wrap_tool_call(
self,
request: ToolCallRequest,
handler: Callable[[ToolCallRequest], ToolMessage | CommandReject disallowed shell commands; pass everything else through.
The tool call request being processed.
The next handler in the middleware chain.