presets

const presets: object

Defined in: types/src/config.ts:605

Type Declaration

production

production: object

production.$schema?

optional $schema?: string

production.acDiscipline

acDiscipline: "strict"

production.boundaryEnforcement

boundaryEnforcement: "warn" | "block"

Boundary enforcement mode (Phase 155). warn (default, back-compat) — an out-of-boundary edit is only notified via anomaly-notify, never blocked. block — handlePreToolEdit refuses an out-of-boundary edit at edit time, wherever the host surfaces the touched files. Top-level (not nested under hooks, which is boolean-only gate toggles) because a settle-time counterpart is planned as a follow-on (rec-20260704-001). Overridable per-phase via DRAFT frontmatter, mirroring profile.

production.codeReview

codeReview: object

production.codeReview.model?

optional model?: string

Optional model override for the Anthropic provider.

production.codeReview.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

Code-review verifier provider selection (Phase 24.3). Fires at cadence settle run when 'code-review' is in the effective gate set. HIGH findings refuse settle unless --force / --allow-code-review-failure.

production.commitCadence

commitCadence: "task" | "draft" | "manual"

production.convergence

convergence: object

production.convergence.maxAttempts

maxAttempts: number

production.gates

gates: object

production.gates.evidenceFloor

evidenceFloor: "executed"

production.gates.sealed

sealed: string[]

production.handoff

handoff: object

Handoff retention (Phase 88, v1.20). Opt-in, count-based pruning of dated SESSION-*.md docs under .cadence/handoff/, applied at handoff-write time (not settle — settle fires per-phase and would race the lastHandoff pointer). retain: N keeps the N most-recent docs (the just-written lastHandoff is always newest, so never deleted) and hard-deletes the rest, best-effort. Omitting retain (the default empty block) disables pruning entirely — same non-destructive-by-default posture the manual dated archive relies on.

production.handoff.retain?

optional retain?: number

production.hooks

hooks: object

production.hooks.preToolUseBuildGate

preToolUseBuildGate: true = true

production.hooks.sessionStart

sessionStart: boolean

production.hooks.stopReminder

stopReminder: boolean

production.hooks.userPromptSubmit

userPromptSubmit: boolean

production.logging

logging: object

Operational diagnostic logging (Phase 80, Post-v1.0 observability). Persistent default for the structured stderr logger. Env vars override these at runtime: CADENCE_LOG_LEVEL > logging.level, and CADENCE_LOG_FORMAT > logging.format. format omitted → the logger picks pretty on a TTY, else json. Default level silent = off. Distinct from telemetry/skillAudit (user-behavior tracking).

production.logging.format?

optional format?: "pretty" | "json"

production.logging.level

level: "info" | "warn" | "error" | "silent" | "debug" | "trace"

production.loopEnforcement

loopEnforcement: "strict"

production.modelPerClass

modelPerClass: object

Model id per task class, read by classifyTaskExecution (packages/core/src/dispatch/policy.ts) to resolve the model field it attaches to each task’s dispatch plan entry.

production.modelPerClass.complex

complex: string

production.modelPerClass.drafting

drafting: string

production.modelPerClass.mechanical

mechanical: string

production.modelPerClass.standard

standard: string

production.notify

notify: object

production.notify.file?

optional file?: string

Path for the file transport. Defaults to .cadence/anomalies.log.

production.notify.transport

transport: "file" | "stderr" | "none" | "webhook"

Anomaly-event transport. stderr (default) writes one line per event; file appends NDJSON to notify.file; none drops events; webhook POSTs {events: [...]} JSON to notify.webhook.url (Phase 19.1). Only fires when 'anomaly-notify' is in the effective gate set.

production.notify.webhook?

optional webhook?: object

Webhook target for the webhook transport (Phase 19.1). Required when transport === ‘webhook’; ignored otherwise. URL is sensitive (may carry a token); never logged on failure.

production.notify.webhook.headers?

optional headers?: Record<string, string>

production.notify.webhook.timeoutMs?

optional timeoutMs?: number

production.notify.webhook.url

url: string

production.packs

packs: object

production.packs.disabled

disabled: string[]

production.packs.enabled

enabled: string[]

production.perTaskVerifier

perTaskVerifier: object

production.perTaskVerifier.model?

optional model?: string

Optional model override for the Anthropic provider.

production.perTaskVerifier.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

Per-task verifier provider selection (Phase 24.2). Fires at cadence build task <id> --status=DONE when 'per-task-verify' is in the effective gate set (strict×standard, strict×complex).

production.phaseGuard

phaseGuard: object

Phase-collision guard (Phase 83, v1.18 worktree-safety). Refuses to scaffold a phase number already claimed by a sibling git worktree or by origin/<integrationRef>, so a cross-worktree collision fails loud before wasted work instead of silently dual-merging. Observes ground truth (the worktree list + upstream tree) — no reservation registry. enabled: false disables the guard entirely; omitting the block applies the defaults.

production.phaseGuard.enabled

enabled: boolean

production.phaseGuard.integrationRef

integrationRef: string

production.planReview

planReview: object

production.planReview.model?

optional model?: string

Optional model override for the Anthropic provider.

production.planReview.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

Plan-review verifier provider selection (Phase 25.1). Fires at cadence draft approve when 'plan-review' is in the effective gate set (strict×complex). pass=false refuses approve unless --allow-plan-review-failure.

production.profile

profile: "strict" | "standard" | "auto"

User-involvement profile per DESIGN.md Section 3.1. Defaults to auto.

production.recommendations

recommendations: object

Recommendation retention (Phase 102, v1.24). autoArchive (default true) soft-archives a rec the moment it reaches a terminal state: shipped/rejected immediately on promote, and a converted rec when its phase completes SETTLE. Archival is recoverable (recommendation unarchive), so unlike handoff.retain (a hard delete, opt-in) this defaults on. Set false to keep terminal recs in the active ledger; manual recommendation archive still works either way.

autoRoute (Phase 242, default true) is the settle-time writer that turns identified code-review findings into source: 'review' recommendations instead of leaving them stranded in the SUMMARY. Routing is dedup-safe (keyed on Finding.id, never mints a duplicate) and best-effort (a routing failure never blocks settle), so — like autoArchive — it defaults on. Set false to keep settle’s ledger writes limited to the existing auto-archive hook.

production.recommendations.autoArchive

autoArchive: boolean

production.recommendations.autoRoute

autoRoute: boolean

production.redundantWorkEnforcement

redundantWorkEnforcement: "warn" | "block" | "off"

Redundant-work enforcement mode (subagent task-redundancy monitoring). off — the check never runs. warn (default) — an edit touching a file owned by an already-terminal (DONE/DONE_WITH_CONCERNS) task is only notified via anomaly-notify. block — handlePreToolEdit refuses the edit, and the SubagentStop safety net hard-blocks the subagent’s stop. A third off value exists (unlike boundaryEnforcement) because re-touching finished work is a more subjective, more commonly legitimate signal than an out-of-boundary edit. Overridable per-phase via DRAFT frontmatter, mirroring boundaryEnforcement.

production.resume

resume: object

Resume cross-worktree discovery (Phase 142/143, v1.38 cross-worktree-handoff-discovery). Configures cadence resume behavior when multiple handoff candidates exist across git worktrees. crossWorktree: false disables discovery entirely (today’s exact behavior). autoList: true means when 2+ candidates exist, the interactive picker opens automatically instead of just nudging. Omitting the block applies the defaults.

production.resume.autoList

autoList: boolean

production.resume.crossWorktree

crossWorktree: boolean

production.resume.remoteCheck

remoteCheck: boolean

Origin-freshness probe on resume (fetch + behind-count). The fetch touches remote-tracking refs only. false = never probe.

production.retro

retro: object

Post-settle retro artifact (Phase 174, rec-20260712-001). enabled (default true) is the master switch: on every successful settle, synthesize a friction digest from the SUMMARY already assembled and write <draftId>-RETRO.json/.md alongside it. offerGithubIssue (default true) is a sub-toggle — when the digest is non-empty and the run is interactive, offer to file a GitHub issue via gh. Setting enabled: false disables both the artifact and the offer; setting only offerGithubIssue: false keeps the artifact but never prompts.

production.retro.enabled

enabled: boolean

production.retro.offerGithubIssue

offerGithubIssue: boolean

production.ruleProvider

ruleProvider: string

production.schemaVersion

schemaVersion: 1

production.securityAudit

securityAudit: object

production.securityAudit.model?

optional model?: string

Optional model override for the Anthropic provider.

production.securityAudit.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

Security-audit verifier provider selection (Phase 25.2). Fires at cadence settle run (after code-review, before SUMMARY write) when 'security-audit' is in the effective gate set (strict×complex only). CRITICAL findings refuse settle unless --force / --allow-security-audit-failure.

production.skillAudit

skillAudit: object

production.skillAudit.required

required: string[]

production.specReview

specReview: object

production.specReview.model?

optional model?: string

production.specReview.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

production.subagentPolicy

subagentPolicy: object

Thresholds consumed by packages/core/src/dispatch/policy.ts’s classifyTaskExecution to decide, per task, whether execution should be dispatch or inline (batch-size, size, and context-budget signals).

production.subagentPolicy.contextBudgetThreshold

contextBudgetThreshold: number

production.subagentPolicy.largeTaskTokens

largeTaskTokens: number

production.subagentPolicy.mechanicalBatchMin

mechanicalBatchMin: number

production.telemetry

telemetry: object

production.telemetry.remoteOptIn

remoteOptIn: boolean

production.telemetry.skillInvocations

skillInvocations: boolean

production.telemetry.tokenUtilization

tokenUtilization: boolean

production.templates

templates: object

production.templates.dir

dir: string

production.templates.overrides

overrides: string[]

production.tier

tier: object

production.tier.complex

complex: object

production.tier.complex.maxTasks

maxTasks: number

production.tier.complex.minTasks

minTasks: number

production.tier.quickFix

quickFix: object

production.tier.quickFix.maxFiles

maxFiles: number

production.tier.quickFix.maxTasks

maxTasks: number

production.tier.standard

standard: object

production.tier.standard.maxFiles

maxFiles: number

production.tier.standard.maxTasks

maxTasks: number

production.uiSpecReview

uiSpecReview: object

production.uiSpecReview.model?

optional model?: string

production.uiSpecReview.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

production.verification

verification: object

production.verification.coverageMode

coverageMode: "assertion" | "mention"

How strictly an AC token must be referenced by a test (phase 108). mention (default) — any AC-N occurrence anywhere in a matched file counts (whole-file string search; unchanged historical behavior). assertion — the token must appear inside an it()/test() block that contains at least one assertion (expect( / assert / .should).

production.verification.coverageProfiles

coverageProfiles: object[]

Operator-extensible assertion-coverage profiles for languages no built-in profile claims (phase 167, T7). Add-only: an entry claiming an extension a BUILT-IN profile already owns (.ts, .py, .go, .rs, .php, …) is refused loudly at config-load time, naming the collision and suggesting a fix — overriding a built-in is not supported. Validated (regex compiles, required fields present, no collision) by packages/core/src/config/loader.ts via mergeCustomProfiles (packages/core/src/verify/coverage-profiles/ registry.ts), never silently accepted or ignored.

production.verification.coverageScheme

coverageScheme: "bare" | "phase-qualified"

Whether an AC test-coverage token must be phase-qualified (phase 239). bare (default) — the historical unqualified AC-N token, which every config predating this field keeps on upgrade. phase-qualified — the token must carry its phase-slice prefix (239-01/AC-3), making it globally unique across the repo’s history.

NOTE on where back-compat actually lives: this field-level .default('bare') is NOT the mechanism that keeps upgraders on ‘bare’. Core’s loadConfig merges the user’s config.json over defaultConfig (below) before parsing, so on that path the key is always present and this default never fires — defaultConfig holding ‘bare’ is the real back-compat contract. This default only covers direct schema parses where verification is present but the key is absent. Both this default, the object-level .default({...}) literal below, and defaultConfig must all carry ‘bare’ independently (in Zod 4 the object-level literal is returned as-is, not re-parsed through the inner field defaults).

production.verification.testCommand?

optional testCommand?: string

Shell command the build-test-must-pass gate runs at settle time (Phase 39.2). When set, settle runs it and refuses on a non-zero exit unless --allow-failing-build / --force. When absent, the gate is evaluated but cannot enforce — it passes with a one-time note.

production.verification.testGlobs

testGlobs: string[]

Glob patterns the test-coverage scanner walks. Supports ** and *. Default scans the workspace packages/**/*.test.ts(x).

production.verifier

verifier: object

production.verifier.diffCapBytes

diffCapBytes: number

Byte budget for the unified diff sent to the --deep verifier (Phase 70). Oversized diffs are truncated with an explicit marker so the verifier knows it saw a partial picture. Default 256KB.

production.verifier.localHeaders?

optional localHeaders?: Record<string, string>

Phase 72: extra HTTP headers for the local provider (e.g. an Authorization bearer for a token-gated OpenAI-compatible proxy). Merged over the base content-type. Prefer the CADENCE_LOCAL_API_KEY env var for the bearer; use this for arbitrary headers. Never logged.

production.verifier.maxRetries?

optional maxRetries?: number

Phase 72: retry budget for the anthropic provider on transient (429/5xx/network) errors. Omitted → the SDK default holds; 0 disables retries explicitly.

production.verifier.model?

optional model?: string

Optional model override for the Anthropic provider.

production.verifier.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

--deep verifier provider selection (Phase 15). mock always works offline; anthropic requires ANTHROPIC_API_KEY in env.

production.verifier.timeoutMs?

optional timeoutMs?: number

Phase 72: request timeout (ms) for the anthropic provider. Omitted → the Anthropic SDK default holds. A transient slow call in a settle gate should time out and retry, not hang.

production.workstreamBackend

workstreamBackend: string

solo

solo: object

solo.$schema?

optional $schema?: string

solo.acDiscipline

acDiscipline: "optional"

solo.boundaryEnforcement

boundaryEnforcement: "warn" | "block"

Boundary enforcement mode (Phase 155). warn (default, back-compat) — an out-of-boundary edit is only notified via anomaly-notify, never blocked. block — handlePreToolEdit refuses an out-of-boundary edit at edit time, wherever the host surfaces the touched files. Top-level (not nested under hooks, which is boolean-only gate toggles) because a settle-time counterpart is planned as a follow-on (rec-20260704-001). Overridable per-phase via DRAFT frontmatter, mirroring profile.

solo.codeReview

codeReview: object

solo.codeReview.model?

optional model?: string

Optional model override for the Anthropic provider.

solo.codeReview.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

Code-review verifier provider selection (Phase 24.3). Fires at cadence settle run when 'code-review' is in the effective gate set. HIGH findings refuse settle unless --force / --allow-code-review-failure.

solo.commitCadence

commitCadence: "manual"

solo.convergence

convergence: object

solo.convergence.maxAttempts

maxAttempts: number

solo.gates

gates: object

solo.gates.evidenceFloor

evidenceFloor: "assertion"

solo.gates.sealed

sealed: string[]

solo.handoff

handoff: object

Handoff retention (Phase 88, v1.20). Opt-in, count-based pruning of dated SESSION-*.md docs under .cadence/handoff/, applied at handoff-write time (not settle — settle fires per-phase and would race the lastHandoff pointer). retain: N keeps the N most-recent docs (the just-written lastHandoff is always newest, so never deleted) and hard-deletes the rest, best-effort. Omitting retain (the default empty block) disables pruning entirely — same non-destructive-by-default posture the manual dated archive relies on.

solo.handoff.retain?

optional retain?: number

solo.hooks

hooks: object

solo.hooks.preToolUseBuildGate

preToolUseBuildGate: boolean

solo.hooks.sessionStart

sessionStart: boolean

solo.hooks.stopReminder

stopReminder: boolean

solo.hooks.userPromptSubmit

userPromptSubmit: boolean

solo.logging

logging: object

Operational diagnostic logging (Phase 80, Post-v1.0 observability). Persistent default for the structured stderr logger. Env vars override these at runtime: CADENCE_LOG_LEVEL > logging.level, and CADENCE_LOG_FORMAT > logging.format. format omitted → the logger picks pretty on a TTY, else json. Default level silent = off. Distinct from telemetry/skillAudit (user-behavior tracking).

solo.logging.format?

optional format?: "pretty" | "json"

solo.logging.level

level: "info" | "warn" | "error" | "silent" | "debug" | "trace"

solo.loopEnforcement

loopEnforcement: "reminder"

solo.modelPerClass

modelPerClass: object

Model id per task class, read by classifyTaskExecution (packages/core/src/dispatch/policy.ts) to resolve the model field it attaches to each task’s dispatch plan entry.

solo.modelPerClass.complex

complex: string

solo.modelPerClass.drafting

drafting: string

solo.modelPerClass.mechanical

mechanical: string

solo.modelPerClass.standard

standard: string

solo.notify

notify: object

solo.notify.file?

optional file?: string

Path for the file transport. Defaults to .cadence/anomalies.log.

solo.notify.transport

transport: "file" | "stderr" | "none" | "webhook"

Anomaly-event transport. stderr (default) writes one line per event; file appends NDJSON to notify.file; none drops events; webhook POSTs {events: [...]} JSON to notify.webhook.url (Phase 19.1). Only fires when 'anomaly-notify' is in the effective gate set.

solo.notify.webhook?

optional webhook?: object

Webhook target for the webhook transport (Phase 19.1). Required when transport === ‘webhook’; ignored otherwise. URL is sensitive (may carry a token); never logged on failure.

solo.notify.webhook.headers?

optional headers?: Record<string, string>

solo.notify.webhook.timeoutMs?

optional timeoutMs?: number

solo.notify.webhook.url

url: string

solo.packs

packs: object

solo.packs.disabled

disabled: string[]

solo.packs.enabled

enabled: string[]

solo.perTaskVerifier

perTaskVerifier: object

solo.perTaskVerifier.model?

optional model?: string

Optional model override for the Anthropic provider.

solo.perTaskVerifier.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

Per-task verifier provider selection (Phase 24.2). Fires at cadence build task <id> --status=DONE when 'per-task-verify' is in the effective gate set (strict×standard, strict×complex).

solo.phaseGuard

phaseGuard: object

Phase-collision guard (Phase 83, v1.18 worktree-safety). Refuses to scaffold a phase number already claimed by a sibling git worktree or by origin/<integrationRef>, so a cross-worktree collision fails loud before wasted work instead of silently dual-merging. Observes ground truth (the worktree list + upstream tree) — no reservation registry. enabled: false disables the guard entirely; omitting the block applies the defaults.

solo.phaseGuard.enabled

enabled: boolean

solo.phaseGuard.integrationRef

integrationRef: string

solo.planReview

planReview: object

solo.planReview.model?

optional model?: string

Optional model override for the Anthropic provider.

solo.planReview.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

Plan-review verifier provider selection (Phase 25.1). Fires at cadence draft approve when 'plan-review' is in the effective gate set (strict×complex). pass=false refuses approve unless --allow-plan-review-failure.

solo.profile

profile: "strict" | "standard" | "auto"

User-involvement profile per DESIGN.md Section 3.1. Defaults to auto.

solo.recommendations

recommendations: object

Recommendation retention (Phase 102, v1.24). autoArchive (default true) soft-archives a rec the moment it reaches a terminal state: shipped/rejected immediately on promote, and a converted rec when its phase completes SETTLE. Archival is recoverable (recommendation unarchive), so unlike handoff.retain (a hard delete, opt-in) this defaults on. Set false to keep terminal recs in the active ledger; manual recommendation archive still works either way.

autoRoute (Phase 242, default true) is the settle-time writer that turns identified code-review findings into source: 'review' recommendations instead of leaving them stranded in the SUMMARY. Routing is dedup-safe (keyed on Finding.id, never mints a duplicate) and best-effort (a routing failure never blocks settle), so — like autoArchive — it defaults on. Set false to keep settle’s ledger writes limited to the existing auto-archive hook.

solo.recommendations.autoArchive

autoArchive: boolean

solo.recommendations.autoRoute

autoRoute: boolean

solo.redundantWorkEnforcement

redundantWorkEnforcement: "warn" | "block" | "off"

Redundant-work enforcement mode (subagent task-redundancy monitoring). off — the check never runs. warn (default) — an edit touching a file owned by an already-terminal (DONE/DONE_WITH_CONCERNS) task is only notified via anomaly-notify. block — handlePreToolEdit refuses the edit, and the SubagentStop safety net hard-blocks the subagent’s stop. A third off value exists (unlike boundaryEnforcement) because re-touching finished work is a more subjective, more commonly legitimate signal than an out-of-boundary edit. Overridable per-phase via DRAFT frontmatter, mirroring boundaryEnforcement.

solo.resume

resume: object

Resume cross-worktree discovery (Phase 142/143, v1.38 cross-worktree-handoff-discovery). Configures cadence resume behavior when multiple handoff candidates exist across git worktrees. crossWorktree: false disables discovery entirely (today’s exact behavior). autoList: true means when 2+ candidates exist, the interactive picker opens automatically instead of just nudging. Omitting the block applies the defaults.

solo.resume.autoList

autoList: boolean

solo.resume.crossWorktree

crossWorktree: boolean

solo.resume.remoteCheck

remoteCheck: boolean

Origin-freshness probe on resume (fetch + behind-count). The fetch touches remote-tracking refs only. false = never probe.

solo.retro

retro: object

Post-settle retro artifact (Phase 174, rec-20260712-001). enabled (default true) is the master switch: on every successful settle, synthesize a friction digest from the SUMMARY already assembled and write <draftId>-RETRO.json/.md alongside it. offerGithubIssue (default true) is a sub-toggle — when the digest is non-empty and the run is interactive, offer to file a GitHub issue via gh. Setting enabled: false disables both the artifact and the offer; setting only offerGithubIssue: false keeps the artifact but never prompts.

solo.retro.enabled

enabled: boolean

solo.retro.offerGithubIssue

offerGithubIssue: boolean

solo.ruleProvider

ruleProvider: string

solo.schemaVersion

schemaVersion: 1

solo.securityAudit

securityAudit: object

solo.securityAudit.model?

optional model?: string

Optional model override for the Anthropic provider.

solo.securityAudit.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

Security-audit verifier provider selection (Phase 25.2). Fires at cadence settle run (after code-review, before SUMMARY write) when 'security-audit' is in the effective gate set (strict×complex only). CRITICAL findings refuse settle unless --force / --allow-security-audit-failure.

solo.skillAudit

skillAudit: object

solo.skillAudit.required

required: string[]

solo.specReview

specReview: object

solo.specReview.model?

optional model?: string

solo.specReview.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

solo.subagentPolicy

subagentPolicy: object

Thresholds consumed by packages/core/src/dispatch/policy.ts’s classifyTaskExecution to decide, per task, whether execution should be dispatch or inline (batch-size, size, and context-budget signals).

solo.subagentPolicy.contextBudgetThreshold

contextBudgetThreshold: number

solo.subagentPolicy.largeTaskTokens

largeTaskTokens: number

solo.subagentPolicy.mechanicalBatchMin

mechanicalBatchMin: number

solo.telemetry

telemetry: object

solo.telemetry.remoteOptIn

remoteOptIn: boolean

solo.telemetry.skillInvocations

skillInvocations: boolean

solo.telemetry.tokenUtilization

tokenUtilization: boolean

solo.templates

templates: object

solo.templates.dir

dir: string

solo.templates.overrides

overrides: string[]

solo.tier

tier: object

solo.tier.complex

complex: object

solo.tier.complex.maxTasks

maxTasks: number

solo.tier.complex.minTasks

minTasks: number

solo.tier.quickFix

quickFix: object

solo.tier.quickFix.maxFiles

maxFiles: number

solo.tier.quickFix.maxTasks

maxTasks: number

solo.tier.standard

standard: object

solo.tier.standard.maxFiles

maxFiles: number

solo.tier.standard.maxTasks

maxTasks: number

solo.uiSpecReview

uiSpecReview: object

solo.uiSpecReview.model?

optional model?: string

solo.uiSpecReview.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

solo.verification

verification: object

solo.verification.coverageMode

coverageMode: "assertion" | "mention"

How strictly an AC token must be referenced by a test (phase 108). mention (default) — any AC-N occurrence anywhere in a matched file counts (whole-file string search; unchanged historical behavior). assertion — the token must appear inside an it()/test() block that contains at least one assertion (expect( / assert / .should).

solo.verification.coverageProfiles

coverageProfiles: object[]

Operator-extensible assertion-coverage profiles for languages no built-in profile claims (phase 167, T7). Add-only: an entry claiming an extension a BUILT-IN profile already owns (.ts, .py, .go, .rs, .php, …) is refused loudly at config-load time, naming the collision and suggesting a fix — overriding a built-in is not supported. Validated (regex compiles, required fields present, no collision) by packages/core/src/config/loader.ts via mergeCustomProfiles (packages/core/src/verify/coverage-profiles/ registry.ts), never silently accepted or ignored.

solo.verification.coverageScheme

coverageScheme: "bare" | "phase-qualified"

Whether an AC test-coverage token must be phase-qualified (phase 239). bare (default) — the historical unqualified AC-N token, which every config predating this field keeps on upgrade. phase-qualified — the token must carry its phase-slice prefix (239-01/AC-3), making it globally unique across the repo’s history.

NOTE on where back-compat actually lives: this field-level .default('bare') is NOT the mechanism that keeps upgraders on ‘bare’. Core’s loadConfig merges the user’s config.json over defaultConfig (below) before parsing, so on that path the key is always present and this default never fires — defaultConfig holding ‘bare’ is the real back-compat contract. This default only covers direct schema parses where verification is present but the key is absent. Both this default, the object-level .default({...}) literal below, and defaultConfig must all carry ‘bare’ independently (in Zod 4 the object-level literal is returned as-is, not re-parsed through the inner field defaults).

solo.verification.testCommand?

optional testCommand?: string

Shell command the build-test-must-pass gate runs at settle time (Phase 39.2). When set, settle runs it and refuses on a non-zero exit unless --allow-failing-build / --force. When absent, the gate is evaluated but cannot enforce — it passes with a one-time note.

solo.verification.testGlobs

testGlobs: string[]

Glob patterns the test-coverage scanner walks. Supports ** and *. Default scans the workspace packages/**/*.test.ts(x).

solo.verifier

verifier: object

solo.verifier.diffCapBytes

diffCapBytes: number

Byte budget for the unified diff sent to the --deep verifier (Phase 70). Oversized diffs are truncated with an explicit marker so the verifier knows it saw a partial picture. Default 256KB.

solo.verifier.localHeaders?

optional localHeaders?: Record<string, string>

Phase 72: extra HTTP headers for the local provider (e.g. an Authorization bearer for a token-gated OpenAI-compatible proxy). Merged over the base content-type. Prefer the CADENCE_LOCAL_API_KEY env var for the bearer; use this for arbitrary headers. Never logged.

solo.verifier.maxRetries?

optional maxRetries?: number

Phase 72: retry budget for the anthropic provider on transient (429/5xx/network) errors. Omitted → the SDK default holds; 0 disables retries explicitly.

solo.verifier.model?

optional model?: string

Optional model override for the Anthropic provider.

solo.verifier.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

--deep verifier provider selection (Phase 15). mock always works offline; anthropic requires ANTHROPIC_API_KEY in env.

solo.verifier.timeoutMs?

optional timeoutMs?: number

Phase 72: request timeout (ms) for the anthropic provider. Omitted → the Anthropic SDK default holds. A transient slow call in a settle gate should time out and retry, not hang.

solo.workstreamBackend

workstreamBackend: string

team

team: object

team.$schema?

optional $schema?: string

team.acDiscipline

acDiscipline: "optional" | "strict" | "tier-scaled"

team.boundaryEnforcement

boundaryEnforcement: "warn" | "block"

Boundary enforcement mode (Phase 155). warn (default, back-compat) — an out-of-boundary edit is only notified via anomaly-notify, never blocked. block — handlePreToolEdit refuses an out-of-boundary edit at edit time, wherever the host surfaces the touched files. Top-level (not nested under hooks, which is boolean-only gate toggles) because a settle-time counterpart is planned as a follow-on (rec-20260704-001). Overridable per-phase via DRAFT frontmatter, mirroring profile.

team.codeReview

codeReview: object

team.codeReview.model?

optional model?: string

Optional model override for the Anthropic provider.

team.codeReview.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

Code-review verifier provider selection (Phase 24.3). Fires at cadence settle run when 'code-review' is in the effective gate set. HIGH findings refuse settle unless --force / --allow-code-review-failure.

team.commitCadence

commitCadence: "task" | "draft" | "manual"

team.convergence

convergence: object

team.convergence.maxAttempts

maxAttempts: number

team.gates

gates: object

team.gates.evidenceFloor

evidenceFloor: "executed"

team.gates.sealed

sealed: string[]

team.handoff

handoff: object

Handoff retention (Phase 88, v1.20). Opt-in, count-based pruning of dated SESSION-*.md docs under .cadence/handoff/, applied at handoff-write time (not settle — settle fires per-phase and would race the lastHandoff pointer). retain: N keeps the N most-recent docs (the just-written lastHandoff is always newest, so never deleted) and hard-deletes the rest, best-effort. Omitting retain (the default empty block) disables pruning entirely — same non-destructive-by-default posture the manual dated archive relies on.

team.handoff.retain?

optional retain?: number

team.hooks

hooks: object

team.hooks.preToolUseBuildGate

preToolUseBuildGate: boolean

team.hooks.sessionStart

sessionStart: boolean

team.hooks.stopReminder

stopReminder: boolean

team.hooks.userPromptSubmit

userPromptSubmit: boolean

team.logging

logging: object

Operational diagnostic logging (Phase 80, Post-v1.0 observability). Persistent default for the structured stderr logger. Env vars override these at runtime: CADENCE_LOG_LEVEL > logging.level, and CADENCE_LOG_FORMAT > logging.format. format omitted → the logger picks pretty on a TTY, else json. Default level silent = off. Distinct from telemetry/skillAudit (user-behavior tracking).

team.logging.format?

optional format?: "pretty" | "json"

team.logging.level

level: "info" | "warn" | "error" | "silent" | "debug" | "trace"

team.loopEnforcement

loopEnforcement: "strict" | "soft" | "reminder"

team.modelPerClass

modelPerClass: object

Model id per task class, read by classifyTaskExecution (packages/core/src/dispatch/policy.ts) to resolve the model field it attaches to each task’s dispatch plan entry.

team.modelPerClass.complex

complex: string

team.modelPerClass.drafting

drafting: string

team.modelPerClass.mechanical

mechanical: string

team.modelPerClass.standard

standard: string

team.notify

notify: object

team.notify.file?

optional file?: string

Path for the file transport. Defaults to .cadence/anomalies.log.

team.notify.transport

transport: "file" | "stderr" | "none" | "webhook"

Anomaly-event transport. stderr (default) writes one line per event; file appends NDJSON to notify.file; none drops events; webhook POSTs {events: [...]} JSON to notify.webhook.url (Phase 19.1). Only fires when 'anomaly-notify' is in the effective gate set.

team.notify.webhook?

optional webhook?: object

Webhook target for the webhook transport (Phase 19.1). Required when transport === ‘webhook’; ignored otherwise. URL is sensitive (may carry a token); never logged on failure.

team.notify.webhook.headers?

optional headers?: Record<string, string>

team.notify.webhook.timeoutMs?

optional timeoutMs?: number

team.notify.webhook.url

url: string

team.packs

packs: object

team.packs.disabled

disabled: string[]

team.packs.enabled

enabled: string[]

team.perTaskVerifier

perTaskVerifier: object

team.perTaskVerifier.model?

optional model?: string

Optional model override for the Anthropic provider.

team.perTaskVerifier.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

Per-task verifier provider selection (Phase 24.2). Fires at cadence build task <id> --status=DONE when 'per-task-verify' is in the effective gate set (strict×standard, strict×complex).

team.phaseGuard

phaseGuard: object

Phase-collision guard (Phase 83, v1.18 worktree-safety). Refuses to scaffold a phase number already claimed by a sibling git worktree or by origin/<integrationRef>, so a cross-worktree collision fails loud before wasted work instead of silently dual-merging. Observes ground truth (the worktree list + upstream tree) — no reservation registry. enabled: false disables the guard entirely; omitting the block applies the defaults.

team.phaseGuard.enabled

enabled: boolean

team.phaseGuard.integrationRef

integrationRef: string

team.planReview

planReview: object

team.planReview.model?

optional model?: string

Optional model override for the Anthropic provider.

team.planReview.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

Plan-review verifier provider selection (Phase 25.1). Fires at cadence draft approve when 'plan-review' is in the effective gate set (strict×complex). pass=false refuses approve unless --allow-plan-review-failure.

team.profile

profile: "strict" | "standard" | "auto"

User-involvement profile per DESIGN.md Section 3.1. Defaults to auto.

team.recommendations

recommendations: object

Recommendation retention (Phase 102, v1.24). autoArchive (default true) soft-archives a rec the moment it reaches a terminal state: shipped/rejected immediately on promote, and a converted rec when its phase completes SETTLE. Archival is recoverable (recommendation unarchive), so unlike handoff.retain (a hard delete, opt-in) this defaults on. Set false to keep terminal recs in the active ledger; manual recommendation archive still works either way.

autoRoute (Phase 242, default true) is the settle-time writer that turns identified code-review findings into source: 'review' recommendations instead of leaving them stranded in the SUMMARY. Routing is dedup-safe (keyed on Finding.id, never mints a duplicate) and best-effort (a routing failure never blocks settle), so — like autoArchive — it defaults on. Set false to keep settle’s ledger writes limited to the existing auto-archive hook.

team.recommendations.autoArchive

autoArchive: boolean

team.recommendations.autoRoute

autoRoute: boolean

team.redundantWorkEnforcement

redundantWorkEnforcement: "warn" | "block" | "off"

Redundant-work enforcement mode (subagent task-redundancy monitoring). off — the check never runs. warn (default) — an edit touching a file owned by an already-terminal (DONE/DONE_WITH_CONCERNS) task is only notified via anomaly-notify. block — handlePreToolEdit refuses the edit, and the SubagentStop safety net hard-blocks the subagent’s stop. A third off value exists (unlike boundaryEnforcement) because re-touching finished work is a more subjective, more commonly legitimate signal than an out-of-boundary edit. Overridable per-phase via DRAFT frontmatter, mirroring boundaryEnforcement.

team.resume

resume: object

Resume cross-worktree discovery (Phase 142/143, v1.38 cross-worktree-handoff-discovery). Configures cadence resume behavior when multiple handoff candidates exist across git worktrees. crossWorktree: false disables discovery entirely (today’s exact behavior). autoList: true means when 2+ candidates exist, the interactive picker opens automatically instead of just nudging. Omitting the block applies the defaults.

team.resume.autoList

autoList: boolean

team.resume.crossWorktree

crossWorktree: boolean

team.resume.remoteCheck

remoteCheck: boolean

Origin-freshness probe on resume (fetch + behind-count). The fetch touches remote-tracking refs only. false = never probe.

team.retro

retro: object

Post-settle retro artifact (Phase 174, rec-20260712-001). enabled (default true) is the master switch: on every successful settle, synthesize a friction digest from the SUMMARY already assembled and write <draftId>-RETRO.json/.md alongside it. offerGithubIssue (default true) is a sub-toggle — when the digest is non-empty and the run is interactive, offer to file a GitHub issue via gh. Setting enabled: false disables both the artifact and the offer; setting only offerGithubIssue: false keeps the artifact but never prompts.

team.retro.enabled

enabled: boolean

team.retro.offerGithubIssue

offerGithubIssue: boolean

team.ruleProvider

ruleProvider: string

team.schemaVersion

schemaVersion: 1

team.securityAudit

securityAudit: object

team.securityAudit.model?

optional model?: string

Optional model override for the Anthropic provider.

team.securityAudit.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

Security-audit verifier provider selection (Phase 25.2). Fires at cadence settle run (after code-review, before SUMMARY write) when 'security-audit' is in the effective gate set (strict×complex only). CRITICAL findings refuse settle unless --force / --allow-security-audit-failure.

team.skillAudit

skillAudit: object

team.skillAudit.required

required: string[]

team.specReview

specReview: object

team.specReview.model?

optional model?: string

team.specReview.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

team.subagentPolicy

subagentPolicy: object

Thresholds consumed by packages/core/src/dispatch/policy.ts’s classifyTaskExecution to decide, per task, whether execution should be dispatch or inline (batch-size, size, and context-budget signals).

team.subagentPolicy.contextBudgetThreshold

contextBudgetThreshold: number

team.subagentPolicy.largeTaskTokens

largeTaskTokens: number

team.subagentPolicy.mechanicalBatchMin

mechanicalBatchMin: number

team.telemetry

telemetry: object

team.telemetry.remoteOptIn

remoteOptIn: boolean

team.telemetry.skillInvocations

skillInvocations: boolean

team.telemetry.tokenUtilization

tokenUtilization: boolean

team.templates

templates: object

team.templates.dir

dir: string

team.templates.overrides

overrides: string[]

team.tier

tier: object

team.tier.complex

complex: object

team.tier.complex.maxTasks

maxTasks: number

team.tier.complex.minTasks

minTasks: number

team.tier.quickFix

quickFix: object

team.tier.quickFix.maxFiles

maxFiles: number

team.tier.quickFix.maxTasks

maxTasks: number

team.tier.standard

standard: object

team.tier.standard.maxFiles

maxFiles: number

team.tier.standard.maxTasks

maxTasks: number

team.uiSpecReview

uiSpecReview: object

team.uiSpecReview.model?

optional model?: string

team.uiSpecReview.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

team.verification

verification: object

team.verification.coverageMode

coverageMode: "assertion" | "mention"

How strictly an AC token must be referenced by a test (phase 108). mention (default) — any AC-N occurrence anywhere in a matched file counts (whole-file string search; unchanged historical behavior). assertion — the token must appear inside an it()/test() block that contains at least one assertion (expect( / assert / .should).

team.verification.coverageProfiles

coverageProfiles: object[]

Operator-extensible assertion-coverage profiles for languages no built-in profile claims (phase 167, T7). Add-only: an entry claiming an extension a BUILT-IN profile already owns (.ts, .py, .go, .rs, .php, …) is refused loudly at config-load time, naming the collision and suggesting a fix — overriding a built-in is not supported. Validated (regex compiles, required fields present, no collision) by packages/core/src/config/loader.ts via mergeCustomProfiles (packages/core/src/verify/coverage-profiles/ registry.ts), never silently accepted or ignored.

team.verification.coverageScheme

coverageScheme: "bare" | "phase-qualified"

Whether an AC test-coverage token must be phase-qualified (phase 239). bare (default) — the historical unqualified AC-N token, which every config predating this field keeps on upgrade. phase-qualified — the token must carry its phase-slice prefix (239-01/AC-3), making it globally unique across the repo’s history.

NOTE on where back-compat actually lives: this field-level .default('bare') is NOT the mechanism that keeps upgraders on ‘bare’. Core’s loadConfig merges the user’s config.json over defaultConfig (below) before parsing, so on that path the key is always present and this default never fires — defaultConfig holding ‘bare’ is the real back-compat contract. This default only covers direct schema parses where verification is present but the key is absent. Both this default, the object-level .default({...}) literal below, and defaultConfig must all carry ‘bare’ independently (in Zod 4 the object-level literal is returned as-is, not re-parsed through the inner field defaults).

team.verification.testCommand?

optional testCommand?: string

Shell command the build-test-must-pass gate runs at settle time (Phase 39.2). When set, settle runs it and refuses on a non-zero exit unless --allow-failing-build / --force. When absent, the gate is evaluated but cannot enforce — it passes with a one-time note.

team.verification.testGlobs

testGlobs: string[]

Glob patterns the test-coverage scanner walks. Supports ** and *. Default scans the workspace packages/**/*.test.ts(x).

team.verifier

verifier: object

team.verifier.diffCapBytes

diffCapBytes: number

Byte budget for the unified diff sent to the --deep verifier (Phase 70). Oversized diffs are truncated with an explicit marker so the verifier knows it saw a partial picture. Default 256KB.

team.verifier.localHeaders?

optional localHeaders?: Record<string, string>

Phase 72: extra HTTP headers for the local provider (e.g. an Authorization bearer for a token-gated OpenAI-compatible proxy). Merged over the base content-type. Prefer the CADENCE_LOCAL_API_KEY env var for the bearer; use this for arbitrary headers. Never logged.

team.verifier.maxRetries?

optional maxRetries?: number

Phase 72: retry budget for the anthropic provider on transient (429/5xx/network) errors. Omitted → the SDK default holds; 0 disables retries explicitly.

team.verifier.model?

optional model?: string

Optional model override for the Anthropic provider.

team.verifier.provider

provider: "local" | "mock" | "anthropic" | "host-cli"

--deep verifier provider selection (Phase 15). mock always works offline; anthropic requires ANTHROPIC_API_KEY in env.

team.verifier.timeoutMs?

optional timeoutMs?: number

Phase 72: request timeout (ms) for the anthropic provider. Omitted → the Anthropic SDK default holds. A transient slow call in a settle gate should time out and retry, not hang.

team.workstreamBackend

workstreamBackend: string