ducklm/docs/tool_gateway.md

10 lines
403 B
Markdown

# Tool Gateway
The model does not execute tools directly. It emits an action directive and `ToolGateway` validates the tool name and arguments before execution.
Implemented tools:
- `file_read`: reads inside workspace only.
- `file_write`: writes inside workspace only and refuses overwrites unless `overwrite=true`.
- `shell_exec_safe`: runs only allowlisted commands and blocks dangerous commands.