lukasandClaude Opus 5
2251c7ca6d
`sed "s|^KEY=.*|KEY=value|"` only rewrites a line that already exists. A setting introduced by a later release is absent from an older .env, so the substitution matched nothing, reported success, and the value vanished — while `ensure_secrets` printed "RSPAMD_CONTROLLER_PASSWORD was empty — generated one". The v1.1.0 upgrade then ran with a blank controller password: every compose call warned, the engine came up unauthenticated, and learning would have failed against it. Classification was unaffected, which is exactly what made it quiet. Now appends when the key is absent — ensuring the file ends in a newline first, so the key cannot be glued onto the last line of a hand-edited .env — and verifies the value is present afterwards rather than trusting sed's exit status. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018SqJYt7jD7oUEkoY68sBZo