SK-3037 fix module-split fallout in the test and spellcheck setup

Two failures on this PR, both from the common/v2/flowvault split rather than
from the delete and tokenize work; each reproduces on the base branch.

Tests: Dotenv resolves .env against the JVM working directory, which Surefire
sets to the module basedir. CI writes one .env at the repo root, visible to
every test when the build was a single module and to none of them since, so all
five Dotenv-backed test classes failed - and because common builds first, the
reactor died before v2 or flowvault ran. Copy the root .env into each module at
process-test-resources. Repointing Surefire's working directory instead was
tried and rejected: twelve BearerToken and SignedDataTokens tests locate
fixtures by module-relative paths like ./src/test/resources/notJson.txt.

Spellcheck: the generated-code ignore path was root-relative
(src/main/java/com/skyflow/generated/**) so it stopped matching anything after
the split, exposing Fern output - Okio, Googleprotobuf, Googlerpc and an
"opertions" typo carried in from the API spec. Anchor it with **/ instead.
Dictionary gains siom (the japicmp plugin groupId), vaultid and recordss (both
existing identifiers in insert and detokenize code), and synthesise, deserialise
and unmodelled, matching the serialise and normalise entries already there.
Reworded "dedup" and replaced an opaque captured test value.

cspell now reports 0 issues; common passes 172 tests where it previously failed
at TokenTests. The three remaining ConnectionClientTests failures are unrelated
and pre-existing - they need the real SKYFLOW_CREDENTIALS secret.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: saileshwar-skyflow

.cspell.json

@@ -99,7 +99,15 @@
     "detok",
     "qhdmceurtnlz",
     "ngrok",
-    "obac"
+    "obac",
+    "siom",
+    "vaultid",
+    "recordss",
+    "synthesise",
+    "synthesised",
+    "deserialise",
+    "deserialised",
+    "unmodelled"
   ],
   "languageSettings": [
     {
@@ -119,7 +127,7 @@
     "**/target/**",
     "*.lock",
     "Rule/**",
-    "src/main/java/com/skyflow/generated/**",
+    "**/src/main/java/com/skyflow/generated/**",
     "**/*.ts",
     "**/processed-*",
     "samples/src/main/java/com/example/credentials.json",

flowvault/src/test/java/com/skyflow/utils/FlatTokenizeResponseTests.java

@@ -48,7 +48,7 @@ private static BulkTokenizeRequestRecord byotRecord(Object value, String token,
 
     private static final String LIVE_RESPONSE = "{\n"
             + "  \"response\": [\n"
-            + "    { \"token\": \"\", \"value\": \"dasftrqsafasfav\", \"tokenGroupName\": null,\n"
+            + "    { \"token\": \"\", \"value\": \"byot-input-value\", \"tokenGroupName\": null,\n"
             + "      \"error\": \"Invalid request. BYOT token should contain one token group.\", \"httpCode\": 400 },\n"
             + "    { \"token\": \"cc1179a3-e2be-404e-9a31-4f97f27bf406\", \"value\": {\"age\": 28, \"email\": \"ka@yahoo.com\"},\n"
             + "      \"tokenGroupName\": \"deterministic_string_tg\", \"error\": null, \"httpCode\": 200 },\n"
@@ -64,7 +64,7 @@ public void testLiveResponse_threeRowsFoldOntoTwoRecords() {
         objectValue.put("email", "ka@yahoo.com");
         objectValue.put("age", 28);
         List<BulkTokenizeRequestRecord> sent = Arrays.asList(
-                byotRecord("dasftrqsafasfav", "550e8400-e29b-41d4-a716-446655440000",
+                byotRecord("byot-input-value", "550e8400-e29b-41d4-a716-446655440000",
                         "deterministic_string_tg", "non_deterministic"),
                 record(objectValue, "deterministic_string_tg", "emailTokenGroup"));
 
@@ -76,7 +76,7 @@ public void testLiveResponse_threeRowsFoldOntoTwoRecords() {
 
         BulkTokenizeResponseRecord byot = result.getRecords().get(0);
         Assert.assertEquals(0, byot.getIndex());
-        Assert.assertEquals("dasftrqsafasfav", byot.getValue());
+        Assert.assertEquals("byot-input-value", byot.getValue());
         Assert.assertEquals(1, byot.getTokens().size());
         Assert.assertEquals("Invalid request. BYOT token should contain one token group.",
                 byot.getTokens().get(0).getError());
@@ -100,7 +100,7 @@ public void testLiveResponse_summaryClassifiesByRecordNotByRow() {
         objectValue.put("email", "ka@yahoo.com");
         objectValue.put("age", 28);
         List<BulkTokenizeRequestRecord> sent = Arrays.asList(
-                byotRecord("dasftrqsafasfav", "550e8400", "deterministic_string_tg", "non_deterministic"),
+                byotRecord("byot-input-value", "550e8400", "deterministic_string_tg", "non_deterministic"),
                 record(objectValue, "deterministic_string_tg", "emailTokenGroup"));
 
         BulkTokenizeResponse formatted =

flowvault/src/test/java/com/skyflow/utils/UtilsTests.java

@@ -1058,7 +1058,7 @@ private static V1FlowDeleteTokenRequest deleteBatchOf(String... tokens) {
     public void testFormatBulkDeleteTokensResponse_duplicateTokenRelaysEachRowVerbatim() {
         // the same token sent twice: the API decides each position independently, and has been
         // observed returning both 200,200 and 200,404 for the identical request. Whatever it says
-        // must reach the caller unchanged - no dedup, no normalising one row against the other.
+        // must reach the caller unchanged - no deduplication, no normalising one row against the other.
         String token = "e5874be2-940a-4c74-9c08-dc6c1e8c6f9b";
         String message = "DeleteToken failed. Token " + token + " is invalid. Specify a valid token.";
         V1FlowDeleteTokenResponse response = V1FlowDeleteTokenResponse.builder()

pom.xml

@@ -145,6 +145,43 @@
                     </execution>
                 </executions>
             </plugin>
+            <!--
+                Tests read secrets through Dotenv, which resolves .env against the JVM's working
+                directory - for Surefire that is the module's basedir. CI writes a single .env at
+                the repo root, which every module could see before the build was split into
+                common/v2/flowvault, and none can see since. Copy it into each module before tests
+                run rather than moving Surefire's working directory, because other tests locate
+                fixtures by module-relative paths such as ./src/test/resources/notJson.txt and would
+                break if that moved. Silently does nothing when no root .env exists, which is the
+                normal case for a local build.
+            -->
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-resources-plugin</artifactId>
+                <version>3.3.1</version>
+                <executions>
+                    <execution>
+                        <id>copy-root-dotenv-for-tests</id>
+                        <phase>process-test-resources</phase>
+                        <goals>
+                            <goal>copy-resources</goal>
+                        </goals>
+                        <configuration>
+                            <outputDirectory>${project.basedir}</outputDirectory>
+                            <overwrite>true</overwrite>
+                            <resources>
+                                <resource>
+                                    <directory>${maven.multiModuleProjectDirectory}</directory>
+                                    <includes>
+                                        <include>.env</include>
+                                    </includes>
+                                    <filtering>false</filtering>
+                                </resource>
+                            </resources>
+                        </configuration>
+                    </execution>
+                </executions>
+            </plugin>
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-surefire-plugin</artifactId>