Crate atd_runtime 

ATD runtime — server-side abstractions.

Tool trait, Registry, dispatch, Binding, Middleware, capability gate, tier policy, read tracker. Depends only on atd-protocol.

Re-exports

pub use audit::AuditSink;

pub use audit::CallEvent;

pub use audit::JsonLinesAuditSink;

pub use audit::Outcome;

pub use audit::SCHEMA_VERSION;

pub use binding::Binding;

pub use binding::CliBinding;

pub use binding::NativeBinding;

pub use capability::CapabilitySet;

pub use context::CallContext;

pub use cursor::CursorError;

pub use cursor::CursorIssuer;

pub use cursor::CursorPayload;

pub use cursor::args_fingerprint;

pub use dispatch::ServerState;

pub use dispatch::SharedServerConfig;

pub use dispatch::dispatch_request;

pub use dispatch::run_tool;

pub use error::ToolCallError;

pub use file_token_broker::DEFAULT_REFRESH_WINDOW;

pub use file_token_broker::FileTokenBroker;

pub use file_token_broker::FileTokenRecord;

pub use metrics::MetricsCounters;

pub use metrics::MetricsSnapshot;

pub use middleware::Middleware;

pub use middleware::RedactPathsMiddleware;

pub use registry::PaginatedCallFuture;

pub use registry::PaginatedResult;

pub use registry::RegisteredTool;

pub use registry::Registry;

pub use registry::Tool;

pub use runtime::default_worker_threads;

pub use secrets::BearerIdentity;

pub use secrets::BrokerError;

pub use secrets::InMemoryTokenBroker;

pub use secrets::RedactedString;

pub use secrets::ResolveBearerFuture;

pub use secrets::ResolveFuture;

pub use secrets::SecretBundle;

pub use secrets::TokenBroker;

pub use tier::TierPolicy;

pub use tier::tier_as_str;

pub use tier::tier_from_opt_str;

pub use tracker::ReadTracker;

pub use tracker::ReadTrackerError;

Modules

audit

Structured per-call audit events + pluggable sinks.

binding

Binding abstraction.

capability

Connection-scoped capability allow-list.

context

Per-call context passed to every Tool::call invocation.

cursor

Stateless HMAC-signed cursors for paginated tool results.

dispatch

Transport-neutral dispatch — the shared core of ATD-speaking servers.

error

Errors a tool may return.

file_token_broker

Disk-backed TokenBroker for adopters that need cross-process persistence (Phase L.0 deliverable, docs/issues/ 2026-04-24-security-capability-tokens-deferred path, and the atd#6 GitHub issue).

metrics

Lock-free atomic metrics counters surfaced via Server::metrics_snapshot().

middleware

Result-middleware pipeline.

registry

Tool trait + Registry — the contract third-party implementers see.

runtime

Tokio runtime helpers.

secrets

Token broker extension point for multi-tenant ATD servers.

tier

Tier-aware dispatch policy.

tracker

Per-connection record of which files have been Read + their observed mtime/size at Read time. Edit uses this to enforce “you must Read before Edit, and the file mustn’t have changed since then.”

ucan

SP-capability-v2 UCAN-lite implementation.