@kaana.ai/contracts 7.0.0 → 8.0.1

package/dist/public/chatCompletions.js

@@ -14,22 +14,23 @@
  * the Oxy edge rendered them in code only.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { reasoningEffortSchema } from './catalogue.js';
 import { publicErrorCodeSchema } from './errors.js';
 import { inferenceContentPartSchema } from './messages.js';
 import { modelTargetSchema } from './responses.js';
 /** `stop` in the OpenAI dialect: one sequence or a list of them. */
 const openAiStopSchema = z.union([
-    z.string().min(1).max(256),
-    z.array(z.string().min(1).max(256)).max(8),
+    z.string().check(minUtf16Length(1)).check(maxUtf16Length(256)),
+    z.array(z.string().check(minUtf16Length(1)).check(maxUtf16Length(256))).max(8),
 ]);
 const openAiToolCallSchema = z
     .object({
-    id: z.string().min(1).max(128),
+    id: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     type: z.literal('function'),
     function: z
         .object({
-        name: z.string().min(1).max(128),
+        name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
         arguments: z.string(),
     })
         .strict(),
@@ -47,8 +48,8 @@ export const chatCompletionMessageSchema = z
         .union([z.string(), z.array(inferenceContentPartSchema)])
         .nullable()
         .optional(),
-    name: z.string().max(128).optional(),
-    tool_call_id: z.string().min(1).max(128).optional(),
+    name: z.string().check(maxUtf16Length(128)).optional(),
+    tool_call_id: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
     tool_calls: z.array(openAiToolCallSchema).optional(),
 })
     .strict();
@@ -57,8 +58,8 @@ const openAiToolSchema = z
     type: z.literal('function'),
     function: z
         .object({
-        name: z.string().min(1).max(128),
-        description: z.string().max(2000).optional(),
+        name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+        description: z.string().check(maxUtf16Length(2000)).optional(),
         parameters: z.record(z.string(), z.unknown()),
         strict: z.boolean().optional(),
     })
@@ -70,7 +71,9 @@ const openAiToolChoiceSchema = z.union([
     z
         .object({
         type: z.literal('function'),
-        function: z.object({ name: z.string().min(1).max(128) }).strict(),
+        function: z
+            .object({ name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)) })
+            .strict(),
     })
         .strict(),
 ]);
@@ -81,7 +84,7 @@ const openAiToolChoiceSchema = z.union([
  */
 const openAiAudioOutputSchema = z
     .object({
-    voice: z.string().min(1).max(64),
+    voice: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)),
     format: z.enum(['wav', 'mp3', 'flac', 'opus', 'pcm16']),
 })
     .strict();
@@ -92,7 +95,7 @@ const openAiResponseFormatSchema = z.union([
         type: z.literal('json_schema'),
         json_schema: z
             .object({
-            name: z.string().min(1).max(128),
+            name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
             schema: z.record(z.string(), z.unknown()),
             strict: z.boolean().optional(),
         })
@@ -135,7 +138,7 @@ export const chatCompletionsRequestSchema = z
      * OpenAI's end-user attribution field: the DELEGATED user id, attribution
      * only. `X-Oxy-User-Id` wins when both are present.
      */
-    user: z.string().min(1).max(64).optional(),
+    user: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)).optional(),
 })
     .strict()
     .superRefine((request, ctx) => {
@@ -214,12 +217,12 @@ export const chatCompletionUsageSchema = z
  */
 export const chatCompletionSchema = z
     .object({
-    id: z.string().min(1),
+    id: z.string().check(minUtf16Length(1)),
     object: z.literal('chat.completion'),
     /** Unix seconds, as OpenAI's own field is. */
     created: z.number().int().nonnegative(),
     /** The revision that served the request. */
-    model: z.string().min(1),
+    model: z.string().check(minUtf16Length(1)),
     choices: z.array(z
         .object({
         index: z.number().int().nonnegative(),
@@ -231,7 +234,7 @@ export const chatCompletionSchema = z
             /** Spoken output. `expires_at` is `created`: Kaana retains no audio. */
             audio: z
                 .object({
-                id: z.string().min(1),
+                id: z.string().check(minUtf16Length(1)),
                 data: z.string(),
                 transcript: z.string(),
                 expires_at: z.number().int().nonnegative(),
@@ -245,7 +248,7 @@ export const chatCompletionSchema = z
          * OpenAI's vocabulary, which has neither `cancelled` nor `refusal`:
          * both are reported as `stop` here.
          */
-        finish_reason: z.string().min(1),
+        finish_reason: z.string().check(minUtf16Length(1)),
     })
         .strict()),
     usage: chatCompletionUsageSchema,
@@ -261,10 +264,10 @@ export const chatCompletionSchema = z
  */
 export const chatCompletionChunkSchema = z
     .object({
-    id: z.string().min(1),
+    id: z.string().check(minUtf16Length(1)),
     object: z.literal('chat.completion.chunk'),
     created: z.number().int().nonnegative(),
-    model: z.string().min(1),
+    model: z.string().check(minUtf16Length(1)),
     choices: z.array(z
         .object({
         index: z.number().int().nonnegative(),
@@ -275,7 +278,7 @@ export const chatCompletionChunkSchema = z
             refusal: z.string().optional(),
             audio: z
                 .object({
-                id: z.string().min(1),
+                id: z.string().check(minUtf16Length(1)),
                 data: z.string().optional(),
                 transcript: z.string().optional(),
                 expires_at: z.number().int().nonnegative().optional(),
@@ -286,7 +289,7 @@ export const chatCompletionChunkSchema = z
                 .array(z
                 .object({
                 index: z.number().int().nonnegative(),
-                id: z.string().min(1).optional(),
+                id: z.string().check(minUtf16Length(1)).optional(),
                 type: z.literal('function').optional(),
                 function: z
                     .object({ name: z.string().optional(), arguments: z.string().optional() })
@@ -296,7 +299,7 @@ export const chatCompletionChunkSchema = z
                 .optional(),
         })
             .strict(),
-        finish_reason: z.string().min(1).nullable(),
+        finish_reason: z.string().check(minUtf16Length(1)).nullable(),
     })
         .strict()),
     usage: chatCompletionUsageSchema.optional(),
@@ -311,8 +314,8 @@ export const chatCompletionErrorSchema = z
     .object({
     error: z
         .object({
-        message: z.string().min(1),
-        type: z.string().min(1),
+        message: z.string().check(minUtf16Length(1)),
+        type: z.string().check(minUtf16Length(1)),
         param: z.string().nullable(),
         code: publicErrorCodeSchema,
     })

package/dist/public/decisions.js

@@ -4,12 +4,13 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/decisions.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { modelReferenceSchema, requestIdSchema } from './identifiers.js';
 import { usageQuantitySchema } from './money.js';
 import { routingPolicyReferenceSchema } from './policy.js';
 const probability = z.number().finite().min(0).max(1);
-const text = z.string().min(1).max(65536);
-const id = z.string().min(1).max(128);
+const text = z.string().check(minUtf16Length(1)).check(maxUtf16Length(65536));
+const id = z.string().check(minUtf16Length(1)).check(maxUtf16Length(128));
 const tolerance = 1e-6;
 export const decisionEffortSchema = z.enum(['instant', 'low', 'medium', 'high', 'xhigh']);
 const common = { id, question: text, criteria: text.optional() };
@@ -31,7 +32,7 @@ export const decisionQuestionSchema = z.discriminatedUnion('kind', [
     z.object({ ...common, kind: z.literal('noul') }).strict(),
 ]);
 const payloadFields = {
-    state: z.string().max(65536),
+    state: z.string().check(maxUtf16Length(65536)),
     instructions: text.optional(),
     questions: z.array(decisionQuestionSchema).min(1).max(255),
     effort: decisionEffortSchema.optional(),

package/dist/public/embeddings.js

@@ -8,6 +8,7 @@
  * vectors of at most 1024 dimensions.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { modelReferenceSchema } from './identifiers.js';
 /** The most inputs one request may embed. */
 export const MAX_EMBEDDING_INPUTS = 2048;
@@ -16,15 +17,18 @@ export const embeddingsRequestSchema = z
     /** A concrete model: an embedding space is a property of exact weights. */
     model: modelReferenceSchema,
     input: z.union([
-        z.string().min(1),
-        z.array(z.string().min(1)).min(1).max(MAX_EMBEDDING_INPUTS),
+        z.string().check(minUtf16Length(1)),
+        z
+            .array(z.string().check(minUtf16Length(1)))
+            .min(1)
+            .max(MAX_EMBEDDING_INPUTS),
     ]),
     /** Only `float`: base64 vectors are an encoding the contract does not carry. */
     encoding_format: z.literal('float').optional(),
     /** Requested output dimension, for models that can shorten their vectors. */
     dimensions: z.number().int().positive().max(1024).optional(),
     /** OpenAI's end-user attribution field: the delegated user id, attribution only. */
-    user: z.string().min(1).max(64).optional(),
+    user: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)).optional(),
 })
     .strict();
 export const embeddingsResponseSchema = z

package/dist/public/errors.js

@@ -4,6 +4,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/errors.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { requestIdSchema } from './identifiers.js';
 /**
  * A run of characters long enough and opaque enough to BE a credential.
@@ -104,8 +105,8 @@ const CREDENTIAL_PATTERNS = [
  */
 export const safeErrorTextSchema = z
     .string()
-    .min(1)
-    .max(2000)
+    .check(minUtf16Length(1))
+    .check(maxUtf16Length(2000))
     .refine((value) => !CREDENTIAL_PATTERNS.some((pattern) => pattern.test(value)), 'error text must not contain credential-shaped material');
 /**
  * A coarse classification of an upstream failure (ADR 0010's `upstreamCategory`).
@@ -251,7 +252,7 @@ export const publicErrorSchema = z
     /** How long to wait before retrying. Only meaningful when `retryable`. */
     retryAfterMs: z.number().int().nonnegative().safe().optional(),
     /** The request field at fault, for `invalid_request`. */
-    param: z.string().max(128).optional(),
+    param: z.string().check(maxUtf16Length(128)).optional(),
     /** The kind of upstream failure, when an upstream was reached. Provider-neutral. */
     upstreamCategory: upstreamErrorCategorySchema.optional(),
 })

package/dist/public/generations.js

@@ -14,6 +14,7 @@
  * provider: no public record names a provider, a key or a deployment.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { delegatedUserIdSchema, generationIdSchema, inferenceEnvironmentSchema, inferenceTimestampSchema, modelReferenceSchema, oxyApplicationIdSchema, oxyCredentialIdSchema, requestIdSchema, } from './identifiers.js';
 import { requestLabelsSchema } from './messages.js';
 import { currencyCodeSchema, exactDecimalSchema, priceSnapshotSchema, usageQuantitySchema, usageSourceSchema, } from './money.js';
@@ -65,7 +66,7 @@ export const chargedGenerationRecordSchema = z
     .object({
     ...recordFields,
     kind: z.literal('charge'),
-    receiptId: z.string().min(1).max(128),
+    receiptId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     priceSnapshot: priceSnapshotSchema,
     billedAmount: exactDecimalSchema,
     currency: currencyCodeSchema,
@@ -91,7 +92,7 @@ export const meteredGenerationRecordSchema = z
     .object({
     ...recordFields,
     kind: z.literal('metered_usage'),
-    meteredUsageId: z.string().min(1).max(128),
+    meteredUsageId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     /** The request this one ran inside, for a child such as an Auto classification. */
     parentRequestId: requestIdSchema.optional(),
     tariff: z.discriminatedUnion('status', [
@@ -100,13 +101,13 @@ export const meteredGenerationRecordSchema = z
             status: z.literal('quoted'),
             amount: exactDecimalSchema,
             currency: currencyCodeSchema,
-            priceVersionId: z.string().min(1).max(128),
+            priceVersionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
         })
             .strict(),
         z
             .object({
             status: z.literal('unpriced'),
-            priceVersionId: z.string().min(1).max(128).nullable(),
+            priceVersionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).nullable(),
         })
             .strict(),
     ]),

package/dist/public/identifiers.js

@@ -7,6 +7,8 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/identifiers.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { utcTimestampCheck } from '../timestampCheck.js';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 /**
  * A delegated end-user identity (Alia's `X-Oxy-User-Id`), branded with a
  * DIFFERENT brand from {@link oxyAccountIdSchema} so the two cannot be
@@ -17,16 +19,20 @@ import { z } from 'zod';
  * a billing principal, never an access-control principal, and its presence
  * never changes which account is charged.
  */
-export const delegatedUserIdSchema = z.string().min(1).max(64).brand();
+export const delegatedUserIdSchema = z
+    .string()
+    .check(minUtf16Length(1))
+    .check(maxUtf16Length(64))
+    .brand();
 /**
  * An Oxy `Application._id`. Not branded: no invariant in this contract turns on
  * confusing it with another id, and brand inflation costs every producer a
  * parse call for no safety. The two ids above are branded because ADR 0007's
  * rule is exactly that they must not be interchangeable.
  */
-export const oxyApplicationIdSchema = z.string().min(1).max(64);
+export const oxyApplicationIdSchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(64));
 /** An Oxy `ApplicationCredential._id` — the credential used for this request. */
-export const oxyCredentialIdSchema = z.string().min(1).max(64);
+export const oxyCredentialIdSchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(64));
 /**
  * A request id allocated by the Oxy EDGE, at admission and BEFORE
  * authentication, so that a request rejected for a bad credential is as
@@ -48,18 +54,18 @@ export const oxyCredentialIdSchema = z.string().min(1).max(64);
  * customer-visible receipt, so it appears on every stream event and every
  * ledger record.
  */
-export const requestIdSchema = z.string().min(1).max(128);
+export const requestIdSchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(128));
 /**
  * A generation id generated by the data plane, present when a request produced
  * a generation that can be looked up later (`GET /v1/generations/:id`).
  */
-export const generationIdSchema = z.string().min(1).max(128);
+export const generationIdSchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(128));
 /**
  * A caller-supplied idempotency key. Every reserve/settle/refund call is keyed
  * on one so a retry, a redelivered event or a duplicated webhook can never
  * charge twice.
  */
-export const idempotencyKeySchema = z.string().min(1).max(255);
+export const idempotencyKeySchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(255));
 /** Credential environments. A credential is issued into exactly one of them. */
 export const inferenceEnvironmentSchema = z.enum(['development', 'staging', 'production']);
 /**
@@ -71,7 +77,7 @@ export const inferenceEnvironmentSchema = z.enum(['development', 'staging', 'pro
  * settled. One canonical spelling (UTC, `Z`) so two records that describe the
  * same moment compare and sort as equal, which a mix of offsets would not.
  */
-export const inferenceTimestampSchema = z.string().datetime();
+export const inferenceTimestampSchema = z.string().check(utcTimestampCheck());
 /**
  * A calendar DATE with no instant attached (`2026-05-01`) — a knowledge cutoff
  * or a release date, which are published as days and become wrong when a
@@ -83,7 +89,7 @@ export const inferenceDateSchema = z
 /** An absolute https URL, for model cards, licenses and provider documentation. */
 export const inferenceHttpsUrlSchema = z
     .string()
-    .max(2048)
+    .check(maxUtf16Length(2048))
     .regex(/^https:\/\/[^\s]+$/, 'must be an absolute https URL');
 /**
  * A content digest, `sha256:<64 lowercase hex>`.
@@ -106,12 +112,12 @@ const REVISION_PATTERN = '[a-zA-Z0-9](?:[a-zA-Z0-9._-]*[a-zA-Z0-9])?';
 /** A publisher slug, e.g. `openai`, `anthropic`, `meta`, `alia`. */
 export const publisherSlugSchema = z
     .string()
-    .max(64)
+    .check(maxUtf16Length(64))
     .regex(new RegExp(`^${SLUG_PATTERN}$`), 'publisher must be a lowercase URL-safe slug');
 /** A model slug within its publisher's namespace, e.g. `gpt-5`, `llama-3.1-70b`. */
 export const modelSlugSchema = z
     .string()
-    .max(64)
+    .check(maxUtf16Length(64))
     .regex(new RegExp(`^${SLUG_PATTERN}$`), 'model must be a lowercase URL-safe slug');
 /**
  * A canonical model id, `<publisher>/<model>`. This names a MODEL — a
@@ -120,12 +126,12 @@ export const modelSlugSchema = z
  */
 export const modelIdSchema = z
     .string()
-    .max(129)
+    .check(maxUtf16Length(129))
     .regex(new RegExp(`^${SLUG_PATTERN}/${SLUG_PATTERN}$`), 'model id must be <publisher>/<model>');
 /** An immutable revision label, unique within its model, e.g. `2026-05-01`. */
 export const modelRevisionLabelSchema = z
     .string()
-    .max(64)
+    .check(maxUtf16Length(64))
     .regex(new RegExp(`^${REVISION_PATTERN}$`), 'revision must be a URL-safe label');
 /**
  * A model reference as a customer writes it: `<publisher>/<model>` (the model's
@@ -139,7 +145,7 @@ export const modelRevisionLabelSchema = z
  */
 export const modelReferenceSchema = z
     .string()
-    .max(194)
+    .check(maxUtf16Length(194))
     .regex(new RegExp(`^${SLUG_PATTERN}/${SLUG_PATTERN}(?:@${REVISION_PATTERN})?$`), 'model reference must be <publisher>/<model> or <publisher>/<model>@<revision>');
 /**
  * A region identifier, e.g. `us-west-2`, `eu-central-1`. Free-form rather than
@@ -148,7 +154,7 @@ export const modelReferenceSchema = z
  */
 export const inferenceRegionSchema = z
     .string()
-    .max(64)
+    .check(maxUtf16Length(64))
     .regex(new RegExp(`^${SLUG_PATTERN}$`), 'region must be a lowercase URL-safe slug');
 /**
  * The publisher namespace reserved for models Alia actually owns or derives.

package/dist/public/images.js

@@ -7,18 +7,19 @@
  * catalogue, because a price prices a unit, not a `(unit, size, quality)` tuple.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { modelReferenceSchema } from './identifiers.js';
 export const imageGenerationsRequestSchema = z
     .object({
     model: modelReferenceSchema,
-    prompt: z.string().min(1).max(32_000),
+    prompt: z.string().check(minUtf16Length(1)).check(maxUtf16Length(32_000)),
     /** OpenAI caps this at 10. Exact, declared, and the whole ceiling. */
     n: z.number().int().min(1).max(10).optional(),
-    size: z.string().min(1).max(32).optional(),
-    quality: z.string().min(1).max(32).optional(),
-    style: z.string().min(1).max(32).optional(),
+    size: z.string().check(minUtf16Length(1)).check(maxUtf16Length(32)).optional(),
+    quality: z.string().check(minUtf16Length(1)).check(maxUtf16Length(32)).optional(),
+    style: z.string().check(minUtf16Length(1)).check(maxUtf16Length(32)).optional(),
     response_format: z.enum(['url', 'b64_json']).optional(),
-    user: z.string().min(1).max(64).optional(),
+    user: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)).optional(),
 })
     .strict();
 /**
@@ -29,8 +30,8 @@ export const imageGenerationsSchema = z
     .object({
     created: z.number().int().nonnegative(),
     data: z.array(z.union([
-        z.object({ url: z.string().min(1) }).strict(),
-        z.object({ b64_json: z.string().min(1) }).strict(),
+        z.object({ url: z.string().check(minUtf16Length(1)) }).strict(),
+        z.object({ b64_json: z.string().check(minUtf16Length(1)) }).strict(),
     ])),
 })
     .strict();

package/dist/public/messages.js

@@ -5,6 +5,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/request.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { languageTagSchema } from './audioFormats.js';
 import { reasoningEffortSchema } from './catalogue.js';
 /**
@@ -15,12 +16,17 @@ import { reasoningEffortSchema } from './catalogue.js';
  * neither appears in a receipt, a log line or a telemetry event.
  */
 export const inferenceContentSourceSchema = z.discriminatedUnion('kind', [
-    z.object({ kind: z.literal('url'), url: z.string().min(1).max(4096) }).strict(),
+    z
+        .object({
+        kind: z.literal('url'),
+        url: z.string().check(minUtf16Length(1)).check(maxUtf16Length(4096)),
+    })
+        .strict(),
     z
         .object({
         kind: z.literal('inline'),
-        mediaType: z.string().min(1).max(255),
-        data: z.string().min(1),
+        mediaType: z.string().check(minUtf16Length(1)).check(maxUtf16Length(255)),
+        data: z.string().check(minUtf16Length(1)),
     })
         .strict(),
 ]);
@@ -71,7 +77,7 @@ export const inferenceContentPartSchema = z.discriminatedUnion('type', [
         .object({
         type: z.literal('file'),
         source: inferenceContentSourceSchema,
-        filename: z.string().max(255).optional(),
+        filename: z.string().check(maxUtf16Length(255)).optional(),
     })
         .strict(),
     /**
@@ -89,8 +95,8 @@ export const inferenceContentPartSchema = z.discriminatedUnion('type', [
  */
 export const inferenceToolCallSchema = z
     .object({
-    id: z.string().min(1).max(128),
-    name: z.string().min(1).max(128),
+    id: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+    name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     arguments: z.string(),
 })
     .strict();
@@ -114,9 +120,9 @@ export const inferenceMessageSchema = z
     role: inferenceMessageRoleSchema,
     content: z.array(inferenceContentPartSchema),
     /** Participant name, where the dialect supports naming participants. */
-    name: z.string().max(128).optional(),
+    name: z.string().check(maxUtf16Length(128)).optional(),
     /** The tool call this message answers. Required on, and only on, `tool`. */
-    toolCallId: z.string().min(1).max(128).optional(),
+    toolCallId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
     /** Tool calls the assistant made. Only on `assistant`. */
     toolCalls: z.array(inferenceToolCallSchema).optional(),
 })
@@ -168,7 +174,10 @@ export const samplingParametersSchema = z
     presencePenalty: z.number().min(-2).max(2).optional(),
     /** A seed makes a request reproducible on providers that honour one. */
     seed: z.number().int().safe().optional(),
-    stopSequences: z.array(z.string().min(1).max(256)).max(8).optional(),
+    stopSequences: z
+        .array(z.string().check(minUtf16Length(1)).check(maxUtf16Length(256)))
+        .max(8)
+        .optional(),
 })
     .strict();
 /**
@@ -179,8 +188,8 @@ export const samplingParametersSchema = z
 export const toolDefinitionSchema = z
     .object({
     type: z.literal('function'),
-    name: z.string().min(1).max(128),
-    description: z.string().max(2000).optional(),
+    name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+    description: z.string().check(maxUtf16Length(2000)).optional(),
     parameters: z.record(z.string(), z.unknown()),
     /** Ask the provider to enforce the schema, where it supports enforcement. */
     strict: z.boolean().optional(),
@@ -189,7 +198,12 @@ export const toolDefinitionSchema = z
 /** Whether, and which, tool the model must call. */
 export const toolChoiceSchema = z.union([
     z.enum(['auto', 'none', 'required']),
-    z.object({ type: z.literal('function'), name: z.string().min(1).max(128) }).strict(),
+    z
+        .object({
+        type: z.literal('function'),
+        name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+    })
+        .strict(),
 ]);
 /** Structured-output request: free text, any JSON object, or a named schema. */
 export const responseFormatSchema = z.discriminatedUnion('type', [
@@ -198,7 +212,7 @@ export const responseFormatSchema = z.discriminatedUnion('type', [
     z
         .object({
         type: z.literal('json_schema'),
-        name: z.string().min(1).max(128),
+        name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
         schema: z.record(z.string(), z.unknown()),
         strict: z.boolean(),
     })
@@ -215,7 +229,7 @@ export const inferenceReasoningSchema = z.object({ effort: reasoningEffortSchema
 /** Parameters for text-to-speech, preserved in the signed request. */
 export const inferenceSpeechParametersSchema = z
     .object({
-    voice: z.string().min(1).max(64),
+    voice: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)),
     responseFormat: z.enum(['mp3', 'opus', 'aac', 'flac', 'wav', 'pcm']),
     speed: z.number().min(0.25).max(4).optional(),
 })
@@ -231,7 +245,7 @@ export const inferenceTranscriptionParametersSchema = z
     .object({
     language: languageTagSchema.optional(),
     /** Vocabulary or context, never an instruction (contract set 5.0.0). */
-    prompt: z.string().max(4096).optional(),
+    prompt: z.string().check(maxUtf16Length(4096)).optional(),
 })
     .strict();
 /**
@@ -249,7 +263,7 @@ export const inferenceTranscriptionParametersSchema = z
  */
 export const inferenceAudioOutputParametersSchema = z
     .object({
-    voice: z.string().min(1).max(64),
+    voice: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)),
     format: z.enum(['wav', 'mp3', 'flac', 'opus', 'pcm']),
 })
     .strict();
@@ -262,5 +276,5 @@ export const inferenceAudioOutputParametersSchema = z
  * Moved from the Oxy edge (`packages/api/src/schemas/inferenceEdge.schemas.ts`).
  */
 export const requestLabelsSchema = z
-    .record(z.string(), z.string().max(256))
+    .record(z.string(), z.string().check(maxUtf16Length(256)))
     .refine((labels) => Object.keys(labels).length <= 16, 'at most 16 labels may be attached to one request');

package/dist/public/money.js

@@ -6,6 +6,7 @@
  * itself stays in `@oxy.so/contracts`, because Oxy owns the price lists.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 /** ISO 4217 alpha-3 currency code, e.g. `USD`. */
 export const currencyCodeSchema = z
     .string()
@@ -219,7 +220,7 @@ export const unitPriceSchema = z
  */
 export const priceSnapshotSchema = z
     .object({
-    priceVersionId: z.string().min(1).max(128),
+    priceVersionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     currency: currencyCodeSchema,
     unitPrices: z.array(unitPriceSchema).min(1),
 })

package/dist/public/policy.js

@@ -7,6 +7,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/routingPolicy.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 /**
  * The reference a request records: which policy, at which of the customer's own
  * revisions. Embedded in the request envelope and in the settled receipt, so a
@@ -14,7 +15,7 @@ import { z } from 'zod';
  */
 export const routingPolicyReferenceSchema = z
     .object({
-    routingPolicyId: z.string().min(1).max(128),
+    routingPolicyId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     policyVersion: z.number().int().positive().safe(),
 })
     .strict();