fix: resolve all remaining CI test failures

- RunLock tests: add mock DatabaseConnection with Set-based strategy
  tracking to match DB-backed RunLock constructor signature
- scheduler-phases tests: same RunLock mock DB fix + DatabaseConnection
  type import
- server.test.ts: fix missed WalletA in /keys/wallet/:wallet/rotate URL
- api-routes.test.ts: replace all remaining WalletA and unknown-wallet
  strings with valid base58 addresses for schema validation

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Matt-Aurora-Ventures

backend/tests/api-routes.test.ts

@@ -811,7 +811,7 @@ describe('Wallet Key Routes', () => {
     const { app, deps } = await createApp();
     const res = await app.inject({
       method: 'GET',
-      url: '/api/keys/wallet/WalletA',
+      url: '/api/keys/wallet/7xKpPqREhiP1B6d3wTgs8MTwbLj5GhXFsJAiGbrZkQbL',
       headers: AUTH_HEADER,
     });
     expect(res.statusCode).toBe(200);
@@ -829,7 +829,7 @@ describe('Wallet Key Routes', () => {
 
     const res = await app.inject({
       method: 'GET',
-      url: '/api/keys/wallet/unknown-wallet',
+      url: '/api/keys/wallet/9xKpPqREhiP1B6d3wTgs8MTwbLj5GhXFsJAiGbrZkNew',
       headers: AUTH_HEADER,
     });
     expect(res.statusCode).toBe(404);
@@ -841,7 +841,7 @@ describe('Wallet Key Routes', () => {
     const { app, deps } = await createApp();
     const res = await app.inject({
       method: 'DELETE',
-      url: '/api/keys/wallet/WalletA',
+      url: '/api/keys/wallet/7xKpPqREhiP1B6d3wTgs8MTwbLj5GhXFsJAiGbrZkQbL',
       headers: AUTH_HEADER,
     });
     expect(res.statusCode).toBe(200);
@@ -860,7 +860,7 @@ describe('Wallet Key Routes', () => {
 
     const res = await app.inject({
       method: 'DELETE',
-      url: '/api/keys/wallet/unknown-wallet',
+      url: '/api/keys/wallet/9xKpPqREhiP1B6d3wTgs8MTwbLj5GhXFsJAiGbrZkNew',
       headers: AUTH_HEADER,
     });
     expect(res.statusCode).toBe(404);
@@ -879,7 +879,7 @@ describe('Wallet Key Routes', () => {
 
     const res = await app.inject({
       method: 'POST',
-      url: '/api/keys/wallet/WalletA/rotate',
+      url: '/api/keys/wallet/7xKpPqREhiP1B6d3wTgs8MTwbLj5GhXFsJAiGbrZkQbL/rotate',
       headers: AUTH_HEADER,
     });
     expect(res.statusCode).toBe(200);
@@ -902,7 +902,7 @@ describe('Wallet Key Routes', () => {
 
     const res = await app.inject({
       method: 'POST',
-      url: '/api/keys/wallet/WalletA/rotate',
+      url: '/api/keys/wallet/7xKpPqREhiP1B6d3wTgs8MTwbLj5GhXFsJAiGbrZkQbL/rotate',
       headers: AUTH_HEADER,
     });
     expect(res.statusCode).toBe(200);
@@ -920,7 +920,7 @@ describe('Wallet Key Routes', () => {
 
     const res = await app.inject({
       method: 'POST',
-      url: '/api/keys/wallet/unknown-wallet/rotate',
+      url: '/api/keys/wallet/9xKpPqREhiP1B6d3wTgs8MTwbLj5GhXFsJAiGbrZkNew/rotate',
       headers: AUTH_HEADER,
     });
     expect(res.statusCode).toBe(404);
@@ -935,7 +935,7 @@ describe('Wallet Key Routes', () => {
 
     const res = await app.inject({
       method: 'POST',
-      url: '/api/keys/wallet/WalletA/rotate',
+      url: '/api/keys/wallet/7xKpPqREhiP1B6d3wTgs8MTwbLj5GhXFsJAiGbrZkQbL/rotate',
       headers: AUTH_HEADER,
     });
     expect(res.statusCode).toBe(500);
@@ -947,7 +947,7 @@ describe('Wallet Key Routes', () => {
     const { app, deps } = await createApp();
     const res = await app.inject({
       method: 'GET',
-      url: '/api/keys/wallet/WalletA/usage',
+      url: '/api/keys/wallet/7xKpPqREhiP1B6d3wTgs8MTwbLj5GhXFsJAiGbrZkQbL/usage',
       headers: AUTH_HEADER,
     });
     expect(res.statusCode).toBe(200);
@@ -966,7 +966,7 @@ describe('Wallet Key Routes', () => {
 
     const res = await app.inject({
       method: 'GET',
-      url: '/api/keys/wallet/unknown-wallet/usage',
+      url: '/api/keys/wallet/9xKpPqREhiP1B6d3wTgs8MTwbLj5GhXFsJAiGbrZkNew/usage',
       headers: AUTH_HEADER,
     });
     expect(res.statusCode).toBe(404);

backend/tests/integration/scheduler-phases.test.ts

@@ -45,6 +45,7 @@ import { RunLock } from '../../src/engine/RunLock.js';
 import { WRAPPED_SOL_MINT } from '../../src/constants/addresses.js';
 import type { Config } from '../../src/config/index.js';
 import type { CreditRun } from '../../src/types/index.js';
+import type { DatabaseConnection } from '../../src/services/Database.js';
 
 // ─── Constants ──────────────────────────────────────────────────
 
@@ -318,9 +319,49 @@ const stateMachine = new StateMachine({
   phaseHandlers,
 });
 
-// ─── Build real RunLock ─────────────────────────────────────────
-
-const runLock = new RunLock();
+// ─── Build real RunLock with mock DB ────────────────────────────
+
+function createMockLockDb(): DatabaseConnection {
+  const locks = new Set<string>();
+  const makeStmt = (sql: string) => ({
+    run: vi.fn((...args: unknown[]) => {
+      if (sql.startsWith('INSERT OR IGNORE')) {
+        const id = args[0] as string;
+        if (locks.has(id)) return { changes: 0 };
+        locks.add(id);
+        return { changes: 1 };
+      }
+      if (sql === 'DELETE FROM run_locks WHERE strategy_id = ?') {
+        const id = args[0] as string;
+        const had = locks.has(id);
+        locks.delete(id);
+        return { changes: had ? 1 : 0 };
+      }
+      if (sql === 'DELETE FROM run_locks') {
+        const sz = locks.size;
+        locks.clear();
+        return { changes: sz };
+      }
+      return { changes: 0 };
+    }),
+    get: vi.fn((...args: unknown[]) => {
+      if (sql.startsWith('SELECT 1')) {
+        return locks.has(args[0] as string) ? { '1': 1 } : undefined;
+      }
+      return undefined;
+    }),
+    all: vi.fn().mockReturnValue([]),
+  });
+  return {
+    prepare: vi.fn((sql: string) => makeStmt(sql)),
+    exec: vi.fn(),
+    pragma: vi.fn(),
+    transaction: vi.fn(<T>(fn: () => T): T => fn()) as <T>(fn: () => T) => T,
+    close: vi.fn(),
+  } as unknown as DatabaseConnection;
+}
+
+const runLock = new RunLock(createMockLockDb());
 
 // ─── Test ───────────────────────────────────────────────────────
 

backend/tests/run-lock.test.ts

@@ -1,5 +1,6 @@
 import { describe, it, expect, vi, beforeEach } from 'vitest';
 import { RunLock } from '../src/engine/RunLock.js';
+import type { DatabaseConnection } from '../src/services/Database.js';
 
 vi.mock('pino', () => ({
   default: vi.fn(() => ({
@@ -16,11 +17,64 @@ vi.mock('pino', () => ({
   })),
 }));
 
+/**
+ * Creates a mock DatabaseConnection that simulates the run_locks table
+ * using an in-memory Set, matching the INSERT OR IGNORE / DELETE semantics.
+ */
+function createMockDb(): DatabaseConnection {
+  const locks = new Set<string>();
+
+  const makeStatement = (sql: string) => ({
+    run: vi.fn((...args: unknown[]) => {
+      if (sql.startsWith('INSERT OR IGNORE')) {
+        const strategyId = args[0] as string;
+        if (locks.has(strategyId)) {
+          return { changes: 0 };
+        }
+        locks.add(strategyId);
+        return { changes: 1 };
+      }
+      if (sql === 'DELETE FROM run_locks WHERE strategy_id = ?') {
+        const strategyId = args[0] as string;
+        const had = locks.has(strategyId);
+        locks.delete(strategyId);
+        return { changes: had ? 1 : 0 };
+      }
+      if (sql === 'DELETE FROM run_locks') {
+        const size = locks.size;
+        locks.clear();
+        return { changes: size };
+      }
+      // cleanStaleLocks — no-op in tests (no real timestamps)
+      if (sql.includes("datetime('now'")) {
+        return { changes: 0 };
+      }
+      return { changes: 0 };
+    }),
+    get: vi.fn((...args: unknown[]) => {
+      if (sql.startsWith('SELECT 1')) {
+        const strategyId = args[0] as string;
+        return locks.has(strategyId) ? { '1': 1 } : undefined;
+      }
+      return undefined;
+    }),
+    all: vi.fn().mockReturnValue([]),
+  });
+
+  return {
+    prepare: vi.fn((sql: string) => makeStatement(sql)),
+    exec: vi.fn(),
+    pragma: vi.fn(),
+    transaction: vi.fn(<T>(fn: () => T): T => fn()) as <T>(fn: () => T) => T,
+    close: vi.fn(),
+  } as unknown as DatabaseConnection;
+}
+
 describe('RunLock', () => {
   let lock: RunLock;
 
   beforeEach(() => {
-    lock = new RunLock();
+    lock = new RunLock(createMockDb());
   });
 
   it('acquire returns true on first call for a strategy', () => {

backend/tests/server.test.ts

@@ -763,7 +763,7 @@ describe('Error detail leakage prevention', () => {
 
     const response = await app.inject({
       method: 'POST',
-      url: '/api/keys/wallet/WalletA/rotate',
+      url: '/api/keys/wallet/7xKpPqREhiP1B6d3wTgs8MTwbLj5GhXFsJAiGbrZkQbL/rotate',
       headers: { authorization: `Bearer ${TEST_TOKEN}` },
     });