From 78f92d0cd03b127161379a7fbee8d9ebf32cf0aa Mon Sep 17 00:00:00 2001
From: dev-qwen2 <dev-qwen2@disinto.local>
Date: Thu, 16 Apr 2026 16:23:53 +0000
Subject: [PATCH] =?UTF-8?q?fix:=20[nomad-step-2]=20S2.2=20=E2=80=94=20tool?=
 =?UTF-8?q?s/vault-import.sh=20(import=20.env=20+=20sops=20into=20KV)=20(#?=
 =?UTF-8?q?880)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 tests/vault-import.bats | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/tests/vault-import.bats b/tests/vault-import.bats
index 16994b9..83267e1 100644
--- a/tests/vault-import.bats
+++ b/tests/vault-import.bats
@@ -49,7 +49,7 @@ setup() {
   export VAULT_ADDR VAULT_TOKEN
 }
 
-# ── Security checks ──────────────────────────────────────────────────────────
+# --- Security checks ---
 
 @test "refuses to run if VAULT_ADDR is not localhost" {
   export VAULT_ADDR="http://prod-vault.example.com:8200"
@@ -75,7 +75,7 @@ setup() {
   echo "$output" | grep -q "permissions"
 }
 
-# ── Dry-run mode ─────────────────────────────────────────────────────────────
+# --- Dry-run mode ─────────────────────────────────────────────────────────────
 
 @test "--dry-run prints plan without writing to Vault" {
   run "$IMPORT_SCRIPT" \
@@ -94,7 +94,7 @@ setup() {
   [ "$status" -ne 0 ]
 }
 
-# ── Complete fixture import ─────────────────────────────────────────────────
+# --- Complete fixture import ─────────────────────────────────────────────────
 
 @test "imports all keys from complete fixture" {
   run "$IMPORT_SCRIPT" \
@@ -149,7 +149,7 @@ setup() {
   echo "$output" | jq -e '.data.data.value == "github-test-token-abc123"'
 }
 
-# ── Idempotency ──────────────────────────────────────────────────────────────
+# --- Idempotency ──────────────────────────────────────────────────────────────
 
 @test "re-run with unchanged fixtures reports all unchanged" {
   # First run
@@ -199,7 +199,7 @@ setup() {
   echo "$output" | jq -e '.data.data.token == "MODIFIED-LLAMA-TOKEN"'
 }
 
-# ── Incomplete fixture ───────────────────────────────────────────────────────
+# --- Incomplete fixture ───────────────────────────────────────────────────────
 
 @test "handles incomplete fixture gracefully" {
   # The incomplete fixture is missing some keys, but that should be OK
@@ -219,7 +219,7 @@ setup() {
   [ "$status" -eq 0 ]
 }
 
-# ── Security: no secrets in output ───────────────────────────────────────────
+# --- Security: no secrets in output ───────────────────────────────────────────
 
 @test "never logs secret values in stdout" {
   # Run the import
@@ -259,7 +259,7 @@ setup() {
   done
 }
 
-# ── Error handling ───────────────────────────────────────────────────────────
+# --- Error handling ───────────────────────────────────────────────────────────
 
 @test "fails with missing --env argument" {
   run "$IMPORT_SCRIPT" \