运行时 · 状态机 · 流程

# WASM 插件调用伪代码（简化）
agent_loop:
  tool_name = "my-wasm-tool"
  tool_args = { "url": "https://example.com" }

tool_registry:
  plugin = find_wasm_plugin(tool_name)  // 找到对应插件

wasm_runtime:
  instance = wasmtime::instantiate("my-wasm-tool.wasm")
  apply_sandbox_policy(instance, plugin.permissions)
  request  = json_rpc_request(tool_name, tool_args)
  response = instance.call_export("handle", request)  // 在沙箱内执行
  result   = json_rpc_parse(response)

agent_loop:
  context.append_tool_result(tool_name, result)
  // 继续下一轮 LLM_CALL

// agent/loop.rs 内部工具并发调用（简化）
async fn dispatch_tools(tool_calls: Vec<ToolCall>) -> Vec<ToolResult> {
    // 为每个工具创建沙箱策略并并发 spawn
    let tasks: Vec<_> = tool_calls
        .into_iter()
        .map(|call| {
            let policy = safety_engine.policy_for(&call);
            tokio::spawn(async move {
                // 在沙箱内执行工具
                sandbox.run(policy, || tool_registry.execute(call)).await
            })
        })
        .collect();

    // 等待全部完成并聚合结果
    futures::future::join_all(tasks).await
        .into_iter()
        .filter_map(|r| r.ok())
        .collect()
}