@gaunt-sloth/review 2.0.0-alpha.4 → 2.0.0-alpha.40

package/README.md

@@ -1,77 +1,124 @@
 # @gaunt-sloth/review
 
-Review and question-answering functionality for Gaunt Sloth.
+The review engine behind `gth review` / `gth pr`, packaged for embedding: run an AI code review
+programmatically from your own tool or pipeline, or via the standalone `gaunt-sloth-review`
+binary. Also contains the content/requirement sources (GitHub, local git diff, Jira, file, text) that feed it.
+
+**When to depend on this package** — you want review results inside your own process or a
+minimal CI job. It has no dependency on `commander`, MCP, or A2A, so the install stays small.
+If you want the interactive CLI (chat/code sessions, TUI, MCP tools), install the fat
+[`gaunt-sloth`](https://www.npmjs.com/package/gaunt-sloth) app instead — it wires this same
+module into `gth review` and `gth pr`.
 
 ## Installation
 
-This package does not include any AI provider packages. This is by design to
-keep the install minimal and avoid pulling in providers you don't use. Install
-the review package together with the provider required by your configuration:
+AI providers are not bundled (they are optional peer dependencies of
+[`@gaunt-sloth/core`](https://www.npmjs.com/package/@gaunt-sloth/core)); install the one your
+config uses:
 
 ```bash
 # OpenRouter / OpenAI
-npm install -g @gaunt-sloth/review @langchain/openai
+npm install @gaunt-sloth/review @langchain/openai
 
 # Google (Vertex AI / AI Studio)
-npm install -g @gaunt-sloth/review @langchain/google
+npm install @gaunt-sloth/review @langchain/google
 
 # Anthropic
-npm install -g @gaunt-sloth/review @langchain/anthropic
+npm install @gaunt-sloth/review @langchain/anthropic
 
 # Groq
-npm install -g @gaunt-sloth/review @langchain/groq
+npm install @gaunt-sloth/review @langchain/groq
 ```
 
-See [`@gaunt-sloth/core`](../core) for the full list of supported providers.
+## Embedding: review a diff programmatically
+
+I want to run a Gaunt Sloth review over a diff from my own Node script and fail the build on a
+bad rating. Create `.gsloth.config.json` next to the script:
+
+```json
+{
+  "llm": { "type": "anthropic", "model": "claude-sonnet-4-5" },
+  "commands": {
+    "review": { "rating": { "enabled": true, "passThreshold": 6 } }
+  }
+}
+```
 
-## Contents
+Then run a review over a diff (`node review-diff.mjs change.diff`):
+
+```js
+// review-diff.mjs
+import { readFileSync } from 'node:fs';
+import { initConfig } from '@gaunt-sloth/core/config.js';
+import {
+  readBackstory,
+  readGuidelines,
+  readReviewInstructions,
+} from '@gaunt-sloth/core/utils/llmUtils.js';
+import { review } from '@gaunt-sloth/review';
+
+const config = await initConfig({}); // loads .gsloth.config.* from the working directory
+const preamble = [readBackstory(config), readGuidelines(config), readReviewInstructions(config)]
+  .filter(Boolean)
+  .join('\n');
+const diff = readFileSync(process.argv[2], 'utf8');
+
+await review('embedded-review', preamble, diff, config);
+process.exit(process.exitCode ?? 0);
+```
 
-- Review module (`reviewModule`) — diff and content review orchestration
-- Question answering module (`questionAnsweringModule`)
-- Command utilities (`commandUtils`)
-- Content and requirement sources: `file`, `text`, `ghPrDiff`, `ghIssue`, `jiraIssue`, `jiraIssueLegacy`
-- Jira client
-- Review rate middleware
+The review text is written to stdout, opening with one `Gaunt Sloth · review · <model> (<provider>)`
+header line naming the command and the model that served the run. An embedder gets that attribution
+by default, so anything posting this output identifies its reviewer without adding a header of its
+own; `output.header: "none"` on the config you pass to `review()` is the one setting that removes
+it, for a caller piping the review into a template of their own. With rating enabled, `review()`
+sets `process.exitCode = 1` when the rating comes back below `passThreshold` (or when the model
+fails to produce a rating), so the script exits non-zero exactly when `gth review` would. Those
+two — the attributed text on stdout and the exit code — are the whole embed contract.
+Configuration (provider, prompts, rating thresholds) is the standard Gaunt Sloth config, see
+[the configuration guide](https://github.com/pukeko-robotics/gaunt-sloth/blob/main/docs/configuration/index.md).
 
-## CLI
+This exact flow is verified by the workspace embed e2e (`pnpm run test:embed`), which packs the
+published tarballs and runs the snippet above from a temp-dir consumer against a stub model.
 
-The package ships a standalone binary `gaunt-sloth-review` for CI-friendly reviews that does not depend on `commander`. This makes it suitable for embedding in pipelines where a minimal footprint is preferred.
+## Standalone CLI: `gaunt-sloth-review`
+
+The package's one binary, for CI-friendly reviews with a minimal footprint:
 
 ```bash
-gaunt-sloth-review <pr-number> [requirement-ids...]
+gaunt-sloth-review 123          # review PR 123 (uses the configured content source, GitHub by default)
+gaunt-sloth-review 123 45       # ...with requirements from issue 45
 gaunt-sloth-review --version
 ```
 
 ### Identity profiles
 
-To use a different config profile (e.g. separate provider/auth for CI vs local),
-set the `GSLOTH_IDENTITY_PROFILE` environment variable:
+To use a different config profile (e.g. separate provider/auth for CI vs local), set the
+`GSLOTH_IDENTITY_PROFILE` environment variable:
 
 ```bash
 GSLOTH_IDENTITY_PROFILE=review gaunt-sloth-review 123
 ```
 
-This loads config from `.gsloth-settings/review/` instead of the default
-`.gsloth/` directory. Useful when CI uses different credentials or a different
-LLM provider than local development.
-
-## Dependencies
-
-- `@gaunt-sloth/core` (required)
-
-No MCP, no A2A, no commander. This is intentional to keep the package lightweight for CI use.
+This loads config from `.gsloth-settings/review/` instead of the default `.gsloth/` directory.
+Useful when CI uses different credentials or a different LLM provider than local development.
 
 ## Exports
 
-```js
-import { reviewModule } from '@gaunt-sloth/review/reviewModule.js';
-import { questionAnsweringModule } from '@gaunt-sloth/review/questionAnsweringModule.js';
-import { commandUtils } from '@gaunt-sloth/review/commandUtils.js';
-```
+- `@gaunt-sloth/review` (the root export) is the public API: the review module (`review`,
+  `ReviewContext`), `commandUtils`, and the `gh` read-file tool — plus, deliberately, the whole
+  `@gaunt-sloth/core` config barrel (`initConfig`, `GthConfig`, `DEFAULT_CONFIG`, …), re-exported
+  so an embedder can resolve config from the review root without importing core directly.
+  This surface is what the embed example above and the fat CLI use.
+- `@gaunt-sloth/review/<path>.js` deep paths (e.g.
+  `@gaunt-sloth/review/modules/reviewModule.js`) mirror the package's internal `dist/` layout
+  1:1 and are deliberately kept open for reach-in. They are supported at your own risk: internal
+  files can move between alpha/minor versions without a deprecation cycle. Prefer the root
+  export where it suffices.
 
 ## Related packages
 
-- [`@gaunt-sloth/core`](../core) — Core utilities, config, and agent infrastructure
-- [`@gaunt-sloth/agent`](../agent) — Agent runtime: built-in tools, filesystem toolkit, middleware registry, API server, AG-UI, MCP, and A2A integration
-- [`@gaunt-sloth/review`](../review) — Review and Q&A modules with standalone CLI (this package)
-- [`gaunt-sloth`](../app) — Main CLI application
+- [`@gaunt-sloth/core`](https://www.npmjs.com/package/@gaunt-sloth/core) — Core utilities, config, and agent infrastructure ([source](https://github.com/pukeko-robotics/gaunt-sloth/tree/main/packages/core))
+- [`@gaunt-sloth/agent`](https://www.npmjs.com/package/@gaunt-sloth/agent) — Agent runtime: built-in tools, filesystem toolkit, middleware registry, API server, AG-UI, MCP, and A2A integration ([source](https://github.com/pukeko-robotics/gaunt-sloth/tree/main/packages/agent))
+- [`@gaunt-sloth/batch`](https://www.npmjs.com/package/@gaunt-sloth/batch) — Batch / eval / workflow runtime ([source](https://github.com/pukeko-robotics/gaunt-sloth/tree/main/packages/batch))
+- [`gaunt-sloth`](https://www.npmjs.com/package/gaunt-sloth) — Main CLI application ([source](https://github.com/pukeko-robotics/gaunt-sloth/tree/main/packages/app))

package/cli.js

@@ -25,8 +25,12 @@ setEntryPoint(import.meta.url);
 import { initConfig } from '@gaunt-sloth/core/config.js';
 import { review } from '#src/modules/reviewModule.js';
 import { displayError } from '@gaunt-sloth/core/utils/consoleUtils.js';
-import { getContentFromSource, getRequirementsFromSource } from '#src/commands/commandUtils.js';
-import { buildSystemMessages } from '@gaunt-sloth/core/utils/llmUtils.js';
+import {
+  getContentFromSource,
+  getRequirementsFromSource,
+  getReviewPreamble,
+  resolvePrIdFromArg,
+} from '#src/commands/commandUtils.js';
 
 async function main() {
   try {
@@ -53,18 +57,20 @@ async function main() {
       }
     }
 
-    // Build preamble from system messages
-    const preamble = buildSystemMessages(config, 'pr');
-    const preambleText = preamble
-      .map((m) => (typeof m.content === 'string' ? m.content : ''))
-      .join('\n');
+    // Build the review preamble (backstory + guidelines + review instructions + optional
+    // system prompt), the same composition `gth review` / `gth pr` use.
+    const preambleText = getReviewPreamble(config);
 
     // Combine requirements and content for the review
     const diffWithReqs = requirements
       ? `Requirements:\n${requirements}\nDiff:\n${content}`
       : content;
 
-    await review('pr-review', preambleText, diffWithReqs, config, 'pr');
+    // Pass the PR id on so GitHub-only tools address the PR explicitly instead of trying to
+    // resolve it from the checked-out branch, which a CI runner's detached HEAD cannot provide.
+    await review('pr-review', preambleText, diffWithReqs, config, 'pr', undefined, {
+      prId: resolvePrIdFromArg(contentArg),
+    });
   } catch (error) {
     displayError(error instanceof Error ? error.message : String(error));
     process.exit(1);

package/dist/commands/commandUtils.d.ts

@@ -1,14 +1,21 @@
 import type { GthConfig } from '@gaunt-sloth/core/config.js';
+/**
+ * Compose the review system preamble the way the fat CLI's `gth review` / `gth pr` do:
+ * backstory + guidelines + review instructions + the optional project system prompt, each
+ * segment honouring the GS2-43 `prompts.*` config. Empty segments are dropped rather than
+ * left as blank lines (the shape the README embed example documents).
+ */
+export declare function getReviewPreamble(config: GthConfig): string;
 /**
  * Requirement sources. Expected to be in `.sources/` dir.
  * Aliases are mapped to actual sources in this file
  */
 export declare const REQUIREMENTS_SOURCES: {
-    readonly 'jira-legacy': "jiraIssueLegacySource.js";
-    readonly jira: "jiraIssueSource.js";
-    readonly github: "ghIssueSource.js";
-    readonly text: "textSource.js";
-    readonly file: "fileSource.js";
+    readonly 'jira-legacy': 'jiraIssueLegacySource.js';
+    readonly jira: 'jiraIssueSource.js';
+    readonly github: 'ghIssueSource.js';
+    readonly text: 'textSource.js';
+    readonly file: 'fileSource.js';
 };
 export type RequirementSourceType = keyof typeof REQUIREMENTS_SOURCES;
 /**
@@ -16,10 +23,21 @@ export type RequirementSourceType = keyof typeof REQUIREMENTS_SOURCES;
  * Aliases are mapped to actual sources in this file
  */
 export declare const CONTENT_SOURCES: {
-    readonly github: "ghPrDiffSource.js";
-    readonly text: "textSource.js";
-    readonly file: "fileSource.js";
+    readonly github: 'ghPrDiffSource.js';
+    readonly git: 'gitDiffSource.js';
+    readonly text: 'textSource.js';
+    readonly file: 'fileSource.js';
 };
 export type ContentSourceType = keyof typeof CONTENT_SOURCES;
 export declare function getRequirementsFromSource(requirementSource: RequirementSourceType | undefined, requirementsId: string | undefined, config: GthConfig): Promise<string>;
 export declare function getContentFromSource(contentSource: ContentSourceType | undefined, contentId: string | undefined, config: GthConfig): Promise<string>;
+/**
+ * Reads a PR id out of the CLI's first positional argument, which is a PR number in the GitHub
+ * flow and arbitrary content otherwise.
+ *
+ * The id binds GitHub-only review tools to the PR under review. Without it they fall back to
+ * resolving the PR from the checked-out branch, which no CI runner has: the standard checkout
+ * actions leave the workspace on a detached HEAD, so the fallback cannot succeed there and the
+ * tools degrade to unavailable.
+ */
+export declare function resolvePrIdFromArg(contentArg: string | undefined): string | undefined;

package/dist/commands/commandUtils.js

@@ -1,5 +1,21 @@
 import { displayError } from '@gaunt-sloth/core/utils/consoleUtils.js';
-import { wrapContent } from '@gaunt-sloth/core/utils/llmUtils.js';
+import { readBackstory, readGuidelines, readReviewInstructions, readSystemPrompt, wrapContent, } from '@gaunt-sloth/core/utils/llmUtils.js';
+/**
+ * Compose the review system preamble the way the fat CLI's `gth review` / `gth pr` do:
+ * backstory + guidelines + review instructions + the optional project system prompt, each
+ * segment honouring the GS2-43 `prompts.*` config. Empty segments are dropped rather than
+ * left as blank lines (the shape the README embed example documents).
+ */
+export function getReviewPreamble(config) {
+    return [
+        readBackstory(config),
+        readGuidelines(config),
+        readReviewInstructions(config),
+        readSystemPrompt(config),
+    ]
+        .filter(Boolean)
+        .join('\n');
+}
 /**
  * Requirement sources. Expected to be in `.sources/` dir.
  * Aliases are mapped to actual sources in this file
@@ -17,6 +33,7 @@ export const REQUIREMENTS_SOURCES = {
  */
 export const CONTENT_SOURCES = {
     github: 'ghPrDiffSource.js',
+    git: 'gitDiffSource.js',
     text: 'textSource.js',
     file: 'fileSource.js',
 };
@@ -26,7 +43,21 @@ export async function getRequirementsFromSource(requirementSource, requirementsI
 }
 export async function getContentFromSource(contentSource, contentId, config) {
     const content = await getFromSource(contentSource, contentId, (config?.contentSourceConfig ?? {})[contentSource], CONTENT_SOURCES);
-    return wrapContent(content, contentSource, contentSource === 'github' ? 'GitHub diff' : 'content');
+    return wrapContent(content, contentSource, contentSource === 'github' ? 'GitHub diff' : contentSource === 'git' ? 'git diff' : 'content');
+}
+/** A PR id is a bare number; anything else is literal content (a diff, a file path, text). */
+const PR_ID_PATTERN = /^\d+$/;
+/**
+ * Reads a PR id out of the CLI's first positional argument, which is a PR number in the GitHub
+ * flow and arbitrary content otherwise.
+ *
+ * The id binds GitHub-only review tools to the PR under review. Without it they fall back to
+ * resolving the PR from the checked-out branch, which no CI runner has: the standard checkout
+ * actions leave the workspace on a detached HEAD, so the fallback cannot succeed there and the
+ * tools degrade to unavailable.
+ */
+export function resolvePrIdFromArg(contentArg) {
+    return contentArg !== undefined && PR_ID_PATTERN.test(contentArg) ? contentArg : undefined;
 }
 async function getFromSource(source, id, 
 // eslint-disable-next-line @typescript-eslint/no-explicit-any

package/dist/commands/commandUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"commandUtils.js","sourceRoot":"","sources":["../../src/commands/commandUtils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AAEvE,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAElE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,aAAa,EAAE,0BAA0B;IACzC,IAAI,EAAE,oBAAoB;IAC1B,MAAM,EAAE,kBAAkB;IAC1B,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,eAAe;CACb,CAAC;AAIX;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,MAAM,EAAE,mBAAmB;IAC3B,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,eAAe;CACb,CAAC;AAIX,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,iBAAoD,EACpD,cAAkC,EAClC,MAAiB;IAEjB,MAAM,YAAY,GAAG,MAAM,aAAa,CACtC,iBAAiB,EACjB,cAAc,EACd,CAAC,MAAM,EAAE,uBAAuB,IAAI,EAAE,CAAC,CAAC,iBAA2B,CAAC,EACpE,oBAAoB,CACrB,CAAC;IACF,OAAO,WAAW,CAAC,YAAY,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,aAA4C,EAC5C,SAA6B,EAC7B,MAAiB;IAEjB,MAAM,OAAO,GAAG,MAAM,aAAa,CACjC,aAAa,EACb,SAAS,EACT,CAAC,MAAM,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC,aAAuB,CAAC,EAC5D,eAAe,CAChB,CAAC;IACF,OAAO,WAAW,CAChB,OAAO,EACP,aAAa,EACb,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CACvD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,MAA6D,EAC7D,EAAsB;AACtB,8DAA8D;AAC9D,MAAW,EACX,sBAA4E;IAE5E,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,oCAAoC;QACpC,IAAI,sBAAsB,CAAC,MAA6C,CAAC,EAAE,CAAC;YAC1E,MAAM,UAAU,GAAG,gBAAgB,sBAAsB,CAAC,MAA6C,CAAC,EAAE,CAAC;YAC3G,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YACzC,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,mBAAmB,MAAM,0BAA0B,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACxC,yCAAyC;QACzC,OAAO,MAAO,MAAsD,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}
+{"version":3,"file":"commandUtils.js","sourceRoot":"","sources":["../../src/commands/commandUtils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AAEvE,OAAO,EACL,aAAa,EACb,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAChB,WAAW,GACZ,MAAM,qCAAqC,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IACjD,OAAO;QACL,aAAa,CAAC,MAAM,CAAC;QACrB,cAAc,CAAC,MAAM,CAAC;QACtB,sBAAsB,CAAC,MAAM,CAAC;QAC9B,gBAAgB,CAAC,MAAM,CAAC;KACzB;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,aAAa,EAAE,0BAA0B;IACzC,IAAI,EAAE,oBAAoB;IAC1B,MAAM,EAAE,kBAAkB;IAC1B,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,eAAe;CACb,CAAC;AAIX;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,MAAM,EAAE,mBAAmB;IAC3B,GAAG,EAAE,kBAAkB;IACvB,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,eAAe;CACb,CAAC;AAIX,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,iBAAoD,EACpD,cAAkC,EAClC,MAAiB;IAEjB,MAAM,YAAY,GAAG,MAAM,aAAa,CACtC,iBAAiB,EACjB,cAAc,EACd,CAAC,MAAM,EAAE,uBAAuB,IAAI,EAAE,CAAC,CAAC,iBAA2B,CAAC,EACpE,oBAAoB,CACrB,CAAC;IACF,OAAO,WAAW,CAAC,YAAY,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,aAA4C,EAC5C,SAA6B,EAC7B,MAAiB;IAEjB,MAAM,OAAO,GAAG,MAAM,aAAa,CACjC,aAAa,EACb,SAAS,EACT,CAAC,MAAM,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC,aAAuB,CAAC,EAC5D,eAAe,CAChB,CAAC;IACF,OAAO,WAAW,CAChB,OAAO,EACP,aAAa,EACb,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAC9F,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,aAAa,GAAG,OAAO,CAAC;AAE9B;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAA8B;IAC/D,OAAO,UAAU,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7F,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,MAA6D,EAC7D,EAAsB;AACtB,8DAA8D;AAC9D,MAAW,EACX,sBAA4E;IAE5E,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,oCAAoC;QACpC,IAAI,sBAAsB,CAAC,MAA6C,CAAC,EAAE,CAAC;YAC1E,MAAM,UAAU,GAAG,gBAAgB,sBAAsB,CAAC,MAA6C,CAAC,EAAE,CAAC;YAC3G,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YACzC,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,mBAAmB,MAAM,0BAA0B,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACxC,yCAAyC;QACzC,OAAO,MAAO,MAAsD,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/helpers/jira/jiraClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"jiraClient.js","sourceRoot":"","sources":["../../../src/helpers/jira/jiraClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,wCAAwC,CAAC;AAG7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC;AAUjF,MAAM,UAAU,kBAAkB,CAAC,MAAkC;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,CAAC;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,qHAAqH,CACtH,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,GAAG,CAAC,sBAAsB,IAAI,MAAM,CAAC,eAAe,CAAC;IAC7E,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO;YACL,OAAO;YACP,eAAe;YACf,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,IAAI,MAAM,CAAC,QAAQ,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,sHAAsH,CACvH,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC,KAAK,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,sHAAsH,CACvH,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;QACP,QAAQ;QACR,KAAK;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAA+B;IAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe;QACvC,CAAC,CAAC,SAAS,MAAM,CAAC,eAAe,EAAE;QACnC,CAAC,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAEpF,OAAO;QACL,aAAa,EAAE,UAAU;QACzB,MAAM,EAAE,iCAAiC;QACzC,iBAAiB,EAAE,gBAAgB;QACnC,cAAc,EAAE,kBAAkB;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAA+B,EAC/B,QAAgB,EAChB,UAAuB,EAAE,EACzB,YAAY,GAAG,IAAI;IAEnB,MAAM,MAAM,GAAG,qCAAqC,MAAM,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;IAChF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvC,IAAI,iBAAgD,CAAC;IACrD,IAAI,YAAY,EAAE,CAAC;QACjB,iBAAiB,GAAG,IAAI,iBAAiB,CACvC,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,EAAE,CACnE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YACnC,GAAG,OAAO;YACV,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,GAAG,OAAO,CAAC,OAAO;aACnB;SACF,CAAC,CAAC;QAEH,IAAI,iBAAiB,EAAE,CAAC;YACtB,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,YAAY,GAAG,8BAA8B,QAAQ,CAAC,UAAU,EAAE,CAAC;YACvE,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,YAAY,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,sDAAsD;YACxD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAgB,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,iBAAiB,EAAE,CAAC;YACtB,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"jiraClient.js","sourceRoot":"","sources":["../../../src/helpers/jira/jiraClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,wCAAwC,CAAC;AAG7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC;AAUjF,MAAM,UAAU,kBAAkB,CAAC,MAAkC;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,CAAC;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,qHAAqH,CACtH,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,GAAG,CAAC,sBAAsB,IAAI,MAAM,CAAC,eAAe,CAAC;IAC7E,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO;YACL,OAAO;YACP,eAAe;YACf,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,IAAI,MAAM,CAAC,QAAQ,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,sHAAsH,CACvH,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC,KAAK,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,sHAAsH,CACvH,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;QACP,QAAQ;QACR,KAAK;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAA+B;IAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe;QACvC,CAAC,CAAC,SAAS,MAAM,CAAC,eAAe,EAAE;QACnC,CAAC,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAEpF,OAAO;QACL,aAAa,EAAE,UAAU;QACzB,MAAM,EAAE,iCAAiC;QACzC,iBAAiB,EAAE,gBAAgB;QACnC,cAAc,EAAE,kBAAkB;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAA+B,EAC/B,QAAgB,EAChB,OAAO,GAAgB,EAAE,EACzB,YAAY,GAAG,IAAI;IAEnB,MAAM,MAAM,GAAG,qCAAqC,MAAM,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;IAChF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvC,IAAI,iBAAgD,CAAC;IACrD,IAAI,YAAY,EAAE,CAAC;QACjB,iBAAiB,GAAG,IAAI,iBAAiB,CACvC,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,EAAE,CACnE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YACnC,GAAG,OAAO;YACV,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,GAAG,OAAO,CAAC,OAAO;aACnB;SACF,CAAC,CAAC;QAEH,IAAI,iBAAiB,EAAE,CAAC;YACtB,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,YAAY,GAAG,8BAA8B,QAAQ,CAAC,UAAU,EAAE,CAAC;YACvE,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,YAAY,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,sDAAsD;YACxD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAgB,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,iBAAiB,EAAE,CAAC;YACtB,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/modules/reviewHeading.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Build the review's opening header: `Gaunt Sloth · <command> · <model> (<provider>)`, plus a
+ * trailing newline so the review body does not start flush against it.
+ *
+ * The line is assembled by the SHARED {@link runHeaderLine}, and the model half by the SHARED
+ * `model (provider)` spelling ({@link modelProviderLabel}) — the same two the agent's own run
+ * header uses, rather than a second spelling of the same facts.
+ *
+ * Both halves of the model are allowed to be missing, and neither prints a placeholder:
+ *
+ * - **No provider** — a `.gsloth.config.js` module config hands the loader an already-built
+ *   `BaseChatModel` and legitimately has no provider string. The bare model prints; there is no
+ *   `(unknown)` and no empty `()`.
+ * - **No model** — the label is dropped entirely and the line ends after the command. A provider
+ *   name on its own would sit exactly where a model name sits and read as one, and a misidentified
+ *   model in a review someone later quotes is worse than an absent one. That is the same
+ *   drop-rather-than-mislead rule the banner applies to a version that does not fit.
+ */
+export declare function reviewHeadingBlock(command: 'pr' | 'review', model?: string, provider?: string): string;

package/dist/modules/reviewHeading.js

@@ -0,0 +1,60 @@
+/**
+ * @module reviewHeading
+ * REL-12 — the line every `gth review` / `gth pr` run opens with, so a reader of the output knows
+ * whose review it is and what produced it.
+ *
+ * User-facing CLI feedback, so it is governed by `maintenance/ux-guidelines.md` § The run header,
+ * and it serves three of the Design Language principles: **DL-4** (transparency — a
+ * reader of the output knows what produced it), **DL-6** (cross-surface consistency — it renders
+ * through the shared `runHeaderLine`, so the review document and the agent's own run header are one
+ * string and not two that happen to match), and **DL-7** (graceful degradation — drop the label
+ * rather than mislead, exactly as the banner drops a version that will not fit).
+ *
+ * ## Why the product emits this and not the workflow
+ *
+ * The review is usually read somewhere the command is not visible: a PR comment posted by a bot
+ * account, a `review.md` attached to a ticket, a CI log. Stripped of the invocation, an unlabelled
+ * AI review on a pull request is simply assumed to be whichever AI reviewer the reader already
+ * knows. Putting the attribution in the CLI's own output means any workflow that runs `gth` and
+ * posts what it produced carries it, with no wiring of its own.
+ *
+ * ## Why it names the command, and why that is one line and no more
+ *
+ * The word after the product name is the command the USER typed — `review` or `pr` — which is the
+ * one thing a reader of a detached review cannot recover for themselves. It is the same header
+ * every other command opens with, so a reader who has seen one has seen all of them.
+ *
+ * A review is read for its findings. Everything above the first finding pushes that finding down,
+ * so the header is one line: no markdown heading, no rule, no box, no timestamp, no version, no
+ * restated repo/branch/PR. The cost of a bigger banner is paid by every reader of every review.
+ *
+ * It is not, however, unconditional. `output.header: none` drops it (the gate is at the emission
+ * site in `reviewModule.ts`, not here — this module builds the line and does not decide whether it
+ * is shown), because a caller piping a review into their own template needs a byte-clean stream.
+ * That rung is opt-in precisely so the reasoning above survives for everyone who does not set it.
+ */
+import { modelProviderLabel } from '@gaunt-sloth/core/core/modelLabel.js';
+import { runHeaderLine } from '@gaunt-sloth/core/core/runHeader.js';
+/**
+ * Build the review's opening header: `Gaunt Sloth · <command> · <model> (<provider>)`, plus a
+ * trailing newline so the review body does not start flush against it.
+ *
+ * The line is assembled by the SHARED {@link runHeaderLine}, and the model half by the SHARED
+ * `model (provider)` spelling ({@link modelProviderLabel}) — the same two the agent's own run
+ * header uses, rather than a second spelling of the same facts.
+ *
+ * Both halves of the model are allowed to be missing, and neither prints a placeholder:
+ *
+ * - **No provider** — a `.gsloth.config.js` module config hands the loader an already-built
+ *   `BaseChatModel` and legitimately has no provider string. The bare model prints; there is no
+ *   `(unknown)` and no empty `()`.
+ * - **No model** — the label is dropped entirely and the line ends after the command. A provider
+ *   name on its own would sit exactly where a model name sits and read as one, and a misidentified
+ *   model in a review someone later quotes is worse than an absent one. That is the same
+ *   drop-rather-than-mislead rule the banner applies to a version that does not fit.
+ */
+export function reviewHeadingBlock(command, model, provider) {
+    const label = model?.trim() ? modelProviderLabel(model, provider) : undefined;
+    return `${runHeaderLine(command, label)}\n`;
+}
+//# sourceMappingURL=reviewHeading.js.map

package/dist/modules/reviewHeading.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewHeading.js","sourceRoot":"","sources":["../../src/modules/reviewHeading.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAwB,EACxB,KAAc,EACd,QAAiB;IAEjB,MAAM,KAAK,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC;AAC9C,CAAC"}

package/dist/modules/reviewModule.d.ts

@@ -5,4 +5,16 @@ export interface ReviewContext {
     /** PR number under review; undefined in `gth pr` discovery mode (current branch's PR). */
     prId?: string;
 }
-export declare function review(source: string, preamble: string, diff: string, config: GthConfig, command?: 'pr' | 'review', resolvers?: AgentResolvers, reviewContext?: ReviewContext): Promise<void>;
+/**
+ * Run a review of `diff` and print the verdict.
+ *
+ * @param source - Source label, used for the output file name.
+ * @param _preamble - Ignored (GS2-79); see the body comment. Retained positionally so existing
+ *   callers need no change, exactly as `runSingleShot` retains its own.
+ * @param diff - The content under review.
+ * @param config - The resolved config.
+ * @param command - `review` or `pr`; selects the command config and the agent's mode prompt.
+ * @param resolvers - Optional agent resolvers (tools/middleware).
+ * @param reviewContext - Extra review context (binds GitHub-only tools to the PR under review).
+ */
+export declare function review(source: string, _preamble: string, diff: string, config: GthConfig, command?: 'pr' | 'review', resolvers?: AgentResolvers, reviewContext?: ReviewContext): Promise<void>;

package/dist/modules/reviewModule.js

@@ -1,73 +1,152 @@
-import { defaultStatusCallback, displayDebug, displayError, displayInfo, displaySuccess, displayWarning, flushSessionLog, initSessionLogging, stopSessionLogging, } from '@gaunt-sloth/core/utils/consoleUtils.js';
+import { isGhReadFileToolEnabled } from '@gaunt-sloth/core/config.js';
+import { defaultStatusCallback, display, displayDebug, displayError, displayInfo, displaySuccess, displayWarning, flushSessionLog, initSessionLogging, stopSessionLogging, } from '@gaunt-sloth/core/utils/consoleUtils.js';
+import { reviewHeadingBlock } from '#src/modules/reviewHeading.js';
 import { getCommandOutputFilePath } from '#src/utils/fileUtils.js';
-import { HumanMessage, SystemMessage } from '@langchain/core/messages';
+import { HumanMessage } from '@langchain/core/messages';
 import { GthAgentRunner } from '@gaunt-sloth/core/core/GthAgentRunner.js';
 import { MemorySaver } from '@langchain/langgraph';
 import { ProgressIndicator } from '@gaunt-sloth/core/utils/ProgressIndicator.js';
 import { createReviewRateMiddleware, REVIEW_RATE_ARTIFACT_KEY, } from '#src/middleware/reviewRateMiddleware.js';
 import { deleteArtifact, getArtifact } from '@gaunt-sloth/core/state/artifactStore.js';
-import { setExitCode } from '@gaunt-sloth/core/utils/systemUtils.js';
+import { setExitCode, stdout } from '@gaunt-sloth/core/utils/systemUtils.js';
+import { ApprovalStopError, approvalStopRows } from '@gaunt-sloth/core/core/shell/approvalStop.js';
 import { get as getGhReadFileTool, GTH_GH_READ_FILE_TOOL_NAME } from '#src/tools/ghReadFileTool.js';
-export async function review(source, preamble, diff, config, command = 'review', resolvers, reviewContext) {
+/**
+ * Run a review of `diff` and print the verdict.
+ *
+ * @param source - Source label, used for the output file name.
+ * @param _preamble - Ignored (GS2-79); see the body comment. Retained positionally so existing
+ *   callers need no change, exactly as `runSingleShot` retains its own.
+ * @param diff - The content under review.
+ * @param config - The resolved config.
+ * @param command - `review` or `pr`; selects the command config and the agent's mode prompt.
+ * @param resolvers - Optional agent resolvers (tools/middleware).
+ * @param reviewContext - Extra review context (binds GitHub-only tools to the PR under review).
+ */
+export async function review(source, 
+// GS2-79: `_preamble` is retained for signature stability but is NO LONGER injected as a leading
+// SystemMessage. Both agent backends COMPOSE the full system prompt themselves — backstory +
+// guidelines + the per-command mode prompt + system prompt — and hand it to createAgent as
+// `systemPrompt`; for `review`/`pr` that mode prompt IS the review instructions (core's
+// `readModePrompt`). Passing this preamble as well produced TWO system messages, which
+// `@langchain/anthropic` rejects outright ("System messages are only permitted as the first
+// passed message"), breaking every `gth review` and `gth pr` run on Anthropic on both backends
+// (Google/OpenAI silently merged them, so only Anthropic showed it). The same removal was made in
+// `runSingleShot` and `conversation` for the same reason.
+//
+// Dropping it is content-preserving ONLY because the agent selects the review instructions for
+// `review`/`pr` itself; composing the CHAT prompt there and removing the preamble would silently
+// turn a review into a chat. `GthModePromptSelection.spec.ts` pins that.
+_preamble, diff, config, command = 'review', resolvers, reviewContext) {
     const progressIndicator = config.streamOutput ? undefined : new ProgressIndicator('Reviewing.');
-    const messages = [new SystemMessage(preamble), new HumanMessage(diff)];
-    // REL-2: optionally give the review agent a `gh api` file-read tool so it can fetch the FULL
-    // contents of a file when the PR diff truncates large changes. Only added in a GitHub PR
-    // context (the content source resolves to GitHub); a graceful no-op otherwise. Reads through
-    // the GitHub API rather than the workspace filesystem, so it is safe under pull_request_target.
-    maybeAddGhReadFileTool(config, command, reviewContext?.prId);
-    // Prepare logging path (if enabled by config)
-    const filePath = getCommandOutputFilePath(config, source);
-    if (filePath) {
-        initSessionLogging(filePath, config.streamSessionInferenceLog);
-    }
-    const rateConfig = config.commands?.[command]?.rating;
-    if (rateConfig && rateConfig.enabled !== false) {
-        const confMiddleware = config.middleware || [];
-        const middlewareWithoutReviewRate = confMiddleware.filter((mw) => {
-            return !(typeof mw === 'object' &&
-                mw !== null &&
-                'name' in mw &&
-                mw.name === 'review-rate');
-        });
-        // Resolve review-rate middleware directly rather than going through the registry
-        const reviewRateMiddleware = await createReviewRateMiddleware(rateConfig, config);
-        config.middleware = [...middlewareWithoutReviewRate, reviewRateMiddleware];
-    }
-    // When no resolvers are provided (e.g. standalone review CLI, without @gaunt-sloth/agent's
-    // resolvers), supply a minimal middleware resolver that passes through already-resolved
-    // middleware. The full `gaunt-sloth` CLI injects @gaunt-sloth/agent's resolvers instead.
-    const effectiveResolvers = resolvers ?? {
-        resolveMiddleware: async (middleware) => middleware ?? [],
-    };
-    const runner = new GthAgentRunner(defaultStatusCallback, effectiveResolvers);
     try {
-        await runner.init(command, config, new MemorySaver());
-        await runner.processMessages(messages);
-    }
-    catch (error) {
-        displayDebug(error instanceof Error ? error : String(error));
-        const reason = error instanceof Error ? error.message : String(error);
-        displayError(reason ? `Failed to run review with agent.\n\n${reason}` : 'Failed to run review with agent.');
-    }
-    finally {
-        await runner.cleanup();
-    }
-    progressIndicator?.stop();
-    handleRatingResult(rateConfig, command);
-    // Close the file AFTER rating is written
-    if (filePath) {
+        // Only the human turn: the agent supplies the system prompt via `createAgent({ systemPrompt })`.
+        const messages = [new HumanMessage(diff)];
+        // REL-2: optionally give the review agent a `gh api` file-read tool so it can fetch the FULL
+        // contents of a file when the PR diff truncates large changes. Only added in a GitHub PR
+        // context (the content source resolves to GitHub); a graceful no-op otherwise. Reads through
+        // the GitHub API rather than the workspace filesystem, so it is safe under pull_request_target.
+        maybeAddGhReadFileTool(config, command, reviewContext?.prId);
+        // Prepare logging path (if enabled by config)
+        const filePath = getCommandOutputFilePath(config, source);
+        if (filePath) {
+            initSessionLogging(filePath, config.streamSessionInferenceLog);
+        }
+        // REL-12: head the review with its attribution. It sits AFTER `initSessionLogging` on purpose —
+        // the session log is a capture of console output, so this ordering is the whole reason one
+        // emission covers both surfaces: the terminal AND the `writeOutputToFile` report a workflow
+        // reads back and posts. Emitted BEFORE the agent runs so it is the first thing in both.
+        //
+        // Through the ordinary `display` helper, never `headerStatus`: this is not the agent's
+        // technical preamble but the first line of the review document, so it survives the `compact`
+        // rung that strips the preamble — and on that rung it IS the run header, which is why the agent
+        // emits none of its own for `review`/`pr` (GS2-95: both render the same line, so a second
+        // emission would print the header twice on one screen).
+        //
+        // GS2-93: `none` is the one rung that reaches it, and it silences the block outright. That
+        // deliberately reverses REL-12 for a user who asks for it: a caller piping a review into their
+        // own template or diffing captured stdout needs a byte-clean stream, and nobody loses
+        // attribution without setting this key.
+        if (config.output?.header !== 'none') {
+            display(reviewHeadingBlock(command, config.modelDisplayName, config.modelProviderType));
+        }
+        const rateConfig = config.commands?.[command]?.rating;
+        if (rateConfig && rateConfig.enabled !== false) {
+            const confMiddleware = config.middleware || [];
+            const middlewareWithoutReviewRate = confMiddleware.filter((mw) => {
+                return !(typeof mw === 'object' &&
+                    mw !== null &&
+                    'name' in mw &&
+                    mw.name === 'review-rate');
+            });
+            // Resolve review-rate middleware directly rather than going through the registry
+            const reviewRateMiddleware = await createReviewRateMiddleware(rateConfig, config);
+            config.middleware = [...middlewareWithoutReviewRate, reviewRateMiddleware];
+        }
+        // When no resolvers are provided (e.g. standalone review CLI, without @gaunt-sloth/agent's
+        // resolvers), supply a minimal middleware resolver that passes through already-resolved
+        // middleware. The full `gaunt-sloth` CLI injects @gaunt-sloth/agent's resolvers instead.
+        const effectiveResolvers = resolvers ?? {
+            resolveMiddleware: async (middleware) => middleware ?? [],
+        };
+        // GS2-81: no backend factory, so `review`/`pr` run the runner's built-in lean agent —
+        // `@gaunt-sloth/review` is a leaf package that does not depend on `@gaunt-sloth/agent`. That is
+        // the same agent every other command resolves to, so the layering costs nothing today; giving
+        // this package a dependency on the agent package to reach a backend seam would invert it.
+        const runner = new GthAgentRunner(defaultStatusCallback, effectiveResolvers);
         try {
-            flushSessionLog();
-            stopSessionLogging();
-            displaySuccess(`\n\nThis report can be found in ${filePath}`);
+            await runner.init(command, config, new MemorySaver());
+            await runner.processMessages(messages);
         }
         catch (error) {
             displayDebug(error instanceof Error ? error : String(error));
-            displayError(`Failed to write review to file: ${filePath}`);
+            // [[TUI-C71]] — `review` and `pr` wire no tool-approval callback, so an escalation here is
+            // always the §6.2 error and an `attack` verdict is always the halt: the untrusted text this
+            // catch prints is model-authored by construction. It goes through the SAME framed renderer
+            // as every other surface — one row per line, each inside the gutter — instead of being
+            // interpolated into a line the terminal is free to wrap back to column 0.
+            if (error instanceof ApprovalStopError) {
+                displayError('Failed to run review with agent.\n');
+                for (const row of approvalStopRows(error.parts, { columns: stdout.columns })) {
+                    displayError(row);
+                }
+            }
+            else {
+                const reason = error instanceof Error ? error.message : String(error);
+                displayError(reason
+                    ? `Failed to run review with agent.\n\n${reason}`
+                    : 'Failed to run review with agent.');
+            }
+        }
+        finally {
+            await runner.cleanup();
         }
+        progressIndicator?.stop();
+        handleRatingResult(rateConfig, command);
+        // Close the file AFTER rating is written
+        if (filePath) {
+            try {
+                flushSessionLog();
+                stopSessionLogging();
+                displaySuccess(`\n\nThis report can be found in ${filePath}`);
+            }
+            catch (error) {
+                displayDebug(error instanceof Error ? error : String(error));
+                displayError(`Failed to write review to file: ${filePath}`);
+            }
+        }
+        deleteArtifact(REVIEW_RATE_ARTIFACT_KEY);
+    }
+    finally {
+        // EXT-53: the indicator owns a 1s setInterval — an active libuv handle that keeps Node's event
+        // loop from ever draining, so leaking it hangs the CLI forever after the work is done. The
+        // `stop()` above sits where it does for output ordering (before the rating result / the
+        // "report can be found in …" line); this `finally` guarantees the handle is also released when
+        // anything above throws — notably `createReviewRateMiddleware()`, which is awaited outside any
+        // catch, and `runner.cleanup()`, whose own `finally` rethrows straight past the `stop()`.
+        // `stop()` is idempotent, so the normal path's second call is a no-op.
+        progressIndicator?.stop();
     }
-    deleteArtifact(REVIEW_RATE_ARTIFACT_KEY);
 }
 /**
  * REL-2: conditionally inject the optional `gh api` file-read tool into the review agent's tools.
@@ -78,6 +157,9 @@ export async function review(source, preamble, diff, config, command = 'review',
  *
  * The tool reads file contents via the GitHub API (`gh api`), never the workspace filesystem, so
  * it remains safe under `pull_request_target` CI where the untrusted PR head is not checked out.
+ *
+ * CFG-52 — it is also gated on the unified `builtInTools` registry, resolved per-command first and
+ * then root by {@link isGhReadFileToolEnabled}. Absence means enabled, so this stays opt-OUT.
  */
 function maybeAddGhReadFileTool(config, command, prId) {
     const commandConfig = config.commands?.[command];
@@ -85,6 +167,9 @@ function maybeAddGhReadFileTool(config, command, prId) {
     if (contentSource !== 'github') {
         return;
     }
+    if (!isGhReadFileToolEnabled(config, command)) {
+        return;
+    }
     // config.tools is a union (StructuredToolInterface[] | BaseToolkit[] | ServerTool[]); the
     // gh read-file tool is a StructuredToolInterface, so we only append into a structured-tool list.
     const existingTools = (Array.isArray(config.tools) ? config.tools : []);
@@ -93,7 +178,7 @@ function maybeAddGhReadFileTool(config, command, prId) {
     if (alreadyPresent) {
         return;
     }
-    config.tools = [...existingTools, getGhReadFileTool(config, prId)];
+    config.tools = [...existingTools, getGhReadFileTool(config, prId, command)];
 }
 function handleRatingResult(rateConfig, command) {
     if (!rateConfig || rateConfig.enabled === false) {

package/dist/modules/reviewModule.js.map

@@ -1 +1 @@
-{"version":3,"file":"reviewModule.js","sourceRoot":"","sources":["../../src/modules/reviewModule.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,cAAc,EACd,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC;AACjF,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,GAEzB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,MAAM,wCAAwC,CAAC;AAErE,OAAO,EAAE,GAAG,IAAI,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAQpG,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,MAAc,EACd,QAAgB,EAChB,IAAY,EACZ,MAAiB,EACjB,UAA2B,QAAQ,EACnC,SAA0B,EAC1B,aAA6B;IAE7B,MAAM,iBAAiB,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAChG,MAAM,QAAQ,GAAG,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvE,6FAA6F;IAC7F,yFAAyF;IACzF,6FAA6F;IAC7F,gGAAgG;IAChG,sBAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;IAE7D,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,QAAQ,EAAE,CAAC;QACb,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IACtD,IAAI,UAAU,IAAI,UAAU,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC/C,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;QAC/C,MAAM,2BAA2B,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;YAC/D,OAAO,CAAC,CACN,OAAO,EAAE,KAAK,QAAQ;gBACtB,EAAE,KAAK,IAAI;gBACX,MAAM,IAAI,EAAE;gBACX,EAAwB,CAAC,IAAI,KAAK,aAAa,CACjD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,iFAAiF;QACjF,MAAM,oBAAoB,GAAG,MAAM,0BAA0B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAClF,MAAM,CAAC,UAAU,GAAG,CAAC,GAAG,2BAA2B,EAAE,oBAAoB,CAAC,CAAC;IAC7E,CAAC;IAED,2FAA2F;IAC3F,wFAAwF;IACxF,yFAAyF;IACzF,MAAM,kBAAkB,GAAmB,SAAS,IAAI;QACtD,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE;KAC1D,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,YAAY,CACV,MAAM,CAAC,CAAC,CAAC,uCAAuC,MAAM,EAAE,CAAC,CAAC,CAAC,kCAAkC,CAC9F,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;IAED,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAE1B,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAExC,yCAAyC;IACzC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,eAAe,EAAE,CAAC;YAClB,kBAAkB,EAAE,CAAC;YACrB,cAAc,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7D,YAAY,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,cAAc,CAAC,wBAAwB,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,sBAAsB,CAC7B,MAAiB,EACjB,OAAwB,EACxB,IAAwB;IAExB,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,aAAa,EAAE,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC;IAE3E,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,0FAA0F;IAC1F,iGAAiG;IACjG,MAAM,aAAa,GAAG,CACpB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CACnB,CAAC;IAC/B,wFAAwF;IACxF,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,EAAE,CACJ,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAC9F,CAAC;IACF,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IAED,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,aAAa,EAAE,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAoC,EAAE,OAAwB;IACxF,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAChD,mDAAmD;QACnD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAuB,wBAAwB,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,cAAc,CAAC,gDAAgD,OAAO,WAAW,CAAC,CAAC;QACnF,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,4EAA4E;QAC5F,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC;IACnE,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;IAC3D,MAAM,WAAW,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,gBAAgB,SAAS,GAAG,CAAC;IAC5E,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAE/B,IAAI,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,cAAc,CAAC,QAAQ,WAAW,EAAE,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,QAAQ,WAAW,EAAE,CAAC,CAAC;QACpC,IAAI,UAAU,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;YACzC,WAAW,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}
+{"version":3,"file":"reviewModule.js","sourceRoot":"","sources":["../../src/modules/reviewModule.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,EACL,qBAAqB,EACrB,OAAO,EACP,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,cAAc,EACd,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC;AACjF,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,GAEzB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAEnG,OAAO,EAAE,GAAG,IAAI,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAQpG;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,MAAc;AACd,iGAAiG;AACjG,6FAA6F;AAC7F,2FAA2F;AAC3F,wFAAwF;AACxF,uFAAuF;AACvF,4FAA4F;AAC5F,+FAA+F;AAC/F,kGAAkG;AAClG,0DAA0D;AAC1D,EAAE;AACF,+FAA+F;AAC/F,iGAAiG;AACjG,yEAAyE;AACzE,SAAiB,EACjB,IAAY,EACZ,MAAiB,EACjB,OAAO,GAAoB,QAAQ,EACnC,SAA0B,EAC1B,aAA6B;IAE7B,MAAM,iBAAiB,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAChG,IAAI,CAAC;QACH,iGAAiG;QACjG,MAAM,QAAQ,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAE1C,6FAA6F;QAC7F,yFAAyF;QACzF,6FAA6F;QAC7F,gGAAgG;QAChG,sBAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;QAE7D,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,QAAQ,EAAE,CAAC;YACb,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACjE,CAAC;QAED,gGAAgG;QAChG,2FAA2F;QAC3F,4FAA4F;QAC5F,wFAAwF;QACxF,EAAE;QACF,uFAAuF;QACvF,6FAA6F;QAC7F,gGAAgG;QAChG,0FAA0F;QAC1F,wDAAwD;QACxD,EAAE;QACF,2FAA2F;QAC3F,+FAA+F;QAC/F,sFAAsF;QACtF,wCAAwC;QACxC,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;YACrC,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QACtD,IAAI,UAAU,IAAI,UAAU,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC/C,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;YAC/C,MAAM,2BAA2B,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;gBAC/D,OAAO,CAAC,CACN,OAAO,EAAE,KAAK,QAAQ;oBACtB,EAAE,KAAK,IAAI;oBACX,MAAM,IAAI,EAAE;oBACX,EAAwB,CAAC,IAAI,KAAK,aAAa,CACjD,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,iFAAiF;YACjF,MAAM,oBAAoB,GAAG,MAAM,0BAA0B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAClF,MAAM,CAAC,UAAU,GAAG,CAAC,GAAG,2BAA2B,EAAE,oBAAoB,CAAC,CAAC;QAC7E,CAAC;QAED,2FAA2F;QAC3F,wFAAwF;QACxF,yFAAyF;QACzF,MAAM,kBAAkB,GAAmB,SAAS,IAAI;YACtD,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE;SAC1D,CAAC;QACF,sFAAsF;QACtF,gGAAgG;QAChG,8FAA8F;QAC9F,0FAA0F;QAC1F,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC,CAAC;YACtD,MAAM,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7D,2FAA2F;YAC3F,4FAA4F;YAC5F,2FAA2F;YAC3F,uFAAuF;YACvF,0EAA0E;YAC1E,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;gBACvC,YAAY,CAAC,oCAAoC,CAAC,CAAC;gBACnD,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;oBAC7E,YAAY,CAAC,GAAG,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACtE,YAAY,CACV,MAAM;oBACJ,CAAC,CAAC,uCAAuC,MAAM,EAAE;oBACjD,CAAC,CAAC,kCAAkC,CACvC,CAAC;YACJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;QAED,iBAAiB,EAAE,IAAI,EAAE,CAAC;QAE1B,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAExC,yCAAyC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,eAAe,EAAE,CAAC;gBAClB,kBAAkB,EAAE,CAAC;gBACrB,cAAc,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC7D,YAAY,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,cAAc,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,+FAA+F;QAC/F,2FAA2F;QAC3F,wFAAwF;QACxF,+FAA+F;QAC/F,+FAA+F;QAC/F,0FAA0F;QAC1F,uEAAuE;QACvE,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,sBAAsB,CAC7B,MAAiB,EACjB,OAAwB,EACxB,IAAwB;IAExB,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,aAAa,EAAE,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC;IAE3E,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,0FAA0F;IAC1F,iGAAiG;IACjG,MAAM,aAAa,GAAG,CACpB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CACnB,CAAC;IAC/B,wFAAwF;IACxF,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,EAAE,CACJ,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAC9F,CAAC;IACF,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IAED,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,aAAa,EAAE,iBAAiB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAoC,EAAE,OAAwB;IACxF,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAChD,mDAAmD;QACnD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAuB,wBAAwB,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,cAAc,CAAC,gDAAgD,OAAO,WAAW,CAAC,CAAC;QACnF,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,4EAA4E;QAC5F,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC;IACnE,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;IAC3D,MAAM,WAAW,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,gBAAgB,SAAS,GAAG,CAAC;IAC5E,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAE/B,IAAI,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,cAAc,CAAC,QAAQ,WAAW,EAAE,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,QAAQ,WAAW,EAAE,CAAC,CAAC;QACpC,IAAI,UAAU,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;YACzC,WAAW,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/sources/ghIssueSource.js

@@ -21,16 +21,16 @@ export async function get(_, issueId) {
         return null;
     }
     const issueLabel = /^\d+$/.test(issueId) ? `#${issueId}` : issueId;
+    // EXT-53: the indicator is constructed OUTSIDE the try and cleared in a `finally`. It owns a 1s
+    // setInterval — an active libuv handle — so a `stop()` reachable only on the success path leaves
+    // the event loop un-drainable and the process never exits. This is especially nasty here because
+    // a failed issue fetch is a SOFT failure (returns null, the review proceeds), so the hang is
+    // invisible: the command succeeds and then simply never returns.
+    const progress = new ProgressIndicator(`Fetching GitHub issue ${issueLabel}`);
+    let issueContent;
     try {
         // Use the GitHub CLI to fetch issue details
-        const progress = new ProgressIndicator(`Fetching GitHub issue ${issueLabel}`);
-        const issueContent = await execAsync(`gh issue view ${issueId}`);
-        progress.stop();
-        if (!issueContent) {
-            displayWarning(`No content found for GitHub issue ${issueLabel}`);
-            return null;
-        }
-        return `GitHub Issue: ${issueLabel}\n\n${issueContent}`;
+        issueContent = await execAsync(`gh issue view ${issueId}`);
     }
     catch (error) {
         displayWarning(`
@@ -39,5 +39,13 @@ Consider checking if gh cli (https://cli.github.com/) is installed and authentic
     `);
         return null;
     }
+    finally {
+        progress.stop();
+    }
+    if (!issueContent) {
+        displayWarning(`No content found for GitHub issue ${issueLabel}`);
+        return null;
+    }
+    return `GitHub Issue: ${issueLabel}\n\n${issueContent}`;
 }
 //# sourceMappingURL=ghIssueSource.js.map

package/dist/sources/ghIssueSource.js.map

@@ -1 +1 @@
-{"version":3,"file":"ghIssueSource.js","sourceRoot":"","sources":["../../src/sources/ghIssueSource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC;AAEjF,6FAA6F;AAC7F,sFAAsF;AACtF,kFAAkF;AAClF,MAAM,iBAAiB,GAAG,gEAAgE,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,CAAwB,EACxB,OAA2B;IAE3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,cAAc,CAAC,iCAAiC,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,cAAc,CACZ,mCAAmC,OAAO,8FAA8F,CACzI,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAEnE,IAAI,CAAC;QACH,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,yBAAyB,UAAU,EAAE,CAAC,CAAC;QAC9E,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;QACjE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEhB,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,cAAc,CAAC,qCAAqC,UAAU,EAAE,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,iBAAiB,UAAU,OAAO,YAAY,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC;6BACU,UAAU,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;;KAE7F,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"ghIssueSource.js","sourceRoot":"","sources":["../../src/sources/ghIssueSource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC;AAEjF,6FAA6F;AAC7F,sFAAsF;AACtF,kFAAkF;AAClF,MAAM,iBAAiB,GAAG,gEAAgE,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,CAAwB,EACxB,OAA2B;IAE3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,cAAc,CAAC,iCAAiC,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,cAAc,CACZ,mCAAmC,OAAO,8FAA8F,CACzI,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAEnE,gGAAgG;IAChG,iGAAiG;IACjG,iGAAiG;IACjG,6FAA6F;IAC7F,iEAAiE;IACjE,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,yBAAyB,UAAU,EAAE,CAAC,CAAC;IAC9E,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,4CAA4C;QAC5C,YAAY,GAAG,MAAM,SAAS,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC;6BACU,UAAU,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;;KAE7F,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,cAAc,CAAC,qCAAqC,UAAU,EAAE,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,iBAAiB,UAAU,OAAO,YAAY,EAAE,CAAC;AAC1D,CAAC"}

package/dist/sources/gitDiffSource.d.ts

@@ -0,0 +1,12 @@
+import type { ProviderConfig } from './types.js';
+/**
+ * Gets a local diff via `git --no-pager diff [refRange]` — review the working tree (or a
+ * ref range) without GitHub and without piping a diff through stdin.
+ *
+ * @param _ config (unused in this source)
+ * @param refRange optional revision selection passed to `git diff`, e.g. `origin/main...HEAD`
+ *   or `HEAD~3`. When omitted, diffs the working tree against the index (plain `git diff`).
+ * @returns the diff content; throws with a clear message outside a git repository, on a bad
+ *   ref, or when the diff is empty (an empty review would otherwise run against no content).
+ */
+export declare function get(_: ProviderConfig | null, refRange: string | undefined): Promise<string | null>;

package/dist/sources/gitDiffSource.js

@@ -0,0 +1,75 @@
+import { ProgressIndicator } from '@gaunt-sloth/core/utils/ProgressIndicator.js';
+/**
+ * `git diff` can emit multi-megabyte output for large changes; the node default (1 MiB)
+ * would truncate-and-fail such runs.
+ */
+const MAX_DIFF_BUFFER = 32 * 1024 * 1024;
+/**
+ * Gets a local diff via `git --no-pager diff [refRange]` — review the working tree (or a
+ * ref range) without GitHub and without piping a diff through stdin.
+ *
+ * @param _ config (unused in this source)
+ * @param refRange optional revision selection passed to `git diff`, e.g. `origin/main...HEAD`
+ *   or `HEAD~3`. When omitted, diffs the working tree against the index (plain `git diff`).
+ * @returns the diff content; throws with a clear message outside a git repository, on a bad
+ *   ref, or when the diff is empty (an empty review would otherwise run against no content).
+ */
+export async function get(_, refRange) {
+    // Args go to execFile (no shell), so shell metacharacters are inert; still reject
+    // option-shaped input so an id can never become a git flag (e.g. `--output=<file>`).
+    if (refRange && refRange.startsWith('-')) {
+        throw new Error(`Invalid git diff argument "${refRange}"; expected a ref or ref range (e.g. "origin/main...HEAD"), not an option.`);
+    }
+    const label = refRange ? `for "${refRange}"` : 'for the working tree';
+    const gitArgs = ['--no-pager', 'diff', ...(refRange ? [refRange] : [])];
+    const progress = new ProgressIndicator(`Getting local git diff ${label}`);
+    try {
+        const diffContent = await runGit(gitArgs);
+        progress.stop();
+        if (!diffContent.trim()) {
+            throw new Error(`No changes found in git diff ${label}; nothing to review.`);
+        }
+        return `Local git diff ${label}\n\n${diffContent}`;
+    }
+    catch (error) {
+        progress.stop();
+        const reason = error instanceof Error ? error.message : String(error);
+        if (reason.startsWith('No changes found')) {
+            throw new Error(reason);
+        }
+        throw new Error(`Failed to get git diff ${label}: ${reason}\nConsider checking that you are inside a git repository and the ref range is valid.`);
+    }
+}
+/**
+ * Run git with an args array (execFile, no shell). Rejects on a non-zero exit or spawn
+ * failure with git's stderr as the reason; benign stderr chatter on a zero exit is ignored
+ * (unlike systemUtils.execAsync, which rejects on any stderr output).
+ */
+async function runGit(args) {
+    const { execFile } = await import('node:child_process');
+    return new Promise((resolve, reject) => {
+        execFile('git', args, { maxBuffer: MAX_DIFF_BUFFER }, (error, stdout, stderr) => {
+            if (error) {
+                reject(new Error(extractGitError(stderr ?? '', error.message)));
+                return;
+            }
+            resolve(stdout);
+        });
+    });
+}
+/**
+ * Reduce git's stderr to the one meaningful line. Outside a repository `git diff` appends
+ * its entire `--no-index` usage screen after the warning line; that wall of text is noise
+ * in a CLI error. Prefer the `fatal:` line when present, else the first non-empty line.
+ */
+function extractGitError(stderr, fallback) {
+    const lines = stderr
+        .split('\n')
+        .map((line) => line.trim())
+        .filter(Boolean);
+    if (lines.length === 0) {
+        return fallback;
+    }
+    return lines.find((line) => line.startsWith('fatal:')) ?? lines[0];
+}
+//# sourceMappingURL=gitDiffSource.js.map

package/dist/sources/gitDiffSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitDiffSource.js","sourceRoot":"","sources":["../../src/sources/gitDiffSource.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC;AAEjF;;;GAGG;AACH,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,CAAwB,EACxB,QAA4B;IAE5B,kFAAkF;IAClF,qFAAqF;IACrF,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,4EAA4E,CACnH,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,QAAQ,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACtE,MAAM,OAAO,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAExE,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1C,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEhB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,sBAAsB,CAAC,CAAC;QAC/E,CAAC;QAED,OAAO,kBAAkB,KAAK,OAAO,WAAW,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,KAAK,MAAM,sFAAsF,CACjI,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,MAAM,CAAC,IAAc;IAClC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC9E,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAc,EAAE,QAAgB;IACvD,MAAM,KAAK,GAAG,MAAM;SACjB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/sources/jiraIssueSource.d.ts

@@ -2,7 +2,8 @@ import type { JiraConfig } from './types.js';
 /**
  * Gets Jira issue using Atlassian REST API v3 with Personal Access Token
  *
- * TODO we need to figure out how would this work with public jira.
+ * Requires an authenticated Atlassian Cloud instance (Cloud ID + API token); anonymous
+ * access to a public Jira instance is not supported.
  *
  * @param config Jira configuration
  * @param issueId Jira issue ID

package/dist/sources/jiraIssueSource.js

@@ -3,7 +3,8 @@ import { getJiraCredentials, jiraRequest, } from '#src/helpers/jira/jiraClient.j
 /**
  * Gets Jira issue using Atlassian REST API v3 with Personal Access Token
  *
- * TODO we need to figure out how would this work with public jira.
+ * Requires an authenticated Atlassian Cloud instance (Cloud ID + API token); anonymous
+ * access to a public Jira instance is not supported.
  *
  * @param config Jira configuration
  * @param issueId Jira issue ID

package/dist/sources/jiraIssueSource.js.map

@@ -1 +1 @@
-{"version":3,"file":"jiraIssueSource.js","sourceRoot":"","sources":["../../src/sources/jiraIssueSource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAEhG,OAAO,EACL,kBAAkB,EAClB,WAAW,GAEZ,MAAM,iCAAiC,CAAC;AAYzC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,MAAkC,EAClC,OAA2B;IAE3B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,cAAc,CAAC,yBAAyB,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,cAAc,CAAC,sBAAsB,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE/C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;QACrC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;QAE7C,OAAO,eAAe,OAAO,cAAc,OAAO,qBAAqB,WAAW,EAAE,CAAC;IACvF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,CACV,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,YAAY,CACzB,WAAoC,EACpC,OAAe;IAEf,sGAAsG;IAEtG,0KAA0K;IAC1K,sHAAsH;IACtH,8CAA8C;IAC9C,qHAAqH;IACrH,qGAAqG;IAErG,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,sBAAsB,WAAW,CAAC,UAAU,GAAG,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,wFAAwF;IACxF,MAAM,OAAO,GAAG,6BAA6B,CAAC,CAAC,wCAAwC;IAEvF,OAAO,WAAW,CAAoB,WAAW,EAAE,qBAAqB,OAAO,GAAG,OAAO,EAAE,EAAE;QAC3F,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"jiraIssueSource.js","sourceRoot":"","sources":["../../src/sources/jiraIssueSource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAEhG,OAAO,EACL,kBAAkB,EAClB,WAAW,GAEZ,MAAM,iCAAiC,CAAC;AAYzC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,MAAkC,EAClC,OAA2B;IAE3B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,cAAc,CAAC,yBAAyB,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,cAAc,CAAC,sBAAsB,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE/C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;QACrC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;QAE7C,OAAO,eAAe,OAAO,cAAc,OAAO,qBAAqB,WAAW,EAAE,CAAC;IACvF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,CACV,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,YAAY,CACzB,WAAoC,EACpC,OAAe;IAEf,sGAAsG;IAEtG,0KAA0K;IAC1K,sHAAsH;IACtH,8CAA8C;IAC9C,qHAAqH;IACrH,qGAAqG;IAErG,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,sBAAsB,WAAW,CAAC,UAAU,GAAG,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,wFAAwF;IACxF,MAAM,OAAO,GAAG,6BAA6B,CAAC,CAAC,wCAAwC;IAEvF,OAAO,WAAW,CAAoB,WAAW,EAAE,qBAAqB,OAAO,GAAG,OAAO,EAAE,EAAE;QAC3F,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/ghReadFileTool.d.ts

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import type { StructuredToolInterface } from '@langchain/core/tools';
 import type { GthConfig } from '@gaunt-sloth/core/config.js';
+import { type GhReadFileCommand } from '@gaunt-sloth/core/config.js';
 declare const toolSchema: z.ZodObject<{
     path: z.ZodString;
 }, z.core.$strip>;
@@ -22,15 +23,23 @@ export declare function resolvePrRepoContext(prId: string | undefined): Promise<
  * Fetches the full contents of a single file from GitHub via the `gh api` CLI and decodes it.
  * Returns the decoded text, or a human/agent-readable explanation string on any failure
  * (graceful skip — never throws). owner/repo/ref come from the resolved PR context, not the LLM.
+ *
+ * CFG-52 — the decoded text is capped at `maxBytes`. Over the cap it is truncated rather than
+ * refused (a truncated file still reviews better than no file), and the result says so in its
+ * heading AND in a trailing marker naming the tool and the cap, so the model cannot silently
+ * reason about a file it only half received.
  */
-export declare function ghReadFileImpl(args: GhReadFileArgs, context: PrRepoContext): Promise<string>;
+export declare function ghReadFileImpl(args: GhReadFileArgs, context: PrRepoContext, maxBytes?: number): Promise<string>;
 /**
  * Built-in tool factory matching the repo's `get(config)` tool idiom (see gthWebFetchTool).
  *
  * `prId` identifies the PR under review (undefined in `gth pr` discovery mode → current branch).
  * The owner/repo/ref are resolved from it once, lazily, and memoised for the run, so the agent
  * cannot read files from any repo other than the one being reviewed.
+ *
+ * CFG-52 — `command` selects which `builtInTools` registry the byte cap is read from, so
+ * `commands.pr` and `commands.review` each configure their own run.
  */
-export declare function get(_: GthConfig, prId?: string): StructuredToolInterface;
+export declare function get(config: GthConfig, prId?: string, command?: GhReadFileCommand): StructuredToolInterface;
 export declare const GTH_GH_READ_FILE_TOOL_NAME = "gth_gh_read_file";
 export {};

package/dist/tools/ghReadFileTool.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { tool } from '@langchain/core/tools';
+import { GH_READ_FILE_DEFAULT_MAX_BYTES, GH_READ_FILE_TOOL_NAME, getGhReadFileMaxBytes, } from '@gaunt-sloth/core/config.js';
 import { execAsync } from '@gaunt-sloth/core/utils/systemUtils.js';
 import { debugLog } from '@gaunt-sloth/core/utils/debugUtils.js';
 /**
@@ -21,6 +22,10 @@ import { debugLog } from '@gaunt-sloth/core/utils/debugUtils.js';
  * into the review. Binding them to the PR context also closes the footgun of reading arbitrary
  * files from any public repo the model can name.
  *
+ * It is configured through the unified `builtInTools` registry (CFG-52) and is **opt-out**: absent
+ * from the registry it is ON, `{ "gth_gh_read_file": false }` turns it off, and
+ * `{ "gth_gh_read_file": { "maxBytes": N } }` sets the ceiling on the decoded text it returns.
+ *
  * The tool is OPTIONAL and self-guarding:
  * - The path is strictly validated so nothing LLM-supplied can inject shell metacharacters
  *   into the `gh api` invocation; the resolved owner/repo/ref are validated too.
@@ -28,7 +33,7 @@ import { debugLog } from '@gaunt-sloth/core/utils/debugUtils.js';
  *   gracefully and returns an explanatory string instead of throwing, so the agent can simply
  *   continue with the (truncated) diff it already has.
  */
-const TOOL_NAME = 'gth_gh_read_file';
+const TOOL_NAME = GH_READ_FILE_TOOL_NAME;
 // PR ids reach us from the CLI; keep strict so nothing but a number can reach execAsync.
 const PR_ID_PATTERN = /^\d+$/;
 // owner/repo segments: GitHub login/repo naming, conservative allow-list (no shell metachars).
@@ -39,6 +44,19 @@ const REF_PATTERN = /^[A-Za-z0-9-_./]+$/;
 // Repo-relative path. Allow slashes and common filename characters, but no shell metachars,
 // no whitespace, and no parent-directory traversal.
 const PATH_PATTERN = /^[A-Za-z0-9-_./]+$/;
+/**
+ * CFG-52 — cut `text` down to at most `maxBytes` UTF-8 bytes without leaving a split multi-byte
+ * character at the end. Slicing a Buffer at an arbitrary byte boundary can land mid-sequence, and
+ * decoding that produces a replacement character that is itself WIDER than the bytes it replaced —
+ * so the result is re-measured and trimmed until it genuinely fits the cap.
+ */
+function truncateToBytes(text, maxBytes) {
+    let out = Buffer.from(text, 'utf8').subarray(0, maxBytes).toString('utf8');
+    while (out.length > 0 && Buffer.byteLength(out, 'utf8') > maxBytes) {
+        out = out.slice(0, -1);
+    }
+    return out;
+}
 const toolSchema = z.object({
     path: z
         .string()
@@ -88,8 +106,13 @@ export async function resolvePrRepoContext(prId) {
  * Fetches the full contents of a single file from GitHub via the `gh api` CLI and decodes it.
  * Returns the decoded text, or a human/agent-readable explanation string on any failure
  * (graceful skip — never throws). owner/repo/ref come from the resolved PR context, not the LLM.
+ *
+ * CFG-52 — the decoded text is capped at `maxBytes`. Over the cap it is truncated rather than
+ * refused (a truncated file still reviews better than no file), and the result says so in its
+ * heading AND in a trailing marker naming the tool and the cap, so the model cannot silently
+ * reason about a file it only half received.
  */
-export async function ghReadFileImpl(args, context) {
+export async function ghReadFileImpl(args, context, maxBytes = GH_READ_FILE_DEFAULT_MAX_BYTES) {
     const { path } = args;
     const { owner, repo, ref } = context;
     if (!PATH_PATTERN.test(path) || path.includes('..')) {
@@ -133,7 +156,12 @@ export async function ghReadFileImpl(args, context) {
         }
         const decoded = Buffer.from(parsed.content, 'base64').toString('utf8');
         const label = `${owner}/${repo}/${path}${ref ? `@${ref}` : ''}`;
-        return `Full contents of ${label}:\n\n${decoded}`;
+        if (Buffer.byteLength(decoded, 'utf8') <= maxBytes) {
+            return `Full contents of ${label}:\n\n${decoded}`;
+        }
+        return (`Partial contents of ${label} (truncated):\n\n${truncateToBytes(decoded, maxBytes)}` +
+            `\n... [${TOOL_NAME}: file truncated at the ${maxBytes}-byte cap ` +
+            `(builtInTools.${TOOL_NAME}.maxBytes) — this file is INCOMPLETE, the rest was not returned] ...`);
     }
     catch (error) {
         // Graceful skip: gh missing/unauthenticated, file not found, or no GitHub context.
@@ -149,8 +177,12 @@ export async function ghReadFileImpl(args, context) {
  * `prId` identifies the PR under review (undefined in `gth pr` discovery mode → current branch).
  * The owner/repo/ref are resolved from it once, lazily, and memoised for the run, so the agent
  * cannot read files from any repo other than the one being reviewed.
+ *
+ * CFG-52 — `command` selects which `builtInTools` registry the byte cap is read from, so
+ * `commands.pr` and `commands.review` each configure their own run.
  */
-export function get(_, prId) {
+export function get(config, prId, command = 'pr') {
+    const maxBytes = getGhReadFileMaxBytes(config, command);
     let contextPromise;
     const getContext = () => {
         if (!contextPromise) {
@@ -163,14 +195,16 @@ export function get(_, prId) {
         if (typeof context === 'string') {
             return context; // resolution failed — return the explanation as a graceful skip.
         }
-        return ghReadFileImpl(args, context);
+        return ghReadFileImpl(args, context, maxBytes);
     }, {
         name: TOOL_NAME,
         description: 'Read the FULL contents of a single file from the pull request under review via the ' +
             'GitHub API. Use this when the PR diff is truncated and you need to see the complete ' +
             'file. Supply only the repository-relative path; the repository and ref are bound to ' +
             'the PR automatically. Reads through the GitHub API, not the local filesystem, so it is ' +
-            'safe in pull_request_target CI.',
+            `safe in pull_request_target CI. At most ${maxBytes} bytes of file text are returned: a ` +
+            'larger file may come back truncated, and says so in its heading and in a trailing marker ' +
+            'when it does. A very large file may not be readable through this endpoint at all.',
         schema: toolSchema,
     });
 }

package/dist/tools/ghReadFileTool.js.map

@@ -1 +1 @@
-{"version":3,"file":"ghReadFileTool.js","sourceRoot":"","sources":["../../src/tools/ghReadFileTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAG7C,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAErC,yFAAyF;AACzF,MAAM,aAAa,GAAG,OAAO,CAAC;AAC9B,+FAA+F;AAC/F,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAC1C,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,wFAAwF;AACxF,MAAM,WAAW,GAAG,oBAAoB,CAAC;AACzC,4FAA4F;AAC5F,oDAAoD;AACpD,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAE1C,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,CAAC,8EAA8E,CAAC;CAC5F,CAAC,CAAC;AAyBH;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAwB;IAExB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,OAAO,4BAA4B,IAAI,+BAA+B,CAAC;IACzE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,aAAa,UAAU,wDAAwD,CAAC;IAElG,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,CACL,qEAAqE,MAAM,IAAI;YAC/E,mGAAmG;YACnG,sDAAsD,CACvD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,oCAAoC,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,yBAAyB,GAAG,CAAC;IACnG,CAAC;IAED,IAAI,MAA4B,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;IACnD,CAAC;IAAC,OAAO,UAAU,EAAE,CAAC;QACpB,QAAQ,CAAC,+CAA+C,GAAG,EAAE,CAAC,CAAC;QAC/D,OAAO,uCACL,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CACtE,EAAE,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC;IACzC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,mGAAmG,CAAC;IAC7G,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAoB,EACpB,OAAsB;IAEtB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAErC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,OAAO,sBAAsB,IAAI,2DAA2D,CAAC;IAC/F,CAAC;IACD,0FAA0F;IAC1F,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,6BAA6B,KAAK,+CAA+C,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,4BAA4B,IAAI,IAAI,CAAC;IAC9C,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,oBAAoB,GAAG,IAAI,CAAC;IACrC,CAAC;IAED,6FAA6F;IAC7F,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,iBAAiB,KAAK,IAAI,IAAI,aAAa,IAAI,GAAG,QAAQ,EAAE,CAAC;IAE/E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,2BAA2B,KAAK,IAAI,IAAI,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;QACpF,CAAC;QAED,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QACjD,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,oDAAoD,GAAG,EAAE,CAAC,CAAC;YACpE,OAAO,2CAA2C,KAAK,IAAI,IAAI,IAAI,IAAI,KACrE,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CACtE,EAAE,CAAC;QACL,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,IAAI,gEAAgE,CAAC;QAClF,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO,IAAI,IAAI,kCAAkC,MAAM,CAAC,IAAI,IAAI,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACvE,uEAAuE;YACvE,OAAO,oDAAoD,IAAI,4DAA4D,CAAC;QAC9H,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,GAAG,KAAK,IAAI,IAAI,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAChE,OAAO,oBAAoB,KAAK,QAAQ,OAAO,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,mFAAmF;QACnF,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,CACL,mBAAmB,KAAK,IAAI,IAAI,IAAI,IAAI,yBAAyB,MAAM,IAAI;YAC3E,mGAAmG;YACnG,sDAAsD,CACvD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,CAAY,EAAE,IAAa;IAC7C,IAAI,cAA2D,CAAC;IAChE,MAAM,UAAU,GAAG,GAAoC,EAAE;QACvD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC,CAAC;IAEF,OAAO,IAAI,CACT,KAAK,EAAE,IAAoB,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;QACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,OAAO,CAAC,CAAC,iEAAiE;QACnF,CAAC;QACD,OAAO,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,EACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EACT,qFAAqF;YACrF,sFAAsF;YACtF,sFAAsF;YACtF,yFAAyF;YACzF,iCAAiC;QACnC,MAAM,EAAE,UAAU;KACnB,CACyB,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,SAAS,CAAC"}
+{"version":3,"file":"ghReadFileTool.js","sourceRoot":"","sources":["../../src/tools/ghReadFileTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAG7C,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,EACtB,qBAAqB,GAEtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,MAAM,SAAS,GAAG,sBAAsB,CAAC;AAEzC,yFAAyF;AACzF,MAAM,aAAa,GAAG,OAAO,CAAC;AAC9B,+FAA+F;AAC/F,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAC1C,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,wFAAwF;AACxF,MAAM,WAAW,GAAG,oBAAoB,CAAC;AACzC,4FAA4F;AAC5F,oDAAoD;AACpD,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAE1C;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,QAAgB;IACrD,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3E,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACnE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,CAAC,8EAA8E,CAAC;CAC5F,CAAC,CAAC;AAyBH;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAwB;IAExB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,OAAO,4BAA4B,IAAI,+BAA+B,CAAC;IACzE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,aAAa,UAAU,wDAAwD,CAAC;IAElG,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,CACL,qEAAqE,MAAM,IAAI;YAC/E,mGAAmG;YACnG,sDAAsD,CACvD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,oCAAoC,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,yBAAyB,GAAG,CAAC;IACnG,CAAC;IAED,IAAI,MAA4B,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;IACnD,CAAC;IAAC,OAAO,UAAU,EAAE,CAAC;QACpB,QAAQ,CAAC,+CAA+C,GAAG,EAAE,CAAC,CAAC;QAC/D,OAAO,uCACL,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CACtE,EAAE,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC;IACzC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,mGAAmG,CAAC;IAC7G,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAoB,EACpB,OAAsB,EACtB,QAAQ,GAAW,8BAA8B;IAEjD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAErC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,OAAO,sBAAsB,IAAI,2DAA2D,CAAC;IAC/F,CAAC;IACD,0FAA0F;IAC1F,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,6BAA6B,KAAK,+CAA+C,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,4BAA4B,IAAI,IAAI,CAAC;IAC9C,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,oBAAoB,GAAG,IAAI,CAAC;IACrC,CAAC;IAED,6FAA6F;IAC7F,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,iBAAiB,KAAK,IAAI,IAAI,aAAa,IAAI,GAAG,QAAQ,EAAE,CAAC;IAE/E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,2BAA2B,KAAK,IAAI,IAAI,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;QACpF,CAAC;QAED,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QACjD,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,oDAAoD,GAAG,EAAE,CAAC,CAAC;YACpE,OAAO,2CAA2C,KAAK,IAAI,IAAI,IAAI,IAAI,KACrE,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CACtE,EAAE,CAAC;QACL,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,IAAI,gEAAgE,CAAC;QAClF,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO,IAAI,IAAI,kCAAkC,MAAM,CAAC,IAAI,IAAI,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACvE,uEAAuE;YACvE,OAAO,oDAAoD,IAAI,4DAA4D,CAAC;QAC9H,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,GAAG,KAAK,IAAI,IAAI,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAChE,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACnD,OAAO,oBAAoB,KAAK,QAAQ,OAAO,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,CACL,uBAAuB,KAAK,oBAAoB,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE;YACpF,UAAU,SAAS,2BAA2B,QAAQ,YAAY;YAClE,iBAAiB,SAAS,sEAAsE,CACjG,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,mFAAmF;QACnF,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,CACL,mBAAmB,KAAK,IAAI,IAAI,IAAI,IAAI,yBAAyB,MAAM,IAAI;YAC3E,mGAAmG;YACnG,sDAAsD,CACvD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,GAAG,CACjB,MAAiB,EACjB,IAAa,EACb,OAAO,GAAsB,IAAI;IAEjC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,cAA2D,CAAC;IAChE,MAAM,UAAU,GAAG,GAAoC,EAAE;QACvD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC,CAAC;IAEF,OAAO,IAAI,CACT,KAAK,EAAE,IAAoB,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;QACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,OAAO,CAAC,CAAC,iEAAiE;QACnF,CAAC;QACD,OAAO,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC,EACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EACT,qFAAqF;YACrF,sFAAsF;YACtF,sFAAsF;YACtF,yFAAyF;YACzF,2CAA2C,QAAQ,sCAAsC;YACzF,2FAA2F;YAC3F,mFAAmF;QACrF,MAAM,EAAE,UAAU;KACnB,CACyB,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,SAAS,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gaunt-sloth/review",
-  "version": "2.0.0-alpha.4",
+  "version": "2.0.0-alpha.40",
   "description": "Review functionality for Gaunt Sloth",
   "license": "MIT",
   "author": "Andrew Kondratev",
@@ -34,11 +34,11 @@
     "#src/*.js": "./dist/*.js"
   },
   "dependencies": {
-    "@langchain/core": "^1.2.1",
-    "@langchain/langgraph": "^1.4.7",
-    "langchain": "^1.5.2",
-    "zod": "^3.25.0 || ^4.0.0",
-    "@gaunt-sloth/core": "2.0.0-alpha.4"
+    "@langchain/core": "^1.2.5",
+    "@langchain/langgraph": "^1.4.9",
+    "langchain": "^1.5.5",
+    "zod": "^4.4.3",
+    "@gaunt-sloth/core": "2.0.0-alpha.40"
   },
   "files": [
     "./dist/*",