Previous value: -[
-  {
-    "code": "import subprocess\n\ndef run(cmd):\n    return subprocess.call(cmd, shell=True)\n"
-  },
-  {
-    "code": "import subprocess\n\ndef run(cmd):\n    return subprocess.call(cmd, shell=True)\n",
-    "path": "app/run.py",
-    "severity": "MEDIUM"
-  },
-  {
-    "files": [
-      {
-        "content": "import subprocess\n\ndef run(cmd):\n    return subprocess.call(cmd, shell=True)\n",
-        "path": "src/run.py"
-      }
-    ]
-  }
-]New value: +[
+  {
+    "code": "import sqlite3\n\npassword = \"Sup3rS3cret!2026\"\n\n\ndef find_user(db, name):\n    return db.execute(\"SELECT * FROM users WHERE name = '\" + name + \"'\")\n"
+  },
+  {
+    "code": "import sqlite3\n\npassword = \"Sup3rS3cret!2026\"\n\n\ndef find_user(db, name):\n    return db.execute(\"SELECT * FROM users WHERE name = '\" + name + \"'\")\n",
+    "path": "app/users.py",
+    "severity": "MEDIUM"
+  },
+  {
+    "files": [
+      {
+        "content": "import sqlite3\n\npassword = \"Sup3rS3cret!2026\"\n\n\ndef find_user(db, name):\n    return db.execute(\"SELECT * FROM users WHERE name = '\" + name + \"'\")\n",
+        "path": "src/users.py"
+      }
+    ]
+  }
+]

Previous value: -"Provide files, or code (language optional, default python). severity and format are optional."New value: +"Send code (one file; path and language optional) or files (several). Everything else is optional."

Added value: +[
+  {
+    "code": "import subprocess\n\ndef run(cmd):\n    return subprocess.call(cmd, shell=True)\n"
+  },
+  {
+    "code": "import subprocess\n\ndef run(cmd):\n    return subprocess.call(cmd, shell=True)\n",
+    "path": "app/run.py",
+    "severity": "MEDIUM"
+  },
+  {
+    "files": [
+      {
+        "content": "import subprocess\n\ndef run(cmd):\n    return subprocess.call(cmd, shell=True)\n",
+        "path": "src/run.py"
+      }
+    ]
+  }
+]

Previous value: -"A single snippet, used only when files is omitted (written as e.g. snippet.py for language python). At most 100 KB."New value: +"Contents of one file or snippet, used when files is omitted. At most 100 KB. This is the only argument a first call needs."

Previous value: -"Files to analyze. Used instead of code when present. path: relative POSIX, at most 200 characters and 8 levels; each segment is letters, digits, \"_\", \".\" or \"-\" and must not start with \"-\"; no \"..\", no absolute paths, no \".git\" or \".hefesto.yaml\". content: UTF-8 text, no NUL bytes, at most 100 KB."New value: +"Several files to analyze. Used instead of code when present. path: relative POSIX, at most 200 characters and 8 levels; each segment is letters, digits, \"_\", \".\" or \"-\" and must not start with \"-\"; no \"..\", no absolute paths, no \".git\" or \".hefesto.yaml\". content: UTF-8 text, no NUL bytes, at most 100 KB."

Previous value: -"Relative POSIX path."New value: +"Relative POSIX path. The extension picks the language."

Previous value: -"json (default): findings only; sarif: also the full SARIF 2.1.0 log."New value: +"Optional. json (default): findings only; sarif: also the full SARIF 2.1.0 log."

Previous value: -"Language of code when files is omitted. Default python. Ignored when files is set. An unknown language is rejected; send files instead."New value: +"Optional language of code. Ignored when files or path is set. When omitted it is inferred from the content (python if unsure). An unknown language is rejected; send path or files instead."

Added value: +{
+  "description": "Optional file name for code, e.g. \"app/run.py\" or \"Dockerfile\". The extension picks the language. Same rules as files[].path. Ignored when files is set.",
+  "type": "string"
+}

Previous value: -"Minimum severity to report (default LOW)."New value: +"Optional minimum severity to report (default LOW)."

Previous value: -"ok true carries the hosted analyzer body in analysis. ok false carries error and message. On success the content text is the summary, the analyzer JSON, and one PRO price line. On failure the content text is the error sentence only."New value: +"ok true carries the hosted analyzer body in analysis. ok false carries error and message. On success the content text is the summary and the analyzer JSON. On failure the content text is the error sentence only."

Previous value: -"ok true carries the hosted analyzer body in analysis. ok false carries error and message. The content text is unchanged either way."New value: +"ok true carries the hosted analyzer body in analysis. ok false carries error and message. On success the content text is the summary, the analyzer JSON, and one PRO price line. On failure the content text is the error sentence only."

Previous value: -nullNew value: +{
+  "additionalProperties": false,
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "ok": {
+            "const": true
+          }
+        },
+        "required": [
+          "ok"
+        ],
+        "type": "object"
+      },
+      "then": {
+        "required": [
+          "ok",
+          "analysis"
+        ]
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "ok": {
+            "const": false
+          }
+        },
+        "required": [
+          "ok"
+        ],
+        "type": "object"
+      },
+      "then": {
+        "required": [
+          "ok",
+          "error",
+          "message"
+        ]
+      }
+    }
+  ],
+  "description": "ok true carries the hosted analyzer body in analysis. ok false carries error and message. The content text is unchanged either way.",
+  "properties": {
+    "analysis": {
+      "additionalProperties": true,
+      "description": "Analyzer JSON. The content text is a one-line summary plus this object.",
+      "properties": {
+        "analyzed": {
+          "description": "true on this branch.",
+          "type": "boolean"
+        },
+        "engine": {
+          "additionalProperties": true,
+          "type": "object"
+        },
+        "findings": {
+          "items": {
+            "additionalProperties": true,
+            "type": "object"
+          },
+          "type": "array"
+        },
+        "stored": {
+          "description": "false. Nothing is stored.",
+          "type": "boolean"
+        },
+        "summary": {
+          "additionalProperties": true,
+          "properties": {
+            "critical": {
+              "type": "number"
+            },
+            "files_analyzed": {
+              "type": "number"
+            },
+            "files_received": {
+              "type": "number"
+            },
+            "high": {
+              "type": "number"
+            },
+            "low": {
+              "type": "number"
+            },
+            "medium": {
+              "type": "number"
+            },
+            "total_issues": {
+              "type": "number"
+            }
+          },
+          "type": "object"
+        }
+      },
+      "required": [
+        "analyzed",
+        "summary",
+        "findings",
+        "stored"
+      ],
+      "type": "object"
+    },
+    "error": {
+      "description": "Failure code when ok is false. invalid_json when the analyzer body was not JSON.",
+      "type": "string"
+    },
+    "message": {
+      "description": "Same string as content[0].text when ok is false.",
+      "type": "string"
+    },
+    "ok": {
+      "description": "true when the engine returned analyzed: true.",
+      "type": "boolean"
+    }
+  },
+  "required": [
+    "ok"
+  ],
+  "type": "object"
+}

Added value: +false

Added value: +"Provide files, or code (language optional, default python). severity and format are optional."

Previous value: -"A single snippet, used when files is not given (written as e.g. snippet.py for language python)."New value: +"A single snippet, used only when files is omitted (written as e.g. snippet.py for language python). At most 100 KB."

Previous value: -"Files to analyze. path: relative POSIX path (letters, digits, '_', '.', '-'; no '..', no absolute paths); content: UTF-8 text."New value: +"Files to analyze. Used instead of code when present. path: relative POSIX, at most 200 characters and 8 levels; each segment is letters, digits, \"_\", \".\" or \"-\" and must not start with \"-\"; no \"..\", no absolute paths, no \".git\" or \".hefesto.yaml\". content: UTF-8 text, no NUL bytes, at most 100 KB."

Added value: +false

Added value: +"UTF-8 source text. At most 100 KB. No NUL bytes."

Added value: +"Relative POSIX path."

Previous value: -"Language of code: python (default), cobol, yaml, dockerfile, terraform, shell, sql, javascript, typescript, java, go, rust, csharp."New value: +"Language of code when files is omitted. Default python. Ignored when files is set. An unknown language is rejected; send files instead."

Added value: +[
+  "python",
+  "py",
+  "cobol",
+  "yaml",
+  "yml",
+  "dockerfile",
+  "docker",
+  "terraform",
+  "hcl",
+  "shell",
+  "bash",
+  "sh",
+  "sql",
+  "javascript",
+  "js",
+  "typescript",
+  "ts",
+  "java",
+  "go",
+  "rust",
+  "csharp",
+  "c#"
+]

Removed value: -[]

Previous value: -"Ignored. Accepted for backward compatibility; run hefesto analyze locally to analyze code."New value: +"A single snippet, used when files is not given (written as e.g. snippet.py for language python)."

Added value: +{
+  "description": "Files to analyze. path: relative POSIX path (letters, digits, '_', '.', '-'; no '..', no absolute paths); content: UTF-8 text.",
+  "items": {
+    "properties": {
+      "content": {
+        "type": "string"
+      },
+      "path": {
+        "maxLength": 200,
+        "type": "string"
+      }
+    },
+    "required": [
+      "path",
+      "content"
+    ],
+    "type": "object"
+  },
+  "maxItems": 20,
+  "type": "array"
+}

Added value: +{
+  "description": "json (default): findings only; sarif: also the full SARIF 2.1.0 log.",
+  "enum": [
+    "json",
+    "sarif"
+  ],
+  "type": "string"
+}

Previous value: -"Ignored. Accepted for backward compatibility."New value: +"Language of code: python (default), cobol, yaml, dockerfile, terraform, shell, sql, javascript, typescript, java, go, rust, csharp."

Added value: +{
+  "description": "Minimum severity to report (default LOW).",
+  "enum": [
+    "LOW",
+    "MEDIUM",
+    "HIGH",
+    "CRITICAL"
+  ],
+  "type": "string"
+}

Previous value: -"Code snippet to analyze"New value: +"Ignored. Accepted for backward compatibility; run hefesto analyze locally to analyze code."

Previous value: -"Programming language (python, javascript, etc)"New value: +"Ignored. Accepted for backward compatibility."

Previous value: -[
-  "code"
-]New value: +[]