refactor: extract tool classification sets to module-level constants

Moves READ_ONLY_TOOLS and DESTRUCTIVE_TOOLS from inline arrays to
module-level Set constants for better maintainability.

Agent-Logs-Url: https://github.com/objectstack-ai/framework/sessions/5eb90a65-846f-4f24-947f-1c0e7ea5090e

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Author: Copilot

packages/plugins/plugin-mcp-server/src/mcp-server-runtime.ts

@@ -33,6 +33,25 @@ interface ObjectDef {
   enable?: Record<string, boolean>;
 }
 
+/**
+ * Names of tools that are read-only (no side effects).
+ * Kept as a module-level constant for easy extension.
+ */
+const READ_ONLY_TOOLS = new Set([
+  'list_objects',
+  'describe_object',
+  'query_records',
+  'get_record',
+  'aggregate_data',
+]);
+
+/**
+ * Names of tools that perform destructive mutations.
+ */
+const DESTRUCTIVE_TOOLS = new Set([
+  'delete_field',
+]);
+
 /**
  * MCPServerRuntime — Bridges ObjectStack kernel services to the Model Context Protocol.
  *
@@ -191,14 +210,14 @@ export class MCPServerRuntime {
    * Check if a tool is read-only (data query tools).
    */
   private isReadOnlyTool(name: string): boolean {
-    return ['list_objects', 'describe_object', 'query_records', 'get_record', 'aggregate_data'].includes(name);
+    return READ_ONLY_TOOLS.has(name);
   }
 
   /**
    * Check if a tool performs destructive operations.
    */
   private isDestructiveTool(name: string): boolean {
-    return ['delete_field'].includes(name);
+    return DESTRUCTIVE_TOOLS.has(name);
   }
 
   // ── Resource Bridge ────────────────────────────────────────────