fix: diagnostics tab — run ping/traceroute in cell-wireguard, fix wrong method call

The connectivity endpoint was calling routing_manager.test_connectivity()
(no args, internal health check) instead of test_routing_connectivity(target_ip).
Also ping/traceroute aren't installed in the API container; run them via
docker exec cell-wireguard instead.

Updated test_api_endpoints to mock test_routing_connectivity and cover
the new DELETE /firewall/<id> and GET /live-iptables endpoints.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

api/app.py

@@ -1638,8 +1638,10 @@ def get_live_iptables():
 def test_routing_connectivity():
     """Test routing connectivity."""
     try:
-        data = request.get_json(silent=True)
-        result = routing_manager.test_connectivity(data)
+        data = request.get_json(silent=True) or {}
+        target_ip = data.get('target_ip', '8.8.8.8')
+        via_peer = data.get('via_peer')
+        result = routing_manager.test_routing_connectivity(target_ip, via_peer)
         return jsonify(result)
     except Exception as e:
         logger.error(f"Error testing routing connectivity: {e}")

api/routing_manager.py

@@ -388,67 +388,38 @@ class RoutingManager(BaseServiceManager):
             }
     
     def test_routing_connectivity(self, target_ip: str, via_peer: str = None) -> Dict:
-        """Test routing connectivity"""
-        try:
-            results = {}
-            
-            # Test basic connectivity
-            try:
-                result = subprocess.run(['ping', '-c', '3', '-W', '5', target_ip], 
-                                      capture_output=True, text=True, timeout=30)
-                results['ping'] = {
-                    'success': result.returncode == 0,
-                    'output': result.stdout,
-                    'error': result.stderr
-                }
-            except Exception as e:
-                results['ping'] = {
-                    'success': False,
-                    'output': '',
-                    'error': str(e)
-                }
-            
-            # Test traceroute
-            try:
-                result = subprocess.run(['traceroute', '-m', '10', target_ip], 
-                                      capture_output=True, text=True, timeout=30)
-                results['traceroute'] = {
-                    'success': result.returncode == 0,
-                    'output': result.stdout,
-                    'error': result.stderr
-                }
-            except Exception as e:
-                results['traceroute'] = {
-                    'success': False,
-                    'output': '',
-                    'error': str(e)
-                }
-            
-            # Test specific route if via_peer is specified
-            if via_peer:
-                try:
-                    # Test route through specific peer
-                    result = subprocess.run(['ping', '-c', '3', '-W', '5', '-I', via_peer, target_ip], 
-                                          capture_output=True, text=True, timeout=30)
-                    results['peer_route'] = {
-                        'success': result.returncode == 0,
-                        'output': result.stdout,
-                        'error': result.stderr
-                    }
-                except Exception as e:
-                    results['peer_route'] = {
-                        'success': False,
-                        'output': '',
-                        'error': str(e)
-                    }
-            
-            return results
-            
-        except Exception as e:
+        """Test routing connectivity by running ping/traceroute in cell-wireguard."""
+        WG = 'cell-wireguard'
+
+        def _exec(cmd):
+            result = subprocess.run(
+                ['docker', 'exec', WG] + cmd,
+                capture_output=True, text=True, timeout=35
+            )
             return {
-                'ping': {'success': False, 'output': '', 'error': str(e)},
-                'traceroute': {'success': False, 'output': '', 'error': str(e)}
+                'success': result.returncode == 0,
+                'output': result.stdout,
+                'error': result.stderr,
             }
+
+        results = {}
+        try:
+            results['ping'] = _exec(['ping', '-c', '4', '-W', '3', target_ip])
+        except Exception as e:
+            results['ping'] = {'success': False, 'output': '', 'error': str(e)}
+
+        try:
+            results['traceroute'] = _exec(['traceroute', '-m', '10', '-w', '2', target_ip])
+        except Exception as e:
+            results['traceroute'] = {'success': False, 'output': '', 'error': str(e)}
+
+        if via_peer:
+            try:
+                results['peer_route'] = _exec(['ping', '-c', '3', '-W', '3', '-I', via_peer, target_ip])
+            except Exception as e:
+                results['peer_route'] = {'success': False, 'output': '', 'error': str(e)}
+
+        return results
     
     def get_routing_logs(self, lines: int = 50) -> Dict:
         """Get routing and firewall logs"""