From 69ab9636e94ad618af5164becad53dadf3aa703b Mon Sep 17 00:00:00 2001
From: Brian Majewski <brian.majewski@gmail.com>
Date: Mon, 8 Jun 2026 10:38:18 -0700
Subject: [PATCH] test: fabricate old-client v1 blobs in
 migrate/finalize/status fixtures (additive v2, EGB-712)

---
 test/migrate.bats | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/test/migrate.bats b/test/migrate.bats
index 92e113c..281a281 100644
--- a/test/migrate.bats
+++ b/test/migrate.bats
@@ -131,6 +131,7 @@ m_file_src()   { mkdir -p "$HOME/keystores"; printf 'KS\x00\x01\x02\xffDATA\n' >
   create_project_dir dryproj
   printf 'gradle-properties ~/.gradle/gradle.properties beaconClerkPkTest\n' > .secrets-files
   "$SECRETS_BIN" push dryproj >/dev/null 2>&1
+  m_make_v1_only dryproj
   run "$SECRETS_BIN" migrate --dry-run
   [ "$status" -eq 0 ]
   [[ "$output" == *"would migrate"* ]] || false
@@ -156,6 +157,7 @@ m_file_src()   { mkdir -p "$HOME/keystores"; printf 'KS\x00\x01\x02\xffDATA\n' >
   create_project_dir cfproj
   printf 'gradle-properties ~/.gradle/gradle.properties beaconClerkPkTest\n' > .secrets-files
   "$SECRETS_BIN" push cfproj >/dev/null 2>&1
+  m_make_v1_only cfproj
   local old; old=$(ls "$SECRETS_DIR/cfproj/external/"*.gradle-properties.age)
   run "$SECRETS_BIN" migrate
   [ "$status" -eq 0 ]
@@ -171,6 +173,7 @@ m_file_src()   { mkdir -p "$HOME/keystores"; printf 'KS\x00\x01\x02\xffDATA\n' >
   create_project_dir idemproj
   printf 'gradle-properties ~/.gradle/gradle.properties beaconClerkPkTest\n' > .secrets-files
   "$SECRETS_BIN" push idemproj >/dev/null 2>&1
+  m_make_v1_only idemproj
   "$SECRETS_BIN" migrate >/dev/null 2>&1
   run "$SECRETS_BIN" migrate
   [ "$status" -eq 0 ]
@@ -187,6 +190,7 @@ m_file_src()   { mkdir -p "$HOME/keystores"; printf 'KS\x00\x01\x02\xffDATA\n' >
   create_project_dir nomanifestblob
   printf 'gradle-properties ~/.gradle/gradle.properties beaconClerkPkTest\n' > .secrets-files
   "$SECRETS_BIN" push nomanifestblob >/dev/null 2>&1
+  m_make_v1_only nomanifestblob
   rm -f .secrets.json                       # simulate a pre-manifest project
   run "$SECRETS_BIN" migrate
   [ "$status" -eq 0 ]
@@ -202,6 +206,7 @@ m_file_src()   { mkdir -p "$HOME/keystores"; printf 'KS\x00\x01\x02\xffDATA\n' >
   create_project_dir staleblob
   printf 'gradle-properties ~/.gradle/gradle.properties beaconClerkPkTest\n' > .secrets-files
   "$SECRETS_BIN" push staleblob >/dev/null 2>&1
+  m_make_v1_only staleblob
   # The blob is now in the store. Drop the external from the project's manifest
   # entirely (and remove the legacy file) so NO manifest declares it.
   printf '{"version":2,"dotenv":[".env",".env.staging"]}\n' > .secrets.json
@@ -262,6 +267,7 @@ m_file_src()   { mkdir -p "$HOME/keystores"; printf 'KS\x00\x01\x02\xffDATA\n' >
   create_project_dir failverify
   printf 'gradle-properties ~/.gradle/gradle.properties beaconClerkPkTest\n' > .secrets-files
   "$SECRETS_BIN" push failverify >/dev/null 2>&1
+  m_make_v1_only failverify
   "$SECRETS_BIN" migrate >/dev/null 2>&1
   # corrupt the v2 twin so verify --all fails
   printf 'garbage' > "$SECRETS_DIR/failverify/external/"*.properties.age
@@ -280,6 +286,7 @@ m_file_src()   { mkdir -p "$HOME/keystores"; printf 'KS\x00\x01\x02\xffDATA\n' >
   create_project_dir untwinned
   printf 'gradle-properties ~/.gradle/gradle.properties beaconClerkPkTest\n' > .secrets-files
   "$SECRETS_BIN" push untwinned >/dev/null 2>&1
+  m_make_v1_only untwinned
   # do NOT migrate — leave the v1 blob with no twin
   run "$SECRETS_BIN" migrate --finalize --yes
   [ "$status" -eq 1 ]
@@ -310,6 +317,7 @@ m_file_src()   { mkdir -p "$HOME/keystores"; printf 'KS\x00\x01\x02\xffDATA\n' >
   create_project_dir tagproj
   printf 'gradle-properties ~/.gradle/gradle.properties beaconClerkPkTest\n' > .secrets-files
   "$SECRETS_BIN" push tagproj >/dev/null 2>&1
+  m_make_v1_only tagproj
   "$SECRETS_BIN" migrate >/dev/null 2>&1
   "$SECRETS_BIN" migrate --finalize --yes >/dev/null 2>&1
   local tag; tag=$(git -C "$SECRETS_DIR" tag | grep '^pre-v2-migrate-')
@@ -325,6 +333,7 @@ m_file_src()   { mkdir -p "$HOME/keystores"; printf 'KS\x00\x01\x02\xffDATA\n' >
   create_project_dir confproj
   printf 'gradle-properties ~/.gradle/gradle.properties beaconClerkPkTest\n' > .secrets-files
   "$SECRETS_BIN" push confproj >/dev/null 2>&1
+  m_make_v1_only confproj
   "$SECRETS_BIN" migrate >/dev/null 2>&1
   run bash -c "echo '' | $SECRETS_BIN migrate --finalize"
   [ "$status" -eq 1 ]
@@ -408,6 +417,7 @@ m_file_src()   { mkdir -p "$HOME/keystores"; printf 'KS\x00\x01\x02\xffDATA\n' >
   create_project_dir needsmig
   printf 'gradle-properties ~/.gradle/gradle.properties beaconClerkPkTest\n' > .secrets-files
   "$SECRETS_BIN" push needsmig >/dev/null 2>&1   # v1 blob, no twin yet
+  m_make_v1_only needsmig
   run "$SECRETS_BIN" migrate --status
   [ "$status" -ne 0 ]                            # not finalize-ready
   [[ "$output" == *"needsmig"* ]] || false