Module toolset 

The typed tool catalog (PSP-9 system 5, Layer B).

Catalog assembly is a three-way join, and each side keeps its existing job: the SDK contributes the base entries and the effect/risk/footprint contract; the active AgentDomainPackage contributes domain entries; and the runtime’s plugin registry binds verifier tools to actual commands for this workspace. A workspace with no cargo on PATH simply does not offer run_build — and says why.

Structs

ExternalToolDeclaration

A tool declaration received from an external server, before admission.

FootprintSpec

The declared footprint of one tool.

HandlerContext

Immutable context for one governed handler call.

HandlerServices

Host services available to a handler. Each service is optional so a capability role can expose only the surfaces it actually grants.

StaticCatalog

An assembled, validated catalog.

ToolDescriptionLibrary

Per-route presentation text for a tool (PSP-10 system 25). Presentation only: model-facing text never changes catalog effects, risks, or footprints.

ToolDispatcher

Exact-name registry and governed dispatch boundary.

ToolEntry

One tool in the catalog.

ToolExecution

A handler’s declared result. The dispatcher rejects effect or footprint claims outside the catalog entry.

Enums

AccessMode

Whether a selector reads or mutates its resource.

ConcurrencyClass

Scheduling class declared by a trusted handler implementation.

MultiValueTarget

ProposalBinding

How validated arguments bind to a Paper III effect proposal. Bindings are locally trusted catalog data; tool descriptions and server annotations do not create them.

ResourceSelector

A declarative mapping from validated tool arguments to scheduler resources.

ToolOrigin

Where a tool entry came from.

Traits

NetworkService

Capability-scoped network observation service.

ObservationService

Durable observation sink used by handlers.

ProcessService

Capability-scoped direct process execution.

ToolCatalog

The catalog port.

ToolHandler

WorkspaceService

Capability-scoped workspace access. Implementations enforce their scope; handlers never receive an unrestricted host path.

Functions

admit_external_tool

Admit one external declaration into catalog entries the kernel governs.

base_entries

Every builtin entry.