Struct ShellExecutor 

pub struct ShellExecutor { /* private fields */ }

Bash block extraction and execution via tokio::process::Command.

Parses ```bash fenced blocks from LLM responses (legacy path) and handles structured bash tool calls (modern path). Use ShellExecutor::new with a ShellConfig and chain optional builder methods to attach audit logging, event streaming, permission policies, and cancellation.

Example

use zeph_tools::{ShellExecutor, ToolExecutor, config::ShellConfig};

let executor = ShellExecutor::new(&ShellConfig::default());

// Execute a fenced bash block.
let response = "```bash\npwd\n```";
if let Ok(Some(output)) = executor.execute(response).await {
    println!("{}", output.summary);
}

Implementations

impl ShellExecutor

pub fn new(config: &ShellConfig) -> Self

Create a new ShellExecutor from configuration.

Merges the built-in DEFAULT_BLOCKED_COMMANDS with any additional blocked commands from config, then subtracts any explicitly allowed commands. No subprocess is spawned at construction time.

pub fn set_skill_env(&self, env: Option<HashMap<String, String>>)

Set environment variables to inject when executing the active skill’s bash blocks.

pub fn with_audit(self, logger: Arc<AuditLogger>) -> Self

Attach an audit logger. Each shell invocation will emit an AuditEntry.

pub fn with_tool_event_tx(self, tx: ToolEventTx) -> Self

Attach a tool-event sender for streaming output to the TUI or channel adapter.

When set, ToolEvent::Started, ToolEvent::OutputChunk, and ToolEvent::Completed events are sent on tx during execution.

pub fn with_permissions(self, policy: PermissionPolicy) -> Self

Attach a permission policy for confirmation-gate enforcement.

Commands matching the policy’s rules may require user approval before execution proceeds.

pub fn with_cancel_token(self, token: CancellationToken) -> Self

Attach a cancellation token. When the token is cancelled, the running subprocess is killed and the executor returns ToolError::Cancelled.

pub fn with_output_filters(self, registry: OutputFilterRegistry) -> Self

Attach an output filter registry. Filters are applied to stdout+stderr before the summary is stored in ToolOutput and sent to the LLM.

pub async fn execute_confirmed( &self, response: &str, ) -> Result<Option<ToolOutput>, ToolError>

Execute a bash block bypassing the confirmation check (called after user confirms).

Errors

Returns ToolError on blocked commands, sandbox violations, or execution failures.

Trait Implementations

impl Debug for ShellExecutor

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl ToolExecutor for ShellExecutor

async fn execute(&self, response: &str) -> Result<Option<ToolOutput>, ToolError>

Parse response for fenced tool blocks and execute them.

fn tool_definitions(&self) -> Vec<ToolDef>

Return the tool definitions this executor can handle.

async fn execute_tool_call( &self, call: &ToolCall, ) -> Result<Option<ToolOutput>, ToolError>

Execute a structured tool call. Returns Ok(None) if call.tool_id is not handled.

fn set_skill_env(&self, env: Option<HashMap<String, String>>)

Inject environment variables for the currently active skill. No-op by default.

fn execute_confirmed( &self, response: &str, ) -> impl Future<Output = Result<Option<ToolOutput>, ToolError>> + Send

Execute bypassing confirmation checks (called after user approves).

fn execute_tool_call_confirmed( &self, call: &ToolCall, ) -> impl Future<Output = Result<Option<ToolOutput>, ToolError>> + Send

Execute a structured tool call bypassing confirmation checks.

fn set_effective_trust(&self, _level: SkillTrustLevel)

Set the effective trust level for the currently active skill. No-op by default.

fn is_tool_retryable(&self, _tool_id: &str) -> bool

Whether the executor can safely retry this tool call on a transient error.