[{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true},"description":"Start repository setup: get accessible Feeds, supported Artifact Protocols, credential names, and the evidence to collect. Inspect the repository, then call plan_repository_setup.","input_schema":{"additionalProperties":false,"properties":{},"required":[],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{}","name":"get_setup_context","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":[],"title":"Get setup context"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true},"description":"Plan setup from repository, project-area, and CI evidence before editing files. Returns file changes, access prerequisites, and unresolved choices. Does not edit files or grant access. Apply the plan, then call review_repository_setup.","input_schema":{"additionalProperties":false,"properties":{"ci_workflows":{"items":{"type":"object"},"type":"array"},"organization_id":{"type":"string"},"project_areas":{"items":{"type":"object"},"type":"array"},"repository":{"type":"object"},"setup_variants":{"items":{"type":"object"},"type":"array"}},"required":[],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ repository?: { name?: string, url?: string, root_path?: string, default_branch?: string }, project_areas?: Array<{ path: string, artifact_protocol?: string | null, feed_id?: string | null, feed_base_url?: string | null, package_manager?: string | null, package_name?: string | null, manifests?: Array<string | { path: string, bytes?: number, truncated?: boolean, content_excerpt?: string, parsed?: object }>, package_client_configs?: Array<string | { path: string, bytes?: number, truncated?: boolean, content_excerpt?: string, parsed?: object }>, lockfiles?: string[], dependency_names?: string[], current_sources?: Array<{ kind?: string | null, url: string }>, publishes?: boolean | null, ci_install?: boolean | null, ci_publish?: boolean | null }>, ci_workflows?: Array<{ path: string, jobs?: string[], commands?: string[], package_managers?: string[], secret_names?: string[], installs?: boolean | null, publishes?: boolean | null }>, setup_variants?: Array<{ workflow: \"install\", variant: \"inside_docker_build\", feed_id?: string, artifact_protocol?: \"npm\" | \"pypi\", package_client?: \"npm\" | \"pnpm\" | \"pip\" | \"uv-pip\", workflow_pattern?: string, ref_pattern?: string, environment?: string, event_name?: string }> }","name":"plan_repository_setup","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":[],"title":"Plan repository setup"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true},"description":"Review proposed or applied setup changes before declaring setup complete. Supply repository and workflow evidence; returns coverage, secret-safety diagnostics, missing prerequisites, and next steps. It cannot inspect your local files.","input_schema":{"additionalProperties":false,"properties":{"applied_changes":{"items":{"type":"object"},"type":"array"},"ci_workflows":{"items":{"type":"object"},"type":"array"},"discovered_surfaces":{"items":{"type":"object"},"type":"array"},"external_prerequisites":{"items":{"type":"object"},"type":"array"},"organization_id":{"type":"string"},"project_areas":{"items":{"type":"object"},"type":"array"},"proposed_changes":{"items":{"type":"object"},"type":"array"},"repository":{"type":"object"}},"required":[],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ repository?: { name?: string, url?: string, root_path?: string, default_branch?: string }, project_areas?: Array<{ path: string, artifact_protocol?: string | null, feed_id?: string | null, feed_base_url?: string | null, package_manager?: string | null, package_name?: string | null, manifests?: Array<string | { path: string, bytes?: number, truncated?: boolean, content_excerpt?: string, parsed?: object }>, package_client_configs?: Array<string | { path: string, bytes?: number, truncated?: boolean, content_excerpt?: string, parsed?: object }>, lockfiles?: string[], dependency_names?: string[], current_sources?: Array<{ kind?: string | null, url: string }>, publishes?: boolean | null, ci_install?: boolean | null, ci_publish?: boolean | null }>, ci_workflows?: Array<{ path: string, jobs?: string[], commands?: string[], package_managers?: string[], secret_names?: string[], installs?: boolean | null, publishes?: boolean | null }>, discovered_surfaces?: Array<{ path?: string, kind?: string, name?: string, command?: string, file_excerpt?: string, metadata?: object }>, proposed_changes?: Array<{ path: string, kind?: string, summary?: string, content_excerpt?: string, diff_excerpt?: string }>, applied_changes?: Array<{ path: string, kind?: string, summary?: string, content_excerpt?: string, diff_excerpt?: string }>, external_prerequisites?: Array<{ kind?: string, name?: string, status?: string }> }","name":"review_repository_setup","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":[],"title":"Review repository setup"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"description":"Explain one CI run using its PackageMaze Build number: OIDC exchanges, credential issuance, package activity, and publication outcomes. Results cover this Organization and authorized Feeds, with optional sanitized trust evidence. Activity that bypassed PackageMaze is unknown.","input_schema":{"additionalProperties":false,"properties":{"build_number":{"minimum":1,"type":"integer"},"include_trust_evidence":{"type":"boolean"},"limit":{"maximum":200,"minimum":1,"type":"integer"},"organization_id":{"type":"string"},"since":{"type":"string"}},"required":["build_number"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ organization_id?: string, build_number: number, since?: string, limit?: number, include_trust_evidence?: boolean }","name":"get_build_report","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":[],"title":"Get Build report"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"description":"Show installs, resolutions, and refusals across authorized Feeds, aggregated by default. Use detail=events for individual records and build_number for one PackageMaze Build. source filters credential owners or Agents; source_type filters first-party versus upstream packages. Continue with cursor or offset. Results exclude secrets.","input_schema":{"additionalProperties":false,"properties":{"cursor":{"type":"string"},"limit":{"maximum":500,"minimum":1,"type":"integer"},"build_number":{"minimum":1,"type":"integer"},"detail":{"enum":["summary","events"],"type":"string"},"include_trust_evidence":{"type":"boolean"},"offset":{"minimum":0,"type":"integer"},"organization_id":{"type":"string"},"package_name":{"type":"string"},"query":{"type":"string"},"repository":{"type":"string"},"run_id":{"type":"string"},"since":{"type":"string"},"source":{"type":"string"},"source_type":{"enum":["all","first_party","proxied_upstream"],"type":"string"},"version":{"type":"string"},"workflow":{"type":"string"}},"required":[],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ organization_id?: string, query?: string, package_name?: string, repository?: string, workflow?: string, run_id?: string, build_number?: number, source?: string, source_type?: \"all\" | \"first_party\" | \"proxied_upstream\", since?: string, version?: string, limit?: number, offset?: number, cursor?: string, detail?: \"summary\" | \"events\", include_trust_evidence?: boolean }","name":"get_package_activity","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":[],"title":"Get package activity"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"description":"List accessible Feeds with their Artifact Protocol, Feed URL, package counts, upstream sources, and policy summaries. Optionally filter by Artifact Protocol. Returns up to 25; when has_more is true, pass next_cursor as cursor.","input_schema":{"additionalProperties":false,"properties":{"artifact_protocol":{"enum":["npm","pypi"],"type":"string"},"cursor":{"type":"string"}},"required":[],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ artifact_protocol?: \"npm\" | \"pypi\", cursor?: string }","name":"list_feeds","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":[],"title":"List Feeds"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"description":"Find hosted packages by exact name or prefix across authorized Feeds. Returns matching Feeds, origin and version summaries, plus any namespace-policy explanation. Searches the retained catalog only. Pass next_cursor as cursor with the same filters to continue; use get_package for details.","input_schema":{"additionalProperties":false,"properties":{"artifact_protocol":{"enum":["npm","pypi"],"type":"string"},"feed_id":{"type":"string"},"cursor":{"type":"string"},"limit":{"maximum":50,"minimum":1,"type":"integer"},"query":{"maxLength":256,"minLength":1,"type":"string"}},"required":["query"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ query: string, feed_id?: string, artifact_protocol?: \"npm\" | \"pypi\", limit?: number, cursor?: string }","name":"search_packages","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":[],"title":"Search packages"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"description":"Inspect one hosted package: source, versions, policy and trust state, Artifact sample, recent consumers, and Organization history. Pass feed_id if the name exists in several Feeds. Narrow versions with versions_query, any part of the version string (\"rc\", \"2.1\"). Continue versions with versions_cursor and history with biography_cursor; each uses its matching returned cursor.","input_schema":{"additionalProperties":false,"properties":{"feed_id":{"type":"string"},"include_versions_limit":{"maximum":100,"minimum":1,"type":"integer"},"package_name":{"maxLength":256,"minLength":1,"type":"string"},"biography_cursor":{"type":"string"},"versions_cursor":{"type":"string"},"versions_query":{"maxLength":100,"type":"string"}},"required":["package_name"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ package_name: string, feed_id?: string, include_versions_limit?: number, versions_query?: string, versions_cursor?: string, biography_cursor?: string }","name":"get_package","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":[],"title":"Get package details"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"description":"Diagnose an install, publish, authentication, or CI failure from stored PackageMaze evidence. Pass kind and any known Feed, package/version, PackageMaze Build number, or short sanitized error excerpt. Returns ranked causes, evidence, and fixes; unknown evidence stays unknown. Never include credentials. Does not probe upstream.","input_schema":{"additionalProperties":false,"properties":{"build_number":{"minimum":1,"type":"integer"},"error_excerpt":{"maxLength":2000,"type":"string"},"feed":{"maxLength":128,"type":"string"},"kind":{"enum":["install","publish","auth","ci"],"type":"string"},"package_name":{"maxLength":256,"type":"string"},"version":{"maxLength":128,"type":"string"}},"required":["kind"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ kind: \"install\" | \"publish\" | \"auth\" | \"ci\", feed?: string, package_name?: string, version?: string, error_excerpt?: string, build_number?: number }","name":"diagnose_failure","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":[],"title":"Diagnose a failure"},{"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false},"description":"Check dependency additions or updates before installing. Returns an exact pin, policy holds or denials, alternatives, and recent Organization usage; never-served packages remain unknown. Each successful call records Dependency Checks. Supply parsed facts and a short rationale without secrets. On the first check pass session: { task }; then reuse the returned session.id.","input_schema":{"additionalProperties":false,"properties":{"additions":{"items":{"additionalProperties":false,"properties":{"intent":{"type":["string","null"],"pattern":"^(?:runtime|dev|optional:[A-Za-z0-9._-]{1,64})$"},"name":{"type":"string","minLength":1,"maxLength":256},"rationale":{"type":["string","null"],"description":"Short reason, without secrets; first 200 characters retained."},"requested_kind":{"enum":["pin","range","latest","absent"],"type":"string"},"requested_value":{"minLength":1,"maxLength":4096,"type":["string","null"],"description":"Required for pin/range; omit for latest/absent."}},"required":["name","requested_kind"],"type":"object"},"maxItems":20,"minItems":1,"type":"array"},"base_commit_sha":{"type":"string"},"dependency_evidence":{"additionalProperties":false,"properties":{"dependencies":{"type":["object","null"],"additionalProperties":{"type":"string","maxLength":128}},"dev_dependencies":{"type":["object","null"],"additionalProperties":{"type":"string","maxLength":128}},"engines":{"type":["object","null"],"additionalProperties":{"type":"string","maxLength":128}},"requires_python":{"type":["string","null"],"maxLength":128}},"required":[],"type":["object","null"],"$schema":"https://json-schema.org/draft/2020-12/schema","description":"Parsed facts only; at most 300 map entries total and 8192 serialized characters."},"project_area":{"type":["object","null"],"properties":{"artifact_protocol":{"type":"string","examples":["npm","pypi"]},"feed_id":{"type":"string","maxLength":128},"feed_base_url":{"type":"string","maxLength":512},"path":{"type":"string"},"package_manager":{"type":"string","maxLength":64},"publishes":{"type":"boolean"}}},"repository":{"type":["object","null"],"properties":{"name":{"type":"string"}}},"session":{"type":["object","null"],"properties":{"id":{"type":["string","null"]},"task":{"type":["string","null"],"description":"Short task, without secrets; first 120 characters retained."}}}},"required":["additions"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ repository?: { name?: string }, base_commit_sha?: string, project_area?: { path?: string, artifact_protocol?: \"npm\" | \"pypi\", feed_id?: string, feed_base_url?: string, package_manager?: string, publishes?: boolean }, additions: Array<{ name: string, requested_kind: \"pin\" | \"range\" | \"latest\" | \"absent\", requested_value?: string, intent?: \"runtime\" | \"dev\" | \"optional:<group>\", rationale?: string }>, dependency_evidence?: { dependencies?: Record<string, string>, dev_dependencies?: Record<string, string>, engines?: Record<string, string>, requires_python?: string }, session?: { id?: string, task?: string } }","name":"preflight_dependencies","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":[],"title":"Preflight dependencies"},{"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false},"description":"Record parsed post-install dependency facts and their preflight decision IDs as a Personal Dependency Report. Supply repository and document using the input schema; never send raw dependency files. Repository and Git fields remain unverified claims. This does not update canonical Projects or Build history.","input_schema":{"additionalProperties":false,"properties":{"build_number":{"minimum":1,"type":"integer"},"commit_sha":{"type":"string"},"decisions":{"items":{"additionalProperties":false,"properties":{"package_name":{"type":"string","minLength":1,"maxLength":256},"decision_id":{"type":"string","pattern":"^mcpdd_[0-9a-f]{8,64}$"}},"required":["package_name","decision_id"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"maxItems":20,"type":"array"},"dirty":{"type":"boolean"},"document":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"coverage":{"type":"object","properties":{"identifiedSkips":{"maxItems":2000,"type":"array","items":{"type":"string","minLength":1,"maxLength":256}},"unidentifiedSkips":{"type":"integer","minimum":0,"maximum":9007199254740991}},"required":["identifiedSkips","unidentifiedSkips"],"additionalProperties":false},"directDependencies":{"maxItems":2000,"type":"array","items":{"type":"object","properties":{"group":{"type":"string","pattern":"^(?:runtime|dev|optional:[A-Za-z0-9._-]{1,64})$"},"name":{"type":"string","minLength":1,"maxLength":256},"requested":{"type":"string","minLength":1,"maxLength":256},"resolvedVersion":{"anyOf":[{"type":"string","minLength":1,"maxLength":256},{"type":"null"}]}},"required":["group","name","requested"],"additionalProperties":false}},"lockfileKind":{"type":"string","enum":["npm-package-lock","pip-requirements","pnpm-lock","poetry-lock","uv-lock","yarn-lock"]},"lockfileSha256":{"type":"string","pattern":"^[0-9a-f]{64}$"},"projectPath":{"type":"string","maxLength":512},"protocol":{"type":"string","enum":["npm","pypi"]},"resolvedPackages":{"maxItems":2000,"type":"array","items":{"type":"object","properties":{"name":{"type":"string","minLength":1,"maxLength":256},"version":{"type":"string","minLength":1,"maxLength":256}},"required":["name","version"],"additionalProperties":false}}},"required":["directDependencies","lockfileKind","lockfileSha256","projectPath","protocol","resolvedPackages"],"additionalProperties":false,"description":"Parsed dependency-file facts only; at most 65536 serialized characters."},"git_ref":{"type":"string"},"organization_id":{"type":"string"},"parent_commit_shas":{"items":{"type":"string"},"maxItems":64,"type":"array"},"repository":{"additionalProperties":false,"properties":{"name":{"type":"string","minLength":1,"maxLength":256},"artifact_protocol":{"type":"string","enum":["npm","pypi"]},"url":{"type":["string","null"],"minLength":1,"maxLength":512,"description":"Git remote URL; omit when unknown."},"path":{"type":["string","null"],"maxLength":512},"package_manager":{"type":["string","null"],"minLength":1,"maxLength":64}},"required":["name","artifact_protocol"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"}},"required":["repository","document"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ organization_id?: string, repository: { name: string, url?: string, path?: string, artifact_protocol: \"npm\" | \"pypi\", package_manager?: string }, document: { directDependencies: Array<{ name: string, requested: string, resolvedVersion?: string | null, group: \"runtime\" | \"dev\" | \"optional:<group>\" }>, resolvedPackages: Array<{ name: string, version: string }>, lockfileKind: \"npm-package-lock\" | \"pip-requirements\" | \"pnpm-lock\" | \"poetry-lock\" | \"uv-lock\" | \"yarn-lock\", lockfileSha256: string, projectPath: string, protocol: \"npm\" | \"pypi\", coverage?: { identifiedSkips: string[], unidentifiedSkips: number } }, git_ref?: string, commit_sha?: string, parent_commit_shas?: string[], dirty?: boolean, build_number?: number, decisions?: Array<{ package_name: string, decision_id: string }> }","name":"report_dependency_changes","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":[],"title":"Report dependency changes"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"description":"Find recent verified CI or OIDC exchange attempts that can produce a Trust Rule for one accessible Feed. Pass a Feed ID or exact name. Inspect a returned proposal_attempt_id with get_workload_access_rule_proposal before requesting a rule. Requires manage_integrations.","input_schema":{"additionalProperties":false,"properties":{"feed":{"type":"string"}},"required":["feed"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ feed: string }","name":"list_workload_access_rule_proposals","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":["manage_integrations"],"title":"List workload access rule proposals"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"description":"Inspect the exact signed evidence and proposed Trust Rule for a proposal_attempt_id. Review its fields before calling create_workload_access_rule. This read does not authorize the rule; creation follows the grant’s confirmation settings. Requires manage_integrations.","input_schema":{"additionalProperties":false,"properties":{"proposal_attempt_id":{"type":"string"}},"required":["proposal_attempt_id"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ proposal_attempt_id: string }","name":"get_workload_access_rule_proposal","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":["manage_integrations"],"title":"Inspect workload access rule proposal"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true},"description":"Read one Project’s CI workflows, Trust Rule readiness, diagnostics, and next setup action from verified repository evidence. Identify it by project_id or repository owner/name plus optional path. Select a Feed and purpose to inspect a specific install or publish path. Requires manage_integrations.","input_schema":{"additionalProperties":false,"properties":{"feed_id":{"type":"string"},"package_name":{"type":"string"},"path":{"type":"string"},"project_id":{"type":"string"},"purpose":{"enum":["install","publish","docker-build","test"],"type":"string"},"repository":{"type":"string"},"workflow":{"type":"string"}},"required":[],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ project_id?: string, repository?: string, path?: string, feed_id?: string, purpose?: \"install\" | \"publish\" | \"docker-build\" | \"test\", package_name?: string, workflow?: string }","name":"get_project_ci_onboarding","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":["manage_integrations"],"title":"Get Project CI onboarding"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"description":"Read a Project’s direct dependencies (default), reachable transitive dependencies, or one node’s children. Use project_id or repository owner/name plus optional path; children also requires node_id. Narrow any view by query, any part of a dependency name (\"eslint\", \"types/\"); direct then counts matches in matching_count. Covers all Projects in this Organization regardless of Feed selection. Follow next_cursor with the same query and completeness; not_read means no canonical reading exists.","input_schema":{"additionalProperties":false,"properties":{"organization_id":{"type":"string"},"project_id":{"type":"string"},"repository":{"type":"string"},"path":{"type":"string"},"cursor":{"type":"string"},"view":{"type":"string","enum":["direct","transitive","children"]},"node_id":{"type":"integer","minimum":1},"query":{"type":"string","maxLength":100}},"required":[],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ project_id?: string, repository?: string, path?: string, view?: \"direct\" | \"transitive\" | \"children\", node_id?: number, query?: string, cursor?: string, organization_id?: string }","name":"get_project_dependencies","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":[],"title":"Get Project dependencies"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"description":"Read a Project’s dependency history (default), compare entries with view=diff, or inspect view=commit with commit_sha. Identify the Project by project_id or repository owner/name plus optional path. For diff, reuse returned heads as from/to; null from means baseline. Restart without cursor if history_moved.","input_schema":{"additionalProperties":false,"properties":{"organization_id":{"type":"string"},"project_id":{"type":"string"},"repository":{"type":"string"},"path":{"type":"string"},"cursor":{"type":"string"},"view":{"type":"string","enum":["entries","diff","commit"]},"from":{"anyOf":[{"type":"object","additionalProperties":false,"properties":{"project_id":{"type":"string","minLength":1,"maxLength":96},"entry_seq":{"type":"integer","minimum":1},"lock_id":{"type":"integer","minimum":1},"lock_seq":{"type":"integer","minimum":1}},"required":["entry_seq","lock_id","lock_seq"]},{"type":"null"}]},"to":{"type":"object","additionalProperties":false,"properties":{"project_id":{"type":"string","minLength":1,"maxLength":96},"entry_seq":{"type":"integer","minimum":1},"lock_id":{"type":"integer","minimum":1},"lock_seq":{"type":"integer","minimum":1}},"required":["entry_seq","lock_id","lock_seq"]},"commit_sha":{"type":"string"}},"required":[],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ project_id?: string, repository?: string, path?: string, view?: \"entries\" | \"diff\" | \"commit\", from?: {project_id?:string,entry_seq:number,lock_id:number,lock_seq:number}|null, to?: {project_id?:string,entry_seq:number,lock_id:number,lock_seq:number}, commit_sha?: string, cursor?: string }","name":"get_project_changes","output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"status":{"type":"string","enum":["read","changed","unchanged","not_read","history_moved","project_ambiguous","project_not_found"]},"project_id":{"type":"string"},"head":{"anyOf":[{"type":"object","properties":{"project_id":{"type":"string"},"entry_seq":{"type":"integer","exclusiveMinimum":0,"maximum":9007199254740991},"lock_id":{"type":"integer","exclusiveMinimum":0,"maximum":9007199254740991},"lock_seq":{"type":"integer","exclusiveMinimum":0,"maximum":9007199254740991}},"required":["project_id","entry_seq","lock_id","lock_seq"],"additionalProperties":{}},{"type":"null"}],"description":"Immutable Project history reference; null when no state is resolved."},"next_cursor":{"description":"Continue with cursor; null ends this page sequence.","type":["string","null"]},"next_action":{"type":"string"}},"required":["status"],"additionalProperties":{}},"output_shape":"object","required_scopes":[],"title":"Get Project changes"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"description":"Check current setup readiness for source-repository access, Feeds, Projects and reads, Publishing, CI, Agent access, and Verification. Returns the same states and next-action links as the Organization overview, within this connection’s access. Readiness requires an operational repository connection and a verified install or publish outcome.","input_schema":{"additionalProperties":false,"properties":{},"required":[],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{}","name":"get_organization_setup_readiness","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":["read"],"title":"Get Organization setup readiness"},{"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false},"description":"Create a CI/OIDC Trust Rule. Requires manage_integrations. Exact upfront approval may apply it immediately; otherwise open confirm_url, then resume pending_change_id.","input_schema":{"additionalProperties":false,"properties":{"constraints":{"additionalProperties":false,"properties":{"audience":{},"claim_matchers":{"items":{"type":"object"},"type":"array"},"context_ids":{"items":{"type":"string"},"type":"array"},"environment":{},"event_name":{},"issuer_url":{},"organization_id":{},"pipeline_definition_id":{},"project_id":{},"provider":{"type":"string"},"ref_pattern":{},"repository":{},"repository_owner":{},"vcs_origin":{},"vcs_ref_pattern":{},"workflow_pattern":{}},"required":["provider"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"feed":{"type":"string"},"justification":{"type":"string"},"link":{"type":"string"},"package_name":{"type":"string"},"path":{"type":"string"},"pending_change_id":{"type":"string"},"project_id":{"type":"string"},"proposal_attempt_id":{"type":"string"},"provider":{"enum":["github-actions","circleci","oidc"],"type":"string"},"purpose":{"enum":["install","publish","docker-build","test"],"type":"string"},"repository":{"type":"string"},"vcs_ref_pattern":{"type":"string"},"workflow":{"type":"string"}},"required":[],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ feed?: string, provider?: \"github-actions\" | \"circleci\" | \"oidc\", purpose?: \"install\" | \"publish\" | \"docker-build\" | \"test\", package_name?: string, project_id?: string, repository?: string, path?: string, workflow?: string, constraints?: provider-owned constraints, proposal_attempt_id?: string, vcs_ref_pattern?: string, justification: string, link?: string, pending_change_id?: string }","name":"create_workload_access_rule","output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"status":{"type":"string","enum":["confirmation_required","awaiting_confirmation","created","already_configured","feed_ambiguous","project_ambiguous","project_not_found"]},"pending_change_id":{"type":"string","description":"Resume this request with pending_change_id."},"confirm_url":{"description":"Open to approve; null if the Feed left this grant.","type":["string","null"]},"expires_at":{"type":"string"},"manage_url":{"type":"string"},"next_action":{"type":"string"}},"required":["status"],"additionalProperties":{}},"output_shape":"object","required_scopes":["manage_integrations"],"title":"Create workload access rule"},{"annotations":{"readOnlyHint":false,"destructiveHint":true,"idempotentHint":true,"openWorldHint":false},"description":"Removes one package's current External Feed selection after explicit confirmation. Needs manage_upstream_sources scope and current Organization Admin access. Does not select a replacement or alter retained Package Versions, Artifacts, or source history.","input_schema":{"additionalProperties":false,"properties":{"confirm":{"const":true,"type":"boolean"},"feed_id":{"type":"string"},"package_name":{"type":"string"}},"required":["feed_id","package_name","confirm"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ feed_id: string, package_name: string, confirm: true }","name":"unpin_upstream_package","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":["manage_upstream_sources"],"title":"Unpin upstream package"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"description":"Inspect upstream integrity blocks and acceptance history for a Feed. Returns original and candidate digest evidence, revisions, and next_cursor; 20 incidents per page. status defaults to all. Review one incident’s current candidate before accepting it; Allow now does not clear integrity blocks.","input_schema":{"additionalProperties":false,"properties":{"feed_id":{"type":"string"},"cursor":{"type":"string"},"package_name":{"type":"string"},"incident_id":{"type":"string"},"status":{"type":"string","enum":["pending","all"]}},"required":["feed_id"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ feed_id: string, package_name?: string, incident_id?: string, status?: \"pending\" | \"all\", cursor?: string }","name":"list_upstream_integrity_incidents","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":["read"],"title":"List upstream integrity incidents"},{"annotations":{"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":false},"description":"Accept one upstream integrity candidate after the user reviews and confirms it. Copy revision, sha256 (including null), and digests from list_upstream_integrity_incidents; include a reason and confirm=true. Requires manage_upstream_sources and current Organization Admin access. Retry the install after acceptance; future digest changes require review.","input_schema":{"additionalProperties":false,"properties":{"feed_id":{"type":"string"},"incident_id":{"type":"string"},"revision":{"type":"integer","minimum":1},"sha256":{"type":["string","null"]},"digests":{"type":"object","additionalProperties":{"type":"string"}},"reason":{"type":"string"},"confirm":{"const":true,"type":"boolean"}},"required":["feed_id","incident_id","revision","sha256","digests","reason","confirm"],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ feed_id: string, incident_id: string, revision: number, sha256: string | null, digests: Record<string, string>, reason: string, confirm: true }","name":"accept_upstream_integrity_candidate","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":["manage_upstream_sources"],"title":"Accept upstream integrity candidate"},{"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"description":"Show this Agent’s Dependency Checks, installs, refusals, and resolutions, grouped by session. Also includes the owner’s installs linked to those checks; each row names the credential owner. Use agent_id for another Agent only with Organization Admin access. Rationale and task text are excluded.","input_schema":{"additionalProperties":false,"properties":{"agent_id":{"type":"string"},"feed":{"type":"string"},"group_by":{"enum":["session","none"],"type":"string"},"kind":{"enum":["check","install","install_refused","resolution","reported_change"],"type":"string"},"limit":{"maximum":100,"minimum":1,"type":"integer"},"offset":{"minimum":0,"type":"integer"},"package_name":{"type":"string"},"since":{"type":"string"}},"required":[],"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"input_shape":"{ agent_id?: string, kind?: \"check\" | \"install\" | \"install_refused\" | \"resolution\" | \"reported_change\", package_name?: string, feed?: string, since?: string, group_by?: \"session\" | \"none\", limit?: number, offset?: number }","name":"get_agent_activity","output_schema":{"additionalProperties":true,"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema"},"output_shape":"object","required_scopes":[],"title":"Get Agent activity"}]