ToolCallConfirmer

Host callback that approves or declines a tool call before it runs — typically by showing the user a dialog ("Allow send_message to +1 555…?"). Return true to run the tool.

Called on the caller's coroutine (switch to Dispatchers.Main yourself for UI). If it doesn't answer within the registry's tool timeout, or throws, the call is declined.