root/fusion
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(FN-5031): add dedicated secrets-env contract test in core and document canonical test locations

Browse Source 
Fusion-Task-Id: FN-5031
Fusion-Task-Lineage: cc758f7c-32c6-4db1-bbfe-f5b2ec6e34ff
This commit is contained in:
gsxdsm
2026-05-18 05:16:51 -07:00
parent e0b1e6ac37
commit 7955a78780
2 changed files with 229 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
docs/secrets.md
View File

@@ -135,6 +135,13 @@ Fusion can materialize env-exportable secrets into each acquired task worktree w
Settings shape is project-scoped in `ProjectSettings` (`packages/core/src/types.ts:2599-2609`): `secretsEnv` (env materialization config) and `secretsSyncPassphrase` (ciphertext already wrapped under local master key by caller; see `types.ts:2602-2604`).
**Canonical test locations:**
- `packages/core/src/__tests__/secrets-env.test.ts` — settings-contract tests (type shape, defaults, deprecated alias, store round-trip).
- `packages/engine/src/__tests__/secrets-env-writer.test.ts` — materialization implementation (write/cleanup/fingerprint/overwrite-policy).
- `packages/engine/src/__tests__/worktree-acquisition-secrets-env.test.ts` — worktree acquisition lifecycle integration.
- `packages/engine/src/__tests__/worktree-pool-secrets-env-cleanup.test.ts` — worktree pool teardown cleanup.
- `packages/engine/src/__tests__/reliability-interactions/secrets-env-materialization.test.ts` — reliability-layer interaction tests.
## Cross-node Sync
Fusion now exposes four secrets sync endpoints: