The guided global settings gain two categories: Achievements (RetroAchievements on/off,
user name, password, hardcore mode) and Netplay (nickname, public lobby announce, relay
server), shown with RetroArch's defaults before RetroArch has written them. Translated
into the 15 other languages.
With networking built in, retroarch.cfg holds cheevos_password, cheevos_token and the
netplay passwords, which the settings editor's Advanced view listed like any key. Any
key ending in _password or _token is now sent as an empty value marked secret (with
whether one is saved); a password can be set (an empty one keeps the saved one) and a
token, RetroArch's own, cannot be written.
Evidence: python3 -m unittest tests.test_webui_secrets (the saved password, token and
netplay password never appear in /api/config; an empty password keeps the saved one; a
new one reaches webui.cfg; a forged token and a non-boolean switch are refused);
tests.test_webui_language (the French Achievements page shows an empty password field
marked "Non défini", no English left).
Gates: bash tools/verify.sh -> verify: PASS (format unit build integration evidence)
Mihawk
7550870707