Execute a bash command in the project directory. Output is captured and truncated.

Read a file from the project directory. Path traversal is blocked.

Write content to a file (overwrites). Parent directories are created.

Replace one occurrence of old_string with new_string in a file.

Find files matching a glob pattern under the project.

Search for a regex pattern in files (uses system grep -r -n).

List contents of a directory.

Search the Proofpane governance / compliance document corpus via the cloud RAG service. Returns the top N matching chunks with source + relevance score. Default collection + retrieval method come from this agent's rag_config (configured in the Proofpane UI); override per-call with the collection arg when needed.

Upload a LOCAL file into the Proofpane governance RAG corpus. The cloud parses it (PDF / DOCX / HTML / text), DLP-scrubs secrets, chunks + embeds it, and audits the ingest. After this, the file's contents are searchable with search_compliance_docs on the returned collection. Use when the user wants a local document made available for governed retrieval / Q&A.

Search + recall past Hermes conversations (governed). Discovery: pass query (FTS5). Read a whole session: session_id. Scroll around a message: session_id+around_message_id. Browse recent: no args.

List available Hermes skills (name + description + category), governed. Optional category filter.

Read a skill's full SKILL.md (and linked reference/template/script files via file_path), governed.

Create / edit / patch / delete a skill, or write/remove a skill's linked file (governed — every write is policy-gated + audited).