diff --git a/README.md b/README.md index 3b56bff..7b68a22 100644 --- a/README.md +++ b/README.md @@ -169,7 +169,7 @@ Company-scoped key/value settings. Auth via selected company (`google_auth.selec - With `frontendOnly: true`, backend-only keys are omitted / `get` returns `undefined` (no leak via error type beyond missing). - `writeonly: true` → usergui gets a `"***"` scrambled version when retrieving the key (in `list`, or in `get` when `maskWriteonly` is enabled / `frontendOnly: true`). The backend receives the full value. - `keys.tavily`, `keys.openrouter`, and `keys.serper` default to `writeonly: true` on `set`. -- `set` only allows a fixed allow-list of keys: `ui.theme`, `keys.tavily`, `keys.openrouter`, `keys.serper`, `labelprinter.addr`, `labelprinter.type`. +- `set` only allows a fixed allow-list of keys: `ui.theme`, `keys.tavily`, `keys.openrouter`, `keys.serper`, `systemprompt-prefix`, `systemprompt-suffix`, `default-model`. - No delete endpoint — settings are upsert / read only. Errors: `No company selected`, `Company not found`, `Not authorized`, `Invalid setting`. diff --git a/scripts/benchmark/workload.js b/scripts/benchmark/workload.js index cd768ee..202c219 100644 --- a/scripts/benchmark/workload.js +++ b/scripts/benchmark/workload.js @@ -154,8 +154,8 @@ export async function fillDatabase(store, options = {}) { writeonly: false, }); await store.companysetting.set(ctx.googleAuthId, { - key: 'labelprinter.type', - value: 'zebra', + key: 'default-model', + value: 'openai/gpt-6-luna:floor', frontend: false, writeonly: false, }); diff --git a/src/store/companysetting/set.js b/src/store/companysetting/set.js index 34c5ba5..23744bc 100644 --- a/src/store/companysetting/set.js +++ b/src/store/companysetting/set.js @@ -15,8 +15,9 @@ const ALLOWED_KEYS = new Set([ 'keys.tavily', 'keys.openrouter', 'keys.serper', - 'labelprinter.addr', - 'labelprinter.type', + 'systemprompt-prefix', + 'systemprompt-suffix', + 'default-model', ]); const WRITEONLY_KEYS = new Set([