mirror of
https://github.com/penpot/penpot.git
synced 2026-08-18 10:48:35 +00:00
The schema:props schema still included :plugins as a valid key, so the closed-map validation passed instead of rejecting it. The system-managed-props denylist only silently stripped the key after validation, never raised an error. Derive schema:props-writeable from schema:props using sm/dissoc-key to exclude system-managed keys, and use it in the update-profile-props params schema. The original schema:props remains intact for get-profile result validation. AI-assisted-by: mimo-v2.5