apply_patch

clock.sleep

execcommand

Return the whole operating brief — behaviour, environment, saved state and project rules — in one call

Report the OS, the shell execcommand uses, the work directory, and what the policy allows

Read the project's AGENTS.md instructions

Create a commit, optionally staging all tracked changes

Show recent commit history

Push commits to a remote

Show git status, parsed into changed files with status codes

Find files matching a glob pattern (.gitignore-aware)

Search file contents by regex, with optional context lines (.gitignore-aware)

Stream one ChatGPT attachment or generated file into a new project-relative path, with bounded size, SHA-256 verification and atomic no-overwrite publication

List files and directories with name, type, and size

Search the read-only project catalogue before binding. Returns relative selectors for existing canonical directories authorized beneath the access root, plus names, aliases, descriptions, trust metadata, sources, and sanitized warnings. It never selects a project

Read a file's contents, a bounded window at a time, with optional line offset/limit

Return the plan and notes saved by earlier turns or earlier conversations

Save one durable note about the task under a short key

Execute a command in the work directory (allowlist-restricted)

Bind the current ChatGPT conversation to an existing directory beneath the configured access root, an HTTPS/SSH GitHub repository-root URL, an HTTPS branch URL (/tree/<branch>), or an HTTPS pull-request URL (/pull/<number>). URL selection reuses a matching checkout or clones into projectCloneDir; ta

Compare the scoped working tree with the project-open or last-review checkpoint, optionally advancing the incremental baseline; compatible hosts render an interactive review card

skills.list

skills.read

Print directory tree as ASCII art

updateplan

viewimage

Write content to a file, creating parent directories if needed

writestdin