Stable wrapper only for hidden specialist actions. Call visible tools such as search_project, read_many_files, apply_patch_bundle, run_validation, and show_changes directly; wrapping visible actions adds avoidable routing failures. It cannot call tools disabled by the current mode.

Show CodexPro server configuration, safety modes, limits, and blocked paths. Does not reveal auth tokens.

Read the exact current change set, bind it to the current HEAD and validation evidence, and report blockers. This tool never stages, commits, or pushes.

Run a secret safety scan, stage only the exact selected paths, reject stale HEAD/branch or unrelated staged files, create one real commit, and verify the committed path set. This tool never pushes.

Read the exact local HEAD and remote branch head and calculate ahead/behind state without modifying the repository or remote.

Push exactly one full commit SHA to one named remote branch, reject unexpected remote advancement or non-fast-forward state, forbid force, and verify the remote SHA after push.

Precisely finalize Git changes after a scoped release safety check: merge selected_paths with authoritative expected_paths so omitted task outputs are still eligible, include explicitly named untracked files without a second hidden switch, exclude unrelated untracked files, block missing or extra paths before creating a local commit, create and validate a content-bound security receipt, block sensitive paths or unsafe/incomplete scans, verify the committed path set again, and optionally push the exact commit. Build, tests, browser validation, Acceptance, and formal certification are not rerun.

Push an already-created local commit exactly once without staging, committing, rerunning Acceptance, or requiring a clean workspace. Requires explicit push-only intent; failure returns the original Git error and a manual command.

Read the workspace already bound to this Connector conversation. This tool is strictly read-only: it never activates, rebinds, or changes the global active workspace. If the conversation is unbound, it inspects the configured default root and asks the caller to use open_workspace explicitly.

Open a local project directory. In a ChatGPT Connector request this updates only the current conversation binding and never changes the global active workspace; local CLI calls retain the global active-workspace compatibility path. Set activate=false for read-only inspection.

Build a task preflight rule summary from global CodexPro operating rules, .codexpro/project.yml, AGENTS/rules files, and .codexpro/memory/rules.md. Read-only; does not write long-term memory.

Run commands from .codexpro/acceptance.yml. Long profiles start as persistent local tasks and return a run id immediately; short checks may remain synchronous.

Read the persisted execution and validation status for a long acceptance run returned by run_acceptance.

Cancel one persisted acceptance run. Queued runs are removed from the resource queue; running managed validation receives an abort signal and its process tree is terminated.

Read the final persisted acceptance result and bounded report text after a long acceptance run completes.

List files and directories inside the workspace, excluding blocked paths.

Read a specific text file with line numbers. Avoid rereading files after write/edit unless exact final content is needed.

Create or overwrite a meaningful text file inside the workspace. Returns a unified diff; do not create empty placeholder files.

Apply a targeted exact text replacement inside a workspace text file. Returns a unified diff.

Read multiple text files in one compact tool call to reduce repeated read/cat windows. Returns bounded per-file previews.

Batch all currently known fixed-string queries into one compact call, then read returned paths with read_many_files. Do not issue one search call per symbol or repeat the same query unless this response is partial.

Classify a user task into a CodexPro task mode and return mode-specific tool policy / misuse guard guidance.

Apply multiple write or exact-replacement operations in one compact tool call.

Run project checks with durable handling for long builds and test suites. In execution_mode=auto, long commands return immediately with a run id and continue locally; use run_task_status and read_run_task_result for the final result. Short checks still return synchronously.

Append one bounded ChatGPT-authored public progress update, summary, finding, or warning to an existing task in the active workspace. This is an idempotent explanatory report write only: it cannot change task, validation, Git, or completion state.

Read the current state of a durable asynchronous run started by start_run_task or automatically returned by a long bash/run_validation command.

Read the highest-priority current task across Goal, Durable Job, and Handoff using the unified live projection. Running and waiting work takes precedence over recent terminal history.

Read one unified, read-only task status projected live from the authoritative Goal, Durable Job, or current Handoff state.

Read a unified, side-effect-aware recovery plan before resuming a Goal, Durable Job, or Handoff. This tool is read-only and never replays work.

Read the saved result for a terminal durable run, including completed, failed, blocked, or cancelled long bash/run_validation commands. Does not duplicate the report in structured content.

Run one allowlisted verification command. In execution_mode=auto, long build, test, smoke, lint, typecheck, and validation commands return immediately with a durable run id and continue locally. Use run_task_status and read_run_task_result instead of repeating the command after a transport error. Short commands still return synchronously. Do not use bash for git status/diff or file inspection; use show_changes, tree, search, and read instead. Do not chain commands with &&, pipes, redirects, or shell file readers.

Send one local Windows notification after the entire workspace task has passed focused verification. In an active Gold Task session this first enforces the mandatory file scope, fresh validation, Git, and control-repository completion check and supplies the supervisor completion signal; outside Gold Tasks it remains optional.

Summarize the current workspace changes in one review-oriented result with git status, diff stats, and optional diff. Use this instead of bash git status, bash git diff, git_status, or git_diff when reviewing work.