diff --git a/sdk/typescript/_bundled_plugin/mcp/mcp-app.html.br b/sdk/typescript/_bundled_plugin/mcp/mcp-app.html.br
index 16c8db41..3311e96e 100644
Binary files a/sdk/typescript/_bundled_plugin/mcp/mcp-app.html.br and b/sdk/typescript/_bundled_plugin/mcp/mcp-app.html.br differ
diff --git a/sdk/typescript/_bundled_plugin/mcp/server.mjs.br.part-000 b/sdk/typescript/_bundled_plugin/mcp/server.mjs.br.part-000
index 4be72de2..7750f22a 100644
Binary files a/sdk/typescript/_bundled_plugin/mcp/server.mjs.br.part-000 and b/sdk/typescript/_bundled_plugin/mcp/server.mjs.br.part-000 differ
diff --git a/sdk/typescript/_bundled_plugin/mcp/server.mjs.br.part-001 b/sdk/typescript/_bundled_plugin/mcp/server.mjs.br.part-001
index 22faa6a5..730dee6b 100644
Binary files a/sdk/typescript/_bundled_plugin/mcp/server.mjs.br.part-001 and b/sdk/typescript/_bundled_plugin/mcp/server.mjs.br.part-001 differ
diff --git a/sdk/typescript/_bundled_plugin/schemas/tools/scan-draft.schema.json b/sdk/typescript/_bundled_plugin/schemas/tools/scan-draft.schema.json
index df5fd14c..999e46f4 100644
--- a/sdk/typescript/_bundled_plugin/schemas/tools/scan-draft.schema.json
+++ b/sdk/typescript/_bundled_plugin/schemas/tools/scan-draft.schema.json
@@ -467,6 +467,9 @@
               "id": {
                 "$ref": "#/$defs/text"
               },
+              "candidateId": {
+                "$ref": "codex-security://schemas/definitions/artifact-common.schema.json#/$defs/candidateId"
+              },
               "reason": {
                 "$ref": "#/$defs/text"
               },
@@ -486,19 +489,26 @@
         "openQuestions": {
           "type": "array",
           "items": {
-            "type": "object",
-            "properties": {
-              "question": {
+            "anyOf": [
+              {
                 "$ref": "#/$defs/text"
               },
-              "followUpPrompt": {
-                "$ref": "#/$defs/text"
+              {
+                "type": "object",
+                "properties": {
+                  "question": {
+                    "$ref": "#/$defs/text"
+                  },
+                  "followUpPrompt": {
+                    "$ref": "#/$defs/text"
+                  }
+                },
+                "required": [
+                  "question"
+                ],
+                "additionalProperties": true
               }
-            },
-            "required": [
-              "question"
-            ],
-            "additionalProperties": true
+            ]
           }
         }
       },