o hjM@stddlmZmZmZmZddlmZddlmZddl m Z m Z m Z m Z mZmZmZddlmZmZmZmZeddgdZd ed efd d Zejd eeejdeefdefddZejd eejdeefdedefddZejdeejdeefde defddZ!ej"deejdeefde dedefddZ#ejdeejdeefde dedefddZ$dS)) APIRouterstatus HTTPExceptionDepends) get_database) require_admin) create_agentget_agent_by_emailget_agent_by_id list_agents update_agentcount_active_adminsreset_agent_password)CreateAgentRequestUpdateAgentRequestResetAgentPasswordRequest SafeAgentInfoz/api/v1/admin/agentsz admin-agents)prefixtags agent_docreturnc Cs|d}|d}t|d|dd|d|dd|d d t|d r)|n|r/t|nd t|d r;|d S|rCt|d Sd d S)zBHelper to convert MongoDB agent document into safe Pydantic model. createdAt updatedAtagentIdnameAgentemailroleAGENTrACTIVE isoformatN)rrrrrrr)getrhasattrr str)r created_at updated_atr&9/web/html/dev/chatbot/backend/app/routers/admin_agents.pyformat_safe_agents       r()response_model status_code current_admincs$t}t|IdH}dd|DS)zM Lists all agents in MongoDB. Requires ADMIN authorization role. NcSsg|]}t|qSr&)r().0ar&r&r' ,sz#list_all_agents..)rr )r,dbagentsr&r&r'list_all_agents$sr2payloadcsbt}|j}t||IdH}|rttjddt|||j |j |j |jdIdH}t |S)z Creates a new agent with hashed password. Rejects duplicate email with HTTP 409 Conflict. Requires ADMIN authorization role. Nz$Agent with this email already existsr+detail)rpasswordrrr) rrstriplowerr rrHTTP_409_CONFLICTrr6rrr()r3r,r0normalized_emailexistingrr&r&r'create_new_agent.s$   r<z /{agentId}rcs:t}t||IdH}|sttjd|ddt|S)zY Returns single agent details by agentId. Requires ADMIN authorization role. NAgent ' ' not foundr4)rr rrHTTP_404_NOT_FOUNDr()rr,r0agentr&r&r'get_agent_detailsMs  rAc st}t||IdH}|sttjd|dd|jdd}|ddko,|d d k}d|vo6|ddk}d |vo@|d d k}|rY|sG|rYt|IdH} | d krYttjd dt |||IdH} t | S) z Updates safe fields (name, role, status) for an agent. Enforces Last Active Admin protection. Requires ADMIN authorization role. Nr=r>r4T) exclude_unsetrADMINrrz9Cannot deactivate or demote the last active admin account) rr rrr? model_dumpr!r r9r r() rr3r,r0r@updatesis_target_active_admin demoting_roledeactivating_statusactive_admins_count updated_docr&r&r'update_agent_details_s*    rLz/{agentId}/reset-passwordcsNt}t||IdH}|sttjd|ddt|||jIdH}t|S)za Resets an agent's password to a new bcrypt hash. Requires ADMIN authorization role. Nr=r>r4)rr rrr?r newPasswordr()rr3r,r0r@rKr&r&r'reset_agent_password_endpoints  rNN)%fastapirrrr app.databaserapp.dependencies.authr!app.repositories.agent_repositoryrr r r r r rapp.models.authrrrrrouterdictr(r!list HTTP_200_OKr2postHTTP_201_CREATEDr<r#rApatchrLrNr&r&r&r'sR  $     $