Read a text file through the context ledger. The FIRST read of a file/view (or the first after a context compaction) returns full content. A later read of an UNCHANGED view returns a short "reuse what you have" marker. A later read of a CHANGED view returns a unified DIFF to apply to the copy you already have. Optionally read just one symbol (function/class by name) or a line range instead of the whole file. All dedup is lossless: it only diffs/withholds content it can prove you still have. Every read is metered (see context_stats) and attested in the signed context receipt. Pass force_full:true for the whole content regardless.

Read a working set of text files in one call, each through the same lossless ledger as read_file (full on first contact, unchanged-marker or diff on re-reads). One call for N files instead of N calls. Per-file errors are reported inline without failing the batch.

Return a cheap structural outline of a file: declaration lines (functions, classes, types, methods) with line numbers, bodies elided. Use this to navigate a large/unknown file before reading specific parts with read_file.

Where did this session’s file-read tokens go? Totals, per-repo breakdown, heaviest files, dedup savings, and a USD estimate (LOSSLESS_PRICE_PER_MTOK, default $3/MTok input). Counted with a real tokenizer on exactly what this server sent.

Issue an HMAC-SHA256-signed context receipt for this session: every file/view the model was shown, the SHA-256 of each content version, how it was delivered (full/diff/unchanged), and token totals. The auditable answer to "what did the AI see when it did this?". Signs with LOSSLESS_RECEIPT_KEY or the shared trust key file, so it verifies with the same key as trust-mcp receipts. Verify later with verify_context_receipt.

Verify a context receipt + signature pair against the local receipt key (timing-safe, canonicalized so JSON field order does not matter).