Inspect perf, kernel policy, capabilities, and collection-mode availability without sampling or attaching to a process.

Inspect the fixed local Docker endpoint and cgroup-v2 support without starting, stopping, building, pulling, or profiling a container.

Inspect the fixed local Docker/Buildx/Builder identities, project build contract, Benchmark requirement, base-image presence, and Collector modes. This is read-only and never builds, pulls, runs, profiles, or modifies source.

Capture the exact authorized build context and return the complete content-bound one-confirmation optimization summary. This does not build or pull. The user must confirm this exact Preview before authorization.

Authorize the exact Docker optimization Preview once. This stores a process-local secret and permits only its fixed paths, build recipe, modes, and budgets; it does not itself build, run, profile, modify source, commit, push, tag, or release.

Build one baseline or next candidate from the already-authorized immutable context and mutable Treatment paths. It accepts no image, command, path, build argument, network option, or Docker flag from the caller.

Revoke one in-memory Docker optimization authorization and conservatively clean only verified session-owned temporary image tags and private snapshots.

Observe bounded CPU deltas for one existing local container and return only container PID, host PID, executable name, and a safe recommendation.

Re-resolve one container process against Docker, /proc, PID start time, namespaces, cgroup identity, and UID policy without profiling it.

Authorize one project-bound existing-container performance session. This stores only process-local authorization and does not execute or profile the target. A fresh user reply to the exact session summary is required; MCP tool permission is not workload consent. allowed_modes is required and must exactly equal the non-empty mode set shown in that summary; expanding it requires a new summary and fresh authorization.

Authorize the exact immutable image, command, mounts, resource limits, modes, and budget pinned in this project's Docker policy. This never builds or pulls an image. A fresh user reply to that exact summary is required; MCP tool permission is not workload consent. allowed_modes is required and must exactly equal the non-empty mode set shown in that summary; expanding it requires a new summary and fresh authorization.

Revoke one Docker authorization held by this project MCP process without stopping or removing a user container.

Re-resolve one authorized existing-container process, consume one bounded session run, and collect it through the restricted Broker. The Docker adapter never enters the Collector or Helper.

Create one fixed-policy temporary container from an already-local immutable image, hold its exact workload at the package Gate until Broker collection is ready, then run, collect, wait, and conservatively clean only that verified container.

Run and collect only a verified image Build produced by this one-confirmation optimization session. The caller selects bounded evidence, never an image, command, mount, network, Docker option, or host path. A failed attempt after workload-lease issuance is charged and stops further build/collection operations in that Session; it must not be retried unchanged.

Create a short-lived PID-bound collection plan. This does not sample or attach.

Execute one previously planned PID collection through the restricted collector broker. Plans are short-lived and single-use.

Run one explicitly authorized executable inside a project as the MCP user, bind its exact PID incarnation, and collect it through the restricted Collector broker. After the user approves the exact scope, authorization must be exactly I_EXPLICITLY_AUTHORIZE_PROJECT_EXECUTION; do not substitute manual PID attachment.

Analyze a stored CPU record collection artifact.

Deterministically analyze a stored, normalized sched/off-CPU/lock TraceEvidence artifact and verify it before Agent use.

Replay and verify a stored sched/off-CPU/lock analysis before Agent interpretation.

Analyze an allowed folded, perf-script, or perf.data profile and store JSON.

Independently verify a stored Analysis fingerprint, metadata consistency, and weight conservation before Agent interpretation.

Return a bounded page of hotspots from a stored analysis.

Return one hotspot with bounded dominant paths, classifications, and limits.

Return a bounded page of dominant call paths, optionally containing a symbol.

Apply generic candidate-only rules and return a bounded classification page.

Build and store the full evidence-constrained diagnosis artifact.

Read at most 64 KiB from a stored JSON artifact.

Resolve a verified module offset using an allowed ELF/debug file.

Read bounded source lines within one configured allowed workspace.

Normalize a supported benchmark JSON file and store the typed artifact.

Compare two stored analyses and store bounded profile-difference evidence.

Compare repeated benchmark values with condition and impact checks.

Compare two Docker measurements using bound profile, absolute benchmark, correctness, treatment, and whole-container resource evidence.

Deterministically compare one authorized baseline/candidate Build pair using bound container measurements, profiles, Benchmark correctness, resource deltas, and fixed-environment invariants. Different final image digests are accepted only as session-bound Treatment evidence.

Finalize the source-workspace choice for either one replay-verified Iteration or a stopped Session whose latest candidate could not be evaluated, revoke the bounded optimization Session, and clean only verified session resources. Retaining a non-verified candidate requires a fresh explicit user decision and never creates or upgrades an A/B conclusion.

Run bounded perf record/stat/sched/lock/off-CPU collection only after explicit server and per-call authorization.