List the SSH hosts this server can reach and the active safety policy.

Call this first: use the returned alias values as the host argument for the other tools. Never guess a hostname or IP — only configured aliases work.

Dry-run the safety policy for a command without executing it.

Returns the verdict (allow / needs_confirmation / block), a human-readable reason, and which rules matched. Use this to understand why a command would be refused before calling run_command.

Run one shell command on an SSH host, subject to the safety policy.

host must be an alias from list_hosts (not a raw hostname/IP). Read exit_status, stdout, and stderr from the result. The result status:

• "ok": executed.

• "needs_confirmation": destructive command — explain it to the user and only re-call with confirm=true after they approve; do not retry blindly.

• "blocked": catastrophic; cannot run — use a safer approach.

• "error": see reason (unknown host, timeout, connection failure).

Args: host: Alias of a configured host (call list_hosts to discover them). command: A single shell command to execute. confirm: Authorize a command previously flagged needs_confirmation. timeout: Per-command timeout in seconds (defaults to policy setting).

Read a remote file's contents over SFTP (size-capped).

Args: host: Alias of a configured host. path: Absolute or relative remote path. max_bytes: Max bytes to read (defaults to policy max_output_bytes).

List the entries of a remote directory over SFTP.