@oh-my-pi/pi-coding-agent 17.2.5 → 17.2.7

package/dist/types/security/contracts/schemas.d.ts

@@ -1,660 +1,1238 @@
-export declare const securityProducerSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
-    name: string;
-    version?: string | undefined;
-    vendor?: string | undefined;
-    revision?: string | undefined;
-    pluginVersion?: string | undefined;
-}, {}>;
-export declare const securityProvenanceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    producer: {
+export declare const getSecurityContractSchemas: () => {
+    securityProducerSchema: import("@oh-my-pi/omptype").FluentType<{
         kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
         name: string;
-        version?: string | undefined;
-        vendor?: string | undefined;
-        revision?: string | undefined;
         pluginVersion?: string | undefined;
-    };
-    createdAt: string;
-    importedAt?: string | undefined;
-    sourceIds?: {
-        [x: string]: string;
-    } | undefined;
-    vendorFingerprints?: {
-        [x: string]: string;
-    } | undefined;
-    upstream?: {
-        repository?: string | undefined;
         revision?: string | undefined;
-        packageVersion?: string | undefined;
+        vendor?: string | undefined;
+        version?: string | undefined;
+    }, {
+        kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+        name: string;
         pluginVersion?: string | undefined;
-        archiveSha256?: string | undefined;
-    } | undefined;
-    metadata?: {
-        [x: string]: unknown;
-    } | undefined;
-}, {}>;
-export declare const securityLocationSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    path: string;
-    startLine: number;
-    endLine?: number | undefined;
-    startColumn?: number | undefined;
-    endColumn?: number | undefined;
-    role?: string | undefined;
-}, {}>;
-export declare const securityEvidenceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    id: string;
-    kind: "code" | "note" | "trace" | "validation";
-    label: string;
-    explanation: string;
-    location?: {
-        path: string;
-        startLine: number;
-        endLine?: number | undefined;
-        startColumn?: number | undefined;
+        revision?: string | undefined;
+        vendor?: string | undefined;
+        version?: string | undefined;
+    }>;
+    securityProvenanceSchema: import("@oh-my-pi/omptype").FluentType<{
+        createdAt: string;
+        importedAt?: string | undefined;
+        metadata?: Record<string, unknown> | undefined;
+        producer: {
+            kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+            name: string;
+            pluginVersion?: string | undefined;
+            revision?: string | undefined;
+            vendor?: string | undefined;
+            version?: string | undefined;
+        };
+        sourceIds?: Record<string, string> | undefined;
+        upstream?: {
+            archiveSha256?: string | undefined;
+            packageVersion?: string | undefined;
+            pluginVersion?: string | undefined;
+            repository?: string | undefined;
+            revision?: string | undefined;
+        } | undefined;
+        vendorFingerprints?: Record<string, string> | undefined;
+    }, {
+        createdAt: string;
+        importedAt?: string | undefined;
+        metadata?: Record<string, unknown> | undefined;
+        producer: {
+            kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+            name: string;
+            pluginVersion?: string | undefined;
+            revision?: string | undefined;
+            vendor?: string | undefined;
+            version?: string | undefined;
+        };
+        sourceIds?: Record<string, string> | undefined;
+        upstream?: {
+            archiveSha256?: string | undefined;
+            packageVersion?: string | undefined;
+            pluginVersion?: string | undefined;
+            repository?: string | undefined;
+            revision?: string | undefined;
+        } | undefined;
+        vendorFingerprints?: Record<string, string> | undefined;
+    }>;
+    securityLocationSchema: import("@oh-my-pi/omptype").FluentType<{
         endColumn?: number | undefined;
-        role?: string | undefined;
-    } | undefined;
-    excerpt?: string | undefined;
-}, {}>;
-export declare const securityOccurrenceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    id: string;
-    locations: {
-        path: string;
-        startLine: number;
         endLine?: number | undefined;
+        path: string;
+        role?: string | undefined;
         startColumn?: number | undefined;
+        startLine: number;
+    }, {
         endColumn?: number | undefined;
+        endLine?: number | undefined;
+        path: string;
         role?: string | undefined;
-    }[];
-    evidenceIds: string[];
-}, {}>;
-export declare const securityFindingSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    id: string;
-    scanId: string;
-    fingerprint: string;
-    ruleId: string;
-    anchor?: string | undefined;
-    title: string;
-    summary: string;
-    severity: {
-        level: "critical" | "high" | "informational" | "low" | "medium";
-        score?: number | undefined;
-        scoringSystem?: string | undefined;
-        vector?: string | undefined;
-        rationale?: string | undefined;
-    };
-    confidence: {
-        level: "high" | "low" | "medium";
-        rationale?: string | undefined;
-    };
-    taxonomy: {
-        category: string;
-        cwe: string[];
-        tags?: string[] | undefined;
-    };
-    occurrences: {
+        startColumn?: number | undefined;
+        startLine: number;
+    }>;
+    securityEvidenceSchema: import("@oh-my-pi/omptype").FluentType<{
+        excerpt?: string | undefined;
+        explanation: string;
         id: string;
-        locations: {
-            path: string;
-            startLine: number;
-            endLine?: number | undefined;
-            startColumn?: number | undefined;
+        kind: "code" | "note" | "trace" | "validation";
+        label: string;
+        location?: {
             endColumn?: number | undefined;
+            endLine?: number | undefined;
+            path: string;
             role?: string | undefined;
-        }[];
-        evidenceIds: string[];
-    }[];
-    evidence: {
+            startColumn?: number | undefined;
+            startLine: number;
+        } | undefined;
+    }, {
+        excerpt?: string | undefined;
+        explanation: string;
         id: string;
         kind: "code" | "note" | "trace" | "validation";
         label: string;
-        explanation: string;
         location?: {
+            endColumn?: number | undefined;
+            endLine?: number | undefined;
             path: string;
+            role?: string | undefined;
+            startColumn?: number | undefined;
             startLine: number;
+        } | undefined;
+    }>;
+    securityOccurrenceSchema: import("@oh-my-pi/omptype").FluentType<{
+        evidenceIds: string[];
+        id: string;
+        locations: {
+            endColumn?: number | undefined;
             endLine?: number | undefined;
+            path: string;
+            role?: string | undefined;
             startColumn?: number | undefined;
+            startLine: number;
+        }[];
+    }, {
+        evidenceIds: string[];
+        id: string;
+        locations: {
             endColumn?: number | undefined;
+            endLine?: number | undefined;
+            path: string;
             role?: string | undefined;
-        } | undefined;
-        excerpt?: string | undefined;
-    }[];
-    remediation?: string | undefined;
-    validation: {
-        status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
-        summary?: string | undefined;
-        evidenceIds: string[];
-        validatedAt?: string | undefined;
-    };
-    disposition: {
-        status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
-        rationale?: string | undefined;
-        updatedAt?: string | undefined;
-        actor?: string | undefined;
-    };
-    provenance: {
-        producer: {
-            kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
-            name: string;
-            version?: string | undefined;
-            vendor?: string | undefined;
-            revision?: string | undefined;
-            pluginVersion?: string | undefined;
+            startColumn?: number | undefined;
+            startLine: number;
+        }[];
+    }>;
+    securityFindingSchema: import("@oh-my-pi/omptype").FluentType<{
+        anchor?: string | undefined;
+        confidence: {
+            level: "high" | "low" | "medium";
+            rationale?: string | undefined;
         };
-        createdAt: string;
-        importedAt?: string | undefined;
-        sourceIds?: {
-            [x: string]: string;
-        } | undefined;
-        vendorFingerprints?: {
-            [x: string]: string;
-        } | undefined;
-        upstream?: {
-            repository?: string | undefined;
-            revision?: string | undefined;
-            packageVersion?: string | undefined;
-            pluginVersion?: string | undefined;
-            archiveSha256?: string | undefined;
-        } | undefined;
-        metadata?: {
-            [x: string]: unknown;
-        } | undefined;
-    };
-    extensions?: {
-        [x: string]: unknown;
-    } | undefined;
-}, {}>;
-export declare const securityCoverageSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
-    completeness: "complete" | "partial" | "unknown";
-    inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
-    includePaths: string[];
-    excludePaths: string[];
-    surfaces: {
+        disposition: {
+            actor?: string | undefined;
+            rationale?: string | undefined;
+            status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
+            updatedAt?: string | undefined;
+        };
+        evidence: {
+            excerpt?: string | undefined;
+            explanation: string;
+            id: string;
+            kind: "code" | "note" | "trace" | "validation";
+            label: string;
+            location?: {
+                endColumn?: number | undefined;
+                endLine?: number | undefined;
+                path: string;
+                role?: string | undefined;
+                startColumn?: number | undefined;
+                startLine: number;
+            } | undefined;
+        }[];
+        extensions?: Record<string, unknown> | undefined;
+        fingerprint: string;
         id: string;
-        label: string;
-        disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
-        receiptRefs: string[];
-        riskArea?: string | undefined;
-        notes?: string | undefined;
-    }[];
-    explicitExclusions: {
-        pattern: string;
-        reason: string;
-    }[];
-    deferred: {
+        occurrences: {
+            evidenceIds: string[];
+            id: string;
+            locations: {
+                endColumn?: number | undefined;
+                endLine?: number | undefined;
+                path: string;
+                role?: string | undefined;
+                startColumn?: number | undefined;
+                startLine: number;
+            }[];
+        }[];
+        provenance: {
+            createdAt: string;
+            importedAt?: string | undefined;
+            metadata?: Record<string, unknown> | undefined;
+            producer: {
+                kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                name: string;
+                pluginVersion?: string | undefined;
+                revision?: string | undefined;
+                vendor?: string | undefined;
+                version?: string | undefined;
+            };
+            sourceIds?: Record<string, string> | undefined;
+            upstream?: {
+                archiveSha256?: string | undefined;
+                packageVersion?: string | undefined;
+                pluginVersion?: string | undefined;
+                repository?: string | undefined;
+                revision?: string | undefined;
+            } | undefined;
+            vendorFingerprints?: Record<string, string> | undefined;
+        };
+        remediation?: string | undefined;
+        ruleId: string;
+        scanId: string;
+        severity: {
+            level: "critical" | "high" | "informational" | "low" | "medium";
+            rationale?: string | undefined;
+            score?: number | undefined;
+            scoringSystem?: string | undefined;
+            vector?: string | undefined;
+        };
+        summary: string;
+        taxonomy: {
+            category: string;
+            cwe: string[];
+            tags?: string[] | undefined;
+        };
+        title: string;
+        validation: {
+            evidenceIds: string[];
+            status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
+            summary?: string | undefined;
+            validatedAt?: string | undefined;
+        };
+    }, {
+        anchor?: string | undefined;
+        confidence: {
+            level: "high" | "low" | "medium";
+            rationale?: string | undefined;
+        };
+        disposition: {
+            actor?: string | undefined;
+            rationale?: string | undefined;
+            status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
+            updatedAt?: string | undefined;
+        };
+        evidence: {
+            excerpt?: string | undefined;
+            explanation: string;
+            id: string;
+            kind: "code" | "note" | "trace" | "validation";
+            label: string;
+            location?: {
+                endColumn?: number | undefined;
+                endLine?: number | undefined;
+                path: string;
+                role?: string | undefined;
+                startColumn?: number | undefined;
+                startLine: number;
+            } | undefined;
+        }[];
+        extensions?: Record<string, unknown> | undefined;
+        fingerprint: string;
         id: string;
-        reason: string;
-        paths?: string[] | undefined;
-        surfaceIds?: string[] | undefined;
-    }[];
-    openQuestions?: {
-        question: string;
-        followUpPrompt?: string | undefined;
-    }[] | undefined;
-}, {}>;
-export declare const securityTargetSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
-    repositoryRoot: string;
-    displayName: string;
-    revision?: string | undefined;
-    baseRevision?: string | undefined;
-    headRevision?: string | undefined;
-    includePaths: string[];
-    excludePaths: string[];
-    treeDigest: string;
-}, {}>;
-export declare const securityScanPlanSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    documentType: "omp-security.scan-plan";
-    schemaVersion: "1.0";
-    id: string;
-    createdAt: string;
-    repositoryRoot: string;
-    target: {
+        occurrences: {
+            evidenceIds: string[];
+            id: string;
+            locations: {
+                endColumn?: number | undefined;
+                endLine?: number | undefined;
+                path: string;
+                role?: string | undefined;
+                startColumn?: number | undefined;
+                startLine: number;
+            }[];
+        }[];
+        provenance: {
+            createdAt: string;
+            importedAt?: string | undefined;
+            metadata?: Record<string, unknown> | undefined;
+            producer: {
+                kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                name: string;
+                pluginVersion?: string | undefined;
+                revision?: string | undefined;
+                vendor?: string | undefined;
+                version?: string | undefined;
+            };
+            sourceIds?: Record<string, string> | undefined;
+            upstream?: {
+                archiveSha256?: string | undefined;
+                packageVersion?: string | undefined;
+                pluginVersion?: string | undefined;
+                repository?: string | undefined;
+                revision?: string | undefined;
+            } | undefined;
+            vendorFingerprints?: Record<string, string> | undefined;
+        };
+        remediation?: string | undefined;
+        ruleId: string;
+        scanId: string;
+        severity: {
+            level: "critical" | "high" | "informational" | "low" | "medium";
+            rationale?: string | undefined;
+            score?: number | undefined;
+            scoringSystem?: string | undefined;
+            vector?: string | undefined;
+        };
+        summary: string;
+        taxonomy: {
+            category: string;
+            cwe: string[];
+            tags?: string[] | undefined;
+        };
+        title: string;
+        validation: {
+            evidenceIds: string[];
+            status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
+            summary?: string | undefined;
+            validatedAt?: string | undefined;
+        };
+    }>;
+    securityCoverageSchema: import("@oh-my-pi/omptype").FluentType<{
+        completeness: "complete" | "partial" | "unknown";
+        deferred: {
+            id: string;
+            paths?: string[] | undefined;
+            reason: string;
+            surfaceIds?: string[] | undefined;
+        }[];
+        excludePaths: string[];
+        explicitExclusions: {
+            pattern: string;
+            reason: string;
+        }[];
+        includePaths: string[];
+        inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+        mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+        openQuestions?: {
+            followUpPrompt?: string | undefined;
+            question: string;
+        }[] | undefined;
+        surfaces: {
+            disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+            id: string;
+            label: string;
+            notes?: string | undefined;
+            receiptRefs: string[];
+            riskArea?: string | undefined;
+        }[];
+    }, {
+        completeness: "complete" | "partial" | "unknown";
+        deferred: {
+            id: string;
+            paths?: string[] | undefined;
+            reason: string;
+            surfaceIds?: string[] | undefined;
+        }[];
+        excludePaths: string[];
+        explicitExclusions: {
+            pattern: string;
+            reason: string;
+        }[];
+        includePaths: string[];
+        inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+        mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+        openQuestions?: {
+            followUpPrompt?: string | undefined;
+            question: string;
+        }[] | undefined;
+        surfaces: {
+            disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+            id: string;
+            label: string;
+            notes?: string | undefined;
+            receiptRefs: string[];
+            riskArea?: string | undefined;
+        }[];
+    }>;
+    securityTargetSchema: import("@oh-my-pi/omptype").FluentType<{
+        baseRevision?: string | undefined;
+        displayName: string;
+        excludePaths: string[];
+        headRevision?: string | undefined;
+        includePaths: string[];
         kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
         repositoryRoot: string;
-        displayName: string;
         revision?: string | undefined;
+        treeDigest: string;
+    }, {
         baseRevision?: string | undefined;
+        displayName: string;
+        excludePaths: string[];
         headRevision?: string | undefined;
         includePaths: string[];
-        excludePaths: string[];
+        kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+        repositoryRoot: string;
+        revision?: string | undefined;
         treeDigest: string;
-    };
-    knowledgeBases: {
-        path: string;
-        sha256: string;
-        size: number;
-    }[];
-    output: {
-        root: string;
-        archiveExisting: boolean;
-        existingState: "absent" | "archivable" | "empty";
-    };
-    model: {
-        provider: string;
-        modelId: string;
-        thinkingLevel?: string | undefined;
-    };
-    account: {
-        provider: string;
-        credentialId: number;
-        accountId?: string | undefined;
-        email?: string | undefined;
-        organizationId?: string | undefined;
-        organizationName?: string | undefined;
-    };
-    configFingerprint: string;
-    workflowFingerprint: string;
-    fingerprint: string;
-}, {}>;
-export declare const securityScanMetricsSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    runtimeMs?: number | undefined;
-    tokenUsage?: {
-        input: number;
-        output: number;
-        reasoning: number;
-        cacheRead: number;
-        cacheWrite: number;
-        total: number;
-    } | undefined;
-    cost?: number | undefined;
-    premiumRequests?: number | undefined;
-}, {}>;
-export declare const securityScanSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    documentType: "omp-security.scan";
-    schemaVersion: "1.0";
-    id: string;
-    projectKey: string;
-    status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
-    createdAt: string;
-    startedAt?: string | undefined;
-    completedAt?: string | undefined;
-    plan?: {
+    }>;
+    securityScanPlanSchema: import("@oh-my-pi/omptype").FluentType<{
+        account: {
+            accountId?: string | undefined;
+            credentialId: number;
+            email?: string | undefined;
+            organizationId?: string | undefined;
+            organizationName?: string | undefined;
+            provider: string;
+        };
+        configFingerprint: string;
+        createdAt: string;
         documentType: "omp-security.scan-plan";
-        schemaVersion: "1.0";
+        fingerprint: string;
         id: string;
-        createdAt: string;
-        repositoryRoot: string;
-        target: {
-            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
-            repositoryRoot: string;
-            displayName: string;
-            revision?: string | undefined;
-            baseRevision?: string | undefined;
-            headRevision?: string | undefined;
-            includePaths: string[];
-            excludePaths: string[];
-            treeDigest: string;
-        };
         knowledgeBases: {
             path: string;
             sha256: string;
             size: number;
         }[];
+        model: {
+            modelId: string;
+            provider: string;
+            thinkingLevel?: string | undefined;
+        };
         output: {
-            root: string;
             archiveExisting: boolean;
             existingState: "absent" | "archivable" | "empty";
+            root: string;
         };
-        model: {
-            provider: string;
-            modelId: string;
-            thinkingLevel?: string | undefined;
+        repositoryRoot: string;
+        schemaVersion: "1.0";
+        target: {
+            baseRevision?: string | undefined;
+            displayName: string;
+            excludePaths: string[];
+            headRevision?: string | undefined;
+            includePaths: string[];
+            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+            repositoryRoot: string;
+            revision?: string | undefined;
+            treeDigest: string;
         };
+        workflowFingerprint: string;
+    }, {
         account: {
-            provider: string;
-            credentialId: number;
             accountId?: string | undefined;
+            credentialId: number;
             email?: string | undefined;
             organizationId?: string | undefined;
             organizationName?: string | undefined;
+            provider: string;
         };
         configFingerprint: string;
-        workflowFingerprint: string;
-        fingerprint: string;
-    } | undefined;
-    target: {
-        kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
-        repositoryRoot: string;
-        displayName: string;
-        revision?: string | undefined;
-        baseRevision?: string | undefined;
-        headRevision?: string | undefined;
-        includePaths: string[];
-        excludePaths: string[];
-        treeDigest: string;
-    };
-    producer: {
-        kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
-        name: string;
-        version?: string | undefined;
-        vendor?: string | undefined;
-        revision?: string | undefined;
-        pluginVersion?: string | undefined;
-    };
-    provenance: {
-        producer: {
-            kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
-            name: string;
-            version?: string | undefined;
-            vendor?: string | undefined;
-            revision?: string | undefined;
-            pluginVersion?: string | undefined;
-        };
         createdAt: string;
-        importedAt?: string | undefined;
-        sourceIds?: {
-            [x: string]: string;
-        } | undefined;
-        vendorFingerprints?: {
-            [x: string]: string;
-        } | undefined;
-        upstream?: {
-            repository?: string | undefined;
-            revision?: string | undefined;
-            packageVersion?: string | undefined;
-            pluginVersion?: string | undefined;
-            archiveSha256?: string | undefined;
-        } | undefined;
-        metadata?: {
-            [x: string]: unknown;
-        } | undefined;
-    };
-    findingIds: string[];
-    coverage: {
-        mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
-        completeness: "complete" | "partial" | "unknown";
-        inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
-        includePaths: string[];
-        excludePaths: string[];
-        surfaces: {
-            id: string;
-            label: string;
-            disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
-            receiptRefs: string[];
-            riskArea?: string | undefined;
-            notes?: string | undefined;
-        }[];
-        explicitExclusions: {
-            pattern: string;
-            reason: string;
-        }[];
-        deferred: {
-            id: string;
-            reason: string;
-            paths?: string[] | undefined;
-            surfaceIds?: string[] | undefined;
+        documentType: "omp-security.scan-plan";
+        fingerprint: string;
+        id: string;
+        knowledgeBases: {
+            path: string;
+            sha256: string;
+            size: number;
         }[];
-        openQuestions?: {
-            question: string;
-            followUpPrompt?: string | undefined;
-        }[] | undefined;
-    };
-    reportRef?: string | undefined;
-    sarifRef?: string | undefined;
-    error?: string | undefined;
-    metrics?: {
+        model: {
+            modelId: string;
+            provider: string;
+            thinkingLevel?: string | undefined;
+        };
+        output: {
+            archiveExisting: boolean;
+            existingState: "absent" | "archivable" | "empty";
+            root: string;
+        };
+        repositoryRoot: string;
+        schemaVersion: "1.0";
+        target: {
+            baseRevision?: string | undefined;
+            displayName: string;
+            excludePaths: string[];
+            headRevision?: string | undefined;
+            includePaths: string[];
+            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+            repositoryRoot: string;
+            revision?: string | undefined;
+            treeDigest: string;
+        };
+        workflowFingerprint: string;
+    }>;
+    securityScanMetricsSchema: import("@oh-my-pi/omptype").FluentType<{
+        cost?: number | undefined;
+        premiumRequests?: number | undefined;
         runtimeMs?: number | undefined;
         tokenUsage?: {
+            cacheRead: number;
+            cacheWrite: number;
             input: number;
             output: number;
             reasoning: number;
-            cacheRead: number;
-            cacheWrite: number;
             total: number;
         } | undefined;
+    }, {
         cost?: number | undefined;
         premiumRequests?: number | undefined;
-    } | undefined;
-}, {}>;
-export declare const securityScanBundleSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-    scan: {
+        runtimeMs?: number | undefined;
+        tokenUsage?: {
+            cacheRead: number;
+            cacheWrite: number;
+            input: number;
+            output: number;
+            reasoning: number;
+            total: number;
+        } | undefined;
+    }>;
+    securityScanSchema: import("@oh-my-pi/omptype").FluentType<{
+        completedAt?: string | undefined;
+        coverage: {
+            completeness: "complete" | "partial" | "unknown";
+            deferred: {
+                id: string;
+                paths?: string[] | undefined;
+                reason: string;
+                surfaceIds?: string[] | undefined;
+            }[];
+            excludePaths: string[];
+            explicitExclusions: {
+                pattern: string;
+                reason: string;
+            }[];
+            includePaths: string[];
+            inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+            mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+            openQuestions?: {
+                followUpPrompt?: string | undefined;
+                question: string;
+            }[] | undefined;
+            surfaces: {
+                disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+                id: string;
+                label: string;
+                notes?: string | undefined;
+                receiptRefs: string[];
+                riskArea?: string | undefined;
+            }[];
+        };
+        createdAt: string;
         documentType: "omp-security.scan";
-        schemaVersion: "1.0";
+        error?: string | undefined;
+        findingIds: string[];
         id: string;
-        projectKey: string;
-        status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
-        createdAt: string;
-        startedAt?: string | undefined;
-        completedAt?: string | undefined;
+        metrics?: {
+            cost?: number | undefined;
+            premiumRequests?: number | undefined;
+            runtimeMs?: number | undefined;
+            tokenUsage?: {
+                cacheRead: number;
+                cacheWrite: number;
+                input: number;
+                output: number;
+                reasoning: number;
+                total: number;
+            } | undefined;
+        } | undefined;
         plan?: {
+            account: {
+                accountId?: string | undefined;
+                credentialId: number;
+                email?: string | undefined;
+                organizationId?: string | undefined;
+                organizationName?: string | undefined;
+                provider: string;
+            };
+            configFingerprint: string;
+            createdAt: string;
             documentType: "omp-security.scan-plan";
-            schemaVersion: "1.0";
+            fingerprint: string;
             id: string;
-            createdAt: string;
+            knowledgeBases: {
+                path: string;
+                sha256: string;
+                size: number;
+            }[];
+            model: {
+                modelId: string;
+                provider: string;
+                thinkingLevel?: string | undefined;
+            };
+            output: {
+                archiveExisting: boolean;
+                existingState: "absent" | "archivable" | "empty";
+                root: string;
+            };
             repositoryRoot: string;
+            schemaVersion: "1.0";
             target: {
-                kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
-                repositoryRoot: string;
-                displayName: string;
-                revision?: string | undefined;
                 baseRevision?: string | undefined;
+                displayName: string;
+                excludePaths: string[];
                 headRevision?: string | undefined;
                 includePaths: string[];
-                excludePaths: string[];
+                kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                repositoryRoot: string;
+                revision?: string | undefined;
                 treeDigest: string;
             };
+            workflowFingerprint: string;
+        } | undefined;
+        producer: {
+            kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+            name: string;
+            pluginVersion?: string | undefined;
+            revision?: string | undefined;
+            vendor?: string | undefined;
+            version?: string | undefined;
+        };
+        projectKey: string;
+        provenance: {
+            createdAt: string;
+            importedAt?: string | undefined;
+            metadata?: Record<string, unknown> | undefined;
+            producer: {
+                kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                name: string;
+                pluginVersion?: string | undefined;
+                revision?: string | undefined;
+                vendor?: string | undefined;
+                version?: string | undefined;
+            };
+            sourceIds?: Record<string, string> | undefined;
+            upstream?: {
+                archiveSha256?: string | undefined;
+                packageVersion?: string | undefined;
+                pluginVersion?: string | undefined;
+                repository?: string | undefined;
+                revision?: string | undefined;
+            } | undefined;
+            vendorFingerprints?: Record<string, string> | undefined;
+        };
+        reportRef?: string | undefined;
+        sarifRef?: string | undefined;
+        schemaVersion: "1.0";
+        startedAt?: string | undefined;
+        status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
+        target: {
+            baseRevision?: string | undefined;
+            displayName: string;
+            excludePaths: string[];
+            headRevision?: string | undefined;
+            includePaths: string[];
+            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+            repositoryRoot: string;
+            revision?: string | undefined;
+            treeDigest: string;
+        };
+    }, {
+        completedAt?: string | undefined;
+        coverage: {
+            completeness: "complete" | "partial" | "unknown";
+            deferred: {
+                id: string;
+                paths?: string[] | undefined;
+                reason: string;
+                surfaceIds?: string[] | undefined;
+            }[];
+            excludePaths: string[];
+            explicitExclusions: {
+                pattern: string;
+                reason: string;
+            }[];
+            includePaths: string[];
+            inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+            mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+            openQuestions?: {
+                followUpPrompt?: string | undefined;
+                question: string;
+            }[] | undefined;
+            surfaces: {
+                disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+                id: string;
+                label: string;
+                notes?: string | undefined;
+                receiptRefs: string[];
+                riskArea?: string | undefined;
+            }[];
+        };
+        createdAt: string;
+        documentType: "omp-security.scan";
+        error?: string | undefined;
+        findingIds: string[];
+        id: string;
+        metrics?: {
+            cost?: number | undefined;
+            premiumRequests?: number | undefined;
+            runtimeMs?: number | undefined;
+            tokenUsage?: {
+                cacheRead: number;
+                cacheWrite: number;
+                input: number;
+                output: number;
+                reasoning: number;
+                total: number;
+            } | undefined;
+        } | undefined;
+        plan?: {
+            account: {
+                accountId?: string | undefined;
+                credentialId: number;
+                email?: string | undefined;
+                organizationId?: string | undefined;
+                organizationName?: string | undefined;
+                provider: string;
+            };
+            configFingerprint: string;
+            createdAt: string;
+            documentType: "omp-security.scan-plan";
+            fingerprint: string;
+            id: string;
             knowledgeBases: {
                 path: string;
                 sha256: string;
                 size: number;
             }[];
-            output: {
-                root: string;
-                archiveExisting: boolean;
-                existingState: "absent" | "archivable" | "empty";
-            };
             model: {
-                provider: string;
                 modelId: string;
+                provider: string;
                 thinkingLevel?: string | undefined;
             };
-            account: {
-                provider: string;
-                credentialId: number;
-                accountId?: string | undefined;
-                email?: string | undefined;
-                organizationId?: string | undefined;
-                organizationName?: string | undefined;
+            output: {
+                archiveExisting: boolean;
+                existingState: "absent" | "archivable" | "empty";
+                root: string;
+            };
+            repositoryRoot: string;
+            schemaVersion: "1.0";
+            target: {
+                baseRevision?: string | undefined;
+                displayName: string;
+                excludePaths: string[];
+                headRevision?: string | undefined;
+                includePaths: string[];
+                kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                repositoryRoot: string;
+                revision?: string | undefined;
+                treeDigest: string;
             };
-            configFingerprint: string;
             workflowFingerprint: string;
-            fingerprint: string;
         } | undefined;
-        target: {
-            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
-            repositoryRoot: string;
-            displayName: string;
-            revision?: string | undefined;
-            baseRevision?: string | undefined;
-            headRevision?: string | undefined;
-            includePaths: string[];
-            excludePaths: string[];
-            treeDigest: string;
-        };
         producer: {
             kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
             name: string;
-            version?: string | undefined;
-            vendor?: string | undefined;
-            revision?: string | undefined;
             pluginVersion?: string | undefined;
+            revision?: string | undefined;
+            vendor?: string | undefined;
+            version?: string | undefined;
         };
+        projectKey: string;
         provenance: {
+            createdAt: string;
+            importedAt?: string | undefined;
+            metadata?: Record<string, unknown> | undefined;
             producer: {
                 kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
                 name: string;
-                version?: string | undefined;
-                vendor?: string | undefined;
-                revision?: string | undefined;
                 pluginVersion?: string | undefined;
+                revision?: string | undefined;
+                vendor?: string | undefined;
+                version?: string | undefined;
             };
-            createdAt: string;
-            importedAt?: string | undefined;
-            sourceIds?: {
-                [x: string]: string;
-            } | undefined;
-            vendorFingerprints?: {
-                [x: string]: string;
-            } | undefined;
+            sourceIds?: Record<string, string> | undefined;
             upstream?: {
-                repository?: string | undefined;
-                revision?: string | undefined;
+                archiveSha256?: string | undefined;
                 packageVersion?: string | undefined;
                 pluginVersion?: string | undefined;
-                archiveSha256?: string | undefined;
-            } | undefined;
-            metadata?: {
-                [x: string]: unknown;
+                repository?: string | undefined;
+                revision?: string | undefined;
             } | undefined;
+            vendorFingerprints?: Record<string, string> | undefined;
         };
-        findingIds: string[];
-        coverage: {
-            mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
-            completeness: "complete" | "partial" | "unknown";
-            inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
-            includePaths: string[];
+        reportRef?: string | undefined;
+        sarifRef?: string | undefined;
+        schemaVersion: "1.0";
+        startedAt?: string | undefined;
+        status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
+        target: {
+            baseRevision?: string | undefined;
+            displayName: string;
             excludePaths: string[];
-            surfaces: {
+            headRevision?: string | undefined;
+            includePaths: string[];
+            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+            repositoryRoot: string;
+            revision?: string | undefined;
+            treeDigest: string;
+        };
+    }>;
+    securityScanBundleSchema: import("@oh-my-pi/omptype").FluentType<{
+        findings: {
+            anchor?: string | undefined;
+            confidence: {
+                level: "high" | "low" | "medium";
+                rationale?: string | undefined;
+            };
+            disposition: {
+                actor?: string | undefined;
+                rationale?: string | undefined;
+                status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
+                updatedAt?: string | undefined;
+            };
+            evidence: {
+                excerpt?: string | undefined;
+                explanation: string;
                 id: string;
+                kind: "code" | "note" | "trace" | "validation";
                 label: string;
-                disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
-                receiptRefs: string[];
-                riskArea?: string | undefined;
-                notes?: string | undefined;
-            }[];
-            explicitExclusions: {
-                pattern: string;
-                reason: string;
-            }[];
-            deferred: {
-                id: string;
-                reason: string;
-                paths?: string[] | undefined;
-                surfaceIds?: string[] | undefined;
+                location?: {
+                    endColumn?: number | undefined;
+                    endLine?: number | undefined;
+                    path: string;
+                    role?: string | undefined;
+                    startColumn?: number | undefined;
+                    startLine: number;
+                } | undefined;
             }[];
-            openQuestions?: {
-                question: string;
-                followUpPrompt?: string | undefined;
-            }[] | undefined;
-        };
-        reportRef?: string | undefined;
-        sarifRef?: string | undefined;
-        error?: string | undefined;
-        metrics?: {
-            runtimeMs?: number | undefined;
-            tokenUsage?: {
-                input: number;
-                output: number;
-                reasoning: number;
-                cacheRead: number;
-                cacheWrite: number;
-                total: number;
-            } | undefined;
-            cost?: number | undefined;
-            premiumRequests?: number | undefined;
-        } | undefined;
-    };
-    findings: {
-        id: string;
-        scanId: string;
-        fingerprint: string;
-        ruleId: string;
-        anchor?: string | undefined;
-        title: string;
-        summary: string;
-        severity: {
-            level: "critical" | "high" | "informational" | "low" | "medium";
-            score?: number | undefined;
-            scoringSystem?: string | undefined;
-            vector?: string | undefined;
-            rationale?: string | undefined;
-        };
-        confidence: {
-            level: "high" | "low" | "medium";
-            rationale?: string | undefined;
-        };
-        taxonomy: {
-            category: string;
-            cwe: string[];
-            tags?: string[] | undefined;
-        };
-        occurrences: {
+            extensions?: Record<string, unknown> | undefined;
+            fingerprint: string;
             id: string;
-            locations: {
-                path: string;
-                startLine: number;
-                endLine?: number | undefined;
-                startColumn?: number | undefined;
-                endColumn?: number | undefined;
-                role?: string | undefined;
+            occurrences: {
+                evidenceIds: string[];
+                id: string;
+                locations: {
+                    endColumn?: number | undefined;
+                    endLine?: number | undefined;
+                    path: string;
+                    role?: string | undefined;
+                    startColumn?: number | undefined;
+                    startLine: number;
+                }[];
             }[];
-            evidenceIds: string[];
+            provenance: {
+                createdAt: string;
+                importedAt?: string | undefined;
+                metadata?: Record<string, unknown> | undefined;
+                producer: {
+                    kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                    name: string;
+                    pluginVersion?: string | undefined;
+                    revision?: string | undefined;
+                    vendor?: string | undefined;
+                    version?: string | undefined;
+                };
+                sourceIds?: Record<string, string> | undefined;
+                upstream?: {
+                    archiveSha256?: string | undefined;
+                    packageVersion?: string | undefined;
+                    pluginVersion?: string | undefined;
+                    repository?: string | undefined;
+                    revision?: string | undefined;
+                } | undefined;
+                vendorFingerprints?: Record<string, string> | undefined;
+            };
+            remediation?: string | undefined;
+            ruleId: string;
+            scanId: string;
+            severity: {
+                level: "critical" | "high" | "informational" | "low" | "medium";
+                rationale?: string | undefined;
+                score?: number | undefined;
+                scoringSystem?: string | undefined;
+                vector?: string | undefined;
+            };
+            summary: string;
+            taxonomy: {
+                category: string;
+                cwe: string[];
+                tags?: string[] | undefined;
+            };
+            title: string;
+            validation: {
+                evidenceIds: string[];
+                status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
+                summary?: string | undefined;
+                validatedAt?: string | undefined;
+            };
         }[];
-        evidence: {
+        report?: string | undefined;
+        sarif?: Record<string, unknown> | undefined;
+        scan: {
+            completedAt?: string | undefined;
+            coverage: {
+                completeness: "complete" | "partial" | "unknown";
+                deferred: {
+                    id: string;
+                    paths?: string[] | undefined;
+                    reason: string;
+                    surfaceIds?: string[] | undefined;
+                }[];
+                excludePaths: string[];
+                explicitExclusions: {
+                    pattern: string;
+                    reason: string;
+                }[];
+                includePaths: string[];
+                inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+                mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+                openQuestions?: {
+                    followUpPrompt?: string | undefined;
+                    question: string;
+                }[] | undefined;
+                surfaces: {
+                    disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+                    id: string;
+                    label: string;
+                    notes?: string | undefined;
+                    receiptRefs: string[];
+                    riskArea?: string | undefined;
+                }[];
+            };
+            createdAt: string;
+            documentType: "omp-security.scan";
+            error?: string | undefined;
+            findingIds: string[];
             id: string;
-            kind: "code" | "note" | "trace" | "validation";
-            label: string;
-            explanation: string;
-            location?: {
-                path: string;
-                startLine: number;
-                endLine?: number | undefined;
-                startColumn?: number | undefined;
-                endColumn?: number | undefined;
-                role?: string | undefined;
+            metrics?: {
+                cost?: number | undefined;
+                premiumRequests?: number | undefined;
+                runtimeMs?: number | undefined;
+                tokenUsage?: {
+                    cacheRead: number;
+                    cacheWrite: number;
+                    input: number;
+                    output: number;
+                    reasoning: number;
+                    total: number;
+                } | undefined;
+            } | undefined;
+            plan?: {
+                account: {
+                    accountId?: string | undefined;
+                    credentialId: number;
+                    email?: string | undefined;
+                    organizationId?: string | undefined;
+                    organizationName?: string | undefined;
+                    provider: string;
+                };
+                configFingerprint: string;
+                createdAt: string;
+                documentType: "omp-security.scan-plan";
+                fingerprint: string;
+                id: string;
+                knowledgeBases: {
+                    path: string;
+                    sha256: string;
+                    size: number;
+                }[];
+                model: {
+                    modelId: string;
+                    provider: string;
+                    thinkingLevel?: string | undefined;
+                };
+                output: {
+                    archiveExisting: boolean;
+                    existingState: "absent" | "archivable" | "empty";
+                    root: string;
+                };
+                repositoryRoot: string;
+                schemaVersion: "1.0";
+                target: {
+                    baseRevision?: string | undefined;
+                    displayName: string;
+                    excludePaths: string[];
+                    headRevision?: string | undefined;
+                    includePaths: string[];
+                    kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                    repositoryRoot: string;
+                    revision?: string | undefined;
+                    treeDigest: string;
+                };
+                workflowFingerprint: string;
             } | undefined;
-            excerpt?: string | undefined;
-        }[];
-        remediation?: string | undefined;
-        validation: {
-            status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
-            summary?: string | undefined;
-            evidenceIds: string[];
-            validatedAt?: string | undefined;
-        };
-        disposition: {
-            status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
-            rationale?: string | undefined;
-            updatedAt?: string | undefined;
-            actor?: string | undefined;
-        };
-        provenance: {
             producer: {
                 kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
                 name: string;
-                version?: string | undefined;
+                pluginVersion?: string | undefined;
+                revision?: string | undefined;
                 vendor?: string | undefined;
+                version?: string | undefined;
+            };
+            projectKey: string;
+            provenance: {
+                createdAt: string;
+                importedAt?: string | undefined;
+                metadata?: Record<string, unknown> | undefined;
+                producer: {
+                    kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                    name: string;
+                    pluginVersion?: string | undefined;
+                    revision?: string | undefined;
+                    vendor?: string | undefined;
+                    version?: string | undefined;
+                };
+                sourceIds?: Record<string, string> | undefined;
+                upstream?: {
+                    archiveSha256?: string | undefined;
+                    packageVersion?: string | undefined;
+                    pluginVersion?: string | undefined;
+                    repository?: string | undefined;
+                    revision?: string | undefined;
+                } | undefined;
+                vendorFingerprints?: Record<string, string> | undefined;
+            };
+            reportRef?: string | undefined;
+            sarifRef?: string | undefined;
+            schemaVersion: "1.0";
+            startedAt?: string | undefined;
+            status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
+            target: {
+                baseRevision?: string | undefined;
+                displayName: string;
+                excludePaths: string[];
+                headRevision?: string | undefined;
+                includePaths: string[];
+                kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                repositoryRoot: string;
                 revision?: string | undefined;
-                pluginVersion?: string | undefined;
+                treeDigest: string;
+            };
+        };
+    }, {
+        findings: {
+            anchor?: string | undefined;
+            confidence: {
+                level: "high" | "low" | "medium";
+                rationale?: string | undefined;
+            };
+            disposition: {
+                actor?: string | undefined;
+                rationale?: string | undefined;
+                status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
+                updatedAt?: string | undefined;
+            };
+            evidence: {
+                excerpt?: string | undefined;
+                explanation: string;
+                id: string;
+                kind: "code" | "note" | "trace" | "validation";
+                label: string;
+                location?: {
+                    endColumn?: number | undefined;
+                    endLine?: number | undefined;
+                    path: string;
+                    role?: string | undefined;
+                    startColumn?: number | undefined;
+                    startLine: number;
+                } | undefined;
+            }[];
+            extensions?: Record<string, unknown> | undefined;
+            fingerprint: string;
+            id: string;
+            occurrences: {
+                evidenceIds: string[];
+                id: string;
+                locations: {
+                    endColumn?: number | undefined;
+                    endLine?: number | undefined;
+                    path: string;
+                    role?: string | undefined;
+                    startColumn?: number | undefined;
+                    startLine: number;
+                }[];
+            }[];
+            provenance: {
+                createdAt: string;
+                importedAt?: string | undefined;
+                metadata?: Record<string, unknown> | undefined;
+                producer: {
+                    kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                    name: string;
+                    pluginVersion?: string | undefined;
+                    revision?: string | undefined;
+                    vendor?: string | undefined;
+                    version?: string | undefined;
+                };
+                sourceIds?: Record<string, string> | undefined;
+                upstream?: {
+                    archiveSha256?: string | undefined;
+                    packageVersion?: string | undefined;
+                    pluginVersion?: string | undefined;
+                    repository?: string | undefined;
+                    revision?: string | undefined;
+                } | undefined;
+                vendorFingerprints?: Record<string, string> | undefined;
+            };
+            remediation?: string | undefined;
+            ruleId: string;
+            scanId: string;
+            severity: {
+                level: "critical" | "high" | "informational" | "low" | "medium";
+                rationale?: string | undefined;
+                score?: number | undefined;
+                scoringSystem?: string | undefined;
+                vector?: string | undefined;
+            };
+            summary: string;
+            taxonomy: {
+                category: string;
+                cwe: string[];
+                tags?: string[] | undefined;
+            };
+            title: string;
+            validation: {
+                evidenceIds: string[];
+                status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
+                summary?: string | undefined;
+                validatedAt?: string | undefined;
+            };
+        }[];
+        report?: string | undefined;
+        sarif?: Record<string, unknown> | undefined;
+        scan: {
+            completedAt?: string | undefined;
+            coverage: {
+                completeness: "complete" | "partial" | "unknown";
+                deferred: {
+                    id: string;
+                    paths?: string[] | undefined;
+                    reason: string;
+                    surfaceIds?: string[] | undefined;
+                }[];
+                excludePaths: string[];
+                explicitExclusions: {
+                    pattern: string;
+                    reason: string;
+                }[];
+                includePaths: string[];
+                inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+                mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+                openQuestions?: {
+                    followUpPrompt?: string | undefined;
+                    question: string;
+                }[] | undefined;
+                surfaces: {
+                    disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+                    id: string;
+                    label: string;
+                    notes?: string | undefined;
+                    receiptRefs: string[];
+                    riskArea?: string | undefined;
+                }[];
             };
             createdAt: string;
-            importedAt?: string | undefined;
-            sourceIds?: {
-                [x: string]: string;
+            documentType: "omp-security.scan";
+            error?: string | undefined;
+            findingIds: string[];
+            id: string;
+            metrics?: {
+                cost?: number | undefined;
+                premiumRequests?: number | undefined;
+                runtimeMs?: number | undefined;
+                tokenUsage?: {
+                    cacheRead: number;
+                    cacheWrite: number;
+                    input: number;
+                    output: number;
+                    reasoning: number;
+                    total: number;
+                } | undefined;
             } | undefined;
-            vendorFingerprints?: {
-                [x: string]: string;
+            plan?: {
+                account: {
+                    accountId?: string | undefined;
+                    credentialId: number;
+                    email?: string | undefined;
+                    organizationId?: string | undefined;
+                    organizationName?: string | undefined;
+                    provider: string;
+                };
+                configFingerprint: string;
+                createdAt: string;
+                documentType: "omp-security.scan-plan";
+                fingerprint: string;
+                id: string;
+                knowledgeBases: {
+                    path: string;
+                    sha256: string;
+                    size: number;
+                }[];
+                model: {
+                    modelId: string;
+                    provider: string;
+                    thinkingLevel?: string | undefined;
+                };
+                output: {
+                    archiveExisting: boolean;
+                    existingState: "absent" | "archivable" | "empty";
+                    root: string;
+                };
+                repositoryRoot: string;
+                schemaVersion: "1.0";
+                target: {
+                    baseRevision?: string | undefined;
+                    displayName: string;
+                    excludePaths: string[];
+                    headRevision?: string | undefined;
+                    includePaths: string[];
+                    kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                    repositoryRoot: string;
+                    revision?: string | undefined;
+                    treeDigest: string;
+                };
+                workflowFingerprint: string;
             } | undefined;
-            upstream?: {
-                repository?: string | undefined;
-                revision?: string | undefined;
-                packageVersion?: string | undefined;
+            producer: {
+                kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                name: string;
                 pluginVersion?: string | undefined;
-                archiveSha256?: string | undefined;
-            } | undefined;
-            metadata?: {
-                [x: string]: unknown;
-            } | undefined;
+                revision?: string | undefined;
+                vendor?: string | undefined;
+                version?: string | undefined;
+            };
+            projectKey: string;
+            provenance: {
+                createdAt: string;
+                importedAt?: string | undefined;
+                metadata?: Record<string, unknown> | undefined;
+                producer: {
+                    kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                    name: string;
+                    pluginVersion?: string | undefined;
+                    revision?: string | undefined;
+                    vendor?: string | undefined;
+                    version?: string | undefined;
+                };
+                sourceIds?: Record<string, string> | undefined;
+                upstream?: {
+                    archiveSha256?: string | undefined;
+                    packageVersion?: string | undefined;
+                    pluginVersion?: string | undefined;
+                    repository?: string | undefined;
+                    revision?: string | undefined;
+                } | undefined;
+                vendorFingerprints?: Record<string, string> | undefined;
+            };
+            reportRef?: string | undefined;
+            sarifRef?: string | undefined;
+            schemaVersion: "1.0";
+            startedAt?: string | undefined;
+            status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
+            target: {
+                baseRevision?: string | undefined;
+                displayName: string;
+                excludePaths: string[];
+                headRevision?: string | undefined;
+                includePaths: string[];
+                kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                repositoryRoot: string;
+                revision?: string | undefined;
+                treeDigest: string;
+            };
         };
-        extensions?: {
-            [x: string]: unknown;
-        } | undefined;
-    }[];
-    report?: string | undefined;
-    sarif?: {
-        [x: string]: unknown;
-    } | undefined;
-}, {}>;
+    }>;
+};