Struct ShellTool 

pub struct ShellTool { /* private fields */ }

The confined shell tool.

Registers under "shell". Accepts either argv form (program + args) or a free-form cmd string parsed by the safe-subset engine. Leash refusals (out-of-scope exec/fs, a refused construct) are returned as a structured denied envelope (denied: true), not a hard error.

Implementations

impl ShellTool

pub fn new() -> Self

Construct the tool with the real OS spawner, environment, and dir lister, and the default LimitsPolicy.

pub fn with_config(limits: LimitsPolicy) -> Self

Construct with the real seams and a caller-supplied LimitsPolicy — the configurability seam (agent-bridle#143): tune timeouts / output / glob caps.

pub fn with_output_observer( self, observer: Arc<dyn ShellOutputObserver>, ) -> Self

Attach a presentation-only observer for bounded stdout/stderr chunks.

The observer is queued only after leash admission. It receives at most the configured output cap per stream and cannot change authorization or the final result envelope. Delivery may finish asynchronously after the invocation returns; on_finish marks the queue-drained boundary.

pub fn with_sandbox_policy(self, sandbox: SandboxPolicy) -> Self

Set the sandbox mechanism policy (read/exec allow-lists, ABI floors) the L3 backend enforces (I5-B, #144). The default is today’s built-in allow-lists.

Trait Implementations

impl Clone for ShellTool

fn clone(&self) -> ShellTool

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ShellTool

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ShellTool

fn default() -> Self

Returns the “default value” for a type.

impl Tool for ShellTool

fn name(&self) -> &str

The dispatch name (the key in tools/list and in crate::Registry::dispatch).

fn schema(&self) -> Value

The MCP inputSchema (JSON Schema) for this tool’s arguments.

fn invoke<'life0, 'life1, 'async_trait>( &'life0 self, args: Value, cx: &'life1 ToolContext, ) -> Pin<Box<dyn Future<Output = ToolResult<Value>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Run the tool. The cx proves the leash was passed; the tool enforces per-operation policy by calling cx.check_exec, cx.check_path_*, etc.

fn required(&self) -> Caveats

The authority ceiling this tool promises to stay under.