Struct SkillInvokeExecutor 

pub struct SkillInvokeExecutor { /* private fields */ }

Tool executor that returns a skill body by name with trust-aware sanitization.

Delegates trust resolution, integrity checking, sanitization, and quarantine wrapping to a shared SkillTrustGate (crate-private) — the same pipeline load_skill (crate::skill_loader::SkillLoaderExecutor) uses, so the two tools cannot drift apart.

Implementations

impl SkillInvokeExecutor

pub fn new( registry: Arc<RwLock<SkillRegistry>>, trust_snapshot: Arc<RwLock<HashMap<String, SkillTrustSnapshot>>>, ) -> Self

Create a new executor with shared registry and trust snapshot.

Both Arcs must be the same instances held by the agent — and shared with SkillLoaderExecutor — so updates are visible without re-constructing the executor.

Trait Implementations

impl Clone for SkillInvokeExecutor

fn clone(&self) -> SkillInvokeExecutor

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SkillInvokeExecutor

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl ToolExecutor for SkillInvokeExecutor

async fn execute( &self, _response: &str, ) -> Result<Option<ToolOutput>, ToolError>

Parse response for fenced tool blocks and execute them.

fn tool_definitions(&self) -> Vec<ToolDef>

Return the tool definitions this executor can handle.

async fn execute_tool_call( &self, call: &ToolCall, ) -> Result<Option<ToolOutput>, ToolError>

Execute a structured tool call. Returns Ok(None) if call.tool_id is not handled.

fn requires_confirmation(&self, _call: &ToolCall) -> bool

Return true when call would require user confirmation before execution.

fn execute_tool_call_confirmed( &self, call: &ToolCall, ) -> impl Future<Output = Result<Option<ToolOutput>, ToolError>> + Send

Execute a structured tool call bypassing confirmation checks.

fn checkpoint_undo(&self, _n: usize) -> CheckpointActionResult

Undo the last n checkpointed write commands.

fn checkpoint_redo(&self) -> CheckpointActionResult

Redo the last undone checkpoint.

fn checkpoint_list(&self) -> CheckpointListResult

List the current undo stack entries and redo depth.

fn is_tool_speculatable(&self, _tool_id: &str) -> bool

Whether a tool call can be safely dispatched speculatively (before the LLM finishes).

fn execute_confirmed( &self, response: &str, ) -> impl Future<Output = Result<Option<ToolOutput>, ToolError>> + Send

Execute bypassing confirmation checks (called after user approves).

fn set_skill_env(&self, _env: Option<HashMap<String, String>>)

Inject environment variables for the currently active skill. No-op by default.

fn set_effective_trust(&self, _level: SkillTrustLevel)

Set the effective trust level for the currently active skill. No-op by default.

fn is_tool_retryable(&self, _tool_id: &str) -> bool

Whether the executor can safely retry this tool call on a transient error.