@kaana.ai/contracts 8.0.0 → 8.1.0

package/dist/public/catalogue.js

@@ -4,6 +4,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/catalogue.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { inferenceDateSchema, inferenceHttpsUrlSchema, inferenceRegionSchema, inferenceTimestampSchema, modelIdSchema, modelReferenceSchema, modelRevisionLabelSchema, publisherSlugSchema, } from './identifiers.js';
 import { audioInputMediaTypeSchema, languageTagSchema, realtimeAudioFormatSchema, } from './audioFormats.js';
 import { moneySchema, priceSnapshotSchema } from './money.js';
@@ -223,8 +224,8 @@ export const modelCapabilitiesSchema = z
 export const modelLicenseSchema = z
     .object({
     /** SPDX identifier where one exists, otherwise the publisher's own name. */
-    licenseId: z.string().min(1).max(128),
-    displayName: z.string().min(1).max(200),
+    licenseId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
     url: inferenceHttpsUrlSchema.optional(),
     commercialUseAllowed: z.boolean(),
     requiresAttribution: z.boolean(),
@@ -248,7 +249,7 @@ export const modelProvenanceSchema = z
     ]),
     /** The model this one was derived/fine-tuned from, where there is one. */
     baseModelId: modelIdSchema.optional(),
-    trainingOrganization: z.string().min(1).max(200).optional(),
+    trainingOrganization: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)).optional(),
 })
     .strict();
 /**
@@ -265,7 +266,9 @@ export const inferenceDataPolicySchema = z
     trainsOnCustomerData: z.boolean(),
     zeroDataRetentionAvailable: z.boolean(),
     /** Named subprocessors a payload may pass through, for compliance review. */
-    subprocessors: z.array(z.string().min(1).max(200)).default([]),
+    subprocessors: z
+        .array(z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)))
+        .default([]),
     policyUrl: inferenceHttpsUrlSchema.optional(),
 })
     .strict()
@@ -309,10 +312,10 @@ export const modelDeprecationSchema = z
 /** One published evaluation result for a revision. */
 export const modelEvaluationResultSchema = z
     .object({
-    suite: z.string().min(1).max(128),
-    metric: z.string().min(1).max(128),
+    suite: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+    metric: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     /** Kept as a string: an eval score is published text, not arithmetic. */
-    score: z.string().min(1).max(64),
+    score: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)),
     evaluatedAt: inferenceTimestampSchema.optional(),
     reportUrl: inferenceHttpsUrlSchema.optional(),
 })
@@ -325,7 +328,9 @@ export const modelSafetyMetadataSchema = z
     .object({
     safetyCardUrl: inferenceHttpsUrlSchema.optional(),
     contentFilteringDefault: z.enum(['none', 'provider_default', 'strict']),
-    knownLimitations: z.array(z.string().min(1).max(500)).default([]),
+    knownLimitations: z
+        .array(z.string().check(minUtf16Length(1)).check(maxUtf16Length(500)))
+        .default([]),
     /** Content-provenance marking the modality requires, where it requires one. */
     provenanceMarking: z.enum(['none', 'visible_watermark', 'invisible_watermark', 'c2pa']),
 })
@@ -334,7 +339,7 @@ export const modelSafetyMetadataSchema = z
 export const cataloguePublisherSummarySchema = z
     .object({
     slug: publisherSlugSchema,
-    displayName: z.string().min(1).max(200),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
     websiteUrl: inferenceHttpsUrlSchema.optional(),
 })
     .strict();
@@ -345,8 +350,8 @@ export const cataloguePublisherSummarySchema = z
 export const voiceSchema = z
     .object({
     /** What a speech request names in `voice`. */
-    id: z.string().min(1).max(64),
-    name: z.string().min(1).max(200),
+    id: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)),
+    name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
     /** The languages this voice speaks; each is one of the model's `languages`. */
     languages: z.array(languageTagSchema),
     gender: z.enum(['female', 'male', 'neutral']).optional(),
@@ -455,8 +460,8 @@ export const modelSchema = z.object({
     schemaVersion: z.literal(1),
     modelId: modelIdSchema,
     publisher: cataloguePublisherSummarySchema,
-    displayName: z.string().min(1).max(200),
-    description: z.string().max(4000).optional(),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
+    description: z.string().check(maxUtf16Length(4000)).optional(),
     currentRevision: modelRevisionLabelSchema,
     /** Revisions a customer may pin today, newest first. */
     availableRevisions: z.array(modelRevisionLabelSchema).min(1),

package/dist/public/chatCompletions.js

@@ -14,22 +14,23 @@
  * the Oxy edge rendered them in code only.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { reasoningEffortSchema } from './catalogue.js';
 import { publicErrorCodeSchema } from './errors.js';
 import { inferenceContentPartSchema } from './messages.js';
 import { modelTargetSchema } from './responses.js';
 /** `stop` in the OpenAI dialect: one sequence or a list of them. */
 const openAiStopSchema = z.union([
-    z.string().min(1).max(256),
-    z.array(z.string().min(1).max(256)).max(8),
+    z.string().check(minUtf16Length(1)).check(maxUtf16Length(256)),
+    z.array(z.string().check(minUtf16Length(1)).check(maxUtf16Length(256))).max(8),
 ]);
 const openAiToolCallSchema = z
     .object({
-    id: z.string().min(1).max(128),
+    id: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     type: z.literal('function'),
     function: z
         .object({
-        name: z.string().min(1).max(128),
+        name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
         arguments: z.string(),
     })
         .strict(),
@@ -47,8 +48,8 @@ export const chatCompletionMessageSchema = z
         .union([z.string(), z.array(inferenceContentPartSchema)])
         .nullable()
         .optional(),
-    name: z.string().max(128).optional(),
-    tool_call_id: z.string().min(1).max(128).optional(),
+    name: z.string().check(maxUtf16Length(128)).optional(),
+    tool_call_id: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
     tool_calls: z.array(openAiToolCallSchema).optional(),
 })
     .strict();
@@ -57,8 +58,8 @@ const openAiToolSchema = z
     type: z.literal('function'),
     function: z
         .object({
-        name: z.string().min(1).max(128),
-        description: z.string().max(2000).optional(),
+        name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+        description: z.string().check(maxUtf16Length(2000)).optional(),
         parameters: z.record(z.string(), z.unknown()),
         strict: z.boolean().optional(),
     })
@@ -70,7 +71,9 @@ const openAiToolChoiceSchema = z.union([
     z
         .object({
         type: z.literal('function'),
-        function: z.object({ name: z.string().min(1).max(128) }).strict(),
+        function: z
+            .object({ name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)) })
+            .strict(),
     })
         .strict(),
 ]);
@@ -81,7 +84,7 @@ const openAiToolChoiceSchema = z.union([
  */
 const openAiAudioOutputSchema = z
     .object({
-    voice: z.string().min(1).max(64),
+    voice: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)),
     format: z.enum(['wav', 'mp3', 'flac', 'opus', 'pcm16']),
 })
     .strict();
@@ -92,7 +95,7 @@ const openAiResponseFormatSchema = z.union([
         type: z.literal('json_schema'),
         json_schema: z
             .object({
-            name: z.string().min(1).max(128),
+            name: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
             schema: z.record(z.string(), z.unknown()),
             strict: z.boolean().optional(),
         })
@@ -135,7 +138,7 @@ export const chatCompletionsRequestSchema = z
      * OpenAI's end-user attribution field: the DELEGATED user id, attribution
      * only. `X-Oxy-User-Id` wins when both are present.
      */
-    user: z.string().min(1).max(64).optional(),
+    user: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)).optional(),
 })
     .strict()
     .superRefine((request, ctx) => {
@@ -214,12 +217,12 @@ export const chatCompletionUsageSchema = z
  */
 export const chatCompletionSchema = z
     .object({
-    id: z.string().min(1),
+    id: z.string().check(minUtf16Length(1)),
     object: z.literal('chat.completion'),
     /** Unix seconds, as OpenAI's own field is. */
     created: z.number().int().nonnegative(),
     /** The revision that served the request. */
-    model: z.string().min(1),
+    model: z.string().check(minUtf16Length(1)),
     choices: z.array(z
         .object({
         index: z.number().int().nonnegative(),
@@ -231,7 +234,7 @@ export const chatCompletionSchema = z
             /** Spoken output. `expires_at` is `created`: Kaana retains no audio. */
             audio: z
                 .object({
-                id: z.string().min(1),
+                id: z.string().check(minUtf16Length(1)),
                 data: z.string(),
                 transcript: z.string(),
                 expires_at: z.number().int().nonnegative(),
@@ -245,7 +248,7 @@ export const chatCompletionSchema = z
          * OpenAI's vocabulary, which has neither `cancelled` nor `refusal`:
          * both are reported as `stop` here.
          */
-        finish_reason: z.string().min(1),
+        finish_reason: z.string().check(minUtf16Length(1)),
     })
         .strict()),
     usage: chatCompletionUsageSchema,
@@ -261,10 +264,10 @@ export const chatCompletionSchema = z
  */
 export const chatCompletionChunkSchema = z
     .object({
-    id: z.string().min(1),
+    id: z.string().check(minUtf16Length(1)),
     object: z.literal('chat.completion.chunk'),
     created: z.number().int().nonnegative(),
-    model: z.string().min(1),
+    model: z.string().check(minUtf16Length(1)),
     choices: z.array(z
         .object({
         index: z.number().int().nonnegative(),
@@ -275,7 +278,7 @@ export const chatCompletionChunkSchema = z
             refusal: z.string().optional(),
             audio: z
                 .object({
-                id: z.string().min(1),
+                id: z.string().check(minUtf16Length(1)),
                 data: z.string().optional(),
                 transcript: z.string().optional(),
                 expires_at: z.number().int().nonnegative().optional(),
@@ -286,7 +289,7 @@ export const chatCompletionChunkSchema = z
                 .array(z
                 .object({
                 index: z.number().int().nonnegative(),
-                id: z.string().min(1).optional(),
+                id: z.string().check(minUtf16Length(1)).optional(),
                 type: z.literal('function').optional(),
                 function: z
                     .object({ name: z.string().optional(), arguments: z.string().optional() })
@@ -296,7 +299,7 @@ export const chatCompletionChunkSchema = z
                 .optional(),
         })
             .strict(),
-        finish_reason: z.string().min(1).nullable(),
+        finish_reason: z.string().check(minUtf16Length(1)).nullable(),
     })
         .strict()),
     usage: chatCompletionUsageSchema.optional(),
@@ -311,8 +314,8 @@ export const chatCompletionErrorSchema = z
     .object({
     error: z
         .object({
-        message: z.string().min(1),
-        type: z.string().min(1),
+        message: z.string().check(minUtf16Length(1)),
+        type: z.string().check(minUtf16Length(1)),
         param: z.string().nullable(),
         code: publicErrorCodeSchema,
     })

package/dist/public/decisions.js

@@ -4,12 +4,13 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/decisions.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { modelReferenceSchema, requestIdSchema } from './identifiers.js';
 import { usageQuantitySchema } from './money.js';
 import { routingPolicyReferenceSchema } from './policy.js';
 const probability = z.number().finite().min(0).max(1);
-const text = z.string().min(1).max(65536);
-const id = z.string().min(1).max(128);
+const text = z.string().check(minUtf16Length(1)).check(maxUtf16Length(65536));
+const id = z.string().check(minUtf16Length(1)).check(maxUtf16Length(128));
 const tolerance = 1e-6;
 export const decisionEffortSchema = z.enum(['instant', 'low', 'medium', 'high', 'xhigh']);
 const common = { id, question: text, criteria: text.optional() };
@@ -31,7 +32,7 @@ export const decisionQuestionSchema = z.discriminatedUnion('kind', [
     z.object({ ...common, kind: z.literal('noul') }).strict(),
 ]);
 const payloadFields = {
-    state: z.string().max(65536),
+    state: z.string().check(maxUtf16Length(65536)),
     instructions: text.optional(),
     questions: z.array(decisionQuestionSchema).min(1).max(255),
     effort: decisionEffortSchema.optional(),

package/dist/public/embeddings.js

@@ -8,6 +8,7 @@
  * vectors of at most 1024 dimensions.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { modelReferenceSchema } from './identifiers.js';
 /** The most inputs one request may embed. */
 export const MAX_EMBEDDING_INPUTS = 2048;
@@ -16,15 +17,18 @@ export const embeddingsRequestSchema = z
     /** A concrete model: an embedding space is a property of exact weights. */
     model: modelReferenceSchema,
     input: z.union([
-        z.string().min(1),
-        z.array(z.string().min(1)).min(1).max(MAX_EMBEDDING_INPUTS),
+        z.string().check(minUtf16Length(1)),
+        z
+            .array(z.string().check(minUtf16Length(1)))
+            .min(1)
+            .max(MAX_EMBEDDING_INPUTS),
     ]),
     /** Only `float`: base64 vectors are an encoding the contract does not carry. */
     encoding_format: z.literal('float').optional(),
     /** Requested output dimension, for models that can shorten their vectors. */
     dimensions: z.number().int().positive().max(1024).optional(),
     /** OpenAI's end-user attribution field: the delegated user id, attribution only. */
-    user: z.string().min(1).max(64).optional(),
+    user: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)).optional(),
 })
     .strict();
 export const embeddingsResponseSchema = z

package/dist/public/errors.js

@@ -4,6 +4,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/errors.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { requestIdSchema } from './identifiers.js';
 /**
  * A run of characters long enough and opaque enough to BE a credential.
@@ -104,8 +105,8 @@ const CREDENTIAL_PATTERNS = [
  */
 export const safeErrorTextSchema = z
     .string()
-    .min(1)
-    .max(2000)
+    .check(minUtf16Length(1))
+    .check(maxUtf16Length(2000))
     .refine((value) => !CREDENTIAL_PATTERNS.some((pattern) => pattern.test(value)), 'error text must not contain credential-shaped material');
 /**
  * A coarse classification of an upstream failure (ADR 0010's `upstreamCategory`).
@@ -251,7 +252,7 @@ export const publicErrorSchema = z
     /** How long to wait before retrying. Only meaningful when `retryable`. */
     retryAfterMs: z.number().int().nonnegative().safe().optional(),
     /** The request field at fault, for `invalid_request`. */
-    param: z.string().max(128).optional(),
+    param: z.string().check(maxUtf16Length(128)).optional(),
     /** The kind of upstream failure, when an upstream was reached. Provider-neutral. */
     upstreamCategory: upstreamErrorCategorySchema.optional(),
 })

package/dist/public/generations.js

@@ -14,6 +14,7 @@
  * provider: no public record names a provider, a key or a deployment.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { delegatedUserIdSchema, generationIdSchema, inferenceEnvironmentSchema, inferenceTimestampSchema, modelReferenceSchema, oxyApplicationIdSchema, oxyCredentialIdSchema, requestIdSchema, } from './identifiers.js';
 import { requestLabelsSchema } from './messages.js';
 import { currencyCodeSchema, exactDecimalSchema, priceSnapshotSchema, usageQuantitySchema, usageSourceSchema, } from './money.js';
@@ -65,7 +66,7 @@ export const chargedGenerationRecordSchema = z
     .object({
     ...recordFields,
     kind: z.literal('charge'),
-    receiptId: z.string().min(1).max(128),
+    receiptId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     priceSnapshot: priceSnapshotSchema,
     billedAmount: exactDecimalSchema,
     currency: currencyCodeSchema,
@@ -91,7 +92,7 @@ export const meteredGenerationRecordSchema = z
     .object({
     ...recordFields,
     kind: z.literal('metered_usage'),
-    meteredUsageId: z.string().min(1).max(128),
+    meteredUsageId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     /** The request this one ran inside, for a child such as an Auto classification. */
     parentRequestId: requestIdSchema.optional(),
     tariff: z.discriminatedUnion('status', [
@@ -100,13 +101,13 @@ export const meteredGenerationRecordSchema = z
             status: z.literal('quoted'),
             amount: exactDecimalSchema,
             currency: currencyCodeSchema,
-            priceVersionId: z.string().min(1).max(128),
+            priceVersionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
         })
             .strict(),
         z
             .object({
             status: z.literal('unpriced'),
-            priceVersionId: z.string().min(1).max(128).nullable(),
+            priceVersionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).nullable(),
         })
             .strict(),
     ]),

package/dist/public/identifiers.js

@@ -7,6 +7,8 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/identifiers.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { utcTimestampCheck } from '../timestampCheck.js';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 /**
  * A delegated end-user identity (Alia's `X-Oxy-User-Id`), branded with a
  * DIFFERENT brand from {@link oxyAccountIdSchema} so the two cannot be
@@ -17,16 +19,20 @@ import { z } from 'zod';
  * a billing principal, never an access-control principal, and its presence
  * never changes which account is charged.
  */
-export const delegatedUserIdSchema = z.string().min(1).max(64).brand();
+export const delegatedUserIdSchema = z
+    .string()
+    .check(minUtf16Length(1))
+    .check(maxUtf16Length(64))
+    .brand();
 /**
  * An Oxy `Application._id`. Not branded: no invariant in this contract turns on
  * confusing it with another id, and brand inflation costs every producer a
  * parse call for no safety. The two ids above are branded because ADR 0007's
  * rule is exactly that they must not be interchangeable.
  */
-export const oxyApplicationIdSchema = z.string().min(1).max(64);
+export const oxyApplicationIdSchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(64));
 /** An Oxy `ApplicationCredential._id` — the credential used for this request. */
-export const oxyCredentialIdSchema = z.string().min(1).max(64);
+export const oxyCredentialIdSchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(64));
 /**
  * A request id allocated by the Oxy EDGE, at admission and BEFORE
  * authentication, so that a request rejected for a bad credential is as
@@ -48,18 +54,18 @@ export const oxyCredentialIdSchema = z.string().min(1).max(64);
  * customer-visible receipt, so it appears on every stream event and every
  * ledger record.
  */
-export const requestIdSchema = z.string().min(1).max(128);
+export const requestIdSchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(128));
 /**
  * A generation id generated by the data plane, present when a request produced
  * a generation that can be looked up later (`GET /v1/generations/:id`).
  */
-export const generationIdSchema = z.string().min(1).max(128);
+export const generationIdSchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(128));
 /**
  * A caller-supplied idempotency key. Every reserve/settle/refund call is keyed
  * on one so a retry, a redelivered event or a duplicated webhook can never
  * charge twice.
  */
-export const idempotencyKeySchema = z.string().min(1).max(255);
+export const idempotencyKeySchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(255));
 /** Credential environments. A credential is issued into exactly one of them. */
 export const inferenceEnvironmentSchema = z.enum(['development', 'staging', 'production']);
 /**
@@ -71,7 +77,7 @@ export const inferenceEnvironmentSchema = z.enum(['development', 'staging', 'pro
  * settled. One canonical spelling (UTC, `Z`) so two records that describe the
  * same moment compare and sort as equal, which a mix of offsets would not.
  */
-export const inferenceTimestampSchema = z.string().datetime();
+export const inferenceTimestampSchema = z.string().check(utcTimestampCheck());
 /**
  * A calendar DATE with no instant attached (`2026-05-01`) — a knowledge cutoff
  * or a release date, which are published as days and become wrong when a
@@ -83,7 +89,7 @@ export const inferenceDateSchema = z
 /** An absolute https URL, for model cards, licenses and provider documentation. */
 export const inferenceHttpsUrlSchema = z
     .string()
-    .max(2048)
+    .check(maxUtf16Length(2048))
     .regex(/^https:\/\/[^\s]+$/, 'must be an absolute https URL');
 /**
  * A content digest, `sha256:<64 lowercase hex>`.
@@ -106,12 +112,12 @@ const REVISION_PATTERN = '[a-zA-Z0-9](?:[a-zA-Z0-9._-]*[a-zA-Z0-9])?';
 /** A publisher slug, e.g. `openai`, `anthropic`, `meta`, `alia`. */
 export const publisherSlugSchema = z
     .string()
-    .max(64)
+    .check(maxUtf16Length(64))
     .regex(new RegExp(`^${SLUG_PATTERN}$`), 'publisher must be a lowercase URL-safe slug');
 /** A model slug within its publisher's namespace, e.g. `gpt-5`, `llama-3.1-70b`. */
 export const modelSlugSchema = z
     .string()
-    .max(64)
+    .check(maxUtf16Length(64))
     .regex(new RegExp(`^${SLUG_PATTERN}$`), 'model must be a lowercase URL-safe slug');
 /**
  * A canonical model id, `<publisher>/<model>`. This names a MODEL — a
@@ -120,12 +126,12 @@ export const modelSlugSchema = z
  */
 export const modelIdSchema = z
     .string()
-    .max(129)
+    .check(maxUtf16Length(129))
     .regex(new RegExp(`^${SLUG_PATTERN}/${SLUG_PATTERN}$`), 'model id must be <publisher>/<model>');
 /** An immutable revision label, unique within its model, e.g. `2026-05-01`. */
 export const modelRevisionLabelSchema = z
     .string()
-    .max(64)
+    .check(maxUtf16Length(64))
     .regex(new RegExp(`^${REVISION_PATTERN}$`), 'revision must be a URL-safe label');
 /**
  * A model reference as a customer writes it: `<publisher>/<model>` (the model's
@@ -139,7 +145,7 @@ export const modelRevisionLabelSchema = z
  */
 export const modelReferenceSchema = z
     .string()
-    .max(194)
+    .check(maxUtf16Length(194))
     .regex(new RegExp(`^${SLUG_PATTERN}/${SLUG_PATTERN}(?:@${REVISION_PATTERN})?$`), 'model reference must be <publisher>/<model> or <publisher>/<model>@<revision>');
 /**
  * A region identifier, e.g. `us-west-2`, `eu-central-1`. Free-form rather than
@@ -148,7 +154,7 @@ export const modelReferenceSchema = z
  */
 export const inferenceRegionSchema = z
     .string()
-    .max(64)
+    .check(maxUtf16Length(64))
     .regex(new RegExp(`^${SLUG_PATTERN}$`), 'region must be a lowercase URL-safe slug');
 /**
  * The publisher namespace reserved for models Alia actually owns or derives.

package/dist/public/images.js

@@ -7,18 +7,19 @@
  * catalogue, because a price prices a unit, not a `(unit, size, quality)` tuple.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { modelReferenceSchema } from './identifiers.js';
 export const imageGenerationsRequestSchema = z
     .object({
     model: modelReferenceSchema,
-    prompt: z.string().min(1).max(32_000),
+    prompt: z.string().check(minUtf16Length(1)).check(maxUtf16Length(32_000)),
     /** OpenAI caps this at 10. Exact, declared, and the whole ceiling. */
     n: z.number().int().min(1).max(10).optional(),
-    size: z.string().min(1).max(32).optional(),
-    quality: z.string().min(1).max(32).optional(),
-    style: z.string().min(1).max(32).optional(),
+    size: z.string().check(minUtf16Length(1)).check(maxUtf16Length(32)).optional(),
+    quality: z.string().check(minUtf16Length(1)).check(maxUtf16Length(32)).optional(),
+    style: z.string().check(minUtf16Length(1)).check(maxUtf16Length(32)).optional(),
     response_format: z.enum(['url', 'b64_json']).optional(),
-    user: z.string().min(1).max(64).optional(),
+    user: z.string().check(minUtf16Length(1)).check(maxUtf16Length(64)).optional(),
 })
     .strict();
 /**
@@ -29,8 +30,8 @@ export const imageGenerationsSchema = z
     .object({
     created: z.number().int().nonnegative(),
     data: z.array(z.union([
-        z.object({ url: z.string().min(1) }).strict(),
-        z.object({ b64_json: z.string().min(1) }).strict(),
+        z.object({ url: z.string().check(minUtf16Length(1)) }).strict(),
+        z.object({ b64_json: z.string().check(minUtf16Length(1)) }).strict(),
     ])),
 })
     .strict();