@open-mercato/core 0.6.8-develop.7099.1.7ba2771d06 → 0.7.0

package/src/modules/eudr/i18n/ko.json

@@ -239,7 +239,7 @@
   "eudr.lifecycle.amendWindowClosed": "수정 기간 종료",
   "eudr.lifecycle.amendWindowRemaining": "남은 수정 기간: {hours}시간 {minutes}분",
   "eudr.lifecycle.confirmArchive": "진술서를 보관하시겠습니까?",
-  "eudr.lifecycle.confirmArchiveBody": "진술서가 보관됩니다.",
+  "eudr.lifecycle.confirmArchiveBody": "진술서가 보관됩니다. 보관된 진술서는 읽기 전용이며 수정, 복원 또는 삭제할 수 없습니다.",
   "eudr.lifecycle.confirmMarkAvailable": "진술서를 사용 가능으로 표시하시겠습니까?",
   "eudr.lifecycle.confirmMarkAvailableBody": "진술서가 사용 가능해지기 전에 참조 세부 정보가 필요합니다.",
   "eudr.lifecycle.confirmReturnToDraft": "진술서를 초안으로 되돌리시겠습니까?",
@@ -313,7 +313,8 @@
   "eudr.mitigation_actions.update": "EUDR 완화 조치 업데이트",
   "eudr.nav.group": "준수",
   "eudr.nav.mappings": "제품 매핑",
-  "eudr.nav.overview": "개요",
+  "eudr.nav.module": "EUDR",
+  "eudr.nav.overview": "EUDR 개요",
   "eudr.nav.plots": "구획",
   "eudr.nav.riskAssessments": "위험 평가",
   "eudr.nav.statements": "진술서",

package/src/modules/eudr/i18n/pl.json

@@ -239,7 +239,7 @@
   "eudr.lifecycle.amendWindowClosed": "Okno zmiany zamknięte",
   "eudr.lifecycle.amendWindowRemaining": "Pozostały czas okna zmiany: {hours} godz. {minutes} min",
   "eudr.lifecycle.confirmArchive": "Zarchiwizować oświadczenie?",
-  "eudr.lifecycle.confirmArchiveBody": "Oświadczenie zostanie zarchiwizowane.",
+  "eudr.lifecycle.confirmArchiveBody": "Oświadczenie zostanie zarchiwizowane. Zarchiwizowane oświadczenia są tylko do odczytu i nie można ich edytować, przywrócić ani usunąć.",
   "eudr.lifecycle.confirmMarkAvailable": "Oznaczyć oświadczenie jako dostępne?",
   "eudr.lifecycle.confirmMarkAvailableBody": "Szczegóły referencji są wymagane, zanim oświadczenie stanie się dostępne.",
   "eudr.lifecycle.confirmReturnToDraft": "Przywrócić oświadczenie do wersji roboczej?",
@@ -313,7 +313,8 @@
   "eudr.mitigation_actions.update": "Zaktualizuj działanie ograniczające ryzyko EUDR",
   "eudr.nav.group": "Zgodność",
   "eudr.nav.mappings": "Mapowania produktów",
-  "eudr.nav.overview": "Przegląd",
+  "eudr.nav.module": "EUDR",
+  "eudr.nav.overview": "Przegląd EUDR",
   "eudr.nav.plots": "Działki",
   "eudr.nav.riskAssessments": "Oceny ryzyka",
   "eudr.nav.statements": "Oświadczenia",

package/src/modules/eudr/lib/statement-lifecycle.ts

@@ -13,6 +13,14 @@ export function canTransition(from: EudrStatementStatus, to: EudrStatementStatus
   return EUDR_STATEMENT_TRANSITIONS[from].includes(to)
 }
 
+export function isStatementReadOnly(status: EudrStatementStatus): boolean {
+  return status === 'archived'
+}
+
+export function canDeleteStatement(status: EudrStatementStatus): boolean {
+  return !isStatementReadOnly(status)
+}
+
 export const EUDR_AMEND_GUARDED_FIELDS = [
   'commodity',
   'quantityKg',

package/src/modules/feature_toggles/components/FeatureTogglesTable.tsx

@@ -81,7 +81,7 @@ export function FeatureTogglesTable() {
   const { data: featureTogglesData, isLoading } = useQuery({
     queryKey: ['feature_toggles', queryParams],
     queryFn: async () => {
-      const call = await apiCall<{ items: Row[]; total: number; totalPages: number; totalIsCapped?: boolean; page: number; pageSize: number; isSuperAdmin?: boolean }>(
+      const call = await apiCall<{ items: Row[]; total: number; totalPages: number; page: number; pageSize: number; isSuperAdmin?: boolean }>(
         `/api/feature_toggles/global${queryParams ? `?${queryParams}` : ''}`,
       )
       if (!call.ok) {
@@ -222,7 +222,6 @@ export function FeatureTogglesTable() {
         pageSize: featureTogglesData?.pageSize ?? 25,
         total: featureTogglesData?.total ?? 0,
         totalPages: featureTogglesData?.totalPages ?? 0,
-        totalIsCapped: featureTogglesData?.totalIsCapped === true,
         onPageChange: handlePageChange,
       }}
       rowActions={(row) => (

package/src/modules/feature_toggles/components/OverridesTable.tsx

@@ -45,7 +45,7 @@ export default function OverridesTable() {
             const call = await apiCall<{
                 items: OverrideListResponse[];
                 total: number;
-                totalPages: number; totalIsCapped?: boolean;
+                totalPages: number;
                 page: number;
                 pageSize: number;
                 isSuperAdmin?: boolean
@@ -153,7 +153,6 @@ export default function OverridesTable() {
                 pageSize: featureTogglesData?.pageSize ?? 25,
                 total: featureTogglesData?.total ?? 0,
                 totalPages: featureTogglesData?.totalPages ?? 0,
-                totalIsCapped: featureTogglesData?.totalIsCapped === true,
                 onPageChange: handlePageChange,
             }}
             refreshButton={{

package/src/modules/feature_toggles/defaults.json

@@ -16,6 +16,14 @@
       "type": "string",
       "defaultValue": "Free shipping on orders over $50"
     },
+    {
+      "identifier": "sales_channels_enabled",
+      "name": "Sales Channels",
+      "description": "Show sales channel pickers, filters, and management UI. Disable for tenants that do not use sales channels.",
+      "category": "sales",
+      "type": "boolean",
+      "defaultValue": true
+    },
     {
       "identifier": "order_review_threshold",
       "name": "Order Review Threshold",

package/src/modules/inbox_ops/backend/inbox-ops/log/page.tsx

@@ -28,7 +28,6 @@ type EmailListResponse = {
   total?: number
   page?: number
   totalPages?: number
-  totalIsCapped?: boolean
 }
 
 const STATUS_COLORS: Record<string, string> = {
@@ -43,7 +42,6 @@ export default function ProcessingLogPage() {
   const t = useT()
   const [items, setItems] = React.useState<EmailRow[]>([])
   const [total, setTotal] = React.useState(0)
-  const [totalIsCapped, setTotalIsCapped] = React.useState(false)
   const [page, setPage] = React.useState(1)
   const [pageSize] = React.useState(25)
   const [statusFilter, setStatusFilter] = React.useState<string | undefined>()
@@ -67,7 +65,6 @@ export default function ProcessingLogPage() {
       if (result?.ok && result.result?.items) {
         setItems(result.result.items)
         setTotal(result.result.total || 0)
-        setTotalIsCapped(result.result.totalIsCapped === true)
       } else {
         setError(t('inbox_ops.log.load_failed', 'Failed to load processing log'))
       }
@@ -223,7 +220,6 @@ export default function ProcessingLogPage() {
                 pageSize,
                 total,
                 totalPages: Math.ceil(total / pageSize),
-                totalIsCapped,
                 onPageChange: setPage,
               }}
             />

package/src/modules/inbox_ops/backend/inbox-ops/page.tsx

@@ -41,7 +41,6 @@ type ProposalListResponse = {
   total?: number
   page?: number
   totalPages?: number
-  totalIsCapped?: boolean
 }
 
 type StatusCounts = {
@@ -91,7 +90,6 @@ export default function InboxOpsProposalsPage() {
 
   const [items, setItems] = React.useState<ProposalRow[]>([])
   const [total, setTotal] = React.useState(0)
-  const [totalIsCapped, setTotalIsCapped] = React.useState(false)
   const [page, setPage] = React.useState(1)
   const [pageSize] = React.useState(25)
   const [filterValues, setFilterValues] = React.useState<FilterValues>({})
@@ -121,7 +119,6 @@ export default function InboxOpsProposalsPage() {
       if (result?.ok && result.result?.items) {
         setItems(result.result.items)
         setTotal(result.result.total || 0)
-        setTotalIsCapped(result.result.totalIsCapped === true)
       } else {
         setError(t('inbox_ops.flash.load_failed', 'Failed to load proposals'))
       }
@@ -387,7 +384,6 @@ export default function InboxOpsProposalsPage() {
             pageSize,
             total,
             totalPages: Math.ceil(total / pageSize),
-            totalIsCapped,
             onPageChange: setPage,
           }}
           isLoading={isLoading}

package/src/modules/inbox_ops/lib/htmlToPlainText.ts

@@ -1 +1,17 @@
-export { htmlToPlainText } from '@open-mercato/shared/lib/html/htmlToPlainText'
+import { convert } from 'html-to-text'
+
+export function htmlToPlainText(html: string): string {
+  if (!html) return ''
+  return convert(html, {
+    wordwrap: false,
+    preserveNewlines: true,
+    selectors: [
+      { selector: 'script', format: 'skip' },
+      { selector: 'style', format: 'skip' },
+    ],
+  })
+    .replace(/\r\n/g, '\n')
+    .replace(/\r/g, '\n')
+    .replace(/\n{3,}/g, '\n\n')
+    .trim()
+}

package/src/modules/integrations/api/[id]/credentials/route.ts

@@ -183,13 +183,11 @@ export async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }>
   }
 
   try {
+    // Secret fields are returned masked on GET; when the client round-trips the
+    // mask sentinel it means "unchanged", so restore the existing stored secret
+    // instead of overwriting it with the placeholder.
     const existing = await credentialsService.resolve(integration.id, scope)
-    const credentialsToSave = mergeMaskedSecretCredentials(
-      schema,
-      payloadData.credentials,
-      existing ?? {},
-      payloadData.unchangedSecretFields,
-    )
+    const credentialsToSave = mergeMaskedSecretCredentials(schema, payloadData.credentials, existing ?? {})
     await credentialsService.save(integration.id, credentialsToSave, scope)
   } catch (error) {
     if (isCredentialsEncryptionUnavailableError(error)) {

package/src/modules/integrations/backend/integrations/[id]/page.tsx

@@ -52,11 +52,6 @@ import {
   refreshIntegrationDetailPanels,
   refreshIntegrationRunActivityPanels,
 } from '../detail-page-refresh'
-import {
-  buildCredentialEditValues,
-  buildIntegrationCredentialSavePayload,
-  type SecretFieldsConfigured,
-} from '../credential-secret-fields'
 import { isValidCredentialUrl } from '../../../lib/credentials-field-validation'
 
 type CredentialField = IntegrationCredentialField
@@ -295,32 +290,19 @@ function resolvePathnameId(pathname: string): string | undefined {
   return decodeURIComponent(integrationId)
 }
 
-function buildCredentialFields(
-  credFields: CredentialField[],
-  secretFieldsConfigured: SecretFieldsConfigured,
-  t: ReturnType<typeof useT>,
-): CrudField[] {
+function buildCredentialFields(credFields: CredentialField[]): CrudField[] {
   return credFields.map((field) => {
-    const baseDescription = field.helpDetails ? (
-      <div className="space-y-1">
-        {field.helpText ? <div>{field.helpText}</div> : null}
-        <WebhookSetupGuide guide={field.helpDetails} />
-      </div>
-    ) : field.helpText
-    const description = field.type === 'secret' && secretFieldsConfigured[field.key] ? (
-      <div className="space-y-1">
-        {baseDescription ? <div>{baseDescription}</div> : null}
-        <p className="text-xs text-muted-foreground">
-          {t('integrations.detail.credentials.secretConfigured')}
-        </p>
-      </div>
-    ) : baseDescription
     const shared = {
       id: field.key,
       label: field.label,
-      description,
+      description: field.helpDetails ? (
+        <div className="space-y-1">
+          {field.helpText ? <div>{field.helpText}</div> : null}
+          <WebhookSetupGuide guide={field.helpDetails} buttonLabel="Show details" />
+        </div>
+      ) : field.helpText,
       placeholder: field.placeholder,
-      required: field.required && !(field.type === 'secret' && secretFieldsConfigured[field.key]),
+      required: field.required,
       visibleWhen: field.visibleWhen,
     }
 
@@ -335,7 +317,6 @@ function buildCredentialFields(
             value={typeof value === 'string' ? value : ''}
             onChange={(event) => setValue(event.target.value)}
             disabled={disabled}
-            autoComplete="new-password"
           />
         ),
       }
@@ -445,7 +426,6 @@ export default function IntegrationDetailPage({ params }: IntegrationDetailPageP
   const [isNotFound, setIsNotFound] = React.useState(false)
 
   const [credValues, setCredValues] = React.useState<Record<string, unknown>>({})
-  const [secretFieldsConfigured, setSecretFieldsConfigured] = React.useState<SecretFieldsConfigured>({})
   const [credentialsUpdatedAt, setCredentialsUpdatedAt] = React.useState<string | null>(null)
   const [credentialsFormKey, setCredentialsFormKey] = React.useState(0)
   const [isSavingCredentials, setIsSavingCredentials] = React.useState(false)
@@ -510,18 +490,13 @@ export default function IntegrationDetailPage({ params }: IntegrationDetailPageP
   const loadCredentials = React.useCallback(async () => {
     const currentIntegrationId = resolveCurrentIntegrationId()
     if (!currentIntegrationId) return
-    const call = await apiCall<{
-      credentials: Record<string, unknown>
-      secretFieldsConfigured?: SecretFieldsConfigured
-      updatedAt?: string | null
-    }>(
+    const call = await apiCall<{ credentials: Record<string, unknown>; updatedAt?: string | null }>(
       `/api/integrations/${encodeURIComponent(currentIntegrationId)}/credentials`,
       undefined,
       { fallback: null },
     )
     if (call.ok && call.result) {
       setCredentialsUpdatedAt(call.result.updatedAt ?? null)
-      setSecretFieldsConfigured(call.result.secretFieldsConfigured ?? {})
     }
     if (call.ok && call.result?.credentials) {
       const next = { ...call.result.credentials }
@@ -738,32 +713,35 @@ export default function IntegrationDetailPage({ params }: IntegrationDetailPageP
     if (!currentIntegrationId) return
     setIsSavingCredentials(true)
     try {
-      const credentialFields = (
-        detail?.integration.credentials?.fields
-        ?? detail?.bundle?.credentials?.fields
-        ?? []
-      )
-      const savePayload = buildIntegrationCredentialSavePayload(
-        currentIntegrationId,
-        values,
-        credentialFields,
-        secretFieldsConfigured,
-      )
+      const sanitizedValues = { ...values }
+      if (currentIntegrationId === 'storage_s3') {
+        const authMode = sanitizedValues.authMode
+        if (authMode !== 'access_keys' && authMode !== 'ambient') {
+          const hasKeys = Boolean(sanitizedValues.accessKeyId || sanitizedValues.secretAccessKey)
+          sanitizedValues.authMode = hasKeys ? 'access_keys' : 'ambient'
+        }
+        if (sanitizedValues.authMode === 'ambient') {
+          delete sanitizedValues.accessKeyId
+          delete sanitizedValues.secretAccessKey
+          delete sanitizedValues.sessionToken
+        }
+      }
       const call = await runMutationWithContext({
         actionId: 'save-credentials',
         tabId: 'credentials',
-        mutationPayload: { integrationId: currentIntegrationId, ...savePayload },
+        mutationPayload: { integrationId: currentIntegrationId, credentials: sanitizedValues },
         operation: () => withScopedApiRequestHeaders(
           buildOptimisticLockHeader(credentialsUpdatedAt),
           () => apiCall(`/api/integrations/${encodeURIComponent(currentIntegrationId)}/credentials`, {
             method: 'PUT',
             headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify(savePayload),
+            body: JSON.stringify({ credentials: sanitizedValues }),
           }, { fallback: null }),
         ),
       })
 
       if (call.ok) {
+        setCredValues(sanitizedValues)
         setCredentialsFormKey((current) => current + 1)
         flash(t('integrations.detail.credentials.saved'), 'success')
         void loadCredentials()
@@ -781,7 +759,7 @@ export default function IntegrationDetailPage({ params }: IntegrationDetailPageP
     } finally {
       setIsSavingCredentials(false)
     }
-  }, [credentialsUpdatedAt, detail, loadCredentials, resolveCurrentIntegrationId, runMutationWithContext, secretFieldsConfigured, t])
+  }, [credentialsUpdatedAt, loadCredentials, resolveCurrentIntegrationId, runMutationWithContext, t])
 
   const handleVersionChange = React.useCallback(async (version: string) => {
     const currentIntegrationId = resolveCurrentIntegrationId()
@@ -859,12 +837,8 @@ export default function IntegrationDetailPage({ params }: IntegrationDetailPageP
     [detail?.bundle?.credentials?.fields, detail?.integration.credentials?.fields],
   )
   const credentialFormFields = React.useMemo(
-    () => buildCredentialFields(editableCredentialFields, secretFieldsConfigured, t),
-    [editableCredentialFields, secretFieldsConfigured, t],
-  )
-  const credentialFormValues = React.useMemo(
-    () => buildCredentialEditValues(credValues, secretFieldsConfigured),
-    [credValues, secretFieldsConfigured],
+    () => buildCredentialFields(editableCredentialFields),
+    [editableCredentialFields],
   )
   const credentialSchema = React.useMemo(() => (
     z.object({}).passthrough().superRefine((rawValues, ctx) => {
@@ -906,11 +880,7 @@ export default function IntegrationDetailPage({ params }: IntegrationDetailPageP
 
         const normalizedValue = typeof value === 'string' ? value : ''
 
-        if (
-          field.required
-          && normalizedValue.trim().length === 0
-          && !(field.type === 'secret' && secretFieldsConfigured[field.key])
-        ) {
+        if (field.required && normalizedValue.trim().length === 0) {
           ctx.addIssue({
             code: z.ZodIssueCode.custom,
             path: [field.key],
@@ -952,7 +922,7 @@ export default function IntegrationDetailPage({ params }: IntegrationDetailPageP
         }
       })
     })
-  ) as z.ZodType<Record<string, unknown>>, [editableCredentialFields, secretFieldsConfigured, t])
+  ) as z.ZodType<Record<string, unknown>>, [editableCredentialFields, t])
   const latestHealthLog = React.useMemo(() => logs.find(isHealthLog) ?? null, [logs])
   const latestOperationalLog = React.useMemo(
     () => logs.find((log) => (
@@ -1287,7 +1257,7 @@ export default function IntegrationDetailPage({ params }: IntegrationDetailPageP
                     entityId="integrations.integration"
                     schema={credentialSchema}
                     fields={credentialFormFields}
-                    initialValues={credentialFormValues}
+                    initialValues={credValues}
                     onSubmit={handleSaveCredentials}
                     embedded
                     hideFooterActions

package/src/modules/integrations/backend/integrations/bundle/[id]/page.tsx

@@ -8,7 +8,6 @@ import { Badge } from '@open-mercato/ui/primitives/badge'
 import { Button } from '@open-mercato/ui/primitives/button'
 import { Switch } from '@open-mercato/ui/primitives/switch'
 import { Input } from '@open-mercato/ui/primitives/input'
-import { PasswordInput } from '@open-mercato/ui/primitives/password-input'
 import {
   Select,
   SelectContent,
@@ -24,11 +23,6 @@ import { flash } from '@open-mercato/ui/backend/FlashMessages'
 import { useT } from '@open-mercato/shared/lib/i18n/context'
 import type { CredentialFieldType, IntegrationCredentialField } from '@open-mercato/shared/modules/integrations/types'
 import { LoadingMessage, ErrorMessage, RecordNotFoundState } from '@open-mercato/ui/backend/detail'
-import {
-  buildCredentialEditValues,
-  buildCredentialSavePayload,
-  type SecretFieldsConfigured,
-} from '../../credential-secret-fields'
 
 type CredentialField = IntegrationCredentialField
 
@@ -94,7 +88,6 @@ export default function BundleConfigPage({ params }: BundleConfigPageProps) {
   const [error, setError] = React.useState<string | null>(null)
   const [isNotFound, setIsNotFound] = React.useState(false)
   const [credValues, setCredValues] = React.useState<Record<string, unknown>>({})
-  const [secretFieldsConfigured, setSecretFieldsConfigured] = React.useState<SecretFieldsConfigured>({})
   const [credentialsUpdatedAt, setCredentialsUpdatedAt] = React.useState<string | null>(null)
   const [isSavingCreds, setIsSavingCreds] = React.useState(false)
   const [togglingIds, setTogglingIds] = React.useState<Set<string>>(new Set())
@@ -141,18 +134,13 @@ export default function BundleConfigPage({ params }: BundleConfigPageProps) {
     }
     setDetail(call.result)
 
-    const credCall = await apiCall<{
-      credentials: Record<string, unknown>
-      secretFieldsConfigured?: SecretFieldsConfigured
-      updatedAt?: string | null
-    }>(
+    const credCall = await apiCall<{ credentials: Record<string, unknown>; updatedAt?: string | null }>(
       `/api/integrations/${encodeURIComponent(currentBundleId)}/credentials`,
       undefined,
       { fallback: null },
     )
     if (credCall.ok && credCall.result) {
       setCredentialsUpdatedAt(credCall.result.updatedAt ?? null)
-      setSecretFieldsConfigured(credCall.result.secretFieldsConfigured ?? {})
     }
     if (credCall.ok && credCall.result?.credentials) {
       const next = { ...credCall.result.credentials }
@@ -163,10 +151,7 @@ export default function BundleConfigPage({ params }: BundleConfigPageProps) {
           next.authMode = hasKeys ? 'access_keys' : 'ambient'
         }
       }
-      setCredValues(buildCredentialEditValues(
-        next,
-        credCall.result.secretFieldsConfigured ?? {},
-      ))
+      setCredValues(next)
     }
     setIsLoading(false)
   }, [resolveCurrentBundleId, t])
@@ -178,13 +163,8 @@ export default function BundleConfigPage({ params }: BundleConfigPageProps) {
     if (!currentBundleId) return
     setIsSavingCreds(true)
     try {
-      const savePayload = buildCredentialSavePayload(
-        credValues,
-        detail?.bundle?.credentials?.fields ?? [],
-        secretFieldsConfigured,
-      )
       const call = await runMutation({
-        mutationPayload: { bundleId: currentBundleId, ...savePayload },
+        mutationPayload: { bundleId: currentBundleId, credentials: credValues },
         context: {
           formId: mutationContextId,
           operation: 'update',
@@ -199,7 +179,7 @@ export default function BundleConfigPage({ params }: BundleConfigPageProps) {
           () => apiCall(`/api/integrations/${encodeURIComponent(currentBundleId)}/credentials`, {
             method: 'PUT',
             headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify(savePayload),
+            body: JSON.stringify({ credentials: credValues }),
           }, { fallback: null }),
         ),
       })
@@ -214,7 +194,7 @@ export default function BundleConfigPage({ params }: BundleConfigPageProps) {
     } finally {
       setIsSavingCreds(false)
     }
-  }, [resolveCurrentBundleId, runMutation, mutationContextId, retryLastMutation, credValues, credentialsUpdatedAt, detail?.bundle?.credentials?.fields, load, secretFieldsConfigured, t])
+  }, [resolveCurrentBundleId, runMutation, mutationContextId, retryLastMutation, credValues, credentialsUpdatedAt, load, t])
 
   const handleToggle = React.useCallback(async (integrationId: string, enabled: boolean, updatedAt?: string | null) => {
     setTogglingIds((prev) => new Set(prev).add(integrationId))
@@ -315,15 +295,15 @@ export default function BundleConfigPage({ params }: BundleConfigPageProps) {
             <CardContent className="space-y-4">
               {credFields.filter(isFieldVisible).map((field) => (
                 <div key={field.key} className="space-y-1.5">
-                  <label htmlFor={`bundle-credential-${field.key}`} className="text-sm font-medium">
-                    {field.label}{field.required && <span className="ml-0.5 text-destructive">*</span>}
+                  <label className="text-sm font-medium">
+                    {field.label}{field.required && <span className="text-red-500 ml-0.5">*</span>}
                   </label>
                   {field.type === 'select' && field.options ? (
                     <Select
                       value={(credValues[field.key] as string) || undefined}
                       onValueChange={(value) => setCredValues((prev) => ({ ...prev, [field.key]: value ?? '' }))}
                     >
-                      <SelectTrigger id={`bundle-credential-${field.key}`}>
+                      <SelectTrigger>
                         <SelectValue placeholder="—" />
                       </SelectTrigger>
                       <SelectContent>
@@ -334,32 +314,17 @@ export default function BundleConfigPage({ params }: BundleConfigPageProps) {
                     </Select>
                   ) : field.type === 'boolean' ? (
                     <Switch
-                      id={`bundle-credential-${field.key}`}
                       checked={Boolean(credValues[field.key])}
                       onCheckedChange={(checked) => setCredValues((prev) => ({ ...prev, [field.key]: checked }))}
                     />
-                  ) : field.type === 'secret' ? (
-                    <PasswordInput
-                      id={`bundle-credential-${field.key}`}
-                      placeholder={field.placeholder}
-                      value={(credValues[field.key] as string) ?? ''}
-                      onChange={(event) => setCredValues((prev) => ({ ...prev, [field.key]: event.target.value }))}
-                      autoComplete="new-password"
-                    />
                   ) : (
                     <Input
-                      id={`bundle-credential-${field.key}`}
-                      type="text"
+                      type={field.type === 'secret' ? 'password' : 'text'}
                       placeholder={field.placeholder}
                       value={(credValues[field.key] as string) ?? ''}
                       onChange={(e) => setCredValues((prev) => ({ ...prev, [field.key]: e.target.value }))}
                     />
                   )}
-                  {field.type === 'secret' && secretFieldsConfigured[field.key] ? (
-                    <p className="text-xs text-muted-foreground">
-                      {t('integrations.detail.credentials.secretConfigured')}
-                    </p>
-                  ) : null}
                 </div>
               ))}
               <Button type="button" onClick={() => void handleSaveCredentials()} disabled={isSavingCreds}>

package/src/modules/integrations/data/validators.ts

@@ -1,23 +1,13 @@
 import { z } from 'zod'
 
-const credentialFieldKeySchema = z.string().min(1).max(128)
-
 export const saveCredentialsSchema = z.object({
   credentials: z.record(
-    credentialFieldKeySchema,
+    z.string().min(1).max(128),
     z.union([z.string().max(20_000), z.number(), z.boolean(), z.null()]),
   ),
-  unchangedSecretFields: z.array(credentialFieldKeySchema).max(200).optional(),
 }).refine((value) => Object.keys(value.credentials).length <= 200, {
   message: 'At most 200 credential fields are allowed',
-}).refine(
-  (value) => !value.unchangedSecretFields
-    || new Set(value.unchangedSecretFields).size === value.unchangedSecretFields.length,
-  {
-    message: 'Unchanged secret field names must be unique',
-    path: ['unchangedSecretFields'],
-  },
-)
+})
 
 export type SaveCredentialsInput = z.infer<typeof saveCredentialsSchema>
 

package/src/modules/integrations/i18n/de.json

@@ -15,7 +15,6 @@
   "integrations.detail.credentials.save": "Zugangsdaten speichern",
   "integrations.detail.credentials.saveError": "Zugangsdaten konnten nicht gespeichert werden",
   "integrations.detail.credentials.saved": "Zugangsdaten gespeichert",
-  "integrations.detail.credentials.secretConfigured": "Konfiguriert. Geben Sie einen neuen Wert ein, um ihn zu ersetzen.",
   "integrations.detail.credentials.validation.boolean": "Select a valid value.",
   "integrations.detail.credentials.validation.option": "Select one of the available options.",
   "integrations.detail.credentials.validation.required": "{field} is required.",

package/src/modules/integrations/i18n/en.json

@@ -15,7 +15,6 @@
   "integrations.detail.credentials.save": "Save Credentials",
   "integrations.detail.credentials.saveError": "Failed to save credentials",
   "integrations.detail.credentials.saved": "Credentials saved",
-  "integrations.detail.credentials.secretConfigured": "Configured. Enter a new value to replace it.",
   "integrations.detail.credentials.validation.boolean": "Select a valid value.",
   "integrations.detail.credentials.validation.option": "Select one of the available options.",
   "integrations.detail.credentials.validation.required": "{field} is required.",

package/src/modules/integrations/i18n/es.json

@@ -15,7 +15,6 @@
   "integrations.detail.credentials.save": "Guardar credenciales",
   "integrations.detail.credentials.saveError": "No se pudieron guardar las credenciales",
   "integrations.detail.credentials.saved": "Credenciales guardadas",
-  "integrations.detail.credentials.secretConfigured": "Configurado. Introduce un valor nuevo para reemplazarlo.",
   "integrations.detail.credentials.validation.boolean": "Select a valid value.",
   "integrations.detail.credentials.validation.option": "Select one of the available options.",
   "integrations.detail.credentials.validation.required": "{field} is required.",

package/src/modules/integrations/i18n/ko.json

@@ -15,7 +15,6 @@
   "integrations.detail.credentials.save": "자격 증명 저장",
   "integrations.detail.credentials.saveError": "자격 증명 저장에 실패했습니다",
   "integrations.detail.credentials.saved": "자격 증명이 저장되었습니다",
-  "integrations.detail.credentials.secretConfigured": "구성됨. 바꾸려면 새 값을 입력하세요.",
   "integrations.detail.credentials.validation.boolean": "유효한 값을 선택하세요.",
   "integrations.detail.credentials.validation.option": "사용 가능한 옵션 중 하나를 선택하세요.",
   "integrations.detail.credentials.validation.required": "{field}은(는) 필수입니다.",

package/src/modules/integrations/i18n/pl.json

@@ -15,7 +15,6 @@
   "integrations.detail.credentials.save": "Zapisz dane",
   "integrations.detail.credentials.saveError": "Nie udało się zapisać danych",
   "integrations.detail.credentials.saved": "Dane zapisane",
-  "integrations.detail.credentials.secretConfigured": "Skonfigurowano. Wpisz nową wartość, aby ją zastąpić.",
   "integrations.detail.credentials.validation.boolean": "Select a valid value.",
   "integrations.detail.credentials.validation.option": "Select one of the available options.",
   "integrations.detail.credentials.validation.required": "{field} is required.",

package/src/modules/integrations/lib/credentials-masking.ts

@@ -84,26 +84,22 @@ export function maskSecretCredentials(
 }
 
 /**
- * Reverse of {@link maskSecretCredentials} for the save path. The exact mask
- * sentinel and explicitly listed omitted secret fields mean "leave unchanged".
- * Explicit values win over the list, including an empty string used to clear a
- * secret, while plain omission retains the full-replacement contract.
+ * Reverse of {@link maskSecretCredentials} for the save path. When the client
+ * submits the mask sentinel for a secret field it means "leave it unchanged":
+ * restore the existing stored secret, or drop the field entirely when nothing
+ * was previously stored (so the literal sentinel is never persisted). Any other
+ * value (including an empty string, which clears the secret) is written as-is.
  */
 export function mergeMaskedSecretCredentials(
   schema: IntegrationCredentialsSchema | undefined,
   incoming: Record<string, unknown>,
   existing: Record<string, unknown>,
-  unchangedSecretFields: readonly string[] = [],
 ): Record<string, unknown> {
   const merged: Record<string, unknown> = { ...incoming }
-  const unchangedSecretFieldSet = new Set(unchangedSecretFields)
 
   for (const field of schema?.fields ?? []) {
     if (!isSecretField(field.type)) continue
-    const hasIncomingValue = Object.prototype.hasOwnProperty.call(merged, field.key)
-    const submittedMask = merged[field.key] === MASKED_SECRET_VALUE
-    const explicitlyUnchanged = !hasIncomingValue && unchangedSecretFieldSet.has(field.key)
-    if (!submittedMask && !explicitlyUnchanged) continue
+    if (merged[field.key] !== MASKED_SECRET_VALUE) continue
 
     if (hasPresentValue(existing[field.key])) {
       merged[field.key] = existing[field.key]