feat(ne): batch apply jump proxy on selected NEs

Add POST /v1/managed-ne/batch-hop, shared HopProxyFields form, and toolbar button next to connectivity test.

Co-authored-by: Cursor <cursoragent@cursor.com>

netx_api/managed_ne_router.py

@@ -8,8 +8,9 @@ from .db import get_db
 from .device_types import SUPPORTED_DEVICE_TYPES, SUPPORTED_VENDORS
 from .ne_connect import schedule_connect_tests
 from .ne_crypto import credentials_configured
-from .ne_schemas import ConnectTestRequest, ManagedNeCreate, ManagedNeUpdate
+from .ne_schemas import BatchHopApplyRequest, ConnectTestRequest, ManagedNeCreate, ManagedNeUpdate
 from .ne_service import (
+    batch_apply_hop_proxy,
     build_managed_ne_import_template,
     create_managed_ne,
     delete_managed_ne,
@@ -90,6 +91,11 @@ async def api_import_managed_ne(file: UploadFile = File(...), db: Session = Depe
     return import_managed_ne(db, content, file.filename or "import.xlsx").model_dump()
 
 
+@router.post("/batch-hop")
+def api_batch_apply_hop(body: BatchHopApplyRequest, db: Session = Depends(get_db)):
+    return batch_apply_hop_proxy(db, body.ids, body.hop)
+
+
 @router.post("/connect-test")
 def api_connect_test(body: ConnectTestRequest, db: Session = Depends(get_db)):
     ids = [str(x).strip() for x in body.ids if str(x).strip()]

netx_api/ne_schemas.py

@@ -108,6 +108,24 @@ class ConnectTestRequest(BaseModel):
     ids: list[str] = Field(min_length=1)
 
 
+class HopProxyConfig(BaseModel):
+    """Shared jump-host (proxy) settings applied to one or many NEs."""
+
+    hop_vendor: str = "zte"
+    hop_host: str
+    hop_port: int = 22
+    hop_protocol: str = "ssh"
+    hop_username: str
+    hop_password: str
+    hop_command_template: str = ""
+    hop_vrf: str = ""
+
+
+class BatchHopApplyRequest(BaseModel):
+    ids: list[str] = Field(min_length=1)
+    hop: HopProxyConfig
+
+
 class ImportFailure(BaseModel):
     row: int
     reason: str

netx_api/ne_service.py

@@ -11,7 +11,15 @@ from sqlalchemy.orm import Session
 from .device_types import SUPPORTED_DEVICE_TYPES, SUPPORTED_VENDORS
 from .models import ManagedNE
 from .ne_crypto import CredentialCryptoError, credentials_configured, decrypt_secret, encrypt_secret
-from .ne_schemas import ImportFailure, ImportResult, ManagedNeCreate, ManagedNeOut, ManagedNeUpdate
+from .ne_schemas import (
+    HopProxyConfig,
+    ImportFailure,
+    ImportResult,
+    ManagedNeCreate,
+    ManagedNeOut,
+    ManagedNeUpdate,
+)
+from .ne_session_factory import default_zte_hop_template
 
 IMPORT_COLUMNS = (
     "device_type",
@@ -266,6 +274,50 @@ def update_managed_ne(db: Session, ne_id: str, body: ManagedNeUpdate) -> Managed
     return row_to_out(row)
 
 
+def batch_apply_hop_proxy(db: Session, ids: list[str], hop: HopProxyConfig) -> dict[str, Any]:
+    """Apply the same jump-host (proxy) settings to multiple managed NEs."""
+    _require_crypto()
+    hop_host = str(hop.hop_host or "").strip()
+    hop_user = str(hop.hop_username or "").strip()
+    hop_pass = str(hop.hop_password or "").strip()
+    if not hop_host:
+        raise HTTPException(status_code=400, detail="hop_host_required")
+    if not hop_user:
+        raise HTTPException(status_code=400, detail="hop_username_required")
+    if not hop_pass:
+        raise HTTPException(status_code=400, detail="hop_password_required")
+
+    template = str(hop.hop_command_template or "").strip()
+    if not template:
+        template = default_zte_hop_template(hop.hop_protocol, hop.hop_vrf)
+
+    ne_ids = [str(x).strip() for x in ids if str(x).strip()]
+    if not ne_ids:
+        raise HTTPException(status_code=400, detail="ids_required")
+
+    rows = db.query(ManagedNE).filter(ManagedNE.id.in_(ne_ids)).all()
+    found_ids = {str(r.id) for r in rows}
+    missing = [x for x in ne_ids if x not in found_ids]
+    if missing:
+        raise HTTPException(status_code=404, detail=f"managed_ne_not_found: {','.join(missing[:5])}")
+
+    enc = encrypt_secret(hop_pass)
+    now = _now()
+    for row in rows:
+        row.hop_enabled = True
+        row.hop_vendor = _normalize_hop_vendor(hop.hop_vendor)
+        row.hop_host = hop_host
+        row.hop_port = int(hop.hop_port or 22)
+        row.hop_protocol = _normalize_protocol(hop.hop_protocol)
+        row.hop_username = hop_user
+        row.hop_password_enc = enc
+        row.hop_command_template = template
+        row.hop_vrf = str(hop.hop_vrf or "").strip()
+        row.updated_at = now
+    db.commit()
+    return {"ok": True, "updated": len(rows)}
+
+
 def delete_managed_ne(db: Session, ne_id: str) -> dict[str, bool]:
     row = db.get(ManagedNE, ne_id)
     if not row: