Struct ScopedAssembly 

pub struct ScopedAssembly<'a> {

    pub config: &'a Config,
    pub agent_alias: &'a str,
    pub security: &'a Arc<SecurityPolicy>,
    pub built: AllToolsResult,
    pub skills: &'a [Skill],
    pub runtime: Arc<dyn RuntimeAdapter>,
    pub caller_allowed: Option<&'a [String]>,
    pub connect_mcp: bool,
    pub connect_peripherals: bool,
    pub exclude_memory: bool,
    pub acp_delivery: bool,
    pub list_deferred_mcp_specs: bool,
    pub emit_assembly_logs: bool,
    pub mcp_registry: Option<Arc<McpRegistry>>,
}

Inputs to ScopedToolRegistry::assemble. The eager built-ins arrive already built (built); assemble does the policy-bearing steps the sites used to repeat.

Fields

config: &'a Config

agent_alias: &'a str

security: &'a Arc<SecurityPolicy>

built: AllToolsResult

Eager built-in tools + the channel/delegate handle bundle, consumed here.

skills: &'a [Skill]

Skills loaded by the caller’s (single) loader; registered under the same gate.

runtime: Arc<dyn RuntimeAdapter>

caller_allowed: Option<&'a [String]>

Documented divergence: a per-run caller allowlist. It only NARROWS, and is threaded into BOTH the built-in filter and the MCP tool-access policy. None on every path except run.

connect_mcp: bool

Documented divergence: ACP session/new must return promptly, so it does not connect MCP servers - they are neither resolved nor connected; nothing is granted.

connect_peripherals: bool

Documented divergence: loading peripherals physically connects hardware (the daemon’s loader opens serial ports, exclusively for real devices). Listing-only surfaces (the gateway’s /api/tools registries) MUST pass false so they never hold devices the live turn paths need; execution surfaces pass true.

exclude_memory: bool

Documented divergence: ACP excludes persistent memory tools.

acp_delivery: bool

deliver_file hands the client a typed file attachment that only an ACP-capable turn actually transports (the model history, WS, and RPC paths all drop the artifact). Every non-ACP assembly passes false so the tool is absent rather than returning a false success on a channel that cannot deliver it. Only the ACP turn path passes true.

list_deferred_mcp_specs: bool

emit_assembly_logs: bool

mcp_registry: Option<Arc<McpRegistry>>

Pre-built MCP registry supplied by the caller. The daemon heartbeat worker constructs this once at worker start and shares it across every tick so that stdio MCP children live for the daemon’s lifetime rather than being orphaned and re-spawned per agent::run call. When Some, assemble MUST use this Arc<McpRegistry> and MUST NOT call McpRegistry::connect_all itself. None preserves the legacy per-call connect path (CLI / one-shot / process_message), which is correct for callers that have no cross-turn reuse contract.