{ "release": "0.12.7", "source_commit": "192e590345c6a4bf1ef8f72b043b318084ea84d6", "binary_sha256": "45a7ae62c66c15693790de1905b72502b75e7889682e4e58cbb4e88756ba6879", "scope": "42 literal Viper keys, 17 typed resource leaves, 3 constant-key variant settings and 4 composed agent-messaging rollout settings. Analysis has its own generated reference; structured decision/permissions/A2A and directory contracts remain separate. This is not a closed inventory of all Sonny configuration.", "entries": [ { "key": "agent_messaging.federation", "group": "agent messaging", "type": "boolean", "default": "false", "file_key": "agent_messaging.federation", "environment": [ "SONNY_AGENT_MESSAGING_FEDERATION", "SONNY_AGENT_MESSAGING.FEDERATION" ], "bindings": [], "precedence": "Exact SONNY_AGENT_MESSAGING_* environment variable, including an explicitly empty value > raw dotted process-environment key > selected root file > false. Empty/invalid environment text is a boolean error when the resolver is reached.", "trust_scope": "Operator-owned explicit --config/home file, or trusted workspace. Untrusted working-file agent_messaging values are dropped and operator values restored.", "application": "Read at host/process messaging setup. A rollout value is not a live transport grant or permission to start a model turn.", "example": { "agent_messaging": { "federation": false } }, "notes": "Requires local=true and at least one protected SONNY_AGENT_MESSAGING_A2A_CONFIG / SONNY_AGENT_MESSAGING_A2A_OUTBOUND_CONFIG absolute clean path. The rollout resolver checks path shape only; file ownership, TLS, peer grants and runtime admission happen later. config validate did not reject a bad messaging boolean; inspect the startup path as well.", "sources": [ { "file": "cmd/sonny/cli/supervisor_agent_messaging.go", "line": 55, "method": "composed key and explicit environment override" }, { "file": "cmd/sonny/cli/config_operator_keys.go", "line": 45, "method": "operator subtree confinement" } ] }, { "key": "agent_messaging.idle_wake", "group": "agent messaging", "type": "boolean", "default": "false", "file_key": "agent_messaging.idle_wake", "environment": [ "SONNY_AGENT_MESSAGING_IDLE_WAKE", "SONNY_AGENT_MESSAGING.IDLE_WAKE" ], "bindings": [], "precedence": "Exact SONNY_AGENT_MESSAGING_* environment variable, including an explicitly empty value > raw dotted process-environment key > selected root file > false. Empty/invalid environment text is a boolean error when the resolver is reached.", "trust_scope": "Operator-owned explicit --config/home file, or trusted workspace. Untrusted working-file agent_messaging values are dropped and operator values restored.", "application": "Read at host/process messaging setup. A rollout value is not a live transport grant or permission to start a model turn.", "example": { "agent_messaging": { "idle_wake": false } }, "notes": "Source idle-wake resolver requires local messaging and durable relationship/budget authority. Installed startup with local messaging disabled ignored idle_wake=true and completed a model turn: the expected refusal assertion remains failed. This does not prove any mail-triggered wake worked. config validate did not reject a bad messaging boolean; inspect the startup path as well.", "sources": [ { "file": "cmd/sonny/cli/supervisor_agent_messaging.go", "line": 83, "method": "composed key and explicit environment override" }, { "file": "cmd/sonny/cli/config_operator_keys.go", "line": 45, "method": "operator subtree confinement" } ] }, { "key": "agent_messaging.local", "group": "agent messaging", "type": "boolean", "default": "false", "file_key": "agent_messaging.local", "environment": [ "SONNY_AGENT_MESSAGING_LOCAL", "SONNY_AGENT_MESSAGING.LOCAL" ], "bindings": [], "precedence": "Exact SONNY_AGENT_MESSAGING_* environment variable, including an explicitly empty value > raw dotted process-environment key > selected root file > false. Empty/invalid environment text is a boolean error when the resolver is reached.", "trust_scope": "Operator-owned explicit --config/home file, or trusted workspace. Untrusted working-file agent_messaging values are dropped and operator values restored.", "application": "Read at host/process messaging setup. A rollout value is not a live transport grant or permission to start a model turn.", "example": { "agent_messaging": { "local": false } }, "notes": "Permits local agent messaging setup only. It grants no agent identity, durable relationship, transport membership or model-wake authority. config validate did not reject a bad messaging boolean; inspect the startup path as well.", "sources": [ { "file": "cmd/sonny/cli/supervisor_agent_messaging.go", "line": 47, "method": "composed key and explicit environment override" }, { "file": "cmd/sonny/cli/config_operator_keys.go", "line": 45, "method": "operator subtree confinement" } ] }, { "key": "agent_messaging.mesh", "group": "agent messaging", "type": "boolean", "default": "false", "file_key": "agent_messaging.mesh", "environment": [ "SONNY_AGENT_MESSAGING_MESH", "SONNY_AGENT_MESSAGING.MESH" ], "bindings": [], "precedence": "Exact SONNY_AGENT_MESSAGING_* environment variable, including an explicitly empty value > raw dotted process-environment key > selected root file > false. Empty/invalid environment text is a boolean error when the resolver is reached.", "trust_scope": "Operator-owned explicit --config/home file, or trusted workspace. Untrusted working-file agent_messaging values are dropped and operator values restored.", "application": "Read at host/process messaging setup. A rollout value is not a live transport grant or permission to start a model turn.", "example": { "agent_messaging": { "mesh": false } }, "notes": "The tested host refuses true with mesh routing is not configured on this host. This is distinct from a managed deployment manifest agent_messaging capability. config validate did not reject a bad messaging boolean; inspect the startup path as well.", "sources": [ { "file": "cmd/sonny/cli/supervisor_agent_messaging.go", "line": 51, "method": "composed key and explicit environment override" }, { "file": "cmd/sonny/cli/config_operator_keys.go", "line": 45, "method": "operator subtree confinement" } ] }, { "key": "debug", "group": "core", "type": "boolean", "default": "false", "file_key": "debug", "environment": [ "SONNY_DEBUG" ], "bindings": [ { "command": "sonny", "flag": "--debug", "displayed_default": "false", "help_anchor": "/docs/cli/commands/#command-sonny" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "debug": false }, "sources": [ { "file": "cmd/sonny/cli/cmd_session_eval.go", "line": 804, "method": "GetBool" }, { "file": "cmd/sonny/cli/config.go", "line": 89, "method": "GetBool" }, { "file": "cmd/sonny/cli/root.go", "line": 145, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/root.go", "line": 548, "method": "GetBool" }, { "file": "cmd/sonny/cli/run.go", "line": 425, "method": "GetBool" } ], "notes": "Viper boolean conversion is not strict validation: the tested invalid SONNY_DEBUG value became false without refusal." }, { "key": "dir", "group": "core", "type": "string list", "default": "[]", "file_key": "dir", "environment": [ "SONNY_DIR" ], "bindings": [ { "command": "sonny run", "flag": "--dir", "displayed_default": "[]", "help_anchor": "/docs/cli/commands/#command-sonny-run" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "dir": [ "./recipes" ] }, "sources": [ { "file": "cmd/sonny/cli/pack_inspect_resolve.go", "line": 166, "method": "GetStringSlice" }, { "file": "cmd/sonny/cli/run.go", "line": 534, "method": "GetStringSlice" }, { "file": "cmd/sonny/cli/run.go", "line": 557, "method": "BindPFlag" } ], "notes": "Additional Recipe directories can acquire project-workspace trust labels. SONNY_DIR_JSON is a separate inherited-worker transport, not the ordinary comma-separated override." }, { "key": "log_format", "group": "core", "type": "string", "default": "\"text\"", "file_key": "log_format", "environment": [ "SONNY_LOG_FORMAT" ], "bindings": [ { "command": "sonny", "flag": "--log-format", "displayed_default": "\"text\"", "help_anchor": "/docs/cli/commands/#command-sonny" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "log_format": "text" }, "sources": [ { "file": "cmd/sonny/cli/root.go", "line": 147, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/root.go", "line": 309, "method": "GetString" }, { "file": "cmd/sonny/cli/root.go", "line": 435, "method": "GetString" } ], "notes": "These rows describe requested root values; diagnostic display is separate from logger parsing." }, { "key": "log_level", "group": "core", "type": "string", "default": "\"warn\"", "file_key": "log_level", "environment": [ "SONNY_LOG_LEVEL" ], "bindings": [ { "command": "sonny", "flag": "--log-level", "displayed_default": "\"warn\"", "help_anchor": "/docs/cli/commands/#command-sonny" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "log_level": "info" }, "sources": [ { "file": "cmd/sonny/cli/config.go", "line": 93, "method": "GetString" }, { "file": "cmd/sonny/cli/root.go", "line": 146, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/root.go", "line": 309, "method": "GetString" }, { "file": "cmd/sonny/cli/root.go", "line": 435, "method": "GetString" } ], "notes": "These rows describe requested root values; diagnostic display is separate from logger parsing." }, { "key": "model", "group": "core", "type": "string", "default": "\"\"", "file_key": "model", "environment": [ "SONNY_MODEL" ], "bindings": [ { "command": "sonny", "flag": "--model", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "model": "docs-model" }, "sources": [ { "file": "cmd/sonny/cli/config.go", "line": 88, "method": "GetString" }, { "file": "cmd/sonny/cli/eval_runner.go", "line": 1559, "method": "GetString" }, { "file": "cmd/sonny/cli/root.go", "line": 144, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/root.go", "line": 543, "method": "GetString" }, { "file": "cmd/sonny/cli/run.go", "line": 423, "method": "GetString" } ], "notes": "Empty selects later Recipe/client choices; it is not a credential or endpoint declaration." }, { "key": "pack", "group": "core", "type": "string", "default": "\"\"", "file_key": "pack", "environment": [ "SONNY_RECIPE", "SONNY_PACK" ], "bindings": [ { "command": "sonny run", "flag": "--recipe", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-run" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "pack": "pilot-brief-eval" }, "sources": [ { "file": "cmd/sonny/cli/run.go", "line": 431, "method": "GetString" }, { "file": "cmd/sonny/cli/run.go", "line": 578, "method": "BindPFlag" } ], "notes": "Root recipe/pack aliases are normalized before lookup; conflicting alias values refuse startup. The stored key is pack; the public spelling recipe is accepted by the compatibility normalizer." }, { "key": "prompt", "group": "core", "type": "string", "default": "\"\"", "file_key": "prompt", "environment": [ "SONNY_PROMPT" ], "bindings": [ { "command": "sonny run", "flag": "--prompt", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-run" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "prompt": "Summarize the supplied synthetic notes." }, "sources": [ { "file": "cmd/sonny/cli/child_startup.go", "line": 41, "method": "GetString" }, { "file": "cmd/sonny/cli/run.go", "line": 432, "method": "GetString" }, { "file": "cmd/sonny/cli/run.go", "line": 503, "method": "GetString" }, { "file": "cmd/sonny/cli/run.go", "line": 506, "method": "GetString" }, { "file": "cmd/sonny/cli/run.go", "line": 580, "method": "BindPFlag" } ], "notes": "A nonempty prompt selects one headless turn; it can initiate provider calls when run, not during this reference generation." }, { "key": "provider", "group": "core", "type": "string", "default": "\"\"", "file_key": "provider", "environment": [ "SONNY_PROVIDER" ], "bindings": [ { "command": "sonny", "flag": "--provider", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "provider": "docs-provider" }, "sources": [ { "file": "cmd/sonny/cli/config.go", "line": 87, "method": "GetString" }, { "file": "cmd/sonny/cli/eval_runner.go", "line": 1558, "method": "GetString" }, { "file": "cmd/sonny/cli/pack.go", "line": 908, "method": "GetString" }, { "file": "cmd/sonny/cli/root.go", "line": 143, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/root.go", "line": 538, "method": "GetString" }, { "file": "cmd/sonny/cli/run.go", "line": 422, "method": "GetString" } ], "notes": "Empty selects later Recipe/client choices; it is not a credential or endpoint declaration." }, { "key": "mesh.advertise_address", "group": "mesh", "type": "string", "default": "explicit address, then resolved mesh endpoint for mesh adopt offer", "file_key": "mesh.advertise_address", "environment": [], "bindings": [ { "command": "sonny mesh adopt offer", "flag": "--address", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-mesh-adopt-offer" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.advertise_address": "mesh.example.invalid:50052" }, "sources": [ { "file": "cmd/sonny/cli/mesh_adopt.go", "line": 143, "method": "GetString" } ] }, { "key": "mesh.agents", "group": "mesh", "type": "string map", "default": "{}", "file_key": "mesh.agents", "environment": [], "bindings": [], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.agents": { "example": "https://example.invalid:18443" } }, "sources": [ { "file": "cmd/sonny/cli/mesh_exec.go", "line": 41, "method": "GetStringMapString" } ] }, { "key": "mesh.client_ca", "group": "mesh", "type": "string", "default": "\"\"", "file_key": "mesh.client_ca", "environment": [], "bindings": [ { "command": "sonny mesh", "flag": "--client-ca", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-mesh" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.client_ca": "./private/client.pem" }, "sources": [ { "file": "cmd/sonny/cli/mesh.go", "line": 181, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/meshcfg.go", "line": 95, "method": "GetString" } ] }, { "key": "mesh.client_cert", "group": "mesh", "type": "string", "default": "\"\"", "file_key": "mesh.client_cert", "environment": [], "bindings": [ { "command": "sonny mesh", "flag": "--client-cert", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-mesh" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.client_cert": "./private/client.pem" }, "sources": [ { "file": "cmd/sonny/cli/mesh.go", "line": 179, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/meshcfg.go", "line": 93, "method": "GetString" } ] }, { "key": "mesh.client_key", "group": "mesh", "type": "string", "default": "\"\"", "file_key": "mesh.client_key", "environment": [], "bindings": [ { "command": "sonny mesh", "flag": "--client-key", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-mesh" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.client_key": "./private/client.pem" }, "sources": [ { "file": "cmd/sonny/cli/mesh.go", "line": 180, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/meshcfg.go", "line": 94, "method": "GetString" } ] }, { "key": "mesh.client_key_pin", "group": "mesh", "type": "string", "default": "\"\"", "file_key": "mesh.client_key_pin", "environment": [], "bindings": [ { "command": "sonny mesh", "flag": "--client-key-pin", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-mesh" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.client_key_pin": "./private/client.pem" }, "sources": [ { "file": "cmd/sonny/cli/mesh.go", "line": 182, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/meshcfg.go", "line": 115, "method": "GetString" } ] }, { "key": "mesh.control_db", "group": "mesh", "type": "string", "default": "/control.db", "file_key": "mesh.control_db", "environment": [ "SONNY_CONTROL_DB" ], "bindings": [ { "command": "sonny mesh serve", "flag": "--control-db", "displayed_default": "/control.db", "help_anchor": "/docs/cli/commands/#command-sonny-mesh-serve" }, { "command": "sonny mesh adopt offer", "flag": "--control-db", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-mesh-adopt-offer" } ], "precedence": "mesh serve: --control-db > SONNY_CONTROL_DB > mesh.control_db > data-dir default. mesh adopt offer: explicit flag > mesh.control_db > data-dir default; its helper does not read SONNY_CONTROL_DB.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.control_db": "./private/control.db" }, "sources": [ { "file": "cmd/sonny/cli/mesh.go", "line": 462, "method": "GetString" }, { "file": "cmd/sonny/cli/mesh_adopt.go", "line": 309, "method": "GetString" } ] }, { "key": "mesh.dev_insecure_transport", "group": "mesh", "type": "boolean", "default": "false", "file_key": "mesh.dev_insecure_transport", "environment": [], "bindings": [ { "command": "sonny mesh", "flag": "--dev-insecure-transport", "displayed_default": "false", "help_anchor": "/docs/cli/commands/#command-sonny-mesh" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.dev_insecure_transport": false }, "sources": [ { "file": "cmd/sonny/cli/mesh.go", "line": 188, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/mesh.go", "line": 579, "method": "GetBool" }, { "file": "cmd/sonny/cli/meshcfg.go", "line": 117, "method": "GetBool" } ] }, { "key": "mesh.endpoint", "group": "mesh", "type": "string", "default": "\"\"", "file_key": "mesh.endpoint", "environment": [ "SONNY_MESH_ADDR" ], "bindings": [ { "command": "sonny mesh", "flag": "--endpoint", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-mesh" }, { "command": "sonny run", "flag": "--mesh-addr", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-run" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.endpoint": "127.0.0.1:50052" }, "sources": [ { "file": "cmd/sonny/cli/mesh.go", "line": 165, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/meshcfg.go", "line": 63, "method": "GetString" }, { "file": "cmd/sonny/cli/run.go", "line": 715, "method": "BindPFlag" } ], "notes": "CLI connectivity uses a legacy SONNY_MESH_ADDR fallback below the resolved key; SONNY_MESH_ENDPOINT is not a usable automatic nested mapping. An empty client endpoint can fall back to localhost:50052; run/TUI has separate panel behavior." }, { "key": "mesh.peers", "group": "mesh", "type": "string list", "default": "[]", "file_key": "mesh.peers", "environment": [], "bindings": [ { "command": "sonny run", "flag": "--mesh-peer", "displayed_default": "[]", "help_anchor": "/docs/cli/commands/#command-sonny-run" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.peers": [ "127.0.0.1:50052" ] }, "sources": [ { "file": "cmd/sonny/cli/meshcfg.go", "line": 67, "method": "GetStringSlice" }, { "file": "cmd/sonny/cli/run.go", "line": 716, "method": "BindPFlag" } ] }, { "key": "mesh.self", "group": "mesh", "type": "boolean", "default": "false", "file_key": "mesh.self", "environment": [], "bindings": [ { "command": "sonny run", "flag": "--mesh-self", "displayed_default": "false", "help_anchor": "/docs/cli/commands/#command-sonny-run" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.self": false }, "sources": [ { "file": "cmd/sonny/cli/run.go", "line": 488, "method": "GetBool" }, { "file": "cmd/sonny/cli/run.go", "line": 728, "method": "BindPFlag" } ] }, { "key": "mesh.self_grpc", "group": "mesh", "type": "string", "default": "\":50052\"", "file_key": "mesh.self_grpc", "environment": [], "bindings": [ { "command": "sonny run", "flag": "--mesh-self-grpc", "displayed_default": "\":50052\"", "help_anchor": "/docs/cli/commands/#command-sonny-run" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.self_grpc": ":50052" }, "sources": [ { "file": "cmd/sonny/cli/run.go", "line": 489, "method": "GetString" }, { "file": "cmd/sonny/cli/run.go", "line": 729, "method": "BindPFlag" } ] }, { "key": "mesh.self_synapse", "group": "mesh", "type": "string", "default": "\":50053\"", "file_key": "mesh.self_synapse", "environment": [], "bindings": [ { "command": "sonny run", "flag": "--mesh-self-synapse", "displayed_default": "\":50053\"", "help_anchor": "/docs/cli/commands/#command-sonny-run" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.self_synapse": ":50053" }, "sources": [ { "file": "cmd/sonny/cli/run.go", "line": 490, "method": "GetString" }, { "file": "cmd/sonny/cli/run.go", "line": 730, "method": "BindPFlag" } ] }, { "key": "mesh.server_name", "group": "mesh", "type": "string", "default": "\"\"", "file_key": "mesh.server_name", "environment": [], "bindings": [ { "command": "sonny mesh", "flag": "--server-name", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-mesh" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.server_name": "mesh.example.invalid" }, "sources": [ { "file": "cmd/sonny/cli/mesh.go", "line": 183, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/meshcfg.go", "line": 116, "method": "GetString" } ] }, { "key": "mesh.tls_cert", "group": "mesh", "type": "string", "default": "/mesh/node.crt for mesh adopt offer", "file_key": "mesh.tls_cert", "environment": [], "bindings": [ { "command": "sonny mesh adopt offer", "flag": "--cert", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-mesh-adopt-offer" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "mesh.tls_cert": "./private/node.crt" }, "sources": [ { "file": "cmd/sonny/cli/mesh_adopt.go", "line": 320, "method": "GetString" } ] }, { "key": "resource_reuse.enabled", "group": "resource reuse", "type": "boolean", "default": "true", "file_key": "resource_reuse.enabled", "environment": [ "SONNY_RESOURCE_REUSE_ENABLED" ], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.enabled": true }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": {} }, { "key": "resource_reuse.file_versions.algorithm", "group": "resource reuse", "type": "string", "default": "\"sha256\"", "file_key": "resource_reuse.file_versions.algorithm", "environment": [], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.file_versions.algorithm": "sha256" }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": { "enum": "sha256" } }, { "key": "resource_reuse.file_versions.capture_retries", "group": "resource reuse", "type": "integer", "default": "2", "file_key": "resource_reuse.file_versions.capture_retries", "environment": [], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.file_versions.capture_retries": 2 }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": { "min": "0", "max": "5" } }, { "key": "resource_reuse.file_versions.max_bytes", "group": "resource reuse", "type": "integer", "default": "10485760", "file_key": "resource_reuse.file_versions.max_bytes", "environment": [], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.file_versions.max_bytes": 10485760 }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": { "min": "1", "max": "1073741824" } }, { "key": "resource_reuse.file_versions.unobserved_replace", "group": "resource reuse", "type": "string", "default": "\"refuse\"", "file_key": "resource_reuse.file_versions.unobserved_replace", "environment": [ "SONNY_RESOURCE_REUSE_UNOBSERVED_REPLACE" ], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.file_versions.unobserved_replace": "refuse" }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": { "enum": "refuse,allow" } }, { "key": "resource_reuse.file_versions.validation", "group": "resource reuse", "type": "string", "default": "\"digest\"", "file_key": "resource_reuse.file_versions.validation", "environment": [], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.file_versions.validation": "digest" }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": { "enum": "digest" } }, { "key": "resource_reuse.file_versions.write_preconditions", "group": "resource reuse", "type": "string", "default": "\"required\"", "file_key": "resource_reuse.file_versions.write_preconditions", "environment": [ "SONNY_RESOURCE_REUSE_WRITE_PRECONDITIONS" ], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.file_versions.write_preconditions": "required" }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": { "enum": "required,advisory" } }, { "key": "resource_reuse.read_results.max_bytes", "group": "resource reuse", "type": "integer", "default": "67108864", "file_key": "resource_reuse.read_results.max_bytes", "environment": [], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.read_results.max_bytes": 67108864 }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": { "min": "0", "max": "4294967296" } }, { "key": "resource_reuse.read_results.max_entries", "group": "resource reuse", "type": "integer", "default": "4096", "file_key": "resource_reuse.read_results.max_entries", "environment": [], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.read_results.max_entries": 4096 }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": { "min": "1", "max": "1000000" } }, { "key": "resource_reuse.read_results.max_hash_workers", "group": "resource reuse", "type": "integer", "default": "4", "file_key": "resource_reuse.read_results.max_hash_workers", "environment": [], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.read_results.max_hash_workers": 4 }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": { "min": "1", "max": "64" } }, { "key": "resource_reuse.read_results.persist", "group": "resource reuse", "type": "boolean", "default": "false", "file_key": "resource_reuse.read_results.persist", "environment": [], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.read_results.persist": false }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": {} }, { "key": "resource_reuse.read_results.representation", "group": "resource reuse", "type": "string", "default": "\"auto\"", "file_key": "resource_reuse.read_results.representation", "environment": [ "SONNY_RESOURCE_REUSE_REPRESENTATION" ], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.read_results.representation": "auto" }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": { "enum": "auto,full,compact" } }, { "key": "resource_reuse.telemetry.enabled", "group": "resource reuse", "type": "boolean", "default": "true", "file_key": "resource_reuse.telemetry.enabled", "environment": [], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.telemetry.enabled": true }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": {} }, { "key": "resource_reuse.telemetry.include_content", "group": "resource reuse", "type": "boolean", "default": "false", "file_key": "resource_reuse.telemetry.include_content", "environment": [], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.telemetry.include_content": false }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": {} }, { "key": "resource_reuse.tool_results.enabled", "group": "resource reuse", "type": "boolean", "default": "false", "file_key": "resource_reuse.tool_results.enabled", "environment": [ "SONNY_RESOURCE_REUSE_TOOL_RESULTS" ], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.tool_results.enabled": false }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": {} }, { "key": "resource_reuse.tool_results.policy", "group": "resource reuse", "type": "string", "default": "\"validated_dependencies\"", "file_key": "resource_reuse.tool_results.policy", "environment": [], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.tool_results.policy": "validated_dependencies" }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": { "enum": "validated_dependencies" } }, { "key": "resource_reuse.tool_results.shadow", "group": "resource reuse", "type": "boolean", "default": "true", "file_key": "resource_reuse.tool_results.shadow", "environment": [], "bindings": [], "precedence": "Exact bound environment variable, when listed > selected root resource_reuse block > typed defaults. No command flag.", "trust_scope": "Working-file values can override the home file, including advisory write preconditions and unobserved replacement. The two safety settings are not operator-only; use their exact environment overrides when required.", "application": "Resolved once at command startup; applies to a new session/runtime. Existing observations and realm authority have separate lifetimes.", "example": { "resource_reuse.tool_results.shadow": true }, "notes": "persist=true and telemetry.include_content=true are refused. Other enums/ranges come from the typed resource contract; configuration acceptance does not prove realm tool behavior.", "sources": [ { "file": "cmd/sonny/cli/config_resource_reuse.go", "line": 72, "method": "resolveResourceReuse" }, { "file": "cmd/sonny/internal/resourcereuse/config.go", "line": 33, "method": "typed config/defaults/Validate" } ], "constraints": {} }, { "key": "trace", "group": "trace", "type": "boolean", "default": "true", "file_key": "trace", "environment": [ "SONNY_TRACE" ], "bindings": [ { "command": "sonny run", "flag": "--no-trace", "displayed_default": "false", "help_anchor": "/docs/cli/commands/#command-sonny-run" } ], "precedence": "--no-trace=true forces parent tracing off; otherwise SONNY_TRACE > selected root trace value > true.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace": false }, "sources": [ { "file": "cmd/sonny/cli/run.go", "line": 448, "method": "GetBool" }, { "file": "cmd/sonny/cli/run.go", "line": 627, "method": "SetDefault" }, { "file": "cmd/sonny/cli/run.go", "line": 628, "method": "BindEnv" } ], "notes": "This controls the parent trace. Installed no-trace tests still observed internal MCP child traces; see diagnostics." }, { "key": "trace.export.force", "group": "trace", "type": "boolean", "default": "false", "file_key": "trace.export.force", "environment": [], "bindings": [ { "command": "sonny training export", "flag": "--force", "displayed_default": "false", "help_anchor": "/docs/cli/commands/#command-sonny-training-export" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.export.force": false }, "sources": [ { "file": "cmd/sonny/cli/trace_export.go", "line": 147, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_export.go", "line": 166, "method": "GetBool" } ] }, { "key": "trace.export.format", "group": "trace", "type": "string", "default": "\"openai_chat\"", "file_key": "trace.export.format", "environment": [], "bindings": [ { "command": "sonny training export", "flag": "--format", "displayed_default": "\"openai_chat\"", "help_anchor": "/docs/cli/commands/#command-sonny-training-export" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.export.format": "openai_chat" }, "sources": [ { "file": "cmd/sonny/cli/trace_export.go", "line": 144, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_export.go", "line": 163, "method": "GetString" } ] }, { "key": "trace.export.include_tools", "group": "trace", "type": "boolean", "default": "false", "file_key": "trace.export.include_tools", "environment": [], "bindings": [ { "command": "sonny training export", "flag": "--include-tools", "displayed_default": "false", "help_anchor": "/docs/cli/commands/#command-sonny-training-export" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.export.include_tools": false }, "sources": [ { "file": "cmd/sonny/cli/trace_export.go", "line": 145, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_export.go", "line": 164, "method": "GetBool" } ] }, { "key": "trace.export.keep_errors", "group": "trace", "type": "boolean", "default": "false", "file_key": "trace.export.keep_errors", "environment": [], "bindings": [ { "command": "sonny training export", "flag": "--keep-errors", "displayed_default": "false", "help_anchor": "/docs/cli/commands/#command-sonny-training-export" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.export.keep_errors": false }, "sources": [ { "file": "cmd/sonny/cli/trace_export.go", "line": 148, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_export.go", "line": 167, "method": "GetBool" } ] }, { "key": "trace.export.out", "group": "trace", "type": "string", "default": "\"\"", "file_key": "trace.export.out", "environment": [], "bindings": [ { "command": "sonny training export", "flag": "--out", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-training-export" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.export.out": "./private/output.jsonl" }, "sources": [ { "file": "cmd/sonny/cli/trace_export.go", "line": 143, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_export.go", "line": 162, "method": "GetString" } ] }, { "key": "trace.export.since", "group": "trace", "type": "string", "default": "\"\"", "file_key": "trace.export.since", "environment": [], "bindings": [ { "command": "sonny training export", "flag": "--since", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-training-export" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.export.since": "2026-10-25T00:00:00Z" }, "sources": [ { "file": "cmd/sonny/cli/trace_export.go", "line": 146, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_export.go", "line": 165, "method": "GetString" } ] }, { "key": "trace.export.trace_dir", "group": "trace", "type": "string", "default": "\"/XDG_DATA_HOME/sonny/traces\"", "file_key": "trace.export.trace_dir", "environment": [], "bindings": [ { "command": "sonny training export", "flag": "--trace-dir", "displayed_default": "\"/XDG_DATA_HOME/sonny/traces\"", "help_anchor": "/docs/cli/commands/#command-sonny-training-export" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Selected root configuration; runtime admission and credential authority remain separate.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.export.trace_dir": "./private/traces" }, "sources": [ { "file": "cmd/sonny/cli/trace_export.go", "line": 142, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_export.go", "line": 161, "method": "GetString" } ] }, { "key": "trace.server.ca", "group": "trace", "type": "string", "default": "\"\"", "file_key": "trace.server.ca", "environment": [], "bindings": [ { "command": "sonny training server", "flag": "--ca", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-training-server" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.server.ca": "./private/material.pem" }, "sources": [ { "file": "cmd/sonny/cli/trace_server.go", "line": 84, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_server.go", "line": 112, "method": "GetString" } ] }, { "key": "trace.server.cert", "group": "trace", "type": "string", "default": "\"\"", "file_key": "trace.server.cert", "environment": [], "bindings": [ { "command": "sonny training server", "flag": "--cert", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-training-server" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.server.cert": "./private/material.pem" }, "sources": [ { "file": "cmd/sonny/cli/trace_server.go", "line": 82, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_server.go", "line": 110, "method": "GetString" } ] }, { "key": "trace.server.key", "group": "trace", "type": "string", "default": "\"\"", "file_key": "trace.server.key", "environment": [], "bindings": [ { "command": "sonny training server", "flag": "--key", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-training-server" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.server.key": "./private/material.pem" }, "sources": [ { "file": "cmd/sonny/cli/trace_server.go", "line": 83, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_server.go", "line": 111, "method": "GetString" } ] }, { "key": "trace.server.listen", "group": "trace", "type": "string", "default": "\"127.0.0.1:50051\"", "file_key": "trace.server.listen", "environment": [], "bindings": [ { "command": "sonny training server", "flag": "--listen", "displayed_default": "\"127.0.0.1:50051\"", "help_anchor": "/docs/cli/commands/#command-sonny-training-server" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.server.listen": "127.0.0.1:50051" }, "sources": [ { "file": "cmd/sonny/cli/trace_server.go", "line": 80, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_server.go", "line": 102, "method": "GetString" } ] }, { "key": "trace.server.storage_dir", "group": "trace", "type": "string", "default": "\"\"", "file_key": "trace.server.storage_dir", "environment": [], "bindings": [ { "command": "sonny training server", "flag": "--storage-dir", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-training-server" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.server.storage_dir": "./private/traces" }, "sources": [ { "file": "cmd/sonny/cli/trace_server.go", "line": 81, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_server.go", "line": 103, "method": "GetString" } ] }, { "key": "trace.upload.batch_size", "group": "trace", "type": "integer", "default": "50", "file_key": "trace.upload.batch_size", "environment": [], "bindings": [ { "command": "sonny training upload", "flag": "--batch-size", "displayed_default": "50", "help_anchor": "/docs/cli/commands/#command-sonny-training-upload" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.upload.batch_size": 50 }, "sources": [ { "file": "cmd/sonny/cli/trace_upload.go", "line": 120, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_upload.go", "line": 136, "method": "GetInt" } ] }, { "key": "trace.upload.ca", "group": "trace", "type": "string", "default": "\"\"", "file_key": "trace.upload.ca", "environment": [], "bindings": [ { "command": "sonny training upload", "flag": "--ca", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-training-upload" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.upload.ca": "./private/material.pem" }, "sources": [ { "file": "cmd/sonny/cli/trace_upload.go", "line": 119, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_upload.go", "line": 144, "method": "GetString" } ] }, { "key": "trace.upload.cert", "group": "trace", "type": "string", "default": "\"\"", "file_key": "trace.upload.cert", "environment": [], "bindings": [ { "command": "sonny training upload", "flag": "--cert", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-training-upload" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.upload.cert": "./private/material.pem" }, "sources": [ { "file": "cmd/sonny/cli/trace_upload.go", "line": 117, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_upload.go", "line": 142, "method": "GetString" } ] }, { "key": "trace.upload.key", "group": "trace", "type": "string", "default": "\"\"", "file_key": "trace.upload.key", "environment": [], "bindings": [ { "command": "sonny training upload", "flag": "--key", "displayed_default": "\"\"", "help_anchor": "/docs/cli/commands/#command-sonny-training-upload" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.upload.key": "./private/material.pem" }, "sources": [ { "file": "cmd/sonny/cli/trace_upload.go", "line": 118, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_upload.go", "line": 143, "method": "GetString" } ] }, { "key": "trace.upload.server", "group": "trace", "type": "string", "default": "\"localhost:50051\"", "file_key": "trace.upload.server", "environment": [], "bindings": [ { "command": "sonny training upload", "flag": "--server", "displayed_default": "\"localhost:50051\"", "help_anchor": "/docs/cli/commands/#command-sonny-training-upload" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.upload.server": "localhost:50051" }, "sources": [ { "file": "cmd/sonny/cli/trace_upload.go", "line": 116, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_upload.go", "line": 135, "method": "GetString" } ] }, { "key": "trace.upload.workers", "group": "trace", "type": "integer", "default": "3", "file_key": "trace.upload.workers", "environment": [], "bindings": [ { "command": "sonny training upload", "flag": "--workers", "displayed_default": "3", "help_anchor": "/docs/cli/commands/#command-sonny-training-upload" } ], "precedence": "Explicit bound flag > exact environment binding, if any > selected root file > declared default. Binding metadata alone does not qualify every command consumer.", "trust_scope": "Operator-owned --config/home file, or trusted workspace; untrusted working-file values are confined.", "application": "Read during command startup. Start a new invocation/session after changing this file; this entry grants no hot reload of a running service.", "example": { "trace.upload.workers": 3 }, "sources": [ { "file": "cmd/sonny/cli/trace_upload.go", "line": 121, "method": "BindPFlag" }, { "file": "cmd/sonny/cli/trace_upload.go", "line": 137, "method": "GetInt" } ] }, { "key": "variants.allow_draft_variants", "group": "variants", "type": "boolean", "default": "false", "file_key": "variants.allow_draft_variants", "environment": [ "SONNY_VARIANTS.ALLOW_DRAFT_VARIANTS" ], "bindings": [], "precedence": "Raw dotted process-environment key > selected root file > variant defaults. Root AutomaticEnv replaces hyphens only, not dots; underscore-expanded variant names are ignored. Use env with a quoted NAME=value argument for dotted keys.", "trust_scope": "Operator-owned explicit --config/home file, or trusted workspace. Untrusted working-file variants are dropped and operator values restored; explicit --config is operator-selected.", "application": "Parsed once before eager/deferred session startup; changes apply to a new runtime. Existing sessions and approved variant activation require separate qualification.", "example": { "variants": { "allow_draft_variants": false } }, "constraints": {}, "notes": "Modes: off performs no discovery; validate parses without selection; shadow selects/compiles but serves the base; on may activate an approved selection. Missing valid variants can still leave the base active. The source YAML parser ignores unknown members and later documents; config validate did not reject a bad variant mode. Approval knobs govern separate profile and variant trust axes; a relaxed profile gate does not relax variant approval.", "sources": [ { "file": "cmd/sonny/variantactivate/config.go", "line": 42, "method": "constant key, typed FromLookup and DefaultConfig" }, { "file": "cmd/sonny/cli/config_operator_keys.go", "line": 45, "method": "operator subtree confinement" }, { "file": "cmd/sonny/variant_wire.go", "line": 59, "method": "runtime Viper lookup" } ] }, { "key": "variants.mode", "group": "variants", "type": "string", "default": "\"off\"", "file_key": "variants.mode", "environment": [ "SONNY_VARIANTS.MODE" ], "bindings": [], "precedence": "Raw dotted process-environment key > selected root file > variant defaults. Root AutomaticEnv replaces hyphens only, not dots; underscore-expanded variant names are ignored. Use env with a quoted NAME=value argument for dotted keys.", "trust_scope": "Operator-owned explicit --config/home file, or trusted workspace. Untrusted working-file variants are dropped and operator values restored; explicit --config is operator-selected.", "application": "Parsed once before eager/deferred session startup; changes apply to a new runtime. Existing sessions and approved variant activation require separate qualification.", "example": { "variants": { "mode": "off" } }, "constraints": { "enum": [ "off", "validate", "shadow", "on" ] }, "notes": "Modes: off performs no discovery; validate parses without selection; shadow selects/compiles but serves the base; on may activate an approved selection. Missing valid variants can still leave the base active. The source YAML parser ignores unknown members and later documents; config validate did not reject a bad variant mode. Approval knobs govern separate profile and variant trust axes; a relaxed profile gate does not relax variant approval.", "sources": [ { "file": "cmd/sonny/variantactivate/config.go", "line": 40, "method": "constant key, typed FromLookup and DefaultConfig" }, { "file": "cmd/sonny/cli/config_operator_keys.go", "line": 45, "method": "operator subtree confinement" }, { "file": "cmd/sonny/variant_wire.go", "line": 59, "method": "runtime Viper lookup" } ] }, { "key": "variants.require_profile_approval", "group": "variants", "type": "boolean", "default": "true", "file_key": "variants.require_profile_approval", "environment": [ "SONNY_VARIANTS.REQUIRE_PROFILE_APPROVAL" ], "bindings": [], "precedence": "Raw dotted process-environment key > selected root file > variant defaults. Root AutomaticEnv replaces hyphens only, not dots; underscore-expanded variant names are ignored. Use env with a quoted NAME=value argument for dotted keys.", "trust_scope": "Operator-owned explicit --config/home file, or trusted workspace. Untrusted working-file variants are dropped and operator values restored; explicit --config is operator-selected.", "application": "Parsed once before eager/deferred session startup; changes apply to a new runtime. Existing sessions and approved variant activation require separate qualification.", "example": { "variants": { "require_profile_approval": true } }, "constraints": {}, "notes": "Modes: off performs no discovery; validate parses without selection; shadow selects/compiles but serves the base; on may activate an approved selection. Missing valid variants can still leave the base active. The source YAML parser ignores unknown members and later documents; config validate did not reject a bad variant mode. Approval knobs govern separate profile and variant trust axes; a relaxed profile gate does not relax variant approval.", "sources": [ { "file": "cmd/sonny/variantactivate/config.go", "line": 41, "method": "constant key, typed FromLookup and DefaultConfig" }, { "file": "cmd/sonny/cli/config_operator_keys.go", "line": 45, "method": "operator subtree confinement" }, { "file": "cmd/sonny/variant_wire.go", "line": 59, "method": "runtime Viper lookup" } ] } ], "literal_key_coverage": [ "debug", "dir", "log_format", "log_level", "mesh.advertise_address", "mesh.agents", "mesh.client_ca", "mesh.client_cert", "mesh.client_key", "mesh.client_key_pin", "mesh.control_db", "mesh.dev_insecure_transport", "mesh.endpoint", "mesh.peers", "mesh.self", "mesh.self_grpc", "mesh.self_synapse", "mesh.server_name", "mesh.tls_cert", "model", "pack", "prompt", "provider", "trace", "trace.export.force", "trace.export.format", "trace.export.include_tools", "trace.export.keep_errors", "trace.export.out", "trace.export.since", "trace.export.trace_dir", "trace.server.ca", "trace.server.cert", "trace.server.key", "trace.server.listen", "trace.server.storage_dir", "trace.upload.batch_size", "trace.upload.ca", "trace.upload.cert", "trace.upload.key", "trace.upload.server", "trace.upload.workers" ], "rollout_key_coverage": [ "agent_messaging.federation", "agent_messaging.idle_wake", "agent_messaging.local", "agent_messaging.mesh", "variants.allow_draft_variants", "variants.mode", "variants.require_profile_approval" ] }