Files
agentic-dev/packages/core-realtime/docs/library-decisions/2026-05-14-zod.md
Danijel Martinek e50306cbf6 feat(core-realtime): scaffold realtime optional core
Generator-emitted scaffold (pnpm turbo gen core-package realtime) plus
the story-00-precedent coverage repairs (coverage provider devDep,
symbols.ts exclude + tested allowlist mirror) and three minimal tests
covering generator-emitted realtime code the template suite misses.
Squash of 31d85e0 + review-fix cf11b38.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016j8z4VHjedXDTjEDNg7qHK
2026-07-12 20:35:09 +02:00

1.4 KiB

package, version, tier, decision, date, deciders, adr, filter-results, verification-commands, accepted-cves
package version tier decision date deciders adr filter-results verification-commands accepted-cves
zod ^3.23.0 core approved 2026-05-14
scaffolded
adr-016
license types maintenance boundary-fit shadow-check eu-residency cve-scan named-consumer
MIT native active pass pass n/a clean pass
pnpm audit --audit-level=moderate
npm view zod license

Filter: license

MIT — on the workspace allowlist.

Filter: types

Ships first-party TypeScript types in its distribution (.d.ts included).

Filter: maintenance

Active. Regular releases by Colin McDonnell; widely adopted.

Filter: boundary-fit

Core package. Zod is the workspace-canonical validation library locked in core-shared (ADR-016).

Filter: shadow-check

Zod is already the workspace-locked validation library. No shadow.

Filter: eu-residency

Pure computation; no network calls or vendor data transmission. n/a.

Filter: cve-scan

No advisories at adoption time.

Filter: named-consumer

core-realtime uses zod for channel descriptor and payload schema validation.

Prompt: replaces

Nothing — zod is the pre-existing workspace validation library.

Prompt: migration-cost-out

Mechanical: swap schema definitions at call sites. No data-format lock-in.

Prompt: alternatives-considered

Zod is workspace-locked (see core-shared). A replacement would require a workspace-wide ADR; no alternative was evaluated here.