mirror of
https://github.com/Ed1s0nZ/CyberStrikeAI.git
synced 2026-09-15 14:15:27 +02:00
42 lines
1.3 KiB
Go
42 lines
1.3 KiB
Go
package mcp
|
||
|
||
import (
|
||
"fmt"
|
||
"strings"
|
||
|
||
"cyberstrike-ai/internal/toolguard"
|
||
)
|
||
|
||
const toolGuardBlockedPrefix = "工具调用已被安全规则拦截"
|
||
const toolGuardBlockedMetaKey = "cyberstrike.ai/blocked"
|
||
|
||
// toolGuardBlockError carries structured policy results through pre-run hooks.
|
||
type toolGuardBlockError struct{ result *ToolResult }
|
||
|
||
func (e *toolGuardBlockError) Error() string { return ToolResultPlainText(e.result) }
|
||
|
||
func toolResultProtocolMeta(result *ToolResult) map[string]interface{} {
|
||
if result != nil && result.Blocked {
|
||
return map[string]interface{}{toolGuardBlockedMetaKey: true}
|
||
}
|
||
return nil
|
||
}
|
||
|
||
// toolGuardBlockedResult uses the standard MCP error result so the refusal is
|
||
// visible both to the model and in persisted execution monitoring records.
|
||
func toolGuardBlockedResult(guard *toolguard.Manager, toolName string, args map[string]interface{}) *ToolResult {
|
||
if guard == nil {
|
||
return nil
|
||
}
|
||
match := guard.Check(toolName, args)
|
||
if match == nil {
|
||
return nil
|
||
}
|
||
message := toolGuardBlockedPrefix
|
||
if custom := strings.TrimSpace(match.Message); custom != "" {
|
||
message += "：" + custom
|
||
}
|
||
message += fmt.Sprintf("\n规则: %s (%s)\n匹配内容: %q", match.RuleName, match.RuleID, match.MatchedText)
|
||
return &ToolResult{Content: []Content{{Type: "text", Text: message}}, IsError: true, Blocked: true}
|
||
}
|