Files
2026-07-20 04:32:16 +00:00

43 lines
1.8 KiB
Go

package model
import "time"
// MCPAuditLog 记录每一次 MCP tool 调用,用于事后追责与异常检测。
// 写入是 best-effort:失败仅打日志,不阻塞业务请求。
type MCPAuditLog struct {
ID uint64 `gorm:"primaryKey" json:"id"`
CreatedAt time.Time `gorm:"index" json:"created_at"`
UserID uint64 `gorm:"index" json:"user_id"`
TokenID uint64 `gorm:"index" json:"token_id"`
Tool string `gorm:"type:varchar(64);index" json:"tool"`
ServerID uint64 `gorm:"index" json:"server_id,omitempty"`
ArgsHash string `gorm:"type:char(64)" json:"args_hash"`
ArgsPeek string `gorm:"type:varchar(512)" json:"args_peek,omitempty"`
Outcome string `gorm:"type:varchar(32);index" json:"outcome"`
ErrorCode string `gorm:"type:varchar(32)" json:"error_code,omitempty"`
ErrorMsg string `gorm:"type:varchar(512)" json:"error_msg,omitempty"`
DurationMs int64 `json:"duration_ms"`
IP string `gorm:"type:varchar(64)" json:"ip"`
}
func (MCPAuditLog) TableName() string {
return "mcp_audit_logs"
}
const (
MCPOutcomeOK = "ok"
MCPOutcomeScopeDenied = "scope_denied"
MCPOutcomePermDenied = "permission_denied"
MCPOutcomeServerOffline = "server_offline"
MCPOutcomeAgentTimeout = "agent_timeout"
MCPOutcomeAgentError = "agent_error"
// MCPOutcomeMCPDisabled 区分 “管理员按下 kill switch 把 MCP 关了” 与
// “agent 真出故障” 两种语义:前者属 forbidden 类、不应该触发 agent
// 故障告警;详见 service/rpc/mcp_rpc.go 里 ErrMCPDisabled 的注释。
MCPOutcomeMCPDisabled = "mcp_disabled"
MCPOutcomeInvalidArgs = "invalid_args"
MCPOutcomeRateLimited = "rate_limited"
MCPOutcomeUnsupportedAgent = "unsupported_agent"
MCPOutcomeInternalError = "internal_error"
)