@objectstack/spec 0.8.2 → 0.9.0

package/dist/hub/plugin-security.zod.d.ts

@@ -0,0 +1,1029 @@
+import { z } from 'zod';
+/**
+ * # Plugin Security & Dependency Resolution Protocol
+ *
+ * Provides comprehensive security scanning, vulnerability management,
+ * and dependency resolution for the ObjectStack plugin ecosystem.
+ *
+ * Features:
+ * - CVE/vulnerability scanning
+ * - Dependency graph resolution
+ * - Semantic version conflict detection
+ * - Supply chain security
+ * - Plugin sandboxing policies
+ * - Trust and verification workflows
+ */
+/**
+ * Vulnerability Severity
+ */
+export declare const VulnerabilitySeverity: z.ZodEnum<{
+    info: "info";
+    medium: "medium";
+    critical: "critical";
+    high: "high";
+    low: "low";
+}>;
+export type VulnerabilitySeverity = z.infer<typeof VulnerabilitySeverity>;
+/**
+ * Security Vulnerability
+ */
+export declare const SecurityVulnerabilitySchema: z.ZodObject<{
+    cve: z.ZodOptional<z.ZodString>;
+    id: z.ZodString;
+    title: z.ZodString;
+    description: z.ZodString;
+    severity: z.ZodEnum<{
+        info: "info";
+        medium: "medium";
+        critical: "critical";
+        high: "high";
+        low: "low";
+    }>;
+    cvss: z.ZodOptional<z.ZodNumber>;
+    package: z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+        ecosystem: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    vulnerableVersions: z.ZodString;
+    patchedVersions: z.ZodOptional<z.ZodString>;
+    references: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            advisory: "advisory";
+            article: "article";
+            report: "report";
+            web: "web";
+        }>;
+        url: z.ZodString;
+    }, z.core.$strip>>>;
+    cwe: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    publishedAt: z.ZodOptional<z.ZodString>;
+    mitigation: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type SecurityVulnerability = z.infer<typeof SecurityVulnerabilitySchema>;
+/**
+ * Security Scan Result
+ */
+export declare const SecurityScanResultSchema: z.ZodObject<{
+    scanId: z.ZodString;
+    plugin: z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodString;
+    }, z.core.$strip>;
+    scannedAt: z.ZodString;
+    scanner: z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+    }, z.core.$strip>;
+    status: z.ZodEnum<{
+        warning: "warning";
+        failed: "failed";
+        passed: "passed";
+    }>;
+    vulnerabilities: z.ZodArray<z.ZodObject<{
+        cve: z.ZodOptional<z.ZodString>;
+        id: z.ZodString;
+        title: z.ZodString;
+        description: z.ZodString;
+        severity: z.ZodEnum<{
+            info: "info";
+            medium: "medium";
+            critical: "critical";
+            high: "high";
+            low: "low";
+        }>;
+        cvss: z.ZodOptional<z.ZodNumber>;
+        package: z.ZodObject<{
+            name: z.ZodString;
+            version: z.ZodString;
+            ecosystem: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        vulnerableVersions: z.ZodString;
+        patchedVersions: z.ZodOptional<z.ZodString>;
+        references: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                advisory: "advisory";
+                article: "article";
+                report: "report";
+                web: "web";
+            }>;
+            url: z.ZodString;
+        }, z.core.$strip>>>;
+        cwe: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        publishedAt: z.ZodOptional<z.ZodString>;
+        mitigation: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    summary: z.ZodObject<{
+        critical: z.ZodDefault<z.ZodNumber>;
+        high: z.ZodDefault<z.ZodNumber>;
+        medium: z.ZodDefault<z.ZodNumber>;
+        low: z.ZodDefault<z.ZodNumber>;
+        info: z.ZodDefault<z.ZodNumber>;
+        total: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>;
+    licenseIssues: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        package: z.ZodString;
+        license: z.ZodString;
+        reason: z.ZodString;
+        severity: z.ZodEnum<{
+            error: "error";
+            warning: "warning";
+            info: "info";
+        }>;
+    }, z.core.$strip>>>;
+    codeQuality: z.ZodOptional<z.ZodObject<{
+        score: z.ZodOptional<z.ZodNumber>;
+        issues: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                style: "style";
+                security: "security";
+                quality: "quality";
+            }>;
+            severity: z.ZodEnum<{
+                error: "error";
+                warning: "warning";
+                info: "info";
+            }>;
+            message: z.ZodString;
+            file: z.ZodOptional<z.ZodString>;
+            line: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+    nextScanAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type SecurityScanResult = z.infer<typeof SecurityScanResultSchema>;
+/**
+ * Security Policy
+ */
+export declare const SecurityPolicySchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    autoScan: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        frequency: z.ZodDefault<z.ZodEnum<{
+            daily: "daily";
+            weekly: "weekly";
+            monthly: "monthly";
+            "on-publish": "on-publish";
+        }>>;
+    }, z.core.$strip>;
+    thresholds: z.ZodObject<{
+        maxCritical: z.ZodDefault<z.ZodNumber>;
+        maxHigh: z.ZodDefault<z.ZodNumber>;
+        maxMedium: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>;
+    allowedLicenses: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    prohibitedLicenses: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    codeSigning: z.ZodOptional<z.ZodObject<{
+        required: z.ZodDefault<z.ZodBoolean>;
+        allowedSigners: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    sandbox: z.ZodOptional<z.ZodObject<{
+        networkAccess: z.ZodDefault<z.ZodEnum<{
+            none: "none";
+            all: "all";
+            localhost: "localhost";
+            allowlist: "allowlist";
+        }>>;
+        allowedDestinations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        filesystemAccess: z.ZodDefault<z.ZodEnum<{
+            full: "full";
+            none: "none";
+            "read-only": "read-only";
+            "temp-only": "temp-only";
+        }>>;
+        maxMemoryMB: z.ZodOptional<z.ZodNumber>;
+        maxCPUSeconds: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type SecurityPolicy = z.infer<typeof SecurityPolicySchema>;
+/**
+ * Package Dependency
+ */
+export declare const PackageDependencySchema: z.ZodObject<{
+    name: z.ZodString;
+    versionConstraint: z.ZodString;
+    type: z.ZodDefault<z.ZodEnum<{
+        optional: "optional";
+        required: "required";
+        dev: "dev";
+        peer: "peer";
+    }>>;
+    resolvedVersion: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type PackageDependency = z.infer<typeof PackageDependencySchema>;
+/**
+ * Dependency Graph Node
+ */
+export declare const DependencyGraphNodeSchema: z.ZodObject<{
+    id: z.ZodString;
+    version: z.ZodString;
+    dependencies: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        versionConstraint: z.ZodString;
+        type: z.ZodDefault<z.ZodEnum<{
+            optional: "optional";
+            required: "required";
+            dev: "dev";
+            peer: "peer";
+        }>>;
+        resolvedVersion: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    depth: z.ZodNumber;
+    isDirect: z.ZodBoolean;
+    metadata: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        license: z.ZodOptional<z.ZodString>;
+        homepage: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DependencyGraphNode = z.infer<typeof DependencyGraphNodeSchema>;
+/**
+ * Dependency Graph
+ */
+export declare const DependencyGraphSchema: z.ZodObject<{
+    root: z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodString;
+    }, z.core.$strip>;
+    nodes: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodString;
+        dependencies: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            versionConstraint: z.ZodString;
+            type: z.ZodDefault<z.ZodEnum<{
+                optional: "optional";
+                required: "required";
+                dev: "dev";
+                peer: "peer";
+            }>>;
+            resolvedVersion: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        depth: z.ZodNumber;
+        isDirect: z.ZodBoolean;
+        metadata: z.ZodOptional<z.ZodObject<{
+            name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            license: z.ZodOptional<z.ZodString>;
+            homepage: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    edges: z.ZodArray<z.ZodObject<{
+        from: z.ZodString;
+        to: z.ZodString;
+        constraint: z.ZodString;
+    }, z.core.$strip>>;
+    stats: z.ZodObject<{
+        totalDependencies: z.ZodNumber;
+        directDependencies: z.ZodNumber;
+        maxDepth: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type DependencyGraph = z.infer<typeof DependencyGraphSchema>;
+/**
+ * Dependency Conflict
+ */
+export declare const DependencyConflictSchema: z.ZodObject<{
+    package: z.ZodString;
+    conflicts: z.ZodArray<z.ZodObject<{
+        version: z.ZodString;
+        requestedBy: z.ZodArray<z.ZodString>;
+        constraint: z.ZodString;
+    }, z.core.$strip>>;
+    resolution: z.ZodOptional<z.ZodObject<{
+        strategy: z.ZodEnum<{
+            manual: "manual";
+            "pick-highest": "pick-highest";
+            "pick-lowest": "pick-lowest";
+        }>;
+        version: z.ZodOptional<z.ZodString>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    severity: z.ZodEnum<{
+        error: "error";
+        warning: "warning";
+        info: "info";
+    }>;
+}, z.core.$strip>;
+export type DependencyConflict = z.infer<typeof DependencyConflictSchema>;
+/**
+ * Dependency Resolution Result
+ */
+export declare const DependencyResolutionResultSchema: z.ZodObject<{
+    status: z.ZodEnum<{
+        error: "error";
+        success: "success";
+        conflict: "conflict";
+    }>;
+    graph: z.ZodOptional<z.ZodObject<{
+        root: z.ZodObject<{
+            id: z.ZodString;
+            version: z.ZodString;
+        }, z.core.$strip>;
+        nodes: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            version: z.ZodString;
+            dependencies: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                versionConstraint: z.ZodString;
+                type: z.ZodDefault<z.ZodEnum<{
+                    optional: "optional";
+                    required: "required";
+                    dev: "dev";
+                    peer: "peer";
+                }>>;
+                resolvedVersion: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+            depth: z.ZodNumber;
+            isDirect: z.ZodBoolean;
+            metadata: z.ZodOptional<z.ZodObject<{
+                name: z.ZodString;
+                description: z.ZodOptional<z.ZodString>;
+                license: z.ZodOptional<z.ZodString>;
+                homepage: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        edges: z.ZodArray<z.ZodObject<{
+            from: z.ZodString;
+            to: z.ZodString;
+            constraint: z.ZodString;
+        }, z.core.$strip>>;
+        stats: z.ZodObject<{
+            totalDependencies: z.ZodNumber;
+            directDependencies: z.ZodNumber;
+            maxDepth: z.ZodNumber;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+    conflicts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        package: z.ZodString;
+        conflicts: z.ZodArray<z.ZodObject<{
+            version: z.ZodString;
+            requestedBy: z.ZodArray<z.ZodString>;
+            constraint: z.ZodString;
+        }, z.core.$strip>>;
+        resolution: z.ZodOptional<z.ZodObject<{
+            strategy: z.ZodEnum<{
+                manual: "manual";
+                "pick-highest": "pick-highest";
+                "pick-lowest": "pick-lowest";
+            }>;
+            version: z.ZodOptional<z.ZodString>;
+            reason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        severity: z.ZodEnum<{
+            error: "error";
+            warning: "warning";
+            info: "info";
+        }>;
+    }, z.core.$strip>>>;
+    errors: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        package: z.ZodString;
+        error: z.ZodString;
+    }, z.core.$strip>>>;
+    installOrder: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    resolvedIn: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type DependencyResolutionResult = z.infer<typeof DependencyResolutionResultSchema>;
+/**
+ * SBOM (Software Bill of Materials) Entry
+ */
+export declare const SBOMEntrySchema: z.ZodObject<{
+    name: z.ZodString;
+    version: z.ZodString;
+    purl: z.ZodOptional<z.ZodString>;
+    license: z.ZodOptional<z.ZodString>;
+    hashes: z.ZodOptional<z.ZodObject<{
+        sha256: z.ZodOptional<z.ZodString>;
+        sha512: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    supplier: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    externalRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            documentation: "documentation";
+            repository: "repository";
+            website: "website";
+            "issue-tracker": "issue-tracker";
+        }>;
+        url: z.ZodString;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type SBOMEntry = z.infer<typeof SBOMEntrySchema>;
+/**
+ * Software Bill of Materials (SBOM)
+ */
+export declare const SBOMSchema: z.ZodObject<{
+    format: z.ZodDefault<z.ZodEnum<{
+        spdx: "spdx";
+        cyclonedx: "cyclonedx";
+    }>>;
+    version: z.ZodString;
+    plugin: z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strip>;
+    components: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+        purl: z.ZodOptional<z.ZodString>;
+        license: z.ZodOptional<z.ZodString>;
+        hashes: z.ZodOptional<z.ZodObject<{
+            sha256: z.ZodOptional<z.ZodString>;
+            sha512: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        supplier: z.ZodOptional<z.ZodObject<{
+            name: z.ZodString;
+            url: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        externalRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                documentation: "documentation";
+                repository: "repository";
+                website: "website";
+                "issue-tracker": "issue-tracker";
+            }>;
+            url: z.ZodString;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+    generatedAt: z.ZodString;
+    generator: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type SBOM = z.infer<typeof SBOMSchema>;
+/**
+ * Plugin Provenance
+ * Verifiable chain of custody for plugin artifacts
+ */
+export declare const PluginProvenanceSchema: z.ZodObject<{
+    pluginId: z.ZodString;
+    version: z.ZodString;
+    build: z.ZodObject<{
+        timestamp: z.ZodString;
+        environment: z.ZodOptional<z.ZodObject<{
+            os: z.ZodString;
+            arch: z.ZodString;
+            nodeVersion: z.ZodString;
+        }, z.core.$strip>>;
+        source: z.ZodOptional<z.ZodObject<{
+            repository: z.ZodString;
+            commit: z.ZodString;
+            branch: z.ZodOptional<z.ZodString>;
+            tag: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        builder: z.ZodOptional<z.ZodObject<{
+            name: z.ZodString;
+            email: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    artifacts: z.ZodArray<z.ZodObject<{
+        filename: z.ZodString;
+        sha256: z.ZodString;
+        size: z.ZodNumber;
+    }, z.core.$strip>>;
+    signatures: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        algorithm: z.ZodEnum<{
+            rsa: "rsa";
+            ecdsa: "ecdsa";
+            ed25519: "ed25519";
+        }>;
+        publicKey: z.ZodString;
+        signature: z.ZodString;
+        signedBy: z.ZodString;
+        timestamp: z.ZodString;
+    }, z.core.$strip>>>;
+    attestations: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            "code-review": "code-review";
+            "security-scan": "security-scan";
+            "test-results": "test-results";
+            "ci-build": "ci-build";
+        }>;
+        status: z.ZodEnum<{
+            failed: "failed";
+            passed: "passed";
+        }>;
+        url: z.ZodOptional<z.ZodString>;
+        timestamp: z.ZodString;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type PluginProvenance = z.infer<typeof PluginProvenanceSchema>;
+/**
+ * Plugin Trust Score
+ */
+export declare const PluginTrustScoreSchema: z.ZodObject<{
+    pluginId: z.ZodString;
+    score: z.ZodNumber;
+    components: z.ZodObject<{
+        vendorReputation: z.ZodNumber;
+        securityScore: z.ZodNumber;
+        codeQuality: z.ZodNumber;
+        communityScore: z.ZodNumber;
+        maintenanceScore: z.ZodNumber;
+    }, z.core.$strip>;
+    level: z.ZodEnum<{
+        verified: "verified";
+        trusted: "trusted";
+        neutral: "neutral";
+        untrusted: "untrusted";
+        blocked: "blocked";
+    }>;
+    badges: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        official: "official";
+        "verified-vendor": "verified-vendor";
+        "security-scanned": "security-scanned";
+        "code-signed": "code-signed";
+        "open-source": "open-source";
+        popular: "popular";
+    }>>>;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type PluginTrustScore = z.infer<typeof PluginTrustScoreSchema>;
+export declare const PluginSecurityProtocol: {
+    readonly VulnerabilitySeverity: z.ZodEnum<{
+        info: "info";
+        medium: "medium";
+        critical: "critical";
+        high: "high";
+        low: "low";
+    }>;
+    readonly SecurityVulnerability: z.ZodObject<{
+        cve: z.ZodOptional<z.ZodString>;
+        id: z.ZodString;
+        title: z.ZodString;
+        description: z.ZodString;
+        severity: z.ZodEnum<{
+            info: "info";
+            medium: "medium";
+            critical: "critical";
+            high: "high";
+            low: "low";
+        }>;
+        cvss: z.ZodOptional<z.ZodNumber>;
+        package: z.ZodObject<{
+            name: z.ZodString;
+            version: z.ZodString;
+            ecosystem: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        vulnerableVersions: z.ZodString;
+        patchedVersions: z.ZodOptional<z.ZodString>;
+        references: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                advisory: "advisory";
+                article: "article";
+                report: "report";
+                web: "web";
+            }>;
+            url: z.ZodString;
+        }, z.core.$strip>>>;
+        cwe: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        publishedAt: z.ZodOptional<z.ZodString>;
+        mitigation: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    readonly SecurityScanResult: z.ZodObject<{
+        scanId: z.ZodString;
+        plugin: z.ZodObject<{
+            id: z.ZodString;
+            version: z.ZodString;
+        }, z.core.$strip>;
+        scannedAt: z.ZodString;
+        scanner: z.ZodObject<{
+            name: z.ZodString;
+            version: z.ZodString;
+        }, z.core.$strip>;
+        status: z.ZodEnum<{
+            warning: "warning";
+            failed: "failed";
+            passed: "passed";
+        }>;
+        vulnerabilities: z.ZodArray<z.ZodObject<{
+            cve: z.ZodOptional<z.ZodString>;
+            id: z.ZodString;
+            title: z.ZodString;
+            description: z.ZodString;
+            severity: z.ZodEnum<{
+                info: "info";
+                medium: "medium";
+                critical: "critical";
+                high: "high";
+                low: "low";
+            }>;
+            cvss: z.ZodOptional<z.ZodNumber>;
+            package: z.ZodObject<{
+                name: z.ZodString;
+                version: z.ZodString;
+                ecosystem: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            vulnerableVersions: z.ZodString;
+            patchedVersions: z.ZodOptional<z.ZodString>;
+            references: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                type: z.ZodEnum<{
+                    advisory: "advisory";
+                    article: "article";
+                    report: "report";
+                    web: "web";
+                }>;
+                url: z.ZodString;
+            }, z.core.$strip>>>;
+            cwe: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            publishedAt: z.ZodOptional<z.ZodString>;
+            mitigation: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        summary: z.ZodObject<{
+            critical: z.ZodDefault<z.ZodNumber>;
+            high: z.ZodDefault<z.ZodNumber>;
+            medium: z.ZodDefault<z.ZodNumber>;
+            low: z.ZodDefault<z.ZodNumber>;
+            info: z.ZodDefault<z.ZodNumber>;
+            total: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>;
+        licenseIssues: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            package: z.ZodString;
+            license: z.ZodString;
+            reason: z.ZodString;
+            severity: z.ZodEnum<{
+                error: "error";
+                warning: "warning";
+                info: "info";
+            }>;
+        }, z.core.$strip>>>;
+        codeQuality: z.ZodOptional<z.ZodObject<{
+            score: z.ZodOptional<z.ZodNumber>;
+            issues: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                type: z.ZodEnum<{
+                    style: "style";
+                    security: "security";
+                    quality: "quality";
+                }>;
+                severity: z.ZodEnum<{
+                    error: "error";
+                    warning: "warning";
+                    info: "info";
+                }>;
+                message: z.ZodString;
+                file: z.ZodOptional<z.ZodString>;
+                line: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>;
+        nextScanAt: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    readonly SecurityPolicy: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        autoScan: z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            frequency: z.ZodDefault<z.ZodEnum<{
+                daily: "daily";
+                weekly: "weekly";
+                monthly: "monthly";
+                "on-publish": "on-publish";
+            }>>;
+        }, z.core.$strip>;
+        thresholds: z.ZodObject<{
+            maxCritical: z.ZodDefault<z.ZodNumber>;
+            maxHigh: z.ZodDefault<z.ZodNumber>;
+            maxMedium: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>;
+        allowedLicenses: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        prohibitedLicenses: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        codeSigning: z.ZodOptional<z.ZodObject<{
+            required: z.ZodDefault<z.ZodBoolean>;
+            allowedSigners: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+        sandbox: z.ZodOptional<z.ZodObject<{
+            networkAccess: z.ZodDefault<z.ZodEnum<{
+                none: "none";
+                all: "all";
+                localhost: "localhost";
+                allowlist: "allowlist";
+            }>>;
+            allowedDestinations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            filesystemAccess: z.ZodDefault<z.ZodEnum<{
+                full: "full";
+                none: "none";
+                "read-only": "read-only";
+                "temp-only": "temp-only";
+            }>>;
+            maxMemoryMB: z.ZodOptional<z.ZodNumber>;
+            maxCPUSeconds: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    readonly PackageDependency: z.ZodObject<{
+        name: z.ZodString;
+        versionConstraint: z.ZodString;
+        type: z.ZodDefault<z.ZodEnum<{
+            optional: "optional";
+            required: "required";
+            dev: "dev";
+            peer: "peer";
+        }>>;
+        resolvedVersion: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    readonly DependencyGraphNode: z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodString;
+        dependencies: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            versionConstraint: z.ZodString;
+            type: z.ZodDefault<z.ZodEnum<{
+                optional: "optional";
+                required: "required";
+                dev: "dev";
+                peer: "peer";
+            }>>;
+            resolvedVersion: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        depth: z.ZodNumber;
+        isDirect: z.ZodBoolean;
+        metadata: z.ZodOptional<z.ZodObject<{
+            name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            license: z.ZodOptional<z.ZodString>;
+            homepage: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    readonly DependencyGraph: z.ZodObject<{
+        root: z.ZodObject<{
+            id: z.ZodString;
+            version: z.ZodString;
+        }, z.core.$strip>;
+        nodes: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            version: z.ZodString;
+            dependencies: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                versionConstraint: z.ZodString;
+                type: z.ZodDefault<z.ZodEnum<{
+                    optional: "optional";
+                    required: "required";
+                    dev: "dev";
+                    peer: "peer";
+                }>>;
+                resolvedVersion: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+            depth: z.ZodNumber;
+            isDirect: z.ZodBoolean;
+            metadata: z.ZodOptional<z.ZodObject<{
+                name: z.ZodString;
+                description: z.ZodOptional<z.ZodString>;
+                license: z.ZodOptional<z.ZodString>;
+                homepage: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        edges: z.ZodArray<z.ZodObject<{
+            from: z.ZodString;
+            to: z.ZodString;
+            constraint: z.ZodString;
+        }, z.core.$strip>>;
+        stats: z.ZodObject<{
+            totalDependencies: z.ZodNumber;
+            directDependencies: z.ZodNumber;
+            maxDepth: z.ZodNumber;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    readonly DependencyConflict: z.ZodObject<{
+        package: z.ZodString;
+        conflicts: z.ZodArray<z.ZodObject<{
+            version: z.ZodString;
+            requestedBy: z.ZodArray<z.ZodString>;
+            constraint: z.ZodString;
+        }, z.core.$strip>>;
+        resolution: z.ZodOptional<z.ZodObject<{
+            strategy: z.ZodEnum<{
+                manual: "manual";
+                "pick-highest": "pick-highest";
+                "pick-lowest": "pick-lowest";
+            }>;
+            version: z.ZodOptional<z.ZodString>;
+            reason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        severity: z.ZodEnum<{
+            error: "error";
+            warning: "warning";
+            info: "info";
+        }>;
+    }, z.core.$strip>;
+    readonly DependencyResolutionResult: z.ZodObject<{
+        status: z.ZodEnum<{
+            error: "error";
+            success: "success";
+            conflict: "conflict";
+        }>;
+        graph: z.ZodOptional<z.ZodObject<{
+            root: z.ZodObject<{
+                id: z.ZodString;
+                version: z.ZodString;
+            }, z.core.$strip>;
+            nodes: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                version: z.ZodString;
+                dependencies: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    name: z.ZodString;
+                    versionConstraint: z.ZodString;
+                    type: z.ZodDefault<z.ZodEnum<{
+                        optional: "optional";
+                        required: "required";
+                        dev: "dev";
+                        peer: "peer";
+                    }>>;
+                    resolvedVersion: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>>;
+                depth: z.ZodNumber;
+                isDirect: z.ZodBoolean;
+                metadata: z.ZodOptional<z.ZodObject<{
+                    name: z.ZodString;
+                    description: z.ZodOptional<z.ZodString>;
+                    license: z.ZodOptional<z.ZodString>;
+                    homepage: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+            edges: z.ZodArray<z.ZodObject<{
+                from: z.ZodString;
+                to: z.ZodString;
+                constraint: z.ZodString;
+            }, z.core.$strip>>;
+            stats: z.ZodObject<{
+                totalDependencies: z.ZodNumber;
+                directDependencies: z.ZodNumber;
+                maxDepth: z.ZodNumber;
+            }, z.core.$strip>;
+        }, z.core.$strip>>;
+        conflicts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            package: z.ZodString;
+            conflicts: z.ZodArray<z.ZodObject<{
+                version: z.ZodString;
+                requestedBy: z.ZodArray<z.ZodString>;
+                constraint: z.ZodString;
+            }, z.core.$strip>>;
+            resolution: z.ZodOptional<z.ZodObject<{
+                strategy: z.ZodEnum<{
+                    manual: "manual";
+                    "pick-highest": "pick-highest";
+                    "pick-lowest": "pick-lowest";
+                }>;
+                version: z.ZodOptional<z.ZodString>;
+                reason: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            severity: z.ZodEnum<{
+                error: "error";
+                warning: "warning";
+                info: "info";
+            }>;
+        }, z.core.$strip>>>;
+        errors: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            package: z.ZodString;
+            error: z.ZodString;
+        }, z.core.$strip>>>;
+        installOrder: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        resolvedIn: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>;
+    readonly SBOMEntry: z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+        purl: z.ZodOptional<z.ZodString>;
+        license: z.ZodOptional<z.ZodString>;
+        hashes: z.ZodOptional<z.ZodObject<{
+            sha256: z.ZodOptional<z.ZodString>;
+            sha512: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        supplier: z.ZodOptional<z.ZodObject<{
+            name: z.ZodString;
+            url: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        externalRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                documentation: "documentation";
+                repository: "repository";
+                website: "website";
+                "issue-tracker": "issue-tracker";
+            }>;
+            url: z.ZodString;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>;
+    readonly SBOM: z.ZodObject<{
+        format: z.ZodDefault<z.ZodEnum<{
+            spdx: "spdx";
+            cyclonedx: "cyclonedx";
+        }>>;
+        version: z.ZodString;
+        plugin: z.ZodObject<{
+            id: z.ZodString;
+            version: z.ZodString;
+            name: z.ZodString;
+        }, z.core.$strip>;
+        components: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            version: z.ZodString;
+            purl: z.ZodOptional<z.ZodString>;
+            license: z.ZodOptional<z.ZodString>;
+            hashes: z.ZodOptional<z.ZodObject<{
+                sha256: z.ZodOptional<z.ZodString>;
+                sha512: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            supplier: z.ZodOptional<z.ZodObject<{
+                name: z.ZodString;
+                url: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            externalRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                type: z.ZodEnum<{
+                    documentation: "documentation";
+                    repository: "repository";
+                    website: "website";
+                    "issue-tracker": "issue-tracker";
+                }>;
+                url: z.ZodString;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>;
+        generatedAt: z.ZodString;
+        generator: z.ZodOptional<z.ZodObject<{
+            name: z.ZodString;
+            version: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    readonly PluginProvenance: z.ZodObject<{
+        pluginId: z.ZodString;
+        version: z.ZodString;
+        build: z.ZodObject<{
+            timestamp: z.ZodString;
+            environment: z.ZodOptional<z.ZodObject<{
+                os: z.ZodString;
+                arch: z.ZodString;
+                nodeVersion: z.ZodString;
+            }, z.core.$strip>>;
+            source: z.ZodOptional<z.ZodObject<{
+                repository: z.ZodString;
+                commit: z.ZodString;
+                branch: z.ZodOptional<z.ZodString>;
+                tag: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            builder: z.ZodOptional<z.ZodObject<{
+                name: z.ZodString;
+                email: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+        artifacts: z.ZodArray<z.ZodObject<{
+            filename: z.ZodString;
+            sha256: z.ZodString;
+            size: z.ZodNumber;
+        }, z.core.$strip>>;
+        signatures: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            algorithm: z.ZodEnum<{
+                rsa: "rsa";
+                ecdsa: "ecdsa";
+                ed25519: "ed25519";
+            }>;
+            publicKey: z.ZodString;
+            signature: z.ZodString;
+            signedBy: z.ZodString;
+            timestamp: z.ZodString;
+        }, z.core.$strip>>>;
+        attestations: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                "code-review": "code-review";
+                "security-scan": "security-scan";
+                "test-results": "test-results";
+                "ci-build": "ci-build";
+            }>;
+            status: z.ZodEnum<{
+                failed: "failed";
+                passed: "passed";
+            }>;
+            url: z.ZodOptional<z.ZodString>;
+            timestamp: z.ZodString;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>;
+    readonly PluginTrustScore: z.ZodObject<{
+        pluginId: z.ZodString;
+        score: z.ZodNumber;
+        components: z.ZodObject<{
+            vendorReputation: z.ZodNumber;
+            securityScore: z.ZodNumber;
+            codeQuality: z.ZodNumber;
+            communityScore: z.ZodNumber;
+            maintenanceScore: z.ZodNumber;
+        }, z.core.$strip>;
+        level: z.ZodEnum<{
+            verified: "verified";
+            trusted: "trusted";
+            neutral: "neutral";
+            untrusted: "untrusted";
+            blocked: "blocked";
+        }>;
+        badges: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            official: "official";
+            "verified-vendor": "verified-vendor";
+            "security-scanned": "security-scanned";
+            "code-signed": "code-signed";
+            "open-source": "open-source";
+            popular: "popular";
+        }>>>;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>;
+};
+//# sourceMappingURL=plugin-security.zod.d.ts.map