Module tools 

Tool system — trait, registry, and built-in tool implementations.

All tools implement the Tool trait and are registered in ToolRegistry. Subagents get ToolRegistry::without_subagent() to prevent recursion.

Modules

activation

SessionToolSet — per-session core + exact activated tools (Task 15, spec §7.1, §4.2).

catalog

ToolCatalog — all locally known capabilities (spec §7.1, Task 14).

discovery

Model-facing discovery and exact-activation builtins (Task 17, spec §4.2, §7.2, §7.3, §7.7): search_tools and activate_tools.

ledger

Task 25 — typed tool-call ledger (spec §8.3).

memory

Task 32 — model-facing project-scoped memory tools (spec §9.5).

output

Task 26 — bounded tool-output delta channels with an explicit backpressure/coalescing policy (spec §8.4).

respond

RespondTool — reply to an event through its original source channel.

send_channel

SendChannelTool — proactively send a message to a specific channel.

shell

Interactive PTY-based shell sessions for agents.

watcher_exit

Structs

ActivateToolsTool

Model-initiated deterministic exact activation. Every requested id must be an exact known cataloged ToolId; the whole batch validates first (host grant issuance: exact id, current generation/digest, source trust) and applies atomically in stable id order with exactly one session schema-generation advance. Requires host-supplied confirmation authority; a model-authored JSON flag can never substitute for it.

BashIntermediarySnapshot

BashTool

EditTool

ExtensionTool

FindTool

GrepTool

LsTool

MemoryContextTool

Control the continuous-memory context of the current session (spec §7.2).

PowerShellTool

ReadTool

RespondTool

SearchToolsTool

Bounded, deterministic, descriptor-only capability search over the passive catalog snapshot. Pure and local: no factory invocation, no process start, no network, no schema exposure, no grant.

SecretPromptHandle

UI-only secret prompt plumbing for interactive tools.

SecretPromptQueue

SecretPromptRequest

SendChannelTool

SessionSchemaProjection

Typed projection report for ToolRegistry::session_tools_schema: the projected schema entries PLUS every pinned session member that was dropped fail-closed, with the typed reason. Metadata-only reasons: bounded identities, never schema bytes. Callers can surface dropped for audit/telemetry instead of losing the signal to a log line.

ShellEndTool

ShellSendTool

ShellStartTool

SubagentCollectTool

SubagentDisplayRow

Snapshot row produced by SubagentRegistry::display_rows(). Used by the TUI reconcile path as the registry’s liveness authority.

SubagentHandle

SubagentModelAuthorizeTool

SubagentModelsTool

SubagentRegistry

SubagentResult

SubagentResumeTool

SubagentStartTool

SubagentState

All mutable state shared between the subagent thread and its handle. Collapsed behind a single RwLock so a status poll takes exactly one lock.

SubagentStatusTool

SubagentSteerTool

SubagentTool

ToolCapabilities

Runtime capability handles — shared services a tool may require.

ToolChannels

Streaming channels — carry partial tool output and stream events.

ToolContext

Context passed to tool execution — composition of channels, capabilities, and limits.

ToolLimits

Configuration limits and timeouts.

ToolRegistry

Registry of available tools. Maintains a name→tool map and a cached JSON schema array that gets sent to the API. Thread-safe via Arc<RwLock<ToolRegistry>>.

WatcherExitTool

WriteTool

Enums

ConcurrencyKey

DroppedSessionMember

Why a pinned session member was dropped from a schema projection.

SubagentStatus

ToolOrigin

Explicit runtime-origin identity of a registered tool implementation.

ToolOutput

Structured tool output. Text is the legacy contract (what execute returns). Blocks carries Anthropic-shaped content blocks destined for tool_result.content, plus a plain-text summary used everywhere a String is expected today: UI preview, after_tool_call hooks, trace ledger byte counts, headless logs, and providers that cannot carry the blocks. INVARIANT: blocks[0] MUST be a {"type":"text"} block whose text == summary (compaction reads blocks[0].text; non-Anthropic translators join only text sub-blocks).

Traits

Tool

The core trait for all tools. Implement this to add a new tool.

Functions

bash_intermediary_snapshot

resolve_agent_prompt

Resolve an agent name to a system prompt.