Profiles

--profile defaults to ultra. Unknown values are rejected (strict, agent, or ultra only).

Profile	Tools	What it adds
strict	17	Agent core. No git.
agent	18	Strict plus git.
ultra	29	Full catalog. Default.

--git-network is ignored in strict. It is honored by ultra and agent.

Recommended agent flags: --profile=strict --compact-mode --roots-mode=union.

Registered tools

strict tools are also in agent and ultra.

Tool	Profile	Role
list_allowed_directories	strict	Sandbox roots. No parameters.
directory_tree	strict	Compact tree. Defaults: respect_ignore=true, max_depth=2, max_nodes=500.
list_directory	strict	Directory listing.
search_files	strict	Name search. Content with include_content:true.
get_file_info	strict	Size, dates, type. Batch paths.
read_file	strict	Read. Replaces cat, head, tail, cut.
write_file	strict	Create or overwrite.
edit_file	strict	Exact, regex, range, insert.
multi_edit	strict	Several replacements, one file.
apply_patch	strict	Unified diff.
diff_files	strict	Two paths, or against:"backup".
create_directory	strict	Recursive mkdir.
move_file	strict	Move or rename.
delete_file	strict	Soft-delete by default.
backup	strict	Undo, restore, trash.
help	strict	Catalog, or help(tool:"X").
security_policy	strict	Whether a file policy is active. Does not list rules.
git	agent, ultra	Local git unless --git-network.
copy_file	ultra	Copy a file or directory.
batch_operations	ultra	Batch, pipeline, or rename.
project_replace	ultra	One find/replace across a tree or a paths list.
analyze_operation	ultra	Dry-run preview: file, optimize, write, edit, delete.
wsl	ultra	WSL sync and path conversion. Blocked while a file policy is active.
server_info	ultra	help, stats, artifact.
minify_js	ultra	Pure-Go JS minify. No Node.
analyze_code	ultra	Read-only symbols, lint, sec, impact. Not a writer.
github_issues	ultra	GitHub issues via gh. Open-world.
gitlab_issues	ultra	GitLab issues via HTTP. Open-world.
context_pack	ultra	Experimental since 4.8.0. No outputSchema. Ranked files and short snippets. Not an embedding index.

analyze_code symbols: Go via AST; JS, TS, C#, and SQL via regex (name and line).

context_pack is the only experimental tool. Its description is prefixed at registration. It must not declare an outputSchema.

Not registered

These names exist in source and are not added in registerTools:

read_text_file, search, edit, write, create_file, View, Edit, Write, Replace, LS, GlobTool, GrepTool, fs.

directory_tree is registered. It is not one of those aliases.

If a client asks for read_multiple_files or read_text_file, use read_file with paths.