Struct AgentRuntime 

pub struct AgentRuntime {
    config: Arc<Config>,
    root: PathBuf,
    store: AgentRunStore,
    tools: Arc<ToolRegistry>,
    models: Arc<ModelRegistry>,
    policy: RuntimePolicy,
    approvals: Arc<dyn ApprovalHandler>,
    resources: Arc<BTreeMap<String, LoadedAgentResource>>,
    tool_bindings: Arc<BTreeMap<String, LoadedToolResource>>,
    execution: Option<ExecutionContext>,
    context_builder: Arc<dyn RunContextBuilder>,
}

Fields

config: Arc<Config>

root: PathBuf

store: AgentRunStore

tools: Arc<ToolRegistry>

models: Arc<ModelRegistry>

policy: RuntimePolicy

approvals: Arc<dyn ApprovalHandler>

resources: Arc<BTreeMap<String, LoadedAgentResource>>

tool_bindings: Arc<BTreeMap<String, LoadedToolResource>>

execution: Option<ExecutionContext>

context_builder: Arc<dyn RunContextBuilder>

Implementations

impl AgentRuntime

fn uses_unrecoverable_tool(&self, resource: &LoadedAgentResource) -> bool

pub(super) fn selected_binding_metadata( &self, resource: &LoadedAgentResource, ) -> Result<Value>

pub(super) fn selected_binding_metadata_with( &self, resource: &LoadedAgentResource, external: Option<&ToolRegistry>, ) -> Result<Value>

fn binding( &self, resource: &LoadedAgentResource, schema_version: i64, ) -> Result<String>

pub(super) async fn checkpoint( &self, id: &str, resource: &LoadedAgentResource, checkpoint_context: CheckpointContext<'_>, turn: u32, baseline: Option<&AgentRun>, ) -> Result<()>

pub async fn continue_run( &self, id: &str, resource: &LoadedAgentResource, input: &str, cancel: Receiver<bool>, ) -> Result<AgentRun>

Continue one exact suspended control exchange without creating a new run.

pub async fn resume( &self, id: &str, resource: &LoadedAgentResource, cancel: Receiver<bool>, ) -> Result<AgentRun>

Resume only at a completed conversation boundary. The original resource, host policy, model binding, turn budget and wall-clock deadline still apply.

impl AgentRuntime

pub fn with_resources( self, resources: BTreeMap<String, LoadedAgentResource>, ) -> Self

Supply an immutable resource catalog from the same resolution context as the root. Child names never trigger a second filesystem discovery.

pub(super) fn validate_delegation( &self, parent: &LoadedAgentResource, arguments: &Value, ) -> Result<()>

pub(super) async fn invoke( &self, id: &str, call_id: &str, parent: &LoadedAgentResource, arguments: Value, ) -> Result<Value>

impl AgentRuntime

pub(super) async fn external_tools( &self, id: &str, resource: &LoadedAgentResource, ) -> Result<(ToolRegistry, Vec<Session>)>

pub(super) async fn approve_invocation( &self, id: &str, call_id: &str, tool: &str, arguments: &Value, authorization: Authorization, ) -> Result<()>

impl AgentRuntime

pub async fn new( config: Config, root: &Path, models: ModelRegistry, ) -> Result<Self>

Initialize runtime history and bind all context reads to this config/DB.

pub(crate) async fn new_initialized( config: Config, root: &Path, models: ModelRegistry, ) -> Result<Self>

async fn from_initialized_config( config: Config, root: PathBuf, models: ModelRegistry, ) -> Result<Self>

pub fn with_policy( self, policy: RuntimePolicy, approvals: Arc<dyn ApprovalHandler>, ) -> Self

A trusted host may supply an explicit policy and approval UI. Agent TOML cannot change this ceiling. By default privileged calls need approval, and the library denies approvals until a handler is installed.

pub async fn with_tool_bindings( self, directories: &[ResourceDirectory], ) -> Result<Self>

Resolve and bind standalone tool resources through the trusted core catalog. Host authority is the existing workspace read boundary; resources only narrow it.

pub async fn with_tool_binding_catalog( self, directories: &[ResourceDirectory], catalog: &ToolImplementationCatalog, authority: Arc<HostToolAuthority>, ) -> Result<Self>

Bind resources using a catalog and authority supplied by a trusted embedding host.

async fn bind_tool_resources( self, directories: &[ResourceDirectory], catalog: &ToolImplementationCatalog, authority: Arc<HostToolAuthority>, ) -> Result<Self>

pub fn store(&self) -> &AgentRunStore

pub async fn run( &self, resource: &LoadedAgentResource, input: &str, cancel: Receiver<bool>, ) -> Result<AgentRun>

Return persisted terminal state even for expected execution failures, so callers always receive a run ID. Storage errors remain ordinary errors.

pub(crate) async fn execute_existing_run( &self, run: &AgentRun, resource: &LoadedAgentResource, cancel: Receiver<bool>, ) -> Result<AgentRun>

Drive a root run whose creation was atomically linked by the task store.

async fn drive( &self, run: &AgentRun, resource: &LoadedAgentResource, request: Option<RestoredRequest>, start_turn: u32, cancel: Receiver<bool>, files: &RunFiles, ) -> Result<AgentRun>

fn remaining_time( &self, run: &AgentRun, resource: &LoadedAgentResource, ) -> Result<Duration>

fn declarations(&self, resource: &LoadedAgentResource) -> Result<Vec<ModelTool>>

fn declarations_with( &self, resource: &LoadedAgentResource, external: &ToolRegistry, ) -> Result<Vec<ModelTool>>

async fn execute( &self, run: &AgentRun, resource: &LoadedAgentResource, input: &str, restored: Option<RestoredRequest>, start_turn: u32, files: &RunFiles, pending_suspension: &mut Option<Value>, ) -> Result<RunOutcome>

async fn prepare_selected_tools( &self, id: &str, resource: &LoadedAgentResource, external: &ToolRegistry, context: &ToolContext, ) -> Result<()>

Trait Implementations

impl Clone for AgentRuntime

fn clone(&self) -> AgentRuntime

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.