@oh-my-pi/pi-coding-agent 17.2.4 → 17.2.6

package/dist/types/security/contracts/schemas.d.ts

@@ -1,139 +1,13 @@
-export declare const securityProducerSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
-    name: string;
-    version?: string | undefined;
-    vendor?: string | undefined;
-    revision?: string | undefined;
-    pluginVersion?: string | undefined;
-}, {}>;
-export declare const securityProvenanceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    producer: {
+export declare const getSecurityContractSchemas: () => {
+    securityProducerSchema: import("arktype/internal/variants/object.ts").ObjectType<{
         kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
         name: string;
         version?: string | undefined;
         vendor?: string | undefined;
         revision?: string | undefined;
         pluginVersion?: string | undefined;
-    };
-    createdAt: string;
-    importedAt?: string | undefined;
-    sourceIds?: {
-        [x: string]: string;
-    } | undefined;
-    vendorFingerprints?: {
-        [x: string]: string;
-    } | undefined;
-    upstream?: {
-        repository?: string | undefined;
-        revision?: string | undefined;
-        packageVersion?: string | undefined;
-        pluginVersion?: string | undefined;
-        archiveSha256?: string | undefined;
-    } | undefined;
-    metadata?: {
-        [x: string]: unknown;
-    } | undefined;
-}, {}>;
-export declare const securityLocationSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    path: string;
-    startLine: number;
-    endLine?: number | undefined;
-    startColumn?: number | undefined;
-    endColumn?: number | undefined;
-    role?: string | undefined;
-}, {}>;
-export declare const securityEvidenceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    id: string;
-    kind: "code" | "note" | "trace" | "validation";
-    label: string;
-    explanation: string;
-    location?: {
-        path: string;
-        startLine: number;
-        endLine?: number | undefined;
-        startColumn?: number | undefined;
-        endColumn?: number | undefined;
-        role?: string | undefined;
-    } | undefined;
-    excerpt?: string | undefined;
-}, {}>;
-export declare const securityOccurrenceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    id: string;
-    locations: {
-        path: string;
-        startLine: number;
-        endLine?: number | undefined;
-        startColumn?: number | undefined;
-        endColumn?: number | undefined;
-        role?: string | undefined;
-    }[];
-    evidenceIds: string[];
-}, {}>;
-export declare const securityFindingSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    id: string;
-    scanId: string;
-    fingerprint: string;
-    ruleId: string;
-    anchor?: string | undefined;
-    title: string;
-    summary: string;
-    severity: {
-        level: "critical" | "high" | "informational" | "low" | "medium";
-        score?: number | undefined;
-        scoringSystem?: string | undefined;
-        vector?: string | undefined;
-        rationale?: string | undefined;
-    };
-    confidence: {
-        level: "high" | "low" | "medium";
-        rationale?: string | undefined;
-    };
-    taxonomy: {
-        category: string;
-        cwe: string[];
-        tags?: string[] | undefined;
-    };
-    occurrences: {
-        id: string;
-        locations: {
-            path: string;
-            startLine: number;
-            endLine?: number | undefined;
-            startColumn?: number | undefined;
-            endColumn?: number | undefined;
-            role?: string | undefined;
-        }[];
-        evidenceIds: string[];
-    }[];
-    evidence: {
-        id: string;
-        kind: "code" | "note" | "trace" | "validation";
-        label: string;
-        explanation: string;
-        location?: {
-            path: string;
-            startLine: number;
-            endLine?: number | undefined;
-            startColumn?: number | undefined;
-            endColumn?: number | undefined;
-            role?: string | undefined;
-        } | undefined;
-        excerpt?: string | undefined;
-    }[];
-    remediation?: string | undefined;
-    validation: {
-        status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
-        summary?: string | undefined;
-        evidenceIds: string[];
-        validatedAt?: string | undefined;
-    };
-    disposition: {
-        status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
-        rationale?: string | undefined;
-        updatedAt?: string | undefined;
-        actor?: string | undefined;
-    };
-    provenance: {
+    }, {}>;
+    securityProvenanceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
         producer: {
             kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
             name: string;
@@ -160,58 +34,168 @@ export declare const securityFindingSchema: import("arktype/internal/variants/ob
         metadata?: {
             [x: string]: unknown;
         } | undefined;
-    };
-    extensions?: {
-        [x: string]: unknown;
-    } | undefined;
-}, {}>;
-export declare const securityCoverageSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
-    completeness: "complete" | "partial" | "unknown";
-    inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
-    includePaths: string[];
-    excludePaths: string[];
-    surfaces: {
+    }, {}>;
+    securityLocationSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+        path: string;
+        startLine: number;
+        endLine?: number | undefined;
+        startColumn?: number | undefined;
+        endColumn?: number | undefined;
+        role?: string | undefined;
+    }, {}>;
+    securityEvidenceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
         id: string;
+        kind: "code" | "note" | "trace" | "validation";
         label: string;
-        disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
-        receiptRefs: string[];
-        riskArea?: string | undefined;
-        notes?: string | undefined;
-    }[];
-    explicitExclusions: {
-        pattern: string;
-        reason: string;
-    }[];
-    deferred: {
+        explanation: string;
+        location?: {
+            path: string;
+            startLine: number;
+            endLine?: number | undefined;
+            startColumn?: number | undefined;
+            endColumn?: number | undefined;
+            role?: string | undefined;
+        } | undefined;
+        excerpt?: string | undefined;
+    }, {}>;
+    securityOccurrenceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
         id: string;
-        reason: string;
-        paths?: string[] | undefined;
-        surfaceIds?: string[] | undefined;
-    }[];
-    openQuestions?: {
-        question: string;
-        followUpPrompt?: string | undefined;
-    }[] | undefined;
-}, {}>;
-export declare const securityTargetSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
-    repositoryRoot: string;
-    displayName: string;
-    revision?: string | undefined;
-    baseRevision?: string | undefined;
-    headRevision?: string | undefined;
-    includePaths: string[];
-    excludePaths: string[];
-    treeDigest: string;
-}, {}>;
-export declare const securityScanPlanSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    documentType: "omp-security.scan-plan";
-    schemaVersion: "1.0";
-    id: string;
-    createdAt: string;
-    repositoryRoot: string;
-    target: {
+        locations: {
+            path: string;
+            startLine: number;
+            endLine?: number | undefined;
+            startColumn?: number | undefined;
+            endColumn?: number | undefined;
+            role?: string | undefined;
+        }[];
+        evidenceIds: string[];
+    }, {}>;
+    securityFindingSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+        id: string;
+        scanId: string;
+        fingerprint: string;
+        ruleId: string;
+        anchor?: string | undefined;
+        title: string;
+        summary: string;
+        severity: {
+            level: "critical" | "high" | "informational" | "low" | "medium";
+            score?: number | undefined;
+            scoringSystem?: string | undefined;
+            vector?: string | undefined;
+            rationale?: string | undefined;
+        };
+        confidence: {
+            level: "high" | "low" | "medium";
+            rationale?: string | undefined;
+        };
+        taxonomy: {
+            category: string;
+            cwe: string[];
+            tags?: string[] | undefined;
+        };
+        occurrences: {
+            id: string;
+            locations: {
+                path: string;
+                startLine: number;
+                endLine?: number | undefined;
+                startColumn?: number | undefined;
+                endColumn?: number | undefined;
+                role?: string | undefined;
+            }[];
+            evidenceIds: string[];
+        }[];
+        evidence: {
+            id: string;
+            kind: "code" | "note" | "trace" | "validation";
+            label: string;
+            explanation: string;
+            location?: {
+                path: string;
+                startLine: number;
+                endLine?: number | undefined;
+                startColumn?: number | undefined;
+                endColumn?: number | undefined;
+                role?: string | undefined;
+            } | undefined;
+            excerpt?: string | undefined;
+        }[];
+        remediation?: string | undefined;
+        validation: {
+            status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
+            summary?: string | undefined;
+            evidenceIds: string[];
+            validatedAt?: string | undefined;
+        };
+        disposition: {
+            status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
+            rationale?: string | undefined;
+            updatedAt?: string | undefined;
+            actor?: string | undefined;
+        };
+        provenance: {
+            producer: {
+                kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                name: string;
+                version?: string | undefined;
+                vendor?: string | undefined;
+                revision?: string | undefined;
+                pluginVersion?: string | undefined;
+            };
+            createdAt: string;
+            importedAt?: string | undefined;
+            sourceIds?: {
+                [x: string]: string;
+            } | undefined;
+            vendorFingerprints?: {
+                [x: string]: string;
+            } | undefined;
+            upstream?: {
+                repository?: string | undefined;
+                revision?: string | undefined;
+                packageVersion?: string | undefined;
+                pluginVersion?: string | undefined;
+                archiveSha256?: string | undefined;
+            } | undefined;
+            metadata?: {
+                [x: string]: unknown;
+            } | undefined;
+        };
+        extensions?: {
+            [x: string]: unknown;
+        } | undefined;
+    }, {}>;
+    securityCoverageSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+        mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+        completeness: "complete" | "partial" | "unknown";
+        inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+        includePaths: string[];
+        excludePaths: string[];
+        surfaces: {
+            id: string;
+            label: string;
+            disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+            receiptRefs: string[];
+            riskArea?: string | undefined;
+            notes?: string | undefined;
+        }[];
+        explicitExclusions: {
+            pattern: string;
+            reason: string;
+        }[];
+        deferred: {
+            id: string;
+            reason: string;
+            paths?: string[] | undefined;
+            surfaceIds?: string[] | undefined;
+        }[];
+        openQuestions?: {
+            question: string;
+            followUpPrompt?: string | undefined;
+        }[] | undefined;
+    }, {}>;
+    securityTargetSchema: import("arktype/internal/variants/object.ts").ObjectType<{
         kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
         repositoryRoot: string;
         displayName: string;
@@ -221,57 +205,8 @@ export declare const securityScanPlanSchema: import("arktype/internal/variants/o
         includePaths: string[];
         excludePaths: string[];
         treeDigest: string;
-    };
-    knowledgeBases: {
-        path: string;
-        sha256: string;
-        size: number;
-    }[];
-    output: {
-        root: string;
-        archiveExisting: boolean;
-        existingState: "absent" | "archivable" | "empty";
-    };
-    model: {
-        provider: string;
-        modelId: string;
-        thinkingLevel?: string | undefined;
-    };
-    account: {
-        provider: string;
-        credentialId: number;
-        accountId?: string | undefined;
-        email?: string | undefined;
-        organizationId?: string | undefined;
-        organizationName?: string | undefined;
-    };
-    configFingerprint: string;
-    workflowFingerprint: string;
-    fingerprint: string;
-}, {}>;
-export declare const securityScanMetricsSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    runtimeMs?: number | undefined;
-    tokenUsage?: {
-        input: number;
-        output: number;
-        reasoning: number;
-        cacheRead: number;
-        cacheWrite: number;
-        total: number;
-    } | undefined;
-    cost?: number | undefined;
-    premiumRequests?: number | undefined;
-}, {}>;
-export declare const securityScanSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    documentType: "omp-security.scan";
-    schemaVersion: "1.0";
-    id: string;
-    projectKey: string;
-    status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
-    createdAt: string;
-    startedAt?: string | undefined;
-    completedAt?: string | undefined;
-    plan?: {
+    }, {}>;
+    securityScanPlanSchema: import("arktype/internal/variants/object.ts").ObjectType<{
         documentType: "omp-security.scan-plan";
         schemaVersion: "1.0";
         id: string;
@@ -314,88 +249,8 @@ export declare const securityScanSchema: import("arktype/internal/variants/objec
         configFingerprint: string;
         workflowFingerprint: string;
         fingerprint: string;
-    } | undefined;
-    target: {
-        kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
-        repositoryRoot: string;
-        displayName: string;
-        revision?: string | undefined;
-        baseRevision?: string | undefined;
-        headRevision?: string | undefined;
-        includePaths: string[];
-        excludePaths: string[];
-        treeDigest: string;
-    };
-    producer: {
-        kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
-        name: string;
-        version?: string | undefined;
-        vendor?: string | undefined;
-        revision?: string | undefined;
-        pluginVersion?: string | undefined;
-    };
-    provenance: {
-        producer: {
-            kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
-            name: string;
-            version?: string | undefined;
-            vendor?: string | undefined;
-            revision?: string | undefined;
-            pluginVersion?: string | undefined;
-        };
-        createdAt: string;
-        importedAt?: string | undefined;
-        sourceIds?: {
-            [x: string]: string;
-        } | undefined;
-        vendorFingerprints?: {
-            [x: string]: string;
-        } | undefined;
-        upstream?: {
-            repository?: string | undefined;
-            revision?: string | undefined;
-            packageVersion?: string | undefined;
-            pluginVersion?: string | undefined;
-            archiveSha256?: string | undefined;
-        } | undefined;
-        metadata?: {
-            [x: string]: unknown;
-        } | undefined;
-    };
-    findingIds: string[];
-    coverage: {
-        mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
-        completeness: "complete" | "partial" | "unknown";
-        inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
-        includePaths: string[];
-        excludePaths: string[];
-        surfaces: {
-            id: string;
-            label: string;
-            disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
-            receiptRefs: string[];
-            riskArea?: string | undefined;
-            notes?: string | undefined;
-        }[];
-        explicitExclusions: {
-            pattern: string;
-            reason: string;
-        }[];
-        deferred: {
-            id: string;
-            reason: string;
-            paths?: string[] | undefined;
-            surfaceIds?: string[] | undefined;
-        }[];
-        openQuestions?: {
-            question: string;
-            followUpPrompt?: string | undefined;
-        }[] | undefined;
-    };
-    reportRef?: string | undefined;
-    sarifRef?: string | undefined;
-    error?: string | undefined;
-    metrics?: {
+    }, {}>;
+    securityScanMetricsSchema: import("arktype/internal/variants/object.ts").ObjectType<{
         runtimeMs?: number | undefined;
         tokenUsage?: {
             input: number;
@@ -407,10 +262,8 @@ export declare const securityScanSchema: import("arktype/internal/variants/objec
         } | undefined;
         cost?: number | undefined;
         premiumRequests?: number | undefined;
-    } | undefined;
-}, {}>;
-export declare const securityScanBundleSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    scan: {
+    }, {}>;
+    securityScanSchema: import("arktype/internal/variants/object.ts").ObjectType<{
         documentType: "omp-security.scan";
         schemaVersion: "1.0";
         id: string;
@@ -556,72 +409,72 @@ export declare const securityScanBundleSchema: import("arktype/internal/variants
             cost?: number | undefined;
             premiumRequests?: number | undefined;
         } | undefined;
-    };
-    findings: {
-        id: string;
-        scanId: string;
-        fingerprint: string;
-        ruleId: string;
-        anchor?: string | undefined;
-        title: string;
-        summary: string;
-        severity: {
-            level: "critical" | "high" | "informational" | "low" | "medium";
-            score?: number | undefined;
-            scoringSystem?: string | undefined;
-            vector?: string | undefined;
-            rationale?: string | undefined;
-        };
-        confidence: {
-            level: "high" | "low" | "medium";
-            rationale?: string | undefined;
-        };
-        taxonomy: {
-            category: string;
-            cwe: string[];
-            tags?: string[] | undefined;
-        };
-        occurrences: {
-            id: string;
-            locations: {
-                path: string;
-                startLine: number;
-                endLine?: number | undefined;
-                startColumn?: number | undefined;
-                endColumn?: number | undefined;
-                role?: string | undefined;
-            }[];
-            evidenceIds: string[];
-        }[];
-        evidence: {
+    }, {}>;
+    securityScanBundleSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+        scan: {
+            documentType: "omp-security.scan";
+            schemaVersion: "1.0";
             id: string;
-            kind: "code" | "note" | "trace" | "validation";
-            label: string;
-            explanation: string;
-            location?: {
-                path: string;
-                startLine: number;
-                endLine?: number | undefined;
-                startColumn?: number | undefined;
-                endColumn?: number | undefined;
-                role?: string | undefined;
+            projectKey: string;
+            status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
+            createdAt: string;
+            startedAt?: string | undefined;
+            completedAt?: string | undefined;
+            plan?: {
+                documentType: "omp-security.scan-plan";
+                schemaVersion: "1.0";
+                id: string;
+                createdAt: string;
+                repositoryRoot: string;
+                target: {
+                    kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                    repositoryRoot: string;
+                    displayName: string;
+                    revision?: string | undefined;
+                    baseRevision?: string | undefined;
+                    headRevision?: string | undefined;
+                    includePaths: string[];
+                    excludePaths: string[];
+                    treeDigest: string;
+                };
+                knowledgeBases: {
+                    path: string;
+                    sha256: string;
+                    size: number;
+                }[];
+                output: {
+                    root: string;
+                    archiveExisting: boolean;
+                    existingState: "absent" | "archivable" | "empty";
+                };
+                model: {
+                    provider: string;
+                    modelId: string;
+                    thinkingLevel?: string | undefined;
+                };
+                account: {
+                    provider: string;
+                    credentialId: number;
+                    accountId?: string | undefined;
+                    email?: string | undefined;
+                    organizationId?: string | undefined;
+                    organizationName?: string | undefined;
+                };
+                configFingerprint: string;
+                workflowFingerprint: string;
+                fingerprint: string;
             } | undefined;
-            excerpt?: string | undefined;
-        }[];
-        remediation?: string | undefined;
-        validation: {
-            status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
-            summary?: string | undefined;
-            evidenceIds: string[];
-            validatedAt?: string | undefined;
-        };
-        disposition: {
-            status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
-            rationale?: string | undefined;
-            updatedAt?: string | undefined;
-            actor?: string | undefined;
-        };
-        provenance: {
+            target: {
+                kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                repositoryRoot: string;
+                displayName: string;
+                revision?: string | undefined;
+                baseRevision?: string | undefined;
+                headRevision?: string | undefined;
+                includePaths: string[];
+                excludePaths: string[];
+                treeDigest: string;
+            };
             producer: {
                 kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
                 name: string;
@@ -630,31 +483,180 @@ export declare const securityScanBundleSchema: import("arktype/internal/variants
                 revision?: string | undefined;
                 pluginVersion?: string | undefined;
             };
-            createdAt: string;
-            importedAt?: string | undefined;
-            sourceIds?: {
-                [x: string]: string;
-            } | undefined;
-            vendorFingerprints?: {
-                [x: string]: string;
-            } | undefined;
-            upstream?: {
-                repository?: string | undefined;
-                revision?: string | undefined;
-                packageVersion?: string | undefined;
-                pluginVersion?: string | undefined;
-                archiveSha256?: string | undefined;
+            provenance: {
+                producer: {
+                    kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                    name: string;
+                    version?: string | undefined;
+                    vendor?: string | undefined;
+                    revision?: string | undefined;
+                    pluginVersion?: string | undefined;
+                };
+                createdAt: string;
+                importedAt?: string | undefined;
+                sourceIds?: {
+                    [x: string]: string;
+                } | undefined;
+                vendorFingerprints?: {
+                    [x: string]: string;
+                } | undefined;
+                upstream?: {
+                    repository?: string | undefined;
+                    revision?: string | undefined;
+                    packageVersion?: string | undefined;
+                    pluginVersion?: string | undefined;
+                    archiveSha256?: string | undefined;
+                } | undefined;
+                metadata?: {
+                    [x: string]: unknown;
+                } | undefined;
+            };
+            findingIds: string[];
+            coverage: {
+                mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+                completeness: "complete" | "partial" | "unknown";
+                inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+                includePaths: string[];
+                excludePaths: string[];
+                surfaces: {
+                    id: string;
+                    label: string;
+                    disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+                    receiptRefs: string[];
+                    riskArea?: string | undefined;
+                    notes?: string | undefined;
+                }[];
+                explicitExclusions: {
+                    pattern: string;
+                    reason: string;
+                }[];
+                deferred: {
+                    id: string;
+                    reason: string;
+                    paths?: string[] | undefined;
+                    surfaceIds?: string[] | undefined;
+                }[];
+                openQuestions?: {
+                    question: string;
+                    followUpPrompt?: string | undefined;
+                }[] | undefined;
+            };
+            reportRef?: string | undefined;
+            sarifRef?: string | undefined;
+            error?: string | undefined;
+            metrics?: {
+                runtimeMs?: number | undefined;
+                tokenUsage?: {
+                    input: number;
+                    output: number;
+                    reasoning: number;
+                    cacheRead: number;
+                    cacheWrite: number;
+                    total: number;
+                } | undefined;
+                cost?: number | undefined;
+                premiumRequests?: number | undefined;
             } | undefined;
-            metadata?: {
+        };
+        findings: {
+            id: string;
+            scanId: string;
+            fingerprint: string;
+            ruleId: string;
+            anchor?: string | undefined;
+            title: string;
+            summary: string;
+            severity: {
+                level: "critical" | "high" | "informational" | "low" | "medium";
+                score?: number | undefined;
+                scoringSystem?: string | undefined;
+                vector?: string | undefined;
+                rationale?: string | undefined;
+            };
+            confidence: {
+                level: "high" | "low" | "medium";
+                rationale?: string | undefined;
+            };
+            taxonomy: {
+                category: string;
+                cwe: string[];
+                tags?: string[] | undefined;
+            };
+            occurrences: {
+                id: string;
+                locations: {
+                    path: string;
+                    startLine: number;
+                    endLine?: number | undefined;
+                    startColumn?: number | undefined;
+                    endColumn?: number | undefined;
+                    role?: string | undefined;
+                }[];
+                evidenceIds: string[];
+            }[];
+            evidence: {
+                id: string;
+                kind: "code" | "note" | "trace" | "validation";
+                label: string;
+                explanation: string;
+                location?: {
+                    path: string;
+                    startLine: number;
+                    endLine?: number | undefined;
+                    startColumn?: number | undefined;
+                    endColumn?: number | undefined;
+                    role?: string | undefined;
+                } | undefined;
+                excerpt?: string | undefined;
+            }[];
+            remediation?: string | undefined;
+            validation: {
+                status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
+                summary?: string | undefined;
+                evidenceIds: string[];
+                validatedAt?: string | undefined;
+            };
+            disposition: {
+                status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
+                rationale?: string | undefined;
+                updatedAt?: string | undefined;
+                actor?: string | undefined;
+            };
+            provenance: {
+                producer: {
+                    kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                    name: string;
+                    version?: string | undefined;
+                    vendor?: string | undefined;
+                    revision?: string | undefined;
+                    pluginVersion?: string | undefined;
+                };
+                createdAt: string;
+                importedAt?: string | undefined;
+                sourceIds?: {
+                    [x: string]: string;
+                } | undefined;
+                vendorFingerprints?: {
+                    [x: string]: string;
+                } | undefined;
+                upstream?: {
+                    repository?: string | undefined;
+                    revision?: string | undefined;
+                    packageVersion?: string | undefined;
+                    pluginVersion?: string | undefined;
+                    archiveSha256?: string | undefined;
+                } | undefined;
+                metadata?: {
+                    [x: string]: unknown;
+                } | undefined;
+            };
+            extensions?: {
                 [x: string]: unknown;
             } | undefined;
-        };
-        extensions?: {
+        }[];
+        report?: string | undefined;
+        sarif?: {
             [x: string]: unknown;
         } | undefined;
-    }[];
-    report?: string | undefined;
-    sarif?: {
-        [x: string]: unknown;
-    } | undefined;
-}, {}>;
+    }, {}>;
+};