Struct FilteredToolExecutor 

pub struct FilteredToolExecutor { /* private fields */ }

Wraps an ErasedToolExecutor and enforces a ToolPolicy plus an optional additional denylist (disallowed).

All calls are checked against the policy and the denylist before being forwarded to the inner executor. The denylist is evaluated first — a tool in disallowed is blocked even if policy would allow it (deny wins). Rejected calls return a descriptive ToolError.

Implementations

impl FilteredToolExecutor

pub fn new(inner: Arc<dyn ErasedToolExecutor>, policy: ToolPolicy) -> Self

Create a new filtered executor.

pub fn with_disallowed( inner: Arc<dyn ErasedToolExecutor>, policy: ToolPolicy, disallowed: Vec<String>, ) -> Self

Create a new filtered executor with an additional denylist.

Tools in disallowed are blocked regardless of the base policy (deny wins over allow).

Trait Implementations

impl ErasedToolExecutor for FilteredToolExecutor

fn execute_erased<'a>( &'a self, response: &'a str, ) -> Pin<Box<dyn Future<Output = Result<Option<ToolOutput>, ToolError>> + Send + 'a>>

fn execute_confirmed_erased<'a>( &'a self, response: &'a str, ) -> Pin<Box<dyn Future<Output = Result<Option<ToolOutput>, ToolError>> + Send + 'a>>

fn tool_definitions_erased(&self) -> Vec<ToolDef>

fn execute_tool_call_erased<'a>( &'a self, call: &'a ToolCall, ) -> Pin<Box<dyn Future<Output = Result<Option<ToolOutput>, ToolError>> + Send + 'a>>

fn set_skill_env(&self, env: Option<HashMap<String, String>>)

Inject environment variables for the currently active skill. No-op by default.

fn is_tool_retryable_erased(&self, tool_id: &str) -> bool

Whether the executor can safely retry this tool call on a transient error.

fn execute_tool_call_confirmed_erased<'a>( &'a self, call: &'a ToolCall, ) -> Pin<Box<dyn Future<Output = Result<Option<ToolOutput>, ToolError>> + Send + 'a>>

fn set_effective_trust(&self, _level: SkillTrustLevel)

Set the effective trust level for the currently active skill. No-op by default.