test(provenance): expect provenance imports to decrypt without the helper's own failure log

Author: waleedlatif1

apps/sim/app/api/v2/knowledge/search/route.application.test.ts

@@ -276,7 +276,9 @@ describe('Knowledge search provenance through the V2 route and reranker HTTP bou
     expect(body.data.rerankerStatus).toBe('applied')
     expect(providerPayload().documents).toEqual([CONTENT.replace(SECRET, '{{TOKEN}}')])
     expect(body.data.results[0].content).toBe(CONTENT)
-    expect(encryptionMockFns.mockDecryptSecret).toHaveBeenCalledWith('synthetic-encrypted-token')
+    expect(encryptionMockFns.mockDecryptSecret).toHaveBeenCalledWith('synthetic-encrypted-token', {
+      logFailure: false,
+    })
     expect(mockGenerateSearchEmbedding).toHaveBeenCalledWith(
       requestInput.query,
       expect.anything(),

apps/sim/lib/mothership/agent-cli/file-provenance.test.ts

@@ -458,7 +458,7 @@ describe('file provenance at the actual CLI and model-result boundary', () => {
     const output = await response.text()
     expect(output).toContain(content)
     expect(trace.isPermanentlyIncomplete()).toBe(false)
-    expect(mocks.decrypt).toHaveBeenCalledWith('fixture-ciphertext')
+    expect(mocks.decrypt).toHaveBeenCalledWith('fixture-ciphertext', { logFailure: false })
     expect(
       JSON.stringify(
         inspectToolResultForCopilot({ success: true, output }, trace, 'sim_cli').result

apps/sim/lib/mothership/request/tools/client.test.ts

@@ -607,7 +607,7 @@ describe('workflow client tool completion', () => {
       registry,
     })
 
-    expect(decryptSecret).toHaveBeenCalledWith('encrypted-child-secret')
+    expect(decryptSecret).toHaveBeenCalledWith('encrypted-child-secret', { logFailure: false })
     expect(completion?.data).toEqual({
       success: true,
       workflowId: 'workflow-1',