Stage 10: external blocklist importer — backend + frontend

- blocklist_repo.py: CRUD for blocklist_sources table
- import_log_repo.py: add/list/get-last log entries
- blocklist_service.py: source CRUD, preview, import (download/validate/ban),
  import_all, schedule get/set/info
- blocklist_import.py: APScheduler task (hourly/daily/weekly schedule triggers)
- blocklist.py router: 9 endpoints (list/create/update/delete/preview/import/
  schedule-get+put/log)
- blocklist.py models: ScheduleFrequency (StrEnum), ScheduleConfig, ScheduleInfo,
  ImportSourceResult, ImportRunResult, PreviewResponse
- 59 new tests (18 repo + 19 service + 22 router); 374 total pass
- ruff clean, mypy clean for Stage 10 files
- types/blocklist.ts, api/blocklist.ts, hooks/useBlocklist.ts
- BlocklistsPage.tsx: source management, schedule picker, import log table
- Frontend tsc + ESLint clean

backend/app/models/blocklist.py

@@ -1,7 +1,19 @@
-"""Blocklist source and import log Pydantic models."""
+"""Blocklist source and import log Pydantic models.
+
+Data shapes for blocklist source management, import operations, scheduling,
+and import log retrieval.
+"""
+
+from __future__ import annotations
+
+from enum import StrEnum
 
 from pydantic import BaseModel, ConfigDict, Field
 
+# ---------------------------------------------------------------------------
+# Blocklist source
+# ---------------------------------------------------------------------------
+
 
 class BlocklistSource(BaseModel):
     """Domain model for a blocklist source definition."""
@@ -21,21 +33,34 @@ class BlocklistSourceCreate(BaseModel):
 
     model_config = ConfigDict(strict=True)
 
-    name: str = Field(..., min_length=1, description="Human-readable source name.")
-    url: str = Field(..., description="URL of the blocklist file.")
+    name: str = Field(..., min_length=1, max_length=100, description="Human-readable source name.")
+    url: str = Field(..., min_length=1, description="URL of the blocklist file.")
     enabled: bool = Field(default=True)
 
 
 class BlocklistSourceUpdate(BaseModel):
-    """Payload for ``PUT /api/blocklists/{id}``."""
+    """Payload for ``PUT /api/blocklists/{id}``.  All fields are optional."""
 
     model_config = ConfigDict(strict=True)
 
-    name: str | None = Field(default=None, min_length=1)
+    name: str | None = Field(default=None, min_length=1, max_length=100)
     url: str | None = Field(default=None)
     enabled: bool | None = Field(default=None)
 
 
+class BlocklistListResponse(BaseModel):
+    """Response for ``GET /api/blocklists``."""
+
+    model_config = ConfigDict(strict=True)
+
+    sources: list[BlocklistSource] = Field(default_factory=list)
+
+
+# ---------------------------------------------------------------------------
+# Import log
+# ---------------------------------------------------------------------------
+
+
 class ImportLogEntry(BaseModel):
     """A single blocklist import run record."""
 
@@ -50,35 +75,105 @@ class ImportLogEntry(BaseModel):
     errors: str | None
 
 
-class BlocklistListResponse(BaseModel):
-    """Response for ``GET /api/blocklists``."""
-
-    model_config = ConfigDict(strict=True)
-
-    sources: list[BlocklistSource] = Field(default_factory=list)
-
-
 class ImportLogListResponse(BaseModel):
     """Response for ``GET /api/blocklists/log``."""
 
     model_config = ConfigDict(strict=True)
 
-    entries: list[ImportLogEntry] = Field(default_factory=list)
+    items: list[ImportLogEntry] = Field(default_factory=list)
     total: int = Field(..., ge=0)
+    page: int = Field(default=1, ge=1)
+    page_size: int = Field(default=50, ge=1)
+    total_pages: int = Field(default=1, ge=1)
 
 
-class BlocklistSchedule(BaseModel):
-    """Current import schedule and next run information."""
+# ---------------------------------------------------------------------------
+# Schedule
+# ---------------------------------------------------------------------------
+
+
+class ScheduleFrequency(StrEnum):
+    """Available import schedule frequency presets."""
+
+    hourly = "hourly"
+    daily = "daily"
+    weekly = "weekly"
+
+
+class ScheduleConfig(BaseModel):
+    """Import schedule configuration.
+
+    The interpretation of fields depends on *frequency*:
+
+    - ``hourly``:  ``interval_hours`` controls how often (every N hours).
+    - ``daily``:   ``hour`` and ``minute`` specify the daily run time (UTC).
+    - ``weekly``:  additionally uses ``day_of_week`` (0=Monday … 6=Sunday).
+    """
+
+    # No strict=True here: FastAPI and json.loads() both supply enum values as
+    # plain strings; strict mode would reject string→enum coercion.
+
+    frequency: ScheduleFrequency = ScheduleFrequency.daily
+    interval_hours: int = Field(default=24, ge=1, le=168, description="Used when frequency=hourly")
+    hour: int = Field(default=3, ge=0, le=23, description="UTC hour for daily/weekly runs")
+    minute: int = Field(default=0, ge=0, le=59, description="Minute for daily/weekly runs")
+    day_of_week: int = Field(
+        default=0,
+        ge=0,
+        le=6,
+        description="Day of week for weekly runs (0=Monday … 6=Sunday)",
+    )
+
+
+class ScheduleInfo(BaseModel):
+    """Current schedule configuration together with runtime metadata."""
 
     model_config = ConfigDict(strict=True)
 
-    hour: int = Field(..., ge=0, le=23, description="UTC hour for the daily import.")
-    next_run_at: str | None = Field(default=None, description="ISO 8601 UTC timestamp of the next scheduled import.")
+    config: ScheduleConfig
+    next_run_at: str | None
+    last_run_at: str | None
 
 
-class BlocklistScheduleUpdate(BaseModel):
-    """Payload for ``PUT /api/blocklists/schedule``."""
+# ---------------------------------------------------------------------------
+# Import results
+# ---------------------------------------------------------------------------
+
+
+class ImportSourceResult(BaseModel):
+    """Result of importing a single blocklist source."""
 
     model_config = ConfigDict(strict=True)
 
-    hour: int = Field(..., ge=0, le=23)
+    source_id: int | None
+    source_url: str
+    ips_imported: int
+    ips_skipped: int
+    error: str | None
+
+
+class ImportRunResult(BaseModel):
+    """Aggregated result from a full import run across all enabled sources."""
+
+    model_config = ConfigDict(strict=True)
+
+    results: list[ImportSourceResult] = Field(default_factory=list)
+    total_imported: int
+    total_skipped: int
+    errors_count: int
+
+
+# ---------------------------------------------------------------------------
+# Preview
+# ---------------------------------------------------------------------------
+
+
+class PreviewResponse(BaseModel):
+    """Response for ``GET /api/blocklists/{id}/preview``."""
+
+    model_config = ConfigDict(strict=True)
+
+    entries: list[str] = Field(default_factory=list, description="Sample of valid IP entries")
+    total_lines: int
+    valid_count: int
+    skipped_count: int