Struct ToolErrorPolicy 

pub struct ToolErrorPolicy {
    pub terminate_on: ToolErrorKindSet,
}

Operator-tunable classification gate consumed by ToolErrorPolicyLayer.

The struct is intentionally small: one ToolErrorKindSet describing which kinds escalate to terminal. Operators that want finer-grained behaviour (per-tool overrides, per-tenant hot-swap) compose a higher layer that produces tenant-scoped ToolErrorPolicy values; the leaf layer here stays simple by design.

Fields

terminate_on: ToolErrorKindSet

ToolErrorKinds that cause the layer to wrap the inner failure into crate::Error::ToolErrorTerminal, short- circuiting the reasoning loop. The empty default is the no-op — every failure flows through unchanged and reaches the model as a tool-result message.

Implementations

impl ToolErrorPolicy

pub const fn new() -> Self

Empty policy — every failure flows back to the model. The Default shape, suitable for dev / debugging deployments.

pub const fn operator_safe() -> Self

Recommended production set: Auth | Quota | Permanent. Three kinds the model cannot influence on retry — surfacing them to the LLM only burns tokens before recursion-limit fires.

Internal is deliberately excluded. ToolErrorKind::classify routes the _ catch-all (unclassified Error variants) to Internal, so including it in the default would silently terminate runs on every future Error variant that ships without an explicit classifier arm. Operators that want the catch-all behaviour add it explicitly with .add_terminal_kind(ToolErrorKind::Internal).

Transient / RateLimit are excluded because crate::tools::RetryToolLayer handles them transport-side; what reaches this policy in those buckets is past the retry budget and surfacing to the model gives it a chance to pick a different tool or restructure the call. Validation is excluded because the model authored the bad input — retrying with a corrected payload is exactly the failure mode the LLM-recoverable channel was designed for.

pub const fn add_terminal_kind(self, kind: ToolErrorKind) -> Self

Add kind to the terminate-on set. Fluent builder shape for recipe wiring sites.

pub const fn classifies_terminal(self, kind: ToolErrorKind) -> bool

Whether kind causes the layer to escalate to terminal.

Trait Implementations

impl Clone for ToolErrorPolicy

fn clone(&self) -> ToolErrorPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ToolErrorPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ToolErrorPolicy

fn default() -> ToolErrorPolicy

Returns the “default value” for a type.

impl PartialEq for ToolErrorPolicy

fn eq(&self, other: &ToolErrorPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for ToolErrorPolicy

impl Eq for ToolErrorPolicy

impl StructuralPartialEq for ToolErrorPolicy