refactor: rename tool→function + browser eviction + Makefile cleanup

.gitignore

@@ -4,6 +4,7 @@ target/
 .idea/
 .DS_Store
 docs
+!harness/docs/
 .worktrees
 node_modules
 package-lock.json

README.md

@@ -24,7 +24,7 @@ matching GitHub Release asset for the host's target triple.
 | [`models-catalog`](models-catalog/) | Rust | Model capabilities knowledge base under `models::*` (list/get/supports/register). |
 | [`oauth-anthropic`](oauth-anthropic/) | Rust | Anthropic Claude Pro/Max OAuth (PKCE localhost flow) under `oauth::anthropic::*`. |
 | [`oauth-openai-codex`](oauth-openai-codex/) | Rust | OpenAI Codex OAuth (PKCE localhost flow) under `oauth::openai_codex::*`. |
-| [`policy-denylist`](policy-denylist/) | Rust | Hook subscriber on `agent::before_tool_call` that blocks calls whose name is on a configured denylist. |
+| [`policy-denylist`](policy-denylist/) | Rust | Hook subscriber on `agent::before_function_call` that blocks calls whose function id is on a configured denylist. |
 | [`proof`](proof/) | Node | AI-driven browser testing — diffs changes, generates test plans, drives Playwright. |
 | [`provider-anthropic`](provider-anthropic/) | Rust | Native Anthropic Messages API streaming provider under `provider::anthropic::*`. |
 | [`provider-openai`](provider-openai/) | Rust | OpenAI Chat Completions provider under `provider::openai::*`. |

approval-gate/README.md

@@ -1,12 +1,12 @@
 # approval-gate
 
-Subscriber on `agent::before_tool_call`. Pauses tool calls whose name appears
+Subscriber on `agent::before_function_call`. Pauses function calls whose id appears
 in the run's `approval_required` list, emits `ApprovalRequested` onto
 `agent::events/<session_id>`, and waits for the UI to call `approval::resolve`
 (or for the configured timeout, default 5 minutes).
 
 ## Functions
-- `approval::resolve { tool_call_id, decision, reason? }` — flip a pending entry to `allow` or `deny`.
+- `approval::resolve { function_call_id, tool_call_id?, decision, reason? }` — flip a pending entry to `allow` or `deny` (`tool_call_id` accepted for backward compatibility).
 - `approval::list_pending { session_id }` — return currently-blocked calls (used by the UI on tab refresh).
 
 ## Config (env)

approval-gate/iii.worker.yaml

@@ -4,8 +4,8 @@ language: rust
 deploy: binary
 manifest: Cargo.toml
 bin: iii-approval-gate
-description: Hook subscriber on agent::before_tool_call that pauses tool calls listed in approval_required until the UI resolves them via approval::resolve.
+description: Hook subscriber on agent::before_function_call that pauses function calls listed in approval_required until the UI resolves them via approval::resolve.
 config:
-  topic: agent::before_tool_call
+  topic: agent::before_function_call
   approval_state_scope: approvals
   default_timeout_ms: 300000