@gaunt-sloth/agent 2.0.0-alpha.35 → 2.0.0-alpha.36

package/dist/core/GthDeepAgent.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"GthDeepAgent.js","sourceRoot":"","sources":["../../src/core/GthDeepAgent.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAC9E,OAAO,EAAmB,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,cAAc,GACf,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AACxE,6FAA6F;AAC7F,gGAAgG;AAChG,oGAAoG;AACpG,iEAAiE;AACjE,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,wBAAwB,EACxB,sBAAsB,EACtB,+BAA+B,EAC/B,oBAAoB,GACrB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGlE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAA0B,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAiB,MAAM,YAAY,CAAC;AAC/E,OAAO,EACL,gBAAgB,EAChB,8BAA8B,EAC9B,qBAAqB,EACrB,sBAAsB,GAEvB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,yBAAyB,EAA2B,MAAM,2BAA2B,CAAC;AAC/F,+FAA+F;AAC/F,0DAA0D;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB;IACzB,OAAO,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC9C,CAAC;AAiDD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,YAAa,SAAQ,gBAAgB;IAChD,8FAA8F;IAC9F,4FAA4F;IAE5F,KAAK,CAAC,IAAI,CACR,OAA+B,EAC/B,QAAmB,EACnB,YAA8C;QAE9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAElE,uFAAuF;QACvF,qFAAqF;QACrF,kEAAkE;QAClE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACvC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;YAChD,IAAI,EAAE,mCAAmC;YACzC,8DAA8D;YAC9D,UAAU,EAAE,CAAC,KAAU,EAAE,EAAE;gBACzB,cAAc,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;gBACzC,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC9D,IACE,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC;oBACjC,WAAW,CAAC,UAAU;oBACtB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,CAAC,EAClC,CAAC;oBACD,YAAY,CACV,WAAW,CAAC,IAAI,EAChB,sBAAsB,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAClE,CAAC;gBACJ,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;SACF,CAAC,CAAC;QAEH,qFAAqF;QACrF,qFAAqF;QACrF,oFAAoF;QACpF,uFAAuF;QACvF,iFAAiF;QACjF,yEAAyE;QACzE,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;QAChD,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;YAC9C,IAAI,EAAE,2BAA2B;YACjC,8DAA8D;YAC9D,aAAa,EAAE,KAAK,EAAE,OAAY,EAAE,OAAY,EAAE,EAAE;gBAClD,sFAAsF;gBACtF,uFAAuF;gBACvF,yFAAyF;gBACzF,yFAAyF;gBACzF,sFAAsF;gBACtF,IAAI,MAAsC,CAAC;gBAC3C,IAAI,CAAC;oBACH,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;oBAC5C,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,qDAAqD;gBACvD,CAAC;gBACD,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;gBAClC,IAAI,CAAC,OAAO;oBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,CAAC;oBACH,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,2CAA2C;gBAC7C,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBACxC,IAAI,CAAC;oBACH,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;gBACjC,CAAC;gBAAC,MAAM,CAAC;oBACP,2CAA2C;gBAC7C,CAAC;gBACD,OAAO,QAAQ,CAAC;YAClB,CAAC;SACF,CAAC,CAAC;QAEH,8FAA8F;QAC9F,4FAA4F;QAC5F,8FAA8F;QAC9F,wFAAwF;QACxF,gGAAgG;QAChG,4FAA4F;QAC5F,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;QAE1C,8FAA8F;QAC9F,yFAAyF;QACzF,0FAA0F;QAC1F,4FAA4F;QAC5F,4FAA4F;QAC5F,MAAM,iCAAiC,GAAG,uCAAuC,CAC/E,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,YAAY,CACxC,CAAC;QACF,MAAM,UAAU,GAAG;YACjB,GAAG,MAAM,CAAC,UAAU;YACpB,wBAAwB;YACxB,sBAAsB;YACtB,iCAAiC;SAClC,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,sBAAsB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEpF,2FAA2F;QAC3F,4FAA4F;QAC5F,qFAAqF;QACrF,+FAA+F;QAC/F,4FAA4F;QAC5F,6FAA6F;QAC7F,wDAAwD;QACxD,8FAA8F;QAC9F,2FAA2F;QAC3F,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QACjE,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,YAAY,CACf,WAAW,CAAC,OAAO,EACnB,wDAAwD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC5E,CAAC,YAAY;oBACX,CAAC,CAAC,oGAAoG;oBACtG,CAAC,CAAC,EAAE,CAAC,CACV,CAAC;QACJ,CAAC;QACD,4FAA4F;QAC5F,oFAAoF;QACpF,uFAAuF;QACvF,mFAAmF;QACnF,MAAM,OAAO,GAAG,sBAAsB,CACpC,IAAI,iBAAiB,CAAC;YACpB,OAAO,EAAE,iBAAiB,EAAE;YAC5B,WAAW,EAAE,YAAY;SAC1B,CAAC,EACF;YACE,GAAG,EAAE,iBAAiB,EAAE;YACxB,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SAC3C,CACF,CAAC;QAEF,yFAAyF;QACzF,4FAA4F;QAC5F,4FAA4F;QAC5F,2FAA2F;QAC3F,sFAAsF;QACtF,+EAA+E;QAC/E,4CAA4C;QAC5C,8FAA8F;QAC9F,gGAAgG;QAChG,6FAA6F;QAC7F,6FAA6F;QAC7F,0FAA0F;QAC1F,6FAA6F;QAC7F,4FAA4F;QAC5F,4FAA4F;QAC5F,oFAAoF;QACpF,6FAA6F;QAC7F,4FAA4F;QAC5F,+FAA+F;QAC/F,gGAAgG;QAChG,gGAAgG;QAChG,2EAA2E;QAC3E,MAAM,aAAa,GACjB,IAAI,CAAC,MAAM,EAAE,kBAAkB,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE5F,iGAAiG;QACjG,+FAA+F;QAC/F,+FAA+F;QAC/F,6FAA6F;QAC7F,+FAA+F;QAC/F,8BAA8B;QAC9B,4FAA4F;QAC5F,4FAA4F;QAC5F,4FAA4F;QAC5F,+FAA+F;QAC/F,oEAAoE;QACpE,MAAM,eAAe,GACnB,IAAI,CAAC,OAAO,KAAK,MAAM;YACrB,CAAC,CAAC,wBAAwB,CACtB,iBAAiB,CACf,YAAY;gBACV,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC3C,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAC5D,EACD,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAC7B,aAAa,EACb,IAAI,CAAC,MAAM,EAAE,UAAU,CACxB;YACH,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QAE1B,kGAAkG;QAClG,8FAA8F;QAC9F,2FAA2F;QAC3F,sFAAsF;QACtF,6FAA6F;QAC7F,gGAAgG;QAChG,0FAA0F;QAC1F,4FAA4F;QAC5F,kCAAkC;QAClC,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QAElF,+FAA+F;QAC/F,gGAAgG;QAChG,2FAA2F;QAC3F,6FAA6F;QAC7F,8FAA8F;QAC9F,sFAAsF;QACtF,iGAAiG;QACjG,+FAA+F;QAC/F,6FAA6F;QAC7F,MAAM,iBAAiB,GACrB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC;QACpF,MAAM,eAAe,GAAG,iBAAiB;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,+BAA+B,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;QAE1F,wFAAwF;QACxF,gFAAgF;QAChF,uFAAuF;QACvF,wFAAwF;QACxF,kGAAkG;QAClG,gGAAgG;QAChG,gGAAgG;QAChG,kGAAkG;QAClG,6FAA6F;QAC7F,qDAAqD;QACrD,IAAI,SAAiC,CAAC;QACtC,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;QAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,MAAM,eAAe,GAAG,aAAa,EAAE,CAAC;YACxC,MAAM,iBAAiB,GAAG,eAAe,EAAE,CAAC;YAC5C,MAAM,cAAc,GAAG,YAAY,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE;oBACrD,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;iBACjE,CAAC,CAAC;gBACH,IAAI,CAAC,YAAY,CAAC,6BAA6B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5F,CAAC;oBAAS,CAAC;gBACT,aAAa,CAAC,eAAe,CAAC,CAAC;gBAC/B,eAAe,CAAC,iBAAiB,CAAC,CAAC;gBACnC,YAAY,CAAC,cAAc,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAkC;YAChD,0FAA0F;YAC1F,uDAAuD;YACvD,SAAS;YACT,yFAAyF;YACzF,oFAAoF;YACpF,YAAY;YACZ,8DAA8D;YAC9D,UAAU,EAAE,UAAiB;YAC7B,OAAO;YACP,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,qFAAqF;YACrF,0FAA0F;YAC1F,uFAAuF;YACvF,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY;SACb,CAAC,CAAC;QACH,QAAQ,CAAC,iCAAiC,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA+B,EAC/B,QAAmB;QAEnB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,QAAQ,CAAC,0DAA0D,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;QAE3F,uDAAuD;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,cAAc,CAAC,kBAAkB,EAAE;YACjC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,YAAY,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAErD,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,IAAI,CAAC,YAAY,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,uFAAuF;QACvF,4EAA4E;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC;QAC/E,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,YAAY,CACf,uHAAuH,CACxH,CAAC;QACJ,CAAC;QAED,gFAAgF;QAChF,mFAAmF;QACnF,iFAAiF;QACjF,8EAA8E;QAC9E,sFAAsF;QACtF,QAAQ,CAAC,kEAAkE,CAAC,CAAC;QAC7E,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,MAAe,EAAE,CAAC;QAC7E,MAAM,aAAa,GACjB,CAAC,aAAa,IAAI,IAAI,CAAC,SAAS,EAAE,YAAY;YAC5C,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,oBAAoB,EAAE,OAAO,CAAC;YAClE,CAAC,CAAC,EAAE,CAAC;QACT,QAAQ,CAAC,0BAA0B,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;QAE3D,gFAAgF;QAChF,MAAM,oBAAoB,GAAG,aAAa;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACzD,QAAQ,CAAC,6BAA6B,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC;QAErE,0FAA0F;QAC1F,4FAA4F;QAC5F,4FAA4F;QAC5F,IAAI,KAAK,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,oBAAoB,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QACvF,CAAC;QAED,iFAAiF;QACjF,mFAAmF;QACnF,sFAAsF;QACtF,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,qBAAqB,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChF,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACxF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,CAAC,YAAY,CACf,WAAW,CAAC,OAAO,EACnB,4EAA4E,KAAK,EAAE,CACpF,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,gBAAgB;iBAC/B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;iBACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;iBACtB,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;YAChD,QAAQ,CAAC,0BAA0B,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9D,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QAEnC,iFAAiF;QACjF,iFAAiF;QACjF,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB;YAC1D,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB;YACpC,8DAA8D;YAC9D,IAAI,CAAC,MAAM,CAAC,UAA+B,EAC3C,IAAI,CAAC,MAAM,CACZ;YACH,CAAC,CAAC,EAAE,CAAC;QAEP,kFAAkF;QAClF,wFAAwF;QACxF,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3D,MAAM,IAAI,GAAI,CAAuB,CAAC,IAAI,IAAI,EAAE,CAAC;YACjD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,gDAAgD,IAAI,4BAA4B,CAAC,CAAC;gBAC3F,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,uFAAuF;QACvF,6FAA6F;QAC7F,yFAAyF;QACzF,0FAA0F;QAC1F,8FAA8F;QAC9F,4FAA4F;QAC5F,8FAA8F;QAC9F,4FAA4F;QAC5F,0FAA0F;QAC1F,8FAA8F;QAC9F,8FAA8F;QAC9F,+FAA+F;QAC/F,+FAA+F;QAC/F,mDAAmD;QACnD,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;YACzC,IAAI,EAAE,0BAA0B;YAChC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBACvC,IAAI,CAAC;oBACH,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,iFAAiF;oBACjF,+EAA+E;oBAC/E,uFAAuF;oBACvF,uFAAuF;oBACvF,mFAAmF;oBACnF,sFAAsF;oBACtF,6EAA6E;oBAC7E,IACE,CAAC,YAAY,cAAc;wBAC1B,CAAuB,EAAE,IAAI,KAAK,gBAAgB;wBAClD,CAAuB,EAAE,IAAI,KAAK,YAAY,EAC/C,CAAC;wBACD,MAAM,CAAC,CAAC;oBACV,CAAC;oBACD,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBAC3D,sFAAsF;oBACtF,sFAAsF;oBACtF,qFAAqF;oBACrF,kFAAkF;oBAClF,wFAAwF;oBACxF,+EAA+E;oBAC/E,IACE,+FAA+F,CAAC,IAAI,CAClG,OAAO,CACR,EACD,CAAC;wBACD,QAAQ,CAAC,8CAA8C,OAAO,EAAE,CAAC,CAAC;wBAClE,OAAO,IAAI,WAAW,CAAC;4BACrB,OAAO,EAAE,OAAO;4BAChB,8DAA8D;4BAC9D,YAAY,EAAG,OAAO,CAAC,QAAgB,EAAE,EAAE,IAAI,EAAE;4BACjD,MAAM,EAAE,OAAO;yBAChB,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,CAAC,CAAC;gBACV,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,wFAAwF;QACxF,2FAA2F;QAC3F,wFAAwF;QACxF,8FAA8F;QAC9F,wFAAwF;QACxF,wFAAwF;QACxF,iGAAiG;QACjG,gFAAgF;QAChF,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;YAC1C,IAAI,EAAE,2BAA2B;YACjC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBACvC,IAAI,CAAC;oBACH,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,CAAC,YAAY,uBAAuB,EAAE,CAAC;wBACzC,QAAQ,CACN,4CAA4C,CAAC,CAAC,QAAQ,IAAI,SAAS,YAAY;4BAC7E,0BAA0B,CAAC,CAAC,OAAO,GAAG,CACzC,CAAC;wBACF,OAAO,IAAI,WAAW,CAAC;4BACrB,OAAO,EAAE,CAAC,CAAC,MAAM;4BACjB,8DAA8D;4BAC9D,YAAY,EAAG,OAAO,CAAC,QAAgB,EAAE,EAAE,IAAI,EAAE;4BACjD,MAAM,EAAE,OAAO;yBAChB,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,CAAC,CAAC;gBACV,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,2FAA2F;QAC3F,+FAA+F;QAC/F,6FAA6F;QAC7F,gGAAgG;QAChG,4FAA4F;QAC5F,6FAA6F;QAC7F,kGAAkG;QAClG,iGAAiG;QACjG,4FAA4F;QAC5F,iGAAiG;QACjG,+FAA+F;QAC/F,kGAAkG;QAClG,gGAAgG;QAChG,iGAAiG;QACjG,gGAAgG;QAChG,iGAAiG;QACjG,8FAA8F;QAC9F,2FAA2F;QAC3F,gEAAgE;QAChE,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;YAC7C,IAAI,EAAE,0BAA0B;YAChC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBACvC,IAAI,CAAC;oBACH,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IACE,CAAC,YAAY,KAAK;wBAClB,CAAC,CAAC,IAAI,KAAK,eAAe;wBAC1B,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EACjC,CAAC;wBACD,QAAQ,CAAC,sDAAsD,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC5E,OAAO,IAAI,WAAW,CAAC;4BACrB,OAAO,EAAE,CAAC,CAAC,OAAO;4BAClB,8DAA8D;4BAC9D,YAAY,EAAG,OAAO,CAAC,QAAgB,EAAE,EAAE,IAAI,EAAE;4BACjD,MAAM,EAAE,OAAO;yBAChB,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,CAAC,CAAC;gBACV,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,2FAA2F;QAC3F,2FAA2F;QAC3F,gGAAgG;QAChG,+FAA+F;QAC/F,gFAAgF;QAChF,gGAAgG;QAChG,8FAA8F;QAC9F,kGAAkG;QAClG,2FAA2F;QAC3F,4FAA4F;QAC5F,gBAAgB;QAChB,MAAM,UAAU,GAAG;YACjB,iBAAiB;YACjB,kBAAkB;YAClB,qBAAqB;YACrB,GAAG,oBAAoB;SACxB,CAAC;QAEF,kFAAkF;QAClF,4FAA4F;QAC5F,2FAA2F;QAC3F,0CAA0C;QAC1C,MAAM,WAAW,GAAG,gBAAgB,CAClC;YACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,SAAS,EACP,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;gBACtE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;gBACvB,CAAC,CAAC,SAAS;SAChB;QACD,mFAAmF;QACnF,2EAA2E;QAC3E,kBAAkB,EAAE,CACrB,CAAC;QACF,cAAc,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;QAEtD,qFAAqF;QACrF,iFAAiF;QACjF,6FAA6F;QAC7F,+FAA+F;QAC/F,uFAAuF;QACvF,0FAA0F;QAC1F,gGAAgG;QAChG,+FAA+F;QAC/F,gGAAgG;QAChG,qCAAqC;QACrC,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpE,MAAM,YAAY,GAChB,OAAO,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAEzF,2FAA2F;QAC3F,gGAAgG;QAChG,gGAAgG;QAChG,+FAA+F;QAC/F,6FAA6F;QAC7F,yDAAyD;QACzD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,wBAAwB,CACrE,IAAI,CAAC,MAAM,IAAI,SAAS,EACxB,IAAI,CAAC,OAAO,CACb,CAAC;QACF,EAAE;QACF,oFAAoF;QACpF,iGAAiG;QACjG,iGAAiG;QACjG,EAAE;QACF,4FAA4F;QAC5F,iGAAiG;QACjG,4FAA4F;QAC5F,0FAA0F;QAC1F,8FAA8F;QAC9F,8CAA8C;QAC9C,EAAE;QACF,+FAA+F;QAC/F,gFAAgF;QAChF,gGAAgG;QAChG,iGAAiG;QACjG,0FAA0F;QAC1F,yEAAyE;QACzE,kGAAkG;QAClG,iDAAiD;QACjD,EAAE;QACF,+FAA+F;QAC/F,+FAA+F;QAC/F,6FAA6F;QAC7F,6DAA6D;QAC7D,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;QAC3E,MAAM,cAAc,GAAG;YACrB,GAAI,gBAA8C;iBAC/C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;iBACzB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YAChF,GAAG,8BAA8B;SAClC,CAAC;QACF,8FAA8F;QAC9F,+FAA+F;QAC/F,6FAA6F;QAC7F,+FAA+F;QAC/F,mFAAmF;QACnF,6FAA6F;QAC7F,6FAA6F;QAC7F,+FAA+F;QAC/F,gGAAgG;QAChG,gFAAgF;QAChF,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,oFAAoF;QACpF,MAAM,UAAU,GAAG,gBAAgB;YACjC,CAAC,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YAC5D,CAAC,CAAC,YAAY,CAAC;QACjB,+DAA+D;QAC/D,MAAM,cAAc,GAAG,gBAAgB;YACrC,CAAC,CAAC,yBAAyB,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YAC1D,CAAC,CAAC,YAAY,CAAC;QACjB,2FAA2F;QAC3F,8FAA8F;QAC9F,uCAAuC;QACvC,MAAM,WAAW,GACf,cAAc,CAAC,MAAM,GAAG,CAAC;YACvB,CAAC,CAAE,MAAM,CAAC,WAAW,CACjB,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,gBAAgB,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAClC;YACnD,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC;QAED,gGAAgG;QAChG,2FAA2F;QAC3F,gGAAgG;QAChG,4FAA4F;QAC5F,mEAAmE;QACnE,4FAA4F;QAC5F,gGAAgG;QAChG,iGAAiG;QACjG,8FAA8F;QAC9F,+FAA+F;QAC/F,+EAA+E;QAC/E,IAAI,CAAC,2BAA2B,CAAC,gBAA6C,EAAE;YAC9E,IAAI;YACJ,UAAU;YACV,mBAAmB,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;SAChF,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;YACtB,KAAK,EAAE,gBAA6C;YACpD,WAAW;YACX,UAAU;YACV,YAAY;YACZ,WAAW;SACZ,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAClC,gGAAgG;IAChG,wFAAwF;IACxF,gGAAgG;IAChG,gGAAgG;IAChG,4EAA4E;IAC5E,8FAA8F;IAC9F,kFAAkF;IAClF,4FAA4F;IAC5F,gGAAgG;IAChG,+FAA+F;IAC/F,6BAA6B,CAAC;AAEhC;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,YAAgC;IACnE,MAAM,IAAI,GAAG,wCAAwC,uBAAuB,EAAE,CAAC;IAC/E,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uCAAuC,CAAC,gBAAyB;IAC/E,OAAO,gBAAgB,CAAC;QACtB,IAAI,EAAE,gCAAgC;QACtC,8DAA8D;QAC9D,aAAa,EAAE,KAAK,EAAE,OAAY,EAAE,OAAY,EAAE,EAAE;YAClD,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO,EAAE,aAAa;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;YAC1E,MAAM,UAAU,GACd,0FAA0F;gBAC1F,iEAAiE,uBAAuB,EAAE,CAAC;YAC7F,OAAO,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,iGAAiG;AACjG,iGAAiG;AACjG,iFAAiF"}

package/dist/core/deepAgentPermissions.d.ts

@@ -1,138 +0,0 @@
-import type { BackendProtocolV2, FilesystemPermission } from 'deepagents';
-export type { FilesystemPermission };
-/**
- * Tool names deepagents' filesystem middleware registers. This mirrors deepagents'
- * internal `FILESYSTEM_TOOL_NAMES` (which is declared in its types but not exported
- * at runtime). `createDeepAgent` throws on a name collision with any of these, so a
- * gsloth-supplied tool sharing one of these names is superseded by the deep agent's
- * built-in filesystem tool. Kept here as the single place the deep path references it.
- */
-export declare const FILESYSTEM_TOOL_NAMES: readonly ['ls', 'read_file', 'write_file', 'edit_file', 'glob', 'grep', 'execute'];
-/**
- * **Every tool name `createDeepAgent` registers on its own** — the filesystem set above plus the
- * tools its other standard middleware installs unconditionally: `write_todos` (`todoListMiddleware`)
- * and `task` (`createSubAgentMiddleware`). None of them ever appears in the tool array gsloth passes
- * `createDeepAgent`, so this is the only way the approval policy can see them.
- *
- * **It exists because the approval question is "what did the graph bind", not "what did we supply".**
- * `task` and `write_todos` have no entry in core's `BUILT_IN_TOOL_ACCESS`, so the two deterministic
- * rungs must escalate them — `task` most of all, since it delegates to a subagent. A set built from
- * `FILESYSTEM_TOOL_NAMES` alone left both bound and ungated at `manual` and `write`, under a rung
- * description promising to ask about anything else. A subagent's OWN calls are gated too —
- * `createSubAgentMiddleware` inherits this set, and a nested interrupt does reach the parent state
- * the runner drains (measured in `deepAgentNestedInterrupt.spec.ts`) — so gating `task` is about the
- * delegation itself being a thing the user agreed to, not about reaching the child's writes.
- *
- * Like {@link FILESYSTEM_TOOL_NAMES} this MIRRORS deepagents (its own `BUILTIN_TOOL_NAMES` is
- * declared in the types but not exported at runtime, and the graph must be handed `interruptOn`
- * before it exists, so the registered set cannot be read back). **It must track deepagents:** a tool
- * a future version registers itself and this list has not learned about is bound and ungated.
- * deepagents' async-task tools are deliberately absent — that middleware is installed only for
- * async subagents, which this backend never configures.
- */
-export declare const DEEP_AGENT_BUILT_IN_TOOL_NAMES: readonly ["ls", "read_file", "write_file", "edit_file", "glob", "grep", "execute", "write_todos", "task"];
-/** The slice of GthConfig the permission mapping consumes. */
-export interface PermissionConfigSlice {
-    filesystem: string[] | 'all' | 'read' | 'none';
-    aiignore?: {
-        enabled?: boolean;
-        patterns?: string[];
-    };
-    /**
-     * Extra real filesystem roots to allow (`gth exec --allow-dir`). When present, the backend runs
-     * WITHOUT virtualMode, so permission paths are real absolute paths: access is allow-listed to
-     * cwd + these dirs and everything else is denied. Undefined/empty keeps the cwd-only sandbox.
-     */
-    allowDirs?: string[];
-}
-/**
- * Build allow+deny rules for the widened (`--allow-dir`) sandbox. Because the backend runs
- * without virtualMode, paths are REAL absolute paths, so we anchor allow rules at the resolved
- * absolute cwd and each allowed dir, then deny everything else. First-match-wins, so the allow
- * rules must come before the catch-all deny.
- */
-export declare function allowDirsToPermissions(allowDirs: string[]): FilesystemPermission[];
-/**
- * Convert `.aiignore` patterns (relative, .gitignore-ish) into deepagents deny rules.
- *
- * deepagents matches the path argument the model passes to a fs tool against ABSOLUTE
- * globs. EXT-13: the backend now runs WITHOUT virtualMode in both the default and widened
- * cases, so paths are REAL absolute paths and the caller passes the absolute cwd as `base`
- * to anchor these deny rules there.
- *
- * A bare pattern (`*.env`, `secret.txt`) should match at any depth, so we emit both a
- * top-level (`<base>/secret.txt`) and a recursive (`<base>/&#42;&#42;/secret.txt`) rule. A pattern
- * already containing "/" (`config/secrets.json`) is anchored as-is (plus a `/**` subtree rule).
- *
- * `base` defaults to "" (anchoring at the virtual root "/") for legacy callers; gsloth's
- * {@link buildPermissions} always passes the absolute cwd now.
- */
-export declare function aiignoreToPermissions(patterns: string[], base?: string): FilesystemPermission[];
-/**
- * Map gsloth's filesystem mode onto deepagents permission rules for the DEFAULT
- * (non-widen) code-mode sandbox.
- *
- * EXT-13: the default backend now runs WITHOUT virtualMode (real absolute paths), so
- * containment can no longer lean on the virtual-root chroot — it is enforced entirely by
- * these globs anchored at the REAL absolute cwd. We therefore allow read+write within
- * `cwd/**` (and `cwd`) and deny everything else (`/**`), mirroring what virtualMode gave
- * for free. An explicit `string[]` allow-list resolves each entry against the real cwd.
- *
- * - `all`  → no extra restriction beyond the cwd sandbox (matches the old virtualMode
- *            behavior, where `/` already meant cwd).
- * - `read` → deny all writes (the cwd sandbox still applies for reads).
- * - `none` → deny all reads and writes.
- * - `string[]` → allow each (cwd-resolved) dir, deny everything else.
- *
- * The `cwd` argument is injected (defaults to {@link getCurrentWorkDir}) so callers/tests
- * can anchor deterministically.
- */
-export declare function filesystemModeToPermissions(fs: string[] | 'all' | 'read' | 'none', cwd?: string, virtual?: boolean): FilesystemPermission[];
-/**
- * Compose the full permission list. `.aiignore` deny rules go FIRST so they win over
- * any allow rule (first-match-wins). Then the filesystem-mode rules. `.aiignore` is
- * skipped when explicitly disabled (`aiignore.enabled === false`) or has no patterns.
- */
-export declare function buildPermissions(config: PermissionConfigSlice, virtual?: boolean): FilesystemPermission[];
-/** Options for {@link guardFilesystemBackend}. */
-export interface RealpathGuardOptions {
-    /** Real absolute cwd the sandbox is rooted at. Defaults to {@link getCurrentWorkDir}. */
-    cwd?: string;
-    /**
-     * True when the wrapped backend runs in virtualMode (EXT-16 Windows fallback): the
-     * model-supplied path is a `/`-rooted VIRTUAL path relative to cwd, not a real OS path.
-     * `--allow-dir` widening never applies in virtualMode (mirrors {@link buildPermissions}), so
-     * `allowDirs` is ignored when this is true.
-     */
-    virtual?: boolean;
-    /** Extra real absolute directories allowed beyond cwd (the `--allow-dir` widened roots). */
-    allowDirs?: string[];
-}
-/**
- * Wrap a deepagents filesystem backend so every read/write/edit/ls/glob/grep call is additionally
- * checked for a REALPATH (symlink-resolved) escape from the sandbox root(s) — closes EXT-14.
- *
- * deepagents' own permission layer (`enforcePermission` → `validatePath` → `decidePathAccess`,
- * `permissions/enforce.ts`) matches the RAW model-supplied path against the allow/deny globs and
- * never resolves symlinks. A raw `..`/`~` is rejected by `validatePath`, and a FINAL-component
- * symlink is blocked by the backend's own `O_NOFOLLOW` read — but an INTERMEDIATE symlinked
- * directory inside cwd whose target is OUTSIDE cwd (`cwd/linkdir -> /outside`, then reading
- * `cwd/linkdir/secret.txt`) matches the lexical `allow cwd/**` rule and reaches outside the
- * sandbox. See `deepAgentRealPathSandbox.spec.ts` for the end-to-end proof.
- *
- * This wraps the BACKEND — rather than adding a `wrapToolCall` middleware — because it is the ONE
- * seam gsloth fully controls that also covers subagents: `createDeepAgent` builds a fresh
- * `createFilesystemMiddleware({ backend, permissions })` per subagent (and for the main agent)
- * from the SAME `backend` reference, but each subagent gets its OWN middleware array that does
- * NOT include gsloth's `middleware` param — so a `wrapToolCall` guard would only cover the
- * top-level agent's tool calls, not a subagent's. Wrapping the shared backend closes the gap for
- * both.
- *
- * Deliberately does NOT re-implement deepagents' glob/permission matching (aiignore, read-only
- * mode, etc. all stay correctly enforced, unchanged, by the existing lexical checks inside the
- * wrapped backend's tools) — this is a second, independent containment gate layered in front of
- * them. TOCTOU: the realpath resolution here and the real fs op that follows inside the wrapped
- * backend are not atomic; racing a symlink swap in that small window is an accepted risk (out of
- * scope — this closes the deterministic, non-racing escape described above).
- */
-export declare function guardFilesystemBackend(backend: BackendProtocolV2, options?: RealpathGuardOptions): BackendProtocolV2;

package/dist/core/deepAgentPermissions.js

@@ -1,309 +0,0 @@
-import { realpathSync } from 'node:fs';
-import { realpath as realpathAsync } from 'node:fs/promises';
-import path from 'node:path';
-import { getCurrentWorkDir } from '@gaunt-sloth/core/utils/systemUtils.js';
-/**
- * Tool names deepagents' filesystem middleware registers. This mirrors deepagents'
- * internal `FILESYSTEM_TOOL_NAMES` (which is declared in its types but not exported
- * at runtime). `createDeepAgent` throws on a name collision with any of these, so a
- * gsloth-supplied tool sharing one of these names is superseded by the deep agent's
- * built-in filesystem tool. Kept here as the single place the deep path references it.
- */
-export const FILESYSTEM_TOOL_NAMES = [
-    'ls',
-    'read_file',
-    'write_file',
-    'edit_file',
-    'glob',
-    'grep',
-    'execute',
-];
-/**
- * **Every tool name `createDeepAgent` registers on its own** — the filesystem set above plus the
- * tools its other standard middleware installs unconditionally: `write_todos` (`todoListMiddleware`)
- * and `task` (`createSubAgentMiddleware`). None of them ever appears in the tool array gsloth passes
- * `createDeepAgent`, so this is the only way the approval policy can see them.
- *
- * **It exists because the approval question is "what did the graph bind", not "what did we supply".**
- * `task` and `write_todos` have no entry in core's `BUILT_IN_TOOL_ACCESS`, so the two deterministic
- * rungs must escalate them — `task` most of all, since it delegates to a subagent. A set built from
- * `FILESYSTEM_TOOL_NAMES` alone left both bound and ungated at `manual` and `write`, under a rung
- * description promising to ask about anything else. A subagent's OWN calls are gated too —
- * `createSubAgentMiddleware` inherits this set, and a nested interrupt does reach the parent state
- * the runner drains (measured in `deepAgentNestedInterrupt.spec.ts`) — so gating `task` is about the
- * delegation itself being a thing the user agreed to, not about reaching the child's writes.
- *
- * Like {@link FILESYSTEM_TOOL_NAMES} this MIRRORS deepagents (its own `BUILTIN_TOOL_NAMES` is
- * declared in the types but not exported at runtime, and the graph must be handed `interruptOn`
- * before it exists, so the registered set cannot be read back). **It must track deepagents:** a tool
- * a future version registers itself and this list has not learned about is bound and ungated.
- * deepagents' async-task tools are deliberately absent — that middleware is installed only for
- * async subagents, which this backend never configures.
- */
-export const DEEP_AGENT_BUILT_IN_TOOL_NAMES = [
-    ...FILESYSTEM_TOOL_NAMES,
-    'write_todos',
-    'task',
-];
-/**
- * Compute the real absolute containment root(s) for a real-path (non-virtual) sandbox: cwd plus
- * each of `dirs` resolved against cwd, de-duped (e.g. a dir that resolves back to cwd). Shared by
- * {@link allowDirsToPermissions} (turns these into glob allow-rules) and
- * {@link guardFilesystemBackend} (EXT-14: uses them as the realpath containment boundary — the
- * SAME roots the lexical globs are anchored at, so the two checks agree on what "contained"
- * means).
- */
-function computeSandboxRoots(cwd, dirs = []) {
-    return Array.from(new Set([cwd, ...dirs.map((d) => path.resolve(cwd, d))]));
-}
-/**
- * Build allow+deny rules for the widened (`--allow-dir`) sandbox. Because the backend runs
- * without virtualMode, paths are REAL absolute paths, so we anchor allow rules at the resolved
- * absolute cwd and each allowed dir, then deny everything else. First-match-wins, so the allow
- * rules must come before the catch-all deny.
- */
-export function allowDirsToPermissions(allowDirs) {
-    const cwd = getCurrentWorkDir();
-    const uniqueRoots = computeSandboxRoots(cwd, allowDirs);
-    const allow = uniqueRoots.map((root) => ({
-        operations: ['read', 'write'],
-        paths: [`${root}/**`, root],
-        mode: 'allow',
-    }));
-    return [...allow, { operations: ['read', 'write'], paths: ['/**'], mode: 'deny' }];
-}
-/**
- * Strip a single leading "./" or "/" and any trailing slashes, using linear string
- * ops rather than regex. The previous `/\/+$/` trailing-slash regex was flagged by
- * CodeQL as a polynomial ReDoS (the `$` anchor makes the greedy `\/+` retry from every
- * start position → quadratic on a long run of slashes); plain slicing is O(n) and safe.
- */
-function normalizePathFragment(p) {
-    let start = 0;
-    if (p.startsWith('./'))
-        start = 2;
-    else if (p.startsWith('/'))
-        start = 1;
-    let end = p.length;
-    while (end > start && p[end - 1] === '/')
-        end--;
-    return p.slice(start, end);
-}
-/**
- * Convert `.aiignore` patterns (relative, .gitignore-ish) into deepagents deny rules.
- *
- * deepagents matches the path argument the model passes to a fs tool against ABSOLUTE
- * globs. EXT-13: the backend now runs WITHOUT virtualMode in both the default and widened
- * cases, so paths are REAL absolute paths and the caller passes the absolute cwd as `base`
- * to anchor these deny rules there.
- *
- * A bare pattern (`*.env`, `secret.txt`) should match at any depth, so we emit both a
- * top-level (`<base>/secret.txt`) and a recursive (`<base>/&#42;&#42;/secret.txt`) rule. A pattern
- * already containing "/" (`config/secrets.json`) is anchored as-is (plus a `/**` subtree rule).
- *
- * `base` defaults to "" (anchoring at the virtual root "/") for legacy callers; gsloth's
- * {@link buildPermissions} always passes the absolute cwd now.
- */
-export function aiignoreToPermissions(patterns, base = '') {
-    const rules = [];
-    for (const raw of patterns) {
-        const clean = normalizePathFragment(raw);
-        if (clean.length === 0)
-            continue;
-        const paths = clean.includes('/')
-            ? [`${base}/${clean}`, `${base}/${clean}/**`]
-            : [`${base}/${clean}`, `${base}/**/${clean}`];
-        rules.push({ operations: ['read', 'write'], paths, mode: 'deny' });
-    }
-    return rules;
-}
-/**
- * Map gsloth's filesystem mode onto deepagents permission rules for the DEFAULT
- * (non-widen) code-mode sandbox.
- *
- * EXT-13: the default backend now runs WITHOUT virtualMode (real absolute paths), so
- * containment can no longer lean on the virtual-root chroot — it is enforced entirely by
- * these globs anchored at the REAL absolute cwd. We therefore allow read+write within
- * `cwd/**` (and `cwd`) and deny everything else (`/**`), mirroring what virtualMode gave
- * for free. An explicit `string[]` allow-list resolves each entry against the real cwd.
- *
- * - `all`  → no extra restriction beyond the cwd sandbox (matches the old virtualMode
- *            behavior, where `/` already meant cwd).
- * - `read` → deny all writes (the cwd sandbox still applies for reads).
- * - `none` → deny all reads and writes.
- * - `string[]` → allow each (cwd-resolved) dir, deny everything else.
- *
- * The `cwd` argument is injected (defaults to {@link getCurrentWorkDir}) so callers/tests
- * can anchor deterministically.
- */
-export function filesystemModeToPermissions(fs, cwd = getCurrentWorkDir(), virtual = false) {
-    // EXT-16: on Windows the real cwd (`D:\...`) cannot be expressed as a deepagents
-    // permission glob — its `validatePath` requires POSIX `/`-rooted paths — so the backend
-    // runs in virtualMode and these rules anchor at the virtual root `/` (= cwd) instead of
-    // the real absolute cwd. On POSIX, `virtual` is false and this is the EXT-13 real-path
-    // sandbox unchanged. `rootGlob`/`rootPath` = "everything under the sandbox root".
-    const rootGlob = virtual ? '/**' : `${cwd}/**`;
-    const rootPath = virtual ? '/' : cwd;
-    if (fs === 'none')
-        return [{ operations: ['read', 'write'], paths: ['/**'], mode: 'deny' }];
-    if (fs === 'read') {
-        // Deny all writes everywhere; reads are still confined to the cwd sandbox below.
-        return [
-            { operations: ['write'], paths: ['/**'], mode: 'deny' },
-            { operations: ['read'], paths: [rootGlob, rootPath], mode: 'allow' },
-            { operations: ['read'], paths: ['/**'], mode: 'deny' },
-        ];
-    }
-    if (fs === 'all') {
-        // No allow-list restriction, but the cwd sandbox must still apply by default
-        // (allow cwd/**, deny /**) — this is what virtualMode enforced implicitly.
-        return [
-            { operations: ['read', 'write'], paths: [rootGlob, rootPath], mode: 'allow' },
-            { operations: ['read', 'write'], paths: ['/**'], mode: 'deny' },
-        ];
-    }
-    // string[] — explicit allow-list of directories. Real mode resolves each against the REAL
-    // cwd; virtual mode anchors each under the virtual root `/`. Allow read+write within each,
-    // deny everything else. Allow rules first (first-match-wins), deny catch-all last.
-    const allow = fs
-        .filter((d) => d !== 'all' && d !== 'read')
-        .map((d) => {
-        const frag = normalizePathFragment(d);
-        const dir = virtual ? `/${frag}` : path.resolve(cwd, frag);
-        return { operations: ['read', 'write'], paths: [`${dir}/**`, dir], mode: 'allow' };
-    });
-    return [...allow, { operations: ['read', 'write'], paths: ['/**'], mode: 'deny' }];
-}
-/**
- * Compose the full permission list. `.aiignore` deny rules go FIRST so they win over
- * any allow rule (first-match-wins). Then the filesystem-mode rules. `.aiignore` is
- * skipped when explicitly disabled (`aiignore.enabled === false`) or has no patterns.
- */
-export function buildPermissions(config, virtual = false) {
-    const cwd = getCurrentWorkDir();
-    const widen = Array.isArray(config.allowDirs) && config.allowDirs.length > 0;
-    const aiignoreEnabled = config.aiignore?.enabled !== false && !!config.aiignore?.patterns?.length;
-    // EXT-13/EXT-16: real mode anchors aiignore deny rules at the absolute cwd; virtual mode
-    // (Windows) anchors them at the virtual root ("" → "/"). Either way they keep matching the
-    // project-relative ignore patterns.
-    const base = virtual ? '' : cwd;
-    const aiignore = aiignoreEnabled ? aiignoreToPermissions(config.aiignore.patterns, base) : [];
-    // `--allow-dir` widens to the cwd + allowed-dirs allow-list, which needs REAL absolute paths
-    // and so cannot apply in virtualMode (EXT-16): when virtual, fall back to the cwd-only mode
-    // sandbox (the caller warns that widening is limited on this platform).
-    const modeRules = widen && !virtual
-        ? allowDirsToPermissions(config.allowDirs)
-        : filesystemModeToPermissions(config.filesystem, cwd, virtual);
-    return [...aiignore, ...modeRules];
-}
-/**
- * Resolve `absPath` to its real, symlink-free location, walking up to the nearest EXISTING
- * ancestor when the target itself doesn't exist yet (e.g. a `write_file` target about to be
- * created). Only an EXISTING path component can itself be — or sit behind — a symlink, so
- * resolving the nearest real ancestor is enough to catch an intermediate symlinked directory
- * that would steer a not-yet-existing write outside the sandbox. Terminates because
- * `path.dirname` strictly shortens the path until it reaches the filesystem root.
- */
-async function realpathNearestExisting(absPath) {
-    let current = absPath;
-    for (;;) {
-        try {
-            return await realpathAsync(current);
-        }
-        catch {
-            const parent = path.dirname(current);
-            if (parent === current)
-                return current; // filesystem root; nothing left to resolve
-            current = parent;
-        }
-    }
-}
-/** True when `resolved` equals one of `roots` or is a descendant of one. */
-function isWithinRoots(resolved, roots) {
-    return roots.some((root) => resolved === root || resolved.startsWith(`${root}${path.sep}`));
-}
-/**
- * Wrap a deepagents filesystem backend so every read/write/edit/ls/glob/grep call is additionally
- * checked for a REALPATH (symlink-resolved) escape from the sandbox root(s) — closes EXT-14.
- *
- * deepagents' own permission layer (`enforcePermission` → `validatePath` → `decidePathAccess`,
- * `permissions/enforce.ts`) matches the RAW model-supplied path against the allow/deny globs and
- * never resolves symlinks. A raw `..`/`~` is rejected by `validatePath`, and a FINAL-component
- * symlink is blocked by the backend's own `O_NOFOLLOW` read — but an INTERMEDIATE symlinked
- * directory inside cwd whose target is OUTSIDE cwd (`cwd/linkdir -> /outside`, then reading
- * `cwd/linkdir/secret.txt`) matches the lexical `allow cwd/**` rule and reaches outside the
- * sandbox. See `deepAgentRealPathSandbox.spec.ts` for the end-to-end proof.
- *
- * This wraps the BACKEND — rather than adding a `wrapToolCall` middleware — because it is the ONE
- * seam gsloth fully controls that also covers subagents: `createDeepAgent` builds a fresh
- * `createFilesystemMiddleware({ backend, permissions })` per subagent (and for the main agent)
- * from the SAME `backend` reference, but each subagent gets its OWN middleware array that does
- * NOT include gsloth's `middleware` param — so a `wrapToolCall` guard would only cover the
- * top-level agent's tool calls, not a subagent's. Wrapping the shared backend closes the gap for
- * both.
- *
- * Deliberately does NOT re-implement deepagents' glob/permission matching (aiignore, read-only
- * mode, etc. all stay correctly enforced, unchanged, by the existing lexical checks inside the
- * wrapped backend's tools) — this is a second, independent containment gate layered in front of
- * them. TOCTOU: the realpath resolution here and the real fs op that follows inside the wrapped
- * backend are not atomic; racing a symlink swap in that small window is an accepted risk (out of
- * scope — this closes the deterministic, non-racing escape described above).
- */
-export function guardFilesystemBackend(backend, options = {}) {
-    const cwd = options.cwd ?? getCurrentWorkDir();
-    const virtual = options.virtual ?? false;
-    // allowDirs never widens virtualMode (mirrors buildPermissions); real mode's roots are cwd plus
-    // each configured extra real dir. Resolved via realpath ONCE at wrap time (not per call) so a
-    // symlinked tmp root (e.g. macOS `/tmp` -> `/private/tmp`) doesn't itself look like an escape.
-    const rawRoots = virtual ? [cwd] : computeSandboxRoots(cwd, options.allowDirs);
-    const roots = rawRoots.map((root) => {
-        try {
-            return realpathSync(root);
-        }
-        catch {
-            return root; // root doesn't exist (yet) — fall back to its lexical form
-        }
-    });
-    async function assertContained(rawPath, operation) {
-        const lexical = virtual
-            ? path.resolve(cwd, rawPath.startsWith('/') ? rawPath.slice(1) : rawPath)
-            : path.resolve(cwd, rawPath);
-        const resolved = await realpathNearestExisting(lexical);
-        if (!isWithinRoots(resolved, roots)) {
-            throw new Error(`Error: permission denied for ${operation} on ${rawPath}`);
-        }
-    }
-    return {
-        async ls(dirPath) {
-            await assertContained(dirPath, 'read');
-            return backend.ls(dirPath);
-        },
-        async read(filePath, offset, limit) {
-            await assertContained(filePath, 'read');
-            return backend.read(filePath, offset, limit);
-        },
-        async readRaw(filePath) {
-            await assertContained(filePath, 'read');
-            return backend.readRaw(filePath);
-        },
-        async write(filePath, content) {
-            await assertContained(filePath, 'write');
-            return backend.write(filePath, content);
-        },
-        async edit(filePath, oldString, newString, replaceAll) {
-            await assertContained(filePath, 'write');
-            return backend.edit(filePath, oldString, newString, replaceAll);
-        },
-        async glob(pattern, dirPath) {
-            await assertContained(dirPath ?? '/', 'read');
-            return backend.glob(pattern, dirPath);
-        },
-        async grep(pattern, dirPath, glob) {
-            await assertContained(dirPath ?? '/', 'read');
-            return backend.grep(pattern, dirPath, glob);
-        },
-        uploadFiles: backend.uploadFiles?.bind(backend),
-        downloadFiles: backend.downloadFiles?.bind(backend),
-    };
-}
-//# sourceMappingURL=deepAgentPermissions.js.map

package/dist/core/deepAgentPermissions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"deepAgentPermissions.js","sourceRoot":"","sources":["../../src/core/deepAgentPermissions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAI3E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI;IACJ,WAAW;IACX,YAAY;IACZ,WAAW;IACX,MAAM;IACN,MAAM;IACN,SAAS;CACD,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,GAAG,qBAAqB;IACxB,aAAa;IACb,MAAM;CACE,CAAC;AAcX;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,GAAW,EAAE,IAAI,GAAa,EAAE;IAC3D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAmB;IACxD,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,KAAK,GAA2B,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/D,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;QAC7B,KAAK,EAAE,CAAC,GAAG,IAAI,KAAK,EAAE,IAAI,CAAC;QAC3B,IAAI,EAAE,OAAO;KACd,CAAC,CAAC,CAAC;IACJ,OAAO,CAAC,GAAG,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACrF,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,CAAS;IACtC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,KAAK,GAAG,CAAC,CAAC;SAC7B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,KAAK,GAAG,CAAC,CAAC;IACtC,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,OAAO,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,GAAG,EAAE,CAAC;IAChD,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAkB,EAAE,IAAI,GAAG,EAAE;IACjE,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC/B,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,KAAK,CAAC;YAC7C,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,GAAG,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,2BAA2B,CACzC,EAAsC,EACtC,GAAG,GAAW,iBAAiB,EAAE,EACjC,OAAO,GAAG,KAAK;IAEf,iFAAiF;IACjF,wFAAwF;IACxF,wFAAwF;IACxF,uFAAuF;IACvF,kFAAkF;IAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAErC,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5F,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;QAClB,iFAAiF;QACjF,OAAO;YACL,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;YACvD,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;YACpE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;SACvD,CAAC;IACJ,CAAC;IACD,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;QACjB,6EAA6E;QAC7E,2EAA2E;QAC3E,OAAO;YACL,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;YAC7E,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;SAChE,CAAC;IACJ,CAAC;IACD,0FAA0F;IAC1F,2FAA2F;IAC3F,mFAAmF;IACnF,MAAM,KAAK,GAA2B,EAAE;SACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,MAAM,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,IAAI,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,GAAG,KAAK,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACrF,CAAC,CAAC,CAAC;IACL,OAAO,CAAC,GAAG,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA6B,EAC7B,OAAO,GAAG,KAAK;IAEf,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,EAAE,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;IAClG,yFAAyF;IACzF,2FAA2F;IAC3F,oCAAoC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAChC,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAS,CAAC,QAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,6FAA6F;IAC7F,4FAA4F;IAC5F,wEAAwE;IACxE,MAAM,SAAS,GACb,KAAK,IAAI,CAAC,OAAO;QACf,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,SAAU,CAAC;QAC3C,CAAC,CAAC,2BAA2B,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAC;AACrC,CAAC;AAOD;;;;;;;GAOG;AACH,KAAK,UAAU,uBAAuB,CAAC,OAAe;IACpD,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OAAO,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAC,CAAC,2CAA2C;YACnF,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,aAAa,CAAC,QAAgB,EAAE,KAAe;IACtD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAC9F,CAAC;AAiBD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA0B,EAC1B,OAAO,GAAyB,EAAE;IAElC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,gGAAgG;IAChG,8FAA8F;IAC9F,+FAA+F;IAC/F,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,CAAC,2DAA2D;QAC1E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,eAAe,CAAC,OAAe,EAAE,SAAyB;QACvE,MAAM,OAAO,GAAG,OAAO;YACrB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACzE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,OAAO,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,EAAE,CAAC,OAAO;YACd,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK;YAChC,MAAM,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACxC,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,QAAQ;YACpB,MAAM,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACxC,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO;YAC3B,MAAM,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU;YACnD,MAAM,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAClE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;YACzB,MAAM,eAAe,CAAC,OAAO,IAAI,GAAG,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI;YAC/B,MAAM,eAAe,CAAC,OAAO,IAAI,GAAG,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC;KACpD,CAAC;AACJ,CAAC"}

package/dist/core/gthAcpServer.d.ts

@@ -1,27 +0,0 @@
-/**
- * @packageDocumentation
- * Thin wrapper over `deepagents-acp`'s `DeepAgentsServer` that fixes how its filesystem backend is
- * rooted, since 0.1.12 gets both the location and the path semantics wrong for an IDE-hosted agent.
- *
- * 1. **Per-session root.** deepagents-acp roots its backend once at `workspaceRoot ?? process.cwd()`
- *    and IGNORES the `cwd` carried by every ACP `session/new` request. An ACP host (Zed, JetBrains)
- *    spawns one long-lived agent subprocess and passes the real project root per session, so we
- *    re-root the backend to `session/new.cwd`.
- * 2. **Virtual-fs semantics.** deepagents-acp builds its backend WITHOUT `virtualMode`, so `/`
- *    resolves to the OS root and `ls /` lists the whole machine — but deepagents' filesystem prompt
- *    tells the model `/` is the workspace root (the convention the local runner uses via
- *    `FilesystemBackend({ virtualMode: true })`). We switch the backend into virtual-fs mode so
- *    `'/'`-rooted paths are workspace-relative.
- *
- * The server's connection handler dispatches `this.handleNewSession(params, conn)` dynamically, so
- * we patch that instance method before `start()`. Both fixes reach into deepagents-acp internals and
- * are guarded so a shape change degrades to a no-op rather than throwing; if a future deepagents-acp
- * honors session cwd / virtual mode itself, this becomes a harmless re-assert.
- */
-import { DeepAgentsServer, type DeepAgentsServerOptions } from 'deepagents-acp';
-/**
- * Construct and start a deepagents-acp server that roots its filesystem backend at each ACP
- * session's `cwd` and runs it in virtual-fs mode (so `/` is the workspace, not the OS root).
- * Resolves once the stdio transport is listening.
- */
-export declare function startGthAcpServer(options: DeepAgentsServerOptions): Promise<DeepAgentsServer>;

package/dist/core/gthAcpServer.js

@@ -1,82 +0,0 @@
-/**
- * @packageDocumentation
- * Thin wrapper over `deepagents-acp`'s `DeepAgentsServer` that fixes how its filesystem backend is
- * rooted, since 0.1.12 gets both the location and the path semantics wrong for an IDE-hosted agent.
- *
- * 1. **Per-session root.** deepagents-acp roots its backend once at `workspaceRoot ?? process.cwd()`
- *    and IGNORES the `cwd` carried by every ACP `session/new` request. An ACP host (Zed, JetBrains)
- *    spawns one long-lived agent subprocess and passes the real project root per session, so we
- *    re-root the backend to `session/new.cwd`.
- * 2. **Virtual-fs semantics.** deepagents-acp builds its backend WITHOUT `virtualMode`, so `/`
- *    resolves to the OS root and `ls /` lists the whole machine — but deepagents' filesystem prompt
- *    tells the model `/` is the workspace root (the convention the local runner uses via
- *    `FilesystemBackend({ virtualMode: true })`). We switch the backend into virtual-fs mode so
- *    `'/'`-rooted paths are workspace-relative.
- *
- * The server's connection handler dispatches `this.handleNewSession(params, conn)` dynamically, so
- * we patch that instance method before `start()`. Both fixes reach into deepagents-acp internals and
- * are guarded so a shape change degrades to a no-op rather than throwing; if a future deepagents-acp
- * honors session cwd / virtual mode itself, this becomes a harmless re-assert.
- */
-import { DeepAgentsServer } from 'deepagents-acp';
-import { resolve } from 'node:path';
-import { debugLog } from '@gaunt-sloth/core/utils/debugUtils.js';
-import { setAcpShellWorkDir } from '#src/tools/shell/workDir.js';
-/**
- * Put an ACP filesystem backend into deepagents' virtual-fs mode so `'/'`-rooted paths are
- * workspace-relative (clamped under `cwd`), matching deepagents' prompt and the local runner.
- *
- * `virtualMode` covers the methods that route through `resolvePath` (ls) and the inline checks
- * (glob/grep). The ACP read/write proxy uses its own `resolveAbsPath`, which ignores `virtualMode`,
- * so override that too so proxied reads/writes hit the workspace, not the OS root.
- */
-function configureVirtualFs(backend) {
-    backend.virtualMode = true;
-    backend.resolveAbsPath = (filePath) => resolve(backend.cwd ?? process.cwd(), String(filePath).replace(/^\/+/, ''));
-}
-/**
- * Construct and start a deepagents-acp server that roots its filesystem backend at each ACP
- * session's `cwd` and runs it in virtual-fs mode (so `/` is the workspace, not the OS root).
- * Resolves once the stdio transport is listening.
- */
-export async function startGthAcpServer(options) {
-    const server = new DeepAgentsServer(options);
-    const internals = server;
-    const original = internals.handleNewSession;
-    if (typeof original === 'function') {
-        const bound = original.bind(server);
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        internals.handleNewSession = async (params, conn) => {
-            const result = await bound(params, conn);
-            const backends = internals.acpBackends;
-            const cwd = typeof params?.cwd === 'string' && params.cwd.length > 0 ? resolve(params.cwd) : undefined;
-            if (backends && backends.size > 0) {
-                for (const backend of backends.values()) {
-                    if (!backend || typeof backend !== 'object')
-                        continue;
-                    if (cwd)
-                        backend.cwd = cwd;
-                    configureVirtualFs(backend);
-                }
-                debugLog(`ACP session: virtual fs, root ${cwd ?? '[startup workspace]'}`);
-            }
-            // EXT-23: align the shell tool (run_shell_command) with THIS session's fs-backend root, so the
-            // shell spawns where the fs tools read/write. `cwd` is the resolved session root; when
-            // session/new carries no cwd, deepagents-acp keeps the startup workspace (rooted at
-            // `workspaceRoot ?? process.cwd()`), so fall back to that. This is the ACP counterpart of the
-            // local runner's EXT-22 S4 alignment, and it sidesteps getCurrentWorkDir()'s INIT_CWD (stale in
-            // the long-lived ACP subprocess — the reason acpModule roots the startup workspace at raw
-            // process.cwd()). Set unconditionally per session so the shell tracks the session cwd even if
-            // the backend map has not been populated yet.
-            const startupRoot = options.workspaceRoot ? resolve(options.workspaceRoot) : process.cwd();
-            setAcpShellWorkDir(cwd ?? startupRoot);
-            return result;
-        };
-    }
-    else {
-        debugLog('deepagents-acp handleNewSession not found to patch; session fs rooting disabled');
-    }
-    await server.start();
-    return server;
-}
-//# sourceMappingURL=gthAcpServer.js.map

package/dist/core/gthAcpServer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gthAcpServer.js","sourceRoot":"","sources":["../../src/core/gthAcpServer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,gBAAgB,EAAgC,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAiBjE;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,OAA0B;IACpD,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,cAAc,GAAG,CAAC,QAAgB,EAAU,EAAE,CACpD,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgC;IAEhC,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAuC,CAAC;IAE1D,MAAM,QAAQ,GAAG,SAAS,CAAC,gBAAgB,CAAC;IAC5C,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,8DAA8D;QAC9D,SAAS,CAAC,gBAAgB,GAAG,KAAK,EAAE,MAAW,EAAE,IAAS,EAAE,EAAE;YAC5D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC;YACvC,MAAM,GAAG,GACP,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7F,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAClC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;oBACxC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;wBAAE,SAAS;oBACtD,IAAI,GAAG;wBAAE,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;oBAC3B,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBAC9B,CAAC;gBACD,QAAQ,CAAC,iCAAiC,GAAG,IAAI,qBAAqB,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,+FAA+F;YAC/F,uFAAuF;YACvF,oFAAoF;YACpF,8FAA8F;YAC9F,gGAAgG;YAChG,0FAA0F;YAC1F,8FAA8F;YAC9F,8CAA8C;YAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC3F,kBAAkB,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC;YACvC,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,iFAAiF,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/gthDeepAgentFactory.d.ts

@@ -1,11 +0,0 @@
-import type { GthAgentFactory } from '@gaunt-sloth/core/core/types.js';
-/**
- * A {@link GthAgentFactory} that produces a {@link GthDeepAgent}. Pass this to
- * `GthAgentRunner` (its optional 3rd ctor arg) so the same runner drives a
- * `createDeepAgent` graph instead of the lean default — without `core` ever
- * importing `deepagents`.
- *
- * The deepagents backend is **experimental**: lean is the default. Selecting it (via
- * `agent.backend: 'deep'`) emits a one-time warning so it is never used unknowingly.
- */
-export declare const gthDeepAgentFactory: GthAgentFactory;