@gaunt-sloth/core 2.0.0-alpha.2 → 2.0.0-alpha.21

package/dist/config/schema.d.ts

@@ -0,0 +1,673 @@
+/**
+ * @packageDocumentation
+ * Zod schema for the on-disk raw Gaunt Sloth config (`RawGthConfig`).
+ *
+ * This is the single source of truth for config validation and for the generated
+ * JSON Schema (`packages/core/schema/gsloth-config.schema.json`). It models the
+ * canonical config shape only — the deprecated aliases (`contentProvider`,
+ * `requirementsProvider`, `contentProviderConfig`, `requirementsProviderConfig`)
+ * are intentionally NOT part of the schema. GS2-28 (a 2.0 breaking release with NO
+ * back-compat coercion) turns those deprecated shapes into HARD validation errors:
+ * {@link findDeprecatedConfigIssues} detects them on the raw input BEFORE the schema
+ * parse and each entry point (loader `validateRawConfigLayer`, read-side
+ * {@link validateRawGthConfig}) rejects the config with a message naming the canonical
+ * replacement + migration path. Detection runs on the RAW input on purpose: zod's
+ * per-command `z.object` strips unknown keys, so a nested `commands.*.contentProvider`
+ * would vanish before any schema-embedded check could see it.
+ *
+ * Design notes:
+ * - The top-level object is a {@link z.looseObject} so unknown keys PASS THROUGH
+ *   (they are neither stripped nor a hard failure). The loader separately diffs
+ *   present-vs-known top-level keys ({@link findUnknownTopLevelKeys}) to warn about
+ *   likely typos without failing. That typo-tolerance is deliberate: only the KNOWN
+ *   deprecated names ({@link findDeprecatedConfigIssues}) hard-fail; a genuine typo
+ *   (e.g. `pulrequest`) still only warns.
+ * - Every field is optional. The schema validates the *shape/type of what is
+ *   present*, not requiredness. In particular `llm` is optional so the loader's
+ *   existing "must at least define llm.type" checks remain the authority on llm
+ *   validity (and keep emitting their established messages).
+ * - Runtime-object-bearing fields (`tools`, `middleware`, `mcpServers`,
+ *   `a2aAgents`, `builtInToolsConfig`) are modelled permissively because JS/MJS
+ *   `configure()` returns live instances/objects there.
+ *
+ * The exported {@link RawGthConfig}/{@link GthConfig} interfaces in `config.ts`
+ * remain the public type surface; the `z.infer` here ({@link RawGthConfigInput})
+ * is additive and legitimately differs (no deprecated fields).
+ */
+import { z } from 'zod';
+/**
+ * Zod schema for the raw, on-disk Gaunt Sloth config. Loose at the top level so
+ * unknown keys are preserved (warn-only via {@link findUnknownTopLevelKeys}).
+ */
+export declare const rawGthConfigSchema: z.ZodObject<{
+    $schema: z.ZodOptional<z.ZodString>;
+    llm: z.ZodOptional<z.ZodObject<{
+        type: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+        configuration: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>;
+    agent: z.ZodOptional<z.ZodObject<{
+        backend: z.ZodOptional<z.ZodEnum<{
+            deep: "deep";
+            lean: "lean";
+        }>>;
+    }, z.core.$strip>>;
+    history: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        dbPath: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    memory: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    binaryFormats: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            audio: "audio";
+            binary: "binary";
+            file: "file";
+            image: "image";
+            video: "video";
+        }>;
+        extensions: z.ZodArray<z.ZodString>;
+        maxSize: z.ZodOptional<z.ZodNumber>;
+        mimeTypes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$strip>>]>>;
+    contentSource: z.ZodOptional<z.ZodString>;
+    requirementSource: z.ZodOptional<z.ZodString>;
+    contentSourceConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    requirementSourceConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    projectGuidelines: z.ZodOptional<z.ZodString>;
+    identityProfile: z.ZodOptional<z.ZodString>;
+    includeCurrentDateAfterGuidelines: z.ZodOptional<z.ZodBoolean>;
+    organization: z.ZodOptional<z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        locale: z.ZodOptional<z.ZodString>;
+        timezone: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    projectReviewInstructions: z.ZodOptional<z.ZodString>;
+    noDefaultPrompts: z.ZodOptional<z.ZodBoolean>;
+    filesystem: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodEnum<{
+        all: "all";
+        none: "none";
+        read: "read";
+    }>]>>;
+    builtInTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        command: z.ZodOptional<z.ZodString>;
+        timeout: z.ZodOptional<z.ZodNumber>;
+        maxOutputBytes: z.ZodOptional<z.ZodNumber>;
+        allowlist: z.ZodOptional<z.ZodBoolean>;
+        persistAllowlist: z.ZodOptional<z.ZodBoolean>;
+        judge: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            autoApproveLow: z.ZodOptional<z.ZodBoolean>;
+            blockHigh: z.ZodOptional<z.ZodBoolean>;
+            model: z.ZodOptional<z.ZodObject<{
+                type: z.ZodOptional<z.ZodString>;
+                model: z.ZodOptional<z.ZodString>;
+                configuration: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
+            }, z.core.$loose>>;
+        }, z.core.$strip>]>>;
+        yolo: z.ZodOptional<z.ZodBoolean>;
+        fileSet: z.ZodOptional<z.ZodEnum<{
+            all: "all";
+            gitignore: "gitignore";
+        }>>;
+    }, z.core.$strip>]>>]>>;
+    tools: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    middleware: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    streamOutput: z.ZodOptional<z.ZodBoolean>;
+    writeOutputToFile: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>>;
+    writeBinaryOutputsToFile: z.ZodOptional<z.ZodBoolean>;
+    useColour: z.ZodOptional<z.ZodBoolean>;
+    streamSessionInferenceLog: z.ZodOptional<z.ZodBoolean>;
+    canInterruptInferenceWithEsc: z.ZodOptional<z.ZodBoolean>;
+    debugLog: z.ZodOptional<z.ZodBoolean>;
+    recursionLimit: z.ZodOptional<z.ZodNumber>;
+    consoleLevel: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+    customTools: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        command: z.ZodString;
+        description: z.ZodString;
+        parameters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            description: z.ZodString;
+            allow: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                "absolute-paths": "absolute-paths";
+                "directory-traversal": "directory-traversal";
+                "null-bytes": "null-bytes";
+                "shell-injection": "shell-injection";
+            }>>>;
+        }, z.core.$strip>>>;
+        timeout: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>>;
+    mcpServers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    tls: z.ZodOptional<z.ZodObject<{
+        extraCaCerts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        rejectUnauthorized: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    a2aAgents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    builtInToolsConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    aiignore: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    commands: z.ZodOptional<z.ZodObject<{
+        pr: z.ZodOptional<z.ZodObject<{
+            contentSource: z.ZodOptional<z.ZodString>;
+            requirementSource: z.ZodOptional<z.ZodString>;
+            filesystem: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodEnum<{
+                all: "all";
+                none: "none";
+                read: "read";
+            }>]>>;
+            builtInTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodBoolean>;
+                command: z.ZodOptional<z.ZodString>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+                maxOutputBytes: z.ZodOptional<z.ZodNumber>;
+                allowlist: z.ZodOptional<z.ZodBoolean>;
+                persistAllowlist: z.ZodOptional<z.ZodBoolean>;
+                judge: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                    autoApproveLow: z.ZodOptional<z.ZodBoolean>;
+                    blockHigh: z.ZodOptional<z.ZodBoolean>;
+                    model: z.ZodOptional<z.ZodObject<{
+                        type: z.ZodOptional<z.ZodString>;
+                        model: z.ZodOptional<z.ZodString>;
+                        configuration: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
+                    }, z.core.$loose>>;
+                }, z.core.$strip>]>>;
+                yolo: z.ZodOptional<z.ZodBoolean>;
+                fileSet: z.ZodOptional<z.ZodEnum<{
+                    all: "all";
+                    gitignore: "gitignore";
+                }>>;
+            }, z.core.$strip>]>>]>>;
+            customTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodRecord<z.ZodString, z.ZodObject<{
+                command: z.ZodString;
+                description: z.ZodString;
+                parameters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                    description: z.ZodString;
+                    allow: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                        "absolute-paths": "absolute-paths";
+                        "directory-traversal": "directory-traversal";
+                        "null-bytes": "null-bytes";
+                        "shell-injection": "shell-injection";
+                    }>>>;
+                }, z.core.$strip>>>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>]>>;
+            allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            logWorkForReviewInSeconds: z.ZodOptional<z.ZodNumber>;
+            rating: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodBoolean>;
+                passThreshold: z.ZodOptional<z.ZodNumber>;
+                maxRating: z.ZodOptional<z.ZodNumber>;
+                minRating: z.ZodOptional<z.ZodNumber>;
+                errorOnReviewFail: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            binaryFormats: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodArray<z.ZodObject<{
+                type: z.ZodEnum<{
+                    audio: "audio";
+                    binary: "binary";
+                    file: "file";
+                    image: "image";
+                    video: "video";
+                }>;
+                extensions: z.ZodArray<z.ZodString>;
+                maxSize: z.ZodOptional<z.ZodNumber>;
+                mimeTypes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            }, z.core.$strip>>]>>;
+        }, z.core.$strip>>;
+        review: z.ZodOptional<z.ZodObject<{
+            contentSource: z.ZodOptional<z.ZodString>;
+            requirementSource: z.ZodOptional<z.ZodString>;
+            filesystem: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodEnum<{
+                all: "all";
+                none: "none";
+                read: "read";
+            }>]>>;
+            builtInTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodBoolean>;
+                command: z.ZodOptional<z.ZodString>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+                maxOutputBytes: z.ZodOptional<z.ZodNumber>;
+                allowlist: z.ZodOptional<z.ZodBoolean>;
+                persistAllowlist: z.ZodOptional<z.ZodBoolean>;
+                judge: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                    autoApproveLow: z.ZodOptional<z.ZodBoolean>;
+                    blockHigh: z.ZodOptional<z.ZodBoolean>;
+                    model: z.ZodOptional<z.ZodObject<{
+                        type: z.ZodOptional<z.ZodString>;
+                        model: z.ZodOptional<z.ZodString>;
+                        configuration: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
+                    }, z.core.$loose>>;
+                }, z.core.$strip>]>>;
+                yolo: z.ZodOptional<z.ZodBoolean>;
+                fileSet: z.ZodOptional<z.ZodEnum<{
+                    all: "all";
+                    gitignore: "gitignore";
+                }>>;
+            }, z.core.$strip>]>>]>>;
+            customTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodRecord<z.ZodString, z.ZodObject<{
+                command: z.ZodString;
+                description: z.ZodString;
+                parameters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                    description: z.ZodString;
+                    allow: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                        "absolute-paths": "absolute-paths";
+                        "directory-traversal": "directory-traversal";
+                        "null-bytes": "null-bytes";
+                        "shell-injection": "shell-injection";
+                    }>>>;
+                }, z.core.$strip>>>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>]>>;
+            allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            rating: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodBoolean>;
+                passThreshold: z.ZodOptional<z.ZodNumber>;
+                maxRating: z.ZodOptional<z.ZodNumber>;
+                minRating: z.ZodOptional<z.ZodNumber>;
+                errorOnReviewFail: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            binaryFormats: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodArray<z.ZodObject<{
+                type: z.ZodEnum<{
+                    audio: "audio";
+                    binary: "binary";
+                    file: "file";
+                    image: "image";
+                    video: "video";
+                }>;
+                extensions: z.ZodArray<z.ZodString>;
+                maxSize: z.ZodOptional<z.ZodNumber>;
+                mimeTypes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            }, z.core.$strip>>]>>;
+        }, z.core.$strip>>;
+        ask: z.ZodOptional<z.ZodObject<{
+            filesystem: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodEnum<{
+                all: "all";
+                none: "none";
+                read: "read";
+            }>]>>;
+            builtInTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodBoolean>;
+                command: z.ZodOptional<z.ZodString>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+                maxOutputBytes: z.ZodOptional<z.ZodNumber>;
+                allowlist: z.ZodOptional<z.ZodBoolean>;
+                persistAllowlist: z.ZodOptional<z.ZodBoolean>;
+                judge: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                    autoApproveLow: z.ZodOptional<z.ZodBoolean>;
+                    blockHigh: z.ZodOptional<z.ZodBoolean>;
+                    model: z.ZodOptional<z.ZodObject<{
+                        type: z.ZodOptional<z.ZodString>;
+                        model: z.ZodOptional<z.ZodString>;
+                        configuration: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
+                    }, z.core.$loose>>;
+                }, z.core.$strip>]>>;
+                yolo: z.ZodOptional<z.ZodBoolean>;
+                fileSet: z.ZodOptional<z.ZodEnum<{
+                    all: "all";
+                    gitignore: "gitignore";
+                }>>;
+            }, z.core.$strip>]>>]>>;
+            customTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodRecord<z.ZodString, z.ZodObject<{
+                command: z.ZodString;
+                description: z.ZodString;
+                parameters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                    description: z.ZodString;
+                    allow: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                        "absolute-paths": "absolute-paths";
+                        "directory-traversal": "directory-traversal";
+                        "null-bytes": "null-bytes";
+                        "shell-injection": "shell-injection";
+                    }>>>;
+                }, z.core.$strip>>>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>]>>;
+            allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            binaryFormats: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodArray<z.ZodObject<{
+                type: z.ZodEnum<{
+                    audio: "audio";
+                    binary: "binary";
+                    file: "file";
+                    image: "image";
+                    video: "video";
+                }>;
+                extensions: z.ZodArray<z.ZodString>;
+                maxSize: z.ZodOptional<z.ZodNumber>;
+                mimeTypes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            }, z.core.$strip>>]>>;
+        }, z.core.$strip>>;
+        chat: z.ZodOptional<z.ZodObject<{
+            filesystem: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodEnum<{
+                all: "all";
+                none: "none";
+                read: "read";
+            }>]>>;
+            builtInTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodBoolean>;
+                command: z.ZodOptional<z.ZodString>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+                maxOutputBytes: z.ZodOptional<z.ZodNumber>;
+                allowlist: z.ZodOptional<z.ZodBoolean>;
+                persistAllowlist: z.ZodOptional<z.ZodBoolean>;
+                judge: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                    autoApproveLow: z.ZodOptional<z.ZodBoolean>;
+                    blockHigh: z.ZodOptional<z.ZodBoolean>;
+                    model: z.ZodOptional<z.ZodObject<{
+                        type: z.ZodOptional<z.ZodString>;
+                        model: z.ZodOptional<z.ZodString>;
+                        configuration: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
+                    }, z.core.$loose>>;
+                }, z.core.$strip>]>>;
+                yolo: z.ZodOptional<z.ZodBoolean>;
+                fileSet: z.ZodOptional<z.ZodEnum<{
+                    all: "all";
+                    gitignore: "gitignore";
+                }>>;
+            }, z.core.$strip>]>>]>>;
+            customTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodRecord<z.ZodString, z.ZodObject<{
+                command: z.ZodString;
+                description: z.ZodString;
+                parameters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                    description: z.ZodString;
+                    allow: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                        "absolute-paths": "absolute-paths";
+                        "directory-traversal": "directory-traversal";
+                        "null-bytes": "null-bytes";
+                        "shell-injection": "shell-injection";
+                    }>>>;
+                }, z.core.$strip>>>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>]>>;
+            allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            binaryFormats: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodArray<z.ZodObject<{
+                type: z.ZodEnum<{
+                    audio: "audio";
+                    binary: "binary";
+                    file: "file";
+                    image: "image";
+                    video: "video";
+                }>;
+                extensions: z.ZodArray<z.ZodString>;
+                maxSize: z.ZodOptional<z.ZodNumber>;
+                mimeTypes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            }, z.core.$strip>>]>>;
+        }, z.core.$strip>>;
+        code: z.ZodOptional<z.ZodObject<{
+            filesystem: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodEnum<{
+                all: "all";
+                none: "none";
+                read: "read";
+            }>]>>;
+            builtInTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodBoolean>;
+                command: z.ZodOptional<z.ZodString>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+                maxOutputBytes: z.ZodOptional<z.ZodNumber>;
+                allowlist: z.ZodOptional<z.ZodBoolean>;
+                persistAllowlist: z.ZodOptional<z.ZodBoolean>;
+                judge: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                    autoApproveLow: z.ZodOptional<z.ZodBoolean>;
+                    blockHigh: z.ZodOptional<z.ZodBoolean>;
+                    model: z.ZodOptional<z.ZodObject<{
+                        type: z.ZodOptional<z.ZodString>;
+                        model: z.ZodOptional<z.ZodString>;
+                        configuration: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
+                    }, z.core.$loose>>;
+                }, z.core.$strip>]>>;
+                yolo: z.ZodOptional<z.ZodBoolean>;
+                fileSet: z.ZodOptional<z.ZodEnum<{
+                    all: "all";
+                    gitignore: "gitignore";
+                }>>;
+            }, z.core.$strip>]>>]>>;
+            customTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodRecord<z.ZodString, z.ZodObject<{
+                command: z.ZodString;
+                description: z.ZodString;
+                parameters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                    description: z.ZodString;
+                    allow: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                        "absolute-paths": "absolute-paths";
+                        "directory-traversal": "directory-traversal";
+                        "null-bytes": "null-bytes";
+                        "shell-injection": "shell-injection";
+                    }>>>;
+                }, z.core.$strip>>>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>]>>;
+            allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            binaryFormats: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodArray<z.ZodObject<{
+                type: z.ZodEnum<{
+                    audio: "audio";
+                    binary: "binary";
+                    file: "file";
+                    image: "image";
+                    video: "video";
+                }>;
+                extensions: z.ZodArray<z.ZodString>;
+                maxSize: z.ZodOptional<z.ZodNumber>;
+                mimeTypes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            }, z.core.$strip>>]>>;
+        }, z.core.$strip>>;
+        exec: z.ZodOptional<z.ZodObject<{
+            filesystem: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodEnum<{
+                all: "all";
+                none: "none";
+                read: "read";
+            }>]>>;
+            builtInTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodBoolean>;
+                command: z.ZodOptional<z.ZodString>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+                maxOutputBytes: z.ZodOptional<z.ZodNumber>;
+                allowlist: z.ZodOptional<z.ZodBoolean>;
+                persistAllowlist: z.ZodOptional<z.ZodBoolean>;
+                judge: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                    autoApproveLow: z.ZodOptional<z.ZodBoolean>;
+                    blockHigh: z.ZodOptional<z.ZodBoolean>;
+                    model: z.ZodOptional<z.ZodObject<{
+                        type: z.ZodOptional<z.ZodString>;
+                        model: z.ZodOptional<z.ZodString>;
+                        configuration: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
+                    }, z.core.$loose>>;
+                }, z.core.$strip>]>>;
+                yolo: z.ZodOptional<z.ZodBoolean>;
+                fileSet: z.ZodOptional<z.ZodEnum<{
+                    all: "all";
+                    gitignore: "gitignore";
+                }>>;
+            }, z.core.$strip>]>>]>>;
+            customTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodRecord<z.ZodString, z.ZodObject<{
+                command: z.ZodString;
+                description: z.ZodString;
+                parameters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                    description: z.ZodString;
+                    allow: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                        "absolute-paths": "absolute-paths";
+                        "directory-traversal": "directory-traversal";
+                        "null-bytes": "null-bytes";
+                        "shell-injection": "shell-injection";
+                    }>>>;
+                }, z.core.$strip>>>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>]>>;
+            allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            binaryFormats: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodArray<z.ZodObject<{
+                type: z.ZodEnum<{
+                    audio: "audio";
+                    binary: "binary";
+                    file: "file";
+                    image: "image";
+                    video: "video";
+                }>;
+                extensions: z.ZodArray<z.ZodString>;
+                maxSize: z.ZodOptional<z.ZodNumber>;
+                mimeTypes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            }, z.core.$strip>>]>>;
+        }, z.core.$strip>>;
+        api: z.ZodOptional<z.ZodObject<{
+            filesystem: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodEnum<{
+                all: "all";
+                none: "none";
+                read: "read";
+            }>]>>;
+            builtInTools: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodBoolean>;
+                command: z.ZodOptional<z.ZodString>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+                maxOutputBytes: z.ZodOptional<z.ZodNumber>;
+                allowlist: z.ZodOptional<z.ZodBoolean>;
+                persistAllowlist: z.ZodOptional<z.ZodBoolean>;
+                judge: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                    autoApproveLow: z.ZodOptional<z.ZodBoolean>;
+                    blockHigh: z.ZodOptional<z.ZodBoolean>;
+                    model: z.ZodOptional<z.ZodObject<{
+                        type: z.ZodOptional<z.ZodString>;
+                        model: z.ZodOptional<z.ZodString>;
+                        configuration: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
+                    }, z.core.$loose>>;
+                }, z.core.$strip>]>>;
+                yolo: z.ZodOptional<z.ZodBoolean>;
+                fileSet: z.ZodOptional<z.ZodEnum<{
+                    all: "all";
+                    gitignore: "gitignore";
+                }>>;
+            }, z.core.$strip>]>>]>>;
+            port: z.ZodOptional<z.ZodNumber>;
+            cors: z.ZodOptional<z.ZodObject<{
+                allowOrigin: z.ZodOptional<z.ZodString>;
+                allowMethods: z.ZodOptional<z.ZodString>;
+                allowHeaders: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    commit: z.ZodOptional<z.ZodObject<{
+        coAuthor: z.ZodOptional<z.ZodObject<{
+            name: z.ZodOptional<z.ZodString>;
+            email: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    modelDisplayName: z.ZodOptional<z.ZodString>;
+    injectModelContext: z.ZodOptional<z.ZodBoolean>;
+    debugDump: z.ZodOptional<z.ZodObject<{
+        redact: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    allowDirs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    askWriteMode: z.ZodOptional<z.ZodBoolean>;
+    output: z.ZodOptional<z.ZodObject<{
+        header: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    reporters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$loose>;
+/**
+ * Type inferred from {@link rawGthConfigSchema}. This is additive and intentionally
+ * separate from the hand-written `RawGthConfig` interface in `config.ts` (it omits
+ * the deprecated aliases). Prefer `RawGthConfig` for the public surface.
+ */
+export type RawGthConfigInput = z.infer<typeof rawGthConfigSchema>;
+/**
+ * The set of known top-level config keys, derived from the schema shape so it can
+ * never drift from {@link rawGthConfigSchema}. Includes `$schema`.
+ */
+export declare const KNOWN_TOP_LEVEL_KEYS: ReadonlySet<string>;
+/**
+ * True when a raw config value is a plain (non-null, non-array) object, so the key scans
+ * ({@link findDeprecatedConfigIssues}, {@link findUnknownTopLevelKeys}) are safe to run. A
+ * `null`/array/primitive config (e.g. a JSON file that is just `null`, or a module
+ * `configure()` returning null) must NOT reach those scans — they'd throw on
+ * `hasOwnProperty`/`Object.keys`; the entry points instead hand it straight to
+ * `rawGthConfigSchema.safeParse`, which reports a clean "expected object" error.
+ */
+export declare function isRecordConfig(value: unknown): value is Record<string, unknown>;
+/**
+ * Return the top-level keys present in `raw` that are not part of the known config
+ * surface. KNOWN deprecated names are rejected earlier by {@link findDeprecatedConfigIssues}
+ * (the entry points short-circuit on those), so a key that reaches here is a genuinely
+ * unknown key (a likely typo) that only warrants a warning.
+ */
+export declare function findUnknownTopLevelKeys(raw: Record<string, unknown>): string[];
+/**
+ * Render a friendly, path-scoped validation message from a Zod error. Each issue
+ * becomes a line `  - <path>: <message>`, with `(root)` for top-level issues.
+ */
+export declare function formatConfigValidationError(error: z.ZodError): string;
+/** A single deprecated-config-shape rejection: the offending `path` and the migration message. */
+export interface DeprecatedConfigIssue {
+    /** Dotted path of the offending key (e.g. `pr`, `commands.pr.contentProvider`). */
+    path: string;
+    /** Human message naming the canonical replacement + migration path. */
+    message: string;
+}
+/**
+ * GS2-28 — detect the removed pre-2.0 config shapes on the RAW input (read-only; no
+ * mutation), returning one {@link DeprecatedConfigIssue} per occurrence. A non-empty
+ * result is a HARD validation failure: 2.0 dropped back-compat coercion, so an old shape
+ * must error and point at the fix rather than be silently remapped or ignored.
+ *
+ * Detects:
+ * - (A) a COMMAND name ({@link COMMAND_KEYS}) at the config ROOT — must move under `commands.<cmd>`;
+ * - (C) a deprecated `*Provider*` name ({@link DEPRECATED_ROOT_PAIRS} at root,
+ *   {@link DEPRECATED_COMMAND_PAIRS} per command) — must use its `*Source*` replacement;
+ * - (D, CFG-18) a removed per-command key folded into another ({@link REMOVED_COMMAND_KEYS}, e.g.
+ *   `commands.<cmd>.devTools` → configure under `builtInTools`).
+ *
+ * Runs on the raw input specifically so nested `commands.*.contentProvider` is still visible
+ * (zod's per-command `z.object` would strip it before any schema-embedded check could fire).
+ * A genuinely-unknown key is NOT flagged here (it stays a warn-only unknown key), preserving
+ * the deliberate typo-tolerance.
+ */
+export declare function findDeprecatedConfigIssues(raw: Record<string, unknown>): DeprecatedConfigIssue[];
+/**
+ * Render {@link DeprecatedConfigIssue}s as the same `  - <path>: <message>` block used for
+ * Zod validation errors, so a deprecated-shape rejection reads identically to a type-mismatch
+ * rejection (loader wraps it with `Invalid configuration in <source>:`).
+ */
+export declare function formatDeprecatedConfigIssues(issues: ReadonlyArray<DeprecatedConfigIssue>): string;
+/**
+ * Generate the JSON Schema for the raw config from {@link rawGthConfigSchema} using
+ * zod 4's native `z.toJSONSchema`. The output is committed to
+ * `packages/core/schema/gsloth-config.schema.json` and asserted by a golden test.
+ */
+export declare function generateConfigJsonSchema(): Record<string, unknown>;
+/**
+ * The structured outcome of validating a single raw config layer, WITHOUT any side
+ * effects (no console output, no `exit`). This is the read-side counterpart to the
+ * loader's `validateRawConfigLayer` (which warns + `exit`s inline): `gth config validate`
+ * uses it to render its own output and choose its own exit code.
+ */
+export interface RawConfigValidationResult {
+    /** True when the config parses against the schema (unknown keys do NOT make it false). */
+    ok: boolean;
+    /** Non-fatal advisories: unknown top-level keys (likely typos). Deprecated shapes are hard errors, not warnings. */
+    warnings: string[];
+    /** Present only when `ok` is false: the path-scoped, multi-line validation message. */
+    errorMessage?: string;
+}
+/**
+ * Validate a freshly-loaded raw config object against {@link rawGthConfigSchema} and
+ * report the outcome as data (a pure function — no `displayWarning`/`exit`). Mirrors the
+ * loader's policy: a removed pre-2.0 shape (a top-level command key or a deprecated
+ * `*Provider*` name) is a HARD failure that names the fix, unknown top-level keys warn but
+ * do not fail, and a genuine type mismatch on a known field fails with a path-scoped message.
+ *
+ * Read-only: `findDeprecatedConfigIssues`, `findUnknownTopLevelKeys` and `safeParse` never
+ * mutate `raw`, so no defensive copy is needed.
+ */
+export declare function validateRawGthConfig(raw: Record<string, unknown>): RawConfigValidationResult;