ToolExecutor

Struct ToolExecutor 

Source
pub struct ToolExecutor { /* private fields */ }
Expand description

Tool executor with automatic audit logging and timeout protection.

The executor provides a safe, audited interface to execute tools:

  1. Validates arguments against tool’s schema
  2. Executes with timeout protection
  3. Hashes results for Merkle chain
  4. Logs execution to audit trail (if configured)

§Example

use vex_llm::{ToolExecutor, ToolRegistry};

let registry = ToolRegistry::with_builtins();
let executor = ToolExecutor::new(registry);

let result = executor
    .execute("calculator", json!({"expression": "2+2"}))
    .await?;

println!("Result: {}", result.output);
println!("Hash: {}", result.hash);

Implementations§

Source§

impl ToolExecutor

Source

pub fn new(registry: ToolRegistry) -> Self

Create a new executor with the given registry

Source

pub fn without_audit(registry: ToolRegistry) -> Self

Create executor with audit logging disabled

Source

pub fn with_max_parallel(self, max: usize) -> Self

Set maximum parallel executions

Source

pub fn with_allowed_capabilities(self, caps: Vec<Capability>) -> Self

Set allowed capabilities for the sandbox

Source

pub async fn execute( &self, tool_name: &str, args: Value, ) -> Result<ToolResult, ToolError>

Execute a tool by name with given arguments.

§Arguments
  • tool_name - Name of the tool to execute
  • args - JSON arguments to pass to the tool
§Returns
  • Ok(ToolResult) - Execution result with hash for verification
  • Err(ToolError) - If tool not found, validation failed, execution error, or timeout
§Security
  • Tool lookup prevents arbitrary code execution
  • Timeout prevents DoS from hanging tools
  • Result hash enables tamper detection
Source

pub async fn execute_parallel( &self, calls: Vec<(String, Value)>, ) -> Vec<Result<ToolResult, ToolError>>

Execute multiple tools in parallel.

§Arguments
  • calls - Vector of (tool_name, args) pairs
§Returns

Vector of results in the same order as input. Each result is independent (one failure doesn’t affect others).

§Security
  • Respects max_parallel limit to prevent resource exhaustion
  • Each tool has its own timeout
Source

pub fn registry(&self) -> &ToolRegistry

Get a reference to the tool registry

Source

pub fn registry_mut(&mut self) -> &mut ToolRegistry

Get a mutable reference to the tool registry

Source

pub fn has_tool(&self, name: &str) -> bool

Check if a tool exists

Source

pub fn tool_names(&self) -> Vec<&str>

List all available tool names

Trait Implementations§

Source§

impl Debug for ToolExecutor

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

§

impl<T> Instrument for T

§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided [Span], returning an Instrumented wrapper. Read more
§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> IntoEither for T

Source§

fn into_either(self, into_left: bool) -> Either<Self, Self>

Converts self into a Left variant of Either<Self, Self> if into_left is true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
Source§

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
where F: FnOnce(&Self) -> bool,

Converts self into a Left variant of Either<Self, Self> if into_left(&self) returns true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
§

impl<T> Pointable for T

§

const ALIGN: usize

The alignment of pointer.
§

type Init = T

The type for initializers.
§

unsafe fn init(init: <T as Pointable>::Init) -> usize

Initializes a with the given initializer. Read more
§

unsafe fn deref<'a>(ptr: usize) -> &'a T

Dereferences the given pointer. Read more
§

unsafe fn deref_mut<'a>(ptr: usize) -> &'a mut T

Mutably dereferences the given pointer. Read more
§

unsafe fn drop(ptr: usize)

Drops the object pointed to by the given pointer. Read more
§

impl<T> PolicyExt for T
where T: ?Sized,

§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns [Action::Follow] only if self and other return Action::Follow. Read more
§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns [Action::Follow] if either self or other returns Action::Follow. Read more
Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

§

fn vzip(self) -> V

§

impl<T> WithSubscriber for T

§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a [WithDispatch] wrapper. Read more
§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a [WithDispatch] wrapper. Read more