From 1fcccbbb6995fd16570a93bf9b6a6fab6c804923 Mon Sep 17 00:00:00 2001
From: mldangelo-oai <269034524+mldangelo-oai@users.noreply.github.com>
Date: Mon, 19 Oct 2026 03:52:26 +0000
Subject: [PATCH] refactor(sdk): import schema APIs directly from Zod

---
 sdk/typescript/src/cloud-publish.ts   | 2 +-
 sdk/typescript/src/findings-import.ts | 2 +-
 sdk/typescript/src/host-protocol.ts   | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/sdk/typescript/src/cloud-publish.ts b/sdk/typescript/src/cloud-publish.ts
index 775958ae97..4829693c82 100644
--- a/sdk/typescript/src/cloud-publish.ts
+++ b/sdk/typescript/src/cloud-publish.ts
@@ -1,7 +1,7 @@
 import { existsSync } from "node:fs";
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
-import { z } from "incur";
+import { z } from "zod";
 import { parse as parseToml } from "smol-toml";
 import { loadContract, sha256Text as sha256 } from "./contract.js";
 import {
diff --git a/sdk/typescript/src/findings-import.ts b/sdk/typescript/src/findings-import.ts
index 91ae004082..fb7c713013 100644
--- a/sdk/typescript/src/findings-import.ts
+++ b/sdk/typescript/src/findings-import.ts
@@ -3,7 +3,7 @@ import { deriveFindingIdentity, sha256Text as sha256 } from "./contract.js";
 import { readFile } from "node:fs/promises";
 import { isAbsolute, join, posix } from "node:path";
 import Ajv2020 from "ajv/dist/2020.js";
-import { z } from "incur";
+import { z } from "zod";
 import Papa from "papaparse";
 import { CodexSecurityError, errorMessage } from "./errors.js";
 import type { Finding, FindingsDocument } from "./models.js";
diff --git a/sdk/typescript/src/host-protocol.ts b/sdk/typescript/src/host-protocol.ts
index 5ec5775747..2bcafc7854 100644
--- a/sdk/typescript/src/host-protocol.ts
+++ b/sdk/typescript/src/host-protocol.ts
@@ -1,6 +1,6 @@
 import { createInterface } from "node:readline";
 import { type Readable, Writable } from "node:stream";
-import { z } from "incur";
+import { z } from "zod";
 
 const rpcId = z.union([z.string(), z.number().int()]);
 const envelope = z.strictObject({ jsonrpc: z.literal("2.0") });