open-code-review-toolkit 0.6.0__tar.gz → 0.6.2__tar.gz

{open_code_review_toolkit-0.6.0 → open_code_review_toolkit-0.6.2}/PKG-INFO

@@ -1,11 +1,12 @@
 Metadata-Version: 2.4
 Name: open-code-review-toolkit
-Version: 0.6.0
+Version: 0.6.2
 Summary: Unofficial GitLab CI integration layer for Open Code Review
 Project-URL: Homepage, https://github.com/xeonvs/open-code-review-toolkit
 Project-URL: Repository, https://github.com/xeonvs/open-code-review-toolkit
 Project-URL: Issues, https://github.com/xeonvs/open-code-review-toolkit/issues
 Project-URL: Changelog, https://github.com/xeonvs/open-code-review-toolkit/blob/main/CHANGELOG.md
+Project-URL: Code of Conduct, https://github.com/xeonvs/open-code-review-toolkit/blob/main/CODE_OF_CONDUCT.md
 Author: Open Code Review Toolkit contributors
 License: 
                                          Apache License
@@ -227,6 +228,8 @@ Description-Content-Type: text/markdown
 # Open Code Review Toolkit
 
 [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/13906/badge)](https://www.bestpractices.dev/projects/13906)
+[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/xeonvs/open-code-review-toolkit/badge)](https://securityscorecards.dev/viewer/?uri=github.com/xeonvs/open-code-review-toolkit)
+[![CodeQL](https://github.com/xeonvs/open-code-review-toolkit/actions/workflows/codeql.yml/badge.svg?branch=main)](https://github.com/xeonvs/open-code-review-toolkit/actions/workflows/codeql.yml)
 
 Open Code Review Toolkit is an unofficial GitLab CI integration layer for [Alibaba Open Code Review](https://github.com/alibaba/open-code-review). It provides bounded repository evidence, a compact review bootstrap, a built-in read-only MCP server, environment-driven OCR configuration, preflight validation, and safe GitLab merge-request posting. It does **not** bundle or download the `ocr` binary.
 
@@ -297,6 +300,7 @@ Repository content, OCR output, and provider responses are untrusted inputs. The
 ## Development and release
 
 - [Contributing](CONTRIBUTING.md)
+- [Code of Conduct](CODE_OF_CONDUCT.md)
 - [Development guide](docs/development.md)
 - [Security policy](SECURITY.md)
 - [Release process](docs/release.md)

{open_code_review_toolkit-0.6.0 → open_code_review_toolkit-0.6.2}/README.md

@@ -1,6 +1,8 @@
 # Open Code Review Toolkit
 
 [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/13906/badge)](https://www.bestpractices.dev/projects/13906)
+[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/xeonvs/open-code-review-toolkit/badge)](https://securityscorecards.dev/viewer/?uri=github.com/xeonvs/open-code-review-toolkit)
+[![CodeQL](https://github.com/xeonvs/open-code-review-toolkit/actions/workflows/codeql.yml/badge.svg?branch=main)](https://github.com/xeonvs/open-code-review-toolkit/actions/workflows/codeql.yml)
 
 Open Code Review Toolkit is an unofficial GitLab CI integration layer for [Alibaba Open Code Review](https://github.com/alibaba/open-code-review). It provides bounded repository evidence, a compact review bootstrap, a built-in read-only MCP server, environment-driven OCR configuration, preflight validation, and safe GitLab merge-request posting. It does **not** bundle or download the `ocr` binary.
 
@@ -71,6 +73,7 @@ Repository content, OCR output, and provider responses are untrusted inputs. The
 ## Development and release
 
 - [Contributing](CONTRIBUTING.md)
+- [Code of Conduct](CODE_OF_CONDUCT.md)
 - [Development guide](docs/development.md)
 - [Security policy](SECURITY.md)
 - [Release process](docs/release.md)

{open_code_review_toolkit-0.6.0 → open_code_review_toolkit-0.6.2}/pyproject.toml

@@ -30,6 +30,7 @@ Homepage = "https://github.com/xeonvs/open-code-review-toolkit"
 Repository = "https://github.com/xeonvs/open-code-review-toolkit"
 Issues = "https://github.com/xeonvs/open-code-review-toolkit/issues"
 Changelog = "https://github.com/xeonvs/open-code-review-toolkit/blob/main/CHANGELOG.md"
+"Code of Conduct" = "https://github.com/xeonvs/open-code-review-toolkit/blob/main/CODE_OF_CONDUCT.md"
 
 [project.scripts]
 ocr-ci = "ocr_toolkit.cli:main"

{open_code_review_toolkit-0.6.0 → open_code_review_toolkit-0.6.2}/src/ocr_toolkit/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '0.6.0'
-__version_tuple__ = version_tuple = (0, 6, 0)
+__version__ = version = '0.6.2'
+__version_tuple__ = version_tuple = (0, 6, 2)
 
 __commit_id__ = commit_id = None

{open_code_review_toolkit-0.6.0 → open_code_review_toolkit-0.6.2}/src/ocr_toolkit/cli.py

@@ -7,7 +7,7 @@ import sys
 from collections.abc import Sequence
 from pathlib import Path
 
-from ocr_toolkit import configure, mcp_config, preflight, review_runner
+from ocr_toolkit import __version__, configure, mcp_config, preflight, review_runner
 from ocr_toolkit.posting.workflow import main as posting_main
 
 
@@ -18,6 +18,11 @@ def build_parser() -> argparse.ArgumentParser:
         prog="ocr-ci",
         description="Safe CI integration helpers for Open Code Review.",
     )
+    parser.add_argument(
+        "--version",
+        action="version",
+        version=f"%(prog)s {__version__}",
+    )
     subparsers = parser.add_subparsers(dest="command", required=True)
     subparsers.add_parser("preflight", help="Validate OCR, GitLab, and LLM access.")
     subparsers.add_parser("configure", help="Write the OCR runtime configuration.")

{open_code_review_toolkit-0.6.0 → open_code_review_toolkit-0.6.2}/src/ocr_toolkit/evidence/artifacts.py

@@ -15,6 +15,7 @@ class EvidenceArtifacts:
     directory: Path
     store: Path
     bootstrap: Path
+    policy_rules: Path
 
 
 def repository_artifacts(root: Path | None = None) -> EvidenceArtifacts:
@@ -26,6 +27,7 @@ def repository_artifacts(root: Path | None = None) -> EvidenceArtifacts:
         directory=directory,
         store=directory / "evidence.json",
         bootstrap=directory / "bootstrap.md",
+        policy_rules=directory / "policy-rules.json",
     )
 
 
@@ -42,8 +44,8 @@ def prepare_artifact_directory(artifacts: EvidenceArtifacts) -> None:
     directory.chmod(0o700)
 
 
-def write_private_text(path: Path, content: str) -> None:
-    """Write one internal text artifact without following the final symlink."""
+def write_private_bytes(path: Path, content: bytes) -> None:
+    """Write one private byte artifact without following the final symlink."""
 
     if path.parent.is_symlink() or not path.parent.is_dir():
         raise OSError(f"private artifact parent is not a safe directory: {path.parent}")
@@ -63,7 +65,7 @@ def write_private_text(path: Path, content: str) -> None:
             raise OSError(f"private artifact is an existing hard link: {path}")
         os.fchmod(descriptor, 0o600)
         os.ftruncate(descriptor, 0)
-        stream = os.fdopen(descriptor, "w", encoding="utf-8")
+        stream = os.fdopen(descriptor, "wb")
         descriptor = -1
         with stream:
             stream.write(content)
@@ -72,3 +74,22 @@ def write_private_text(path: Path, content: str) -> None:
         if descriptor >= 0:
             os.close(descriptor)
         raise
+
+
+def write_private_text(path: Path, content: str) -> None:
+    """Write one internal UTF-8 artifact through the private byte boundary."""
+
+    write_private_bytes(path, content.encode("utf-8"))
+
+
+def remove_private_artifact(path: Path) -> None:
+    """Remove one toolkit-owned artifact name without following its target."""
+
+    if path.parent.is_symlink() or not path.parent.is_dir():
+        raise OSError(f"private artifact parent is not a safe directory: {path.parent}")
+    try:
+        path.unlink()
+    except FileNotFoundError:
+        return
+    except IsADirectoryError as exc:
+        raise OSError(f"private artifact path is not a file: {path}") from exc

{open_code_review_toolkit-0.6.0 → open_code_review_toolkit-0.6.2}/src/ocr_toolkit/evidence/collect.py

@@ -16,6 +16,7 @@ from ocr_toolkit.evidence.repository import (
     file_deltas,
 )
 from ocr_toolkit.evidence.store import EvidenceStore, EvidenceStoreError
+from ocr_toolkit.evidence.store.contracts import POLICY_KINDS
 
 
 def _commit_refs(
@@ -44,13 +45,18 @@ def _component_for_path(path: str) -> str:
 
 
 def collect_repository_evidence(
-    root: Path | None = None, *, base_ref: str | None = None, head_ref: str | None = None
+    root: Path | None = None,
+    *,
+    base_ref: str | None = None,
+    head_ref: str | None = None,
+    policy_ref: str | None = None,
 ) -> EvidenceStore:
     """Build one evidence store from immutable refs and existing bounded collectors."""
 
     reader = GitRepositoryReader(root or Path.cwd())
     base_sha, head_sha = _commit_refs(reader, base_ref, head_ref)
     changed = reader.changed_paths(base_sha, head_sha)
+    policy_sha = reader.resolve_commit(policy_ref) if policy_ref is not None else base_sha
     base = build_file_snapshot(reader, base_sha, RefRole.BASE, paths=changed)
     head = build_file_snapshot(reader, head_sha, RefRole.HEAD, paths=changed)
     base_paths = {record.source_path for record in base.records}
@@ -64,6 +70,19 @@ def collect_repository_evidence(
         changed_paths=changed,
         coverage_sink=base_coverage,
     )
+    policy_facts, policy_diagnostics = collect_ref_facts(
+        reader,
+        policy_sha,
+        RefRole.POLICY,
+        changed_paths=changed,
+    )
+    policy_facts = [record for record in policy_facts if record.kind in POLICY_KINDS]
+    policy = EvidenceSnapshot(
+        RefRole.POLICY,
+        policy_sha,
+        tuple(policy_facts),
+        diagnostics=tuple(policy_diagnostics),
+    )
     head_facts, head_fact_diagnostics = collect_ref_facts(
         reader,
         head_sha,
@@ -87,10 +106,12 @@ def collect_repository_evidence(
     )
     all_coverage = tuple((*base.coverage, *head.coverage))
     snapshot_deltas = file_deltas(base, head)
-    store = EvidenceStore(base=base, head=head)
+    store = EvidenceStore(base=base, head=head, policy=policy)
     typed_facts = [*base_facts, *head_facts]
     rejected_snapshot_records = [
-        record for record in (*base.records, *head.records) if not store.add(record)
+        record
+        for record in (*base.records, *head.records, *policy.records)
+        if not store.add(record)
     ]
     if rejected_snapshot_records:
         # Snapshots and their record-id indexes are one atomic contract. Persisting a
@@ -98,6 +119,16 @@ def collect_repository_evidence(
         raise EvidenceStoreError(
             "repository snapshot records exceed the configured evidence store limits"
         )
+    store.policy = EvidenceSnapshot(
+        RefRole.POLICY,
+        policy_sha,
+        tuple(
+            record
+            for record in store.records
+            if record.ref is RefRole.POLICY and record.commit_sha == policy_sha
+        ),
+        diagnostics=policy.diagnostics,
+    )
     for coverage in all_coverage:
         if not store.add_coverage(coverage):
             raise EvidenceStoreError(
@@ -174,6 +205,7 @@ def collect_repository_evidence(
         *head.diagnostics,
         *base_fact_diagnostics,
         *head_fact_diagnostics,
+        *policy_diagnostics,
     ):
         store.add_diagnostic(diagnostic)
     return store

{open_code_review_toolkit-0.6.0 → open_code_review_toolkit-0.6.2}/src/ocr_toolkit/evidence/collectors/orchestration.py

@@ -76,7 +76,11 @@ def collect_ref_facts(
 
     records = []
     diagnostics = []
-    trust = TrustClass.TARGET_REPOSITORY if ref == RefRole.BASE else TrustClass.SOURCE_REPOSITORY
+    trust = (
+        TrustClass.TARGET_REPOSITORY
+        if ref in {RefRole.BASE, RefRole.POLICY}
+        else TrustClass.SOURCE_REPOSITORY
+    )
     changed_exact = tuple(sorted(set(changed_paths)))
     changed = {path.casefold() for path in changed_exact}
     entries = reader.list_objects(commit_sha)
@@ -118,7 +122,7 @@ def collect_ref_facts(
                 changed_exact,
             )
         )
-        if ref is RefRole.BASE
+        if ref is RefRole.POLICY
         else set()
     )
     applicable_guidance = tuple(
@@ -158,7 +162,7 @@ def collect_ref_facts(
         (
             entry
             for entry in entries
-            if ref is RefRole.BASE and entry.path == ACCEPTED_DECISIONS_PATH
+            if ref is RefRole.POLICY and entry.path == ACCEPTED_DECISIONS_PATH
         ),
         None,
     )
@@ -188,7 +192,8 @@ def collect_ref_facts(
     candidates = tuple(
         entry
         for entry in entries
-        if (
+        if ref is not RefRole.POLICY
+        and (
             is_supported_manifest(entry.path)
             or PurePosixPath(entry.path).name.casefold().startswith(".gitlab-ci")
             or is_context_yaml(entry.path, changed)
@@ -380,7 +385,7 @@ def collect_ref_facts(
                 ]
             elif path == ACCEPTED_DECISIONS_PATH:
                 facts = []
-                if ref == RefRole.BASE:
+                if ref == RefRole.POLICY:
                     parsed_decisions = parse_accepted_decisions(text, changed_paths=changed_exact)
                     diagnostics.extend(
                         f"{ref.value}:{path}: {notice}" for notice in parsed_decisions.diagnostics
@@ -396,7 +401,7 @@ def collect_ref_facts(
                     ]
             elif guidance_source:
                 facts = []
-                if ref == RefRole.BASE and path in policy_paths:
+                if ref == RefRole.POLICY and path in policy_paths:
                     document = guidance_document(path, text, changed_exact)
                     facts = [
                         ManifestFact(
@@ -490,25 +495,35 @@ def collect_ref_facts(
                     trust=trust,
                 )
             )
-    plugin_context = FrameworkPluginContext(
-        records=tuple(records),
-        entries=entries,
-        source_statuses=tuple(sorted(source_statuses.values(), key=lambda item: item.path)),
-        ref=ref,
-        commit_sha=commit_sha,
-    )
-    plugin_facts, plugin_observations, plugin_notices = collect_framework_plugins(plugin_context)
-    template_facts, template_observations, template_notices = collect_template_files(plugin_context)
-    records.extend(
-        plugin_records(
-            (*plugin_facts, *template_facts),
+    plugin_observations = ()
+    template_observations = ()
+    if ref is not RefRole.POLICY:
+        plugin_context = FrameworkPluginContext(
+            records=tuple(records),
+            entries=entries,
+            source_statuses=tuple(sorted(source_statuses.values(), key=lambda item: item.path)),
+            changed_paths=changed_exact,
             ref=ref,
             commit_sha=commit_sha,
-            trust=trust,
         )
-    )
-    diagnostics.extend(f"{ref.value}:{notice}" for notice in (*plugin_notices, *template_notices))
-    if coverage_sink is not None:
+        plugin_facts, plugin_observations, plugin_notices = collect_framework_plugins(
+            plugin_context
+        )
+        template_facts, template_observations, template_notices = collect_template_files(
+            plugin_context
+        )
+        records.extend(
+            plugin_records(
+                (*plugin_facts, *template_facts),
+                ref=ref,
+                commit_sha=commit_sha,
+                trust=trust,
+            )
+        )
+        diagnostics.extend(
+            f"{ref.value}:{notice}" for notice in (*plugin_notices, *template_notices)
+        )
+    if coverage_sink is not None and ref is not RefRole.POLICY:
         for (domain, scope), observations in sorted(coverage_observations.items()):
             coverage_sink.append(
                 compose_coverage(

{open_code_review_toolkit-0.6.0 → open_code_review_toolkit-0.6.2}/src/ocr_toolkit/evidence/frameworks/contracts.py

@@ -59,6 +59,7 @@ class FrameworkPluginContext:
     records: tuple[EvidenceRecord, ...]
     entries: tuple[RepositoryObject, ...]
     source_statuses: tuple[PluginSourceStatus, ...]
+    changed_paths: tuple[str, ...]
     ref: RefRole
     commit_sha: str
 

{open_code_review_toolkit-0.6.0 → open_code_review_toolkit-0.6.2}/src/ocr_toolkit/evidence/frameworks/templates.py

@@ -93,7 +93,10 @@ def collect_template_files(
     }
     limited_components: set[tuple[str, str]] = set()
     truncated = False
-    for entry in sorted(context.entries, key=lambda item: item.path):
+    changed_paths = frozenset(context.changed_paths)
+    for entry in sorted(
+        context.entries, key=lambda item: (item.path not in changed_paths, item.path)
+    ):
         description = _template_description(entry.path, context)
         if description is None:
             continue

{open_code_review_toolkit-0.6.0 → open_code_review_toolkit-0.6.2}/src/ocr_toolkit/evidence/mcp.py

@@ -93,6 +93,16 @@ def evidence_summary(store: EvidenceStore) -> dict[str, object]:
         for record in store.records
         if record.kind in {"repository.accepted_decision", "repository.guidance"}
     )
+    mr_context_records = tuple(
+        record for record in store.records if record.kind == "review.merge_request_context"
+    )
+    merge_request_context = {
+        "contract": ("review.merge-request-context/v1" if mr_context_records else "absent"),
+        "records": len(mr_context_records),
+        "trust": "invocation" if mr_context_records else None,
+        "content_role": "untrusted_data" if mr_context_records else None,
+        "authoritative_for_actions": False,
+    }
     policy = {
         "accepted_decisions": sum(
             record.kind == "repository.accepted_decision" for record in policy_records
@@ -102,7 +112,7 @@ def evidence_summary(store: EvidenceStore) -> dict[str, object]:
         ),
         "structured_target_records": sum(
             not is_legacy_policy_value(record.value)
-            and record.ref.value == "base"
+            and record.ref.value in {"base", "policy"}
             and record.trust.value == "target_repository"
             for record in policy_records
         ),
@@ -110,14 +120,16 @@ def evidence_summary(store: EvidenceStore) -> dict[str, object]:
             is_legacy_policy_value(record.value) for record in policy_records
         ),
         "target_only": all(
-            record.ref.value == "base" and record.trust.value == "target_repository"
+            record.ref.value in {"base", "policy"} and record.trust.value == "target_repository"
             for record in policy_records
         ),
         "authoritative_for_actions": False,
     }
     return {
-        "schema_version": 3,
+        "schema_version": store.schema_version,
         "policy": policy,
+        "merge_request_context": merge_request_context,
+        "policy_ref": store.policy.commit_sha if store.policy else None,
         "coverage_contract": ("repository.evidence-coverage/v1" if store.coverage else "absent"),
         "base": store.base.commit_sha if store.base else None,
         "head": store.head.commit_sha if store.head else None,
@@ -136,9 +148,9 @@ def _optional_filter(arguments: dict[str, object], name: str) -> str | None:
     """Read one bounded optional exact-match filter."""
 
     value = arguments.get(name)
-    if value is None:
+    if value is None or value == "":
         return None
-    if not isinstance(value, str) or not value or len(value) > 256:
+    if not isinstance(value, str) or len(value) > 256:
         raise EvidenceMCPError(f"{name} must be a non-empty string of at most 256 characters")
     return value
 
@@ -154,9 +166,9 @@ def _encode_cursor(offset: int, query: _Query) -> str:
 def _decode_cursor(value: object, query: _Query) -> int:
     """Validate and decode a cursor bound to the current filters."""
 
-    if value is None:
+    if value is None or value == "":
         return 0
-    if not isinstance(value, str) or not value or len(value) > 256:
+    if not isinstance(value, str) or len(value) > 256:
         raise EvidenceMCPError("cursor must be a bounded opaque string")
     try:
         padded = value + "=" * (-len(value) % 4)
@@ -185,8 +197,8 @@ def _list_records(store: EvidenceStore, arguments: dict[str, object]) -> dict[st
         raise EvidenceMCPError("delta_kind requires kind=repository.evidence_delta")
     if query.kind == "repository.evidence_delta" and query.ref is not None:
         raise EvidenceMCPError("evidence deltas span base and head and do not accept ref")
-    if query.ref not in {None, "base", "head", "shared"}:
-        raise EvidenceMCPError("ref must be base, head, or shared")
+    if query.ref not in {None, "base", "head", "policy", "shared"}:
+        raise EvidenceMCPError("ref must be base, head, policy, or shared")
     page_size = arguments.get("page_size", DEFAULT_PAGE_SIZE)
     if isinstance(page_size, bool) or not isinstance(page_size, int):
         raise EvidenceMCPError("page_size must be an integer")
@@ -254,29 +266,33 @@ def call_tool(store: EvidenceStore, arguments: object) -> dict[str, object]:
     if not isinstance(arguments, dict):
         raise EvidenceMCPError("tool arguments must be an object")
     typed = cast(dict[str, object], arguments)
+    # The public schema is one union-shaped object. OCR/provider adapters may
+    # materialize every declared property even when an action does not consume
+    # it, so reject unknown names globally and let each action read only its own
+    # fields.
+    declared = {
+        "action",
+        "kind",
+        "delta_kind",
+        "component",
+        "ref",
+        "page_size",
+        "cursor",
+        "id",
+    }
+    unknown = set(typed) - declared
+    if unknown:
+        raise EvidenceMCPError(f"unsupported tool argument: {sorted(unknown)[0]}")
+
     action = typed.get("action")
     if action == "summary":
-        allowed = {"action"}
         payload = evidence_summary(store)
     elif action == "list":
-        allowed = {
-            "action",
-            "kind",
-            "delta_kind",
-            "component",
-            "ref",
-            "page_size",
-            "cursor",
-        }
         payload = _list_records(store, typed)
     elif action == "get":
-        allowed = {"action", "id"}
         payload = _get_record(store, typed)
     else:
         raise EvidenceMCPError("action must be summary, list, or get")
-    unknown = set(typed) - allowed
-    if unknown:
-        raise EvidenceMCPError(f"unsupported tool argument: {sorted(unknown)[0]}")
     return _text_result(payload)
 
 
@@ -299,14 +315,53 @@ def _tool_definition() -> dict[str, object]:
             "additionalProperties": False,
             "required": ["action"],
             "properties": {
-                "action": {"type": "string", "enum": ["summary", "list", "get"]},
-                "kind": {"type": "string", "maxLength": 256},
-                "delta_kind": {"type": "string", "maxLength": 256},
-                "component": {"type": "string", "maxLength": 256},
-                "ref": {"type": "string", "enum": ["base", "head", "shared"]},
-                "page_size": {"type": "integer", "minimum": 1, "maximum": MAX_PAGE_SIZE},
-                "cursor": {"type": "string", "maxLength": 256},
-                "id": {"type": "string", "pattern": "^(ev1|cov1|del1)_[0-9a-f]{64}$"},
+                "action": {
+                    "type": "string",
+                    "enum": ["summary", "list", "get"],
+                    "description": (
+                        "Use summary for counts, list to filter records, and get only after "
+                        "list returns a stable record id."
+                    ),
+                },
+                "kind": {
+                    "type": "string",
+                    "maxLength": 256,
+                    "description": "Optional exact record-kind filter for action=list only.",
+                },
+                "delta_kind": {
+                    "type": "string",
+                    "maxLength": 256,
+                    "description": (
+                        "Optional original fact-kind filter for action=list with "
+                        "kind=repository.evidence_delta only."
+                    ),
+                },
+                "component": {
+                    "type": "string",
+                    "maxLength": 256,
+                    "description": "Optional exact component filter for action=list only.",
+                },
+                "ref": {
+                    "type": "string",
+                    "enum": ["base", "head", "policy", "shared"],
+                    "description": "Optional immutable-ref filter for action=list only.",
+                },
+                "page_size": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "maximum": MAX_PAGE_SIZE,
+                    "description": "Bounded page size for action=list only.",
+                },
+                "cursor": {
+                    "type": "string",
+                    "maxLength": 256,
+                    "description": "Opaque next_cursor from a prior action=list call.",
+                },
+                "id": {
+                    "type": "string",
+                    "pattern": "^(ev1|cov1|del1)_[0-9a-f]{64}$",
+                    "description": "Stable record id returned by action=list; action=get only.",
+                },
             },
         },
         "annotations": {"readOnlyHint": True, "destructiveHint": False, "openWorldHint": False},

{open_code_review_toolkit-0.6.0 → open_code_review_toolkit-0.6.2}/src/ocr_toolkit/evidence/model.py

@@ -42,6 +42,7 @@ class RefRole(str, Enum):
 
     BASE = "base"
     HEAD = "head"
+    POLICY = "policy"
     SHARED = "shared"
 
 
@@ -283,7 +284,7 @@ class CoverageRecord:
                 or any(ord(character) < 32 for character in value)
             ):
                 raise ValueError(f"coverage {name} must contain between 1 and 256 safe characters")
-        if self.ref is RefRole.SHARED:
+        if self.ref not in {RefRole.BASE, RefRole.HEAD}:
             raise ValueError("coverage ref must be base or head")
         if len(self.commit_sha) != 40 or not all(
             character in "0123456789abcdef" for character in self.commit_sha
@@ -407,7 +408,9 @@ class EvidenceSnapshot:
         """Ensure snapshot records match the declared ref and are ordered."""
 
         if self.ref is RefRole.SHARED:
-            raise ValueError("snapshot ref must be base or head")
+            raise ValueError("snapshot ref must be base, head, or policy")
+        if self.ref is RefRole.POLICY and self.coverage:
+            raise ValueError("policy snapshot cannot contain coverage")
         if len(self.commit_sha) != 40 or not all(c in "0123456789abcdef" for c in self.commit_sha):
             raise ValueError("snapshot commit_sha must be a lowercase 40-character SHA-1")
         for record in self.records:

{open_code_review_toolkit-0.6.0 → open_code_review_toolkit-0.6.2}/src/ocr_toolkit/evidence/policy/schema.py

@@ -45,7 +45,7 @@ def is_legacy_policy_value(value: object) -> bool:
 
 
 def validate_policy_record(kind: str, value: object) -> None:
-    """Validate one schema-v3 structured policy evidence value."""
+    """Validate one structured policy evidence value."""
 
     outer = _exact_mapping(value, {"identity", "fact"}, kind)
     if not policy_value_within_budget(outer):