---
id: w2/m11/t008
title: "Test coverage — meaningful tests for the unified create path + projector clone-secret minting"
worker: worker2
status: todo
estimate: 30m
depends_on: [w2/m11/t006]
---

## Objective

Add tests asserting real behavior and failure modes for the unified create path and the projector's clone-secret minting.

## Steps

1. Test that a REST/GraphQL/MCP create of a private-repo service results in a store row with the correct labels.
2. Test the projector mints `spec.cloneSecret` for a private-repo row and omits it for public/image-based rows.
3. Test that pre-existing (non-store-managed) CRs are unaffected by the projector change.

## Acceptance criteria

- [ ] Tests cover the private-repo clone-secret path and the legacy-app non-regression path.
- [ ] Tests assert real behavior, not just "returns 200".
