Tools

The four built-in tools the agent uses.

Four built-in tools. Zero ceremony. The minimum viable toolbox for an agent that actually ships code.

Tool	What it does
`read`	Read text files, or render PNG / JPG / GIF / WebP inline on modern terminals.
`write`	Create or overwrite files, making parent directories as needed.
`edit`	One or more exact-match replacements in an existing file.
`bash`	Run a shell command in the session cwd with merged stdout/stderr and a timeout.

Jail mode

Type /jail to confine every tool to the current directory. Bash refuses sudo, rm -rf /, and other obvious escape patterns. It is a guardrail against accidents, not a hard security boundary. See Jail mode for the full behavior.

Shell escape

Type ! followed by a command to run it straight in your shell, no model call involved: !mkdir foo, !git status, !ls -la.

Everything after the ! is passed to the same shell the bash tool uses (/bin/sh -c on Unix, cmd /C on Windows), runs in the session working directory, and honors the /jail sandbox. The output is appended below the transcript as a terminal-log block (command echo, output, exit code), styled by success or failure. It stays on screen until you send your next prompt (or run /clear), so it doesn't bleed into the model conversation. A running !command shares the busy state with the agent: esc cancels it, and you cannot start one while a turn (or another shell escape) is in flight.