Tool Gateway

The model does not execute tools directly. It emits an action directive and ToolGateway validates the tool name and arguments before execution.

Implemented tools:

file_read: reads inside workspace only.
file_write: writes inside workspace only and refuses overwrites unless overwrite=true.
shell_exec_safe: runs only allowlisted commands and blocks dangerous commands.