Reference seerr smtp settings put wipe

Overseerr (seerr) stores all configuration in a single settings.json file and rewrites it completely on any settings save via the API (PUT /api/v1/settings/*). If the notification block is not included in the PUT payload, it comes back empty — disabling SMTP and all notification agents silently.

The SMTP authPass field is stored only in settings.json. There is no secondary DB or log record. If the file is rewritten without that block, the password is unrecoverable from the box.

Why: Discovered 2026-06-07 when a Radarr default-profile fix via the seerr API wiped the working Gmail SMTP config ("Overseer" app password, last used 9:52 AM) that had been set up 2026-05-27.

How to apply: After any seerr settings change via the API, immediately re-read the notification config back and verify SMTP host/user/pass/enabled are still present. If touching seerr settings in a session, treat the notification block as a fragile artifact that must be re-verified post-write.

[auto-memory session 7b55169f-7d0a-4ef4-8523-82f8a64371fd, confidence 0.88, mode direct]