Atomically apply one validated unified text patch.

One patch may contain multiple repository text-file targets. All targets are validated before mutation and Git applies the patch as one locked operation, so a target failure does not leave a partial multi-file edit.

Create one local Git commit for allowlisted pending changes.

Disabled unless ALLOW_GIT_COMMIT is enabled (GUI: allow Git commit). Requires write or test mode. Does not push, amend, reset, rebase, checkout, or skip hooks. Sensitive paths are never staged.

Run one or more allowlisted repository verification commands.

The allowlist covers test/build/lint/check profiles for common Python, Go, Node, Maven, and Gradle repositories. command_key preserves the original single-command API. command_keys runs a bounded sequential batch; the complete batch is validated before the first command starts.

Every started command returns command, exit_code, stdout, stderr, duration and truncation metadata. Timeout/output-limit termination is a structured failed result so captured evidence is not discarded.

Commands may emit MCP_IMAGE:<repository-relative-path> lines for PNG/JPEG files under the configured test artifact directory; screenshots are returned as native MCP image content.