From 8b524b4314856b8b4eaa8629c3466fd382ea3357 Mon Sep 17 00:00:00 2001
From: mptyl <mp@tylconsulting.it>
Date: Wed, 26 Aug 2026 02:58:33 +0200
Subject: [PATCH] fix(auth): expose raw projected config revision

---
 backend/src/auth/runtime-projection.ts       | 2 +-
 backend/test/auth-runtime-projection.test.ts | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/backend/src/auth/runtime-projection.ts b/backend/src/auth/runtime-projection.ts
index 5f83af29..24e4e645 100644
--- a/backend/src/auth/runtime-projection.ts
+++ b/backend/src/auth/runtime-projection.ts
@@ -581,7 +581,7 @@ function load(root: string): LoadedAuthConfig {
       );
       return {
         value: selectedGeneration.value,
-        revision: `sha256:${selected.generation}`,
+        revision: selected.generation,
         sourcePath: join(generationsPath, selected.generation, "auth.yaml"),
         runtimeProjection: snapshot(
           selected.generation,
diff --git a/backend/test/auth-runtime-projection.test.ts b/backend/test/auth-runtime-projection.test.ts
index 06809297..affa4ef6 100644
--- a/backend/test/auth-runtime-projection.test.ts
+++ b/backend/test/auth-runtime-projection.test.ts
@@ -283,7 +283,7 @@ linuxTest("loads ready projection as one immutable auth and local-users snapshot
   const generation = writeReadyProjection(root, fixture);
   const loaded = createProjectedAuthenticationConfigProvider(root).current();
 
-  expect(loaded.revision).toBe(`sha256:${generation}`);
+  expect(loaded.revision).toBe(generation);
   expect(loaded.sourcePath).toBe(
     join(root, "generations", generation, "auth.yaml"),
   );