Module migration

Structs§

GenerateOptions: Options for generate.
MigrateReport: Result of an on-disk migration. Returned by migrate_file_in_place when migration ran (vs. Ok(None) when input was already current).
ResilientLoad: Result of a resilient (never-failing) config load.

CURRENT_SCHEMA_VERSION: The schema version this binary writes and expects on disk.
SECURITY_CRITICAL_KEYS: Top-level keys whose silent loss could weaken security posture: dropping a malformed one to its Default may grant a broader posture than intended. Salvage still drops them (so the daemon boots) but logs ERROR and reports them in ResilientLoad::dropped_security for exposure gating.
V1_LEGACY_KEYS
WHOLE_CONFIG_SENTINEL

detect_version
encrypt_secret_strings
ensure_disk_at_current_version
generate
migrate_file
migrate_file_in_place
migrate_to_current: Versioned TOML → validated V3 Config, strict: any defect errors. Used by repair tooling (zeroclaw config migrate, model_routing_config) that needs the precise failure. Daemon load uses the resilient path.
migrate_to_current_resilient: Daemon load path: versioned TOML → usable Config, never failing. Thin wrapper over migrate_to_current_salvaged that drops the report.
migrate_to_current_salvaged