The model-facing tool set for `ocserve`: bash, read, write, edit, glob,
grep, webfetch, task, question, todowrite — with the permission gate and
function-targeted edit semantics (signature + body replacement).
Tool output formats match what upstream-format clients expect; see
`TESTING.md` and `TRACEABILITY.md` in the repository root.