Lars
0b57e2ec75
AP2.0e rotiert Recurring bei maturity_stage reached. Maturity-Strategie priorisiert Routinen. Team zeigt Namen und Agent-Formular. Archetyp-Hints in Kontrolle und Stufe-A-Gruppierung bei Anlage. Co-authored-by: Cursor <cursoragent@cursor.com>
126 lines
4.1 KiB
Python
126 lines
4.1 KiB
Python
"""Actor directory API — AP0.7 + AP1.7c Service Tokens."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from typing import Literal, Optional
|
|
|
|
from capabilities import require_capability
|
|
from fastapi import APIRouter, Depends, HTTPException, Query
|
|
from pydantic import BaseModel, Field
|
|
from services import actor_service_tokens
|
|
from services import actors as actor_service
|
|
from tenant_context import TenantContext
|
|
|
|
router = APIRouter(prefix="/api/actors", tags=["actors"])
|
|
|
|
|
|
class ServiceTokenCreateRequest(BaseModel):
|
|
label: str = Field(min_length=1, max_length=255)
|
|
capabilities: list[str] = Field(default_factory=list)
|
|
expires_in_days: Optional[int] = Field(default=365, ge=1, le=730)
|
|
|
|
|
|
class ActorCreateRequest(BaseModel):
|
|
name: str = Field(min_length=1, max_length=255)
|
|
actor_type: Literal["human", "agent", "working_group", "external_system"] = "agent"
|
|
|
|
|
|
@router.get("")
|
|
def list_actors(
|
|
actor_type: Optional[Literal["human", "agent", "working_group", "external_system"]] = None,
|
|
include_inactive: bool = Query(default=False),
|
|
q: Optional[str] = Query(default=None, max_length=100),
|
|
ctx: TenantContext = Depends(require_capability("kairo.actor.read")),
|
|
):
|
|
try:
|
|
return actor_service.list_actors(
|
|
tenant_id=ctx.tenant_id,
|
|
actor_type=actor_type,
|
|
include_inactive=include_inactive,
|
|
q=q,
|
|
)
|
|
except ValueError as exc:
|
|
raise HTTPException(status_code=400, detail=str(exc)) from exc
|
|
|
|
|
|
@router.post("", status_code=201)
|
|
def create_actor(
|
|
body: ActorCreateRequest,
|
|
ctx: TenantContext = Depends(require_capability("kairo.actor.manage")),
|
|
):
|
|
if body.actor_type == "human":
|
|
raise HTTPException(
|
|
status_code=400,
|
|
detail="Human-Actors werden über User-Provisioning angelegt",
|
|
)
|
|
try:
|
|
return actor_service.create_actor(
|
|
tenant_id=ctx.tenant_id,
|
|
actor_type=body.actor_type,
|
|
name=body.name.strip(),
|
|
)
|
|
except ValueError as exc:
|
|
raise HTTPException(status_code=400, detail=str(exc)) from exc
|
|
|
|
|
|
@router.get("/{actor_id}")
|
|
def get_actor(
|
|
actor_id: str,
|
|
ctx: TenantContext = Depends(require_capability("kairo.actor.read")),
|
|
):
|
|
item = actor_service.get_actor(tenant_id=ctx.tenant_id, actor_id=actor_id)
|
|
if not item:
|
|
raise HTTPException(status_code=404, detail="Actor nicht gefunden")
|
|
return item
|
|
|
|
|
|
@router.get("/{actor_id}/service-tokens")
|
|
def list_actor_service_tokens(
|
|
actor_id: str,
|
|
include_revoked: bool = Query(default=False),
|
|
ctx: TenantContext = Depends(require_capability("kairo.actor.manage")),
|
|
):
|
|
actor = actor_service.get_actor(tenant_id=ctx.tenant_id, actor_id=actor_id)
|
|
if not actor:
|
|
raise HTTPException(status_code=404, detail="Actor nicht gefunden")
|
|
return actor_service_tokens.list_service_tokens_for_actor(
|
|
tenant_id=ctx.tenant_id,
|
|
actor_id=actor_id,
|
|
include_revoked=include_revoked,
|
|
)
|
|
|
|
|
|
@router.post("/{actor_id}/service-tokens", status_code=201)
|
|
def create_actor_service_token(
|
|
actor_id: str,
|
|
body: ServiceTokenCreateRequest,
|
|
ctx: TenantContext = Depends(require_capability("kairo.actor.manage")),
|
|
):
|
|
try:
|
|
return actor_service_tokens.create_service_token(
|
|
tenant_id=ctx.tenant_id,
|
|
actor_id=actor_id,
|
|
label=body.label,
|
|
created_by_user_id=ctx.user_id,
|
|
capabilities=body.capabilities,
|
|
expires_in_days=body.expires_in_days,
|
|
)
|
|
except ValueError as exc:
|
|
detail = str(exc)
|
|
if detail == "Actor nicht gefunden":
|
|
raise HTTPException(status_code=404, detail=detail) from exc
|
|
raise HTTPException(status_code=400, detail=detail) from exc
|
|
|
|
|
|
@router.delete("/service-tokens/{token_id}", status_code=204)
|
|
def revoke_actor_service_token(
|
|
token_id: str,
|
|
ctx: TenantContext = Depends(require_capability("kairo.actor.manage")),
|
|
):
|
|
if not actor_service_tokens.revoke_service_token(
|
|
tenant_id=ctx.tenant_id,
|
|
token_id=token_id,
|
|
user_id=ctx.user_id,
|
|
):
|
|
raise HTTPException(status_code=404, detail="Token nicht gefunden")
|