From 841e1c9475776affcb5fca0b63a0c0ebc11f8b9f Mon Sep 17 00:00:00 2001 From: Kev Date: Sat, 11 Jul 2026 14:36:29 -0400 Subject: [PATCH] Post-merge: hermetic newsletter test (dev .env Supabase creds leaked into the suite) Co-Authored-By: Claude Fable 5 --- tests/integration/newsletterRoute.test.js | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/tests/integration/newsletterRoute.test.js b/tests/integration/newsletterRoute.test.js index e88401c..24e18e1 100644 --- a/tests/integration/newsletterRoute.test.js +++ b/tests/integration/newsletterRoute.test.js @@ -24,7 +24,10 @@ const LISTMONK_ENV = { LISTMONK_TOKEN: 'tok123', LISTMONK_LIST_ID: '3', }; -const ENV_KEYS = [...Object.keys(LISTMONK_ENV), 'VYNDR_INTERNAL_KEY']; +const ENV_KEYS = [...Object.keys(LISTMONK_ENV), 'VYNDR_INTERNAL_KEY', + // Hermetic: a developer .env with real Supabase creds must not make + // ledgerService.getModelAggregate reach for the network in this suite. + 'SUPABASE_URL', 'SUPABASE_SERVICE_ROLE_KEY', 'SUPABASE_SERVICE_KEY']; const savedEnv = {}; beforeAll(() => { for (const k of ENV_KEYS) savedEnv[k] = process.env[k]; });