Enforce continuous validation

2026-08-10 23:08:52 +00:00
parent b89224bbde
commit feba7b9d74
16 changed files with 378 additions and 529 deletions
--- a/internal/app/secrets_env_test.go
+++ b/internal/app/secrets_env_test.go
@@ -126,7 +126,12 @@ func TestLoadSecretsFromConfigUnreadableValidEntryFails(t *testing.T) {

 	dir := t.TempDir()
 	ensureSecretDirectory(t, dir)
-	broken := filepath.Join(dir, "OPENROUTER_API_KEY")
+	const secretName = "NARRATIO_TEST_BROKEN_SECRET"
+	restoreEnvAfterTest(t, secretName)
+	if err := os.Unsetenv(secretName); err != nil {
+		t.Fatalf("Unsetenv(%q): %v", secretName, err)
+	}
+	broken := filepath.Join(dir, secretName)
 	if err := os.Symlink(filepath.Join(dir, "does-not-exist"), broken); err != nil {
 		t.Fatalf("Symlink(%q): %v", broken, err)
 	}