Run safety checks against the working tree or staged diff and return the resulting ReportFile (or summary when large). Side-effecting (class B per D99.V): always persists the ReportFile under .viberevert/.

Render a CommonMark explanation of a check report alongside the report's metadata. Reads an existing ReportFile (read-only, class A per D99.V); does not run new checks.

Project a check report's findings into per-severity counts (critical, high, medium, low). Read-only (class A per D99.V); no threshold input -- returns the full per-level histogram.

Project a check report into a per-file risky-files list (path, max_severity, finding_count) sorted by [max_severity DESC, finding_count DESC, path ASC]. Read-only (class A per D99.V). Capped at 500 entries per D99.U.

Return the project's resolved policy slice from .viberevert.yml: block/warn risk thresholds, check toggles, frameworks, and rollback exclude patterns. Applies M C defaults (D57) before returning. Read-only (class A per D99.V); does not run checks or mutate state.

Start a new VibeRevert session: create the inner checkpoint, capture pre-session git status, and acquire the active-session lock. Returns the new session id, checkpoint id, and start timestamp. Side-effecting (class B per D99.V); writes session state and uses the D22 start lock during execution.

Create a standalone VibeRevert checkpoint capturing the current working tree state. Returns the new checkpoint id and creation timestamp. Side-effecting (class B per D99.V); writes a checkpoint directory under .viberevert/checkpoints/. When name is supplied, uses the D22 name-uniqueness lock; nameless checkpoints skip the lock entirely.

Render a fix-prompt from a VibeRevert check report. Returns the rendered prompt text, the absolute path to the persisted sibling fix-prompt.txt, and the source report id. Side-effecting (class B per D99.V); writes the sibling fix-prompt.txt via atomic temp+rename. The on-disk sibling is always the full untruncated text (D81); the MCP wire response's prompt_text is capped at 262144 bytes (D99.U) -- when truncated, the response carries truncated:true + bytes_omitted.