progress.txt

================================================================================
                        RustMISP Implementation Progress
================================================================================

This file tracks implementation progress across all iterations.
Mark items [x] when complete, [ ] when pending, [~] when in progress.

================================================================================
PHASE 0: REPOSITORY SETUP
================================================================================

--- Iteration 0: Standalone Repository & Submodule Integration ---
[ ] Create GitHub repository: github.com/MISP/RustMISP
[ ] Initialize git repo with main branch
[ ] Add .gitignore (Rust template: target/, Cargo.lock for lib, etc.)
[ ] Add LICENSE file (AGPL-3.0, matching MISP)
[ ] Add initial README.md with project description
[ ] Add CHANGELOG.md
[ ] Set up GitHub Actions CI (.github/workflows/ci.yml):
    - cargo fmt --check
    - cargo clippy -- -D warnings
    - cargo test
    - cargo doc --no-deps
[ ] Set up GitHub Actions release workflow (.github/workflows/release.yml)
[ ] Move PRD.md and progress.txt into the new repository
[ ] In the MISP repo: remove RustMISP/ directory from working tree
[ ] In the MISP repo: add RustMISP as a git submodule:
    git submodule add -b main https://github.com/MISP/RustMISP.git RustMISP
[ ] Verify: git clone --recurse-submodules of MISP fetches RustMISP
[ ] Verify: RustMISP can be cloned and developed independently

================================================================================
PHASE 1: FOUNDATION
================================================================================

--- Iteration 1: Project Scaffolding & Core Types ---
[x] Initialize Cargo project (cargo init --lib)
[x] Set up Cargo.toml with all dependencies and features
[x] Create module structure (src/lib.rs, src/models/mod.rs, etc.)
[x] Implement Distribution enum (with serde i32 repr)
[x] Implement ThreatLevel enum (with serde i32 repr)
[x] Implement Analysis enum (with serde i32 repr)
[x] Implement MispError enum (all 14 error variants)
[x] Implement MispResult<T> type alias
[x] Copy describeTypes.json into data/
[x] Unit tests: enum serialization round-trips
[x] Unit tests: error type coverage
[x] Verify: cargo build succeeds
[x] Verify: cargo test succeeds

--- Iteration 2: HTTP Client & Authentication ---
[x] Implement MispClient struct (url, key, ssl, client)
[x] Implement MispClientBuilder (proxy, timeout, headers, cert, CA)
[x] Implement _prepare_request (GET, POST, DELETE with auth header)
[x] Implement _check_response (JSON parsing, error extraction)
[x] Implement _check_head_response (HEAD for exists checks)
[x] Implement describe_types_local() - load bundled JSON
[x] Implement describe_types_remote() - GET /attributes/describeTypes.json
[x] Implement misp_instance_version() - GET /servers/getVersion
[x] Implement version() - GET /servers/getPyMISPVersion.json
[x] Implement server_settings() - GET /servers/serverSettings
[x] Implement get_server_setting(setting) - GET /servers/getSetting/{setting}
[x] Implement set_server_setting(setting, value) - POST /servers/serverSettingsEdit
[x] Implement remote_acl(debug_type) - GET /servers/queryACL/{debug_type}
[x] Implement db_schema_diagnostic() - GET /servers/schemaDiagnostics
[x] Unit tests: client construction with various configs
[x] Unit tests: request preparation (headers, auth)
[x] Integration test stub: version check against live MISP

--- Iteration 3: Event & Attribute & Tag Models + CRUD ---
[x] Implement MispTag struct (serde)
[x] Implement MispEvent struct (serde, with nested tags/attributes)
[x] Implement MispAttribute struct (serde, with nested tags/sightings)
[x] Implement events() - GET /events/index
[x] Implement get_event(id) - GET /events/view/{id}
[x] Implement event_exists(id) - HEAD /events/view/{id}
[x] Implement add_event(event) - POST /events/add
[x] Implement update_event(event) - POST /events/edit/{id}
[x] Implement delete_event(id) - POST /events/delete/{id}
[x] Implement publish(id, alert) - POST /events/publish/{id} or /events/alert/{id}
[x] Implement unpublish(id) - POST /events/unpublish/{id}
[x] Implement contact_event_reporter(id, msg) - POST /events/contact/{id}
[x] Implement enrich_event(id, modules) - POST /events/enrichEvent/{id}
[x] Implement attributes() - GET /attributes/index
[x] Implement get_attribute(id) - GET /attributes/view/{id}
[x] Implement attribute_exists(id) - HEAD /attributes/view/{id}
[x] Implement add_attribute(event_id, attr) - POST /attributes/add/{event_id}
[x] Implement update_attribute(attr) - POST /attributes/edit/{id}
[x] Implement delete_attribute(id, hard) - POST /attributes/delete/{id}
[x] Implement restore_attribute(id) - POST /attributes/restore/{id}
[x] Implement enrich_attribute(id, modules) - POST /attributes/enrichAttribute/{id}
[x] Implement tags() - GET /tags/index
[x] Implement get_tag(id) - GET /tags/view/{id}
[x] Implement add_tag(tag) - POST /tags/add
[x] Implement update_tag(tag) - POST /tags/edit/{id}
[x] Implement delete_tag(id) - POST /tags/delete/{id}
[x] Implement enable_tag(tag) - POST /tags/enable/{id}
[x] Implement disable_tag(tag) - POST /tags/disable/{id}
[x] Implement search_tags(name, strict) - GET /tags/search/{name}
[x] Implement tag(entity, tag, local) - POST /tags/attachTagToObject/{uuid}/{tag}
[x] Implement untag(entity, tag) - POST /tags/removeTagFromObject/{uuid}/{tag}
[x] Unit tests: MispEvent serde round-trip
[x] Unit tests: MispAttribute serde round-trip
[x] Unit tests: MispTag serde round-trip
[x] Unit tests: event CRUD with wiremock
[x] Unit tests: attribute CRUD with wiremock

================================================================================
PHASE 2: OBJECT MODEL & PROPOSALS
================================================================================

--- Iteration 4: Objects, References, Templates ---
[x] Implement MispObjectAttribute struct (extends MispAttribute + object_relation)
[x] Implement MispObjectReference struct (serde)
[x] Implement MispObject struct (with nested attributes, references)
[x] Implement MispObjectTemplate struct (serde)
[x] Implement get_object(id) - GET /objects/view/{id}
[x] Implement object_exists(id) - HEAD /objects/view/{id}
[x] Implement add_object(event_id, object) - POST /objects/add/{event_id}
[x] Implement update_object(object) - POST /objects/edit/{id}
[x] Implement delete_object(id, hard) - POST /objects/delete/{id}/{hard}
[x] Implement add_object_reference(ref) - POST /objectReferences/add
[x] Implement delete_object_reference(id) - POST /objectReferences/delete/{id}
[x] Implement object_templates() - GET /objectTemplates/index
[x] Implement get_object_template(id) - GET /objectTemplates/view/{id}
[x] Implement get_raw_object_template(uuid_or_name) - GET /objectTemplates/getRaw/{uuid}
[x] Implement update_object_templates() - POST /objectTemplates/update
[x] Unit tests: MispObject serde round-trip
[x] Unit tests: object CRUD with wiremock

--- Iteration 5: Proposals, Sightings, Event Reports ---
[x] Implement MispShadowAttribute struct (serde)
[x] Implement attribute_proposals(event_id) - GET /shadowAttributes/index/{event_id}
[x] Implement get_attribute_proposal(id) - GET /shadowAttributes/view/{id}
[x] Implement add_attribute_proposal(event_id, attr) - POST /shadowAttributes/add/{event_id}
[x] Implement update_attribute_proposal(attr_id, attr) - POST /shadowAttributes/edit/{id}
[x] Implement delete_attribute_proposal(id) - POST /shadowAttributes/delete/{id}
[x] Implement accept_attribute_proposal(id) - POST /shadowAttributes/accept/{id}
[x] Implement discard_attribute_proposal(id) - POST /shadowAttributes/discard/{id}
[x] Implement MispSighting struct (serde)
[x] Implement sightings(entity) - GET /sightings/index/{id}
[x] Implement add_sighting(sighting, attribute) - POST /sightings/add/{attr_id}
[x] Implement delete_sighting(id) - POST /sightings/delete/{id}
[x] Implement MispEventReport struct (serde)
[x] Implement get_event_report(id) - GET /eventReports/view/{id}
[x] Implement get_event_reports(event_id) - GET /eventReports/index/event_id:{id}
[x] Implement add_event_report(event_id, report) - POST /eventReports/add/{event_id}
[x] Implement update_event_report(report) - POST /eventReports/edit/{id}
[x] Implement delete_event_report(id, hard) - POST /eventReports/delete/{id}/{hard}
[x] Unit tests: serde round-trips for all new types
[x] Unit tests: proposal workflow with wiremock

--- Iteration 5b: Analyst Data (Notes, Opinions, Relationships) ---
[x] Implement AnalystDataType enum (Note, Opinion, Relationship)
[x] Implement MispNote struct (serde)
[x] Implement MispOpinion struct (serde)
[x] Implement MispRelationship struct (serde)
[x] Implement get_analyst_data(data_type, id) - GET /analystData/view/{type}/{id}
[x] Implement add_analyst_data(data_type, data) - POST /analystData/add/{type}
[x] Implement update_analyst_data(data_type, id, data) - POST /analystData/edit/{type}/{id}
[x] Implement delete_analyst_data(data_type, id) - POST /analystData/delete/{type}/{id}
[x] Implement get_note(id) - GET /analystData/view/Note/{id}
[x] Implement add_note(note) - POST /analystData/add/Note
[x] Implement update_note(note) - POST /analystData/edit/Note/{id}
[x] Implement delete_note(id) - POST /analystData/delete/Note/{id}
[x] Implement get_opinion(id) - GET /analystData/view/Opinion/{id}
[x] Implement add_opinion(opinion) - POST /analystData/add/Opinion
[x] Implement update_opinion(opinion) - POST /analystData/edit/Opinion/{id}
[x] Implement delete_opinion(id) - POST /analystData/delete/Opinion/{id}
[x] Implement get_relationship(id) - GET /analystData/view/Relationship/{id}
[x] Implement add_relationship(rel) - POST /analystData/add/Relationship
[x] Implement update_relationship(rel) - POST /analystData/edit/Relationship/{id}
[x] Implement delete_relationship(id) - POST /analystData/delete/Relationship/{id}
[x] Implement blocking wrappers for all analyst data methods
[x] Unit tests: MispNote serde round-trip
[x] Unit tests: MispOpinion serde round-trip
[x] Unit tests: MispRelationship serde round-trip
[x] Unit tests: builder methods for all types
[x] Unit tests: MISP wire format deserialization
[x] Verify: cargo build succeeds
[x] Verify: cargo test passes (367 tests, all green)
[x] Verify: cargo clippy -- -D warnings passes
[x] Verify: cargo doc --no-deps builds cleanly

================================================================================
PHASE 3: INTELLIGENCE LAYER
================================================================================

--- Iteration 6: Taxonomies, Warninglists, Noticelists ---
[x] Implement MispTaxonomy struct (serde)
[x] Implement taxonomies() - GET /taxonomies/index
[x] Implement get_taxonomy(id) - GET /taxonomies/view/{id}
[x] Implement enable_taxonomy(id) - POST /taxonomies/enable/{id}
[x] Implement disable_taxonomy(id) - POST /taxonomies/disable/{id}
[x] Implement enable_taxonomy_tags(id) - POST /taxonomies/addTag/{id}
[x] Implement disable_taxonomy_tags(id) - POST /taxonomies/disableTag/{id}
[x] Implement update_taxonomies() - POST /taxonomies/update
[x] Implement set_taxonomy_required(id, required) - POST /taxonomies/toggleRequired/{id}
[x] Implement MispWarninglist struct (serde)
[x] Implement warninglists() - GET /warninglists/index
[x] Implement get_warninglist(id) - GET /warninglists/view/{id}
[x] Implement toggle_warninglist(id, name, force) - POST /warninglists/toggleEnable
[x] Implement enable_warninglist(id) - POST /warninglists/toggleEnable (force=true)
[x] Implement disable_warninglist(id) - POST /warninglists/toggleEnable (force=false)
[x] Implement values_in_warninglist(values) - POST /warninglists/checkValue
[x] Implement update_warninglists() - POST /warninglists/update
[x] Implement MispNoticelist struct (serde)
[x] Implement noticelists() - GET /noticelists/index
[x] Implement get_noticelist(id) - GET /noticelists/view/{id}
[x] Implement enable_noticelist(id) - POST /noticelists/toggleEnable/{id}
[x] Implement disable_noticelist(id) - POST /noticelists/toggleEnable/{id}
[x] Implement update_noticelists() - POST /noticelists/update
[x] Unit tests: serde round-trips for taxonomy/warninglist/noticelist

--- Iteration 7: Galaxies, Decaying Models, Correlation Exclusions ---
[x] Implement MispGalaxy struct (serde)
[x] Implement MispGalaxyCluster struct (serde)
[x] Implement MispGalaxyClusterElement struct (serde)
[x] Implement MispGalaxyClusterRelation struct (serde)
[x] Implement galaxies(update) - GET /galaxies/index
[x] Implement search_galaxy(value) - POST /galaxies
[x] Implement get_galaxy(id, with_cluster) - GET /galaxies/view/{id}
[x] Implement search_galaxy_clusters(galaxy, context, searchall) - POST /galaxy_clusters/restSearch
[x] Implement update_galaxies() - POST /galaxies/update
[x] Implement get_galaxy_cluster(id) - GET /galaxy_clusters/view/{id}
[x] Implement add_galaxy_cluster(galaxy, cluster) - POST /galaxy_clusters/add/{galaxy_id}
[x] Implement update_galaxy_cluster(cluster) - POST /galaxy_clusters/edit/{id}
[x] Implement publish_galaxy_cluster(id) - POST /galaxy_clusters/publish/{id}
[x] Implement fork_galaxy_cluster(galaxy, cluster) - POST /galaxy_clusters/add/{galaxy_id}
[x] Implement delete_galaxy_cluster(id, hard) - POST /galaxy_clusters/delete/{id}/{hard}
[x] Implement add_galaxy_cluster_relation(rel) - POST /galaxy_cluster_relations/add
[x] Implement update_galaxy_cluster_relation(rel) - POST /galaxy_cluster_relations/edit/{id}
[x] Implement delete_galaxy_cluster_relation(id) - POST /galaxy_cluster_relations/delete/{id}
[x] Implement attach_galaxy_cluster(entity, cluster, local) - POST /galaxies/attachCluster/{uuid}/{tag}
[x] Implement MispDecayingModel struct (serde)
[x] Implement update_decaying_models() - POST /decayingModel/update
[x] Implement decaying_models() - GET /decayingModel/index
[x] Implement enable_decaying_model(id) - POST /decayingModel/enable/{id}
[x] Implement disable_decaying_model(id) - POST /decayingModel/disable/{id}
[x] Implement MispCorrelationExclusion struct (serde)
[x] Implement correlation_exclusions() - GET /correlationExclusions/index
[x] Implement get_correlation_exclusion(id) - GET /correlationExclusions/view/{id}
[x] Implement add_correlation_exclusion(exc) - POST /correlationExclusions/add
[x] Implement delete_correlation_exclusion(id) - POST /correlationExclusions/delete/{id}
[x] Implement clean_correlation_exclusions() - POST /correlationExclusions/clean
[x] Unit tests: galaxy model serde round-trips

================================================================================
PHASE 4: ADMINISTRATION
================================================================================

--- Iteration 8: Organisations, Users, Roles ---
[x] Implement MispOrganisation struct (serde)
[x] Implement organisations(scope, search) - GET /organisations/index
[x] Implement get_organisation(id) - GET /organisations/view/{id}
[x] Implement organisation_exists(id) - HEAD /organisations/view/{id}
[x] Implement add_organisation(org) - POST /admin/organisations/add
[x] Implement update_organisation(org) - POST /admin/organisations/edit/{id}
[x] Implement delete_organisation(id) - POST /admin/organisations/delete/{id}
[x] Implement MispUser struct (serde)
[x] Implement MispRole struct (serde)
[x] Implement MispInbox struct (serde)
[x] Implement users(search, organisation) - GET /admin/users/index
[x] Implement get_user(id) - GET /users/view/{id}
[x] Implement get_new_authkey(user) - POST /users/resetauthkey/{id}
[x] Implement add_user(user) - POST /admin/users/add
[x] Implement update_user(user) - POST /admin/users/edit/{id}
[x] Implement delete_user(id) - POST /admin/users/delete/{id}
[x] Implement change_user_password(password) - POST /users/change_pw
[x] Implement user_registrations() - GET /users/registrations/index
[x] Implement accept_user_registration(id, ...) - POST /users/registrations/accept/{id}
[x] Implement discard_user_registration(id) - POST /users/registrations/decline/{id}
[x] Implement users_heartbeat() - GET /users/heartbeat
[x] Implement roles() - GET /roles/index
[x] Implement add_role(role) - POST /admin/roles/add
[x] Implement update_role(role) - POST /admin/roles/edit/{id}
[x] Implement set_default_role(id) - POST /admin/roles/set_default/{id}
[x] Implement delete_role(id) - POST /admin/roles/delete/{id}
[x] Implement register_user() standalone function
[x] Unit tests: user/org/role serde round-trips

--- Iteration 9: Servers, Feeds, Sharing Groups, User Settings ---
[x] Implement MispServer struct (serde)
[x] Implement servers() - GET /servers/index
[x] Implement get_sync_config() - GET /servers/createSync
[x] Implement import_server(server) - POST /servers/import
[x] Implement add_server(server) - POST /servers/add
[x] Implement update_server(server) - POST /servers/edit/{id}
[x] Implement delete_server(id) - POST /servers/delete/{id}
[x] Implement server_pull(id, event) - GET /servers/pull/{id}/{event_id}
[x] Implement server_push(id, event) - GET /servers/push/{id}/{event_id}
[x] Implement test_server(id) - POST /servers/testConnection/{id}
[x] Implement update_misp() - POST /servers/update
[x] Implement restart_workers() - POST /servers/restartWorkers
[x] Implement restart_dead_workers() - POST /servers/restartDeadWorkers
[x] Implement get_workers() - GET /servers/getWorkers
[x] Implement start_worker(type) - POST /servers/startWorker/{type}
[x] Implement stop_worker_by_pid(pid) - POST /servers/stopWorker/{pid}
[x] Implement kill_all_workers() - POST /servers/killAllWorkers
[x] Implement MispFeed struct (serde)
[x] Implement feeds() - GET /feeds/index
[x] Implement get_feed(id) - GET /feeds/view/{id}
[x] Implement add_feed(feed) - POST /feeds/add
[x] Implement update_feed(feed) - POST /feeds/edit/{id}
[x] Implement delete_feed(id) - POST /feeds/delete/{id}
[x] Implement enable_feed(id) - POST /feeds/enable/{id}
[x] Implement disable_feed(id) - POST /feeds/disable/{id}
[x] Implement enable_feed_cache(id) - POST /feeds/cacheIndex/enable:{id}
[x] Implement disable_feed_cache(id) - POST /feeds/cacheIndex/disable:{id}
[x] Implement fetch_feed(id) - GET /feeds/fetchFromFeed/{id}
[x] Implement cache_all_feeds() - GET /feeds/cacheFeeds/all
[x] Implement cache_feed(id) - GET /feeds/cacheFeeds/{id}
[x] Implement cache_freetext_feeds() - GET /feeds/cacheFeeds/freetext
[x] Implement cache_misp_feeds() - GET /feeds/cacheFeeds/misp
[x] Implement compare_feeds() - GET /feeds/compareFeeds
[x] Implement load_default_feeds() - POST /feeds/loadDefaultFeeds
[x] Implement MispSharingGroup struct (serde)
[x] Implement sharing_groups() - GET /sharingGroups/index
[x] Implement get_sharing_group(id) - GET /sharingGroups/view/{id}
[x] Implement add_sharing_group(sg) - POST /sharingGroups/add
[x] Implement update_sharing_group(sg) - POST /sharingGroups/edit/{id}
[x] Implement sharing_group_exists(id) - HEAD /sharingGroups/view/{id}
[x] Implement delete_sharing_group(id) - POST /sharingGroups/delete/{id}
[x] Implement add_org_to_sharing_group(sg, org) - POST /sharingGroups/addOrg/{sg_id}/{org_id}
[x] Implement remove_org_from_sharing_group(sg, org) - POST /sharingGroups/removeOrg/{sg_id}/{org_id}
[x] Implement add_server_to_sharing_group(sg, server) - POST /sharingGroups/addServer/{sg_id}/{server_id}
[x] Implement remove_server_from_sharing_group(sg, server) - POST /sharingGroups/removeServer/{sg_id}/{server_id}
[x] Implement MispUserSetting struct (serde)
[x] Implement user_settings() - GET /userSettings/index
[x] Implement get_user_setting(setting, user) - GET /userSettings/view/{setting}
[x] Implement set_user_setting(setting, value, user) - POST /userSettings/setSetting/{user_id}/{setting}
[x] Implement delete_user_setting(setting, user) - POST /userSettings/delete/{setting}
[x] Unit tests: server/feed/sharing_group serde round-trips

================================================================================
PHASE 5: SEARCH & ADVANCED
================================================================================

--- Iteration 10: Search Engine ---
[x] Implement SearchParameters struct (50+ optional fields)
[x] Implement SearchBuilder with fluent API
[x] Implement search(controller, params) - POST /events/restSearch, /attributes/restSearch, /objects/restSearch
[x] Implement search_index(params) - POST /events/index
[x] Implement search_sightings(context, ...) - POST /sightings/restSearch/event/{id}
[x] Implement search_logs(limit, page, ...) - POST /admin/logs/index
[x] Implement search_feeds(value) - POST /feeds/searchCaches
[x] Implement build_complex_query(or, and, not) - returns nested dict
[x] Support return_format variants: json, xml, csv, text, stix, stix2, suricata, snort, yara, rpz, openioc
[x] Support relative timestamp parsing ("5d", "12h", "30m")
[x] Unit tests: SearchBuilder produces correct JSON
[x] Unit tests: complex query building
[x] Unit tests: timestamp parsing

--- Iteration 11: Advanced Features ---
[x] Implement freetext(event_id, string, ...) - POST /attributes/freeTextImport/{event_id}
[x] Implement upload_stix(path, data, version) - POST /events/upload_stix/{version}
[x] Implement direct_call(url, data, params) - raw API call
[x] Implement push_event_to_zmq(id) - POST /events/pushEventToZMQ/{id}
[x] Implement change_sharing_group_on_entity(entity, sg_id) - POST /events/changeSharingGroup
[x] Implement attributes_statistics(context, percentage) - GET /attributes/attributeStatistics/{context}/{percentage}
[x] Implement tags_statistics(percentage, name_sort) - GET /tags/tagStatistics/{percentage}/{name_sort}
[x] Implement users_statistics(context) - GET /users/statistics/{context}
[ ] Implement get_all_functions(not_implemented) - introspection (deferred: Rust introspection differs from Python)
[x] Implement MispEventBlocklist struct (serde)
[x] Implement MispOrganisationBlocklist struct (serde)
[x] Implement event_blocklists() - GET /eventBlocklists/index
[x] Implement organisation_blocklists() - GET /orgBlocklists/index
[x] Implement add_event_blocklist(uuids, ...) - POST /eventBlocklists/add
[x] Implement add_organisation_blocklist(uuids, ...) - POST /orgBlocklists/add
[x] Implement update_event_blocklist(bl) - POST /eventBlocklists/edit/{id}
[x] Implement update_organisation_blocklist(bl) - POST /orgBlocklists/edit/{id}
[x] Implement delete_event_blocklist(id) - POST /eventBlocklists/delete/{id}
[x] Implement delete_organisation_blocklist(id) - POST /orgBlocklists/delete/{id}
[x] Implement MispCommunity struct (serde)
[x] Implement communities() - GET /communities/index
[x] Implement get_community(id) - GET /communities/view/{id}
[x] Implement request_community_access(id, ...) - POST /communities/requestAccess/{id}
[x] Implement MispEventDelegation struct (serde)
[x] Implement event_delegations() - GET /eventDelegations/index
[x] Implement accept_event_delegation(id) - POST /eventDelegations/acceptDelegation/{id}
[x] Implement discard_event_delegation(id) - POST /eventDelegations/deleteDelegation/{id}
[x] Implement delegate_event(event, org, ...) - POST /eventDelegations/delegateEvent/{event_id}
[x] Implement MispLog struct (serde)
[x] Unit tests: blocklist/community/delegation serde

================================================================================
PHASE 6: TOOLS & POLISH
================================================================================

--- Iteration 12: Tools ---
[x] Implement AbstractMispObjectGenerator trait
[x] Implement GenericObjectGenerator
[x] Implement FileObject (feature: tools-file) - hash generation (MD5, SHA1, SHA256, SHA512)
[x] Implement CsvLoader (feature: tools-csv) - CSV to MISP attributes
[x] Implement load_openioc / load_openioc_file (feature: tools-openioc)
[x] Implement FeedGenerator (feature: tools-feed) - MISP feed metadata
[x] Implement attribute type/category validation from describeTypes.json
[x] Unit tests: GenericObjectGenerator
[x] Unit tests: validation against describeTypes.json

--- Iteration 13: Blocking Client & Python Tests ---
[x] Implement MispClientBlocking wrapper (wraps async with tokio::runtime::Runtime)
[ ] Copy Python test suite from PyMISP repo (github.com/MISP/PyMISP tests/) into tests/python/
[ ]   - test_mispevent.py
[ ]   - test_analyst_data.py
[ ]   - test_fileobject.py
[ ]   - test_emailobject.py
[ ]   - test_attributevalidationtool.py
[ ]   - test_reportlab.py
[ ]   - testlive_comprehensive.py
[ ]   - testlive_local.py
[ ]   - testlive_sync.py
[ ]   - All test data files (JSON, CSV, email, STIX, etc.)
[ ] Verify Python tests still pass with: cd tests/python && pytest
[x] Unit tests: blocking client mirrors async behavior

--- Iteration 14: Integration Tests, Examples, Documentation ---
[x] Write Rust integration tests mirroring testlive_comprehensive.py key scenarios:
[x]   - Event CRUD lifecycle
[x]   - Attribute CRUD with types
[x]   - Object creation with templates
[x]   - Tag operations
[x]   - Search with complex queries
[x]   - Sighting operations
[x]   - Galaxy attachment
[x]   - User/Org management
[x]   - Sharing group workflow
[x]   - Feed operations
[x] Write examples:
[x]   - basic_event.rs
[x]   - search_attributes.rs
[x]   - manage_tags.rs
[x]   - feed_operations.rs
[x]   - user_management.rs
[x]   - galaxy_operations.rs
[x]   - sightings.rs
[x]   - sharing_groups.rs
[x] Complete rustdoc documentation for all public types and methods
[x] Write README.md with quickstart guide
[x] Verify: cargo doc --no-deps builds cleanly
[x] Verify: cargo clippy -- -D warnings passes
[x] Verify: cargo test passes (unit tests)
[ ] Verify: cargo test -- --ignored passes (integration tests, requires MISP)

================================================================================
SUMMARY
================================================================================

Phase 0 (Repo Setup):        Iteration 0       [ ] Complete
Phase 1 (Foundation):        Iterations 1-3    [ ] Complete
Phase 2 (Objects/Proposals): Iterations 4-5    [ ] Complete
Phase 3 (Intelligence):      Iterations 6-7    [ ] Complete
Phase 4 (Administration):    Iterations 8-9    [ ] Complete
Phase 5 (Search/Advanced):   Iterations 10-11  [ ] Complete
Phase 6 (Tools/Polish):      Iterations 12-14  [ ] Complete

Total iterations: 15 (0-14)
Total API methods: ~263 (243 original + 20 analyst data)
Total data models: 34+ (30+ original + AnalystDataType, MispNote, MispOpinion, MispRelationship)