awrap_tool_call(
self,
request: ToolCallRequest,
handler: Callable[[ToolCallRequest], Awaitable[ToolMessage Reject disallowed shell commands; pass everything else through.
The tool call request being processed.
The next handler in the middleware chain.