busya 5c59a2c79b feat(security): add encryption health inventory and key recovery wizard ...

Backend:
  - GET /api/security/encryption/health — inventory of all stored encrypted
    secrets (LLM providers, DB connections, profile Git tokens) with
    decrypt attempt and structured broken/healthy status
  - GET /api/security/encryption/fingerprint — non-secret key fingerprint
  - POST /api/security/encryption/recover — bulk replacement of
    undecryptable secrets with partial_success semantics

Frontend:
  - KeyRecoveryModel.svelte.ts — state machine (idle→scanning→
    healthy/needs_recovery→editing→saving→complete/partial_success/error)
  - KeyRecoveryWizard.svelte — tabbed dialog with LLM/DB/Git sections,
    security guidance, re-encrypt command display, edit/save flow
  - SystemSettings entry point — 'Check encrypted secrets' card with
    fingerprint and broken count
  - API methods: getEncryptionHealth, recoverEncryptedSecrets
  - Types: EncryptionRecoveryTypes
  - i18n: en/ru strings for recovery flow

Tests: 226 passed

2026-07-06 18:05:05 +03:00

..

.axiom/runtime

fix(maintenance): auto-expiry + adaptive markdown height + tests

2026-05-25 08:36:33 +03:00

alembic

fix(migrations): add merge head and insert_method/connection migration

2026-06-11 19:12:49 +03:00

git_repos/remote/test-repo.git

fix(health): suppress 404 when health monitor disabled + fix audit test assertion

2026-05-17 14:18:02 +03:00

src

feat(security): add encryption health inventory and key recovery wizard

2026-07-06 18:05:05 +03:00

tests

refactor(env): unify Docker env vars — canonical AUTH_SECRET_KEY, remove JWT_SECRET fallback

2026-07-06 14:24:17 +03:00

_batch_convert_defs.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

_convert_defs.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

:memory:test_auth

test: 8 parallel agents — fix 150+ failures, add 30+ test files. schemas/models 99-100%, core/client_registry ~98%, maintenance 95-98%, git edges 97%, translate 98-100%, dashboard routes 95-96%, dataset_review 100%

2026-06-15 17:31:43 +03:00

:memory:test_main

v4: 7643 tests passing, 83% raw / 96.9% real coverage (excl __tests__).

2026-06-16 09:34:10 +03:00

.env.example

refactor(env): unify Docker env vars — canonical AUTH_SECRET_KEY, remove JWT_SECRET fallback

2026-07-06 14:24:17 +03:00

alembic.ini

alembic fix

2026-06-01 16:34:07 +03:00

conftest.py

feat(reports): add task status settings and tests

2026-07-06 01:22:39 +03:00

pyproject.toml

feat(reports): add task status settings and tests

2026-07-06 01:22:39 +03:00

requirements-agent.txt

fix(agent): pin gradio <6 to avoid breaking ChatInterface API changes

2026-07-06 16:18:55 +03:00

requirements-backend.txt

fix(docker): add alembic to requirements-backend.txt, entrypoint needs it for migrations

2026-07-06 15:49:48 +03:00

requirements-dev.txt

fix(agent-chat): streaming state leak, document parser magic bytes, HITL flow

2026-06-29 17:15:25 +03:00

requirements-docker.txt

refactor(docker): split requirements by role, slim enterprise bundle by default

2026-07-06 10:06:07 +03:00

requirements-embeddings.txt

refactor(docker): split requirements by role, slim enterprise bundle by default

2026-07-06 10:06:07 +03:00

requirements.txt

refactor(docker): split requirements by role, slim enterprise bundle by default

2026-07-06 10:06:07 +03:00

ruff.toml

semantic

2026-05-20 23:54:53 +03:00

test_pat_api.py

chore(lint): apply ruff --fix (4443 auto-fixes)

2026-05-14 11:20:17 +03:00