[Developer] #424 add MCP reasoning tab

2026-06-23 16:03:36 +09:00
parent 4c47245141
commit cafacfaac1
15 changed files with 649 additions and 3 deletions
--- a/src/main/java/com/cloudhandson/vpdbackoffice/config/BackofficeProperties.java
+++ b/src/main/java/com/cloudhandson/vpdbackoffice/config/BackofficeProperties.java
@@ -7,7 +7,8 @@ import org.springframework.boot.context.properties.ConfigurationProperties;
 public record BackofficeProperties(
    Security security,
    Token token,
-    Ords ords
+    Ords ords,
+    Ai ai
 ) {

  public record Security(String adminUser, String adminPassword) {
@@ -18,4 +19,7 @@ public record BackofficeProperties(

  public record Ords(String baseUrl, Duration timeout) {
  }
+
+  public record Ai(boolean enabled, String baseUrl, String model, String apiKey, Duration timeout) {
+  }
 }
--- a/src/main/java/com/cloudhandson/vpdbackoffice/domain/mcp/McpReasoningCommand.java
+++ b/src/main/java/com/cloudhandson/vpdbackoffice/domain/mcp/McpReasoningCommand.java
@@ -0,0 +1,9 @@
+package com.cloudhandson.vpdbackoffice.domain.mcp;
+
+public record McpReasoningCommand(
+    long objectId,
+    String bearerToken,
+    int limit,
+    String question
+) {
+}
--- a/src/main/java/com/cloudhandson/vpdbackoffice/domain/mcp/McpReasoningResult.java
+++ b/src/main/java/com/cloudhandson/vpdbackoffice/domain/mcp/McpReasoningResult.java
@@ -0,0 +1,13 @@
+package com.cloudhandson.vpdbackoffice.domain.mcp;
+
+import com.cloudhandson.vpdbackoffice.domain.probe.ProbeResult;
+
+public record McpReasoningResult(
+    String modelStatus,
+    String toolName,
+    String answer,
+    String prompt,
+    String evidenceJson,
+    ProbeResult probeResult
+) {
+}
--- a/src/main/java/com/cloudhandson/vpdbackoffice/domain/mcp/McpToolView.java
+++ b/src/main/java/com/cloudhandson/vpdbackoffice/domain/mcp/McpToolView.java
@@ -0,0 +1,10 @@
+package com.cloudhandson.vpdbackoffice.domain.mcp;
+
+public record McpToolView(
+    String name,
+    String description,
+    long objectId,
+    String displayName,
+    String ordsPath
+) {
+}
--- a/src/main/java/com/cloudhandson/vpdbackoffice/service/McpReasoningService.java
+++ b/src/main/java/com/cloudhandson/vpdbackoffice/service/McpReasoningService.java
@@ -0,0 +1,162 @@
+package com.cloudhandson.vpdbackoffice.service;
+
+import com.cloudhandson.vpdbackoffice.domain.mcp.McpReasoningCommand;
+import com.cloudhandson.vpdbackoffice.domain.mcp.McpReasoningResult;
+import com.cloudhandson.vpdbackoffice.domain.mcp.McpToolView;
+import com.cloudhandson.vpdbackoffice.domain.probe.ProbeCommand;
+import com.cloudhandson.vpdbackoffice.domain.probe.ProbeResult;
+import com.cloudhandson.vpdbackoffice.domain.probe.ProbeStatus;
+import com.cloudhandson.vpdbackoffice.domain.protectedobject.ProtectedObject;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import java.util.List;
+import org.springframework.stereotype.Service;
+
+@Service
+public class McpReasoningService {
+
+  private static final int MAX_EVIDENCE_ROWS = 20;
+
+  private final ProtectedObjectService protectedObjectService;
+  private final OrdsProbeService ordsProbeService;
+  private final McpToolRegistry toolRegistry;
+  private final OpenAiCompatibleClient aiClient;
+  private final ObjectMapper objectMapper;
+
+  public McpReasoningService(
+      ProtectedObjectService protectedObjectService,
+      OrdsProbeService ordsProbeService,
+      McpToolRegistry toolRegistry,
+      OpenAiCompatibleClient aiClient,
+      ObjectMapper objectMapper
+  ) {
+    this.protectedObjectService = protectedObjectService;
+    this.ordsProbeService = ordsProbeService;
+    this.toolRegistry = toolRegistry;
+    this.aiClient = aiClient;
+    this.objectMapper = objectMapper;
+  }
+
+  public McpReasoningResult reason(McpReasoningCommand command) {
+    ProtectedObject object = protectedObjectService.assertEnabled(command.objectId());
+    McpToolView tool = toolRegistry.toolFor(object);
+    ProbeResult probeResult = ordsProbeService.runProbe(new ProbeCommand(
+        command.objectId(),
+        command.bearerToken(),
+        normalizeLimit(command.limit())
+    ));
+    String evidenceJson = evidenceJson(tool, probeResult);
+    String prompt = buildPrompt(command.question(), tool, evidenceJson);
+
+    if (!aiClient.configured()) {
+      return new McpReasoningResult(
+          "AI_NOT_CONFIGURED",
+          tool.name(),
+          fallbackAnswer(command.question(), probeResult),
+          prompt,
+          evidenceJson,
+          probeResult
+      );
+    }
+
+    try {
+      String answer = aiClient.chat(systemPrompt(), prompt);
+      return new McpReasoningResult("SUCCESS", tool.name(), answer, prompt, evidenceJson, probeResult);
+    } catch (Exception e) {
+      return new McpReasoningResult(
+          "AI_CALL_FAILED",
+          tool.name(),
+          "AI 호출은 실패했지만 ORDS 도구 실행 증거는 수집했습니다. 상세: " + e.getMessage(),
+          prompt,
+          evidenceJson,
+          probeResult
+      );
+    }
+  }
+
+  private int normalizeLimit(int limit) {
+    if (limit < 1) {
+      return 50;
+    }
+    return Math.min(limit, 500);
+  }
+
+  private String evidenceJson(McpToolView tool, ProbeResult result) {
+    try {
+      ObjectNode evidence = objectMapper.createObjectNode();
+      evidence.put("toolName", tool.name());
+      evidence.put("objectId", tool.objectId());
+      evidence.put("displayName", tool.displayName());
+      evidence.put("ordsPath", tool.ordsPath());
+      evidence.put("status", result.status().name());
+      evidence.put("rowCount", result.rowCount());
+      evidence.set("columns", objectMapper.valueToTree(result.columns()));
+      evidence.set("maskedColumns", objectMapper.valueToTree(result.maskedColumns()));
+      evidence.set("rows", objectMapper.valueToTree(limitedRows(result)));
+      evidence.put("errorCode", result.errorCode());
+      evidence.put("errorMessage", result.errorMessage());
+      evidence.put("requestHeaders", result.requestHeaders());
+      evidence.put("requestPayload", result.requestPayload());
+      evidence.put("responseHeaders", result.responseHeaders());
+      evidence.put("responseBody", result.responseBody());
+      return objectMapper.writerWithDefaultPrettyPrinter().writeValueAsString(evidence);
+    } catch (Exception e) {
+      throw new AppException("MCP evidence JSON 생성 실패: " + e.getMessage());
+    }
+  }
+
+  private List<?> limitedRows(ProbeResult result) {
+    if (result.rows().size() <= MAX_EVIDENCE_ROWS) {
+      return result.rows();
+    }
+    return result.rows().subList(0, MAX_EVIDENCE_ROWS);
+  }
+
+  private String buildPrompt(String question, McpToolView tool, String evidenceJson) {
+    String normalizedQuestion = question == null || question.isBlank()
+        ? "이 ORDS/VPD 검증 결과를 권한 관점에서 요약해줘."
+        : question.trim();
+    return """
+        질문:
+        %s
+
+        사용한 도구:
+        - name: %s
+        - object: %s
+        - ordsPath: %s
+
+        도구 실행 증거(JSON):
+        %s
+
+        답변 요구사항:
+        - 한국어로 답변한다.
+        - 증거 JSON에 없는 데이터는 추측하지 않는다.
+        - VPD 행 필터, 컬럼 NULL 처리, ORDS 오류 여부를 구분한다.
+        - 운영자가 다음에 확인할 액션이 있으면 짧게 제시한다.
+        """.formatted(normalizedQuestion, tool.name(), tool.displayName(), tool.ordsPath(), evidenceJson);
+  }
+
+  private String systemPrompt() {
+    return """
+        당신은 Oracle ADB VPD/Redaction/ORDS 권한 검증 보조자입니다.
+        백오피스가 제공한 도구 실행 증거만 근거로 판단하고, 토큰 원문이나 비밀 값을 재출력하지 마세요.
+        """;
+  }
+
+  private String fallbackAnswer(String question, ProbeResult result) {
+    if (result.status() == ProbeStatus.SUCCESS) {
+      return "AI base URL/API Key 설정이 없어 모델 호출은 건너뛰었습니다. ORDS 호출은 성공했고 "
+          + result.rowCount() + "건이 반환되었습니다. 질문: " + safeQuestion(question);
+    }
+    return "AI base URL/API Key 설정이 없어 모델 호출은 건너뛰었습니다. ORDS 도구 실행 상태는 "
+        + result.status().name() + "입니다. 오류: "
+        + (result.errorMessage() == null ? "없음" : result.errorMessage());
+  }
+
+  private String safeQuestion(String question) {
+    if (question == null || question.isBlank()) {
+      return "기본 요약";
+    }
+    return question.trim();
+  }
+}
--- a/src/main/java/com/cloudhandson/vpdbackoffice/service/McpToolRegistry.java
+++ b/src/main/java/com/cloudhandson/vpdbackoffice/service/McpToolRegistry.java
@@ -0,0 +1,42 @@
+package com.cloudhandson.vpdbackoffice.service;
+
+import com.cloudhandson.vpdbackoffice.domain.mcp.McpToolView;
+import com.cloudhandson.vpdbackoffice.domain.protectedobject.ProtectedObject;
+import java.util.List;
+import java.util.Locale;
+import org.springframework.stereotype.Service;
+
+@Service
+public class McpToolRegistry {
+
+  private final ProtectedObjectService protectedObjectService;
+
+  public McpToolRegistry(ProtectedObjectService protectedObjectService) {
+    this.protectedObjectService = protectedObjectService;
+  }
+
+  public List<McpToolView> listTools() {
+    return protectedObjectService.findEnabled().stream()
+        .map(this::toTool)
+        .toList();
+  }
+
+  public McpToolView toolFor(ProtectedObject object) {
+    return toTool(object);
+  }
+
+  private McpToolView toTool(ProtectedObject object) {
+    String name = "ords.query." + safeName(object.owner()) + "." + safeName(object.objectName());
+    return new McpToolView(
+        name,
+        object.displayName() + " 보호 객체를 Bearer Token으로 ORDS 호출해 VPD/Redaction 적용 결과를 조회합니다.",
+        object.objectId(),
+        object.displayName(),
+        object.ordsPath()
+    );
+  }
+
+  private String safeName(String value) {
+    return value.toLowerCase(Locale.ROOT).replaceAll("[^a-z0-9_]+", "_");
+  }
+}
--- a/src/main/java/com/cloudhandson/vpdbackoffice/service/OpenAiCompatibleClient.java
+++ b/src/main/java/com/cloudhandson/vpdbackoffice/service/OpenAiCompatibleClient.java
@@ -0,0 +1,114 @@
+package com.cloudhandson.vpdbackoffice.service;
+
+import com.cloudhandson.vpdbackoffice.config.BackofficeProperties;
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.fasterxml.jackson.databind.node.ArrayNode;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import java.net.URI;
+import java.time.Duration;
+import org.springframework.boot.web.client.RestTemplateBuilder;
+import org.springframework.http.HttpEntity;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.MediaType;
+import org.springframework.http.ResponseEntity;
+import org.springframework.stereotype.Service;
+import org.springframework.web.client.RestTemplate;
+
+@Service
+public class OpenAiCompatibleClient {
+
+  private final BackofficeProperties properties;
+  private final ObjectMapper objectMapper;
+  private final RestTemplateBuilder restTemplateBuilder;
+
+  public OpenAiCompatibleClient(
+      BackofficeProperties properties,
+      ObjectMapper objectMapper,
+      RestTemplateBuilder restTemplateBuilder
+  ) {
+    this.properties = properties;
+    this.objectMapper = objectMapper;
+    this.restTemplateBuilder = restTemplateBuilder;
+  }
+
+  public boolean configured() {
+    BackofficeProperties.Ai ai = properties.ai();
+    return ai != null
+        && ai.enabled()
+        && hasText(ai.baseUrl())
+        && hasText(ai.model())
+        && hasText(ai.apiKey());
+  }
+
+  public String chat(String systemPrompt, String userPrompt) {
+    if (!configured()) {
+      throw new AppException("AI 호출 설정이 없습니다.");
+    }
+
+    BackofficeProperties.Ai ai = properties.ai();
+    ObjectNode request = objectMapper.createObjectNode();
+    request.put("model", ai.model());
+    request.put("temperature", 0.1);
+    request.put("max_tokens", 1200);
+    ArrayNode messages = request.putArray("messages");
+    messages.add(message("system", systemPrompt));
+    messages.add(message("user", userPrompt));
+
+    HttpHeaders headers = new HttpHeaders();
+    headers.setContentType(MediaType.APPLICATION_JSON);
+    headers.setBearerAuth(ai.apiKey());
+
+    Duration timeout = ai.timeout() == null ? Duration.ofSeconds(30) : ai.timeout();
+    RestTemplate restTemplate = restTemplateBuilder
+        .setConnectTimeout(timeout)
+        .setReadTimeout(timeout)
+        .build();
+    ResponseEntity<String> response = restTemplate.postForEntity(
+        endpoint(ai.baseUrl()),
+        new HttpEntity<>(request.toString(), headers),
+        String.class
+    );
+    return extractAnswer(response.getBody());
+  }
+
+  private ObjectNode message(String role, String content) {
+    ObjectNode message = objectMapper.createObjectNode();
+    message.put("role", role);
+    message.put("content", content);
+    return message;
+  }
+
+  private URI endpoint(String baseUrl) {
+    String trimmed = baseUrl.trim();
+    if (trimmed.endsWith("/chat/completions")) {
+      return URI.create(trimmed);
+    }
+    String withoutSlash = trimmed.endsWith("/") ? trimmed.substring(0, trimmed.length() - 1) : trimmed;
+    if (withoutSlash.endsWith("/v1")) {
+      return URI.create(withoutSlash + "/chat/completions");
+    }
+    return URI.create(withoutSlash + "/v1/chat/completions");
+  }
+
+  private String extractAnswer(String body) {
+    try {
+      JsonNode root = objectMapper.readTree(body);
+      JsonNode content = root.path("choices").path(0).path("message").path("content");
+      if (content.isTextual() && !content.asText().isBlank()) {
+        return content.asText();
+      }
+      JsonNode outputText = root.path("output_text");
+      if (outputText.isTextual() && !outputText.asText().isBlank()) {
+        return outputText.asText();
+      }
+      return objectMapper.writerWithDefaultPrettyPrinter().writeValueAsString(root);
+    } catch (Exception e) {
+      throw new AppException("AI 응답을 해석할 수 없습니다: " + e.getMessage());
+    }
+  }
+
+  private boolean hasText(String value) {
+    return value != null && !value.isBlank();
+  }
+}
--- a/src/main/java/com/cloudhandson/vpdbackoffice/web/McpReasoningController.java
+++ b/src/main/java/com/cloudhandson/vpdbackoffice/web/McpReasoningController.java
@@ -0,0 +1,78 @@
+package com.cloudhandson.vpdbackoffice.web;
+
+import com.cloudhandson.vpdbackoffice.domain.mcp.McpReasoningCommand;
+import com.cloudhandson.vpdbackoffice.domain.mcp.McpToolView;
+import com.cloudhandson.vpdbackoffice.service.McpReasoningService;
+import com.cloudhandson.vpdbackoffice.service.McpToolRegistry;
+import com.cloudhandson.vpdbackoffice.service.ProtectedObjectService;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import org.springframework.dao.DataAccessException;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.ResponseBody;
+
+@Controller
+public class McpReasoningController {
+
+  private final McpToolRegistry toolRegistry;
+  private final McpReasoningService reasoningService;
+  private final ProtectedObjectService protectedObjectService;
+
+  public McpReasoningController(
+      McpToolRegistry toolRegistry,
+      McpReasoningService reasoningService,
+      ProtectedObjectService protectedObjectService
+  ) {
+    this.toolRegistry = toolRegistry;
+    this.reasoningService = reasoningService;
+    this.protectedObjectService = protectedObjectService;
+  }
+
+  @GetMapping("/mcp-reasoning")
+  public String page(Model model) {
+    try {
+      model.addAttribute("objects", protectedObjectService.findEnabled());
+      model.addAttribute("tools", toolRegistry.listTools());
+    } catch (DataAccessException e) {
+      RuntimeErrorMessage message = RuntimeErrorMessages.dataAccess(e);
+      model.addAttribute("objects", List.of());
+      model.addAttribute("tools", List.of());
+      model.addAttribute("runtimeError", message);
+    }
+    return "mcp-reasoning";
+  }
+
+  @GetMapping("/mcp/tools")
+  @ResponseBody
+  public Object tools() {
+    try {
+      return toolRegistry.listTools();
+    } catch (DataAccessException e) {
+      RuntimeErrorMessage message = RuntimeErrorMessages.dataAccess(e);
+      Map<String, Object> response = new LinkedHashMap<>();
+      response.put("status", "DB_NOT_AVAILABLE");
+      response.put("title", message.title());
+      response.put("message", message.message());
+      response.put("tools", List.of());
+      return response;
+    }
+  }
+
+  @PostMapping("/mcp-reasoning")
+  public String reason(
+      @RequestParam long objectId,
+      @RequestParam String bearerToken,
+      @RequestParam(defaultValue = "50") int limit,
+      @RequestParam(defaultValue = "") String question,
+      Model model
+  ) {
+    model.addAttribute("result", reasoningService.reason(
+        new McpReasoningCommand(objectId, bearerToken, limit, question)));
+    return "fragments/mcp-reasoning-result :: result";
+  }
+}