ReadonlyenabledThe explicit opt-in, and deliberately the LITERAL true rather than a
boolean: this is an acknowledgement, not a toggle. An absent option is
the disabled path; enabled: false (or any value other than true) is
refused, so a half-configured composition fails loudly instead of
silently opting in.
Optional ReadonlyfilesThe exact configured .env path to source-alias allowlist, at most
eight entries. Each alias must be unique, 1–64 UTF-8 bytes, and
contain no control characters. A file whose exact configured path is not
approved here contributes only the category file — never its path,
name, or count.
ReadonlykeysThe exact configuration key to display-alias allowlist. At most 128
entries. Each alias must be unique, 1–64 UTF-8 bytes, and contain no
control characters. A key not approved here is never observed: it
produces no entry, and its existence is not counted anywhere.
The opt-in configuration provenance policy (M98e).
Key names and file paths are treated as sensitive: only the explicitly approved mappings are retained, aliases are unique and bounded, and anything unapproved is never named in a snapshot — an unapproved file origin is reduced to its category, and an unapproved key produces no entry at all (no counter discloses that it exists). Every option is validated when
loadConfigorConfigPlugin(...)is called, with fixed messages that never echo a supplied value.Since
0.8.0