{"id":"dockerfile-cache-lint","title":"Dockerfile build-cache and reproducibility lint","description":"Parses a Dockerfile (continuations, escape directive, heredocs, flags, stages) and reports instruction orderings that defeat the layer cache or make rebuilds drift, for agents writing or reviewing container builds. Cache: COPY of the whole context before a dependency or package install, apt-get update in its own RUN, per-build ARG/ENV values (build date, git sha) declared before later RUN steps. Reproducibility: FROM or COPY --from with no tag or :latest (or no digest with basePin=digest), ADD of a URL without --checksum, unpinned ADD/git clone, curl | sh. Optional hygiene: cd instead of WORKDIR, pipes without pipefail. Does not build the image, read .dockerignore, resolve registries or analyse shell inside $(...) or scripts invoked by name.","roi":"Cache-busting instruction order turns a 5-second rebuild into a full dependency install on every commit.","audience":"developer","package":"code-preflight-kit","channels":["x402","mcp"],"endpoint":{"method":"POST","url":"https://agents.writerslogic.com/api/v1/dockerfile-cache-lint","path":"/api/v1/dockerfile-cache-lint","contentType":"application/json"},"price":{"amount":"0.005","currency":"USDC","network":"base","perCall":true,"failedCallsCharged":false},"inputSchema":{"type":"object","additionalProperties":false,"required":["dockerfile"],"properties":{"dockerfile":{"type":"string","maxLength":100000,"description":"Dockerfile text, at most 5000 lines and 128 stages."},"include":{"type":"array","minItems":1,"maxItems":3,"items":{"type":"string","enum":["cache","reproducibility","hygiene"]},"description":"Rule categories that decide the status. Default cache and reproducibility."},"basePin":{"type":"string","enum":["tag","digest"],"description":"tag (default): flag only missing or :latest tags. digest: flag every base image not pinned by @sha256."}}},"resultSchema":{"type":"object","properties":{"status":{"type":"string","enum":["pass","fail","unknown","unsupported"],"description":"pass: every rule held. fail: a rule was violated (see witnesses). unknown: the input lacks the evidence to decide. unsupported: outside what this engine covers. Missing evidence is never a pass."},"instructionCount":{"type":"integer"},"stages":{"type":"array","items":{"type":"object","properties":{"index":{"type":"integer"},"name":{"type":"string"},"base":{"type":"string"},"line":{"type":"integer"}}}},"findings":{"type":"object","description":"Finding counts per category among the included categories (hygiene counted only if included).","properties":{"cache":{"type":"integer"},"reproducibility":{"type":"integer"},"hygiene":{"type":"integer"}}},"witnesses":{"type":"array","items":{"type":"object","properties":{"ruleId":{"type":"string"},"detail":{"type":"string"},"path":{"type":"string","description":"JSON pointer or dotted path into the input."},"offset":{"type":"integer"},"index":{"type":"integer"},"expected":{"description":"What the rule required."},"actual":{"description":"What the input had."}}}},"versions":{"type":"object","description":"Every semantic dependency of this answer (engine, tables and their as-of dates, tokenizer, calendar, rounding profile)."},"limits":{"type":"array","items":{"type":"string"}},"deterministic":{"type":"boolean","description":"Always true: pure code, no model."}}},"outputSchema":{"type":"object","properties":{"data":{"type":"object","properties":{"status":{"type":"string","enum":["pass","fail","unknown","unsupported"],"description":"pass: every rule held. fail: a rule was violated (see witnesses). unknown: the input lacks the evidence to decide. unsupported: outside what this engine covers. Missing evidence is never a pass."},"instructionCount":{"type":"integer"},"stages":{"type":"array","items":{"type":"object","properties":{"index":{"type":"integer"},"name":{"type":"string"},"base":{"type":"string"},"line":{"type":"integer"}}}},"findings":{"type":"object","description":"Finding counts per category among the included categories (hygiene counted only if included).","properties":{"cache":{"type":"integer"},"reproducibility":{"type":"integer"},"hygiene":{"type":"integer"}}},"witnesses":{"type":"array","items":{"type":"object","properties":{"ruleId":{"type":"string"},"detail":{"type":"string"},"path":{"type":"string","description":"JSON pointer or dotted path into the input."},"offset":{"type":"integer"},"index":{"type":"integer"},"expected":{"description":"What the rule required."},"actual":{"description":"What the input had."}}}},"versions":{"type":"object","description":"Every semantic dependency of this answer (engine, tables and their as-of dates, tokenizer, calendar, rounding profile)."},"limits":{"type":"array","items":{"type":"string"}},"deterministic":{"type":"boolean","description":"Always true: pure code, no model."}}},"_provenance":{"type":"object","description":"C2PA-aligned manifest and W3C VC 2.0 (eddsa-jcs-2022) issued by the hub DID; verify at POST /api/v1/verify-provenance"}},"required":["data","_provenance"]},"example":{"dockerfile":"FROM node:latest\nWORKDIR /app\nCOPY . .\nRUN npm ci\nCMD [\"node\", \"server.js\"]\n"},"openapiOperation":{"operationId":"dockerfile_cache_lint","summary":"Dockerfile build-cache and reproducibility lint","description":"Parses a Dockerfile (continuations, escape directive, heredocs, flags, stages) and reports instruction orderings that defeat the layer cache or make rebuilds drift, for agents writing or reviewing container builds. Cache: COPY of the whole context before a dependency or package install, apt-get update in its own RUN, per-build ARG/ENV values (build date, git sha) declared before later RUN steps. Reproducibility: FROM or COPY --from with no tag or :latest (or no digest with basePin=digest), ADD of a URL without --checksum, unpinned ADD/git clone, curl | sh. Optional hygiene: cd instead of WORKDIR, pipes without pipefail. Does not build the image, read .dockerignore, resolve registries or analyse shell inside $(...) or scripts invoked by name.\n\nPrice: 0.005 USDC on Base (x402).","x-x402-price-usdc":"0.005","x-x402-amount":"5000","x-payment-info":{"protocols":["x402"],"price":{"mode":"fixed","currency":"USD","amount":"0.005"}},"x-audience":"developer","x-sample-url":"https://agents.writerslogic.com/api/v1/samples/dockerfile-cache-lint","security":[{"x402":[]},{"apiKey":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","additionalProperties":false,"required":["dockerfile"],"properties":{"dockerfile":{"type":"string","maxLength":100000,"description":"Dockerfile text, at most 5000 lines and 128 stages."},"include":{"type":"array","minItems":1,"maxItems":3,"items":{"type":"string","enum":["cache","reproducibility","hygiene"]},"description":"Rule categories that decide the status. Default cache and reproducibility."},"basePin":{"type":"string","enum":["tag","digest"],"description":"tag (default): flag only missing or :latest tags. digest: flag every base image not pinned by @sha256."}}},"example":{"dockerfile":"FROM node:latest\nWORKDIR /app\nCOPY . .\nRUN npm ci\nCMD [\"node\", \"server.js\"]\n"}}}},"responses":{"200":{"description":"Paid result with provenance","content":{"application/json":{"schema":{"type":"object","properties":{"data":{"type":"object","properties":{"status":{"type":"string","enum":["pass","fail","unknown","unsupported"],"description":"pass: every rule held. fail: a rule was violated (see witnesses). unknown: the input lacks the evidence to decide. unsupported: outside what this engine covers. Missing evidence is never a pass."},"instructionCount":{"type":"integer"},"stages":{"type":"array","items":{"type":"object","properties":{"index":{"type":"integer"},"name":{"type":"string"},"base":{"type":"string"},"line":{"type":"integer"}}}},"findings":{"type":"object","description":"Finding counts per category among the included categories (hygiene counted only if included).","properties":{"cache":{"type":"integer"},"reproducibility":{"type":"integer"},"hygiene":{"type":"integer"}}},"witnesses":{"type":"array","items":{"type":"object","properties":{"ruleId":{"type":"string"},"detail":{"type":"string"},"path":{"type":"string","description":"JSON pointer or dotted path into the input."},"offset":{"type":"integer"},"index":{"type":"integer"},"expected":{"description":"What the rule required."},"actual":{"description":"What the input had."}}}},"versions":{"type":"object","description":"Every semantic dependency of this answer (engine, tables and their as-of dates, tokenizer, calendar, rounding profile)."},"limits":{"type":"array","items":{"type":"string"}},"deterministic":{"type":"boolean","description":"Always true: pure code, no model."}}},"_provenance":{"type":"object","description":"C2PA-aligned manifest and W3C VC 2.0 (eddsa-jcs-2022) issued by the hub DID; verify at POST /api/v1/verify-provenance"}},"required":["data","_provenance"]}}}},"400":{"description":"Invalid request (no payment consumed)","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string"},"code":{"type":"string"}}}}}},"401":{"description":"Invalid X-API-KEY","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string"},"code":{"type":"string"}}}}}},"402":{"description":"Payment required or invalid","content":{"application/json":{"schema":{"type":"object","description":"x402 v2 PaymentRequired (also base64 in the PAYMENT-REQUIRED header)","properties":{"x402Version":{"type":"integer"},"error":{"type":"string"},"code":{"type":"string"},"resource":{"type":"object"},"accepts":{"type":"array","items":{"type":"object"}},"extensions":{"type":"object"}}}}}},"502":{"description":"Upstream failure; the payment is released or not settled","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string"},"code":{"type":"string"}}}}}}}},"links":{"docs":"https://agents.writerslogic.com/docs/dockerfile-cache-lint/","docsJson":"https://agents.writerslogic.com/docs/dockerfile-cache-lint.json","sample":"https://agents.writerslogic.com/api/v1/samples/dockerfile-cache-lint","openapi":"https://agents.writerslogic.com/openapi.json","catalog":"https://agents.writerslogic.com/api/v1/catalog","verifyProvenance":"https://agents.writerslogic.com/api/v1/verify-provenance","index":"https://agents.writerslogic.com/docs/index.json"}}