[BUG] Exported indexer settings does not include Qdrant API key

[emeraldcheshire]

Problem (one or two sentences)

Exported Roo Code settings do not include the configured indexer Qdrant API key in codebaseIndexConfig.

Context (who is affected and when)

Users who export settings with a Qdrant API key then attempt to import settings.

Reproduction steps

1. Windows 11, VSCode 1.108_2, Roo Code 3.43
2. Set a Qdrant API key under indexer setup
3. Export Roo Code settings (About->Export)
4. Observe there is no Qdrant API in the exported file.
5. Import the settings into a fresh install, observe Qdrant API key missing under indexer setup

Expected result

Qdrant API key exported along with other indexer settings

Actual result

Qdrant API key not exported

Variations tried (optional)

No response

App Version

3.43

API Provider (optional)

None

Model Used (optional)

No response

Roo Code Task Links (optional)

No response

Relevant logs or errors (optional)

[roomote]

I've analyzed this issue and here's my proposed implementation plan:

Root Cause:
The Qdrant API key (and other codebase index secrets) are stored in SECRET_STATE_KEYS but not in GLOBAL_SECRET_KEYS. The export function only exports global settings + global secrets, not provider secrets. This means codebase index API keys are excluded from the export.

Affected Secrets:

• codeIndexOpenAiKey
• codeIndexQdrantApiKey
• codebaseIndexOpenAiCompatibleApiKey
• codebaseIndexGeminiApiKey
• codebaseIndexMistralApiKey
• codebaseIndexVercelAiGatewayApiKey
• codebaseIndexOpenRouterApiKey

Proposed Changes:

1. Modify packages/types/src/global-settings.ts:

   • Add the codebase index secrets to GLOBAL_SECRET_KEYS (similar to how openRouterImageApiKey is already there)
   • Add corresponding optional string fields to globalSettingsSchema for these secrets

2. Add tests to verify that codebase index secrets are properly exported and imported

Security Consideration:
This follows the existing pattern where openRouterImageApiKey is already exported as a global secret. Users explicitly exporting their settings expect their complete configuration including API keys for features like the codebase indexer.

Please mention @roomote in a comment saying that you approve this plan, and I'll proceed with the implementation.