 @@ export class FileHashSha256BunAdapter implements FileHashPort {
 
     const arrayBuffer = await file.arrayBuffer();
     const digest = await crypto.subtle.digest("SHA-256", arrayBuffer);
-    const etag = Buffer.from(digest).toString("hex");
 
     return {
-      etag,
+      etag: FileEtag.parse(Buffer.from(digest).toString("hex")),
       size: tools.Size.fromBytes(arrayBuffer.byteLength),
       lastModified: tools.Timestamp.fromNumber(file.lastModified),
       mime: tools.Mime.fromExtension(extension),

package/src/file-hash.port.ts

@@ -1,7 +1,8 @@
 import type * as tools from "@bgord/tools";
+import type { FileEtagType } from "./file-etag.vo";
 
 export type FileHashResult = {
-  etag: string;
+  etag: FileEtagType;
   size: tools.Size;
   lastModified: tools.Timestamp;
   mime: tools.Mime;

package/src/index.ts

@@ -59,6 +59,7 @@ export * from "./file-cleaner-bun-forgiving.adapter";
 export * from "./file-cleaner-noop.adapter";
 export * from "./file-draft.service";
 export * from "./file-draft-zip.service";
+export * from "./file-etag.vo";
 export * from "./file-hash.port";
 export * from "./file-hash-noop.adapter";
 export * from "./file-hash-sha256-bun.adapter";
@@ -185,6 +186,7 @@ export * from "./translations.service";
 export * from "./uptime.service";
 export * from "./uuid.vo";
 export * from "./visitor-id.port";
+export * from "./visitor-id.vo";
 export * from "./visitor-id-hash.adapter";
 export * from "./visitor-id-hash-hono.adapter";
 export * from "./weak-etag-extractor.middleware";

package/src/mailer.vo.ts

@@ -27,12 +27,4 @@ export const EmailContentHtml = z
   .max(10_000, EmailContentHtmlError.Invalid);
 export type EmailContentHtmlType = z.infer<typeof EmailContentHtml>;
 
-export const EmailFromError = { Invalid: "email.from.invalid" } as const;
-export const EmailFrom = z.email(EmailFromError.Invalid);
-export type EmailFromType = z.infer<typeof EmailFrom>;
-
-export const EmailToError = { Invalid: "email.to.invalid" } as const;
-export const EmailTo = z.email(EmailToError.Invalid);
-export type EmailToType = z.infer<typeof EmailTo>;
-
 export type EmailAttachmentType = { filename: string; path: string };

package/src/prerequisites/outside-connectivity.ts

@@ -8,7 +8,7 @@ export class PrerequisiteOutsideConnectivity implements prereqs.Prerequisite {
   readonly label: prereqs.PrerequisiteLabelType;
   readonly enabled?: boolean = true;
 
-  private readonly url = "https://google.com";
+  private static readonly URL = tools.UrlWithoutSlash.parse("https://google.com");
   readonly timeout: tools.Duration;
 
   constructor(config: prereqs.PrerequisiteConfigType & { timeout?: tools.Duration }) {
@@ -25,7 +25,7 @@ export class PrerequisiteOutsideConnectivity implements prereqs.Prerequisite {
       if (!this.enabled) return prereqs.Verification.undetermined(stopwatch.stop());
 
       const response = await Timeout.cancellable(
-        (signal: AbortSignal) => fetch(this.url, { method: "HEAD", signal }),
+        (signal: AbortSignal) => fetch(PrerequisiteOutsideConnectivity.URL, { method: "HEAD", signal }),
         this.timeout,
       );
 

package/src/remote-file-storage-noop.adapter.ts

@@ -1,5 +1,6 @@
 import * as tools from "@bgord/tools";
 import type { ClockPort } from "./clock.port";
+import { FileEtag } from "./file-etag.vo";
 import type { LoggerPort } from "./logger.port";
 import type {
   RemoteFileStoragePort,
@@ -8,9 +9,10 @@ import type {
   RemotePutFromPathResult,
 } from "./remote-file-storage.port";
 
-type RemoteFileStorageNoopConfig = { root: tools.DirectoryPathAbsoluteType; publicBaseUrl?: string };
 type Dependencies = { Logger: LoggerPort; Clock: ClockPort };
 
+type RemoteFileStorageNoopConfig = { root: tools.DirectoryPathAbsoluteType; publicBaseUrl?: string };
+
 export class RemoteFileStorageNoopAdapter implements RemoteFileStoragePort {
   private readonly base = { component: "infra", operation: "RemoteFileStorageNoopAdapter" };
 
@@ -32,7 +34,7 @@ export class RemoteFileStorageNoopAdapter implements RemoteFileStoragePort {
     });
 
     return {
-      etag: "noop",
+      etag: FileEtag.parse("0000000000000000000000000000000000000000000000000000000000000000"),
       size: tools.Size.fromBytes(10),
       lastModified: this.deps.Clock.now(),
       mime: tools.MIMES.text,

package/src/shield-captcha-recaptcha.adapter.ts

@@ -1,3 +1,4 @@
+import * as tools from "@bgord/tools";
 import { createMiddleware } from "hono/factory";
 import { HTTPException } from "hono/http-exception";
 import type { RecaptchaSecretKeyType } from "./recaptcha-secret-key.vo";
@@ -9,6 +10,10 @@ export type RecaptchaResultType = { success: boolean; score: number };
 export const AccessDeniedRecaptchaError = new HTTPException(403, { message: "access_denied_recaptcha" });
 
 export class ShieldCaptchaRecaptchaAdapter implements ShieldPort {
+  private static readonly URL = tools.UrlWithoutSlash.parse(
+    "https://www.google.com/recaptcha/api/siteverify",
+  );
+
   constructor(private readonly config: RecaptchaVerifierConfigType) {}
 
   verify = createMiddleware(async (c, next) => {
@@ -26,7 +31,7 @@ export class ShieldCaptchaRecaptchaAdapter implements ShieldPort {
 
       const params = new URLSearchParams({ secret: this.config.secretKey, response: token, remoteip });
 
-      const response = await fetch("https://www.google.com/recaptcha/api/siteverify", {
+      const response = await fetch(ShieldCaptchaRecaptchaAdapter.URL, {
         method: "POST",
         headers: { "Content-Type": "application/x-www-form-urlencoded" },
         body: params,

package/src/timekeeper-google.adapter.ts

@@ -2,7 +2,7 @@ import * as tools from "@bgord/tools";
 import type { TimekeeperPort } from "./timekeeper.port";
 
 export class TimekeeperGoogleAdapter implements TimekeeperPort {
-  static URL = "https://www.google.com/generate_204";
+  static URL = tools.UrlWithoutSlash.parse("https://www.google.com/generate_204");
 
   async get(signal?: AbortSignal) {
     try {

package/src/visitor-id-hash-hono.adapter.ts

@@ -1,6 +1,7 @@
 import type { Context } from "hono";
 import { ClientFromHonoAdapter } from "./client-from-hono.adapter";
 import type { VisitorIdPort } from "./visitor-id.port";
+import { VisitorId } from "./visitor-id.vo";
 import { VisitorIdHashAdapter } from "./visitor-id-hash.adapter";
 
 export class VisitorIdHashHonoAdapter implements VisitorIdPort {
@@ -11,6 +12,6 @@ export class VisitorIdHashHonoAdapter implements VisitorIdPort {
   }
 
   async get() {
-    return this.delegate.get();
+    return VisitorId.parse(await this.delegate.get());
   }
 }

package/src/visitor-id-hash.adapter.ts

@@ -1,5 +1,6 @@
 import type { Client } from "./client.vo";
 import type { VisitorIdPort } from "./visitor-id.port";
+import { VisitorId } from "./visitor-id.vo";
 
 export class VisitorIdHashAdapter implements VisitorIdPort {
   constructor(private readonly client: Client) {}
@@ -10,9 +11,11 @@ export class VisitorIdHashAdapter implements VisitorIdPort {
     const value = `${ip}|${ua}`;
     const buffer = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(value));
 
-    return Array.from(new Uint8Array(buffer))
+    const result = Array.from(new Uint8Array(buffer))
       .slice(0, 8)
       .map((b) => b.toString(16).padStart(2, "0"))
       .join("");
+
+    return VisitorId.parse(result);
   }
 }

package/src/visitor-id.port.ts

@@ -1,4 +1,4 @@
-export type VisitorIdType = string;
+import type { VisitorIdType } from "./visitor-id.vo";
 
 export interface VisitorIdPort {
   get(): Promise<VisitorIdType>;

package/src/visitor-id.vo.ts

@@ -0,0 +1,15 @@
+import { z } from "zod/v4";
+
+export const VisitorIdError = {
+  Type: "visitor.id.type",
+  Empty: "visitor.id.empty",
+  TooLong: "visitor.id.too.long",
+} as const;
+
+export const VisitorId = z
+  .string(VisitorIdError.Type)
+  .min(1, VisitorIdError.Empty)
+  .max(16, VisitorIdError.TooLong)
+  .brand("VisitorId");
+
+export type VisitorIdType = z.infer<typeof VisitorId>;