zeph-config 0.22.0

// SPDX-FileCopyrightText: 2026 Andrei G <bug-ops>
// SPDX-License-Identifier: MIT OR Apache-2.0

//! Configuration types and loaders for Zeph.
//!
//! This crate contains configuration struct and enum definitions, the TOML loader,
//! environment variable overrides, validation, and migration helpers.
//! Vault secret resolution is handled in `zeph-core` through the `SecretResolver` trait.
//!
//! # TODO (D4 — deferred: typed config presets)
//!
//! This crate currently has 131 config structs across 30 files (~19K LOC). Many subsystem
//! configs duplicate the same optional/default patterns and there is no compile-time guarantee
//! that a feature's config section is consistent with its runtime behaviour.
//!
//! Planned: typed preset newtype wrappers (e.g., `MemoryConfig<Minimal>`, `MemoryConfig<Full>`)
//! so callers can use a named preset instead of setting 20+ individual fields, avoiding silent
//! config drift when new fields are added.
//!
//! **Blocked by:** requires a clear preset taxonomy and a backwards-compatible TOML migration
//! strategy. Must be a standalone epic with its own SDD spec. Do NOT bundle with other refactors.
//!
//! # Loading configuration
//!
//! ```no_run
//! use std::path::Path;
//! use zeph_config::Config;
//!
//! // Load from file (falls back to defaults when the file does not exist)
//! let config = Config::load(Path::new("/etc/zeph/config.toml"))
//!     .expect("failed to load config");
//!
//! // Validate numeric bounds and cross-references
//! config.validate().expect("config validation failed");
//!
//! println!("Agent name: {}", config.agent.name);
//! println!("History limit: {}", config.memory.history_limit);
//! ```
//!
//! # Environment variable overrides
//!
//! After loading from TOML, `Config::load` automatically applies env-var overrides.
//! Key variables:
//!
//! | Variable | Field overridden |
//! |---|---|
//! | `ZEPH_LLM_PROVIDER` | `llm.providers[0].provider_type` |
//! | `ZEPH_LLM_MODEL` | `llm.providers[0].model` |
//! | `ZEPH_SQLITE_PATH` | `memory.sqlite_path` |
//! | `ZEPH_QDRANT_URL` | `memory.qdrant_url` |
//!
//! The Qdrant API key is vault-only (not an env-var override):
//! `zeph vault set ZEPH_QDRANT_API_KEY "<key>"` → `memory.qdrant_api_key`.
//!
//! # Config migration
//!
//! Use [`migrate::ConfigMigrator`] to upgrade existing TOML configs with newly-added
//! parameters added as commented-out entries:
//!
//! ```no_run
//! use zeph_config::migrate::ConfigMigrator;
//!
//! let user_toml = std::fs::read_to_string("config.toml").unwrap();
//! let migrator = ConfigMigrator::new();
//! let result = migrator.migrate(&user_toml).expect("migration failed");
//! println!("Added {} new parameters", result.changed_count);
//! std::fs::write("config.toml", &result.output).unwrap();
//! ```

// TODO(critic): post-v1.0 — re-evaluate ConfigSection derive macro for the 131 config structs.

pub mod agent;
pub mod autonomous;
pub mod channels;
pub mod classifiers;
pub mod cli;
pub mod cocoon;
mod de_helpers;
#[cfg(feature = "deep-link")]
pub mod deep_link;
pub mod defaults;
pub mod dump_format;
pub mod durable;
mod env;
pub mod error;
pub mod execution;
pub mod experiment;
pub mod features;
pub mod fidelity;
pub mod hooks;
pub mod knowledge;
pub mod learning;
mod loader;
pub mod logging;
pub mod mcp_security;
pub mod memory;
pub mod metrics;
pub mod migrate;
pub mod notifications;
pub mod providers;
pub mod quality;
pub mod rate_limit;
pub mod root;
pub mod sanitizer;
pub mod security;
pub mod serve;
pub mod session;
pub mod subagent;
pub mod telemetry;
pub mod tools;
pub mod ui;
pub mod vigil;
pub mod worktree;

pub use agent::{
    AgentConfig, ContextInjectionMode, FocusConfig, GoalConfig, ModelSpec, ParentContextPolicy,
    SubAgentConfig, SubAgentLifecycleHooks, TaskSupervisorConfig, ToolFilterConfig,
};
pub use channels::{
    A2aServerConfig, ChannelSkillsConfig, DiscordConfig, IbctKeyConfig, McpConfig, McpOAuthConfig,
    McpPolicy, McpServerConfig, McpTrustLevel, OAuthTokenStorage, RateLimit, SlackConfig,
    TelegramConfig, ToolDiscoveryConfig, ToolDiscoveryStrategyConfig, ToolPruningConfig,
    TrustCalibrationConfig, is_skill_allowed,
};
pub use cli::{CliConfig, LoopConfig};
pub use cocoon::CocoonConfig;
pub use defaults::{
    DEFAULT_DEBUG_DIR, DEFAULT_LOG_FILE, DEFAULT_SKILLS_DIR, DEFAULT_SQLITE_PATH,
    default_debug_dir, default_integrity_registry_path, default_log_file_path, default_skills_dir,
    default_sqlite_path, is_legacy_default_debug_dir, is_legacy_default_log_file,
    is_legacy_default_skills_path, is_legacy_default_sqlite_path,
};
pub use dump_format::DumpFormat;
pub use durable::{DurableBackend, DurableConfig, RetentionPolicy};
pub use execution::{EnvironmentConfig, ExecutionConfig};
pub use experiment::{
    AdaptOrchConfig, AssetSensitivity, ExperimentConfig, ExperimentSchedule, FailureStrategy,
    OrchestrationConfig, PlanCacheConfig,
};
pub use features::{
    CavemanConfig, CompressionSpectrumConfig, CostConfig, DaemonConfig, DebugConfig, GatewayConfig,
    IndexConfig, ProactiveExplorationConfig, ScheduledTaskConfig, ScheduledTaskKind,
    SchedulerConfig, SchedulerDaemonConfig, SchedulerSecurityConfig, SkillEvaluationConfig,
    SkillMiningConfig, SkillPromptMode, SkillsConfig, TraceConfig, VaultBackend, VaultConfig,
};
pub use fidelity::FidelityConfig;
pub use hooks::{FileChangedConfig, HooksConfig};
pub use knowledge::KnowledgeConfig;
pub use learning::{DetectorMode, LearningConfig};
pub use logging::{LogRotation, LoggingConfig};
pub use mcp_security::{CapabilityClass, DataSensitivity, FlaggedParameter, ToolSecurityMeta};
pub use memory::{
    AconConfig, AdmissionConfig, AdmissionStrategy, AdmissionWeights, ArcCompactionConfig,
    AutoDreamConfig, BeliefRevisionConfig, CategoryConfig, CompressionConfig, CompressionStrategy,
    ConflictResolutionStrategy, ConsolidationDaemonConfig, ContextFormat, ContextStrategy,
    DigestConfig, DocumentConfig, EmGraphConfig, FiveSignalConfig, FiveSignalConsolidationConfig,
    ForgettingConfig, GraphConfig, HebbianConfig, ImplicitConflictConfig, MagicDocsConfig,
    MemCotConfig, MemoryConfig, MicrocompactConfig, NoteLinkingConfig, OpticalForgettingConfig,
    PersonaConfig, PruningStrategy, ReasoningConfig, RecallViewConfig, RetrievalConfig,
    RetrievalFailuresConfig, RpeConfig, SemanticConfig, SessionsConfig, SidequestConfig,
    SimilarityMethod, StoreRoutingConfig, StoreRoutingStrategy, TierConfig, TieredRetrievalConfig,
    TrajectoryConfig, TrajectoryRiskAccumulatorConfig, TrajectorySeverityMultipliers,
    TrajectorySignalWeights, TreeConfig, TypedPagesConfig, TypedPagesEnforcement, VectorBackend,
};
pub use metrics::MetricsConfig;
pub use notifications::NotificationsConfig;
pub use providers::default_stt_language;
pub use providers::{
    BanditConfig, CacheTtl, CandleConfig, CandleDevice, CandleInlineConfig, CandleSource,
    CascadeClassifierMode, CascadeConfig, CocoonPricing, CoeConfig, ComplexityRoutingConfig,
    FAST_TIER_MODEL_HINTS, GeminiThinkingLevel, GenerationParams, GonkaNode, LlmConfig,
    LlmRoutingStrategy, MAX_TOKENS_CAP, ProviderEntry, ProviderKind, ProviderName,
    ProviderOverrides, RouterConfig, RouterStrategyConfig, StreamLimits, SttConfig, ThinkingConfig,
    ThinkingEffort, TierMapping, validate_pool,
};
pub use quality::{QualityConfig, TriggerPolicy};
pub use rate_limit::RateLimitConfig;
pub use sanitizer::{
    CausalIpiConfig, ContentIsolationConfig, CustomPiiPattern, EmbeddingGuardConfig,
    ExfiltrationGuardConfig, MemoryWriteValidationConfig, NliConfig, PiiFilterConfig,
    QuarantineConfig, ResponseVerificationConfig, SecretMaskingConfig, ShadowMemoryConfig,
};
pub use sanitizer::{GuardrailAction, GuardrailConfig, GuardrailFailStrategy};
pub use security::{
    CapabilityScopesConfig, PatternStrictness, ScannerConfig, ScopeConfig, SecurityConfig,
    ShadowSentinelConfig, TimeoutConfig, TrajectorySentinelConfig, TrustConfig,
};
pub use serve::ServeConfig;
pub use session::{RecapConfig, SessionConfig};
pub use subagent::{
    HookAction, HookDef, HookMatcher, MemoryScope, PermissionMode, SkillFilter, SubagentHooks,
    ToolPolicy,
};
pub use telemetry::{TelemetryBackend, TelemetryConfig};
pub use tools::{AuditDestination, SandboxBackend, ToolCompressionConfig};
pub use ui::{
    AcpAuthMethod, AcpConfig, AcpLspConfig, AcpModelConfigConfig, AcpSubagentsConfig,
    AcpTemperaturePreset, AcpTimeoutsConfig, AcpTransport, AdditionalDir, AdditionalDirError,
    ColorMode, DelightsConfig, FleetConfig, Motion, SubagentPresetConfig, ThemeConfig, ToolDensity,
    TuiConfig,
};
pub use ui::{DiagnosticSeverity, DiagnosticsConfig, HoverConfig, LspConfig};
pub use vigil::VigilConfig;
pub use worktree::{BgIsolation, WorktreeBaseRef, WorktreeConfig};

// Top-level config struct, error type, and resolved secrets — moved from zeph-core.
pub use classifiers::{ClassifiersConfig, InjectionEnforcementMode};
#[cfg(feature = "deep-link")]
pub use deep_link::{AcpPreference, DeepLinkConfig};
pub use error::ConfigError;
pub use root::{Config, ResolvedSecrets};