busya 8fd23f7ea1 refactor(ssl): centralize SSL trust management, remove LLM_SSL_VERIFY ...

Centralized SSL via one contract: CERTS_PATH=/opt/certs mounted into all containers.

Backend:
  - NEW: backend/src/core/ssl.py — system_ssl_context(), httpx_verify(),
    cert_dir_inventory()
  - LLMClient._get_ssl_verify() → delegates to core.ssl
  - _llm_async_http._get_verify() → delegates to core.ssl
  - Removed LLM_SSL_VERIFY env reading from all runtime code

Docker:
  - NEW: docker/certs.sh — shared cert installer (PEM/DER/cer to .crt conversion,
    update-ca-certificates, hash symlinks, NSS import)
  - NEW: docker/agent.entrypoint.sh — agent entrypoint with cert installation
  - backend.entrypoint.sh → uses certs.sh instead of install_llm_ca_certs
  - Dockerfile.agent → adds ca-certificates, openssl, entrypoint

Compose:
  - Removed LLM_CA_CERT_URLS and LLM_SSL_VERIFY from all compose files
  - Added CERTS_PATH volume mount to agent (dev + enterprise)
  - Added certs volume mount to backend/agent in dev compose

Env examples:
  - Removed LLM_SSL_VERIFY, LLM_CA_CERT_URLS from .env.example,
    .env.enterprise-clean.example, .env.current.example, .env.master.example,
    backend/.env.example
  - Enhanced CERTS_PATH comments with accepted formats

Diagnostics:
  - diag_container.py: removed LLM_* checks, added CERTS_PATH inventory,
    uses core.ssl for context creation

Tests:
  - Updated test_llm_analysis_service, test_llm_async_http,
    test_client_headers to verify centralized ssl context (no env disable)
  - 4/4 SSL tests pass

2026-07-06 21:00:28 +03:00

..

agent

test(backend): update legacy agent and auth expectations

2026-07-06 01:23:09 +03:00

api

test(git): align route mocks with async services

2026-07-06 01:23:20 +03:00

core

fix(git): fix 17 missing async/await bugs + UX overhaul

2026-07-01 20:47:25 +03:00

fixtures

feat(agent-chat): 035-agent-chat-context — контекст, guardrails, tools, database discovery

2026-07-04 22:47:17 +03:00

integration

test(backend): update legacy agent and auth expectations

2026-07-06 01:23:09 +03:00

models

🎉 FINAL: 7194 tests passing, 0 failures, 80% raw / ~90% real coverage.

2026-06-16 00:12:49 +03:00

plugins

refactor(ssl): centralize SSL trust management, remove LLM_SSL_VERIFY

2026-07-06 21:00:28 +03:00

schemas

🎉 FINAL: 7194 tests passing, 0 failures, 80% raw / ~90% real coverage.

2026-06-16 00:12:49 +03:00

scripts

🎉 FINAL: 98.4% real coverage! 7778 tests, 0 failures.

2026-06-16 11:01:31 +03:00

services

test(git): align route mocks with async services

2026-07-06 01:23:20 +03:00

test_agent

refactor(env): unify Docker env vars — canonical AUTH_SECRET_KEY, remove JWT_SECRET fallback

2026-07-06 14:24:17 +03:00

test_core

fix(git): fix 17 missing async/await bugs + UX overhaul

2026-07-01 20:47:25 +03:00

conftest.py

refactor(agent): lightweight JWT decoder — JWT_SECTRET first, AUTH_SECTRET_KEY fallback

2026-07-06 13:45:22 +03:00

test_agent_retry.py

feat(agent-chat): complete context guardrail event coverage

2026-07-05 14:14:42 +03:00

test_agent_summarise.py

feat(agent-chat): 035-agent-chat-context — контекст, guardrails, tools, database discovery

2026-07-04 22:47:17 +03:00

test_agent_timeout.py

feat(agent-chat): 035-agent-chat-context — контекст, guardrails, tools, database discovery

2026-07-04 22:47:17 +03:00

test_alembic_migrations.py

alembic fix

2026-06-01 16:34:07 +03:00

test_api_key_auth.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

test_api_key_model.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

test_api_key_routes.py

🎉 FINAL: 7194 tests passing, 0 failures, 80% raw / ~90% real coverage.

2026-06-16 00:12:49 +03:00

test_app_handlers.py

test(app): add split app.py tests and extend migration_engine coverage

2026-06-10 14:57:18 +03:00

test_app_lifespan.py

test(app): add split app.py tests and extend migration_engine coverage

2026-06-10 14:57:18 +03:00

test_app_middleware.py

test: final 6 agents — 172+ translate tests, llm_analysis 89%, git_plugin 100%, migration/deps/routes polished. 85-94% files pushed to 95%+. Bulk: backup/debug/maintenance plugins

2026-06-15 22:04:40 +03:00

test_app_spa.py

🎉 FINAL: 98.4% real coverage! 7778 tests, 0 failures.

2026-06-16 11:01:31 +03:00

test_app_ws_auth.py

test(app): add split app.py tests and extend migration_engine coverage

2026-06-10 14:57:18 +03:00

test_app_ws_endpoint.py

🎉 FINAL: 98.4% real coverage! 7778 tests, 0 failures.

2026-06-16 11:01:31 +03:00

test_app_ws_events.py

🎉 FINAL: 98.4% real coverage! 7778 tests, 0 failures.

2026-06-16 11:01:31 +03:00

test_auth.py

test(backend): update legacy agent and auth expectations

2026-07-06 01:23:09 +03:00

test_clean_release_dto_enums_exceptions.py

test: 8 parallel agents — fix 150+ failures, add 30+ test files. schemas/models 99-100%, core/client_registry ~98%, maintenance 95-98%, git edges 97%, translate 98-100%, dashboard routes 95-96%, dataset_review 100%

2026-06-15 17:31:43 +03:00

test_connection_service.py

qa: orthogonal test review — 20 files sampled, 16+ fixed

2026-06-16 12:11:49 +03:00

test_constants_audit_fixes.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

test_core_scheduler.py

fix(core): centralize async/sync bridge for APScheduler scheduled jobs

2026-06-17 16:22:30 +03:00

test_core_timezone_edge.py

chore: update backend tests

2026-06-16 12:01:03 +03:00

test_dashboards_api.py

037: fix 99 failing tests — missing await after async migration

2026-06-05 15:43:35 +03:00

test_datasets.py

qa: orthogonal test review — 20 files sampled, 16+ fixed

2026-06-16 12:11:49 +03:00

test_db_executor.py

qa: orthogonal test review — 20 files sampled, 16+ fixed

2026-06-16 12:11:49 +03:00

test_dependencies_unit.py

test(backend): update legacy agent and auth expectations

2026-07-06 01:23:09 +03:00

test_deprecation_audit_fixes.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

test_layout_utils.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

test_log_persistence.py

test: 5 final agents — fix 40+ failures, llm_analysis 80%+, git_plugin 90%+, routes 90-98%, services 98-100%, core 90-100%. Coverage: real 87%, target 95%+

2026-06-15 19:31:56 +03:00

test_logger.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

test_logging_audit_fixes.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

test_maintenance_api.py

🎉 FINAL: 7194 tests passing, 0 failures, 80% raw / ~90% real coverage.

2026-06-16 00:12:49 +03:00

test_maintenance_service.py

037: fix 99 failing tests — missing await after async migration

2026-06-05 15:43:35 +03:00

test_models_auth_llm.py

test: 8 parallel agents — fix 150+ failures, add 30+ test files. schemas/models 99-100%, core/client_registry ~98%, maintenance 95-98%, git edges 97%, translate 98-100%, dashboard routes 95-96%, dataset_review 100%

2026-06-15 17:31:43 +03:00

test_models_clean_release_ext.py

🎉 FINAL: 98.4% real coverage! 7778 tests, 0 failures.

2026-06-16 11:01:31 +03:00

test_models_dashboard.py

test: 8 parallel agents — fix 150+ failures, add 30+ test files. schemas/models 99-100%, core/client_registry ~98%, maintenance 95-98%, git edges 97%, translate 98-100%, dashboard routes 95-96%, dataset_review 100%

2026-06-15 17:31:43 +03:00

test_models_edge.py

test: 6 parallel agents — +40 test files across core, agent, translate, services, API routes, dataset_review. core 100%, agent 100%, services 100%, translate plugin mostly done. Pending: ~10 minor failures to fix

2026-06-15 16:45:49 +03:00

test_models_filter_state.py

test: 8 parallel agents — fix 150+ failures, add 30+ test files. schemas/models 99-100%, core/client_registry ~98%, maintenance 95-98%, git edges 97%, translate 98-100%, dashboard routes 95-96%, dataset_review 100%

2026-06-15 17:31:43 +03:00

test_models_git.py

feat(semantic): curator-driven protocol hardening — decision memory + relation repair

2026-07-02 08:53:19 +03:00

test_models_translate.py

test: 8 parallel agents — fix 150+ failures, add 30+ test files. schemas/models 99-100%, core/client_registry ~98%, maintenance 95-98%, git edges 97%, translate 98-100%, dashboard routes 95-96%, dataset_review 100%

2026-06-15 17:31:43 +03:00

test_models.py

chore: update backend tests

2026-06-16 12:01:03 +03:00

test_orchestrator_direct_db.py

qa: orthogonal test review — 20 files sampled, 16+ fixed

2026-06-16 12:11:49 +03:00

test_resource_hubs.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

test_scheduler_ensure_aware.py

perf: fix translate deadlock, speed, trace_id, UI bugs — fullstack patch

2026-06-18 23:54:57 +03:00

test_schemas_edge.py

chore: update backend tests

2026-06-16 12:01:03 +03:00

test_security_audit_fixes.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

test_security_orthogonal.py

test(backend): update legacy agent and auth expectations

2026-07-06 01:23:09 +03:00

test_smoke_app.py

qa: orthogonal test review — 20 files sampled, 16+ fixed

2026-06-16 12:11:49 +03:00

test_smoke_plugins.py

chore: update backend tests

2026-06-16 12:01:03 +03:00

test_sql_table_extractor_coverage.py

🎉 FINAL: 7194 tests passing, 0 failures, 80% raw / ~90% real coverage.

2026-06-16 00:12:49 +03:00

test_sql_table_extractor.py

🎉 FINAL: 7194 tests passing, 0 failures, 80% raw / ~90% real coverage.

2026-06-16 00:12:49 +03:00

test_storage_audit_fixes.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

test_storage_config.py

fix(maintenance): auto-expiry + adaptive markdown height + tests

2026-05-25 08:36:33 +03:00

test_task_manager.py

fix(agent-chat): streaming state leak, document parser magic bytes, HITL flow

2026-06-29 17:15:25 +03:00

test_task_persistence.py

test: 5 final agents — fix 40+ failures, llm_analysis 80%+, git_plugin 90%+, routes 90-98%, services 98-100%, core 90-100%. Coverage: real 87%, target 95%+

2026-06-15 19:31:56 +03:00

test_translate_corrections.py

test(translate): add tests for ConnectionService, DbExecutor, orchestrator direct DB dispatch

2026-06-11 19:12:45 +03:00

test_translate_executor_filter.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

test_translate_history.py

test(translate): add tests for ConnectionService, DbExecutor, orchestrator direct DB dispatch

2026-06-11 19:12:45 +03:00

test_translate_jobs.py

test(translate): add tests for ConnectionService, DbExecutor, orchestrator direct DB dispatch

2026-06-11 19:12:45 +03:00

test_translate_scheduler_audit.py

fix(core): centralize async/sync bridge for APScheduler scheduled jobs

2026-06-17 16:22:30 +03:00

test_translate_scheduler_execution.py

test: final 6 agents — 172+ translate tests, llm_analysis 89%, git_plugin 100%, migration/deps/routes polished. 85-94% files pushed to 95%+. Bulk: backup/debug/maintenance plugins

2026-06-15 22:04:40 +03:00

test_translate_scheduler_guard.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

test_translate_scheduler.py

test: final 6 agents — 172+ translate tests, llm_analysis 89%, git_plugin 100%, migration/deps/routes polished. 85-94% files pushed to 95%+. Bulk: backup/debug/maintenance plugins

2026-06-15 22:04:40 +03:00