admin / Synapse-Cortex

import uuid
from datetime import datetime
from typing import List, Optional

from pydantic import BaseModel, EmailStr, Field, field_validator

from .models import (
    AssetSource,
    AssetStatus,
    TicketPriority,
    TicketSource,
    TicketStatus,
    TicketType,
    UserRole,
)
from .utils import is_valid_mac, normalize_mac


class LoginRequest(BaseModel):
    email: EmailStr
    password: str


class SLAPolicyOut(BaseModel):
    id: uuid.UUID
    tenant_id: uuid.UUID
    priority: TicketPriority
    response_time_minutes: int
    resolution_time_minutes: int

    class Config:
        from_attributes = True


class SLAPolicyUpdate(BaseModel):
    response_time_minutes: int = Field(..., gt=0)
    resolution_time_minutes: int = Field(..., gt=0)


class SoftwareItem(BaseModel):
    name: str
    version: Optional[str] = None


class AssetTypeOptionOut(BaseModel):
    id: uuid.UUID
    tenant_id: uuid.UUID
    name: str
    created_at: datetime

    class Config:
        from_attributes = True


class AssetTypeOptionCreate(BaseModel):
    name: str = Field(..., min_length=1, max_length=80)


class AssetTypeOptionUpdate(BaseModel):
    name: str = Field(..., min_length=1, max_length=80)


class AssetCreate(BaseModel):
    name: str = Field(..., min_length=2, max_length=120)
    asset_type_id: uuid.UUID
    mac_address: str
    ip_address: Optional[str] = None
    location: Optional[str] = None
    status: AssetStatus = AssetStatus.IN_STOCK
    assigned_to_id: Optional[uuid.UUID] = None

    @field_validator("mac_address")
    @classmethod
    def validate_mac(cls, value: str) -> str:
        if not is_valid_mac(value):
            raise ValueError("mac_address must be a valid MAC address (e.g. 00:1A:2B:3C:4D:5E)")
        return normalize_mac(value)


class AssetUpdate(BaseModel):
    """Partial update for the asset detail view's independently-editable sections."""

    name: Optional[str] = Field(None, min_length=2, max_length=120)
    asset_type_id: Optional[uuid.UUID] = None
    status: Optional[AssetStatus] = None
    location: Optional[str] = None
    assigned_to_id: Optional[uuid.UUID] = None
    mac_address: Optional[str] = None
    ip_address: Optional[str] = None
    os: Optional[str] = None
    software: Optional[List[SoftwareItem]] = None

    @field_validator("mac_address")
    @classmethod
    def validate_mac(cls, value: Optional[str]) -> Optional[str]:
        if value is None or value == "":
            return None
        if not is_valid_mac(value):
            raise ValueError("mac_address must be a valid MAC address (e.g. 00:1A:2B:3C:4D:5E)")
        return normalize_mac(value)


class AssetOut(BaseModel):
    id: uuid.UUID
    tenant_id: uuid.UUID
    asset_id: str
    name: str
    asset_type_id: uuid.UUID
    asset_type_name: Optional[str] = None
    mac_address: Optional[str]
    ip_address: Optional[str]
    status: AssetStatus
    location: Optional[str]
    source: AssetSource
    os: Optional[str]
    software: Optional[List[SoftwareItem]]
    netscanxi_device_type: Optional[str]
    assigned_to_id: Optional[uuid.UUID]
    created_at: datetime

    class Config:
        from_attributes = True


class TicketCreate(BaseModel):
    title: str = Field(..., min_length=3, max_length=200)
    description: Optional[str] = None
    ticket_type: TicketType = TicketType.INCIDENT
    priority: TicketPriority = TicketPriority.MEDIUM
    asset_id: Optional[uuid.UUID] = None
    assigned_to_id: Optional[uuid.UUID] = None


class TicketUpdate(BaseModel):
    title: Optional[str] = Field(None, min_length=3, max_length=200)
    description: Optional[str] = None
    status: Optional[TicketStatus] = None
    assigned_to_id: Optional[uuid.UUID] = None
    priority: Optional[TicketPriority] = None


class TicketBulkDeleteRequest(BaseModel):
    ticket_ids: List[uuid.UUID] = Field(..., min_length=1)


class TicketOut(BaseModel):
    id: uuid.UUID
    tenant_id: uuid.UUID
    ticket_number: str
    title: str
    description: Optional[str]
    ticket_type: TicketType
    priority: TicketPriority
    status: TicketStatus
    requester_id: Optional[uuid.UUID]
    assigned_to_id: Optional[uuid.UUID]
    asset_id: Optional[uuid.UUID]
    response_due_at: Optional[datetime]
    resolution_due_at: Optional[datetime]
    resolved_at: Optional[datetime]
    source: TicketSource
    external_ref: Optional[str]
    created_at: datetime

    class Config:
        from_attributes = True


class TicketActionCreate(BaseModel):
    body: str = Field(..., min_length=1, max_length=4000)


class TicketActionOut(BaseModel):
    id: uuid.UUID
    tenant_id: uuid.UUID
    ticket_id: uuid.UUID
    user_id: Optional[uuid.UUID]
    user_name: Optional[str] = None
    body: str
    created_at: datetime

    class Config:
        from_attributes = True


class UserCreate(BaseModel):
    full_name: str = Field(..., min_length=2, max_length=120)
    email: EmailStr
    password: str = Field(..., min_length=8)
    role: UserRole = UserRole.REQUESTER


class UserUpdate(BaseModel):
    full_name: Optional[str] = Field(None, min_length=2, max_length=120)
    role: Optional[UserRole] = None
    is_active: Optional[bool] = None
    mfa_required: Optional[bool] = None


class UserOut(BaseModel):
    id: uuid.UUID
    tenant_id: uuid.UUID
    email: str
    full_name: str
    role: UserRole
    is_active: bool
    mfa_enabled: bool
    mfa_required: bool
    created_at: datetime

    class Config:
        from_attributes = True


class AuditLogOut(BaseModel):
    id: uuid.UUID
    tenant_id: uuid.UUID
    user_id: Optional[uuid.UUID]
    action: str
    detail: Optional[dict]
    ip_address: Optional[str]
    created_at: datetime

    class Config:
        from_attributes = True


class IngestAssetItem(BaseModel):
    """One device as reported by NetscanXi's scan/host dict."""

    asset_id: str
    mac: Optional[str] = None
    ip: Optional[str] = None
    hostname: Optional[str] = None
    device_type: Optional[str] = None
    os: Optional[str] = None
    software: Optional[List[SoftwareItem]] = None


class IngestRequest(BaseModel):
    assets: List[IngestAssetItem] = Field(default_factory=list)


class IngestTicketItem(BaseModel):
    """One remediation item as tracked by NetscanXi (its Remediation Tracking
    module), to be created as a Cortex ticket."""

    external_ref: str = Field(..., min_length=1)
    title: str = Field(..., min_length=1, max_length=200)
    description: Optional[str] = None
    priority: TicketPriority = TicketPriority.MEDIUM
    status: TicketStatus = TicketStatus.NEW
    asset_id: Optional[str] = None  # NetscanXi's asset_id string, resolved server-side


class IngestTicketsRequest(BaseModel):
    tickets: List[IngestTicketItem] = Field(default_factory=list)