Struct ClientToolDecl 

pub struct ClientToolDecl {
    pub name: String,
    pub effect: Effect,
    pub input_schema: Value,
    pub output_schema: Option<Value>,
    pub trust_completion: bool,
    pub require_equal: Vec<String>,
}

One operator-written declaration of a tool the CLIENT performs.

There is no handler behind it. It exists so this server can do the things it CAN honestly do about a call it never witnessed: fix the effect class, check the input before an intent is recorded, check the reported output against a shape the operator declared, pin named fields so a report cannot alter what was authorized, and decide whether the client’s report is allowed to close the call at all.

Unknown keys are rejected rather than ignored. A misspelled key like require_equal would otherwise be dropped silently, leaving a guard the operator meant to set quietly absent, and the mistake would not surface until a client had already altered a field the operator meant to pin. Refusing early, precisely, is the rule.

The declaration deserializes through [RawClientToolDecl] so a cross-field rule the field-by-field format cannot express is enforced at load: every require_equal name must be required on both sides. A file that breaks it fails to parse, naming the field and the missing side.

Fields

name: String

The tool’s name, the one a client names when it opens an intent.

effect: Effect

The operator-declared effect class, recorded on every intent for this tool. Never taken from the client, for the reason in the module docs.

input_schema: Value

The schema an intent’s input must satisfy, checked with salvor_runtime::validate_against_schema before anything is written.

output_schema: Option<Value>

The schema a client-reported completion must satisfy. Optional in the format, because a declaration is still useful without one (the effect and the input check both still apply), but a tool declared without it cannot be self-completed by a client: an unfalsifiable completion is precisely what the schema exists to prevent.

trust_completion: bool

Whether the client may record its own completion for this tool. false by default: silence gets the safe direction, and self-completing a write on the client’s word alone is the convenient direction, so it is an explicit opt-in. false means every call for this tool is settled by hand through the resolve endpoint after someone has verified it externally.

require_equal: Vec<String>

Top-level field names whose client-reported value must equal the intent’s recorded value. Empty by default. Every named field must appear in both input_schema.required and output_schema.required, checked at load, so the two values always exist to compare; at the completion boundary a reported value that differs from the authorized one refuses the completion. The output schema is a shape check and cannot know what was authorized; this is the field-level equality the shape check cannot do.

Trait Implementations

impl Clone for ClientToolDecl

fn clone(&self) -> ClientToolDecl

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ClientToolDecl

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ClientToolDecl

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.