# Implementation Plan — Issue #26: Integration tests for Secrets Service

## Metadata

| Field | Value |
|---|---|
| Issue | [#26](https://git.shahondin1624.de/llm-multiverse/llm-multiverse/issues/26) |
| Title | Integration tests for Secrets Service |
| Milestone | Phase 3: Secrets Service |
| Labels | `type:testing`, `priority:high`, `lang:rust`, `service:secrets` |
| Status | `COMPLETED` |
| Language | Rust |
| Related Plans | [issue-025.md](issue-025.md) |
| Blocked by | #25 (completed) |

## Acceptance Criteria

- [x] Test: GetSecret via gRPC returns stored secret
- [x] Test: Missing secret returns proper error
- [x] Test: Audit log entry created for each access (via mock audit service)
- [x] Test: Concurrent access works correctly
- [x] Tests run in CI (uses MockBackend, no D-Bus required)

## Architecture Analysis

Created integration test suite with mock audit service that records all append calls. Tests verify full gRPC client→server flow with MockBackend for portability. Mock audit service validates audit entries contain correct session_id, action (SECRET_ACCESS=8), tool_name, result_status, and hashed params.

## Files to Create/Modify

| File | Action | Purpose |
|---|---|---|
| `services/secrets/tests/integration_test.rs` | Create | 9 integration tests |
| `services/secrets/src/backend/mock.rs` | Create | Extract MockBackend to non-test module |
| `services/secrets/src/backend/mod.rs` | Modify | Add mock module, adjust test imports |
| `services/secrets/src/service.rs` | Modify | Update mock import path |

## Deviation Log

| Deviation | Reason |
|---|---|
| Used MockBackend instead of real keyring | CI environments lack keyring daemon |
| Skipped kernel keyring fallback test | #24 not yet implemented |