u
This commit is contained in:
@@ -168,8 +168,8 @@ Company-scoped key/value settings. Auth via selected company (`google_auth.selec
|
||||
- `frontend: true` → readable by frontend routes (`frontendOnly: true`). Default on `set` is `false` (backend-only).
|
||||
- With `frontendOnly: true`, backend-only keys are omitted / `get` returns `undefined` (no leak via error type beyond missing).
|
||||
- `writeonly: true` → usergui gets a `"***"` scrambled version when retrieving the key (in `list`, or in `get` when `maskWriteonly` is enabled / `frontendOnly: true`). The backend receives the full value.
|
||||
- `keys.tavily` and `keys.openrouter` default to `writeonly: true` on `set`.
|
||||
- `set` only allows a fixed allow-list of keys: `ui.theme`, `keys.tavily`, `keys.openrouter`, `labelprinter.addr`, `labelprinter.type`.
|
||||
- `keys.tavily`, `keys.openrouter`, and `keys.serper` default to `writeonly: true` on `set`.
|
||||
- `set` only allows a fixed allow-list of keys: `ui.theme`, `keys.tavily`, `keys.openrouter`, `keys.serper`, `labelprinter.addr`, `labelprinter.type`.
|
||||
- No delete endpoint — settings are upsert / read only.
|
||||
|
||||
Errors: `No company selected`, `Company not found`, `Not authorized`, `Invalid setting`.
|
||||
|
||||
Reference in New Issue
Block a user