fix(config): persisted-vs-effective split — never persist serve flags, MCPPROXY_* env or the env API key - #1302

Merged

Dumbris merged 19 commits into

mainfrom

claude/jovial-sutherland-f77a11

Sep 18, 2026

Commits on Sep 18, 2026

fix(serve): stop persisting CLI flag overrides into the config file

Dumbris
and
claude
committed
c484706
fix(serve): base serve saves on the current file, never persist env API key

Dumbris
and
claude
committed
0e85539
fix(serve): read the merge base without loader side effects

Dumbris
and
claude
committed
788e8b3
fix(serve): merge base goes through the loader's read step

Dumbris
and
claude
committed
e431948
fix(serve): save to the config file that was actually loaded

Dumbris
and
claude
committed
6324e2d
fix(config): rename ReadFile to DecodeConfigFile for the oauth door scan

Dumbris
and
claude
committed
384e84b
fix(config): split persisted config from effective config for process-only overrides

Dumbris
and
claude
committed
988fdaf
fix(config): close the review-round-1 gaps in the process-override registry

Dumbris
and
claude
committed
4f93eaf
fix(config): retire superseded overrides; re-apply flags on the running config only

Dumbris
and
claude
committed
3cdd47e
fix(runtime): reload side effects follow the running config, not the raw file

Dumbris
and
claude
committed
5604c27
fix(config): one effective override per field; retire on what the API saved

Dumbris
and
claude
committed
8c06f06
fix(runtime): desired config keeps the hot flags after a reload; retire only edited fields

Dumbris
and
claude
committed
fa5565e
fix(runtime): retire an edited override before the save, on "moved" alone

Dumbris
and
claude
committed
effbe7c
fix(runtime): put a retired override back when the save fails

Dumbris
and
claude
committed
f348e31
fix(config): never remove an override record — the editing save ignores it instead

Dumbris
and
claude
committed
68c111c
fix(config): serialise every in-process save's read-base-then-write

Dumbris
and
claude
committed
5ea8eb3
fix(config): follow the ReadFile→DecodeConfigFile rename from #1299

Dumbris
and
claude
committed
0ddac48
Merge remote-tracking branch 'origin/main' into merge-1302-work
Dumbris
committed
cb35775
fix(test): make TestApplyConfig_FailedSaveKeepsTheOverrideProtected Windows-safe

Dumbris
and
claude
committed
577dda5

Navigation Menu

fix(config): persisted-vs-effective split — never persist serve flags, MCPPROXY_* env or the env API key - #1302

fix(config): persisted-vs-effective split — never persist serve flags, MCPPROXY_* env or the env API key#1302
Dumbris merged 19 commits into
mainfrom
claude/jovial-sutherland-f77a11

Commits on Sep 18, 2026

fix(serve): stop persisting CLI flag overrides into the config file

fix(serve): base serve saves on the current file, never persist env API key

fix(serve): read the merge base without loader side effects

fix(serve): merge base goes through the loader's read step

fix(serve): save to the config file that was actually loaded

fix(config): rename ReadFile to DecodeConfigFile for the oauth door scan

fix(config): split persisted config from effective config for process-only overrides

fix(config): close the review-round-1 gaps in the process-override registry

fix(config): retire superseded overrides; re-apply flags on the running config only

fix(runtime): reload side effects follow the running config, not the raw file

fix(config): one effective override per field; retire on what the API saved

fix(runtime): desired config keeps the hot flags after a reload; retire only edited fields

fix(runtime): retire an edited override before the save, on "moved" alone

fix(runtime): put a retired override back when the save fails

fix(config): never remove an override record — the editing save ignores it instead

fix(config): serialise every in-process save's read-base-then-write

fix(config): follow the ReadFile→DecodeConfigFile rename from #1299

Merge remote-tracking branch 'origin/main' into merge-1302-work

fix(test): make TestApplyConfig_FailedSaveKeepsTheOverrideProtected Windows-safe