@gaunt-sloth/core 2.0.0-alpha.8 → 2.0.0-beta.0

package/dist/utils/consoleUtils.js

@@ -9,8 +9,20 @@ const loggingState = {
 const consoleLevelState = {
     currentLevel: StatusLevel.INFO, // Default to INFO level, not debug
 };
-// ANSI color codes
-const ANSI_COLORS = {
+/**
+ * ANSI color codes — the 16-colour slots only, deliberately. A 16-colour slot is rendered with the
+ * user's OWN terminal theme colour, so output looks native in light and dark schemes alike; a
+ * 256-colour or 24-bit escape would pin us to one palette and clash with half of them.
+ *
+ * Exported so the surfaces that build their own pre-styled blocks (rather than passing a whole
+ * message through {@link colorText}) still draw from this one table — see
+ * `core/launchBanner.ts`, which paints only the face half of each banner row.
+ *
+ * `as const` because `packages/core` publishes `"./*.js": "./dist/*.js"`, so this is PUBLIC API of a
+ * published package: without it any consumer could assign `ANSI_COLORS.magenta` and repaint the
+ * whole CLI from the outside. Read-only, one table, no remote control.
+ */
+export const ANSI_COLORS = {
     red: '\x1b[31m',
     yellow: '\x1b[33m',
     green: '\x1b[32m',
@@ -87,9 +99,40 @@ export function displayError(message) {
     writeToSessionLog(message + '\n');
     su.log(coloredMessage);
 }
+/**
+ * Optional capture buffer for warning advisories (TUI-C19). When a capture window is open
+ * (see {@link beginWarningCapture}), every {@link displayWarning} message is also collected
+ * here so a surface that takes over the screen — the Ink TUI — can re-surface warnings that
+ * would otherwise print once and scroll out of sight. `null` when no window is open, so the
+ * plain-CLI path and the session log are entirely untouched.
+ */
+let warningCapture = null;
+/**
+ * Open a warning-capture window: from now until {@link endWarningCapture}, each
+ * `displayWarning` message is buffered (IN ADDITION to being printed/logged as usual). Used by
+ * the TUI session module to grab the transient load-time config advisories and thread them into
+ * the persistent notice surface. Idempotent-ish: a second call starts a fresh buffer.
+ */
+export const beginWarningCapture = () => {
+    warningCapture = [];
+};
+/**
+ * Close the warning-capture window opened by {@link beginWarningCapture} and return everything
+ * collected (empty array if none / never opened). Always call this — a `try/finally` around the
+ * captured work — so a throw can't leak the capture state into later warnings.
+ */
+export const endWarningCapture = () => {
+    const captured = warningCapture ?? [];
+    warningCapture = null;
+    return captured;
+};
 export function displayWarning(message) {
     if (!shouldDisplayLevel(StatusLevel.WARNING))
         return;
+    // Collect into the active capture window (if any) so the TUI can re-surface it later. Done
+    // after the level guard so a user who quieted warnings sees them neither printed nor captured.
+    if (warningCapture)
+        warningCapture.push(message);
     const coloredMessage = colorText(message, 'yellow');
     writeToSessionLog(message + '\n');
     su.warn(coloredMessage);
@@ -114,9 +157,76 @@ export function display(message) {
     writeToSessionLog(message + '\n');
     su.log(message);
 }
+/**
+ * TUI-C30 — print one pre-styled tool-call indication block (the plain surface's compact
+ * `✓ name(args…)` + greyed preview, built by `core/plainToolIndication.ts`). Same INFO-level
+ * gate, stdout channel and session-log treatment as {@link displayInfo} — matching the stream
+ * discipline of the existing tool notices — but WITHOUT the blanket dim wrap: the block styles
+ * each line itself (diff colours, per-line dim), and an outer wrapper would be broken by the
+ * inner resets. The session log gets the ANSI-stripped text via {@link writeToSessionLog}.
+ */
+export function displayToolIndication(message) {
+    if (!shouldDisplayLevel(StatusLevel.INFO))
+        return;
+    writeToSessionLog(message + '\n');
+    su.info(message);
+}
+/**
+ * TUI-C33 — print the interactive-launch banner (the pre-styled block built by
+ * `core/launchBanner.ts`) on the plain surface. Same DISPLAY-level gate and stdout channel as
+ * {@link display}, so a quieted console silences it too, but deliberately NOT routed through
+ * {@link writeToSessionLog}: the session log is a transcript of the conversation, not a screenshot
+ * of the screen, and a five-row sloth at the top of it is noise. The block also styles itself (the
+ * face half of each row carries the colour), so no outer wrap is applied.
+ */
+export function displayLaunchBanner(message) {
+    if (!shouldDisplayLevel(StatusLevel.DISPLAY))
+        return;
+    su.log(message);
+}
 export function formatInputPrompt(message) {
     return colorText(message, 'magenta');
 }
+const DIALOG_TONE_COLOURS = {
+    plain: null,
+    notice: 'dim',
+    warn: 'yellow',
+    danger: 'red',
+    prompt: 'magenta',
+};
+/**
+ * Print one line of an interactive dialog — an approval prompt, an attack banner — **on stderr**.
+ *
+ * ## One dialog, one stream
+ *
+ * A dialog's meaning is carried by the ORDER of its lines: a heading, then whose words the next
+ * lines are, then the words. Two streams cannot promise an order. Only writes to the *same* stream
+ * are delivered in the order they were made — across stdout and stderr nothing is promised, and the
+ * difference is observable the moment the two go to different places: with stdout a pipe or a file
+ * it is block-buffered while stderr is not, so a captured run can carry a rater's answer above the
+ * command it answers. A security dialog whose line order holds only on a terminal is not a gate, so
+ * every line of one goes through here and through nothing else.
+ *
+ * **stderr, because a prompt is not program output.** It is the conventional home for interaction,
+ * it is not block-buffered, and it leaves stdout carrying only what the run produced. The cost is
+ * real and is documented for users: piping stdout (`gth code --no-tui | tee log`) no longer captures
+ * the dialog — the terminal still shows it, `2>` still collects it, and an enabled session log still
+ * records it. The log write here is UNCONDITIONAL, which the gated helpers' is not: theirs sits
+ * behind the level guard, so a quieted console drops those lines from the transcript as well as
+ * from the screen. A dialog stays whole in both places.
+ *
+ * ## Not level-gated, on purpose
+ *
+ * The dialog is a QUESTION, not a status message, and the level filter is per line: gated, a quieted
+ * console prints the parts above its threshold and drops the rest, which is how an approval prompt
+ * comes to show a severity heading with no command under it. Half a dialog is worse than none,
+ * because it still looks like a whole one.
+ */
+export function displayDialogLine(message, tone = 'plain') {
+    const colour = DIALOG_TONE_COLOURS[tone];
+    writeToSessionLog(message + '\n');
+    su.error(colour ? colorText(message, colour) : message);
+}
 /**
  * Display a debug message to the console and log it.
  * This function also integrates with debugUtils to output logs when at debug level.

package/dist/utils/consoleUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"consoleUtils.js","sourceRoot":"","sources":["../../src/utils/consoleUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAwB,MAAM,oBAAoB,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACpG,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAapD,MAAM,YAAY,GAAiB;IACjC,cAAc,EAAE,SAAS;IACzB,oBAAoB,EAAE,KAAK;CAC5B,CAAC;AAEF,MAAM,iBAAiB,GAAsB;IAC3C,YAAY,EAAE,WAAW,CAAC,IAAI,EAAE,mCAAmC;CACpE,CAAC;AAEF,mBAAmB;AACnB,MAAM,WAAW,GAAG;IAClB,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,UAAU;IAClB,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,UAAU;IACnB,GAAG,EAAE,SAAS;IACd,KAAK,EAAE,SAAS;CACjB,CAAC;AAEF,qCAAqC;AACrC,SAAS,SAAS,CAAC,IAAY,EAAE,KAA+B;IAC9D,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,gCAAgC;AAChC,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAQ,EAAE;IAClD,IAAI,YAAY,CAAC,oBAAoB,EAAE,CAAC;QACtC,gDAAgD;QAChD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC5D,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;AACH,CAAC,CAAC;AAEF,kDAAkD;AAClD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,WAAmB,EAAE,aAAsB,EAAQ,EAAE;IACtF,YAAY,CAAC,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,YAAY,CAAC,oBAAoB,GAAG,aAAa,CAAC;IAElD,IAAI,aAAa,IAAI,WAAW,EAAE,CAAC;QACjC,aAAa,CAAC,WAAW,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAkB,EAAQ,EAAE;IAC1D,iBAAiB,CAAC,YAAY,GAAG,KAAK,CAAC;AACzC,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAgB,EAAE;IAC/C,OAAO,iBAAiB,CAAC,YAAY,CAAC;AACxC,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAS,EAAE;IAC1C,iBAAiB,CAAC,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC;AACpD,CAAC,CAAC;AAEF;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAkB;IAC5C,gEAAgE;IAChE,OAAO,KAAK,IAAI,iBAAiB,CAAC,YAAY,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,GAAS,EAAE;IACxC,mEAAmE;IACnE,wDAAwD;AAC1D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAS,EAAE;IAC3C,cAAc,EAAE,CAAC;IACjB,YAAY,CAAC,cAAc,GAAG,SAAS,CAAC;IACxC,YAAY,CAAC,oBAAoB,GAAG,KAAK,CAAC;AAC5C,CAAC,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO;IACnD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC;QAAE,OAAO;IACrD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpD,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC;QAAE,OAAO;IACrD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO;IAClD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC;QAAE,OAAO;IACrD,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,OAAmC;IAC9D,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO;IACnD,IAAI,OAAO,YAAY,KAAK,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,iBAAiB,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACrC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrB,6CAA6C;QAC7C,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC;SAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QAClC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClB,6CAA6C;QAC7C,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,gCAAgC;AAChC,MAAM,CAAC,MAAM,qBAAqB,GAAyB,CACzD,KAAkB,EAClB,OAAe,EACf,EAAE;IACF,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,WAAW,CAAC,IAAI;YACnB,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,MAAM;QACR,KAAK,WAAW,CAAC,OAAO;YACtB,cAAc,CAAC,OAAO,CAAC,CAAC;YACxB,MAAM;QACR,KAAK,WAAW,CAAC,KAAK;YACpB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM;QACR,KAAK,WAAW,CAAC,OAAO;YACtB,cAAc,CAAC,OAAO,CAAC,CAAC;YACxB,MAAM;QACR,KAAK,WAAW,CAAC,KAAK;YACpB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM;QACR,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,CAAC,OAAO,CAAC,CAAC;YACjB,MAAM;QACR,KAAK,WAAW,CAAC,MAAM;YACrB,IAAI,kBAAkB,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAC3B,MAAM,CAAC,OAAO,CAAC,CAAC;YAClB,CAAC;YACD,MAAM;IACV,CAAC;AACH,CAAC,CAAC;AAYF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEpC,oBAAoB;IACpB,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAED,mBAAmB;IACnB,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAC1E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,qDAAqD;IACrD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC3C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC"}
+{"version":3,"file":"consoleUtils.js","sourceRoot":"","sources":["../../src/utils/consoleUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAwB,MAAM,oBAAoB,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACpG,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAapD,MAAM,YAAY,GAAiB;IACjC,cAAc,EAAE,SAAS;IACzB,oBAAoB,EAAE,KAAK;CAC5B,CAAC;AAEF,MAAM,iBAAiB,GAAsB;IAC3C,YAAY,EAAE,WAAW,CAAC,IAAI,EAAE,mCAAmC;CACpE,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,UAAU;IAClB,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,UAAU;IACnB,GAAG,EAAE,SAAS;IACd,KAAK,EAAE,SAAS;CACR,CAAC;AAEX,qCAAqC;AACrC,SAAS,SAAS,CAAC,IAAY,EAAE,KAA+B;IAC9D,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,gCAAgC;AAChC,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAQ,EAAE;IAClD,IAAI,YAAY,CAAC,oBAAoB,EAAE,CAAC;QACtC,gDAAgD;QAChD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC5D,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;AACH,CAAC,CAAC;AAEF,kDAAkD;AAClD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,WAAmB,EAAE,aAAsB,EAAQ,EAAE;IACtF,YAAY,CAAC,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,YAAY,CAAC,oBAAoB,GAAG,aAAa,CAAC;IAElD,IAAI,aAAa,IAAI,WAAW,EAAE,CAAC;QACjC,aAAa,CAAC,WAAW,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAkB,EAAQ,EAAE;IAC1D,iBAAiB,CAAC,YAAY,GAAG,KAAK,CAAC;AACzC,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAgB,EAAE;IAC/C,OAAO,iBAAiB,CAAC,YAAY,CAAC;AACxC,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAS,EAAE;IAC1C,iBAAiB,CAAC,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC;AACpD,CAAC,CAAC;AAEF;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAkB;IAC5C,gEAAgE;IAChE,OAAO,KAAK,IAAI,iBAAiB,CAAC,YAAY,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,GAAS,EAAE;IACxC,mEAAmE;IACnE,wDAAwD;AAC1D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAS,EAAE;IAC3C,cAAc,EAAE,CAAC;IACjB,YAAY,CAAC,cAAc,GAAG,SAAS,CAAC;IACxC,YAAY,CAAC,oBAAoB,GAAG,KAAK,CAAC;AAC5C,CAAC,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO;IACnD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,IAAI,cAAc,GAAoB,IAAI,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAS,EAAE;IAC5C,cAAc,GAAG,EAAE,CAAC;AACtB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAa,EAAE;IAC9C,MAAM,QAAQ,GAAG,cAAc,IAAI,EAAE,CAAC;IACtC,cAAc,GAAG,IAAI,CAAC;IACtB,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC;QAAE,OAAO;IACrD,2FAA2F;IAC3F,+FAA+F;IAC/F,IAAI,cAAc;QAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpD,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC;QAAE,OAAO;IACrD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO;IAClD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC;QAAE,OAAO;IACrD,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO;IAClD,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC;QAAE,OAAO;IACrD,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC;AAiBD,MAAM,mBAAmB,GAAwD;IAC/E,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,QAAQ;IACd,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,SAAS;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,IAAI,GAAe,OAAO;IAC3E,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzC,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,OAAmC;IAC9D,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO;IACnD,IAAI,OAAO,YAAY,KAAK,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,iBAAiB,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACrC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrB,6CAA6C;QAC7C,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC;SAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QAClC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClB,6CAA6C;QAC7C,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,gCAAgC;AAChC,MAAM,CAAC,MAAM,qBAAqB,GAAyB,CACzD,KAAkB,EAClB,OAAe,EACf,EAAE;IACF,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,WAAW,CAAC,IAAI;YACnB,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,MAAM;QACR,KAAK,WAAW,CAAC,OAAO;YACtB,cAAc,CAAC,OAAO,CAAC,CAAC;YACxB,MAAM;QACR,KAAK,WAAW,CAAC,KAAK;YACpB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM;QACR,KAAK,WAAW,CAAC,OAAO;YACtB,cAAc,CAAC,OAAO,CAAC,CAAC;YACxB,MAAM;QACR,KAAK,WAAW,CAAC,KAAK;YACpB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM;QACR,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,CAAC,OAAO,CAAC,CAAC;YACjB,MAAM;QACR,KAAK,WAAW,CAAC,MAAM;YACrB,IAAI,kBAAkB,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAC3B,MAAM,CAAC,OAAO,CAAC,CAAC;YAClB,CAAC;YACD,MAAM;IACV,CAAC;AACH,CAAC,CAAC;AAUF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEpC,oBAAoB;IACpB,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAED,mBAAmB;IACnB,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAC1E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,qDAAqD;IACrD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC3C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/utils/crashHandler.d.ts

@@ -0,0 +1,87 @@
+/**
+ * @packageDocumentation
+ * GS2-48 — a process-level crash handler that writes an unattended, GS2-47-redacted debug snapshot
+ * when the process DIES, then exits — the counterpart to GS2-46's `/debug-dump`, which only helps
+ * while the process is alive to run the slash command. Most real failures are the process dying, at
+ * which point a slash command can't help, so this fires unconditionally, regardless of whether
+ * `debugLog` was ever turned on for the session (the snapshot draws on the always-on in-memory
+ * ring buffer — see {@link file://./debugUtils.ts}).
+ *
+ * SCOPE (deliberate): only `uncaughtException` and `unhandledRejection` are handled. Fatal SIGNALS
+ * are intentionally left to a follow-up — `SIGINT`/`SIGTERM` are already GRACEFUL-exit paths
+ * ({@link file://./systemUtils.ts} closes the log stream and exits 0), the TUI owns raw-mode Ctrl-C,
+ * and dumping a crash file on every Ctrl-C would be noise, not signal. Adding signal capture without
+ * fighting those handlers is a separate, careful piece of work.
+ *
+ * Exiting on these two events is NOT a behavioural regression: Node's default for an unhandled
+ * rejection is already to throw (terminate), and its default for an uncaught exception is to print
+ * the error and exit(1). This handler replicates that terminal behaviour (it still prints the
+ * ORIGINAL error) and only ADDS the snapshot — an uncaughtException LISTENER suppresses Node's own
+ * auto-print, which is exactly why the handler prints the error itself.
+ *
+ * CRASH-SAFETY invariants (the whole point of the node):
+ *  - The handler is fully SYNCHRONOUS — no `async`/`await`, returns no promise. An async handler that
+ *    rejected would raise a fresh `unhandledRejection` and re-enter, the exact loop the brief forbids.
+ *  - A module-level {@link handling} guard is set BEFORE any work, so a throw anywhere inside cannot
+ *    re-enter the handler and loop; a genuine re-entry short-circuits straight to exit.
+ *  - Snapshotting is wrapped in try/catch; if it fails, the handler DEGRADES to printing the original
+ *    error plus a one-line "failed to write crash snapshot" reason and still exits — it never masks
+ *    the original error and never re-enters.
+ *  - stderr is written with `fs.writeSync(2, …)`, NOT the async `consoleUtils`/`systemUtils` stream:
+ *    `process.exit()` truncates pending async pipe writes, so the printed snapshot path (asserted by
+ *    the e2e over a pipe) could be lost. This is a conscious, documented deviation from the
+ *    "use consoleUtils for output" rule — that path is unsafe at crash time.
+ */
+/**
+ * Session-supplied context folded into the snapshot when a crash fires. All optional: a crash before
+ * a session registers anything still produces a useful snapshot (error + stack + debugLog buffer +
+ * env), just without config/transcript.
+ */
+export interface CrashContext {
+    /** The effective resolved config. */
+    config?: unknown;
+    /** Model display name. */
+    modelDisplayName?: string;
+    /** The in-flight turn's transcript tail. */
+    transcriptTail?: unknown;
+}
+/** Replace the crash context wholesale. */
+export declare function setCrashContext(ctx: CrashContext): void;
+/**
+ * Merge a partial update into the crash context. The running agent calls this as it learns things
+ * (config at init, transcript tail before each turn) so a crash mid-run captures the latest state.
+ */
+export declare function updateCrashContext(patch: Partial<CrashContext>): void;
+/** Clear the crash context (e.g. when a session ends). */
+export declare function clearCrashContext(): void;
+/** Read the current crash context (used as the default context source by the installed handler). */
+export declare function getCrashContext(): CrashContext;
+/**
+ * The crash-handling body. Exported (rather than only closed over by the listeners) so it can be
+ * unit-tested directly with an injected `exit` and `getContext`, without registering real process
+ * listeners or killing the test runner.
+ *
+ * @param error the thrown value / rejection reason
+ * @param origin `'uncaughtException'` | `'unhandledRejection'`
+ * @param exit terminator (default {@link process.exit}); injectable so tests capture the code
+ * @param getContext source of the snapshot context (default the module context)
+ */
+export declare function handleCrash(error: unknown, origin: string, exit?: (code: number) => void, getContext?: () => CrashContext): void;
+/** Options for {@link installCrashHandler}. */
+export interface InstallCrashHandlerOptions {
+    /** Terminator (default {@link process.exit}). Injectable for tests. */
+    exit?: (code: number) => void;
+    /** Snapshot-context source (default the module crash context). */
+    getContext?: () => CrashContext;
+}
+/**
+ * Install the process-level crash handler (idempotent). Registers `uncaughtException` and
+ * `unhandledRejection` listeners that write a redacted snapshot and exit. Inert on a normal exit —
+ * no `exit`/`beforeExit` hook is registered, so a clean run behaves exactly as before.
+ */
+export declare function installCrashHandler(options?: InstallCrashHandlerOptions): void;
+/**
+ * Remove the crash-handler listeners and reset internal state. Primarily for tests (so the module
+ * singleton's `handling`/`installed` flags don't leak between cases); harmless in production.
+ */
+export declare function uninstallCrashHandler(): void;

package/dist/utils/crashHandler.js

@@ -0,0 +1,128 @@
+import { writeSync } from 'node:fs';
+import { writeCrashSnapshot } from '#src/utils/debugDump.js';
+/** The live context read at crash time. Updated in place by the running session (see below). */
+let crashContext = {};
+/** Replace the crash context wholesale. */
+export function setCrashContext(ctx) {
+    crashContext = ctx ?? {};
+}
+/**
+ * Merge a partial update into the crash context. The running agent calls this as it learns things
+ * (config at init, transcript tail before each turn) so a crash mid-run captures the latest state.
+ */
+export function updateCrashContext(patch) {
+    crashContext = { ...crashContext, ...patch };
+}
+/** Clear the crash context (e.g. when a session ends). */
+export function clearCrashContext() {
+    crashContext = {};
+}
+/** Read the current crash context (used as the default context source by the installed handler). */
+export function getCrashContext() {
+    return crashContext;
+}
+/**
+ * Re-entry guard. Module-level so it survives across the two listeners and any nested failure: once
+ * we are handling a crash, a second crash (including one thrown by the handler itself) must NOT
+ * re-run the snapshot logic — it goes straight to exit.
+ */
+let handling = false;
+/** Whether {@link installCrashHandler} has already registered listeners (idempotent install). */
+let installed = false;
+let onUncaughtException;
+let onUnhandledRejection;
+/** A short, never-throwing, single-block rendering of the original error for stderr. */
+function describeError(error) {
+    try {
+        if (error instanceof Error) {
+            return error.stack ?? `${error.name}: ${error.message}`;
+        }
+        return String(error);
+    }
+    catch {
+        return '<unprintable error>';
+    }
+}
+/** Write a line to fd 2 (stderr) synchronously, swallowing any failure — last-resort output. */
+function writeStderr(line) {
+    try {
+        writeSync(2, line);
+    }
+    catch {
+        // Nothing more we can safely do if even fd 2 is gone.
+    }
+}
+/**
+ * The crash-handling body. Exported (rather than only closed over by the listeners) so it can be
+ * unit-tested directly with an injected `exit` and `getContext`, without registering real process
+ * listeners or killing the test runner.
+ *
+ * @param error the thrown value / rejection reason
+ * @param origin `'uncaughtException'` | `'unhandledRejection'`
+ * @param exit terminator (default {@link process.exit}); injectable so tests capture the code
+ * @param getContext source of the snapshot context (default the module context)
+ */
+export function handleCrash(error, origin, exit = (code) => process.exit(code), getContext = getCrashContext) {
+    // GUARD FIRST — before touching anything that could throw — so a failure below (or a crash raised
+    // WHILE handling) can never re-enter and loop.
+    if (handling) {
+        writeStderr(`\n[gaunt-sloth] crash handler re-entered while handling ${origin}; exiting.\n`);
+        exit(1);
+        return;
+    }
+    handling = true;
+    const original = describeError(error);
+    try {
+        const ctx = getContext();
+        const { crashDir } = writeCrashSnapshot({
+            error,
+            origin,
+            config: ctx.config,
+            modelDisplayName: ctx.modelDisplayName,
+            transcriptTail: ctx.transcriptTail,
+        });
+        // Surface the ORIGINAL error first (Node's own auto-print is suppressed by our listener), then
+        // the snapshot path. writeSync so the path is not truncated by the imminent process.exit.
+        writeStderr(`\n[gaunt-sloth] fatal ${origin}:\n${original}\n`);
+        writeStderr(`[gaunt-sloth] crash snapshot written to: ${crashDir}\n`);
+    }
+    catch (snapErr) {
+        // Snapshotting itself failed — DEGRADE: still surface the original error + a short reason, never
+        // mask it, never re-enter.
+        const reason = snapErr instanceof Error ? snapErr.message : String(snapErr);
+        writeStderr(`\n[gaunt-sloth] fatal ${origin}:\n${original}\n`);
+        writeStderr(`[gaunt-sloth] failed to write crash snapshot: ${reason}\n`);
+    }
+    exit(1);
+}
+/**
+ * Install the process-level crash handler (idempotent). Registers `uncaughtException` and
+ * `unhandledRejection` listeners that write a redacted snapshot and exit. Inert on a normal exit —
+ * no `exit`/`beforeExit` hook is registered, so a clean run behaves exactly as before.
+ */
+export function installCrashHandler(options = {}) {
+    if (installed)
+        return;
+    installed = true;
+    const exit = options.exit ?? ((code) => process.exit(code));
+    const getContext = options.getContext ?? getCrashContext;
+    onUncaughtException = (error) => handleCrash(error, 'uncaughtException', exit, getContext);
+    onUnhandledRejection = (reason) => handleCrash(reason, 'unhandledRejection', exit, getContext);
+    process.on('uncaughtException', onUncaughtException);
+    process.on('unhandledRejection', onUnhandledRejection);
+}
+/**
+ * Remove the crash-handler listeners and reset internal state. Primarily for tests (so the module
+ * singleton's `handling`/`installed` flags don't leak between cases); harmless in production.
+ */
+export function uninstallCrashHandler() {
+    if (onUncaughtException)
+        process.removeListener('uncaughtException', onUncaughtException);
+    if (onUnhandledRejection)
+        process.removeListener('unhandledRejection', onUnhandledRejection);
+    onUncaughtException = undefined;
+    onUnhandledRejection = undefined;
+    installed = false;
+    handling = false;
+}
+//# sourceMappingURL=crashHandler.js.map

package/dist/utils/crashHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crashHandler.js","sourceRoot":"","sources":["../../src/utils/crashHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAmD7D,gGAAgG;AAChG,IAAI,YAAY,GAAiB,EAAE,CAAC;AAEpC,2CAA2C;AAC3C,MAAM,UAAU,eAAe,CAAC,GAAiB;IAC/C,YAAY,GAAG,GAAG,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAA4B;IAC7D,YAAY,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,KAAK,EAAE,CAAC;AAC/C,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB;IAC/B,YAAY,GAAG,EAAE,CAAC;AACpB,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,eAAe;IAC7B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB,iGAAiG;AACjG,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB,IAAI,mBAA2D,CAAC;AAChE,IAAI,oBAA6D,CAAC;AAElE,wFAAwF;AACxF,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC;QACH,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,KAAK,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,MAAc,EACd,IAAI,GAA2B,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAC3D,UAAU,GAAuB,eAAe;IAEhD,kGAAkG;IAClG,+CAA+C;IAC/C,IAAI,QAAQ,EAAE,CAAC;QACb,WAAW,CAAC,2DAA2D,MAAM,cAAc,CAAC,CAAC;QAC7F,IAAI,CAAC,CAAC,CAAC,CAAC;QACR,OAAO;IACT,CAAC;IACD,QAAQ,GAAG,IAAI,CAAC;IAEhB,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC;YACtC,KAAK;YACL,MAAM;YACN,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,cAAc,EAAE,GAAG,CAAC,cAAc;SACnC,CAAC,CAAC;QACH,+FAA+F;QAC/F,0FAA0F;QAC1F,WAAW,CAAC,yBAAyB,MAAM,MAAM,QAAQ,IAAI,CAAC,CAAC;QAC/D,WAAW,CAAC,4CAA4C,QAAQ,IAAI,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,iGAAiG;QACjG,2BAA2B;QAC3B,MAAM,MAAM,GAAG,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5E,WAAW,CAAC,yBAAyB,MAAM,MAAM,QAAQ,IAAI,CAAC,CAAC;QAC/D,WAAW,CAAC,iDAAiD,MAAM,IAAI,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,CAAC;AACV,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAO,GAA+B,EAAE;IAC1E,IAAI,SAAS;QAAE,OAAO;IACtB,SAAS,GAAG,IAAI,CAAC;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,eAAe,CAAC;IACzD,mBAAmB,GAAG,CAAC,KAAc,EAAE,EAAE,CACvC,WAAW,CAAC,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5D,oBAAoB,GAAG,CAAC,MAAe,EAAE,EAAE,CACzC,WAAW,CAAC,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IACrD,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,IAAI,mBAAmB;QAAE,OAAO,CAAC,cAAc,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IAC1F,IAAI,oBAAoB;QAAE,OAAO,CAAC,cAAc,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;IAC7F,mBAAmB,GAAG,SAAS,CAAC;IAChC,oBAAoB,GAAG,SAAS,CAAC;IACjC,SAAS,GAAG,KAAK,CAAC;IAClB,QAAQ,GAAG,KAAK,CAAC;AACnB,CAAC"}

package/dist/utils/debugDump.d.ts

@@ -0,0 +1,134 @@
+import type { LastModelRequest } from '#src/core/debugCapture.js';
+import type { ApprovalDecisionCapture } from '#src/core/shell/approvalCapture.js';
+/**
+ * GS2-46/GS2-47 — `/debug-dump`: a live-session diagnostic archive. GS2-46 shipped it raw; GS2-47
+ * adds a shared secret-redaction pass ({@link file://./redactSecrets.ts}) that is ON BY DEFAULT and
+ * applied to EVERY artifact before it hits disk. The caller opts out via `redact: false`, in which
+ * case the archive is raw and the caller surfaces the loud "may contain secrets" warning; when
+ * redaction is on the caller shows a softened "secrets redacted; review before sharing" note.
+ */
+/** Input to {@link writeDebugDump}. */
+export interface WriteDebugDumpInput {
+    /** The full transcript (all turns, tool calls + results). Opaque — serialized as JSON. */
+    transcript: unknown;
+    /** The resolved effective config (the live `GthConfig`). Opaque — serialized as JSON. */
+    config: unknown;
+    /** Model display name, already resolved by the caller. */
+    modelDisplayName?: string;
+    /**
+     * GS2-47 — apply the shared secret-redaction pass to every artifact before writing. Defaults to
+     * ON: omitted or any value other than the literal `false` redacts (read-site `!== false`, matching
+     * the config default so an opt-out has to be explicit). `false` writes a RAW archive (the caller
+     * is then responsible for the loud "may contain secrets" warning).
+     */
+    redact?: boolean;
+    /**
+     * Working directory for git-state collection. Defaults to `process.cwd()`; overridable for
+     * tests so the "not a git repo" / "inside a git repo" paths are both exercisable without
+     * depending on where the test runner happens to execute.
+     */
+    cwd?: string;
+    /**
+     * GS2-56 — the always-on snapshot of the last model request (the composed system prompt, tool
+     * defs with schema, model params, tool-choice, and the AS-SENT post-summarization messages),
+     * threaded straight from `agent.lastModelRequest` by the caller (both the TUI and the readline
+     * `--no-tui` surface). ADDITIVE & optional: when present, `writeDebugDump` writes
+     * `model-request.json` (the extras) and `model-messages.json` (the as-sent messages, distinct
+     * from the conversation-view `transcript.json`), both routed through the same redaction pass as
+     * every other artifact. Absent (no model call yet / a surface with no agent handle) ⇒ those two
+     * files are simply omitted.
+     */
+    modelRequest?: LastModelRequest;
+    /**
+     * [[TUI-C27]] — the approvals gate's own record of every gated decision this session made:
+     * **what the rater was SHOWN and what it ANSWERED**, on the approving branch as much as the
+     * rejecting one, plus which stage of the gate decided.
+     *
+     * Threaded straight from `runner.getApprovalCaptures()` by the caller, exactly as
+     * {@link modelRequest} is threaded from the agent. ADDITIVE & optional: present and non-empty ⇒
+     * `approvals.json`; absent or empty ⇒ the file is simply omitted (a session that gated nothing
+     * has nothing to say about it).
+     *
+     * It goes through the same {@link renderStructured} pass as `transcript.json` and
+     * `model-messages.json` — the [[GS2-47]]/[[GS2-54]] literal + pattern redaction over the secret
+     * values {@link collectSecretValues} harvested from env and config. That is deliberate reuse
+     * rather than a policy of its own: the captured rating prompt carries the user's own last five
+     * messages verbatim plus the command, so it is at least as sensitive as the transcript, and a
+     * second redaction policy for one artifact is how two policies come to disagree.
+     */
+    approvals?: readonly ApprovalDecisionCapture[];
+}
+export interface WriteDebugDumpResult {
+    /** The absolute path to the archive directory just written. */
+    archiveDir: string;
+}
+/**
+ * The filesystem-safe directory-name segment for one dump: the ISO timestamp with `:` and `.`
+ * (illegal on Windows, noisy everywhere) replaced by `-`. This is the ONLY path component
+ * debugDump generates — and the only one it is responsible for sanitizing. The parent it is joined
+ * under (the global `~/.gsloth` dir) is supplied by the environment and may legitimately carry a
+ * drive-letter colon on Windows (`C:\…`), which is not ours to strip. Exported so the invariant
+ * "the generated segment is colon-free" is testable on any platform without asserting anything
+ * about the (platform-dependent) parent path (GS2-50).
+ */
+export declare function debugDumpDirName(date?: Date): string;
+/**
+ * Write one timestamped `/debug-dump` archive under the GLOBAL `~/.gsloth/debug-dumps/<timestamp>/`
+ * (via `ensureGlobalGslothDir()` — mirrors how `resolveHistoryDbPath()` builds its path under the
+ * same dir — NOT the per-project cwd-relative helper of the same name elsewhere in this codebase).
+ * Contains: the full transcript, the resolved config, env/version info, the in-memory debugLog
+ * ring buffer, and (best-effort) git repo state.
+ *
+ * GS2-47 — unless `input.redact === false`, the shared secret-redaction pass
+ * ({@link file://./redactSecrets.ts}) is applied to EVERY artifact before it is written: the literal
+ * values of secret-named env vars + inline config secrets are substituted everywhere, a tight set of
+ * provider-key/auth-header patterns is masked, and the config's sensitive fields are masked in place.
+ * On opt-out the archive is raw and the caller surfaces the loud "may contain secrets" warning.
+ */
+export declare function writeDebugDump(input: WriteDebugDumpInput): WriteDebugDumpResult;
+/** Input to {@link writeCrashSnapshot}. */
+export interface WriteCrashSnapshotInput {
+    /** The thrown error / rejection reason. Need not be an `Error`. */
+    error: unknown;
+    /** Where the failure came from — e.g. `'uncaughtException'` / `'unhandledRejection'`. */
+    origin: string;
+    /** The effective resolved config, if the crashing process had one registered. Opaque. */
+    config?: unknown;
+    /** Model display name, if known. */
+    modelDisplayName?: string;
+    /** The in-flight turn's transcript tail, if a session registered one. Opaque. */
+    transcriptTail?: unknown;
+}
+export interface WriteCrashSnapshotResult {
+    /** The absolute path to the crash directory just written. */
+    crashDir: string;
+    /** The absolute path to the `crash.json` file inside it. */
+    crashFile: string;
+}
+/**
+ * GS2-48 — write a MINIMAL, ALWAYS-REDACTED crash snapshot to
+ * `~/.gsloth/debug-dumps/crash-<timestamp>/crash.json` and return its paths.
+ *
+ * This is the unattended sibling of {@link writeDebugDump}: it fires from the process-level crash
+ * handler ({@link file://./crashHandler.ts}) with no human present, so — unlike `/debug-dump` — it
+ * exposes NO `redact` opt-out. Redaction (GS2-47, hard-dep) is MANDATORY and applied to the whole
+ * snapshot. It reuses this module's location convention (`ensureGlobalGslothDir()` + `debug-dumps/`)
+ * and rendering helpers, but deliberately stays minimal and crash-safe:
+ *  - a SINGLE `crash.json` (not the multi-file interactive archive);
+ *  - it does NOT shell out for git state (a subprocess is unsafe/slow while the process is dying);
+ *  - it keeps only the last {@link CRASH_DEBUG_LOG_TAIL_LINES} debugLog lines and the transcript TAIL.
+ *
+ * Redaction shape (conscious choice): the entire normalized snapshot is passed through
+ * {@link redactValue} in one pass. That is stricter than {@link writeDebugDump}, which uses
+ * {@link redactText} (literal+pattern only) for its non-config artifacts to avoid field-masking a
+ * legitimately `token`/`secret`-named field in tool output. For an unattended crash file the
+ * over-masking is the SAFE direction and buys uniform circular-ref / depth / function handling in
+ * one place, so it is intended, not an oversight. The config subtree is stripped of live instances
+ * first (as `writeDebugDump` does) so a live LLM client's internals never serialize.
+ *
+ * Callers wrap this in their own try/catch (see {@link file://./crashHandler.ts}); it does its best
+ * to be fail-safe internally (`redactValue`/`safeStringify` never throw), but the ONE unavoidably
+ * throwing operation is the `mkdirSync`/`writeFileSync` to disk — an unwritable `~/.gsloth` is what
+ * the handler's degraded path is for.
+ */
+export declare function writeCrashSnapshot(input: WriteCrashSnapshotInput): WriteCrashSnapshotResult;