toolpack-sdk 2.6.0 → 3.0.0

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+import { ChildProcess } from 'child_process';
 import * as zod from 'zod';
 import { EventEmitter } from 'events';
 import { AuthInfo } from '@modelcontextprotocol/sdk/server/auth/types.js';
@@ -171,93 +172,49 @@ interface WorkflowResult {
 }
 
 /**
- * Configuration for an AI agent mode.
- * A mode shapes AI behavior by controlling which tools are available
- * and injecting a persona-specific system prompt.
+ * GitHub token resolution for toolpack github-tools.
+ *
+ * Resolution order (first match wins):
+ *   1. Explicit token passed by the caller (args.token)
+ *   2. GITHUB_PAT environment variable
+ *   3. GitHub App installation token — minted from GITHUB_APP_ID +
+ *      GITHUB_APP_PRIVATE_KEY; installationId is looked up via the
+ *      repo name when not supplied directly.
+ *
+ * Tokens are cached by installationId (50-minute TTL; GitHub tokens last 60).
  */
-interface ModeConfig {
-    /** Unique identifier for the mode (e.g., "all", "ask", "code") */
-    name: string;
-    /** Human-readable display name (e.g., "All", "Ask", "Code") */
-    displayName: string;
-    /** Short description for UI tooltips */
-    description: string;
-    /**
-     * System prompt prepended to every request in this mode.
-     * Empty string means no system prompt injection (passthrough).
-     */
-    systemPrompt: string;
-    /**
-     * Base agent context configuration for this mode.
-     * Controls whether working directory and tool categories are injected into system prompt.
-     *
-     * - undefined: Use global default behavior (include everything)
-     * - false: Disable base context entirely
-     * - object: Fine-grained control over what is included
-     */
-    baseContext?: {
-        /** Include working directory in system prompt. Default: true */
-        includeWorkingDirectory?: boolean;
-        /** Include available tool categories. Default: true */
-        includeToolCategories?: boolean;
-        /** Custom base context string (overrides auto-generated). */
-        custom?: string;
-    } | false;
-    /** Workflow configuration controlling planning, steps, and progress. */
-    workflow?: WorkflowConfig;
-    /**
-     * Tool search configuration specific to this mode.
-     * Overrides or extends the global toolSearch config.
-     */
-    toolSearch?: {
-        /** Enable/disable tool search for this mode */
-        enabled?: boolean;
-        /** Tools to always include (never defer) for this mode */
-        alwaysLoadedTools?: string[];
-        /** Categories to always include for this mode */
-        alwaysLoadedCategories?: string[];
-    };
-    /**
-     * Tool categories allowed in this mode.
-     * Empty array means all categories are allowed (unless blocked).
-     */
-    allowedToolCategories: string[];
-    /**
-     * Tool categories explicitly blocked in this mode.
-     * Takes precedence over allowedToolCategories.
-     */
-    blockedToolCategories: string[];
-    /**
-     * Specific tool names allowed in this mode.
-     * Empty array means all tools are allowed (unless blocked).
-     */
-    allowedTools: string[];
-    /**
-     * Specific tool names explicitly blocked in this mode.
-     * Takes precedence over allowedTools.
-     */
-    blockedTools: string[];
-    /**
-     * If true, ALL tools are blocked regardless of other settings.
-     * Shorthand for "no tool calls at all".
-     */
-    blockAllTools: boolean;
-    /**
-     * Response format constraint for all requests in this mode.
-     * - 'json_object': instructs the model to return valid JSON as its text content.
-     *   Useful for evaluator/parser agents whose final response must be machine-readable.
-     *   Tool-call rounds are unaffected — the model still returns functionCall parts
-     *   normally; the format only applies to text content.
-     * - 'text' (default): plain text, no constraint.
-     */
-    response_format?: 'text' | 'json_object';
+declare class GithubTokenStore {
+    private tokenCache;
+    private installationIdCache;
+    resolve(repo?: string, explicitToken?: string, credentials?: ToolpackCredentials): Promise<string>;
+    private _lookupInstallationId;
+    private _mintInstallationToken;
 }
-/**
- * A lightweight reference to a mode, used in tool-blocked hints.
- */
-interface ModeBlockedHint {
-    blockedToolNames: string[];
-    suggestedMode: string;
+
+interface ManagedProcess {
+    id: string;
+    command: string;
+    cwd?: string;
+    process: ChildProcess;
+    startedAt: string;
+    stdout: string;
+    stderr: string;
+}
+declare class ProcessRegistry {
+    private processes;
+    private nextId;
+    register(command: string, cwd: string | undefined, proc: ChildProcess): string;
+    get(id: string): ManagedProcess | undefined;
+    kill(id: string): boolean;
+    list(): {
+        id: string;
+        command: string;
+        cwd?: string;
+        startedAt: string;
+        alive: boolean;
+        pid: number | undefined;
+    }[];
+    remove(id: string): boolean;
 }
 
 /**
@@ -278,13 +235,38 @@ interface ToolParameters {
     properties: Record<string, ToolParameterProperty>;
     required?: string[];
 }
+/**
+ * Per-tenant tool credentials passed via toolsConfig.additionalConfigurations.credentials.
+ * Each field is a programmatic override; tools fall back to the corresponding
+ * env var when the field is absent.
+ */
+interface ToolpackCredentials {
+    /** GitHub personal access token. Fallback: GITHUB_PAT */
+    githubPat?: string;
+    /** GitHub App ID. Fallback: GITHUB_APP_ID */
+    githubAppId?: string;
+    /** GitHub App private key (PEM). Fallback: GITHUB_APP_PRIVATE_KEY */
+    githubAppPrivateKey?: string;
+    /** Slack bot token. Fallback: TOOLPACK_SLACK_BOT_TOKEN */
+    slackBotToken?: string;
+    /** Netlify auth token. Fallback: NETLIFY_AUTH_TOKEN */
+    netlifyAuthToken?: string;
+}
 interface ToolContext {
     /** Absolute path to the workspace/project root */
     workspaceRoot: string;
-    /** Tool-specific config from toolpack.config.json additionalConfigurations */
+    /**
+     * Tool-specific config from toolsConfig.additionalConfigurations.
+     * Includes credentials (ctx.config.credentials) and per-tool settings
+     * (ctx.config.gitClone, ctx.config.webSearch, etc.).
+     */
     config: Record<string, any>;
     /** Scoped logger — writes to toolpack-sdk.log */
     log: (message: string) => void;
+    /** Per-tenant background-process registry (exec-tools). */
+    processRegistry?: ProcessRegistry;
+    /** Per-tenant GitHub App installation-token cache (github-tools). */
+    githubTokenStore?: GithubTokenStore;
 }
 /**
  * Hints about tool behaviour sent to MCP clients in tools/list.
@@ -443,6 +425,128 @@ interface ToolsConfig {
 declare const DEFAULT_TOOL_SEARCH_CONFIG: ToolSearchConfig;
 declare const DEFAULT_TOOLS_CONFIG: ToolsConfig;
 
+/**
+ * Configuration for an AI agent mode.
+ * A mode shapes AI behavior by controlling which tools are available
+ * and injecting a persona-specific system prompt.
+ */
+interface ModeConfig {
+    /** Unique identifier for the mode (e.g., "all", "ask", "code") */
+    name: string;
+    /** Human-readable display name (e.g., "All", "Ask", "Code") */
+    displayName: string;
+    /** Short description for UI tooltips */
+    description: string;
+    /**
+     * System prompt prepended to every request in this mode.
+     * Empty string means no system prompt injection (passthrough).
+     */
+    systemPrompt: string;
+    /**
+     * Base agent context configuration for this mode.
+     * Controls whether working directory and tool categories are injected into system prompt.
+     *
+     * - undefined: Use global default behavior (include everything)
+     * - false: Disable base context entirely
+     * - object: Fine-grained control over what is included
+     */
+    baseContext?: {
+        /** Include working directory in system prompt. Default: true */
+        includeWorkingDirectory?: boolean;
+        /** Include available tool categories. Default: true */
+        includeToolCategories?: boolean;
+        /** Custom base context string (overrides auto-generated). */
+        custom?: string;
+    } | false;
+    /** Workflow configuration controlling planning, steps, and progress. */
+    workflow?: WorkflowConfig;
+    /**
+     * Tool search configuration specific to this mode.
+     * Overrides or extends the global toolSearch config.
+     */
+    toolSearch?: {
+        /** Enable/disable tool search for this mode */
+        enabled?: boolean;
+        /** Tools to always include (never defer) for this mode */
+        alwaysLoadedTools?: string[];
+        /** Categories to always include for this mode */
+        alwaysLoadedCategories?: string[];
+    };
+    /**
+     * Tool categories allowed in this mode.
+     * Empty array means all categories are allowed (unless blocked).
+     */
+    allowedToolCategories: string[];
+    /**
+     * Tool categories explicitly blocked in this mode.
+     * Takes precedence over allowedToolCategories.
+     */
+    blockedToolCategories: string[];
+    /**
+     * Specific tool names allowed in this mode.
+     * Empty array means all tools are allowed (unless blocked).
+     */
+    allowedTools: string[];
+    /**
+     * Specific tool names explicitly blocked in this mode.
+     * Takes precedence over allowedTools.
+     */
+    blockedTools: string[];
+    /**
+     * If true, ALL tools are blocked regardless of other settings.
+     * Shorthand for "no tool calls at all".
+     */
+    blockAllTools: boolean;
+    /**
+     * Whether to auto-inject relevant skill content into the system prompt
+     * via BM25 matching of the user's message (skill interceptor).
+     * Default: false — opt-in only. Set to true to enable auto-injection.
+     */
+    skillInterceptor?: boolean;
+    /**
+     * Root directory for rule files.
+     * Auto-discovers:
+     *   <rulesDir>/__global__/   → injected for all modes sharing this dir
+     *   <rulesDir>/<mode-name>/  → injected for this mode only
+     * Defaults to '.toolpack/rules' if not set.
+     */
+    rulesDir?: string;
+    /**
+     * When true, agent runs use provider.stream() instead of provider.generate().
+     * Keeps the TCP connection alive via incremental chunks, preventing NAT/proxy
+     * idle timeouts on long-running LLM calls (e.g. browser agent with large context).
+     */
+    streaming?: boolean;
+    /**
+     * Response format constraint for all requests in this mode.
+     * - 'json_object': instructs the model to return valid JSON as its text content.
+     *   Useful for evaluator/parser agents whose final response must be machine-readable.
+     *   Tool-call rounds are unaffected — the model still returns functionCall parts
+     *   normally; the format only applies to text content.
+     * - 'text' (default): plain text, no constraint.
+     */
+    response_format?: 'text' | 'json_object';
+    /**
+     * Tools available only in this mode/agent.
+     * Resolved before the shared ToolRegistry — allows agent-specific tools
+     * without registering them globally.
+     */
+    customTools?: ToolDefinition[];
+    /**
+     * Tool behavior overrides for this mode/agent.
+     * Merged over the Toolpack-level ToolsConfig at request time.
+     * Use for per-agent autoExecute, maxToolRounds, resultMaxChars, etc.
+     */
+    toolsConfig?: Partial<ToolsConfig>;
+}
+/**
+ * A lightweight reference to a mode, used in tool-blocked hints.
+ */
+interface ModeBlockedHint {
+    blockedToolNames: string[];
+    suggestedMode: string;
+}
+
 type Role = 'system' | 'user' | 'assistant' | 'tool';
 interface TextPart {
     type: 'text';
@@ -526,7 +630,8 @@ interface RequestToolDefinition {
     description: string;
     parameters: Record<string, any>;
     category: string;
-    execute: (args: Record<string, any>) => Promise<any>;
+    /** Same optional `ctx` as ToolDefinition.execute — per-tenant credentials/runtime scoping. */
+    execute: (args: Record<string, any>, ctx?: ToolContext) => Promise<any>;
     cacheable?: boolean;
     confirmation?: ToolConfirmation;
 }
@@ -990,6 +1095,27 @@ declare abstract class ProviderAdapter {
     countTokens(_messages: Message[], _model: string): Promise<number | null>;
 }
 
+interface CloneEntry {
+    cloneDir: string;
+    repo: string;
+    sha: string;
+    sizeBytes: number;
+    lastAccessedAt: number;
+}
+declare class CloneState {
+    readonly registry: Map<string, CloneEntry>;
+    readonly mutexes: Map<string, Promise<void>>;
+    totalBytes: number;
+    acquireMutex(repo: string): Promise<() => void>;
+    evictIfNeeded(requiredBytes: number, maxBytes: number): Promise<void>;
+}
+
+declare class ToolRuntimeContext {
+    readonly processRegistry: ProcessRegistry;
+    readonly cloneState: CloneState;
+    readonly githubTokenStore: GithubTokenStore;
+}
+
 /**
  * Central registry for all tools (built-in + custom).
  * Handles registration, lookup, filtering by category, schema extraction,
@@ -999,6 +1125,8 @@ declare class ToolRegistry {
     private tools;
     private projects;
     private config;
+    /** Scoped runtime state created by loadBuiltIn(). Undefined when built-in tools are not loaded. */
+    runtimeContext?: ToolRuntimeContext;
     /**
      * Register a tool (built-in or custom).
      */
@@ -1151,7 +1279,11 @@ interface ToolpackConfig {
     /** Context window management configuration for automatic conversation pruning/summarization */
     contextWindow?: ContextWindowConfig;
 }
+/**
+ * @deprecated Pass config directly to Toolpack.init(). File-based config is no longer read by the SDK.
+ */
 declare function getToolpackConfig(configPath?: string): ToolpackConfig;
+/** @deprecated No-op. The process-global config cache has been removed. */
 declare function reloadToolpackConfig(): void;
 interface OllamaProviderEntry {
     /** Provider type key, e.g. 'ollama-llama3' */
@@ -1253,11 +1385,12 @@ declare class AIClient extends EventEmitter {
     private toolResultMaxChars;
     private hitlConfig?;
     private onToolConfirm?;
-    private currentRound;
     private conversationId?;
     private contextWindowConfig?;
     private contextWindowStateManager?;
     private providerModelCache;
+    private ruleLoader;
+    private requestSeq;
     constructor(config: AIClientConfig);
     private getConversationId;
     private getModelInfo;
@@ -1360,6 +1493,7 @@ declare class AIClient extends EventEmitter {
      * tool loop is immune to concurrent `setMode()` calls on this instance.
      */
     private enrichRequestWithTools;
+    private toolDefinitionsToSchemas;
     private buildRequestToolMap;
     private requestToolToSchema;
     private mergeSchemas;
@@ -1377,6 +1511,7 @@ declare class AIClient extends EventEmitter {
      *   owns the mode registry) before reaching the client; if an unresolved
      *   name gets here, warn and fall back to the activeMode snapshot
      */
+    private newRequestId;
     private resolveRequestMode;
     /**
      * Filter tool schemas based on mode permissions.
@@ -1388,6 +1523,12 @@ declare class AIClient extends EventEmitter {
      * For the "All" mode (empty systemPrompt), this is a no-op.
      */
     private injectModeSystemPrompt;
+    /**
+     * Load and append rule content to the system prompt for the active mode.
+     * Rules are always injected — appended after the mode system prompt so they
+     * sit closest to the conversation (recency effect).
+     */
+    private injectModeRules;
     /**
      * Inject the overriding system prompt (from AIClientConfig) into the request.
      */
@@ -1464,6 +1605,27 @@ declare class AnthropicAdapter extends ProviderAdapter {
     private handleError;
 }
 
+interface AnthropicVertexConfig {
+    /** GCP project ID. Falls back to ANTHROPIC_VERTEX_PROJECT_ID / GOOGLE_CLOUD_PROJECT env vars. */
+    projectId?: string;
+    /** GCP region where Claude models are deployed. Defaults to 'us-east5'. */
+    region?: string;
+}
+declare class AnthropicVertexAdapter extends ProviderAdapter {
+    private client;
+    constructor(config?: AnthropicVertexConfig);
+    getDisplayName(): string;
+    getModels(): Promise<ProviderModelInfo[]>;
+    generate(request: CompletionRequest): Promise<CompletionResponse>;
+    stream(request: CompletionRequest): AsyncGenerator<CompletionChunk>;
+    embed(_request: EmbeddingRequest): Promise<EmbeddingResponse>;
+    private sanitizeToolName;
+    private restoreToolName;
+    private toAnthropicMessages;
+    private mapFinishReason;
+    private handleError;
+}
+
 interface VertexAIConfig {
     /** GCP project ID. Falls back to TOOLPACK_VERTEXAI_PROJECT or VERTEX_AI_PROJECT env vars. */
     projectId?: string;
@@ -1480,10 +1642,19 @@ interface VertexAIConfig {
         /** Inline service account credentials object. */
         credentials?: Record<string, unknown>;
     };
+    /**
+     * Thinking token budget for Gemini 2.5+ models.
+     * Set to 0 to disable thinking entirely.
+     * Omit to use the model's default budget.
+     */
+    thinkingBudget?: number;
 }
 declare class VertexAIAdapter extends ProviderAdapter {
     private ai;
     private readonly location;
+    private readonly thinkingBudget?;
+    private readonly rawContentCache;
+    private static readonly RAW_CONTENT_CACHE_MAX;
     constructor(config?: VertexAIConfig);
     getDisplayName(): string;
     getModels(): Promise<ProviderModelInfo[]>;
@@ -2107,11 +2278,13 @@ interface FullConfig {
 /**
  * Load the full config from toolpack.config.json.
  * Returns the entire parsed config object.
+ * @deprecated Pass config directly to Toolpack.init(). File-based config is no longer read by the SDK.
  */
 declare function loadFullConfig(basePath?: string): FullConfig;
 /**
  * Load tools config from toolpack.config.json (tools section).
  * Falls back to defaults if the file doesn't exist or tools section is missing.
+ * @deprecated Pass toolsConfig directly to Toolpack.init(). File-based config is no longer read by the SDK.
  */
 declare function loadToolsConfig(basePath?: string): ToolsConfig;
 /**
@@ -2501,6 +2674,22 @@ declare function createMode(config: {
             enabled: boolean;
         };
     };
+    /**
+     * Enable auto-injection of BM25-matched skill content into the system prompt.
+     * Default: false — opt-in only.
+     */
+    skillInterceptor?: boolean;
+    /**
+     * Root directory for rule files for this mode.
+     * Auto-discovers __global__/ and <mode-name>/ subfolders within it.
+     * Defaults to '.toolpack/rules' if not set.
+     */
+    rulesDir?: string;
+    /**
+     * When true, agent runs use provider.stream() instead of provider.generate().
+     * Prevents NAT/proxy idle timeouts on long-running LLM calls.
+     */
+    streaming?: boolean;
 }): ModeConfig;
 
 /**
@@ -2679,6 +2868,18 @@ declare const CODING_WORKFLOW: WorkflowConfig;
  */
 declare const CHAT_WORKFLOW: WorkflowConfig;
 
+type LogLevel = 'error' | 'warn' | 'info' | 'debug' | 'trace';
+interface LoggingConfig {
+    /** Enable file logging.  Default: false */
+    enabled?: boolean;
+    /** Log file path.  Default: '<cwd>/toolpack-sdk.log' */
+    filePath?: string;
+    /** Log level. Default: 'info' */
+    level?: LogLevel;
+    /** Mirror log output to console (stderr for error/warn, stdout for others). Default: false */
+    console?: boolean;
+}
+
 type ToolpackNextFunction = (request?: CompletionRequest) => Promise<CompletionResponse>;
 /**
  * An interceptor that wraps each `generate()` call.
@@ -2925,6 +3126,10 @@ interface ProviderOptions {
         keyFilename?: string;
         credentials?: Record<string, unknown>;
     };
+    /** Vertex AI only: thinking token budget for Gemini 2.5+ models. Set to 0 to disable thinking. */
+    thinkingBudget?: number;
+    /** Anthropic Vertex only: GCP region where Claude models are deployed. Defaults to 'us-east5'. */
+    region?: string;
 }
 interface ToolpackInitConfig {
     /** Single provider shorthand (e.g. 'openai', 'anthropic', 'gemini') */
@@ -2945,12 +3150,19 @@ interface ToolpackInitConfig {
         keyFilename?: string;
         credentials?: Record<string, unknown>;
     };
+    /** Vertex AI only: thinking token budget for Gemini 2.5+ models. Set to 0 to disable thinking. */
+    thinkingBudget?: number;
+    /** Anthropic Vertex only: GCP region where Claude models are deployed. Defaults to 'us-east5'. */
+    region?: string;
     /** Load built-in tools (fs, http, etc.)? Default: false */
     tools?: boolean;
     /** Context window management configuration for automatic conversation pruning/summarization */
     contextWindow?: ContextWindowConfig;
-    /** Custom tool projects to load in addition to built-ins */
-    customTools?: ToolProject[];
+    /**
+     * Tool runtime configuration (autoExecute, maxToolRounds, additionalConfigurations, etc.).
+     * Merged over DEFAULT_TOOLS_CONFIG. Use ModeConfig.toolsConfig for per-agent overrides.
+     */
+    toolsConfig?: Partial<ToolsConfig>;
     /** Multi-provider config (overrides single provider settings) */
     providers?: Record<string, ProviderOptions>;
     /** Default provider to use if multiple are configured */
@@ -2959,8 +3171,6 @@ interface ToolpackInitConfig {
     customModes?: ModeConfig[];
     /** Default mode to activate on init (default: 'default') */
     defaultMode?: string;
-    /** Optional system prompt overrides for specific modes */
-    modeOverrides?: Record<string, Partial<ModeConfig>>;
     /**
      * Custom provider adapter instances.
      * Can be:
@@ -2970,11 +3180,6 @@ interface ToolpackInitConfig {
     customProviders?: ProviderAdapter[] | Record<string, ProviderAdapter>;
     /** Disable base agent context injection (for testing or custom prompts) */
     disableBaseContext?: boolean;
-    /**
-     * Optional path to a configuration file.
-     * If provided, the SDK will load configuration from this path instead of the default toolpack.config.json in the current working directory.
-     */
-    configPath?: string;
     mcp?: McpToolsConfig;
     /**
      * Optional Knowledge instance for RAG (Retrieval-Augmented Generation).
@@ -3010,6 +3215,16 @@ interface ToolpackInitConfig {
      * The workflow execution path (when a mode has planning enabled) is also unaffected.
      */
     interceptors?: ToolpackInterceptor[];
+    /**
+     * Logging configuration. Takes precedence over any value in toolpack.config.json.
+     * Env vars (TOOLPACK_SDK_LOG_ENABLED, TOOLPACK_SDK_LOG_FILE, etc.) still override this.
+     */
+    logging?: LoggingConfig;
+    /**
+     * Human-in-the-loop configuration. Takes precedence over any value in toolpack.config.json.
+     * Merged with confirmationMode and onToolConfirm — the most-specific setting wins.
+     */
+    hitl?: HitlConfig;
 }
 /**
  * Duck-typed interface for Knowledge instances to avoid circular dependency
@@ -3726,4 +3941,16 @@ interface McpServerCapabilities {
 
 declare function createSkillInterceptor(options?: SkillInterceptorOptions): ToolpackInterceptor;
 
-export { AGENT_MODE, AGENT_PLANNING_PROMPT, AGENT_WORKFLOW, AIClient, type AIClientConfig, type AddBypassRuleOptions, AnthropicAdapter, type AssembledPrompt, type AssemblerOptions, AuthenticationError, BM25SearchEngine, BUILT_IN_MODES, type BypassRuleType, CHAT_MODE, CHAT_WORKFLOW, CODING_MODE, CODING_PLANNING_PROMPT, CODING_WORKFLOW, CONFIG_DIR_NAME, CONFIG_FILE_NAME, type CompletionChunk, type CompletionOptions, type CompletionRequest, type CompletionResponse, type ConfirmationDecision, type ConfirmationLevel$1 as ConfirmationLevel, ConnectionError, type ContextPrunedEvent, type ContextWindowConfig, ContextWindowConfigError, ContextWindowExceededError, type ContextWindowExceededEvent, type ContextWindowState, ContextWindowStateManager, type ContextWindowStrategy, type ContextWindowWarningEvent, ConversationNotFoundError, type ConversationScope, type ConversationSearchOptions, type ConversationStore, type ConversationSummarizedEvent, DEFAULT_MODE_NAME, DEFAULT_TOOLS_CONFIG, DEFAULT_TOOL_SEARCH_CONFIG, DEFAULT_WORKFLOW, DEFAULT_WORKFLOW_CONFIG, type EmbeddingRequest, type EmbeddingResponse, type FileUploadRequest, type FileUploadResponse, GeminiAdapter, type GetOptions, type HitlConfig, type ImageDataPart, type ImageFilePart, type ImagePart, type ImageUrlPart, InMemoryConversationStore, type InMemoryConversationStoreConfig, InsufficientContextError, InvalidRequestError, type JsonRpcRequest, type JsonRpcResponse, type KnowledgeInstance, type McpAgentDefinition, type McpAuthConfig, McpClient, type McpClientConfig, McpConnectionError, type McpCustomAuthConfig, type McpJwtAuthConfig, type McpServerCapabilities, type McpServerConfig, type McpServerExposeConfig, type McpServerHandle, type McpStaticAuthConfig, McpTimeoutError, type McpTool, McpToolManager, type McpToolsConfig, type McpTransport, type MediaOptions, type MediaUploadStrategy, type Message, type MessageContent, type ModeBlockedHint, type ModeConfig, ModeRegistry, OllamaAdapter, type OllamaAdapterConfig, type OllamaModelInfo, OllamaProvider, type OllamaProviderEntry, type OnToolConfirmCallback, OpenAIAdapter, OpenRouterAdapter, type OpenRouterOptions, PageError, type Participant, type Plan, type PlanStep, Planner, type PromptMessage, ProviderAdapter, type ProviderConfig, ProviderError, type ProviderInfo, type ProviderModelInfo, type ProviderOptions, type PruneResult, RateLimitError, type RequestToolDefinition, type Role, type RuntimeConfigStatus, SDKError, SQLiteConversationStore, type SQLiteConversationStoreConfig, type SearchHistoryEntry, type SearchOptions, type SearchResult, type Skill, type SkillInterceptorOptions, type SkillSection, type SkillToolsOptions, type SkillValidationMode, type SlmModelEntry, type StoredMessage, SummarizationError, type SummarizationOptions, type SummarizationResult, TOOLPACK_DIR_NAME, TOOL_SEARCH_NAME, type TextPart, TimeoutError, type ToolAnnotations, type ToolCall, type ToolCallFunction, type ToolCallMessage, type ToolCallRequest, type ToolCallResult, type ToolCategory, type ToolConfirmation, type ToolConfirmationRequestedEvent, type ToolConfirmationResolvedEvent, type ToolContext, type ToolDefinition, ToolDiscoveryCache, type ToolLogEvent, type ToolParameterProperty, type ToolParameters, type ToolProgressEvent, type ToolProject, type ToolProjectDependencies, type ToolProjectManifest, ToolRegistry, type ToolResult, ToolRouter, type ToolSchema, type ToolSearchConfig, Toolpack, type ToolpackConfig, type ToolpackInitConfig, type ToolpackInterceptor, type ToolpackMcpServerConfig, type ToolpackNextFunction, type ToolsConfig, type Usage, VertexAIAdapter, type VertexAIConfig, type WorkflowConfig, type WorkflowEvents, WorkflowExecutor, type WorkflowProgress, type WorkflowResult, addBypassRule, buildSummarizedHistory, cloudDeployTool, cloudListTool, cloudStatusTool, cloudToolsProject, codingExtractFunctionTool, codingFindReferencesTool, codingFindSymbolTool, codingGetCallHierarchyTool, codingGetDiagnosticsTool, codingGetExportsTool, codingGetImportsTool, codingGetOutlineTool, codingGetSymbolsTool, codingGoToDefinitionTool, codingMultiFileEditTool, codingRefactorRenameTool, codingToolsProject, countTokens, createContextWindowStateManager, createMcpToolProject, createMode, createSkillInterceptor, createSkillTools, createSummarizationReport, createSummarySystemMessage, createToolProject, dbCountTool, dbDeleteTool, dbInsertTool, dbQueryTool, dbSchemaTool, dbTablesTool, dbToolsProject, dbUpdateTool, diffApplyTool, diffCreateTool, diffPreviewTool, diffToolsProject, disconnectMcpToolProject, ensureGlobalConfigDir, ensureLocalConfigDir, estimateSummaryTokens, estimateTokenCount, execKillTool, execListProcessesTool, execReadOutputTool, execRunBackgroundTool, execRunBlockingTool, execRunShellTool, execRunTool, execTailOutputTool, execToolsProject, extractConversationKeypoints, fetchUrlAsBase64, fsAppendFileTool, fsBatchReadTool, fsBatchWriteTool, fsCopyTool, fsCreateDirTool, fsDeleteDirTool, fsDeleteFileTool, fsExistsTool, fsGlobTool, fsListDirTool, fsMoveTool, fsReadFileRangeTool, fsReadFileTool, fsReplaceInFileTool, fsSearchTool, fsStatTool, fsToolsProject, fsTreeTool, fsWriteFileTool, generateSummarizationPrompt, generateToolCategoriesPrompt, getContextWindowPercentage, getDefaultSlmModel, getGlobalConfigDir, getGlobalConfigPath, getGlobalToolpackDir, getLocalConfigDir, getLocalConfigPath, getLocalToolpackDir, getMessageStats, getMimeType, getOllamaBaseUrl, getOllamaProviderEntries, getRegisteredSlmModels, getRuntimeConfigStatus, getSafeOutputReserve, getToolSearchSchema, getToolpackConfig, getUserHomeDir, gitAddTool, gitBlameTool, gitBranchCreateTool, gitBranchListTool, gitCheckoutTool, gitCloneTool, gitCommitTool, gitDiffTool, gitLogTool, gitStatusTool, gitToolsProject, githubContentsGetTextTool, githubGraphqlExecuteTool, githubIssuesCommentsCreateTool, githubPrDiffGetTool, githubPrFilesListTool, githubPrReviewCommentsReplyTool, githubPrReviewThreadsListTool, githubPrReviewThreadsResolveTool, githubPrReviewsSubmitTool, githubToolsProject, groupMessagesByRole, handleContextWindowError, httpDeleteTool, httpDownloadTool, httpGetTool, httpPostTool, httpPutTool, httpToolsProject, initializeGlobalConfigIfFirstRun, isContextWindowError, isDataUri, isRegisteredSlm, isToolSearchTool, k8sApplyManifestTool, k8sDeleteResourceTool, k8sDescribeTool, k8sGetConfigMapTool, k8sGetLogsTool, k8sGetNamespacesTool, k8sListDeploymentsTool, k8sListPodsTool, k8sListServicesTool, k8sSwitchContextTool, k8sToolsProject, k8sWaitForDeploymentTool, loadFullConfig, loadRuntimeConfig, loadToolsConfig, mergeSummarizationResults, normalizeImagePart, ollamaRequest, ollamaStream, parseDataUri, parseSummarizationResponse, prepareSummarizationRequest, pruneMessages, readFileAsBase64, reloadToolpackConfig, removeBypassRule, saveToolsConfig, slackAuthTestTool, slackChatPostEphemeralTool, slackChatPostMessageTool, slackConversationsHistoryTool, slackConversationsRepliesTool, slackReactionsAddTool, slackToolsProject, systemCwdTool, systemDiskUsageTool, systemEnvTool, systemInfoTool, systemSetEnvTool, systemToolsProject, toDataUri, toolSearchDefinition, truncateMessage, validateSummarizationResult, webExtractLinksTool, webFeedTool, webFetchTool, webMapTool, webMetadataTool, webScrapeTool, webScreenshotTool, webSearchTool, webSitemapTool, webToolsProject, wouldExceedContextWindow };
+declare class RuleLoader {
+    private readonly cacheTtlMs;
+    private modeCache;
+    constructor(cacheTtlMs?: number);
+    loadForMode(modeName: string, rulesDir?: string): Promise<string>;
+    /** Evict all cached entries — useful in tests or after a known rule file change. */
+    clearCache(): void;
+    private collectFromFolder;
+    private collectRecursive;
+    private readFile;
+}
+
+export { AGENT_MODE, AGENT_PLANNING_PROMPT, AGENT_WORKFLOW, AIClient, type AIClientConfig, type AddBypassRuleOptions, AnthropicAdapter, AnthropicVertexAdapter, type AnthropicVertexConfig, type AssembledPrompt, type AssemblerOptions, AuthenticationError, BM25SearchEngine, BUILT_IN_MODES, type BypassRuleType, CHAT_MODE, CHAT_WORKFLOW, CODING_MODE, CODING_PLANNING_PROMPT, CODING_WORKFLOW, CONFIG_DIR_NAME, CONFIG_FILE_NAME, type CompletionChunk, type CompletionOptions, type CompletionRequest, type CompletionResponse, type ConfirmationDecision, type ConfirmationLevel$1 as ConfirmationLevel, ConnectionError, type ContextPrunedEvent, type ContextWindowConfig, ContextWindowConfigError, ContextWindowExceededError, type ContextWindowExceededEvent, type ContextWindowState, ContextWindowStateManager, type ContextWindowStrategy, type ContextWindowWarningEvent, ConversationNotFoundError, type ConversationScope, type ConversationSearchOptions, type ConversationStore, type ConversationSummarizedEvent, DEFAULT_MODE_NAME, DEFAULT_TOOLS_CONFIG, DEFAULT_TOOL_SEARCH_CONFIG, DEFAULT_WORKFLOW, DEFAULT_WORKFLOW_CONFIG, type EmbeddingRequest, type EmbeddingResponse, type FileUploadRequest, type FileUploadResponse, GeminiAdapter, type GetOptions, type HitlConfig, type ImageDataPart, type ImageFilePart, type ImagePart, type ImageUrlPart, InMemoryConversationStore, type InMemoryConversationStoreConfig, InsufficientContextError, InvalidRequestError, type JsonRpcRequest, type JsonRpcResponse, type KnowledgeInstance, type McpAgentDefinition, type McpAuthConfig, McpClient, type McpClientConfig, McpConnectionError, type McpCustomAuthConfig, type McpJwtAuthConfig, type McpServerCapabilities, type McpServerConfig, type McpServerExposeConfig, type McpServerHandle, type McpStaticAuthConfig, McpTimeoutError, type McpTool, McpToolManager, type McpToolsConfig, type McpTransport, type MediaOptions, type MediaUploadStrategy, type Message, type MessageContent, type ModeBlockedHint, type ModeConfig, ModeRegistry, OllamaAdapter, type OllamaAdapterConfig, type OllamaModelInfo, OllamaProvider, type OllamaProviderEntry, type OnToolConfirmCallback, OpenAIAdapter, OpenRouterAdapter, type OpenRouterOptions, PageError, type Participant, type Plan, type PlanStep, Planner, type PromptMessage, ProviderAdapter, type ProviderConfig, ProviderError, type ProviderInfo, type ProviderModelInfo, type ProviderOptions, type PruneResult, RateLimitError, type RequestToolDefinition, type Role, RuleLoader, type RuntimeConfigStatus, SDKError, SQLiteConversationStore, type SQLiteConversationStoreConfig, type SearchHistoryEntry, type SearchOptions, type SearchResult, type Skill, type SkillInterceptorOptions, type SkillSection, type SkillToolsOptions, type SkillValidationMode, type SlmModelEntry, type StoredMessage, SummarizationError, type SummarizationOptions, type SummarizationResult, TOOLPACK_DIR_NAME, TOOL_SEARCH_NAME, type TextPart, TimeoutError, type ToolAnnotations, type ToolCall, type ToolCallFunction, type ToolCallMessage, type ToolCallRequest, type ToolCallResult, type ToolCategory, type ToolConfirmation, type ToolConfirmationRequestedEvent, type ToolConfirmationResolvedEvent, type ToolContext, type ToolDefinition, ToolDiscoveryCache, type ToolLogEvent, type ToolParameterProperty, type ToolParameters, type ToolProgressEvent, type ToolProject, type ToolProjectDependencies, type ToolProjectManifest, ToolRegistry, type ToolResult, ToolRouter, type ToolSchema, type ToolSearchConfig, Toolpack, type ToolpackConfig, type ToolpackCredentials, type ToolpackInitConfig, type ToolpackInterceptor, type ToolpackMcpServerConfig, type ToolpackNextFunction, type ToolsConfig, type Usage, VertexAIAdapter, type VertexAIConfig, type WorkflowConfig, type WorkflowEvents, WorkflowExecutor, type WorkflowProgress, type WorkflowResult, addBypassRule, buildSummarizedHistory, cloudDeployTool, cloudListTool, cloudStatusTool, cloudToolsProject, codingExtractFunctionTool, codingFindReferencesTool, codingFindSymbolTool, codingGetCallHierarchyTool, codingGetDiagnosticsTool, codingGetExportsTool, codingGetImportsTool, codingGetOutlineTool, codingGetSymbolsTool, codingGoToDefinitionTool, codingMultiFileEditTool, codingRefactorRenameTool, codingToolsProject, countTokens, createContextWindowStateManager, createMcpToolProject, createMode, createSkillInterceptor, createSkillTools, createSummarizationReport, createSummarySystemMessage, createToolProject, dbCountTool, dbDeleteTool, dbInsertTool, dbQueryTool, dbSchemaTool, dbTablesTool, dbToolsProject, dbUpdateTool, diffApplyTool, diffCreateTool, diffPreviewTool, diffToolsProject, disconnectMcpToolProject, ensureGlobalConfigDir, ensureLocalConfigDir, estimateSummaryTokens, estimateTokenCount, execKillTool, execListProcessesTool, execReadOutputTool, execRunBackgroundTool, execRunBlockingTool, execRunShellTool, execRunTool, execTailOutputTool, execToolsProject, extractConversationKeypoints, fetchUrlAsBase64, fsAppendFileTool, fsBatchReadTool, fsBatchWriteTool, fsCopyTool, fsCreateDirTool, fsDeleteDirTool, fsDeleteFileTool, fsExistsTool, fsGlobTool, fsListDirTool, fsMoveTool, fsReadFileRangeTool, fsReadFileTool, fsReplaceInFileTool, fsSearchTool, fsStatTool, fsToolsProject, fsTreeTool, fsWriteFileTool, generateSummarizationPrompt, generateToolCategoriesPrompt, getContextWindowPercentage, getDefaultSlmModel, getGlobalConfigDir, getGlobalConfigPath, getGlobalToolpackDir, getLocalConfigDir, getLocalConfigPath, getLocalToolpackDir, getMessageStats, getMimeType, getOllamaBaseUrl, getOllamaProviderEntries, getRegisteredSlmModels, getRuntimeConfigStatus, getSafeOutputReserve, getToolSearchSchema, getToolpackConfig, getUserHomeDir, gitAddTool, gitBlameTool, gitBranchCreateTool, gitBranchListTool, gitCheckoutTool, gitCloneTool, gitCommitTool, gitDiffTool, gitLogTool, gitStatusTool, gitToolsProject, githubContentsGetTextTool, githubGraphqlExecuteTool, githubIssuesCommentsCreateTool, githubPrDiffGetTool, githubPrFilesListTool, githubPrReviewCommentsReplyTool, githubPrReviewThreadsListTool, githubPrReviewThreadsResolveTool, githubPrReviewsSubmitTool, githubToolsProject, groupMessagesByRole, handleContextWindowError, httpDeleteTool, httpDownloadTool, httpGetTool, httpPostTool, httpPutTool, httpToolsProject, initializeGlobalConfigIfFirstRun, isContextWindowError, isDataUri, isRegisteredSlm, isToolSearchTool, k8sApplyManifestTool, k8sDeleteResourceTool, k8sDescribeTool, k8sGetConfigMapTool, k8sGetLogsTool, k8sGetNamespacesTool, k8sListDeploymentsTool, k8sListPodsTool, k8sListServicesTool, k8sSwitchContextTool, k8sToolsProject, k8sWaitForDeploymentTool, loadFullConfig, loadRuntimeConfig, loadToolsConfig, mergeSummarizationResults, normalizeImagePart, ollamaRequest, ollamaStream, parseDataUri, parseSummarizationResponse, prepareSummarizationRequest, pruneMessages, readFileAsBase64, reloadToolpackConfig, removeBypassRule, saveToolsConfig, slackAuthTestTool, slackChatPostEphemeralTool, slackChatPostMessageTool, slackConversationsHistoryTool, slackConversationsRepliesTool, slackReactionsAddTool, slackToolsProject, systemCwdTool, systemDiskUsageTool, systemEnvTool, systemInfoTool, systemSetEnvTool, systemToolsProject, toDataUri, toolSearchDefinition, truncateMessage, validateSummarizationResult, webExtractLinksTool, webFeedTool, webFetchTool, webMapTool, webMetadataTool, webScrapeTool, webScreenshotTool, webSearchTool, webSitemapTool, webToolsProject, wouldExceedContextWindow };