Generator-emitted scaffold (pnpm turbo gen core-package realtime) plus the story-00-precedent coverage repairs (coverage provider devDep, symbols.ts exclude + tested allowlist mirror) and three minimal tests covering generator-emitted realtime code the template suite misses. Squash of 31d85e0 + review-fix cf11b38. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016j8z4VHjedXDTjEDNg7qHK
1.4 KiB
package, version, tier, decision, date, deciders, adr, filter-results, verification-commands, accepted-cves
| package | version | tier | decision | date | deciders | adr | filter-results | verification-commands | accepted-cves | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| zod | ^3.23.0 | core | approved | 2026-05-14 |
|
adr-016 |
|
|
Filter: license
MIT — on the workspace allowlist.
Filter: types
Ships first-party TypeScript types in its distribution (.d.ts included).
Filter: maintenance
Active. Regular releases by Colin McDonnell; widely adopted.
Filter: boundary-fit
Core package. Zod is the workspace-canonical validation library locked in core-shared (ADR-016).
Filter: shadow-check
Zod is already the workspace-locked validation library. No shadow.
Filter: eu-residency
Pure computation; no network calls or vendor data transmission. n/a.
Filter: cve-scan
No advisories at adoption time.
Filter: named-consumer
core-realtime uses zod for channel descriptor and payload schema validation.
Prompt: replaces
Nothing — zod is the pre-existing workspace validation library.
Prompt: migration-cost-out
Mechanical: swap schema definitions at call sites. No data-format lock-in.
Prompt: alternatives-considered
Zod is workspace-locked (see core-shared). A replacement would require a workspace-wide ADR; no alternative was evaluated here.