Struct ExecTool 

pub struct ExecTool { /* private fields */ }

Unified execution tool for agents.

Wraps both shell-string and structured binary+args execution behind a single AgentTool implementation that uses a mode parameter to dispatch to the appropriate method.

Access control is enforced based on agent_name:

• shell_exec: audit logging (cannot sandbox arbitrary shell).
• structured_exec: pre-flight permission check via AccessManager.

Implementations

impl ExecTool

pub fn new(config: Arc<ExecConfig>, access: Arc<Mutex<AccessManager>>) -> Self

Create a new ExecTool with the given config and access manager.

No agent context is attached, so access control is not enforced. Use ExecTool::for_agent for production.

pub fn from_kernel(kernel: &KernelHandle) -> Self

Create an ExecTool from a [KernelHandle].

Extracts ExecConfig and AccessManager from the kernel’s exec facade and binds the tool to the default agent name "oxios-agent".

pub fn for_agent( config: Arc<ExecConfig>, access: Arc<Mutex<AccessManager>>, agent_name: String, ) -> Self

Create a new ExecTool bound to a specific agent.

All executions through this instance are attributed to agent_name for access control and audit logging.

pub async fn shell_exec( &self, command: &str, timeout_ms: u64, ) -> Result<ExecResult, String>

Execute a raw command string via bash -c <cmd>.

Primary shell execution path. The entire command string is forwarded to bash -c, so pipelines, redirects, and compound commands all work.

pub async fn structured_exec( &self, binary: &str, args: Vec<String>, timeout_ms: u64, ) -> Result<ExecResult, String>

Execute a binary with explicit args, enforcing allowlist + metachar blocking.

Primary structured execution path. Security checks:

1. Binary must be a bare name (no / or ..).
2. Binary must be in the allowlist (or allowlist is empty = dev mode).
3. Arguments must not contain shell metacharacters or path traversal.

Trait Implementations

impl AgentTool for ExecTool

fn name(&self) -> &str

Tool name (used in function calls)

fn label(&self) -> &str

Human-readable label

fn description(&self) -> &'static str

Description for the model

fn parameters_schema(&self) -> Value

JSON Schema for parameters

fn execute<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, _tool_call_id: &'life1 str, params: Value, _signal: Option<Receiver<()>>, _ctx: &'life2 ToolContext, ) -> Pin<Box<dyn Future<Output = Result<AgentToolResult, String>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Execute the tool with the given tool call ID and parameters.

fn essential(&self) -> bool

Whether this tool is essential (cannot be disabled). Essential tools: read, write, edit, bash, grep, find, ls Optional tools: web_search, github, subagent, etc.

fn on_progress(&self, _callback: Arc<dyn Fn(String) + Sync + Send>)

Called with progress updates during execution. Tools can override this to emit streaming updates.

fn to_definition(&self) -> ToolDefinition

Convert to ToolDefinition

impl Debug for ExecTool

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.