Fixed how the enterprise configuration handles empty and invalid IDs (#1143)

app/MindWork AI Studio/Plugins/configuration/plugin.lua

@@ -158,8 +158,9 @@ CONFIG["LLM_PROVIDERS"] = {}
 --     -- or "ENC:v1:<base64-encoded encrypted data>", which every version of AI Studio reads. Both
 --     -- formats use the same secret. DataApp.EnterpriseEncryptionExportFormat below decides which
 --     -- one your exports write.
---     -- The encryption secret must be configured via:
+--     -- The encryption secret must be configured via one of:
 --     --   Windows Registry: HKEY_CURRENT_USER\Software\github\MindWork AI Studio\Enterprise IT\config_encryption_secret
+--     --   Policy file: config_encryption_secret.yaml, in the folder of the other policy files
 --     --   Environment variable: MINDWORK_AI_STUDIO_ENTERPRISE_CONFIG_ENCRYPTION_SECRET
 --     -- You can export an encrypted API key from an existing provider using the export button in the settings.
 --     -- ["APIKey"] = "ENC:v2:<base64-encoded encrypted data>",
@@ -595,12 +596,14 @@ CONFIG["SETTINGS"] = {}
 
 -- Configure the preselected provider.
 -- It must be one of the provider IDs defined in CONFIG["LLM_PROVIDERS"].
--- Please note: using an empty string ("") will lock the preselected provider selection, even though no valid preselected provider is found.
+-- Please note: an empty string ("") locks the selection to no preselected provider. This needs
+-- AI Studio v26.11.1 or newer; older versions ignore the empty string and leave the choice to the user.
 -- CONFIG["SETTINGS"]["DataApp.PreselectedProvider"] = "00000000-0000-0000-0000-000000000000"
 
 -- Configure the preselected profile.
 -- It must be one of the profile IDs defined in CONFIG["PROFILES"].
--- Please note: using an empty string ("") will lock the preselected profile selection, even though no valid preselected profile is found.
+-- Please note: an empty string ("") locks the selection to no preselected profile. This needs
+-- AI Studio v26.11.1 or newer; older versions ignore the empty string and leave the choice to the user.
 -- CONFIG["SETTINGS"]["DataApp.PreselectedProfile"] = "00000000-0000-0000-0000-000000000000"
 
 -- Configure chat-specific preselected options.
@@ -885,7 +888,9 @@ CONFIG["SETTINGS"] = {}
 -- Configure the transcription provider for voice-to-text functionality.
 -- It must be one of the transcription provider IDs defined in CONFIG["TRANSCRIPTION_PROVIDERS"].
 -- Without a selected transcription provider, dictation and transcription features will be disabled.
--- Please note: using an empty string ("") will lock the selection and disable dictation/transcription.
+-- Please note: an empty string ("") locks the selection to no transcription provider, which disables
+-- dictation/transcription. This needs AI Studio v26.11.1 or newer; older versions ignore the empty
+-- string and leave the choice to the user.
 -- CONFIG["SETTINGS"]["DataApp.UseTranscriptionProvider"] = "00000000-0000-0000-0000-000000000000"
 
 -- Configure the Opus bitrate used when normalizing uploaded audio/video for transcription.
@@ -1279,12 +1284,21 @@ CONFIG["SETTINGS"] = {}
 --
 -- IMPORTANT: A configuration plugin cannot fix the very first download of that same
 -- configuration plugin. For bootstrapping enterprise configuration downloads, deploy
--- the equivalent environment variables before AI Studio starts:
+-- the policy file external_http_custom_root_certificates.yaml, in the folder of the
+-- other policy files, before AI Studio starts. It takes precedence over everything else:
+--
+-- enabled: true
+-- bundle_path: "/path/in/sandbox/company-root-cas.pem"
+-- allowed_hosts: "*.intra.example.org;data.example.org"
+--
+-- Alternatively, deploy the equivalent environment variables before AI Studio starts:
 --
 -- MINDWORK_AI_STUDIO_EXTERNAL_HTTP_CUSTOM_ROOT_CERTIFICATES_ENABLED=true
 -- MINDWORK_AI_STUDIO_EXTERNAL_HTTP_CUSTOM_ROOT_CERTIFICATE_BUNDLE_PATH=/path/in/sandbox/company-root-cas.pem
 -- MINDWORK_AI_STUDIO_EXTERNAL_HTTP_CUSTOM_ROOT_CERTIFICATE_ALLOWED_HOSTS=*.intra.example.org;data.example.org
 --
+-- See https://github.com/MindWorkAI/AI-Studio/wiki/Configuration-Server#your-own-certificate-authorities
+--
 -- Replaces, does not merge: a configuration with a higher priority replaces the host
 -- list completely. Deploy this setting in one configuration only, or repeat every host
 -- of the base configuration. Otherwise, hosts of the base configuration silently stop
@@ -1332,7 +1346,7 @@ CONFIG["SETTINGS"] = {}
 -- Replaces, does not merge: a configuration with a higher priority replaces the whole
 -- table. Every configuration that sets this must therefore list all providers it wants
 -- to cover. A partial table is not completed from the configuration below it, and the
--- providers left out fall back to the app default.
+-- providers left out get the confidence level UNKNOWN.
 -- CONFIG["SETTINGS"]["DataConfidence.CustomConfidenceScheme"] = {
 --     ["OPEN_AI"] = "MODERATE",
 --     ["ANTHROPIC"] = "MODERATE",