{
  "_comment": "SystemWeaverMCP example configuration (4.0.0, ToolLayer on SystemWeaver API 1.55). Operational settings only: the broker connection is provisioned with SystemWeaverMCP.CredentialTool or SYSTEMWEAVER_SystemWeaver__* environment variables. Tool visibility AND callability are gated per capability axis via ToolAxes below (fail-closed: a disabled axis is hidden from tools/list and refused on call). The tools on each axis are listed in docs/tools.md.",
  "SystemWeaver": {
    "_comment": "Connection identity is NOT configured here — ServerHost/ServerPort/AuthenticationMethod/LoginName/Password/Domain/ServerNetworkId are provisioned via the companion GUI tool into the DPAPI-protected store (%APPDATA%/SystemWeaverMCP/credentials.dat) and read from there. For DEBUGGING, any of these can be overridden per field with a SYSTEMWEAVER_ environment variable (e.g. SYSTEMWEAVER_SystemWeaver__ServerHost), which takes precedence over the store for that field. Only the operational options below (proxy, timeouts, target library) are normally pinned in this file.",
    "UseProxy": false,
    "ProxyHost": null,
    "ProxyPort": 0,
    "ProxyLoginName": null,
    "ProxyType": "None",
    "ConnectionTimeoutSeconds": 30,
    "BrokerOperationTimeoutSeconds": 120,
    "TargetLibrary": null
  },
  "ToolAxes": {
    "_comment": "Per-capability-axis enablement. A disabled axis is hidden from tools/list and refused on call (fail-closed). Defaults when omitted: all read axes on; every write axis off. Enable a write axis explicitly to allow that mutation surface. VersionWrite contains the irreversible release transition — keep it off unless required.",
    "Navigate": { "Enabled": true },
    "Read": { "Enabled": true },
    "Describe": { "Enabled": true },
    "ItemWrite": { "Enabled": false },
    "ConfigRead": { "Enabled": true },
    "AppConfigWrite": { "Enabled": false },
    "ConfigItemWrite": { "Enabled": false },
    "IssueRead": { "Enabled": true },
    "IssueWrite": { "Enabled": false },
    "VersionRead": { "Enabled": true },
    "VersionWrite": { "Enabled": false }
  },
  "BulkLimits": {
    "_comment": "Per-call batch caps, default 100 each: MaxItemsPerCall (sw_create_items), MaxPartsPerCall (sw_create_parts), MaxUpdatesPerCall (sw_update_items and sw_set_part_attributes), MaxDeletesPerCall (sw_delete_items), MaxDeletePartsPerCall (sw_delete_parts). Omitted caps keep their default.",
    "MaxItemsPerCall": 100,
    "MaxPartsPerCall": 100
  },
  "ReadSurfaceLimits": {
    "_comment": "Ceilings on what a read or navigate RESPONSE may carry. These are the only outbound bounds in the layer — Transport.MaxMessageBytes bounds inbound messages only. They live together because they answer one question: how much a response may cost the caller that has to hold it. Raise them on a large-context model, lower them on a constrained one. MaxWalkNodes: exceeding it REFUSES the walk and reports the true count — it never truncates; ask sw_walk for summary=true instead. Default 500, matching the cap sw_find already applies. MaxDescriptionChars / MaxAttributeValueChars are DEFAULTS only: a caller may override per call, or ask for the value whole with description_full / attribute_values_full / value_full. MaxIssueFindResults: the default sw_issue_find result cap, overridden per call by limit; a cut result reports truncated. MaxContentReadHandles: how many handles one sw_read may name; a call naming more is REFUSED whole and nothing is read. Default 50; must be positive.",
    "MaxWalkNodes": 500,
    "MaxDescriptionChars": 2000,
    "MaxAttributeValueChars": 1000,
    "MaxIssueFindResults": 1000,
    "MaxContentReadHandles": 50
  },
  "Help": {
    "_comment": "Offline Help plugin (sw_help_search / sw_help_read) over the bundled per-release corpus (help.db) + gte-small ONNX model, shipped In-Package and copied beside the server. Tools run on the Read axis (so they also honour ToolAxes:Read). Enabled by default. Set Enabled=false to hide sw_help_*. CorpusDirectory optionally overrides where help.db + gte-small.onnx are loaded from (default: beside the server assembly).",
    "Enabled": true,
    "CorpusDirectory": null
  },
  "Transport": {
    "_comment": "Stdio transport limits. MaxMessageBytes bounds a single inbound newline-delimited JSON-RPC message (≈ bytes for ASCII/JSON); an oversized message is rejected with a JSON-RPC error and the loop keeps serving. Defaults to 1048576 (1 MiB).",
    "MaxMessageBytes": 1048576
  },
  "Logging": {
    "_comment": "This section GOVERNS the level: set it here, or through SYSTEMWEAVER_Logging__LogLevel__Default, and the server emits accordingly.",
    "LogLevel": {
      "Default": "Information",
      "SystemWeaverMCP": "Debug"
    },
    "File": {
      "_comment": "Log records go to a FILE and nowhere else -- never to stdout, which carries the JSON-RPC protocol and would be corrupted by a stray line, and no longer to stderr, which the host that launches this server discards. Leave Path empty for the default, %APPDATA%\\SystemWeaverMCP\\logs\\mcp.log, beside the credential store. Set Path to write elsewhere. Either way the server inserts -yyyyMMdd before the extension, so files roll daily. RetentionDays is how many days of those files are kept: older ones are deleted at startup and when the day rolls, judged by the date in the file name, and no other file in the folder is touched. 14 by default; 0 keeps every file.",
      "Path": "",
      "RetentionDays": 14
    }
  }
}