admin / Synapse-Cortex

import uuid
from typing import Optional

from fastapi import APIRouter, Depends, HTTPException, status
from sqlalchemy.orm import Session

from .. import models, schemas
from ..audit import log_audit
from ..database import get_db
from ..deps import get_session_user

router = APIRouter(prefix="/api/v1/sla-policies", tags=["sla-policies"])

ADMIN_ROLES = (models.UserRole.GLOBAL_ADMIN, models.UserRole.TENANT_ADMIN)


@router.get("", response_model=list[schemas.SLAPolicyOut])
def list_sla_policies(
    db: Session = Depends(get_db),
    user: Optional[models.User] = Depends(get_session_user),
):
    if not user:
        raise HTTPException(status.HTTP_401_UNAUTHORIZED)
    return (
        db.query(models.SLAPolicy)
        .filter(models.SLAPolicy.tenant_id == user.tenant_id)
        .order_by(models.SLAPolicy.priority)
        .all()
    )


@router.patch("/{policy_id}", response_model=schemas.SLAPolicyOut)
def update_sla_policy(
    policy_id: uuid.UUID,
    payload: schemas.SLAPolicyUpdate,
    db: Session = Depends(get_db),
    user: Optional[models.User] = Depends(get_session_user),
):
    if not user:
        raise HTTPException(status.HTTP_401_UNAUTHORIZED)
    if user.role not in ADMIN_ROLES:
        raise HTTPException(status.HTTP_403_FORBIDDEN, detail="Admin privileges required")

    policy = (
        db.query(models.SLAPolicy)
        .filter(models.SLAPolicy.id == policy_id, models.SLAPolicy.tenant_id == user.tenant_id)
        .first()
    )
    if not policy:
        raise HTTPException(status.HTTP_404_NOT_FOUND)

    old_response, old_resolution = policy.response_time_minutes, policy.resolution_time_minutes
    policy.response_time_minutes = payload.response_time_minutes
    policy.resolution_time_minutes = payload.resolution_time_minutes

    log_audit(
        db,
        tenant_id=user.tenant_id,
        user_id=user.id,
        action="sla_policy_update",
        detail={
            "priority": policy.priority.value,
            "response_time_minutes": {"old": old_response, "new": payload.response_time_minutes},
            "resolution_time_minutes": {"old": old_resolution, "new": payload.resolution_time_minutes},
        },
    )
    db.commit()
    db.refresh(policy)
    return policy