agent-platform/services/api-gateway/app/api/routes.py

import asyncio

from fastapi import APIRouter, Depends, HTTPException, Query, Request, Response
from sqlalchemy import text
from sqlalchemy.orm import Session

from core_domain import ServiceDescriptor, ServiceHealth
from app.bootstrap.settings import ApiGatewaySettings
from app.db.session import get_db
from app.domain.repositories import ApiKeyRepository, GatewayRequestAuditRepository
from app.infrastructure.api_keys import generate_api_key, get_api_key_prefix, hash_api_key
from app.infrastructure.proxy import ProxyServiceName, ProxyTarget, ServiceProxy
from app.schemas.gateway import (
    ApiKeyCreateRequest,
    ApiKeyCreateResponse,
    ApiKeyResponse,
    ApiKeyStatusUpdateRequest,
    GatewayRequestAuditResponse,
    GatewayServicesHealthResponse,
)

router = APIRouter()


@router.get("/health", response_model=ServiceDescriptor)
def health_check(db: Session = Depends(get_db)) -> ServiceDescriptor:
    db.execute(text("SELECT 1"))
    return ServiceDescriptor(name="api-gateway")


@router.get("/ready", response_model=ServiceHealth)
def readiness_check(db: Session = Depends(get_db)) -> ServiceHealth:
    db.execute(text("SELECT 1"))
    return ServiceHealth(service="api-gateway", status="ok", database="ok")


@router.post("/gateway/api-keys", response_model=ApiKeyCreateResponse)
def create_api_key(
    payload: ApiKeyCreateRequest,
    db: Session = Depends(get_db),
) -> ApiKeyCreateResponse:
    api_key = generate_api_key()
    entity = ApiKeyRepository(db).create(
        tenant_id=payload.tenant_id,
        name=payload.name,
        key_prefix=get_api_key_prefix(api_key),
        key_hash=hash_api_key(api_key),
        scopes=payload.scopes,
        expires_time=payload.expires_time,
    )
    return ApiKeyCreateResponse(
        id=entity.id,
        tenant_id=entity.tenant_id,
        name=entity.name,
        key_prefix=entity.key_prefix,
        api_key=api_key,
        status=entity.status,
        scopes=entity.scopes,
        expires_time=entity.expires_time,
        created_time=entity.created_time,
    )


@router.get("/gateway/api-keys", response_model=list[ApiKeyResponse])
def list_api_keys(
    tenant_id: str = Query(...),
    db: Session = Depends(get_db),
) -> list[ApiKeyResponse]:
    return [
        ApiKeyResponse.from_entity(item)
        for item in ApiKeyRepository(db).list_by_tenant(tenant_id=tenant_id)
    ]


@router.patch("/gateway/api-keys/{api_key_id}/status", response_model=ApiKeyResponse)
def update_api_key_status(
    api_key_id: str,
    payload: ApiKeyStatusUpdateRequest,
    db: Session = Depends(get_db),
) -> ApiKeyResponse:
    entity = ApiKeyRepository(db).update_status(
        tenant_id=payload.tenant_id,
        api_key_id=api_key_id,
        status=payload.status,
    )
    if entity is None:
        raise HTTPException(status_code=404, detail=f"api key not found: {api_key_id}")
    return ApiKeyResponse.from_entity(entity)


@router.get("/gateway/audits", response_model=list[GatewayRequestAuditResponse])
def list_gateway_audits(
    tenant_id: str = Query(...),
    request_id: str | None = Query(default=None),
    target_service: str | None = Query(default=None),
    limit: int = Query(default=100, ge=1, le=500),
    db: Session = Depends(get_db),
) -> list[GatewayRequestAuditResponse]:
    items = GatewayRequestAuditRepository(db).list_by_scope(
        tenant_id=tenant_id,
        request_id=request_id,
        target_service=target_service,
        limit=limit,
    )
    return [GatewayRequestAuditResponse.from_entity(item) for item in items]


def get_gateway_settings() -> ApiGatewaySettings:
    return ApiGatewaySettings()


def get_service_proxy(settings: ApiGatewaySettings = Depends(get_gateway_settings)) -> ServiceProxy:
    return ServiceProxy(timeout_seconds=settings.proxy_timeout_seconds)


def build_proxy_targets(settings: ApiGatewaySettings) -> dict[ProxyServiceName, ProxyTarget]:
    return {
        "workflow-service": ProxyTarget(
            service_name="workflow-service",
            base_url=settings.workflow_service_url,
            path_prefix="/workflows",
            health_path="/workflows/health",
        ),
        "session-service": ProxyTarget(
            service_name="session-service",
            base_url=settings.session_service_url,
            path_prefix="/sessions",
            health_path="/sessions/health",
        ),
        "runtime-service": ProxyTarget(
            service_name="runtime-service",
            base_url=settings.runtime_service_url,
            path_prefix="/runtime",
            health_path="/runtime/health",
        ),
        "tool-service": ProxyTarget(
            service_name="tool-service",
            base_url=settings.tool_service_url,
            path_prefix="/tools",
            health_path="/tools/health",
        ),
        "model-gateway-service": ProxyTarget(
            service_name="model-gateway-service",
            base_url=settings.model_gateway_service_url,
            path_prefix="/models",
            health_path="/models/health",
        ),
        "code-runner-service": ProxyTarget(
            service_name="code-runner-service",
            base_url=settings.code_runner_service_url,
            path_prefix="/code",
            health_path="/code/health",
        ),
        "agent-service": ProxyTarget(
            service_name="agent-service",
            base_url=settings.agent_service_url,
            path_prefix="/agents",
            health_path="/agents/health",
        ),
        "memory-service": ProxyTarget(
            service_name="memory-service",
            base_url=settings.memory_service_url,
            path_prefix="/memories",
            health_path="/memories/health",
        ),
        "team-service": ProxyTarget(
            service_name="team-service",
            base_url=settings.team_service_url,
            path_prefix="/teams",
            health_path="/teams/health",
        ),
        "skill-service": ProxyTarget(
            service_name="skill-service",
            base_url=settings.skill_service_url,
            path_prefix="/skills",
            health_path="/skills/health",
        ),
        "human-service": ProxyTarget(
            service_name="human-service",
            base_url=settings.human_service_url,
            path_prefix="/human",
            health_path="/human/health",
        ),
        "knowledge-service": ProxyTarget(
            service_name="knowledge-service",
            base_url=settings.knowledge_service_url,
            path_prefix="/knowledge",
            health_path="/knowledge/health",
        ),
        "event-service": ProxyTarget(
            service_name="event-service",
            base_url=settings.event_service_url,
            path_prefix="/events",
            health_path="/events/health",
        ),
        "auth-service": ProxyTarget(
            service_name="auth-service",
            base_url=settings.auth_service_url,
            path_prefix="/auth",
            health_path="/auth/health",
        ),
    }


@router.get("/gateway/services/health", response_model=GatewayServicesHealthResponse)
async def downstream_health_check(
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
) -> GatewayServicesHealthResponse:
    targets = build_proxy_targets(settings)
    health_proxy = ServiceProxy(timeout_seconds=settings.downstream_health_timeout_seconds)
    downstream_services = await asyncio.gather(
        *[health_proxy.check_health(target) for target in targets.values()]
    )
    status = "ok" if all(item.status == "ok" for item in downstream_services) else "degraded"
    return GatewayServicesHealthResponse(
        status=status,
        downstream_services=downstream_services,
    )


@router.api_route(
    "/gateway/workflows",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/workflows/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_workflow_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["workflow-service"],
        path=path,
    )


@router.api_route(
    "/gateway/sessions",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/sessions/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_session_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["session-service"],
        path=path,
    )


@router.api_route(
    "/gateway/runtime",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/runtime/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_runtime_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["runtime-service"],
        path=path,
    )


@router.api_route(
    "/gateway/agents",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/agents/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_agent_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["agent-service"],
        path=path,
    )


@router.api_route(
    "/gateway/memories",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/memories/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_memory_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["memory-service"],
        path=path,
    )


@router.api_route(
    "/gateway/teams",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/teams/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_team_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["team-service"],
        path=path,
    )


@router.api_route(
    "/gateway/skills",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/skills/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_skill_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["skill-service"],
        path=path,
    )


@router.api_route(
    "/gateway/human",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/human/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_human_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["human-service"],
        path=path,
    )


@router.api_route(
    "/gateway/knowledge",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/knowledge/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_knowledge_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["knowledge-service"],
        path=path,
    )


@router.api_route(
    "/gateway/events",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/events/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_event_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["event-service"],
        path=path,
    )


@router.api_route(
    "/gateway/auth",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/auth/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_auth_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["auth-service"],
        path=path,
    )


@router.api_route(
    "/gateway/tools",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/tools/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_tool_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["tool-service"],
        path=path,
    )


@router.api_route(
    "/gateway/models",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/models/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_model_gateway_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["model-gateway-service"],
        path=path,
    )


@router.api_route(
    "/gateway/code",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
@router.api_route(
    "/gateway/code/{path:path}",
    methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
)
async def proxy_code_runner_service(
    request: Request,
    path: str = "",
    settings: ApiGatewaySettings = Depends(get_gateway_settings),
    proxy: ServiceProxy = Depends(get_service_proxy),
) -> Response:
    return await proxy.forward(
        request=request,
        target=build_proxy_targets(settings)["code-runner-service"],
        path=path,
    )