fix: strip sslmode from database URL (asyncpg doesn't support it)

apps/api/src/config/settings.py

@@ -126,15 +126,29 @@ class Settings(BaseSettings):
         ``postgresql://`` and we need the ``+asyncpg`` driver suffix for
         the async engine.  Normalise both cases here so the rest of the
         codebase can always assume ``postgresql+asyncpg://``.
+
+        Also strips ``sslmode`` from query strings — asyncpg does not
+        accept this psycopg2 parameter and would raise TypeError.
         """
-        if self.database_url.startswith("postgres://"):
+        url = self.database_url
-            self.database_url = self.database_url.replace(
+
-                "postgres://", "postgresql+asyncpg://", 1,
+        # Fix dialect scheme
-            )
+        if url.startswith("postgres://"):
-        elif self.database_url.startswith("postgresql://"):
+            url = url.replace("postgres://", "postgresql+asyncpg://", 1)
-            self.database_url = self.database_url.replace(
+        elif url.startswith("postgresql://"):
-                "postgresql://", "postgresql+asyncpg://", 1,
+            url = url.replace("postgresql://", "postgresql+asyncpg://", 1)
-            )
+
+        # Strip sslmode from query string (asyncpg doesn't support it)
+        if "?sslmode=" in url or "&sslmode=" in url:
+            from urllib.parse import urlparse, urlencode, parse_qs
+
+            parsed = urlparse(url)
+            params = parse_qs(parsed.query, keep_blank_values=True)
+            params.pop("sslmode", None)
+            query = urlencode(params, doseq=True)
+            url = parsed._replace(query=query).geturl()
+
+        self.database_url = url
         return self
 
     @model_validator(mode="after")