Struct FileExecutor 

pub struct FileExecutor { /* private fields */ }

File operations executor sandboxed to allowed paths.

Implementations

impl FileExecutor

pub fn new(allowed_paths: Vec<PathBuf>) -> Self

pub fn with_read_sandbox(self, config: &FileConfig) -> Self

Apply per-path read allow/deny sandbox rules from config.

pub fn execute_file_tool( &self, tool_id: &str, params: &Map<String, Value>, ) -> Result<Option<ToolOutput>, ToolError>

Execute a tool call by tool_id and params.

Errors

Returns ToolError on sandbox violations or I/O failures.

Trait Implementations

impl Debug for FileExecutor

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl ToolExecutor for FileExecutor

async fn execute( &self, _response: &str, ) -> Result<Option<ToolOutput>, ToolError>

Parse response for fenced tool blocks and execute them.

async fn execute_tool_call( &self, call: &ToolCall, ) -> Result<Option<ToolOutput>, ToolError>

Execute a structured tool call. Returns Ok(None) if call.tool_id is not handled.

fn tool_definitions(&self) -> Vec<ToolDef>

Return the tool definitions this executor can handle.

fn execute_confirmed( &self, response: &str, ) -> impl Future<Output = Result<Option<ToolOutput>, ToolError>> + Send

Execute bypassing confirmation checks (called after user approves).

fn execute_tool_call_confirmed( &self, call: &ToolCall, ) -> impl Future<Output = Result<Option<ToolOutput>, ToolError>> + Send

Execute a structured tool call bypassing confirmation checks.

fn set_skill_env(&self, _env: Option<HashMap<String, String>>)

Inject environment variables for the currently active skill. No-op by default.

fn set_effective_trust(&self, _level: SkillTrustLevel)

Set the effective trust level for the currently active skill. No-op by default.

fn is_tool_retryable(&self, _tool_id: &str) -> bool

Whether the executor can safely retry this tool call on a transient error.

fn is_tool_speculatable(&self, _tool_id: &str) -> bool

Whether a tool call can be safely dispatched speculatively (before the LLM finishes).

fn requires_confirmation(&self, _call: &ToolCall) -> bool

Return true when call would require user confirmation before execution.