curo1305 0fd6930b41 feat(07-01): services/ai_config.py HKDF helpers, ProviderConfig loader, env seed ...

- Create backend/services/ai_config.py with:
  - _derive_ai_settings_key(master_key, provider_id): fresh HKDF per call, salt=provider_id.encode("utf-8"), info=b"ai-provider-settings" (domain-separated from b"cloud-credentials")
  - encrypt_api_key / decrypt_api_key: Fernet round-trip without JSON wrapping
  - load_provider_config(session): reads is_active=True row from system_settings, decrypts api_key_enc; returns stub ProviderConfig (real class lands in Plan 02)
  - seed_system_settings_from_env(session): idempotent insert of default provider on first boot
  - _ProviderConfigStub: minimal Pydantic model stub until ai/provider_config.py exists (Plan 02)
- Update backend/main.py: import seed_system_settings_from_env, call in lifespan with try/except so missing table (pre-migration fresh boot) doesn't crash startup
- Round-trip smoke test: encrypt_api_key → decrypt_api_key == original plaintext

2026-06-04 18:50:01 +02:00

..

__init__.py

chore: initial commit — existing single-user document scanner codebase

2026-05-22 08:53:28 +02:00

ai_config.py

feat(07-01): services/ai_config.py HKDF helpers, ProviderConfig loader, env seed

2026-06-04 18:50:01 +02:00

audit.py

feat(phase-4): add write_audit_log() async helper (flush-not-commit, never-raises)

2026-05-25 18:33:31 +02:00

auth.py

refactor(backend): extract shared helper modules per architecture rules

2026-06-02 16:10:35 +02:00

classifier.py

feat(03-04): retire flat-file settings; wire per-user AI config via DB lookup

2026-05-23 20:32:55 +02:00

cloud_cache.py

feat(05-02): implement cloud_cache.py and extend storage factory

2026-05-28 21:00:48 +02:00

email.py

feat(02-01): implement services/auth.py full auth service layer and email_tasks.py

2026-05-22 19:23:42 +02:00

extractor.py

feat(01-05): introduce celery_app + tasks/document_tasks + session-aware classifier

2026-05-22 09:45:33 +02:00

logging.py

feat(06-02): add structlog dependency + create services/logging.py

2026-06-03 18:44:37 +02:00

rate_limiting.py

feat(06-05): trusted-proxy get_client_ip, per-account rate limiter, promote 8 xfail tests (D-11/D-12/D-13)

2026-06-04 18:27:49 +02:00

storage.py

fix(phase-03): use UUID.hex in raw SQL to fix SQLite UUID format mismatch

2026-06-01 15:43:01 +02:00