RepoPilot
RepoPilot 建立在 AgentTeams
v1.2.2之上,专注于安全、可审计的仓库维护自动化。默认策略为pull_request_only: Agent 可以创建分支、提交和 Pull Request,但不能自动合并、删除分支、修改权限或密钥。
两条自动化闭环
PR 审查链路监听 opened、reopened、synchronize 与
ready_for_review。每次发布前都会重新核对当前 head SHA;如果审查期间出现新提交,
旧 Run 会被拒绝发布。评论带固定的 <!-- repopilot-review --> 标记,因此同一 PR
只维护一条 RepoPilot 评论,不会重复刷屏。
Related MCP server: gts-repo-guardian
使用过程演示
在线 Demo 无需模型服务或管理员账号。默认回放
repopilot-testbed#3的真实交付:失败基线稳定复现并发竞态,RepoPilot 通过Types + Store + Processor + Tests + Docs五文件补丁修复,GitHub Actions 通过后创建PR #4。 PR 保持开放,合并权仍由人类持有。
<!-- repopilot-review -->
## RepoPilot PR Review
**Verdict:** NEEDS ATTENTION
**Reviewed revision:** `b504cec7c05cd2f3b84ee9c6ad7a3d3db6eead5c`
### Findings
| Severity | Finding | Location |
| -------- | -------------------------------------- | --------------------------------- |
| HIGH | 发布前没有重新校验当前 head SHA | `src/reviews/publisher.ts:19` |
| MEDIUM | 固定只扫描前 100 条评论 | `src/reviews/github-client.ts:43` |
| HIGH | GitHub 写入失败仍记录“已发布” Evidence | `src/reviews/publisher.ts:31` |以下结果来自公开的 PR #5 包含 5 个文件、373 行新增,GitHub Actions CI 已通过; RepoPilot 仍从真实 Diff 中发现 2 条 HIGH 与 1 条 MEDIUM 语义问题,并发布了 公开 Review Comment。 评论由 repopilot-reviewer 使用 pull-request-review Skill 生成,并通过 repopilot_publish_review_comment 发布。工具会校验 Run、仓库、 PR 编号、运行中的 Reviewer Step 和不可变 head SHA,成功后追加 review_publication Evidence。可下载 脱敏 Run Proof JSON 核验 Run ID、Step、8 条 Evidence 与链头哈希。
维护闭环
GitHub Issue / Failed CI
│
▼
Repo Lead 分诊与拆解
│
▼
Locator 根因定位 ──► Fixer 最小修复 ──► Verifier 独立验证
│
人工审批 ◄── 高风险门禁 ◄─────┤
│
▼
Archivist 沉淀 Runbook
GitHub Pull Request
│
▼
Reviewer 固化 head SHA ──► 分页读取 Diff / Checks ──► 更新托管 Review Comment每个关键阶段都会把决策、工具调用、Git 引用、CI 结果和审批事件写入 PostgreSQL 追加式 SHA-256 证据链,并通过 OpenTelemetry Trace 与证据控制台支持回放。
Proof-Carrying Pull Request
RepoPilot 不把“自动生成 PR”作为终点,而是让每个 PR 携带一份机器可核验的 Proof Bundle:
Run 身份 + AgentTeams Step 时间线 + Skill 版本
+ 工具与决策 Evidence + Git / CI 引用
+ 审批历史 + SHA-256 链根 + 确定性质量门禁curl http://127.0.0.1:3000/api/v1/runs/<run-id>/proof \
--output artifacts/proof-bundle.json
pnpm build
pnpm evaluate artifacts/proof-bundle.json artifacts/evaluation-report.jsonProof Score 衡量证明完整性,不把控制面测试冒充模型修复质量;补丁正确性仍由公开 测试床、独立 Verifier 与 GitHub Checks 判定。
完成 Runbook 归档后,Archivist 调用 repopilot_publish_proof_comment,将脱敏后的
完整性结果、Agent/Skill 执行结果和 SHA-256 链根幂等发布到对应 PR。重复执行会更新
同一条评论,因此 Proof 真正随 PR 交付,而不是只存在于控制面 API。
为什么是 RepoPilot
AgentTeam
Agent Identity 完整定义位于
deploy/agentteams/repopilot-team.yaml,
Skill 契约位于 skills/。
核心能力
MCP Registry
RepoPilot 为 MCP Registry 的静态检查与托管发布提供可复现入口:
检查项 | 仓库中的可验证实现 |
许可证 | 根目录包含标准 Apache License 2.0 全文 |
所有权 |
|
可构建性 |
|
工具定义 | 15 个工具均提供调用边界、参数语义和标准 MCP 安全注解 |
防回退 | 发布验证从独立运行包执行 |
MCP 工具发现不需要模型或 GitHub 凭证;只有数据库或 GitHub 读写工具在调用时依赖对应
运行时服务与 Secret。完整部署契约见 docs/deployment.md。
系统架构
flowchart LR
GH[GitHub Issue / Failed CI / Pull Request] --> CP[RepoPilot Control Plane]
CP --> DB[(PostgreSQL + pgvector)]
CP --> MX[Matrix Admin → Manager DM]
MX --> M[AgentTeams Manager]
M --> TL[Repo Lead]
TL --> L[Locator]
TL --> F[Fixer]
TL --> V[Verifier]
TL --> A[Archivist]
M --> R[Reviewer]
L & F & V & A --> MCP[RepoPilot MCP via Higress]
R --> MCP
MCP --> GHAPI[GitHub REST API]
MCP --> DB
DB --> UI[Evidence Console]
CP --> OTEL[OTLP / AgentLoop / LoongSuite]更多设计细节见 docs/architecture.md。
工程结构
RepoPilot/
├── apps/
│ ├── control-plane/ # Fastify REST / Webhook / MCP / 审批 / 证据账本
│ └── console/ # 飞行记录器风格 React 证据控制台
├── packages/contracts/ # Zod Schema、共享类型和显式状态机
├── deploy/agentteams/ # AgentTeams v1.2.2 Worker / Team 清单
├── skills/ # 6 个可复用 RepoPilot Skills
├── evaluation/ # Proof Bundle 协议与可靠性 Benchmark
├── scripts/ # Skill 校验、可靠性基线与离线评测
├── docs/ # 架构、安全、部署和 Demo 文档
├── CONTRIBUTING.md # 开发流程、质量门禁与贡献规范
├── Dockerfile # Streamable HTTP Control Plane 生产容器
├── glama.json # Glama MCP Registry 维护者声明
├── API.md # REST / Webhook / MCP 出入参
├── Method.md # 外部 SDK、HTTP Method 与调用契约
└── docker-compose.yml # PostgreSQL 16 + pgvector快速开始
环境要求
Node.js
20+pnpm
9+Docker Desktop / Docker Engine
模型凭证不是构建、测试或本地控制面运行的前置条件。
git clone https://github.com/wellkilo/RepoPilot.git
cd RepoPilot
cp .env.example .env
docker compose up -d postgres
pnpm install --registry=https://registry.npmjs.org
pnpm build
pnpm --filter @repopilot/control-plane start访问控制台:
http://127.0.0.1:3000也可以使用一键初始化:
./init.sh生产容器
根目录 Dockerfile 会构建 Console、共享契约与 Control Plane,并以非 root 用户启动
同一个生产进程:
docker build -t repopilot:local .
docker run --rm -p 3000:3000 \
-e DATABASE_URL=postgres://repopilot:repopilot@host.docker.internal:5432/repopilot \
-e GITHUB_ALLOWED_REPOSITORIES=wellkilo/repopilot-testbed \
repopilot:localMCP 客户端连接 http://127.0.0.1:3000/mcp。需要读取或写入 GitHub 时,再通过运行时
Secret 注入 GITHUB_TOKEN;镜像内不包含凭证。
stdio MCP
Registry 或本地 MCP 客户端需要 stdio 时,先生成独立运行包,再启动根入口:
pnpm glama:build
pnpm glama:verify
node mcp-server.mjsglama:verify 会在不提供数据库或 GitHub 凭证的环境中完成真实 MCP 初始化并校验
15 个工具。工具发现不连接外部服务;实际执行数据或 GitHub 操作时仍必须提供真实服务
与凭证。
创建首个 Run
curl -X POST http://127.0.0.1:3000/api/v1/runs \
-H 'Content-Type: application/json' \
-d '{
"source": {
"type": "github_issue",
"repository": "wellkilo/repopilot-testbed",
"issueNumber": 1
},
"executionPolicy": "pull_request_only"
}'需要读取 GitHub Issue 时,在本机 .env 配置 GITHUB_TOKEN。如果没有配置
AgentTeams Matrix,Run 会停在 awaiting_dispatch,不会用 Mock Agent 伪造执行结果。
绑定仓库 Webhook 的 Pull requests 事件后,非 Draft PR 的创建、重新打开、推送新
提交或转为 Ready for review 都会触发独立审查 Run。Reviewer 读取 PR、分页 diff 和
Checks,并幂等创建或更新一条 RepoPilot PR Review 评论;若 PR 在审查期间产生新
提交,旧 Run 会因 head SHA 不一致而拒绝发布。
AgentTeams 真实协作
真实 Agent 推理需要一个 OpenAI 兼容模型端点,可以使用:
阿里云百炼等托管服务;
其他 OpenAI 兼容 API;
本地 Ollama 等兼容端点。
模型密钥只交给 AgentTeams/Higress,不进入 RepoPilot 源码、数据库或部署清单。
部署说明:
可复现测试床
测试床包含一个确定性并发缺陷:相同 GitHub delivery 的两个请求可同时穿透
find / save 窗口,创建两个 task 并执行两次 dispatch。RepoPilot 将
create-or-reuse 收口到 DeliveryTaskStore.getOrCreate,使相同 delivery
共享一个 in-flight Promise,并补充顺序重试和不同 delivery 的负对照。
PR 保持开放,便于审查且未触发自动合并。
PR Review Demo 使用独立的公开
PR #5:代码可编译、5 项测试与
GitHub Actions 均通过,但 Reviewer 没有把绿色 CI 等同于代码正确。它逐页读取 5 个变更文件,
在固定 revision b504cec 上识别 stale SHA、评论分页和失败 Evidence 三个语义缺陷,
并通过真实 GitHub REST 发布同一条托管评论。该 Run 的 review_publication 记录与 8 条
哈希链 Evidence 已脱敏导出到
docs/assets/demo/pr-review-run.json。
验证
pnpm typecheck
pnpm benchmark:reliability
pnpm skills:validate
pnpm lint
pnpm format:check
pnpm build当前控制面可靠性基线为 52/52。测试覆盖状态机、Webhook 验签、证据哈希、数据库
不可变触发器、delivery 并发幂等、审批版本与一次性消费、Agent Skill Step 生命周期、
Proof Bundle 完整性校验、PR Review 来源与 stale SHA 防护、HTTP 冲突语义及控制台标签。
CI 生成结构化 JSON 报告。
安全边界
详细威胁模型与生产加固项见 docs/security.md。
文档导航
文档 | 内容 |
REST、Webhook 和 MCP Schema | |
AgentTeams、Matrix、GitHub、PostgreSQL 和 OTel 方法契约 | |
架构、状态机和部署剖面 | |
权限、审批、凭证和 evidence 完整性 | |
本地、AgentTeams、Webhook 和可观测部署 | |
公开复现流程、运行证据与失败分支 | |
可靠性分层、Proof Bundle 和 Benchmark | |
工程路线图与待完善能力 | |
开发环境、质量门禁和贡献流程 |
当前边界
未配置模型服务时,不能完成真实 AgentTeams 推理;构建、测试、控制面和测试床不受影响。
Runbook 默认使用 PostgreSQL 全文检索;
vector(1536)已为语义召回预留。AgentLoop Recall 是可选能力,没有凭证时自动降级到本地 Runbook。
控制台审批身份当前通过受信反向代理 Header 演示;生产环境必须接入 OIDC/SSO。
Available Tools
14 toolsgithub_create_pull_requestA
Create a GitHub pull request from an existing repair branch for a maintenance run. Use only after the patch and focused verification are complete; this is the highest automatic repository write allowed by pull_request_only. It creates an external PR and appends a git_reference evidence record, but never merges it.
| Name | Required | Description | Default |
|---|---|---|---|
| base | Yes | Target branch that should receive the pull request. | |
| body | Yes | Pull request description with root cause, changes, tests, and known limitations. | |
| head | Yes | Existing source branch containing the repair commits. | |
| runId | Yes | Maintenance run UUID that produced the repair branch. | |
| title | Yes | Concise pull request title describing the verified repair. | |
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false (write) and destructiveHint=false (non-destructive), so the description's job is to add context. It does: it mentions creating an 'external PR,' appending a 'git_reference evidence record,' and reassuring 'never merges it.' This adds useful behavioral details beyond the annotations without contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with zero redundancy. The main action is front-loaded, the usage condition is placed early, and the side-effect clarification (never merges) is concise. Every sentence earns its place, making it easy to parse for an agent.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a write tool with 6 required parameters and no output schema, the description covers the essential context: when to use, permission constraints, and post-conditions (creates PR, appends evidence). It omits a return format, but without an output schema that is not strictly required. Preconditions like allowed repositories are handled in the schema. Overall, it is sufficient for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds marginal context by linking 'repair branch' to the head parameter and 'maintenance run' to runId, but these are already implied by the schema descriptions. No significant additional semantic value is provided beyond what the schema offers.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific verb and resource: 'Create a GitHub pull request from an existing repair branch.' It also distinguishes itself from the sibling merge tool by explicitly saying 'never merges it,' making its role unambiguous in the toolset.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a clear when-to-use condition ('Use only after the patch and focused verification are complete') and sets expectations about the permission level ('highest automatic repository write allowed by pull_request_only'). It implicitly excludes merging by stating 'never merges it,' but it does not explicitly name the merge alternative as a separate tool, leaving a small gap in exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
github_get_issueARead-onlyIdempotent
Read the current title, body, labels, state, and URL of one GitHub issue in an allowed repository. Use this to establish source requirements before triage; do not use it for pull requests. This performs a read-only GitHub API request and requires GITHUB_TOKEN.
| Name | Required | Description | Default |
|---|---|---|---|
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. | |
| issueNumber | Yes | Positive GitHub issue number. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, covering the safety profile. The description adds the authentication requirement ('requires GITHUB_TOKEN') and reiterates 'read-only GitHub API request', which reinforces the read-only nature but doesn't contradict annotations. The token requirement is useful context beyond what annotations provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is exactly two sentences with zero filler. The first sentence front-loads the concrete read action and fields, the second gives usage guidance and exclusions. Every word earns its place, and the most important operational detail (what it reads) is immediately clear.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simple nature, the description is largely complete: it specifies the data returned, the auth requirement, and the usage context. An output schema is not present, but the description enumerates the fields returned (title, body, labels, state, URL), which gives the agent a good idea of the response shape. It doesn't mention any rate limits or error handling, but those are likely covered by the annotations and general platform knowledge. The only minor gap is no explicit statement about what happens if the issue doesn't exist, but that is typical and not required for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% – both parameters have descriptive text in the schema (repository pattern and allowed repos, issueNumber positive integer). The description doesn't add any parameter-level semantics beyond what the schema already explains. Baseline 3 is appropriate because the schema does the heavy lifting and the description adds no extra value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Read') and resource ('one GitHub issue') and enumerates the exact fields returned (title, body, labels, state, URL). It explicitly says 'do not use it for pull requests', which distinguishes it from the sibling tool github_get_pull_request. This provides clear, unambiguous purpose and differentiates it from the tool family.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives an explicit when-to-use guidance ('Use this to establish source requirements before triage') and a when-not-to-use exclusion ('do not use it for pull requests'). This is direct and leaves no ambiguity about selecting this tool over alternatives. Though it doesn't name the sibling explicitly, the exclusion is sufficient to route the agent correctly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
github_get_pull_requestARead-onlyIdempotent
Read current metadata for the pull request bound to a RepoPilot review run, including its immutable head SHA and change totals. Use before reviewing files or publishing a review. The run, repository, and pull request must match, and the call fails if the GitHub head changed.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Active pull-request review run UUID. | |
| pullNumber | Yes | Positive pull request number bound to the review run. | |
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and idempotentHint=true, so the safety profile is set. The description adds value by disclosing the failure condition ('call fails if the GitHub head changed') and specifying the content of the response (immutable head SHA and change totals). It also clarifies the binding requirement between run, repository, and pull request. No contradiction with annotations; it enriches them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences achieve everything: the first defines the action and key outputs, the second gives the usage context and a critical failure condition. It is front-loaded with the core purpose and contains zero filler. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only metadata GET with three parameters and no output schema, the description is fully sufficient. It explains what the tool does, when to call it, what it returns (head SHA and change totals), and the failure condition. There is no missing essential detail that an agent would need to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with each parameter (runId, repository, pullNumber) already documented with formats and constraints. The tool description reinforces the relationship ('bound to a RepoPilot review run') and the 'must match' requirement, which adds slight semantic context to runId and repository. However, it does not add syntax or usage nuance beyond the schema, so the baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with an explicit action ('Read current metadata') and a clearly defined resource ('the pull request bound to a RepoPilot review run'), and immediately names the key outputs (head SHA and change totals). This specific verb+resource pairing distinguishes it from siblings like github_get_pull_request_checks, which focuses on check runs, and github_list_pull_request_files, which lists files. An agent can tell them apart without opening schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives a concrete point-in-workflow instruction ('Use before reviewing files or publishing a review') and warns about preconditions (run/repo/PR must match, fails if head changed). However, it does not explicitly mention alternative tools or when *not* to use it. The siblings are functionally distinct, so the omission is minor, but explicit exclusions would push this to 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
github_get_pull_request_checksA
Read GitHub combined commit statuses and Actions check runs for a pull request, then append the result as ci_result evidence. Use during verification or read-only review after a PR exists. For review runs, the PR number and current head SHA must still match the run.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Run UUID that will receive the resulting CI evidence. | |
| pullNumber | Yes | Positive pull request number whose head checks should be read. | |
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate readOnlyHint=false, destructiveHint=false, and idempotentHint=false. The description adds valuable context by explicitly stating that it appends evidence (a write side-effect) and requires the PR number and head SHA to match for review runs. This goes beyond the annotation flags and explains real behavioral constraints. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no redundant words. It front-loads the primary action and side-effect, then gives usage context and a critical condition. Every sentence earns its place—concise without sacrificing essential guidance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 3 required parameters and no output schema, the description provides sufficient context: what it does, when to use it, and a key prerequisite. It doesn't cover error handling or response format, but these are not required when the action and constraints are clear. The detail about the head SHA matching is especially valuable for correctness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all three parameters are well-documented in the schema itself. The description does not add new parameter-level detail, but it does reinforce that pullNumber must correspond to a live PR ('the PR number and current head SHA must still match the run'). This aligns with the schema's exclusiveMinimum and maximum. Baseline 3 is appropriate given full schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Read GitHub combined commit statuses and Actions check runs for a pull request') and its side-effect ('then append the result as ci_result evidence'). This clearly identifies the tool's purpose and distinguishes it from siblings like github_get_pull_request (fetches PR metadata) and github_list_pull_request_files (lists changed files).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear usage context: 'Use during verification or read-only review after a PR exists.' It also includes a precondition: 'For review runs, the PR number and current head SHA must still match the run.' Though it doesn't explicitly name alternatives, the timing and conditions are unambiguous. A small deduction for not explicitly saying 'when not to use'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
github_list_pull_request_filesARead-onlyIdempotent
Read one 100-file page of changed-file metadata and GitHub-provided text patches for the pull request bound to a review run. Use consecutive page values until hasNextPage is false. The tool verifies the head SHA before and after reading and returns null patch values for binary or unavailable diffs.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | One-based result page from 1 through 30; each page contains at most 100 files. | |
| runId | Yes | Active pull-request review run UUID. | |
| pullNumber | Yes | Positive pull request number bound to the review run. | |
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, idempotent, non-destructive), the description reveals two behaviors: it verifies the head SHA before and after reading, and it returns null patch values for binary or unavailable diffs. These add meaningful context about reliability and edge cases, fully satisfying the transparency requirement given the existing annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences pack the core purpose, the pagination rule, the SHA verification, and the null-patch behavior with zero redundancy. The most important information (what the tool reads) is front-loaded, and every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a paginated read tool with no output schema, the description covers the key aspects: the content returned (metadata and patches), the pagination signal (hasNextPage), and a common edge case (binary/unavailable diffs). It does not spell out the exact response shape (e.g., field names like 'files' or 'hasNextPage'), but the essential information is present.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already fully documents all four parameters (100% coverage), so the baseline is 3. The description adds value by explaining the pagination loop (use consecutive page values) and that the page is tied to a review run, giving the page parameter practical usage context beyond its schema description. This lifts it to a 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Read'), a precise resource ('one 100-file page of changed-file metadata and GitHub-provided text patches'), and the binding condition ('bound to a review run'). This clearly distinguishes it from sibling tools like github_get_pull_request or github_get_pull_request_checks without naming them.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit pagination guidance ('Use consecutive page values until hasNextPage is false') and clarifies the review-run binding, which provides clear context for when to use this tool. However, it does not explicitly contrast itself with alternatives or state when not to use it, so it stops short of the full 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
github_merge_pull_requestADestructive
Squash-merge a GitHub pull request only after a human approved this exact merge for the same maintenance run. Do not call for pull-request review runs or without the matching approval ID and version. The approval is atomically consumed before the external merge, so it cannot authorize another action.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Maintenance run UUID that owns the approved action. | |
| approvalId | Yes | Approved and unconsumed RepoPilot approval UUID for merge_pull_request. | |
| pullNumber | Yes | Positive pull request number approved for merge. | |
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. | |
| commitTitle | No | Optional squash commit title; omit to use GitHub's default. | |
| approvalVersion | Yes | Exact optimistic-lock version of the approved action. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate destructiveHint=true and readOnlyHint=false, and the description adds valuable context beyond this: the approval is atomically consumed before the external merge, meaning it cannot authorize another action. This is a critical behavioral trait that an agent must know. However, the description could have elaborated on what happens if the merge fails (e.g., whether the approval is still consumed), leaving a minor gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with zero waste. It front-loads the most critical constraint (merge only after human approval) and then explains the consumption behavior. Every sentence contributes to safe and correct usage.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive tool with 6 parameters and no output schema, the description captures the essential preconditions (approval, run binding, not for review runs) and the atomic consumption. It does not describe the return value, but since no output schema exists, this is less critical. The sibling tool context (e.g., github_create_pull_request) clarifies the action's scope, and the description is sufficiently complete for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents each parameter's purpose. The description adds semantic value by emphasizing that approvalId and approvalVersion must correspond to a single human approval and that they are consumed, which reinforces the optimistic-lock semantics. This goes slightly beyond the schema descriptions but is not a full replacement for them.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'squash-merge' and the resource 'GitHub pull request', and specifies the critical precondition of human approval for the same maintenance run. It also differentiates from sibling tools like github_create_pull_request and github_get_pull_request by focusing on the merge action and its approval requirement.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use the tool ('only after a human approved this exact merge for the same maintenance run') and when not to ('Do not call for pull-request review runs or without the matching approval ID and version'). This provides clear, actionable guidance that distinguishes this tool from alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_append_evidenceA
Append one immutable, SHA-256 hash-chained evidence record to an existing RepoPilot run. Use after each material decision, tool result, Git reference, CI result, or error; never include credentials or raw secrets. This is append-only and repeated calls create distinct evidence records.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Existing RepoPilot run UUID that owns the evidence. | |
| stepId | No | Related Step UUID when the evidence was produced inside a Skill execution. | |
| payload | Yes | Structured, non-secret facts to hash and append; omit credentials, raw tokens, and unnecessary sensitive content. | |
| evidenceType | Yes | Evidence category. proof_publication and review_publication are reserved for their dedicated publication tools. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the four hints (readOnly=false, idempotent=false, etc.), and the description adds genuinely useful behavior beyond them: 'This is append-only and repeated calls create distinct evidence records' directly reinforces idempotentHint=false and clarifies the mutation semantics, while immutability and hash-chaining are disclosed nowhere else. This meaningfully augments the annotation profile without contradicting it.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with zero waste: purpose is front-loaded, usage and exclusions follow, and the append-only behavioral note closes it. Every sentence earns its place and no information is repeated from the schema or annotations.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 4-param (3 required) append tool with no output schema, the definition covers purpose, usage context, security exclusions, behavioral traits, and enum routing. The only absence is a statement about the return value, but for an append-only record tool the response is trivially a confirmation, so this is a minor omission rather than a functional gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all four parameters including payload's structure and the runId UUID pattern. The description contributes security guidance for payload ('never include credentials or raw secrets') and usage semantics for evidenceType, but the schema does the heavy lifting — baseline 3 is appropriate for a fully documented schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Append') and resource ('evidence record to an existing RepoPilot run'), and adds precise technical character (immutable, SHA-256 hash-chained). The enum note that proof_publication and review_publication are reserved for dedicated tools helps distinguish it from sibling publication tools, so an agent can pick it apart from alternatives without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use guidance ('Use after each material decision, tool result, Git reference, CI result, or error') and an exclusion ('never include credentials or raw secrets'). It signals that certain evidenceType values belong to other tools, but stops short of explicitly naming a sibling to use instead in those cases — a minor gap since the enum description already carries that routing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_finish_stepAIdempotent
Finish a running RepoPilot Step with an explicit terminal outcome and evidence-backed summary. Use only after the associated Skill has stopped; do not use it to update a Step that is still running. Repeating the same status and summary is idempotent, while a conflicting terminal result is rejected.
| Name | Required | Description | Default |
|---|---|---|---|
| status | Yes | Terminal outcome for the running Step; a conflicting second outcome is rejected. | |
| stepId | Yes | UUID returned by repopilot_start_step. | |
| summary | Yes | Evidence-backed completion summary without credentials or other secrets. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide idempotentHint=true and readOnlyHint=false, and the description aligns with these by stating idempotent repeats and rejection of conflicting results. It adds behavioral context beyond annotations: it clarifies the state machine (only after Skill stopped), and notes conflict rejection. This exceeds the baseline annotation-only coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is succinct and front-loaded with the main purpose, followed by usage constraints. Each sentence carries weight: purpose, conditionality, and idempotency/conflict behavior. It's not overly verbose, though it could slightly improve by mentioning the sibling alternatives for clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool is a terminal action with three parameters and no output schema, the description covers the key context: it's a mutation (readOnlyHint=false), it has idempotency behavior, and it has a post-Skill-stop condition. It doesn't need to explain return values, but something about response or success indication could be added, yet it's not critical for a tool with clear behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so descriptions already document all three parameters. The description adds context like 'evidence-backed summary' and 'without credentials', but this adds only moderate value beyond the schema. It doesn't explain the impact of 'blocked' or 'skipped' statuses, but the schema already defines them as enums.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it finishes a RepoPilot Step with a terminal outcome and summary, and it's connected to the Step lifecycle. However, it doesn't explicitly distinguish it from the sibling tools beyond this role; while it references the start and evidence append tools indirectly, it doesn't name them or differentiate beyond 'finish' vs others.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It provides explicit usage guidance: use only after the associated Skill has stopped, do not use for a running Step, and notes idempotency and rejection of conflicting terminal results. This is clear when-to-use and when-not-to-use guidance, though it doesn't name alternative tools for various scenarios, the guidance is sufficient for correct invocation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_publish_proof_commentAIdempotent
Build a redacted Proof Bundle from a terminal maintenance run, verify its evidence chain, and create or update the run-scoped managed GitHub PR comment. Use only for the PR recorded in that run's create_pull_request evidence. Repeating the call updates the same marked comment instead of posting duplicates.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Terminal maintenance run UUID whose verified evidence will be summarized. | |
| pullNumber | Yes | Pull request created by this run and recorded in its git_reference evidence. | |
| repository | Yes | Allowed GitHub repository in owner/name format. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare idempotentHint: true and destructiveHint: false. The description adds valuable behavioral context: it says the call both creates and updates a marked comment, and it explicitly spells out the idempotency effect ('Repeating the call updates the same marked comment instead of posting duplicates'). It also mentions verification of the evidence chain and redaction, which are not in annotations. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences front-load the core action (build, verify, create/update) and then add the critical usage constraint. No filler. Every word contributes to either purpose or condition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description doesn't need to explain return values. It covers the operation, the evidence chain, the idempotency behavior, and the usage restriction. It omits details like required permissions or the exact format of the comment, but those are not essential for invocation given the high schema coverage and annotations. A small gap is the lack of guidance on what to do if the PR wasn't created by this run, though the usage condition implies rejection.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the schema alone describes all three parameters. The description adds relational context by tying pullNumber to the run's create_pull_request evidence, clarifying that the caller must pass the PR created by that run. This goes beyond the schema's generic 'Pull request created by this run and recorded in its git_reference evidence.'
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb and resource: 'Build a redacted Proof Bundle... and create or update the run-scoped managed GitHub PR comment.' It distinguishes itself from siblings like repopilot_publish_review_comment and github_create_pull_request by specifically targeting the run-scoped proof comment, so an agent can tell which tool to use.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives an explicit condition: 'Use only for the PR recorded in that run's create_pull_request evidence.' This tells the agent when this tool is appropriate and implies it should not be used for other PRs. It also notes the idempotent behavior (updates instead of duplicates), but does not name alternative tools as directly as the highest calibration example.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_publish_review_commentAIdempotent
Create or update one managed GitHub review summary comment for the exact pull request head SHA bound to an active read-only review run. Call after reading all relevant diff pages and checks, while the Reviewer Step is running. This publishes findings but never approves, requests changes, modifies code, or merges.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Active pull-request review run UUID. | |
| headSha | Yes | Exact 40-character commit SHA reviewed; publication is rejected if the pull request head changed. | |
| summary | Yes | Short evidence-backed review conclusion for the exact head SHA. | |
| verdict | Yes | Overall result: pass, needs_attention, or blocked; this is not a GitHub approval decision. | |
| findings | Yes | Zero to 20 actionable findings; use an empty array when no defect is found. | |
| pullNumber | Yes | Pull request number bound to the review run. | |
| repository | Yes | Allowed GitHub repository in owner/name format. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
While annotations already provide idempotentHint=true and destructiveHint=false, the description adds meaningful behavioral context beyond that: it is a single managed comment tied to a specific head SHA, it only publishes findings, and it explicitly states it never approves, requests changes, modifies code, or merges. This goes beyond the binary annotation flags and helps the agent anticipate side effects. There is no contradiction with annotations (readOnlyHint=false correctly reflects the write operation).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with zero fluff. It front-loads the core action and scope, then provides usage timing and limitations in the same breath. Every sentence earns its place, and the structure is easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 7 required parameters, a detailed schema, and no output schema, the description covers everything an agent needs to decide when to call it and what to expect. It specifies prerequisites (after reading diffs/checks), operational context (active review run), and behavioral constraints. The description does not need to repeat schema details; it complements them perfectly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so all seven parameters have detailed descriptions. The description adds no additional parameter-specific meaning beyond what the schema already provides (e.g., headSha's SHA binding description matching the schema's note about rejection on head change). With full schema coverage, the baseline of 3 is appropriate; the description's value here is behavioral, not parameter-oriented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Create or update one managed GitHub review summary comment') with precise scope ('for the exact pull request head SHA bound to an active read-only review run'). It clearly differentiates from siblings by explicitly excluding approvals, change requests, code modification, and merging, and implies a specialized review-comment tool rather than generic GitHub comment/PR tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit when-to-use guidance: 'Call after reading all relevant diff pages and checks, while the Reviewer Step is running.' It also provides strong exclusions ('never approves, requests changes, modifies code, or merges') that help an agent route to the correct sibling (e.g., github_merge_pull_request for merges, github_create_pull_request for PR creation). No alternative is named, but the conditions are clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_request_approvalA
Create a human approval request for one high-risk action on a maintenance run. Use before merge, branch deletion, rollback, permission changes, secret changes, or another explicitly gated action. This records the request and may pause the run, but it never executes the requested action.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Maintenance run UUID requesting the high-risk action. | |
| action | Yes | Exact gated action. Creating this approval never executes the action. | |
| details | Yes | Non-secret action context needed by a human reviewer, such as repository, target object, and immutable revision. | |
| riskLevel | Yes | Operator-visible risk classification for the requested action. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint=false, destructiveHint=false), the description discloses that the tool 'records the request and may pause the run, but it never executes the requested action.' This adds critical behavioral context about side effects and limitations, which annotations do not convey. It also states the constraint of one action per request.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences with high information density. The purpose is front-loaded, followed by usage scenarios and a key behavioral clarification. No redundant or verbose wording.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 4 required parameters, two enums, and a nested object, the description covers purpose, usage, and side effects. The schema covers parameter details. No output schema exists, so return values are not expected. The description is sufficient for an agent to select and correctly invoke the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema provides 100% coverage for all parameters, including descriptions for runId, action, details, and riskLevel. The description adds no additional parameter-specific meaning beyond what the schema already documents. Per the rubric, with high schema coverage the baseline is 3, and there is no extra semantic value added.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Create'), resource ('a human approval request'), and scope ('one high-risk action on a maintenance run'). It distinguishes from execution tools by explicitly stating 'it never executes the requested action', making it clear this is a request-creation tool, not an action executor like github_merge_pull_request.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit use cases: 'Use before merge, branch deletion, rollback, permission changes, secret changes, or another explicitly gated action.' It also implies non-usage for execution, and notes the side effect of possibly pausing the run. This is strong guidance for an agent to know when to invoke this tool versus alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_search_runbooksARead-onlyIdempotent
Search verified historical RepoPilot runbooks for a target repository using failure symptoms or repair terms. Call during triage before selecting a repair strategy; do not use it as proof that a current defect is identical. Returns ranked stored runbooks and does not modify repository or run state.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum results to return, from 1 through 20; defaults to 5. | |
| query | Yes | Failure symptoms, component names, or repair terms to match against verified runbooks. | |
| repository | Yes | Target GitHub repository in owner/name format. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint. The description adds 'ranked' output and 'verified historical' scope, which are not in annotations. The statement 'does not modify repository or run state' is redundant with annotations but harmless.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no waste. The first sentence front-loads the primary action and resource; the second provides usage timing and a crucial caution. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a search tool with no output schema, the description sufficiently explains return value ('ranked stored runbooks'), its non-mutating nature, and when to use it. An agent has enough to call correctly without ambiguity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all parameters are already documented in the schema. The description mentions 'failure symptoms or repair terms' which aligns with the query parameter but adds no new information beyond the schema. Baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states the verb 'Search' with a specific resource 'verified historical RepoPilot runbooks' and a target repository, using failure symptoms or repair terms. It clearly differentiates from sibling tools, as none of the other repopilot tools are search-focused.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to call: 'during triage before selecting a repair strategy' and provides a negative constraint: 'do not use it as proof that a current defect is identical.' This gives clear context for selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_start_stepAIdempotent
Start one durable Agent Skill execution Step for an existing RepoPilot run. Call this immediately before executing the named Skill, then pass the returned Step ID to repopilot_finish_step. Reusing the same idempotency key within a run returns the existing Step instead of creating a duplicate.
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | Existing RepoPilot run UUID that owns this Agent Skill execution. | |
| agentName | Yes | RepoPilot Agent identity assigned to the Skill; the Agent-to-Skill pairing is validated. | |
| skillName | Yes | Versioned RepoPilot Skill to execute within the run. | |
| idempotencyKey | Yes | Stable caller-generated key scoped to the run and logical attempt; retry with the same key to receive the existing Step. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare idempotentHint=true, readOnlyHint=false, and destructiveHint=false. The description adds value by explaining that reusing the idempotency key returns the existing Step instead of creating a duplicate, and notes the durable nature of the step. This goes beyond the annotations without contradicting them, providing context on side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three concise sentences, front-loaded with the primary purpose, then usage context, then idempotency detail. No superfluous words; every sentence earns its place. Well-structured for quick comprehension.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 4 required parameters, two enums, and no output schema, the description covers the core workflow, idempotency, and return usage. It doesn't specify error conditions or prerequisites like runId validity, but these are implicit in the domain. The lack of an output schema is mitigated by the explicit mention of returning a Step ID. Adequately complete for an agent to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds meaning by explaining the idempotencyKey's role (reusing it returns the existing Step) and implicitly that the tool returns a Step ID used by repopilot_finish_step. This enriches parameter understanding beyond schema descriptions, justifying a score above baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool starts a durable Agent Skill execution Step for an existing RepoPilot run, with a specific verb and resource. It also explains the immediate usage context by saying to call it before executing the named Skill and pass the returned Step ID to repopilot_finish_step, distinguishing it from the finish step sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit when-to-use guidance: call immediately before executing the named Skill, and clarifies idempotency behavior for retries. It doesn't explicitly mention alternatives or when not to use it, but the workflow context and mention of the finish step make usage clear. Doesn't exclude other tools but the step-start role is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repopilot_write_runbookA
Archive a verified maintenance outcome as a reusable repository runbook. Call only after independent verification for the source run; do not archive an unverified hypothesis or a pull-request review run. This inserts a new runbook and appends runbook evidence.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | Short problem-and-resolution title used in future retrieval results. | |
| content | Yes | Reusable runbook body with symptoms, diagnosis, repair, verification, and relevant limitations; exclude secrets. | |
| summary | Yes | Concise verified outcome, including the root cause and effective repair. | |
| repository | Yes | GitHub repository in owner/name format; it must be present in GITHUB_ALLOWED_REPOSITORIES. | |
| sourceRunId | Yes | Verified maintenance run UUID that produced this runbook. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag readOnlyHint=false and destructiveHint=false, so the description does not need to repeat that. It adds meaningful behavioral context by specifying 'This inserts a new runbook and appends runbook evidence,' which clarifies the side effect beyond the schema. It does not contradict annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with zero redundancy. The primary purpose and most critical constraint (verification requirement) are front-loaded, and the operational effect is stated efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a write operation with all parameters already documented in the schema, the description provides the essential precondition (verification) and the effect (insert + append evidence). It does not explain what 'runbook evidence' means or what the response looks like, but these are not strictly required for the agent to call the tool correctly, given no output schema and the operation's simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, meaning every parameter is fully documented in the schema. The description itself provides no additional parameter-level meaning, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Archive') and resource ('a verified maintenance outcome as a reusable repository runbook'). It clearly differentiates from siblings by explicitly excluding unverified hypotheses and pull-request review runs, making the tool's unique role evident.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states when to use ('only after independent verification for the source run') and when not to ('do not archive an unverified hypothesis or a pull-request review run'). However, it does not name alternative tools for those cases (e.g., repopilot_append_evidence or repopilot_request_approval), so it lacks explicit alternative names.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
TDQS
Each tool has a clearly distinct purpose with detailed descriptions. The two publish comment tools are distinguished by run type (proof vs review), and the start/finish step pair is unambiguous. GitHub tools cover specific resource actions with no overlap.
Tools follow a consistent prefix-verb-noun pattern (repopilot_ and github_ prefixes). Minor inconsistency: get vs list for PR checks vs files, but overall convention is predictable and readable.
14 tools is within the ideal 3-15 range and well-scoped for maintenance automation integrating RepoPilot orchestration and GitHub operations. Each tool fills a specific role without redundancy.
Core lifecycles are covered: step start/finish, evidence chain, approval, runbook search/write, and GitHub PR review/merge flow. Minor gaps exist (no explicit step abort, no runbook listing or evidence query), but agents can complete primary workflows without dead ends.
Maintenance
Related MCP Connectors
Control plane for autonomous software labor. Agents claim objectives over MCP with audit trail.
MCP-native AI SRE: ask what's broken in production, get a reviewed GitHub fix PR.
AI-native git hosting — repos, PRs, issues, CI gates, and AI code review over MCP (60 tools).
A Model Context Protocol (MCP) application for automated GitHub PR analysis and issue management.…
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceAn MCP server that diagnoses GitHub Actions workflow failures and automatically creates repair pull requests using LLM-generated unified diffs. It includes a governance layer to orchestrate autonomous fixes or human-reviewed repairs based on risk assessment thresholds.
- FlicenseNot gradedqualityDmaintenanceMCP server for automated GitHub repository quality management, enabling review, README generation, cleanup, and monitoring.
- AlicenseAqualityBmaintenanceAn MCP server that provides operational tooling over the GitHub API — issue triage, PR review monitoring, repo health audits, and team access reviews.111MIT
- AlicenseCqualityBmaintenanceA policy-aware MCP server for GitHub and GitHub Actions that enables safe AI-assisted infrastructure workflows—inspecting repositories, preparing branches and pull requests, and constrained remote mutations behind explicit preview-bound approval tokens.18MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/wellkilo/RepoPilot'
If you have feedback or need assistance with the MCP directory API, please join our Discord server