ai-video-fullstack/backend/routes/tools.py

"""Reusable tool CRUD. Runtime execution is implemented per supported tool type."""

import uuid

from db.models import AssistantToolBinding, Tool
from db.session import get_session
from fastapi import APIRouter, Depends, HTTPException
from schemas import ToolOut, ToolUpsert
from services.auth import require_admin
from services.masking import merge_secrets
from services.tool_resources import tool_to_out
from sqlalchemy import select
from sqlalchemy.exc import IntegrityError
from sqlalchemy.ext.asyncio import AsyncSession


router = APIRouter(
    prefix="/api/tools",
    tags=["tools"],
    dependencies=[Depends(require_admin)],
)


def _payload(
    body: ToolUpsert,
    stored_secrets: dict | None = None,
) -> dict:
    definition = body.definition.model_dump()
    secrets = (
        merge_secrets(body.secrets, stored_secrets or {})
        if definition["type"] == "http"
        else {}
    )
    return {
        "name": body.name.strip(),
        "function_name": body.function_name,
        "type": definition["type"],
        "mcp_server_id": body.mcp_server_id if definition["type"] == "mcp" else None,
        "remote_tool_name": (
            definition["config"]["remote_tool_name"]
            if definition["type"] == "mcp"
            else None
        ),
        "description": body.description.strip(),
        "definition": definition,
        "secrets": secrets,
        "status": body.status,
    }


def _duplicate_function_name(source: str) -> str:
    candidate = f"{source}_copy"
    if len(candidate) <= 64:
        return candidate
    return f"{source[:57]}_copy"


async def _commit(session: AsyncSession, tool: Tool) -> ToolOut:
    try:
        await session.commit()
    except IntegrityError as exc:
        await session.rollback()
        raise HTTPException(409, "工具函数名已存在") from exc
    await session.refresh(tool)
    return tool_to_out(tool)


@router.get("", response_model=list[ToolOut])
async def list_tools(session: AsyncSession = Depends(get_session)):
    rows = (
        await session.execute(select(Tool).order_by(Tool.updated_at.desc()))
    ).scalars().all()
    return [tool_to_out(tool) for tool in rows]


@router.post("", response_model=ToolOut)
async def create_tool(body: ToolUpsert, session: AsyncSession = Depends(get_session)):
    if body.definition.type == "mcp":
        raise HTTPException(400, "MCP 工具请通过 MCP Server 同步创建")
    tool = Tool(id=f"tool_{uuid.uuid4().hex[:12]}", **_payload(body))
    session.add(tool)
    return await _commit(session, tool)


@router.get("/{tool_id}", response_model=ToolOut)
async def get_tool(tool_id: str, session: AsyncSession = Depends(get_session)):
    tool = await session.get(Tool, tool_id)
    if not tool:
        raise HTTPException(404, "工具不存在")
    return tool_to_out(tool)


@router.put("/{tool_id}", response_model=ToolOut)
async def update_tool(
    tool_id: str,
    body: ToolUpsert,
    session: AsyncSession = Depends(get_session),
):
    tool = await session.get(Tool, tool_id)
    if not tool:
        raise HTTPException(404, "工具不存在")
    if tool.type == "mcp":
        if body.definition.type != "mcp":
            raise HTTPException(400, "同步生成的 MCP 工具不能修改类型")
        if (
            body.mcp_server_id != tool.mcp_server_id
            or body.definition.config.remote_tool_name != tool.remote_tool_name
        ):
            raise HTTPException(400, "MCP Server 和远端工具名称不能修改")
    for key, value in _payload(body, tool.secrets or {}).items():
        setattr(tool, key, value)
    return await _commit(session, tool)


@router.post("/{tool_id}/duplicate", response_model=ToolOut)
async def duplicate_tool(tool_id: str, session: AsyncSession = Depends(get_session)):
    source = await session.get(Tool, tool_id)
    if not source:
        raise HTTPException(404, "工具不存在")
    if source.type == "mcp":
        raise HTTPException(400, "MCP 工具由 Server 同步维护，不能单独复制")
    function_name = _duplicate_function_name(source.function_name)
    existing = (
        await session.execute(select(Tool).where(Tool.function_name == function_name))
    ).scalar_one_or_none()
    if existing:
        suffix = uuid.uuid4().hex[:6]
        max_base = 64 - len(suffix) - 1
        function_name = f"{source.function_name[:max_base]}_{suffix}"
    tool = Tool(
        id=f"tool_{uuid.uuid4().hex[:12]}",
        name=f"{source.name} 副本",
        function_name=function_name,
        type=source.type,
        mcp_server_id=source.mcp_server_id,
        remote_tool_name=source.remote_tool_name,
        description=source.description,
        definition=dict(source.definition or {}),
        secrets=dict(source.secrets or {}),
        status=source.status,
    )
    session.add(tool)
    return await _commit(session, tool)


@router.delete("/{tool_id}")
async def delete_tool(tool_id: str, session: AsyncSession = Depends(get_session)):
    tool = await session.get(Tool, tool_id)
    if not tool:
        raise HTTPException(404, "工具不存在")
    in_use = (
        await session.execute(
            select(AssistantToolBinding.assistant_id)
            .where(AssistantToolBinding.tool_id == tool_id)
            .limit(1)
        )
    ).scalar_one_or_none()
    if in_use:
        raise HTTPException(409, "工具正被助手引用，请先解绑")
    await session.delete(tool)
    await session.commit()
    return {"ok": True}