config

type Config struct {
	RepoPath     string `mapstructure:"repo-path"`
	KubeConfig   string `mapstructure:"kubeconfig"`
	EnvType      string `mapstructure:"env-type"`
	EnvRegion    string `mapstructure:"env-region"`
	EnvRealm     string `mapstructure:"env-realm"`
	Category     string `mapstructure:"category"`
	LogFile      string `mapstructure:"log-file"`
	Debug        bool   `mapstructure:"debug"`
	Filter       string `mapstructure:"filter"`
	MetadataFile string `mapstructure:"metadata-file"`
	// MutationEnvOverrideAllowed opts MCP mutation tools into per-call
	// env_type / env_region / env_realm overrides. Default false: tools
	// silently fall back to the startup env, even if the agent provides
	// override fields. The flip is meaningful: with the override
	// allowed, a prompt-injection attack that sets confirm=true also
	// controls which realm is targeted, so the operator's kubeconfig /
	// OCI credentials decide the maximum blast radius — not the
	// operator's startup-env choice.
	MutationEnvOverrideAllowed bool `mapstructure:"mutation-env-override-allowed"`
}