Struct PlanModeExecutor 

pub struct PlanModeExecutor { /* private fields */ }

Wraps an ErasedToolExecutor for Plan permission mode.

Exposes the real tool catalog via tool_definitions_erased() so the LLM can reference existing tools in its plan, but blocks all execution methods with ToolError::Blocked. This implements read-only planning: the agent sees what tools exist but cannot invoke them.

Implementations

impl PlanModeExecutor

pub fn new(inner: Arc<dyn ErasedToolExecutor>) -> Self

Wrap inner with plan-mode restrictions.

Trait Implementations

impl ErasedToolExecutor for PlanModeExecutor

fn execute_tool_call_confirmed_erased<'a>( &'a self, call: &'a ToolCall, ) -> Pin<Box<dyn Future<Output = Result<Option<ToolOutput>, ToolError>> + Send + 'a>>

Plan mode blocks all execution, confirmed or not — reuse the same block as the unconfirmed path rather than forwarding to inner.

fn set_effective_trust(&self, level: SkillTrustLevel)

Read-only in plan mode: trust level is metadata, not an execution capability, so it is safe (and necessary for parity with other read paths) to forward.

fn execute_erased<'a>( &'a self, _response: &'a str, ) -> Pin<Box<dyn Future<Output = Result<Option<ToolOutput>, ToolError>> + Send + 'a>>

fn execute_confirmed_erased<'a>( &'a self, _response: &'a str, ) -> Pin<Box<dyn Future<Output = Result<Option<ToolOutput>, ToolError>> + Send + 'a>>

fn tool_definitions_erased(&self) -> Vec<ToolDef>

fn execute_tool_call_erased<'a>( &'a self, call: &'a ToolCall, ) -> Pin<Box<dyn Future<Output = Result<Option<ToolOutput>, ToolError>> + Send + 'a>>

fn set_skill_env(&self, env: Option<HashMap<String, String>>)

Inject environment variables for the currently active skill. No-op by default.

fn is_tool_retryable_erased(&self, _tool_id: &str) -> bool

Whether the executor can safely retry this tool call on a transient error.

fn requires_confirmation_erased(&self, _call: &ToolCall) -> bool

Return true when call would require user confirmation before execution.

fn checkpoint_undo_erased(&self, n: usize) -> CheckpointActionResult

Undo the last n checkpointed write commands.

fn checkpoint_redo_erased(&self) -> CheckpointActionResult

Redo the last undone checkpoint.

fn checkpoint_list_erased(&self) -> CheckpointListResult

List the current undo stack entries and redo depth.

fn is_tool_speculatable_erased(&self, tool_id: &str) -> bool

Whether a tool call can be safely dispatched speculatively.