advance 1-8 post-mvp execution batches

rust/crates/mnote-web/src/hermes_tools/resource.rs

@@ -285,29 +285,7 @@ fn ensure_resource_write_contract(
     context: &RequestContext,
     input: &ToolCallInput,
 ) -> Result<(), WebError> {
-    if !input.has_idempotency_key() {
-        return Err(WebError::bad_request_code(
-            "mnote_tool_idempotency_required",
-            "写入型 mnote resource tool 必须携带 idempotencyKey",
-        )
-        .with_context(context));
-    }
-    if input.dry_run.is_none() {
-        return Err(WebError::bad_request_code(
-            "mnote_tool_dry_run_required",
-            "写入型 mnote resource tool 必须显式携带 dryRun",
-        )
-        .with_context(context));
-    }
-    if input.ai_access_scope_is_read_only() {
-        return Err(WebError::new(
-            StatusCode::FORBIDDEN,
-            "mnote_tool_ai_scope_write_forbidden",
-            "当前 AI scope 是只读权限，禁止执行写入型 mnote resource tool",
-        )
-        .with_context(context));
-    }
-    Ok(())
+    crate::hermes_tools::ensure_write_authorized(context, input)
 }
 
 fn local_root_uri_for_resource(input: &ToolCallInput) -> Option<String> {