bash-exec
Execute a shell command. Gated by capability/exec-with-approval and isolation/container-with-allowlist or stricter.
- function
bash_exec- effects
- exec
To · class tool
Executable affordances. Each tool carries the function signature the model sees (spec.function_name, parameters, returns) and the side_effects a runtime must gate with a capability policy before the call runs.
Execute a shell command. Gated by capability/exec-with-approval and isolation/container-with-allowlist or stricter.
bash_execRemove a file. Destructive. Requires explicit user approval.
file_deleteTargeted string replacement in a file. Requires a prior read of the same file.
file_editCreate or overwrite a file. Side-effecting.
file_writePer-line authorship for a file.
git_blameShow changes between commits, branches, or working tree. Read-only.
git_diffCommit history for a ref / path.
git_logDetail for a single commit — message, files, diff.
git_showWorking tree status — staged, modified, untracked.
git_statusEnumerate paths matching a glob pattern.
globPattern search across files. Returns matching lines with file:line locations.
grepHTTP GET. Returns body and status.
http_fetchHTTP POST / PUT / PATCH / DELETE. Side-effecting.
http_postList entries in a directory. Read-only.
list_dirRead a file from the workspace. Read-only; no side effects beyond opening the file.
read_fileRegister a cron / timer task. Side-effecting (creates persistent schedule).
schedule_taskSend a message to an external channel (Slack, email, etc.). External, side-effecting.
send_messageINSERT / UPDATE / DELETE against a named DSN. Side-effecting.
sql_mutateRead-only SELECT against a named DSN.
sql_queryFile metadata: size, mtime, mode, type.
statNothing matches. Clear a filter or try the global search (/).