Function install_agent_dir_tools

core/src/serve/tools.rs:31–45

Install each parsed [`ToolSpec`] into `session`. `mcp` specs are registered and connected via the existing `add_mcp_server` path, so their tools land as `mcp__ __ ` and are gated by the session's permission policy like any other tool. Connection is fallible and surfaces here (e.g. a missing `command` binary), so a misconfigured tool fails at serve startup rather than silently at first

(session: &AgentSession, specs: &[ToolSpec])

/// bounded by the spec's pinned (fail-closed) allow-list and the QuickJS sandbox
/// rather than the session permission policy — see [`AgentDirScriptTool`].
pub async fn install_agent_dir_tools(session: &AgentSession, specs: &[ToolSpec]) -> Result<()> {
    for spec in specs {
        match spec {
            ToolSpec::Mcp(config) => {
                session.add_mcp_server(config.clone()).await?;
            }
            ToolSpec::Script(script) => {
                let registry = Arc::clone(session.tool_executor().registry());
                let tool = Arc::new(AgentDirScriptTool::new(script.clone(), registry));
                session.tool_executor().register_dynamic_tool(tool);
            }
        }
    }
    Ok(())
}

#[cfg(test)]
mod tests {