@oh-my-pi/pi-coding-agent 17.2.6 → 17.2.8

package/dist/types/security/contracts/schemas.d.ts

@@ -1,662 +1,1238 @@
 export declare const getSecurityContractSchemas: () => {
-    securityProducerSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    securityProducerSchema: import("@oh-my-pi/omptype").FluentType<{
         kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
         name: string;
-        version?: string | undefined;
-        vendor?: string | undefined;
+        pluginVersion?: string | undefined;
         revision?: string | undefined;
+        vendor?: string | undefined;
+        version?: string | undefined;
+    }, {
+        kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+        name: string;
         pluginVersion?: string | undefined;
-    }, {}>;
-    securityProvenanceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+        revision?: string | undefined;
+        vendor?: string | undefined;
+        version?: string | undefined;
+    }>;
+    securityProvenanceSchema: import("@oh-my-pi/omptype").FluentType<{
+        createdAt: string;
+        importedAt?: string | undefined;
+        metadata?: Record<string, unknown> | undefined;
         producer: {
             kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
             name: string;
-            version?: string | undefined;
-            vendor?: string | undefined;
-            revision?: string | undefined;
             pluginVersion?: string | undefined;
+            revision?: string | undefined;
+            vendor?: string | undefined;
+            version?: string | undefined;
         };
-        createdAt: string;
-        importedAt?: string | undefined;
-        sourceIds?: {
-            [x: string]: string;
-        } | undefined;
-        vendorFingerprints?: {
-            [x: string]: string;
-        } | undefined;
+        sourceIds?: Record<string, string> | undefined;
         upstream?: {
+            archiveSha256?: string | undefined;
+            packageVersion?: string | undefined;
+            pluginVersion?: string | undefined;
             repository?: string | undefined;
             revision?: string | undefined;
-            packageVersion?: string | undefined;
+        } | undefined;
+        vendorFingerprints?: Record<string, string> | undefined;
+    }, {
+        createdAt: string;
+        importedAt?: string | undefined;
+        metadata?: Record<string, unknown> | undefined;
+        producer: {
+            kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+            name: string;
             pluginVersion?: string | undefined;
+            revision?: string | undefined;
+            vendor?: string | undefined;
+            version?: string | undefined;
+        };
+        sourceIds?: Record<string, string> | undefined;
+        upstream?: {
             archiveSha256?: string | undefined;
+            packageVersion?: string | undefined;
+            pluginVersion?: string | undefined;
+            repository?: string | undefined;
+            revision?: string | undefined;
         } | undefined;
-        metadata?: {
-            [x: string]: unknown;
-        } | undefined;
-    }, {}>;
-    securityLocationSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-        path: string;
-        startLine: number;
+        vendorFingerprints?: Record<string, string> | undefined;
+    }>;
+    securityLocationSchema: import("@oh-my-pi/omptype").FluentType<{
+        endColumn?: number | undefined;
         endLine?: number | undefined;
+        path: string;
+        role?: string | undefined;
         startColumn?: number | undefined;
+        startLine: number;
+    }, {
         endColumn?: number | undefined;
+        endLine?: number | undefined;
+        path: string;
         role?: string | undefined;
-    }, {}>;
-    securityEvidenceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+        startColumn?: number | undefined;
+        startLine: number;
+    }>;
+    securityEvidenceSchema: import("@oh-my-pi/omptype").FluentType<{
+        excerpt?: string | undefined;
+        explanation: string;
         id: string;
         kind: "code" | "note" | "trace" | "validation";
         label: string;
-        explanation: string;
         location?: {
-            path: string;
-            startLine: number;
-            endLine?: number | undefined;
-            startColumn?: number | undefined;
             endColumn?: number | undefined;
+            endLine?: number | undefined;
+            path: string;
             role?: string | undefined;
+            startColumn?: number | undefined;
+            startLine: number;
         } | undefined;
+    }, {
         excerpt?: string | undefined;
-    }, {}>;
-    securityOccurrenceSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+        explanation: string;
         id: string;
-        locations: {
-            path: string;
-            startLine: number;
+        kind: "code" | "note" | "trace" | "validation";
+        label: string;
+        location?: {
+            endColumn?: number | undefined;
             endLine?: number | undefined;
+            path: string;
+            role?: string | undefined;
             startColumn?: number | undefined;
+            startLine: number;
+        } | undefined;
+    }>;
+    securityOccurrenceSchema: import("@oh-my-pi/omptype").FluentType<{
+        evidenceIds: string[];
+        id: string;
+        locations: {
             endColumn?: number | undefined;
+            endLine?: number | undefined;
+            path: string;
             role?: string | undefined;
+            startColumn?: number | undefined;
+            startLine: number;
         }[];
+    }, {
         evidenceIds: string[];
-    }, {}>;
-    securityFindingSchema: import("arktype/internal/variants/object.ts").ObjectType<{
         id: string;
-        scanId: string;
-        fingerprint: string;
-        ruleId: string;
+        locations: {
+            endColumn?: number | undefined;
+            endLine?: number | undefined;
+            path: string;
+            role?: string | undefined;
+            startColumn?: number | undefined;
+            startLine: number;
+        }[];
+    }>;
+    securityFindingSchema: import("@oh-my-pi/omptype").FluentType<{
         anchor?: string | undefined;
-        title: string;
-        summary: string;
-        severity: {
-            level: "critical" | "high" | "informational" | "low" | "medium";
-            score?: number | undefined;
-            scoringSystem?: string | undefined;
-            vector?: string | undefined;
-            rationale?: string | undefined;
-        };
         confidence: {
             level: "high" | "low" | "medium";
             rationale?: string | undefined;
         };
-        taxonomy: {
-            category: string;
-            cwe: string[];
-            tags?: string[] | undefined;
+        disposition: {
+            actor?: string | undefined;
+            rationale?: string | undefined;
+            status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
+            updatedAt?: string | undefined;
         };
-        occurrences: {
-            id: string;
-            locations: {
-                path: string;
-                startLine: number;
-                endLine?: number | undefined;
-                startColumn?: number | undefined;
-                endColumn?: number | undefined;
-                role?: string | undefined;
-            }[];
-            evidenceIds: string[];
-        }[];
         evidence: {
+            excerpt?: string | undefined;
+            explanation: string;
             id: string;
             kind: "code" | "note" | "trace" | "validation";
             label: string;
-            explanation: string;
             location?: {
-                path: string;
-                startLine: number;
+                endColumn?: number | undefined;
                 endLine?: number | undefined;
+                path: string;
+                role?: string | undefined;
                 startColumn?: number | undefined;
+                startLine: number;
+            } | undefined;
+        }[];
+        extensions?: Record<string, unknown> | undefined;
+        fingerprint: string;
+        id: string;
+        occurrences: {
+            evidenceIds: string[];
+            id: string;
+            locations: {
                 endColumn?: number | undefined;
+                endLine?: number | undefined;
+                path: string;
                 role?: string | undefined;
-            } | undefined;
-            excerpt?: string | undefined;
+                startColumn?: number | undefined;
+                startLine: number;
+            }[];
         }[];
+        provenance: {
+            createdAt: string;
+            importedAt?: string | undefined;
+            metadata?: Record<string, unknown> | undefined;
+            producer: {
+                kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                name: string;
+                pluginVersion?: string | undefined;
+                revision?: string | undefined;
+                vendor?: string | undefined;
+                version?: string | undefined;
+            };
+            sourceIds?: Record<string, string> | undefined;
+            upstream?: {
+                archiveSha256?: string | undefined;
+                packageVersion?: string | undefined;
+                pluginVersion?: string | undefined;
+                repository?: string | undefined;
+                revision?: string | undefined;
+            } | undefined;
+            vendorFingerprints?: Record<string, string> | undefined;
+        };
         remediation?: string | undefined;
+        ruleId: string;
+        scanId: string;
+        severity: {
+            level: "critical" | "high" | "informational" | "low" | "medium";
+            rationale?: string | undefined;
+            score?: number | undefined;
+            scoringSystem?: string | undefined;
+            vector?: string | undefined;
+        };
+        summary: string;
+        taxonomy: {
+            category: string;
+            cwe: string[];
+            tags?: string[] | undefined;
+        };
+        title: string;
         validation: {
+            evidenceIds: string[];
             status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
             summary?: string | undefined;
-            evidenceIds: string[];
             validatedAt?: string | undefined;
         };
+    }, {
+        anchor?: string | undefined;
+        confidence: {
+            level: "high" | "low" | "medium";
+            rationale?: string | undefined;
+        };
         disposition: {
-            status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
+            actor?: string | undefined;
             rationale?: string | undefined;
+            status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
             updatedAt?: string | undefined;
-            actor?: string | undefined;
         };
+        evidence: {
+            excerpt?: string | undefined;
+            explanation: string;
+            id: string;
+            kind: "code" | "note" | "trace" | "validation";
+            label: string;
+            location?: {
+                endColumn?: number | undefined;
+                endLine?: number | undefined;
+                path: string;
+                role?: string | undefined;
+                startColumn?: number | undefined;
+                startLine: number;
+            } | undefined;
+        }[];
+        extensions?: Record<string, unknown> | undefined;
+        fingerprint: string;
+        id: string;
+        occurrences: {
+            evidenceIds: string[];
+            id: string;
+            locations: {
+                endColumn?: number | undefined;
+                endLine?: number | undefined;
+                path: string;
+                role?: string | undefined;
+                startColumn?: number | undefined;
+                startLine: number;
+            }[];
+        }[];
         provenance: {
+            createdAt: string;
+            importedAt?: string | undefined;
+            metadata?: Record<string, unknown> | undefined;
             producer: {
                 kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
                 name: string;
-                version?: string | undefined;
-                vendor?: string | undefined;
-                revision?: string | undefined;
                 pluginVersion?: string | undefined;
+                revision?: string | undefined;
+                vendor?: string | undefined;
+                version?: string | undefined;
             };
-            createdAt: string;
-            importedAt?: string | undefined;
-            sourceIds?: {
-                [x: string]: string;
-            } | undefined;
-            vendorFingerprints?: {
-                [x: string]: string;
-            } | undefined;
+            sourceIds?: Record<string, string> | undefined;
             upstream?: {
-                repository?: string | undefined;
-                revision?: string | undefined;
+                archiveSha256?: string | undefined;
                 packageVersion?: string | undefined;
                 pluginVersion?: string | undefined;
-                archiveSha256?: string | undefined;
-            } | undefined;
-            metadata?: {
-                [x: string]: unknown;
+                repository?: string | undefined;
+                revision?: string | undefined;
             } | undefined;
+            vendorFingerprints?: Record<string, string> | undefined;
         };
-        extensions?: {
-            [x: string]: unknown;
-        } | undefined;
-    }, {}>;
-    securityCoverageSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-        mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
-        completeness: "complete" | "partial" | "unknown";
-        inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
-        includePaths: string[];
-        excludePaths: string[];
-        surfaces: {
-            id: string;
-            label: string;
-            disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
-            receiptRefs: string[];
-            riskArea?: string | undefined;
-            notes?: string | undefined;
-        }[];
-        explicitExclusions: {
+        remediation?: string | undefined;
+        ruleId: string;
+        scanId: string;
+        severity: {
+            level: "critical" | "high" | "informational" | "low" | "medium";
+            rationale?: string | undefined;
+            score?: number | undefined;
+            scoringSystem?: string | undefined;
+            vector?: string | undefined;
+        };
+        summary: string;
+        taxonomy: {
+            category: string;
+            cwe: string[];
+            tags?: string[] | undefined;
+        };
+        title: string;
+        validation: {
+            evidenceIds: string[];
+            status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
+            summary?: string | undefined;
+            validatedAt?: string | undefined;
+        };
+    }>;
+    securityCoverageSchema: import("@oh-my-pi/omptype").FluentType<{
+        completeness: "complete" | "partial" | "unknown";
+        deferred: {
+            id: string;
+            paths?: string[] | undefined;
+            reason: string;
+            surfaceIds?: string[] | undefined;
+        }[];
+        excludePaths: string[];
+        explicitExclusions: {
             pattern: string;
             reason: string;
         }[];
+        includePaths: string[];
+        inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+        mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+        openQuestions?: {
+            followUpPrompt?: string | undefined;
+            question: string;
+        }[] | undefined;
+        surfaces: {
+            disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+            id: string;
+            label: string;
+            notes?: string | undefined;
+            receiptRefs: string[];
+            riskArea?: string | undefined;
+        }[];
+    }, {
+        completeness: "complete" | "partial" | "unknown";
         deferred: {
             id: string;
-            reason: string;
             paths?: string[] | undefined;
+            reason: string;
             surfaceIds?: string[] | undefined;
         }[];
+        excludePaths: string[];
+        explicitExclusions: {
+            pattern: string;
+            reason: string;
+        }[];
+        includePaths: string[];
+        inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+        mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
         openQuestions?: {
-            question: string;
             followUpPrompt?: string | undefined;
+            question: string;
         }[] | undefined;
-    }, {}>;
-    securityTargetSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+        surfaces: {
+            disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+            id: string;
+            label: string;
+            notes?: string | undefined;
+            receiptRefs: string[];
+            riskArea?: string | undefined;
+        }[];
+    }>;
+    securityTargetSchema: import("@oh-my-pi/omptype").FluentType<{
+        baseRevision?: string | undefined;
+        displayName: string;
+        excludePaths: string[];
+        headRevision?: string | undefined;
+        includePaths: string[];
         kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
         repositoryRoot: string;
-        displayName: string;
         revision?: string | undefined;
+        treeDigest: string;
+    }, {
         baseRevision?: string | undefined;
+        displayName: string;
+        excludePaths: string[];
         headRevision?: string | undefined;
         includePaths: string[];
-        excludePaths: string[];
+        kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+        repositoryRoot: string;
+        revision?: string | undefined;
         treeDigest: string;
-    }, {}>;
-    securityScanPlanSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+    }>;
+    securityScanPlanSchema: import("@oh-my-pi/omptype").FluentType<{
+        account: {
+            accountId?: string | undefined;
+            credentialId: number;
+            email?: string | undefined;
+            organizationId?: string | undefined;
+            organizationName?: string | undefined;
+            provider: string;
+        };
+        configFingerprint: string;
+        createdAt: string;
         documentType: "omp-security.scan-plan";
-        schemaVersion: "1.0";
+        fingerprint: string;
         id: string;
-        createdAt: string;
-        repositoryRoot: string;
-        target: {
-            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
-            repositoryRoot: string;
-            displayName: string;
-            revision?: string | undefined;
-            baseRevision?: string | undefined;
-            headRevision?: string | undefined;
-            includePaths: string[];
-            excludePaths: string[];
-            treeDigest: string;
-        };
         knowledgeBases: {
             path: string;
             sha256: string;
             size: number;
         }[];
+        model: {
+            modelId: string;
+            provider: string;
+            thinkingLevel?: string | undefined;
+        };
         output: {
-            root: string;
             archiveExisting: boolean;
             existingState: "absent" | "archivable" | "empty";
+            root: string;
         };
-        model: {
-            provider: string;
-            modelId: string;
-            thinkingLevel?: string | undefined;
+        repositoryRoot: string;
+        schemaVersion: "1.0";
+        target: {
+            baseRevision?: string | undefined;
+            displayName: string;
+            excludePaths: string[];
+            headRevision?: string | undefined;
+            includePaths: string[];
+            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+            repositoryRoot: string;
+            revision?: string | undefined;
+            treeDigest: string;
         };
+        workflowFingerprint: string;
+    }, {
         account: {
-            provider: string;
-            credentialId: number;
             accountId?: string | undefined;
+            credentialId: number;
             email?: string | undefined;
             organizationId?: string | undefined;
             organizationName?: string | undefined;
+            provider: string;
         };
         configFingerprint: string;
-        workflowFingerprint: string;
+        createdAt: string;
+        documentType: "omp-security.scan-plan";
         fingerprint: string;
-    }, {}>;
-    securityScanMetricsSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+        id: string;
+        knowledgeBases: {
+            path: string;
+            sha256: string;
+            size: number;
+        }[];
+        model: {
+            modelId: string;
+            provider: string;
+            thinkingLevel?: string | undefined;
+        };
+        output: {
+            archiveExisting: boolean;
+            existingState: "absent" | "archivable" | "empty";
+            root: string;
+        };
+        repositoryRoot: string;
+        schemaVersion: "1.0";
+        target: {
+            baseRevision?: string | undefined;
+            displayName: string;
+            excludePaths: string[];
+            headRevision?: string | undefined;
+            includePaths: string[];
+            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+            repositoryRoot: string;
+            revision?: string | undefined;
+            treeDigest: string;
+        };
+        workflowFingerprint: string;
+    }>;
+    securityScanMetricsSchema: import("@oh-my-pi/omptype").FluentType<{
+        cost?: number | undefined;
+        premiumRequests?: number | undefined;
         runtimeMs?: number | undefined;
         tokenUsage?: {
+            cacheRead: number;
+            cacheWrite: number;
             input: number;
             output: number;
             reasoning: number;
-            cacheRead: number;
-            cacheWrite: number;
             total: number;
         } | undefined;
+    }, {
         cost?: number | undefined;
         premiumRequests?: number | undefined;
-    }, {}>;
-    securityScanSchema: import("arktype/internal/variants/object.ts").ObjectType<{
+        runtimeMs?: number | undefined;
+        tokenUsage?: {
+            cacheRead: number;
+            cacheWrite: number;
+            input: number;
+            output: number;
+            reasoning: number;
+            total: number;
+        } | undefined;
+    }>;
+    securityScanSchema: import("@oh-my-pi/omptype").FluentType<{
+        completedAt?: string | undefined;
+        coverage: {
+            completeness: "complete" | "partial" | "unknown";
+            deferred: {
+                id: string;
+                paths?: string[] | undefined;
+                reason: string;
+                surfaceIds?: string[] | undefined;
+            }[];
+            excludePaths: string[];
+            explicitExclusions: {
+                pattern: string;
+                reason: string;
+            }[];
+            includePaths: string[];
+            inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+            mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+            openQuestions?: {
+                followUpPrompt?: string | undefined;
+                question: string;
+            }[] | undefined;
+            surfaces: {
+                disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+                id: string;
+                label: string;
+                notes?: string | undefined;
+                receiptRefs: string[];
+                riskArea?: string | undefined;
+            }[];
+        };
+        createdAt: string;
         documentType: "omp-security.scan";
-        schemaVersion: "1.0";
+        error?: string | undefined;
+        findingIds: string[];
         id: string;
-        projectKey: string;
-        status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
-        createdAt: string;
-        startedAt?: string | undefined;
-        completedAt?: string | undefined;
+        metrics?: {
+            cost?: number | undefined;
+            premiumRequests?: number | undefined;
+            runtimeMs?: number | undefined;
+            tokenUsage?: {
+                cacheRead: number;
+                cacheWrite: number;
+                input: number;
+                output: number;
+                reasoning: number;
+                total: number;
+            } | undefined;
+        } | undefined;
         plan?: {
+            account: {
+                accountId?: string | undefined;
+                credentialId: number;
+                email?: string | undefined;
+                organizationId?: string | undefined;
+                organizationName?: string | undefined;
+                provider: string;
+            };
+            configFingerprint: string;
+            createdAt: string;
             documentType: "omp-security.scan-plan";
-            schemaVersion: "1.0";
+            fingerprint: string;
             id: string;
-            createdAt: string;
-            repositoryRoot: string;
-            target: {
-                kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
-                repositoryRoot: string;
-                displayName: string;
-                revision?: string | undefined;
-                baseRevision?: string | undefined;
-                headRevision?: string | undefined;
-                includePaths: string[];
-                excludePaths: string[];
-                treeDigest: string;
-            };
             knowledgeBases: {
                 path: string;
                 sha256: string;
                 size: number;
             }[];
-            output: {
-                root: string;
-                archiveExisting: boolean;
-                existingState: "absent" | "archivable" | "empty";
-            };
             model: {
-                provider: string;
                 modelId: string;
+                provider: string;
                 thinkingLevel?: string | undefined;
             };
-            account: {
-                provider: string;
-                credentialId: number;
-                accountId?: string | undefined;
-                email?: string | undefined;
-                organizationId?: string | undefined;
-                organizationName?: string | undefined;
+            output: {
+                archiveExisting: boolean;
+                existingState: "absent" | "archivable" | "empty";
+                root: string;
+            };
+            repositoryRoot: string;
+            schemaVersion: "1.0";
+            target: {
+                baseRevision?: string | undefined;
+                displayName: string;
+                excludePaths: string[];
+                headRevision?: string | undefined;
+                includePaths: string[];
+                kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                repositoryRoot: string;
+                revision?: string | undefined;
+                treeDigest: string;
             };
-            configFingerprint: string;
             workflowFingerprint: string;
-            fingerprint: string;
         } | undefined;
-        target: {
-            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
-            repositoryRoot: string;
-            displayName: string;
-            revision?: string | undefined;
-            baseRevision?: string | undefined;
-            headRevision?: string | undefined;
-            includePaths: string[];
-            excludePaths: string[];
-            treeDigest: string;
-        };
         producer: {
             kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
             name: string;
-            version?: string | undefined;
-            vendor?: string | undefined;
-            revision?: string | undefined;
             pluginVersion?: string | undefined;
+            revision?: string | undefined;
+            vendor?: string | undefined;
+            version?: string | undefined;
         };
+        projectKey: string;
         provenance: {
+            createdAt: string;
+            importedAt?: string | undefined;
+            metadata?: Record<string, unknown> | undefined;
             producer: {
                 kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
                 name: string;
-                version?: string | undefined;
-                vendor?: string | undefined;
-                revision?: string | undefined;
                 pluginVersion?: string | undefined;
+                revision?: string | undefined;
+                vendor?: string | undefined;
+                version?: string | undefined;
             };
-            createdAt: string;
-            importedAt?: string | undefined;
-            sourceIds?: {
-                [x: string]: string;
-            } | undefined;
-            vendorFingerprints?: {
-                [x: string]: string;
-            } | undefined;
+            sourceIds?: Record<string, string> | undefined;
             upstream?: {
-                repository?: string | undefined;
-                revision?: string | undefined;
+                archiveSha256?: string | undefined;
                 packageVersion?: string | undefined;
                 pluginVersion?: string | undefined;
-                archiveSha256?: string | undefined;
-            } | undefined;
-            metadata?: {
-                [x: string]: unknown;
+                repository?: string | undefined;
+                revision?: string | undefined;
             } | undefined;
+            vendorFingerprints?: Record<string, string> | undefined;
         };
-        findingIds: string[];
+        reportRef?: string | undefined;
+        sarifRef?: string | undefined;
+        schemaVersion: "1.0";
+        startedAt?: string | undefined;
+        status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
+        target: {
+            baseRevision?: string | undefined;
+            displayName: string;
+            excludePaths: string[];
+            headRevision?: string | undefined;
+            includePaths: string[];
+            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+            repositoryRoot: string;
+            revision?: string | undefined;
+            treeDigest: string;
+        };
+    }, {
+        completedAt?: string | undefined;
         coverage: {
-            mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
             completeness: "complete" | "partial" | "unknown";
-            inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
-            includePaths: string[];
-            excludePaths: string[];
-            surfaces: {
+            deferred: {
                 id: string;
-                label: string;
-                disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
-                receiptRefs: string[];
-                riskArea?: string | undefined;
-                notes?: string | undefined;
+                paths?: string[] | undefined;
+                reason: string;
+                surfaceIds?: string[] | undefined;
             }[];
+            excludePaths: string[];
             explicitExclusions: {
                 pattern: string;
                 reason: string;
             }[];
-            deferred: {
-                id: string;
-                reason: string;
-                paths?: string[] | undefined;
-                surfaceIds?: string[] | undefined;
-            }[];
+            includePaths: string[];
+            inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+            mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
             openQuestions?: {
-                question: string;
                 followUpPrompt?: string | undefined;
+                question: string;
             }[] | undefined;
+            surfaces: {
+                disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+                id: string;
+                label: string;
+                notes?: string | undefined;
+                receiptRefs: string[];
+                riskArea?: string | undefined;
+            }[];
         };
-        reportRef?: string | undefined;
-        sarifRef?: string | undefined;
+        createdAt: string;
+        documentType: "omp-security.scan";
         error?: string | undefined;
+        findingIds: string[];
+        id: string;
         metrics?: {
+            cost?: number | undefined;
+            premiumRequests?: number | undefined;
             runtimeMs?: number | undefined;
             tokenUsage?: {
+                cacheRead: number;
+                cacheWrite: number;
                 input: number;
                 output: number;
                 reasoning: number;
-                cacheRead: number;
-                cacheWrite: number;
                 total: number;
             } | undefined;
-            cost?: number | undefined;
-            premiumRequests?: number | undefined;
         } | undefined;
-    }, {}>;
-    securityScanBundleSchema: import("arktype/internal/variants/object.ts").ObjectType<{
-        scan: {
-            documentType: "omp-security.scan";
-            schemaVersion: "1.0";
-            id: string;
-            projectKey: string;
-            status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
+        plan?: {
+            account: {
+                accountId?: string | undefined;
+                credentialId: number;
+                email?: string | undefined;
+                organizationId?: string | undefined;
+                organizationName?: string | undefined;
+                provider: string;
+            };
+            configFingerprint: string;
             createdAt: string;
-            startedAt?: string | undefined;
-            completedAt?: string | undefined;
-            plan?: {
-                documentType: "omp-security.scan-plan";
-                schemaVersion: "1.0";
-                id: string;
-                createdAt: string;
-                repositoryRoot: string;
-                target: {
-                    kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
-                    repositoryRoot: string;
-                    displayName: string;
-                    revision?: string | undefined;
-                    baseRevision?: string | undefined;
-                    headRevision?: string | undefined;
-                    includePaths: string[];
-                    excludePaths: string[];
-                    treeDigest: string;
-                };
-                knowledgeBases: {
-                    path: string;
-                    sha256: string;
-                    size: number;
-                }[];
-                output: {
-                    root: string;
-                    archiveExisting: boolean;
-                    existingState: "absent" | "archivable" | "empty";
-                };
-                model: {
-                    provider: string;
-                    modelId: string;
-                    thinkingLevel?: string | undefined;
-                };
-                account: {
-                    provider: string;
-                    credentialId: number;
-                    accountId?: string | undefined;
-                    email?: string | undefined;
-                    organizationId?: string | undefined;
-                    organizationName?: string | undefined;
-                };
-                configFingerprint: string;
-                workflowFingerprint: string;
-                fingerprint: string;
-            } | undefined;
+            documentType: "omp-security.scan-plan";
+            fingerprint: string;
+            id: string;
+            knowledgeBases: {
+                path: string;
+                sha256: string;
+                size: number;
+            }[];
+            model: {
+                modelId: string;
+                provider: string;
+                thinkingLevel?: string | undefined;
+            };
+            output: {
+                archiveExisting: boolean;
+                existingState: "absent" | "archivable" | "empty";
+                root: string;
+            };
+            repositoryRoot: string;
+            schemaVersion: "1.0";
             target: {
-                kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
-                repositoryRoot: string;
-                displayName: string;
-                revision?: string | undefined;
                 baseRevision?: string | undefined;
+                displayName: string;
+                excludePaths: string[];
                 headRevision?: string | undefined;
                 includePaths: string[];
-                excludePaths: string[];
+                kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                repositoryRoot: string;
+                revision?: string | undefined;
                 treeDigest: string;
             };
+            workflowFingerprint: string;
+        } | undefined;
+        producer: {
+            kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+            name: string;
+            pluginVersion?: string | undefined;
+            revision?: string | undefined;
+            vendor?: string | undefined;
+            version?: string | undefined;
+        };
+        projectKey: string;
+        provenance: {
+            createdAt: string;
+            importedAt?: string | undefined;
+            metadata?: Record<string, unknown> | undefined;
             producer: {
                 kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
                 name: string;
-                version?: string | undefined;
-                vendor?: string | undefined;
-                revision?: string | undefined;
                 pluginVersion?: string | undefined;
+                revision?: string | undefined;
+                vendor?: string | undefined;
+                version?: string | undefined;
             };
-            provenance: {
-                producer: {
-                    kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
-                    name: string;
-                    version?: string | undefined;
-                    vendor?: string | undefined;
-                    revision?: string | undefined;
-                    pluginVersion?: string | undefined;
-                };
+            sourceIds?: Record<string, string> | undefined;
+            upstream?: {
+                archiveSha256?: string | undefined;
+                packageVersion?: string | undefined;
+                pluginVersion?: string | undefined;
+                repository?: string | undefined;
+                revision?: string | undefined;
+            } | undefined;
+            vendorFingerprints?: Record<string, string> | undefined;
+        };
+        reportRef?: string | undefined;
+        sarifRef?: string | undefined;
+        schemaVersion: "1.0";
+        startedAt?: string | undefined;
+        status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
+        target: {
+            baseRevision?: string | undefined;
+            displayName: string;
+            excludePaths: string[];
+            headRevision?: string | undefined;
+            includePaths: string[];
+            kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+            repositoryRoot: string;
+            revision?: string | undefined;
+            treeDigest: string;
+        };
+    }>;
+    securityScanBundleSchema: import("@oh-my-pi/omptype").FluentType<{
+        findings: {
+            anchor?: string | undefined;
+            confidence: {
+                level: "high" | "low" | "medium";
+                rationale?: string | undefined;
+            };
+            disposition: {
+                actor?: string | undefined;
+                rationale?: string | undefined;
+                status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
+                updatedAt?: string | undefined;
+            };
+            evidence: {
+                excerpt?: string | undefined;
+                explanation: string;
+                id: string;
+                kind: "code" | "note" | "trace" | "validation";
+                label: string;
+                location?: {
+                    endColumn?: number | undefined;
+                    endLine?: number | undefined;
+                    path: string;
+                    role?: string | undefined;
+                    startColumn?: number | undefined;
+                    startLine: number;
+                } | undefined;
+            }[];
+            extensions?: Record<string, unknown> | undefined;
+            fingerprint: string;
+            id: string;
+            occurrences: {
+                evidenceIds: string[];
+                id: string;
+                locations: {
+                    endColumn?: number | undefined;
+                    endLine?: number | undefined;
+                    path: string;
+                    role?: string | undefined;
+                    startColumn?: number | undefined;
+                    startLine: number;
+                }[];
+            }[];
+            provenance: {
                 createdAt: string;
                 importedAt?: string | undefined;
-                sourceIds?: {
-                    [x: string]: string;
-                } | undefined;
-                vendorFingerprints?: {
-                    [x: string]: string;
-                } | undefined;
-                upstream?: {
-                    repository?: string | undefined;
+                metadata?: Record<string, unknown> | undefined;
+                producer: {
+                    kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                    name: string;
+                    pluginVersion?: string | undefined;
                     revision?: string | undefined;
+                    vendor?: string | undefined;
+                    version?: string | undefined;
+                };
+                sourceIds?: Record<string, string> | undefined;
+                upstream?: {
+                    archiveSha256?: string | undefined;
                     packageVersion?: string | undefined;
                     pluginVersion?: string | undefined;
-                    archiveSha256?: string | undefined;
-                } | undefined;
-                metadata?: {
-                    [x: string]: unknown;
+                    repository?: string | undefined;
+                    revision?: string | undefined;
                 } | undefined;
+                vendorFingerprints?: Record<string, string> | undefined;
             };
-            findingIds: string[];
+            remediation?: string | undefined;
+            ruleId: string;
+            scanId: string;
+            severity: {
+                level: "critical" | "high" | "informational" | "low" | "medium";
+                rationale?: string | undefined;
+                score?: number | undefined;
+                scoringSystem?: string | undefined;
+                vector?: string | undefined;
+            };
+            summary: string;
+            taxonomy: {
+                category: string;
+                cwe: string[];
+                tags?: string[] | undefined;
+            };
+            title: string;
+            validation: {
+                evidenceIds: string[];
+                status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
+                summary?: string | undefined;
+                validatedAt?: string | undefined;
+            };
+        }[];
+        report?: string | undefined;
+        sarif?: Record<string, unknown> | undefined;
+        scan: {
+            completedAt?: string | undefined;
             coverage: {
-                mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
                 completeness: "complete" | "partial" | "unknown";
-                inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
-                includePaths: string[];
-                excludePaths: string[];
-                surfaces: {
+                deferred: {
                     id: string;
-                    label: string;
-                    disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
-                    receiptRefs: string[];
-                    riskArea?: string | undefined;
-                    notes?: string | undefined;
+                    paths?: string[] | undefined;
+                    reason: string;
+                    surfaceIds?: string[] | undefined;
                 }[];
+                excludePaths: string[];
                 explicitExclusions: {
                     pattern: string;
                     reason: string;
                 }[];
-                deferred: {
-                    id: string;
-                    reason: string;
-                    paths?: string[] | undefined;
-                    surfaceIds?: string[] | undefined;
-                }[];
+                includePaths: string[];
+                inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+                mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
                 openQuestions?: {
-                    question: string;
                     followUpPrompt?: string | undefined;
+                    question: string;
                 }[] | undefined;
+                surfaces: {
+                    disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+                    id: string;
+                    label: string;
+                    notes?: string | undefined;
+                    receiptRefs: string[];
+                    riskArea?: string | undefined;
+                }[];
             };
-            reportRef?: string | undefined;
-            sarifRef?: string | undefined;
+            createdAt: string;
+            documentType: "omp-security.scan";
             error?: string | undefined;
+            findingIds: string[];
+            id: string;
             metrics?: {
+                cost?: number | undefined;
+                premiumRequests?: number | undefined;
                 runtimeMs?: number | undefined;
                 tokenUsage?: {
+                    cacheRead: number;
+                    cacheWrite: number;
                     input: number;
                     output: number;
                     reasoning: number;
-                    cacheRead: number;
-                    cacheWrite: number;
                     total: number;
                 } | undefined;
-                cost?: number | undefined;
-                premiumRequests?: number | undefined;
             } | undefined;
+            plan?: {
+                account: {
+                    accountId?: string | undefined;
+                    credentialId: number;
+                    email?: string | undefined;
+                    organizationId?: string | undefined;
+                    organizationName?: string | undefined;
+                    provider: string;
+                };
+                configFingerprint: string;
+                createdAt: string;
+                documentType: "omp-security.scan-plan";
+                fingerprint: string;
+                id: string;
+                knowledgeBases: {
+                    path: string;
+                    sha256: string;
+                    size: number;
+                }[];
+                model: {
+                    modelId: string;
+                    provider: string;
+                    thinkingLevel?: string | undefined;
+                };
+                output: {
+                    archiveExisting: boolean;
+                    existingState: "absent" | "archivable" | "empty";
+                    root: string;
+                };
+                repositoryRoot: string;
+                schemaVersion: "1.0";
+                target: {
+                    baseRevision?: string | undefined;
+                    displayName: string;
+                    excludePaths: string[];
+                    headRevision?: string | undefined;
+                    includePaths: string[];
+                    kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                    repositoryRoot: string;
+                    revision?: string | undefined;
+                    treeDigest: string;
+                };
+                workflowFingerprint: string;
+            } | undefined;
+            producer: {
+                kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                name: string;
+                pluginVersion?: string | undefined;
+                revision?: string | undefined;
+                vendor?: string | undefined;
+                version?: string | undefined;
+            };
+            projectKey: string;
+            provenance: {
+                createdAt: string;
+                importedAt?: string | undefined;
+                metadata?: Record<string, unknown> | undefined;
+                producer: {
+                    kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                    name: string;
+                    pluginVersion?: string | undefined;
+                    revision?: string | undefined;
+                    vendor?: string | undefined;
+                    version?: string | undefined;
+                };
+                sourceIds?: Record<string, string> | undefined;
+                upstream?: {
+                    archiveSha256?: string | undefined;
+                    packageVersion?: string | undefined;
+                    pluginVersion?: string | undefined;
+                    repository?: string | undefined;
+                    revision?: string | undefined;
+                } | undefined;
+                vendorFingerprints?: Record<string, string> | undefined;
+            };
+            reportRef?: string | undefined;
+            sarifRef?: string | undefined;
+            schemaVersion: "1.0";
+            startedAt?: string | undefined;
+            status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
+            target: {
+                baseRevision?: string | undefined;
+                displayName: string;
+                excludePaths: string[];
+                headRevision?: string | undefined;
+                includePaths: string[];
+                kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                repositoryRoot: string;
+                revision?: string | undefined;
+                treeDigest: string;
+            };
         };
+    }, {
         findings: {
-            id: string;
-            scanId: string;
-            fingerprint: string;
-            ruleId: string;
             anchor?: string | undefined;
-            title: string;
-            summary: string;
-            severity: {
-                level: "critical" | "high" | "informational" | "low" | "medium";
-                score?: number | undefined;
-                scoringSystem?: string | undefined;
-                vector?: string | undefined;
-                rationale?: string | undefined;
-            };
             confidence: {
                 level: "high" | "low" | "medium";
                 rationale?: string | undefined;
             };
-            taxonomy: {
-                category: string;
-                cwe: string[];
-                tags?: string[] | undefined;
+            disposition: {
+                actor?: string | undefined;
+                rationale?: string | undefined;
+                status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
+                updatedAt?: string | undefined;
             };
-            occurrences: {
-                id: string;
-                locations: {
-                    path: string;
-                    startLine: number;
-                    endLine?: number | undefined;
-                    startColumn?: number | undefined;
-                    endColumn?: number | undefined;
-                    role?: string | undefined;
-                }[];
-                evidenceIds: string[];
-            }[];
             evidence: {
+                excerpt?: string | undefined;
+                explanation: string;
                 id: string;
                 kind: "code" | "note" | "trace" | "validation";
                 label: string;
-                explanation: string;
                 location?: {
-                    path: string;
-                    startLine: number;
+                    endColumn?: number | undefined;
                     endLine?: number | undefined;
+                    path: string;
+                    role?: string | undefined;
                     startColumn?: number | undefined;
+                    startLine: number;
+                } | undefined;
+            }[];
+            extensions?: Record<string, unknown> | undefined;
+            fingerprint: string;
+            id: string;
+            occurrences: {
+                evidenceIds: string[];
+                id: string;
+                locations: {
                     endColumn?: number | undefined;
+                    endLine?: number | undefined;
+                    path: string;
                     role?: string | undefined;
-                } | undefined;
-                excerpt?: string | undefined;
+                    startColumn?: number | undefined;
+                    startLine: number;
+                }[];
             }[];
+            provenance: {
+                createdAt: string;
+                importedAt?: string | undefined;
+                metadata?: Record<string, unknown> | undefined;
+                producer: {
+                    kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                    name: string;
+                    pluginVersion?: string | undefined;
+                    revision?: string | undefined;
+                    vendor?: string | undefined;
+                    version?: string | undefined;
+                };
+                sourceIds?: Record<string, string> | undefined;
+                upstream?: {
+                    archiveSha256?: string | undefined;
+                    packageVersion?: string | undefined;
+                    pluginVersion?: string | undefined;
+                    repository?: string | undefined;
+                    revision?: string | undefined;
+                } | undefined;
+                vendorFingerprints?: Record<string, string> | undefined;
+            };
             remediation?: string | undefined;
+            ruleId: string;
+            scanId: string;
+            severity: {
+                level: "critical" | "high" | "informational" | "low" | "medium";
+                rationale?: string | undefined;
+                score?: number | undefined;
+                scoringSystem?: string | undefined;
+                vector?: string | undefined;
+            };
+            summary: string;
+            taxonomy: {
+                category: string;
+                cwe: string[];
+                tags?: string[] | undefined;
+            };
+            title: string;
             validation: {
+                evidenceIds: string[];
                 status: "error" | "partial" | "rejected" | "unvalidated" | "validated";
                 summary?: string | undefined;
-                evidenceIds: string[];
                 validatedAt?: string | undefined;
             };
-            disposition: {
-                status: "accepted_risk" | "false_positive" | "fixed" | "open" | "wont_fix";
-                rationale?: string | undefined;
-                updatedAt?: string | undefined;
-                actor?: string | undefined;
+        }[];
+        report?: string | undefined;
+        sarif?: Record<string, unknown> | undefined;
+        scan: {
+            completedAt?: string | undefined;
+            coverage: {
+                completeness: "complete" | "partial" | "unknown";
+                deferred: {
+                    id: string;
+                    paths?: string[] | undefined;
+                    reason: string;
+                    surfaceIds?: string[] | undefined;
+                }[];
+                excludePaths: string[];
+                explicitExclusions: {
+                    pattern: string;
+                    reason: string;
+                }[];
+                includePaths: string[];
+                inventoryStrategy: "custom" | "diff" | "directory" | "imported" | "repository" | "scoped_path";
+                mode: "deep_repository" | "diff" | "imported" | "repository" | "scoped_path" | "working_tree";
+                openQuestions?: {
+                    followUpPrompt?: string | undefined;
+                    question: string;
+                }[] | undefined;
+                surfaces: {
+                    disposition: "needs_follow_up" | "no_issue_found" | "not_applicable" | "rejected" | "reported";
+                    id: string;
+                    label: string;
+                    notes?: string | undefined;
+                    receiptRefs: string[];
+                    riskArea?: string | undefined;
+                }[];
             };
+            createdAt: string;
+            documentType: "omp-security.scan";
+            error?: string | undefined;
+            findingIds: string[];
+            id: string;
+            metrics?: {
+                cost?: number | undefined;
+                premiumRequests?: number | undefined;
+                runtimeMs?: number | undefined;
+                tokenUsage?: {
+                    cacheRead: number;
+                    cacheWrite: number;
+                    input: number;
+                    output: number;
+                    reasoning: number;
+                    total: number;
+                } | undefined;
+            } | undefined;
+            plan?: {
+                account: {
+                    accountId?: string | undefined;
+                    credentialId: number;
+                    email?: string | undefined;
+                    organizationId?: string | undefined;
+                    organizationName?: string | undefined;
+                    provider: string;
+                };
+                configFingerprint: string;
+                createdAt: string;
+                documentType: "omp-security.scan-plan";
+                fingerprint: string;
+                id: string;
+                knowledgeBases: {
+                    path: string;
+                    sha256: string;
+                    size: number;
+                }[];
+                model: {
+                    modelId: string;
+                    provider: string;
+                    thinkingLevel?: string | undefined;
+                };
+                output: {
+                    archiveExisting: boolean;
+                    existingState: "absent" | "archivable" | "empty";
+                    root: string;
+                };
+                repositoryRoot: string;
+                schemaVersion: "1.0";
+                target: {
+                    baseRevision?: string | undefined;
+                    displayName: string;
+                    excludePaths: string[];
+                    headRevision?: string | undefined;
+                    includePaths: string[];
+                    kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                    repositoryRoot: string;
+                    revision?: string | undefined;
+                    treeDigest: string;
+                };
+                workflowFingerprint: string;
+            } | undefined;
+            producer: {
+                kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
+                name: string;
+                pluginVersion?: string | undefined;
+                revision?: string | undefined;
+                vendor?: string | undefined;
+                version?: string | undefined;
+            };
+            projectKey: string;
             provenance: {
+                createdAt: string;
+                importedAt?: string | undefined;
+                metadata?: Record<string, unknown> | undefined;
                 producer: {
                     kind: "codex-security-bundle" | "codex-security-cloud" | "omp-native" | "sarif-import";
                     name: string;
-                    version?: string | undefined;
-                    vendor?: string | undefined;
-                    revision?: string | undefined;
                     pluginVersion?: string | undefined;
+                    revision?: string | undefined;
+                    vendor?: string | undefined;
+                    version?: string | undefined;
                 };
-                createdAt: string;
-                importedAt?: string | undefined;
-                sourceIds?: {
-                    [x: string]: string;
-                } | undefined;
-                vendorFingerprints?: {
-                    [x: string]: string;
-                } | undefined;
+                sourceIds?: Record<string, string> | undefined;
                 upstream?: {
-                    repository?: string | undefined;
-                    revision?: string | undefined;
+                    archiveSha256?: string | undefined;
                     packageVersion?: string | undefined;
                     pluginVersion?: string | undefined;
-                    archiveSha256?: string | undefined;
-                } | undefined;
-                metadata?: {
-                    [x: string]: unknown;
+                    repository?: string | undefined;
+                    revision?: string | undefined;
                 } | undefined;
+                vendorFingerprints?: Record<string, string> | undefined;
             };
-            extensions?: {
-                [x: string]: unknown;
-            } | undefined;
-        }[];
-        report?: string | undefined;
-        sarif?: {
-            [x: string]: unknown;
-        } | undefined;
-    }, {}>;
+            reportRef?: string | undefined;
+            sarifRef?: string | undefined;
+            schemaVersion: "1.0";
+            startedAt?: string | undefined;
+            status: "cancelled" | "completed" | "failed" | "partial" | "planned" | "running";
+            target: {
+                baseRevision?: string | undefined;
+                displayName: string;
+                excludePaths: string[];
+                headRevision?: string | undefined;
+                includePaths: string[];
+                kind: "imported" | "ref_diff" | "repository" | "scoped_path" | "working_tree";
+                repositoryRoot: string;
+                revision?: string | undefined;
+                treeDigest: string;
+            };
+        };
+    }>;
 };