// =================================================================
// pw-screens-op-agents.jsx — Operator · Agent operators and the agent take (agent payments, 0069).
//
// An agent operator is an AI company whose agents buy per-article access from publishers. It holds
// API keys (the agent authenticates with one) and a prepaid wallet per currency, topped up by card or
// UPI through the API. There is no operator self-serve portal in this build: staff create operators
// and issue keys here.
//
// Any staff member reads. Creating an operator, editing its profile and issuing a key are ordinary
// writes; suspending or reactivating it, revoking a key and scheduling an agent take rate are
// destructive, so a manager does not see those controls and the API refuses them with a 403.
// A key's secret is returned once, by the call that issued it, and never again.
// =================================================================
const AO_STATUS_TONE = { active: "good", suspended: "warn" };
const AO_KEY_TONE = { active: "good", revoked: "neutral" };
const aoNotify = (msg, tone) => (window.__toast ? window.__toast(msg, tone) : null);
const aoIsManager = (session) => rcIsManager(session);
const aoAgentLabel = (catalog, token) => { const a = catalog.find((x) => x.token === token); return a ? `${a.label} (${a.operator})` : token; };
// Declared agents: chosen from the known-agent catalogue, or typed as a token.
const DeclaredAgentsPicker = ({ catalog, value, onChange }) => {
const [pick, setPick] = React.useState("");
const [token, setToken] = React.useState("");
const add = (t) => { if (t && !value.includes(t) && value.length < 20) onChange([...value, t]); };
const tokenOk = AP_TOKEN_RE.test(token.trim()) && !value.includes(token.trim());
return (
{value.length === 0 ? None yet. Purchases only apply a publisher's per-agent rule to agents declared here.
: value.map((t) => (
{aoAgentLabel(catalog, t)}
))}
);
};
const OpAgentOperatorsScreen = ({ data }) => {
const list = useListQuery("adminListAgentOperators", { sort: "created_at", dir: "desc", filters: { status: "" }, watch: data.agentOperators });
React.useEffect(() => { if (list.error) aoNotify("Could not load agent operators.", "bad"); }, [list.error]);
const catalog = apCatalog(data);
return (
window.__nav("agent-operator-create")}>New agent operator}/>
}>
Operators top up their wallets through the API (card or UPI; India on PayU, elsewhere on Stripe). Suspending an operator
or revoking a key is superadmin only.
Fill in line 1, city, region and postal code, or clear the address.
}
set({ gstin: e.target.value })} placeholder="29ABCDE1234F1ZW"/>
set({ declared_agents: v })}/>
);
};
// The issued secret, once. Never stored in the fixture store or anywhere else.
const AgentSecretBox = ({ issued, onDismiss }) => {
const [copied, setCopied] = React.useState(false);
if (!issued) return null;
const copy = async () => { try { await navigator.clipboard.writeText(issued.secret); setCopied(true); } catch (e) { aoNotify("Copy failed — select the text instead.", "warn"); } };
return (
}>
Copy this secret now. It is shown once and cannot be retrieved again — DropCap keeps only a hash.
{issued.demo && Demo mode: this is a made-up secret; no key exists.}
) : The secret was already shown by the first response to this request and is not returned again.}
The agent sends it as Authorization: Bearer <secret>.
}/>
{suspended && }>Suspended: its agents cannot buy anything, and every key is refused with agent_suspended. The wallet is kept.}
setIssued(null)}/>
{(op.balances || []).length === 0
?
: op.balances.map((b) => )}
k.status === "active").length)} sub={`${(op.keys || []).length} issued in total`}/>