validation-br 2.0 Released: TypeScript Library for Brazilian Document Validation

·1 views

Developer klawdyo has released version 2.0 of validation-br, a TypeScript library for validating Brazilian documents such as CPF, CNPJ, CEP, Pix keys, CNH, and over a dozen other formats. The major change in this release is that each document type is now an immutable class modeled as a value object, meaning validation occurs at instantiation and throws an exception if the input is invalid, rather than returning a boolean. Shortcut functions like isCPF and isCNPJ are still available for developers who prefer a simple true/false check. The library ships with zero production dependencies, relying solely on native JavaScript and TypeScript APIs to keep the footprint small and reduce supply-chain security risks. It also supports the alphanumeric CNPJ format introduced by Brazil's Receita Federal in 2026, including the ability to generate valid fake values for testing purposes.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

One-Page Charter and Linter Script Proposed to Prevent AI Agent Pilot Failures

A software development post argues that most AI agent pilots fail not due to model quality but because of unclear ownership and poor handoff structure. The author proposes a single-page charter assigning three distinct roles — scout, scribe, and signer — each with defined responsibilities and a strict one-way handoff sequence. A hard-coded stop rule and a named revert command are required fields, ensuring the pilot has a clear exit path before it begins. A lightweight Python linter, designed to run in CI, validates the charter by rejecting missing fields, malformed dates, and placeholder text such as 'tbd' or 'todo'. The entire system is intended to fit on one wiki page and one script, reducing ambiguity and drift during time-boxed agent experiments.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Causal Diagnosis, Not Metric Breaches, Should Trigger AI Agents in Production

Anthropic's AI-Native SDLC Playbook outlines a six-stage software development lifecycle where autonomous agents handle production monitoring, with Stage 6 closing the feedback loop by triggering a Claude session when a metric breaches a statistical control band. The approach uses deterministic detection — no language model decides when to fire — applying Western Electric rules across sigma thresholds to escalate from logging, to read-only diagnosis, to limited action such as opening a pull request. However, a key limitation is that single-metric band watches can miss distributed degradation across dependent services, where no individual threshold is decisively breached. Tools like Causely address this gap by computing causal diagnoses from existing instrumentation, identifying root causes and their downstream effects across the cluster before the agent begins its work. Starting an agent from a named causal issue rather than a raw metric breach means it spends less time reconstructing what broke and more time acting on pre-established evidence.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Engineers Urged to Add Review Boundaries Around AI Code Generators

A software architect argues that using free AI models and servers changes your budget but not your security threat model, making a defined review boundary around code generators essential. The proposed architecture treats every AI workspace as ephemeral and disposable, assuming it can be reclaimed mid-run and that model versions may change without notice from providers. Generated code is never written directly to a working repository; instead, it flows through a five-stage pipeline ending in a human reviewer decision before anything reaches the main branch. A shell script and Python tool are proposed to capture each run's output as a structured 'packet' containing a diff, model fingerprint, and file classification, giving reviewers clear context. The author emphasizes that prompt-level restrictions are insufficient and that egress denial and sandbox-layer controls must be enforced at the infrastructure level.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Freeze Your Error Taxonomy Before AI Agents Generate Code, Case Study Shows

A software engineering case study demonstrates how AI coding agents produce inconsistent HTTP error mappings when given no predefined error taxonomy to work from. Without a frozen contract, an agent assigned the same failure mode may return different HTTP status codes and incorrect retry semantics across separate generations. The proposed fix involves committing a machine-readable JSON file that defines each error code's HTTP status, retry behavior, message key, and log level before any code generation begins. A SHA-256 hash of that contract file is stored in the repository and verified in CI, preventing silent modifications during automated regeneration passes. This approach keeps the generated mapper as a pure function of an immutable contract, removing the agent's ability to invent or drift on policy decisions.

0 comments Read more at DEV Community