configbind

Overview ¶

Package configbind is the single place a merged koanf tree becomes a framework config struct. Both full-config consumers — pkg/app's LoadConfig (the CLI path) and pkg/nucleus's fluent loader — bind through here so their decoding can never diverge; it is internal on purpose (the dependency firewall forbids koanf types on the stable API, ADR-015).

On top of koanf's default hooks (duration parsing, weak typing, comma slices) it promotes a plain string into a storage.CredentialSource {value: …}, so `access_key_id: "literal"` keeps binding while the full env_var/file/secret_manager shape the README promises is loadable too — QCD-FW-4's class was exactly a config shape the docs promise but the decoder rejects.