mmisp-lib 0.3.0__tar.gz → 0.5.0__tar.gz

{mmisp_lib-0.3.0 → mmisp_lib-0.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: mmisp-lib
-Version: 0.3.0
+Version: 0.5.0
 Requires-Python: >=3.11.0
 Description-Content-Type: text/markdown
 License-File: LICENSE
@@ -27,7 +27,7 @@ Requires-Dist: mypy==1.8.0; extra == "dev"
 Requires-Dist: pre-commit==3.6.0; extra == "dev"
 Requires-Dist: pytest==8.0.0; extra == "dev"
 Requires-Dist: pytest-test-groups; extra == "dev"
-Requires-Dist: pytest-asyncio==0.23.5.post1; extra == "dev"
+Requires-Dist: pytest-asyncio==0.21.2; extra == "dev"
 Requires-Dist: pytest-cov==4.1.0; extra == "dev"
 Requires-Dist: respx==0.20.2; extra == "dev"
 Requires-Dist: mysql-connector-python==8.3.0; extra == "dev"

{mmisp_lib-0.3.0 → mmisp_lib-0.5.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "mmisp-lib"
-version = "0.3.0"
+version = "0.5.0"
 description = ""
 authors = []
 readme = "README.md"
@@ -35,7 +35,7 @@ dev = [
   "pre-commit==3.6.0",
   "pytest==8.0.0",
   "pytest-test-groups",
-  "pytest-asyncio==0.23.5.post1",
+  "pytest-asyncio==0.21.2",
   "pytest-cov==4.1.0",
   "respx==0.20.2",
   "mysql-connector-python==8.3.0",
@@ -63,6 +63,7 @@ ignore = ["ANN002", "ANN003", "ANN401"]
 
 [tool.ruff.lint.per-file-ignores]
 "tests/**" = ["ANN001", "ANN201", "ANN202", "S101"]
+"src/mmisp/tests/**" = ["ANN001", "ANN201", "ANN202", "S101"]
 
 [tool.coverage.run]
 concurrency = ["greenlet", "thread"]

{mmisp_lib-0.3.0 → mmisp_lib-0.5.0}/src/mmisp/api_schemas/attributes.py

@@ -34,6 +34,7 @@ class SearchAttributesEvent(BaseModel):
     info: str
     orgc_id: str
     uuid: str
+    publish_timestamp: int
 
 
 class SearchAttributesAttributesDetails(BaseModel):
@@ -56,7 +57,7 @@ class SearchAttributesAttributesDetails(BaseModel):
     last_seen: str | None = None
     Event: SearchAttributesEvent | None = None
     Object: SearchAttributesObject | None = None
-    Tag: list[GetAttributeTag] = []
+    Tag: list[GetAttributeTag] | None = None
 
 
 class SearchAttributesAttributes(BaseModel):
@@ -86,10 +87,7 @@ class SearchAttributesModelOverrides(BaseModel):
     base_score_config: SearchAttributesModelOverridesBaseScoreConfig
 
 
-class SearchAttributesBody(BaseModel):
-    returnFormat: str = "json"
-    page: int | None = None
-    limit: int | None = None
+class RestSearchFilter(BaseModel):
     value: str | None = None
     value1: str | None = None
     value2: str | None = None
@@ -101,15 +99,21 @@ class SearchAttributesBody(BaseModel):
     to: str | None = None
     last: int | None = None
     eventid: str | None = None
+    published: bool | None = None
+    to_ids: bool | None = None
+    deleted: bool | None = None
+
+
+class SearchAttributesBody(RestSearchFilter):
+    returnFormat: str = "json"
+    page: int | None = None
+    limit: int | None = None
     with_attachments: Annotated[bool | None, Field(alias="withAttachments")] = None
     uuid: str | None = None
     publish_timestamp: str | None = None
-    published: bool | None = None
     timestamp: str | None = None
     attribute_timestamp: str | None = None
     enforce_warninglist: Annotated[bool | None, Field(alias="enforceWarninglist")]
-    to_ids: bool | None = None
-    deleted: bool | None = None
     event_timestamp: str | None = None
     threat_level_id: str | None = None
     eventinfo: str | None = None
@@ -134,9 +138,6 @@ class SearchAttributesBody(BaseModel):
     include_full_model: Annotated[bool | None, Field(alias="includeFullModel")] = None
     exclude_decayed: Annotated[bool | None, Field(alias="excludeDecayed")] = None
 
-    class Config:
-        orm_mode = True
-
 
 class RestoreAttributeResponse(BaseModel):
     id: str
@@ -164,29 +165,24 @@ class RestoreAttributeResponse(BaseModel):
 
 class GetDescribeTypesAttributes(BaseModel):
     sane_defaults: dict = {}
-    for k, v in to_ids.items():
+    for _k, _v in to_ids.items():
         sane_defaults.update(
             {
-                k: {
-                    "default_category": default_category[k],
-                    "to_ids": v,
+                _k: {
+                    "default_category": default_category[_k],
+                    "to_ids": "1" if _v else "0",
                 }
             }
         )
 
     types: list[str] = list(mapper_val_safe_clsname.keys())
-
     categories: list[str] = [member.value for member in AttributeCategories]
-
     category_type_mappings: dict = inverted_categories
 
 
 class GetDescribeTypesResponse(BaseModel):
     result: GetDescribeTypesAttributes
 
-    class Config:
-        orm_mode = True
-
 
 class GetAttributeAttributes(BaseModel):
     id: str
@@ -413,28 +409,12 @@ class AddAttributeBody(BaseModel):
 
 GetAttributeStatisticsTypesResponseAttrs = {x: Field(default=None) for x in mapper_val_safe_clsname.keys()}
 GetAttributeStatisticsTypesResponseAttrs["__annotations__"] = {x: str | None for x in mapper_val_safe_clsname.keys()}
-GetAttributeStatisticsTypesResponse = type(
+GetAttributeStatisticsTypesResponse = type(  # type: ignore
     "GetAttributeStatisticsTypesResponse", (BaseModel,), GetAttributeStatisticsTypesResponseAttrs
 )
 
-
-class GetAttributeStatisticsCategoriesResponse(BaseModel):
-    antivirus_detection: str = Field(alias="Antivirus detection")
-    artifacts_dropped: str = Field(alias="Artifacts dropped")
-    attribution: str = Field(alias="Attribution")
-    external_analysis: str = Field(alias="External analysis")
-    financial_fraud: str = Field(alias="Financial fraud")
-    internal_reference: str = Field(alias="Internal reference")
-    network_activity: str = Field(alias="Network activity")
-    other: str = Field(alias="Other")
-    payload_delivery: str = Field(alias="Payload delivery")
-    payload_installation: str = Field(alias="Payload installation")
-    payload_type: str = Field(alias="Payload type")
-    persistence_mechanism: str = Field(alias="Persistence mechanism")
-    person: str = Field(alias="Person")
-    social_network: str = Field(alias="Social network")
-    support__tool: str = Field(alias="Support Tool")
-    targeting_data: str = Field(alias="Targeting data")
-
-    class Config:
-        orm_mode = True
+GetAttributeStatisticsCategoriesResponseAttrs = {x.value: Field(default=None) for x in AttributeCategories}
+GetAttributeStatisticsCategoriesResponseAttrs["__annotations__"] = {x.value: str | None for x in AttributeCategories}
+GetAttributeStatisticsCategoriesResponse = type(  # type: ignore
+    "GetAttributeStatisticsCategoriesResponse", (BaseModel,), GetAttributeStatisticsCategoriesResponseAttrs
+)

{mmisp_lib-0.3.0 → mmisp_lib-0.5.0}/src/mmisp/api_schemas/events.py

@@ -1,3 +1,5 @@
+from datetime import datetime
+
 from pydantic import BaseModel, PositiveInt, conint
 
 from mmisp.api_schemas.organisations import Organisation
@@ -89,7 +91,7 @@ class GetAllEventsGalaxyCluster(BaseModel):
     meta: AddEditGetEventGalaxyClusterMeta | None = None
     tag_id: str
     local: bool | None = None
-    relationship_type: str | None = None
+    relationship_type: bool | str | None = None
 
 
 class AddEditGetEventGalaxyClusterRelationTag(BaseModel):
@@ -149,7 +151,7 @@ class AddEditGetEventGalaxyCluster(BaseModel):
     attribute_tag_id: str | None = None
     event_tag_id: str | None = None
     local: bool | None = None
-    relationship_type: str = ""
+    relationship_type: bool | str = ""
 
 
 class AddEditGetEventGalaxy(BaseModel):
@@ -186,7 +188,7 @@ class AddEditGetEventTag(BaseModel):
     is_custom_galaxy: bool
     local_only: bool
     local: bool
-    relationship_type: str | None = None
+    relationship_type: bool | str | None = None
 
 
 class AddEditGetEventAttribute(BaseModel):
@@ -288,7 +290,7 @@ class AddEditGetEventResponse(BaseModel):
     Event: AddEditGetEventDetails
 
     class Config:
-        orm_mode = True
+        json_encoders = {datetime: lambda v: v.strftime("%Y-%m-%d %H:%M:%S")}
 
 
 class GetAllEventsOrg(BaseModel):
@@ -456,7 +458,7 @@ class GetAllEventsEventTag(BaseModel):
     event_id: str
     tag_id: str
     local: bool
-    relationship_type: str | None = None
+    relationship_type: bool | str | None = None
     Tag: GetAllEventsEventTagTag | None = None
 
 

{mmisp_lib-0.3.0 → mmisp_lib-0.5.0}/src/mmisp/api_schemas/organisations.py

@@ -3,17 +3,20 @@ from datetime import datetime
 from pydantic import BaseModel
 
 
-class Organisation(BaseModel):
-    id: str
-    name: str
+class BaseOrganisation(BaseModel):
+    id: str | None = None
+    name: str | None = None
+    nationality: str | None = None
+    sector: str | None = None
+    type: str | None = None
+    uuid: str | None = None
+
+
+class Organisation(BaseOrganisation):
     date_created: datetime
     date_modified: datetime
     description: str | None = None
-    type: str
-    nationality: str | None = None
-    sector: str | None = None
     created_by: str
-    uuid: str
     contacts: str | None = None
     local: bool
     """organisation gains access to the local instance, otherwise treated as external"""
@@ -21,20 +24,20 @@ class Organisation(BaseModel):
     landingpage: str | None = None
 
     class Config:
-        orm_mode = True
+        json_encoders = {datetime: lambda v: v.strftime("%Y-%m-%d %H:%M:%S")}
 
 
 class GetOrganisationResponse(BaseModel):
     id: str
     name: str
+    nationality: str | None = None
+    sector: str | None = None
+    type: str | None = None
+    uuid: str | None = None
     date_created: datetime
     date_modified: datetime
     description: str | None = None
-    type: str | None = None
-    nationality: str | None = None
-    sector: str | None = None
     created_by: str
-    uuid: str | None = None
     contacts: str | None = None
     local: bool
     restricted_to_domain: str | None = None

mmisp_lib-0.5.0/src/mmisp/api_schemas/servers.py

@@ -0,0 +1,138 @@
+from pydantic import BaseModel, Json
+
+from mmisp.api_schemas.organisations import BaseOrganisation
+
+
+class NOT_Filter(BaseModel):
+    NOT: list
+
+
+class OR_NOT_Filter(BaseModel):
+    OR: list
+    NOT: list
+
+
+class PullRulesFilter(BaseModel):
+    tags: OR_NOT_Filter
+    orgs: OR_NOT_Filter
+    type_attributes: NOT_Filter
+    type_objects: NOT_Filter
+    url_params: str
+
+
+class PushRulesFilter(BaseModel):
+    tags: OR_NOT_Filter
+    orgs: OR_NOT_Filter
+
+
+default_pull_rules = PullRulesFilter(
+    tags=OR_NOT_Filter(OR=[], NOT=[]),
+    orgs=OR_NOT_Filter(OR=[], NOT=[]),
+    type_attributes=NOT_Filter(NOT=[]),
+    type_objects=NOT_Filter(NOT=[]),
+    url_params="",
+)
+default_push_rules = PushRulesFilter(
+    tags=OR_NOT_Filter(OR=[], NOT=[]),
+    orgs=OR_NOT_Filter(OR=[], NOT=[]),
+)
+
+
+class AddServer(BaseModel):
+    url: str
+    name: str
+    remote_org_id: int
+    authkey: str
+    org_id: int | None = None
+    priority: int = 5
+    internal: bool = False
+    push: bool = False
+    pull: bool = False
+    pull_rules: Json[PullRulesFilter] | PullRulesFilter = default_pull_rules
+    push_rules: Json[PushRulesFilter] | PushRulesFilter = default_push_rules
+    push_galaxy_clusters: bool = False
+    caching_enabled: bool = False
+    unpublish_event: bool = False
+    publish_without_email: bool = False
+    self_signed: bool = False
+    skip_proxy: bool = False
+
+
+class EditServer(BaseModel):
+    name: str
+    url: str
+    priority: int
+    authkey: str
+    remote_org_id: int
+    internal: bool
+    push: bool
+    pull: bool
+    pull_rules: Json[PullRulesFilter] | PullRulesFilter = default_pull_rules
+    push_rules: Json[PushRulesFilter] | PushRulesFilter = default_push_rules
+    push_galaxy_clusters: bool
+    caching_enabled: bool
+    unpublish_event: bool
+    publish_without_email: bool
+    self_signed: bool
+    skip_proxy: bool
+
+
+class ServerResponseBase(BaseModel):
+    id: int
+    name: str
+    url: str
+    #    authkey: str
+    org_id: int | None = None
+    push: bool
+    pull: bool
+    cert_file: str | None
+    client_cert_file: str | None
+    lastpulledid: int | None
+    lastpushedid: int | None
+    organization: None
+    pull_analyst_data: bool
+    pull_rules: str
+    push_analyst_data: bool
+    push_rules: str
+    remove_missing_tags: bool
+    push_sightings: bool | None = None
+    push_galaxy_clusters: bool | None = None
+    pull_galaxy_clusters: bool | None = None
+    remote_org_id: int
+    publish_without_email: bool | None = None
+    unpublish_event: bool | None = None
+    self_signed: bool
+    internal: bool | None = None
+    skip_proxy: bool | None = None
+    caching_enabled: bool | None = None
+    priority: int | None = None
+
+
+class ServerResponse(ServerResponseBase):
+    cache_timestamp: bool = False
+
+
+class AddServerServer(ServerResponseBase):
+    authkey: str
+
+
+class AddServerResponse(BaseModel):
+    Server: AddServerServer
+
+
+class RemoveServer(BaseModel):
+    id: str
+    sharing_group_id: str
+    server_id: str
+    all_orgs: bool
+
+
+class GetRemoteServer(BaseModel):
+    Server: ServerResponse
+    Organisation: BaseOrganisation
+    RemoteOrg: BaseOrganisation
+    User: list
+
+
+class ServersGetVersion(BaseModel):
+    pass

mmisp_lib-0.5.0/src/mmisp/db/additional_properties.py

@@ -0,0 +1,10 @@
+from sqlalchemy import func, select
+from sqlalchemy.orm import column_property
+
+from mmisp.db.models.organisation import Organisation
+from mmisp.db.models.user import User
+
+Organisation.user_count = column_property(
+    select(func.count(User.id)).where(User.org_id == Organisation.id).correlate_except(User).scalar_subquery(),
+    deferred=False,
+)

{mmisp_lib-0.3.0 → mmisp_lib-0.5.0}/src/mmisp/db/all_models.py

@@ -13,3 +13,5 @@ model_module_names = map(".".join, zip(itertools.repeat(model_pkg), all_models))
 
 for m in model_module_names:
     importlib.import_module(m)
+
+importlib.import_module("mmisp.db.additional_properties")

{mmisp_lib-0.3.0 → mmisp_lib-0.5.0}/src/mmisp/db/mixins.py

@@ -6,9 +6,10 @@ from sqlalchemy.ext.hybrid import hybrid_property
 
 class DictMixin:
     def asdict(self: Self) -> dict:
+        unloaded = inspect(self).unloaded
         d = {}
         for key in self.__mapper__.c.keys():  # type:ignore[attr-defined]
-            if not key.startswith("_"):
+            if not key.startswith("_") and key not in unloaded:
                 d[key] = getattr(self, key)
 
         for key, prop in inspect(self.__class__).all_orm_descriptors.items():  # type:ignore[union-attr]

{mmisp_lib-0.3.0 → mmisp_lib-0.5.0}/src/mmisp/db/models/attribute.py

@@ -1,7 +1,9 @@
+import typing
 from typing import Self, Type
 
-from sqlalchemy import BigInteger, Boolean, ForeignKey, Integer, String, Text
-from sqlalchemy.ext.hybrid import hybrid_property
+from sqlalchemy import BigInteger, Boolean, ForeignKey, Integer, String, Text, or_
+from sqlalchemy.ext.asyncio import AsyncSession
+from sqlalchemy.ext.hybrid import Comparator, hybrid_property
 from sqlalchemy.orm import relationship
 from sqlalchemy.orm.decl_api import DeclarativeMeta
 
@@ -14,6 +16,20 @@ from ..database import Base
 from .event import Event
 from .tag import Tag
 
+if typing.TYPE_CHECKING:
+    from sqlalchemy import ColumnExpressionArgument
+else:
+    ColumnExpressionArgument = typing.Any
+
+
+class AttributeComparator(Comparator):
+    def __init__(self: Self, cls: typing.Any) -> None:
+        self.cls = cls
+
+    def __eq__(self: Self, other: typing.Any) -> ColumnExpressionArgument:
+        # Overriding equality to check if the value matches either value1 or value1 + "|" + value2
+        return or_(self.cls.value1 == other, self.cls.value1 + "|" + self.cls.value2 == other)
+
 
 class Attribute(Base, DictMixin):
     __tablename__ = "attributes"
@@ -40,11 +56,57 @@ class Attribute(Base, DictMixin):
     last_seen: Mapped[int] = mapped_column(BigInteger, index=True)
 
     event = relationship("Event", back_populates="attributes", lazy="joined")  # type:ignore[var-annotated]
+    mispobject = relationship(
+        "Object",
+        primaryjoin="Attribute.object_id == Object.id",
+        back_populates="attributes",
+        lazy="joined",
+        foreign_keys="Attribute.object_id",
+    )  # type:ignore[var-annotated]
+    tags = relationship("Tag", secondary="attribute_tags", lazy="raise_on_sql", viewonly=True)
+    attributetags = relationship(
+        "AttributeTag",
+        primaryjoin="Attribute.id == AttributeTag.attribute_id",
+        back_populates="attribute",
+        lazy="raise_on_sql",
+        viewonly=True,
+    )
+    attributetags_galaxy = relationship(
+        "AttributeTag",
+        primaryjoin="and_(Attribute.id == AttributeTag.attribute_id, Tag.is_galaxy)",
+        secondary="join(AttributeTag, Tag, AttributeTag.tag_id == Tag.id)",
+        secondaryjoin="AttributeTag.tag_id == Tag.id",
+        lazy="raise_on_sql",
+        viewonly=True,
+    )
+
+    galaxy_tags = relationship(
+        "Tag",
+        secondary="attribute_tags",
+        secondaryjoin="and_(AttributeTag.tag_id == Tag.id, Tag.is_galaxy)",
+        lazy="raise_on_sql",
+        overlaps="tags, events",
+        viewonly=True,
+    )
+    local_tags = relationship(
+        "Tag",
+        secondary="attribute_tags",
+        secondaryjoin="and_(AttributeTag.tag_id == Tag.id, AttributeTag.local)",
+        lazy="raise_on_sql",
+        viewonly=True,
+    )
+    nonlocal_tags = relationship(
+        "Tag",
+        secondary="attribute_tags",
+        secondaryjoin="and_(AttributeTag.tag_id == Tag.id, not_(AttributeTag.local))",
+        lazy="raise_on_sql",
+        viewonly=True,
+    )
 
     __mapper_args__ = {"polymorphic_on": "type"}
 
     def __init__(self: Self, *arg, **kwargs) -> None:
-        if kwargs["value1"] is None:
+        if "value" in kwargs:
             split_val = kwargs["value"].split("|", 1)
             kwargs["value1"] = split_val[0]
             if len(split_val) == 2:
@@ -52,6 +114,14 @@ class Attribute(Base, DictMixin):
 
         super().__init__(*arg, **kwargs)
 
+    async def add_tag(self: Self, db: AsyncSession, tag: "Tag", local: bool = False) -> "AttributeTag":
+        if tag.local_only:
+            local = True
+        attribute_tag = AttributeTag(attribute=self, tag=tag, event_id=self.event_id, local=local)
+        db.add(attribute_tag)
+        await db.commit()
+        return attribute_tag
+
     @property
     def event_uuid(self: "Attribute") -> str:
         return self.event.uuid
@@ -69,6 +139,10 @@ class Attribute(Base, DictMixin):
         if len(split) == 2:
             self.value2 = split[1]
 
+    @value.comparator
+    def value(cls: Self) -> AttributeComparator:
+        return AttributeComparator(cls)
+
 
 class AttributeTag(Base):
     __tablename__ = "attribute_tags"
@@ -80,6 +154,10 @@ class AttributeTag(Base):
     event_id: Mapped[int] = mapped_column(Integer, ForeignKey(Event.id, ondelete="CASCADE"), nullable=False, index=True)
     tag_id: Mapped[int] = mapped_column(Integer, ForeignKey(Tag.id, ondelete="CASCADE"), nullable=False, index=True)
     local: Mapped[bool] = mapped_column(Boolean, nullable=False, default=False)
+    relationship_type: Mapped[str] = mapped_column(String(191), nullable=True)
+
+    attribute = relationship("Attribute", back_populates="attributetags", lazy="raise_on_sql")
+    tag = relationship("Tag", back_populates="attributetags", lazy="raise_on_sql")
 
 
 class AttributeMeta(DeclarativeMeta):

{mmisp_lib-0.3.0 → mmisp_lib-0.5.0}/src/mmisp/db/models/event.py

@@ -38,6 +38,37 @@ class Event(Base):
     protected: Mapped[bool] = mapped_column(Boolean)
 
     attributes = relationship("Attribute", back_populates="event")  # type:ignore[assignment,var-annotated]
+    mispobjects = relationship("Object", back_populates="event")  # type:ignore[assignment,var-annotated]
+    org = relationship(
+        "Organisation", primaryjoin="Event.org_id == Organisation.id", back_populates="events", lazy="raise_on_sql"
+    )  # type:ignore[assignment,var-annotated]
+    orgc = relationship(
+        "Organisation",
+        primaryjoin="Event.orgc_id == Organisation.id",
+        back_populates="events_created",
+        lazy="raise_on_sql",
+    )  # type:ignore[assignment,var-annotated]
+    creator = relationship("User", primaryjoin="Event.user_id == User.id", lazy="selectin")
+    tags = relationship("Tag", secondary="event_tags", lazy="raise_on_sql", viewonly=True)
+    eventtags = relationship(
+        "EventTag", primaryjoin="Event.id == EventTag.event_id", lazy="raise_on_sql", viewonly=True
+    )
+    eventtags_galaxy = relationship(
+        "EventTag",
+        primaryjoin="and_(Event.id == EventTag.event_id, Tag.is_galaxy)",
+        secondary="join(EventTag, Tag, EventTag.tag_id == Tag.id)",
+        secondaryjoin="EventTag.tag_id == Tag.id",
+        lazy="raise_on_sql",
+        viewonly=True,
+    )
+    galaxy_tags = relationship(
+        "Tag",
+        secondary="event_tags",
+        secondaryjoin="and_(EventTag.tag_id == Tag.id, Tag.is_galaxy)",
+        lazy="raise_on_sql",
+        overlaps="tags, events",
+        viewonly=True,
+    )
 
 
 class EventReport(Base):
@@ -61,3 +92,7 @@ class EventTag(Base):
     event_id: Mapped[int] = mapped_column(Integer, ForeignKey(Event.id, ondelete="CASCADE"), nullable=False, index=True)
     tag_id: Mapped[int] = mapped_column(Integer, ForeignKey(Tag.id, ondelete="CASCADE"), nullable=False, index=True)
     local: Mapped[bool] = mapped_column(Boolean, nullable=False, default=False)
+    relationship_type: Mapped[str] = mapped_column(String(191), nullable=True)
+
+    event = relationship("Event", back_populates="eventtags", lazy="raise_on_sql", viewonly=True)
+    tag = relationship("Tag", back_populates="eventtags", lazy="raise_on_sql", viewonly=True)

{mmisp_lib-0.3.0 → mmisp_lib-0.5.0}/src/mmisp/db/models/galaxy.py

@@ -1,4 +1,5 @@
 from sqlalchemy import Boolean, Integer, String, Text
+from sqlalchemy.orm import relationship
 
 from mmisp.db.mypy import Mapped, mapped_column
 from mmisp.lib.uuid import uuid
@@ -21,3 +22,9 @@ class Galaxy(Base):
     """must be serialized"""
     enabled: Mapped[bool] = mapped_column(Boolean, nullable=False, default=True)
     local_only: Mapped[bool] = mapped_column(Boolean, default=False)
+
+    galaxy_clusters = relationship(
+        "GalaxyCluster",
+        back_populates="galaxy",
+        lazy="raise_on_sql",
+    )  # type:ignore[assignment,var-annotated]

{mmisp_lib-0.3.0 → mmisp_lib-0.5.0}/src/mmisp/db/models/galaxy_cluster.py

@@ -1,4 +1,5 @@
 from sqlalchemy import Boolean, ForeignKey, Integer, String, Text
+from sqlalchemy.orm import relationship
 
 from mmisp.db.mypy import Mapped, mapped_column
 from mmisp.lib.uuid import uuid
@@ -34,6 +35,31 @@ class GalaxyCluster(Base):
     published: Mapped[bool] = mapped_column(Boolean, nullable=False, default=False)
     deleted: Mapped[bool] = mapped_column(Boolean, nullable=False, default=False)
 
+    org = relationship(
+        "Organisation",
+        primaryjoin="GalaxyCluster.org_id == Organisation.id",
+        back_populates="galaxy_clusters",
+        lazy="raise_on_sql",
+        foreign_keys="GalaxyCluster.org_id",
+    )  # type:ignore[assignment,var-annotated]
+    orgc = relationship(
+        "Organisation",
+        primaryjoin="GalaxyCluster.orgc_id == Organisation.id",
+        back_populates="galaxy_clusters_created",
+        lazy="raise_on_sql",
+        foreign_keys="GalaxyCluster.orgc_id",
+    )  # type:ignore[assignment,var-annotated]
+    galaxy = relationship(
+        "Galaxy",
+        back_populates="galaxy_clusters",
+        lazy="raise_on_sql",
+    )  # type:ignore[assignment,var-annotated]
+    galaxy_elements = relationship(
+        "GalaxyElement",
+        back_populates="galaxy_cluster",
+        lazy="raise_on_sql",
+    )  # type:ignore[assignment,var-annotated]
+
 
 class GalaxyElement(Base):
     __tablename__ = "galaxy_elements"
@@ -45,6 +71,12 @@ class GalaxyElement(Base):
     key: Mapped[str] = mapped_column(String(255), nullable=False, default="", index=True)
     value: Mapped[str] = mapped_column(Text, nullable=False)
 
+    galaxy_cluster = relationship(
+        "GalaxyCluster",
+        back_populates="galaxy_elements",
+        lazy="raise_on_sql",
+    )  # type:ignore[assignment,var-annotated]
+
 
 class GalaxyReference(Base):
     __tablename__ = "galaxy_reference"