@gaunt-sloth/core 2.0.0-alpha.34 → 2.0.0-alpha.36

package/dist/config/shell-policy.js

@@ -76,8 +76,8 @@ export const SHELL_DEFAULT_TIMEOUT_MS = 120_000;
 export const SHELL_DEFAULT_MAX_OUTPUT_BYTES = 100_000;
 /**
  * Normalize the {@link GthDevToolsConfig.shell} opt-in (bare boolean or
- * `{ enabled }`) to a plain boolean. Centralized so the toolkit (tool emission)
- * and the deep agent (interrupt wiring) agree on what "shell enabled" means.
+ * `{ enabled }`) to a plain boolean. Centralized so tool emission and interrupt
+ * wiring agree on what "shell enabled" means.
  *
  * EXT-12 / CFG-18 — default-resolution is `enabled ?? default`. An EXPLICIT `enabled` always wins
  * (a bare boolean, or the object form's `enabled`), so `shell: false` / `{ enabled: false }` remains
@@ -288,16 +288,25 @@ export const APPROVAL_WRITE_MODIFIER_HINT = 'Manual also has a Write variant tha
  * The wording is constrained by four normative rules (state what the mode PERMITS, state the
  * allow-list carve-out, never claim safety this system cannot deliver, use the display spelling)
  * plus §8.1 — the hardline floor is real but is NEVER advertised, so descriptions cite only
- * protections the user can inspect and extend, i.e. the deny list. Five further constraints bind
+ * protections the user can inspect and extend, i.e. the deny list. Six further constraints bind
  * every edit here:
  *
  * 1. **No description may imply containment.** The gate protects against accidents, not intent, and
  *    a working-folder claim collapses the moment the agent has a shell — `write_file` refuses a
  *    path that `touch` then writes. The narrow true form (the built-in file *tools* are confined)
  *    is stated once, on `write`, alongside the fact that the shell is not confined that way.
- * 2. **Claims are scoped to the session the user is in.** These strings render on terminal surfaces
- *    only; a sentence whose subject is "Gaunt Sloth" and whose claim is that it always asks would
- *    be false over the AG-UI and ACP servers, which never drain an approval interrupt ([[EXT-94]]).
+ * 2. **Claims are scoped to the session the user is in — ratified by Andrew on 2026-08-13** as the
+ *    standing rule for every in-product approval promise ([[CFG-40]]), so it is a decision and not
+ *    a habit inherited from whichever string happened to be written last. What makes it true
+ *    rather than merely convenient: these strings render on terminal surfaces only, and every
+ *    surface that renders them is a session a person is sitting in, so a claim scoped to *this
+ *    session* describes the only place the sentence appears rather than hedging around a
+ *    falsehood. Unscoped it would not: a sentence whose subject is "Gaunt Sloth" and whose claim
+ *    is that it always asks is false over the AG-UI and ACP servers, which never drain an approval
+ *    interrupt ([[EXT-54]] — worth fixing on its own merits, never as a gate on this copy).
+ *    **That is also the boundary: the moment an approvals string is rendered by a server surface
+ *    this ruling stops covering it**, and the scoped sentence has to be re-earned there rather
+ *    than inherited from here.
  * 3. **`assisted` MUST keep the sentence saying files are still rewritten and deleted without
  *    asking** — it sounds safer than it is, and that clause is the correction.
  * 4. **A qualification may not live in the second sentence alone.** The picker, the text fallback
@@ -311,6 +320,31 @@ export const APPROVAL_WRITE_MODIFIER_HINT = 'Manual also has a Write variant tha
  *    promise the user watches it happen. The rounds reach a person at the escalation, all of them
  *    at once, and nothing renders them before that ([[TUI-C26]]), so a sentence implying a live
  *    commentary would be describing a screen that does not exist.
+ * 6. **Every rated rung states a LIMIT ON USE in its opener, and `recoverable` is the word that
+ *    carries it** ([[CFG-48]]). A rated rung settles some risky commands without asking anyone, so
+ *    the sentence offering it has to say what kind of work that is acceptable for — and a
+ *    *terminus* is not a limit on use. "then asks you" and "anything riskier comes to you" say
+ *    where the exchange ends; they do not say when the mode is a bad idea, which is what the three
+ *    UNRATED rungs each say ("not a mode to leave running", "a bounded stretch", "a throwaway
+ *    environment you would not mind losing"). Constraint 4 is why it must be the opener: the three
+ *    surfaces a user chooses from print `firstSentence` and nothing else.
+ *
+ *    **"Unrated", not "deterministic", and the distinction is this file's own.** The complement of
+ *    {@link isRatedRung} is `{manual, write, bypass}` — the rungs that consult no rater. That is NOT
+ *    the set {@link isDeterministicRung} names, which is `{manual, write}`: `bypass` gates nothing at
+ *    all, so it is not a rung that decides deterministically, it is the absence of a decision. Prose
+ *    elsewhere in the repo calls the three "deterministic"; against the predicate exported a hundred
+ *    lines below, that reading is wrong, so this constraint says "unrated" and means the complement.
+ *
+ *    **A lexical test watches the word, and its failure is not a false positive.** "Carries a
+ *    limit-on-use clause" has no mechanical predicate, so the rule names its own carrier token
+ *    instead: `packages/app/spec/tui/slashCommands.spec.ts` — *"every rated rung's opener says what
+ *    kind of work it is for, and only the rated ones do"* — takes the rated set from
+ *    {@link isRatedRung} rather than a literal pair, so a sixth rated rung is required to carry a
+ *    clause on the day it is added, and asserts the three unrated rungs do NOT carry the token, so
+ *    that spreading `recoverable` across all five cannot satisfy it. Rewriting this copy is fine;
+ *    dropping the word is the thing that must not happen quietly, because that is exactly how
+ *    Auto's cautionary clause was lost once already — in an ordinary rewrite that broke no test.
  *
  * Everything these two sentences cannot hold lives at {@link APPROVAL_PROTECTION_DOCS_URL}, which
  * the surfaces print beside the copy rather than each description repeating it.
@@ -324,12 +358,12 @@ export const APPROVAL_RUNG_DESCRIPTIONS = {
         'file tools run free inside your working folder. The shell is not confined that way, so shell ' +
         'commands, MCP calls and custom tools still come to you, until you tell it to always allow a ' +
         'command.',
-    assisted: 'For everyday work: safe commands run, anything riskier comes to you — usually with a line ' +
-        'explaining what it does. Gaunt Sloth can still rewrite and delete files in your working ' +
-        'folder without asking — "safe" means each action is checked for reaching outside that folder ' +
-        'or harming your system, not that nothing changes.',
-    auto: 'For work you want to keep moving: Auto sends a risky command back to the agent to fix or ' +
-        'justify a few times, then stops and asks you. It is not safe — Gaunt Sloth will change and ' +
+    assisted: 'For everyday, recoverable work: safe commands run, anything riskier comes to you — usually ' +
+        'with a line explaining what it does. Gaunt Sloth can still rewrite and delete files in your ' +
+        'working folder without asking — "safe" means each action is checked for reaching outside ' +
+        'that folder or harming your system, not that nothing changes.',
+    auto: 'For recoverable work you want to keep moving: Auto sends a risky command back to the agent ' +
+        'to fix or justify a few times, then asks you. It is not safe — Gaunt Sloth will change and ' +
         'delete things, your deny list still applies, and when it does ask, you are shown the whole ' +
         'argument that led there.',
     bypass: 'No gate, for a throwaway environment you would not mind losing. Whatever Gaunt Sloth decides ' +
@@ -407,7 +441,7 @@ export function isDeterministicRung(rung) {
  * - At the two **deterministic** rungs, a tool is gated when the rung's own grant does not cover its
  *   access class ({@link isAccessClassGrantedAtRung}). At `manual` that leaves only the built-in
  *   READ tools free; at `write`, the built-in read and write tools. The write built-ins, the shell,
- *   deepagents' `execute`, MCP tools and custom/agent-authored tools all escalate to the human.
+ *   MCP tools and custom/agent-authored tools all escalate to the human.
  * - At `assisted`, `auto` and `bypass` nothing but the shell is gated. **That split is
  *   deliberate and load-bearing, not tidiness.** At a rated rung a gated non-shell call reaches the
  *   `subject.kind !== 'shell'` arm of `GthAgentRunner.decideToolApproval`, which floors it at
@@ -422,9 +456,9 @@ export function isDeterministicRung(rung) {
  * a disabled shell tool is never bound, so the two agree.
  *
  * **This takes no bound toolset**, which is what lets `GthAgentRunner` ask it about a single
- * arriving call: the runner sees the names the graph registered, and on the deep backend that list
- * omits tools deepagents registers itself. A decision that consulted a bound list would grant
- * `execute` at `manual` purely because the runner could not see it.
+ * arriving call: the runner sees only the names the graph registered, and a graph builder that
+ * registers tools of its own leaves them off that list. A decision that consulted a bound list
+ * would grant such a tool at `manual` purely because the runner could not see it.
  */
 export function isToolGatedAtRung(options) {
     const { toolName, rung, gateShell } = options;
@@ -451,8 +485,8 @@ export function isToolGatedAtRung(options) {
  * **Derived from the bound toolset, never a hand-written list.** A static list of built-ins would
  * leave MCP, custom and agent-authored tools out — the exact tools with no access class and so the
  * exact tools the deterministic rungs must escalate. `boundToolNames` must therefore be the FINAL
- * toolset the graph is handed, including tools the graph builder registers itself (deepagents'
- * filesystem tools, `execute`, `task` and `write_todos` never appear in the array gsloth passes it).
+ * toolset the graph is handed, including any tool the graph builder registers itself, which by
+ * definition never appears in the array gsloth passes it.
  *
  * Order is stable: the shell first, then bound order. Duplicates are collapsed, so a caller may pass
  * overlapping name sources without deduplicating first.
@@ -520,9 +554,8 @@ export function commandAnswersApprovals(command) {
  * {@link APPROVAL_RUNGS}, which in practice is the shell plus every bound tool that is not a
  * built-in READ tool.
  *
- * One derivation for both backends, for the same reason {@link resolveShellApprovalGate} is one: the
- * lean backend installs `humanInTheLoopMiddleware` directly and the deep backend installs the very
- * same middleware through deepagents' `interruptOn`, and a set computed twice is a set that drifts.
+ * One derivation for every backend, for the same reason {@link resolveShellApprovalGate} is one: a
+ * set computed twice is a set that drifts.
  *
  * **Deliberately rung-independent.** The interrupt is installed once, when the agent is built, and
  * `/approvals <rung>` then moves the rung for the rest of the session without rebuilding it. Only a
@@ -674,12 +707,12 @@ export function resolveApprovals(config, command) {
     };
 }
 /**
- * EXT-52 — the ONE shell approval-gate policy both agent backends resolve
- * (`GthLangChainAgent` = lean/default, `GthDeepAgent` = deep). It decides whether the opt-in
- * `run_shell_command` tool is gated behind the per-command approval interrupt, and which status
- * notice (if any) the backend should surface. The backends differ only in HOW they install the
- * interrupt; the policy and its user-facing copy live here so the two can never drift (and so a
- * later rename of this config surface has one place to change).
+ * EXT-52 — the ONE shell approval-gate policy every agent backend resolves
+ * (`GthLangChainAgent` = lean/default). It decides whether the opt-in `run_shell_command` tool is
+ * gated behind the per-command approval interrupt, and which status notice (if any) the backend
+ * should surface. A backend contributes only HOW it installs the interrupt; the policy and its
+ * user-facing copy live here so no two can drift (and so a later rename of this config surface has
+ * one place to change).
  *
  * CFG-27 — **the tool is gated whenever it is enabled, at every rung including `bypass`.** CFG-26
  * used to leave it UNGATED under `bypass` outside interactive `code`, which the ladder cannot

package/dist/config/shell-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"shell-policy.js","sourceRoot":"","sources":["../../src/config/shell-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAmB,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAElE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAuE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,WAAW;IACX,UAAU;IACV,WAAW;IACX,iBAAiB;CACT,CAAC;AAEX,kDAAkD;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB,CAAC,GAAG,sBAAsB,EAAE,eAAe,CAAC,CAAC;AAE9F;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,YAA6C;IAE7C,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,MAAM,GAAG,GAAgD,EAAE,CAAC;QAC5D,KAAK,MAAM,IAAI,IAAI,YAAY;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAClD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAA8C;IACtF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC;AACjC,CAAC;AAgFD;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,OAAO,CAAC;AAEtD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAuC,EACvC,OAAgC;IAEhC,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,+FAA+F;IAC/F,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,CAAC;IACnF,gFAAgF;IAChF,OAAO,OAAO,KAAK,MAAM,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAuC;IACvE,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5E,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAChF,CAAC;IACD,OAAO,wBAAwB,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAuC;IAC5E,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QACnF,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YACtE,OAAO,KAAK,CAAC,cAAc,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,8BAA8B,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,0BAA0B,CACjC,QAAqD;IAErD,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,KAAK,MAAM,IAAI,IAAI,sBAAsB,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;YACrB,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;QACzB,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9C,QAAQ,CAAC,KAAK,GAAG;gBACf,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAiF,EACjF,OAA+B;IAE/B,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,QAAQ,GAAG,OAAO,KAAK,KAAK,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC;IACnE,MAAM,SAAS,GACb,OAAO,KAAK,MAAM;QAChB,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI;QACvB,CAAC,CAAC,QAAQ;YACR,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG;YACtB,CAAC,CAAC,OAAO,KAAK,MAAM;gBAClB,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI;gBACvB,CAAC,CAAC,SAAS,CAAC;IACpB,8EAA8E;IAC9E,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,MAAM,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5E,MAAM,SAAS,GAAG,SAAS,EAAE,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;IACjE,OAAO,0BAA0B,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;kGAEkG;AAElG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAKzF;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAiC;IAChE,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,QAAQ;IACR,UAAU;IACV,MAAM;IACN,QAAQ;CACkC,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,6FAA6F;IAC7F,+BAA+B,CAAC;AAElC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAiC;IACtE,MAAM,EACJ,6FAA6F;QAC7F,0FAA0F;QAC1F,+FAA+F;QAC/F,kBAAkB;IACpB,KAAK,EACH,2FAA2F;QAC3F,+FAA+F;QAC/F,8FAA8F;QAC9F,UAAU;IACZ,QAAQ,EACN,4FAA4F;QAC5F,0FAA0F;QAC1F,+FAA+F;QAC/F,mDAAmD;IACrD,IAAI,EACF,2FAA2F;QAC3F,6FAA6F;QAC7F,6FAA6F;QAC7F,0BAA0B;IAC5B,MAAM,EACJ,+FAA+F;QAC/F,2FAA2F;QAC3F,wBAAwB;CAC3B,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,yGAAyG,CAAC;AAE5G;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAsB;IAC/D,kDAAkD;IAClD,4BAA4B;CAC7B,CAAC;AAEF,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,cAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,IAAkB;IAC5C,OAAO,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,MAAM,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAkB;IAClD,OAAO,IAAI,KAAK,MAAM,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAkB;IACpD,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAIjC;IACC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC9C,IAAI,SAAS,IAAI,QAAQ,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,CAAC,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAIrC;IACC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IACpD,OAAO,gBAAgB,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAC1D,iBAAiB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CACvD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,yBAAyB,GAAgC;IAC7D,GAAG,EAAE,IAAI;IACT,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI;IACV,EAAE,EAAE,IAAI;IACR,MAAM,EAAE,IAAI;IACZ,uEAAuE;IACvE,GAAG,EAAE,KAAK;CACX,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAA+B;IACrE,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAGzC;IACC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IAC9C,OAAO,gBAAgB,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAC1D,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CACtF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CACvB,SAAkB,EAClB,cAAiC,EACjC,OAAkC;IAElC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,IAAY,EAAQ,EAAE;QACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAC5E,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC;IACF,IAAI,SAAS;QAAE,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAcD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,cAAc;IACd,iBAAiB;IACjB,gBAAgB;IAChB,eAAe;CACP,CAAC;AA+QX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAiB,UAAU,CAAC;AAE9D,gGAAgG;AAChG,SAAS,iBAAiB,CAAC,GAAgC;IACzD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA6D,EAC7D,OAA+B;IAE/B,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,iBAAiB,CAClC,OAAO;QACL,CAAC,CAAE,MAAM,EAAE,QAAwE,EAAE,CAAC,OAAO,CAAC;YAC1F,EAAE,SAAS;QACf,CAAC,CAAC,SAAS,CACd,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,qBAAqB;QAC7D,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK;QACvC,2FAA2F;QAC3F,6EAA6E;QAC7E,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE;QAC7C,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1D,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QACtE,cAAc,EAAE,UAAU,EAAE,cAAc,IAAI,IAAI,EAAE,cAAc;QAClE,2FAA2F;QAC3F,gGAAgG;QAChG,GAAG,EAAE,UAAU,EAAE,GAAG,IAAI,IAAI,EAAE,GAAG;KAClC,CAAC;AACJ,CAAC;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAA+F,EAC/F,OAA+B;IAE/B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAErC,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO;YACL,SAAS;YACT,MAAM,EAAE;gBACN,KAAK,EAAE,WAAW,CAAC,OAAO;gBAC1B,OAAO,EACL,iFAAiF;oBACjF,uFAAuF;oBACvF,sBAAsB;aACzB;SACF,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,2FAA2F;QAC3F,2FAA2F;QAC3F,0FAA0F;QAC1F,8FAA8F;QAC9F,8FAA8F;QAC9F,8FAA8F;QAC9F,sFAAsF;QACtF,OAAO;YACL,SAAS;YACT,MAAM,EAAE;gBACN,KAAK,EAAE,WAAW,CAAC,IAAI;gBACvB,OAAO,EACL,sEAAsE,IAAI,KAAK;oBAC/E,sEAAsE;aACzE;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS;QACT,MAAM,EAAE;YACN,KAAK,EAAE,WAAW,CAAC,IAAI;YACvB,OAAO,EAAE,gFAAgF,IAAI,IAAI;SAClG;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"shell-policy.js","sourceRoot":"","sources":["../../src/config/shell-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAmB,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAElE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAuE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,WAAW;IACX,UAAU;IACV,WAAW;IACX,iBAAiB;CACT,CAAC;AAEX,kDAAkD;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB,CAAC,GAAG,sBAAsB,EAAE,eAAe,CAAC,CAAC;AAE9F;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,YAA6C;IAE7C,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,MAAM,GAAG,GAAgD,EAAE,CAAC;QAC5D,KAAK,MAAM,IAAI,IAAI,YAAY;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAClD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAA8C;IACtF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC;AACjC,CAAC;AAgFD;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,OAAO,CAAC;AAEtD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAuC,EACvC,OAAgC;IAEhC,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,+FAA+F;IAC/F,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,CAAC;IACnF,gFAAgF;IAChF,OAAO,OAAO,KAAK,MAAM,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAuC;IACvE,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5E,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAChF,CAAC;IACD,OAAO,wBAAwB,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAuC;IAC5E,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QACnF,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YACtE,OAAO,KAAK,CAAC,cAAc,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,8BAA8B,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,0BAA0B,CACjC,QAAqD;IAErD,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,KAAK,MAAM,IAAI,IAAI,sBAAsB,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;YACrB,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;QACzB,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9C,QAAQ,CAAC,KAAK,GAAG;gBACf,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAiF,EACjF,OAA+B;IAE/B,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,QAAQ,GAAG,OAAO,KAAK,KAAK,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC;IACnE,MAAM,SAAS,GACb,OAAO,KAAK,MAAM;QAChB,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI;QACvB,CAAC,CAAC,QAAQ;YACR,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG;YACtB,CAAC,CAAC,OAAO,KAAK,MAAM;gBAClB,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI;gBACvB,CAAC,CAAC,SAAS,CAAC;IACpB,8EAA8E;IAC9E,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,MAAM,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5E,MAAM,SAAS,GAAG,SAAS,EAAE,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;IACjE,OAAO,0BAA0B,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;kGAEkG;AAElG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAKzF;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAiC;IAChE,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,QAAQ;IACR,UAAU;IACV,MAAM;IACN,QAAQ;CACkC,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,6FAA6F;IAC7F,+BAA+B,CAAC;AAElC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAiC;IACtE,MAAM,EACJ,6FAA6F;QAC7F,0FAA0F;QAC1F,+FAA+F;QAC/F,kBAAkB;IACpB,KAAK,EACH,2FAA2F;QAC3F,+FAA+F;QAC/F,8FAA8F;QAC9F,UAAU;IACZ,QAAQ,EACN,6FAA6F;QAC7F,8FAA8F;QAC9F,2FAA2F;QAC3F,+DAA+D;IACjE,IAAI,EACF,6FAA6F;QAC7F,6FAA6F;QAC7F,6FAA6F;QAC7F,0BAA0B;IAC5B,MAAM,EACJ,+FAA+F;QAC/F,2FAA2F;QAC3F,wBAAwB;CAC3B,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,yGAAyG,CAAC;AAE5G;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAsB;IAC/D,kDAAkD;IAClD,4BAA4B;CAC7B,CAAC;AAEF,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,cAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,IAAkB;IAC5C,OAAO,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,MAAM,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAkB;IAClD,OAAO,IAAI,KAAK,MAAM,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAkB;IACpD,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAIjC;IACC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC9C,IAAI,SAAS,IAAI,QAAQ,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,CAAC,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAIrC;IACC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IACpD,OAAO,gBAAgB,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAC1D,iBAAiB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CACvD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,yBAAyB,GAAgC;IAC7D,GAAG,EAAE,IAAI;IACT,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI;IACV,EAAE,EAAE,IAAI;IACR,MAAM,EAAE,IAAI;IACZ,uEAAuE;IACvE,GAAG,EAAE,KAAK;CACX,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAA+B;IACrE,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAGzC;IACC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IAC9C,OAAO,gBAAgB,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAC1D,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CACtF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CACvB,SAAkB,EAClB,cAAiC,EACjC,OAAkC;IAElC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,IAAY,EAAQ,EAAE;QACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAC5E,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC;IACF,IAAI,SAAS;QAAE,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAcD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,cAAc;IACd,iBAAiB;IACjB,gBAAgB;IAChB,eAAe;CACP,CAAC;AA+QX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAiB,UAAU,CAAC;AAE9D,gGAAgG;AAChG,SAAS,iBAAiB,CAAC,GAAgC;IACzD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA6D,EAC7D,OAA+B;IAE/B,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,iBAAiB,CAClC,OAAO;QACL,CAAC,CAAE,MAAM,EAAE,QAAwE,EAAE,CAAC,OAAO,CAAC;YAC1F,EAAE,SAAS;QACf,CAAC,CAAC,SAAS,CACd,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,qBAAqB;QAC7D,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK;QACvC,2FAA2F;QAC3F,6EAA6E;QAC7E,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE;QAC7C,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1D,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QACtE,cAAc,EAAE,UAAU,EAAE,cAAc,IAAI,IAAI,EAAE,cAAc;QAClE,2FAA2F;QAC3F,gGAAgG;QAChG,GAAG,EAAE,UAAU,EAAE,GAAG,IAAI,IAAI,EAAE,GAAG;KAClC,CAAC;AACJ,CAAC;AAqBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAA+F,EAC/F,OAA+B;IAE/B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAErC,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO;YACL,SAAS;YACT,MAAM,EAAE;gBACN,KAAK,EAAE,WAAW,CAAC,OAAO;gBAC1B,OAAO,EACL,iFAAiF;oBACjF,uFAAuF;oBACvF,sBAAsB;aACzB;SACF,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,2FAA2F;QAC3F,2FAA2F;QAC3F,0FAA0F;QAC1F,8FAA8F;QAC9F,8FAA8F;QAC9F,8FAA8F;QAC9F,sFAAsF;QACtF,OAAO;YACL,SAAS;YACT,MAAM,EAAE;gBACN,KAAK,EAAE,WAAW,CAAC,IAAI;gBACvB,OAAO,EACL,sEAAsE,IAAI,KAAK;oBAC/E,sEAAsE;aACzE;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS;QACT,MAAM,EAAE;YACN,KAAK,EAAE,WAAW,CAAC,IAAI;YACvB,OAAO,EAAE,gFAAgF,IAAI,IAAI;SAClG;KACF,CAAC;AACJ,CAAC"}

package/dist/config/tool-descriptions.d.ts

@@ -68,12 +68,12 @@ export declare const RUNG_TOOL_DESCRIPTION_SUFFIXES: Readonly<Record<ApprovalRun
  */
 export type BuiltInToolAccess = 'read' | 'write';
 /**
- * Access class per built-in tool name. Covers BOTH backends' names: gsloth's own
- * `GthFileSystemToolkit` (lean) and deepagents' filesystem tools (`ls`/`glob`/`grep`, deep) — the
- * two sets overlap on `read_file`/`write_file`/`edit_file`, which is exactly why one flat table
- * keyed by name serves both.
+ * Access class per built-in tool name. Keyed by NAME, not by owner, so it covers gsloth's own
+ * `GthFileSystemToolkit` and the conventional filesystem names (`ls`/`glob`/`grep`, and the
+ * `read_file`/`write_file`/`edit_file` the two conventions share) that a graph builder or an MCP
+ * server may register instead. One flat table serves them all.
  *
- * Deliberately absent: `run_shell_command`, deepagents' `execute`, the fixed dev-command tools,
+ * Deliberately absent: `run_shell_command`, the fixed dev-command tools,
  * `gth_web_fetch`, `gth_checklist`, `gth_status_update`, `show_a2ui_surface`, MCP/custom/A2A tools.
  * None of them is "reading or writing files in the working folder", so none is granted by a rung's
  * access class, and at `manual`/`write` every one of them escalates to the human.
@@ -126,7 +126,7 @@ export declare function getRungToolDescriptionSuffix(rung: ApprovalRung): string
  * - `read` — granted at every rung (§2.1).
  * - `write` — granted from `write` up (§2.2, and §2.3/§2.4 which grant "everything `write` grants"),
  *   so it escalates at `manual`.
- * - **no class at all** — the shell, deepagents' `execute`, a network call, an MCP tool, a custom or
+ * - **no class at all** — the shell, a network call, an MCP tool, a custom or
  *   agent-authored tool: granted by no rung. There is no implicit exemption; a tool is free here
  *   only by appearing in {@link BUILT_IN_TOOL_ACCESS}.
  *

package/dist/config/tool-descriptions.js

@@ -36,12 +36,12 @@ export const RUNG_TOOL_DESCRIPTION_SUFFIXES = {
 /** The distinct suffix strings, for {@link stripRungToolDescriptionSuffix}'s idempotency check. */
 const ALL_SUFFIXES = Array.from(new Set(Object.values(RUNG_TOOL_DESCRIPTION_SUFFIXES).filter((s) => s !== null)));
 /**
- * Access class per built-in tool name. Covers BOTH backends' names: gsloth's own
- * `GthFileSystemToolkit` (lean) and deepagents' filesystem tools (`ls`/`glob`/`grep`, deep) — the
- * two sets overlap on `read_file`/`write_file`/`edit_file`, which is exactly why one flat table
- * keyed by name serves both.
+ * Access class per built-in tool name. Keyed by NAME, not by owner, so it covers gsloth's own
+ * `GthFileSystemToolkit` and the conventional filesystem names (`ls`/`glob`/`grep`, and the
+ * `read_file`/`write_file`/`edit_file` the two conventions share) that a graph builder or an MCP
+ * server may register instead. One flat table serves them all.
  *
- * Deliberately absent: `run_shell_command`, deepagents' `execute`, the fixed dev-command tools,
+ * Deliberately absent: `run_shell_command`, the fixed dev-command tools,
  * `gth_web_fetch`, `gth_checklist`, `gth_status_update`, `show_a2ui_surface`, MCP/custom/A2A tools.
  * None of them is "reading or writing files in the working folder", so none is granted by a rung's
  * access class, and at `manual`/`write` every one of them escalates to the human.
@@ -68,7 +68,7 @@ export const BUILT_IN_TOOL_ACCESS = {
     move_file: 'write',
     delete_file: 'write',
     delete_directory: 'write',
-    // deepagents filesystem tools (deep backend) not already named above
+    // Conventional filesystem read names not already listed above
     ls: 'read',
     glob: 'read',
     grep: 'read',
@@ -136,7 +136,7 @@ export function getRungToolDescriptionSuffix(rung) {
  * - `read` — granted at every rung (§2.1).
  * - `write` — granted from `write` up (§2.2, and §2.3/§2.4 which grant "everything `write` grants"),
  *   so it escalates at `manual`.
- * - **no class at all** — the shell, deepagents' `execute`, a network call, an MCP tool, a custom or
+ * - **no class at all** — the shell, a network call, an MCP tool, a custom or
  *   agent-authored tool: granted by no rung. There is no implicit exemption; a tool is free here
  *   only by appearing in {@link BUILT_IN_TOOL_ACCESS}.
  *

package/dist/config/tool-descriptions.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-descriptions.js","sourceRoot":"","sources":["../../src/config/tool-descriptions.ts"],"names":[],"mappings":"AAsCA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAkD;IAC3F,MAAM,EACJ,4FAA4F;QAC5F,yCAAyC;IAC3C,KAAK,EACH,4FAA4F;QAC5F,yCAAyC;IAC3C,QAAQ,EACN,+FAA+F;QAC/F,uEAAuE;IACzE,IAAI,EACF,gGAAgG;QAChG,uEAAuE;IACzE,MAAM,EAAE,IAAI;CACb,CAAC;AAEF,mGAAmG;AACnG,MAAM,YAAY,GAAsB,KAAK,CAAC,IAAI,CAChD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAC9F,CAAC;AAUF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAgD;IAC/E,6CAA6C;IAC7C,SAAS,EAAE,MAAM;IACjB,mBAAmB,EAAE,MAAM;IAC3B,eAAe,EAAE,MAAM;IACvB,cAAc,EAAE,MAAM;IACtB,yBAAyB,EAAE,MAAM;IACjC,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACpB,aAAa,EAAE,MAAM;IACrB,wBAAwB,EAAE,MAAM;IAChC,UAAU,EAAE,OAAO;IACnB,SAAS,EAAE,OAAO;IAClB,gBAAgB,EAAE,OAAO;IACzB,SAAS,EAAE,OAAO;IAClB,WAAW,EAAE,OAAO;IACpB,gBAAgB,EAAE,OAAO;IACzB,qEAAqE;IACrE,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,iEAAiE;IACjE,QAAQ,EAAE,MAAM;CACjB,CAAC;AAUF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAqC;IACvE,SAAS,EAAE,sCAAsC;IACjD,mBAAmB,EAAE,uDAAuD;IAC5E,eAAe,EAAE,2DAA2D;IAC5E,cAAc,EAAE,wDAAwD;IACxE,yBAAyB,EAAE,0DAA0D;IACrF,cAAc,EAAE,6DAA6D;IAC7E,YAAY,EAAE,mDAAmD;IACjE,aAAa,EAAE,iEAAiE;IAChF,wBAAwB,EAAE,2DAA2D;IACrF,UAAU,EAAE,mDAAmD;IAC/D,SAAS,EAAE,wDAAwD;IACnE,gBAAgB,EAAE,2CAA2C;IAC7D,SAAS,EAAE,8CAA8C;IACzD,WAAW,EAAE,sCAAsC;IACnD,gBAAgB,EAAE,2CAA2C;IAC7D,EAAE,EAAE,wDAAwD;IAC5D,IAAI,EAAE,mDAAmD;IACzD,IAAI,EAAE,mEAAmE;IACzE,QAAQ,EAAE,mEAAmE;IAC7E,SAAS,EAAE,4CAA4C;IACvD,eAAe,EAAE,+DAA+D;IAChF,QAAQ,EAAE,4CAA4C;IACtD,SAAS,EAAE,6CAA6C;CACzD,CAAC;AAEF,kGAAkG;AAClG,MAAM,UAAU,4BAA4B,CAAC,IAAkB;IAC7D,OAAO,8BAA8B,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,IAAkB;IAC7E,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,KAAK,QAAQ,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,IAAkB,EAClB,UAA6B;IAE7B,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,WAAmB;IAChE,IAAI,MAAM,GAAG,WAAW,CAAC;IACzB,wFAAwF;IACxF,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC7D,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAAU,EACV,OAA8D;IAE9D,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC/E,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YAAE,SAAS;QACnD,MAAM,IAAI,GAAG,8BAA8B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9D,iFAAiF;QACjF,IAAI,MAAM,KAAK,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACpF,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,2BAA2B,CACzC,mBAAsC,EACtC,IAAkB,EAClB,UAA6B;IAE7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC;YAAE,SAAS;QACvD,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"tool-descriptions.js","sourceRoot":"","sources":["../../src/config/tool-descriptions.ts"],"names":[],"mappings":"AAsCA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAkD;IAC3F,MAAM,EACJ,4FAA4F;QAC5F,yCAAyC;IAC3C,KAAK,EACH,4FAA4F;QAC5F,yCAAyC;IAC3C,QAAQ,EACN,+FAA+F;QAC/F,uEAAuE;IACzE,IAAI,EACF,gGAAgG;QAChG,uEAAuE;IACzE,MAAM,EAAE,IAAI;CACb,CAAC;AAEF,mGAAmG;AACnG,MAAM,YAAY,GAAsB,KAAK,CAAC,IAAI,CAChD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAC9F,CAAC;AAUF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAgD;IAC/E,6CAA6C;IAC7C,SAAS,EAAE,MAAM;IACjB,mBAAmB,EAAE,MAAM;IAC3B,eAAe,EAAE,MAAM;IACvB,cAAc,EAAE,MAAM;IACtB,yBAAyB,EAAE,MAAM;IACjC,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACpB,aAAa,EAAE,MAAM;IACrB,wBAAwB,EAAE,MAAM;IAChC,UAAU,EAAE,OAAO;IACnB,SAAS,EAAE,OAAO;IAClB,gBAAgB,EAAE,OAAO;IACzB,SAAS,EAAE,OAAO;IAClB,WAAW,EAAE,OAAO;IACpB,gBAAgB,EAAE,OAAO;IACzB,8DAA8D;IAC9D,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,iEAAiE;IACjE,QAAQ,EAAE,MAAM;CACjB,CAAC;AAUF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAqC;IACvE,SAAS,EAAE,sCAAsC;IACjD,mBAAmB,EAAE,uDAAuD;IAC5E,eAAe,EAAE,2DAA2D;IAC5E,cAAc,EAAE,wDAAwD;IACxE,yBAAyB,EAAE,0DAA0D;IACrF,cAAc,EAAE,6DAA6D;IAC7E,YAAY,EAAE,mDAAmD;IACjE,aAAa,EAAE,iEAAiE;IAChF,wBAAwB,EAAE,2DAA2D;IACrF,UAAU,EAAE,mDAAmD;IAC/D,SAAS,EAAE,wDAAwD;IACnE,gBAAgB,EAAE,2CAA2C;IAC7D,SAAS,EAAE,8CAA8C;IACzD,WAAW,EAAE,sCAAsC;IACnD,gBAAgB,EAAE,2CAA2C;IAC7D,EAAE,EAAE,wDAAwD;IAC5D,IAAI,EAAE,mDAAmD;IACzD,IAAI,EAAE,mEAAmE;IACzE,QAAQ,EAAE,mEAAmE;IAC7E,SAAS,EAAE,4CAA4C;IACvD,eAAe,EAAE,+DAA+D;IAChF,QAAQ,EAAE,4CAA4C;IACtD,SAAS,EAAE,6CAA6C;CACzD,CAAC;AAEF,kGAAkG;AAClG,MAAM,UAAU,4BAA4B,CAAC,IAAkB;IAC7D,OAAO,8BAA8B,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,IAAkB;IAC7E,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,KAAK,QAAQ,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,IAAkB,EAClB,UAA6B;IAE7B,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,WAAmB;IAChE,IAAI,MAAM,GAAG,WAAW,CAAC;IACzB,wFAAwF;IACxF,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC7D,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAAU,EACV,OAA8D;IAE9D,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC/E,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YAAE,SAAS;QACnD,MAAM,IAAI,GAAG,8BAA8B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9D,iFAAiF;QACjF,IAAI,MAAM,KAAK,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACpF,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,2BAA2B,CACzC,mBAAsC,EACtC,IAAkB,EAClB,UAA6B;IAE7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC;YAAE,SAAS;QACvD,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/config/types.d.ts

@@ -71,10 +71,12 @@ export interface CommandToolingConfig {
     binaryFormats?: false | BinaryFormatConfig[];
 }
 /**
- * GS2-33 — one profile-backed subagent declaration. When the parent agent spawns this subagent
- * (the deepagents `task` tool), the CHILD resolves the named config {@link profile} through the
- * GS2-1 cascade, so it runs under THAT profile's model + tools + prompt (e.g. a cheap flash-lite
- * profile for recall/search subagents while the parent runs on a strong model).
+ * GS2-33 — one profile-backed subagent declaration. When the parent agent spawns this subagent,
+ * the CHILD resolves the named config {@link profile} through the GS2-1 cascade, so it runs under
+ * THAT profile's model + tools + prompt (e.g. a cheap flash-lite profile for recall/search
+ * subagents while the parent runs on a strong model).
+ *
+ * No backend spawns subagents today — see the `subagents` field on {@link GthConfig}.
  *
  * The `profile` is a named profile block created by `gth config profile create <name>` — a
  * `.gsloth/.gsloth-settings/<name>/` config dir, the same discovery convention `--profile` /
@@ -100,24 +102,19 @@ export interface GthConfig {
     llm: BaseChatModel;
     /**
      * Selects the agent backend.
-     * - `lean` (default when omitted): the plain LangChain agent ({@link GthLangChainAgent}). It is
-     *   given gsloth's full toolset (filesystem + hardened dev/shell + the `gth_checklist` planning
-     *   tool), with no deepagents machinery (no `/large_tool_results` offload). This is the
-     *   recommended backend and the default for the CLI (code/chat), single-shot (ask/exec), and
-     *   the AG-UI/api server.
-     * - `deep` (**experimental**, opt-in): the deepagents runtime (subagents, `write_todos`,
-     *   summarization, tool-result offload). Selecting it emits a warning. It can exhibit
-     *   path-divergence and sporadic failures and carries extra internal workarounds; prefer `lean`.
      *
-     * **Command-scoped**, and `docs/configuration/profiles.md` carries the one list of which commands
-     * honor it — don't restate it here, or the copies drift. What the type itself must say: `review`
-     * and `pr` — including the `pr` change-requirements discovery agent — always run lean, because
-     * `@gaunt-sloth/review` cannot reach the deep backend; a run that asks for `deep` there says so
-     * rather than dropping the key silently. The ACP server is the mirror image: structurally
-     * deep-only, it always runs deep and rejects `lean` outright.
+     * `lean` — the plain LangChain agent ({@link GthLangChainAgent}), given gsloth's full toolset
+     * (filesystem + hardened dev/shell + the `gth_checklist` planning tool) — is the only backend,
+     * and what runs when the key is omitted. Every command resolves the same one, so the key selects
+     * nothing today; it exists so a config can name what it runs on, and so a second backend has a
+     * name to arrive under.
+     *
+     * The retired `deep` value is a hard config error, not a coercion — see `RETIRED_AGENT_BACKENDS`
+     * in `config/schema.ts` for why substituting a different agent for the one a config named is the
+     * wrong kindness.
      */
     agent?: {
-        backend?: 'deep' | 'lean';
+        backend?: 'lean';
     };
     /**
      * GS2-7 (B20) — local, opt-in session history store. DEFAULT OFF (absent = disabled): a default
@@ -422,9 +419,10 @@ export interface GthConfig {
      * stashed by the loader from the raw `llm.type` before the built `BaseChatModel` replaces the raw
      * spec. INTERNAL (loader-set, never user-supplied), so it is deliberately absent from the config
      * schema. {@link import('#src/utils/systemPromptNotes.js').resolveModelIdentity} PREFERS this over
-     * the live model's `_llmType()` for the injected identity, because OpenAI-compatible shims
-     * (openrouter/deepseek/xai all extend `ChatOpenAI`) report `_llmType() === 'openai'` and would
-     * otherwise mislabel the provider half. Absent for module configs (which hand us an already-built
+     * the live model's `_llmType()` for the injected identity, because that is the model class's own
+     * label rather than the gth provider namespace (`huggingface` reports `openai`, and both Gemini
+     * providers report `google`) and would otherwise mislabel the provider half. Absent for module
+     * configs (which hand us an already-built
      * LLM with no raw `type`), where resolution falls back to the guarded `_llmType()`.
      */
     modelProviderType?: string;
@@ -455,12 +453,16 @@ export interface GthConfig {
         redact?: boolean;
     };
     /**
-     * Transient (runtime-only) extra filesystem roots the agent is allowed to read/write for
-     * THIS run, in addition to the cwd sandbox. Populated by `gth exec --allow-dir <path>`
-     * (repeatable); never persisted to a config file. When set, the deep agent's
-     * {@link FilesystemBackend} drops `virtualMode` (so absolute paths and `..` resolve on the
-     * real filesystem) and access is constrained to cwd + these dirs via permission allow-rules.
-     * Removing the cwd-only sandbox is a guardrail removal, so callers announce it loudly.
+     * Transient (runtime-only) extra filesystem roots the agent may read/write for THIS run, in
+     * addition to the cwd sandbox. Populated by `gth exec --allow-dir <path>` (repeatable); never
+     * persisted to a config file.
+     *
+     * **Currently inert.** The permission layer that widened the sandbox belonged to the deepagents
+     * backend; the filesystem toolkit the lean agent uses is rooted at the cwd and has no notion of
+     * extra roots. The field, the flag and the config merge policy are kept so a config and a script
+     * that already declare roots keep working when widening returns, and `gth exec` says plainly
+     * that the flag does nothing rather than announcing a widening that never happens — a warning
+     * about a guardrail that was not actually removed teaches the user to distrust the warnings.
      */
     allowDirs?: string[];
     /**
@@ -533,9 +535,10 @@ export interface GthConfig {
      * GS2-33 — profile-backed subagents. Each entry names a subagent and the {@link
      * SubagentProfileSpec.profile named config profile} the CHILD resolves when the parent spawns it,
      * so a subagent can run under a different model/tools/prompt than the parent (a cheap profile for
-     * recall/search while the parent runs on a strong model). Honored by the deep (deepagents) backend
-     * — its `task` tool gains one selectable subagent per entry; the lean backend's own subagent
-     * primitive lands in GS2-25.
+     * recall/search while the parent runs on a strong model). **Currently honored by nothing:** its
+     * only consumer was the deep (deepagents) backend, whose `task` tool gained one selectable
+     * subagent per entry, and that backend has been removed. The key is still accepted and warns on
+     * use; the lean backend's own subagent primitive lands in GS2-25.
      */
     subagents?: SubagentProfileSpec[];
 }

package/dist/config/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAosBA,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,UAAU;IACV,WAAW;IACX,MAAM;IACN,UAAU;IACV,QAAQ;IACR,cAAc;IACd,KAAK;IACL,YAAY;IACZ,aAAa;IACb,QAAQ;CACA,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAusBA,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,UAAU;IACV,WAAW;IACX,MAAM;IACN,UAAU;IACV,QAAQ;IACR,cAAc;IACd,KAAK;IACL,YAAY;IACZ,aAAa;IACb,QAAQ;CACA,CAAC"}

package/dist/config.d.ts

@@ -16,6 +16,8 @@
  * - `config/loader.ts` — discovery + the layered load/merge pipeline.
  * - `config/providerKeys.ts` — {@link MissingProviderKeyError}, the catchable error a load raises
  *   when a provider has no resolvable API key.
+ * - `config/configDiscovery.ts` — {@link ConfigDiscoveryError}, the catchable error a load raises
+ *   when a named identity profile does not resolve or a config layer is malformed.
  * - `config/schema.ts` — the Zod schema (single source of truth) + JSON-Schema generator.
  * - `config/tool-descriptions.ts` — EXT-58: the rung-aware tool-description suffixes (§4.5) and
  *   the granted-built-in table the rater's alternative suggestion draws on (§4.4).
@@ -33,3 +35,4 @@ export * from '#src/config/defaults.js';
 export * from '#src/config/loader.js';
 export * from '#src/config/profiles.js';
 export * from '#src/config/providerKeys.js';
+export * from '#src/config/configDiscovery.js';

package/dist/config.js

@@ -16,6 +16,8 @@
  * - `config/loader.ts` — discovery + the layered load/merge pipeline.
  * - `config/providerKeys.ts` — {@link MissingProviderKeyError}, the catchable error a load raises
  *   when a provider has no resolvable API key.
+ * - `config/configDiscovery.ts` — {@link ConfigDiscoveryError}, the catchable error a load raises
+ *   when a named identity profile does not resolve or a config layer is malformed.
  * - `config/schema.ts` — the Zod schema (single source of truth) + JSON-Schema generator.
  * - `config/tool-descriptions.ts` — EXT-58: the rung-aware tool-description suffixes (§4.5) and
  *   the granted-built-in table the rater's alternative suggestion draws on (§4.4).
@@ -33,4 +35,5 @@ export * from '#src/config/defaults.js';
 export * from '#src/config/loader.js';
 export * from '#src/config/profiles.js';
 export * from '#src/config/providerKeys.js';
+export * from '#src/config/configDiscovery.js';
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC"}

package/dist/core/GthAbstractAgent.d.ts

@@ -11,15 +11,14 @@ import { type RefusalInfo } from '#src/core/refusal.js';
 /**
  * Shared, graph-agnostic agent plumbing.
  *
- * Both the lean {@link GthLangChainAgent} (`createAgent`, in core) and the deep
- * `GthDeepAgent` (`createDeepAgent`, in `@gaunt-sloth/agent`) differ only in how they
- * build the compiled LangGraph in {@link init}; everything downstream — invoking,
+ * A backend differs from another only in how it builds the compiled LangGraph in {@link init} —
+ * today that is the lean {@link GthLangChainAgent} (`createAgent`, in core); everything downstream — invoking,
  * streaming to the console, emitting typed {@link AgentStreamEvent}s, client-tool
  * `interrupt()` stubbing, suspend/resume, and cleanup — is identical and lives here.
  *
- * The base operates solely on the structural {@link GthCompiledGraph} surface, so it
- * does NOT import `langchain`/`deepagents` graph builders. Subclasses construct the
- * graph and assign it to {@link agent} in their `init()`.
+ * The base operates solely on the structural {@link GthCompiledGraph} surface, so it does NOT
+ * import a graph builder. Subclasses construct the graph and assign it to {@link agent} in their
+ * `init()`.
  */
 export declare abstract class GthAbstractAgent implements GthAgentInterface {
     protected statusUpdate: StatusUpdateCallback;
@@ -31,8 +30,8 @@ export declare abstract class GthAbstractAgent implements GthAgentInterface {
      * Opt-in debug sink for the TUI `/debug` panel. Set AFTER {@link init} via
      * `runner.getAgent()`; read lazily inside each backend's `wrapModelCall` capture middleware
      * so that when it is `undefined` (the normal path) the middleware is a transparent
-     * pass-through. Lives on the base so BOTH the lean and deep backends support it; the AG-UI
-     * server / non-TUI callers simply never set it, so those contracts are unchanged.
+     * pass-through. Lives on the base so every backend supports it; the AG-UI server / non-TUI
+     * callers simply never set it, so those contracts are unchanged.
      */
     debugCapture: DebugCapture | undefined;
     /**
@@ -113,9 +112,8 @@ export declare abstract class GthAbstractAgent implements GthAgentInterface {
      * with what the gate will actually do is worse than no description at all".
      *
      * `additionalToolNames` covers tools the graph builder registers itself and that therefore never
-     * appear in `tools` — deepagents' own filesystem tools on the deep backend. Their descriptions
-     * are deepagents', not ours, so they cannot be suffixed here; they are recorded only so the
-     * rater's suggestion list reflects what the deep model actually has.
+     * appear in `tools`. Their descriptions are not ours to write, so they cannot be suffixed here;
+     * they are recorded only so the rater's suggestion list reflects what the model actually has.
      */
     protected registerApprovalsAwareTools<T extends DescribableTool>(tools: T[], options: {
         rung: ApprovalRung;
@@ -151,8 +149,8 @@ export declare abstract class GthAbstractAgent implements GthAgentInterface {
      */
     private getStateMessageCount;
     /**
-     * Build the underlying compiled graph and assign it to {@link agent}. This is the only
-     * part that differs between the lean and deep agents.
+     * Build the underlying compiled graph and assign it to {@link agent}. This is the part a
+     * backend implements; everything else on the base is shared.
      */
     abstract init(command: GthCommand | undefined, configIn: GthConfig, checkpointer?: BaseCheckpointSaver | undefined): Promise<void>;
     /**

package/dist/core/GthAbstractAgent.js

@@ -119,15 +119,14 @@ function pickReasoningDelta(kwargs) {
 /**
  * Shared, graph-agnostic agent plumbing.
  *
- * Both the lean {@link GthLangChainAgent} (`createAgent`, in core) and the deep
- * `GthDeepAgent` (`createDeepAgent`, in `@gaunt-sloth/agent`) differ only in how they
- * build the compiled LangGraph in {@link init}; everything downstream — invoking,
+ * A backend differs from another only in how it builds the compiled LangGraph in {@link init} —
+ * today that is the lean {@link GthLangChainAgent} (`createAgent`, in core); everything downstream — invoking,
  * streaming to the console, emitting typed {@link AgentStreamEvent}s, client-tool
  * `interrupt()` stubbing, suspend/resume, and cleanup — is identical and lives here.
  *
- * The base operates solely on the structural {@link GthCompiledGraph} surface, so it
- * does NOT import `langchain`/`deepagents` graph builders. Subclasses construct the
- * graph and assign it to {@link agent} in their `init()`.
+ * The base operates solely on the structural {@link GthCompiledGraph} surface, so it does NOT
+ * import a graph builder. Subclasses construct the graph and assign it to {@link agent} in their
+ * `init()`.
  */
 export class GthAbstractAgent {
     statusUpdate;
@@ -139,8 +138,8 @@ export class GthAbstractAgent {
      * Opt-in debug sink for the TUI `/debug` panel. Set AFTER {@link init} via
      * `runner.getAgent()`; read lazily inside each backend's `wrapModelCall` capture middleware
      * so that when it is `undefined` (the normal path) the middleware is a transparent
-     * pass-through. Lives on the base so BOTH the lean and deep backends support it; the AG-UI
-     * server / non-TUI callers simply never set it, so those contracts are unchanged.
+     * pass-through. Lives on the base so every backend supports it; the AG-UI server / non-TUI
+     * callers simply never set it, so those contracts are unchanged.
      */
     debugCapture;
     /**
@@ -232,9 +231,8 @@ export class GthAbstractAgent {
      * with what the gate will actually do is worse than no description at all".
      *
      * `additionalToolNames` covers tools the graph builder registers itself and that therefore never
-     * appear in `tools` — deepagents' own filesystem tools on the deep backend. Their descriptions
-     * are deepagents', not ours, so they cannot be suffixed here; they are recorded only so the
-     * rater's suggestion list reflects what the deep model actually has.
+     * appear in `tools`. Their descriptions are not ours to write, so they cannot be suffixed here;
+     * they are recorded only so the rater's suggestion list reflects what the model actually has.
      */
     registerApprovalsAwareTools(tools, options) {
         applyRungAwareToolDescriptions(tools, {