@gaunt-sloth/core 2.0.0-alpha.2 → 2.0.0-alpha.4

package/dist/config/shell-policy.js

@@ -0,0 +1,142 @@
+/**
+ * Default per-command shell timeout (ms) when {@link GthDevToolsConfig.shell}
+ * does not specify one. ~120s suits typical build/test/git steps without
+ * hanging the agent forever on a stuck command.
+ */
+export const SHELL_DEFAULT_TIMEOUT_MS = 120_000;
+/**
+ * Default byte budget for shell output captured into the ToolMessage returned to
+ * the model (head + tail window). ~100KB keeps a noisy log from blowing the
+ * context window; the full output is spilled to a temp file when this is exceeded.
+ */
+export const SHELL_DEFAULT_MAX_OUTPUT_BYTES = 100_000;
+/**
+ * Normalize the {@link GthDevToolsConfig.shell} opt-in (bare boolean or
+ * `{ enabled }`) to a plain boolean. Centralized so the toolkit (tool emission)
+ * and the deep agent (interrupt wiring) agree on what "shell enabled" means.
+ *
+ * EXT-12 — default-resolution: an EXPLICIT value always wins (a bare boolean, or the
+ * object form's `enabled`), so `shell: false` / `{ enabled: false }` remains a hard
+ * escape hatch that fully disables the tool. Only when `shell` is ABSENT/undefined does
+ * the per-mode default apply: in `code` mode the shell tool is ON by default (still
+ * gated — the per-command approval interrupt is wired separately and is NOT bypassed by
+ * this), and OFF everywhere else (`exec`, `ask --write`, …) to preserve prior behaviour.
+ * The default is `code`-mode only because `code` is the interactive agentic-coding surface
+ * where a TTY can answer the approval prompt; the absent-config default never implies yolo.
+ *
+ * @param command The active command, so the absent-config default can be scoped to `code`.
+ *   Omit (or pass a non-`code` command) to keep the historical OFF-by-default behaviour.
+ */
+export function isShellToolEnabled(devTools, command) {
+    const shell = devTools?.shell;
+    if (typeof shell === 'boolean')
+        return shell;
+    if (shell && typeof shell === 'object')
+        return shell.enabled === true;
+    // Absent/undefined shell: ON by default for `code` mode (gated), OFF elsewhere.
+    return command === 'code';
+}
+/**
+ * Resolve the per-command shell timeout (ms) from config, falling back to
+ * {@link SHELL_DEFAULT_TIMEOUT_MS}. Only the object form can override it; a bare
+ * `shell: true` uses the default. Non-positive / non-finite values are ignored.
+ */
+export function getShellTimeoutMs(devTools) {
+    const shell = devTools?.shell;
+    if (shell && typeof shell === 'object' && typeof shell.timeout === 'number') {
+        if (Number.isFinite(shell.timeout) && shell.timeout > 0)
+            return shell.timeout;
+    }
+    return SHELL_DEFAULT_TIMEOUT_MS;
+}
+/**
+ * Resolve the captured-output byte budget from config, falling back to
+ * {@link SHELL_DEFAULT_MAX_OUTPUT_BYTES}. Only the object form can override it.
+ * Non-positive / non-finite values are ignored.
+ */
+export function getShellMaxOutputBytes(devTools) {
+    const shell = devTools?.shell;
+    if (shell && typeof shell === 'object' && typeof shell.maxOutputBytes === 'number') {
+        if (Number.isFinite(shell.maxOutputBytes) && shell.maxOutputBytes > 0) {
+            return shell.maxOutputBytes;
+        }
+    }
+    return SHELL_DEFAULT_MAX_OUTPUT_BYTES;
+}
+/**
+ * Whether the EXT-9 Tier-2 scoped allow-list is active. Default `true`; only the object
+ * form's `allowlist: false` disables it (a bare `shell: true` keeps it on). When off, the
+ * runner prompts for every `run_shell_command` regardless of prior approvals.
+ */
+export function isShellAllowlistEnabled(devTools) {
+    const shell = devTools?.shell;
+    if (shell && typeof shell === 'object' && shell.allowlist === false)
+        return false;
+    return true;
+}
+/**
+ * Whether `always`-scoped approvals are persisted to the project allow-list file. Default
+ * `true`; only the object form's `persistAllowlist: false` disables persistence (an
+ * `always` decision then behaves as `session`).
+ */
+export function isShellAllowlistPersisted(devTools) {
+    const shell = devTools?.shell;
+    if (shell && typeof shell === 'object' && shell.persistAllowlist === false)
+        return false;
+    return true;
+}
+/**
+ * Whether the EXT-10 LLM-as-judge safety gate is enabled for the given dev-tools config.
+ * Default OFF (only the object form's `judge` truthy enables it), mirroring
+ * {@link isShellToolEnabled}. A bare `shell: true` keeps the judge OFF — it costs an LLM call
+ * per command and must be opted into explicitly.
+ */
+export function isShellJudgeEnabled(devTools) {
+    const shell = devTools?.shell;
+    if (!shell || typeof shell !== 'object')
+        return false;
+    const judge = shell.judge;
+    if (typeof judge === 'boolean')
+        return judge;
+    if (judge && typeof judge === 'object')
+        return judge.enabled === true;
+    return false;
+}
+/**
+ * Resolve the EXT-10 judge gate settings from a dev-tools config, applying safe defaults
+ * (auto-approve low, do NOT block high). `enabled` reflects {@link isShellJudgeEnabled}.
+ */
+export function getShellJudgeSettings(devTools) {
+    const enabled = isShellJudgeEnabled(devTools);
+    const shell = devTools?.shell;
+    const judge = shell && typeof shell === 'object' && shell.judge && typeof shell.judge === 'object'
+        ? shell.judge
+        : undefined;
+    return {
+        enabled,
+        autoApproveLow: judge?.autoApproveLow ?? true,
+        blockHigh: judge?.blockHigh ?? false,
+        model: judge?.model,
+    };
+}
+/**
+ * Resolve the {@link GthDevToolsConfig} that applies to the active command, mirroring the
+ * per-command selection in `builtInToolsConfig.getDefaultTools` (which is what actually emits
+ * the dev tools) and `GthDeepAgent.getEffectiveDevToolsConfig`: `exec` → `commands.exec`,
+ * `ask --write` → `commands.ask`, `code` → `commands.code`; `undefined` elsewhere (the
+ * toolkit is inert there). Shared in core so the runner's allow-list gate stays in lockstep
+ * with where the shell tool is actually emitted.
+ */
+export function getEffectiveDevToolsConfig(config, command) {
+    if (!config)
+        return undefined;
+    const askWrite = command === 'ask' && config.askWriteMode === true;
+    if (command === 'exec')
+        return config.commands?.exec?.devTools;
+    if (askWrite)
+        return config.commands?.ask?.devTools;
+    if (command === 'code')
+        return config.commands?.code?.devTools;
+    return undefined;
+}
+//# sourceMappingURL=shell-policy.js.map

package/dist/config/shell-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-policy.js","sourceRoot":"","sources":["../../src/config/shell-policy.ts"],"names":[],"mappings":"AAkIA;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,OAAO,CAAC;AAEtD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAuC,EACvC,OAAgC;IAEhC,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;IACtE,gFAAgF;IAChF,OAAO,OAAO,KAAK,MAAM,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAuC;IACvE,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5E,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAChF,CAAC;IACD,OAAO,wBAAwB,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAuC;IAC5E,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QACnF,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YACtE,OAAO,KAAK,CAAC,cAAc,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,8BAA8B,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAuC;IAC7E,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAClF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAuC;IAC/E,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,gBAAgB,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACzF,OAAO,IAAI,CAAC;AACd,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAuC;IACzE,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;IACtE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAuC;IAC3E,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,MAAM,KAAK,GACT,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAClF,CAAC,CAAC,KAAK,CAAC,KAAK;QACb,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO;QACL,OAAO;QACP,cAAc,EAAE,KAAK,EAAE,cAAc,IAAI,IAAI;QAC7C,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,KAAK;QACpC,KAAK,EAAE,KAAK,EAAE,KAAK;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAgE,EAChE,OAA+B;IAE/B,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,QAAQ,GAAG,OAAO,KAAK,KAAK,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC;IACnE,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC;IAC/D,IAAI,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC;IACpD,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/config/types.d.ts

@@ -0,0 +1,453 @@
+/**
+ * @packageDocumentation
+ * Gaunt Sloth configuration types. Extracted verbatim from the former `config.ts`
+ * god-file; the public type surface is unchanged. The shell/dev-tools policy types
+ * live in `./shell-policy.ts`; defaults in `./defaults.ts`; the loader in `./loader.ts`.
+ */
+import type { BaseChatModel } from '@langchain/core/language_models/chat_models';
+import type { BaseToolkit, StructuredToolInterface } from '@langchain/core/tools';
+import type { StatusLevel } from '#src/core/types.js';
+import type { GthDevToolsConfig } from '#src/config/shell-policy.js';
+/**
+ * Shared per-command tooling configuration (the knobs every actionable command carries).
+ * Reused across the per-command types in {@link GthConfig.commands} and by
+ * {@link PrCommandConfig}. Type-level dedupe only — no runtime/behaviour change.
+ *
+ * NOTE: `commands.api` intentionally does NOT use this shape (it only has
+ * `filesystem`/`builtInTools` plus `port`/`cors`), so it stays bespoke below.
+ */
+export interface CommandToolingConfig {
+    filesystem?: string[] | 'all' | 'read' | 'none';
+    builtInTools?: string[];
+    customTools?: CustomToolsConfig | false;
+    /** See {@link GthConfig.allowedTools}. */
+    allowedTools?: string[];
+    binaryFormats?: false | BinaryFormatConfig[];
+}
+/**
+ * This is a processed Gaunt Sloth config ready to be passed down into components.
+ *
+ * Default values can be found in {@link DEFAULT_CONFIG}
+ */
+export interface GthConfig {
+    llm: BaseChatModel;
+    /**
+     * Binary format support configuration.
+     * Disabled by default unless explicitly configured.
+     */
+    binaryFormats?: false | BinaryFormatConfig[];
+    /**
+     * Content source type. Source used to fetch content (usually diff) for `review` or `pr` command.
+     *
+     * {@link DEFAULT_CONFIG#contentSource}
+     */
+    contentSource: string;
+    /**
+     * Requirement source type. Source used to fetch requirements for `review` or `pr` command.
+     */
+    requirementSource: string;
+    /**
+     * Path to project-specific guidelines.
+     * The default is `.gsloth.guidelines.md`; this config may be used to point Gaunt Sloth to a different file,
+     * for example, to AGENTS.md
+     */
+    projectGuidelines: string;
+    /**
+     * Separate identity profile.
+     * May include separate identity, guidelines and command protocol,
+     * making gsloth behave as an agent different from default profile behaviour.
+     * for example, `devops` profile to detect changes such as properties and environment variables.
+     * Custom config can still win over this one.
+     * This setting requires .gsloth/.gsloth-settings directory to exist.
+     */
+    identityProfile?: string;
+    /**
+     * Whether to include the current date in the project review instructions or not.
+     */
+    includeCurrentDateAfterGuidelines: boolean;
+    /**
+     * Organisation name, locale and timezone.
+     * Only used with {@link includeCurrentDateAfterGuidelines}.
+     * timeZone and locale should be in format supported by Intl.DateTimeFormat
+     */
+    organization?: {
+        name?: string;
+        locale?: string;
+        timezone?: string;
+    };
+    projectReviewInstructions: string;
+    /**
+     * If true, only use user-provided system prompts. Do not fall back to the
+     * bundled `.gsloth.*.md` prompt files shipped with the installation.
+     * This applies to all `.gsloth.*.md` files (backstory, system, chat, code, guidelines, review).
+     */
+    noDefaultPrompts?: boolean;
+    filesystem: string[] | 'all' | 'read' | 'none';
+    builtInTools?: string[];
+    tools?: StructuredToolInterface[] | BaseToolkit[] | ServerTool[];
+    /**
+     * Restrict the agent to this allow-list of tool names, applied after every tool source
+     * (filesystem, built-in, custom, MCP, A2A, and `tools`) is resolved. This is the only knob
+     * that can gate MCP and A2A tools, which have no per-source override of their own.
+     *
+     * - omitted/undefined: no filtering, all resolved tools remain available.
+     * - non-empty array: keep only tools whose name is in the list.
+     * - empty array `[]`: disable every tool. MCP servers are not even contacted (no OAuth),
+     *   which is useful for agents that only need to reason over the prompt (e.g. the review
+     *   agent).
+     *
+     * Can be overridden per command via `commands.<command>.allowedTools`.
+     */
+    allowedTools?: string[];
+    /**
+     * Middleware configuration for LangChain v1.
+     * Middleware provides hooks to intercept and control agent execution at critical points.
+     *
+     * Middleware can be:
+     * - Predefined middleware (string or config object) - works in both JSON and JS configs
+     * - Custom middleware objects - only available in JS configs
+     *
+     * Example (JSON config):
+     * ```json
+     * {
+     *   "middleware": [
+     *     "summarization",
+     *     { "name": "anthropic-prompt-caching", "ttl": "5m" }
+     *   ]
+     * }
+     * ```
+     *
+     * Example (JS config):
+     * ```js
+     * {
+     *   middleware: [
+     *     "summarization",
+     *     { beforeModel: (state) => { /* custom logic *\/ return state; } }
+     *   ]
+     * }
+     * ```
+     *
+     * Available predefined middleware:
+     * - `anthropic-prompt-caching`: Reduces API costs by caching prompts (Anthropic only)
+     * - `summarization`: Condenses conversation history when approaching token limits
+     */
+    middleware?: unknown[];
+    /**
+     * Stream output. Some models do not support streaming. Set value to `false` for them.
+     *
+     * {@link DEFAULT_CONFIG#streamOutput}
+     */
+    streamOutput: boolean;
+    /**
+     * Should the output be written to md file.
+     * (e.g. gth_2025-07-26_22-59-06_REVIEW.md).
+     * Can be set to false with `-wn` or `-w0`
+     * Can be set to a specific filename or path by passing a string:
+     * - Bare filenames (e.g. `"review.md"`) are placed in `.gsloth/` when it exists, otherwise project root
+     * - Paths with separators (e.g. `"./review.md"` or `"reviews/last.md"`) are always relative to project root
+     * Please note the string does not accept absolute path, but allows to exit project with `..` if necessary.
+     */
+    writeOutputToFile: boolean | string;
+    /**
+     * Whether binary model outputs should be written to files instead of printed inline.
+     * When enabled, supported binary content blocks are materialized as `gth_*.<ext>` files.
+     */
+    writeBinaryOutputsToFile: boolean;
+    /**
+     * Use colour in output
+     */
+    useColour: boolean;
+    /**
+     * Stream session log instead of writing it when inference streaming is complete.
+     * (only works when {@link streamOutput} is true)
+     */
+    streamSessionInferenceLog: boolean;
+    /**
+     * Allow inference to be interrupted with esc. Only has an effect in TTY mode.
+     */
+    canInterruptInferenceWithEsc: boolean;
+    /**
+     * Log messages and events to gaunt-sloth.log,
+     * use llm.verbose or `gth --verbose` as more intrusive option, setting verbose to LangChain / LangGraph
+     */
+    debugLog?: boolean;
+    /**
+     * LangGraph recursion limit for an agent run — the maximum number of
+     * super-steps (model ↔ tool round-trips) before the graph throws. Defaults to
+     * 1000, which suits long coding chains; embodied / tight-loop consumers can
+     * lower it so a stuck run fails fast and visibly instead of grinding.
+     */
+    recursionLimit?: number;
+    /**
+     * Console logging level. Only messages at or above this level will be displayed.
+     * Valid values: 'debug', 'info', 'display', 'success', 'warning', 'error', 'stream'
+     * Default: 'info' (not debug)
+     */
+    consoleLevel?: StatusLevel;
+    customTools?: CustomToolsConfig;
+    requirementSourceConfig?: Record<string, unknown>;
+    contentSourceConfig?: Record<string, unknown>;
+    /**
+     * MCP (Model Context Protocol) server connections.
+     * Allows connecting to external MCP servers including those requiring OAuth.
+     * @see {@link https://modelcontextprotocol.io/}
+     */
+    mcpServers?: Record<string, unknown>;
+    /**
+     * A2A (Agent-to-Agent) protocol agents configuration.
+     * Enables delegation of tasks to external AI agents.
+     * Each agent becomes available as a tool named `a2a_agent_<agentId>`.
+     * @experimental This feature is experimental and may change.
+     * @see {@link https://a2a-protocol.org/}
+     */
+    a2aAgents?: Record<string, unknown>;
+    builtInToolsConfig?: BuiltInToolsConfig;
+    aiignore?: {
+        enabled?: boolean;
+        patterns?: string[];
+    };
+    commands?: {
+        pr?: PrCommandConfig;
+        review?: CommandToolingConfig & {
+            contentSource?: string;
+            requirementSource?: string;
+            rating?: RatingConfig;
+        };
+        ask?: CommandToolingConfig & {
+            /**
+             * Dev tools (run commands etc.) for `ask --write` runs. Normally inherited from
+             * `commands.exec` / `commands.code` by the `--write` flag rather than set directly.
+             */
+            devTools?: GthDevToolsConfig;
+        };
+        chat?: CommandToolingConfig;
+        code?: CommandToolingConfig & {
+            devTools?: GthDevToolsConfig;
+        };
+        /**
+         * `gth exec` — prompt-as-script runtime. Like `code`, an exec run may need to actually
+         * do the job (read/write files, run commands), so it carries the same tool/filesystem knobs.
+         */
+        exec?: CommandToolingConfig & {
+            devTools?: GthDevToolsConfig;
+        };
+        api?: {
+            filesystem?: string[] | 'all' | 'read' | 'none';
+            builtInTools?: string[];
+            port?: number;
+            cors?: {
+                allowOrigin?: string;
+                allowMethods?: string;
+                allowHeaders?: string;
+            };
+        };
+    };
+    modelDisplayName?: string;
+    /**
+     * Transient (runtime-only) extra filesystem roots the agent is allowed to read/write for
+     * THIS run, in addition to the cwd sandbox. Populated by `gth exec --allow-dir <path>`
+     * (repeatable); never persisted to a config file. When set, the deep agent's
+     * {@link FilesystemBackend} drops `virtualMode` (so absolute paths and `..` resolve on the
+     * real filesystem) and access is constrained to cwd + these dirs via permission allow-rules.
+     * Removing the cwd-only sandbox is a guardrail removal, so callers announce it loudly.
+     */
+    allowDirs?: string[];
+    /**
+     * Transient (runtime-only) flag set by `gth ask --write`: opt `ask` into the same
+     * "do-the-job" filesystem + dev tools that `exec`/`code` get, so a question can act
+     * (read/write files, run commands) rather than only chat. Never persisted to a config file.
+     */
+    askWriteMode?: boolean;
+}
+/**
+ * `gth pr` command configuration.
+ *
+ * Declared as a named interface (rather than inline in {@link GthConfig}) so that downstream
+ * packages can extend it with their own command features via TypeScript module augmentation
+ * (`declare module '@gaunt-sloth/core/config.js'`), keeping those features' types out of core.
+ * For example, the assistant package merges its PR discovery config (`discovery`) into this
+ * interface.
+ */
+export interface PrCommandConfig extends CommandToolingConfig {
+    contentSource?: string;
+    requirementSource?: string;
+    logWorkForReviewInSeconds?: number;
+    rating?: RatingConfig;
+}
+/**
+ * Server tools such as Anthropic Web Search.
+ * These tools are meant to be magic objects like
+ * `{"type": "web_search_20250305", "name": "web_search", "max_uses": 10}`,
+ * AI Provider does the rest of the magic on their side.
+ */
+export interface ServerTool extends Record<string, unknown> {
+    type: string;
+    name?: string;
+}
+/**
+ * Raw, unprocessed Gaunt Sloth config.
+ */
+export type ConsoleLevelInput = StatusLevel | keyof typeof StatusLevel | Lowercase<keyof typeof StatusLevel>;
+export interface RawGthConfig extends Omit<GthConfig, 'llm' | 'consoleLevel'> {
+    llm: LLMConfig;
+    consoleLevel?: ConsoleLevelInput;
+}
+export type BinaryFormatType = 'image' | 'file' | 'audio' | 'video' | 'binary';
+export interface BinaryFormatConfig {
+    /**
+     * The type/category of binary format.
+     */
+    type: BinaryFormatType;
+    /**
+     * List of allowed extensions for this type (without leading dot).
+     */
+    extensions: string[];
+    /**
+     * Maximum file size in bytes. Defaults to 10MB when omitted.
+     */
+    maxSize?: number;
+    /**
+     * Optional MIME type overrides for extensions not in the default mapping.
+     */
+    mimeTypes?: Record<string, string>;
+}
+export type CustomToolsConfig = Record<string, CustomCommandConfig>;
+export type BuiltInToolsConfig = Record<string, unknown>;
+/**
+ * Configuration for review rating feature.
+ * Allows configuring automated review scoring with pass/fail thresholds.
+ */
+export interface RatingConfig {
+    /**
+     * Enable or disable review rating.
+     * @default true
+     */
+    enabled?: boolean;
+    /**
+     * Minimum score (0-10) required to pass the review.
+     * @default 6
+     */
+    passThreshold?: number;
+    /**
+     * Highest allowed value on the rating scale.
+     * @default 10
+     */
+    maxRating?: number;
+    /**
+     * Lowest allowed value on the rating scale.
+     * @default 0
+     */
+    minRating?: number;
+    /**
+     * Exit with error code 1 when review fails (below threshold).
+     * When false, exits normally (code 0) regardless of rating.
+     * @default true
+     */
+    errorOnReviewFail?: boolean;
+}
+/**
+ * Validation checks that can be skipped for custom command parameters.
+ * Use with the `allow` property to bypass specific security checks.
+ *
+ * - `absolute-paths`: Allow absolute paths (e.g. `/dev/ttyUSB0`)
+ * - `directory-traversal`: Allow `..` in paths
+ * - `shell-injection`: Allow shell metacharacters (`|`, `&`, `;`, etc.)
+ * - `null-bytes`: Allow null bytes in values
+ */
+export type ValidationCheck = 'absolute-paths' | 'directory-traversal' | 'shell-injection' | 'null-bytes';
+/**
+ * Configuration for a custom command parameter.
+ * Parameters allow the model to provide dynamic values to commands.
+ */
+export interface CustomCommandParameter {
+    /**
+     * Description of the parameter shown to the model.
+     */
+    description: string;
+    /**
+     * Optional list of validation checks to skip for this parameter's value.
+     * Use when this parameter legitimately requires values that would normally be blocked.
+     * For example, `["absolute-paths"]` allows values like `/dev/ttyUSB0` for this parameter.
+     *
+     * Available checks: `absolute-paths`, `directory-traversal`, `shell-injection`, `null-bytes`
+     */
+    allow?: ValidationCheck[];
+}
+/**
+ * Configuration for a custom command.
+ * Custom commands can be executed with or without parameters.
+ */
+export interface CustomCommandConfig {
+    /**
+     * The shell command to execute.
+     * Can include placeholders like ${paramName} that will be replaced with parameter values.
+     * If no placeholder is present and parameters are provided, they are appended to the command.
+     */
+    command: string;
+    /**
+     * Description of what this command does, shown to the model.
+     */
+    description: string;
+    /**
+     * Optional parameters that the model can provide when calling this command.
+     * Each parameter has a name (the key) and a description.
+     * Parameters are validated for security (no shell injection, directory traversal, etc.).
+     */
+    parameters?: Record<string, CustomCommandParameter>;
+    /**
+     * Optional timeout in seconds.
+     * When set, the command will be killed if it exceeds this duration.
+     * When omitted, no timeout is applied.
+     */
+    timeout?: number;
+}
+export interface LLMConfig extends Record<string, unknown> {
+    type: string;
+    model: string;
+    configuration: Record<string, unknown>;
+    apiKeyEnvironmentVariable?: string;
+}
+export declare const availableDefaultConfigs: readonly ["vertexai", "anthropic", "groq", "deepseek", "openai", "google-genai", "xai", "openrouter", "ollama"];
+export type ConfigType = (typeof availableDefaultConfigs)[number];
+export interface CommandLineConfigOverrides {
+    /**
+     * Custom config path
+     */
+    customConfigPath?: string;
+    /**
+     * Set LangChain/LangGraph to verbose mode,
+     * causing LangChain/LangGraph to log many details to the console.
+     * debugLog from config.ts may be a less intrusive option.
+     */
+    verbose?: boolean;
+    /**
+     * Should the output be written to md file.
+     * (e.g. gth_2025-07-26_22-59-06_REVIEW.md).
+     * Can be set to false with `-wn` or `-w0`
+     * Can be set to a specific filename or path by passing a string:
+     * - Bare filenames (e.g. `"review.md"`) are placed in `.gsloth/` when it exists, otherwise project root
+     * - Paths with separators (e.g. `"./review.md"` or `"reviews/last.md"`) are always relative to project root
+     * Please note the string does not accept absolute path, but allows to exit project with `..` if necessary.
+     */
+    writeOutputToFile?: boolean | string;
+    /**
+     * Separate identity profile.
+     * May include separate identity, guidelines and command protocol,
+     * making gsloth behave as an agent different from default profile behaviour.
+     * for example, `devops` profile to detect changes such as properties and environment variables.
+     * Custom config can still win over this one.
+     * This setting requires .gsloth/.gsloth-settings directory to exist.
+     * Important to note that the profile directory substitutes the entire config directory,
+     * in the case if some prompt files are missing - a file from the installation directory will be used.
+     */
+    identityProfile?: string;
+    /**
+     * Interactive TUI activation override for chat/code sessions.
+     * - `true` (`--tui`): force the Ink TUI on where the terminal supports it (also overrides
+     *   the CI auto-off heuristic).
+     * - `false` (`--no-tui`): force the plain readline session.
+     * - `undefined` (default): auto-detect from the terminal.
+     * The decision itself lives in `gaunt-sloth`'s `shouldUseTui`; this only carries the flag.
+     */
+    tui?: boolean;
+}

package/dist/config/types.js

@@ -0,0 +1,12 @@
+export const availableDefaultConfigs = [
+    'vertexai',
+    'anthropic',
+    'groq',
+    'deepseek',
+    'openai',
+    'google-genai',
+    'xai',
+    'openrouter',
+    'ollama',
+];
+//# sourceMappingURL=types.js.map

package/dist/config/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AA+aA,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,UAAU;IACV,WAAW;IACX,MAAM;IACN,UAAU;IACV,QAAQ;IACR,cAAc;IACd,KAAK;IACL,YAAY;IACZ,QAAQ;CACA,CAAC"}