🧪 Test script for event-based rev-reg management

[ff137]

Contributes a revocation registry resilience testing script, which tests the new event-driven approach (openwallet-foundation/acapy#3831).

---

Old NATS events related to revocation registry management:

• anoncreds::credential-definition::finished -- Initial credential definition event that kicks off the revocation setup process
• anoncreds::revocation-registry-definition::finished -- Successful storage event for revocation registry definition that triggers creation of revocation list (kept for backwards compatibility, no longer used)
• anoncreds::revocation-list::finished -- Finished event for revocation list (kept for backwards compatibility, not used in state machine)

New NATS events for tracking automated revocation resource creation:

Revocation registry definition:

• anoncreds::revocation-registry-definition::create-requested -- Event indicating that creation of a revocation registry definition resource on the ledger is requested
• anoncreds::revocation-registry-definition::create-response -- Response event that triggers the store event for the revocation registry definition
• anoncreds::revocation-registry-definition::store-requested -- Event requesting storage of the revocation registry definition result
• anoncreds::revocation-registry-definition::store-response -- Response event that triggers the finished event and backup creation if it's the first registry

Reovcation list:

• anoncreds::revocation-list::create-requested -- Event requesting creation of a revocation list
• anoncreds::revocation-list::create-response -- Response event for revocation list creation
• anoncreds::revocation-list::store-requested -- Event triggered by create-response to request storage of the revocation list
• anoncreds::revocation-list::store-response -- Response event that triggers activation if it's for the first registry

Registry activation:

• anoncreds::revocation-registry::activation-requested -- Event requesting activation of revocation registry, triggered for first registry and during full handling
• anoncreds::revocation-registry::activation-response -- Response event for revocation registry activation

Full registry handling:

• anoncreds::revocation-registry::full-detected -- Event indicating revocation registry is full, sets current registry to full, emits event to activate backup, and emits event to create new backup
• anoncreds::revocation-registry::full-handling-completed -- Event emitted after current registry is set to full (backup activation and new backup creation are queued asynchronously)

Notification if maximum retries gets exceeded:

• anoncreds::revocation-registry::intervention-required -- Event notifying issuer that manual intervention is required when retries continue to fail

---

The test script (app/tests/e2e/experimental/rev_reg_resilience_testing/test_rev_reg_resilience.py) is skipped by default as it's only intended for local testing.

It covers 11 different scenarios, each one interrupting the multitenant agent at a different point in the rev reg creation flow, and the test asserts that events recover properly when the agent starts up again, by revoking credentials and proving they are revoked.

The agent must be run at DEBUG log level for the monitor script to successfully detect when to interrupt the agent.

The agent's REGISTRY_SIZE env var can also be decreased to 4, to ensure that backup registries will be created and tested as well. The test script will issue and verify 10 credentials, so a REGISTRY_SIZE < 5 means that both initial registries will fill up, and backup will have to be created and used in order for tests to pass.

---

Includes some improvement to exception log handling for the acapy errors when agent is interrupted. Also refactors the other experimental test (test_many_revocations.py) to be up to date and usable. Common test fixtures are modularized for better reuse between these modules.

[github-actions]

EKS Regression Test Coverage

File	Stmts	Miss	Cover	Missing
app
main.py	80	2	98%	121–126
app/models
issuer.py	60	1	98%	52
verifier.py	96	5	95%	40, 63, 93, 116, 169
app/routes
connections.py	83	1	99%	194
jsonld.py	60	47	22%	21–91, 100–133
messaging.py	24	11	54%	43–52, 83–93
revocation.py	72	1	99%	274
trust_registry.py	62	2	97%	50–51
app/routes/wallet
credentials.py	85	58	32%	58–81, 106–118, 139–150, 175–189, 224–240, 273–290, 315–327, 348–359
dids.py	78	3	96%	243–252
app/services
acapy_ledger.py	24	1	96%	41
acapy_wallet.py	57	4	93%	62, 71, 150–151
revocation_registry.py	140	10	93%	70–71, 308, 401–410
app/services/definitions
schemas.py	56	1	98%	59
app/services/issuer
acapy_issuer_v2.py	94	1	99%	116
app/services/onboarding
tenants.py	64	36	44%	31–111, 147–148
verifier.py	39	1	97%	89
app/services/trust_registry
actors.py	106	9	92%	95–100, 110, 212–213, 215–220, 287–290
schemas.py	53	9	83%	57–63, 90–100
app/services/trust_registry/util
actor.py	31	2	94%	27–28
app/services/verifier
acapy_verifier_v2.py	131	3	98%	48, 94, 141
app/util
assert_public_did.py	18	12	33%	12–32
credentials.py	13	2	85%	11, 16
did.py	18	1	94%	35
retry_method.py	34	24	29%	20–35, 67–112
save_exchange_record.py	12	1	92%	27
string.py	15	4	73%	15–16, 20, 24
tenants.py	46	18	61%	25–31, 46–47, 56–63, 95–96, 102, 132
shared
log_config.py	54	20	63%	42–95, 104–111, 153, 162–174
shared/models
connection_record.py	33	6	82%	52–61, 89
credential_exchange.py	71	10	86%	71–77, 80–82
protocol.py	10	1	90%	18
trustregistry.py	70	7	90%	22, 44, 83–91
shared/util
api_router.py	14	1	93%	17
mock_agent_controller.py	53	1	98%	27
rich_parsing.py	8	5	38%	10–16
tails/routers
tails.py	101	1	99%	27
trustregistry
crud.py	190	3	98%	268–270
db.py	39	3	92%	25–27
main.py	88	8	91%	54–56, 81–83, 120, 138
trustregistry/registry
registry_actors.py	82	4	95%	36–38, 57
waypoint
main.py	53	1	98%	70
waypoint/services
nats_service.py	139	2	99%	217–218
TOTAL	4617	343	93%

Tests	Skipped	Failures	Errors	Time
876	48 💤	0 ❌	0 🔥	2m 55s ⏱️

[github-actions]

EKS E2E Test Coverage

File	Stmts	Miss	Cover	Missing
app
main.py	80	2	98%	121–126
app/models
issuer.py	60	1	98%	52
verifier.py	96	5	95%	40, 63, 93, 116, 169
app/routes
connections.py	83	1	99%	194
jsonld.py	60	47	22%	21–91, 100–133
messaging.py	24	11	54%	43–52, 83–93
revocation.py	72	1	99%	274
trust_registry.py	62	2	97%	50–51
app/routes/wallet
credentials.py	85	58	32%	58–81, 106–118, 139–150, 175–189, 224–240, 273–290, 315–327, 348–359
dids.py	78	3	96%	243–252
app/services
acapy_ledger.py	24	1	96%	41
acapy_wallet.py	57	4	93%	62, 71, 150–151
revocation_registry.py	140	10	93%	70–71, 308, 401–410
app/services/definitions
schemas.py	56	1	98%	59
app/services/issuer
acapy_issuer_v2.py	94	1	99%	116
app/services/onboarding
tenants.py	64	36	44%	31–111, 147–148
verifier.py	39	1	97%	89
app/services/trust_registry
actors.py	106	9	92%	95–100, 110, 212–213, 215–220, 287–290
schemas.py	53	9	83%	57–63, 90–100
app/services/trust_registry/util
actor.py	31	2	94%	27–28
app/services/verifier
acapy_verifier_v2.py	131	3	98%	48, 94, 141
app/util
assert_public_did.py	18	12	33%	12–32
credentials.py	13	2	85%	11, 16
did.py	18	1	94%	35
retry_method.py	34	24	29%	20–35, 67–112
save_exchange_record.py	12	1	92%	27
tenants.py	46	18	61%	25–31, 46–47, 56–63, 95–96, 102, 132
shared
log_config.py	54	20	63%	42–95, 104–111, 153, 162–174
shared/models
connection_record.py	33	6	82%	52–61, 89
credential_exchange.py	71	10	86%	71–77, 80–82
protocol.py	10	1	90%	18
trustregistry.py	70	7	90%	22, 44, 83–91
shared/util
api_router.py	14	1	93%	17
mock_agent_controller.py	53	1	98%	27
rich_parsing.py	8	5	38%	10–16
tails/routers
tails.py	101	1	99%	27
trustregistry
crud.py	190	3	98%	268–270
db.py	39	3	92%	25–27
main.py	88	8	91%	54–56, 81–83, 120, 138
trustregistry/registry
registry_actors.py	82	4	95%	36–38, 57
waypoint
main.py	53	1	98%	70
waypoint/services
nats_service.py	139	2	99%	217–218
TOTAL	4617	339	93%

Tests	Skipped	Failures	Errors	Time
876	13 💤	0 ❌	0 🔥	8m 4s ⏱️

[sonarqubecloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud