Expand dotted setting keys and mask secret pools #61

Merged
weichen merged 2 commits from fix/settings-dotted-keys into main 2026-10-04 13:43:05 +00:00
2 Commits
Author SHA1 Message Date
weichen fd7ecaa661 Merge remote-tracking branch 'origin/main' into fix/settings-dotted-keys
ci / vet-and-test (pull_request) Successful in 49s
2026-10-04 13:42:24 +00:00
weichenandCursor d90b9c045b Expand dotted setting keys and mask secret pools
ci / vet-and-test (pull_request) Successful in 52s
Why: A dotted-key PUT was stored beside the nested object and never read, so replacing a key kept the old pool. GET also returned tools.tavily.apiKeys in clear text, and saving settings would write the mask placeholder back over a real key.
Evidence: go test ./...
Impact: Dotted writes take effect on the next read. Startup expands stored dotted keys, and the existing nested value wins when both forms exist. GET masks schema secrets, including apiKeys. Writing the mask placeholder no longer overwrites a stored secret.
Refs: fix/settings-dotted-keys
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-04 13:01:38 +00:00