@kaana.ai/contracts 8.0.0 → 8.0.1

package/dist/internal/catalogue.js

@@ -5,6 +5,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/catalogue.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { cataloguePublisherSummarySchema, inferenceDataPolicySchema, modelCapabilitiesSchema, modelDeprecationSchema, modelEvaluationResultSchema, modelLicenseSchema, modelPowerClassSchema, modelProvenanceSchema, modelSafetyMetadataSchema, modelSchema, powerLevelSchema, reasoningEffortSchema, } from '../public/catalogue.js';
 import { inferenceDateSchema, inferenceHttpsUrlSchema, inferenceRegionSchema, inferenceTimestampSchema, modelIdSchema, modelReferenceSchema, modelRevisionLabelSchema, modelSlugSchema, publisherSlugSchema, RESERVED_ALIA_PUBLISHER, sha256DigestSchema, } from '../public/identifiers.js';
 import { priceSnapshotSchema } from '../public/money.js';
@@ -34,10 +35,10 @@ export const commercialPermissionSchema = z.enum([
 export const modelPublisherSchema = z.object({
     /** See `version.ts`: served on its own by the catalogue, so it is versioned. */
     schemaVersion: z.literal(1),
-    publisherId: z.string().min(1).max(128),
+    publisherId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     slug: publisherSlugSchema,
-    displayName: z.string().min(1).max(200),
-    description: z.string().max(2000).optional(),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
+    description: z.string().check(maxUtf16Length(2000)).optional(),
     websiteUrl: inferenceHttpsUrlSchema.optional(),
 });
 /**
@@ -54,8 +55,8 @@ export const catalogueModelSchema = z
     modelId: modelIdSchema,
     publisher: publisherSlugSchema,
     slug: modelSlugSchema,
-    displayName: z.string().min(1).max(200),
-    description: z.string().max(4000).optional(),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
+    description: z.string().check(maxUtf16Length(4000)).optional(),
     capabilities: modelCapabilitiesSchema,
     license: modelLicenseSchema,
     provenance: modelProvenanceSchema,
@@ -98,7 +99,7 @@ export const modelRevisionSchema = z
     .object({
     /** See `version.ts`: served on its own by the catalogue, so it is versioned. */
     schemaVersion: z.literal(1),
-    revisionId: z.string().min(1).max(128),
+    revisionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     modelId: modelIdSchema,
     revision: modelRevisionLabelSchema,
     reference: modelReferenceSchema,
@@ -123,9 +124,9 @@ export const modelRevisionSchema = z
 export const inferenceProviderSchema = z.object({
     /** See `version.ts`: served on its own by the catalogue, so it is versioned. */
     schemaVersion: z.literal(1),
-    providerId: z.string().min(1).max(128),
+    providerId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     slug: inferenceProviderSlugSchema,
-    displayName: z.string().min(1).max(200),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
     /**
      * `customer_byok` means the customer's own upstream account is billed
      * directly by the provider and Oxy charges only its platform fee.
@@ -165,7 +166,7 @@ export const modelDeploymentSchema = z
     /** Reserved capacity for one enterprise account rather than shared. */
     dedicatedCapacity: z.boolean(),
     /** The price version customers are charged under on this route. */
-    priceVersionId: z.string().min(1).max(128).optional(),
+    priceVersionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
 })
     .superRefine((deployment, ctx) => {
     if (!deployment.modelReference.includes('@')) {
@@ -268,8 +269,8 @@ export const routingProfileSchema = z.object({
     schemaVersion: z.literal(1),
     routingProfileId: routingProfileIdSchema,
     slug: routingProfileSlugSchema,
-    displayName: z.string().min(1).max(200),
-    description: z.string().max(2000).optional(),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
+    description: z.string().check(maxUtf16Length(2000)).optional(),
     /** What the profile optimises for when several candidates qualify. */
     optimiseFor: z.enum(['price', 'latency', 'throughput', 'quality', 'balanced']),
     candidates: z.array(routingProfileCandidateSchema).min(1),
@@ -300,7 +301,7 @@ export const routingProfileSchema = z.object({
 export const catalogueServingProviderSummarySchema = z
     .object({
     slug: inferenceProviderSlugSchema,
-    displayName: z.string().min(1).max(200),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
     regions: z.array(inferenceRegionSchema).default([]),
     dataPolicy: inferenceDataPolicySchema,
 })
@@ -317,8 +318,8 @@ export const modelCatalogueEntrySchema = z.object({
     schemaVersion: z.literal(3),
     modelId: modelIdSchema,
     publisher: cataloguePublisherSummarySchema,
-    displayName: z.string().min(1).max(200),
-    description: z.string().max(4000).optional(),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
+    description: z.string().check(maxUtf16Length(4000)).optional(),
     currentRevision: modelRevisionLabelSchema,
     /** Revisions a customer may pin today, newest first. */
     availableRevisions: z.array(modelRevisionLabelSchema).min(1),

package/dist/internal/credentialControl.js

@@ -6,6 +6,7 @@
  * validation and custody metadata) stay in `@oxy.so/contracts`.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { inferenceEnvironmentSchema, oxyApplicationIdSchema, PADDED_BASE64_PATTERN, } from '../public/identifiers.js';
 import { deploymentIdSchema, inferenceProviderSlugSchema } from './identifiers.js';
 /** Opaque reference minted by Kaana. It is not a KMS/Vault/SSM locator. */
@@ -28,7 +29,7 @@ export const kaanaCredentialIdentitySchema = z
     .strict();
 const kaanaCredentialOperationActorSchema = z
     .string()
-    .min(1)
+    .check(minUtf16Length(1))
     .refine((value) => new TextEncoder().encode(value).byteLength <= 256 &&
     value === value.trim() &&
     !/[\r\n]/.test(value), {
@@ -70,8 +71,8 @@ function isVisibleASCIIProviderCredential(value) {
 }
 const kaanaCredentialSecretBase64Schema = z
     .string()
-    .min(1)
-    .max(8192)
+    .check(minUtf16Length(1))
+    .check(maxUtf16Length(8192))
     .regex(PADDED_BASE64_PATTERN)
     .refine(isVisibleASCIIProviderCredential, {
     message: 'a decoded provider credential is 1-4096 visible ASCII bytes',

package/dist/internal/embeddings.js

@@ -4,6 +4,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/embeddings.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { inferenceErrorSchema } from './errors.js';
 export const embeddingVectorSchema = z
     .object({
@@ -24,8 +25,8 @@ export const embeddingUsageSchema = z
 export const embeddingSuccessSchema = z
     .object({
     schemaVersion: z.literal(1),
-    requestId: z.string().min(1).max(128),
-    model: z.string().min(1).max(255),
+    requestId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+    model: z.string().check(minUtf16Length(1)).check(maxUtf16Length(255)),
     dimension: z.number().int().positive().max(1024),
     data: z.array(embeddingVectorSchema).min(1).max(2048),
     usage: embeddingUsageSchema,
@@ -52,7 +53,7 @@ export const embeddingSuccessSchema = z
 export const embeddingFailureSchema = z
     .object({
     schemaVersion: z.literal(1),
-    requestId: z.string().min(1).max(128),
+    requestId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     error: inferenceErrorSchema,
 })
     .strict();

package/dist/internal/errors.js

@@ -5,6 +5,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/errors.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length } from '../stringBounds.js';
 import { publicErrorSchema, safeErrorTextSchema, upstreamErrorCategorySchema, } from '../public/errors.js';
 import { requestIdSchema } from '../public/identifiers.js';
 import { inferenceProviderSlugSchema } from './identifiers.js';
@@ -120,7 +121,7 @@ export const providerErrorPassthroughSchema = z
     /** The upstream HTTP status, when the upstream spoke HTTP. */
     status: z.number().int().min(100).max(599).optional(),
     /** The upstream's own error code, verbatim and uninterpreted. */
-    code: z.string().max(128).optional(),
+    code: z.string().check(maxUtf16Length(128)).optional(),
     /** The upstream's message, subject to the same credential refusal. */
     message: safeErrorTextSchema.optional(),
 })
@@ -143,7 +144,7 @@ export const inferenceErrorSchema = z
     /** How long to wait before retrying. Only meaningful when `retryable`. */
     retryAfterMs: z.number().int().nonnegative().safe().optional(),
     /** The request field at fault, for `invalid_request`. */
-    param: z.string().max(128).optional(),
+    param: z.string().check(maxUtf16Length(128)).optional(),
     /** Present only when an upstream provider was reached and failed. */
     upstreamCategory: upstreamErrorCategorySchema.optional(),
     providerError: providerErrorPassthroughSchema.optional(),

package/dist/internal/grant.js

@@ -18,6 +18,7 @@
  * operation, decisions included, is an ordinary grant of ordered steps.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { powerLevelSchema, realtimeSessionKindSchema } from '../public/catalogue.js';
 import { generationRecordSchema } from '../public/generations.js';
 import { delegatedUserIdSchema, generationIdSchema, idempotencyKeySchema, inferenceEnvironmentSchema, inferenceRegionSchema, inferenceTimestampSchema, modelIdSchema, modelRevisionLabelSchema, oxyApplicationIdSchema, oxyCredentialIdSchema, requestIdSchema, } from '../public/identifiers.js';
@@ -113,7 +114,7 @@ export const grantRequestFactsSchema = z
     realtimeSessionKind: realtimeSessionKindSchema.optional(),
 })
     .strict();
-const credentialSchema = z.string().min(1).max(8192);
+const credentialSchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(8192));
 /**
  * `POST /internal/kaana/v1/authorizations` for an inference request. Kaana
  * authenticates as a workload (Oxy ADR 0026); `credential` is the caller's
@@ -137,8 +138,8 @@ export const inferenceAuthorizationRequestSchema = z
     client: z
         .object({
         /** The public path, e.g. `/v1/responses`. */
-        endpoint: z.string().min(1).max(256),
-        clientRequestId: z.string().min(1).max(128).optional(),
+        endpoint: z.string().check(minUtf16Length(1)).check(maxUtf16Length(256)),
+        clientRequestId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
         receivedAt: inferenceTimestampSchema,
         labels: requestLabelsSchema.optional(),
     })
@@ -227,7 +228,7 @@ export const grantPrincipalSchema = z
 export const admittedModelLineSchema = z
     .object({
     modelLine: modelIdSchema,
-    priceVersionId: z.string().min(1).max(128),
+    priceVersionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
 })
     .strict();
 /**
@@ -250,7 +251,9 @@ export const grantStepLimitsSchema = z
     deniedRegions: z.array(inferenceRegionSchema).default([]),
     requireZeroDataRetention: z.boolean(),
     prohibitTrainingOnCustomerData: z.boolean(),
-    allowedLicenseIds: z.array(z.string().min(1).max(128)).default([]),
+    allowedLicenseIds: z
+        .array(z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)))
+        .default([]),
     requireCommercialUseRights: z.boolean(),
     /**
      * Whether Kaana may fail over, inside this step, between providers (and
@@ -320,7 +323,7 @@ const customerProviderCredentialBinding = authorizedRouteSchema.options[0].shape
 export const grantSchema = z
     .object({
     schemaVersion: z.literal(1),
-    grantId: z.string().min(1).max(128),
+    grantId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     requestId: requestIdSchema,
     operation: grantOperationSchema,
     issuedAt: inferenceTimestampSchema,
@@ -334,14 +337,14 @@ export const grantSchema = z
     economics: z
         .object({
         treatment: inferenceEconomicTreatmentSchema,
-        policyVersion: z.string().min(1).max(128),
-        relationshipId: z.string().min(1).max(128).optional(),
+        policyVersion: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+        relationshipId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
     })
         .strict(),
     /** The hold. Absent for `internal_metered`, which holds nothing. */
     reservation: z
         .object({
-        reservationId: z.string().min(1).max(128),
+        reservationId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
         /** The most the hold covers. Shown, never spent by Kaana. */
         ceiling: moneySchema,
         /** `promotional-only`: the hold draws on promotional credit alone. */
@@ -351,7 +354,7 @@ export const grantSchema = z
         .optional(),
     /** The capacity slot an internal relationship claimed (e.g. `alia-kaana`). */
     capacity: z
-        .object({ meteredUsageId: z.string().min(1).max(128) })
+        .object({ meteredUsageId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)) })
         .strict()
         .optional(),
     steps: z.array(grantStepSchema).min(1).max(8),

package/dist/internal/identifiers.js

@@ -5,6 +5,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/identifiers.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 /**
  * An Oxy account id — the account that owns the workload and is financially
  * responsible for it.
@@ -16,7 +17,11 @@ import { z } from 'zod';
  * of a header, a JWT claim or a request body — is not assignable to it; the
  * only way to obtain one is to parse a value through this schema.
  */
-export const oxyAccountIdSchema = z.string().min(1).max(64).brand();
+export const oxyAccountIdSchema = z
+    .string()
+    .check(minUtf16Length(1))
+    .check(maxUtf16Length(64))
+    .brand();
 /** One path segment of a canonical model id: a lowercase, URL-safe slug. */
 const SLUG_PATTERN = '[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?';
 /**
@@ -29,7 +34,7 @@ const SLUG_PATTERN = '[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?';
  */
 export const routingProfileSlugSchema = z
     .string()
-    .max(64)
+    .check(maxUtf16Length(64))
     .regex(new RegExp(`^${SLUG_PATTERN}$`), 'routing profile must be a lowercase URL-safe slug');
 /**
  * The opaque PostgreSQL identity of one routing profile.
@@ -37,11 +42,14 @@ export const routingProfileSlugSchema = z
  * No trim, case-folding or format heuristic: callers selecting by id must name
  * the exact stored bytes. The database lookup is the authority for existence.
  */
-export const routingProfileIdSchema = z.string().min(1).max(128);
+export const routingProfileIdSchema = z
+    .string()
+    .check(minUtf16Length(1))
+    .check(maxUtf16Length(128));
 /** An inference provider slug, e.g. `openai`, `bedrock`, `oxy-hosted`. */
 export const inferenceProviderSlugSchema = z
     .string()
-    .max(64)
+    .check(maxUtf16Length(64))
     .regex(new RegExp(`^${SLUG_PATTERN}$`), 'provider must be a lowercase URL-safe slug');
 /**
  * A deployment/endpoint id. Opaque to customers: which concrete endpoint served
@@ -49,7 +57,7 @@ export const inferenceProviderSlugSchema = z
  * subset of it is ever attributed back (see the catalogue's serving-boundary
  * rules).
  */
-export const deploymentIdSchema = z.string().min(1).max(128);
+export const deploymentIdSchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(128));
 /**
  * The economic tier of the provider capacity that funds a request, in the
  * order Kaana spends it: `free` (costs nothing), `credit` (a promotional or

package/dist/internal/realtime.js

@@ -5,6 +5,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/realtime.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { realtimeSessionKindSchema, realtimeSessionTransportSchema } from '../public/catalogue.js';
 import { inferenceTimestampSchema, modelReferenceSchema, requestIdSchema, } from '../public/identifiers.js';
 import { usageQuantitySchema, usageSourceSchema } from '../public/money.js';
@@ -23,10 +24,10 @@ const sequenceSchema = z.number().int().nonnegative().safe();
 export const realtimeClientMetadataSchema = z
     .object({
     /** The public path, e.g. `/v1/realtime`. */
-    endpoint: z.string().min(1).max(256),
-    clientSessionId: z.string().min(1).max(128).optional(),
+    endpoint: z.string().check(minUtf16Length(1)).check(maxUtf16Length(256)),
+    clientSessionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
     receivedAt: inferenceTimestampSchema,
-    labels: z.record(z.string(), z.string().max(256)).optional(),
+    labels: z.record(z.string(), z.string().check(maxUtf16Length(256))).optional(),
 })
     .strict();
 const modelLineOf = (reference) => {

package/dist/internal/request.js

@@ -4,6 +4,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/request.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { inferenceApiFormatSchema, inferenceModalitySchema } from '../public/catalogue.js';
 import { decisionInputSchema } from '../public/decisions.js';
 import { idempotencyKeySchema, inferenceTimestampSchema } from '../public/identifiers.js';
@@ -53,11 +54,11 @@ export const clientRequestMetadataSchema = z
     /** The public dialect the customer called. The response is rendered in it. */
     apiFormat: inferenceApiFormatSchema,
     /** The public path, e.g. `/v1/responses`. */
-    endpoint: z.string().min(1).max(256),
+    endpoint: z.string().check(minUtf16Length(1)).check(maxUtf16Length(256)),
     /** The customer's own correlation id, when they sent one. */
-    clientRequestId: z.string().min(1).max(128).optional(),
+    clientRequestId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
     receivedAt: inferenceTimestampSchema,
-    labels: z.record(z.string(), z.string().max(256)).optional(),
+    labels: z.record(z.string(), z.string().check(maxUtf16Length(256))).optional(),
 })
     .strict();
 /**

package/dist/internal/routing.js

@@ -6,6 +6,7 @@
  * controls) stays in `@oxy.so/contracts`: it is a Console resource.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { inferenceRegionSchema, modelReferenceSchema } from '../public/identifiers.js';
 import { kaanaCredentialHandleSchema } from './credentialControl.js';
 import { deploymentIdSchema, inferenceFundingTierSchema, inferenceProviderSlugSchema, oxyAccountIdSchema, routingProfileIdSchema, } from './identifiers.js';
@@ -74,7 +75,7 @@ const authorizedRouteFields = {
         credentialHandle: kaanaCredentialHandleSchema,
         credentialRevision: z.number().int().positive().safe(),
         ownerAccountId: oxyAccountIdSchema,
-        connectionId: z.string().min(1).max(128),
+        connectionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
         environment: z.enum(['development', 'staging', 'production']),
     })
         .strict()

package/dist/internal/settlement.js

@@ -14,6 +14,7 @@
  * New in contract set 4.0.0.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { inferenceTimestampSchema, requestIdSchema } from '../public/identifiers.js';
 import { normalizedUsageReportSchema } from './usage.js';
 /** The signature domain of a settlement, under Kaana's own settlement key. */
@@ -23,14 +24,14 @@ export const settlementSchema = z
     .object({
     schemaVersion: z.literal(1),
     /** The outbox row; stable across redeliveries. */
-    settlementId: z.string().min(1).max(128),
+    settlementId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     /** The idempotency key of the settlement: one grant settles once. */
-    grantId: z.string().min(1).max(128),
+    grantId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     requestId: requestIdSchema,
     /** The grant's hold, when it had one. */
-    reservationId: z.string().min(1).max(128).optional(),
+    reservationId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
     /** The grant's capacity slot, when it claimed one; settling releases it. */
-    meteredUsageId: z.string().min(1).max(128).optional(),
+    meteredUsageId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
     /** The step that served, by position in the grant. Absent when nothing was served. */
     servedStep: z.number().int().nonnegative().max(7).optional(),
     report: normalizedUsageReportSchema,
@@ -57,7 +58,7 @@ export const settlementSchema = z
 export const settlementAcknowledgementSchema = z
     .object({
     schemaVersion: z.literal(1),
-    settlementId: z.string().min(1).max(128),
+    settlementId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     status: z.enum(['settled', 'duplicate']),
 })
     .strict();
@@ -83,6 +84,6 @@ export const settlementPageSchema = z
     .object({
     data: z.array(settlementSchema),
     /** Absent on the last page. */
-    nextCursor: z.string().min(1).max(512).optional(),
+    nextCursor: z.string().check(minUtf16Length(1)).check(maxUtf16Length(512)).optional(),
 })
     .strict();

package/dist/public/audio.js

@@ -8,6 +8,7 @@
  * (decision 9) and transcription are new in contract set 4.0.0.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { audioInputMediaTypeSchema, languageTagSchema, speechFormatSchema, speechMediaType, } from './audioFormats.js';
 import { publicErrorSchema } from './errors.js';
 import { modelReferenceSchema, PADDED_BASE64_PATTERN, requestIdSchema } from './identifiers.js';
@@ -43,8 +44,8 @@ export const speechRequestSchema = z
     .object({
     model: modelReferenceSchema,
     /** Bounded so one request cannot drive the hold arbitrarily high. */
-    input: z.string().min(1).max(MAX_SPEECH_INPUT_CHARACTERS),
-    voice: z.string().min(1).max(64),
+    input: z.string().check(minUtf16Length(1)).check(maxUtf16Length(MAX_SPEECH_INPUT_CHARACTERS)),
+    voice: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)),
     /** Absent means `mp3`. */
     response_format: speechFormatSchema.optional(),
     /** The contract's outer bound; each model publishes its own range. */
@@ -53,7 +54,7 @@ export const speechRequestSchema = z
     /** Only with `stream: true`. Absent means `audio`. */
     stream_format: speechStreamFormatSchema.optional(),
     /** OpenAI's end-user attribution field: the delegated user id, attribution only. */
-    user: z.string().min(1).max(64).optional(),
+    user: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)).optional(),
 })
     .strict()
     .superRefine((request, ctx) => {
@@ -79,7 +80,11 @@ export const speechAudioDeltaEventSchema = z
     .object({
     type: z.literal('speech.audio.delta'),
     /** Standard padded base64 of at most 49 152 bytes of audio. */
-    audio: z.string().min(4).max(65_536).regex(PADDED_BASE64_PATTERN),
+    audio: z
+        .string()
+        .check(minUtf16Length(4))
+        .check(maxUtf16Length(65_536))
+        .regex(PADDED_BASE64_PATTERN),
 })
     .strict();
 /** The last event of a successful stream: what served it and what it consumed. */
@@ -169,7 +174,7 @@ export const transcriptionRequestSchema = z
      * A hint — vocabulary or context that helps the model, never an
      * instruction — used where the model takes one.
      */
-    prompt: z.string().max(4096).optional(),
+    prompt: z.string().check(maxUtf16Length(4096)).optional(),
 })
     .strict();
 /**
@@ -198,8 +203,8 @@ export const transcriptionJsonRequestSchema = transcriptionRequestSchema
         mediaType: audioInputMediaTypeSchema,
         data: z
             .string()
-            .min(4)
-            .max(MAX_TRANSCRIPTION_AUDIO_BASE64_LENGTH)
+            .check(minUtf16Length(4))
+            .check(maxUtf16Length(MAX_TRANSCRIPTION_AUDIO_BASE64_LENGTH))
             .regex(PADDED_BASE64_PATTERN),
     })
         .strict(),

package/dist/public/audioFormats.js

@@ -6,6 +6,7 @@
  * New in contract set 4.0.0 (Kaana ADR 0002, decisions 8 and 9).
  */
 import { z } from 'zod';
+import { maxUtf16Length } from '../stringBounds.js';
 import { inferenceAudioMediaTypeSchema } from './streamEvents.js';
 /**
  * A BCP 47 language tag (`en`, `es-ES`, `zh-Hant-TW`), as voices, models and
@@ -14,7 +15,7 @@ import { inferenceAudioMediaTypeSchema } from './streamEvents.js';
  */
 export const languageTagSchema = z
     .string()
-    .max(35)
+    .check(maxUtf16Length(35))
     .regex(/^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8})*$/, 'must be a BCP 47 language tag');
 /** The formats a speech request names in `response_format`. */
 export const speechFormatSchema = z.enum(['mp3', 'opus', 'aac', 'flac', 'wav', 'pcm']);

package/dist/public/catalogue.js

@@ -4,6 +4,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/catalogue.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { inferenceDateSchema, inferenceHttpsUrlSchema, inferenceRegionSchema, inferenceTimestampSchema, modelIdSchema, modelReferenceSchema, modelRevisionLabelSchema, publisherSlugSchema, } from './identifiers.js';
 import { audioInputMediaTypeSchema, languageTagSchema, realtimeAudioFormatSchema, } from './audioFormats.js';
 import { moneySchema, priceSnapshotSchema } from './money.js';
@@ -223,8 +224,8 @@ export const modelCapabilitiesSchema = z
 export const modelLicenseSchema = z
     .object({
     /** SPDX identifier where one exists, otherwise the publisher's own name. */
-    licenseId: z.string().min(1).max(128),
-    displayName: z.string().min(1).max(200),
+    licenseId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
     url: inferenceHttpsUrlSchema.optional(),
     commercialUseAllowed: z.boolean(),
     requiresAttribution: z.boolean(),
@@ -248,7 +249,7 @@ export const modelProvenanceSchema = z
     ]),
     /** The model this one was derived/fine-tuned from, where there is one. */
     baseModelId: modelIdSchema.optional(),
-    trainingOrganization: z.string().min(1).max(200).optional(),
+    trainingOrganization: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)).optional(),
 })
     .strict();
 /**
@@ -265,7 +266,9 @@ export const inferenceDataPolicySchema = z
     trainsOnCustomerData: z.boolean(),
     zeroDataRetentionAvailable: z.boolean(),
     /** Named subprocessors a payload may pass through, for compliance review. */
-    subprocessors: z.array(z.string().min(1).max(200)).default([]),
+    subprocessors: z
+        .array(z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)))
+        .default([]),
     policyUrl: inferenceHttpsUrlSchema.optional(),
 })
     .strict()
@@ -309,10 +312,10 @@ export const modelDeprecationSchema = z
 /** One published evaluation result for a revision. */
 export const modelEvaluationResultSchema = z
     .object({
-    suite: z.string().min(1).max(128),
-    metric: z.string().min(1).max(128),
+    suite: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+    metric: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     /** Kept as a string: an eval score is published text, not arithmetic. */
-    score: z.string().min(1).max(64),
+    score: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)),
     evaluatedAt: inferenceTimestampSchema.optional(),
     reportUrl: inferenceHttpsUrlSchema.optional(),
 })
@@ -325,7 +328,9 @@ export const modelSafetyMetadataSchema = z
     .object({
     safetyCardUrl: inferenceHttpsUrlSchema.optional(),
     contentFilteringDefault: z.enum(['none', 'provider_default', 'strict']),
-    knownLimitations: z.array(z.string().min(1).max(500)).default([]),
+    knownLimitations: z
+        .array(z.string().check(minUtf16Length(1)).check(maxUtf16Length(500)))
+        .default([]),
     /** Content-provenance marking the modality requires, where it requires one. */
     provenanceMarking: z.enum(['none', 'visible_watermark', 'invisible_watermark', 'c2pa']),
 })
@@ -334,7 +339,7 @@ export const modelSafetyMetadataSchema = z
 export const cataloguePublisherSummarySchema = z
     .object({
     slug: publisherSlugSchema,
-    displayName: z.string().min(1).max(200),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
     websiteUrl: inferenceHttpsUrlSchema.optional(),
 })
     .strict();
@@ -345,8 +350,8 @@ export const cataloguePublisherSummarySchema = z
 export const voiceSchema = z
     .object({
     /** What a speech request names in `voice`. */
-    id: z.string().min(1).max(64),
-    name: z.string().min(1).max(200),
+    id: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)),
+    name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
     /** The languages this voice speaks; each is one of the model's `languages`. */
     languages: z.array(languageTagSchema),
     gender: z.enum(['female', 'male', 'neutral']).optional(),
@@ -455,8 +460,8 @@ export const modelSchema = z.object({
     schemaVersion: z.literal(1),
     modelId: modelIdSchema,
     publisher: cataloguePublisherSummarySchema,
-    displayName: z.string().min(1).max(200),
-    description: z.string().max(4000).optional(),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
+    description: z.string().check(maxUtf16Length(4000)).optional(),
     currentRevision: modelRevisionLabelSchema,
     /** Revisions a customer may pin today, newest first. */
     availableRevisions: z.array(modelRevisionLabelSchema).min(1),