Split admin service feature modules

2026-06-21 09:07:27 +00:00
parent 7df9b48513
commit 0f509b1317
4 changed files with 402 additions and 360 deletions
@@ -0,0 +1,111 @@
+use crank_core::{AgentId, PlatformApiKey, PlatformApiKeyId, PlatformApiKeyStatus, WorkspaceId};
+use crank_registry::{CreatePlatformApiKeyRequest, PlatformApiKeyRecord};
+use serde_json::json;
+use time::OffsetDateTime;
+use tracing::instrument;
+
+use crate::{
+    error::ApiError,
+    service::{
+        AdminService, CreatedPlatformApiKeyResponse, PlatformApiKeyPayload, generate_access_secret,
+        hash_access_secret, new_prefixed_id,
+    },
+};
+
+impl AdminService {
+    #[instrument(skip(self))]
+    pub async fn list_agent_platform_api_keys(
+        &self,
+        workspace_id: &WorkspaceId,
+        agent_id: &AgentId,
+    ) -> Result<Vec<PlatformApiKeyRecord>, ApiError> {
+        self.ensure_workspace_exists(workspace_id).await?;
+        self.registry
+            .get_agent_summary(workspace_id, agent_id)
+            .await?
+            .ok_or_else(|| {
+                ApiError::not_found_with_context(
+                    format!("agent {} was not found", agent_id.as_str()),
+                    json!({ "agent_id": agent_id.as_str() }),
+                )
+            })?;
+        Ok(self
+            .registry
+            .list_platform_api_keys_for_agent(workspace_id, agent_id)
+            .await?)
+    }
+
+    #[instrument(skip(self, payload), fields(workspace_id = %workspace_id.as_str(), agent_id = %agent_id.as_str(), key_name = %payload.name))]
+    pub async fn create_agent_platform_api_key(
+        &self,
+        workspace_id: &WorkspaceId,
+        agent_id: &AgentId,
+        payload: PlatformApiKeyPayload,
+    ) -> Result<CreatedPlatformApiKeyResponse, ApiError> {
+        self.ensure_workspace_exists(workspace_id).await?;
+        self.registry
+            .get_agent_summary(workspace_id, agent_id)
+            .await?
+            .ok_or_else(|| {
+                ApiError::not_found_with_context(
+                    format!("agent {} was not found", agent_id.as_str()),
+                    json!({ "agent_id": agent_id.as_str() }),
+                )
+            })?;
+
+        let secret = generate_access_secret("crk");
+        let api_key = PlatformApiKeyRecord {
+            api_key: PlatformApiKey {
+                id: PlatformApiKeyId::new(new_prefixed_id("pk")),
+                workspace_id: workspace_id.clone(),
+                agent_id: Some(agent_id.clone()),
+                name: payload.name,
+                prefix: secret.chars().take(16).collect(),
+                scopes: payload.scopes,
+                status: PlatformApiKeyStatus::Active,
+                created_at: OffsetDateTime::now_utc(),
+                last_used_at: None,
+            },
+        };
+
+        self.registry
+            .create_platform_api_key(CreatePlatformApiKeyRequest {
+                api_key: &api_key.api_key,
+                secret_hash: &hash_access_secret(&secret),
+            })
+            .await?;
+
+        Ok(CreatedPlatformApiKeyResponse { api_key, secret })
+    }
+
+    #[instrument(skip(self), fields(workspace_id = %workspace_id.as_str(), agent_id = %agent_id.as_str(), key_id = %key_id.as_str()))]
+    pub async fn revoke_agent_platform_api_key(
+        &self,
+        workspace_id: &WorkspaceId,
+        agent_id: &AgentId,
+        key_id: &PlatformApiKeyId,
+    ) -> Result<(), ApiError> {
+        self.registry
+            .revoke_platform_api_key_for_agent(
+                workspace_id,
+                agent_id,
+                key_id,
+                &OffsetDateTime::now_utc(),
+            )
+            .await?;
+        Ok(())
+    }
+
+    #[instrument(skip(self), fields(workspace_id = %workspace_id.as_str(), agent_id = %agent_id.as_str(), key_id = %key_id.as_str()))]
+    pub async fn delete_agent_platform_api_key(
+        &self,
+        workspace_id: &WorkspaceId,
+        agent_id: &AgentId,
+        key_id: &PlatformApiKeyId,
+    ) -> Result<(), ApiError> {
+        self.registry
+            .delete_platform_api_key_for_agent(workspace_id, agent_id, key_id)
+            .await?;
+        Ok(())
+    }
+}