@gaunt-sloth/core 2.0.0-alpha.9 → 2.0.0-beta.0

package/dist/core/shell/rater.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rater.js","sourceRoot":"","sources":["../../../src/core/shell/rater.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAGH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAGzB,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIlF,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,iGAAiG;AACjG,gGAAgG;AAChG,qCAAqC;AACrC,OAAO,EACL,wBAAwB,EAExB,eAAe,GAChB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAMpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEnE;;;;GAIG;AACH,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,cAAc,GACf,MAAM,oCAAoC,CAAC;AAO5C;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC;SACP,IAAI,CAAC,cAAc,CAAC;SACpB,QAAQ,CACP,+CAA+C;QAC7C,4BAA4B;QAC5B,sFAAsF;QACtF,yDAAyD;QACzD,oFAAoF;QACpF,wFAAwF;QACxF,sFAAsF;QACtF,SAAS,CACZ;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,CACP,0FAA0F;QACxF,8EAA8E;QAC9E,yFAAyF;QACzF,iEAAiE,CACpE;IACH,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,4FAA4F;QAC1F,0FAA0F;QAC1F,uFAAuF;QACvF,uFAAuF;QACvF,6BAA6B,CAChC;CACJ,CAAC,CAAC;AASH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAE/D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,kCAAkC,CAAC;AAE5E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,+BAA+B,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAuB;IACrD,OAAO,EAAE,aAAa;IACtB,MAAM,EAAE,GAAG,uBAAuB,yCAAyC;CAC5E,CAAC;AAmBF;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAsB,EAAE,SAAkB;IAC1E,MAAM,MAAM,GAAoC;QAC9C,UAAU,EAAE,+DAA+D;QAC3E,OAAO,EAAE,wCAAwC,SAAS,IAAI,wBAAwB,4JAA4J;QAClP,WAAW,EAAE,uEAAuE;QACpF,KAAK,EAAE,6BAA6B;KACrC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,uBAAuB,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;AAC5F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,OAAuC;IAClE,OAAO,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,uBAAuB,CAAC,KAAK,IAAI,CAAC;AACvE,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,OAAuC;IACpE,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,uBAAuB,CAAC,KAAK,IAAI,CAAC;AAC9F,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,mDAAmD;IACnD,2FAA2F;IAC3F,EAAE;IACF,sCAAsC;IACtC,sFAAsF;IACtF,yFAAyF;IACzF,wFAAwF;IACxF,gGAAgG;IAChG,+FAA+F;IAC/F,qCAAqC;CACtC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,iGAAiG;IACjG,gGAAgG;IAChG,qEAAqE;IACrE,+EAA+E;IAC/E,iGAAiG;IACjG,4FAA4F;IAC5F,iGAAiG;CAClG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,8FAA8F;IAC9F,kGAAkG;IAClG,0FAA0F;IAC1F,8FAA8F;IAC9F,kGAAkG;IAClG,uFAAuF;IACvF,6EAA6E;IAC7E,qEAAqE;IACrE,0FAA0F;IAC1F,+FAA+F;IAC/F,2FAA2F;IAC3F,6FAA6F;IAC7F,kEAAkE;IAClE,yFAAyF;IACzF,0EAA0E;IAC1E,8FAA8F;IAC9F,mBAAmB;IACnB,8FAA8F;IAC9F,iGAAiG;IACjG,gGAAgG;IAChG,6FAA6F;IAC7F,2FAA2F;IAC3F,EAAE;IACF,gGAAgG;IAChG,iGAAiG;IACjG,iGAAiG;IACjG,kGAAkG;IAClG,+FAA+F;IAC/F,EAAE;IACF,0FAA0F;IAC1F,gGAAgG;IAChG,+FAA+F;IAC/F,2EAA2E;CAC5E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,2EAA2E;IAC3E,oFAAoF;IACpF,iGAAiG;IACjG,+FAA+F;IAC/F,4DAA4D;IAC5D,iGAAiG;IACjG,+FAA+F;IAC/F,8FAA8F;IAC9F,+FAA+F;IAC/F,+FAA+F;IAC/F,mBAAmB;IACnB,6FAA6F;IAC7F,6FAA6F;IAC7F,gGAAgG;IAChG,gGAAgG;IAChG,qDAAqD;IACrD,iGAAiG;IACjG,yFAAyF;CAC1F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,yFAAyF;IACzF,uFAAuF;IACvF,4FAA4F;IAC5F,kGAAkG;IAClG,+FAA+F;IAC/F,6FAA6F;IAC7F,uBAAuB;IACvB,4FAA4F;IAC5F,4FAA4F;IAC5F,mGAAmG;IACnG,gGAAgG;IAChG,iGAAiG;IACjG,+FAA+F;IAC/F,kGAAkG;IAClG,2CAA2C;IAC3C,iGAAiG;IACjG,iEAAiE;IACjE,mGAAmG;IACnG,kGAAkG;CACnG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,iGAAiG;IACjG,mGAAmG;IACnG,uFAAuF;IACvF,EAAE;IACF,mGAAmG;IACnG,kGAAkG;IAClG,iFAAiF;IACjF,iGAAiG;IACjG,yEAAyE;IACzE,6FAA6F;IAC7F,gGAAgG;IAChG,8DAA8D;CAC/D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,yBAAyB,CACvC,YAAuD;IAEvD,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,OAAO;QACL,6FAA6F;QAC7F,qFAAqF;QACrF,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QACpE,EAAE;QACF,2FAA2F;QAC3F,8FAA8F;QAC9F,iBAAiB;QACjB,4FAA4F;QAC5F,2FAA2F;QAC3F,+FAA+F;QAC/F,kDAAkD;QAClD,6FAA6F;QAC7F,6FAA6F;QAC7F,wCAAwC;KACzC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAA4C,EAC5C,OAAmE;IAEnE,MAAM,eAAe,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;IAChE,OAAO;QACL,qBAAqB;QACrB,EAAE;QACF,2FAA2F;QAC3F,cAAc;QACd,EAAE;QACF,yFAAyF;QACzF,uEAAuE;QACvE,EAAE;QACF,2BAA2B;QAC3B,EAAE;QACF,qBAAqB;QACrB,EAAE;QACF,+FAA+F;QAC/F,sEAAsE;QACtE,wBAAwB;QACxB,EAAE;QACF,+FAA+F;QAC/F,8FAA8F;QAC9F,gGAAgG;QAChG,4FAA4F;QAC5F,+FAA+F;QAC/F,sBAAsB;QACtB,EAAE;QACF,QAAQ;QACR,6FAA6F;QAC7F,uEAAuE;QACvE,+FAA+F;QAC/F,kBAAkB;QAClB,6FAA6F;QAC7F,wEAAwE;QACxE,0FAA0F;QAC1F,gGAAgG;QAChG,8FAA8F;QAC9F,sFAAsF;QACtF,4FAA4F;QAC5F,8FAA8F;QAC9F,8FAA8F;QAC9F,8FAA8F;QAC9F,iEAAiE;QACjE,wFAAwF;QACxF,8FAA8F;QAC9F,+BAA+B;QAC/B,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,wFAAwF;QACxF,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,kCAAkC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,8FAA8F;QAC9F,kFAAkF;QAClF,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,mCAAmC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,iBAAyB;IAC5D,MAAM,YAAY,GAAG,oEAAoE,CAAC,IAAI,CAC5F,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAChC,yFAAyF;IACzF,4FAA4F;IAC5F,MAAM,YAAY,GAChB,iDAAiD,CAAC,IAAI,CAAC,iBAAiB,CAAC;QACzE,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvC,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAChC,4FAA4F;IAC5F,6FAA6F;IAC7F,MAAM,YAAY,GAAG,yBAAyB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvE,OAAO,YAAY,IAAI,YAAY,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,IAAwB;IACpE,IAAI,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC;IAC1B,4FAA4F;IAC5F,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACtE,CAAC;AA6DD;;;GAGG;AACH,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAExC;;;;;GAKG;AACH,MAAM,kCAAkC,GAAG,IAAI,CAAC;AAEhD,+FAA+F;AAC/F,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,OAAe;IAC1C,IAAI,OAAO,CAAC,MAAM,IAAI,kCAAkC;QAAE,OAAO,OAAO,CAAC;IACzE,IAAI,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,kCAAkC,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClD,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,IAAI,GAAG,oBAAoB,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,mGAAmG;AACnG,mGAAmG;AACnG,6FAA6F;AAC7F,MAAM,sBAAsB,GAAG,kDAAkD,CAAC;AAElF,4FAA4F;AAC5F,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,GAAW;IAC5D,6FAA6F;IAC7F,wFAAwF;IACxF,8EAA8E;IAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;IAC7E,OAAO,SAAS,CAAC,OAAO,CACtB,IAAI,MAAM,CAAC,aAAa,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,EAC1D,sBAAsB,GAAG,OAAO,CACjC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,GAAW,EAAE,IAAwB;IACxE,OAAO,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAM,UAAU,4BAA4B,CAC1C,WAAgD,EAChD,IAAa;IAEb,MAAM,gBAAgB,GAAG,WAAW,EAAE,aAAa,IAAI,EAAE,CAAC;IAC1D,8FAA8F;IAC9F,gGAAgG;IAChG,kGAAkG;IAClG,gGAAgG;IAChG,2FAA2F;IAC3F,wCAAwC;IACxC,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC;QAC7C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,aAAa,CAAC,gBAAgB,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,CAAC,WAAW,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,YAAY,IAAI,EAAE,CAAC;SACnD,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;SACtC,KAAK,CAAC,CAAC,6BAA6B,CAAC;QACtC,+FAA+F;QAC/F,gFAAgF;SAC/E,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAExF,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpF,MAAM,KAAK,GAAa;QACtB,8FAA8F;KAC/F,CAAC;IACF,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CACR,EAAE,EACF,6CAA6C,EAC7C,iBAAiB,EACjB,aAAa,EACb,kBAAkB,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CACR,EAAE,EACF,8FAA8F,EAC9F,sBAAsB,CACvB,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,2FAA2F;YAC3F,8FAA8F;YAC9F,4BAA4B;YAC5B,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;YACvF,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;YACzE,MAAM,kBAAkB,GAAG,KAAK,CAAC,aAAa,CAAC;YAC/C,IAAI,kBAAkB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACvD,KAAK,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,uFAAuF;YACvF,wEAAwE;YACxE,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;gBACnB,CAAC,CAAC,mBAAmB,KAAK,CAAC,OAAO,EAAE;gBACpC,CAAC,CAAC,mBAAmB,KAAK,CAAC,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAC/D,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,EAAE;QACF,8FAA8F;QAC9F,0FAA0F;QAC1F,0FAA0F;QAC1F,8FAA8F;QAC9F,qCAAqC;QACrC,sEAAsE;YACpE,GAAG,6BAA6B,oBAAoB,kCAAkC,GAAG;YACzF,cAAc,EAChB,iBAAiB,EACjB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,EAChD,kBAAkB,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,OAwBC;IAED,MAAM,UAAU,GAAG,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACpD,6FAA6F;IAC7F,6FAA6F;IAC7F,MAAM,cAAc,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAE1D,kGAAkG;IAClG,mGAAmG;IACnG,mGAAmG;IACnG,gEAAgE;IAChE,EAAE;IACF,iGAAiG;IACjG,oGAAoG;IACpG,oGAAoG;IACpG,8FAA8F;IAC9F,8BAA8B;IAC9B,EAAE;IACF,8FAA8F;IAC9F,6FAA6F;IAC7F,kGAAkG;IAClG,sEAAsE;IACtE,EAAE;IACF,iGAAiG;IACjG,8FAA8F;IAC9F,oDAAoD;IACpD,MAAM,aAAa,GAAG,oBAAoB,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IAE9E,MAAM,SAAS,GAAG;QAChB,8EAA8E;QAC9E,EAAE;QACF,uBAAuB;QACvB,aAAa;QACb,wBAAwB;KACzB,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,SAAS,CAAC,IAAI,CACZ,EAAE,EACF,sFAAsF;YACpF,uFAAuF;YACvF,+DAA+D,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,6FAA6F;QAC7F,+FAA+F;QAC/F,+FAA+F;QAC/F,8FAA8F;QAC9F,gDAAgD;QAChD,SAAS,CAAC,IAAI,CACZ,EAAE,EACF,8CAA8C,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB;YACvF,mGAAmG;YACnG,uFAAuF;YACvF,2FAA2F;YAC3F,0FAA0F;YAC1F,4FAA4F;YAC5F,2CAA2C,CAC9C,CAAC;IACJ,CAAC;IACD,gGAAgG;IAChG,8FAA8F;IAC9F,0FAA0F;IAC1F,6DAA6D;IAC7D,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IACjC,CAAC;IACD,8FAA8F;IAC9F,iGAAiG;IACjG,gGAAgG;IAChG,sCAAsC;IACtC,MAAM,YAAY,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACnC,CAAC;IACD,kGAAkG;IAClG,+FAA+F;IAC/F,8FAA8F;IAC9F,8FAA8F;IAC9F,kEAAkE;IAClE,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3F,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACvC,CAAC;IACD,OAAO;QACL,0FAA0F;QAC1F,+FAA+F;QAC/F,6FAA6F;QAC7F,6FAA6F;QAC7F,iGAAiG;QACjG,+FAA+F;QAC/F,8FAA8F;QAC9F,gGAAgG;QAChG,MAAM,EAAE,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE;YACpD,qBAAqB,EAAE,gBAAgB,KAAK,IAAI;YAChD,UAAU,EAAE,OAAO,EAAE,UAAU,KAAK,IAAI;SACzC,CAAC;QACF,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,qBAAqB,CAC5B,OAA2B,EAC3B,YAAuD;IAEvD,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC3C,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,CAAC;IAClE,QAAQ,CAAC,6CAA6C,aAAa,yBAAyB,CAAC,CAAC;IAC9F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,MAAiB,EACjB,OA0CC;IAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC;IAC3C,gGAAgG;IAChG,4FAA4F;IAC5F,uEAAuE;IACvE,iGAAiG;IACjG,8FAA8F;IAC9F,sFAAsF;IACtF,MAAM,SAAS,GACb,OAAO,EAAE,SAAS;QAClB,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,cAAc;QAClD,wBAAwB,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,OAAO,EAAE;QACjD,IAAI,EAAE,OAAO,EAAE,IAAI;QACnB,YAAY,EAAE,OAAO,EAAE,YAAY;QACnC,WAAW,EAAE,OAAO,EAAE,WAAW;QACjC,UAAU,EAAE,OAAO,EAAE,UAAU;KAChC,CAAC,CAAC;IAEH,+FAA+F;IAC/F,iGAAiG;IACjG,4DAA4D;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAiC,OAAO,EAAE,SAAS;QAC9D,CAAC,CAAC;YACE,EAAE,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;YACnC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,SAAS;YACT,UAAU,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI;YACvC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YACxB,WAAW,EAAE,wBAAwB,CAAC,OAAO,CAAC,WAAW,CAAC;SAC3D;QACH,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,OAAO;QAAE,OAAO,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;IAC3C,6EAA6E;IAC7E,MAAM,MAAM,GAAG,CAAC,OAA2B,EAAE,KAAuB,EAAsB,EAAE;QAC1F,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YAC1C,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAC1B,IAAI,KAAK;gBAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC;QACxC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,UAAU,EAAE,CAAC;YAC/D,QAAQ,CAAC,uEAAuE,CAAC,CAAC;YAClF,OAAO,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;QAC3D,CAAC;QAED,+FAA+F;QAC/F,2FAA2F;QAC3F,MAAM,QAAQ,GAAG,wBAAwB,CAAC,wBAAwB,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE5F,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,cAAc,GAAG,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;YAC7D,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;QACjE,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,QAAQ,CAAC,2CAA2C,SAAS,qBAAqB,CAAC,CAAC;YACpF,OAAO,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;QACpE,CAAC;QACD,+FAA+F;QAC/F,gGAAgG;QAChG,8DAA8D;QAC9D,IAAI,OAAO;YAAE,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC;QAEzC,+FAA+F;QAC/F,yFAAyF;QACzF,8FAA8F;QAC9F,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,QAAQ,CAAC,sEAAsE,CAAC,CAAC;YACjF,OAAO,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,aAAa,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAqBD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,uBAAuB,GAA4C;IACvE,IAAI,EAAE,IAAI;IACV,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,KAAK;IACnB,MAAM,EAAE,KAAK;CACd,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAqB;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnG,CAAC;AAkCD,MAAM,UAAU,qBAAqB,CACnC,OAAuC,EACvC,MAAqB;IAErB,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACpC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,wBAAwB,CACtC,WAAiD;IAEjD,IAAI,WAAW,EAAE,aAAa,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,GAAG,yBAAyB,qBAAqB,0BAA0B,EAAE,CAAC;AACvF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,qBAAqB,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;AACxD,CAAC;AAQD;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,oBAAoB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EACJ,GAAG,uBAAuB,4DAA4D;gBACtF,mBAAmB;SACtB,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,8FAA8F;QAC9F,iGAAiG;QACjG,gGAAgG;QAChG,wFAAwF;QACxF,+EAA+E;QAC/E,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,GAAG,mBAAmB,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,0BAA0B,EAAE;SACtH,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,OAAuC,EACvC,IAA0B;IAE1B,gCAAgC;IAChC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC;IAED,wFAAwF;IACxF,iCAAiC;IACjC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACpD,CAAC;IAED,2FAA2F;IAC3F,kGAAkG;IAClG,0FAA0F;IAC1F,kGAAkG;IAClG,4FAA4F;IAC5F,gBAAgB;IAChB,MAAM,SAAS,GAAuB,qBAAqB,CACzD,OAAO,IAAI,mBAAmB,EAC9B,oBAAoB,CAAC,OAAO,CAAC,CAC9B,CAAC;IAEF,yEAAyE;IACzE,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAChD,CAAC;IAED,gGAAgG;IAChG,+FAA+F;IAC/F,4FAA4F;IAC5F,+FAA+F;IAC/F,2FAA2F;IAC3F,0BAA0B;IAC1B,IAAI,SAAS,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACpD,CAAC;IAED,4FAA4F;IAC5F,+FAA+F;IAC/F,8FAA8F;IAC9F,8FAA8F;IAC9F,gGAAgG;IAChG,iFAAiF;IACjF,IAAI,SAAS,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACnD,CAAC;IAED,0FAA0F;IAC1F,EAAE;IACF,iGAAiG;IACjG,4FAA4F;IAC5F,kFAAkF;IAClF,EAAE;IACF,8FAA8F;IAC9F,8FAA8F;IAC9F,wBAAwB;IACxB,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAuC;IAEvC,MAAM,SAAS,GAAuB,OAAO,IAAI,mBAAmB,CAAC;IACrE,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAClF,IAAI,SAAS,CAAC,OAAO,KAAK,cAAc;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAC5F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC"}

package/dist/core/shell/raterModel.d.ts

@@ -0,0 +1,41 @@
+/**
+ * @module core/shell/raterModel
+ *
+ * CFG-26 — resolve the model the AI rater rates with when `approvals.rater.profile` names an
+ * identity profile. Without this the profile is validated and then IGNORED: the config parses,
+ * `gth config validate` passes, CFG-24's first-run dialog promises "set a stronger model as the
+ * rater later via approvals.rater.profile" — and the runtime quietly rates with the main model.
+ *
+ * Why it matters concretely (QA-5 rater baseline, 2026-07-26): rating quality varies enormously by
+ * model. A local `gemma4:12b` scored 61.7% tier accuracy; `llama3.2:1b` scored 25.5% and rated
+ * EVERY safe command `danger`. Pointing the rater at a competent model is the difference between
+ * `auto` being useful and being `ask` with a bill attached — so the knob has to actually work.
+ *
+ * Kept in its own module (rather than inline in {@link GthAgentRunner}) for two reasons: the
+ * runner's specs can mock THIS seam instead of the whole `#src/config.js` barrel, and the
+ * global-state discipline below lives in exactly one place.
+ */
+import type { BaseChatModel } from '@langchain/core/language_models/chat_models';
+/**
+ * Load the identity profile named by `approvals.rater.profile` and return ITS model.
+ *
+ * Strict, per [[GS2-62]]: a profile that cannot be loaded, or that resolves to a config with no
+ * usable model, is an ERROR — never a silent fallback to the session's main model. A silent
+ * fallback is precisely the failure this function exists to remove (the user asked for a stronger
+ * rater and would have been given the weak one, with nothing said). The profile's EXISTENCE is
+ * already validated at config-load time by the loader (and by `gth config validate`); this is the
+ * later, separate question of whether it yields a usable model.
+ *
+ * **Global-state discipline.** `initConfig` re-runs project discovery and calls
+ * `setProjectDir(discovered?.dir)` as a side effect. That is correct for the SESSION's config load
+ * but wrong for this subsidiary one: a rater sub-config must never re-root the session. Because
+ * this call passes no `customConfigPath`, discovery re-walks from cwd and can legitimately land on
+ * a different dir than the session did (e.g. a session started with `-c <path>`), which would then
+ * silently repoint every `getProjectDir()` consumer — prompt files, output paths, the shell
+ * allow-list file, debug dumps. So the project dir is snapshotted and restored in a `finally`.
+ *
+ * @param profile The identity profile name from `approvals.rater.profile`.
+ * @returns The profile's chat model, ready to be handed to `rateShellCommand`'s `model` option.
+ * @throws When the profile's config cannot be loaded or carries no usable model.
+ */
+export declare function resolveRaterModel(profile: string): Promise<BaseChatModel>;

package/dist/core/shell/raterModel.js

@@ -0,0 +1,51 @@
+import { initConfig } from '#src/config/loader.js';
+import { peekProjectDir, setProjectDir } from '#src/utils/systemUtils.js';
+/**
+ * Load the identity profile named by `approvals.rater.profile` and return ITS model.
+ *
+ * Strict, per [[GS2-62]]: a profile that cannot be loaded, or that resolves to a config with no
+ * usable model, is an ERROR — never a silent fallback to the session's main model. A silent
+ * fallback is precisely the failure this function exists to remove (the user asked for a stronger
+ * rater and would have been given the weak one, with nothing said). The profile's EXISTENCE is
+ * already validated at config-load time by the loader (and by `gth config validate`); this is the
+ * later, separate question of whether it yields a usable model.
+ *
+ * **Global-state discipline.** `initConfig` re-runs project discovery and calls
+ * `setProjectDir(discovered?.dir)` as a side effect. That is correct for the SESSION's config load
+ * but wrong for this subsidiary one: a rater sub-config must never re-root the session. Because
+ * this call passes no `customConfigPath`, discovery re-walks from cwd and can legitimately land on
+ * a different dir than the session did (e.g. a session started with `-c <path>`), which would then
+ * silently repoint every `getProjectDir()` consumer — prompt files, output paths, the shell
+ * allow-list file, debug dumps. So the project dir is snapshotted and restored in a `finally`.
+ *
+ * @param profile The identity profile name from `approvals.rater.profile`.
+ * @returns The profile's chat model, ready to be handed to `rateShellCommand`'s `model` option.
+ * @throws When the profile's config cannot be loaded or carries no usable model.
+ */
+export async function resolveRaterModel(profile) {
+    // Snapshot BEFORE initConfig's discovery mutates it (see the note above). `peekProjectDir`
+    // rather than `getProjectDir` so an UNSET dir is restored as unset, not pinned to today's cwd.
+    const projectDirBefore = peekProjectDir();
+    let raterConfig;
+    try {
+        raterConfig = await initConfig({ identityProfile: profile });
+    }
+    catch (error) {
+        throw new Error(`Could not load the AI rater profile "${profile}" named by approvals.rater.profile: ` +
+            `${error instanceof Error ? error.message : String(error)}`, error instanceof Error ? { cause: error } : undefined);
+    }
+    finally {
+        setProjectDir(projectDirBefore);
+    }
+    const model = raterConfig?.llm;
+    // Guard explicitly rather than returning `undefined`: `rateShellCommand` falls back to
+    // `config.llm` when its `model` option is undefined, so handing it undefined here would
+    // reintroduce the very silent fallback this module removes.
+    if (!model || typeof model.withStructuredOutput !== 'function') {
+        throw new Error(`The AI rater profile "${profile}" resolved to a config with no usable model. ` +
+            'Give that profile a valid `llm`, or remove approvals.rater.profile to rate with the ' +
+            'session model.');
+    }
+    return model;
+}
+//# sourceMappingURL=raterModel.js.map

package/dist/core/shell/raterModel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raterModel.js","sourceRoot":"","sources":["../../../src/core/shell/raterModel.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAe;IACrD,2FAA2F;IAC3F,+FAA+F;IAC/F,MAAM,gBAAgB,GAAG,cAAc,EAAE,CAAC;IAC1C,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,UAAU,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,wCAAwC,OAAO,sCAAsC;YACnF,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC7D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CACtD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,EAAE,GAAG,CAAC;IAC/B,uFAAuF;IACvF,wFAAwF;IACxF,4DAA4D;IAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,UAAU,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACb,yBAAyB,OAAO,+CAA+C;YAC7E,sFAAsF;YACtF,gBAAgB,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/core/shell/raterVocabulary.d.ts

@@ -0,0 +1,121 @@
+/**
+ * @module core/shell/raterVocabulary
+ *
+ * **The approvals gate's closed vocabularies, and nothing else.** Three lists: the outcomes a rater
+ * may return, the actions the gate may resolve to, and the deterministic preflights that can floor a
+ * command. Each is the SINGLE place its members are written down.
+ *
+ * ## Why they live apart from {@link ./rater.js}, which owns their meaning
+ *
+ * A vocabulary has two kinds of consumer. The gate itself needs the words *and* the machinery around
+ * them. A **checker** — a schema, a report axis, a compile-time guard in another package — needs only
+ * the words, and must be able to read them without loading a rating prompt, a structured-output
+ * boundary and a chat-model client. `rater.js` imports LangChain and Zod; a suite parser that had to
+ * import it to learn which actions exist would pull the whole model layer into a parse.
+ *
+ * So this module has **no imports at all**, and it must stay that way. `rater.js` re-exports every
+ * symbol here, so the gate's own callers are unaffected and there is exactly one spelling of each
+ * word in the codebase.
+ *
+ * **A checker that RESTATES one of these lists is the failure this module exists to prevent.** A
+ * restated list does not grow when the gate grows: the new member is simply never recognised, and
+ * the checker keeps reporting success over a vocabulary it no longer covers. Derive from these
+ * arrays — ideally as a total `Record` keyed on the type, so a new member is a compile error rather
+ * than a silence.
+ */
+/**
+ * (Spec §4.1) — the **four** outcomes the rater may return. There is no ordering knob and no
+ * threshold: each outcome's consequence is fixed by the rung
+ * ({@link import('./rater.js').mapVerdictToAction}).
+ *
+ * - `safe` — no harmful effect.
+ * - `destructive` — **the catch-all**: harmful, but recoverable from inside the session, and not
+ *   an attack — **and anything the rater cannot assess**. The rating prompt defines it *by
+ *   exclusion* ("not safe, not catastrophic and not an attack") precisely so no command can fall
+ *   outside the four.
+ * - `catastrophic` — *can this be undone from inside the session?* Irreversible without something
+ *   OUTSIDE the session: rescue media, a backup, a re-provision, a restore from a third party.
+ *   Escalates at both rated rungs; never negotiable and never sticky (§4.2).
+ * - `attack` — *is something hostile acting here?* The command's own **structure** evidences
+ *   compromise (§4.1.1: credential targeting, privilege escalation / permission weakening,
+ *   persistence, deception, obfuscation). It is the only outcome that HALTS the run.
+ *
+ * **`catastrophic` and `attack` are not ranked against each other** — they ask different
+ * questions, and the spec says so explicitly. A command can be both; `attack` wins the
+ * *consequence* (a manipulated session cannot be trusted to continue) but MUST NOT swallow the
+ * finding — see the §6.1 clause in {@link import('./rater.js').buildRaterSystemPrompt}. Nothing
+ * here may be written as a severity comparison between the two.
+ */
+export declare const RATER_OUTCOMES: readonly ['safe', 'destructive', 'catastrophic', 'attack'];
+/** One outcome of {@link RATER_OUTCOMES}. */
+export type RaterOutcome = (typeof RATER_OUTCOMES)[number];
+/**
+ * The actions the approvals gate can resolve to for a single gated call, BEFORE the human prompt.
+ * {@link import('./rater.js').mapVerdictToAction} is the whole mapping from an outcome and a rung
+ * onto one of these, and its docblock carries the table.
+ *
+ * - `approve` — approve ONCE; do not touch the human or the allow-list.
+ * - `escalate` — fall through to the human approval callback, carrying the verdict when one
+ *   exists. Where there is no human, §6.2 turns this into an immediate non-zero exit — that
+ *   translation belongs to the runner, not to the mapping.
+ * - `halt` — **end the agent loop** (§4.2). Reserved for `attack`. It is not a rejection the
+ *   model can respond to and offers it no moves; no rung except `bypass` can turn it into
+ *   anything else.
+ * - `reject` — (§5): hand the rater's explanation back to the **agent** as the refused call's tool
+ *   result (§7), opening a round of the negotiation. Returned for `destructive` at `auto` and
+ *   nowhere else.
+ *
+ * **`reject` says the outcome is negotiable, NOT that the negotiation may continue.** The mapping is
+ * keyed on the rung and knows nothing about how many rounds have been spent; §5.3's consecutive cap
+ * and the reachability bound live with the state they count — `ShellNegotiationState` — and it is
+ * whoever drives that state (the session runner, and the `gth eval` rater target, which drives the
+ * same class) that turns a `reject` into an escalation once either bound is spent. Putting the
+ * counters into the mapping would make a pure rung-keyed table depend on session history, and would
+ * leave every caller that legitimately rates ONE command with an action that varies with a
+ * negotiation it is not part of.
+ *
+ * There is deliberately **no `abstain` arm.** A command whose target the gate cannot statically
+ * resolve is rated like any other, under §6.1's rule — *deterministic checks fire only where we are
+ * confident something is a threat; where we cannot tell, the model decides*. A parser reporting that
+ * it could not resolve a string is not a detection, so it earns no action of its own; what it earns
+ * is a neutral note in the rating prompt
+ * ({@link import('./abstention.js').buildParserPreflightNote}) and a real rating. That is also what
+ * keeps the ceiling reachable: an action of its own would make `catastrophic` and `attack`
+ * unreachable for every composed, substituting or redirecting command, so `pwd && rm -rf ~` could
+ * only ever be floored at `destructive`.
+ *
+ * There is deliberately **no `refuse` arm for `catastrophic`** (§4.2). The deterministic members of
+ * that class — fork bomb, `mkfs`, `rm -rf /`, `dd` to a block device — are already refused
+ * unappealably by the §8 hardline floor under every rung including `bypass`, so a refusing
+ * `catastrophic` would add nothing for the commands that motivate the idea. What it would newly
+ * refuse is the remainder the floor cannot reach, every member of which has routine legitimate use
+ * (a staging database, an ephemeral `terraform destroy`, a preview namespace). An unmeasured
+ * classifier belongs behind a human who can correct it; a refusal has no correction path.
+ *
+ * **This list is exhaustive by construction, and downstream must treat it that way.** Anything that
+ * enumerates actions — a report axis, an eval suite's declared enum, a rendering table — has to
+ * derive from here. The failure mode of a restatement is silent rather than loud: an action the
+ * enumerator does not know is not an error it can raise, it is a row it quietly files under
+ * "unrecognized", and the thing that was being measured simply stops being measured.
+ */
+export declare const RATER_ACTIONS: readonly ['approve', 'escalate', 'halt', 'reject'];
+/** One action of {@link RATER_ACTIONS}. */
+export type RaterAction = (typeof RATER_ACTIONS)[number];
+/**
+ * The deterministic preflights that can floor a command at `destructive`, in the FIXED order
+ * {@link import('./rater.js').preflightFloorFinding} evaluates them.
+ *
+ * - `script-env-leak` — an interpreter invocation expanding an ALL_CAPS environment variable into
+ *   its arguments. §11.1b's narrowing of the `attack` clause rests on this arm firing.
+ * - `open-world` — (§4.6) a host literal in a fetch/transfer position. Its reason NAMES THE HOST,
+ *   so, unlike the other arm's, its text varies per command: identify this arm by its `kind`, never
+ *   by matching its prose.
+ *
+ * They are arms of a single decision rather than independent checks, and the outcome is identical
+ * whichever fires — the order is the order of the *explanation* a human reads. Anything that
+ * attributes a floored decision to a mechanism must key on this list, so that a preflight added to
+ * the gate cannot go unattributed.
+ */
+export declare const PREFLIGHT_FLOOR_KINDS: readonly ['script-env-leak', 'open-world'];
+/** One preflight of {@link PREFLIGHT_FLOOR_KINDS}. */
+export type PreflightFloorKind = (typeof PREFLIGHT_FLOOR_KINDS)[number];

package/dist/core/shell/raterVocabulary.js

@@ -0,0 +1,116 @@
+/**
+ * @module core/shell/raterVocabulary
+ *
+ * **The approvals gate's closed vocabularies, and nothing else.** Three lists: the outcomes a rater
+ * may return, the actions the gate may resolve to, and the deterministic preflights that can floor a
+ * command. Each is the SINGLE place its members are written down.
+ *
+ * ## Why they live apart from {@link ./rater.js}, which owns their meaning
+ *
+ * A vocabulary has two kinds of consumer. The gate itself needs the words *and* the machinery around
+ * them. A **checker** — a schema, a report axis, a compile-time guard in another package — needs only
+ * the words, and must be able to read them without loading a rating prompt, a structured-output
+ * boundary and a chat-model client. `rater.js` imports LangChain and Zod; a suite parser that had to
+ * import it to learn which actions exist would pull the whole model layer into a parse.
+ *
+ * So this module has **no imports at all**, and it must stay that way. `rater.js` re-exports every
+ * symbol here, so the gate's own callers are unaffected and there is exactly one spelling of each
+ * word in the codebase.
+ *
+ * **A checker that RESTATES one of these lists is the failure this module exists to prevent.** A
+ * restated list does not grow when the gate grows: the new member is simply never recognised, and
+ * the checker keeps reporting success over a vocabulary it no longer covers. Derive from these
+ * arrays — ideally as a total `Record` keyed on the type, so a new member is a compile error rather
+ * than a silence.
+ */
+/**
+ * (Spec §4.1) — the **four** outcomes the rater may return. There is no ordering knob and no
+ * threshold: each outcome's consequence is fixed by the rung
+ * ({@link import('./rater.js').mapVerdictToAction}).
+ *
+ * - `safe` — no harmful effect.
+ * - `destructive` — **the catch-all**: harmful, but recoverable from inside the session, and not
+ *   an attack — **and anything the rater cannot assess**. The rating prompt defines it *by
+ *   exclusion* ("not safe, not catastrophic and not an attack") precisely so no command can fall
+ *   outside the four.
+ * - `catastrophic` — *can this be undone from inside the session?* Irreversible without something
+ *   OUTSIDE the session: rescue media, a backup, a re-provision, a restore from a third party.
+ *   Escalates at both rated rungs; never negotiable and never sticky (§4.2).
+ * - `attack` — *is something hostile acting here?* The command's own **structure** evidences
+ *   compromise (§4.1.1: credential targeting, privilege escalation / permission weakening,
+ *   persistence, deception, obfuscation). It is the only outcome that HALTS the run.
+ *
+ * **`catastrophic` and `attack` are not ranked against each other** — they ask different
+ * questions, and the spec says so explicitly. A command can be both; `attack` wins the
+ * *consequence* (a manipulated session cannot be trusted to continue) but MUST NOT swallow the
+ * finding — see the §6.1 clause in {@link import('./rater.js').buildRaterSystemPrompt}. Nothing
+ * here may be written as a severity comparison between the two.
+ */
+export const RATER_OUTCOMES = ['safe', 'destructive', 'catastrophic', 'attack'];
+/**
+ * The actions the approvals gate can resolve to for a single gated call, BEFORE the human prompt.
+ * {@link import('./rater.js').mapVerdictToAction} is the whole mapping from an outcome and a rung
+ * onto one of these, and its docblock carries the table.
+ *
+ * - `approve` — approve ONCE; do not touch the human or the allow-list.
+ * - `escalate` — fall through to the human approval callback, carrying the verdict when one
+ *   exists. Where there is no human, §6.2 turns this into an immediate non-zero exit — that
+ *   translation belongs to the runner, not to the mapping.
+ * - `halt` — **end the agent loop** (§4.2). Reserved for `attack`. It is not a rejection the
+ *   model can respond to and offers it no moves; no rung except `bypass` can turn it into
+ *   anything else.
+ * - `reject` — (§5): hand the rater's explanation back to the **agent** as the refused call's tool
+ *   result (§7), opening a round of the negotiation. Returned for `destructive` at `auto` and
+ *   nowhere else.
+ *
+ * **`reject` says the outcome is negotiable, NOT that the negotiation may continue.** The mapping is
+ * keyed on the rung and knows nothing about how many rounds have been spent; §5.3's consecutive cap
+ * and the reachability bound live with the state they count — `ShellNegotiationState` — and it is
+ * whoever drives that state (the session runner, and the `gth eval` rater target, which drives the
+ * same class) that turns a `reject` into an escalation once either bound is spent. Putting the
+ * counters into the mapping would make a pure rung-keyed table depend on session history, and would
+ * leave every caller that legitimately rates ONE command with an action that varies with a
+ * negotiation it is not part of.
+ *
+ * There is deliberately **no `abstain` arm.** A command whose target the gate cannot statically
+ * resolve is rated like any other, under §6.1's rule — *deterministic checks fire only where we are
+ * confident something is a threat; where we cannot tell, the model decides*. A parser reporting that
+ * it could not resolve a string is not a detection, so it earns no action of its own; what it earns
+ * is a neutral note in the rating prompt
+ * ({@link import('./abstention.js').buildParserPreflightNote}) and a real rating. That is also what
+ * keeps the ceiling reachable: an action of its own would make `catastrophic` and `attack`
+ * unreachable for every composed, substituting or redirecting command, so `pwd && rm -rf ~` could
+ * only ever be floored at `destructive`.
+ *
+ * There is deliberately **no `refuse` arm for `catastrophic`** (§4.2). The deterministic members of
+ * that class — fork bomb, `mkfs`, `rm -rf /`, `dd` to a block device — are already refused
+ * unappealably by the §8 hardline floor under every rung including `bypass`, so a refusing
+ * `catastrophic` would add nothing for the commands that motivate the idea. What it would newly
+ * refuse is the remainder the floor cannot reach, every member of which has routine legitimate use
+ * (a staging database, an ephemeral `terraform destroy`, a preview namespace). An unmeasured
+ * classifier belongs behind a human who can correct it; a refusal has no correction path.
+ *
+ * **This list is exhaustive by construction, and downstream must treat it that way.** Anything that
+ * enumerates actions — a report axis, an eval suite's declared enum, a rendering table — has to
+ * derive from here. The failure mode of a restatement is silent rather than loud: an action the
+ * enumerator does not know is not an error it can raise, it is a row it quietly files under
+ * "unrecognized", and the thing that was being measured simply stops being measured.
+ */
+export const RATER_ACTIONS = ['approve', 'escalate', 'halt', 'reject'];
+/**
+ * The deterministic preflights that can floor a command at `destructive`, in the FIXED order
+ * {@link import('./rater.js').preflightFloorFinding} evaluates them.
+ *
+ * - `script-env-leak` — an interpreter invocation expanding an ALL_CAPS environment variable into
+ *   its arguments. §11.1b's narrowing of the `attack` clause rests on this arm firing.
+ * - `open-world` — (§4.6) a host literal in a fetch/transfer position. Its reason NAMES THE HOST,
+ *   so, unlike the other arm's, its text varies per command: identify this arm by its `kind`, never
+ *   by matching its prose.
+ *
+ * They are arms of a single decision rather than independent checks, and the outcome is identical
+ * whichever fires — the order is the order of the *explanation* a human reads. Anything that
+ * attributes a floored decision to a mechanism must key on this list, so that a preflight added to
+ * the gate cannot go unattributed.
+ */
+export const PREFLIGHT_FLOOR_KINDS = ['script-env-leak', 'open-world'];
+//# sourceMappingURL=raterVocabulary.js.map

package/dist/core/shell/raterVocabulary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raterVocabulary.js","sourceRoot":"","sources":["../../../src/core/shell/raterVocabulary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ,CAAU,CAAC;AAKzF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAKhF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,iBAAiB,EAAE,YAAY,CAAU,CAAC"}

package/dist/core/shell/rejection.d.ts

@@ -0,0 +1,69 @@
+/**
+ * @module core/shell/rejection
+ *
+ * EXT-58 (spec §7) — **what the model is told when a gated tool call is refused.**
+ *
+ * A rejection returned to the model MUST name the moves available to it, not merely the refusal.
+ * The pre-EXT-58 message was the bare string *"User rejected the shell command."*, which tells the
+ * model it failed and nothing about what to do instead — so it either re-runs the identical call or
+ * abandons a legitimate task silently. §7 fixes both ends: state the refusal, carry the explanation
+ * when one exists, and name the three moves (re-call with a justification, call a different
+ * command, ask the user).
+ *
+ * When the rater named an already-granted alternative (§4.4), the message MUST carry it **and** say
+ * that the alternative needs no approval. That last clause is the sentence that actually redirects
+ * behaviour: without it the model reads a tool name and still has no reason to believe calling it
+ * is cheaper than arguing about the command it already chose.
+ *
+ * What this module deliberately does NOT do:
+ *
+ * - It does not decide anything. It renders a refusal that has already been decided elsewhere; a
+ *   suggestion it carries is never an approval and changes no outcome (§4.4).
+ * - It does not serve a **halt** (§4.2). A halt is not a rejection and offers the model no moves,
+ *   so it is an error (`AttackHaltError`) rather than a message — see `approvalStop.ts`.
+ * - It does not serve a **deny-list** refusal. A deny entry is the user's own hardline, and
+ *   "re-call the same command with a justification" is not a move the model has there; that message
+ *   stays as it is, in `GthAgentRunner.decideToolApproval`.
+ * - It does not serve a command the gate's parser could not READ. There is no such refusal:
+ *   [[EXT-81]] rates that command instead of refusing it, so every rejection this module renders is
+ *   a JUDGED one and "call the same command with a justification" is always a move the model has.
+ */
+import type { ShellSafetyVerdict } from '#src/core/shell/rater.js';
+/** Who refused the call — the opening sentence and the moves both follow from this. */
+export type RejectionSource = 
+/** The human answered "no" at the escalation prompt (§6). */
+'user'
+/** The auto-rater refused during a negotiation (§5 / [[EXT-29]]). */
+ | 'rater';
+/** The three moves §7 requires a JUDGED rejection to name. */
+export declare const REJECTION_MOVES: string;
+/**
+ * §7 — the clause that makes a suggestion actionable. Verbatim in substance from the spec:
+ * *"`gth_edit_file` does this and is already approved at this level, so it will not interrupt the
+ * user."*
+ */
+export declare function buildGrantedAlternativeClause(toolName: string): string;
+/** Inputs to {@link buildRejectionMessage}. */
+export interface RejectionMessageOptions {
+    /** Who refused. */
+    source: RejectionSource;
+    /** The tool that was refused; defaults to a generic phrasing when absent. */
+    toolName?: string;
+    /**
+     * The rating that accompanied the escalation, when one exists. Carries both the explanation the
+     * model is owed and — when the rater named one — the granted alternative (§4.4). Absent at the
+     * unrated rungs (`manual`, `write`), where there is no rating at all and the descriptions of
+     * §4.5 are the only mechanism in play.
+     */
+    verdict?: ShellSafetyVerdict;
+}
+/**
+ * Build the rejection message handed back to the model as the refused call's tool result.
+ *
+ * §7 shape, each part omitted when it does not apply:
+ * 1. who refused what;
+ * 2. the rater's explanation, when a rating exists;
+ * 3. the three moves — always;
+ * 4. the granted alternative plus the no-approval-needed clause, when the rater named one.
+ */
+export declare function buildRejectionMessage(options: RejectionMessageOptions): string;

package/dist/core/shell/rejection.js

@@ -0,0 +1,38 @@
+/** The three moves §7 requires a JUDGED rejection to name. */
+export const REJECTION_MOVES = 'You may call the same command with a justification, call a different command, or ask the user ' +
+    'if there is no way around it.';
+/**
+ * §7 — the clause that makes a suggestion actionable. Verbatim in substance from the spec:
+ * *"`gth_edit_file` does this and is already approved at this level, so it will not interrupt the
+ * user."*
+ */
+export function buildGrantedAlternativeClause(toolName) {
+    return `\`${toolName}\` does this and is already approved at this level, so it will not interrupt the user.`;
+}
+/**
+ * Build the rejection message handed back to the model as the refused call's tool result.
+ *
+ * §7 shape, each part omitted when it does not apply:
+ * 1. who refused what;
+ * 2. the rater's explanation, when a rating exists;
+ * 3. the three moves — always;
+ * 4. the granted alternative plus the no-approval-needed clause, when the rater named one.
+ */
+export function buildRejectionMessage(options) {
+    const target = options.toolName ? `your call to ${options.toolName}` : 'your command';
+    const opener = options.source === 'rater'
+        ? `The auto-rater rejected ${target}.`
+        : `The user rejected ${target}.`;
+    const parts = [opener];
+    const reason = options.verdict?.reason?.trim();
+    if (reason) {
+        parts.push(`Explanation: ${reason}`);
+    }
+    parts.push(REJECTION_MOVES);
+    const suggested = options.verdict?.suggestedTool?.trim();
+    if (suggested) {
+        parts.push(buildGrantedAlternativeClause(suggested));
+    }
+    return parts.join(' ');
+}
+//# sourceMappingURL=rejection.js.map

package/dist/core/shell/rejection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rejection.js","sourceRoot":"","sources":["../../../src/core/shell/rejection.ts"],"names":[],"mappings":"AAuCA,8DAA8D;AAC9D,MAAM,CAAC,MAAM,eAAe,GAC1B,gGAAgG;IAChG,+BAA+B,CAAC;AAElC;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,QAAgB;IAC5D,OAAO,KAAK,QAAQ,wFAAwF,CAAC;AAC/G,CAAC;AAiBD;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;IACtF,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,KAAK,OAAO;QACxB,CAAC,CAAC,2BAA2B,MAAM,GAAG;QACtC,CAAC,CAAC,qBAAqB,MAAM,GAAG,CAAC;IAErC,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACzD,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC"}

package/dist/core/toolCallRepair/grammar.d.ts

@@ -0,0 +1,41 @@
+/** Legacy marker some models emit after a serialized JSON tool request. */
+export declare const END_TOOL_REQUEST = "[END_TOOL_REQUEST]";
+/** Harmony stream marker that introduces the target channel before a tool call. */
+export declare const HARMONY_CHANNEL_MARKER = "<|channel|>";
+/** Harmony stream marker that may separate the header from the JSON payload. */
+export declare const HARMONY_MESSAGE_MARKER = "<|message|>";
+/** Harmony stream marker that may close a serialized tool-call payload. */
+export declare const HARMONY_CALL_MARKER = "<|call|>";
+/**
+ * Harmony marker real gpt-oss emits in place of the reference grammar's literal `code` token —
+ * e.g. `<|constrain|>json` declares the tool-call payload format. (EXT-43.)
+ */
+export declare const HARMONY_CONSTRAIN_MARKER = "<|constrain|>";
+/** Tool names in bracket/plain-text repairs intentionally match provider-safe ids only. */
+export declare function isPlainTextToolNameChar(char: string | undefined): boolean;
+/**
+ * Harmony tool names may be NAMESPACED with dots (real gpt-oss emits `to=functions.get_weather`),
+ * so the Harmony header scanner accepts `.` on top of the provider-safe id chars. This is a
+ * Harmony-only widening (EXT-43): the bracket/XML-ish dialects keep {@link isPlainTextToolNameChar}
+ * unchanged so their prose-safety is untouched. The final dot-segment is the tool name matched
+ * against the allow-list (see {@link finalDotSegment}).
+ */
+export declare function isHarmonyToolNameChar(char: string | undefined): boolean;
+/**
+ * The tool name for a (possibly namespaced) Harmony target: the final dot-segment.
+ * `functions.get_weather` → `get_weather`; `functions.tools.get_weather` → `get_weather`; a dotless
+ * `get_weather` → itself. Returns `''` for a trailing-dot / empty final segment (rejected upstream).
+ */
+export declare function finalDotSegment(name: string): string;
+/** Skips spaces and tabs only, preserving line boundaries for grammar decisions. */
+export declare function skipHorizontalWhitespace(text: string, start: number): number;
+/** Skips all JavaScript whitespace when line structure is no longer meaningful. */
+export declare function skipWhitespace(text: string, start: number): number;
+/** Consumes either Unix or Windows line endings and returns the first offset after them. */
+export declare function consumeLineBreak(text: string, start: number): number | null;
+/**
+ * Finds the exclusive end offset of a balanced JSON object starting at `start`. Returns null if
+ * the object never closes, or (when `maxPayloadBytes` is set) as soon as the scan runs past the
+ * cap — the payload-size gate that keeps a runaway blob from being treated as a tool call.
+ */
+export declare function findJsonObjectEnd(text: string, start: number, maxPayloadBytes?: number): number | null;