Skip to content

resolveInterruptToolNames

resolveInterruptToolNames(options): readonly string[]

Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/config/shell-policy.ts:1052

The interrupt set: which tool names the agent wires into the approval interrupt. Every bound tool that ANY rung could gate — the union of resolveGatedToolNames over APPROVAL_RUNGS, which in practice is the shell plus every bound tool that is not a built-in READ tool.

One derivation for every backend, for the same reason resolveShellApprovalGate is one: a set computed twice is a set that drifts.

Deliberately rung-independent. The interrupt is installed once, when the agent is built, and /approvals <rung> then moves the rung for the rest of the session without rebuilding it. Only a set that covers every rung can survive that: the interrupt fires and GthAgentRunner.decideToolApproval decides on the rung in force, which is where the rung has always been read. Wiring wider does not gate wider — a call the live rung does not gate is approved there with no rating call and no prompt, so assisted, auto and bypass behave exactly as they do when the interrupt holds the shell alone.

Only for a command that answers approvals (commandAnswersApprovals). A surface that drains nothing gets the shell-gate set instead, because a rung-independent set there parks tool calls nobody can reach.

readonly string[]

boolean

readonly string[]