fix(core): require explicit Zod version imports

Mono-RevId: 6d4cc748ca1f7190f58e2983529b65d7326568af

Author: carderne

.oxlintrc.json

@@ -7,7 +7,8 @@
   "jsPlugins": [
     "./oxlint-plugins/no-thrown-unawaited-redirect.mjs",
     "./oxlint-plugins/runops-residency.mjs",
-    "./oxlint-plugins/prisma-in-filter.mjs"
+    "./oxlint-plugins/prisma-in-filter.mjs",
+    "./oxlint-plugins/zod-imports.mjs"
   ],
   "ignorePatterns": [
     "**/dist/**",
@@ -158,6 +159,12 @@
         "trigger-runops/no-control-plane-in-runops-slot": "error"
       }
     },
+    {
+      "files": ["packages/core/src/**/*.ts", "packages/core/src/**/*.tsx"],
+      "rules": {
+        "trigger-zod/require-versioned-import": "error"
+      }
+    },
     {
       "files": ["packages/react-hooks/src/**/*.ts", "packages/react-hooks/src/**/*.tsx"],
       "rules": {

oxlint-plugins/zod-imports.mjs

@@ -0,0 +1,43 @@
+/** @type {import("eslint").Rule.RuleModule} */
+const requireVersionedImport = {
+  meta: {
+    type: "problem",
+    docs: {
+      description:
+        "Require an explicit Zod version import in packages that support multiple Zod major versions.",
+    },
+    fixable: "code",
+    messages: {
+      unversioned:
+        'Import Zod 4 from "zod/v4" rather than "zod". The package supports Zod 3 and 4, so the bare import can resolve to the wrong major version.',
+    },
+    schema: [],
+  },
+  create(context) {
+    function checkSource(node) {
+      if (node.source?.value !== "zod") return;
+
+      context.report({
+        node: node.source,
+        messageId: "unversioned",
+        fix: (fixer) => fixer.replaceText(node.source, '"zod/v4"'),
+      });
+    }
+
+    return {
+      ImportDeclaration: checkSource,
+      ExportAllDeclaration: checkSource,
+      ExportNamedDeclaration: checkSource,
+    };
+  },
+};
+
+/** @type {import("eslint").ESLint.Plugin} */
+const plugin = {
+  meta: { name: "trigger-zod" },
+  rules: {
+    "require-versioned-import": requireVersionedImport,
+  },
+};
+
+export default plugin;