Function script_allowed_tools

core/src/tools/program_tool.rs:205–223

(args: &serde_json::Value, registry: &ToolRegistry)

}

fn script_allowed_tools(args: &serde_json::Value, registry: &ToolRegistry) -> HashSet<String> {
    let mut allowed = args
        .get("allowed_tools")
        .and_then(|value| value.as_array())
        .map(|items| {
            items
                .iter()
                .filter_map(|item| item.as_str())
                .map(ToString::to_string)
                .collect::<HashSet<_>>()
        })
        .unwrap_or_else(|| registry.list().into_iter().collect());

    allowed.remove("program");
    // `task`/`parallel_task` ARE allowed in PTC scripts now: host tool calls run
    // on the outer multi-threaded runtime (see execute_host_tool_json), so
    // `ctx.tool("parallel_task", …)` fans out child agents in parallel.
    allowed
}

fn script_limits(args: &serde_json::Value) -> ScriptLimits {
    args.get("limits")