curo1305 0fd6930b41 feat(07-01): services/ai_config.py HKDF helpers, ProviderConfig loader, env seed ...

- Create backend/services/ai_config.py with:
  - _derive_ai_settings_key(master_key, provider_id): fresh HKDF per call, salt=provider_id.encode("utf-8"), info=b"ai-provider-settings" (domain-separated from b"cloud-credentials")
  - encrypt_api_key / decrypt_api_key: Fernet round-trip without JSON wrapping
  - load_provider_config(session): reads is_active=True row from system_settings, decrypts api_key_enc; returns stub ProviderConfig (real class lands in Plan 02)
  - seed_system_settings_from_env(session): idempotent insert of default provider on first boot
  - _ProviderConfigStub: minimal Pydantic model stub until ai/provider_config.py exists (Plan 02)
- Update backend/main.py: import seed_system_settings_from_env, call in lifespan with try/except so missing table (pre-migration fresh boot) doesn't crash startup
- Round-trip smoke test: encrypt_api_key → decrypt_api_key == original plaintext

2026-06-04 18:50:01 +02:00

..

ai

refactor(backend): extract shared helper modules per architecture rules

2026-06-02 16:10:35 +02:00

api

feat(06-05): trusted-proxy get_client_ip, per-account rate limiter, promote 8 xfail tests (D-11/D-12/D-13)

2026-06-04 18:27:49 +02:00

db

feat(07-01): Alembic migration 0005 + SystemSettings ORM model

2026-06-04 18:46:11 +02:00

deps

feat(06-05): trusted-proxy get_client_ip, per-account rate limiter, promote 8 xfail tests (D-11/D-12/D-13)

2026-06-04 18:27:49 +02:00

load_tests

feat(06-03): implement Locust load test — self-bootstrap strategy, 4 tasks, SLA listener (D-04/D-05/D-06)

2026-06-03 18:48:47 +02:00

migrations

feat(07-01): Alembic migration 0005 + SystemSettings ORM model

2026-06-04 18:46:11 +02:00

services

feat(07-01): services/ai_config.py HKDF helpers, ProviderConfig loader, env seed

2026-06-04 18:50:01 +02:00

storage

refactor(backend): extract shared helper modules per architecture rules

2026-06-02 16:10:35 +02:00

tasks

refactor(backend): extract shared helper modules per architecture rules

2026-06-02 16:10:35 +02:00

tests

test(07-01): Wave 0 xfail stubs for D-01..D-16 (13 new stubs)

2026-06-04 18:44:53 +02:00

alembic.ini

chore: commit pending phase-3 work and add TEST_ACCOUNTS.md

2026-05-24 11:30:56 +02:00

celery_app.py

feat(phase-4-06): Celery daily audit export task + beat schedule (D-17)

2026-05-25 18:50:50 +02:00

config.py

feat(06-02): wire CorrelationIDMiddleware + config fields + promote 5 test stubs

2026-06-03 18:47:49 +02:00

Dockerfile

feat(06-04): multi-stage Dockerfile with appuser + docker-compose runtime hardening (D-07/D-08/D-09)

2026-06-04 18:20:38 +02:00

main.py

feat(07-01): services/ai_config.py HKDF helpers, ProviderConfig loader, env seed

2026-06-04 18:50:01 +02:00

pytest.ini

chore: initial commit — existing single-user document scanner codebase

2026-05-22 08:53:28 +02:00

requirements-dev.txt

feat(06-03): add backend/requirements-dev.txt with locust pin (D-04)

2026-06-03 18:47:43 +02:00

requirements.txt

feat(06-02): add structlog dependency + create services/logging.py

2026-06-03 18:44:37 +02:00