feat(code): add config command and canonical config manifest

[Mason Daugherty (mdrxy)]

The deepagents-code config surface was spread across ~50 DEEPAGENTS_CODE_* env vars, CLI flags, and config.toml sections with no single place that enumerated it or let a user see what was actually in effect — and the [interpreter] defaults were duplicated between the Settings dataclass and a bespoke TOML reader. This adds a config command for introspection and makes config_manifest the canonical source for every scalar option, so defaults and coercion live in exactly one place.

Changes

• Add a dcode config command group in config_commands.py — show (effective value + resolution source per option), list, get <key>, and path, all with --json. Credentials are reported as set/not-set only; their values are never printed.
• Introduce config_manifest.py as the single source of truth: ConfigOption entries describe each option's kind, typed default, env var, and config.toml location, with provider credentials generated from PROVIDER_API_KEY_ENV so a new provider can't miss the surface.
• Add resolve_scalar, one resolution engine shared by the runtime and the CLI (precedence: prefixed env > canonical env > config.toml > typed default). An empty env value is treated as unset to match resolve_env_var, and malformed numeric/list/PTC or wrong-typed TOML values are logged and fall back rather than raising.
• Derive the Settings interpreter field defaults from manifest constants and resolve the [interpreter] section through resolve_interpreter_kwargs, deleting _resolve_interpreter_kwargs and _read_config_toml_interpreter (~120 lines). Credentials, shell allow-list, and LangSmith project keep their dedicated loaders; [models.providers.*], [themes.*], and other user-defined tables stay as typed loaders the manifest references by section.
• Wire config into the argparse dispatch and the _HELP_SPECS fast-path table (show_config_help), keeping config_manifest import-light so a bare config/help invocation never pulls model_config onto the startup path.

Testing

• Drift tests assert every DEEPAGENTS_CODE_* env var and every provider credential has a manifest entry, and that each option's settings_field names a real Settings attribute — the manifest can't silently drop or mistype an option.
• Cover the resolver's per-kind coercion, log-and-fallback parity with the deleted reader, the empty-prefixed-env suppression (introspection matching resolve_env_var), and config show JSON redaction across all secret options. Extend the fast-path import test to prove bare config loads no heavy modules.

[open-swe]

Open SWE Review found 1 potential issue.

View Open SWE trace