feat(api): MCP, OpenAPI & Dynamic Introspection

New Features:
- API endpoints now support comprehensive input validation with detailed error responses via Pydantic models.
- OpenAPI specification endpoint (/openapi.json) and interactive Swagger UI documentation (/docs) now available for API discovery.
- Enhanced MCP session lifecycle management with create, retrieve, and delete operations.
- Network diagnostic tools: traceroute, nslookup, NMAP scanning, and network topology viewing exposed via API.
- Device search, filtering by status (including 'offline'), and bulk operations (copy, delete, update).
- Wake-on-LAN functionality for remote device management.
- Added dynamic tool disablement and status reporting.

Bug Fixes:
- Fixed get_tools_status in registry to correctly return boolean values instead of None for enabled tools.
- Improved error handling for invalid API inputs with standardized validation responses.
- Fixed OPTIONS request handling for cross-origin requests.

Refactoring:
- Significant refactoring of api_server_start.py to use decorator-based validation (@validate_request).

test/ui/test_ui_devices.py

@@ -4,34 +4,28 @@ Device Details Page UI Tests
 Tests device details page, field updates, and delete operations
 """
 
-import time
-from selenium.webdriver.common.by import By
-from selenium.webdriver.support.ui import WebDriverWait
-from selenium.webdriver.support import expected_conditions as EC
-
 import sys
 import os
+from selenium.webdriver.common.by import By
 
 # Add test directory to path
 sys.path.insert(0, os.path.dirname(__file__))
 
-from test_helpers import BASE_URL, API_BASE_URL, api_get   # noqa: E402 [flake8 lint suppression]
+from .test_helpers import BASE_URL, API_BASE_URL, api_get, wait_for_page_load, wait_for_element_by_css, wait_for_input_value  # noqa: E402
 
 
 def test_device_list_page_loads(driver):
     """Test: Device list page loads successfully"""
     driver.get(f"{BASE_URL}/devices.php")
-    WebDriverWait(driver, 10).until(
-        EC.presence_of_element_located((By.TAG_NAME, "body"))
-    )
-    time.sleep(2)
+    wait_for_page_load(driver, timeout=10)
     assert "device" in driver.page_source.lower(), "Page should contain device content"
 
 
 def test_devices_table_present(driver):
     """Test: Devices table is rendered"""
     driver.get(f"{BASE_URL}/devices.php")
-    time.sleep(2)
+    wait_for_page_load(driver, timeout=10)
+    wait_for_element_by_css(driver, "table, #devicesTable", timeout=10)
     table = driver.find_elements(By.CSS_SELECTOR, "table, #devicesTable")
     assert len(table) > 0, "Devices table should be present"
 
@@ -39,7 +33,7 @@ def test_devices_table_present(driver):
 def test_device_search_works(driver):
     """Test: Device search/filter functionality works"""
     driver.get(f"{BASE_URL}/devices.php")
-    time.sleep(2)
+    wait_for_page_load(driver, timeout=10)
 
     # Find search input (common patterns)
     search_inputs = driver.find_elements(By.CSS_SELECTOR, "input[type='search'], input[placeholder*='search' i], .dataTables_filter input")
@@ -48,10 +42,11 @@ def test_device_search_works(driver):
         search_box = search_inputs[0]
         assert search_box.is_displayed(), "Search box should be visible"
 
-        # Type in search box
+        # Type in search box and wait briefly for filter to apply
         search_box.clear()
         search_box.send_keys("test")
-        time.sleep(1)
+        # Wait for DOM/JS to react (at least one row or filtered content) — if datatables in use, table body should update
+        wait_for_element_by_css(driver, "table tbody tr", timeout=5)
 
         # Verify search executed (page content changed or filter applied)
         assert True, "Search executed successfully"
@@ -82,10 +77,9 @@ def test_devices_totals_api(api_token):
 def test_add_device_with_generated_mac_ip(driver, api_token):
     """Add a new device using the UI, always clicking Generate MAC/IP buttons"""
     import requests
-    import time
 
     driver.get(f"{BASE_URL}/devices.php")
-    time.sleep(2)
+    wait_for_page_load(driver, timeout=10)
 
     # --- Click "Add Device" ---
     add_buttons = driver.find_elements(By.CSS_SELECTOR, "button#btnAddDevice, button[onclick*='addDevice'], a[href*='deviceDetails.php?mac='], .btn-add-device")
@@ -95,16 +89,16 @@ def test_add_device_with_generated_mac_ip(driver, api_token):
         assert True, "Add device button not found, skipping test"
         return
     add_buttons[0].click()
-    time.sleep(2)
+
+    # Wait for the device form to appear (use the NEWDEV_devMac field as indicator)
+    wait_for_element_by_css(driver, "#NEWDEV_devMac", timeout=10)
 
     # --- Helper to click generate button for a field ---
     def click_generate_button(field_id):
         btn = driver.find_element(By.CSS_SELECTOR, f"span[onclick*='generate_{field_id}']")
         driver.execute_script("arguments[0].click();", btn)
-        time.sleep(0.5)
-        # Return the new value
-        inp = driver.find_element(By.ID, field_id)
-        return inp.get_attribute("value")
+        # Wait for the input to be populated and return it
+        return wait_for_input_value(driver, field_id, timeout=10)
 
     # --- Generate MAC ---
     test_mac = click_generate_button("NEWDEV_devMac")
@@ -127,7 +121,6 @@ def test_add_device_with_generated_mac_ip(driver, api_token):
         assert True, "Save button not found, skipping test"
         return
     driver.execute_script("arguments[0].click();", save_buttons[0])
-    time.sleep(3)
 
     # --- Verify device via API ---
     headers = {"Authorization": f"Bearer {api_token}"}
@@ -139,7 +132,7 @@ def test_add_device_with_generated_mac_ip(driver, api_token):
     else:
         # Fallback: check UI
         driver.get(f"{BASE_URL}/devices.php")
-        time.sleep(2)
+        wait_for_page_load(driver, timeout=10)
         if test_mac in driver.page_source or "Test Device Selenium" in driver.page_source:
             assert True, "Device appears in UI"
         else: