kevinveenbirkenbachandClaude Opus 5 98707e06f4 test(matrix): hold the CA passthrough guard to the repo's own conventions ...

The guard landed in 2acf91e18 breaking two rules it should have followed from
the start, and `make quality-high` caught both:

    test_ca_trust_passthrough.py:23: `parents[N]` index expression
    test_ca_trust_passthrough.py:23: `PROJECT_ROOT` assignment outside `__init__.py`
    test_ca_trust_passthrough.py:44: .read_text(...) uncached

So `PROJECT_ROOT` moves into the package `__init__.py`, where every other role
test suite keeps it, and both template reads go through `read_text` from
`utils.cache.files` so a second reader of the same file pays one open.

Verified with the flags the suite actually runs under. scripts/tests/code/run.sh
passes `--import-mode=importlib` and `consider_namespace_packages=true`, which
is what makes a hyphenated `roles/<role>/` directory importable at all; a plain
`pytest <path>` fails the relative import here and does so for the existing
sys-svc-mail-msmtp suite too, which is the control that says the pattern is
right and the invocation was wrong. Under those flags both suites pass.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-10 02:01:19 +02:00

..

cli

fix(ci): answer a role-only selection by existence, not by variant None

2026-09-10 01:44:59 +02:00

group_vars

fix(litellm): gate consumers on a served model, not on the gateway being deployed

2026-09-04 19:48:32 +02:00

library

…

plugins

fix(ai): resolve the gateway backend from the inventory, not from one host

2026-09-09 19:28:44 +02:00

roles

test(matrix): hold the CA passthrough guard to the repo's own conventions

2026-09-10 02:01:19 +02:00

scripts

fix(diagnostics): let the in-zone probes read the drop-in that holds the zone

2026-09-03 12:50:58 +02:00

utils

perf(healthcheck): let the start window outlast a real boot

2026-09-09 21:54:26 +02:00

__init__.py

…