Struct ScriptToolSpec 

pub struct ScriptToolSpec {
    pub name: String,
    pub description: String,
    pub path: PathBuf,
    pub allowed_tools: Option<Vec<String>>,
    pub limits: ScriptToolLimits,
}

A sandboxed QuickJS tool parsed from a kind = "script" file. Names a workspace-relative .js/.mjs source and pins the sandbox allow-list + limits; the model supplies only inputs. Executed via the existing program tool path — no new sandbox. The model’s call to it is permission-gated like any tool; the script’s inner ctx.tool calls are bounded by allowed_tools + the sandbox (NOT the session permission policy), so the allow-list is the boundary.

Fields

name: String

Model-visible tool name (registry key; unique within tools/).

description: String

Model-facing description (frontmatter description, else the file body).

path: PathBuf

Workspace-relative path to the .js/.mjs source.

allowed_tools: Option<Vec<String>>

Tools the script may call through ctx. The agent-dir loader fails closed: an omitted list becomes Some(vec![]) (the script may call NO tools), so a directory author must opt each tool in explicitly. program is always excluded (no script-launches-script). This allow-list — not the session permission policy — is what bounds a script’s inner ctx.tool calls, so it is the security boundary for directory-authored scripts.

limits: ScriptToolLimits

Sandbox limits (timeout / tool-call / output caps); defaults apply when unset.

Trait Implementations

impl Clone for ScriptToolSpec

fn clone(&self) -> ScriptToolSpec

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ScriptToolSpec

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.