BUILT_IN_TOOL_ACCESS

const BUILT_IN_TOOL_ACCESS: Readonly<Record<string, BuiltInToolAccess>>

Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/config/tool-descriptions.ts:108

Access class per built-in tool name. Keyed by NAME, not by owner, so it covers gsloth’s own GthFileSystemToolkit and the conventional filesystem names (ls/glob/grep, and the read_file/write_file/edit_file the two conventions share) that a graph builder or an MCP server may register instead. One flat table serves them all.

Deliberately absent: run_shell_command, the fixed dev-command tools, gth_web_fetch, gth_checklist, gth_status_update, show_a2ui_surface, MCP/custom/A2A tools. None of them is “reading or writing files in the working folder”, so none is granted by a rung’s access class, and at manual/write every one of them escalates to the human.

An MCP tool’s own readOnlyHint earns it nothing here. A server’s self-declared annotation is least earned exactly where the ladder is strictest, so it must not skip the prompt at those two rungs; membership of this table is the only thing that does. Adding a name here grants it at a rung, so add one only for a tool that genuinely reads or writes files in the working folder.