Capture one complete, immutable Git evidence artifact, fence it as untrusted data, and start independent read-only provider reviews. Includes committed, staged, unstaged, and untracked changes without truncation.

Ask two or more provider CLIs to independently validate a question. Starts validation jobs — poll with job_status, collect with job_result (not llm_job_*).

Ask one provider CLI to review an answer (starts a validation job; poll job_status, collect job_result).

Summarize agreement/differences between caller-provided answers LOCALLY — does not call any provider.

Challenge a plan, answer, or document for risks and failure modes via provider CLIs (starts validation jobs).

Ask provider CLIs whether they agree or disagree with a claim (starts validation jobs).

Ask one provider CLI a question through the simplified validation surface (starts a validation job).

Run an explicit judge model over validation results. General validation uses caller-supplied terminal results; review_changes rebuilds its question and results from the owned durable run.

List models and capabilities for every available provider CLI (takes no arguments; complements per-provider list_models).

Check a VALIDATION job's status (jobs started by validate_with_models/ask_model/etc.) — distinct from llm_job_status, which tracks provider request jobs.

Collect a VALIDATION job's normalized provider output — distinct from llm_job_result, which returns raw provider request job output.

Retrieve the canonically hashed immutable receipt of a terminal cross-LLM validation run by validationId. Returns minted | pending | expired_unminted (no receipt exists and none can be minted) | verification_failed (a stored receipt does not verify against its run) | not_found (own-or-not-found).

List registered workspace aliases for remote HTTP/OAuth provider calls. Does not browse files. Stdio/local callers should not use workspace_* tools to fix provider path access; pass local workingDir/addDir/includeDirs directly.

Inspect a registered remote HTTP/OAuth workspace alias. Does not list files. Not needed for stdio/local provider calls; do not use workspace_* tools to fix local path access.

Create a remote HTTP/OAuth workspace alias by creating a new local folder or git repo under a configured allowed root. Not for stdio/local provider path access. Requires LLM_GATEWAY_WORKSPACE_ADMIN=1 and OAuth scope workspace:admin.

Register an existing local Git repo as a remote HTTP/OAuth workspace alias. Not for stdio/local provider path access. Requires LLM_GATEWAY_WORKSPACE_ADMIN=1 and OAuth scope workspace:admin.

Initialize or clone the local Personal Agent Config baseline. This never activates a release by itself.

Push the clean local Personal Agent Config baseline to its configured Git upstream without force-pushing.

Synchronize, verify, compile, and atomically activate a Personal Agent Config release. It never pushes.

Show Personal Agent Config state without exposing baseline paths or local machine binding values.

Atomically activate an already verified retained Personal Agent Config release.

Acknowledge the current stale Personal Agent Config release for at most 24 hours.

Fence and release one exact unadmitted durable Kit attempt after the previous gateway process has been stopped. Copy the execution and attempt identity from local session_get output. This action is local-only and cannot recover an existing durable job.

Explain the selected Personal Agent Config release and context provenance without returning local paths or instruction text.

List provider CLI admin operations (auth status, model list, mcp list, plugin list, doctor, etc.) available on the installed CLIs, projected from runtime discovery. Read-only.

Execute a READ-ONLY provider CLI admin operation (from provider_admin_list) and return redacted output. Rejects mutating operations.

Execute a MUTATING provider CLI admin operation (mcp add/remove, login/logout, plugin install/remove, session delete/archive, ...). Disabled unless [admin] allow_mutating_cli_admin_ops=true; routed through approval and audited.

Run a Claude Code CLI request synchronously (when async jobs are enabled, auto-defers to a pollable job past the sync deadline; otherwise runs to completion). Requires exactly one of prompt or promptParts.

Run an OpenAI Codex CLI request synchronously (when async jobs are enabled, auto-defers to a pollable job past the sync deadline; otherwise runs to completion). Requires exactly one of prompt or promptParts.

Fork an existing Codex session into a new branch (codex fork <ID|--last>) without mutating the original. This prompt remains argv-bound and rejects oversized UTF-8 input as non-retryable input_too_large.

Run a Google Antigravity CLI (agy) request through the Gemini-compatible gateway tool synchronously (when async jobs are enabled, auto-defers to a pollable job past the sync deadline; otherwise runs to completion). Requires exactly one of prompt or promptParts.

Run an xAI Grok CLI request synchronously (when async jobs are enabled, auto-defers to a pollable job past the sync deadline; otherwise runs to completion). Requires exactly one of prompt or promptParts.

Run a Cognition Devin CLI request synchronously (auto-defers to a pollable job past the sync deadline when async jobs are enabled; otherwise runs to completion). Headless print mode (devin -p).

Run a Cursor Agent request synchronously (auto-defers to a pollable job past the sync deadline when async jobs are enabled; otherwise runs to completion). Default cli uses headless print mode (cursor-agent --print); gated acp uses native cursor-agent acp and accepts prompt, model, a gateway ACP session, and a registered workspace alias.

Run a Mistral Vibe CLI request synchronously (when async jobs are enabled, auto-defers to a pollable job past the sync deadline; otherwise runs to completion). Requires exactly one of prompt or promptParts. Defaults to --agent accept-edits (auto-accepts file edits; dangerous ops such as shell stay gated).

Start a Claude Code CLI request as a durable background job. Poll with llm_job_status, collect with llm_job_result.

Start an OpenAI Codex CLI request as a durable background job. Poll with llm_job_status, collect with llm_job_result.

Start a Google Antigravity CLI (agy) request as a durable background job through the Gemini-compatible gateway tool. Poll with llm_job_status, collect with llm_job_result.

Start an xAI Grok CLI request as a durable background job. Poll with llm_job_status, collect with llm_job_result.

Start a Cognition Devin CLI request as a durable background job. Poll with llm_job_status, collect with llm_job_result.

Start a Cursor Agent CLI request as a durable background job. Poll with llm_job_status, collect with llm_job_result.

Start a Mistral Vibe CLI request as a durable background job. Poll with llm_job_status, collect with llm_job_result.

Check lifecycle status and bounded privacy-safe normalized progress for a gateway async or deferred-sync job by jobId.

Wait briefly for privacy-safe normalized progress on an owned async job. When the MCP request carries a progress token, notifications are emitted only while this watch request remains active.

Retrieve captured stdout/stderr for a gateway async or deferred-sync job by jobId. Use rawOutput:true with independent stream offsets for resumable pages.

Cancel a running gateway async or deferred-sync job by jobId.

Read back any persisted request (sync or async) from the flight recorder by correlationId, including prompt and response.

Report gateway process health: async-job manager state plus the resolved persistence configuration and paths.

List recent MCP-managed approval decisions recorded by the gateway (approvalStrategy: mcp_managed).

List models, aliases, and defaults for one provider (claude|codex|gemini|grok|mistral|devin|cursor, or an enabled API provider name), or omit cli to list all providers. API providers are returned under an apiProviders array.

Report provider tool/feature capabilities and discovered local skill/tool integrations for claude|codex|gemini|grok|mistral|devin|cursor|grok_api, or an enabled API provider name.

Report installed provider CLI versions, availability, and login status for all registered CLI providers (claude|codex|gemini|grok|mistral|devin|cursor) or one.

Return the gateway's declared provider CLI contracts; with probeInstalled true, diff against installed --help surfaces to detect flag drift.

Return a compact, filterable read-only catalog of declared provider CLI subcommands without flags or raw help.

Return the detailed read-only contract for exactly one declared provider CLI subcommand.

Probe declared provider subcommand --help surfaces and return compact drift rows without raw help output.

Plan (dryRun, default true) or execute an upgrade for one provider CLI using its native update mechanism.

Create a gateway session record for a provider. NOTE: this is gateway bookkeeping (a plain UUID), not a provider-native session; Codex resume needs a real Codex UUID.

List gateway session records and the active session per provider, optionally filtered by provider.

Set or clear the active session for a provider; the active session is used when a request omits sessionId.

Delete a gateway session record by ID (also removes any gateway-owned worktree attached to it).

Get one gateway session record by session ID, including recent request history when available.

Delete all gateway session records, optionally scoped to one provider.