Struct ToolExecutionContext 

pub struct ToolExecutionContext {
    pub working_dir: PathBuf,
    pub fighter_id: FighterId,
    pub memory: Arc<MemorySubstrate>,
    pub coordinator: Option<Arc<dyn AgentCoordinator>>,
    pub approval_engine: Option<Arc<PolicyEngine>>,
    pub sandbox: Option<Arc<SandboxEnforcer>>,
    pub bleed_detector: Option<Arc<ShellBleedDetector>>,
    pub browser_pool: Option<Arc<BrowserPool>>,
    pub plugin_registry: Option<Arc<PluginRegistry>>,
    pub mcp_clients: Option<Arc<DashMap<String, Arc<McpClient>>>>,
    pub channel_notifier: Option<Arc<dyn ChannelNotifier>>,
    pub automation_backend: Option<Arc<dyn AutomationBackend>>,
}

Context passed to every tool execution.

Fields

working_dir: PathBuf

Working directory for filesystem and shell operations.

fighter_id: FighterId

The fighter invoking the tool.

memory: Arc<MemorySubstrate>

Memory substrate for memory/knowledge tools.

coordinator: Option<Arc<dyn AgentCoordinator>>

Optional agent coordinator for inter-agent tools (agent_spawn, agent_message, agent_list). This is None when the fighter does not have agent coordination capabilities.

approval_engine: Option<Arc<PolicyEngine>>

Optional policy engine for approval-gated tool execution. When present, every tool call is checked against the configured policies before dispatching. The referee must approve the move.

sandbox: Option<Arc<SandboxEnforcer>>

Optional subprocess sandbox (containment ring) for shell and filesystem tools. When present, commands are validated and environments are sanitized before execution.

bleed_detector: Option<Arc<ShellBleedDetector>>

Optional shell bleed detector — scans shell commands for leaked secrets before the move lands. If a Secret or Confidential bleed is detected, the command is blocked.

browser_pool: Option<Arc<BrowserPool>>

Optional browser session pool for browser automation tools. When present, browser scouting moves (navigate, screenshot, click, etc.) can manage sessions through the pool. The actual CDP driver is plugged in separately — without it, browser tools report “browser not available”.

plugin_registry: Option<Arc<PluginRegistry>>

Optional plugin registry for WASM plugin invocation. When present, the wasm_invoke tool can dispatch calls to loaded WASM plugins (imported techniques). Without it, the tool reports “plugin runtime not configured”.

mcp_clients: Option<Arc<DashMap<String, Arc<McpClient>>>>

Active MCP server clients, keyed by server name. When present, tools prefixed with mcp_{server}_ are routed to the corresponding MCP server for execution.

channel_notifier: Option<Arc<dyn ChannelNotifier>>

Optional channel notifier for proactive outbound messaging. When present, the channel_notify tool can send messages to connected channels (Telegram, Slack, Discord, etc.).

automation_backend: Option<Arc<dyn AutomationBackend>>

Optional desktop automation backend for screenshot, OCR, and UI tools. When present, automation tools (sys_screenshot, ui_click, etc.) can interact with the desktop. Without it, automation tools report “automation backend not configured”.