feat(artifacts): secrets and missing-secret markers in the artifact revision hash

2026-09-28 17:32:42 -04:00
parent 8aecd55db5
commit ebc55c5f72
3 changed files with 131 additions and 1 deletions
@@ -9,4 +9,12 @@ public record DeployArtifactsCommand(
    IReadOnlyList<DataConnectionArtifact>? DataConnections,
    IReadOnlyList<SmtpConfigurationArtifact>? SmtpConfigurations,
    DateTimeOffset Timestamp,
-    IReadOnlyList<SecretArtifact>? Secrets = null);
+    IReadOnlyList<SecretArtifact>? Secrets = null,
+    /// <summary>
+    /// Names of secrets referenced by this site's data connections that could not be
+    /// resolved at central (missing or tombstoned). CENTRAL-ONLY: used solely to fold a
+    /// distinguishable marker into <see cref="DeploymentManager.ArtifactRevisionHashService"/>'s
+    /// hash so a site stays flagged out of date until the reference is fixed. Never mapped
+    /// to the wire (<c>SiteCommandDtoMapper</c> does not project it) and never sent to a site.
+    /// </summary>
+    IReadOnlyList<string>? MissingSecrets = null);