feat(apiservice): add edit client/key functionality in API Management page

- PATCH /admin/api-keys/clients/{id} — update client name and is_active
- PATCH /admin/api-keys/{id} — update key name and permissions
- Edit Client modal with name field and active/inactive toggle
- Edit Key modal with name field and permissions JSON textarea (pre-filled)
- Fix JS syntax error: use data-* attributes instead of inline JSON in onclick

03-apiservice/app/routes/admin_api_keys.py

@@ -45,12 +45,22 @@ class ApiClientCreateSchema(BaseModel):
     name: str
 
 
+class ApiClientUpdateSchema(BaseModel):
+    name: str | None = None
+    is_active: bool | None = None
+
+
 class ApiKeyCreateSchema(BaseModel):
     client_id: int
     name: str | None = None
     permissions: list[str] = []
 
 
+class ApiKeyUpdateSchema(BaseModel):
+    name: str | None = None
+    permissions: list[str] | None = None
+
+
 @router.get("/clients", response_model=List[ApiClientSchema])
 async def list_clients(
     db: Session = Depends(get_db),
@@ -60,6 +70,30 @@ async def list_clients(
     return db.query(ApiClient).order_by(ApiClient.id).all()
 
 
+@router.patch("/clients/{client_id}", response_model=ApiClientSchema)
+async def update_client(
+    client_id: int,
+    data: ApiClientUpdateSchema,
+    db: Session = Depends(get_db),
+    current_user: dict = Depends(require_role(Roles.ADMIN)),
+):
+    """Update API client name or active status (Admin only)"""
+    client = db.get(ApiClient, client_id)
+    if not client:
+        raise HTTPException(status_code=404, detail="Client not found")
+    if data.name is not None:
+        existing = db.query(ApiClient).filter(ApiClient.name == data.name, ApiClient.id != client_id).first()
+        if existing:
+            raise HTTPException(status_code=400, detail="Client name already exists")
+        client.name = data.name
+    if data.is_active is not None:
+        client.is_active = data.is_active
+    db.commit()
+    db.refresh(client)
+    logger.info(f"Admin {current_user.get('username')} updated client {client_id}")
+    return client
+
+
 @router.post("/clients", response_model=ApiClientSchema)
 async def create_client(
     data: ApiClientCreateSchema,
@@ -126,6 +160,27 @@ async def regenerate_key(
     return {"key_id": api_key.id, "api_key": plain_key, "key_prefix": api_key.key_prefix, "permissions": api_key.permissions}
 
 
+@router.patch("/{key_id}", response_model=ApiKeySchema)
+async def update_key(
+    key_id: int,
+    data: ApiKeyUpdateSchema,
+    db: Session = Depends(get_db),
+    current_user: dict = Depends(require_role(Roles.ADMIN)),
+):
+    """Update API key name or permissions (Admin only)"""
+    api_key = db.get(ApiKey, key_id)
+    if not api_key:
+        raise HTTPException(status_code=404, detail="API Key not found")
+    if data.name is not None:
+        api_key.name = data.name
+    if data.permissions is not None:
+        api_key.permissions = data.permissions
+    db.commit()
+    db.refresh(api_key)
+    logger.info(f"Admin {current_user.get('username')} updated API key {key_id}")
+    return api_key
+
+
 @router.patch("/{key_id}/toggle")
 async def toggle_key(
     key_id: int,