@gaunt-sloth/core 2.0.0-alpha.2 → 2.0.0-alpha.4

package/dist/config/schema.js

@@ -0,0 +1,301 @@
+/**
+ * @packageDocumentation
+ * Zod schema for the on-disk raw Gaunt Sloth config (`RawGthConfig`).
+ *
+ * This is the single source of truth for config validation and for the generated
+ * JSON Schema (`packages/core/schema/gsloth-config.schema.json`). It models the
+ * canonical config shape only — the deprecated aliases (`contentProvider`,
+ * `requirementsProvider`, `contentProviderConfig`, `requirementsProviderConfig`)
+ * are intentionally NOT part of the schema. The loader maps those one-way to the
+ * canonical names ({@link preMapDeprecatedConfigNames}) BEFORE validating, so by
+ * the time a config reaches the schema it only uses canonical names.
+ *
+ * Design notes:
+ * - The top-level object is a {@link z.looseObject} so unknown keys PASS THROUGH
+ *   (they are neither stripped nor a hard failure). The loader separately diffs
+ *   present-vs-known top-level keys ({@link findUnknownTopLevelKeys}) to warn about
+ *   likely typos without failing.
+ * - Every field is optional. The schema validates the *shape/type of what is
+ *   present*, not requiredness. In particular `llm` is optional so the loader's
+ *   existing "must at least define llm.type" checks remain the authority on llm
+ *   validity (and keep emitting their established messages).
+ * - Runtime-object-bearing fields (`tools`, `middleware`, `mcpServers`,
+ *   `a2aAgents`, `builtInToolsConfig`) are modelled permissively because JS/MJS
+ *   `configure()` returns live instances/objects there.
+ *
+ * The exported {@link RawGthConfig}/{@link GthConfig} interfaces in `config.ts`
+ * remain the public type surface; the `z.infer` here ({@link RawGthConfigInput})
+ * is additive and legitimately differs (no deprecated fields).
+ */
+import { z } from 'zod';
+const filesystemSchema = z.union([z.array(z.string()), z.enum(['all', 'read', 'none'])]);
+const llmConfigSchema = z.looseObject({
+    type: z.string().optional(),
+    model: z.string().optional(),
+    configuration: z.record(z.string(), z.unknown()).optional(),
+    apiKeyEnvironmentVariable: z.string().optional(),
+});
+const ratingConfigSchema = z.object({
+    enabled: z.boolean().optional(),
+    passThreshold: z.number().optional(),
+    maxRating: z.number().optional(),
+    minRating: z.number().optional(),
+    errorOnReviewFail: z.boolean().optional(),
+});
+const customCommandParameterSchema = z.object({
+    description: z.string(),
+    allow: z
+        .array(z.enum(['absolute-paths', 'directory-traversal', 'shell-injection', 'null-bytes']))
+        .optional(),
+});
+const customCommandConfigSchema = z.object({
+    command: z.string(),
+    description: z.string(),
+    parameters: z.record(z.string(), customCommandParameterSchema).optional(),
+    timeout: z.number().optional(),
+});
+const customToolsConfigSchema = z.record(z.string(), customCommandConfigSchema);
+const customToolsOrFalseSchema = z.union([z.literal(false), customToolsConfigSchema]);
+const binaryFormatConfigSchema = z.object({
+    type: z.enum(['image', 'file', 'audio', 'video', 'binary']),
+    extensions: z.array(z.string()),
+    maxSize: z.number().optional(),
+    mimeTypes: z.record(z.string(), z.string()).optional(),
+});
+const binaryFormatsSchema = z.union([z.literal(false), z.array(binaryFormatConfigSchema)]);
+const shellJudgeSchema = z.union([
+    z.boolean(),
+    z.object({
+        enabled: z.boolean().optional(),
+        autoApproveLow: z.boolean().optional(),
+        blockHigh: z.boolean().optional(),
+        model: llmConfigSchema.optional(),
+    }),
+]);
+const shellConfigSchema = z.union([
+    z.boolean(),
+    z.object({
+        enabled: z.boolean().optional(),
+        timeout: z.number().optional(),
+        maxOutputBytes: z.number().optional(),
+        allowlist: z.boolean().optional(),
+        persistAllowlist: z.boolean().optional(),
+        judge: shellJudgeSchema.optional(),
+    }),
+]);
+const devToolsConfigSchema = z.object({
+    run_tests: z.string().optional(),
+    run_lint: z.string().optional(),
+    run_build: z.string().optional(),
+    run_single_test: z.string().optional(),
+    shell: shellConfigSchema.optional(),
+    shellYolo: z.boolean().optional(),
+});
+const prCommandSchema = z.object({
+    contentSource: z.string().optional(),
+    requirementSource: z.string().optional(),
+    filesystem: filesystemSchema.optional(),
+    builtInTools: z.array(z.string()).optional(),
+    customTools: customToolsOrFalseSchema.optional(),
+    allowedTools: z.array(z.string()).optional(),
+    logWorkForReviewInSeconds: z.number().optional(),
+    rating: ratingConfigSchema.optional(),
+    binaryFormats: binaryFormatsSchema.optional(),
+});
+const reviewCommandSchema = z.object({
+    contentSource: z.string().optional(),
+    requirementSource: z.string().optional(),
+    filesystem: filesystemSchema.optional(),
+    builtInTools: z.array(z.string()).optional(),
+    customTools: customToolsOrFalseSchema.optional(),
+    allowedTools: z.array(z.string()).optional(),
+    rating: ratingConfigSchema.optional(),
+    binaryFormats: binaryFormatsSchema.optional(),
+});
+const askCommandSchema = z.object({
+    filesystem: filesystemSchema.optional(),
+    builtInTools: z.array(z.string()).optional(),
+    customTools: customToolsOrFalseSchema.optional(),
+    allowedTools: z.array(z.string()).optional(),
+    devTools: devToolsConfigSchema.optional(),
+    binaryFormats: binaryFormatsSchema.optional(),
+});
+const chatCommandSchema = z.object({
+    filesystem: filesystemSchema.optional(),
+    builtInTools: z.array(z.string()).optional(),
+    customTools: customToolsOrFalseSchema.optional(),
+    allowedTools: z.array(z.string()).optional(),
+    binaryFormats: binaryFormatsSchema.optional(),
+});
+const codeCommandSchema = z.object({
+    filesystem: filesystemSchema.optional(),
+    builtInTools: z.array(z.string()).optional(),
+    customTools: customToolsOrFalseSchema.optional(),
+    allowedTools: z.array(z.string()).optional(),
+    devTools: devToolsConfigSchema.optional(),
+    binaryFormats: binaryFormatsSchema.optional(),
+});
+const execCommandSchema = z.object({
+    filesystem: filesystemSchema.optional(),
+    builtInTools: z.array(z.string()).optional(),
+    customTools: customToolsOrFalseSchema.optional(),
+    allowedTools: z.array(z.string()).optional(),
+    devTools: devToolsConfigSchema.optional(),
+    binaryFormats: binaryFormatsSchema.optional(),
+});
+const apiCommandSchema = z.object({
+    filesystem: filesystemSchema.optional(),
+    builtInTools: z.array(z.string()).optional(),
+    port: z.number().optional(),
+    cors: z
+        .object({
+        allowOrigin: z.string().optional(),
+        allowMethods: z.string().optional(),
+        allowHeaders: z.string().optional(),
+    })
+        .optional(),
+});
+const commandsSchema = z.object({
+    pr: prCommandSchema.optional(),
+    review: reviewCommandSchema.optional(),
+    ask: askCommandSchema.optional(),
+    chat: chatCommandSchema.optional(),
+    code: codeCommandSchema.optional(),
+    exec: execCommandSchema.optional(),
+    api: apiCommandSchema.optional(),
+});
+/**
+ * Zod schema for the raw, on-disk Gaunt Sloth config. Loose at the top level so
+ * unknown keys are preserved (warn-only via {@link findUnknownTopLevelKeys}).
+ */
+export const rawGthConfigSchema = z.looseObject({
+    // Allow a JSON Schema reference for editor support; never read at runtime.
+    $schema: z.string().optional(),
+    llm: llmConfigSchema.optional(),
+    binaryFormats: binaryFormatsSchema.optional(),
+    contentSource: z.string().optional(),
+    requirementSource: z.string().optional(),
+    contentSourceConfig: z.record(z.string(), z.unknown()).optional(),
+    requirementSourceConfig: z.record(z.string(), z.unknown()).optional(),
+    projectGuidelines: z.string().optional(),
+    identityProfile: z.string().optional(),
+    includeCurrentDateAfterGuidelines: z.boolean().optional(),
+    organization: z
+        .object({
+        name: z.string().optional(),
+        locale: z.string().optional(),
+        timezone: z.string().optional(),
+    })
+        .optional(),
+    projectReviewInstructions: z.string().optional(),
+    noDefaultPrompts: z.boolean().optional(),
+    filesystem: filesystemSchema.optional(),
+    builtInTools: z.array(z.string()).optional(),
+    // Live tool instances / toolkits in JS configs — kept permissive.
+    tools: z.array(z.unknown()).optional(),
+    allowedTools: z.array(z.string()).optional(),
+    // Predefined (string/object) or custom (object) middleware — permissive.
+    middleware: z.array(z.unknown()).optional(),
+    streamOutput: z.boolean().optional(),
+    writeOutputToFile: z.union([z.boolean(), z.string()]).optional(),
+    writeBinaryOutputsToFile: z.boolean().optional(),
+    useColour: z.boolean().optional(),
+    streamSessionInferenceLog: z.boolean().optional(),
+    canInterruptInferenceWithEsc: z.boolean().optional(),
+    debugLog: z.boolean().optional(),
+    recursionLimit: z.number().optional(),
+    consoleLevel: z.union([z.string(), z.number()]).optional(),
+    customTools: customToolsConfigSchema.optional(),
+    mcpServers: z.record(z.string(), z.unknown()).optional(),
+    a2aAgents: z.record(z.string(), z.unknown()).optional(),
+    builtInToolsConfig: z.record(z.string(), z.unknown()).optional(),
+    aiignore: z
+        .object({
+        enabled: z.boolean().optional(),
+        patterns: z.array(z.string()).optional(),
+    })
+        .optional(),
+    commands: commandsSchema.optional(),
+    modelDisplayName: z.string().optional(),
+    allowDirs: z.array(z.string()).optional(),
+    askWriteMode: z.boolean().optional(),
+});
+/**
+ * The set of known top-level config keys, derived from the schema shape so it can
+ * never drift from {@link rawGthConfigSchema}. Includes `$schema`.
+ */
+export const KNOWN_TOP_LEVEL_KEYS = new Set(Object.keys(rawGthConfigSchema.shape));
+/**
+ * Return the top-level keys present in `raw` that are not part of the known config
+ * surface. Deprecated aliases should be pre-mapped away first (see
+ * {@link preMapDeprecatedConfigNames}) so they do not show up here.
+ */
+export function findUnknownTopLevelKeys(raw) {
+    return Object.keys(raw).filter((key) => !KNOWN_TOP_LEVEL_KEYS.has(key));
+}
+/**
+ * Render a friendly, path-scoped validation message from a Zod error. Each issue
+ * becomes a line `  - <path>: <message>`, with `(root)` for top-level issues.
+ */
+export function formatConfigValidationError(error) {
+    return error.issues
+        .map((issue) => {
+        const path = issue.path.length > 0 ? issue.path.join('.') : '(root)';
+        return `  - ${path}: ${issue.message}`;
+    })
+        .join('\n');
+}
+/** Deprecated → canonical key pairs at the config root. */
+const DEPRECATED_ROOT_PAIRS = [
+    ['contentProvider', 'contentSource'],
+    ['requirementsProvider', 'requirementSource'],
+    ['contentProviderConfig', 'contentSourceConfig'],
+    ['requirementsProviderConfig', 'requirementSourceConfig'],
+];
+/** Deprecated → canonical key pairs inside a `commands.<name>` block. */
+const DEPRECATED_COMMAND_PAIRS = [
+    ['contentProvider', 'contentSource'],
+    ['requirementsProvider', 'requirementSource'],
+];
+function remapDeprecated(obj, pairs, scope, warnings) {
+    for (const [deprecated, canonical] of pairs) {
+        if (Object.prototype.hasOwnProperty.call(obj, deprecated)) {
+            warnings.push(`Config property "${deprecated}"${scope} is deprecated. Use "${canonical}" instead.`);
+            // Canonical wins when both are present; otherwise adopt the deprecated value.
+            if (obj[canonical] === undefined) {
+                obj[canonical] = obj[deprecated];
+            }
+            delete obj[deprecated];
+        }
+    }
+}
+/**
+ * B3 — one-way pre-map of deprecated config key names to their canonical names, at
+ * the config root AND per-command. Mutates `raw` in place (it is always a freshly
+ * loaded config layer) and returns it alongside a list of deprecation warnings the
+ * caller should emit via `displayWarning`. Canonical names win when both are
+ * present; the deprecated key is always removed so it does not later surface as an
+ * "unknown top-level key".
+ */
+export function preMapDeprecatedConfigNames(raw) {
+    const warnings = [];
+    remapDeprecated(raw, DEPRECATED_ROOT_PAIRS, '', warnings);
+    const commands = raw.commands;
+    if (commands && typeof commands === 'object') {
+        for (const [name, cmd] of Object.entries(commands)) {
+            if (cmd && typeof cmd === 'object') {
+                remapDeprecated(cmd, DEPRECATED_COMMAND_PAIRS, ` in commands.${name}`, warnings);
+            }
+        }
+    }
+    return { config: raw, warnings };
+}
+/**
+ * Generate the JSON Schema for the raw config from {@link rawGthConfigSchema} using
+ * zod 4's native `z.toJSONSchema`. The output is committed to
+ * `packages/core/schema/gsloth-config.schema.json` and asserted by a golden test.
+ */
+export function generateConfigJsonSchema() {
+    return z.toJSONSchema(rawGthConfigSchema, { io: 'input' });
+}
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzF,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC,CAAC;SACzF,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,QAAQ,EAAE;IACzE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC;AAChF,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAEtF,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3D,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AACH,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;AAE3F,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC/B,CAAC,CAAC,OAAO,EAAE;IACX,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACtC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACjC,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE;KAClC,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC;IAChC,CAAC,CAAC,OAAO,EAAE;IACX,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACjC,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACxC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE;KACnC,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAChD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAChD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAChD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACzC,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAChD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAChD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACzC,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAChD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACzC,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACnC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACpC,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACtC,GAAG,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAClC,GAAG,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC;IAC9C,2EAA2E;IAC3E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,GAAG,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC7C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjE,uBAAuB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,iCAAiC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzD,YAAY,EAAE,CAAC;SACZ,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;SACD,QAAQ,EAAE;IACb,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChD,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,kEAAkE;IAClE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,yEAAyE;IACzE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChE,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,yBAAyB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjD,4BAA4B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,WAAW,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC/C,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvD,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChE,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC;SACD,QAAQ,EAAE;IACb,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AASH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAC9D,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CACtC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAA4B;IAClE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAiB;IAC3D,OAAO,KAAK,CAAC,MAAM;SAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrE,OAAO,OAAO,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IACzC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,2DAA2D;AAC3D,MAAM,qBAAqB,GAA6C;IACtE,CAAC,iBAAiB,EAAE,eAAe,CAAC;IACpC,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;IAC7C,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;IAChD,CAAC,4BAA4B,EAAE,yBAAyB,CAAC;CAC1D,CAAC;AAEF,yEAAyE;AACzE,MAAM,wBAAwB,GAA6C;IACzE,CAAC,iBAAiB,EAAE,eAAe,CAAC;IACpC,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;CAC9C,CAAC;AAEF,SAAS,eAAe,CACtB,GAA4B,EAC5B,KAA+C,EAC/C,KAAa,EACb,QAAkB;IAElB,KAAK,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,KAAK,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;YAC1D,QAAQ,CAAC,IAAI,CACX,oBAAoB,UAAU,IAAI,KAAK,wBAAwB,SAAS,YAAY,CACrF,CAAC;YACF,8EAA8E;YAC9E,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAM;IAEN,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,eAAe,CAAC,GAAG,EAAE,qBAAqB,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAmC,CAAC,EAAE,CAAC;YAC9E,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACnC,eAAe,CACb,GAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,IAAI,EAAE,EACtB,QAAQ,CACT,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,CAAC,CAAC,YAAY,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAA4B,CAAC;AACxF,CAAC"}

package/dist/config/shell-policy.d.ts

@@ -0,0 +1,212 @@
+/**
+ * @packageDocumentation
+ * Shell / dev-tools policy: the {@link GthDevToolsConfig} type plus all the resolvers
+ * that interpret it (shell enablement, timeouts, output budget, allow-list, the EXT-10
+ * LLM-as-judge gate, and per-command dev-tools selection). Extracted verbatim from the
+ * former `config.ts` god-file; behaviour is unchanged.
+ */
+import type { GthCommand } from '#src/core/types.js';
+import type { GthConfig, LLMConfig } from '#src/config/types.js';
+/**
+ * Config for {@link GthDevToolkit}.
+ * Tools are not applied when config is not provided.
+ * Only available in `code`/`exec` mode (and `ask --write`).
+ */
+export interface GthDevToolsConfig {
+    /**
+     * Optional shell command to run tests.
+     * Not applied when config is not provided.
+     */
+    run_tests?: string;
+    /**
+     * Optional shell command to run static analysis (lint).
+     * Not applied when config is not provided.
+     */
+    run_lint?: string;
+    /**
+     * Optional shell command to run the build.
+     * Not applied when config is not provided.
+     */
+    run_build?: string;
+    /**
+     * Optional shell command to run a single test file.
+     * Supports command interpolation with the `${testPath}` placeholder.
+     * Example: "npm test -- ${testPath}" or "jest ${testPath}"
+     * Example: "npm test" - the test will simply be appended
+     * Not applied when config is not provided.
+     */
+    run_single_test?: string;
+    /**
+     * Opt-in general-purpose shell tool (`run_shell_command`). Unlike the fixed
+     * `run_*` commands above, this lets the agent run ARBITRARY shell commands it
+     * composes itself — the agentic-coding escape hatch the deep agent otherwise
+     * lacks (it can read/write files but not run commands).
+     *
+     * EXT-12 — default: ON in `code` mode, OFF elsewhere. When this is ABSENT/undefined,
+     * `code` mode emits the tool (still GATED behind the per-command approval prompt — the
+     * absent-config default NEVER implies yolo); `exec` / `ask --write` keep it OFF. An
+     * EXPLICIT value always wins: `shell: false` (or `{ enabled: false }`) is a hard escape
+     * hatch that fully disables it even in `code`. Accepts a bare boolean or an
+     * `{ enabled }` object for symmetry with future per-tool options.
+     *
+     * Because the model chooses the command, every invocation is gated behind a
+     * per-command human confirmation dialog (LangChain `humanInTheLoopMiddleware`,
+     * wired via deepagents' `interruptOn`) UNLESS {@link shellYolo} bypasses it.
+     * The confirmation — not string-filtering — is the guardrail, so the command
+     * is passed through verbatim (pipes / `$` / `;` are all legitimate).
+     *
+     * The object form also tunes the EXT-9 Tier-1 hardening applied to every run
+     * (these have safe defaults so bare `shell: true` is already hardened):
+     * - `timeout`: per-command wall-clock limit in MILLISECONDS before the child
+     *   (and its process group) is killed. Default {@link SHELL_DEFAULT_TIMEOUT_MS}.
+     * - `maxOutputBytes`: byte budget for the captured output returned to the model
+     *   (head + tail window; the middle is dropped and the full output spilled to a
+     *   temp file). Default {@link SHELL_DEFAULT_MAX_OUTPUT_BYTES}. Live terminal
+     *   streaming is never capped.
+     *
+     * A hardcoded hardline blocklist of catastrophic commands (rm -rf /, mkfs, dd
+     * to a block device, fork bomb, shutdown/reboot, …) is refused even under
+     * {@link shellYolo}; that floor is not configurable.
+     *
+     * Example: `{ "shell": true }`,
+     * `{ "shell": { "enabled": true, "timeout": 300000, "maxOutputBytes": 200000 } }`.
+     *
+     * The object form additionally accepts EXT-9 Tier-2 allow-list knobs:
+     * - `allowlist`: master switch for the scoped approval allow-list (session +
+     *   persisted `always`). Default `true` — once a command is approved at `session`/
+     *   `always` scope, flag-variants of the same classified operation auto-approve
+     *   without re-prompting. Set `false` to require fresh approval for every command.
+     * - `persistAllowlist`: whether `always`-scoped approvals are written to the project
+     *   allow-list file (`.gsloth/.gsloth-settings/shell-allowlist.json`). Default `true`.
+     *   When `false`, an `always` decision behaves like `session` (in-memory only).
+     *
+     * The object form also accepts the EXT-10 LLM-as-judge safety gate (default OFF):
+     * - `judge`: an opt-in, tiered auto-approve pre-filter that vets each `run_shell_command`
+     *   with a lightweight judge model BEFORE the human prompt. It auto-approves clearly-safe
+     *   commands (fatigue reducer), escalates the rest to the existing human prompt, and may
+     *   reject clearly-catastrophic ones. Default OFF because it costs one LLM call per command.
+     *   Accepts a bare boolean (`judge: true` → defaults: auto-approve low, escalate medium/high,
+     *   judge model = `config.llm`) or an object:
+     *     - `enabled`: turn the gate on.
+     *     - `autoApproveLow`: auto-approve `low`-risk, statically-resolvable commands. Default true.
+     *     - `blockHigh`: reject clearly-catastrophic (`high` + destructive) verdicts WITHOUT
+     *       prompting. Default false (conservative; EXT-9's hardline floor already refuses truly
+     *       catastrophic commands at exec time).
+     *     - `model`: an optional separate (e.g. cheaper) judge model config. Defaults to `config.llm`.
+     *   Hardening (always on when the judge runs): the command is normalized + XML-tagged as
+     *   UNTRUSTED input in the judge prompt; a judge throw/timeout/parse-failure fails CLOSED
+     *   (escalate, never auto-approve); commands whose target can't be statically resolved
+     *   (shell composition / substitution / redirection) and interpreter+script invocations that
+     *   leak ALL_CAPS env vars are NEVER auto-approved.
+     */
+    shell?: boolean | {
+        enabled?: boolean;
+        timeout?: number;
+        maxOutputBytes?: number;
+        allowlist?: boolean;
+        persistAllowlist?: boolean;
+        judge?: boolean | {
+            enabled?: boolean;
+            autoApproveLow?: boolean;
+            blockHigh?: boolean;
+            model?: LLMConfig;
+        };
+    };
+    /**
+     * Opt-out of the per-command confirmation dialog for {@link shell}
+     * (`run_shell_command`) — the explicit "yolo" bypass. When `true` AND `shell`
+     * is enabled, the shell tool runs without any approval interrupt: the model's
+     * commands execute immediately. Dangerous by design; off by default.
+     *
+     * Example: `{ "shell": true, "shellYolo": true }`.
+     */
+    shellYolo?: boolean;
+}
+/**
+ * Default per-command shell timeout (ms) when {@link GthDevToolsConfig.shell}
+ * does not specify one. ~120s suits typical build/test/git steps without
+ * hanging the agent forever on a stuck command.
+ */
+export declare const SHELL_DEFAULT_TIMEOUT_MS = 120000;
+/**
+ * Default byte budget for shell output captured into the ToolMessage returned to
+ * the model (head + tail window). ~100KB keeps a noisy log from blowing the
+ * context window; the full output is spilled to a temp file when this is exceeded.
+ */
+export declare const SHELL_DEFAULT_MAX_OUTPUT_BYTES = 100000;
+/**
+ * Normalize the {@link GthDevToolsConfig.shell} opt-in (bare boolean or
+ * `{ enabled }`) to a plain boolean. Centralized so the toolkit (tool emission)
+ * and the deep agent (interrupt wiring) agree on what "shell enabled" means.
+ *
+ * EXT-12 — default-resolution: an EXPLICIT value always wins (a bare boolean, or the
+ * object form's `enabled`), so `shell: false` / `{ enabled: false }` remains a hard
+ * escape hatch that fully disables the tool. Only when `shell` is ABSENT/undefined does
+ * the per-mode default apply: in `code` mode the shell tool is ON by default (still
+ * gated — the per-command approval interrupt is wired separately and is NOT bypassed by
+ * this), and OFF everywhere else (`exec`, `ask --write`, …) to preserve prior behaviour.
+ * The default is `code`-mode only because `code` is the interactive agentic-coding surface
+ * where a TTY can answer the approval prompt; the absent-config default never implies yolo.
+ *
+ * @param command The active command, so the absent-config default can be scoped to `code`.
+ *   Omit (or pass a non-`code` command) to keep the historical OFF-by-default behaviour.
+ */
+export declare function isShellToolEnabled(devTools: GthDevToolsConfig | undefined, command?: GthCommand | undefined): boolean;
+/**
+ * Resolve the per-command shell timeout (ms) from config, falling back to
+ * {@link SHELL_DEFAULT_TIMEOUT_MS}. Only the object form can override it; a bare
+ * `shell: true` uses the default. Non-positive / non-finite values are ignored.
+ */
+export declare function getShellTimeoutMs(devTools: GthDevToolsConfig | undefined): number;
+/**
+ * Resolve the captured-output byte budget from config, falling back to
+ * {@link SHELL_DEFAULT_MAX_OUTPUT_BYTES}. Only the object form can override it.
+ * Non-positive / non-finite values are ignored.
+ */
+export declare function getShellMaxOutputBytes(devTools: GthDevToolsConfig | undefined): number;
+/**
+ * Whether the EXT-9 Tier-2 scoped allow-list is active. Default `true`; only the object
+ * form's `allowlist: false` disables it (a bare `shell: true` keeps it on). When off, the
+ * runner prompts for every `run_shell_command` regardless of prior approvals.
+ */
+export declare function isShellAllowlistEnabled(devTools: GthDevToolsConfig | undefined): boolean;
+/**
+ * Whether `always`-scoped approvals are persisted to the project allow-list file. Default
+ * `true`; only the object form's `persistAllowlist: false` disables persistence (an
+ * `always` decision then behaves as `session`).
+ */
+export declare function isShellAllowlistPersisted(devTools: GthDevToolsConfig | undefined): boolean;
+/**
+ * Resolved settings for the EXT-10 LLM-as-judge safety gate.
+ */
+export interface ShellJudgeSettings {
+    /** Whether the judge gate runs at all. */
+    enabled: boolean;
+    /** Auto-approve `low`-risk, statically-resolvable commands (the fatigue reducer). */
+    autoApproveLow: boolean;
+    /** Reject clearly-catastrophic (`high` + destructive) verdicts without prompting. */
+    blockHigh: boolean;
+    /** Optional separate judge model config; when absent the runner uses `config.llm`. */
+    model?: LLMConfig;
+}
+/**
+ * Whether the EXT-10 LLM-as-judge safety gate is enabled for the given dev-tools config.
+ * Default OFF (only the object form's `judge` truthy enables it), mirroring
+ * {@link isShellToolEnabled}. A bare `shell: true` keeps the judge OFF — it costs an LLM call
+ * per command and must be opted into explicitly.
+ */
+export declare function isShellJudgeEnabled(devTools: GthDevToolsConfig | undefined): boolean;
+/**
+ * Resolve the EXT-10 judge gate settings from a dev-tools config, applying safe defaults
+ * (auto-approve low, do NOT block high). `enabled` reflects {@link isShellJudgeEnabled}.
+ */
+export declare function getShellJudgeSettings(devTools: GthDevToolsConfig | undefined): ShellJudgeSettings;
+/**
+ * Resolve the {@link GthDevToolsConfig} that applies to the active command, mirroring the
+ * per-command selection in `builtInToolsConfig.getDefaultTools` (which is what actually emits
+ * the dev tools) and `GthDeepAgent.getEffectiveDevToolsConfig`: `exec` → `commands.exec`,
+ * `ask --write` → `commands.ask`, `code` → `commands.code`; `undefined` elsewhere (the
+ * toolkit is inert there). Shared in core so the runner's allow-list gate stays in lockstep
+ * with where the shell tool is actually emitted.
+ */
+export declare function getEffectiveDevToolsConfig(config: Pick<GthConfig, 'commands' | 'askWriteMode'> | undefined, command: GthCommand | undefined): GthDevToolsConfig | undefined;