@kaana.ai/contracts 7.0.0 → 8.0.1

package/dist/internal/identifiers.js

@@ -5,6 +5,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/identifiers.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 /**
  * An Oxy account id — the account that owns the workload and is financially
  * responsible for it.
@@ -16,7 +17,11 @@ import { z } from 'zod';
  * of a header, a JWT claim or a request body — is not assignable to it; the
  * only way to obtain one is to parse a value through this schema.
  */
-export const oxyAccountIdSchema = z.string().min(1).max(64).brand();
+export const oxyAccountIdSchema = z
+    .string()
+    .check(minUtf16Length(1))
+    .check(maxUtf16Length(64))
+    .brand();
 /** One path segment of a canonical model id: a lowercase, URL-safe slug. */
 const SLUG_PATTERN = '[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?';
 /**
@@ -29,7 +34,7 @@ const SLUG_PATTERN = '[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?';
  */
 export const routingProfileSlugSchema = z
     .string()
-    .max(64)
+    .check(maxUtf16Length(64))
     .regex(new RegExp(`^${SLUG_PATTERN}$`), 'routing profile must be a lowercase URL-safe slug');
 /**
  * The opaque PostgreSQL identity of one routing profile.
@@ -37,11 +42,14 @@ export const routingProfileSlugSchema = z
  * No trim, case-folding or format heuristic: callers selecting by id must name
  * the exact stored bytes. The database lookup is the authority for existence.
  */
-export const routingProfileIdSchema = z.string().min(1).max(128);
+export const routingProfileIdSchema = z
+    .string()
+    .check(minUtf16Length(1))
+    .check(maxUtf16Length(128));
 /** An inference provider slug, e.g. `openai`, `bedrock`, `oxy-hosted`. */
 export const inferenceProviderSlugSchema = z
     .string()
-    .max(64)
+    .check(maxUtf16Length(64))
     .regex(new RegExp(`^${SLUG_PATTERN}$`), 'provider must be a lowercase URL-safe slug');
 /**
  * A deployment/endpoint id. Opaque to customers: which concrete endpoint served
@@ -49,7 +57,7 @@ export const inferenceProviderSlugSchema = z
  * subset of it is ever attributed back (see the catalogue's serving-boundary
  * rules).
  */
-export const deploymentIdSchema = z.string().min(1).max(128);
+export const deploymentIdSchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(128));
 /**
  * The economic tier of the provider capacity that funds a request, in the
  * order Kaana spends it: `free` (costs nothing), `credit` (a promotional or

package/dist/internal/realtime.d.ts

@@ -21,7 +21,8 @@ export declare const realtimeClientMetadataSchema: z.ZodObject<{
 export declare const realtimeSessionRequestSchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<1>;
     attribution: z.ZodObject<{
-        principal: z.ZodObject<{
+        principal: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            authority: z.ZodLiteral<"first_party">;
             billing: z.ZodObject<{
                 accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
             }, z.core.$strict>;
@@ -32,6 +33,8 @@ export declare const realtimeSessionRequestSchema: z.ZodObject<{
                 staging: "staging";
                 production: "production";
             }>;
+        }, z.core.$strict>, z.ZodObject<{
+            authority: z.ZodOptional<z.ZodLiteral<"external">>;
             inferenceScopes: z.ZodArray<z.ZodEnum<{
                 "inference:invoke": "inference:invoke";
                 "inference:models:read": "inference:models:read";
@@ -41,7 +44,17 @@ export declare const realtimeSessionRequestSchema: z.ZodObject<{
                 "inference:providers:read": "inference:providers:read";
                 "inference:providers:write": "inference:providers:write";
             }>>;
-        }, z.core.$strip>;
+            billing: z.ZodObject<{
+                accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+            }, z.core.$strict>;
+            applicationId: z.ZodString;
+            credentialId: z.ZodString;
+            environment: z.ZodEnum<{
+                development: "development";
+                staging: "staging";
+                production: "production";
+            }>;
+        }, z.core.$strict>], "authority">;
         userId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
         requestId: z.ZodString;
         generationId: z.ZodOptional<z.ZodString>;

package/dist/internal/realtime.js

@@ -5,6 +5,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/realtime.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { realtimeSessionKindSchema, realtimeSessionTransportSchema } from '../public/catalogue.js';
 import { inferenceTimestampSchema, modelReferenceSchema, requestIdSchema, } from '../public/identifiers.js';
 import { usageQuantitySchema, usageSourceSchema } from '../public/money.js';
@@ -23,10 +24,10 @@ const sequenceSchema = z.number().int().nonnegative().safe();
 export const realtimeClientMetadataSchema = z
     .object({
     /** The public path, e.g. `/v1/realtime`. */
-    endpoint: z.string().min(1).max(256),
-    clientSessionId: z.string().min(1).max(128).optional(),
+    endpoint: z.string().check(minUtf16Length(1)).check(maxUtf16Length(256)),
+    clientSessionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
     receivedAt: inferenceTimestampSchema,
-    labels: z.record(z.string(), z.string().max(256)).optional(),
+    labels: z.record(z.string(), z.string().check(maxUtf16Length(256))).optional(),
 })
     .strict();
 const modelLineOf = (reference) => {

package/dist/internal/request.d.ts

@@ -144,7 +144,8 @@ export declare const clientRequestMetadataSchema: z.ZodObject<{
 export declare const inferenceRequestSchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<2>;
     attribution: z.ZodObject<{
-        principal: z.ZodObject<{
+        principal: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            authority: z.ZodLiteral<"first_party">;
             billing: z.ZodObject<{
                 accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
             }, z.core.$strict>;
@@ -155,6 +156,8 @@ export declare const inferenceRequestSchema: z.ZodObject<{
                 staging: "staging";
                 production: "production";
             }>;
+        }, z.core.$strict>, z.ZodObject<{
+            authority: z.ZodOptional<z.ZodLiteral<"external">>;
             inferenceScopes: z.ZodArray<z.ZodEnum<{
                 "inference:invoke": "inference:invoke";
                 "inference:models:read": "inference:models:read";
@@ -164,7 +167,17 @@ export declare const inferenceRequestSchema: z.ZodObject<{
                 "inference:providers:read": "inference:providers:read";
                 "inference:providers:write": "inference:providers:write";
             }>>;
-        }, z.core.$strip>;
+            billing: z.ZodObject<{
+                accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+            }, z.core.$strict>;
+            applicationId: z.ZodString;
+            credentialId: z.ZodString;
+            environment: z.ZodEnum<{
+                development: "development";
+                staging: "staging";
+                production: "production";
+            }>;
+        }, z.core.$strict>], "authority">;
         userId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
         requestId: z.ZodString;
         generationId: z.ZodOptional<z.ZodString>;

package/dist/internal/request.js

@@ -4,6 +4,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/request.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { inferenceApiFormatSchema, inferenceModalitySchema } from '../public/catalogue.js';
 import { decisionInputSchema } from '../public/decisions.js';
 import { idempotencyKeySchema, inferenceTimestampSchema } from '../public/identifiers.js';
@@ -53,11 +54,11 @@ export const clientRequestMetadataSchema = z
     /** The public dialect the customer called. The response is rendered in it. */
     apiFormat: inferenceApiFormatSchema,
     /** The public path, e.g. `/v1/responses`. */
-    endpoint: z.string().min(1).max(256),
+    endpoint: z.string().check(minUtf16Length(1)).check(maxUtf16Length(256)),
     /** The customer's own correlation id, when they sent one. */
-    clientRequestId: z.string().min(1).max(128).optional(),
+    clientRequestId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
     receivedAt: inferenceTimestampSchema,
-    labels: z.record(z.string(), z.string().max(256)).optional(),
+    labels: z.record(z.string(), z.string().check(maxUtf16Length(256))).optional(),
 })
     .strict();
 /**

package/dist/internal/routing.js

@@ -6,6 +6,7 @@
  * controls) stays in `@oxy.so/contracts`: it is a Console resource.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { inferenceRegionSchema, modelReferenceSchema } from '../public/identifiers.js';
 import { kaanaCredentialHandleSchema } from './credentialControl.js';
 import { deploymentIdSchema, inferenceFundingTierSchema, inferenceProviderSlugSchema, oxyAccountIdSchema, routingProfileIdSchema, } from './identifiers.js';
@@ -74,7 +75,7 @@ const authorizedRouteFields = {
         credentialHandle: kaanaCredentialHandleSchema,
         credentialRevision: z.number().int().positive().safe(),
         ownerAccountId: oxyAccountIdSchema,
-        connectionId: z.string().min(1).max(128),
+        connectionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
         environment: z.enum(['development', 'staging', 'production']),
     })
         .strict()

package/dist/internal/settlement.d.ts

@@ -30,7 +30,8 @@ export declare const settlementSchema: z.ZodObject<{
         requestId: z.ZodString;
         generationId: z.ZodOptional<z.ZodString>;
         attribution: z.ZodObject<{
-            principal: z.ZodObject<{
+            principal: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                authority: z.ZodLiteral<"first_party">;
                 billing: z.ZodObject<{
                     accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
                 }, z.core.$strict>;
@@ -41,6 +42,8 @@ export declare const settlementSchema: z.ZodObject<{
                     staging: "staging";
                     production: "production";
                 }>;
+            }, z.core.$strict>, z.ZodObject<{
+                authority: z.ZodOptional<z.ZodLiteral<"external">>;
                 inferenceScopes: z.ZodArray<z.ZodEnum<{
                     "inference:invoke": "inference:invoke";
                     "inference:models:read": "inference:models:read";
@@ -50,7 +53,17 @@ export declare const settlementSchema: z.ZodObject<{
                     "inference:providers:read": "inference:providers:read";
                     "inference:providers:write": "inference:providers:write";
                 }>>;
-            }, z.core.$strip>;
+                billing: z.ZodObject<{
+                    accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+                }, z.core.$strict>;
+                applicationId: z.ZodString;
+                credentialId: z.ZodString;
+                environment: z.ZodEnum<{
+                    development: "development";
+                    staging: "staging";
+                    production: "production";
+                }>;
+            }, z.core.$strict>], "authority">;
             userId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
             requestId: z.ZodString;
             generationId: z.ZodOptional<z.ZodString>;
@@ -141,7 +154,8 @@ export declare const settlementPageSchema: z.ZodObject<{
             requestId: z.ZodString;
             generationId: z.ZodOptional<z.ZodString>;
             attribution: z.ZodObject<{
-                principal: z.ZodObject<{
+                principal: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    authority: z.ZodLiteral<"first_party">;
                     billing: z.ZodObject<{
                         accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
                     }, z.core.$strict>;
@@ -152,6 +166,8 @@ export declare const settlementPageSchema: z.ZodObject<{
                         staging: "staging";
                         production: "production";
                     }>;
+                }, z.core.$strict>, z.ZodObject<{
+                    authority: z.ZodOptional<z.ZodLiteral<"external">>;
                     inferenceScopes: z.ZodArray<z.ZodEnum<{
                         "inference:invoke": "inference:invoke";
                         "inference:models:read": "inference:models:read";
@@ -161,7 +177,17 @@ export declare const settlementPageSchema: z.ZodObject<{
                         "inference:providers:read": "inference:providers:read";
                         "inference:providers:write": "inference:providers:write";
                     }>>;
-                }, z.core.$strip>;
+                    billing: z.ZodObject<{
+                        accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+                    }, z.core.$strict>;
+                    applicationId: z.ZodString;
+                    credentialId: z.ZodString;
+                    environment: z.ZodEnum<{
+                        development: "development";
+                        staging: "staging";
+                        production: "production";
+                    }>;
+                }, z.core.$strict>], "authority">;
                 userId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
                 requestId: z.ZodString;
                 generationId: z.ZodOptional<z.ZodString>;

package/dist/internal/settlement.js

@@ -14,6 +14,7 @@
  * New in contract set 4.0.0.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { inferenceTimestampSchema, requestIdSchema } from '../public/identifiers.js';
 import { normalizedUsageReportSchema } from './usage.js';
 /** The signature domain of a settlement, under Kaana's own settlement key. */
@@ -23,14 +24,14 @@ export const settlementSchema = z
     .object({
     schemaVersion: z.literal(1),
     /** The outbox row; stable across redeliveries. */
-    settlementId: z.string().min(1).max(128),
+    settlementId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     /** The idempotency key of the settlement: one grant settles once. */
-    grantId: z.string().min(1).max(128),
+    grantId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     requestId: requestIdSchema,
     /** The grant's hold, when it had one. */
-    reservationId: z.string().min(1).max(128).optional(),
+    reservationId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
     /** The grant's capacity slot, when it claimed one; settling releases it. */
-    meteredUsageId: z.string().min(1).max(128).optional(),
+    meteredUsageId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
     /** The step that served, by position in the grant. Absent when nothing was served. */
     servedStep: z.number().int().nonnegative().max(7).optional(),
     report: normalizedUsageReportSchema,
@@ -57,7 +58,7 @@ export const settlementSchema = z
 export const settlementAcknowledgementSchema = z
     .object({
     schemaVersion: z.literal(1),
-    settlementId: z.string().min(1).max(128),
+    settlementId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     status: z.enum(['settled', 'duplicate']),
 })
     .strict();
@@ -83,6 +84,6 @@ export const settlementPageSchema = z
     .object({
     data: z.array(settlementSchema),
     /** Absent on the last page. */
-    nextCursor: z.string().min(1).max(512).optional(),
+    nextCursor: z.string().check(minUtf16Length(1)).check(maxUtf16Length(512)).optional(),
 })
     .strict();

package/dist/internal/usage.d.ts

@@ -54,7 +54,8 @@ export declare const normalizedUsageReportSchema: z.ZodObject<{
     requestId: z.ZodString;
     generationId: z.ZodOptional<z.ZodString>;
     attribution: z.ZodObject<{
-        principal: z.ZodObject<{
+        principal: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            authority: z.ZodLiteral<"first_party">;
             billing: z.ZodObject<{
                 accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
             }, z.core.$strict>;
@@ -65,6 +66,8 @@ export declare const normalizedUsageReportSchema: z.ZodObject<{
                 staging: "staging";
                 production: "production";
             }>;
+        }, z.core.$strict>, z.ZodObject<{
+            authority: z.ZodOptional<z.ZodLiteral<"external">>;
             inferenceScopes: z.ZodArray<z.ZodEnum<{
                 "inference:invoke": "inference:invoke";
                 "inference:models:read": "inference:models:read";
@@ -74,7 +77,17 @@ export declare const normalizedUsageReportSchema: z.ZodObject<{
                 "inference:providers:read": "inference:providers:read";
                 "inference:providers:write": "inference:providers:write";
             }>>;
-        }, z.core.$strip>;
+            billing: z.ZodObject<{
+                accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+            }, z.core.$strict>;
+            applicationId: z.ZodString;
+            credentialId: z.ZodString;
+            environment: z.ZodEnum<{
+                development: "development";
+                staging: "staging";
+                production: "production";
+            }>;
+        }, z.core.$strict>], "authority">;
         userId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
         requestId: z.ZodString;
         generationId: z.ZodOptional<z.ZodString>;

package/dist/public/audio.js

@@ -8,6 +8,7 @@
  * (decision 9) and transcription are new in contract set 4.0.0.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { audioInputMediaTypeSchema, languageTagSchema, speechFormatSchema, speechMediaType, } from './audioFormats.js';
 import { publicErrorSchema } from './errors.js';
 import { modelReferenceSchema, PADDED_BASE64_PATTERN, requestIdSchema } from './identifiers.js';
@@ -43,8 +44,8 @@ export const speechRequestSchema = z
     .object({
     model: modelReferenceSchema,
     /** Bounded so one request cannot drive the hold arbitrarily high. */
-    input: z.string().min(1).max(MAX_SPEECH_INPUT_CHARACTERS),
-    voice: z.string().min(1).max(64),
+    input: z.string().check(minUtf16Length(1)).check(maxUtf16Length(MAX_SPEECH_INPUT_CHARACTERS)),
+    voice: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)),
     /** Absent means `mp3`. */
     response_format: speechFormatSchema.optional(),
     /** The contract's outer bound; each model publishes its own range. */
@@ -53,7 +54,7 @@ export const speechRequestSchema = z
     /** Only with `stream: true`. Absent means `audio`. */
     stream_format: speechStreamFormatSchema.optional(),
     /** OpenAI's end-user attribution field: the delegated user id, attribution only. */
-    user: z.string().min(1).max(64).optional(),
+    user: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)).optional(),
 })
     .strict()
     .superRefine((request, ctx) => {
@@ -79,7 +80,11 @@ export const speechAudioDeltaEventSchema = z
     .object({
     type: z.literal('speech.audio.delta'),
     /** Standard padded base64 of at most 49 152 bytes of audio. */
-    audio: z.string().min(4).max(65_536).regex(PADDED_BASE64_PATTERN),
+    audio: z
+        .string()
+        .check(minUtf16Length(4))
+        .check(maxUtf16Length(65_536))
+        .regex(PADDED_BASE64_PATTERN),
 })
     .strict();
 /** The last event of a successful stream: what served it and what it consumed. */
@@ -169,7 +174,7 @@ export const transcriptionRequestSchema = z
      * A hint — vocabulary or context that helps the model, never an
      * instruction — used where the model takes one.
      */
-    prompt: z.string().max(4096).optional(),
+    prompt: z.string().check(maxUtf16Length(4096)).optional(),
 })
     .strict();
 /**
@@ -198,8 +203,8 @@ export const transcriptionJsonRequestSchema = transcriptionRequestSchema
         mediaType: audioInputMediaTypeSchema,
         data: z
             .string()
-            .min(4)
-            .max(MAX_TRANSCRIPTION_AUDIO_BASE64_LENGTH)
+            .check(minUtf16Length(4))
+            .check(maxUtf16Length(MAX_TRANSCRIPTION_AUDIO_BASE64_LENGTH))
             .regex(PADDED_BASE64_PATTERN),
     })
         .strict(),

package/dist/public/audioFormats.js

@@ -6,6 +6,7 @@
  * New in contract set 4.0.0 (Kaana ADR 0002, decisions 8 and 9).
  */
 import { z } from 'zod';
+import { maxUtf16Length } from '../stringBounds.js';
 import { inferenceAudioMediaTypeSchema } from './streamEvents.js';
 /**
  * A BCP 47 language tag (`en`, `es-ES`, `zh-Hant-TW`), as voices, models and
@@ -14,7 +15,7 @@ import { inferenceAudioMediaTypeSchema } from './streamEvents.js';
  */
 export const languageTagSchema = z
     .string()
-    .max(35)
+    .check(maxUtf16Length(35))
     .regex(/^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8})*$/, 'must be a BCP 47 language tag');
 /** The formats a speech request names in `response_format`. */
 export const speechFormatSchema = z.enum(['mp3', 'opus', 'aac', 'flac', 'wav', 'pcm']);

package/dist/public/catalogue.js

@@ -4,6 +4,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/catalogue.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { inferenceDateSchema, inferenceHttpsUrlSchema, inferenceRegionSchema, inferenceTimestampSchema, modelIdSchema, modelReferenceSchema, modelRevisionLabelSchema, publisherSlugSchema, } from './identifiers.js';
 import { audioInputMediaTypeSchema, languageTagSchema, realtimeAudioFormatSchema, } from './audioFormats.js';
 import { moneySchema, priceSnapshotSchema } from './money.js';
@@ -223,8 +224,8 @@ export const modelCapabilitiesSchema = z
 export const modelLicenseSchema = z
     .object({
     /** SPDX identifier where one exists, otherwise the publisher's own name. */
-    licenseId: z.string().min(1).max(128),
-    displayName: z.string().min(1).max(200),
+    licenseId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
     url: inferenceHttpsUrlSchema.optional(),
     commercialUseAllowed: z.boolean(),
     requiresAttribution: z.boolean(),
@@ -248,7 +249,7 @@ export const modelProvenanceSchema = z
     ]),
     /** The model this one was derived/fine-tuned from, where there is one. */
     baseModelId: modelIdSchema.optional(),
-    trainingOrganization: z.string().min(1).max(200).optional(),
+    trainingOrganization: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)).optional(),
 })
     .strict();
 /**
@@ -265,7 +266,9 @@ export const inferenceDataPolicySchema = z
     trainsOnCustomerData: z.boolean(),
     zeroDataRetentionAvailable: z.boolean(),
     /** Named subprocessors a payload may pass through, for compliance review. */
-    subprocessors: z.array(z.string().min(1).max(200)).default([]),
+    subprocessors: z
+        .array(z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)))
+        .default([]),
     policyUrl: inferenceHttpsUrlSchema.optional(),
 })
     .strict()
@@ -309,10 +312,10 @@ export const modelDeprecationSchema = z
 /** One published evaluation result for a revision. */
 export const modelEvaluationResultSchema = z
     .object({
-    suite: z.string().min(1).max(128),
-    metric: z.string().min(1).max(128),
+    suite: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+    metric: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     /** Kept as a string: an eval score is published text, not arithmetic. */
-    score: z.string().min(1).max(64),
+    score: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)),
     evaluatedAt: inferenceTimestampSchema.optional(),
     reportUrl: inferenceHttpsUrlSchema.optional(),
 })
@@ -325,7 +328,9 @@ export const modelSafetyMetadataSchema = z
     .object({
     safetyCardUrl: inferenceHttpsUrlSchema.optional(),
     contentFilteringDefault: z.enum(['none', 'provider_default', 'strict']),
-    knownLimitations: z.array(z.string().min(1).max(500)).default([]),
+    knownLimitations: z
+        .array(z.string().check(minUtf16Length(1)).check(maxUtf16Length(500)))
+        .default([]),
     /** Content-provenance marking the modality requires, where it requires one. */
     provenanceMarking: z.enum(['none', 'visible_watermark', 'invisible_watermark', 'c2pa']),
 })
@@ -334,7 +339,7 @@ export const modelSafetyMetadataSchema = z
 export const cataloguePublisherSummarySchema = z
     .object({
     slug: publisherSlugSchema,
-    displayName: z.string().min(1).max(200),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
     websiteUrl: inferenceHttpsUrlSchema.optional(),
 })
     .strict();
@@ -345,8 +350,8 @@ export const cataloguePublisherSummarySchema = z
 export const voiceSchema = z
     .object({
     /** What a speech request names in `voice`. */
-    id: z.string().min(1).max(64),
-    name: z.string().min(1).max(200),
+    id: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)),
+    name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
     /** The languages this voice speaks; each is one of the model's `languages`. */
     languages: z.array(languageTagSchema),
     gender: z.enum(['female', 'male', 'neutral']).optional(),
@@ -455,8 +460,8 @@ export const modelSchema = z.object({
     schemaVersion: z.literal(1),
     modelId: modelIdSchema,
     publisher: cataloguePublisherSummarySchema,
-    displayName: z.string().min(1).max(200),
-    description: z.string().max(4000).optional(),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
+    description: z.string().check(maxUtf16Length(4000)).optional(),
     currentRevision: modelRevisionLabelSchema,
     /** Revisions a customer may pin today, newest first. */
     availableRevisions: z.array(modelRevisionLabelSchema).min(1),