refactor: enhance MCP tool management with risk policies and confirmation handling

internal/pkg/dto/response/mcp_response.go

@@ -52,6 +52,7 @@ type MCPToolInfoResponse struct {
 	Description  string `json:"description"`
 	InputSchema  any    `json:"inputSchema"`
 	OutputSchema any    `json:"outputSchema,omitempty"`
+	ReadOnlyHint bool   `json:"readOnlyHint"`
 }
 
 func BuildMCPToolInfoResponses(items []mcps.ToolInfo) []MCPToolInfoResponse {
@@ -63,21 +64,25 @@ func BuildMCPToolInfoResponses(items []mcps.ToolInfo) []MCPToolInfoResponse {
 			Description:  item.Description,
 			InputSchema:  item.InputSchema,
 			OutputSchema: item.OutputSchema,
+			ReadOnlyHint: item.ReadOnlyHint,
 		})
 	}
 	return ret
 }
 
 type MCPToolCatalogResponse struct {
-	ToolCode     string               `json:"toolCode"`
-	ServerCode   string               `json:"serverCode"`
-	ToolName     string               `json:"toolName"`
-	SourceType   enums.ToolSourceType `json:"sourceType"`
-	AutoInjected bool                 `json:"autoInjected"`
-	Title        string               `json:"title"`
-	Description  string               `json:"description"`
-	InputSchema  any                  `json:"inputSchema"`
-	OutputSchema any                  `json:"outputSchema,omitempty"`
+	ToolCode            string               `json:"toolCode"`
+	ServerCode          string               `json:"serverCode"`
+	ToolName            string               `json:"toolName"`
+	SourceType          enums.ToolSourceType `json:"sourceType"`
+	AutoInjected        bool                 `json:"autoInjected"`
+	Title               string               `json:"title"`
+	Description         string               `json:"description"`
+	InputSchema         any                  `json:"inputSchema"`
+	OutputSchema        any                  `json:"outputSchema,omitempty"`
+	RiskLevel           string               `json:"riskLevel"`
+	RequireConfirmation bool                 `json:"requireConfirmation"`
+	RiskEditable        bool                 `json:"riskEditable"`
 }
 
 type MCPToolResultContentResponse struct {

internal/pkg/toolx/mcp_policy.go

@@ -0,0 +1,51 @@
+package toolx
+
+import (
+	"strings"
+
+	"agent-desk/internal/pkg/dto/request"
+)
+
+const (
+	MCPRiskLevelRead  = "read"
+	MCPRiskLevelWrite = "write"
+)
+
+type TrustedMCPToolPolicy struct {
+	ToolCode            string
+	Title               string
+	RiskLevel           string
+	RequireConfirmation bool
+}
+
+var trustedMCPToolPolicies = map[string]TrustedMCPToolPolicy{
+	"system/server_time": {
+		ToolCode:            "system/server_time",
+		Title:               "获取当前时间",
+		RiskLevel:           MCPRiskLevelRead,
+		RequireConfirmation: false,
+	},
+	"system/service_info": {
+		ToolCode:            "system/service_info",
+		Title:               "查看服务信息",
+		RiskLevel:           MCPRiskLevelRead,
+		RequireConfirmation: false,
+	},
+}
+
+func GetTrustedMCPToolPolicy(toolCode string) (TrustedMCPToolPolicy, bool) {
+	policy, ok := trustedMCPToolPolicies[NormalizeToolCodeAlias(strings.TrimSpace(toolCode))]
+	return policy, ok
+}
+
+func ApplyTrustedMCPToolPolicy(item request.AIAgentMCPToolRequest) request.AIAgentMCPToolRequest {
+	policy, ok := GetTrustedMCPToolPolicy(item.ToolCode)
+	if !ok {
+		return item
+	}
+	item.ToolCode = policy.ToolCode
+	item.Title = policy.Title
+	item.RiskLevel = policy.RiskLevel
+	item.RequireConfirmation = policy.RequireConfirmation
+	return item
+}