feat(ai): Agent SSE + Anthropic/responses tools + P1 确认写

- Agent 支持 SSE（步骤边推、正文分块），JSON 非流式 fallback
- tool calling 覆盖 openai-chat / anthropic / responses（单测解析回灌）
- P1：mcp.json mode=read_write 才可写；需 confirm_danger；Agent 剥离模型自带令牌
- GET /api/ai/mcp-status、POST /api/ai/agent/confirm；审计 source=mcp|agent

server/internal/aitools/schema.go

@@ -52,22 +52,24 @@ func ToolSpecs() []ToolSpec {
 		},
 		{
 			Name:        ToolExecuteQuery,
-			Description: "Execute a READ-ONLY SQL query (SELECT/SHOW/EXPLAIN/WITH…SELECT). Writes and DDL are rejected in P0. Default limit 100, max 500.",
+			Description: "Execute SQL. Default read-only (SELECT/SHOW/EXPLAIN/WITH…SELECT). Writes require mcp.json mode=read_write AND confirm_danger=true (never auto). Default limit 100, max 500.",
 			Properties: map[string]any{
-				"connection_id": connID,
-				"sql":           map[string]any{"type": "string", "description": "Read-only SQL"},
-				"database":      database,
-				"limit":         map[string]any{"type": "integer", "description": "Row limit (default 100, max 500)"},
+				"connection_id":   connID,
+				"sql":             map[string]any{"type": "string", "description": "SQL statement"},
+				"database":        database,
+				"limit":           map[string]any{"type": "integer", "description": "Row limit (default 100, max 500)"},
+				"confirm_danger":  map[string]any{"type": "boolean", "description": "Required for writes when mode=read_write; Agent UI sets this only after user confirms"},
 			},
 			Required: []string{"connection_id", "sql"},
 		},
 		{
 			Name:        ToolExecuteRedisCommand,
-			Description: "Execute a READ-ONLY Redis command (GET/SCAN/TYPE/TTL/…). FLUSH*/KEYS and writes are rejected in P0.",
+			Description: "Execute Redis command. Default read-only whitelist. Writes require mode=read_write AND confirm_danger=true. FLUSH*/KEYS/CONFIG always denied.",
 			Properties: map[string]any{
-				"connection_id": connID,
-				"command":       map[string]any{"type": "string", "description": "Single Redis command line"},
-				"database":      database,
+				"connection_id":  connID,
+				"command":        map[string]any{"type": "string", "description": "Single Redis command line"},
+				"database":       database,
+				"confirm_danger": map[string]any{"type": "boolean", "description": "Required for writes when mode=read_write"},
 			},
 			Required: []string{"connection_id", "command"},
 		},