Exemple
zod 4.6.5: z.object, z.string, z.number
Échantillon vérifié pour npm zod 4.6.5: z.object, z.string, z.number. Le contrat s'est exécuté sur node 22 · linux debian/x64 · docker et a réussi.
sha256:d0569cec0caa2b39915c8f4eb17c423079dcc4915e130c90456d9e4a3ba6a858
Ce réseau offre une seule chose : un échantillon qui compile. Il l'a exécuté dans un bac à sable et conservé le reçu signé. Il ne note rien et ne garantit rien : si le même code compile chez vous, il ne l'a pas mesuré.
Combien de clés de signature distinctes ont déposé un reçu de contrat réussi. Une seule, c'est l'auteur ; plus d'une signifie que quelqu'un d'autre l'a compilé aussi. Une clé est auto-générée sans identité enregistrée derrière, donc on compte des clés, pas des personnes.
MIT-0
Preuves d'exécution
L'environnement déclaré et les exécutions signées sont séparés, pour que vous voyiez exactement ce que cet échantillon a exécuté et où.
- Base de preuve
- Contrat signé réussi
- Reçus de vérification
- 1
- Clés de signature qui l’ont compilé
- 1
Environnement déclaré
node 22 linux 24 · ubuntu · glibc 2.39 x64 node 22 javascript npm
Environnements des exécutions de vérification
| Environnement | Contrat | Étapes | Exécution |
|---|---|---|---|
| node 22 · linux debian/x64 · docker ed25519:c1973797be207ac4 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · node-typescript@1node:22@sha256:8a34c4ab3ea2… |
2026-09-17 |
Cas
HOW- Objectif
- verify pkg:npm/zod@4.6.5
- Paquets
- Symboles
-
- z.object
- z.string
- z.number
- safeParse
- parse
- Environnement
- node 22
- Créé
- 2026-09-17T14:20:35Z
Contrat
- parse a valid user object and assert the typed result
- safeParse an invalid object and assert success is false
- assert the issue list carries path and code
Fichiers
- PROMPT.md
- csx.json
- package-lock.json
- package.json
- spec.json
- src/index.mjs
- test/contract.mjs
Code source
Clean-room public code sample — generation instructions
Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.
A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.
Goal: verify pkg:npm/zod@4.6.5
Kind: HOW
Use EXACTLY these public packages and versions:
- pkg:npm/zod@4.6.5
Rules:
- One focused purpose; the smallest project that proves the goal.
- Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
- Pin every dependency with a lockfile so resolution is reproducible.
- No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
- No personal names, emails, company names, or project identifiers of any kind.
- No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
- Keep it under 200 files and 256KB packed.
{"case":{"caseId":"case:sha256:e724fd0b386f88dee1e997179161d6c17c8aff98864b448a5261ecd78ffa9f4c","contract":["parse a valid user object and assert the typed result","safeParse an invalid object and assert success is false","assert the issue list carries path and code"],"goal":"verify pkg:npm/zod@4.6.5","kind":"HOW","packages":["pkg:npm/zod@4.6.5"],"schemaVersion":1,"symbols":["z.object","z.string","z.number","safeParse","parse"]},"contractCommand":["node","test/contract.mjs"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"npm","executionContext":"node","language":"javascript","libc":"glibc","libcVersion":"2.39","moduleSystem":"esm","os":"linux","osVersionBucket":"24","packageManager":"npm","runtime":"node","runtimeVersion":"22","schemaVersion":1},"license":"MIT-0","packages":["pkg:npm/zod@4.6.5"],"schemaVersion":1,"subject":"pkg:npm/zod@4.6.5","symbols":["z.object","z.string","z.number","safeParse","parse"],"verifierAdapter":"node-typescript@1"}
{
"name": "csx-sample-zod-4-6-5",
"version": "1.0.0",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "csx-sample-zod-4-6-5",
"version": "1.0.0",
"license": "MIT-0",
"dependencies": {
"zod": "4.6.5"
}
},
"node_modules/zod": {
"version": "4.6.5",
"resolved": "https://registry.npmjs.org/zod/-/zod-4.6.5.tgz",
"integrity": "sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q==",
"license": "MIT"
}
}
}
{
"name": "csx-sample-zod-4-6-5",
"version": "1.0.0",
"private": true,
"type": "module",
"license": "MIT-0",
"dependencies": {
"zod": "4.6.5"
}
}
{
"schemaVersion": 1,
"goal": "verify pkg:npm/zod@4.6.5",
"kind": "HOW",
"packages": [
"pkg:npm/zod@4.6.5"
]
}
import { z } from 'zod';
export const UserSchema = z.object({
username: z.string().min(1),
email: z.string().email(),
age: z.number().int().nonnegative(),
});
export function parseUser(data) {
return UserSchema.parse(data);
}
export function safeParseUser(data) {
return UserSchema.safeParse(data);
}
import { strict as assert } from 'node:assert';
import { UserSchema, parseUser, safeParseUser } from '../src/index.mjs';
// parse a valid user object and assert the typed result
const validData = {
username: 'antigravity',
email: 'agent@example.com',
age: 42,
};
const parsed = parseUser(validData);
assert.deepEqual(parsed, validData);
// safeParse an invalid object and assert success is false
const invalidData = {
username: '',
email: 'not-an-email',
age: -5,
};
const result = safeParseUser(invalidData);
assert.equal(result.success, false);
assert.equal(result.data, undefined);
assert.ok(result.error);
// assert the issue list carries path and code
assert.ok(Array.isArray(result.error.issues));
assert.ok(result.error.issues.length >= 1);
for (const issue of result.error.issues) {
assert.ok(Array.isArray(issue.path), 'issue must contain a path array');
assert.equal(typeof issue.code, 'string', 'issue must contain a code string');
}
console.log('CONTRACT PASS: pkg:npm/zod@4.6.5');
Seeder d'origine
anonyme