@oh-my-pi/pi-coding-agent 17.2.0 → 17.2.1

package/dist/types/security/contracts/schemas.d.ts

@@ -0,0 +1,660 @@
+export declare const securityProducerSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+    name: string;
+    version?: string | undefined;
+    vendor?: string | undefined;
+    revision?: string | undefined;
+    pluginVersion?: string | undefined;
+}, {}>;
+export declare const securityProvenanceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    producer: {
+        kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+        name: string;
+        version?: string | undefined;
+        vendor?: string | undefined;
+        revision?: string | undefined;
+        pluginVersion?: string | undefined;
+    };
+    createdAt: string;
+    importedAt?: string | undefined;
+    sourceIds?: {
+        [x: string]: string;
+    } | undefined;
+    vendorFingerprints?: {
+        [x: string]: string;
+    } | undefined;
+    upstream?: {
+        repository?: string | undefined;
+        revision?: string | undefined;
+        packageVersion?: string | undefined;
+        pluginVersion?: string | undefined;
+        archiveSha256?: string | undefined;
+    } | undefined;
+    metadata?: {
+        [x: string]: unknown;
+    } | undefined;
+}, {}>;
+export declare const securityLocationSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    path: string;
+    startLine: number;
+    endLine?: number | undefined;
+    startColumn?: number | undefined;
+    endColumn?: number | undefined;
+    role?: string | undefined;
+}, {}>;
+export declare const securityEvidenceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    id: string;
+    kind: "code" | "note" | "trace" | "validation";
+    label: string;
+    explanation: string;
+    location?: {
+        path: string;
+        startLine: number;
+        endLine?: number | undefined;
+        startColumn?: number | undefined;
+        endColumn?: number | undefined;
+        role?: string | undefined;
+    } | undefined;
+    excerpt?: string | undefined;
+}, {}>;
+export declare const securityOccurrenceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    id: string;
+    locations: {
+        path: string;
+        startLine: number;
+        endLine?: number | undefined;
+        startColumn?: number | undefined;
+        endColumn?: number | undefined;
+        role?: string | undefined;
+    }[];
+    evidenceIds: string[];
+}, {}>;
+export declare const securityFindingSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    id: string;
+    scanId: string;
+    fingerprint: string;
+    ruleId: string;
+    anchor?: string | undefined;
+    title: string;
+    summary: string;
+    severity: {
+        level: "critical" | "high" | "informational" | "low" | "medium";
+        score?: number | undefined;
+        scoringSystem?: string | undefined;
+        vector?: string | undefined;
+        rationale?: string | undefined;
+    };
+    confidence: {
+        level: "high" | "low" | "medium";
+        rationale?: string | undefined;
+    };
+    taxonomy: {
+        category: string;
+        cwe: string[];
+        tags?: string[] | undefined;
+    };
+    occurrences: {
+        id: string;
+        locations: {
+            path: string;
+            startLine: number;
+            endLine?: number | undefined;
+            startColumn?: number | undefined;
+            endColumn?: number | undefined;
+            role?: string | undefined;
+        }[];
+        evidenceIds: string[];
+    }[];
+    evidence: {
+        id: string;
+        kind: "code" | "note" | "trace" | "validation";
+        label: string;
+        explanation: string;
+        location?: {
+            path: string;
+            startLine: number;
+            endLine?: number | undefined;
+            startColumn?: number | undefined;
+            endColumn?: number | undefined;
+            role?: string | undefined;
+        } | undefined;
+        excerpt?: string | undefined;
+    }[];
+    remediation?: string | undefined;
+    validation: {
+        status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
+        summary?: string | undefined;
+        evidenceIds: string[];
+        validatedAt?: string | undefined;
+    };
+    disposition: {
+        status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
+        rationale?: string | undefined;
+        updatedAt?: string | undefined;
+        actor?: string | undefined;
+    };
+    provenance: {
+        producer: {
+            kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+            name: string;
+            version?: string | undefined;
+            vendor?: string | undefined;
+            revision?: string | undefined;
+            pluginVersion?: string | undefined;
+        };
+        createdAt: string;
+        importedAt?: string | undefined;
+        sourceIds?: {
+            [x: string]: string;
+        } | undefined;
+        vendorFingerprints?: {
+            [x: string]: string;
+        } | undefined;
+        upstream?: {
+            repository?: string | undefined;
+            revision?: string | undefined;
+            packageVersion?: string | undefined;
+            pluginVersion?: string | undefined;
+            archiveSha256?: string | undefined;
+        } | undefined;
+        metadata?: {
+            [x: string]: unknown;
+        } | undefined;
+    };
+    extensions?: {
+        [x: string]: unknown;
+    } | undefined;
+}, {}>;
+export declare const securityCoverageSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+    completeness: "complete" | "partial" | "unknown";
+    inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+    includePaths: string[];
+    excludePaths: string[];
+    surfaces: {
+        id: string;
+        label: string;
+        disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+        receiptRefs: string[];
+        riskArea?: string | undefined;
+        notes?: string | undefined;
+    }[];
+    explicitExclusions: {
+        pattern: string;
+        reason: string;
+    }[];
+    deferred: {
+        id: string;
+        reason: string;
+        paths?: string[] | undefined;
+        surfaceIds?: string[] | undefined;
+    }[];
+    openQuestions?: {
+        question: string;
+        followUpPrompt?: string | undefined;
+    }[] | undefined;
+}, {}>;
+export declare const securityTargetSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+    repositoryRoot: string;
+    displayName: string;
+    revision?: string | undefined;
+    baseRevision?: string | undefined;
+    headRevision?: string | undefined;
+    includePaths: string[];
+    excludePaths: string[];
+    treeDigest: string;
+}, {}>;
+export declare const securityScanPlanSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    documentType: "omp-security.scan-plan";
+    schemaVersion: "1.0";
+    id: string;
+    createdAt: string;
+    repositoryRoot: string;
+    target: {
+        kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+        repositoryRoot: string;
+        displayName: string;
+        revision?: string | undefined;
+        baseRevision?: string | undefined;
+        headRevision?: string | undefined;
+        includePaths: string[];
+        excludePaths: string[];
+        treeDigest: string;
+    };
+    knowledgeBases: {
+        path: string;
+        sha256: string;
+        size: number;
+    }[];
+    output: {
+        root: string;
+        archiveExisting: boolean;
+        existingState: "absent" | "archivable" | "empty";
+    };
+    model: {
+        provider: string;
+        modelId: string;
+        thinkingLevel?: string | undefined;
+    };
+    account: {
+        provider: string;
+        credentialId: number;
+        accountId?: string | undefined;
+        email?: string | undefined;
+        organizationId?: string | undefined;
+        organizationName?: string | undefined;
+    };
+    configFingerprint: string;
+    workflowFingerprint: string;
+    fingerprint: string;
+}, {}>;
+export declare const securityScanMetricsSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    runtimeMs?: number | undefined;
+    tokenUsage?: {
+        input: number;
+        output: number;
+        reasoning: number;
+        cacheRead: number;
+        cacheWrite: number;
+        total: number;
+    } | undefined;
+    cost?: number | undefined;
+    premiumRequests?: number | undefined;
+}, {}>;
+export declare const securityScanSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    documentType: "omp-security.scan";
+    schemaVersion: "1.0";
+    id: string;
+    projectKey: string;
+    status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
+    createdAt: string;
+    startedAt?: string | undefined;
+    completedAt?: string | undefined;
+    plan?: {
+        documentType: "omp-security.scan-plan";
+        schemaVersion: "1.0";
+        id: string;
+        createdAt: string;
+        repositoryRoot: string;
+        target: {
+            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+            repositoryRoot: string;
+            displayName: string;
+            revision?: string | undefined;
+            baseRevision?: string | undefined;
+            headRevision?: string | undefined;
+            includePaths: string[];
+            excludePaths: string[];
+            treeDigest: string;
+        };
+        knowledgeBases: {
+            path: string;
+            sha256: string;
+            size: number;
+        }[];
+        output: {
+            root: string;
+            archiveExisting: boolean;
+            existingState: "absent" | "archivable" | "empty";
+        };
+        model: {
+            provider: string;
+            modelId: string;
+            thinkingLevel?: string | undefined;
+        };
+        account: {
+            provider: string;
+            credentialId: number;
+            accountId?: string | undefined;
+            email?: string | undefined;
+            organizationId?: string | undefined;
+            organizationName?: string | undefined;
+        };
+        configFingerprint: string;
+        workflowFingerprint: string;
+        fingerprint: string;
+    } | undefined;
+    target: {
+        kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+        repositoryRoot: string;
+        displayName: string;
+        revision?: string | undefined;
+        baseRevision?: string | undefined;
+        headRevision?: string | undefined;
+        includePaths: string[];
+        excludePaths: string[];
+        treeDigest: string;
+    };
+    producer: {
+        kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+        name: string;
+        version?: string | undefined;
+        vendor?: string | undefined;
+        revision?: string | undefined;
+        pluginVersion?: string | undefined;
+    };
+    provenance: {
+        producer: {
+            kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+            name: string;
+            version?: string | undefined;
+            vendor?: string | undefined;
+            revision?: string | undefined;
+            pluginVersion?: string | undefined;
+        };
+        createdAt: string;
+        importedAt?: string | undefined;
+        sourceIds?: {
+            [x: string]: string;
+        } | undefined;
+        vendorFingerprints?: {
+            [x: string]: string;
+        } | undefined;
+        upstream?: {
+            repository?: string | undefined;
+            revision?: string | undefined;
+            packageVersion?: string | undefined;
+            pluginVersion?: string | undefined;
+            archiveSha256?: string | undefined;
+        } | undefined;
+        metadata?: {
+            [x: string]: unknown;
+        } | undefined;
+    };
+    findingIds: string[];
+    coverage: {
+        mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+        completeness: "complete" | "partial" | "unknown";
+        inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+        includePaths: string[];
+        excludePaths: string[];
+        surfaces: {
+            id: string;
+            label: string;
+            disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+            receiptRefs: string[];
+            riskArea?: string | undefined;
+            notes?: string | undefined;
+        }[];
+        explicitExclusions: {
+            pattern: string;
+            reason: string;
+        }[];
+        deferred: {
+            id: string;
+            reason: string;
+            paths?: string[] | undefined;
+            surfaceIds?: string[] | undefined;
+        }[];
+        openQuestions?: {
+            question: string;
+            followUpPrompt?: string | undefined;
+        }[] | undefined;
+    };
+    reportRef?: string | undefined;
+    sarifRef?: string | undefined;
+    error?: string | undefined;
+    metrics?: {
+        runtimeMs?: number | undefined;
+        tokenUsage?: {
+            input: number;
+            output: number;
+            reasoning: number;
+            cacheRead: number;
+            cacheWrite: number;
+            total: number;
+        } | undefined;
+        cost?: number | undefined;
+        premiumRequests?: number | undefined;
+    } | undefined;
+}, {}>;
+export declare const securityScanBundleSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    scan: {
+        documentType: "omp-security.scan";
+        schemaVersion: "1.0";
+        id: string;
+        projectKey: string;
+        status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
+        createdAt: string;
+        startedAt?: string | undefined;
+        completedAt?: string | undefined;
+        plan?: {
+            documentType: "omp-security.scan-plan";
+            schemaVersion: "1.0";
+            id: string;
+            createdAt: string;
+            repositoryRoot: string;
+            target: {
+                kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                repositoryRoot: string;
+                displayName: string;
+                revision?: string | undefined;
+                baseRevision?: string | undefined;
+                headRevision?: string | undefined;
+                includePaths: string[];
+                excludePaths: string[];
+                treeDigest: string;
+            };
+            knowledgeBases: {
+                path: string;
+                sha256: string;
+                size: number;
+            }[];
+            output: {
+                root: string;
+                archiveExisting: boolean;
+                existingState: "absent" | "archivable" | "empty";
+            };
+            model: {
+                provider: string;
+                modelId: string;
+                thinkingLevel?: string | undefined;
+            };
+            account: {
+                provider: string;
+                credentialId: number;
+                accountId?: string | undefined;
+                email?: string | undefined;
+                organizationId?: string | undefined;
+                organizationName?: string | undefined;
+            };
+            configFingerprint: string;
+            workflowFingerprint: string;
+            fingerprint: string;
+        } | undefined;
+        target: {
+            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+            repositoryRoot: string;
+            displayName: string;
+            revision?: string | undefined;
+            baseRevision?: string | undefined;
+            headRevision?: string | undefined;
+            includePaths: string[];
+            excludePaths: string[];
+            treeDigest: string;
+        };
+        producer: {
+            kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+            name: string;
+            version?: string | undefined;
+            vendor?: string | undefined;
+            revision?: string | undefined;
+            pluginVersion?: string | undefined;
+        };
+        provenance: {
+            producer: {
+                kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                name: string;
+                version?: string | undefined;
+                vendor?: string | undefined;
+                revision?: string | undefined;
+                pluginVersion?: string | undefined;
+            };
+            createdAt: string;
+            importedAt?: string | undefined;
+            sourceIds?: {
+                [x: string]: string;
+            } | undefined;
+            vendorFingerprints?: {
+                [x: string]: string;
+            } | undefined;
+            upstream?: {
+                repository?: string | undefined;
+                revision?: string | undefined;
+                packageVersion?: string | undefined;
+                pluginVersion?: string | undefined;
+                archiveSha256?: string | undefined;
+            } | undefined;
+            metadata?: {
+                [x: string]: unknown;
+            } | undefined;
+        };
+        findingIds: string[];
+        coverage: {
+            mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+            completeness: "complete" | "partial" | "unknown";
+            inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+            includePaths: string[];
+            excludePaths: string[];
+            surfaces: {
+                id: string;
+                label: string;
+                disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+                receiptRefs: string[];
+                riskArea?: string | undefined;
+                notes?: string | undefined;
+            }[];
+            explicitExclusions: {
+                pattern: string;
+                reason: string;
+            }[];
+            deferred: {
+                id: string;
+                reason: string;
+                paths?: string[] | undefined;
+                surfaceIds?: string[] | undefined;
+            }[];
+            openQuestions?: {
+                question: string;
+                followUpPrompt?: string | undefined;
+            }[] | undefined;
+        };
+        reportRef?: string | undefined;
+        sarifRef?: string | undefined;
+        error?: string | undefined;
+        metrics?: {
+            runtimeMs?: number | undefined;
+            tokenUsage?: {
+                input: number;
+                output: number;
+                reasoning: number;
+                cacheRead: number;
+                cacheWrite: number;
+                total: number;
+            } | undefined;
+            cost?: number | undefined;
+            premiumRequests?: number | undefined;
+        } | undefined;
+    };
+    findings: {
+        id: string;
+        scanId: string;
+        fingerprint: string;
+        ruleId: string;
+        anchor?: string | undefined;
+        title: string;
+        summary: string;
+        severity: {
+            level: "critical" | "high" | "informational" | "low" | "medium";
+            score?: number | undefined;
+            scoringSystem?: string | undefined;
+            vector?: string | undefined;
+            rationale?: string | undefined;
+        };
+        confidence: {
+            level: "high" | "low" | "medium";
+            rationale?: string | undefined;
+        };
+        taxonomy: {
+            category: string;
+            cwe: string[];
+            tags?: string[] | undefined;
+        };
+        occurrences: {
+            id: string;
+            locations: {
+                path: string;
+                startLine: number;
+                endLine?: number | undefined;
+                startColumn?: number | undefined;
+                endColumn?: number | undefined;
+                role?: string | undefined;
+            }[];
+            evidenceIds: string[];
+        }[];
+        evidence: {
+            id: string;
+            kind: "code" | "note" | "trace" | "validation";
+            label: string;
+            explanation: string;
+            location?: {
+                path: string;
+                startLine: number;
+                endLine?: number | undefined;
+                startColumn?: number | undefined;
+                endColumn?: number | undefined;
+                role?: string | undefined;
+            } | undefined;
+            excerpt?: string | undefined;
+        }[];
+        remediation?: string | undefined;
+        validation: {
+            status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
+            summary?: string | undefined;
+            evidenceIds: string[];
+            validatedAt?: string | undefined;
+        };
+        disposition: {
+            status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
+            rationale?: string | undefined;
+            updatedAt?: string | undefined;
+            actor?: string | undefined;
+        };
+        provenance: {
+            producer: {
+                kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                name: string;
+                version?: string | undefined;
+                vendor?: string | undefined;
+                revision?: string | undefined;
+                pluginVersion?: string | undefined;
+            };
+            createdAt: string;
+            importedAt?: string | undefined;
+            sourceIds?: {
+                [x: string]: string;
+            } | undefined;
+            vendorFingerprints?: {
+                [x: string]: string;
+            } | undefined;
+            upstream?: {
+                repository?: string | undefined;
+                revision?: string | undefined;
+                packageVersion?: string | undefined;
+                pluginVersion?: string | undefined;
+                archiveSha256?: string | undefined;
+            } | undefined;
+            metadata?: {
+                [x: string]: unknown;
+            } | undefined;
+        };
+        extensions?: {
+            [x: string]: unknown;
+        } | undefined;
+    }[];
+    report?: string | undefined;
+    sarif?: {
+        [x: string]: unknown;
+    } | undefined;
+}, {}>;