@gaunt-sloth/core 2.0.0-alpha.3 → 2.0.0-alpha.4

package/dist/config.d.ts

@@ -1,828 +1,25 @@
-import { StatusLevel } from '#src/core/types.js';
-import type { GthCommand } from '#src/core/types.js';
-import type { BaseChatModel } from '@langchain/core/language_models/chat_models';
-import type { BaseToolkit, StructuredToolInterface } from '@langchain/core/tools';
 /**
- * This is a processed Gaunt Sloth config ready to be passed down into components.
+ * @packageDocumentation
+ * Gaunt Sloth Configuration.
  *
- * Default values can be found in {@link DEFAULT_CONFIG}
- */
-export interface GthConfig {
-    llm: BaseChatModel;
-    /**
-     * Binary format support configuration.
-     * Disabled by default unless explicitly configured.
-     */
-    binaryFormats?: false | BinaryFormatConfig[];
-    /**
-     * Content Provider. Provider used to fetch content (usually diff) for `review` or `pr` command.
-     *
-     * {@link DEFAULT_CONFIG#contentProvider}
-     */
-    /**
-     * Content source type. Preferred name for contentProvider.
-     */
-    contentSource: string;
-    /**
-     * Requirement source type. Preferred name for requirementsProvider.
-     */
-    requirementSource: string;
-    /**
-     * @deprecated Use contentSource instead
-     */
-    contentProvider: string;
-    /**
-     * @deprecated Use requirementSource instead
-     */
-    requirementsProvider: string;
-    /**
-     * Path to project-specific guidelines.
-     * The default is `.gsloth.guidelines.md`; this config may be used to point Gaunt Sloth to a different file,
-     * for example, to AGENTS.md
-     */
-    projectGuidelines: string;
-    /**
-     * Separate identity profile.
-     * May include separate identity, guidelines and command protocol,
-     * making gsloth behave as an agent different from default profile behaviour.
-     * for example, `devops` profile to detect changes such as properties and environment variables.
-     * Custom config can still win over this one.
-     * This setting requires .gsloth/.gsloth-settings directory to exist.
-     */
-    identityProfile?: string;
-    /**
-     * Whether to include the current date in the project review instructions or not.
-     */
-    includeCurrentDateAfterGuidelines: boolean;
-    /**
-     * Organisation name, locale and timezone.
-     * Only used with {@link includeCurrentDateAfterGuidelines}.
-     * timeZone and locale should be in format supported by Intl.DateTimeFormat
-     */
-    organization?: {
-        name?: string;
-        locale?: string;
-        timezone?: string;
-    };
-    projectReviewInstructions: string;
-    /**
-     * If true, only use user-provided system prompts. Do not fall back to the
-     * bundled `.gsloth.*.md` prompt files shipped with the installation.
-     * This applies to all `.gsloth.*.md` files (backstory, system, chat, code, guidelines, review).
-     */
-    noDefaultPrompts?: boolean;
-    filesystem: string[] | 'all' | 'read' | 'none';
-    builtInTools?: string[];
-    tools?: StructuredToolInterface[] | BaseToolkit[] | ServerTool[];
-    /**
-     * Restrict the agent to this allow-list of tool names, applied after every tool source
-     * (filesystem, built-in, custom, MCP, A2A, and `tools`) is resolved. This is the only knob
-     * that can gate MCP and A2A tools, which have no per-source override of their own.
-     *
-     * - omitted/undefined: no filtering, all resolved tools remain available.
-     * - non-empty array: keep only tools whose name is in the list.
-     * - empty array `[]`: disable every tool. MCP servers are not even contacted (no OAuth),
-     *   which is useful for agents that only need to reason over the prompt (e.g. the review
-     *   agent).
-     *
-     * Can be overridden per command via `commands.<command>.allowedTools`.
-     */
-    allowedTools?: string[];
-    /**
-     * Middleware configuration for LangChain v1.
-     * Middleware provides hooks to intercept and control agent execution at critical points.
-     *
-     * Middleware can be:
-     * - Predefined middleware (string or config object) - works in both JSON and JS configs
-     * - Custom middleware objects - only available in JS configs
-     *
-     * Example (JSON config):
-     * ```json
-     * {
-     *   "middleware": [
-     *     "summarization",
-     *     { "name": "anthropic-prompt-caching", "ttl": "5m" }
-     *   ]
-     * }
-     * ```
-     *
-     * Example (JS config):
-     * ```js
-     * {
-     *   middleware: [
-     *     "summarization",
-     *     { beforeModel: (state) => { /* custom logic *\/ return state; } }
-     *   ]
-     * }
-     * ```
-     *
-     * Available predefined middleware:
-     * - `anthropic-prompt-caching`: Reduces API costs by caching prompts (Anthropic only)
-     * - `summarization`: Condenses conversation history when approaching token limits
-     */
-    middleware?: unknown[];
-    /**
-     * Stream output. Some models do not support streaming. Set value to `false` for them.
-     *
-     * {@link DEFAULT_CONFIG#streamOutput}
-     */
-    streamOutput: boolean;
-    /**
-     * Should the output be written to md file.
-     * (e.g. gth_2025-07-26_22-59-06_REVIEW.md).
-     * Can be set to false with `-wn` or `-w0`
-     * Can be set to a specific filename or path by passing a string:
-     * - Bare filenames (e.g. `"review.md"`) are placed in `.gsloth/` when it exists, otherwise project root
-     * - Paths with separators (e.g. `"./review.md"` or `"reviews/last.md"`) are always relative to project root
-     * Please note the string does not accept absolute path, but allows to exit project with `..` if necessary.
-     */
-    writeOutputToFile: boolean | string;
-    /**
-     * Whether binary model outputs should be written to files instead of printed inline.
-     * When enabled, supported binary content blocks are materialized as `gth_*.<ext>` files.
-     */
-    writeBinaryOutputsToFile: boolean;
-    /**
-     * Use colour in output
-     */
-    useColour: boolean;
-    /**
-     * Stream session log instead of writing it when inference streaming is complete.
-     * (only works when {@link streamOutput} is true)
-     */
-    streamSessionInferenceLog: boolean;
-    /**
-     * Allow inference to be interrupted with esc. Only has an effect in TTY mode.
-     */
-    canInterruptInferenceWithEsc: boolean;
-    /**
-     * Log messages and events to gaunt-sloth.log,
-     * use llm.verbose or `gth --verbose` as more intrusive option, setting verbose to LangChain / LangGraph
-     */
-    debugLog?: boolean;
-    /**
-     * LangGraph recursion limit for an agent run — the maximum number of
-     * super-steps (model ↔ tool round-trips) before the graph throws. Defaults to
-     * 1000, which suits long coding chains; embodied / tight-loop consumers can
-     * lower it so a stuck run fails fast and visibly instead of grinding.
-     */
-    recursionLimit?: number;
-    /**
-     * Console logging level. Only messages at or above this level will be displayed.
-     * Valid values: 'debug', 'info', 'display', 'success', 'warning', 'error', 'stream'
-     * Default: 'info' (not debug)
-     */
-    consoleLevel?: StatusLevel;
-    customTools?: CustomToolsConfig;
-    requirementSourceConfig?: Record<string, unknown>;
-    contentSourceConfig?: Record<string, unknown>;
-    /** @deprecated Use requirementSourceConfig instead */
-    requirementsProviderConfig?: Record<string, unknown>;
-    /** @deprecated Use contentSourceConfig instead */
-    contentProviderConfig?: Record<string, unknown>;
-    /**
-     * MCP (Model Context Protocol) server connections.
-     * Allows connecting to external MCP servers including those requiring OAuth.
-     * @see {@link https://modelcontextprotocol.io/}
-     */
-    mcpServers?: Record<string, unknown>;
-    /**
-     * A2A (Agent-to-Agent) protocol agents configuration.
-     * Enables delegation of tasks to external AI agents.
-     * Each agent becomes available as a tool named `a2a_agent_<agentId>`.
-     * @experimental This feature is experimental and may change.
-     * @see {@link https://a2a-protocol.org/}
-     */
-    a2aAgents?: Record<string, unknown>;
-    builtInToolsConfig?: BuiltInToolsConfig;
-    aiignore?: {
-        enabled?: boolean;
-        patterns?: string[];
-    };
-    commands?: {
-        pr?: PrCommandConfig;
-        review?: {
-            contentSource?: string;
-            requirementSource?: string;
-            /** @deprecated Use requirementSource instead */
-            requirementsProvider?: string;
-            /** @deprecated Use contentSource instead */
-            contentProvider?: string;
-            filesystem?: string[] | 'all' | 'read' | 'none';
-            builtInTools?: string[];
-            customTools?: CustomToolsConfig | false;
-            /** See {@link GthConfig.allowedTools}. Empty array disables all tools for the review agent. */
-            allowedTools?: string[];
-            rating?: RatingConfig;
-            binaryFormats?: false | BinaryFormatConfig[];
-        };
-        ask?: {
-            filesystem?: string[] | 'all' | 'read' | 'none';
-            builtInTools?: string[];
-            customTools?: CustomToolsConfig | false;
-            /** See {@link GthConfig.allowedTools}. */
-            allowedTools?: string[];
-            /**
-             * Dev tools (run commands etc.) for `ask --write` runs. Normally inherited from
-             * `commands.exec` / `commands.code` by the `--write` flag rather than set directly.
-             */
-            devTools?: GthDevToolsConfig;
-            binaryFormats?: false | BinaryFormatConfig[];
-        };
-        chat?: {
-            filesystem?: string[] | 'all' | 'read' | 'none';
-            builtInTools?: string[];
-            customTools?: CustomToolsConfig | false;
-            /** See {@link GthConfig.allowedTools}. */
-            allowedTools?: string[];
-            binaryFormats?: false | BinaryFormatConfig[];
-        };
-        code?: {
-            filesystem?: string[] | 'all' | 'read' | 'none';
-            builtInTools?: string[];
-            customTools?: CustomToolsConfig | false;
-            /** See {@link GthConfig.allowedTools}. */
-            allowedTools?: string[];
-            devTools?: GthDevToolsConfig;
-            binaryFormats?: false | BinaryFormatConfig[];
-        };
-        /**
-         * `gth exec` — prompt-as-script runtime. Like `code`, an exec run may need to actually
-         * do the job (read/write files, run commands), so it carries the same tool/filesystem knobs.
-         */
-        exec?: {
-            filesystem?: string[] | 'all' | 'read' | 'none';
-            builtInTools?: string[];
-            customTools?: CustomToolsConfig | false;
-            /** See {@link GthConfig.allowedTools}. */
-            allowedTools?: string[];
-            devTools?: GthDevToolsConfig;
-            binaryFormats?: false | BinaryFormatConfig[];
-        };
-        api?: {
-            filesystem?: string[] | 'all' | 'read' | 'none';
-            builtInTools?: string[];
-            port?: number;
-            cors?: {
-                allowOrigin?: string;
-                allowMethods?: string;
-                allowHeaders?: string;
-            };
-        };
-    };
-    modelDisplayName?: string;
-    /**
-     * Transient (runtime-only) extra filesystem roots the agent is allowed to read/write for
-     * THIS run, in addition to the cwd sandbox. Populated by `gth exec --allow-dir <path>`
-     * (repeatable); never persisted to a config file. When set, the deep agent's
-     * {@link FilesystemBackend} drops `virtualMode` (so absolute paths and `..` resolve on the
-     * real filesystem) and access is constrained to cwd + these dirs via permission allow-rules.
-     * Removing the cwd-only sandbox is a guardrail removal, so callers announce it loudly.
-     */
-    allowDirs?: string[];
-    /**
-     * Transient (runtime-only) flag set by `gth ask --write`: opt `ask` into the same
-     * "do-the-job" filesystem + dev tools that `exec`/`code` get, so a question can act
-     * (read/write files, run commands) rather than only chat. Never persisted to a config file.
-     */
-    askWriteMode?: boolean;
-}
-/**
- * `gth pr` command configuration.
+ * Refer to {@link GthConfig} to find all possible configuration properties.
  *
- * Declared as a named interface (rather than inline in {@link GthConfig}) so that downstream
- * packages can extend it with their own command features via TypeScript module augmentation
- * (`declare module '@gaunt-sloth/core/config.js'`), keeping those features' types out of core.
- * For example, the assistant package merges its PR discovery config (`discovery`) into this
- * interface.
- */
-export interface PrCommandConfig {
-    contentSource?: string;
-    requirementSource?: string;
-    /** @deprecated Use contentSource instead */
-    contentProvider?: string;
-    /** @deprecated Use requirementSource instead */
-    requirementsProvider?: string;
-    filesystem?: string[] | 'all' | 'read' | 'none';
-    builtInTools?: string[];
-    customTools?: CustomToolsConfig | false;
-    /** See {@link GthConfig.allowedTools}. Empty array disables all tools for `gth pr`'s review agent. */
-    allowedTools?: string[];
-    logWorkForReviewInSeconds?: number;
-    rating?: RatingConfig;
-    binaryFormats?: false | BinaryFormatConfig[];
-}
-/**
- * Server tools such as Anthropic Web Search.
- * These tools are meant to be magic objects like
- * `{"type": "web_search_20250305", "name": "web_search", "max_uses": 10}`,
- * AI Provider does the rest of the magic on their side.
- */
-export interface ServerTool extends Record<string, unknown> {
-    type: string;
-    name?: string;
-}
-/**
- * Raw, unprocessed Gaunt Sloth config.
- */
-export type ConsoleLevelInput = StatusLevel | keyof typeof StatusLevel | Lowercase<keyof typeof StatusLevel>;
-export interface RawGthConfig extends Omit<GthConfig, 'llm' | 'consoleLevel'> {
-    llm: LLMConfig;
-    consoleLevel?: ConsoleLevelInput;
-}
-export type BinaryFormatType = 'image' | 'file' | 'audio' | 'video' | 'binary';
-export interface BinaryFormatConfig {
-    /**
-     * The type/category of binary format.
-     */
-    type: BinaryFormatType;
-    /**
-     * List of allowed extensions for this type (without leading dot).
-     */
-    extensions: string[];
-    /**
-     * Maximum file size in bytes. Defaults to 10MB when omitted.
-     */
-    maxSize?: number;
-    /**
-     * Optional MIME type overrides for extensions not in the default mapping.
-     */
-    mimeTypes?: Record<string, string>;
-}
-export type CustomToolsConfig = Record<string, CustomCommandConfig>;
-export type BuiltInToolsConfig = Record<string, unknown>;
-/**
- * Configuration for review rating feature.
- * Allows configuring automated review scoring with pass/fail thresholds.
- */
-export interface RatingConfig {
-    /**
-     * Enable or disable review rating.
-     * @default true
-     */
-    enabled?: boolean;
-    /**
-     * Minimum score (0-10) required to pass the review.
-     * @default 6
-     */
-    passThreshold?: number;
-    /**
-     * Highest allowed value on the rating scale.
-     * @default 10
-     */
-    maxRating?: number;
-    /**
-     * Lowest allowed value on the rating scale.
-     * @default 0
-     */
-    minRating?: number;
-    /**
-     * Exit with error code 1 when review fails (below threshold).
-     * When false, exits normally (code 0) regardless of rating.
-     * @default true
-     */
-    errorOnReviewFail?: boolean;
-}
-/**
- * Validation checks that can be skipped for custom command parameters.
- * Use with the `allow` property to bypass specific security checks.
+ * Refer to {@link DEFAULT_CONFIG} for default configuration.
  *
- * - `absolute-paths`: Allow absolute paths (e.g. `/dev/ttyUSB0`)
- * - `directory-traversal`: Allow `..` in paths
- * - `shell-injection`: Allow shell metacharacters (`|`, `&`, `;`, etc.)
- * - `null-bytes`: Allow null bytes in values
- */
-export type ValidationCheck = 'absolute-paths' | 'directory-traversal' | 'shell-injection' | 'null-bytes';
-/**
- * Configuration for a custom command parameter.
- * Parameters allow the model to provide dynamic values to commands.
- */
-export interface CustomCommandParameter {
-    /**
-     * Description of the parameter shown to the model.
-     */
-    description: string;
-    /**
-     * Optional list of validation checks to skip for this parameter's value.
-     * Use when this parameter legitimately requires values that would normally be blocked.
-     * For example, `["absolute-paths"]` allows values like `/dev/ttyUSB0` for this parameter.
-     *
-     * Available checks: `absolute-paths`, `directory-traversal`, `shell-injection`, `null-bytes`
-     */
-    allow?: ValidationCheck[];
-}
-/**
- * Configuration for a custom command.
- * Custom commands can be executed with or without parameters.
- */
-export interface CustomCommandConfig {
-    /**
-     * The shell command to execute.
-     * Can include placeholders like ${paramName} that will be replaced with parameter values.
-     * If no placeholder is present and parameters are provided, they are appended to the command.
-     */
-    command: string;
-    /**
-     * Description of what this command does, shown to the model.
-     */
-    description: string;
-    /**
-     * Optional parameters that the model can provide when calling this command.
-     * Each parameter has a name (the key) and a description.
-     * Parameters are validated for security (no shell injection, directory traversal, etc.).
-     */
-    parameters?: Record<string, CustomCommandParameter>;
-    /**
-     * Optional timeout in seconds.
-     * When set, the command will be killed if it exceeds this duration.
-     * When omitted, no timeout is applied.
-     */
-    timeout?: number;
-}
-/**
- * Config for {@link GthDevToolkit}.
- * Tools are not applied when config is not provided.
- * Only available in `code`/`exec` mode (and `ask --write`).
- */
-export interface GthDevToolsConfig {
-    /**
-     * Optional shell command to run tests.
-     * Not applied when config is not provided.
-     */
-    run_tests?: string;
-    /**
-     * Optional shell command to run static analysis (lint).
-     * Not applied when config is not provided.
-     */
-    run_lint?: string;
-    /**
-     * Optional shell command to run the build.
-     * Not applied when config is not provided.
-     */
-    run_build?: string;
-    /**
-     * Optional shell command to run a single test file.
-     * Supports command interpolation with the `${testPath}` placeholder.
-     * Example: "npm test -- ${testPath}" or "jest ${testPath}"
-     * Example: "npm test" - the test will simply be appended
-     * Not applied when config is not provided.
-     */
-    run_single_test?: string;
-    /**
-     * Opt-in general-purpose shell tool (`run_shell_command`). Unlike the fixed
-     * `run_*` commands above, this lets the agent run ARBITRARY shell commands it
-     * composes itself — the agentic-coding escape hatch the deep agent otherwise
-     * lacks (it can read/write files but not run commands).
-     *
-     * EXT-12 — default: ON in `code` mode, OFF elsewhere. When this is ABSENT/undefined,
-     * `code` mode emits the tool (still GATED behind the per-command approval prompt — the
-     * absent-config default NEVER implies yolo); `exec` / `ask --write` keep it OFF. An
-     * EXPLICIT value always wins: `shell: false` (or `{ enabled: false }`) is a hard escape
-     * hatch that fully disables it even in `code`. Accepts a bare boolean or an
-     * `{ enabled }` object for symmetry with future per-tool options.
-     *
-     * Because the model chooses the command, every invocation is gated behind a
-     * per-command human confirmation dialog (LangChain `humanInTheLoopMiddleware`,
-     * wired via deepagents' `interruptOn`) UNLESS {@link shellYolo} bypasses it.
-     * The confirmation — not string-filtering — is the guardrail, so the command
-     * is passed through verbatim (pipes / `$` / `;` are all legitimate).
-     *
-     * The object form also tunes the EXT-9 Tier-1 hardening applied to every run
-     * (these have safe defaults so bare `shell: true` is already hardened):
-     * - `timeout`: per-command wall-clock limit in MILLISECONDS before the child
-     *   (and its process group) is killed. Default {@link SHELL_DEFAULT_TIMEOUT_MS}.
-     * - `maxOutputBytes`: byte budget for the captured output returned to the model
-     *   (head + tail window; the middle is dropped and the full output spilled to a
-     *   temp file). Default {@link SHELL_DEFAULT_MAX_OUTPUT_BYTES}. Live terminal
-     *   streaming is never capped.
-     *
-     * A hardcoded hardline blocklist of catastrophic commands (rm -rf /, mkfs, dd
-     * to a block device, fork bomb, shutdown/reboot, …) is refused even under
-     * {@link shellYolo}; that floor is not configurable.
-     *
-     * Example: `{ "shell": true }`,
-     * `{ "shell": { "enabled": true, "timeout": 300000, "maxOutputBytes": 200000 } }`.
-     *
-     * The object form additionally accepts EXT-9 Tier-2 allow-list knobs:
-     * - `allowlist`: master switch for the scoped approval allow-list (session +
-     *   persisted `always`). Default `true` — once a command is approved at `session`/
-     *   `always` scope, flag-variants of the same classified operation auto-approve
-     *   without re-prompting. Set `false` to require fresh approval for every command.
-     * - `persistAllowlist`: whether `always`-scoped approvals are written to the project
-     *   allow-list file (`.gsloth/.gsloth-settings/shell-allowlist.json`). Default `true`.
-     *   When `false`, an `always` decision behaves like `session` (in-memory only).
-     *
-     * The object form also accepts the EXT-10 LLM-as-judge safety gate (default OFF):
-     * - `judge`: an opt-in, tiered auto-approve pre-filter that vets each `run_shell_command`
-     *   with a lightweight judge model BEFORE the human prompt. It auto-approves clearly-safe
-     *   commands (fatigue reducer), escalates the rest to the existing human prompt, and may
-     *   reject clearly-catastrophic ones. Default OFF because it costs one LLM call per command.
-     *   Accepts a bare boolean (`judge: true` → defaults: auto-approve low, escalate medium/high,
-     *   judge model = `config.llm`) or an object:
-     *     - `enabled`: turn the gate on.
-     *     - `autoApproveLow`: auto-approve `low`-risk, statically-resolvable commands. Default true.
-     *     - `blockHigh`: reject clearly-catastrophic (`high` + destructive) verdicts WITHOUT
-     *       prompting. Default false (conservative; EXT-9's hardline floor already refuses truly
-     *       catastrophic commands at exec time).
-     *     - `model`: an optional separate (e.g. cheaper) judge model config. Defaults to `config.llm`.
-     *   Hardening (always on when the judge runs): the command is normalized + XML-tagged as
-     *   UNTRUSTED input in the judge prompt; a judge throw/timeout/parse-failure fails CLOSED
-     *   (escalate, never auto-approve); commands whose target can't be statically resolved
-     *   (shell composition / substitution / redirection) and interpreter+script invocations that
-     *   leak ALL_CAPS env vars are NEVER auto-approved.
-     */
-    shell?: boolean | {
-        enabled?: boolean;
-        timeout?: number;
-        maxOutputBytes?: number;
-        allowlist?: boolean;
-        persistAllowlist?: boolean;
-        judge?: boolean | {
-            enabled?: boolean;
-            autoApproveLow?: boolean;
-            blockHigh?: boolean;
-            model?: LLMConfig;
-        };
-    };
-    /**
-     * Opt-out of the per-command confirmation dialog for {@link shell}
-     * (`run_shell_command`) — the explicit "yolo" bypass. When `true` AND `shell`
-     * is enabled, the shell tool runs without any approval interrupt: the model's
-     * commands execute immediately. Dangerous by design; off by default.
-     *
-     * Example: `{ "shell": true, "shellYolo": true }`.
-     */
-    shellYolo?: boolean;
-}
-/**
- * Default per-command shell timeout (ms) when {@link GthDevToolsConfig.shell}
- * does not specify one. ~120s suits typical build/test/git steps without
- * hanging the agent forever on a stuck command.
- */
-export declare const SHELL_DEFAULT_TIMEOUT_MS = 120000;
-/**
- * Default byte budget for shell output captured into the ToolMessage returned to
- * the model (head + tail window). ~100KB keeps a noisy log from blowing the
- * context window; the full output is spilled to a temp file when this is exceeded.
- */
-export declare const SHELL_DEFAULT_MAX_OUTPUT_BYTES = 100000;
-/**
- * Normalize the {@link GthDevToolsConfig.shell} opt-in (bare boolean or
- * `{ enabled }`) to a plain boolean. Centralized so the toolkit (tool emission)
- * and the deep agent (interrupt wiring) agree on what "shell enabled" means.
+ * Some config params can be overriden from command line, see {@link CommandLineConfigOverrides}
  *
- * EXT-12 — default-resolution: an EXPLICIT value always wins (a bare boolean, or the
- * object form's `enabled`), so `shell: false` / `{ enabled: false }` remains a hard
- * escape hatch that fully disables the tool. Only when `shell` is ABSENT/undefined does
- * the per-mode default apply: in `code` mode the shell tool is ON by default (still
- * gated — the per-command approval interrupt is wired separately and is NOT bypassed by
- * this), and OFF everywhere else (`exec`, `ask --write`, …) to preserve prior behaviour.
- * The default is `code`-mode only because `code` is the interactive agentic-coding surface
- * where a TTY can answer the approval prompt; the absent-config default never implies yolo.
+ * This module is the **public barrel** for the configuration system. The implementation
+ * is split into focused modules under `config/`:
+ * - `config/types.ts` — the configuration type surface.
+ * - `config/shell-policy.ts` — {@link GthDevToolsConfig} + the shell/dev-tools resolvers.
+ * - `config/defaults.ts` — {@link DEFAULT_CONFIG}.
+ * - `config/loader.ts` — discovery + the layered load/merge pipeline.
+ * - `config/schema.ts` — the Zod schema (single source of truth) + JSON-Schema generator.
  *
- * @param command The active command, so the absent-config default can be scoped to `code`.
- *   Omit (or pass a non-`code` command) to keep the historical OFF-by-default behaviour.
- */
-export declare function isShellToolEnabled(devTools: GthDevToolsConfig | undefined, command?: GthCommand | undefined): boolean;
-/**
- * Resolve the per-command shell timeout (ms) from config, falling back to
- * {@link SHELL_DEFAULT_TIMEOUT_MS}. Only the object form can override it; a bare
- * `shell: true` uses the default. Non-positive / non-finite values are ignored.
- */
-export declare function getShellTimeoutMs(devTools: GthDevToolsConfig | undefined): number;
-/**
- * Resolve the captured-output byte budget from config, falling back to
- * {@link SHELL_DEFAULT_MAX_OUTPUT_BYTES}. Only the object form can override it.
- * Non-positive / non-finite values are ignored.
- */
-export declare function getShellMaxOutputBytes(devTools: GthDevToolsConfig | undefined): number;
-/**
- * Whether the EXT-9 Tier-2 scoped allow-list is active. Default `true`; only the object
- * form's `allowlist: false` disables it (a bare `shell: true` keeps it on). When off, the
- * runner prompts for every `run_shell_command` regardless of prior approvals.
- */
-export declare function isShellAllowlistEnabled(devTools: GthDevToolsConfig | undefined): boolean;
-/**
- * Whether `always`-scoped approvals are persisted to the project allow-list file. Default
- * `true`; only the object form's `persistAllowlist: false` disables persistence (an
- * `always` decision then behaves as `session`).
- */
-export declare function isShellAllowlistPersisted(devTools: GthDevToolsConfig | undefined): boolean;
-/**
- * Resolved settings for the EXT-10 LLM-as-judge safety gate.
- */
-export interface ShellJudgeSettings {
-    /** Whether the judge gate runs at all. */
-    enabled: boolean;
-    /** Auto-approve `low`-risk, statically-resolvable commands (the fatigue reducer). */
-    autoApproveLow: boolean;
-    /** Reject clearly-catastrophic (`high` + destructive) verdicts without prompting. */
-    blockHigh: boolean;
-    /** Optional separate judge model config; when absent the runner uses `config.llm`. */
-    model?: LLMConfig;
-}
-/**
- * Whether the EXT-10 LLM-as-judge safety gate is enabled for the given dev-tools config.
- * Default OFF (only the object form's `judge` truthy enables it), mirroring
- * {@link isShellToolEnabled}. A bare `shell: true` keeps the judge OFF — it costs an LLM call
- * per command and must be opted into explicitly.
- */
-export declare function isShellJudgeEnabled(devTools: GthDevToolsConfig | undefined): boolean;
-/**
- * Resolve the EXT-10 judge gate settings from a dev-tools config, applying safe defaults
- * (auto-approve low, do NOT block high). `enabled` reflects {@link isShellJudgeEnabled}.
- */
-export declare function getShellJudgeSettings(devTools: GthDevToolsConfig | undefined): ShellJudgeSettings;
-/**
- * Resolve the {@link GthDevToolsConfig} that applies to the active command, mirroring the
- * per-command selection in `builtInToolsConfig.getDefaultTools` (which is what actually emits
- * the dev tools) and `GthDeepAgent.getEffectiveDevToolsConfig`: `exec` → `commands.exec`,
- * `ask --write` → `commands.ask`, `code` → `commands.code`; `undefined` elsewhere (the
- * toolkit is inert there). Shared in core so the runner's allow-list gate stays in lockstep
- * with where the shell tool is actually emitted.
- */
-export declare function getEffectiveDevToolsConfig(config: Pick<GthConfig, 'commands' | 'askWriteMode'> | undefined, command: GthCommand | undefined): GthDevToolsConfig | undefined;
-export interface LLMConfig extends Record<string, unknown> {
-    type: string;
-    model: string;
-    configuration: Record<string, unknown>;
-    apiKeyEnvironmentVariable?: string;
-}
-export declare const availableDefaultConfigs: readonly ["vertexai", "anthropic", "groq", "deepseek", "openai", "google-genai", "xai", "openrouter", "ollama"];
-export type ConfigType = (typeof availableDefaultConfigs)[number];
-export interface CommandLineConfigOverrides {
-    /**
-     * Custom config path
-     */
-    customConfigPath?: string;
-    /**
-     * Set LangChain/LangGraph to verbose mode,
-     * causing LangChain/LangGraph to log many details to the console.
-     * debugLog from config.ts may be a less intrusive option.
-     */
-    verbose?: boolean;
-    /**
-     * Should the output be written to md file.
-     * (e.g. gth_2025-07-26_22-59-06_REVIEW.md).
-     * Can be set to false with `-wn` or `-w0`
-     * Can be set to a specific filename or path by passing a string:
-     * - Bare filenames (e.g. `"review.md"`) are placed in `.gsloth/` when it exists, otherwise project root
-     * - Paths with separators (e.g. `"./review.md"` or `"reviews/last.md"`) are always relative to project root
-     * Please note the string does not accept absolute path, but allows to exit project with `..` if necessary.
-     */
-    writeOutputToFile?: boolean | string;
-    /**
-     * Separate identity profile.
-     * May include separate identity, guidelines and command protocol,
-     * making gsloth behave as an agent different from default profile behaviour.
-     * for example, `devops` profile to detect changes such as properties and environment variables.
-     * Custom config can still win over this one.
-     * This setting requires .gsloth/.gsloth-settings directory to exist.
-     * Important to note that the profile directory substitutes the entire config directory,
-     * in the case if some prompt files are missing - a file from the installation directory will be used.
-     */
-    identityProfile?: string;
-    /**
-     * Interactive TUI activation override for chat/code sessions.
-     * - `true` (`--tui`): force the Ink TUI on where the terminal supports it (also overrides
-     *   the CI auto-off heuristic).
-     * - `false` (`--no-tui`): force the plain readline session.
-     * - `undefined` (default): auto-detect from the terminal.
-     * The decision itself lives in `gaunt-sloth`'s `shouldUseTui`; this only carries the flag.
-     */
-    tui?: boolean;
-}
-/**
- * Default config
- */
-export declare const DEFAULT_CONFIG: {
-    readonly contentSource: "file";
-    readonly requirementSource: "file";
-    readonly contentProvider: "file";
-    readonly requirementsProvider: "file";
-    /**
-     * Path to project-specific guidelines.
-     * The default is `.gsloth.guidelines.md`; this config may be used to point Gaunt Sloth to a different file,
-     * for example, to AGENTS.md
-     */
-    readonly projectGuidelines: ".gsloth.guidelines.md";
-    /**
-     * Whether to include the current date in the project review instructions or not.
-     */
-    readonly includeCurrentDateAfterGuidelines: false;
-    readonly projectReviewInstructions: ".gsloth.review.md";
-    readonly filesystem: "none";
-    readonly debugLog: false;
-    readonly consoleLevel: StatusLevel.INFO;
-    /**
-     * Default provider for both requirements and content is GitHub.
-     * It needs GitHub CLI (gh).
-     *
-     * `github` content provider uses `gh pr diff NN` internally. {@link src/providers/ghPrDiffProvider.ts!}
-     *
-     *
-     * `github` requirements provider `gh issue view NN` internally
-     */
-    readonly commands: {
-        readonly pr: {
-            readonly contentSource: "github";
-            readonly requirementSource: "github";
-            readonly contentProvider: "github";
-            readonly requirementsProvider: "github";
-            readonly rating: {
-                readonly enabled: true;
-                readonly passThreshold: 6;
-                readonly minRating: 0;
-                readonly maxRating: 10;
-                readonly errorOnReviewFail: true;
-            };
-        };
-        readonly review: {
-            readonly rating: {
-                readonly enabled: true;
-                readonly passThreshold: 6;
-                readonly minRating: 0;
-                readonly maxRating: 10;
-                readonly errorOnReviewFail: true;
-            };
-        };
-        readonly ask: {
-            readonly filesystem: "read";
-        };
-        readonly chat: {
-            readonly filesystem: "read";
-        };
-        readonly code: {
-            readonly filesystem: "all";
-        };
-        readonly exec: {
-            readonly filesystem: "all";
-        };
-        readonly api: {
-            readonly filesystem: "read";
-            readonly port: 3000;
-            readonly cors: {
-                readonly allowOrigin: "http://localhost:3000";
-                readonly allowMethods: "POST, GET, OPTIONS";
-                readonly allowHeaders: "Content-Type, Accept";
-            };
-        };
-    };
-    readonly streamOutput: true;
-    readonly writeOutputToFile: true;
-    readonly writeBinaryOutputsToFile: true;
-    readonly useColour: true;
-    readonly streamSessionInferenceLog: true;
-    readonly canInterruptInferenceWithEsc: true;
-    readonly aiignore: {
-        readonly enabled: true;
-        readonly patterns: undefined;
-    };
-};
-/**
- * Loads the global gsloth config (if present) from the global `~/.gsloth` folder.
- *
- * Precedence support: the returned raw config is intended to act as the BASE that the
- * project config (and CLI overrides) merge on top of, so any value here is the lowest
- * user-controlled layer (still above {@link DEFAULT_CONFIG}).
- *
- * Lookup order within the global folder, first match wins:
- *   `.gsloth.config.json` -> `.gsloth.config.js` -> `.gsloth.config.mjs`
- *
- * Absence of every variant is a no-op: returns `undefined` so behaviour is unchanged.
- *
- * NOTE: secrets (API keys) may live in this file; this function must never log its
- * contents. Only non-sensitive diagnostics (the resolved path / parse failure) are emitted.
- *
- * @returns The raw global config object, or `undefined` when no global config exists.
- */
-export declare function loadGlobalRawConfig(): Promise<Partial<RawGthConfig> | undefined>;
-/**
- * Returns true when a project-level config file (json/js/mjs) exists for the given
- * overrides. Honours `customConfigPath` and the active identity profile so the check
- * matches exactly what {@link initConfig} would attempt to load.
- *
- * This is the project half of CFG-10's "is any config present?" detection; the global
- * half is {@link loadGlobalRawConfig} (used by {@link hasAnyConfig}).
- */
-export declare function hasProjectConfig(commandLineConfigOverrides: CommandLineConfigOverrides): boolean;
-/**
- * CFG-10 — true when ANY usable configuration is present, either a project config file
- * (json/js/mjs) or a standalone global config (`~/.gsloth/.gsloth.config.*`). When this
- * returns false the caller should run the first-run dialog instead of erroring.
- *
- * Reuses CFG-8's project + global detection so the two paths can never disagree.
- */
-export declare function hasAnyConfig(commandLineConfigOverrides: CommandLineConfigOverrides): Promise<boolean>;
-/**
- * Initialize configuration by loading from available config files
- * @returns The loaded GthConfig
- */
-export declare function initConfig(commandLineConfigOverrides: CommandLineConfigOverrides): Promise<GthConfig>;
-/**
- * Process JSON LLM config by creating the appropriate LLM instance
- * @param jsonConfig - The parsed JSON config
- * @param commandLineConfigOverrides - command line config overrides
- * @returns Promise<GthConfig>
+ * Every name that was previously exported from `config.ts` is re-exported here, so the
+ * public import path `@gaunt-sloth/core/config.js` (and `#src/config.js`) is unchanged.
  */
-export declare function tryJsonConfig(jsonConfig: RawGthConfig, commandLineConfigOverrides: CommandLineConfigOverrides): Promise<GthConfig>;
+export * from '#src/config/types.js';
+export * from '#src/config/shell-policy.js';
+export * from '#src/config/defaults.js';
+export * from '#src/config/loader.js';