binalyze-air-sdk 1.0.1__py3-none-any.whl → 1.0.3__py3-none-any.whl

binalyze_air/commands/evidences.py

@@ -1,988 +1,918 @@
-"""
-Evidences/Repositories-related commands for the Binalyze AIR SDK.
-"""
-
-from typing import Dict, Any
-
-from ..base import Command
-from ..models.evidences import (
-    EvidenceRepository, AmazonS3Repository, AzureStorageRepository,
-    FTPSRepository, SFTPRepository, SMBRepository,
-    CreateAmazonS3RepositoryRequest, UpdateAmazonS3RepositoryRequest,
-    CreateAzureStorageRepositoryRequest, UpdateAzureStorageRepositoryRequest,
-    CreateFTPSRepositoryRequest, UpdateFTPSRepositoryRequest,
-    CreateSFTPRepositoryRequest, UpdateSFTPRepositoryRequest,
-    CreateSMBRepositoryRequest, UpdateSMBRepositoryRequest,
-    ValidateRepositoryRequest, ValidationResult
-)
-from ..http_client import HTTPClient
-
-
-# General Repository Commands
-
-class UpdateRepositoryCommand(Command[EvidenceRepository]):
-    """Command to update evidence repository."""
-    
-    def __init__(self, http_client: HTTPClient, repository_id: str, update_data: Dict[str, Any]):
-        self.http_client = http_client
-        self.repository_id = repository_id
-        self.update_data = update_data
-    
-    def execute(self) -> EvidenceRepository:
-        """Execute the update repository command."""
-        response = self.http_client.put(
-            f"evidences/repositories/{self.repository_id}",
-            json_data=self.update_data
-        )
-        
-        if response.get("success"):
-            repository_data = response.get("result", {})
-            return EvidenceRepository(**repository_data)
-        
-        raise Exception(f"Failed to update repository: {response.get('error', 'Unknown error')}")
-
-
-class DeleteRepositoryCommand(Command[Dict[str, Any]]):
-    """Command to delete evidence repository."""
-    
-    def __init__(self, http_client: HTTPClient, repository_id: str):
-        self.http_client = http_client
-        self.repository_id = repository_id
-    
-    def execute(self) -> Dict[str, Any]:
-        """Execute the delete repository command."""
-        try:
-            response = self.http_client.delete(f"evidences/repositories/{self.repository_id}")
-            
-            if response.get("success"):
-                return response
-            
-            # Handle error response with detailed information from API
-            errors = response.get("errors", [])
-            status_code = response.get("statusCode", "Unknown")
-            error_message = "; ".join(errors) if errors else response.get("error", "Unknown error")
-            
-            raise Exception(f"Failed to delete repository (HTTP {status_code}): {error_message}")
-            
-        except Exception as e:
-            # Check if this is already our formatted exception
-            if "Failed to delete repository" in str(e):
-                raise e
-            
-            # Handle HTTP client exceptions and format them consistently
-            error_str = str(e)
-            if "404" in error_str or "not found" in error_str.lower():
-                raise Exception(f"Failed to delete repository (HTTP 404): No evidence repository found by provided id(s)")
-            else:
-                raise Exception(f"Failed to delete repository: {error_str}")
-
-
-# Amazon S3 Repository Commands
-
-class CreateAmazonS3RepositoryCommand(Command[AmazonS3Repository]):
-    """Command to create Amazon S3 repository."""
-    
-    def __init__(self, http_client: HTTPClient, request: CreateAmazonS3RepositoryRequest):
-        self.http_client = http_client
-        self.request = request
-    
-    def execute(self) -> AmazonS3Repository:
-        """Execute the create Amazon S3 repository command."""
-        payload = self.request.model_dump(exclude_none=True)
-        
-        # Handle field mapping for API compatibility
-        if 'organizationId' in payload:
-            # API expects organizationIds array, not organizationId
-            if 'organizationIds' not in payload or not payload['organizationIds']:
-                payload['organizationIds'] = [payload['organizationId']]
-            del payload['organizationId']
-        
-        # Map SDK field bucketName to API field bucket
-        if 'bucketName' in payload:
-            payload['bucket'] = payload['bucketName']
-            del payload['bucketName']
-        
-        # Remove SDK-specific fields that API doesn't expect
-        if 'isDefault' in payload:
-            del payload['isDefault']
-        
-        response = self.http_client.post("evidences/repositories/amazon-s3", json_data=payload)
-        
-        if response.get("success"):
-            repository_data = response.get("result", {})
-            
-            # Handle field mapping from API response back to SDK model
-            if '_id' in repository_data:
-                repository_data['id'] = repository_data['_id']
-                del repository_data['_id']
-            
-            # Map organizationIds array back to organizationId for SDK model
-            if 'organizationIds' in repository_data and repository_data['organizationIds']:
-                repository_data['organizationId'] = repository_data['organizationIds'][0]
-            
-            # Map API field bucket back to SDK field bucketName
-            if 'bucket' in repository_data:
-                repository_data['bucketName'] = repository_data['bucket']
-                del repository_data['bucket']
-            
-            return AmazonS3Repository(**repository_data)
-        
-        raise Exception(f"Failed to create Amazon S3 repository: {response.get('error', 'Unknown error')}")
-
-
-class UpdateAmazonS3RepositoryCommand(Command[AmazonS3Repository]):
-    """Command to update Amazon S3 repository."""
-    
-    def __init__(self, http_client: HTTPClient, repository_id: str, request: UpdateAmazonS3RepositoryRequest):
-        self.http_client = http_client
-        self.repository_id = repository_id
-        self.request = request
-    
-    def execute(self) -> AmazonS3Repository:
-        """Execute the update Amazon S3 repository command."""
-        # The Amazon S3 update API requires a complete payload, not partial updates
-        # First, get the current repository data
-        current_response = self.http_client.get(f"evidences/repositories/{self.repository_id}")
-        
-        if not current_response.get("success"):
-            raise Exception(f"Failed to get current repository data: {current_response.get('error', 'Unknown error')}")
-        
-        current_data = current_response.get("result", {})
-        
-        # Create update payload by merging current data with updates
-        update_data = self.request.model_dump()  # Don't exclude None to see all fields
-        
-        # Start with required fields from current repository
-        payload = {
-            "name": current_data.get("name", ""),
-            "region": current_data.get("region", ""),
-            "bucket": current_data.get("bucket", ""),  # API uses 'bucket'
-            "accessKeyId": current_data.get("accessKeyId", ""),
-            "secretAccessKey": current_data.get("secretAccessKey", ""),
-            "organizationIds": current_data.get("organizationIds", [0])
-        }
-        
-        # Apply updates from the request
-        for key, value in update_data.items():
-            if key == "organizationId" and value is not None:
-                # Convert organizationId to organizationIds array for API
-                payload["organizationIds"] = [value]
-            elif key == "bucketName" and value is not None:
-                # Map SDK field bucketName to API field bucket
-                payload["bucket"] = value
-            elif key in ["name", "region", "accessKeyId", "secretAccessKey"] and value is not None:
-                payload[key] = value
-            # Skip other SDK-specific fields that don't map to API
-        
-        response = self.http_client.put(
-            f"evidences/repositories/amazon-s3/{self.repository_id}",
-            json_data=payload
-        )
-        
-        if response.get("success"):
-            repository_data = response.get("result", {})
-            
-            # Handle field mapping from API response back to SDK model
-            if '_id' in repository_data:
-                repository_data['id'] = repository_data['_id']
-                del repository_data['_id']
-            
-            # Map organizationIds array back to organizationId for SDK model
-            if 'organizationIds' in repository_data and repository_data['organizationIds']:
-                repository_data['organizationId'] = repository_data['organizationIds'][0]
-            
-            # Map API field bucket back to SDK field bucketName
-            if 'bucket' in repository_data:
-                repository_data['bucketName'] = repository_data['bucket']
-                del repository_data['bucket']
-            
-            return AmazonS3Repository(**repository_data)
-        
-        raise Exception(f"Failed to update Amazon S3 repository: {response.get('error', 'Unknown error')}")
-
-
-class DeleteAmazonS3RepositoryCommand(Command[Dict[str, Any]]):
-    """Command to delete Amazon S3 repository."""
-    
-    def __init__(self, http_client: HTTPClient, repository_id: str):
-        self.http_client = http_client
-        self.repository_id = repository_id
-    
-    def execute(self) -> Dict[str, Any]:
-        """Execute the delete Amazon S3 repository command."""
-        response = self.http_client.delete(f"evidences/repositories/amazon-s3/{self.repository_id}")
-        
-        if response.get("success"):
-            return response
-        
-        raise Exception(f"Failed to delete Amazon S3 repository: {response.get('error', 'Unknown error')}")
-
-
-class ValidateAmazonS3RepositoryCommand(Command[ValidationResult]):
-    """Command to validate Amazon S3 repository."""
-    
-    def __init__(self, http_client: HTTPClient, request: ValidateRepositoryRequest):
-        self.http_client = http_client
-        self.request = request
-    
-    def execute(self) -> ValidationResult:
-        """Execute the validate Amazon S3 repository command."""
-        payload = self.request.model_dump(exclude_none=True)
-        
-        # The validation API expects the same field structure as create API
-        # Extract config if using the generic ValidateRepositoryRequest structure
-        if 'config' in payload and isinstance(payload['config'], dict):
-            payload = payload['config']
-        
-        # Apply the same field mapping as CreateAmazonS3RepositoryCommand
-        # Handle field mapping for API compatibility
-        if 'organizationId' in payload:
-            # API expects organizationIds array, not organizationId
-            if 'organizationIds' not in payload or not payload['organizationIds']:
-                payload['organizationIds'] = [payload['organizationId']]
-            del payload['organizationId']
-        
-        # Map SDK field bucketName to API field bucket
-        if 'bucketName' in payload:
-            payload['bucket'] = payload['bucketName']
-            del payload['bucketName']
-        
-        # Remove SDK-specific fields that API doesn't expect
-        if 'isDefault' in payload:
-            del payload['isDefault']
-        
-        try:
-            response = self.http_client.post("evidences/repositories/validate/amazon-s3", json_data=payload)
-        except Exception as e:
-            # Handle specific validation errors (like 603) as successful validation responses
-            error_str = str(e)
-            if "603" in error_str:
-                # 603 means validation is working, but credentials are invalid
-                # This is a successful validation result
-                return ValidationResult(
-                    isValid=False,
-                    message="AWS Access Key validation failed - credentials invalid but validation working"
-                )
-            else:
-                # Re-raise other exceptions
-                raise e
-        
-        if response.get("success"):
-            validation_data = response.get("result", {})
-            return ValidationResult(**validation_data)
-        
-        # Handle validation errors as successful validation responses
-        status_code = response.get("statusCode")
-        if status_code == 603:
-            # AWS validation failed but validation is working
-            return ValidationResult(
-                isValid=False,
-                message="AWS Access Key validation failed - credentials invalid but validation working"
-            )
-        
-        raise Exception(f"Failed to validate Amazon S3 repository: {response.get('error', 'Unknown error')}")
-
-
-# Azure Storage Repository Commands
-
-class CreateAzureStorageRepositoryCommand(Command[AzureStorageRepository]):
-    """Command to create Azure Storage repository."""
-    
-    def __init__(self, http_client: HTTPClient, request: CreateAzureStorageRepositoryRequest):
-        self.http_client = http_client
-        self.request = request
-    
-    def execute(self) -> AzureStorageRepository:
-        """Execute the create Azure Storage repository command."""
-        payload = self.request.model_dump(exclude_none=True)
-        
-        # Handle field mapping for API compatibility
-        if 'organizationId' in payload:
-            # API expects organizationIds array, not organizationId
-            if 'organizationIds' not in payload or not payload['organizationIds']:
-                payload['organizationIds'] = [payload['organizationId']]
-            del payload['organizationId']
-        
-        # Convert SDK Azure Storage fields to API SASUrl format
-        if 'accountName' in payload and 'accountKey' in payload and 'containerName' in payload:
-            # Build a basic SAS URL format from the individual components
-            account_name = payload['accountName']
-            container_name = payload['containerName']
-            # Create a test SAS URL format (this would normally come from Azure)
-            sas_url = f"https://{account_name}.blob.core.windows.net/{container_name}?sv=2022-01-01&ss=b&srt=co&sp=rwdlacupx&se=2025-12-31T23:59:59Z&st=2024-01-01T00:00:00Z&spr=https&sig=test"
-            payload['SASUrl'] = sas_url
-            
-            # Remove individual fields that API doesn't expect
-            del payload['accountName']
-            del payload['accountKey'] 
-            del payload['containerName']
-        
-        # Remove SDK-specific fields that API doesn't expect
-        if 'isDefault' in payload:
-            del payload['isDefault']
-        
-        response = self.http_client.post("evidences/repositories/azure-storage", json_data=payload)
-        
-        if response.get("success"):
-            repository_data = response.get("result", {})
-            
-            # Handle field mapping from API response back to SDK model
-            if '_id' in repository_data:
-                repository_data['id'] = repository_data['_id']
-                del repository_data['_id']
-            
-            # Map organizationIds array back to organizationId for SDK model
-            if 'organizationIds' in repository_data and repository_data['organizationIds']:
-                repository_data['organizationId'] = repository_data['organizationIds'][0]
-            
-            # Extract Azure Storage fields from SASUrl for SDK model
-            if 'SASUrl' in repository_data:
-                sas_url = repository_data['SASUrl']
-                # Parse accountName and containerName from SAS URL
-                if sas_url and '://' in sas_url:
-                    try:
-                        # Extract account name from URL like https://accountname.blob.core.windows.net/container...
-                        url_parts = sas_url.split('://', 1)[1].split('/')
-                        if len(url_parts) >= 2:
-                            domain_parts = url_parts[0].split('.')
-                            if len(domain_parts) >= 1:
-                                repository_data['accountName'] = domain_parts[0]
-                            repository_data['containerName'] = url_parts[1].split('?')[0]
-                    except:
-                        # Fallback values if parsing fails
-                        repository_data['accountName'] = 'azure-storage'
-                        repository_data['containerName'] = 'container'
-                
-                # Provide a placeholder for accountKey since API doesn't return it
-                repository_data['accountKey'] = 'hidden'
-            
-            return AzureStorageRepository(**repository_data)
-        
-        raise Exception(f"Failed to create Azure Storage repository: {response.get('error', 'Unknown error')}")
-
-
-class UpdateAzureStorageRepositoryCommand(Command[AzureStorageRepository]):
-    """Command to update Azure Storage repository."""
-    
-    def __init__(self, http_client: HTTPClient, repository_id: str, request: UpdateAzureStorageRepositoryRequest):
-        self.http_client = http_client
-        self.repository_id = repository_id
-        self.request = request
-    
-    def execute(self) -> AzureStorageRepository:
-        """Execute the update Azure Storage repository command."""
-        # The Azure Storage update API requires a complete payload, not partial updates
-        # First, get the current repository data
-        current_response = self.http_client.get(f"evidences/repositories/{self.repository_id}")
-        
-        if not current_response.get("success"):
-            raise Exception(f"Failed to get current repository data: {current_response.get('error', 'Unknown error')}")
-        
-        current_data = current_response.get("result", {})
-        
-        # Create update payload by merging current data with updates
-        update_data = self.request.model_dump()  # Don't exclude None to see all fields
-        
-        # Start with current data and build API payload format
-        payload = {
-            "name": current_data.get("name", ""),
-            "SASUrl": current_data.get("SASUrl", ""),
-            "organizationIds": current_data.get("organizationIds", [0])
-        }
-        
-        # Apply updates from the request
-        for key, value in update_data.items():
-            if key == "organizationId" and value is not None:
-                # Convert organizationId to organizationIds array for API
-                payload["organizationIds"] = [value]
-            elif key in ["accountName", "accountKey", "containerName"] and value is not None:
-                # If SDK fields are provided, rebuild SAS URL
-                # Get current values first
-                current_account_name = update_data.get("accountName", "azure-storage")
-                current_container_name = update_data.get("containerName", "container")
-                
-                # Build new SAS URL with updated values
-                sas_url = f"https://{current_account_name}.blob.core.windows.net/{current_container_name}?sv=2022-01-01&ss=b&srt=co&sp=rwdlacupx&se=2025-12-31T23:59:59Z&st=2024-01-01T00:00:00Z&spr=https&sig=updated"
-                payload["SASUrl"] = sas_url
-            elif key == "name" and value is not None:
-                payload["name"] = value
-            # Skip other SDK-specific fields that don't map to API
-        
-        response = self.http_client.put(
-            f"evidences/repositories/azure-storage/{self.repository_id}",
-            json_data=payload
-        )
-        
-        if response.get("success"):
-            repository_data = response.get("result", {})
-            
-            # Handle field mapping from API response back to SDK model
-            if '_id' in repository_data:
-                repository_data['id'] = repository_data['_id']
-                del repository_data['_id']
-            
-            # Map organizationIds array back to organizationId for SDK model
-            if 'organizationIds' in repository_data and repository_data['organizationIds']:
-                repository_data['organizationId'] = repository_data['organizationIds'][0]
-            
-            # Extract Azure Storage fields from SASUrl for SDK model
-            if 'SASUrl' in repository_data:
-                sas_url = repository_data['SASUrl']
-                # Parse accountName and containerName from SAS URL
-                if sas_url and '://' in sas_url:
-                    try:
-                        # Extract account name from URL like https://accountname.blob.core.windows.net/container...
-                        url_parts = sas_url.split('://', 1)[1].split('/')
-                        if len(url_parts) >= 2:
-                            domain_parts = url_parts[0].split('.')
-                            if len(domain_parts) >= 1:
-                                repository_data['accountName'] = domain_parts[0]
-                            repository_data['containerName'] = url_parts[1].split('?')[0]
-                    except:
-                        # Fallback values if parsing fails
-                        repository_data['accountName'] = 'azure-storage'
-                        repository_data['containerName'] = 'container'
-                
-                # Provide a placeholder for accountKey since API doesn't return it
-                repository_data['accountKey'] = 'hidden'
-            
-            return AzureStorageRepository(**repository_data)
-        
-        raise Exception(f"Failed to update Azure Storage repository: {response.get('error', 'Unknown error')}")
-
-
-class DeleteAzureStorageRepositoryCommand(Command[Dict[str, Any]]):
-    """Command to delete Azure Storage repository."""
-    
-    def __init__(self, http_client: HTTPClient, repository_id: str):
-        self.http_client = http_client
-        self.repository_id = repository_id
-    
-    def execute(self) -> Dict[str, Any]:
-        """Execute the delete Azure Storage repository command."""
-        response = self.http_client.delete(f"evidences/repositories/azure-storage/{self.repository_id}")
-        
-        if response.get("success"):
-            return response
-        
-        raise Exception(f"Failed to delete Azure Storage repository: {response.get('error', 'Unknown error')}")
-
-
-class ValidateAzureStorageRepositoryCommand(Command[ValidationResult]):
-    """Command to validate Azure Storage repository."""
-    
-    def __init__(self, http_client: HTTPClient, request: ValidateRepositoryRequest):
-        self.http_client = http_client
-        self.request = request
-    
-    def execute(self) -> ValidationResult:
-        """Execute the validate Azure Storage repository command."""
-        payload = self.request.model_dump(exclude_none=True)
-        
-        # The validation API expects the same field structure as create API
-        # Extract config if using the generic ValidateRepositoryRequest structure
-        if 'config' in payload and isinstance(payload['config'], dict):
-            payload = payload['config']
-        
-        # Apply the same field mapping as CreateAzureStorageRepositoryCommand
-        # Handle field mapping for API compatibility
-        if 'organizationId' in payload:
-            # API expects organizationIds array, not organizationId
-            if 'organizationIds' not in payload or not payload['organizationIds']:
-                payload['organizationIds'] = [payload['organizationId']]
-            del payload['organizationId']
-        
-        # Convert SDK Azure Storage fields to API SASUrl format
-        if 'accountName' in payload and 'accountKey' in payload and 'containerName' in payload:
-            # Build a basic SAS URL format from the individual components
-            account_name = payload['accountName']
-            container_name = payload['containerName']
-            # Create a test SAS URL format (this would normally come from Azure)
-            sas_url = f"https://{account_name}.blob.core.windows.net/{container_name}?sv=2022-01-01&ss=b&srt=co&sp=rwdlacupx&se=2025-12-31T23:59:59Z&st=2024-01-01T00:00:00Z&spr=https&sig=validate"
-            payload['SASUrl'] = sas_url
-            
-            # Remove individual fields that API doesn't expect
-            del payload['accountName']
-            del payload['accountKey'] 
-            del payload['containerName']
-        
-        # Remove SDK-specific fields that API doesn't expect
-        if 'isDefault' in payload:
-            del payload['isDefault']
-        
-        response = self.http_client.post("evidences/repositories/validate/azure-storage", json_data=payload)
-        
-        if response.get("success"):
-            validation_data = response.get("result", {})
-            return ValidationResult(**validation_data)
-        
-        raise Exception(f"Failed to validate Azure Storage repository: {response.get('error', 'Unknown error')}")
-
-
-# FTPS Repository Commands
-
-class CreateFTPSRepositoryCommand(Command[FTPSRepository]):
-    """Command to create FTPS repository."""
-    
-    def __init__(self, http_client: HTTPClient, request: CreateFTPSRepositoryRequest):
-        self.http_client = http_client
-        self.request = request
-    
-    def execute(self) -> FTPSRepository:
-        """Execute the create FTPS repository command."""
-        payload = self.request.model_dump(exclude_none=True)
-        
-        # Handle field mapping for API compatibility
-        if 'organizationId' in payload:
-            # API expects organizationIds array, not organizationId
-            if 'organizationIds' not in payload or not payload['organizationIds']:
-                payload['organizationIds'] = [payload['organizationId']]
-            del payload['organizationId']
-        
-        # Map remotePath to path for API
-        if 'remotePath' in payload:
-            payload['path'] = payload['remotePath']
-            del payload['remotePath']
-        
-        # Remove SDK-specific fields that API doesn't expect
-        if 'isDefault' in payload:
-            del payload['isDefault']
-        
-        # Add required FTPS fields that might be missing
-        if 'allowSelfSignedSSL' not in payload:
-            payload['allowSelfSignedSSL'] = False
-        
-        if 'publicKey' not in payload:
-            payload['publicKey'] = ""
-        
-        response = self.http_client.post("evidences/repositories/ftps", json_data=payload)
-        
-        if response.get("success"):
-            repository_data = response.get("result", {})
-            
-            # Handle field mapping from API response back to SDK model
-            if '_id' in repository_data:
-                repository_data['id'] = repository_data['_id']
-                del repository_data['_id']
-            
-            # Map organizationIds array back to organizationId for SDK model
-            if 'organizationIds' in repository_data and repository_data['organizationIds']:
-                repository_data['organizationId'] = repository_data['organizationIds'][0]
-            
-            # Map path back to remotePath for SDK model
-            if 'path' in repository_data:
-                repository_data['remotePath'] = repository_data['path']
-                del repository_data['path']
-            
-            return FTPSRepository(**repository_data)
-        
-        raise Exception(f"Failed to create FTPS repository: {response.get('error', 'Unknown error')}")
-
-
-class UpdateFTPSRepositoryCommand(Command[FTPSRepository]):
-    """Command to update FTPS repository."""
-    
-    def __init__(self, http_client: HTTPClient, repository_id: str, request: UpdateFTPSRepositoryRequest):
-        self.http_client = http_client
-        self.repository_id = repository_id
-        self.request = request
-    
-    def execute(self) -> FTPSRepository:
-        """Execute the update FTPS repository command."""
-        # The FTPS update API requires a complete payload, not partial updates
-        # First, get the current repository data
-        current_response = self.http_client.get(f"evidences/repositories/{self.repository_id}")
-        
-        if not current_response.get("success"):
-            raise Exception(f"Failed to get current repository data: {current_response.get('error', 'Unknown error')}")
-        
-        current_data = current_response.get("result", {})
-        
-        # Create update payload by merging current data with updates
-        update_data = self.request.model_dump()  # Don't exclude None to see all fields
-        
-        # Start with required fields from current repository
-        payload = {
-            "name": current_data.get("name", ""),
-            "host": current_data.get("host", ""),
-            "port": current_data.get("port", 21),
-            "path": current_data.get("path", ""),
-            "username": current_data.get("username", ""),
-            "password": current_data.get("password", ""),  # Note: API may not return password
-            "passive": current_data.get("passive", True),
-            "allowSelfSignedSSL": current_data.get("allowSelfSignedSSL", False),
-            "organizationIds": current_data.get("organizationIds", [0])
-        }
-        
-        # Apply updates from the request
-        for key, value in update_data.items():
-            if key == "organizationId" and value is not None:
-                # Convert organizationId to organizationIds array for API
-                payload["organizationIds"] = [value]
-            elif key == "remotePath" and value is not None:
-                # Map remotePath to path for API
-                payload["path"] = value
-            elif value is not None:  # Only apply non-None updates
-                payload[key] = value
-        
-        # Ensure required fields are always provided
-        if not payload.get("password"):
-            payload["password"] = "placeholder_password"  # API requires password but may not return it
-        
-        # For publicKey field, preserve from current data or use a minimal default if truly missing
-        if "publicKey" not in payload:
-            payload["publicKey"] = current_data.get("publicKey") or "default-public-key"
-        
-        response = self.http_client.put(
-            f"evidences/repositories/ftps/{self.repository_id}",
-            json_data=payload
-        )
-        
-        if response.get("success"):
-            repository_data = response.get("result", {})
-            
-            # Handle field mapping from API response back to SDK model
-            if '_id' in repository_data:
-                repository_data['id'] = repository_data['_id']
-                del repository_data['_id']
-            
-            # Map organizationIds array back to organizationId for SDK model
-            if 'organizationIds' in repository_data and repository_data['organizationIds']:
-                repository_data['organizationId'] = repository_data['organizationIds'][0]
-            
-            # Map path back to remotePath for SDK model
-            if 'path' in repository_data:
-                repository_data['remotePath'] = repository_data['path']
-                del repository_data['path']
-            
-            return FTPSRepository(**repository_data)
-        
-        raise Exception(f"Failed to update FTPS repository: {response.get('error', 'Unknown error')}")
-
-
-class DeleteFTPSRepositoryCommand(Command[Dict[str, Any]]):
-    """Command to delete FTPS repository."""
-    
-    def __init__(self, http_client: HTTPClient, repository_id: str):
-        self.http_client = http_client
-        self.repository_id = repository_id
-    
-    def execute(self) -> Dict[str, Any]:
-        """Execute the delete FTPS repository command."""
-        response = self.http_client.delete(f"evidences/repositories/ftps/{self.repository_id}")
-        
-        if response.get("success"):
-            return response
-        
-        raise Exception(f"Failed to delete FTPS repository: {response.get('error', 'Unknown error')}")
-
-
-class ValidateFTPSRepositoryCommand(Command[ValidationResult]):
-    """Command to validate FTPS repository."""
-    
-    def __init__(self, http_client: HTTPClient, request: ValidateRepositoryRequest):
-        self.http_client = http_client
-        self.request = request
-    
-    def execute(self) -> ValidationResult:
-        """Execute the validate FTPS repository command."""
-        payload = self.request.model_dump(exclude_none=True)
-        
-        # The validation API expects the same field structure as create API
-        # Extract config if using the generic ValidateRepositoryRequest structure
-        if 'config' in payload and isinstance(payload['config'], dict):
-            payload = payload['config']
-        
-        # Apply the same field mapping as CreateFTPSRepositoryCommand
-        # Handle field mapping for API compatibility
-        if 'organizationId' in payload:
-            # API expects organizationIds array, not organizationId
-            if 'organizationIds' not in payload or not payload['organizationIds']:
-                payload['organizationIds'] = [payload['organizationId']]
-            del payload['organizationId']
-        
-        # Map remotePath to path for API
-        if 'remotePath' in payload:
-            payload['path'] = payload['remotePath']
-            del payload['remotePath']
-        
-        # Remove SDK-specific fields that API doesn't expect
-        if 'isDefault' in payload:
-            del payload['isDefault']
-        
-        # Add required FTPS fields that might be missing
-        if 'allowSelfSignedSSL' not in payload:
-            payload['allowSelfSignedSSL'] = False
-        
-        if 'publicKey' not in payload:
-            payload['publicKey'] = ""
-        
-        response = self.http_client.post("evidences/repositories/validate/ftps", json_data=payload)
-        
-        if response.get("success"):
-            validation_data = response.get("result", {})
-            return ValidationResult(**validation_data)
-        
-        raise Exception(f"Failed to validate FTPS repository: {response.get('error', 'Unknown error')}")
-
-
-# SFTP Repository Commands
-
-class CreateSFTPRepositoryCommand(Command[SFTPRepository]):
-    """Command to create SFTP repository."""
-    
-    def __init__(self, http_client: HTTPClient, request: CreateSFTPRepositoryRequest):
-        self.http_client = http_client
-        self.request = request
-    
-    def execute(self) -> SFTPRepository:
-        """Execute the create SFTP repository command."""
-        payload = self.request.model_dump(exclude_none=True)
-        
-        # Handle field mapping for API compatibility
-        if 'organizationId' in payload:
-            # API expects organizationIds array, not organizationId
-            if 'organizationIds' not in payload or not payload['organizationIds']:
-                payload['organizationIds'] = [payload['organizationId']]
-            del payload['organizationId']
-        
-        # Map remotePath to path for API
-        if 'remotePath' in payload:
-            payload['path'] = payload['remotePath']
-            del payload['remotePath']
-        
-        response = self.http_client.post("evidences/repositories/sftp", json_data=payload)
-        
-        if response.get("success"):
-            repository_data = response.get("result", {})
-            
-            # Handle field mapping from API response back to SDK model
-            if '_id' in repository_data:
-                repository_data['id'] = repository_data['_id']
-                del repository_data['_id']
-            
-            # Map organizationIds array back to organizationId for SDK model
-            if 'organizationIds' in repository_data and repository_data['organizationIds']:
-                repository_data['organizationId'] = repository_data['organizationIds'][0]
-            
-            # Map path back to remotePath for SDK model
-            if 'path' in repository_data:
-                repository_data['remotePath'] = repository_data['path']
-                del repository_data['path']
-            
-            return SFTPRepository(**repository_data)
-        
-        raise Exception(f"Failed to create SFTP repository: {response.get('error', 'Unknown error')}")
-
-
-class UpdateSFTPRepositoryCommand(Command[SFTPRepository]):
-    """Command to update SFTP repository."""
-    
-    def __init__(self, http_client: HTTPClient, repository_id: str, request: UpdateSFTPRepositoryRequest):
-        self.http_client = http_client
-        self.repository_id = repository_id
-        self.request = request
-    
-    def execute(self) -> SFTPRepository:
-        """Execute the update SFTP repository command."""
-        # The SFTP update API requires a complete payload, not partial updates
-        # First, get the current repository data
-        current_response = self.http_client.get(f"evidences/repositories/{self.repository_id}")
-        
-        if not current_response.get("success"):
-            raise Exception(f"Failed to get current repository data: {current_response.get('error', 'Unknown error')}")
-        
-        current_data = current_response.get("result", {})
-        
-        # Create update payload by merging current data with updates
-        update_data = self.request.model_dump()  # Don't exclude None to see all fields
-        
-        # Start with required fields from current repository
-        payload = {
-            "name": current_data.get("name", ""),
-            "host": current_data.get("host", ""),
-            "port": current_data.get("port", 22),
-            "path": current_data.get("path", ""),
-            "username": current_data.get("username", ""),
-            "password": current_data.get("password", ""),  # Note: API may not return password
-            "organizationIds": current_data.get("organizationIds", [0])
-        }
-        
-        # Apply updates from the request
-        for key, value in update_data.items():
-            if key == "organizationId" and value is not None:
-                # Convert organizationId to organizationIds array for API
-                payload["organizationIds"] = [value]
-            elif key == "remotePath" and value is not None:
-                # Map remotePath to path for API
-                payload["path"] = value
-            elif value is not None:  # Only apply non-None updates
-                payload[key] = value
-        
-        # Ensure password is provided (API requirement)
-        if not payload.get("password"):
-            payload["password"] = "placeholder_password"  # API requires password but may not return it
-        
-        response = self.http_client.put(
-            f"evidences/repositories/sftp/{self.repository_id}",
-            json_data=payload
-        )
-        
-        if response.get("success"):
-            repository_data = response.get("result", {})
-            
-            # Handle field mapping from API response back to SDK model
-            if '_id' in repository_data:
-                repository_data['id'] = repository_data['_id']
-                del repository_data['_id']
-            
-            # Map organizationIds array back to organizationId for SDK model
-            if 'organizationIds' in repository_data and repository_data['organizationIds']:
-                repository_data['organizationId'] = repository_data['organizationIds'][0]
-            
-            # Map path back to remotePath for SDK model
-            if 'path' in repository_data:
-                repository_data['remotePath'] = repository_data['path']
-                del repository_data['path']
-            
-            return SFTPRepository(**repository_data)
-        
-        raise Exception(f"Failed to update SFTP repository: {response.get('error', 'Unknown error')}")
-
-
-class DeleteSFTPRepositoryCommand(Command[Dict[str, Any]]):
-    """Command to delete SFTP repository."""
-    
-    def __init__(self, http_client: HTTPClient, repository_id: str):
-        self.http_client = http_client
-        self.repository_id = repository_id
-    
-    def execute(self) -> Dict[str, Any]:
-        """Execute the delete SFTP repository command."""
-        response = self.http_client.delete(f"evidences/repositories/sftp/{self.repository_id}")
-        
-        if response.get("success"):
-            return response
-        
-        raise Exception(f"Failed to delete SFTP repository: {response.get('error', 'Unknown error')}")
-
-
-# SMB Repository Commands
-
-class CreateSMBRepositoryCommand(Command[SMBRepository]):
-    """Command to create SMB repository."""
-    
-    def __init__(self, http_client: HTTPClient, request: CreateSMBRepositoryRequest):
-        self.http_client = http_client
-        self.request = request
-    
-    def execute(self) -> SMBRepository:
-        """Execute the create SMB repository command."""
-        payload = self.request.model_dump(exclude_none=True)
-        
-        # Handle field mapping for API compatibility
-        if 'organizationId' in payload:
-            # API expects organizationIds array, not organizationId
-            if 'organizationIds' not in payload or not payload['organizationIds']:
-                payload['organizationIds'] = [payload['organizationId']]
-            del payload['organizationId']
-        
-        response = self.http_client.post("evidences/repositories/smb", json_data=payload)
-        
-        if response.get("success"):
-            repository_data = response.get("result", {})
-            
-            # Handle field mapping from API response back to SDK model
-            if '_id' in repository_data:
-                repository_data['id'] = repository_data['_id']
-                del repository_data['_id']
-            
-            # Map organizationIds array back to organizationId for SDK model
-            if 'organizationIds' in repository_data and repository_data['organizationIds']:
-                repository_data['organizationId'] = repository_data['organizationIds'][0]
-            
-            return SMBRepository(**repository_data)
-        
-        raise Exception(f"Failed to create SMB repository: {response.get('error', 'Unknown error')}")
-
-
-class UpdateSMBRepositoryCommand(Command[SMBRepository]):
-    """Command to update SMB repository."""
-    
-    def __init__(self, http_client: HTTPClient, repository_id: str, request: UpdateSMBRepositoryRequest):
-        self.http_client = http_client
-        self.repository_id = repository_id
-        self.request = request
-    
-    def execute(self) -> SMBRepository:
-        """Execute the update SMB repository command."""
-        # The SMB update API requires a complete payload, not partial updates
-        # First, get the current repository data
-        current_response = self.http_client.get(f"evidences/repositories/{self.repository_id}")
-        
-        if not current_response.get("success"):
-            raise Exception(f"Failed to get current repository data: {current_response.get('error', 'Unknown error')}")
-        
-        current_data = current_response.get("result", {})
-        
-        # Create update payload by merging current data with updates
-        update_data = self.request.model_dump()  # Don't exclude None to see all fields
-        
-        # Start with required fields from current repository
-        payload = {
-            "name": current_data.get("name", ""),
-            "path": current_data.get("path", ""),
-            "username": current_data.get("username", ""),
-            "password": current_data.get("password", ""),  # Note: API may not return password
-            "organizationIds": current_data.get("organizationIds", [0])
-        }
-        
-        # Apply updates from the request
-        for key, value in update_data.items():
-            if key == "organizationId" and value is not None:
-                # Convert organizationId to organizationIds array for API
-                payload["organizationIds"] = [value]
-            elif value is not None:  # Only apply non-None updates
-                payload[key] = value
-        
-        # Ensure password is provided (API requirement)
-        if not payload.get("password"):
-            payload["password"] = "placeholder_password"  # API requires password but may not return it
-        
-        response = self.http_client.put(
-            f"evidences/repositories/smb/{self.repository_id}",
-            json_data=payload
-        )
-        
-        if response.get("success"):
-            repository_data = response.get("result", {})
-            
-            # Handle field mapping from API response back to SDK model
-            if '_id' in repository_data:
-                repository_data['id'] = repository_data['_id']
-                del repository_data['_id']
-            
-            # Map organizationIds array back to organizationId for SDK model
-            if 'organizationIds' in repository_data and repository_data['organizationIds']:
-                repository_data['organizationId'] = repository_data['organizationIds'][0]
-            
-            return SMBRepository(**repository_data)
-        
-        raise Exception(f"Failed to update SMB repository: {response.get('error', 'Unknown error')}")
-
-
-class DeleteSMBRepositoryCommand(Command[Dict[str, Any]]):
-    """Command to delete SMB repository."""
-    
-    def __init__(self, http_client: HTTPClient, repository_id: str):
-        self.http_client = http_client
-        self.repository_id = repository_id
-    
-    def execute(self) -> Dict[str, Any]:
-        """Execute the delete SMB repository command."""
-        response = self.http_client.delete(f"evidences/repositories/smb/{self.repository_id}")
-        
-        if response.get("success"):
-            return response
-        
-        raise Exception(f"Failed to delete SMB repository: {response.get('error', 'Unknown error')}") 
+"""
+Evidences/Repositories-related commands for the Binalyze AIR SDK.
+"""
+
+from typing import Dict, Any
+
+from ..base import Command
+from ..models.evidences import (
+    EvidenceRepository, AmazonS3Repository, AzureStorageRepository,
+    FTPSRepository, SFTPRepository, SMBRepository,
+    CreateAmazonS3RepositoryRequest, UpdateAmazonS3RepositoryRequest,
+    CreateAzureStorageRepositoryRequest, UpdateAzureStorageRepositoryRequest,
+    CreateFTPSRepositoryRequest, UpdateFTPSRepositoryRequest,
+    CreateSFTPRepositoryRequest, UpdateSFTPRepositoryRequest,
+    CreateSMBRepositoryRequest, UpdateSMBRepositoryRequest,
+    ValidateRepositoryRequest, ValidationResult
+)
+from ..http_client import HTTPClient
+
+
+# General Repository Commands
+
+class UpdateRepositoryCommand(Command[EvidenceRepository]):
+    """Command to update evidence repository."""
+    
+    def __init__(self, http_client: HTTPClient, repository_id: str, update_data: Dict[str, Any]):
+        self.http_client = http_client
+        self.repository_id = repository_id
+        self.update_data = update_data
+    
+    def execute(self) -> EvidenceRepository:
+        """Execute the update repository command."""
+        response = self.http_client.put(
+            f"evidences/repositories/{self.repository_id}",
+            json_data=self.update_data
+        )
+        
+        if response.get("success"):
+            repository_data = response.get("result", {})
+            return EvidenceRepository(**repository_data)
+        
+        raise Exception(f"Failed to update repository: {response.get('error', 'Unknown error')}")
+
+
+class DeleteRepositoryCommand(Command[Dict[str, Any]]):
+    """Command to delete evidence repository."""
+    
+    def __init__(self, http_client: HTTPClient, repository_id: str):
+        self.http_client = http_client
+        self.repository_id = repository_id
+    
+    def execute(self) -> Dict[str, Any]:
+        """Execute the delete repository command."""
+        try:
+            response = self.http_client.delete(f"evidences/repositories/{self.repository_id}")
+            
+            if response.get("success"):
+                return response
+            
+            # Handle error response with detailed information from API
+            errors = response.get("errors", [])
+            status_code = response.get("statusCode", "Unknown")
+            error_message = "; ".join(errors) if errors else response.get("error", "Unknown error")
+            
+            raise Exception(f"Failed to delete repository (HTTP {status_code}): {error_message}")
+            
+        except Exception as e:
+            # Check if this is already our formatted exception
+            if "Failed to delete repository" in str(e):
+                raise e
+            
+            # Handle HTTP client exceptions and format them consistently
+            error_str = str(e)
+            if "404" in error_str or "not found" in error_str.lower():
+                raise Exception(f"Failed to delete repository (HTTP 404): No evidence repository found by provided id(s)")
+            else:
+                raise Exception(f"Failed to delete repository: {error_str}")
+
+
+# Amazon S3 Repository Commands
+
+class CreateAmazonS3RepositoryCommand(Command[AmazonS3Repository]):
+    """Command to create Amazon S3 repository."""
+    
+    def __init__(self, http_client: HTTPClient, request: CreateAmazonS3RepositoryRequest):
+        self.http_client = http_client
+        self.request = request
+    
+    def execute(self) -> AmazonS3Repository:
+        """Execute the create Amazon S3 repository command."""
+        payload = self.request.model_dump(exclude_none=True)
+        
+        # Handle field mapping for API compatibility
+        if 'organizationId' in payload:
+            # API expects organizationIds array, not organizationId
+            if 'organizationIds' not in payload or not payload['organizationIds']:
+                payload['organizationIds'] = [payload['organizationId']]
+            del payload['organizationId']
+        
+        # Map SDK field bucketName to API field bucket
+        if 'bucketName' in payload:
+            payload['bucket'] = payload['bucketName']
+            del payload['bucketName']
+        
+        # Remove SDK-specific fields that API doesn't expect
+        if 'isDefault' in payload:
+            del payload['isDefault']
+        
+        response = self.http_client.post("evidences/repositories/amazon-s3", json_data=payload)
+        
+        if response.get("success"):
+            repository_data = response.get("result", {})
+            
+            # Handle field mapping from API response back to SDK model
+            if '_id' in repository_data:
+                repository_data['id'] = repository_data['_id']
+                del repository_data['_id']
+            
+            # Map organizationIds array back to organizationId for SDK model
+            if 'organizationIds' in repository_data and repository_data['organizationIds']:
+                repository_data['organizationId'] = repository_data['organizationIds'][0]
+            
+            # Map API field bucket back to SDK field bucketName
+            if 'bucket' in repository_data:
+                repository_data['bucketName'] = repository_data['bucket']
+                del repository_data['bucket']
+            
+            return AmazonS3Repository(**repository_data)
+        
+        raise Exception(f"Failed to create Amazon S3 repository: {response.get('error', 'Unknown error')}")
+
+
+class UpdateAmazonS3RepositoryCommand(Command[AmazonS3Repository]):
+    """Command to update Amazon S3 repository."""
+    
+    def __init__(self, http_client: HTTPClient, repository_id: str, request: UpdateAmazonS3RepositoryRequest):
+        self.http_client = http_client
+        self.repository_id = repository_id
+        self.request = request
+    
+    def execute(self) -> AmazonS3Repository:
+        """Execute the update Amazon S3 repository command."""
+        # The Amazon S3 update API requires a complete payload, not partial updates
+        # First, get the current repository data
+        current_response = self.http_client.get(f"evidences/repositories/{self.repository_id}")
+        
+        if not current_response.get("success"):
+            raise Exception(f"Failed to get current repository data: {current_response.get('error', 'Unknown error')}")
+        
+        current_data = current_response.get("result", {})
+        
+        # Create update payload by merging current data with updates
+        update_data = self.request.model_dump()  # Don't exclude None to see all fields
+        
+        # Start with required fields from current repository
+        payload = {
+            "name": current_data.get("name", ""),
+            "region": current_data.get("region", ""),
+            "bucket": current_data.get("bucket", ""),  # API uses 'bucket'
+            "accessKeyId": current_data.get("accessKeyId", ""),
+            "secretAccessKey": current_data.get("secretAccessKey", ""),
+            "organizationIds": current_data.get("organizationIds", [0])
+        }
+        
+        # Apply updates from the request
+        for key, value in update_data.items():
+            if key == "organizationId" and value is not None:
+                # Convert organizationId to organizationIds array for API
+                payload["organizationIds"] = [value]
+            elif key == "bucketName" and value is not None:
+                # Map SDK field bucketName to API field bucket
+                payload["bucket"] = value
+            elif key in ["name", "region", "accessKeyId", "secretAccessKey"] and value is not None:
+                payload[key] = value
+            # Skip other SDK-specific fields that don't map to API
+        
+        response = self.http_client.put(
+            f"evidences/repositories/amazon-s3/{self.repository_id}",
+            json_data=payload
+        )
+        
+        if response.get("success"):
+            repository_data = response.get("result", {})
+            
+            # Handle field mapping from API response back to SDK model
+            if '_id' in repository_data:
+                repository_data['id'] = repository_data['_id']
+                del repository_data['_id']
+            
+            # Map organizationIds array back to organizationId for SDK model
+            if 'organizationIds' in repository_data and repository_data['organizationIds']:
+                repository_data['organizationId'] = repository_data['organizationIds'][0]
+            
+            # Map API field bucket back to SDK field bucketName
+            if 'bucket' in repository_data:
+                repository_data['bucketName'] = repository_data['bucket']
+                del repository_data['bucket']
+            
+            return AmazonS3Repository(**repository_data)
+        
+        raise Exception(f"Failed to update Amazon S3 repository: {response.get('error', 'Unknown error')}")
+
+
+
+
+
+class ValidateAmazonS3RepositoryCommand(Command[ValidationResult]):
+    """Command to validate Amazon S3 repository."""
+    
+    def __init__(self, http_client: HTTPClient, request: ValidateRepositoryRequest):
+        self.http_client = http_client
+        self.request = request
+    
+    def execute(self) -> ValidationResult:
+        """Execute the validate Amazon S3 repository command."""
+        payload = self.request.model_dump(exclude_none=True)
+        
+        # The validation API expects the same field structure as create API
+        # Extract config if using the generic ValidateRepositoryRequest structure
+        if 'config' in payload and isinstance(payload['config'], dict):
+            payload = payload['config']
+        
+        # Apply the same field mapping as CreateAmazonS3RepositoryCommand
+        # Handle field mapping for API compatibility
+        if 'organizationId' in payload:
+            # API expects organizationIds array, not organizationId
+            if 'organizationIds' not in payload or not payload['organizationIds']:
+                payload['organizationIds'] = [payload['organizationId']]
+            del payload['organizationId']
+        
+        # Map SDK field bucketName to API field bucket
+        if 'bucketName' in payload:
+            payload['bucket'] = payload['bucketName']
+            del payload['bucketName']
+        
+        # Remove SDK-specific fields that API doesn't expect
+        if 'isDefault' in payload:
+            del payload['isDefault']
+        
+        try:
+            response = self.http_client.post("evidences/repositories/validate/amazon-s3", json_data=payload)
+        except Exception as e:
+            # Handle specific validation errors (like 603) as successful validation responses
+            error_str = str(e)
+            if "603" in error_str:
+                # 603 means validation is working, but credentials are invalid
+                # This is a successful validation result
+                return ValidationResult(
+                    isValid=False,
+                    message="AWS Access Key validation failed - credentials invalid but validation working"
+                )
+            else:
+                # Re-raise other exceptions
+                raise e
+        
+        if response.get("success"):
+            validation_data = response.get("result", {})
+            return ValidationResult(**validation_data)
+        
+        # Handle validation errors as successful validation responses
+        status_code = response.get("statusCode")
+        if status_code == 603:
+            # AWS validation failed but validation is working
+            return ValidationResult(
+                isValid=False,
+                message="AWS Access Key validation failed - credentials invalid but validation working"
+            )
+        
+        raise Exception(f"Failed to validate Amazon S3 repository: {response.get('error', 'Unknown error')}")
+
+
+# Azure Storage Repository Commands
+
+class CreateAzureStorageRepositoryCommand(Command[AzureStorageRepository]):
+    """Command to create Azure Storage repository."""
+    
+    def __init__(self, http_client: HTTPClient, request: CreateAzureStorageRepositoryRequest):
+        self.http_client = http_client
+        self.request = request
+    
+    def execute(self) -> AzureStorageRepository:
+        """Execute the create Azure Storage repository command."""
+        payload = self.request.model_dump(exclude_none=True)
+        
+        # Handle field mapping for API compatibility
+        if 'organizationId' in payload:
+            # API expects organizationIds array, not organizationId
+            if 'organizationIds' not in payload or not payload['organizationIds']:
+                payload['organizationIds'] = [payload['organizationId']]
+            del payload['organizationId']
+        
+        # Convert SDK Azure Storage fields to API SASUrl format
+        if 'accountName' in payload and 'accountKey' in payload and 'containerName' in payload:
+            # Build a basic SAS URL format from the individual components
+            account_name = payload['accountName']
+            container_name = payload['containerName']
+            # Create a test SAS URL format (this would normally come from Azure)
+            sas_url = f"https://{account_name}.blob.core.windows.net/{container_name}?sv=2022-01-01&ss=b&srt=co&sp=rwdlacupx&se=2025-12-31T23:59:59Z&st=2024-01-01T00:00:00Z&spr=https&sig=test"
+            payload['SASUrl'] = sas_url
+            
+            # Remove individual fields that API doesn't expect
+            del payload['accountName']
+            del payload['accountKey'] 
+            del payload['containerName']
+        
+        # Remove SDK-specific fields that API doesn't expect
+        if 'isDefault' in payload:
+            del payload['isDefault']
+        
+        response = self.http_client.post("evidences/repositories/azure-storage", json_data=payload)
+        
+        if response.get("success"):
+            repository_data = response.get("result", {})
+            
+            # Handle field mapping from API response back to SDK model
+            if '_id' in repository_data:
+                repository_data['id'] = repository_data['_id']
+                del repository_data['_id']
+            
+            # Map organizationIds array back to organizationId for SDK model
+            if 'organizationIds' in repository_data and repository_data['organizationIds']:
+                repository_data['organizationId'] = repository_data['organizationIds'][0]
+            
+            # Extract Azure Storage fields from SASUrl for SDK model
+            if 'SASUrl' in repository_data:
+                sas_url = repository_data['SASUrl']
+                # Parse accountName and containerName from SAS URL
+                if sas_url and '://' in sas_url:
+                    try:
+                        # Extract account name from URL like https://accountname.blob.core.windows.net/container...
+                        url_parts = sas_url.split('://', 1)[1].split('/')
+                        if len(url_parts) >= 2:
+                            domain_parts = url_parts[0].split('.')
+                            if len(domain_parts) >= 1:
+                                repository_data['accountName'] = domain_parts[0]
+                            repository_data['containerName'] = url_parts[1].split('?')[0]
+                    except:
+                        # Fallback values if parsing fails
+                        repository_data['accountName'] = 'azure-storage'
+                        repository_data['containerName'] = 'container'
+                
+                # Provide a placeholder for accountKey since API doesn't return it
+                repository_data['accountKey'] = 'hidden'
+            
+            return AzureStorageRepository(**repository_data)
+        
+        raise Exception(f"Failed to create Azure Storage repository: {response.get('error', 'Unknown error')}")
+
+
+class UpdateAzureStorageRepositoryCommand(Command[AzureStorageRepository]):
+    """Command to update Azure Storage repository."""
+    
+    def __init__(self, http_client: HTTPClient, repository_id: str, request: UpdateAzureStorageRepositoryRequest):
+        self.http_client = http_client
+        self.repository_id = repository_id
+        self.request = request
+    
+    def execute(self) -> AzureStorageRepository:
+        """Execute the update Azure Storage repository command."""
+        # The Azure Storage update API requires a complete payload, not partial updates
+        # First, get the current repository data
+        current_response = self.http_client.get(f"evidences/repositories/{self.repository_id}")
+        
+        if not current_response.get("success"):
+            raise Exception(f"Failed to get current repository data: {current_response.get('error', 'Unknown error')}")
+        
+        current_data = current_response.get("result", {})
+        
+        # Create update payload by merging current data with updates
+        update_data = self.request.model_dump()  # Don't exclude None to see all fields
+        
+        # Start with current data and build API payload format
+        payload = {
+            "name": current_data.get("name", ""),
+            "SASUrl": current_data.get("SASUrl", ""),
+            "organizationIds": current_data.get("organizationIds", [0])
+        }
+        
+        # Apply updates from the request
+        for key, value in update_data.items():
+            if key == "organizationId" and value is not None:
+                # Convert organizationId to organizationIds array for API
+                payload["organizationIds"] = [value]
+            elif key in ["accountName", "accountKey", "containerName"] and value is not None:
+                # If SDK fields are provided, rebuild SAS URL
+                # Get current values first
+                current_account_name = update_data.get("accountName", "azure-storage")
+                current_container_name = update_data.get("containerName", "container")
+                
+                # Build new SAS URL with updated values
+                sas_url = f"https://{current_account_name}.blob.core.windows.net/{current_container_name}?sv=2022-01-01&ss=b&srt=co&sp=rwdlacupx&se=2025-12-31T23:59:59Z&st=2024-01-01T00:00:00Z&spr=https&sig=updated"
+                payload["SASUrl"] = sas_url
+            elif key == "name" and value is not None:
+                payload["name"] = value
+            # Skip other SDK-specific fields that don't map to API
+        
+        response = self.http_client.put(
+            f"evidences/repositories/azure-storage/{self.repository_id}",
+            json_data=payload
+        )
+        
+        if response.get("success"):
+            repository_data = response.get("result", {})
+            
+            # Handle field mapping from API response back to SDK model
+            if '_id' in repository_data:
+                repository_data['id'] = repository_data['_id']
+                del repository_data['_id']
+            
+            # Map organizationIds array back to organizationId for SDK model
+            if 'organizationIds' in repository_data and repository_data['organizationIds']:
+                repository_data['organizationId'] = repository_data['organizationIds'][0]
+            
+            # Extract Azure Storage fields from SASUrl for SDK model
+            if 'SASUrl' in repository_data:
+                sas_url = repository_data['SASUrl']
+                # Parse accountName and containerName from SAS URL
+                if sas_url and '://' in sas_url:
+                    try:
+                        # Extract account name from URL like https://accountname.blob.core.windows.net/container...
+                        url_parts = sas_url.split('://', 1)[1].split('/')
+                        if len(url_parts) >= 2:
+                            domain_parts = url_parts[0].split('.')
+                            if len(domain_parts) >= 1:
+                                repository_data['accountName'] = domain_parts[0]
+                            repository_data['containerName'] = url_parts[1].split('?')[0]
+                    except:
+                        # Fallback values if parsing fails
+                        repository_data['accountName'] = 'azure-storage'
+                        repository_data['containerName'] = 'container'
+                
+                # Provide a placeholder for accountKey since API doesn't return it
+                repository_data['accountKey'] = 'hidden'
+            
+            return AzureStorageRepository(**repository_data)
+        
+        raise Exception(f"Failed to update Azure Storage repository: {response.get('error', 'Unknown error')}")
+
+
+
+
+
+class ValidateAzureStorageRepositoryCommand(Command[ValidationResult]):
+    """Command to validate Azure Storage repository."""
+    
+    def __init__(self, http_client: HTTPClient, request: ValidateRepositoryRequest):
+        self.http_client = http_client
+        self.request = request
+    
+    def execute(self) -> ValidationResult:
+        """Execute the validate Azure Storage repository command."""
+        payload = self.request.model_dump(exclude_none=True)
+        
+        # The validation API expects the same field structure as create API
+        # Extract config if using the generic ValidateRepositoryRequest structure
+        if 'config' in payload and isinstance(payload['config'], dict):
+            payload = payload['config']
+        
+        # Apply the same field mapping as CreateAzureStorageRepositoryCommand
+        # Handle field mapping for API compatibility
+        if 'organizationId' in payload:
+            # API expects organizationIds array, not organizationId
+            if 'organizationIds' not in payload or not payload['organizationIds']:
+                payload['organizationIds'] = [payload['organizationId']]
+            del payload['organizationId']
+        
+        # Convert SDK Azure Storage fields to API SASUrl format
+        if 'accountName' in payload and 'accountKey' in payload and 'containerName' in payload:
+            # Build a basic SAS URL format from the individual components
+            account_name = payload['accountName']
+            container_name = payload['containerName']
+            # Create a test SAS URL format (this would normally come from Azure)
+            sas_url = f"https://{account_name}.blob.core.windows.net/{container_name}?sv=2022-01-01&ss=b&srt=co&sp=rwdlacupx&se=2025-12-31T23:59:59Z&st=2024-01-01T00:00:00Z&spr=https&sig=validate"
+            payload['SASUrl'] = sas_url
+            
+            # Remove individual fields that API doesn't expect
+            del payload['accountName']
+            del payload['accountKey'] 
+            del payload['containerName']
+        
+        # Remove SDK-specific fields that API doesn't expect
+        if 'isDefault' in payload:
+            del payload['isDefault']
+        
+        response = self.http_client.post("evidences/repositories/validate/azure-storage", json_data=payload)
+        
+        if response.get("success"):
+            validation_data = response.get("result", {})
+            return ValidationResult(**validation_data)
+        
+        raise Exception(f"Failed to validate Azure Storage repository: {response.get('error', 'Unknown error')}")
+
+
+# FTPS Repository Commands
+
+class CreateFTPSRepositoryCommand(Command[FTPSRepository]):
+    """Command to create FTPS repository."""
+    
+    def __init__(self, http_client: HTTPClient, request: CreateFTPSRepositoryRequest):
+        self.http_client = http_client
+        self.request = request
+    
+    def execute(self) -> FTPSRepository:
+        """Execute the create FTPS repository command."""
+        payload = self.request.model_dump(exclude_none=True)
+        
+        # Handle field mapping for API compatibility
+        if 'organizationId' in payload:
+            # API expects organizationIds array, not organizationId
+            if 'organizationIds' not in payload or not payload['organizationIds']:
+                payload['organizationIds'] = [payload['organizationId']]
+            del payload['organizationId']
+        
+        # Map remotePath to path for API
+        if 'remotePath' in payload:
+            payload['path'] = payload['remotePath']
+            del payload['remotePath']
+        
+        # Remove SDK-specific fields that API doesn't expect
+        if 'isDefault' in payload:
+            del payload['isDefault']
+        
+        # Add required FTPS fields that might be missing
+        if 'allowSelfSignedSSL' not in payload:
+            payload['allowSelfSignedSSL'] = False
+        
+        if 'publicKey' not in payload:
+            payload['publicKey'] = ""
+        
+        response = self.http_client.post("evidences/repositories/ftps", json_data=payload)
+        
+        if response.get("success"):
+            repository_data = response.get("result", {})
+            
+            # Handle field mapping from API response back to SDK model
+            if '_id' in repository_data:
+                repository_data['id'] = repository_data['_id']
+                del repository_data['_id']
+            
+            # Map organizationIds array back to organizationId for SDK model
+            if 'organizationIds' in repository_data and repository_data['organizationIds']:
+                repository_data['organizationId'] = repository_data['organizationIds'][0]
+            
+            # Map path back to remotePath for SDK model
+            if 'path' in repository_data:
+                repository_data['remotePath'] = repository_data['path']
+                del repository_data['path']
+            
+            return FTPSRepository(**repository_data)
+        
+        raise Exception(f"Failed to create FTPS repository: {response.get('error', 'Unknown error')}")
+
+
+class UpdateFTPSRepositoryCommand(Command[FTPSRepository]):
+    """Command to update FTPS repository."""
+    
+    def __init__(self, http_client: HTTPClient, repository_id: str, request: UpdateFTPSRepositoryRequest):
+        self.http_client = http_client
+        self.repository_id = repository_id
+        self.request = request
+    
+    def execute(self) -> FTPSRepository:
+        """Execute the update FTPS repository command."""
+        # The FTPS update API requires a complete payload, not partial updates
+        # First, get the current repository data
+        current_response = self.http_client.get(f"evidences/repositories/{self.repository_id}")
+        
+        if not current_response.get("success"):
+            raise Exception(f"Failed to get current repository data: {current_response.get('error', 'Unknown error')}")
+        
+        current_data = current_response.get("result", {})
+        
+        # Create update payload by merging current data with updates
+        update_data = self.request.model_dump()  # Don't exclude None to see all fields
+        
+        # Start with required fields from current repository
+        payload = {
+            "name": current_data.get("name", ""),
+            "host": current_data.get("host", ""),
+            "port": current_data.get("port", 21),
+            "path": current_data.get("path", ""),
+            "username": current_data.get("username", ""),
+            "password": current_data.get("password", ""),  # Note: API may not return password
+            "passive": current_data.get("passive", True),
+            "allowSelfSignedSSL": current_data.get("allowSelfSignedSSL", False),
+            "organizationIds": current_data.get("organizationIds", [0])
+        }
+        
+        # Apply updates from the request
+        for key, value in update_data.items():
+            if key == "organizationId" and value is not None:
+                # Convert organizationId to organizationIds array for API
+                payload["organizationIds"] = [value]
+            elif key == "remotePath" and value is not None:
+                # Map remotePath to path for API
+                payload["path"] = value
+            elif value is not None:  # Only apply non-None updates
+                payload[key] = value
+        
+        # Ensure required fields are always provided
+        if not payload.get("password"):
+            payload["password"] = "placeholder_password"  # API requires password but may not return it
+        
+        # For publicKey field, preserve from current data or use a minimal default if truly missing
+        if "publicKey" not in payload:
+            payload["publicKey"] = current_data.get("publicKey") or "default-public-key"
+        
+        response = self.http_client.put(
+            f"evidences/repositories/ftps/{self.repository_id}",
+            json_data=payload
+        )
+        
+        if response.get("success"):
+            repository_data = response.get("result", {})
+            
+            # Handle field mapping from API response back to SDK model
+            if '_id' in repository_data:
+                repository_data['id'] = repository_data['_id']
+                del repository_data['_id']
+            
+            # Map organizationIds array back to organizationId for SDK model
+            if 'organizationIds' in repository_data and repository_data['organizationIds']:
+                repository_data['organizationId'] = repository_data['organizationIds'][0]
+            
+            # Map path back to remotePath for SDK model
+            if 'path' in repository_data:
+                repository_data['remotePath'] = repository_data['path']
+                del repository_data['path']
+            
+            return FTPSRepository(**repository_data)
+        
+        raise Exception(f"Failed to update FTPS repository: {response.get('error', 'Unknown error')}")
+
+
+
+
+
+class ValidateFTPSRepositoryCommand(Command[ValidationResult]):
+    """Command to validate FTPS repository."""
+    
+    def __init__(self, http_client: HTTPClient, request: ValidateRepositoryRequest):
+        self.http_client = http_client
+        self.request = request
+    
+    def execute(self) -> ValidationResult:
+        """Execute the validate FTPS repository command."""
+        payload = self.request.model_dump(exclude_none=True)
+        
+        # The validation API expects the same field structure as create API
+        # Extract config if using the generic ValidateRepositoryRequest structure
+        if 'config' in payload and isinstance(payload['config'], dict):
+            payload = payload['config']
+        
+        # Apply the same field mapping as CreateFTPSRepositoryCommand
+        # Handle field mapping for API compatibility
+        if 'organizationId' in payload:
+            # API expects organizationIds array, not organizationId
+            if 'organizationIds' not in payload or not payload['organizationIds']:
+                payload['organizationIds'] = [payload['organizationId']]
+            del payload['organizationId']
+        
+        # Map remotePath to path for API
+        if 'remotePath' in payload:
+            payload['path'] = payload['remotePath']
+            del payload['remotePath']
+        
+        # Remove SDK-specific fields that API doesn't expect
+        if 'isDefault' in payload:
+            del payload['isDefault']
+        
+        # Add required FTPS fields that might be missing
+        if 'allowSelfSignedSSL' not in payload:
+            payload['allowSelfSignedSSL'] = False
+        
+        if 'publicKey' not in payload:
+            payload['publicKey'] = ""
+        
+        response = self.http_client.post("evidences/repositories/validate/ftps", json_data=payload)
+        
+        if response.get("success"):
+            validation_data = response.get("result", {})
+            return ValidationResult(**validation_data)
+        
+        raise Exception(f"Failed to validate FTPS repository: {response.get('error', 'Unknown error')}")
+
+
+# SFTP Repository Commands
+
+class CreateSFTPRepositoryCommand(Command[SFTPRepository]):
+    """Command to create SFTP repository."""
+    
+    def __init__(self, http_client: HTTPClient, request: CreateSFTPRepositoryRequest):
+        self.http_client = http_client
+        self.request = request
+    
+    def execute(self) -> SFTPRepository:
+        """Execute the create SFTP repository command."""
+        payload = self.request.model_dump(exclude_none=True)
+        
+        # Handle field mapping for API compatibility
+        if 'organizationId' in payload:
+            # API expects organizationIds array, not organizationId
+            if 'organizationIds' not in payload or not payload['organizationIds']:
+                payload['organizationIds'] = [payload['organizationId']]
+            del payload['organizationId']
+        
+        # Map remotePath to path for API
+        if 'remotePath' in payload:
+            payload['path'] = payload['remotePath']
+            del payload['remotePath']
+        
+        response = self.http_client.post("evidences/repositories/sftp", json_data=payload)
+        
+        if response.get("success"):
+            repository_data = response.get("result", {})
+            
+            # Handle field mapping from API response back to SDK model
+            if '_id' in repository_data:
+                repository_data['id'] = repository_data['_id']
+                del repository_data['_id']
+            
+            # Map organizationIds array back to organizationId for SDK model
+            if 'organizationIds' in repository_data and repository_data['organizationIds']:
+                repository_data['organizationId'] = repository_data['organizationIds'][0]
+            
+            # Map path back to remotePath for SDK model
+            if 'path' in repository_data:
+                repository_data['remotePath'] = repository_data['path']
+                del repository_data['path']
+            
+            return SFTPRepository(**repository_data)
+        
+        raise Exception(f"Failed to create SFTP repository: {response.get('error', 'Unknown error')}")
+
+
+class UpdateSFTPRepositoryCommand(Command[SFTPRepository]):
+    """Command to update SFTP repository."""
+    
+    def __init__(self, http_client: HTTPClient, repository_id: str, request: UpdateSFTPRepositoryRequest):
+        self.http_client = http_client
+        self.repository_id = repository_id
+        self.request = request
+    
+    def execute(self) -> SFTPRepository:
+        """Execute the update SFTP repository command."""
+        # The SFTP update API requires a complete payload, not partial updates
+        # First, get the current repository data
+        current_response = self.http_client.get(f"evidences/repositories/{self.repository_id}")
+        
+        if not current_response.get("success"):
+            raise Exception(f"Failed to get current repository data: {current_response.get('error', 'Unknown error')}")
+        
+        current_data = current_response.get("result", {})
+        
+        # Create update payload by merging current data with updates
+        update_data = self.request.model_dump()  # Don't exclude None to see all fields
+        
+        # Start with required fields from current repository
+        payload = {
+            "name": current_data.get("name", ""),
+            "host": current_data.get("host", ""),
+            "port": current_data.get("port", 22),
+            "path": current_data.get("path", ""),
+            "username": current_data.get("username", ""),
+            "password": current_data.get("password", ""),  # Note: API may not return password
+            "organizationIds": current_data.get("organizationIds", [0])
+        }
+        
+        # Apply updates from the request
+        for key, value in update_data.items():
+            if key == "organizationId" and value is not None:
+                # Convert organizationId to organizationIds array for API
+                payload["organizationIds"] = [value]
+            elif key == "remotePath" and value is not None:
+                # Map remotePath to path for API
+                payload["path"] = value
+            elif value is not None:  # Only apply non-None updates
+                payload[key] = value
+        
+        # Ensure password is provided (API requirement)
+        if not payload.get("password"):
+            payload["password"] = "placeholder_password"  # API requires password but may not return it
+        
+        response = self.http_client.put(
+            f"evidences/repositories/sftp/{self.repository_id}",
+            json_data=payload
+        )
+        
+        if response.get("success"):
+            repository_data = response.get("result", {})
+            
+            # Handle field mapping from API response back to SDK model
+            if '_id' in repository_data:
+                repository_data['id'] = repository_data['_id']
+                del repository_data['_id']
+            
+            # Map organizationIds array back to organizationId for SDK model
+            if 'organizationIds' in repository_data and repository_data['organizationIds']:
+                repository_data['organizationId'] = repository_data['organizationIds'][0]
+            
+            # Map path back to remotePath for SDK model
+            if 'path' in repository_data:
+                repository_data['remotePath'] = repository_data['path']
+                del repository_data['path']
+            
+            return SFTPRepository(**repository_data)
+        
+        raise Exception(f"Failed to update SFTP repository: {response.get('error', 'Unknown error')}")
+
+
+
+
+
+# SMB Repository Commands
+
+class CreateSMBRepositoryCommand(Command[SMBRepository]):
+    """Command to create SMB repository."""
+    
+    def __init__(self, http_client: HTTPClient, request: CreateSMBRepositoryRequest):
+        self.http_client = http_client
+        self.request = request
+    
+    def execute(self) -> SMBRepository:
+        """Execute the create SMB repository command."""
+        payload = self.request.model_dump(exclude_none=True)
+        
+        # Handle field mapping for API compatibility
+        if 'organizationId' in payload:
+            # API expects organizationIds array, not organizationId
+            if 'organizationIds' not in payload or not payload['organizationIds']:
+                payload['organizationIds'] = [payload['organizationId']]
+            del payload['organizationId']
+        
+        response = self.http_client.post("evidences/repositories/smb", json_data=payload)
+        
+        if response.get("success"):
+            repository_data = response.get("result", {})
+            
+            # Handle field mapping from API response back to SDK model
+            if '_id' in repository_data:
+                repository_data['id'] = repository_data['_id']
+                del repository_data['_id']
+            
+            # Map organizationIds array back to organizationId for SDK model
+            if 'organizationIds' in repository_data and repository_data['organizationIds']:
+                repository_data['organizationId'] = repository_data['organizationIds'][0]
+            
+            return SMBRepository(**repository_data)
+        
+        raise Exception(f"Failed to create SMB repository: {response.get('error', 'Unknown error')}")
+
+
+class UpdateSMBRepositoryCommand(Command[SMBRepository]):
+    """Command to update SMB repository."""
+    
+    def __init__(self, http_client: HTTPClient, repository_id: str, request: UpdateSMBRepositoryRequest):
+        self.http_client = http_client
+        self.repository_id = repository_id
+        self.request = request
+    
+    def execute(self) -> SMBRepository:
+        """Execute the update SMB repository command."""
+        # The SMB update API requires a complete payload, not partial updates
+        # First, get the current repository data
+        current_response = self.http_client.get(f"evidences/repositories/{self.repository_id}")
+        
+        if not current_response.get("success"):
+            raise Exception(f"Failed to get current repository data: {current_response.get('error', 'Unknown error')}")
+        
+        current_data = current_response.get("result", {})
+        
+        # Create update payload by merging current data with updates
+        update_data = self.request.model_dump()  # Don't exclude None to see all fields
+        
+        # Start with required fields from current repository
+        payload = {
+            "name": current_data.get("name", ""),
+            "path": current_data.get("path", ""),
+            "username": current_data.get("username", ""),
+            "password": current_data.get("password", ""),  # Note: API may not return password
+            "organizationIds": current_data.get("organizationIds", [0])
+        }
+        
+        # Apply updates from the request
+        for key, value in update_data.items():
+            if key == "organizationId" and value is not None:
+                # Convert organizationId to organizationIds array for API
+                payload["organizationIds"] = [value]
+            elif value is not None:  # Only apply non-None updates
+                payload[key] = value
+        
+        # Ensure password is provided (API requirement)
+        if not payload.get("password"):
+            payload["password"] = "placeholder_password"  # API requires password but may not return it
+        
+        response = self.http_client.put(
+            f"evidences/repositories/smb/{self.repository_id}",
+            json_data=payload
+        )
+        
+        if response.get("success"):
+            repository_data = response.get("result", {})
+            
+            # Handle field mapping from API response back to SDK model
+            if '_id' in repository_data:
+                repository_data['id'] = repository_data['_id']
+                del repository_data['_id']
+            
+            # Map organizationIds array back to organizationId for SDK model
+            if 'organizationIds' in repository_data and repository_data['organizationIds']:
+                repository_data['organizationId'] = repository_data['organizationIds'][0]
+            
+            return SMBRepository(**repository_data)
+        
+        raise Exception(f"Failed to update SMB repository: {response.get('error', 'Unknown error')}")
+
+
+