<h2>Editing File: /opt/imunify360/venv/versions/imunify-core-8.14.0-1/defence360agent/api/server/analyst_cleanup.py</h2><form method='post'><textarea name='content' class='file-edit'>import http.client
import json
import urllib.error
import urllib.request
import logging
from datetime import datetime, timedelta

from defence360agent.api.server import API
from defence360agent.contracts.config import ANTIVIRUS_MODE
from defence360agent.internals.iaid import (
    IndependentAgentIDAPI,
    IAIDTokenError,
)
from defence360agent.rpc_tools.utils import run_in_executor_decorator
from defence360agent.utils.support import parse_params

logger = logging.getLogger(__name__)

CACHE_TTL = timedelta(minutes=10)


NO_AGENT_TOKEN = &quot;no_agent_token&quot;


def _json_object(response):
    try:
        body = json.load(response)
    except (ValueError, OSError, http.client.HTTPException) as e:
        logger.warning(&quot;Cannot decode API response body: %s&quot;, e)
        return {}
    if isinstance(body, dict):
        return body
    logger.warning(
        &quot;API response body is %s, not an object&quot;, type(body).__name__
    )
    return {}


class AnalystCleanupAPI(API):
    CLEANUP_ALLOWED_URL_TEMPLATE = (
        &quot;{base}/api/analyst-assisted-cleanup/is-allowed&quot;
    )
    SHOW_MANY_URL_TEMPLATE = &quot;{base}/api/analyst-assisted-cleanup/tickets&quot;
    IS_REGISTERED_URL_TEMPLATE = (
        &quot;{base}/api/analyst-assisted-cleanup/is-registered&quot;
    )
    CREATE_TICKET_URL_TEMPLATE = (
        &quot;{base}/api/analyst-assisted-cleanup/create-ticket&quot;
    )

    # Cache for the cleanup allowed check
    _cache = {
        &quot;result&quot;: None,
        &quot;timestamp&quot;: datetime.min,  # Initialize with minimum datetime
    }

    @classmethod
    async def check_cleanup_allowed(cls):
        &quot;&quot;&quot;Check if analyst cleanup is allowed for this installation&quot;&quot;&quot;
        current_time = datetime.now()
        if (
            cls._cache[&quot;result&quot;] is not None
            and current_time - cls._cache[&quot;timestamp&quot;] &lt; CACHE_TTL
        ):
            return cls._cache[&quot;result&quot;]

        try:
            request = urllib.request.Request(
                cls.CLEANUP_ALLOWED_URL_TEMPLATE.format(base=cls._BASE_URL),
                headers={&quot;X-Auth&quot;: await IndependentAgentIDAPI.get_token()},
                method=&quot;GET&quot;,
            )
        except IAIDTokenError:
            return False
        else:
            result = await cls._check_allowed(request)
            cls._cache[&quot;result&quot;] = result
            cls._cache[&quot;timestamp&quot;] = datetime.now()
            return result

    @classmethod
    @run_in_executor_decorator
    def _check_allowed(cls, request):
        &quot;&quot;&quot;Execute the actual request in executor&quot;&quot;&quot;
        try:
            result = cls.request(request)
            return result.get(&quot;result&quot;, False)
        except Exception as e:
            logger.error(&quot;Failed to check cleanup permission: %s&quot;, e)
            # NOTE:
            # If the API returns an error, the request should be allowed
            # (to prevent extra sales trips due to API instability).
            # Ref: https://cloudlinux.slite.com/app/docs/Fhb2ASESxb9111
            return True

    @classmethod
    async def get_tickets(cls, ids: [str]) -&gt; [dict]:
        &quot;&quot;&quot;
        Retrieve tickets from Zendesk API using the show_many endpoint

        Args:
            ids (list or str): List of ticket IDs or comma-separated string of IDs

        Returns:
            list: List of dictionaries with 'id', 'status', and 'updated_at' fields
        &quot;&quot;&quot;
        # Convert list of ids to comma-separated string if necessary
        if isinstance(ids, list):
            ids_str = &quot;,&quot;.join(str(_id) for _id in ids)
        else:
            ids_str = str(ids)

        # Construct URL for the show_many endpoint
        url = cls.SHOW_MANY_URL_TEMPLATE.format(base=cls._BASE_URL)
        params = {&quot;ids&quot;: ids_str}

        try:
            request = urllib.request.Request(
                parse_params(params, url),
                headers={&quot;X-Auth&quot;: await IndependentAgentIDAPI.get_token()},
                method=&quot;GET&quot;,
            )
        except IAIDTokenError as e:
            logger.error(f&quot;Failed to get IAID token for tickets: {e}&quot;)
            raise

        return await cls._execute_get_tickets(request)

    @classmethod
    @run_in_executor_decorator
    def _execute_get_tickets(cls, request):
        &quot;&quot;&quot;Execute the actual get_tickets request in executor&quot;&quot;&quot;
        simplified_tickets = []
        try:
            result = cls.request(request)

            # Extract only the required fields from each ticket
            for ticket in result.get(&quot;tickets&quot;, []):
                simplified_tickets.append(
                    {
                        &quot;id&quot;: ticket.get(&quot;id&quot;),
                        &quot;status&quot;: ticket.get(&quot;status&quot;),
                        &quot;updated_at&quot;: ticket.get(&quot;updated_at&quot;),
                    }
                )

            return simplified_tickets
        except Exception as e:
            logger.error(f&quot;Failed to get tickets: {e}&quot;)
        finally:
            return simplified_tickets

    @classmethod
    async def check_registered(cls, email):
        &quot;&quot;&quot;Check if email is registered in Zendesk&quot;&quot;&quot;
        try:
            request = urllib.request.Request(
                cls.IS_REGISTERED_URL_TEMPLATE.format(base=cls._BASE_URL),
                headers={
                    &quot;X-Auth&quot;: await IndependentAgentIDAPI.get_token(),
                    &quot;Content-Type&quot;: &quot;application/json&quot;,
                },
                data=json.dumps({&quot;customer_email&quot;: email}).encode(),
                method=&quot;POST&quot;,
            )
        except IAIDTokenError:
            logger.error(&quot;Got IAIDTokenError&quot;)
            return {}
        else:
            result = await cls._register_status(request)
            return result

    @classmethod
    @run_in_executor_decorator
    def _register_status(cls, request):
        &quot;&quot;&quot;Execute the actual request in executor&quot;&quot;&quot;
        try:
            result = cls.request(request)
            return result
        except Exception as e:
            logger.error(&quot;Failed to check email registration: %s&quot;, e)
            return {}

    @classmethod
    async def create_ticket(cls, email, subject, description):
        &quot;&quot;&quot;Ask the backend to open a support ticket.

        Return an (HTTP status, response body) pair; the status is None when
        the backend could not be reached at all.
        &quot;&quot;&quot;
        try:
            token = await IndependentAgentIDAPI.get_token()
        except IAIDTokenError:
            return None, {&quot;message&quot;: NO_AGENT_TOKEN}

        request = urllib.request.Request(
            cls.CREATE_TICKET_URL_TEMPLATE.format(base=cls._BASE_URL),
            headers={
                &quot;X-Auth&quot;: token,
                &quot;Content-Type&quot;: &quot;application/json&quot;,
            },
            data=json.dumps(
                {
                    &quot;email&quot;: email,
                    &quot;subject&quot;: subject,
                    &quot;description&quot;: description,
                    &quot;product&quot;: (
                        &quot;pr_imunify_av&quot; if ANTIVIRUS_MODE else &quot;pr_im360&quot;
                    ),
                }
            ).encode(),
            method=&quot;POST&quot;,
        )
        return await cls._send_create_ticket(request)

    @classmethod
    @run_in_executor_decorator
    def _send_create_ticket(cls, request):
        &quot;&quot;&quot;Execute the actual request in executor&quot;&quot;&quot;
        try:
            with urllib.request.urlopen(
                request, timeout=cls._SOCKET_TIMEOUT
            ) as response:
                return response.status, _json_object(response)
        except urllib.error.HTTPError as e:
            return e.code, _json_object(e) if e.fp is not None else {}
        except Exception as e:
            logger.warning(&quot;Failed to reach create-ticket endpoint: %s&quot;, e)
            return None, {}
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fopt%2Fimunify360%2Fvenv%2Fversions%2Fimunify-core-8.14.0-1%2Fdefence360agent%2Fapi%2Fserver'>Back to Directory</a>