Check a Deed program and report what the compiler found. Writes one JSON object a line. A diagnostic line is something wrong with the program. An obligation line is a contract clause the checker looked at: tier is proven when it was settled at compile time, tested when a test pins it, and guarded when it falls to a runtime check, in which case reason says what stopped it from being proven. Silence means the program is well formed.

Run a Deed program's tests: every test block in it, and every property its contracts generate. Writes one JSON object a line with the name and whether it passed, and the failing diagnostic when it did not, then a summary line counting them, so a program with no tests in it says so rather than answering with nothing. A property line is one nobody wrote: the checker generated inputs from a where clause and held the function to its ensures, and the seed is on the line so the same run can be asked for again. Refuses without running when the program does not check: ask deed_check for what is wrong with it.

Run a Deed program's main and report what it printed. Refuses before running if the program does not check, or if main's row asks for a capability this server does not hand out: there is no filesystem here, so a program that reads or writes files is refused rather than failed.

Format a Deed program into the one layout the formatter chooses. Returns the formatted text, or the parse diagnostics when the file does not parse, because a file with no tree has no layout to pick.

Apply every machine-applicable repair the compiler offers and return the repaired program. Only the repairs deed fix would apply without asking; a suggestion the compiler is not sure about is left for the reader and shows up in deed_check instead.

Explain one diagnostic code, such as DEED4025. Returns the page that code carries: what it means, why the rule exists, and usually an example.

Compare the checked module set before a patch with the set after it. Returns one JSON review receipt naming authority additions, obligation tier regressions and newly introduced Guarded obligations. An optional policy object accepts denyNewAuthority, denyWeakerPromises and denyNewGuarded; its verdict is evidence, not a transport error. Both sides stay in memory: this tool opens no file and holds no capability.