Module tools 

Unified tool registry combining built-in tools and MCP-discovered tools.

Structs

ToolRegistry

Combined tool registry: native built-in tools + MCP-discovered tools.

Functions

clamp_by_effect

Clamp a resolved policy by what the call does, as opposed to what it is called.

declared_write_bytes

How many bytes this call declares it will write, when that is knowable before it runs.

default_tool_policy

Default policy for a tool: read-only builtins are allowed, mutating ones ask, human-in-the-loop tools are always allowed, and anything else requires approval.

escaping_write_refusal

Refuse a shell call whose redirect writes outside the working directory, or None when every literal target it names stays inside.

measured_write_bytes

How many bytes a finished shell call put on disk, for charging the run’s budget.

resolve_policy

Resolve the effective policy for a tool call.

session_approval_keys

The keys a scoped approval (“allow for this stage”, “allow for this run”) is remembered under. Empty means this call must not be granted beyond itself.

write_budget_refusal

Refuse a call that would take the run past a write ceiling, or fill the disk.