mirror of
https://github.com/JackChen-me/open-multi-agent.git
synced 2026-10-22 11:02:59 -05:00
Third split of #96 (follow-up to #379). The onToolCall gate shipped in #377 and the classifyBashCommand classifier in #379; this documents both and adds a runnable example. - docs/tool-configuration.md: a "Per-call gating with onToolCall" section (where it sits, ToolCallContext/ToolCallDecision, deny returns an error ToolResult not a throw, agent overrides orchestrator default, orthogonal to onApproval, gated/gateAction/gateReason on the trace with gateReason redacted, not a security boundary) plus a shell risk classifier subsection. - examples/patterns/risk-gated-bash.ts: a security-audit agent that classifies each bash command and routes safe/review/high to allow/human-approval/deny. - AGENTS.md: cross-links in the tool-layer notes + /classifiers in the exports map. Closes #380