Files
agentic-dev/docs/library-decisions/2026-05-14-zod.md
Danijel Martinek fc13424e9d feat(core-events): scaffold events optional core
Scaffolded via pnpm turbo gen core-package events (generator-first,
ADR-022 pre-shipped zod trace landed in docs/library-decisions/).
Generator wired transpilePackages + E1/J eslint rule block. Two
story-00-precedent additions so the coverage gates pass: the
@vitest/coverage-v8 devDep (L0 sweep) and the honest symbols.ts
exclude (mirroring core-shared/vitest.config.ts) plus its missing
ALLOWED_GLOBS mirror in scripts/coverage/diff.mjs (L1 gate). No
consumers wired — compile-green floor for the walking-skeleton
PRD (ADR-027).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016j8z4VHjedXDTjEDNg7qHK
2026-07-12 20:35:09 +02:00

1.4 KiB

package, version, tier, decision, date, deciders, adr, filter-results, verification-commands, accepted-cves
package version tier decision date deciders adr filter-results verification-commands accepted-cves
zod ^3.23.0 core approved 2026-05-14
scaffolded
adr-015
license types maintenance boundary-fit shadow-check eu-residency cve-scan named-consumer
MIT native active pass pass n/a clean pass
pnpm audit --audit-level=moderate
npm view zod license

Filter: license

MIT — on the workspace allowlist.

Filter: types

Ships first-party TypeScript types in its distribution (.d.ts included).

Filter: maintenance

Active. Regular releases by Colin McDonnell; widely adopted.

Filter: boundary-fit

Core package. Zod is the workspace-canonical validation library locked in core-shared (ADR-015).

Filter: shadow-check

Zod is already the workspace-locked validation library. No shadow.

Filter: eu-residency

Pure computation; no network calls or vendor data transmission. n/a.

Filter: cve-scan

No advisories at adoption time.

Filter: named-consumer

core-events uses zod for event-descriptor payload schemas.

Prompt: replaces

Nothing — zod is the pre-existing workspace validation library.

Prompt: migration-cost-out

Mechanical: swap schema definitions at call sites. No data-format lock-in.

Prompt: alternatives-considered

Zod is workspace-locked (see core-shared). A replacement would require a workspace-wide ADR; no alternative was evaluated here.