support MCP ToolAnnotations

[ollmer]

          Examples

SmartTapeToolReplay

If destructiveHint: ask user if really want to make this action during replay or only mock it, if idempotentHint: safe to automatically redo the action

Activate privacy-preserving feature automatically

If openWorldHint, enforce pass tool call to a privacy-preserving mechanism before calling external services. Also apply more validation on tool response.

automatic human-in-the-loop based

If not readOnly, confirm with user before taking action to not cause unintended effect. Else, no need human confirmation to read-only information (unless openWorld is true, might have privacy concerns)

Originally posted by @jpt-sn in #209 (comment)