Struct DeferredExtensionTool 

pub struct DeferredExtensionTool { /* private fields */ }

A dormant, manifest-declared extension tool. Registered like any live tool (stable ext:<plugin>:<name> identity, schema, digest — so wire resolution, discovery, exact grants, and the execution gate all work unchanged), but its implementation is DEFERRED: executing it requires the session extension-runtime lease capability (lease lifecycle commit), which starts only the OWNING extension after the execution gate has already authorized the call. Without that capability it fails typed and spawns nothing.

Implementations

impl DeferredExtensionTool

pub fn plugin_id(&self) -> &str

pub fn tool_name(&self) -> &str

pub fn expected_digest(&self) -> &SchemaDigest

Digest of the pinned declaration — equal by construction to this tool’s catalog record digest.

Trait Implementations

impl Tool for DeferredExtensionTool

fn origin(&self) -> ToolOrigin

Runtime-origin identity used for catalog provenance. Conservative by default: tools that declare nothing are Unknown (fail-closed source trust), and tools that declare an owning extension classify as extension-provided. Built-in implementations override this explicitly.

fn name(&self) -> &str

Tool name as it appears in the API (e.g. “bash”, “read”).

fn description(&self) -> &str

Human-readable description sent to the model.

fn parameters(&self) -> Value

JSON Schema for the tool’s parameters.

fn execute<'life0, 'async_trait>( &'life0 self, params: Value, ctx: ToolContext, ) -> Pin<Box<dyn Future<Output = Result<String, RuntimeError>> + Send + 'async_trait>>

where 'life0: 'async_trait, DeferredExtensionTool: 'async_trait,

Execute the tool with the given parameters.

fn execute_rich<'life0, 'async_trait>( &'life0 self, params: Value, ctx: ToolContext, ) -> Pin<Box<dyn Future<Output = Result<ToolOutput, RuntimeError>> + Send + 'async_trait>>

where 'life0: 'async_trait, Self: 'async_trait,

Structured variant of Tool::execute. DEFAULTED — existing tools keep returning String via execute and never see this. Tools that need to place non-text content blocks (images) into the model history override this and make execute delegate to it.

fn extension_id(&self) -> Option<&str>

Owning extension id for tools registered by an extension. Built-in tools return None.

fn effect(&self) -> ToolEffect

Conservative effect class (Task 24, spec §8.2). The default keeps unknown/dynamic tools NonIdempotent — serialized execution; implementations opt IN to weaker classes explicitly.

fn runs_independently(&self) -> bool

Each call is its own independent actor (a subagent): sibling calls in one batch each get their own scheduler lane and run concurrently, instead of joining the shared serial lane that NonIdempotent tools use. Scheduling only — the effect class, and with it the rule that an interrupted call is never re-run automatically, is unchanged.

fn concurrency_key(&self, _validated_input: &Value) -> Option<ConcurrencyKey>

Key resolution derived from validated input. Serialize explicitly fails closed into the global mutation lane; None is the conservative default for tools with no key support.