# agent/orchestrator.py
from agents import Agent, Runner, handoff
from agents.guardrails import PIIFilter, PermissionGuard, OutputValidator

class EnterpriseOrchestrator:
    """企业级多Agent编排器"""

    def __init__(self, tenant_config: dict):
        self.agents = {
            "task": Agent(
                name="TaskAgent",
                instructions="你负责操作CRM和工单系统。所有写操作需人工确认。",
                tools=[crm_create_ticket, crm_update_status],
                model="claude-sonnet-4-20250514"
            ),
            "search": Agent(
                name="SearchAgent",
                instructions="你负责在企业知识库中检索相关信息。",
                tools=[kb_search, web_search],
                model="gpt-5"
            ),
            "code": Agent(
                name="CodeAgent",
                instructions="你负责生成和执行SQL查询、调用API。",
                tools=[sql_execute, api_call],
                model="claude-opus-4-20250514"
            ),
        }

        self.orchestrator = Agent(
            name="Orchestrator",
            instructions=self._build_orchestrator_prompt(tenant_config),
            handoffs=list(self.agents.values()),
            model="claude-opus-4-20250514",
            guardrails=[
                PIIFilter(enabled=True),           # PII信息脱敏
                PermissionGuard(                   # 权限校验
                    max_tool_calls=20,
                    blocked_tools=["sql_drop", "crm_delete"]
                ),
                OutputValidator(                   # 输出校验
                    max_length=5000,
                    require_source=True
                ),
            ]
        )

    async def handle(self, user_msg: str, user_context: dict) -> str:
        result = await Runner.run(
            self.orchestrator,
            input=user_msg,
            context=user_context,
            max_turns=10,               # 防止无限循环
            timeout_seconds=60           # 超时保护
        )
        return result.final_output

# guardrails/hitl.py
class HumanInTheLoopGate:
    """高风险操作人工审批网关"""

    RISK_THRESHOLDS = {
        "financial_transaction": 0.3,    # >¥3000需审批
        "data_export": 0.8,              # >80%数据量需审批
        "system_config_change": 0.0,     # 所有配置变更需审批
        "customer_communication": 0.9,   # 仅兜底触发
    }

    async def check(self, action: AgentAction) -> Decision:
        risk_score = self._evaluate_risk(action)
        threshold = self.RISK_THRESHOLDS.get(action.type, 0.5)

        if risk_score > threshold:
            return Decision.APPROVE  # 低风险，自动放行

        # 高风险，提交人工审批
        approval = await self._request_approval(
            action=action,
            risk_score=risk_score,
            timeout=300,  # 5分钟超时，超时自动拒绝
            approvers=self._get_approvers(action.type)
        )
        return approval