feat(FN-4912): complete Step 4 — document env audit metadata

Fusion-Task-Id: FN-4912
Fusion-Task-Lineage: 943d0651-052a-41b5-8069-4c60f4db1ba7
This commit is contained in:
Fusion (runfusion.ai)
2026-05-17 22:40:10 -07:00
committed by gsxdsm
parent cbac381f65
commit 4ab60aefb4

View File

@@ -295,6 +295,13 @@ export function assertNoSecretPlaintext(metadata?: Record<string, unknown>): voi
}
}
/**
* Filesystem mutation metadata contracts for env-materialization events:
* - secret:env-write -> { filename, keyCount, fingerprint, overwritePolicy, keys: string[] }
* - secret:env-write-skipped -> { filename, reason: "disabled"|"no-secrets"|"not-gitignored"|"skip-existing"|"invalid-filename"|"no-store"|"list-failed", overwritePolicy?, checkIgnoreError?, symlink? }
* - secret:env-cleanup -> { filename, fingerprint, reason: "fingerprint-match"|"directory-missing" }
* - secret:env-cleanup-skipped -> { filename, reason: "fingerprint-mismatch"|"file-missing"|"no-record"|"disabled"|"stat-failed", checkError? }
*/
export type FilesystemMutationType =
| "file:write"
| "file:delete"