Return WorkspaceGuard runtime configuration summary.

Show the current local policy profile for this WorkspaceGuard server.

Development smoke-test tool.

Start an in-memory task under an open workspace.

Update task status or append a note.

Return one task by id, or all known in-memory tasks.

Create a file manifest snapshot for an open workspace.

Record a named checkpoint for an existing snapshot id. This creates metadata only; restore is not implemented and snapshot existence is not validated yet.

Create a fresh snapshot and compare it with the previous drift_check snapshot for the workspace. The first call records the baseline and reports no drift.

Run a structured verification command inside an open workspace.

Open an allowed local checkout workspace and return a workspaceId.

Return a known workspace by id, or list open workspaces when workspaceId is omitted.

Run a structured command array inside an open workspace. This is real local execution.

Run git status --porcelain=v1 inside an open workspace.

Run git diff --no-color inside an open workspace.

Read a UTF-8 file inside an open workspace.

List a directory inside an open workspace.

Search for a literal text pattern inside an open workspace.

Create or overwrite a UTF-8 file inside an open workspace.

Replace an exact text block that appears exactly once in a workspace file.