RepoPilot
This server manages RepoPilot's auditable repository maintenance: it tracks agent skill steps, appends immutable evidence, requests and consumes human approvals, searches/archives runbooks, and performs read-only or PR-only GitHub operations (issue/PR reads, PR creation, checks, proof/review comment publishing, and approval-gated merge).
Run & Step Management: Start/finish Agent Skill steps with idempotency keys and terminal statuses (succeeded/failed/blocked/skipped).
Immutable Evidence Ledger: Append SHA-256 hash-chained evidence records (decisions, tool results, CI, approvals, publications) with append-only semantics.
Human Approval Workflow: Request approval for high-risk actions (merge, delete branch, rollback, permission/secret changes); merge requires exact approval ID+version and is atomically consumed.
Runbook Knowledge Base: Search verified runbooks by repository/query and archive new verified outcomes after independent verification.
GitHub Issue & PR Reads: Fetch issue details and PR metadata (including immutable head SHA) with repository allowlist enforcement.
PR Diff & Checks: Paginate changed-file patches (100/page) and read combined checks/statuses, appending CI evidence.
Repair PR Creation: Create a pull request from an existing branch (
pull_request_onlypolicy—never auto-merge).Proof & Review Publishing: Create/update managed comments (proof bundle or review findings) tied to a fixed head SHA, with stale-revision rejection.
Read-only Review Support: Tools for reviewers to inspect PRs and publish structured findings (severity, location) without approving or modifying code.
Provides tools for managing GitHub issues, pull requests, checks, and controlled merges, with full audit trail and approval workflows.
Enables monitoring failed GitHub Actions CI runs and driving them through reproduction, fix, verification, and pull request creation.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@RepoPilotInvestigate the failing CI build and open a verified PR"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
RepoPilot is built on AgentTeams
v1.2.2and focuses on safe, auditable repository maintenance automation. The default policy ispull_request_only: Agents may create branches, commits, and Pull Requests, but cannot auto-merge, delete branches, or modify permissions or secrets.
Two Automation Closed Loops
The PR review pipeline listens for opened, reopened, synchronize, and
ready_for_review. Before every publication, the current head SHA is re-checked; if new commits
arrive during review, the old Run is rejected. Comments carry a fixed <!-- repopilot-review --> marker,
so each PR maintains exactly one RepoPilot comment without spamming duplicates.
Related MCP server: gts-repo-guardian
Flow Demo
The online Demo needs no model service or admin account. It replays the real delivery of
repopilot-testbed#3by default: the failing baseline reliably reproduces a concurrency race, RepoPilot fixes it with aTypes + Store + Processor + Tests + Docsfive-file patch, and createsPR #4after GitHub Actions passes. The PR stays open; merge authority remains with humans.
<!-- repopilot-review -->
## RepoPilot PR Review
**Verdict:** NEEDS ATTENTION
**Reviewed revision:** `b504cec7c05cd2f3b84ee9c6ad7a3d3db6eead5c`
### Findings
| Severity | Finding | Location |
| -------- | -------------------------------------- | --------------------------------- |
| HIGH | 发布前没有重新校验当前 head SHA | `src/reviews/publisher.ts:19` |
| MEDIUM | 固定只扫描前 100 条评论 | `src/reviews/github-client.ts:43` |
| HIGH | GitHub 写入失败仍记录“已发布” Evidence | `src/reviews/publisher.ts:31` |The following results come from public PR #5 with 5 files and 373 added lines; GitHub Actions CI has passed. RepoPilot still found 2 HIGH and 1 MEDIUM semantic issues from the real Diff and published a public Review Comment. The comment is generated by repopilot-reviewer using the pull-request-review Skill and published via repopilot_publish_review_comment. The tool validates the Run, repository, PR number, the running Reviewer Step, and the immutable head SHA, then appends review_publication Evidence on success. You can download the sanitized Run Proof JSON to verify the Run ID, Step, 8 Evidence entries, and the chain-head hash.
Maintenance Closed Loop
GitHub Issue / Failed CI
│
▼
Repo Lead 分诊与拆解
│
▼
Locator 根因定位 ──► Fixer 最小修复 ──► Verifier 独立验证
│
人工审批 ◄── 高风险门禁 ◄─────┤
│
▼
Archivist 沉淀 Runbook
GitHub Pull Request
│
▼
Reviewer 固化 head SHA ──► 分页读取 Diff / Checks ──► 更新托管 Review CommentEvery key stage writes decisions, tool calls, Git references, CI results, and approval events into a PostgreSQL append-only SHA-256 evidence chain, and supports replay through OpenTelemetry Traces and the evidence console.
Proof-Carrying Pull Request
RepoPilot does not treat "auto-generated PR" as the end point; instead, every PR carries a machine-verifiable Proof Bundle:
Run 身份 + AgentTeams Step 时间线 + Skill 版本
+ 工具与决策 Evidence + Git / CI 引用
+ 审批历史 + SHA-256 链根 + 确定性质量门禁curl http://127.0.0.1:3000/api/v1/runs/<run-id>/proof \
--output artifacts/proof-bundle.json
pnpm build
pnpm evaluate artifacts/proof-bundle.json artifacts/evaluation-report.jsonThe Proof Score measures proof completeness and does not pass off control-plane tests as model fix quality; patch correctness is still judged by the public testbed, the independent Verifier, and GitHub Checks.
After the Runbook archive completes, the Archivist calls repopilot_publish_proof_comment to idempotently publish the sanitized
completeness results, Agent/Skill execution results, and the SHA-256 chain root to the corresponding PR. Repeated runs update
the same comment, so the Proof is truly delivered with the PR rather than existing only in the control-plane API.
Why RepoPilot
AgentTeam
The full Agent Identity definitions live in
deploy/agentteams/repopilot-team.yaml,
and the Skill contracts live in skills/.
Core Capabilities
MCP Registry
RepoPilot provides a reproducible entry point for the MCP Registry's static checks and hosted publication:
Check item | Verifiable implementation in the repository |
License | The root directory contains the full standard Apache License 2.0 text |
Ownership |
|
Buildability |
|
Tool definitions | All 15 tools provide call boundaries, parameter semantics, and standard MCP security annotations |
Anti-regression | Release verification runs |
MCP tool discovery needs no model or GitHub credentials; only database or GitHub read/write tools depend on the corresponding runtime
services and Secrets at call time. The full deployment contract is in docs/deployment.md.
System Architecture
flowchart LR
GH[GitHub Issue / Failed CI / Pull Request] --> CP[RepoPilot Control Plane]
CP --> DB[(PostgreSQL + pgvector)]
CP --> MX[Matrix Admin → Manager DM]
MX --> M[AgentTeams Manager]
M --> TL[Repo Lead]
TL --> L[Locator]
TL --> F[Fixer]
TL --> V[Verifier]
TL --> A[Archivist]
M --> R[Reviewer]
L & F & V & A --> MCP[RepoPilot MCP via Higress]
R --> MCP
MCP --> GHAPI[GitHub REST API]
MCP --> DB
DB --> UI[Evidence Console]
CP --> OTEL[OTLP / AgentLoop / LoongSuite]More design details are in docs/architecture.md.
Project Structure
RepoPilot/
├── apps/
│ ├── control-plane/ # Fastify REST / Webhook / MCP / 审批 / 证据账本
│ └── console/ # 飞行记录器风格 React 证据控制台
├── packages/contracts/ # Zod Schema、共享类型和显式状态机
├── deploy/agentteams/ # AgentTeams v1.2.2 Worker / Team 清单
├── skills/ # 6 个可复用 RepoPilot Skills
├── evaluation/ # Proof Bundle 协议与可靠性 Benchmark
├── scripts/ # Skill 校验、可靠性基线与离线评测
├── docs/ # 架构、安全、部署和 Demo 文档
├── CONTRIBUTING.md # 开发流程、质量门禁与贡献规范
├── Dockerfile # Streamable HTTP Control Plane 生产容器
├── glama.json # Glama MCP Registry 维护者声明
├── API.md # REST / Webhook / MCP 出入参
├── Method.md # 外部 SDK、HTTP Method 与调用契约
└── docker-compose.yml # PostgreSQL 16 + pgvectorQuick Start
Prerequisites
Node.js
20+pnpm
9+Docker Desktop / Docker Engine
Model credentials are not a prerequisite for building, testing, or running the local control plane.
git clone https://github.com/wellkilo/RepoPilot.git
cd RepoPilot
cp .env.example .env
docker compose up -d postgres
pnpm install --registry=https://registry.npmjs.org
pnpm build
pnpm --filter @repopilot/control-plane startOpen the console:
http://127.0.0.1:3000You can also use one-click initialization:
./init.shProduction Container
The root Dockerfile builds the Console, shared contracts, and Control Plane, and starts
the same production process as a non-root user:
docker build -t repopilot:local .
docker run --rm -p 3000:3000 \
-e DATABASE_URL=postgres://repopilot:repopilot@host.docker.internal:5432/repopilot \
-e GITHUB_ALLOWED_REPOSITORIES=wellkilo/repopilot-testbed \
repopilot:localMCP clients connect to http://127.0.0.1:3000/mcp. When GitHub reads or writes are needed, inject
GITHUB_TOKEN via runtime Secrets; the image contains no credentials.
stdio MCP
When a Registry or local MCP client needs stdio, first generate the standalone runtime package, then start the root entry point:
pnpm glama:build
pnpm glama:verify
node mcp-server.mjsglama:verify performs a real MCP initialization and validates the
15 tools in an environment without database or GitHub credentials. Tool discovery does not connect to external services; real services
and credentials are still required when actually executing data or GitHub operations.
Creating Your First Run
curl -X POST http://127.0.0.1:3000/api/v1/runs \
-H 'Content-Type: application/json' \
-d '{
"source": {
"type": "github_issue",
"repository": "wellkilo/repopilot-testbed",
"issueNumber": 1
},
"executionPolicy": "pull_request_only"
}'To read GitHub Issues, configure GITHUB_TOKEN in the local .env. If no
AgentTeams Matrix is configured, the Run stops at awaiting_dispatch and does not fake execution results with Mock Agents.
After binding the repository Webhook's Pull requests events, creating, reopening, pushing new
commits to, or marking a non-Draft PR as ready for review all trigger an independent review Run. The Reviewer reads the PR, paginated diff, and
Checks, and idempotently creates or updates a single RepoPilot PR Review comment; if the PR gains new commits
during review, the old Run is rejected for publication due to a head SHA mismatch.
Real AgentTeams Collaboration
Real Agent reasoning requires an OpenAI-compatible model endpoint, such as:
Managed services like Alibaba Cloud Bailian;
Other OpenAI-compatible APIs;
Local compatible endpoints like Ollama.
Model keys are only given to AgentTeams/Higress; they never enter RepoPilot source code, the database, or deployment manifests.
Deployment docs:
Reproducible Testbed
The testbed contains a deterministic concurrency defect: two requests for the same GitHub delivery can simultaneously pass through the find / save window, creating two tasks and executing dispatch twice. RepoPilot consolidates create-or-reuse into DeliveryTaskStore.getOrCreate, so the same delivery shares a single in-flight Promise, and adds sequential retries plus a negative control for different deliveries. The PR remains open for review and does not trigger auto-merge.
The PR Review Demo uses the separate public
PR #5: the code compiles, and all 5 tests plus GitHub Actions pass, but the Reviewer does not equate green CI with correct code. It reads the 5 changed files page by page, identifies three semantic defects on the pinned revision b504cec — stale SHA, comment pagination, and failed Evidence — and publishes the same hosted comment through the real GitHub REST API. The review_publication record of that Run and the 8-entry hash-chained Evidence have been redacted and exported to
docs/assets/demo/pr-review-run.json.
Verification
pnpm typecheck
pnpm benchmark:reliability
pnpm skills:validate
pnpm lint
pnpm format:check
pnpm buildThe current control-plane reliability baseline is 52/52. Tests cover state machines, webhook signature verification, evidence hashing, database immutability triggers, delivery concurrency idempotency, approval versions with single-use consumption, Agent Skill Step lifecycle, Proof Bundle integrity checks, PR Review provenance with stale SHA protection, HTTP conflict semantics, and console labels. CI generates structured JSON reports.
Security Boundaries
The detailed threat model and production hardening items are in docs/security.md.
Documentation Navigation
Document | Content |
REST, Webhook, and MCP Schema | |
AgentTeams, Matrix, GitHub, PostgreSQL, and OTel method contracts | |
Architecture, state machines, and deployment profiles | |
Permissions, approvals, credentials, and evidence integrity | |
Local, AgentTeams, Webhook, and observability deployment | |
Public reproduction flow, run evidence, and failure branches | |
Reliability layering, Proof Bundle, and Benchmark | |
Engineering roadmap and capabilities to be completed | |
Development environment, quality gates, and contribution flow |
Current Boundaries
Without a configured model service, real AgentTeams inference cannot complete; build, tests, control plane, and testbed are unaffected.
The Runbook defaults to PostgreSQL full-text search;
vector(1536)is reserved for semantic recall.AgentLoop Recall is an optional capability and degrades automatically to the local Runbook when no credentials are available.
Console approval identity is currently demonstrated via a trusted reverse-proxy Header; production must integrate OIDC/SSO.
Available Tools
14 toolsgithub_create_pull_requestA
Create a GitHub pull request from an existing repair branch for a maintenance run. Use only after the patch and focused verification are complete; this is the highest automatic repository write allowed by pull_request_only. It creates an external PR and appends a git_reference evidence record, but never merges it.
| Name | Required | Description | Default |
|---|---|---|---|
| base | Yes | Target branch that should receive the pull request. | |
| body | Yes | Pull request description with root cause, changes, tests, and known limitations. | |
| head | Yes | Existing source branch containing the repair commits. | |
| runId | Yes | Maintenance run UUID that produced the repair branch. | |
| title | Yes | Concise pull request title describing the verified repair. | |
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false (write) and destructiveHint=false (non-destructive), so the description's job is to add context. It does: it mentions creating an 'external PR,' appending a 'git_reference evidence record,' and reassuring 'never merges it.' This adds useful behavioral details beyond the annotations without contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with zero redundancy. The main action is front-loaded, the usage condition is placed early, and the side-effect clarification (never merges) is concise. Every sentence earns its place, making it easy to parse for an agent.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a write tool with 6 required parameters and no output schema, the description covers the essential context: when to use, permission constraints, and post-conditions (creates PR, appends evidence). It omits a return format, but without an output schema that is not strictly required. Preconditions like allowed repositories are handled in the schema. Overall, it is sufficient for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds marginal context by linking 'repair branch' to the head parameter and 'maintenance run' to runId, but these are already implied by the schema descriptions. No significant additional semantic value is provided beyond what the schema offers.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific verb and resource: 'Create a GitHub pull request from an existing repair branch.' It also distinguishes itself from the sibling merge tool by explicitly saying 'never merges it,' making its role unambiguous in the toolset.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a clear when-to-use condition ('Use only after the patch and focused verification are complete') and sets expectations about the permission level ('highest automatic repository write allowed by pull_request_only'). It implicitly excludes merging by stating 'never merges it,' but it does not explicitly name the merge alternative as a separate tool, leaving a small gap in exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
github_get_issueARead-onlyIdempotent
Read the current title, body, labels, state, and URL of one GitHub issue in an allowed repository. Use this to establish source requirements before triage; do not use it for pull requests. This performs a read-only GitHub API request and requires GITHUB_TOKEN.
| Name | Required | Description | Default |
|---|---|---|---|
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. | |
| issueNumber | Yes | Positive GitHub issue number. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, covering the safety profile. The description adds the authentication requirement ('requires GITHUB_TOKEN') and reiterates 'read-only GitHub API request', which reinforces the read-only nature but doesn't contradict annotations. The token requirement is useful context beyond what annotations provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is exactly two sentences with zero filler. The first sentence front-loads the concrete read action and fields, the second gives usage guidance and exclusions. Every word earns its place, and the most important operational detail (what it reads) is immediately clear.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simple nature, the description is largely complete: it specifies the data returned, the auth requirement, and the usage context. An output schema is not present, but the description enumerates the fields returned (title, body, labels, state, URL), which gives the agent a good idea of the response shape. It doesn't mention any rate limits or error handling, but those are likely covered by the annotations and general platform knowledge. The only minor gap is no explicit statement about what happens if the issue doesn't exist, but that is typical and not required for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% – both parameters have descriptive text in the schema (repository pattern and allowed repos, issueNumber positive integer). The description doesn't add any parameter-level semantics beyond what the schema already explains. Baseline 3 is appropriate because the schema does the heavy lifting and the description adds no extra value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Read') and resource ('one GitHub issue') and enumerates the exact fields returned (title, body, labels, state, URL). It explicitly says 'do not use it for pull requests', which distinguishes it from the sibling tool github_get_pull_request. This provides clear, unambiguous purpose and differentiates it from the tool family.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives an explicit when-to-use guidance ('Use this to establish source requirements before triage') and a when-not-to-use exclusion ('do not use it for pull requests'). This is direct and leaves no ambiguity about selecting this tool over alternatives. Though it doesn't name the sibling explicitly, the exclusion is sufficient to route the agent correctly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
github_get_pull_requestARead-onlyIdempotent
Read current metadata for the pull request bound to a RepoPilot review run, including its immutable head SHA and change totals. Use before reviewing files or publishing a review. The run, repository, and pull request must match, and the call fails if the GitHub head changed.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Active pull-request review run UUID. | |
| pullNumber | Yes | Positive pull request number bound to the review run. | |
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and idempotentHint=true, so the safety profile is set. The description adds value by disclosing the failure condition ('call fails if the GitHub head changed') and specifying the content of the response (immutable head SHA and change totals). It also clarifies the binding requirement between run, repository, and pull request. No contradiction with annotations; it enriches them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences achieve everything: the first defines the action and key outputs, the second gives the usage context and a critical failure condition. It is front-loaded with the core purpose and contains zero filler. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only metadata GET with three parameters and no output schema, the description is fully sufficient. It explains what the tool does, when to call it, what it returns (head SHA and change totals), and the failure condition. There is no missing essential detail that an agent would need to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with each parameter (runId, repository, pullNumber) already documented with formats and constraints. The tool description reinforces the relationship ('bound to a RepoPilot review run') and the 'must match' requirement, which adds slight semantic context to runId and repository. However, it does not add syntax or usage nuance beyond the schema, so the baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with an explicit action ('Read current metadata') and a clearly defined resource ('the pull request bound to a RepoPilot review run'), and immediately names the key outputs (head SHA and change totals). This specific verb+resource pairing distinguishes it from siblings like github_get_pull_request_checks, which focuses on check runs, and github_list_pull_request_files, which lists files. An agent can tell them apart without opening schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives a concrete point-in-workflow instruction ('Use before reviewing files or publishing a review') and warns about preconditions (run/repo/PR must match, fails if head changed). However, it does not explicitly mention alternative tools or when *not* to use it. The siblings are functionally distinct, so the omission is minor, but explicit exclusions would push this to 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
github_get_pull_request_checksA
Read GitHub combined commit statuses and Actions check runs for a pull request, then append the result as ci_result evidence. Use during verification or read-only review after a PR exists. For review runs, the PR number and current head SHA must still match the run.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Run UUID that will receive the resulting CI evidence. | |
| pullNumber | Yes | Positive pull request number whose head checks should be read. | |
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate readOnlyHint=false, destructiveHint=false, and idempotentHint=false. The description adds valuable context by explicitly stating that it appends evidence (a write side-effect) and requires the PR number and head SHA to match for review runs. This goes beyond the annotation flags and explains real behavioral constraints. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no redundant words. It front-loads the primary action and side-effect, then gives usage context and a critical condition. Every sentence earns its place—concise without sacrificing essential guidance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 3 required parameters and no output schema, the description provides sufficient context: what it does, when to use it, and a key prerequisite. It doesn't cover error handling or response format, but these are not required when the action and constraints are clear. The detail about the head SHA matching is especially valuable for correctness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all three parameters are well-documented in the schema itself. The description does not add new parameter-level detail, but it does reinforce that pullNumber must correspond to a live PR ('the PR number and current head SHA must still match the run'). This aligns with the schema's exclusiveMinimum and maximum. Baseline 3 is appropriate given full schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Read GitHub combined commit statuses and Actions check runs for a pull request') and its side-effect ('then append the result as ci_result evidence'). This clearly identifies the tool's purpose and distinguishes it from siblings like github_get_pull_request (fetches PR metadata) and github_list_pull_request_files (lists changed files).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear usage context: 'Use during verification or read-only review after a PR exists.' It also includes a precondition: 'For review runs, the PR number and current head SHA must still match the run.' Though it doesn't explicitly name alternatives, the timing and conditions are unambiguous. A small deduction for not explicitly saying 'when not to use'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
github_list_pull_request_filesARead-onlyIdempotent
Read one 100-file page of changed-file metadata and GitHub-provided text patches for the pull request bound to a review run. Use consecutive page values until hasNextPage is false. The tool verifies the head SHA before and after reading and returns null patch values for binary or unavailable diffs.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | One-based result page from 1 through 30; each page contains at most 100 files. | |
| runId | Yes | Active pull-request review run UUID. | |
| pullNumber | Yes | Positive pull request number bound to the review run. | |
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, idempotent, non-destructive), the description reveals two behaviors: it verifies the head SHA before and after reading, and it returns null patch values for binary or unavailable diffs. These add meaningful context about reliability and edge cases, fully satisfying the transparency requirement given the existing annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences pack the core purpose, the pagination rule, the SHA verification, and the null-patch behavior with zero redundancy. The most important information (what the tool reads) is front-loaded, and every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a paginated read tool with no output schema, the description covers the key aspects: the content returned (metadata and patches), the pagination signal (hasNextPage), and a common edge case (binary/unavailable diffs). It does not spell out the exact response shape (e.g., field names like 'files' or 'hasNextPage'), but the essential information is present.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already fully documents all four parameters (100% coverage), so the baseline is 3. The description adds value by explaining the pagination loop (use consecutive page values) and that the page is tied to a review run, giving the page parameter practical usage context beyond its schema description. This lifts it to a 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Read'), a precise resource ('one 100-file page of changed-file metadata and GitHub-provided text patches'), and the binding condition ('bound to a review run'). This clearly distinguishes it from sibling tools like github_get_pull_request or github_get_pull_request_checks without naming them.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit pagination guidance ('Use consecutive page values until hasNextPage is false') and clarifies the review-run binding, which provides clear context for when to use this tool. However, it does not explicitly contrast itself with alternatives or state when not to use it, so it stops short of the full 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
github_merge_pull_requestADestructive
Squash-merge a GitHub pull request only after a human approved this exact merge for the same maintenance run. Do not call for pull-request review runs or without the matching approval ID and version. The approval is atomically consumed before the external merge, so it cannot authorize another action.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Maintenance run UUID that owns the approved action. | |
| approvalId | Yes | Approved and unconsumed RepoPilot approval UUID for merge_pull_request. | |
| pullNumber | Yes | Positive pull request number approved for merge. | |
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. | |
| commitTitle | No | Optional squash commit title; omit to use GitHub's default. | |
| approvalVersion | Yes | Exact optimistic-lock version of the approved action. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate destructiveHint=true and readOnlyHint=false, and the description adds valuable context beyond this: the approval is atomically consumed before the external merge, meaning it cannot authorize another action. This is a critical behavioral trait that an agent must know. However, the description could have elaborated on what happens if the merge fails (e.g., whether the approval is still consumed), leaving a minor gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with zero waste. It front-loads the most critical constraint (merge only after human approval) and then explains the consumption behavior. Every sentence contributes to safe and correct usage.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive tool with 6 parameters and no output schema, the description captures the essential preconditions (approval, run binding, not for review runs) and the atomic consumption. It does not describe the return value, but since no output schema exists, this is less critical. The sibling tool context (e.g., github_create_pull_request) clarifies the action's scope, and the description is sufficiently complete for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents each parameter's purpose. The description adds semantic value by emphasizing that approvalId and approvalVersion must correspond to a single human approval and that they are consumed, which reinforces the optimistic-lock semantics. This goes slightly beyond the schema descriptions but is not a full replacement for them.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'squash-merge' and the resource 'GitHub pull request', and specifies the critical precondition of human approval for the same maintenance run. It also differentiates from sibling tools like github_create_pull_request and github_get_pull_request by focusing on the merge action and its approval requirement.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use the tool ('only after a human approved this exact merge for the same maintenance run') and when not to ('Do not call for pull-request review runs or without the matching approval ID and version'). This provides clear, actionable guidance that distinguishes this tool from alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_append_evidenceA
Append one immutable, SHA-256 hash-chained evidence record to an existing RepoPilot run. Use after each material decision, tool result, Git reference, CI result, or error; never include credentials or raw secrets. This is append-only and repeated calls create distinct evidence records.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Existing RepoPilot run UUID that owns the evidence. | |
| stepId | No | Related Step UUID when the evidence was produced inside a Skill execution. | |
| payload | Yes | Structured, non-secret facts to hash and append; omit credentials, raw tokens, and unnecessary sensitive content. | |
| evidenceType | Yes | Evidence category. proof_publication and review_publication are reserved for their dedicated publication tools. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the four hints (readOnly=false, idempotent=false, etc.), and the description adds genuinely useful behavior beyond them: 'This is append-only and repeated calls create distinct evidence records' directly reinforces idempotentHint=false and clarifies the mutation semantics, while immutability and hash-chaining are disclosed nowhere else. This meaningfully augments the annotation profile without contradicting it.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with zero waste: purpose is front-loaded, usage and exclusions follow, and the append-only behavioral note closes it. Every sentence earns its place and no information is repeated from the schema or annotations.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 4-param (3 required) append tool with no output schema, the definition covers purpose, usage context, security exclusions, behavioral traits, and enum routing. The only absence is a statement about the return value, but for an append-only record tool the response is trivially a confirmation, so this is a minor omission rather than a functional gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all four parameters including payload's structure and the runId UUID pattern. The description contributes security guidance for payload ('never include credentials or raw secrets') and usage semantics for evidenceType, but the schema does the heavy lifting — baseline 3 is appropriate for a fully documented schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Append') and resource ('evidence record to an existing RepoPilot run'), and adds precise technical character (immutable, SHA-256 hash-chained). The enum note that proof_publication and review_publication are reserved for dedicated tools helps distinguish it from sibling publication tools, so an agent can pick it apart from alternatives without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use guidance ('Use after each material decision, tool result, Git reference, CI result, or error') and an exclusion ('never include credentials or raw secrets'). It signals that certain evidenceType values belong to other tools, but stops short of explicitly naming a sibling to use instead in those cases — a minor gap since the enum description already carries that routing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_finish_stepAIdempotent
Finish a running RepoPilot Step with an explicit terminal outcome and evidence-backed summary. Use only after the associated Skill has stopped; do not use it to update a Step that is still running. Repeating the same status and summary is idempotent, while a conflicting terminal result is rejected.
| Name | Required | Description | Default |
|---|---|---|---|
| status | Yes | Terminal outcome for the running Step; a conflicting second outcome is rejected. | |
| stepId | Yes | UUID returned by repopilot_start_step. | |
| summary | Yes | Evidence-backed completion summary without credentials or other secrets. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide idempotentHint=true and readOnlyHint=false, and the description aligns with these by stating idempotent repeats and rejection of conflicting results. It adds behavioral context beyond annotations: it clarifies the state machine (only after Skill stopped), and notes conflict rejection. This exceeds the baseline annotation-only coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is succinct and front-loaded with the main purpose, followed by usage constraints. Each sentence carries weight: purpose, conditionality, and idempotency/conflict behavior. It's not overly verbose, though it could slightly improve by mentioning the sibling alternatives for clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool is a terminal action with three parameters and no output schema, the description covers the key context: it's a mutation (readOnlyHint=false), it has idempotency behavior, and it has a post-Skill-stop condition. It doesn't need to explain return values, but something about response or success indication could be added, yet it's not critical for a tool with clear behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so descriptions already document all three parameters. The description adds context like 'evidence-backed summary' and 'without credentials', but this adds only moderate value beyond the schema. It doesn't explain the impact of 'blocked' or 'skipped' statuses, but the schema already defines them as enums.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it finishes a RepoPilot Step with a terminal outcome and summary, and it's connected to the Step lifecycle. However, it doesn't explicitly distinguish it from the sibling tools beyond this role; while it references the start and evidence append tools indirectly, it doesn't name them or differentiate beyond 'finish' vs others.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It provides explicit usage guidance: use only after the associated Skill has stopped, do not use for a running Step, and notes idempotency and rejection of conflicting terminal results. This is clear when-to-use and when-not-to-use guidance, though it doesn't name alternative tools for various scenarios, the guidance is sufficient for correct invocation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_publish_proof_commentAIdempotent
Build a redacted Proof Bundle from a terminal maintenance run, verify its evidence chain, and create or update the run-scoped managed GitHub PR comment. Use only for the PR recorded in that run's create_pull_request evidence. Repeating the call updates the same marked comment instead of posting duplicates.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Terminal maintenance run UUID whose verified evidence will be summarized. | |
| pullNumber | Yes | Pull request created by this run and recorded in its git_reference evidence. | |
| repository | Yes | Allowed GitHub repository in owner/name format. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare idempotentHint: true and destructiveHint: false. The description adds valuable behavioral context: it says the call both creates and updates a marked comment, and it explicitly spells out the idempotency effect ('Repeating the call updates the same marked comment instead of posting duplicates'). It also mentions verification of the evidence chain and redaction, which are not in annotations. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences front-load the core action (build, verify, create/update) and then add the critical usage constraint. No filler. Every word contributes to either purpose or condition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description doesn't need to explain return values. It covers the operation, the evidence chain, the idempotency behavior, and the usage restriction. It omits details like required permissions or the exact format of the comment, but those are not essential for invocation given the high schema coverage and annotations. A small gap is the lack of guidance on what to do if the PR wasn't created by this run, though the usage condition implies rejection.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the schema alone describes all three parameters. The description adds relational context by tying pullNumber to the run's create_pull_request evidence, clarifying that the caller must pass the PR created by that run. This goes beyond the schema's generic 'Pull request created by this run and recorded in its git_reference evidence.'
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb and resource: 'Build a redacted Proof Bundle... and create or update the run-scoped managed GitHub PR comment.' It distinguishes itself from siblings like repopilot_publish_review_comment and github_create_pull_request by specifically targeting the run-scoped proof comment, so an agent can tell which tool to use.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives an explicit condition: 'Use only for the PR recorded in that run's create_pull_request evidence.' This tells the agent when this tool is appropriate and implies it should not be used for other PRs. It also notes the idempotent behavior (updates instead of duplicates), but does not name alternative tools as directly as the highest calibration example.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_publish_review_commentAIdempotent
Create or update one managed GitHub review summary comment for the exact pull request head SHA bound to an active read-only review run. Call after reading all relevant diff pages and checks, while the Reviewer Step is running. This publishes findings but never approves, requests changes, modifies code, or merges.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Active pull-request review run UUID. | |
| headSha | Yes | Exact 40-character commit SHA reviewed; publication is rejected if the pull request head changed. | |
| summary | Yes | Short evidence-backed review conclusion for the exact head SHA. | |
| verdict | Yes | Overall result: pass, needs_attention, or blocked; this is not a GitHub approval decision. | |
| findings | Yes | Zero to 20 actionable findings; use an empty array when no defect is found. | |
| pullNumber | Yes | Pull request number bound to the review run. | |
| repository | Yes | Allowed GitHub repository in owner/name format. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
While annotations already provide idempotentHint=true and destructiveHint=false, the description adds meaningful behavioral context beyond that: it is a single managed comment tied to a specific head SHA, it only publishes findings, and it explicitly states it never approves, requests changes, modifies code, or merges. This goes beyond the binary annotation flags and helps the agent anticipate side effects. There is no contradiction with annotations (readOnlyHint=false correctly reflects the write operation).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with zero fluff. It front-loads the core action and scope, then provides usage timing and limitations in the same breath. Every sentence earns its place, and the structure is easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 7 required parameters, a detailed schema, and no output schema, the description covers everything an agent needs to decide when to call it and what to expect. It specifies prerequisites (after reading diffs/checks), operational context (active review run), and behavioral constraints. The description does not need to repeat schema details; it complements them perfectly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so all seven parameters have detailed descriptions. The description adds no additional parameter-specific meaning beyond what the schema already provides (e.g., headSha's SHA binding description matching the schema's note about rejection on head change). With full schema coverage, the baseline of 3 is appropriate; the description's value here is behavioral, not parameter-oriented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Create or update one managed GitHub review summary comment') with precise scope ('for the exact pull request head SHA bound to an active read-only review run'). It clearly differentiates from siblings by explicitly excluding approvals, change requests, code modification, and merging, and implies a specialized review-comment tool rather than generic GitHub comment/PR tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit when-to-use guidance: 'Call after reading all relevant diff pages and checks, while the Reviewer Step is running.' It also provides strong exclusions ('never approves, requests changes, modifies code, or merges') that help an agent route to the correct sibling (e.g., github_merge_pull_request for merges, github_create_pull_request for PR creation). No alternative is named, but the conditions are clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_request_approvalA
Create a human approval request for one high-risk action on a maintenance run. Use before merge, branch deletion, rollback, permission changes, secret changes, or another explicitly gated action. This records the request and may pause the run, but it never executes the requested action.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Maintenance run UUID requesting the high-risk action. | |
| action | Yes | Exact gated action. Creating this approval never executes the action. | |
| details | Yes | Non-secret action context needed by a human reviewer, such as repository, target object, and immutable revision. | |
| riskLevel | Yes | Operator-visible risk classification for the requested action. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint=false, destructiveHint=false), the description discloses that the tool 'records the request and may pause the run, but it never executes the requested action.' This adds critical behavioral context about side effects and limitations, which annotations do not convey. It also states the constraint of one action per request.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences with high information density. The purpose is front-loaded, followed by usage scenarios and a key behavioral clarification. No redundant or verbose wording.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 4 required parameters, two enums, and a nested object, the description covers purpose, usage, and side effects. The schema covers parameter details. No output schema exists, so return values are not expected. The description is sufficient for an agent to select and correctly invoke the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema provides 100% coverage for all parameters, including descriptions for runId, action, details, and riskLevel. The description adds no additional parameter-specific meaning beyond what the schema already documents. Per the rubric, with high schema coverage the baseline is 3, and there is no extra semantic value added.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Create'), resource ('a human approval request'), and scope ('one high-risk action on a maintenance run'). It distinguishes from execution tools by explicitly stating 'it never executes the requested action', making it clear this is a request-creation tool, not an action executor like github_merge_pull_request.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit use cases: 'Use before merge, branch deletion, rollback, permission changes, secret changes, or another explicitly gated action.' It also implies non-usage for execution, and notes the side effect of possibly pausing the run. This is strong guidance for an agent to know when to invoke this tool versus alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_search_runbooksARead-onlyIdempotent
Search verified historical RepoPilot runbooks for a target repository using failure symptoms or repair terms. Call during triage before selecting a repair strategy; do not use it as proof that a current defect is identical. Returns ranked stored runbooks and does not modify repository or run state.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum results to return, from 1 through 20; defaults to 5. | |
| query | Yes | Failure symptoms, component names, or repair terms to match against verified runbooks. | |
| repository | Yes | Target GitHub repository in owner/name format. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint. The description adds 'ranked' output and 'verified historical' scope, which are not in annotations. The statement 'does not modify repository or run state' is redundant with annotations but harmless.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no waste. The first sentence front-loads the primary action and resource; the second provides usage timing and a crucial caution. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a search tool with no output schema, the description sufficiently explains return value ('ranked stored runbooks'), its non-mutating nature, and when to use it. An agent has enough to call correctly without ambiguity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all parameters are already documented in the schema. The description mentions 'failure symptoms or repair terms' which aligns with the query parameter but adds no new information beyond the schema. Baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states the verb 'Search' with a specific resource 'verified historical RepoPilot runbooks' and a target repository, using failure symptoms or repair terms. It clearly differentiates from sibling tools, as none of the other repopilot tools are search-focused.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to call: 'during triage before selecting a repair strategy' and provides a negative constraint: 'do not use it as proof that a current defect is identical.' This gives clear context for selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_start_stepAIdempotent
Start one durable Agent Skill execution Step for an existing RepoPilot run. Call this immediately before executing the named Skill, then pass the returned Step ID to repopilot_finish_step. Reusing the same idempotency key within a run returns the existing Step instead of creating a duplicate.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Existing RepoPilot run UUID that owns this Agent Skill execution. | |
| agentName | Yes | RepoPilot Agent identity assigned to the Skill; the Agent-to-Skill pairing is validated. | |
| skillName | Yes | Versioned RepoPilot Skill to execute within the run. | |
| idempotencyKey | Yes | Stable caller-generated key scoped to the run and logical attempt; retry with the same key to receive the existing Step. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare idempotentHint=true, readOnlyHint=false, and destructiveHint=false. The description adds value by explaining that reusing the idempotency key returns the existing Step instead of creating a duplicate, and notes the durable nature of the step. This goes beyond the annotations without contradicting them, providing context on side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three concise sentences, front-loaded with the primary purpose, then usage context, then idempotency detail. No superfluous words; every sentence earns its place. Well-structured for quick comprehension.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 4 required parameters, two enums, and no output schema, the description covers the core workflow, idempotency, and return usage. It doesn't specify error conditions or prerequisites like runId validity, but these are implicit in the domain. The lack of an output schema is mitigated by the explicit mention of returning a Step ID. Adequately complete for an agent to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds meaning by explaining the idempotencyKey's role (reusing it returns the existing Step) and implicitly that the tool returns a Step ID used by repopilot_finish_step. This enriches parameter understanding beyond schema descriptions, justifying a score above baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool starts a durable Agent Skill execution Step for an existing RepoPilot run, with a specific verb and resource. It also explains the immediate usage context by saying to call it before executing the named Skill and pass the returned Step ID to repopilot_finish_step, distinguishing it from the finish step sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit when-to-use guidance: call immediately before executing the named Skill, and clarifies idempotency behavior for retries. It doesn't explicitly mention alternatives or when not to use it, but the workflow context and mention of the finish step make usage clear. Doesn't exclude other tools but the step-start role is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_write_runbookA
Archive a verified maintenance outcome as a reusable repository runbook. Call only after independent verification for the source run; do not archive an unverified hypothesis or a pull-request review run. This inserts a new runbook and appends runbook evidence.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | Short problem-and-resolution title used in future retrieval results. | |
| content | Yes | Reusable runbook body with symptoms, diagnosis, repair, verification, and relevant limitations; exclude secrets. | |
| summary | Yes | Concise verified outcome, including the root cause and effective repair. | |
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. | |
| sourceRunId | Yes | Verified maintenance run UUID that produced this runbook. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag readOnlyHint=false and destructiveHint=false, so the description does not need to repeat that. It adds meaningful behavioral context by specifying 'This inserts a new runbook and appends runbook evidence,' which clarifies the side effect beyond the schema. It does not contradict annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with zero redundancy. The primary purpose and most critical constraint (verification requirement) are front-loaded, and the operational effect is stated efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a write operation with all parameters already documented in the schema, the description provides the essential precondition (verification) and the effect (insert + append evidence). It does not explain what 'runbook evidence' means or what the response looks like, but these are not strictly required for the agent to call the tool correctly, given no output schema and the operation's simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, meaning every parameter is fully documented in the schema. The description itself provides no additional parameter-level meaning, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Archive') and resource ('a verified maintenance outcome as a reusable repository runbook'). It clearly differentiates from siblings by explicitly excluding unverified hypotheses and pull-request review runs, making the tool's unique role evident.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states when to use ('only after independent verification for the source run') and when not to ('do not archive an unverified hypothesis or a pull-request review run'). However, it does not name alternative tools for those cases (e.g., repopilot_append_evidence or repopilot_request_approval), so it lacks explicit alternative names.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
TDQS
Each tool has a clearly distinct purpose with detailed descriptions. The two publish comment tools are distinguished by run type (proof vs review), and the start/finish step pair is unambiguous. GitHub tools cover specific resource actions with no overlap.
Tools follow a consistent prefix-verb-noun pattern (repopilot_ and github_ prefixes). Minor inconsistency: get vs list for PR checks vs files, but overall convention is predictable and readable.
14 tools is within the ideal 3-15 range and well-scoped for maintenance automation integrating RepoPilot orchestration and GitHub operations. Each tool fills a specific role without redundancy.
Core lifecycles are covered: step start/finish, evidence chain, approval, runbook search/write, and GitHub PR review/merge flow. Minor gaps exist (no explicit step abort, no runbook listing or evidence query), but agents can complete primary workflows without dead ends.
Maintenance
Related MCP Connectors
Control plane for autonomous software labor. Agents claim objectives over MCP with audit trail.
MCP-native AI SRE: ask what's broken in production, get a reviewed GitHub fix PR.
AI-native git hosting — repos, PRs, issues, CI gates, and AI code review over MCP (60 tools).
A Model Context Protocol (MCP) application for automated GitHub PR analysis and issue management.…
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceAn MCP server that diagnoses GitHub Actions workflow failures and automatically creates repair pull requests using LLM-generated unified diffs. It includes a governance layer to orchestrate autonomous fixes or human-reviewed repairs based on risk assessment thresholds.
- FlicenseNot gradedqualityDmaintenanceMCP server for automated GitHub repository quality management, enabling review, README generation, cleanup, and monitoring.
- AlicenseAqualityBmaintenanceAn MCP server that provides operational tooling over the GitHub API — issue triage, PR review monitoring, repo health audits, and team access reviews.111MIT
- AlicenseCqualityBmaintenanceA policy-aware MCP server for GitHub and GitHub Actions that enables safe AI-assisted infrastructure workflows—inspecting repositories, preparing branches and pull requests, and constrained remote mutations behind explicit preview-bound approval tokens.18MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/wellkilo/RepoPilot'
If you have feedback or need assistance with the MCP directory API, please join our Discord server