All tool names registered by FilesystemMiddleware. This is the single source of truth — used by createDeepAgent to detect collisions with user-supplied tools at construction time.
FILESYSTEM_TOOL_NAMES: readonly ["ls", "read_file", "write_file", "edit_file", "delete", "glob", "grep", "execute"]