RepoPilot

{'type': 'object', 'oneOf': [{'required': ['repo']}, {'required': ['package']}], 'properties': {'pr': {'type': 'integer', 'minimum': 1, 'description': 'Public PR number in repo. Requires question. Omit base_sha.'}, 'repo': {'type': 'string', 'minLength': 3, 'description': 'Public GitHub repository as owner/repo or a github.com URL.'}, 'owner': {'type': 'string', 'minLength': 1, 'description': 'Repository owner, when repo carries only the bare name. Optional: prefer the single owner/repo form in repo.'}, 'package': {'type': 'string', 'minLength': 1, 'description': 'npm package name, for example lodash or npm:@scope/pkg. To judge a specific VERSION rather than the package as a whole, use evaluate_dependency_change instead.'}, 'base_sha': {'type': 'string', 'pattern': '^[a-fA-F0-9]{40}$', 'description': 'Compare source at this base commit; omit when using pr.'}, 'question': {'type': 'string', 'maxLength': 600, 'minLength': 1}, 'path_hints': {'type': 'array', 'items': {'type': 'string', 'maxLength': 4096, 'minLength': 1}, 'maxItems': 4, 'description': 'Scope retrieval to these repository-relative files or directories. Requires question.'}, 'checked_sha': {'type': 'string', 'pattern': '^[a-fA-F0-9]{40}$', 'description': 'Immutable head revision; required with source_ranges.'}, 'source_ranges': {'type': 'array', 'items': {'type': 'object', 'required': ['path', 'start_line', 'end_line'], 'properties': {'path': {'type': 'string', 'maxLength': 4096, 'minLength': 1}, 'side': {'enum': ['head', 'base'], 'type': 'string', 'default': 'head'}, 'end_line': {'type': 'integer', 'minimum': 1, 'description': 'Last line, inclusive; from start_line through start_line + 39.'}, 'start_line': {'type': 'integer', 'minimum': 1, 'description': 'First line, inclusive, 1-based.'}}, 'additionalProperties': False}, 'maxItems': 4, 'description': 'Read only these exact ranges, at most two per file/side and 40 lines per range. Requires question and checked_sha; base side also requires base_sha. Paths must fall within path_hints when supplied. Omit pr for base ranges.'}}, 'additionalProperties': False}

{'type': 'object', 'required': ['schema_version', 'tool', 'status', 'agent'], 'properties': {'tool': {'type': 'string', 'const': 'analyze_repo'}, 'agent': {'type': 'object', 'required': ['summary', 'confidence', 'evidence_gaps', 'next_actions'], 'properties': {'summary': {'type': 'string'}, 'retryable': {'type': 'boolean'}, 'confidence': {'enum': ['high', 'limited', 'none'], 'type': 'string'}, 'next_actions': {'type': 'array', 'items': {'type': 'object'}}, 'evidence_gaps': {'type': 'array', 'items': {'type': 'string'}}}, 'additionalProperties': True}, 'status': {'type': 'string'}, 'schema_version': {'type': 'string'}}, 'additionalProperties': True}

{'type': 'object', 'oneOf': [{'not': {'anyOf': [{'required': ['pr']}, {'required': ['files']}]}, 'required': ['diff']}, {'not': {'anyOf': [{'required': ['diff']}, {'required': ['files']}]}, 'required': ['repo', 'pr']}, {'not': {'anyOf': [{'required': ['diff']}, {'required': ['pr']}]}, 'required': ['files']}], 'properties': {'pr': {'type': ['number', 'string'], 'description': 'Positive pull request number, used with repo.'}, 'diff': {'type': 'string', 'minLength': 1, 'description': 'Raw unified git diff to score directly.'}, 'repo': {'type': 'string', 'minLength': 3, 'description': 'owner/repo or a github.com URL.'}, 'files': {'type': 'array', 'items': {'type': 'object', 'required': ['path', 'additions', 'deletions', 'status'], 'properties': {'path': {'type': 'string', 'maxLength': 512, 'minLength': 1}, 'status': {'enum': ['added', 'modified', 'removed', 'renamed', 'copied', 'changed'], 'type': 'string'}, 'additions': {'type': 'integer', 'maximum': 1000000, 'minimum': 0}, 'deletions': {'type': 'integer', 'maximum': 1000000, 'minimum': 0}, 'previousPath': {'type': 'string', 'maxLength': 512, 'minLength': 1}, 'line_counts_known': {'type': 'boolean', 'description': 'False when Git could not provide text line counts; zeroes are then placeholders, not measured size.'}}, 'additionalProperties': False}, 'maxItems': 250, 'minItems': 1, 'description': 'Privacy-preserving changed-file facts; contains no source or diff hunks.'}, 'proofs': {'type': 'array', 'items': {'type': 'object', 'required': ['obligation_id', 'status', 'source'], 'properties': {'source': {'enum': ['client_reported', 'github_check'], 'type': 'string'}, 'status': {'enum': ['passed', 'failed', 'skipped'], 'type': 'string'}, 'duration_ms': {'type': 'integer', 'maximum': 86400000, 'minimum': 0}, 'obligation_id': {'type': 'string', 'maxLength': 80, 'minLength': 1}}, 'additionalProperties': False}, 'maxItems': 20}, 'base_sha': {'type': 'string', 'pattern': '^[a-fA-F0-9]{40}$'}, 'head_sha': {'type': 'string', 'pattern': '^[a-fA-F0-9]{40}$'}, 'contract_id': {'type': 'string', 'pattern': '^[a-fA-F0-9]{32}$', 'description': 'Optional short-lived contract_id returned by plan_repo_task.'}}, 'additionalProperties': False}

{'type': 'object', 'required': ['schema_version', 'tool', 'status', 'agent'], 'properties': {'tool': {'type': 'string', 'const': 'check_change_risk'}, 'agent': {'type': 'object', 'required': ['summary', 'confidence', 'evidence_gaps', 'next_actions'], 'properties': {'summary': {'type': 'string'}, 'retryable': {'type': 'boolean'}, 'confidence': {'enum': ['high', 'limited', 'none'], 'type': 'string'}, 'next_actions': {'type': 'array', 'items': {'type': 'object'}}, 'evidence_gaps': {'type': 'array', 'items': {'type': 'string'}}}, 'additionalProperties': True}, 'status': {'type': 'string'}, 'schema_version': {'type': 'string'}}, 'additionalProperties': True}

{'type': 'object', 'oneOf': [{'required': ['repo']}, {'required': ['package']}], 'properties': {'repo': {'type': 'string', 'minLength': 3, 'description': 'Public GitHub repository as owner/repo or a github.com URL.'}, 'owner': {'type': 'string', 'minLength': 1, 'description': 'Repository owner, when repo carries only the bare name. Optional: prefer the single owner/repo form in repo.'}, 'package': {'type': 'string', 'minLength': 1, 'description': 'npm package name, for example lodash or npm:@scope/pkg. To judge a specific VERSION rather than the package as a whole, use evaluate_dependency_change instead.'}}, 'additionalProperties': False}

{'type': 'object', 'required': ['schema_version', 'tool', 'status', 'agent'], 'properties': {'tool': {'type': 'string', 'const': 'check_dependency'}, 'agent': {'type': 'object', 'required': ['summary', 'confidence', 'evidence_gaps', 'next_actions'], 'properties': {'summary': {'type': 'string'}, 'retryable': {'type': 'boolean'}, 'confidence': {'enum': ['high', 'limited', 'none'], 'type': 'string'}, 'next_actions': {'type': 'array', 'items': {'type': 'object'}}, 'evidence_gaps': {'type': 'array', 'items': {'type': 'string'}}}, 'additionalProperties': True}, 'status': {'type': 'string'}, 'schema_version': {'type': 'string'}}, 'additionalProperties': True}

{'type': 'object', 'required': ['a', 'b'], 'properties': {'a': {'type': 'string', 'minLength': 1, 'description': 'First repo or npm package target.'}, 'b': {'type': 'string', 'minLength': 1, 'description': 'Second repo or npm package target.'}}, 'additionalProperties': False}

{'type': 'object', 'required': ['schema_version', 'tool', 'status', 'agent'], 'properties': {'tool': {'type': 'string', 'const': 'compare_repos'}, 'agent': {'type': 'object', 'required': ['summary', 'confidence', 'evidence_gaps', 'next_actions'], 'properties': {'summary': {'type': 'string'}, 'retryable': {'type': 'boolean'}, 'confidence': {'enum': ['high', 'limited', 'none'], 'type': 'string'}, 'next_actions': {'type': 'array', 'items': {'type': 'object'}}, 'evidence_gaps': {'type': 'array', 'items': {'type': 'string'}}}, 'additionalProperties': True}, 'status': {'type': 'string'}, 'schema_version': {'type': 'string'}}, 'additionalProperties': True}

{'type': 'object', 'examples': [{'dependency': 'lodash', 'to_version': '4.17.21'}, {'dependency': 'express', 'to_version': '^5.0.0', 'from_version': '4.18.2'}, {'project': {'scripts': ['build', 'test'], 'node_version': '20.11.0', 'package_manager': 'pnpm', 'installed_versions': {'zod': '3.22.4'}, 'direct_dependencies': {'zod': '^3.22.0'}}, 'dependency': 'zod', 'to_version': '3.23.8', 'policy_profile': 'strict'}], 'required': ['dependency'], 'properties': {'intent': {'type': 'string', 'maxLength': 500, 'description': 'Optional free text describing why you are making this change. Advisory only; it changes no verdict.'}, 'project': {'type': 'object', 'properties': {'scripts': {'type': 'array', 'items': {'type': 'string', 'maxLength': 64, 'minLength': 1}, 'maxItems': 30}, 'head_sha': {'type': 'string', 'pattern': '^[a-fA-F0-9]{7,64}$'}, 'node_version': {'type': 'string', 'maxLength': 64}, 'lockfile_path': {'type': 'string', 'maxLength': 512}, 'manifest_path': {'type': 'string', 'maxLength': 512}, 'license_policy': {'type': 'object', 'properties': {'deny': {'type': 'array', 'items': {'type': 'string', 'maxLength': 64}, 'maxItems': 100}, 'allow': {'type': 'array', 'items': {'type': 'string', 'maxLength': 64}, 'maxItems': 100}}, 'additionalProperties': False}, 'lockfile_sha256': {'type': 'string', 'pattern': '^[a-fA-F0-9]{64}$'}, 'package_manager': {'enum': ['npm', 'pnpm', 'yarn', 'bun'], 'type': 'string'}, 'dependency_usage': {'type': 'object', 'required': ['schema_version', 'runtime', 'coverage', 'uses'], 'properties': {'uses': {'type': 'array', 'items': {'type': 'object', 'required': ['loader', 'export_path'], 'properties': {'loader': {'enum': ['require', 'import'], 'type': 'string'}, 'export_path': {'type': 'array', 'items': {'type': 'string', 'pattern': '^[A-Za-z_$][A-Za-z0-9_$]*$', 'maxLength': 100}, 'maxItems': 2}}, 'additionalProperties': False}, 'maxItems': 50}, 'runtime': {'type': 'object', 'required': ['node', 'platform', 'arch'], 'properties': {'arch': {'type': 'string', 'pattern': '^[a-z0-9_]+$', 'maxLength': 32}, 'node': {'type': 'string', 'pattern': '^[0-9]+\\.[0-9]+\\.[0-9]+$', 'maxLength': 32}, 'platform': {'type': 'string', 'pattern': '^[a-z0-9_]+$', 'maxLength': 32}}, 'additionalProperties': False}, 'coverage': {'type': 'string', 'const': 'partial'}, 'schema_version': {'type': 'integer', 'const': 1}}, 'description': 'Optional local call shapes for this dependency under native Node with default conditions. No source, paths, local names or call arguments. Coverage is always partial; transpiled/bundled code is unsupported.', 'additionalProperties': False}, 'installed_versions': {'type': 'object', 'maxProperties': 200, 'additionalProperties': {'type': 'string', 'maxLength': 128}}, 'direct_dependencies': {'type': 'object', 'maxProperties': 200, 'additionalProperties': {'type': 'string', 'maxLength': 128}}}, 'description': 'Optional, source-free facts about the project you are changing. Supplying it adds Node/peer/license compatibility and a command-level verification plan. Omit it entirely and compatibility comes back "unknown" - read that as not checked, never as no problem found. Every field is optional; anything missing is defaulted and reported in input_adjustments, never rejected. Never send source code.', 'additionalProperties': False}, 'dependency': {'type': 'string', 'pattern': '^(@[^/\\s]+/)?[^@/\\s][^/\\s]*$', 'maxLength': 214, 'minLength': 1, 'description': 'A STRING: the npm package name on its own, with no version and no surrounding object — "lodash", "@types/node". Not {"name":...}, not {"lodash":"^4.17.0"}, not a list, and never wrapped in a top-level {"change":{...}} object — every field here is top-level. The version goes in to_version, the currently installed one in from_version.'}, 'to_version': {'type': ['string', 'number'], 'maxLength': 128, 'minLength': 1, 'description': 'The version you intend to install — an exact version ("4.18.1"), a dist-tag ("latest"), or a SemVer range ("^4.17.0"). A quoted string is preferred; a bare JSON number ("to_version": 19) is also accepted and read as the string "19". Omit to evaluate the latest published version.'}, 'from_version': {'type': ['string', 'number', 'null'], 'maxLength': 128, 'description': 'The version currently installed, or omitted when adding a new dependency. A bare JSON number is accepted the same way as to_version. Supplying it produces a before/after advisory comparison.'}, 'policy_profile': {'enum': ['permissive', 'balanced', 'strict'], 'type': 'string', 'default': 'balanced', 'description': 'Named team dependency policy. Strict requires provenance and denies package install hooks. Must be spelled exactly — a near-miss spelling is rejected rather than guessed, because reading it wrong would answer under a policy you did not ask for.'}, 'dependency_type': {'enum': ['runtime', 'development', 'optional', 'peer'], 'type': 'string', 'default': 'runtime', 'description': 'Where the dependency goes, in THESE words: "runtime" for a dependencies entry, "development" for devDependencies. The manifest and CLI spellings ("dev", "devDependencies", "--save-dev", "prod") are mapped onto these and reported in input_adjustments.'}, 'package_manager': {'enum': ['npm', 'pnpm', 'yarn', 'bun'], 'type': 'string', 'description': 'Optional. Only affects the commands and lockfile named in the verification plan. Inferred from project.lockfile_path when you send a project snapshot, and assumed to be npm otherwise.'}}, 'additionalProperties': False}

{'type': 'object', 'required': ['schema_version', 'tool', 'status', 'agent'], 'properties': {'tool': {'type': 'string', 'const': 'evaluate_dependency_change'}, 'agent': {'type': 'object', 'required': ['summary', 'confidence', 'evidence_gaps', 'next_actions'], 'properties': {'summary': {'type': 'string'}, 'retryable': {'type': 'boolean'}, 'confidence': {'enum': ['high', 'limited', 'none'], 'type': 'string'}, 'next_actions': {'type': 'array', 'items': {'type': 'object'}}, 'evidence_gaps': {'type': 'array', 'items': {'type': 'string'}}}, 'additionalProperties': True}, 'status': {'type': 'string'}, 'schema_version': {'type': 'string'}}, 'additionalProperties': True}

{'type': 'object', 'oneOf': [{'required': ['repo']}, {'required': ['package']}], 'examples': [{'repo': 'vercel/next.js'}, {'repo': 'vercel/next.js', 'format': 'cursor'}, {'package': 'lodash'}], 'properties': {'repo': {'type': 'string', 'minLength': 3, 'description': 'Public GitHub repository as owner/repo or a github.com URL.'}, 'owner': {'type': 'string', 'minLength': 1, 'description': 'Repository owner, when repo carries only the bare name. Optional: prefer the single owner/repo form in repo.'}, 'format': {'enum': ['markdown', 'cursor'], 'type': 'string', 'default': 'markdown', 'description': 'Optional. markdown for CLAUDE.md-style guidance (the default); cursor for .mdc rules.'}, 'package': {'type': 'string', 'minLength': 1, 'description': 'npm package name, for example lodash or npm:@scope/pkg. To judge a specific VERSION rather than the package as a whole, use evaluate_dependency_change instead.'}}, 'description': 'Name one repository (or one npm package) as a plain string. There is no artifact id in this contract. Minimal valid call: {"repo":"vercel/next.js"}.', 'additionalProperties': False}

{'type': 'object', 'required': ['schema_version', 'tool', 'status', 'agent'], 'properties': {'tool': {'type': 'string', 'const': 'get_artifact'}, 'agent': {'type': 'object', 'required': ['summary', 'confidence', 'evidence_gaps', 'next_actions'], 'properties': {'summary': {'type': 'string'}, 'retryable': {'type': 'boolean'}, 'confidence': {'enum': ['high', 'limited', 'none'], 'type': 'string'}, 'next_actions': {'type': 'array', 'items': {'type': 'object'}}, 'evidence_gaps': {'type': 'array', 'items': {'type': 'string'}}}, 'additionalProperties': True}, 'status': {'type': 'string'}, 'schema_version': {'type': 'string'}}, 'additionalProperties': True}

{'type': 'object', 'oneOf': [{'required': ['repo']}, {'required': ['package']}], 'required': ['task'], 'properties': {'repo': {'type': 'string', 'minLength': 3, 'description': 'Public GitHub repository as owner/repo or a github.com URL.'}, 'task': {'type': 'string', 'maxLength': 4000, 'minLength': 1}, 'owner': {'type': 'string', 'minLength': 1, 'description': 'Repository owner, when repo carries only the bare name. Optional: prefer the single owner/repo form in repo.'}, 'intent': {'type': 'object', 'required': ['kind'], 'properties': {'kind': {'enum': ['dependency_change', 'bug_fix', 'feature', 'refactor', 'unknown'], 'type': 'string'}, 'dependency': {'type': 'string', 'maxLength': 214}, 'to_version': {'type': 'string', 'maxLength': 128}, 'from_version': {'type': 'string', 'maxLength': 128}}, 'additionalProperties': False}, 'package': {'type': 'string', 'minLength': 1, 'description': 'npm package name, for example lodash or npm:@scope/pkg. To judge a specific VERSION rather than the package as a whole, use evaluate_dependency_change instead.'}, 'max_files': {'type': 'integer', 'default': 12, 'maximum': 20, 'minimum': 1}, 'path_hints': {'type': 'array', 'items': {'type': 'string', 'maxLength': 512, 'minLength': 1}, 'maxItems': 10, 'description': 'Optional repository-relative files or directories to prioritize.'}, 'checked_sha': {'type': 'string', 'pattern': '^[a-fA-F0-9]{40}$'}}, 'additionalProperties': False}

{'type': 'object', 'required': ['schema_version', 'tool', 'status', 'agent'], 'properties': {'tool': {'type': 'string', 'const': 'plan_repo_task'}, 'agent': {'type': 'object', 'required': ['summary', 'confidence', 'evidence_gaps', 'next_actions'], 'properties': {'summary': {'type': 'string'}, 'retryable': {'type': 'boolean'}, 'confidence': {'enum': ['high', 'limited', 'none'], 'type': 'string'}, 'next_actions': {'type': 'array', 'items': {'type': 'object'}}, 'evidence_gaps': {'type': 'array', 'items': {'type': 'string'}}}, 'additionalProperties': True}, 'status': {'type': 'string'}, 'schema_version': {'type': 'string'}}, 'additionalProperties': True}

{'type': 'object', 'required': ['evaluation', 'after', 'checks'], 'properties': {'diff': {'type': 'string', 'maxLength': 200000}, 'after': {'type': 'object', 'required': ['package_manager', 'direct_dependencies', 'resolved_changes'], 'properties': {'scripts': {'type': 'array', 'items': {'type': 'string', 'maxLength': 64, 'minLength': 1}, 'maxItems': 30}, 'head_sha': {'type': 'string', 'pattern': '^[a-fA-F0-9]{7,64}$'}, 'node_version': {'type': 'string', 'maxLength': 64}, 'lockfile_path': {'type': 'string', 'maxLength': 512}, 'manifest_path': {'type': 'string', 'maxLength': 512}, 'license_policy': {'type': 'object', 'properties': {'deny': {'type': 'array', 'items': {'type': 'string', 'maxLength': 64}, 'maxItems': 100}, 'allow': {'type': 'array', 'items': {'type': 'string', 'maxLength': 64}, 'maxItems': 100}}, 'additionalProperties': False}, 'lockfile_sha256': {'type': 'string', 'pattern': '^[a-fA-F0-9]{64}$'}, 'package_manager': {'enum': ['npm', 'pnpm', 'yarn', 'bun'], 'type': 'string'}, 'dependency_usage': {'type': 'object', 'required': ['schema_version', 'runtime', 'coverage', 'uses'], 'properties': {'uses': {'type': 'array', 'items': {'type': 'object', 'required': ['loader', 'export_path'], 'properties': {'loader': {'enum': ['require', 'import'], 'type': 'string'}, 'export_path': {'type': 'array', 'items': {'type': 'string', 'pattern': '^[A-Za-z_$][A-Za-z0-9_$]*$', 'maxLength': 100}, 'maxItems': 2}}, 'additionalProperties': False}, 'maxItems': 50}, 'runtime': {'type': 'object', 'required': ['node', 'platform', 'arch'], 'properties': {'arch': {'type': 'string', 'pattern': '^[a-z0-9_]+$', 'maxLength': 32}, 'node': {'type': 'string', 'pattern': '^[0-9]+\\.[0-9]+\\.[0-9]+$', 'maxLength': 32}, 'platform': {'type': 'string', 'pattern': '^[a-z0-9_]+$', 'maxLength': 32}}, 'additionalProperties': False}, 'coverage': {'type': 'string', 'const': 'partial'}, 'schema_version': {'type': 'integer', 'const': 1}}, 'description': 'Optional local call shapes for this dependency under native Node with default conditions. No source, paths, local names or call arguments. Coverage is always partial; transpiled/bundled code is unsupported.', 'additionalProperties': False}, 'resolved_changes': {'type': 'array', 'items': {'type': 'object', 'required': ['name', 'from_version', 'to_version', 'direct'], 'properties': {'name': {'type': 'string', 'maxLength': 214, 'minLength': 1}, 'direct': {'type': 'boolean'}, 'integrity': {'type': 'string', 'maxLength': 512}, 'to_version': {'type': 'string', 'maxLength': 128, 'minLength': 1}, 'from_version': {'type': ['string', 'null'], 'maxLength': 128}, 'dependency_type': {'enum': ['runtime', 'development', 'optional', 'peer'], 'type': 'string'}}, 'additionalProperties': False}, 'maxItems': 100}, 'installed_versions': {'type': 'object', 'maxProperties': 200, 'additionalProperties': {'type': 'string', 'maxLength': 128}}, 'direct_dependencies': {'type': 'object', 'maxProperties': 200, 'additionalProperties': {'type': 'string', 'maxLength': 128}}, 'resolved_graph_complete': {'type': 'boolean'}}, 'additionalProperties': False}, 'checks': {'type': 'array', 'items': {'type': 'object', 'required': ['id', 'command', 'exit_code'], 'properties': {'id': {'type': 'string', 'maxLength': 64, 'minLength': 1}, 'command': {'type': 'string', 'maxLength': 500, 'minLength': 1}, 'summary': {'type': 'string', 'maxLength': 500}, 'exit_code': {'type': 'integer', 'maximum': 255, 'minimum': 0}}, 'additionalProperties': False}, 'maxItems': 20}, 'evaluation': {'type': 'object', 'required': ['schema_version', 'evaluation_id', 'policy_profile', 'change', 'baseline_fingerprint', 'baseline_lockfile_sha256', 'target_integrity', 'baseline_advisory_ids', 'target_advisory_ids', 'repository_evidence', 'evaluation_findings', 'required_checks', 'expires_at'], 'properties': {'change': {'type': 'object', 'required': ['ecosystem', 'name', 'from_version', 'to_version', 'dependency_type'], 'properties': {'name': {'type': 'string', 'maxLength': 214, 'minLength': 1}, 'ecosystem': {'type': 'string', 'const': 'npm'}, 'to_version': {'type': 'string', 'maxLength': 128, 'minLength': 1}, 'from_version': {'type': ['string', 'null'], 'maxLength': 128}, 'dependency_type': {'enum': ['runtime', 'development', 'optional', 'peer'], 'type': 'string'}}, 'additionalProperties': False}, 'expires_at': {'type': 'string', 'format': 'date-time'}, 'evaluation_id': {'type': 'string', 'pattern': '^[a-f0-9]{64}$'}, 'policy_profile': {'enum': ['permissive', 'balanced', 'strict'], 'type': 'string'}, 'schema_version': {'type': 'string', 'const': '1'}, 'required_checks': {'type': 'array', 'items': {'type': 'object', 'required': ['id', 'kind', 'required', 'description'], 'properties': {'id': {'type': 'string', 'pattern': '^[a-z][a-z0-9_]{0,63}$'}, 'kind': {'enum': ['snapshot', 'command', 'diff'], 'type': 'string'}, 'required': {'type': 'boolean'}, 'description': {'type': 'string', 'maxLength': 500, 'minLength': 1}, 'command_hint': {'type': 'string', 'maxLength': 500, 'minLength': 1}}, 'additionalProperties': False}, 'maxItems': 12}, 'target_integrity': {'type': ['string', 'null'], 'maxLength': 512}, 'evaluation_findings': {'type': 'array', 'items': {'type': 'object', 'required': ['code', 'severity', 'source', 'message'], 'properties': {'code': {'type': 'string', 'pattern': '^[a-z][a-z0-9_]{0,127}$'}, 'source': {'enum': ['npm_registry', 'deps_dev', 'repopilot', 'project_snapshot', 'caller_receipt'], 'type': 'string'}, 'message': {'type': 'string', 'maxLength': 500, 'minLength': 1}, 'severity': {'enum': ['blocker', 'warning', 'info'], 'type': 'string'}, 'remediation': {'type': 'string', 'maxLength': 500, 'minLength': 1}}, 'additionalProperties': False}, 'maxItems': 100}, 'repository_evidence': {'type': 'object', 'required': ['status', 'recommendation', 'headline', 'evidence_gaps'], 'properties': {'status': {'enum': ['complete', 'partial', 'unavailable'], 'type': 'string'}, 'headline': {'type': ['string', 'null'], 'maxLength': 500}, 'evidence_gaps': {'type': 'array', 'items': {'type': 'string', 'maxLength': 500, 'minLength': 1}, 'maxItems': 20}, 'recommendation': {'enum': ['proceed_with_review', 'review', 'avoid', None], 'type': ['string', 'null']}}, 'additionalProperties': False}, 'target_advisory_ids': {'type': 'array', 'items': {'type': 'string', 'maxLength': 128, 'minLength': 1}, 'maxItems': 50}, 'baseline_fingerprint': {'type': 'string', 'pattern': '^[a-f0-9]{64}$'}, 'baseline_advisory_ids': {'type': 'array', 'items': {'type': 'string', 'maxLength': 128, 'minLength': 1}, 'maxItems': 50}, 'baseline_lockfile_sha256': {'type': ['string', 'null'], 'pattern': '^[a-fA-F0-9]{64}$'}, 'baseline_project_snapshot': {'type': 'string', 'const': 'not_supplied', 'description': 'Present only when the evaluation was made without a project snapshot. Part of the signed identity — pass it back verbatim.'}}, 'description': 'The verification_context object exactly as evaluate_dependency_change returned it, passed back unchanged. Its signature covers every field, so edit nothing inside it. Sending the whole evaluate result instead is accepted; the receipt is read out of its verification_context.', 'additionalProperties': False}}, 'additionalProperties': False}

{'type': 'object', 'required': ['schema_version', 'tool', 'status', 'agent'], 'properties': {'tool': {'type': 'string', 'const': 'verify_dependency_change'}, 'agent': {'type': 'object', 'required': ['summary', 'confidence', 'evidence_gaps', 'next_actions'], 'properties': {'summary': {'type': 'string'}, 'retryable': {'type': 'boolean'}, 'confidence': {'enum': ['high', 'limited', 'none'], 'type': 'string'}, 'next_actions': {'type': 'array', 'items': {'type': 'object'}}, 'evidence_gaps': {'type': 'array', 'items': {'type': 'string'}}}, 'additionalProperties': True}, 'status': {'type': 'string'}, 'schema_version': {'type': 'string'}}, 'additionalProperties': True}