feat(tool): add thread-safe whitelist management and dynamic desc

[fang-tech]

AgentScope-Java Version

1.0.4

Description

Add a list of allowed commands to the description sent to LLM. This helps to reduce the occurrence of LLM running commands that are not allowed. Although it incurs an increase in the consumption of one-time tokens, it can reduce the number of tool invocations, which is a more token-consuming behavior. At the same time, make the modification of the allowedCommand set thread-safe.

Checklist

Please check the following items before code is ready to be reviewed.

• Code has been formatted with mvn spotless:apply
• All tests are passing (mvn test)
• Javadoc comments are complete and follow project conventions
• Related documentation has been updated (e.g. links, examples, etc.)
• Code is ready for review

[Copilot]

Pull request overview

This PR modernizes the ShellCommandTool by migrating from annotation-based tool definitions to the AgentTool interface pattern, while also introducing thread-safe whitelist management capabilities and dynamic description generation.

Key changes include:

• Refactored from @Tool/@ToolParam annotations to implementing the AgentTool interface with explicit method implementations
• Enhanced whitelist management with thread-safe operations using ConcurrentHashMap.newKeySet()
• Added new public API methods for dynamic whitelist manipulation: addAllowedCommand(), removeAllowedCommand(), clearAllowedCommands(), and isCommandAllowed()

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 5 comments.

File	Description
agentscope-core/src/main/java/io/agentscope/core/tool/coding/ShellCommandTool.java	Implements AgentTool interface, replaces HashSet with ConcurrentHashMap for thread-safe whitelist, adds defensive copying in constructor, implements getName/getDescription/getParameters/callAsync methods, and adds new whitelist management API
agentscope-core/src/test/java/io/agentscope/core/tool/coding/ShellCommandToolTest.java	Adds comprehensive test coverage for whitelist management operations, thread safety scenarios, AgentTool interface implementation, and updates existing test to use new addAllowedCommand() method

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov]

Codecov Report

❌ Patch coverage is 93.33333% with 3 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
.../agentscope/core/tool/coding/ShellCommandTool.java	93.33%	1 Missing and 2 partials ⚠️

📢 Thoughts on this report? Let us know!