Module tools 

Tool hosting and approval.

The runtime never executes a tool itself. It resolves the call, re-checks the artifact’s policy, and hands the invocation to a ToolHost the operator supplied. The default host denies everything, so a tool runs only because somebody chose to provide it.

Structs

ApprovalRequest

DenyAllTools

Refuses every tool. The default, so nothing runs by accident.

ScriptedApprovals

Answers from a fixed list, then denies. Test scaffolding.

StaticToolHost

Serves tools from an in-process table. Test scaffolding, and the basis for the MCP host that replaces it.

ToolInvocation

One resolved tool call.

Enums

ApprovalMode

What the runtime should do when it reaches an approval node.

ToolError

Traits

ApprovalHandler

Asked whether a gated action may proceed.

ToolHost

Something that can execute a tool call.