OpenRouter

npm install @sigilcore/agent-hooks

import { createOpenRouterToolGate } from '@sigilcore/agent-hooks';

const sigilConfig = {
  apiKey: process.env.SIGIL_API_KEY,
  agentId: 'openrouter-agent',
  framework: 'openrouter',
  failMode: 'closed',
};

// Map your tool/function names to Sigil action types.
const TOOL_TO_ACTION = {
  run_shell: 'bash',
  write_file: 'file_write',
  fetch_url: 'web_fetch',
  transfer: 'wallet.transfer',
};

const gateToolCall = createOpenRouterToolGate(sigilConfig, TOOL_TO_ACTION);

const response = await fetch('https://openrouter.ai/api/v1/chat/completions', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${process.env.OPENROUTER_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ model, messages, tools }),
}).then((r) => r.json());

const message = response.choices[0].message;

if (message.tool_calls) {
  for (const toolCall of message.tool_calls) {
    const gated = await gateToolCall(toolCall);
    if (!gated.approved) {
      messages.push(gated.toolResult);
      continue;
    }

    const content = await runTool(gated.name, gated.args);
    messages.push({
      role: 'tool',
      tool_call_id: toolCall.id,
      content,
    });
  }
}

OpenRouter returns finish_reason: "tool_calls"
        ↓
For each tool call, before executing:
        ↓
createOpenRouterToolGate → POST /v1/authorize → Sigil Sign
        ↓
ALLOWED → host executes the tool
DENIED   → rejection JSON returned to the model as the tool result
PENDING  → held; surface for human approval