feat: whitelist

mcp_go/README.md

@@ -99,10 +99,11 @@ go run main.go
 
 ### Application Management
 
-- **create_application** - Create protection application
-  - `domain`: Application domain (string, required)
-  - `port`: Listening port (number, required)
-  - `upstream`: Upstream address (string, required)
+- **create_application**
+
+### Rule Management
+- **create_blacklist_rule**
+- **create_whitelist_rule**
 
 For more API details, please refer to the [API Documentation](https://master.safeline-ce.staging.dev.in.chaitin.net:9443/swagger/index.html#).
 
@@ -169,12 +170,14 @@ func (t *ToolName) Execute(ctx context.Context, params ToolParams) (result ToolR
 }
 ```
 
-3. **Create API Implementation**
+3. **[Optional]Create API Implementation**
+
+If you need to use some APIs that have not been implemented yet, you need to create corresponding files in the api directory for implementation
    - Create same directory structure under `internal/api`
-   - File name should match tool file
+   - File name should match tool func
    - Example: `internal/api/app/create_application.go`
 
-4. **API Implementation Template**
+**API Implementation Template**
 ```go
 package app
 
@@ -202,7 +205,7 @@ func APIName(ctx context.Context, req *RequestType) (ResultType, error) {
     return resp.Data, nil
 }
 ```
-5. **Tool Registration (init.go)**
+4. **Tool Registration (init.go)**
 
 The tool registration file `internal/tools/init.go` is used to centrally manage all tool registrations
   - Register all tools uniformly in the `init()` function
@@ -221,7 +224,6 @@ The tool registration file `internal/tools/init.go` is used to centrally manage
 1. **Naming Conventions**
    - Use lowercase letters and underscores for tool names
    - File names should match tool names
-   - API implementation files should have the same name as tool files
 
 2. **Directory Organization**
    - Divide directories by functional modules (e.g., app, rule, etc.)

mcp_go/internal/api/rule/create_rule.go

@@ -7,7 +7,7 @@ import (
 	"github.com/chaitin/SafeLine/mcp_server/pkg/errors"
 )
 
-type CreateBlacklistRuleRequest struct {
+type CreateRuleRequest struct {
 	Name      string          `json:"name"`
 	IP        []string        `json:"ip"`
 	IsEnabled bool            `json:"is_enabled"`
@@ -15,8 +15,8 @@ type CreateBlacklistRuleRequest struct {
 	Action    int             `json:"action"`
 }
 
-// CreateBlacklistRule Create new blacklist rule
-func CreateBlacklistRule(ctx context.Context, req *CreateBlacklistRuleRequest) (int64, error) {
+// CreateRule Create new rule
+func CreateRule(ctx context.Context, req *CreateRuleRequest) (int64, error) {
 	if req == nil {
 		return 0, errors.New("request is required")
 	}
@@ -24,7 +24,7 @@ func CreateBlacklistRule(ctx context.Context, req *CreateBlacklistRuleRequest) (
 	var resp api.Response[int64]
 	err := api.Service().Post(ctx, "/api/open/policy", req, &resp)
 	if err != nil {
-		return 0, errors.Wrap(err, "failed to create blacklist rule")
+		return 0, errors.Wrap(err, "failed to create policy rule")
 	}
 
 	if resp.Err != nil {

mcp_go/internal/tools/init.go

@@ -8,4 +8,5 @@ import (
 func init() {
 	AppendTool(&app.CreateApp{})
 	AppendTool(&rule.CreateBlacklistRule{})
+	AppendTool(&rule.CreateWhitelistRule{})
 }

mcp_go/internal/tools/rule/create_blacklist_rule.go

@@ -28,7 +28,7 @@ func (t *CreateBlacklistRule) Validate(params CreateBlacklistRuleParams) error {
 }
 
 func (t *CreateBlacklistRule) Execute(ctx context.Context, params CreateBlacklistRuleParams) (int64, error) {
-	id, err := rule.CreateBlacklistRule(ctx, &rule.CreateBlacklistRuleRequest{
+	id, err := rule.CreateRule(ctx, &rule.CreateRuleRequest{
 		Name:      params.Name,
 		IP:        params.IP,
 		IsEnabled: true,

mcp_go/internal/tools/rule/create_whitelist_rule.go

@@ -0,0 +1,50 @@
+package rule
+
+import (
+	"context"
+
+	"github.com/chaitin/SafeLine/mcp_server/internal/api"
+	"github.com/chaitin/SafeLine/mcp_server/internal/api/rule"
+)
+
+type CreateWhitelistRule struct{}
+
+type CreateWhitelistRuleParams struct {
+	Name string   `json:"name" desc:"name" required:"true"`
+	IP   []string `json:"ip" desc:"ip" required:"false"`
+}
+
+func (t *CreateWhitelistRule) Name() string {
+	return "create_whitelist_rule"
+}
+
+func (t *CreateWhitelistRule) Description() string {
+	return "create a new whitelist rule"
+}
+
+func (t *CreateWhitelistRule) Validate(params CreateWhitelistRuleParams) error {
+	return nil
+}
+
+func (t *CreateWhitelistRule) Execute(ctx context.Context, params CreateWhitelistRuleParams) (int64, error) {
+	id, err := rule.CreateRule(ctx, &rule.CreateRuleRequest{
+		Name:      params.Name,
+		IP:        params.IP,
+		IsEnabled: true,
+		Action:    int(api.PolicyRuleActionAllow),
+		Pattern: [][]api.Pattern{
+			{
+				{
+					K:    api.KeySrcIP,
+					Op:   api.OpEq,
+					V:    params.IP,
+					SubK: "",
+				},
+			},
+		},
+	})
+	if err != nil {
+		return 0, err
+	}
+	return id, nil
+}