函数调用实战

@Component
public class StudentServiceTools {

    private static final Map<String, String> COURSE_DB = Map.of(
        "CS101", "计算机组成原理 | 白歌 | 4学分 | 周一 8:00-10:00",
        "CS201", "数据结构与算法 | 小崔 | 3学分 | 周三 10:00-12:00",
        "CS301", "操作系统 | 白歌 | 4学分 | 周四 14:00-16:00",
        "MATH101", "线性代数 | 李眉 | 4学分 | 周二 8:00-10:00",
        "ALGO101", "算法分析与设计 | 小崔 | 3学分 | 周五 14:00-16:00"
    );

    @Tool(description = "按课程编号精确查询课程，如 CS101")
    public String getCourseByCode(String courseCode) {
        return COURSE_DB.getOrDefault(
            courseCode.toUpperCase(), 
            "未找到课程编号 " + courseCode
        );
    }

    @Tool(description = "查询指定教师的所有课程，输入教师姓名")
    public String getCoursesByTeacher(String teacherName) {
        List<String> courses = COURSE_DB.entrySet().stream()
            .filter(e -> e.getValue().contains(teacherName))
            .map(e -> "  - " + e.getKey() + " " + e.getValue())
            .toList();
        
        if (courses.isEmpty()) {
            return teacherName + " 没有找到相关课程";
        }
        return teacherName + " 的课程：\n" + String.join("\n", courses);
    }

    @Tool(description = "按关键字搜索课程名称，如'算法''数学'")
    public String searchCourses(String keyword) {
        List<String> matches = COURSE_DB.entrySet().stream()
            .filter(e -> e.getValue().contains(keyword))
            .map(e -> "  - " + e.getKey() + " " + e.getValue())
            .toList();
        
        if (matches.isEmpty()) {
            return "没有找到包含'" + keyword + "'的课程";
        }
        return "搜索'" + keyword + "'的结果：\n" + String.join("\n", matches);
    }
}

public record BookingConfirmation(
    String building,
    String room,
    LocalDate date,
    int hours,
    int participants,
    String bookingId
) {}

@Component
public class MeetingTools {

    @Tool(description = "查询指定办公楼所有可用会议室，返回房间号和容量")
    public String checkRooms(String building) {
        return switch (building) {
            case "A座" -> "A座：A-201(6人)、A-305(12人)、A-101(30人)";
            case "B座" -> "B座：B-102(4人)、B-301(8人)、B-501(20人)";
            default -> building + " 无可用会议室";
        };
    }

    @Tool(description = "正式预订会议室，请确认日期和人数后再调用")
    public BookingConfirmation bookRoom(
            String building,
            int participants,
            LocalDate date,
            int hours) {
        
        String room = participants <= 6 ? "小会议室" : 
                      participants <= 20 ? "中型会议室" : "大型会议室";
        String bookingId = UUID.randomUUID().toString().substring(0, 8);
        
        return new BookingConfirmation(
            building, room, date, hours, participants, bookingId
        );
    }
}

@RestController
public class SmartBookingController {

    private final ChatClient chatClient;

    public SmartBookingController(ChatClient.Builder builder,
                                   MeetingTools tools) {
        // 默认只注册查询工具，预订工具需手动确认
        this.chatClient = builder
                .defaultTools(tools)          // 注册所有工具
                .build();
    }

    @GetMapping("/booking/check")
    public String check(@RequestParam String message) {
        // 仅启用查询工具
        return chatClient.prompt()
                .user(message)
                .functions("checkRooms")  // 仅本次启用 checkRooms
                .call()
                .content();
    }

    @GetMapping("/booking/book")
    public String book(@RequestParam String message) {
        // 启用所有工具（含 bookRoom）
        return chatClient.prompt()
                .user(message)
                .functions("checkRooms", "bookRoom")  // 明确启用
                .call()
                .content();
    }
}

// ❌ 错误：普通用户查询也能触发删除操作
@Configuration
public class Config {
    @Bean
    public ChatClient chatClient(ChatClient.Builder builder,
                                  AllTools tools) {  // 含 delete 工具
        return builder.defaultTools(tools).build();
    }
}

// ✅ 正确：敏感工具不加入 defaultTools，仅在需要时通过 functions() 启用
@Configuration
public class Config {
    @Bean
    public ChatClient chatClient(ChatClient.Builder builder,
                                  SafeTools safeTools) {
        return builder.defaultTools(safeTools).build();  // 仅安全工具
    }
}

// 敏感操作单独控制器，明确启用
@GetMapping("/admin/delete")
public String delete(@RequestParam String message, AdminTools adminTools) {
    return chatClient.prompt()
            .user(message)
            .functions("deleteRecord")  // 显式授权
            .call()
            .content();
}