Adopt Zod 4.5 across AgentLayer

.github/workflows/ci.yml

@@ -22,6 +22,7 @@ jobs:
           path: ~/.bun/install/cache
           key: bun-${{ runner.os }}-${{ hashFiles('**/bun.lock') }}
       - run: bun install --frozen-lockfile
+      - run: bun run check:zod
       - run: bun run biome:check
       - run: bun run typecheck
       - run: bun run test:ci

.github/workflows/publish-validate.yml

@@ -23,6 +23,7 @@ jobs:
           node-version: 22
           registry-url: https://registry.npmjs.org
       - run: bun install --frozen-lockfile
+      - run: bun run check:zod
       - run: bun run build:packages
       - run: bun run release:prepare --version "${{ inputs.version }}"
       - run: bun run release:publish --version "${{ inputs.version }}" --dry-run

.github/workflows/release.yml

@@ -24,6 +24,7 @@ jobs:
         id: version
         run: bun run scripts/release/tag-info.ts
       - run: bun install --frozen-lockfile
+      - run: bun run check:zod
       - run: bun run biome:check
       - run: bun run typecheck
       - run: bun run test:ci

agents/codelayer/src/cli.ts

@@ -1,4 +1,5 @@
 #!/usr/bin/env bun
+import 'zod/compile'
 import { createCodelayerCommand } from './command'
 
 await createCodelayerCommand().parseAsync(process.argv)

agents/docs-agent/package.json

@@ -20,11 +20,12 @@
 		"@humanlayer/agentlayer-filesystem": "workspace:*",
 		"@humanlayer/codelayer": "workspace:*",
 		"@types/bun": "latest",
-		"commander": "catalog:",
-		"zod": "catalog:"
+		"commander": "catalog:"
 	},
 	"peerDependencies": {
 		"typescript": "^5"
 	},
-	"dependencies": {}
+	"dependencies": {
+		"zod": "catalog:"
+	}
 }

agents/docs-agent/src/workflow.ts

@@ -1,4 +1,5 @@
 #!/usr/bin/env bun
+import 'zod/compile'
 import { resolve } from 'node:path'
 import { $ } from 'bun'
 import { Command } from 'commander'

examples/yjs-fs-agent/package.json

@@ -20,7 +20,8 @@
 		"ai": "catalog:",
 		"secure-exec": "^0.2.1",
 		"y-protocols": "1.0.7",
-		"yjs": "13.6.30"
+		"yjs": "13.6.30",
+		"zod": "catalog:"
 	},
 	"devDependencies": {
 		"@types/bun": "latest",

examples/yjs-fs-agent/src/run.ts

@@ -1,4 +1,5 @@
 #!/usr/bin/env bun
+import 'zod/compile'
 import readline from 'node:readline/promises'
 import { anthropic } from '@ai-sdk/anthropic'
 import { YjsProvider } from '@durable-streams/y-durable-streams'

examples/yjs-fs-editor/package.json

@@ -20,7 +20,7 @@
 		"@tiptap/extension-collaboration-cursor": "^2.11.0",
 		"@tiptap/react": "^2.11.0",
 		"@tiptap/starter-kit": "^2.11.0",
-		"@tanstack/react-router": "^1.93.0",
+		"@tanstack/react-router": "1.170.32",
 		"@humanlayer/yjs-fs-react": "workspace:*",
 		"monaco-editor": "^0.52.0",
 		"y-monaco": "^0.1.6",
@@ -33,7 +33,7 @@
 	"devDependencies": {
 		"@types/react": "^18.3.12",
 		"@types/react-dom": "^18.3.1",
-		"@tanstack/router-plugin": "^1.93.0",
+		"@tanstack/router-plugin": "1.168.35",
 		"@vitejs/plugin-react": "^4.3.4",
 		"typescript": "^5.6.3",
 		"vite": "^6.0.0",

package.json

@@ -7,8 +7,9 @@
 		"biome:check": "biome check .",
 		"build": "bun --filter '*' build",
 		"build:packages": "bun --filter './packages/*' --filter './agents/*' build",
-		"check": "bun --parallel 'typecheck' 'biome' 'test:ci' 'check:release'",
+		"check": "bun --parallel 'typecheck' 'biome' 'test:ci' 'check:release' 'check:zod'",
 		"check:release": "bun run scripts/release/validate-manifest.ts",
+		"check:zod": "bun run scripts/check-zod-version.ts",
 		"dev": "bun --filter '*' dev",
 		"docs:build": "bun --filter '@humanlayer/agentlayer-docs' build",
 		"githooks": "mkdir -p scripts/hooks && cp scripts/hooks/pre-push $(git rev-parse --git-common-dir)/hooks/pre-push && chmod +x $(git rev-parse --git-common-dir)/hooks/pre-push",
@@ -53,7 +54,7 @@
 		"effect": "4.0.0-beta.107",
         "minimatch": "10.1.1",
         "typescript": "5.9.3",
-        "zod": "4.3.6"
+        "zod": "4.5.4"
     },
     "dependencies": {}
 }

scripts/check-zod-version.ts

@@ -0,0 +1,45 @@
+#!/usr/bin/env bun
+
+const rootPackage = await Bun.file(new URL('../package.json', import.meta.url)).json()
+const expectedVersion = rootPackage.catalog?.zod
+
+if (typeof expectedVersion !== 'string') {
+	throw new Error('The root catalog must define an exact Zod version')
+}
+
+const errors: string[] = []
+
+for (const workspaceDirectory of ['agents', 'examples', 'packages']) {
+	const glob = new Bun.Glob('*/package.json')
+	for await (const relativePath of glob.scan({ cwd: new URL(`../${workspaceDirectory}/`, import.meta.url).pathname })) {
+		const manifestPath = `${workspaceDirectory}/${relativePath}`
+		const manifest = await Bun.file(new URL(`../${manifestPath}`, import.meta.url)).json()
+
+		for (const dependencyType of [
+			'dependencies',
+			'devDependencies',
+			'optionalDependencies',
+			'peerDependencies',
+		] as const) {
+			const declaredVersion = manifest[dependencyType]?.zod
+			if (declaredVersion !== undefined && declaredVersion !== 'catalog:') {
+				errors.push(`${manifestPath}: ${dependencyType}.zod must use "catalog:", found ${declaredVersion}`)
+			}
+		}
+	}
+}
+
+const lockfile = await Bun.file(new URL('../bun.lock', import.meta.url)).text()
+const resolvedVersions = new Set([...lockfile.matchAll(/\bzod@(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)/g)].map((match) => match[1]))
+
+if (resolvedVersions.size !== 1 || !resolvedVersions.has(expectedVersion)) {
+	errors.push(
+		`bun.lock must resolve only zod@${expectedVersion}, found: ${[...resolvedVersions].sort().join(', ') || 'none'}`,
+	)
+}
+
+if (errors.length > 0) {
+	throw new Error(`Zod version alignment failed:\n${errors.map((error) => `- ${error}`).join('\n')}`)
+}
+
+console.log(`Zod version alignment passed (${expectedVersion})`)