Struct ExecTool 

pub struct ExecTool { /* private fields */ }

Implementations

impl ExecTool

pub fn with_container( self, limits: ContainerLimits, runtime: ContainerRuntime, ) -> Self

Uses an explicitly admitted daemon and frozen limits for program and shell calls. The daemon must be discovered by the host, rather than by a second configuration path.

pub fn confined(self, confinement: Confined) -> Self

Chooses an execution boundary before the tool is admitted to a run. The disclosure and actual placement always read the same confinement.

pub fn on_host(self) -> Self

Places sandbox program calls on the explicitly selected host arm.

pub fn python_only(self) -> Self

Offers the existing WASI guest while refusing sandbox program and shell calls.

impl ExecTool

pub fn new( setup: ExecSetup, sandbox: Box<dyn Sandbox>, backlog: Backlog, ) -> Result<ExecTool, AxError>

Trait Implementations

impl Drop for ExecTool

Releases background commands when the run drops its tool bench.

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl Tool for ExecTool

fn meta(&self) -> &ToolMeta

fn invoke(&self, call: &ToolCall) -> Result<ToolOutcome, AxError>

Fail-closed identity: a call whose name differs from meta().name must return E_INVALID_ARGS, never route silently.

fn subject(&self, _call: &ToolCall) -> Result<GateSubject, AxError>

What this call is about, read by the grammar this tool already parses its arguments with.

fn effect_of(&self, _call: &ToolCall) -> Result<Effect, AxError>

The effect this one call has, which picks the door it meets.

fn writes(&self, _call: &ToolCall) -> Writes

What this call may have written to the city’s tree once it ran; the default reads the declared effect and nothing more.