toolpack-sdk 1.2.0 → 1.4.0

package/dist/index.d.cts

@@ -1,5 +1,149 @@
 import { EventEmitter } from 'events';
 
+/**
+ * Core type definitions for the Tool Calling System.
+ */
+interface ToolParameterProperty {
+    type: 'string' | 'number' | 'boolean' | 'object' | 'array' | 'integer';
+    description?: string;
+    enum?: string[];
+    default?: any;
+    items?: ToolParameterProperty;
+    properties?: Record<string, ToolParameterProperty>;
+    additionalProperties?: ToolParameterProperty | boolean;
+    required?: string[];
+}
+interface ToolParameters {
+    type: 'object';
+    properties: Record<string, ToolParameterProperty>;
+    required?: string[];
+}
+interface ToolContext {
+    /** Absolute path to the workspace/project root */
+    workspaceRoot: string;
+    /** Tool-specific config from toolpack.config.json additionalConfigurations */
+    config: Record<string, any>;
+    /** Scoped logger — writes to toolpack-sdk.log */
+    log: (message: string) => void;
+}
+type ConfirmationLevel$1 = 'high' | 'medium';
+interface ToolConfirmation {
+    level: ConfirmationLevel$1;
+    reason: string;
+    showArgs?: string[];
+}
+interface ToolDefinition {
+    name: string;
+    displayName: string;
+    description: string;
+    parameters: ToolParameters;
+    category: string;
+    execute: (args: Record<string, any>, ctx?: ToolContext) => Promise<string>;
+    /**
+     * Whether this tool should be cached after discovery via tool.search.
+     * If false, the tool must be re-discovered each time it's needed.
+     * Default: true
+     */
+    cacheable?: boolean;
+    /**
+     * Human-in-the-loop confirmation configuration.
+     * If set, the tool will require user confirmation before execution.
+     * Note: Only effective when onToolConfirm callback is provided to AIClient.
+     */
+    confirmation?: ToolConfirmation;
+}
+/**
+ * Schema-only version of ToolDefinition (no execute function).
+ * Used for serialization and sending to AI providers.
+ */
+interface ToolSchema {
+    name: string;
+    displayName: string;
+    description: string;
+    parameters: ToolParameters;
+    category: string;
+    /**
+     * Whether this tool should be cached after discovery via tool.search.
+     * If false, the tool must be re-discovered each time it's needed.
+     * Default: true
+     */
+    cacheable?: boolean;
+}
+interface ToolProjectManifest {
+    key: string;
+    name: string;
+    displayName: string;
+    version: string;
+    description: string;
+    author?: string;
+    repository?: string;
+    tools: string[];
+    category: string;
+}
+interface ToolProjectDependencies {
+    [packageName: string]: string;
+}
+interface ToolProject {
+    manifest: ToolProjectManifest;
+    tools: ToolDefinition[];
+    dependencies?: ToolProjectDependencies;
+}
+interface ToolCall {
+    id: string;
+    name: string;
+    arguments: Record<string, any>;
+}
+interface ToolResult {
+    tool_call_id: string;
+    name: string;
+    result: string;
+    error?: string;
+}
+interface ToolCategory {
+    name: string;
+    description: string;
+    tools: string[];
+}
+/**
+ * @deprecated This interface is deprecated and will be removed in a future version.
+ */
+interface IntelligentToolDetectionConfig {
+    enabled: boolean;
+    maxFollowUpMessages: number;
+}
+/**
+ * Tool Search Configuration (Anthropic-style on-demand tool discovery)
+ */
+interface ToolSearchConfig {
+    enabled: boolean;
+    alwaysLoadedTools: string[];
+    alwaysLoadedCategories: string[];
+    searchResultLimit: number;
+    cacheDiscoveredTools: boolean;
+}
+interface ToolsConfig {
+    enabled: boolean;
+    autoExecute: boolean;
+    maxToolRounds: number;
+    toolChoicePolicy?: 'auto' | 'required' | 'required_for_actions';
+    resultMaxChars?: number;
+    /**
+     * @deprecated This feature is deprecated and will be removed in a future version. Use `toolSearch` instead.
+     */
+    intelligentToolDetection?: IntelligentToolDetectionConfig;
+    enabledTools: string[];
+    enabledToolCategories: string[];
+    toolSearch?: ToolSearchConfig;
+    additionalConfigurations?: {
+        [key: string]: any;
+    };
+}
+/**
+ * Default Tool Search Configuration
+ */
+declare const DEFAULT_TOOL_SEARCH_CONFIG: ToolSearchConfig;
+declare const DEFAULT_TOOLS_CONFIG: ToolsConfig;
+
 type Role = 'system' | 'user' | 'assistant' | 'tool';
 interface TextPart {
     type: 'text';
@@ -169,6 +313,33 @@ interface ToolLogEvent {
     status: 'success' | 'error';
     timestamp: number;
 }
+
+type ConfirmationDecision = {
+    action: 'allow';
+} | {
+    action: 'deny';
+    reason?: string;
+} | {
+    action: 'modify';
+    args: Record<string, any>;
+};
+interface ToolConfirmationRequestedEvent {
+    tool: ToolDefinition;
+    args: Record<string, any>;
+    level: ConfirmationLevel$1;
+    reason: string;
+}
+interface ToolConfirmationResolvedEvent extends ToolConfirmationRequestedEvent {
+    decision: ConfirmationDecision;
+}
+/**
+ * Callback type for handling tool confirmation requests.
+ * Called before executing tools that have confirmation metadata set.
+ */
+type OnToolConfirmCallback = (tool: ToolDefinition, args: Record<string, any>, context: {
+    roundNumber: number;
+    conversationId?: string;
+}) => Promise<ConfirmationDecision>;
 /**
  * Information about a single model available from a provider.
  */
@@ -304,137 +475,6 @@ declare abstract class ProviderAdapter {
     deleteFile(_fileId: string): Promise<void>;
 }
 
-/**
- * Core type definitions for the Tool Calling System.
- */
-interface ToolParameterProperty {
-    type: 'string' | 'number' | 'boolean' | 'object' | 'array' | 'integer';
-    description?: string;
-    enum?: string[];
-    default?: any;
-    items?: ToolParameterProperty;
-    properties?: Record<string, ToolParameterProperty>;
-    required?: string[];
-}
-interface ToolParameters {
-    type: 'object';
-    properties: Record<string, ToolParameterProperty>;
-    required?: string[];
-}
-interface ToolContext {
-    /** Absolute path to the workspace/project root */
-    workspaceRoot: string;
-    /** Tool-specific config from toolpack.config.json additionalConfigurations */
-    config: Record<string, any>;
-    /** Scoped logger — writes to toolpack-sdk.log */
-    log: (message: string) => void;
-}
-interface ToolDefinition {
-    name: string;
-    displayName: string;
-    description: string;
-    parameters: ToolParameters;
-    category: string;
-    execute: (args: Record<string, any>, ctx?: ToolContext) => Promise<string>;
-    /**
-     * Whether this tool should be cached after discovery via tool.search.
-     * If false, the tool must be re-discovered each time it's needed.
-     * Default: true
-     */
-    cacheable?: boolean;
-}
-/**
- * Schema-only version of ToolDefinition (no execute function).
- * Used for serialization and sending to AI providers.
- */
-interface ToolSchema {
-    name: string;
-    displayName: string;
-    description: string;
-    parameters: ToolParameters;
-    category: string;
-    /**
-     * Whether this tool should be cached after discovery via tool.search.
-     * If false, the tool must be re-discovered each time it's needed.
-     * Default: true
-     */
-    cacheable?: boolean;
-}
-interface ToolProjectManifest {
-    key: string;
-    name: string;
-    displayName: string;
-    version: string;
-    description: string;
-    author?: string;
-    repository?: string;
-    tools: string[];
-    category: string;
-}
-interface ToolProjectDependencies {
-    [packageName: string]: string;
-}
-interface ToolProject {
-    manifest: ToolProjectManifest;
-    tools: ToolDefinition[];
-    dependencies?: ToolProjectDependencies;
-}
-interface ToolCall {
-    id: string;
-    name: string;
-    arguments: Record<string, any>;
-}
-interface ToolResult {
-    tool_call_id: string;
-    name: string;
-    result: string;
-    error?: string;
-}
-interface ToolCategory {
-    name: string;
-    description: string;
-    tools: string[];
-}
-/**
- * @deprecated This interface is deprecated and will be removed in a future version.
- */
-interface IntelligentToolDetectionConfig {
-    enabled: boolean;
-    maxFollowUpMessages: number;
-}
-/**
- * Tool Search Configuration (Anthropic-style on-demand tool discovery)
- */
-interface ToolSearchConfig {
-    enabled: boolean;
-    alwaysLoadedTools: string[];
-    alwaysLoadedCategories: string[];
-    searchResultLimit: number;
-    cacheDiscoveredTools: boolean;
-}
-interface ToolsConfig {
-    enabled: boolean;
-    autoExecute: boolean;
-    maxToolRounds: number;
-    toolChoicePolicy?: 'auto' | 'required' | 'required_for_actions';
-    resultMaxChars?: number;
-    /**
-     * @deprecated This feature is deprecated and will be removed in a future version. Use `toolSearch` instead.
-     */
-    intelligentToolDetection?: IntelligentToolDetectionConfig;
-    enabledTools: string[];
-    enabledToolCategories: string[];
-    toolSearch?: ToolSearchConfig;
-    additionalConfigurations?: {
-        [key: string]: any;
-    };
-}
-/**
- * Default Tool Search Configuration
- */
-declare const DEFAULT_TOOL_SEARCH_CONFIG: ToolSearchConfig;
-declare const DEFAULT_TOOLS_CONFIG: ToolsConfig;
-
 /**
  * Central registry for all tools (built-in + custom).
  * Handles registration, lookup, filtering by category, schema extraction,
@@ -592,6 +632,10 @@ interface Plan {
 }
 
 interface WorkflowConfig {
+    /**
+     * Workflow name for display purposes.
+     */
+    name?: string;
     /**
      * Planning phase configuration.
      * If enabled, AI generates a plan before executing.
@@ -621,6 +665,8 @@ interface WorkflowConfig {
         allowDynamicSteps?: boolean;
         /** Maximum total steps (including dynamic). Default: 50 */
         maxTotalSteps?: number;
+        /** Custom step execution prompt. Default: uses built-in STEP_EXECUTION_PROMPT */
+        stepPrompt?: string;
     };
     /**
      * Progress reporting configuration.
@@ -636,9 +682,19 @@ interface WorkflowConfig {
      */
     onFailure?: {
         /** Strategy when a step fails after all retries. Default: 'abort' */
-        strategy: 'abort' | 'skip' | 'ask_user' | 'try_alternative';
-        /** If 'try_alternative', allow AI to choose a different approach */
-        allowAlternativePath?: boolean;
+        strategy: 'abort' | 'skip' | 'ask_user';
+    };
+    /**
+     * Query complexity routing configuration.
+     * Routes simple queries to faster execution paths based on query classification.
+     */
+    complexityRouting?: {
+        /** Enable complexity-based routing. Default: false (opt-in) */
+        enabled: boolean;
+        /** Routing strategy for simple queries. Default: 'single-step' */
+        strategy: 'single-step' | 'bypass' | 'disabled';
+        /** Confidence threshold for routing analytical queries. Default: 0.6 */
+        confidenceThreshold?: number;
     };
 }
 /**
@@ -772,6 +828,129 @@ interface ModeBlockedHint {
     suggestedMode: string;
 }
 
+type ConfirmationLevel = 'high' | 'medium';
+interface OllamaModelConfig {
+    /** Model name as used by Ollama, e.g. 'llama3', 'phi3:mini' */
+    model: string;
+    /** Display label for the UI */
+    label?: string;
+}
+interface HitlConfig {
+    /** Master switch. Default: true */
+    enabled?: boolean;
+    /** Confirmation mode. Default: 'all' */
+    confirmationMode?: 'off' | 'high-only' | 'all';
+    /** Bypass rules for specific tools, categories, or risk levels */
+    bypass?: {
+        /** Tool keys to bypass (e.g. ["exec.run", "fs.delete_file"]) */
+        tools?: string[];
+        /** Categories to bypass (e.g. ["exec-tools"]) */
+        categories?: string[];
+        /** Risk levels to bypass (e.g. ["medium"]) */
+        levels?: ConfirmationLevel[];
+    };
+}
+interface ToolpackConfig {
+    /** Optional override system prompt for the AIClient */
+    systemPrompt?: string;
+    /** @deprecated Use `baseContext: false` instead. Legacy: disable auto-injected base agent context. */
+    disableBaseContext?: boolean;
+    /** Base agent context configuration. `false` disables it entirely. */
+    baseContext?: {
+        includeWorkingDirectory?: boolean;
+        includeToolCategories?: boolean;
+        custom?: string;
+    } | false;
+    /** Optional system prompt overrides for specific modes */
+    modeOverrides?: Record<string, Partial<ModeConfig>>;
+    /** Ollama provider configuration */
+    ollama?: {
+        /** Base URL for the Ollama API. Default: http://localhost:11434 */
+        baseUrl?: string;
+        /** List of Ollama models available as providers */
+        models?: OllamaModelConfig[];
+    };
+    /** Logging configuration. File logging is opt-in (disabled by default). */
+    logging?: {
+        /** Enable file logging. Default: false */
+        enabled?: boolean;
+        /** Log file path. Default: 'toolpack-sdk.log' in CWD */
+        filePath?: string;
+    };
+    /** Human-in-the-loop configuration for tool confirmation */
+    hitl?: HitlConfig;
+}
+declare function getToolpackConfig(configPath?: string): ToolpackConfig;
+declare function reloadToolpackConfig(): void;
+interface OllamaProviderEntry {
+    /** Provider type key, e.g. 'ollama-llama3' */
+    type: string;
+    /** Ollama model name, e.g. 'llama3' */
+    model: string;
+    /** Display label */
+    label: string;
+}
+declare function getOllamaProviderEntries(configPath?: string): OllamaProviderEntry[];
+declare function getOllamaBaseUrl(configPath?: string): string;
+type BypassRuleType = 'tool' | 'category' | 'level';
+interface AddBypassRuleOptions {
+    /** Type of bypass rule */
+    type: BypassRuleType;
+    /** Value to bypass (tool name, category, or level) */
+    value: string;
+    /** Optional config path. If not provided, uses local config or creates one */
+    configPath?: string;
+}
+/**
+ * Add a bypass rule to the HITL config and persist it to the config file.
+ * This is useful for implementing "Allow Always" functionality.
+ *
+ * @example
+ * // Bypass a specific tool
+ * await addBypassRule({ type: 'tool', value: 'fs.write_file' });
+ *
+ * // Bypass all medium-risk tools
+ * await addBypassRule({ type: 'level', value: 'medium' });
+ *
+ * // Bypass an entire category
+ * await addBypassRule({ type: 'category', value: 'exec-tools' });
+ */
+declare function addBypassRule(options: AddBypassRuleOptions): Promise<void>;
+/**
+ * Remove a bypass rule from the HITL config.
+ *
+ * @example
+ * await removeBypassRule({ type: 'tool', value: 'fs.write_file' });
+ */
+declare function removeBypassRule(options: AddBypassRuleOptions): Promise<void>;
+
+/**
+ * Query Classifier for Tool Orchestration
+ *
+ * Classifies user queries into analytical, action, or conversational types
+ * to optimize tool execution strategy (e.g., adjust maxToolRounds).
+ */
+type QueryType = 'analytical' | 'action' | 'conversational';
+interface QueryClassification {
+    type: QueryType;
+    confidence: number;
+    reasoning?: string;
+}
+declare class QueryClassifier {
+    private analyticalPatterns;
+    private actionPatterns;
+    /**
+     * Classify a user query based on pattern matching.
+     * Returns the query type and confidence score.
+     */
+    classify(userMessage: string): QueryClassification;
+    /**
+     * Get recommended maxToolRounds adjustment based on query type.
+     * Returns a multiplier or bonus rounds.
+     */
+    getToolRoundsAdjustment(classification: QueryClassification, baseRounds: number): number;
+}
+
 interface AIClientConfig {
     providers: Record<string, ProviderAdapter>;
     defaultProvider?: string;
@@ -779,6 +958,12 @@ interface AIClientConfig {
     toolsConfig?: ToolsConfig;
     systemPrompt?: string;
     disableBaseContext?: boolean;
+    /** Human-in-the-loop configuration for tool confirmation */
+    hitlConfig?: HitlConfig;
+    /** Callback for handling tool confirmation requests */
+    onToolConfirm?: OnToolConfirmCallback;
+    /** Optional conversation ID for tracking context */
+    conversationId?: string;
 }
 declare class AIClient extends EventEmitter {
     private providers;
@@ -793,7 +978,16 @@ declare class AIClient extends EventEmitter {
     private overrideSystemPrompt?;
     private disableBaseContext;
     private toolResultMaxChars;
+    private hitlConfig?;
+    private onToolConfirm?;
+    private currentRound;
+    private conversationId?;
     constructor(config: AIClientConfig);
+    /**
+     * Check if a tool should bypass confirmation based on HITL config.
+     * Returns true if the tool should execute without confirmation.
+     */
+    private isBypassed;
     /**
      * Register a new provider instance.
      */
@@ -802,6 +996,15 @@ declare class AIClient extends EventEmitter {
      * Get a provider by name, or the default if none specified.
      */
     getProvider(name?: string): ProviderAdapter;
+    /**
+     * Update the HITL configuration dynamically.
+     * This allows modifying bypass rules without restarting the client.
+     */
+    updateHitlConfig(config: HitlConfig): void;
+    /**
+     * Get the current HITL configuration.
+     */
+    getHitlConfig(): HitlConfig | undefined;
     /**
      * Set the default provider for this client.
      */
@@ -835,6 +1038,10 @@ declare class AIClient extends EventEmitter {
      * Get the currently active mode.
      */
     getMode(): ModeConfig | null;
+    /**
+     * Get the query classifier instance.
+     */
+    getQueryClassifier(): QueryClassifier;
     /**
      * Re-index tools for BM25 search.
      * Call this after adding/removing tools from the registry.
@@ -975,53 +1182,6 @@ declare class GeminiAdapter extends ProviderAdapter {
     private handleError;
 }
 
-interface OllamaModelConfig {
-    /** Model name as used by Ollama, e.g. 'llama3', 'phi3:mini' */
-    model: string;
-    /** Display label for the UI */
-    label?: string;
-}
-interface ToolpackConfig {
-    /** Optional override system prompt for the AIClient */
-    systemPrompt?: string;
-    /** @deprecated Use `baseContext: false` instead. Legacy: disable auto-injected base agent context. */
-    disableBaseContext?: boolean;
-    /** Base agent context configuration. `false` disables it entirely. */
-    baseContext?: {
-        includeWorkingDirectory?: boolean;
-        includeToolCategories?: boolean;
-        custom?: string;
-    } | false;
-    /** Optional system prompt overrides for specific modes */
-    modeOverrides?: Record<string, Partial<ModeConfig>>;
-    /** Ollama provider configuration */
-    ollama?: {
-        /** Base URL for the Ollama API. Default: http://localhost:11434 */
-        baseUrl?: string;
-        /** List of Ollama models available as providers */
-        models?: OllamaModelConfig[];
-    };
-    /** Logging configuration. File logging is opt-in (disabled by default). */
-    logging?: {
-        /** Enable file logging. Default: false */
-        enabled?: boolean;
-        /** Log file path. Default: 'toolpack-sdk.log' in CWD */
-        filePath?: string;
-    };
-}
-declare function getToolpackConfig(configPath?: string): ToolpackConfig;
-declare function reloadToolpackConfig(): void;
-interface OllamaProviderEntry {
-    /** Provider type key, e.g. 'ollama-llama3' */
-    type: string;
-    /** Ollama model name, e.g. 'llama3' */
-    model: string;
-    /** Display label */
-    label: string;
-}
-declare function getOllamaProviderEntries(configPath?: string): OllamaProviderEntry[];
-declare function getOllamaBaseUrl(configPath?: string): string;
-
 /**
  * Ollama Adapter
  *
@@ -1433,6 +1593,7 @@ declare class McpClient extends EventEmitter {
     constructor(config: McpClientConfig);
     /** Whether the client is currently connected */
     get connected(): boolean;
+    private initializeServer;
     connect(): Promise<void>;
     private attemptReconnect;
     private handleData;
@@ -1486,6 +1647,7 @@ declare class McpToolManager {
     private clients;
     private serverConfigs;
     private toolDefinitions;
+    private toolOwners;
     constructor(config: McpToolsConfig);
     /**
      * Connect to a single MCP server and discover its tools
@@ -1523,6 +1685,12 @@ declare class McpToolManager {
      * Set up event handlers for an MCP client
      */
     private setupClientEvents;
+    private removeServerToolDefinitions;
+    private discoverServerTools;
+    private refreshServerTools;
+}
+interface McpToolProject extends ToolProject {
+    mcpManager: McpToolManager;
 }
 /**
  * Create an MCP tool project from server configurations
@@ -1553,11 +1721,11 @@ declare class McpToolManager {
  * });
  * ```
  */
-declare function createMcpToolProject(config: McpToolsConfig): Promise<ToolProject>;
+declare function createMcpToolProject(config: McpToolsConfig): Promise<McpToolProject>;
 /**
  * Disconnect all MCP servers in a tool project
  */
-declare function disconnectMcpToolProject(project: ToolProject): Promise<void>;
+declare function disconnectMcpToolProject(project: ToolProject | McpToolProject): Promise<void>;
 
 interface FullConfig {
     tools?: Partial<ToolsConfig>;
@@ -1567,6 +1735,7 @@ interface FullConfig {
     baseContext?: boolean;
     modeOverrides?: Record<string, any>;
     mcp?: McpToolsConfig;
+    hitl?: HitlConfig;
 }
 /**
  * Load the full config from toolpack.config.json.
@@ -1734,6 +1903,20 @@ declare const cloudListTool: ToolDefinition;
 
 declare const cloudToolsProject: ToolProject;
 
+declare const k8sListPodsTool: ToolDefinition;
+declare const k8sDescribeTool: ToolDefinition;
+declare const k8sGetLogsTool: ToolDefinition;
+declare const k8sApplyManifestTool: ToolDefinition;
+declare const k8sDeleteResourceTool: ToolDefinition;
+declare const k8sListServicesTool: ToolDefinition;
+declare const k8sListDeploymentsTool: ToolDefinition;
+declare const k8sGetConfigMapTool: ToolDefinition;
+declare const k8sSwitchContextTool: ToolDefinition;
+declare const k8sGetNamespacesTool: ToolDefinition;
+declare const k8sWaitForDeploymentTool: ToolDefinition;
+
+declare const k8sToolsProject: ToolProject;
+
 /**
  * Central registry for AI agent modes (built-in + custom).
  * Handles registration, lookup, cycling, and defaults.
@@ -1861,7 +2044,10 @@ declare const CHAT_MODE: ModeConfig;
 /**
  * All built-in modes.
  *
- * Two modes: Agent (full access + workflow) and Chat (web access only)
+ * Three modes:
+ * - Agent (full access + workflow)
+ * - Coding (concise, coding-focused workflow)
+ * - Chat (web access only)
  */
 declare const BUILT_IN_MODES: readonly ModeConfig[];
 /**
@@ -1877,10 +2063,6 @@ declare class Planner {
      * Create a detailed step-by-step plan from the user's request.
      */
     createPlan(request: CompletionRequest, providerName?: string): Promise<Plan>;
-    /**
-     * Create a lightweight implicit plan when steps are enabled but planning phase is skipped.
-     */
-    createImplicitPlan(request: CompletionRequest, providerName?: string): Promise<Plan>;
     private parsePlan;
     private createFallbackPlan;
 }
@@ -1918,8 +2100,9 @@ declare class WorkflowExecutor extends EventEmitter {
     private config;
     private planner;
     private stepExecutor;
+    private queryClassifier;
     private pendingApprovals;
-    constructor(client: AIClient, config: WorkflowConfig);
+    constructor(client: AIClient, config: WorkflowConfig, queryClassifier?: QueryClassifier);
     /**
      * Get the active configuration.
      */
@@ -1928,6 +2111,11 @@ declare class WorkflowExecutor extends EventEmitter {
      * Update the configuration.
      */
     setConfig(config: WorkflowConfig): void;
+    /**
+     * Determine if a query should bypass full workflow and use direct execution.
+     * Routes simple queries to single-step execution for performance optimization.
+     */
+    private shouldRouteSimpleQuery;
     /**
      * Execute a request using the configured workflow.
      */
@@ -1961,8 +2149,9 @@ declare class WorkflowExecutor extends EventEmitter {
      */
     private summarizePlanResult;
     /**
-     * Extract the final output from the last completed step.
-     * Returns the actual AI response instead of a workflow summary.
+     * Extract the final output from the plan.
+     * For plans with synthesis step: returns last step output.
+     * For plans without synthesis: concatenates all step outputs.
      */
     private extractFinalOutput;
     /**
@@ -2004,6 +2193,47 @@ declare class WorkflowExecutor extends EventEmitter {
     rejectPlan(planId: string): void;
 }
 
+/**
+ * Agent planning prompt.
+ * Full detailed planning for general autonomous tasks.
+ */
+declare const AGENT_PLANNING_PROMPT = "\nYou are a planning assistant. Given a user request, create a detailed step-by-step plan.\n\nRules:\n1. Break the task into clear, actionable steps\n2. Each step should be independently executable WITHOUT requiring additional user input\n3. Order steps by dependencies (what must happen first)\n4. Be specific about what each step will accomplish\n5. Estimate which tools will be needed for each step\n6. If the user's request is ambiguous, make reasonable assumptions and proceed - do NOT create steps that ask for clarification\n7. Steps should produce concrete outputs, not ask questions or wait for user input\n8. ALWAYS include at least one step, even for simple questions. For simple factual questions, create a single step like \"Provide the answer to [question]\"\n9. When a step uses information gathered by a previous step, set \"dependsOn\" to that step's number and phrase the description as \"Using the [data] from step N, [do something]\" instead of gathering it again\n10. For plans with MORE than 2 steps, the final step must synthesize the workflow's results into a concise deliverable, avoiding redundant word-for-word repetition of earlier step outputs. For plans with 1-2 steps, no synthesis step is needed.\n11. The exact result MUST be valid JSON matching this schema:\n{\n  \"summary\": \"Brief description of the overall goal\",\n  \"steps\": [\n    {\n      \"number\": 1,\n      \"description\": \"What this step does\",\n      \"expectedTools\": [\"tool.name\"],\n      \"dependsOn\": []\n    }\n  ]\n}\n";
+/**
+ * Agent step execution prompt.
+ * Standard execution with detailed instructions.
+ */
+declare const AGENT_STEP_PROMPT = "\nYou are executing step {stepNumber} of a plan.\n\nPlan summary: {planSummary}\n\nCurrent step: {stepDescription}\n\nPrevious steps completed:\n{previousStepsResults}\n\nExecute this step now. Use the available tools as needed to accomplish this specific step.\nMake reasonable assumptions if any details are ambiguous - do NOT ask the user for clarification or additional input.\nProduce concrete results based on the information available.\nIf you cannot complete this step, explain why.\n\nIMPORTANT: Your response should be written as if you are directly answering the user.\nDo NOT mention steps, plans, workflow details, or internal process in your response.\nDo NOT say things like \"Step 1 is complete\" or \"proceeding to the next step\".\nJust provide the actual answer or result naturally.\n";
+/**
+ * Default workflow configuration.
+ * Direct execution with no planning or steps.
+ */
+declare const DEFAULT_WORKFLOW: WorkflowConfig;
+/**
+ * Agent workflow configuration.
+ * Full planning and step execution with dynamic steps disabled.
+ */
+declare const AGENT_WORKFLOW: WorkflowConfig;
+/**
+ * Concise planning prompt for coding tasks.
+ * Minimal rules focused on actionable code changes.
+ */
+declare const CODING_PLANNING_PROMPT = "\nCreate a step-by-step plan for this coding task.\n\nRules:\n1. Break into actionable steps using tools (read/write files, search code)\n2. Each step executes independently without user input\n3. Order by dependencies\n4. Individual steps: be concise and technical. No conversational filler.\n5. For >2 steps, final step summarizes changes with conversational explanation\n6. Output valid JSON: {\"summary\": \"...\", \"steps\": [{...}]}\n\nJSON Schema:\n{\n  \"summary\": \"Brief description of the overall goal\",\n  \"steps\": [\n    {\n      \"number\": 1,\n      \"description\": \"What this step does\",\n      \"expectedTools\": [\"tool.name\"],\n      \"dependsOn\": []\n    }\n  ]\n}\n";
+/**
+ * Concise step execution prompt for coding tasks.
+ * No meta-commentary, focused on tool usage.
+ */
+declare const CODING_STEP_PROMPT = "\nExecute step {stepNumber}: {stepDescription}\n\nPlan: {planSummary}\n\nPrevious: {previousStepsResults}\n\nUse tools. Be concise. Show code changes clearly.\nNo meta-commentary about steps or workflow.\n";
+/**
+ * Coding workflow configuration.
+ * Concise prompts optimized for software development tasks.
+ */
+declare const CODING_WORKFLOW: WorkflowConfig;
+/**
+ * Chat workflow configuration.
+ * No planning or steps - direct conversational responses.
+ */
+declare const CHAT_WORKFLOW: WorkflowConfig;
+
 interface ProviderOptions {
     /**
      * API key for the provider.
@@ -2064,6 +2294,22 @@ interface ToolpackInitConfig {
      * Accepts any object with a `toTool()` method (e.g. `Knowledge` from `@toolpack-sdk/knowledge`).
      */
     knowledge?: KnowledgeInstance | null;
+    /**
+     * Human-in-the-loop configuration for tool confirmation.
+     * Default: 'all' when onToolConfirm is provided, 'off' otherwise.
+     */
+    confirmationMode?: 'off' | 'high-only' | 'all';
+    /**
+     * Callback for handling tool confirmation requests.
+     * Called before executing tools that have confirmation metadata set.
+     * If not provided, HITL is disabled regardless of confirmationMode.
+     */
+    onToolConfirm?: (tool: ToolDefinition, args: Record<string, any>, context: {
+        roundNumber: number;
+        conversationId?: string;
+    }) => Promise<ConfirmationDecision>;
+    /** Optional conversation ID for tracking context across confirmations */
+    conversationId?: string;
 }
 /**
  * Duck-typed interface for Knowledge instances to avoid circular dependency
@@ -2129,6 +2375,12 @@ declare class Toolpack extends EventEmitter {
      * Useful for listening to tool progress events.
      */
     getClient(): AIClient;
+    /**
+     * Reload configuration from the config file.
+     * This updates the HITL config in the running instance.
+     * Call this after modifying config (e.g., bypass rules) to apply changes immediately.
+     */
+    reloadConfig(configPath?: string): void;
     /**
      * Get the WorkflowExecutor instance.
      * Useful for workflow events and approval flows.
@@ -2273,4 +2525,4 @@ interface McpServerCapabilities {
     prompts?: Record<string, any>;
 }
 
-export { AGENT_MODE, AIClient, type AIClientConfig, AnthropicAdapter, AuthenticationError, BM25SearchEngine, BUILT_IN_MODES, CHAT_MODE, CONFIG_DIR_NAME, CONFIG_FILE_NAME, type CompletionChunk, type CompletionOptions, type CompletionRequest, type CompletionResponse, ConnectionError, DEFAULT_MODE_NAME, DEFAULT_TOOLS_CONFIG, DEFAULT_TOOL_SEARCH_CONFIG, DEFAULT_WORKFLOW_CONFIG, type EmbeddingRequest, type EmbeddingResponse, type FileUploadRequest, type FileUploadResponse, GeminiAdapter, type ImageDataPart, type ImageFilePart, type ImagePart, type ImageUrlPart, type IntelligentToolDetectionConfig, InvalidRequestError, type JsonRpcRequest, type JsonRpcResponse, type KnowledgeInstance, McpClient, type McpClientConfig, McpConnectionError, type McpServerCapabilities, type McpServerConfig, McpTimeoutError, type McpTool, McpToolManager, type McpToolsConfig, type MediaOptions, type MediaUploadStrategy, type Message, type MessageContent, type ModeBlockedHint, type ModeConfig, ModeRegistry, OllamaAdapter, type OllamaAdapterConfig, type OllamaModelInfo, OllamaProvider, type OllamaProviderEntry, OpenAIAdapter, PageError, type Plan, type PlanStep, Planner, ProviderAdapter, type ProviderConfig, ProviderError, type ProviderInfo, type ProviderModelInfo, type ProviderOptions, RateLimitError, type Role, type RuntimeConfigStatus, SDKError, type SearchHistoryEntry, type SearchOptions, type SearchResult, type SlmModelEntry, StepExecutor, TOOLPACK_DIR_NAME, TOOL_SEARCH_NAME, type TextPart, TimeoutError, type ToolCall, type ToolCallFunction, type ToolCallMessage, type ToolCallRequest, type ToolCallResult, type ToolCategory, type ToolContext, type ToolDefinition, ToolDiscoveryCache, type ToolLogEvent, type ToolParameterProperty, type ToolParameters, type ToolProgressEvent, type ToolProject, type ToolProjectDependencies, type ToolProjectManifest, ToolRegistry, type ToolResult, ToolRouter, type ToolSchema, type ToolSearchConfig, Toolpack, type ToolpackConfig, type ToolpackInitConfig, type ToolsConfig, type Usage, type WorkflowConfig, type WorkflowEvents, WorkflowExecutor, type WorkflowProgress, type WorkflowResult, cloudDeployTool, cloudListTool, cloudStatusTool, cloudToolsProject, codingFindSymbolTool, codingGetImportsTool, codingGetSymbolsTool, codingToolsProject, createMcpToolProject, createMode, createToolProject, dbCountTool, dbDeleteTool, dbInsertTool, dbQueryTool, dbSchemaTool, dbTablesTool, dbToolsProject, dbUpdateTool, diffApplyTool, diffCreateTool, diffPreviewTool, diffToolsProject, disconnectMcpToolProject, ensureGlobalConfigDir, ensureLocalConfigDir, execKillTool, execListProcessesTool, execReadOutputTool, execRunBackgroundTool, execRunShellTool, execRunTool, execToolsProject, fetchUrlAsBase64, fsAppendFileTool, fsCopyTool, fsCreateDirTool, fsDeleteFileTool, fsExistsTool, fsListDirTool, fsMoveTool, fsReadFileRangeTool, fsReadFileTool, fsReplaceInFileTool, fsSearchTool, fsStatTool, fsToolsProject, fsTreeTool, fsWriteFileTool, generateToolCategoriesPrompt, getDefaultSlmModel, getGlobalConfigDir, getGlobalConfigPath, getGlobalToolpackDir, getLocalConfigDir, getLocalConfigPath, getLocalToolpackDir, getMimeType, getOllamaBaseUrl, getOllamaProviderEntries, getRegisteredSlmModels, getRuntimeConfigStatus, getToolSearchSchema, getToolpackConfig, getUserHomeDir, gitAddTool, gitBlameTool, gitBranchCreateTool, gitBranchListTool, gitCheckoutTool, gitCommitTool, gitDiffTool, gitLogTool, gitStatusTool, gitToolsProject, httpDeleteTool, httpDownloadTool, httpGetTool, httpPostTool, httpPutTool, httpToolsProject, initializeGlobalConfigIfFirstRun, isDataUri, isRegisteredSlm, isToolSearchTool, loadFullConfig, loadRuntimeConfig, loadToolsConfig, normalizeImagePart, ollamaRequest, ollamaStream, parseDataUri, readFileAsBase64, reloadToolpackConfig, saveToolsConfig, systemCwdTool, systemDiskUsageTool, systemEnvTool, systemInfoTool, systemSetEnvTool, systemToolsProject, toDataUri, toolSearchDefinition, webExtractLinksTool, webFetchTool, webScrapeTool, webSearchTool, webToolsProject };
+export { AGENT_MODE, AGENT_PLANNING_PROMPT, AGENT_STEP_PROMPT, AGENT_WORKFLOW, AIClient, type AIClientConfig, type AddBypassRuleOptions, AnthropicAdapter, AuthenticationError, BM25SearchEngine, BUILT_IN_MODES, type BypassRuleType, CHAT_MODE, CHAT_WORKFLOW, CODING_PLANNING_PROMPT, CODING_STEP_PROMPT, CODING_WORKFLOW, CONFIG_DIR_NAME, CONFIG_FILE_NAME, type CompletionChunk, type CompletionOptions, type CompletionRequest, type CompletionResponse, type ConfirmationDecision, type ConfirmationLevel$1 as ConfirmationLevel, ConnectionError, DEFAULT_MODE_NAME, DEFAULT_TOOLS_CONFIG, DEFAULT_TOOL_SEARCH_CONFIG, DEFAULT_WORKFLOW, DEFAULT_WORKFLOW_CONFIG, type EmbeddingRequest, type EmbeddingResponse, type FileUploadRequest, type FileUploadResponse, GeminiAdapter, type HitlConfig, type ImageDataPart, type ImageFilePart, type ImagePart, type ImageUrlPart, type IntelligentToolDetectionConfig, InvalidRequestError, type JsonRpcRequest, type JsonRpcResponse, type KnowledgeInstance, McpClient, type McpClientConfig, McpConnectionError, type McpServerCapabilities, type McpServerConfig, McpTimeoutError, type McpTool, McpToolManager, type McpToolsConfig, type MediaOptions, type MediaUploadStrategy, type Message, type MessageContent, type ModeBlockedHint, type ModeConfig, ModeRegistry, OllamaAdapter, type OllamaAdapterConfig, type OllamaModelInfo, OllamaProvider, type OllamaProviderEntry, type OnToolConfirmCallback, OpenAIAdapter, PageError, type Plan, type PlanStep, Planner, ProviderAdapter, type ProviderConfig, ProviderError, type ProviderInfo, type ProviderModelInfo, type ProviderOptions, RateLimitError, type Role, type RuntimeConfigStatus, SDKError, type SearchHistoryEntry, type SearchOptions, type SearchResult, type SlmModelEntry, StepExecutor, TOOLPACK_DIR_NAME, TOOL_SEARCH_NAME, type TextPart, TimeoutError, type ToolCall, type ToolCallFunction, type ToolCallMessage, type ToolCallRequest, type ToolCallResult, type ToolCategory, type ToolConfirmation, type ToolConfirmationRequestedEvent, type ToolConfirmationResolvedEvent, type ToolContext, type ToolDefinition, ToolDiscoveryCache, type ToolLogEvent, type ToolParameterProperty, type ToolParameters, type ToolProgressEvent, type ToolProject, type ToolProjectDependencies, type ToolProjectManifest, ToolRegistry, type ToolResult, ToolRouter, type ToolSchema, type ToolSearchConfig, Toolpack, type ToolpackConfig, type ToolpackInitConfig, type ToolsConfig, type Usage, type WorkflowConfig, type WorkflowEvents, WorkflowExecutor, type WorkflowProgress, type WorkflowResult, addBypassRule, cloudDeployTool, cloudListTool, cloudStatusTool, cloudToolsProject, codingFindSymbolTool, codingGetImportsTool, codingGetSymbolsTool, codingToolsProject, createMcpToolProject, createMode, createToolProject, dbCountTool, dbDeleteTool, dbInsertTool, dbQueryTool, dbSchemaTool, dbTablesTool, dbToolsProject, dbUpdateTool, diffApplyTool, diffCreateTool, diffPreviewTool, diffToolsProject, disconnectMcpToolProject, ensureGlobalConfigDir, ensureLocalConfigDir, execKillTool, execListProcessesTool, execReadOutputTool, execRunBackgroundTool, execRunShellTool, execRunTool, execToolsProject, fetchUrlAsBase64, fsAppendFileTool, fsCopyTool, fsCreateDirTool, fsDeleteFileTool, fsExistsTool, fsListDirTool, fsMoveTool, fsReadFileRangeTool, fsReadFileTool, fsReplaceInFileTool, fsSearchTool, fsStatTool, fsToolsProject, fsTreeTool, fsWriteFileTool, generateToolCategoriesPrompt, getDefaultSlmModel, getGlobalConfigDir, getGlobalConfigPath, getGlobalToolpackDir, getLocalConfigDir, getLocalConfigPath, getLocalToolpackDir, getMimeType, getOllamaBaseUrl, getOllamaProviderEntries, getRegisteredSlmModels, getRuntimeConfigStatus, getToolSearchSchema, getToolpackConfig, getUserHomeDir, gitAddTool, gitBlameTool, gitBranchCreateTool, gitBranchListTool, gitCheckoutTool, gitCommitTool, gitDiffTool, gitLogTool, gitStatusTool, gitToolsProject, httpDeleteTool, httpDownloadTool, httpGetTool, httpPostTool, httpPutTool, httpToolsProject, initializeGlobalConfigIfFirstRun, isDataUri, isRegisteredSlm, isToolSearchTool, k8sApplyManifestTool, k8sDeleteResourceTool, k8sDescribeTool, k8sGetConfigMapTool, k8sGetLogsTool, k8sGetNamespacesTool, k8sListDeploymentsTool, k8sListPodsTool, k8sListServicesTool, k8sSwitchContextTool, k8sToolsProject, k8sWaitForDeploymentTool, loadFullConfig, loadRuntimeConfig, loadToolsConfig, normalizeImagePart, ollamaRequest, ollamaStream, parseDataUri, readFileAsBase64, reloadToolpackConfig, removeBypassRule, saveToolsConfig, systemCwdTool, systemDiskUsageTool, systemEnvTool, systemInfoTool, systemSetEnvTool, systemToolsProject, toDataUri, toolSearchDefinition, webExtractLinksTool, webFetchTool, webScrapeTool, webSearchTool, webToolsProject };