Git Diff Patcher Bridge

Explains static request admissibility without obtaining consent, validating every argument or guaranteeing execution.

explain_policy_decision

Searches the caller-effective MCP descriptor catalog without invoking returned capabilities or expanding authority.

search_tools

Runs one primary and up to four additional literal searches in one bounded read-only gateway call.

search_repo

Reads the workspace-wide living story, current task/thread state, attention items and evidence links from durable Agora state.

inspect_workspace_chronicle

Reads isolated low-stakes Commons conversations, persistent actor profiles and deterministic response invitations without generating speech or creating task evidence.

inspect_agora_commons

Classifies evidence-linked product-news candidates from the durable Agora Chronicle without drafting, saving or publishing marketing copy.

inspect_newsroom

Returns stdout/stderr for one Auto-Terminal command the local GDP user already ran. Read-only local context; cannot execute commands.

read_check_run_output

Reads bounded cursor-relative GDP Agora coordination state for the selected repository, including relevant threads, posts, attention and active path or symbol claims.

inspect_agora

Reads the selected repository's GDP-owned durable Lane, current Segment, ancestry and latest semantic checkpoint without creating genealogy or granting execution authority.

inspect_continuity

Projects verified GDP work into a friendly read-only story feed without saving or publishing it.

inspect_wire

Reads one exact typed operation identity from bounded local journal evidence without verifying, retrying, cancelling or mutating work.

inspect_operation

Separates installed, visible, policy-known, target-ready and unproven consent or downstream authority layers without invoking the tool.

inspect_authority

Reads a privacy-bounded server-attested hosted caller projection without exposing raw account, conversation, session, node or workspace identifiers and without granting authority.

inspect_caller_identity

Reads one exact effective descriptor, schema, policy and authority contract without invoking it.

inspect_tool

Reads non-secret server and effective-tool limits without reserving capacity or bypassing quotas.

inspect_limits

Reads privacy-bounded server, effective catalog, canonical policy and non-secret limit identity without invoking another tool.

inspect_server

Classify explicit repository-relative changed paths into bounded restart, reconnect, cache-invalidation and Browser Companion reload requirements, together with content-free runtime freshness counters. This is advisory and read-only: it cannot restart GDP Desktop, reconnect the gateway, reload the extension, clear caches or prove lifecycle completion.

inspect_restart_requirements

Returns a bounded local context pack with a tree, readable text artifacts and skipped-item reasons. Read-only local context.

read_context

Returns one allowed repository-relative text artifact through GDP read limits. Read-only local context.

read_file

Returns the current code diff for the selected local GDP tab or selected path. GDP never applies changes from this tool.

git_diff

Returns a bounded local context bundle with tree entries, readable text artifacts and skipped-item reasons. Read-only local context.

read_folder

Reads the trusted-conversation node/workspace selection, or during the exact-token shadow cohort reports the sole eligible node statelessly when no conversation scope is available. It never queues work or grants enforced routing authority.

get_selected_gdp_node

Follow-up bulk read for already-known paths. At task start prefer inspect_task_context so repository metadata, deterministic file selection and recent GDP evidence arrive in the same call.

read_files

Default first read at task start. Returns one bounded read-only snapshot with repository metadata, the deterministic file pack, selected files and recent GDP check/queue summaries. Use separate repository, file, check or queue tools only for follow-up detail.

inspect_task_context

Returns one explicitly enabled repository-relative PNG or JPEG as native typed image content. Supports ignored and untracked workspace artifacts while rejecting traversal, symlinks, GDP state and sensitive paths.

read_image

Returns an explicitly enabled bounded ordered batch of safe repository-relative PNG or JPEG files as native typed image content.

read_images

Returns branch and working-tree status for the selected local GDP tab. Read-only local context.

git_status

Follow-up workspace-only read. At task start prefer inspect_task_context, which already includes repository metadata together with files and GDP evidence.

repo_summary

Lists Auto-Terminal runs with bounded privacy-masked latest-output and latest-failure previews plus compact content-free suggestion and incoming-review state. The same response includes branch, HEAD and working-tree status; do not call repo_summary or git_status unless diff statistics or an explicitly fresh status read is required. Prefer this before separate read_check_run_output, list_suggested_checks or list_incoming_patches calls. After queueing work, use await_gdp_cycle instead of repeatedly polling this or the queue-list tools.

list_check_runs

Lists privacy-bounded execution nodes and opaque open-workspace summaries without reading local paths or queueing Desktop work.

list_gdp_nodes

Lists local GDP tabs and stable repo_id values. Read-only local context.

list_repos

Lists recent GDP bridge operational events. This is read-only activity metadata, not hidden model reasoning, and it cannot execute commands or modify files.

list_activity_feed

Lists repository-relative paths visible through the selected local GDP tab. Read-only local context.

list_files

One-shot detail view for exact queued patch items. list_check_runs already includes incoming queue counts; after submit_patch, use await_gdp_cycle instead of repeatedly calling this tool. It never returns raw patch text.

list_incoming_patches

One-shot detail view for exact Auto-Terminal suggestion items. list_check_runs already includes suggestion status and counts; after submit_patch or submit_suggested_checks, use await_gdp_cycle instead of repeatedly calling this tool. It is read-only.

list_suggested_checks

Create one background ChatGPT tab from an exact live GDP Browser source identity. No URL, Send, clipboard or arbitrary navigation authority is exposed.

open_chatgpt_tab

Asks the connected GDP Desktop to create or reuse one unselected blank repository tab through the native UI queue. It accepts no repository path or filesystem argument. The immediate result proves admission only; physical execution is separately observable through Desktop-owned durable repo-tab receipts.

open_repo_tab

Previews bounded static effects without invoking the target or claiming an effect occurred.

preview_tool_call

Queues one complete unified diff and all patch-specific verification_plan checks in the same gateway call for local review. This call runs Patch Doctor preflight internally; do not call doctor_patch first for a normal submission. Use doctor_patch only for standalone diagnosis or after a preflight failure. GDP Desktop keeps apply authority local.

submit_patch

Reads retained continuity detail on demand without dumping the whole historical conversation. Current kinds expose bounded semantic checkpoints or Segment ancestry.

recall_context