@gaunt-sloth/core 2.0.0-alpha.35 → 2.0.0-alpha.37

package/dist/utils/systemPromptNotes.d.ts

@@ -1,18 +1,10 @@
 /**
  * Shared code-mode system-prompt augmentations (GS2-27).
  *
- * These notes describe capabilities that are IDENTICAL across both agent backends — the lean
- * {@link import('#src/core/GthLangChainAgent.js').GthLangChainAgent} (`createAgent`, in core) and
- * the deep `GthDeepAgent` (`createDeepAgent`, in `@gaunt-sloth/agent`): both expose the opt-in
- * `run_shell_command` tool and both operate on the real filesystem cwd. They were originally
- * composed ONLY inside `GthDeepAgent.init()` (EXT-13/EXT-26), so the now-default lean backend never
- * received them — accidental deep-only drift of the same class GS2-21 fixed for the main prompt.
- *
- * They live here in core so BOTH backends compose from ONE source. `GthDeepAgent` re-exports them
- * for back-compat with existing importers. The deepagents virtual-fs-namespace notes
- * (`appendVirtualCwdNote` / `PATH_NAMESPACE_GUIDANCE` / the correction middleware) are NOT here:
- * they are genuinely deep-only (a deepagents artifact — lean never runs virtualMode) and stay in
- * `GthDeepAgent`.
+ * These notes describe capabilities of the agent itself — the opt-in `run_shell_command` tool and
+ * the real filesystem cwd — rather than of any one graph builder, which is why they live in core
+ * rather than beside the agent that composes them: a note composed inside one backend is a note
+ * the next backend silently loses, the drift GS2-21 fixed for the main prompt.
  */
 import type { McpServerInstruction } from '#src/core/types.js';
 import { type FilesystemToolsConfig } from '#src/config/filesystem-tools.js';
@@ -120,9 +112,9 @@ export interface CommitCoAuthor {
  * that string; the identity decorates only the default. An unresolvable identity (`undefined`) falls
  * back to the plain default name, never to a placeholder.
  *
- * Backend-agnostic: composed through the shared code path so BOTH the lean `GthLangChainAgent` and
- * the deep `GthDeepAgent` inject it (the git-commit capability rides on `run_shell_command`, which
- * both backends expose in code mode). Returns the note alone when there is no base prompt.
+ * Backend-agnostic: composed through the shared code path, so any backend injects it (the
+ * git-commit capability rides on `run_shell_command`, exposed in code mode). Returns the note alone
+ * when there is no base prompt.
  */
 export declare function appendCommitCoAuthorNote(systemPrompt: string | undefined, coAuthor?: CommitCoAuthor, modelIdentity?: ResolvedModelIdentity, filesystem?: FilesystemToolsConfig): string;
 /**
@@ -150,9 +142,14 @@ export interface ResolvedModelIdentity {
  *   - PROVIDER: the configured `config.modelProviderType` (the raw `llm.type` the loader stashed —
  *     `openrouter`/`deepseek`/`xai`/`anthropic`/…) when present, otherwise the live LangChain
  *     model's `_llmType()` (the source the AG-UI `/info` endpoint reports). GS2-53 — preferring the
- *     configured `type` fixes the OpenAI-compatible shims (openrouter/deepseek/xai all extend
- *     ChatOpenAI, so their `_llmType()` reports `openai`): a `type: openrouter` config now injects
- *     `openrouter:<model>`, not `openai:<model>`. The `type` is absent for module configs (which
+ *     configured `type` is what stops a provider being labelled with the client it happens to be
+ *     built on: `_llmType()` is the model CLASS's own label and does not track the gth provider
+ *     namespace, so `huggingface` (a `ChatOpenAI` aimed at the HF router) reports `openai`, and
+ *     `google-genai` and `vertexai` both report `google`. It is also the safer source in general:
+ *     `_llmType()` is the model class's opinion, while the `type` is
+ *     the user's own declaration, so a provider swapped onto a different client (as `openrouter`
+ *     was) keeps its configured label without this file needing to know. The `type` is absent for
+ *     module configs (which
  *     hand us an already-built LLM), where we fall back to `_llmType()` unchanged. The MODEL half is
  *     always exact.
  *
@@ -216,8 +213,8 @@ export declare const MCP_INSTRUCTIONS_TRUNCATION_MARKER = "\u2026 [truncated]";
  *     the model reads is gsloth's own authority, not the server text — server instructions may not
  *     override the system instructions, safety rules, or the user's directives.
  *
- * Backend-agnostic: composed through the shared path so BOTH the lean `GthLangChainAgent` and the
- * deep `GthDeepAgent` inject it. Empty/absent contributes NOTHING: when no server supplied
+ * Backend-agnostic: composed through the shared path, so any backend injects it.
+ * Empty/absent contributes NOTHING: when no server supplied
  * (non-whitespace) instructions the base prompt is returned unchanged — no empty header, no dangling
  * label. Each server's text is trimmed and capped at {@link MCP_INSTRUCTIONS_MAX_CHARS_PER_SERVER}.
  * Returns the block alone when there is no base prompt.

package/dist/utils/systemPromptNotes.js

@@ -1,18 +1,10 @@
 /**
  * Shared code-mode system-prompt augmentations (GS2-27).
  *
- * These notes describe capabilities that are IDENTICAL across both agent backends — the lean
- * {@link import('#src/core/GthLangChainAgent.js').GthLangChainAgent} (`createAgent`, in core) and
- * the deep `GthDeepAgent` (`createDeepAgent`, in `@gaunt-sloth/agent`): both expose the opt-in
- * `run_shell_command` tool and both operate on the real filesystem cwd. They were originally
- * composed ONLY inside `GthDeepAgent.init()` (EXT-13/EXT-26), so the now-default lean backend never
- * received them — accidental deep-only drift of the same class GS2-21 fixed for the main prompt.
- *
- * They live here in core so BOTH backends compose from ONE source. `GthDeepAgent` re-exports them
- * for back-compat with existing importers. The deepagents virtual-fs-namespace notes
- * (`appendVirtualCwdNote` / `PATH_NAMESPACE_GUIDANCE` / the correction middleware) are NOT here:
- * they are genuinely deep-only (a deepagents artifact — lean never runs virtualMode) and stay in
- * `GthDeepAgent`.
+ * These notes describe capabilities of the agent itself — the opt-in `run_shell_command` tool and
+ * the real filesystem cwd — rather than of any one graph builder, which is why they live in core
+ * rather than beside the agent that composes them: a note composed inside one backend is a note
+ * the next backend silently loses, the drift GS2-21 fixed for the main prompt.
  */
 import { DEFAULT_COMMIT_CO_AUTHOR_EMAIL, DEFAULT_COMMIT_CO_AUTHOR_NAME } from '#src/constants.js';
 import { isWriteFileToolRegistered, WRITE_FILE_TOOL_NAME, } from '#src/config/filesystem-tools.js';
@@ -144,9 +136,9 @@ export function appendCwdNote(systemPrompt, cwd) {
  * that string; the identity decorates only the default. An unresolvable identity (`undefined`) falls
  * back to the plain default name, never to a placeholder.
  *
- * Backend-agnostic: composed through the shared code path so BOTH the lean `GthLangChainAgent` and
- * the deep `GthDeepAgent` inject it (the git-commit capability rides on `run_shell_command`, which
- * both backends expose in code mode). Returns the note alone when there is no base prompt.
+ * Backend-agnostic: composed through the shared code path, so any backend injects it (the
+ * git-commit capability rides on `run_shell_command`, exposed in code mode). Returns the note alone
+ * when there is no base prompt.
  */
 export function appendCommitCoAuthorNote(systemPrompt, coAuthor, modelIdentity, filesystem) {
     // EXT-83 — ONE place composes the name, so the parenthesised shape stays a one-line change. The
@@ -199,9 +191,14 @@ export function appendCommitCoAuthorNote(systemPrompt, coAuthor, modelIdentity,
  *   - PROVIDER: the configured `config.modelProviderType` (the raw `llm.type` the loader stashed —
  *     `openrouter`/`deepseek`/`xai`/`anthropic`/…) when present, otherwise the live LangChain
  *     model's `_llmType()` (the source the AG-UI `/info` endpoint reports). GS2-53 — preferring the
- *     configured `type` fixes the OpenAI-compatible shims (openrouter/deepseek/xai all extend
- *     ChatOpenAI, so their `_llmType()` reports `openai`): a `type: openrouter` config now injects
- *     `openrouter:<model>`, not `openai:<model>`. The `type` is absent for module configs (which
+ *     configured `type` is what stops a provider being labelled with the client it happens to be
+ *     built on: `_llmType()` is the model CLASS's own label and does not track the gth provider
+ *     namespace, so `huggingface` (a `ChatOpenAI` aimed at the HF router) reports `openai`, and
+ *     `google-genai` and `vertexai` both report `google`. It is also the safer source in general:
+ *     `_llmType()` is the model class's opinion, while the `type` is
+ *     the user's own declaration, so a provider swapped onto a different client (as `openrouter`
+ *     was) keeps its configured label without this file needing to know. The `type` is absent for
+ *     module configs (which
  *     hand us an already-built LLM), where we fall back to `_llmType()` unchanged. The MODEL half is
  *     always exact.
  *
@@ -216,10 +213,11 @@ export function appendCommitCoAuthorNote(systemPrompt, coAuthor, modelIdentity,
  */
 export function resolveModelIdentity(config) {
     const llm = config?.llm;
-    // Prefer the configured provider `type` over the live model's `_llmType()`: OpenAI-compatible
-    // shims (openrouter/deepseek/xai) extend ChatOpenAI and report `_llmType() === 'openai'`, which
-    // would mislabel the provider half. Only fall through to the guarded `_llmType()` when no
-    // (non-blank) `type` was threaded (e.g. module configs that build the LLM themselves).
+    // Prefer the configured provider `type` over the live model's `_llmType()`: that is the model
+    // class's own label rather than the gth provider namespace (`huggingface` reports `openai`, and
+    // both Gemini providers report `google`), so it would mislabel the provider half. Only fall
+    // through to the guarded `_llmType()` when no (non-blank) `type` was threaded (e.g. module
+    // configs that build the LLM themselves).
     let provider = config?.modelProviderType?.trim() || undefined;
     if (!provider) {
         try {
@@ -304,8 +302,8 @@ function capMcpText(text) {
  *     the model reads is gsloth's own authority, not the server text — server instructions may not
  *     override the system instructions, safety rules, or the user's directives.
  *
- * Backend-agnostic: composed through the shared path so BOTH the lean `GthLangChainAgent` and the
- * deep `GthDeepAgent` inject it. Empty/absent contributes NOTHING: when no server supplied
+ * Backend-agnostic: composed through the shared path, so any backend injects it.
+ * Empty/absent contributes NOTHING: when no server supplied
  * (non-whitespace) instructions the base prompt is returned unchanged — no empty header, no dangling
  * label. Each server's text is trimmed and capped at {@link MCP_INSTRUCTIONS_MAX_CHARS_PER_SERVER}.
  * Returns the block alone when there is no base prompt.

package/dist/utils/systemPromptNotes.js.map

@@ -1 +1 @@
-{"version":3,"file":"systemPromptNotes.js","sourceRoot":"","sources":["../../src/utils/systemPromptNotes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,8BAA8B,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAClG,OAAO,EACL,yBAAyB,EACzB,oBAAoB,GAErB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,eAAe,EACf,aAAa,GACd,MAAM,6BAA6B,CAAC;AAErC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAC5B,4FAA4F;IAC5F,wFAAwF;IACxF,2DAA2D,CAAC;AAE9D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAgC;IAChE,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI;YACF,sFAAsF;gBACtF,qFAAqF;gBACrF,uFAAuF;gBACvF,4FAA4F;gBAC5F,6BAA6B,iBAAiB,EAAE,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QACjE,IAAI;YACF,0BAA0B,MAAM,yDAAyD;gBACzF,qFAAqF;gBACrF,+CAA+C,iBAAiB,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,YAAgC,EAAE,GAAW;IACzE,MAAM,OAAO,GACX,sBAAsB,GAAG,IAAI;QAC7B,6FAA6F;QAC7F,+FAA+F;QAC/F,4FAA4F;QAC5F,2FAA2F;QAC3F,yDAAyD,CAAC;IAC5D,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAClE,CAAC;AAQD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAgC,EAChC,QAAyB,EACzB,aAAqC,EACrC,UAAkC;IAElC,gGAAgG;IAChG,8FAA8F;IAC9F,8FAA8F;IAC9F,MAAM,cAAc,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,MAAM,IAAI,GACR,cAAc;QACd,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,6BAA6B,KAAK,QAAQ,GAAG,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,8BAA8B,CAAC;IACxE,gGAAgG;IAChG,+FAA+F;IAC/F,yEAAyE;IACzE,MAAM,eAAe,GAAG,yBAAyB,CAAC,UAAU,CAAC;QAC3D,CAAC,CAAC,wCAAwC,oBAAoB,QAAQ;YACpE,4FAA4F;YAC5F,+DAA+D;QACjE,CAAC,CAAC,uFAAuF;YACvF,2FAA2F;YAC3F,2FAA2F;YAC3F,iFAAiF,CAAC;IACtF,MAAM,IAAI,GACR,6FAA6F;QAC7F,oDAAoD,IAAI,KAAK,KAAK,KAAK;QACvE,iDAAiD;QACjD,4FAA4F;QAC5F,6CAA6C;QAC7C,4FAA4F;QAC5F,6FAA6F;QAC7F,yCAAyC,eAAe,IAAI;QAC5D,gGAAgG;QAChG,0EAA0E;QAC1E,6FAA6F;QAC7F,wBAAwB;QACxB,8FAA8F;QAC9F,yFAAyF;QACzF,8FAA8F;QAC9F,2FAA2F;QAC3F,8FAA8F;QAC9F,4FAA4F;QAC5F,uEAAuE,CAAC;IAC1E,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAkBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAOa;IAEb,MAAM,GAAG,GAAG,MAAM,EAAE,GAAG,CAAC;IACxB,8FAA8F;IAC9F,gGAAgG;IAChG,0FAA0F;IAC1F,uFAAuF;IACvF,IAAI,QAAQ,GAAuB,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAClF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YACH,QAAQ,GAAG,OAAO,GAAG,EAAE,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,SAAS,CAAC;QACvB,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,EAAE,gBAAgB,IAAI,GAAG,EAAE,KAAK,CAAC;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,iGAAiG;IACjG,gGAAgG;IAChG,8BAA8B;IAC9B,OAAO,QAAQ;QACb,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,QAAQ,IAAI,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;QACzD,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAgC,EAChC,aAAgD;IAEhD,MAAM,QAAQ,GAAG,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO,YAAY,CAAC;IACnC,8FAA8F;IAC9F,gGAAgG;IAChG,kGAAkG;IAClG,kGAAkG;IAClG,0DAA0D;IAC1D,MAAM,WAAW,GAAG,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,IAAI,GACR,iDAAiD,QAAQ,KAAK,WAAW,iBAAiB;QAC1F,4FAA4F;QAC5F,kCAAkC,CAAC;IACrC,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,IAAI,CAAC;AAE1D,iGAAiG;AACjG,MAAM,CAAC,MAAM,kCAAkC,GAAG,eAAe,CAAC;AAElE;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,gBAAgB,CACrB,IAAI,EACJ,qCAAqC,EACrC,kCAAkC,CACnC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,+BAA+B,CAC7C,YAAgC,EAChC,YAAgD;IAEhD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,SAAS,CAAC,qDAAqD;QAC1E,8FAA8F;QAC9F,gGAAgG;QAChG,wEAAwE;QACxE,MAAM,IAAI,GAAG,UAAU,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,MAAM,UAAU,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,8FAA8F;QAC9F,8FAA8F;QAC9F,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,GACR,2FAA2F;QAC3F,4FAA4F;QAC5F,iCAAiC;QACjC,GAAG,eAAe,IAAI;QACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnB,KAAK,aAAa,IAAI;QACtB,6FAA6F;QAC7F,4EAA4E,CAAC;IAE/E,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"systemPromptNotes.js","sourceRoot":"","sources":["../../src/utils/systemPromptNotes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,8BAA8B,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAClG,OAAO,EACL,yBAAyB,EACzB,oBAAoB,GAErB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,eAAe,EACf,aAAa,GACd,MAAM,6BAA6B,CAAC;AAErC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAC5B,4FAA4F;IAC5F,wFAAwF;IACxF,2DAA2D,CAAC;AAE9D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAgC;IAChE,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI;YACF,sFAAsF;gBACtF,qFAAqF;gBACrF,uFAAuF;gBACvF,4FAA4F;gBAC5F,6BAA6B,iBAAiB,EAAE,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QACjE,IAAI;YACF,0BAA0B,MAAM,yDAAyD;gBACzF,qFAAqF;gBACrF,+CAA+C,iBAAiB,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,YAAgC,EAAE,GAAW;IACzE,MAAM,OAAO,GACX,sBAAsB,GAAG,IAAI;QAC7B,6FAA6F;QAC7F,+FAA+F;QAC/F,4FAA4F;QAC5F,2FAA2F;QAC3F,yDAAyD,CAAC;IAC5D,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAClE,CAAC;AAQD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAgC,EAChC,QAAyB,EACzB,aAAqC,EACrC,UAAkC;IAElC,gGAAgG;IAChG,8FAA8F;IAC9F,8FAA8F;IAC9F,MAAM,cAAc,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,MAAM,IAAI,GACR,cAAc;QACd,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,6BAA6B,KAAK,QAAQ,GAAG,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,8BAA8B,CAAC;IACxE,gGAAgG;IAChG,+FAA+F;IAC/F,yEAAyE;IACzE,MAAM,eAAe,GAAG,yBAAyB,CAAC,UAAU,CAAC;QAC3D,CAAC,CAAC,wCAAwC,oBAAoB,QAAQ;YACpE,4FAA4F;YAC5F,+DAA+D;QACjE,CAAC,CAAC,uFAAuF;YACvF,2FAA2F;YAC3F,2FAA2F;YAC3F,iFAAiF,CAAC;IACtF,MAAM,IAAI,GACR,6FAA6F;QAC7F,oDAAoD,IAAI,KAAK,KAAK,KAAK;QACvE,iDAAiD;QACjD,4FAA4F;QAC5F,6CAA6C;QAC7C,4FAA4F;QAC5F,6FAA6F;QAC7F,yCAAyC,eAAe,IAAI;QAC5D,gGAAgG;QAChG,0EAA0E;QAC1E,6FAA6F;QAC7F,wBAAwB;QACxB,8FAA8F;QAC9F,yFAAyF;QACzF,8FAA8F;QAC9F,2FAA2F;QAC3F,8FAA8F;QAC9F,4FAA4F;QAC5F,uEAAuE,CAAC;IAC1E,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAkBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAOa;IAEb,MAAM,GAAG,GAAG,MAAM,EAAE,GAAG,CAAC;IACxB,8FAA8F;IAC9F,gGAAgG;IAChG,4FAA4F;IAC5F,2FAA2F;IAC3F,0CAA0C;IAC1C,IAAI,QAAQ,GAAuB,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAClF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YACH,QAAQ,GAAG,OAAO,GAAG,EAAE,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,SAAS,CAAC;QACvB,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,EAAE,gBAAgB,IAAI,GAAG,EAAE,KAAK,CAAC;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,iGAAiG;IACjG,gGAAgG;IAChG,8BAA8B;IAC9B,OAAO,QAAQ;QACb,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,QAAQ,IAAI,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;QACzD,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAgC,EAChC,aAAgD;IAEhD,MAAM,QAAQ,GAAG,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO,YAAY,CAAC;IACnC,8FAA8F;IAC9F,gGAAgG;IAChG,kGAAkG;IAClG,kGAAkG;IAClG,0DAA0D;IAC1D,MAAM,WAAW,GAAG,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,IAAI,GACR,iDAAiD,QAAQ,KAAK,WAAW,iBAAiB;QAC1F,4FAA4F;QAC5F,kCAAkC,CAAC;IACrC,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,IAAI,CAAC;AAE1D,iGAAiG;AACjG,MAAM,CAAC,MAAM,kCAAkC,GAAG,eAAe,CAAC;AAElE;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,gBAAgB,CACrB,IAAI,EACJ,qCAAqC,EACrC,kCAAkC,CACnC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,+BAA+B,CAC7C,YAAgC,EAChC,YAAgD;IAEhD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,SAAS,CAAC,qDAAqD;QAC1E,8FAA8F;QAC9F,gGAAgG;QAChG,wEAAwE;QACxE,MAAM,IAAI,GAAG,UAAU,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,MAAM,UAAU,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,8FAA8F;QAC9F,8FAA8F;QAC9F,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,GACR,2FAA2F;QAC3F,4FAA4F;QAC5F,iCAAiC;QACjC,GAAG,eAAe,IAAI;QACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnB,KAAK,aAAa,IAAI;QACtB,6FAA6F;QAC7F,4EAA4E,CAAC;IAE/E,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC"}

package/dist/utils/untrustedText.d.ts

@@ -36,14 +36,34 @@ export declare const QUOTED_COMMAND_FENCE_END = "[END QUOTED COMMAND TEXT]";
 export declare const QUOTED_COMMAND_MAX_CHARS = 2000;
 /** Appended when {@link QUOTED_COMMAND_MAX_CHARS} actually clipped the quoted command. */
 export declare const QUOTED_COMMAND_TRUNCATION_MARKER = "\u2026 [truncated]";
+/**
+ * [[EXT-46]] — the fence the ACP server quotes a prompt's non-text content blocks inside, emitted by
+ * `@gaunt-sloth/agent`'s `modules/acp/acpAgentApp.ts`.
+ *
+ * An ACP client attaches content blocks to a prompt, and the ones that are not the user's own typed
+ * text carry values the user did not author: a resource link's `name`, `uri` and `description` come
+ * from the editor, the filesystem or an MCP server, and a block's `type` is an arbitrary client
+ * string by the v2 schema. The agent has to tell the model that something was attached — dropping it
+ * silently is worse — so those values are quoted into the same message as the user's words, which is
+ * the situation this module exists for.
+ */
+export declare const ACP_ATTACHMENT_FENCE_BEGIN = "[BEGIN CLIENT-PROVIDED ATTACHMENT]";
+export declare const ACP_ATTACHMENT_FENCE_END = "[END CLIENT-PROVIDED ATTACHMENT]";
+/**
+ * How much of one attachment FIELD is quoted. These are metadata (a file name, a URI, a one-line
+ * description), not documents, so this is generous rather than a limit anything real should reach.
+ */
+export declare const ACP_ATTACHMENT_FIELD_MAX_CHARS = 1000;
+/** Appended when {@link ACP_ATTACHMENT_FIELD_MAX_CHARS} actually clipped a field. */
+export declare const ACP_ATTACHMENT_TRUNCATION_MARKER = "\u2026 [truncated]";
 /**
  * Neutralize every structural delimiter this codebase emits, inside UNTRUSTED text.
  *
  * The text is fully attacker-influenceable, so it may forge:
- *   - either fence's tokens (`[BEGIN|END MCP SERVER-PROVIDED CONTEXT]`,
- *     `[BEGIN|END QUOTED COMMAND TEXT]`) — the bracket run is collapsed so they can no longer be
- *     read as the real delimiter, while staying legible to a reader who wants to see what was
- *     attempted; and
+ *   - any fence's tokens (`[BEGIN|END MCP SERVER-PROVIDED CONTEXT]`,
+ *     `[BEGIN|END QUOTED COMMAND TEXT]`, `[BEGIN|END CLIENT-PROVIDED ATTACHMENT]`) — the bracket run
+ *     is collapsed so they can no longer be read as the real delimiter, while staying legible to a
+ *     reader who wants to see what was attempted; and
  *   - a per-server label line `--- Server: …` (EXT-32) — the leading `---` run is broken so it
  *     cannot masquerade as one of ours.
  *

package/dist/utils/untrustedText.js

@@ -36,14 +36,34 @@ export const QUOTED_COMMAND_FENCE_END = '[END QUOTED COMMAND TEXT]';
 export const QUOTED_COMMAND_MAX_CHARS = 2000;
 /** Appended when {@link QUOTED_COMMAND_MAX_CHARS} actually clipped the quoted command. */
 export const QUOTED_COMMAND_TRUNCATION_MARKER = '… [truncated]';
+/**
+ * [[EXT-46]] — the fence the ACP server quotes a prompt's non-text content blocks inside, emitted by
+ * `@gaunt-sloth/agent`'s `modules/acp/acpAgentApp.ts`.
+ *
+ * An ACP client attaches content blocks to a prompt, and the ones that are not the user's own typed
+ * text carry values the user did not author: a resource link's `name`, `uri` and `description` come
+ * from the editor, the filesystem or an MCP server, and a block's `type` is an arbitrary client
+ * string by the v2 schema. The agent has to tell the model that something was attached — dropping it
+ * silently is worse — so those values are quoted into the same message as the user's words, which is
+ * the situation this module exists for.
+ */
+export const ACP_ATTACHMENT_FENCE_BEGIN = '[BEGIN CLIENT-PROVIDED ATTACHMENT]';
+export const ACP_ATTACHMENT_FENCE_END = '[END CLIENT-PROVIDED ATTACHMENT]';
+/**
+ * How much of one attachment FIELD is quoted. These are metadata (a file name, a URI, a one-line
+ * description), not documents, so this is generous rather than a limit anything real should reach.
+ */
+export const ACP_ATTACHMENT_FIELD_MAX_CHARS = 1000;
+/** Appended when {@link ACP_ATTACHMENT_FIELD_MAX_CHARS} actually clipped a field. */
+export const ACP_ATTACHMENT_TRUNCATION_MARKER = '… [truncated]';
 /**
  * Neutralize every structural delimiter this codebase emits, inside UNTRUSTED text.
  *
  * The text is fully attacker-influenceable, so it may forge:
- *   - either fence's tokens (`[BEGIN|END MCP SERVER-PROVIDED CONTEXT]`,
- *     `[BEGIN|END QUOTED COMMAND TEXT]`) — the bracket run is collapsed so they can no longer be
- *     read as the real delimiter, while staying legible to a reader who wants to see what was
- *     attempted; and
+ *   - any fence's tokens (`[BEGIN|END MCP SERVER-PROVIDED CONTEXT]`,
+ *     `[BEGIN|END QUOTED COMMAND TEXT]`, `[BEGIN|END CLIENT-PROVIDED ATTACHMENT]`) — the bracket run
+ *     is collapsed so they can no longer be read as the real delimiter, while staying legible to a
+ *     reader who wants to see what was attempted; and
  *   - a per-server label line `--- Server: …` (EXT-32) — the leading `---` run is broken so it
  *     cannot masquerade as one of ours.
  *
@@ -58,6 +78,7 @@ export function defangUntrustedDelimiters(text) {
     return text
         .replace(/\[\s*(BEGIN|END)\s+MCP\s+SERVER-PROVIDED\s+CONTEXT\s*\]/gi, (_m, kw) => `(server text: ${kw.toUpperCase()} MCP SERVER-PROVIDED CONTEXT)`)
         .replace(/\[\s*(BEGIN|END)\s+QUOTED\s+COMMAND\s+TEXT\s*\]/gi, (_m, kw) => `(quoted text: ${kw.toUpperCase()} QUOTED COMMAND TEXT)`)
+        .replace(/\[\s*(BEGIN|END)\s+CLIENT-PROVIDED\s+ATTACHMENT\s*\]/gi, (_m, kw) => `(client text: ${kw.toUpperCase()} CLIENT-PROVIDED ATTACHMENT)`)
         .replace(/-{3,}(\s*Server\s*:)/gi, '- - -$1');
 }
 /**

package/dist/utils/untrustedText.js.map

@@ -1 +1 @@
-{"version":3,"file":"untrustedText.js","sourceRoot":"","sources":["../../src/utils/untrustedText.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,eAAe,GAAG,qCAAqC,CAAC;AACrE,MAAM,CAAC,MAAM,aAAa,GAAG,mCAAmC,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,6BAA6B,CAAC;AACxE,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC;AAEpE,kGAAkG;AAClG,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAE7C,0FAA0F;AAC1F,MAAM,CAAC,MAAM,gCAAgC,GAAG,eAAe,CAAC;AAEhE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,OAAO,IAAI;SACR,OAAO,CACN,2DAA2D,EAC3D,CAAC,EAAE,EAAE,EAAU,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,+BAA+B,CACrF;SACA,OAAO,CACN,mDAAmD,EACnD,CAAC,EAAE,EAAE,EAAU,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAC7E;SACA,OAAO,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,QAAgB,EAAE,MAAc;IAC7E,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACtC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;QAAE,GAAG,IAAI,CAAC,CAAC,CAAC,+BAA+B;IAC/E,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;AACtD,CAAC"}
+{"version":3,"file":"untrustedText.js","sourceRoot":"","sources":["../../src/utils/untrustedText.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,eAAe,GAAG,qCAAqC,CAAC;AACrE,MAAM,CAAC,MAAM,aAAa,GAAG,mCAAmC,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,6BAA6B,CAAC;AACxE,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC;AAEpE,kGAAkG;AAClG,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAE7C,0FAA0F;AAC1F,MAAM,CAAC,MAAM,gCAAgC,GAAG,eAAe,CAAC;AAEhE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,oCAAoC,CAAC;AAC/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,kCAAkC,CAAC;AAE3E;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;AAEnD,qFAAqF;AACrF,MAAM,CAAC,MAAM,gCAAgC,GAAG,eAAe,CAAC;AAEhE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,OAAO,IAAI;SACR,OAAO,CACN,2DAA2D,EAC3D,CAAC,EAAE,EAAE,EAAU,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,+BAA+B,CACrF;SACA,OAAO,CACN,mDAAmD,EACnD,CAAC,EAAE,EAAE,EAAU,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAC7E;SACA,OAAO,CACN,wDAAwD,EACxD,CAAC,EAAE,EAAE,EAAU,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,8BAA8B,CACpF;SACA,OAAO,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,QAAgB,EAAE,MAAc;IAC7E,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACtC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;QAAE,GAAG,IAAI,CAAC,CAAC,CAAC,+BAA+B;IAC/E,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;AACtD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gaunt-sloth/core",
-  "version": "2.0.0-alpha.35",
+  "version": "2.0.0-alpha.37",
   "description": "Core utilities and types for Gaunt Sloth",
   "license": "MIT",
   "author": "Andrew Kondratev",
@@ -30,11 +30,11 @@
     "#src/*.js": "./dist/*.js"
   },
   "dependencies": {
-    "@langchain/core": "^1.2.3",
-    "@langchain/langgraph": "^1.4.8",
+    "@langchain/core": "^1.2.5",
+    "@langchain/langgraph": "^1.4.9",
     "jiti": "^2.7.0",
     "jsonc-parser": "^3.3.1",
-    "langchain": "^1.5.4",
+    "langchain": "^1.5.5",
     "string-width": "^8.2.2",
     "zod": "^4.4.3"
   },

package/schema/gsloth-config.schema.json

@@ -36,7 +36,6 @@
         "backend": {
           "type": "string",
           "enum": [
-            "deep",
             "lean"
           ]
         }