[yordis]

Problem

A provider environment variable saved with a secret reference but sensitive: false (or no sensitive key, which decodes to false) shows a blank value in Settings. Only sensitive rows get the secret source picker, and the plain-text input can only show a string, so the reference looks lost. The lock toggle is hidden too, and saving from that row can clear the reference. The UI always writes sensitive: true with a reference, but settings written by hand or by a script can omit it.

Change

The decoder reads any stored secret as sensitive, which is what the UI writes and what a reference is. One line in providerInstance.ts.

Scope and approval

Very small, focused fix of an obvious bug in existing behavior: no new setting, no wire format change, and encoding is untouched. No prior issue.

Verification

Added a decode test for a reference with sensitive missing and with sensitive: false. It fails on main and passes with the fix. vp run check:changed passes.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Repository UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 193d42ee-ce64-498b-97ef-7b2a69709505

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

Warning

.coderabbit.config.ts has a parsing error

The CodeRabbit configuration file in this repository has a parsing error and default settings were used instead. Please fix the error(s) in the configuration file. You can initialize chat with CodeRabbit to get help with the configuration file.

Parsing errors: 1

Error while evaluating .coderabbit.config.ts

Configuration instructions

• Please see the configuration documentation for more information.
• You can also validate your configuration using the online YAML validator.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

[macroscopeapp]

Approvability

Verdict: Approved at ee714c3

Macroscope's review found this PR approvable — Stored secret references now consistently use sensitive handling and the secret-source picker, even when their sensitivity flag is missing or false. Plain-text variables and the storage format remain unchanged.

^{You can add or adjust custom eligibility rules. Learn more.}