agents

{'type': 'object', 'required': ['content'], 'properties': {'content': {'type': 'string', 'description': 'The untrusted text to scan before you feed it to your LLM.'}, 'context': {'type': 'string', 'description': 'Optional: where the content came from (url, tool name, sender) - context only.'}}}

{'type': 'object', 'required': ['diff'], 'properties': {'diff': {'type': 'string', 'description': 'Unified git diff to summarise'}, 'style': {'type': 'string', 'description': 'e.g. conventional, changelog, executive'}}}

{'type': 'object', 'required': ['content'], 'properties': {'content': {'type': 'string', 'description': 'The text to scan for leaked secrets (diff, config, .env, log line, LLM output).'}}}

{'type': 'object', 'required': ['code'], 'properties': {'code': {'type': 'string', 'description': 'Source code or unified diff to review'}, 'context': {'type': 'string', 'description': 'Optional context about the code'}, 'language': {'type': 'string', 'description': 'Language hint, e.g. typescript, python'}}}

{'type': 'object', 'properties': {'tx': {'type': 'object', 'properties': {'to': {'type': 'string', 'description': 'Target contract / recipient (0x address).'}, 'data': {'type': 'string', 'description': 'Calldata hex (0x...). Omit for a plain ETH transfer.'}, 'value': {'type': 'string', 'description': 'Wei to send, decimal or 0x.'}, 'chainId': {'type': 'number', 'description': 'EIP-155 chain id (e.g. 8453 for Base).'}}, 'description': 'An EVM transaction you are about to sign.'}, 'context': {'type': 'string', 'description': 'Optional free-form context.'}, 'expected': {'type': 'object', 'properties': {'from': {'type': 'string', 'description': 'Account whose funds you intend to move (transferFrom / EIP-3009).'}, 'asset': {'type': 'string', 'description': 'Token contract you intend to touch.'}, 'chainId': {'type': 'number', 'description': 'Chain you intend to act on.'}, 'spender': {'type': 'string', 'description': 'Address you intend to approve.'}, 'contract': {'type': 'string', 'description': 'Contract you intend to call.'}, 'maxAmount': {'type': 'string', 'description': 'Atomic ceiling you intend to expose (required to auto-sign an allowance).'}, 'recipient': {'type': 'string', 'description': 'Address you intend to send to.'}}, 'description': 'Your stated intent. Supplying it lets the verdict BIND the action; only a fully bound, clean action is auto-sign-safe. For an allowance, you MUST supply maxAmount; for a transferFrom, supply `from`.'}, 'typedData': {'type': 'object', 'description': 'An EIP-712 message you are about to sign (the off-chain drainer surface: permit, Permit2, EIP-3009). { domain, types, primaryType, message }.'}, 'spendPolicy': {'type': 'object', 'description': 'Optional buyer spend policy (context only).'}}}

{'type': 'object', 'required': ['call'], 'properties': {'call': {'type': 'object', 'required': ['kind'], 'properties': {'op': {'type': 'string', 'description': 'file: read|write|delete|move. env: read|write.'}, 'url': {'type': 'string', 'description': 'http: the target URL.'}, 'body': {'type': 'string', 'description': 'http: request body (context).'}, 'kind': {'enum': ['shell', 'http', 'sql', 'file', 'code', 'env'], 'type': 'string', 'description': 'The kind of action.'}, 'name': {'type': 'string', 'description': 'env: the variable name.'}, 'path': {'type': 'string', 'description': 'file: the target path.'}, 'query': {'type': 'string', 'description': 'sql: the SQL statement.'}, 'method': {'type': 'string', 'description': 'http: HTTP method.'}, 'source': {'type': 'string', 'description': 'code: the source to run.'}, 'command': {'type': 'string', 'description': 'shell: the full command line.'}, 'language': {'type': 'string', 'description': 'code: the language.'}}, 'description': 'The tool call you are about to execute.'}, 'intent': {'type': 'string', 'description': 'What this call is for (natural language). Used by the classifier for intent-mismatch.'}, 'context': {'type': 'string', 'description': 'Optional: where the task/input came from (untrusted source label).'}, 'expected': {'type': 'object', 'properties': {'readOnly': {'type': 'boolean', 'description': 'the call must not mutate state (set false to auto-exec a mutating call).'}, 'noNetwork': {'type': 'boolean', 'description': 'the call must not reach the network.'}, 'allowedHosts': {'type': 'array', 'items': {'type': 'string'}, 'description': 'http: the only hosts you intend to reach (required to auto-exec a networked call).'}, 'allowedPaths': {'type': 'array', 'items': {'type': 'string'}, 'description': 'file: the only paths you intend to touch (required to auto-exec a file write).'}}, 'description': 'Machine-checkable constraints. Supplying them lets the verdict BIND the call; only a positively-scoped, satisfied call is auto-exec-safe.'}}}

{'type': 'object', 'required': ['paymentRequirements'], 'properties': {'context': {'type': 'string', 'description': 'Optional free-form context.'}, 'expected': {'type': 'object', 'properties': {'asset': {'type': 'string', 'description': 'Expected asset contract address'}, 'payTo': {'type': 'string'}, 'chainId': {'type': 'number'}, 'network': {'type': 'string'}, 'identity': {'type': 'string'}, 'maxAmountAtomic': {'type': 'string'}}, 'description': 'Optional caller expectations.'}, 'endpointUrl': {'type': 'string', 'description': 'Resource URL being paid (context only; never fetched).'}, 'spendPolicy': {'type': 'object', 'properties': {'maxUsd': {'type': 'number'}, 'allowedAssets': {'type': 'array', 'items': {'type': 'string'}}, 'allowedNetworks': {'type': 'array', 'items': {'type': 'string'}}, 'allowedFacilitators': {'type': 'array', 'items': {'type': 'string'}}}, 'description': 'Optional buyer spend policy to evaluate against and to pin facilitators.'}, 'paymentPayload': {'description': 'The UNSIGNED EIP-3009 authorization the buyer is about to sign: { authorization|message: {from,to,value,validAfter,validBefore,nonce}, domain: {name,version,chainId,verifyingContract} }. Lets the audit bind the menu to the actual charge (server-enforced to/value/verifyingContract/chainId). Omit to vet requirements only - but then the verdict is never auto-settle-safe.'}, 'serverMetadata': {'description': 'Optional server metadata the caller already holds (context only; not fetched).'}, 'paymentRequirements': {'description': 'The x402 payment requirements from the counterparty: the 402 `accepts` array, or a single object.'}, 'selectedOptionIndex': {'type': 'number', 'description': 'Index in the accepts array the buyer intends to settle (default 0). The verdict is scoped to it.'}}}