New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details
Socket
Book a DemoSign in
Socket

@codelia/config

Package Overview
Dependencies
Maintainers
1
Versions
52
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@codelia/config

Config schema + registry (no I/O).

npmnpm
Version
0.1.58
Version published
Weekly downloads
273
-49.82%
Maintainers
1
Weekly downloads
 
Created
Source

@codelia/config

Config schema + registry (no I/O).

This package does not read files or environment variables. It only provides:

  • Config types
  • A registry for defaults
  • Merge/resolve of loaded config layers

File I/O lives in @codelia/config-loader.

Minimal config.json

{
  "version": 1,
  "model": {
    "provider": "openai",
    "name": "gpt-5.2-codex",
    "reasoning": "medium",
    "verbosity": "medium"
  },
  "permissions": {
    "allow": [
      { "tool": "read" },
      { "tool": "skill_load", "skill_name": "repo-review" }
    ],
    "deny": [{ "tool": "bash", "command": "rm" }]
  }
}

How it is used (runtime/CLI)

  • Modules register defaults into the shared registry.
  • CLI/runtime loads the config file.
  • CLI/runtime merges defaults + config and uses the effective values.
import { configRegistry } from "@codelia/config";
import { loadConfig } from "@codelia/config-loader";

// defaults are registered by modules (e.g. @codelia/core on import)
const config = await loadConfig("/path/to/config.json");
const effective = configRegistry.resolve([config]);

Where config.json is loaded

Current behavior (runtime/CLI integration path):

  • Global config + project config are both supported.
  • Global config path is resolved in runtime/CLI.
  • CODELIA_CONFIG_PATH overrides the global config file location.
  • Project config is loaded from .codelia/config.json under the working directory.
  • Effective config is resolved by merging defaults + global + project (project wins on conflicts).

See dev-docs/specs/storage-layout.md for the default global path (home/XDG).

FAQs

Package last updated on 15 Mar 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts