'j!UdZddlZddlZddlZddlZddlZddlmZmZm Z m Z ddl m Z ddl mZddlmZddlmZmZddlmZdd lmZd d lmZd d lmZd d lmZmZmZm Z m!Z!d dl"m#Z#m$Z$m%Z%m&Z'd dl(m)Z)d dl*m+Z,d dl-m.Z.e.ej^e0Z1eeZ2edejfZ4e2e4jj_2e4jmeee4jode dde4jqe,GddeZ9ejtjwdDchc]#}|jys|jy%c}Z=e>e?e@d<deAde?d eBfd!ZCd"ed dfd#ZDd$eEd dfd%ZFe4jd&d'(e2jejd"ed)e d*e9fd+ZJe4jd,d-(d.ZLycc}w)/a FastAPI application entry point. Handles webhook ingestion from Zammad and orchestrates: 1. New-ticket guard (skip if already has replies) 2. AI-generated acknowledgment comment posted back to Zammad 3. Azure DevOps task creation under the current monthly User Story N)FastAPIRequest HTTPExceptionBackgroundTasks) StaticFiles) BaseModel)Any)Limiter_rate_limit_exceeded_handler)get_remote_address)RateLimitExceeded)settings)ensure_and_create) post_comment get_ticketget_ticket_articlesget_customer_nameget_agent_name)generate_acknowledgmentclassify_activity suggest_tags _has_providerpublish)router) setup_logging)key_funczZammad Automation)titledebugz/staticz app/static) directorystatic)namec&eZdZUdZeeefed<y)WebhookPayloadz0Expected body shape from Zammad webhook trigger.ticketN)__name__ __module__ __qualname____doc__dictstrr __annotations__+/var/www/html/zammad-automation/app/main.pyr%r%(s: cNr/r%, _allowed_ipsbody sig_headerreturnctjsydtjtjj |t j jz}tj||S)zValidate HMAC-SHA1 signature sent by Zammad (X-Hub-Signature header). Returns True unconditionally when WEBHOOK_SECRET is not set.Tzsha1=) rwebhook_secrethmacnewencodehashlibsha1 hexdigestcompare_digest)r3r4expecteds r0_verify_signaturer@3s[  " "&&($ ikH   x 44r/requestcRtsy|jjddjd}|dj r|dj n#|j r|j j nd}|tvr#tjd|tdd y) zBlock request if client IP is not in WEBHOOK_ALLOWED_IPS. Reads X-Forwarded-For first (set by Traefik/nginx) to get real client IP.NzX-Forwarded-Forr1rz'Webhook blocked: IP %s not in allowlisti Forbidden status_codedetail) r2headersgetsplitstripclienthostlogwarningr)rA forwarded client_ips r0 _verify_iprR>s ##$5r:@@EI(1! (:(:(< ! ""$ZaZhZh7>>CVCVnpI $ =yIK@@%r/ ticket_idc pKgd;dtdtdtddffd } t|d{}t|d|jd dtj d |t |jd d d{}td{}ifd tffd }d} t|d{}|r|d jddnd}|ddt|dkDrAtjdt||ddt|d|ddiy|dddtr^ t!|||d{}|j#dd} t%|| d{tjd|d dd!n |d dd$tj&s+tjd%|d&dd'|dd(iyt)j*t-|t/|d{\} } tjd)| | t1|| | *d{} | d+r,tjd,| d-|d&dd.| d-d/n+tjd0| d-|d&dd.| d-d1|| d+rd+nd2| d-| d3d4y77E767#t$r-tjd|ddd|ddiYywxYw77#t$r7} tjd"|d dt| dd#Yd} ~ d} ~ wwxYw7=7 #t$rItjd5|j3d6dd7d8t5d9t|dddd:YywxYww)1 article (already processed / updated) 3. Send AI-generated acknowledgment comment to Zammad 4. Create Azure DevOps task under current monthly User Story (if enabled) All steps emit SSE progress events visible in the web UI. rClabelokrGr5Nc0j|||dy)NrUrVrG)append)rUrVrGstepss r0_stepz_process_ticket.._stepWs uB&ABr/numberrz/#ticket/zoom/ customer_idrextrac,tdd|y)Nprogress)type ticket_number ticket_title ticket_urlrZr)r^r\rZrdrs r0_publish_progressz*_process_ticket.._publish_progressbs$ Z&%**#.',. /r/r3zFetch ticket articlesTu'Ticket #%s → failed to fetch articlesFzCould not retrieve articlesstatuserrorru?Ticket #%s → %d articles found, not a new ticket — skippingzNew ticket checku, articles exist — ticket already processedskippeduOnly 1 article — new ticket z
u%Ticket #%s → AI acknowledgment sentzAI acknowledgmentzSent to Zammadu'Ticket #%s → AI acknowledgment failedPu!Skipped — no API key configuredu(Ticket #%s → DevOps disabled, skippingz DevOps taskzDisabled (DEVOPS_ENABLED=false)doneu&Ticket #%s → activity='%s' tags='%s')rSrbrcrdactivitytagscreateduTicket #%s → task %s createdtask_idzTask #z createdu&Ticket #%s → task %s already existedz already existsexiststask_url)rfrorqzFailed to process ticket %s ProcessinguUnexpected error — check logsrXr`)rarbrcrdrZrf)rC)r,boolrrIr zammad_urlrrr+r ExceptionrN exceptionleninfo ai_enabledrreplacerdevops_enabledasynciogatherrrrrYr)rSr[r& customer_name agent_namere body_htmlarticlesackack_htmlerlrmresultr\rZrdrs @@@@r0_process_ticketrJsECSCdCCCCY[!),,VH%& 7B' ++,N9+F / =!0LMM )++ ,. /T / /   0;;H7? 3RI )4 0 x=1  HHVX^`cdl`m n $eH >j-k l x3 4   $(GH < ?3E9mU_``;;tV4"9h777@&I)41AB %u.Q R&& HH? H -(I J x0 1  '~~ eY /  *  $ 968TR( !    )  HH5vvi?P Q -y0A/B('K L HH=vviGX Y -& 1B0C?(S T#))#4i(i(z*  ]-N+<  MMCV L )52O P x1 2   &a7 ? GP)5#a&"+>> ?  , [ 3Y? |5Defgc)n!#2QXZ [[s!N6M!K AM! K M!KM!6KK&K+AM!9N6:M!L L!%LL$L+AM!0N61-M!M3M!MA9M! N6 M!M!M!K3L M! N6LM!LL M!,M M!MM!M!!AN30N62N33N6z/webhook/ticket-createdzZammad webhook receiver)summarybackground_taskspayloadc"Kt||jd{}tjrOtjdt |j tjd|jd|j jdd}t||s tdd |jjd }|s td d td|d|jt|d|dS7w)zpReceive ticket-created webhook from Zammad. Validates IP, HMAC signature, then queues background processing.NzWebhook headers: %szWebhook body: %srz)errorszX-Hub-SignaturerCizInvalid signaturerEidizNo ticket.id in payloadreceived)rarSaccepted)rfrS)rRr3rr rNr+rHdecoderIr@rr&radd_taskr)rArrr3sigrSs r0ticket_createdrs w D~~ 'goo)>? $dkkk&CD //  / 4C T3 '4GHH""4(I 4MNN Zi 89oy9 y 99! sDD C,Dz/healthz Health checkcKddiSw)z8Simple liveness probe for load balancers and monitoring.rfrVr.r.r/r0healthrs d s)Mr*r|r;r8jsonloggingfastapirrrrfastapi.staticfilesrpydanticrtypingr slowapir r slowapi.utilr slowapi.errorsr configrdevopsrzammadrrrrrairrrrry broadcasterrwebr web_routerlogging_configr getLoggerr'rNlimiterr appstateadd_exception_handlermountinclude_routerr%webhook_allowed_ipsrJrKr2setr,r-bytesrsr@rRintrpostlimitwebhook_rate_limitrrIr)ips0r0rs DD+9+,%ddee %) g! - . 'x~~> +-IJ )[<8x H:Y"55;;C@BHHJBHHJ c#h 5E5s5t5 A AD Ai[Si[Ti[X #-FGx**+:':_:We:,H:0N+,Gs /GG