config

type Config struct {
	RepoPath     string `mapstructure:"repo_path"`
	KubeConfig   string `mapstructure:"kubeconfig"`
	EnvType      string `mapstructure:"env_type"`
	EnvRegion    string `mapstructure:"env_region"`
	EnvRealm     string `mapstructure:"env_realm"`
	Category     string `mapstructure:"category"`
	LogFile      string `mapstructure:"log_file"`
	Debug        bool   `mapstructure:"debug"`
	Filter       string `mapstructure:"filter"`
	MetadataFile string `mapstructure:"metadata_file"`
	// MutationEnvOverrideAllowed opts MCP mutation tools into per-call
	// env_type / env_region / env_realm overrides. Default false: tools
	// silently fall back to the startup env, even if the agent provides
	// override fields. The flip is meaningful: with the override
	// allowed, a prompt-injection attack that sets confirm=true also
	// controls which realm is targeted, so the operator's kubeconfig /
	// OCI credentials decide the maximum blast radius — not the
	// operator's startup-env choice.
	MutationEnvOverrideAllowed bool `mapstructure:"mutation_env_override_allowed"`
}