Struct ToolCallRequest 

pub struct ToolCallRequest {

    pub request_id: String,
    pub capability: CapabilityToken,
    pub tool_name: String,
    pub server_id: ServerId,
    pub agent_id: AgentId,
    pub arguments: Value,
    pub dpop_proof: Option<DpopProof>,
    pub execution_nonce: Option<SignedExecutionNonce>,
    pub governed_intent: Option<GovernedTransactionIntent>,
    pub approval_token: Option<GovernedApprovalToken>,
    pub approval_tokens: Vec<GovernedApprovalToken>,
    pub threshold_approval_proposal: Option<ThresholdApprovalProposal>,
    pub supplemental_authorization: Option<OpaqueSupplementalAuthorization>,
    pub model_metadata: Option<ModelMetadata>,
    pub federated_origin_kernel_id: Option<String>,
}

A tool call request as seen by the kernel.

Fields

request_id: String

Unique request identifier.

capability: CapabilityToken

The signed capability token authorizing this call.

tool_name: String

The tool to invoke.

server_id: ServerId

The server hosting the tool.

agent_id: AgentId

The calling agent’s identifier (hex-encoded public key).

arguments: Value

Tool arguments.

dpop_proof: Option<DpopProof>

Optional DPoP proof. Required when the matched grant has dpop_required == Some(true).

execution_nonce: Option<SignedExecutionNonce>

Optional execution nonce presented for a strict nonce-protected dispatch. The nonce is minted by an allow evaluation and consumed exactly once before the tool server is invoked.

governed_intent: Option<GovernedTransactionIntent>

Optional governed transaction intent bound to this invocation.

approval_token: Option<GovernedApprovalToken>

Optional approval token authorizing this governed invocation.

approval_tokens: Vec<GovernedApprovalToken>

Bounded threshold approval set. Requests must not also set approval_token.

threshold_approval_proposal: Option<ThresholdApprovalProposal>

Policy-authority-signed proposal binding a threshold approval set.

supplemental_authorization: Option<OpaqueSupplementalAuthorization>

Opaque authenticated extension for a composition-installed verifier. The kernel never accepts quota authority directly from this wrapper.

model_metadata: Option<ModelMetadata>

Optional metadata describing the model executing the calling agent. Consumed by Constraint::ModelConstraint enforcement.

Absent when callers omit it; when the matched grant carries a ModelConstraint with any requirement, the call is denied.

federated_origin_kernel_id: Option<String>

Identifier of the origin kernel when this request crosses a federation boundary (agent in Org A invoking a tool in Org B). When set, the local (tool-host) kernel persists the signed receipt locally before requesting bilateral co-signing from the origin kernel. Absent for intra-org calls.

The field is skipped from wire serialization when None so the wire format stays byte-identical.

Implementations

impl ToolCallRequest

pub fn validate_authorization_extensions(&self) -> Result<(), Error>

pub fn approval_artifact_digest(&self) -> Result<Option<String>, Error>

Trait Implementations

impl Clone for ToolCallRequest

fn clone(&self) -> ToolCallRequest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ToolCallRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ToolCallRequest

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ToolCallRequest

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.