Struct GuardContext 

pub struct GuardContext<'a> {
    pub request: &'a ToolCallRequest,
    pub scope: &'a ChioScope,
    pub agent_id: &'a AgentId,
    pub server_id: &'a ServerId,
    pub session_filesystem_roots: Option<&'a [String]>,
    pub matched_grant_index: Option<usize>,
}

Context passed to guards during evaluation.

Fields

request: &'a ToolCallRequest

The tool call request being evaluated.

scope: &'a ChioScope

The verified capability scope.

agent_id: &'a AgentId

The agent making the request.

server_id: &'a ServerId

The target server.

session_filesystem_roots: Option<&'a [String]>

Session-scoped enforceable filesystem roots, when the request is being evaluated through the supported session-backed runtime path.

matched_grant_index: Option<usize>

Index of the matched grant in the capability’s scope, populated by check_and_increment_budget before guards run.