Run command
command_runUse this when the user asks to run a command on the approved computer, such as a build, test, Git, package manager or PowerShell command, including commands that only inspect state. Full Access uses the Windows account's rights; scoped grants keep their restrictions. timeoutMs is the process lifetime, up to 24 hours; a long command returns its running IDs in about two seconds, then follow it with operation_status/operation_output and stop it with operation_cancel. Do not use to scan or probe hosts other than this computer (port scans, host discovery, vulnerability checks); decline those instead. Needs the sessionId from execution_session_open and a new operationId; each call is metered as one execution. A short result is returned inline within about two seconds; otherwise keep the returned IDs for operation_status and operation_output and do not resend the call.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Working folder relative to the selected project root (or the workspace root); omit for the root | |
| args | No | Arguments as separate strings | |
| command | Yes | Executable name or path, for example node, npm, git or powershell | |
| sessionId | Yes | executionSessionId returned by execution_session_open | |
| timeoutMs | No | Process lifetime limit in ms, 100-86400000 (default 60000) | |
| deadlineAt | No | Optional UTC admission deadline at most 60 seconds ahead (queue start timeout, NOT process execution lifetime) | |
| operationId | Yes | A new random UUID v4 for this call; reuse it only to retry this same call | |
| idempotencyKey | No | Optional retry key, 8-128 chars of [A-Za-z0-9._:-]; defaults to operationId | |
| efficiencyProfile | No | Optional, unverified label of the client's model, recorded as display metadata in the device owner's local activity statistics. Omit when unknown. Never send credentials or conversation content. |