Fix routine env binding sync review issues

ui/src/components/RoutineHistoryTab.test.tsx

@@ -389,6 +389,87 @@ describe("RoutineHistoryTab", () => {
     expect(container.textContent).toContain("1 key changed");
   });
 
+  it("labels secret-ref env diffs by changed secret instead of binding kind", async () => {
+    const current = createRevision({
+      id: "revision-2",
+      revisionNumber: 2,
+      snapshot: snapshotV1({
+        env: { GH_TOKEN: { type: "secret_ref", secretId: "secret-2", version: "latest" } },
+      }),
+    });
+    const old = createRevision({
+      id: "revision-1",
+      revisionNumber: 1,
+      snapshot: snapshotV1({
+        env: { GH_TOKEN: { type: "secret_ref", secretId: "secret-1", version: "latest" } },
+      }),
+    });
+    const secrets: CompanySecret[] = [
+      {
+        id: "secret-1",
+        companyId: "company-1",
+        key: "old_token",
+        name: "old-token",
+        provider: "local_encrypted",
+        status: "active",
+        managedMode: "paperclip_managed",
+        externalRef: null,
+        providerConfigId: null,
+        providerMetadata: null,
+        latestVersion: 1,
+        description: null,
+        lastResolvedAt: null,
+        lastRotatedAt: null,
+        deletedAt: null,
+        createdByAgentId: null,
+        createdByUserId: null,
+        createdAt: new Date("2026-04-01T00:00:00.000Z"),
+        updatedAt: new Date("2026-04-01T00:00:00.000Z"),
+      },
+      {
+        id: "secret-2",
+        companyId: "company-1",
+        key: "new_token",
+        name: "new-token",
+        provider: "local_encrypted",
+        status: "active",
+        managedMode: "paperclip_managed",
+        externalRef: null,
+        providerConfigId: null,
+        providerMetadata: null,
+        latestVersion: 1,
+        description: null,
+        lastResolvedAt: null,
+        lastRotatedAt: null,
+        deletedAt: null,
+        createdByAgentId: null,
+        createdByUserId: null,
+        createdAt: new Date("2026-04-01T00:00:00.000Z"),
+        updatedAt: new Date("2026-04-01T00:00:00.000Z"),
+      },
+    ];
+    mockRoutinesApi.listRevisions.mockResolvedValue([current, old]);
+    await render({ secrets });
+
+    const oldRow = container.querySelector(
+      "[data-testid='revision-row-1']",
+    ) as HTMLButtonElement | null;
+    await act(async () => {
+      oldRow?.click();
+    });
+    await flush();
+    const compareButton = Array.from(container.querySelectorAll("button")).find(
+      (button) => button.textContent === "Compare with current",
+    );
+    await act(async () => {
+      compareButton?.click();
+    });
+    await flush();
+
+    expect(container.textContent).toContain("Env GH_TOKEN secret");
+    expect(container.textContent).not.toContain("Env GH_TOKEN binding kind");
+  });
+
   it("invokes onRestored with the restore response so the editor can rehydrate (PAP-3588)", async () => {
     const current = createRevision({ id: "revision-2", revisionNumber: 2 });
     const old = createRevision({

ui/src/components/RoutineHistoryTab.tsx

@@ -1223,7 +1223,7 @@ function compareEnv(
       const newRef = asSecretRef(newBinding)!;
       if (oldRef.secretId !== newRef.secretId) {
         changes.push({
-          field: `Env ${key} binding kind`,
+          field: `Env ${key} secret`,
           oldValue: describeEnvBinding(oldBinding, secrets),
           newValue: describeEnvBinding(newBinding, secrets),
         });