netx/netx_api/models.py

from __future__ import annotations

from datetime import datetime
from uuid import uuid4

from sqlalchemy import Boolean, DateTime, Float, ForeignKey, Integer, LargeBinary, String, Text, UniqueConstraint
from sqlalchemy.dialects.postgresql import JSONB
from sqlalchemy.orm import Mapped, mapped_column, relationship
from sqlalchemy.types import JSON

from .db import Base

# JSONB on Postgres; plain JSON elsewhere (unit tests / sqlite).
_JsonType = JSON().with_variant(JSONB(), "postgresql")


class AlarmBatch(Base):
    __tablename__ = "alarm_batches"

    batch_id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    source_file: Mapped[str] = mapped_column(String(512))
    parser_version: Mapped[str] = mapped_column(String(64), default="zte_alarm_monitor_v1")
    dict_version: Mapped[str] = mapped_column(String(64), default="v1")
    total_rows: Mapped[int] = mapped_column(Integer, default=0)
    success_rows: Mapped[int] = mapped_column(Integer, default=0)
    failed_rows: Mapped[int] = mapped_column(Integer, default=0)
    status: Mapped[str] = mapped_column(String(32), default="done")
    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)

    alarms: Mapped[list["AlarmNorm"]] = relationship(back_populates="batch")
    errors: Mapped[list["ImportErrorRow"]] = relationship(back_populates="batch")


class AlarmNorm(Base):
    __tablename__ = "alarms_norm"

    id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
    batch_id: Mapped[str] = mapped_column(ForeignKey("alarm_batches.batch_id"), index=True)
    row_no: Mapped[int] = mapped_column(Integer)

    alarm_time: Mapped[datetime] = mapped_column(DateTime, index=True)
    clear_time: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
    severity_raw: Mapped[str] = mapped_column(String(64), default="")
    severity_norm: Mapped[str] = mapped_column(String(32), index=True, default="unknown")
    ne_name: Mapped[str] = mapped_column(String(256), default="", index=True)
    ne_id: Mapped[str] = mapped_column(String(128), default="", index=True)
    site_name: Mapped[str] = mapped_column(String(256), default="")
    alarm_code: Mapped[str] = mapped_column(String(256), default="", index=True)
    # NOTE: historically we stored `alarm_name` separately, but for ZTE Alarm Monitor exports
    # "Alarm Code Name" is a single column. We keep the DB column for backward compatibility,
    # but APIs/UI are unified on `alarm_code`.
    alarm_name: Mapped[str] = mapped_column(String(512), default="")
    description: Mapped[str] = mapped_column(Text, default="")
    ack_state: Mapped[str] = mapped_column(String(64), default="")
    clear_state: Mapped[str] = mapped_column(String(64), default="")
    relevancy: Mapped[str] = mapped_column(String(128), default="")
    l3vpn_peer_ne: Mapped[str] = mapped_column(String(256), default="")
    service: Mapped[str] = mapped_column(String(256), default="")
    affected_client_service_number: Mapped[int] = mapped_column(Integer, default=0)
    intermittence_count: Mapped[int] = mapped_column(Integer, default=0)
    me_level: Mapped[str] = mapped_column(String(128), default="")
    vendor: Mapped[str] = mapped_column(String(64), default="ZTE")
    source_type: Mapped[str] = mapped_column(String(64), default="gateway_export_excel")
    source_file: Mapped[str] = mapped_column(String(512), default="")
    raw_json: Mapped[str] = mapped_column(Text, default="{}")

    batch: Mapped[AlarmBatch] = relationship(back_populates="alarms")


class ImportErrorRow(Base):
    __tablename__ = "import_errors"

    id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
    batch_id: Mapped[str] = mapped_column(ForeignKey("alarm_batches.batch_id"), index=True)
    row_no: Mapped[int] = mapped_column(Integer)
    reason: Mapped[str] = mapped_column(String(512))
    raw_json: Mapped[str] = mapped_column(Text, default="{}")

    batch: Mapped[AlarmBatch] = relationship(back_populates="errors")


class ImportJob(Base):
    __tablename__ = "import_jobs"

    id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
    kind: Mapped[str] = mapped_column(String(32), index=True)  # alarms/logs/config
    file_name: Mapped[str] = mapped_column(String(512), default="")
    batch_id: Mapped[str | None] = mapped_column(String(64), nullable=True, index=True)
    ok: Mapped[int] = mapped_column(Integer, default=1)  # 1 ok, 0 error
    summary: Mapped[str] = mapped_column(String(1024), default="")
    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)


class AiAnalyzeHistory(Base):
    __tablename__ = "ai_analyze_history"

    id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
    analysis_request_id: Mapped[str] = mapped_column(String(128), default="", index=True)
    batch_id: Mapped[str] = mapped_column(String(64), default="", index=True)
    question: Mapped[str] = mapped_column(Text, default="")
    filters_json: Mapped[str] = mapped_column(Text, default="{}")
    ok: Mapped[int] = mapped_column(Integer, default=1)  # 1 ok, 0 error
    answer: Mapped[str] = mapped_column(Text, default="")
    error: Mapped[str] = mapped_column(Text, default="")
    evidence_json: Mapped[str] = mapped_column(Text, default="{}")
    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)


class UmeSyncJob(Base):
    __tablename__ = "ume_sync_jobs"

    id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
    domain: Mapped[str] = mapped_column(String(32), index=True, default="inventory")
    status: Mapped[str] = mapped_column(String(32), index=True, default="running")
    trigger_mode: Mapped[str] = mapped_column(String(32), default="manual")
    started_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)
    ended_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
    pulled_count: Mapped[int] = mapped_column(Integer, default=0)
    inserted_count: Mapped[int] = mapped_column(Integer, default=0)
    updated_count: Mapped[int] = mapped_column(Integer, default=0)
    error_message: Mapped[str] = mapped_column(String(1024), default="")
    details_json: Mapped[str] = mapped_column(Text, default="{}")


class UmeAlarmBatch(Base):
    __tablename__ = "ume_alarm_batches"

    batch_id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    kind: Mapped[str] = mapped_column(String(16), index=True, default="current")  # current/history
    status: Mapped[str] = mapped_column(String(32), default="done")
    total_rows: Mapped[int] = mapped_column(Integer, default=0)
    success_rows: Mapped[int] = mapped_column(Integer, default=0)
    failed_rows: Mapped[int] = mapped_column(Integer, default=0)
    started_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
    ended_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
    error_message: Mapped[str] = mapped_column(String(1024), default="")
    raw_json: Mapped[str] = mapped_column(Text, default="{}")


class UmeInventoryNE(Base):
    __tablename__ = "ume_inventory_ne"

    ne_id: Mapped[str] = mapped_column(String(128), primary_key=True, comment="网元uuid")
    ne_name: Mapped[str] = mapped_column(String(256), default="", index=True, comment="资源名称")
    user_label: Mapped[str] = mapped_column(String(256), default="", index=True, comment="用户标签")
    ip_address: Mapped[str] = mapped_column(String(128), default="", index=True, comment="网元IPv4地址")
    ipv6_address: Mapped[str] = mapped_column(String(128), default="", index=True, comment="IPv6地址")
    ne_type: Mapped[str] = mapped_column(String(128), default="", comment="网元类型")
    device_level: Mapped[str] = mapped_column(String(64), default="", comment="网元层次")
    host_name: Mapped[str] = mapped_column(String(256), default="", comment="主机名称")
    location: Mapped[str] = mapped_column(String(512), default="")
    hardware_version: Mapped[str] = mapped_column(String(128), default="", comment="硬件版本")
    loopback: Mapped[str] = mapped_column(String(128), default="", comment="业务环回IP(IPv4)")
    consistent_state: Mapped[str] = mapped_column(String(64), default="", comment="数据一致性状态")
    interface_version: Mapped[str] = mapped_column(String(128), default="", comment="网元接口版本号")
    mac: Mapped[str] = mapped_column(String(128), default="", comment="设备机架MAC地址")
    admin_status: Mapped[str] = mapped_column(String(64), default="", comment="管理状态")
    address_type: Mapped[str] = mapped_column(String(64), default="", comment="管理地址类型(1:IPv4,2:IPv6)")
    connection_status: Mapped[str] = mapped_column(String(64), default="", comment="连接状态")
    maintain_status: Mapped[str] = mapped_column(String(64), default="", comment="工程状态")
    net_mask: Mapped[str] = mapped_column(String(128), default="", comment="管理IPv4掩码")
    create_time: Mapped[str] = mapped_column(String(64), default="")
    creator: Mapped[str] = mapped_column(String(128), default="")
    vendor: Mapped[str] = mapped_column(String(64), default="ZTE", comment="网元提供商")
    source_type: Mapped[str] = mapped_column(String(64), default="ume_restconf")
    first_seen_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
    last_seen_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)
    raw_json: Mapped[str] = mapped_column(Text, default="{}")


class UmeAlarmCurrent(Base):
    __tablename__ = "ume_alarms_current"

    alarm_key: Mapped[str] = mapped_column(Text, primary_key=True)
    ne_id: Mapped[str] = mapped_column(String(128), default="", index=True)
    host_name: Mapped[str] = mapped_column(String(256), default="", index=True, comment="网元主机名(同步时从inventory联表写入)")
    object_name: Mapped[str] = mapped_column(Text, default="", index=True)
    event_type: Mapped[str] = mapped_column(Text, default="")
    native_probable_cause: Mapped[str] = mapped_column(Text, default="")
    perceived_severity: Mapped[str] = mapped_column(Text, default="", index=True)
    is_cleared: Mapped[str] = mapped_column(Text, default="", index=True)
    time_created: Mapped[str] = mapped_column(Text, default="", index=True)
    root_cause_alarm_indication: Mapped[str] = mapped_column(Text, default="")
    notification_id: Mapped[str] = mapped_column(String(128), default="", index=True)
    first_seen_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
    last_seen_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)
    raw_json: Mapped[str] = mapped_column(Text, default="{}")


class UmeAlarmHistory(Base):
    __tablename__ = "ume_alarms_history"

    alarm_key: Mapped[str] = mapped_column(Text, primary_key=True)
    ne_id: Mapped[str] = mapped_column(String(128), default="", index=True)
    host_name: Mapped[str] = mapped_column(String(256), default="", index=True, comment="网元主机名(同步时从inventory联表写入)")
    object_name: Mapped[str] = mapped_column(Text, default="", index=True)
    event_type: Mapped[str] = mapped_column(Text, default="")
    native_probable_cause: Mapped[str] = mapped_column(Text, default="")
    perceived_severity: Mapped[str] = mapped_column(Text, default="", index=True)
    is_cleared: Mapped[str] = mapped_column(Text, default="", index=True)
    time_created: Mapped[str] = mapped_column(Text, default="", index=True)
    root_cause_alarm_indication: Mapped[str] = mapped_column(Text, default="")
    notification_id: Mapped[str] = mapped_column(String(128), default="", index=True)
    first_seen_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
    last_seen_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)
    raw_json: Mapped[str] = mapped_column(Text, default="{}")


class UmeKeyAlertMonitorConfig(Base):
    """Global monitor options for key alert forwarding (singleton row id=1)."""

    __tablename__ = "ume_key_alert_monitor_config"

    id: Mapped[int] = mapped_column(Integer, primary_key=True)
    forward_on_clear: Mapped[int] = mapped_column(Integer, default=0)
    updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)


class UmeKeyAlertRule(Base):
    """Key alert rule matched by UME notificationId or alarm description keyword."""

    __tablename__ = "ume_key_alert_rule"

    notification_id: Mapped[str] = mapped_column(String(128), primary_key=True)
    match_type: Mapped[str] = mapped_column(String(32), default="notification_id", index=True)
    match_value: Mapped[str] = mapped_column(String(256), default="", index=True)
    enabled: Mapped[int] = mapped_column(Integer, default=1)
    forward_on_clear: Mapped[int] = mapped_column(Integer, default=0)
    label: Mapped[str] = mapped_column(String(256), default="")
    ne_types: Mapped[str] = mapped_column(Text, default="[]")
    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
    updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)


class UmeKeyAlertForwardLog(Base):
    __tablename__ = "ume_key_alert_forward_log"

    id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
    alarm_key: Mapped[str] = mapped_column(Text, index=True)
    action: Mapped[str] = mapped_column(String(32), default="", index=True)
    rule_key: Mapped[str] = mapped_column(String(128), default="", index=True)
    notification_id: Mapped[str] = mapped_column(String(128), default="", index=True)
    forwarded_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)
    oclaw_ok: Mapped[int] = mapped_column(Integer, default=0)
    error: Mapped[str] = mapped_column(String(512), default="")


class UmeAlarmSubscription(Base):
    """Persisted UME ALARM notification subscription (manual establish/cancel)."""

    __tablename__ = "ume_alarm_subscription"

    cache_key: Mapped[str] = mapped_column(String(64), primary_key=True, default="default")
    subscription_id: Mapped[str] = mapped_column(String(128), default="", index=True)
    wss_uri: Mapped[str] = mapped_column(Text, default="")
    topic: Mapped[str] = mapped_column(String(64), default="ALARM")
    established_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
    updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)


class UmeTokenCache(Base):
    __tablename__ = "ume_token_cache"

    cache_key: Mapped[str] = mapped_column(String(256), primary_key=True)
    token: Mapped[str] = mapped_column(Text, default="")
    expires_at_epoch_s: Mapped[int] = mapped_column(Integer, default=0)
    lock_owner: Mapped[str] = mapped_column(String(128), default="", index=True)
    lock_expires_at_epoch_s: Mapped[int] = mapped_column(Integer, default=0, index=True)
    updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)


class ManagedNE(Base):
    """Locally managed network element (SSH/Telnet), independent of UME inventory."""

    __tablename__ = "managed_ne"

    id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    name: Mapped[str] = mapped_column(String(256), default="", index=True)
    vendor: Mapped[str] = mapped_column(String(64), default="Other", index=True)
    device_type: Mapped[str] = mapped_column(String(128), default="")
    ip_address: Mapped[str] = mapped_column(String(128), unique=True, index=True)
    port: Mapped[int] = mapped_column(Integer, default=22)
    protocol: Mapped[str] = mapped_column(String(16), default="ssh")
    username: Mapped[str] = mapped_column(String(128), default="")
    password_enc: Mapped[str] = mapped_column(Text, default="")
    enable_secret_enc: Mapped[str] = mapped_column(Text, default="")
    connect_status: Mapped[str] = mapped_column(String(32), default="unknown", index=True)
    connect_message: Mapped[str] = mapped_column(String(512), default="")
    connect_detail: Mapped[str] = mapped_column(Text, default="")
    connect_tested_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
    site: Mapped[str] = mapped_column(String(256), default="")
    tags: Mapped[str] = mapped_column(String(512), default="")
    remark: Mapped[str] = mapped_column(String(1024), default="")
    source: Mapped[str] = mapped_column(String(64), default="", index=True)
    source_ref: Mapped[str] = mapped_column(String(128), default="", index=True)
    hop_enabled: Mapped[bool] = mapped_column(default=False)
    hop_vendor: Mapped[str] = mapped_column(String(32), default="zte")
    hop_host: Mapped[str] = mapped_column(String(128), default="")
    hop_port: Mapped[int] = mapped_column(Integer, default=22)
    hop_protocol: Mapped[str] = mapped_column(String(16), default="ssh")
    hop_username: Mapped[str] = mapped_column(String(128), default="")
    hop_password_enc: Mapped[str] = mapped_column(Text, default="")
    hop_command_template: Mapped[str] = mapped_column(Text, default="")
    hop_vrf: Mapped[str] = mapped_column(String(128), default="")
    hop_target_auth_mode: Mapped[str] = mapped_column(String(32), default="bastion_managed")
    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
    updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)


class CliConnectProfile(Base):
    """Reusable SSH/Telnet + hop credentials for UME lazy CLI exec."""

    __tablename__ = "cli_connect_profile"

    id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    name: Mapped[str] = mapped_column(String(256), default="", index=True)
    is_default: Mapped[bool] = mapped_column(default=False, index=True)
    username: Mapped[str] = mapped_column(String(128), default="")
    password_enc: Mapped[str] = mapped_column(Text, default="")
    port: Mapped[int] = mapped_column(Integer, default=22)
    protocol: Mapped[str] = mapped_column(String(16), default="ssh")
    device_type_default: Mapped[str] = mapped_column(String(128), default="zte_zxros")
    vendor_default: Mapped[str] = mapped_column(String(64), default="ZTE")
    ne_type_rules: Mapped[str] = mapped_column(Text, default="")
    hop_enabled: Mapped[bool] = mapped_column(default=False)
    hop_vendor: Mapped[str] = mapped_column(String(32), default="zte")
    hop_host: Mapped[str] = mapped_column(String(128), default="")
    hop_port: Mapped[int] = mapped_column(Integer, default=22)
    hop_protocol: Mapped[str] = mapped_column(String(16), default="ssh")
    hop_username: Mapped[str] = mapped_column(String(128), default="")
    hop_password_enc: Mapped[str] = mapped_column(Text, default="")
    hop_command_template: Mapped[str] = mapped_column(Text, default="")
    hop_vrf: Mapped[str] = mapped_column(String(128), default="")
    hop_target_auth_mode: Mapped[str] = mapped_column(String(32), default="bastion_managed")
    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
    updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)


class UmeCliOverride(Base):
    """Per-UME NE CLI overrides and connect-test cache."""

    __tablename__ = "ume_cli_override"

    ume_ne_id: Mapped[str] = mapped_column(String(128), primary_key=True)
    profile_id: Mapped[str | None] = mapped_column(
        String(64), ForeignKey("cli_connect_profile.id", ondelete="SET NULL"), nullable=True
    )
    username_override: Mapped[str] = mapped_column(String(128), default="")
    device_type_override: Mapped[str] = mapped_column(String(128), default="")
    vendor_override: Mapped[str] = mapped_column(String(64), default="")
    connect_status: Mapped[str] = mapped_column(String(32), default="unknown", index=True)
    connect_message: Mapped[str] = mapped_column(String(512), default="")
    connect_detail: Mapped[str] = mapped_column(Text, default="")
    connect_tested_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
    updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)


class NeCollectionJob(Base):
    """Batch CLI collection job over managed NEs."""

    __tablename__ = "ne_collection_job"

    id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    title: Mapped[str] = mapped_column(String(256), default="")
    commands: Mapped[str] = mapped_column(Text, default="")
    status: Mapped[str] = mapped_column(String(32), default="pending", index=True)
    ne_count: Mapped[int] = mapped_column(Integer, default=0)
    success_count: Mapped[int] = mapped_column(Integer, default=0)
    fail_count: Mapped[int] = mapped_column(Integer, default=0)
    error_message: Mapped[str] = mapped_column(String(1024), default="")
    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)
    started_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
    ended_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
    last_run_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True, index=True)


class NeCollectionRun(Base):
    """Per-NE execution within a collection job."""

    __tablename__ = "ne_collection_run"

    id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    job_id: Mapped[str] = mapped_column(String(64), index=True)
    ne_id: Mapped[str] = mapped_column(String(64), index=True)
    ne_name: Mapped[str] = mapped_column(String(256), default="")
    ne_ip: Mapped[str] = mapped_column(String(128), default="")
    status: Mapped[str] = mapped_column(String(32), default="pending", index=True)
    message: Mapped[str] = mapped_column(String(1024), default="")
    output_rel_path: Mapped[str] = mapped_column(String(1024), default="")
    started_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
    ended_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)


class TopologyMap(Base):
    """Named topology canvas (document-style graph)."""

    __tablename__ = "topology_map"

    id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    name: Mapped[str] = mapped_column(String(256), default="", index=True)
    remark: Mapped[str] = mapped_column(String(1024), default="")
    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
    updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)


class TopologyNode(Base):
    """Node on a topology map; preferably references an inventory NE."""

    __tablename__ = "topology_node"

    id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    map_id: Mapped[str] = mapped_column(String(64), index=True)
    managed_ne_id: Mapped[str] = mapped_column(String(64), default="", index=True)
    ume_ne_id: Mapped[str] = mapped_column(String(128), default="", index=True)
    label: Mapped[str] = mapped_column(String(256), default="")
    x: Mapped[float] = mapped_column(Float, default=0.0)
    y: Mapped[float] = mapped_column(Float, default=0.0)
    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
    updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)


class TopologyEdge(Base):
    """Link between two topology nodes."""

    __tablename__ = "topology_edge"

    id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    map_id: Mapped[str] = mapped_column(String(64), index=True)
    source_node_id: Mapped[str] = mapped_column(String(64), index=True)
    target_node_id: Mapped[str] = mapped_column(String(64), index=True)
    source_port: Mapped[str] = mapped_column(String(128), default="")
    target_port: Mapped[str] = mapped_column(String(128), default="")
    # manual | lldp | cdp | stale
    source: Mapped[str] = mapped_column(String(32), default="manual", index=True)
    discovered_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
    updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)


class AppUser(Base):
    """Local netx application user (login account)."""

    __tablename__ = "app_user"

    id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    username: Mapped[str] = mapped_column(String(128), unique=True, index=True)
    password_hash: Mapped[str] = mapped_column(String(255), default="")
    role: Mapped[str] = mapped_column(String(32), default="user", index=True)  # admin | user
    is_active: Mapped[bool] = mapped_column(Boolean, default=True, index=True)
    must_change_password: Mapped[bool] = mapped_column(Boolean, default=False)
    created_by: Mapped[str] = mapped_column(String(64), default="")
    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
    updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)


class AuditLog(Base):
    """Application audit trail for authenticated (and auth) actions."""

    __tablename__ = "audit_log"

    id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    ts: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)
    actor_user_id: Mapped[str] = mapped_column(String(64), default="", index=True)
    actor_username: Mapped[str] = mapped_column(String(128), default="", index=True)
    action: Mapped[str] = mapped_column(String(128), default="", index=True)
    method: Mapped[str] = mapped_column(String(16), default="")
    path: Mapped[str] = mapped_column(String(512), default="", index=True)
    status_code: Mapped[int] = mapped_column(Integer, default=0)
    client_ip: Mapped[str] = mapped_column(String(128), default="")
    user_agent: Mapped[str] = mapped_column(String(512), default="")
    detail: Mapped[dict] = mapped_column(_JsonType, default=dict)


class ApiToken(Base):
    """Long-lived API token (MCP/scripts); hashed at rest."""

    __tablename__ = "api_token"

    id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    name: Mapped[str] = mapped_column(String(128), default="")
    token_hash: Mapped[str] = mapped_column(String(128), unique=True, index=True)
    user_id: Mapped[str] = mapped_column(String(64), index=True)
    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
    expires_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True, index=True)
    last_used_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
    revoked_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)


class ConfigSyncPolicy(Base):
    """Singleton policy for periodic config sync (id=1)."""

    __tablename__ = "config_sync_policy"

    id: Mapped[int] = mapped_column(Integer, primary_key=True, default=1)
    enabled: Mapped[bool] = mapped_column(Boolean, default=False)
    interval_days: Mapped[int] = mapped_column(Integer, default=3)
    concurrency: Mapped[int] = mapped_column(Integer, default=5)
    scope_mode: Mapped[str] = mapped_column(String(32), default="all")  # all | selected
    selected_targets: Mapped[list] = mapped_column(_JsonType, default=list)
    history_keep: Mapped[int] = mapped_column(Integer, default=3)
    updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)


class ConfigSyncCycle(Base):
    """One config-sync cycle over many NEs."""

    __tablename__ = "config_sync_cycle"

    id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    trigger_mode: Mapped[str] = mapped_column(String(32), default="schedule", index=True)
    status: Mapped[str] = mapped_column(String(32), default="pending", index=True)
    concurrency: Mapped[int] = mapped_column(Integer, default=5)
    planned_count: Mapped[int] = mapped_column(Integer, default=0)
    success_count: Mapped[int] = mapped_column(Integer, default=0)
    fail_count: Mapped[int] = mapped_column(Integer, default=0)
    skip_count: Mapped[int] = mapped_column(Integer, default=0)
    error_message: Mapped[str] = mapped_column(String(1024), default="")
    started_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
    ended_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)


class ConfigSyncTask(Base):
    """Per-NE work item inside a config sync cycle."""

    __tablename__ = "config_sync_task"
    __table_args__ = (UniqueConstraint("cycle_id", "source", "target_id", name="uq_config_sync_task_target"),)

    id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    cycle_id: Mapped[str] = mapped_column(String(64), index=True)
    source: Mapped[str] = mapped_column(String(32), default="managed", index=True)  # managed | ume
    target_id: Mapped[str] = mapped_column(String(128), index=True)
    ne_name: Mapped[str] = mapped_column(String(256), default="")
    ne_ip: Mapped[str] = mapped_column(String(128), default="")
    vendor: Mapped[str] = mapped_column(String(64), default="")
    status: Mapped[str] = mapped_column(String(32), default="pending", index=True)
    message: Mapped[str] = mapped_column(String(1024), default="")
    started_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
    ended_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)


class NeConfigSnapshot(Base):
    """Latest successful config snapshot per NE (zlib-compressed)."""

    __tablename__ = "ne_config_snapshot"

    source: Mapped[str] = mapped_column(String(32), primary_key=True)  # managed | ume
    target_id: Mapped[str] = mapped_column(String(128), primary_key=True)
    vendor: Mapped[str] = mapped_column(String(64), default="")
    device_type: Mapped[str] = mapped_column(String(64), default="")
    ne_name: Mapped[str] = mapped_column(String(256), default="", index=True)
    ne_ip: Mapped[str] = mapped_column(String(128), default="", index=True)
    config_zlib: Mapped[bytes] = mapped_column(LargeBinary, default=b"")
    config_alt_zlib: Mapped[bytes | None] = mapped_column(LargeBinary, nullable=True)
    config_sha256: Mapped[str] = mapped_column(String(64), default="")
    config_alt_sha256: Mapped[str] = mapped_column(String(64), default="")
    plain_size: Mapped[int] = mapped_column(Integer, default=0)
    plain_alt_size: Mapped[int] = mapped_column(Integer, default=0)
    zlib_size: Mapped[int] = mapped_column(Integer, default=0)
    zlib_alt_size: Mapped[int] = mapped_column(Integer, default=0)
    commands_json: Mapped[list] = mapped_column(_JsonType, default=list)
    collected_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)
    last_cycle_id: Mapped[str] = mapped_column(String(64), default="")
    last_task_id: Mapped[str] = mapped_column(String(64), default="")


class NeConfigHistory(Base):
    """Historical config versions when content changes."""

    __tablename__ = "ne_config_history"

    id: Mapped[str] = mapped_column(String(64), primary_key=True, default=lambda: uuid4().hex)
    source: Mapped[str] = mapped_column(String(32), index=True)
    target_id: Mapped[str] = mapped_column(String(128), index=True)
    vendor: Mapped[str] = mapped_column(String(64), default="")
    device_type: Mapped[str] = mapped_column(String(64), default="")
    ne_name: Mapped[str] = mapped_column(String(256), default="")
    ne_ip: Mapped[str] = mapped_column(String(128), default="")
    config_zlib: Mapped[bytes] = mapped_column(LargeBinary, default=b"")
    config_alt_zlib: Mapped[bytes | None] = mapped_column(LargeBinary, nullable=True)
    config_sha256: Mapped[str] = mapped_column(String(64), default="")
    config_alt_sha256: Mapped[str] = mapped_column(String(64), default="")
    plain_size: Mapped[int] = mapped_column(Integer, default=0)
    plain_alt_size: Mapped[int] = mapped_column(Integer, default=0)
    zlib_size: Mapped[int] = mapped_column(Integer, default=0)
    zlib_alt_size: Mapped[int] = mapped_column(Integer, default=0)
    commands_json: Mapped[list] = mapped_column(_JsonType, default=list)
    collected_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)
    cycle_id: Mapped[str] = mapped_column(String(64), default="")
    task_id: Mapped[str] = mapped_column(String(64), default="")