@kyo-so/cli 0.7.1 → 0.8.0

package/.agents/skills/kyoso-review/SKILL.md

@@ -29,10 +29,19 @@ Do not use this skill for every coding task. It is intended for deliberate revie
    - selected files
    - unified diff if available
    - constraints
-4. Call the appropriate Kyoso MCP tool:
-   - `plan_review`
-   - `security_review`
-   - `diff_review`
+4. Run the review through the first available path:
+   - Prefer the corresponding Kyoso MCP tool when it is available:
+     - `plan_review`
+     - `security_review`
+     - `diff_review`
+   - If the MCP tools are unavailable, use the CLI fallback with JSON output:
+     - `plan_review` -> `npx -y @kyo-so/cli plan --goal <text> [--plan <path-or-text>] [--file <path>] --json`
+     - `security_review` -> `npx -y @kyo-so/cli security --goal <text> [--diff <path>] [--file <path>] --json`
+     - `diff_review` -> `npx -y @kyo-so/cli diff --base <ref> --head <ref> --json`
+   - `bunx @kyo-so/cli` may be used instead of `npx -y @kyo-so/cli`.
+   - The CLI also accepts `--repo-summary`, repeatable `--constraint`, and repeatable `--file` flags. For a large review, adjust an agent timeout with `--set agents.<agent>.timeoutMs=<ms>`.
+   - Run the CLI without a config trust flag first. Inspect `audit.warnings` in the JSON result; if it contains `untrusted config was not executed`, or the command fails with an untrusted-config message, ask the user whether to rerun with `--trust-config` to use it or `--ignore-config` to skip it. Never add `--trust-config` without confirmation.
+   - Keep `--json` enabled and interpret the returned `decision` exactly like the MCP result.
 5. Treat `decision: block` as a stop signal. Present the result to the user before implementing.
 6. Treat `decision: approve_with_changes` as requiring changes to the plan or implementation.
 7. Do not claim Kyoso modified files. Kyoso only reviews.

package/CHANGELOG.md

@@ -7,6 +7,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.8.0] - 2026-07-10
+
+### Added
+
+- Repeatable `--set <config-key>=<value>` option on the `plan`, `security`,
+  and `diff` commands for overriding config values such as
+  `agents.<agent>.model`, `agents.<agent>.effort`, and `timeoutMs` from the
+  command line. Overrides are restricted to the shared project-scope
+  allowlist, applied after config files (including with `--ignore-config`),
+  and schema-validated.
+- CLI fallback in the bundled `kyoso-review` skill: when the Kyoso MCP
+  server is not registered, the skill falls back to
+  `npx`/`bunx @kyo-so/cli plan|security|diff --json`. The fallback runs
+  without config trust flags first and requires user confirmation before
+  `--trust-config` or `--ignore-config`. Documented in all README languages.
+
 ## [0.7.1] - 2026-07-09
 
 ### Changed

package/README.ja.md

@@ -136,7 +136,7 @@ Nix dev shell は Node.js 24 と nixpkgs が提供する Bun version を固定
 ```bash
 kyoso plan --goal "Review this OAuth callback plan" --plan plan.md
 kyoso security --goal "Review this auth diff" --diff changes.patch
-kyoso diff --base main --head HEAD
+kyoso diff --base main --head HEAD --set agents.claude.effort=high
 kyoso doctor
 kyoso init
 kyoso setup codex
@@ -203,6 +203,8 @@ MCP stdout は protocol messages 専用です。logs は stderr または local
 
 同梱の `kyoso-review` skill は意図的に狭い用途にしています。Kyoso、multi-agent review、plan review、security review、CISA Secure by Design review、diff review を明示的に依頼したときだけ trigger されるべきです。
 
+skill は、利用可能な場合は Kyoso MCP tools を優先します。MCP server が未登録の場合は、記載された CLI fallback に従い、`npx -y @kyo-so/cli` または `bunx @kyo-so/cli` から JSON output を取得します。
+
 `npx @kyo-so/cli setup codex --write` と `bunx @kyo-so/cli setup codex --write` は、既定で `.agents/skills/kyoso-review/` にコピーします。`--global` を追加すると `~/.agents/skills/kyoso-review/` にコピーします。
 
 `npx @kyo-so/cli setup claude-code --write` と `bunx @kyo-so/cli setup claude-code --write` は、既定で `.claude/skills/kyoso-review/` にコピーします。`--global` を追加すると `~/.claude/skills/kyoso-review/` にコピーします。
@@ -281,7 +283,15 @@ Kyoso は次の順に config を load します。
 - built-in defaults
 - user global TOML: `$XDG_CONFIG_HOME/kyoso/config.toml`、または `~/.config/kyoso/config.toml`
 - project TOML: `<cwd>/kyoso.toml`
-- `--network` などの CLI flags
+- `--network` などの CLI flags と `--set agents.claude.effort=high` などの反復可能な overrides
+
+`plan`、`security`、`diff` は、反復可能な `--set <key>=<value>` overrides を受け付けます。CLI で指定した値は config files より優先され、`--ignore-config` との併用も可能です。
+
+- Agent keys: `agents.<codex|claude>.<enabled|model|effort|role|timeoutMs>`
+- Verification keys: `verification.<enabled|maxFindings|timeoutMs>`
+- Judge keys: `judge.<mode|provider|timeoutMs>`
+
+未知の key は拒否されます。boolean / numeric config keys は schema の型へ変換し、string keys は文字列のまま保持した後、config 全体を再検証します。
 
 Project `kyoso.toml` は declarative で、trust approval は不要です。tools toggles、agent `enabled` / `model` / `effort` / `role` / `timeoutMs`、workspace byte limits と additive `workspace.deny`、verification settings、advisory judge settings、tightening-only security/network settings を設定できます。
 

package/README.md

@@ -137,7 +137,7 @@ Known distribution risk: `@modelcontextprotocol/server` has no stable release ye
 ```bash
 kyoso plan --goal "Review this OAuth callback plan" --plan plan.md
 kyoso security --goal "Review this auth diff" --diff changes.patch
-kyoso diff --base main --head HEAD
+kyoso diff --base main --head HEAD --set agents.claude.effort=high
 kyoso doctor
 kyoso init
 kyoso setup codex
@@ -204,6 +204,8 @@ MCP stdout is reserved for protocol messages. Logs go to stderr or local audit t
 
 The bundled `kyoso-review` skill is intentionally narrow. It should trigger only when you explicitly ask for Kyoso, multi-agent review, plan review, security review, CISA Secure by Design review, or diff review.
 
+The skill prefers the Kyoso MCP tools when available. If the MCP server is not registered, it follows its documented CLI fallback and requests JSON output from `npx -y @kyo-so/cli` or `bunx @kyo-so/cli`.
+
 `npx @kyo-so/cli setup codex --write` and `bunx @kyo-so/cli setup codex --write` copy it to `.agents/skills/kyoso-review/` by default. Add `--global` to copy it to `~/.agents/skills/kyoso-review/`.
 
 `npx @kyo-so/cli setup claude-code --write` and `bunx @kyo-so/cli setup claude-code --write` copy it to `.claude/skills/kyoso-review/` by default. Add `--global` to copy it to `~/.claude/skills/kyoso-review/`.
@@ -282,7 +284,15 @@ Kyoso loads config in this order:
 - built-in defaults
 - user global TOML: `$XDG_CONFIG_HOME/kyoso/config.toml`, or `~/.config/kyoso/config.toml`
 - project TOML: `<cwd>/kyoso.toml`
-- CLI flags such as `--network`
+- CLI flags such as `--network` and repeatable overrides such as `--set agents.claude.effort=high`
+
+`plan`, `security`, and `diff` accept repeatable `--set <key>=<value>` overrides. Values set on the CLI take precedence over config files, including when `--ignore-config` is used.
+
+- Agent keys: `agents.<codex|claude>.<enabled|model|effort|role|timeoutMs>`
+- Verification keys: `verification.<enabled|maxFindings|timeoutMs>`
+- Judge keys: `judge.<mode|provider|timeoutMs>`
+
+Unknown keys are rejected. Boolean and numeric config keys are converted to their schema types; string keys remain strings. The complete config is then validated.
 
 Project `kyoso.toml` is declarative and does not require trust approval. It can set safe project-scoped keys such as tool toggles, agent `enabled` / `model` / `effort` / `role` / `timeoutMs`, workspace byte limits and additive `workspace.deny`, verification settings, advisory judge settings, and tightening-only security/network settings.
 

package/README.zh-CN.md

@@ -136,7 +136,7 @@ Nix dev shell 会 pin Node.js 24 和 nixpkgs 提供的 Bun version。确认 `.en
 ```bash
 kyoso plan --goal "Review this OAuth callback plan" --plan plan.md
 kyoso security --goal "Review this auth diff" --diff changes.patch
-kyoso diff --base main --head HEAD
+kyoso diff --base main --head HEAD --set agents.claude.effort=high
 kyoso doctor
 kyoso init
 kyoso setup codex
@@ -203,6 +203,8 @@ MCP stdout 专用于 protocol messages。Logs 会写到 stderr 或 local audit t
 
 内置的 `kyoso-review` skill 有意保持范围很窄。只有当你明确请求 Kyoso、multi-agent review、plan review、security review、CISA Secure by Design review 或 diff review 时，才应触发它。
 
+当 Kyoso MCP tools 可用时，skill 会优先使用它们。如果尚未注册 MCP server，skill 会按照文档中的 CLI fallback，通过 `npx -y @kyo-so/cli` 或 `bunx @kyo-so/cli` 获取 JSON output。
+
 `npx @kyo-so/cli setup codex --write` 和 `bunx @kyo-so/cli setup codex --write` 默认将其复制到 `.agents/skills/kyoso-review/`。添加 `--global` 会复制到 `~/.agents/skills/kyoso-review/`。
 
 `npx @kyo-so/cli setup claude-code --write` 和 `bunx @kyo-so/cli setup claude-code --write` 默认将其复制到 `.claude/skills/kyoso-review/`。添加 `--global` 会复制到 `~/.claude/skills/kyoso-review/`。
@@ -281,7 +283,15 @@ Kyoso 按以下顺序 load config：
 - built-in defaults
 - user global TOML: `$XDG_CONFIG_HOME/kyoso/config.toml`，或 `~/.config/kyoso/config.toml`
 - project TOML: `<cwd>/kyoso.toml`
-- `--network` 等 CLI flags
+- `--network` 等 CLI flags，以及 `--set agents.claude.effort=high` 等可重复的 overrides
+
+`plan`、`security` 和 `diff` 接受可重复的 `--set <key>=<value>` overrides。CLI 指定的值优先于 config files，也可以与 `--ignore-config` 一起使用。
+
+- Agent keys: `agents.<codex|claude>.<enabled|model|effort|role|timeoutMs>`
+- Verification keys: `verification.<enabled|maxFindings|timeoutMs>`
+- Judge keys: `judge.<mode|provider|timeoutMs>`
+
+未知 key 会被拒绝。Boolean / numeric config keys 会转换为 schema 类型，string keys 保持字符串，然后重新验证完整 config。
 
 Project `kyoso.toml` 是 declarative config，不需要 trust approval。它可以设置 tools toggles、agent `enabled` / `model` / `effort` / `role` / `timeoutMs`、workspace byte limits 和 additive `workspace.deny`、verification settings、advisory judge settings，以及 tightening-only security/network settings。
 

package/dist/bin/kyoso.js

@@ -169739,6 +169739,28 @@ var defaultConfig = {
 
 // src/config/projectScope.ts
 var PROJECT_GLOBAL_ONLY_MESSAGE = "Move global-only settings to the user global config:";
+var kyosoConfigOverridePaths = [
+  "agents.codex.enabled",
+  "agents.codex.model",
+  "agents.codex.effort",
+  "agents.codex.role",
+  "agents.codex.timeoutMs",
+  "agents.claude.enabled",
+  "agents.claude.model",
+  "agents.claude.effort",
+  "agents.claude.role",
+  "agents.claude.timeoutMs",
+  "verification.enabled",
+  "verification.maxFindings",
+  "verification.timeoutMs",
+  "judge.mode",
+  "judge.provider",
+  "judge.timeoutMs"
+];
+var CONFIG_OVERRIDE_PATHS = new Set(kyosoConfigOverridePaths);
+function isAllowedConfigOverridePath(path) {
+  return CONFIG_OVERRIDE_PATHS.has(path.join("."));
+}
 function mergeProjectTomlConfig(baseConfig, projectConfig, options) {
   const violations = collectProjectScopeViolations(projectConfig);
   if (violations.length > 0) {
@@ -169771,13 +169793,9 @@ function collectProjectScopeViolations(config) {
 }
 function isAllowedProjectPath(path) {
   const [top, second, third, fourth] = path;
-  if (top === "tools" && path.length === 2 && ["planReview", "securityReview", "diffReview"].includes(second ?? "")) {
+  if (isAllowedConfigOverridePath(path))
     return true;
-  }
-  if (top === "agents" && path.length === 3 && ["codex", "claude"].includes(second ?? "") && ["enabled", "model", "effort", "role", "timeoutMs"].includes(third ?? "")) {
-    return true;
-  }
-  if (top === "verification" && path.length === 2 && ["enabled", "maxFindings", "timeoutMs"].includes(second ?? "")) {
+  if (top === "tools" && path.length === 2 && ["planReview", "securityReview", "diffReview"].includes(second ?? "")) {
     return true;
   }
   if (top === "workspace" && path.length === 2 && ["maxContextBytes", "maxDiffBytes", "deny"].includes(second ?? "")) {
@@ -169789,9 +169807,6 @@ function isAllowedProjectPath(path) {
   if (top === "secrets" && path.length === 2 && ["blockOnDetectedSecret", "allowOverride"].includes(second ?? "")) {
     return true;
   }
-  if (top === "judge" && path.length === 2 && ["mode", "provider", "timeoutMs"].includes(second ?? "")) {
-    return true;
-  }
   if (top === "securityReview" && second === "cisaSecureByDesign" && path.length >= 3) {
     if (third === "dimensions") {
       return path.length === 4 && [
@@ -184349,7 +184364,7 @@ var REDACTION = "[KYOSO_REDACTED]";
 var DEFAULT_AGENT_TIMEOUT_MS = 120000;
 var RAW_OUTPUT_MAX_CHARS = 16384;
 var KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
-var KYOSO_VERSION = "0.7.1";
+var KYOSO_VERSION = "0.8.0";
 
 // src/security/sanitizeText.ts
 var SENSITIVE_TEXT_PATTERNS = [
@@ -199812,6 +199827,90 @@ var StdioServerTransport = class {
 // src/core/runReview.ts
 import { resolve as resolve6 } from "node:path";
 
+// src/config/configOverrides.ts
+var NUMBER_VALUE = /^[+-]?(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?$/i;
+function applyConfigOverrides(config2, assignments) {
+  if (assignments.length === 0)
+    return config2;
+  const overrides = assignments.map(parseConfigOverride);
+  const baseConfig = config2;
+  const overridden = structuredClone(config2);
+  for (const override of overrides) {
+    writePath2(overridden, override.path, parseConfigOverrideValue(override.value, readPath2(baseConfig, override.path)));
+  }
+  const parsed = kyosoConfigSchema.safeParse(overridden);
+  if (parsed.success)
+    return parsed.data;
+  const issue2 = parsed.error.issues[0];
+  const issuePath = issue2?.path.map(String).join(".") ?? "config";
+  const assignment = findAssignmentForPath(overrides, issuePath) ?? assignments.at(-1) ?? "";
+  throw new Error(`Invalid --set value ${JSON.stringify(assignment)}: ${issuePath}: ${issue2?.message ?? "config validation failed"}.`);
+}
+function findAssignmentForPath(overrides, path) {
+  for (let index = overrides.length - 1;index >= 0; index -= 1) {
+    const override = overrides[index];
+    if (override?.path.join(".") === path)
+      return override.assignment;
+  }
+  return;
+}
+function parseConfigOverride(assignment) {
+  const separator = assignment.indexOf("=");
+  if (separator <= 0) {
+    throw new Error(`Invalid --set value ${JSON.stringify(assignment)}. Expected key=value.`);
+  }
+  const key = assignment.slice(0, separator);
+  const path = key.split(".");
+  if (!isAllowedConfigOverridePath(path)) {
+    throw new Error(`Unknown --set key ${JSON.stringify(key)}.`);
+  }
+  return {
+    assignment,
+    path,
+    value: assignment.slice(separator + 1)
+  };
+}
+function parseConfigOverrideValue(value, currentValue) {
+  if (typeof currentValue === "boolean") {
+    if (value === "true")
+      return true;
+    if (value === "false")
+      return false;
+    return value;
+  }
+  if (typeof currentValue === "number" && NUMBER_VALUE.test(value)) {
+    const parsed = Number(value);
+    if (Number.isFinite(parsed))
+      return parsed;
+  }
+  return value;
+}
+function readPath2(target, path) {
+  let current = target;
+  for (const key of path) {
+    if (!isRecord6(current))
+      return;
+    current = current[key];
+  }
+  return current;
+}
+function writePath2(target, path, value) {
+  let current = target;
+  for (const key of path.slice(0, -1)) {
+    const child = current[key];
+    if (!isRecord6(child)) {
+      throw new Error(`Cannot apply --set key ${JSON.stringify(path.join("."))}.`);
+    }
+    current = child;
+  }
+  const leaf = path.at(-1);
+  if (leaf)
+    current[leaf] = value;
+}
+function isRecord6(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
 // src/acp/AcpAgentProcess.ts
 import { spawn } from "node:child_process";
 import { readFile as readFile7, realpath } from "node:fs/promises";
@@ -202148,14 +202247,14 @@ var zCancelRequestNotification = object({
 });
 // node_modules/@agentclientprotocol/sdk/dist/jsonrpc.js
 var CANCEL_REQUEST_METHOD = "$/cancel_request";
-function isRecord6(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null;
 }
 function isJsonRpcId(value) {
   return value === null || typeof value === "string" || typeof value === "number" && Number.isFinite(value);
 }
 function cancelRequestId(params) {
-  if (!isRecord6(params) || !isJsonRpcId(params["requestId"])) {
+  if (!isRecord7(params) || !isJsonRpcId(params["requestId"])) {
     return;
   }
   return params["requestId"];
@@ -202502,7 +202601,7 @@ class Connection {
     if (this.abortController.signal.aborted) {
       return;
     }
-    if (!isRecord6(message)) {
+    if (!isRecord7(message)) {
       console.error("Invalid message", { message });
       return;
     }
@@ -202595,7 +202694,7 @@ class Connection {
       pendingResponse.cleanup?.();
       if ("result" in response) {
         pendingResponse.resolve(response.result);
-      } else if ("error" in response && isRecord6(response.error)) {
+      } else if ("error" in response && isRecord7(response.error)) {
         const { code, message, data } = response.error;
         pendingResponse.reject(new RequestError(code, message, data));
       } else {
@@ -202805,7 +202904,7 @@ function ndJsonStream(output2, input2) {
         if (trimmedLine) {
           try {
             const message = JSON.parse(trimmedLine);
-            if (isRecord6(message)) {
+            if (isRecord7(message)) {
               controller.enqueue(message);
             } else {
               console.warn("Skipping JSON line that is not an object:", trimmedLine);
@@ -203866,7 +203965,7 @@ function isSeverity(value) {
   return typeof value === "string" && severities.includes(value);
 }
 function normalizeCisaSecureByDesign(value) {
-  if (!isRecord7(value))
+  if (!isRecord8(value))
     return;
   const normalized = {};
   const customerSecurityOutcomes = normalizeGateStatus(value.customerSecurityOutcomes);
@@ -203907,7 +204006,7 @@ function normalizeFindingFiles(value) {
   if (!Array.isArray(value))
     return;
   const files = value.flatMap((item) => {
-    if (!isRecord7(item) || typeof item.path !== "string" || item.path.trim().length === 0) {
+    if (!isRecord8(item) || typeof item.path !== "string" || item.path.trim().length === 0) {
       return [];
     }
     const file2 = {
@@ -203926,7 +204025,7 @@ function normalizeFindingFiles(value) {
 function normalizeLineNumber(value) {
   return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : undefined;
 }
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -205550,7 +205649,7 @@ function parseVerificationVerdicts(rawText) {
     if (!Array.isArray(parsed.verdicts))
       return;
     return parsed.verdicts.flatMap((item) => {
-      if (!isRecord8(item))
+      if (!isRecord9(item))
         return [];
       if (typeof item.findingId !== "string")
         return [];
@@ -205628,7 +205727,7 @@ function verificationNote(reasoning) {
 function isVerdict(value) {
   return value === "confirmed" || value === "refuted" || value === "uncertain";
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -205677,7 +205776,7 @@ async function runReview(tool, request, options = {}) {
     }
     throw error51;
   }
-  const loaded = options.config !== undefined ? {
+  const baseLoaded = options.config !== undefined ? {
     config: options.config,
     configHash: options.configHash,
     configTrustStatus: "trusted",
@@ -205694,6 +205793,10 @@ async function runReview(tool, request, options = {}) {
     env: options.env,
     trustPrompt: options.trustPrompt
   });
+  const loaded = options.configOverrides && options.configOverrides.length > 0 ? {
+    ...baseLoaded,
+    config: applyConfigOverrides(baseLoaded.config, options.configOverrides)
+  } : baseLoaded;
   const trace = createTraceWriter({
     enabled: loaded.config.audit.enabled,
     directory: loaded.config.audit.directory,
@@ -206395,6 +206498,7 @@ async function main() {
       ignoreConfig,
       trustConfig: trustConfig2,
       allowUnknownConfig,
+      configOverrides: configOverrideFlags(parsed.flags),
       promptForTrust: canPromptForConfigTrust()
     });
     console.log(booleanFlag(parsed.flags, "json") ? JSON.stringify(result, null, 2) : result.summaryMarkdown);
@@ -206471,6 +206575,12 @@ function parseNetworkFlag(value) {
     return value;
   throw new Error(`Invalid --network value "${value}". Expected model_only or unrestricted.`);
 }
+function configOverrideFlags(flags) {
+  if (flags.set === true) {
+    throw new Error("Missing value for --set. Expected key=value.");
+  }
+  return stringArrayFlag(flags, "set");
+}
 function canPromptForConfigTrust() {
   return process.stdin.isTTY === true && process.stderr.isTTY === true;
 }
@@ -206479,9 +206589,9 @@ var HELP = `Kyoso
 Usage:
   kyoso mcp [--config kyoso.toml|kyoso.config.ts] [--ignore-config] [--trust-config] [--allow-unknown-config] [--network model_only|unrestricted]
   kyoso setup [codex|claude-code] [--write] [--runner npx|bunx] [--command <command>] [--global]
-  kyoso plan --goal <text> [--plan <path-or-text>] [--file <path>] [--json] [--trust-config] [--allow-unknown-config]
-  kyoso security --goal <text> [--diff <path>] [--file <path>] [--allow-secret-redaction] [--trust-config] [--allow-unknown-config]
-  kyoso diff --base main --head HEAD [--json] [--trust-config] [--allow-unknown-config]
+  kyoso plan --goal <text> [--plan <path-or-text>] [--file <path>] [--set <key>=<value>]... [--json] [--trust-config] [--allow-unknown-config]
+  kyoso security --goal <text> [--diff <path>] [--file <path>] [--set <key>=<value>]... [--json] [--allow-secret-redaction] [--trust-config] [--allow-unknown-config]
+  kyoso diff --base main --head HEAD [--set <key>=<value>]... [--json] [--trust-config] [--allow-unknown-config]
   kyoso doctor [--trust-config] [--allow-unknown-config]
   kyoso init [--force]
 `;

package/dist/config/configOverrides.d.ts

@@ -0,0 +1,2 @@
+import { type KyosoConfig } from "./schema.js";
+export declare function applyConfigOverrides(config: KyosoConfig, assignments: string[]): KyosoConfig;

package/dist/config/projectScope.d.ts

@@ -6,6 +6,8 @@ type Violation = {
     path: string;
     reason?: string;
 };
+export declare const kyosoConfigOverridePaths: readonly ["agents.codex.enabled", "agents.codex.model", "agents.codex.effort", "agents.codex.role", "agents.codex.timeoutMs", "agents.claude.enabled", "agents.claude.model", "agents.claude.effort", "agents.claude.role", "agents.claude.timeoutMs", "verification.enabled", "verification.maxFindings", "verification.timeoutMs", "judge.mode", "judge.provider", "judge.timeoutMs"];
+export declare function isAllowedConfigOverridePath(path: string[]): boolean;
 export declare function mergeProjectTomlConfig(baseConfig: unknown, projectConfig: unknown, options: ProjectScopeOptions): unknown;
 export declare function collectProjectScopeViolations(config: unknown): Violation[];
 export declare function flattenLeaves(value: unknown, path?: string[]): Array<{

package/dist/core/constants.d.ts

@@ -4,4 +4,4 @@ export declare const DEFAULT_MAX_DIFF_BYTES = 300000;
 export declare const RAW_OUTPUT_MAX_CHARS = 16384;
 export declare const TRACE_DIR = ".kyoso/traces";
 export declare const KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
-export declare const KYOSO_VERSION = "0.7.1";
+export declare const KYOSO_VERSION = "0.8.0";

package/dist/core/runReview.d.ts

@@ -4,6 +4,7 @@ import type { AcpAgentManager } from "../acp/AcpAgentManager.js";
 import type { KyosoResult, KyosoReviewRequest, NetworkMode, ReviewTool } from "./types.js";
 export type RunReviewOptions = LoadConfigOptions & {
     config?: KyosoConfig;
+    configOverrides?: string[];
     configHash?: string;
     agentManager?: AcpAgentManager;
     env?: NodeJS.ProcessEnv;

package/dist/index.js

@@ -184076,6 +184076,28 @@ import { createInterface } from "node:readline/promises";
 
 // src/config/projectScope.ts
 var PROJECT_GLOBAL_ONLY_MESSAGE = "Move global-only settings to the user global config:";
+var kyosoConfigOverridePaths = [
+  "agents.codex.enabled",
+  "agents.codex.model",
+  "agents.codex.effort",
+  "agents.codex.role",
+  "agents.codex.timeoutMs",
+  "agents.claude.enabled",
+  "agents.claude.model",
+  "agents.claude.effort",
+  "agents.claude.role",
+  "agents.claude.timeoutMs",
+  "verification.enabled",
+  "verification.maxFindings",
+  "verification.timeoutMs",
+  "judge.mode",
+  "judge.provider",
+  "judge.timeoutMs"
+];
+var CONFIG_OVERRIDE_PATHS = new Set(kyosoConfigOverridePaths);
+function isAllowedConfigOverridePath(path) {
+  return CONFIG_OVERRIDE_PATHS.has(path.join("."));
+}
 function mergeProjectTomlConfig(baseConfig, projectConfig, options) {
   const violations = collectProjectScopeViolations(projectConfig);
   if (violations.length > 0) {
@@ -184108,13 +184130,9 @@ function collectProjectScopeViolations(config2) {
 }
 function isAllowedProjectPath(path) {
   const [top, second, third, fourth] = path;
-  if (top === "tools" && path.length === 2 && ["planReview", "securityReview", "diffReview"].includes(second ?? "")) {
+  if (isAllowedConfigOverridePath(path))
     return true;
-  }
-  if (top === "agents" && path.length === 3 && ["codex", "claude"].includes(second ?? "") && ["enabled", "model", "effort", "role", "timeoutMs"].includes(third ?? "")) {
-    return true;
-  }
-  if (top === "verification" && path.length === 2 && ["enabled", "maxFindings", "timeoutMs"].includes(second ?? "")) {
+  if (top === "tools" && path.length === 2 && ["planReview", "securityReview", "diffReview"].includes(second ?? "")) {
     return true;
   }
   if (top === "workspace" && path.length === 2 && ["maxContextBytes", "maxDiffBytes", "deny"].includes(second ?? "")) {
@@ -184126,9 +184144,6 @@ function isAllowedProjectPath(path) {
   if (top === "secrets" && path.length === 2 && ["blockOnDetectedSecret", "allowOverride"].includes(second ?? "")) {
     return true;
   }
-  if (top === "judge" && path.length === 2 && ["mode", "provider", "timeoutMs"].includes(second ?? "")) {
-    return true;
-  }
   if (top === "securityReview" && second === "cisaSecureByDesign" && path.length >= 3) {
     if (third === "dimensions") {
       return path.length === 4 && [
@@ -185548,6 +185563,90 @@ async function exists(path) {
   }
 }
 
+// src/config/configOverrides.ts
+var NUMBER_VALUE = /^[+-]?(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?$/i;
+function applyConfigOverrides(config2, assignments) {
+  if (assignments.length === 0)
+    return config2;
+  const overrides = assignments.map(parseConfigOverride);
+  const baseConfig = config2;
+  const overridden = structuredClone(config2);
+  for (const override of overrides) {
+    writePath2(overridden, override.path, parseConfigOverrideValue(override.value, readPath2(baseConfig, override.path)));
+  }
+  const parsed = kyosoConfigSchema.safeParse(overridden);
+  if (parsed.success)
+    return parsed.data;
+  const issue2 = parsed.error.issues[0];
+  const issuePath = issue2?.path.map(String).join(".") ?? "config";
+  const assignment = findAssignmentForPath(overrides, issuePath) ?? assignments.at(-1) ?? "";
+  throw new Error(`Invalid --set value ${JSON.stringify(assignment)}: ${issuePath}: ${issue2?.message ?? "config validation failed"}.`);
+}
+function findAssignmentForPath(overrides, path) {
+  for (let index = overrides.length - 1;index >= 0; index -= 1) {
+    const override = overrides[index];
+    if (override?.path.join(".") === path)
+      return override.assignment;
+  }
+  return;
+}
+function parseConfigOverride(assignment) {
+  const separator = assignment.indexOf("=");
+  if (separator <= 0) {
+    throw new Error(`Invalid --set value ${JSON.stringify(assignment)}. Expected key=value.`);
+  }
+  const key = assignment.slice(0, separator);
+  const path = key.split(".");
+  if (!isAllowedConfigOverridePath(path)) {
+    throw new Error(`Unknown --set key ${JSON.stringify(key)}.`);
+  }
+  return {
+    assignment,
+    path,
+    value: assignment.slice(separator + 1)
+  };
+}
+function parseConfigOverrideValue(value, currentValue) {
+  if (typeof currentValue === "boolean") {
+    if (value === "true")
+      return true;
+    if (value === "false")
+      return false;
+    return value;
+  }
+  if (typeof currentValue === "number" && NUMBER_VALUE.test(value)) {
+    const parsed = Number(value);
+    if (Number.isFinite(parsed))
+      return parsed;
+  }
+  return value;
+}
+function readPath2(target, path) {
+  let current = target;
+  for (const key of path) {
+    if (!isRecord4(current))
+      return;
+    current = current[key];
+  }
+  return current;
+}
+function writePath2(target, path, value) {
+  let current = target;
+  for (const key of path.slice(0, -1)) {
+    const child = current[key];
+    if (!isRecord4(child)) {
+      throw new Error(`Cannot apply --set key ${JSON.stringify(path.join("."))}.`);
+    }
+    current = child;
+  }
+  const leaf = path.at(-1);
+  if (leaf)
+    current[leaf] = value;
+}
+function isRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
 // src/acp/AcpAgentProcess.ts
 import { spawn } from "node:child_process";
 import { readFile as readFile4, realpath } from "node:fs/promises";
@@ -187883,14 +187982,14 @@ var zCancelRequestNotification = object({
 });
 // node_modules/@agentclientprotocol/sdk/dist/jsonrpc.js
 var CANCEL_REQUEST_METHOD = "$/cancel_request";
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null;
 }
 function isJsonRpcId(value) {
   return value === null || typeof value === "string" || typeof value === "number" && Number.isFinite(value);
 }
 function cancelRequestId(params) {
-  if (!isRecord4(params) || !isJsonRpcId(params["requestId"])) {
+  if (!isRecord5(params) || !isJsonRpcId(params["requestId"])) {
     return;
   }
   return params["requestId"];
@@ -188237,7 +188336,7 @@ class Connection {
     if (this.abortController.signal.aborted) {
       return;
     }
-    if (!isRecord4(message)) {
+    if (!isRecord5(message)) {
       console.error("Invalid message", { message });
       return;
     }
@@ -188330,7 +188429,7 @@ class Connection {
       pendingResponse.cleanup?.();
       if ("result" in response) {
         pendingResponse.resolve(response.result);
-      } else if ("error" in response && isRecord4(response.error)) {
+      } else if ("error" in response && isRecord5(response.error)) {
         const { code, message, data } = response.error;
         pendingResponse.reject(new RequestError(code, message, data));
       } else {
@@ -188540,7 +188639,7 @@ function ndJsonStream(output, input) {
         if (trimmedLine) {
           try {
             const message = JSON.parse(trimmedLine);
-            if (isRecord4(message)) {
+            if (isRecord5(message)) {
               controller.enqueue(message);
             } else {
               console.warn("Skipping JSON line that is not an object:", trimmedLine);
@@ -189601,7 +189700,7 @@ function isSeverity(value) {
   return typeof value === "string" && severities.includes(value);
 }
 function normalizeCisaSecureByDesign(value) {
-  if (!isRecord5(value))
+  if (!isRecord6(value))
     return;
   const normalized = {};
   const customerSecurityOutcomes = normalizeGateStatus(value.customerSecurityOutcomes);
@@ -189642,7 +189741,7 @@ function normalizeFindingFiles(value) {
   if (!Array.isArray(value))
     return;
   const files = value.flatMap((item) => {
-    if (!isRecord5(item) || typeof item.path !== "string" || item.path.trim().length === 0) {
+    if (!isRecord6(item) || typeof item.path !== "string" || item.path.trim().length === 0) {
       return [];
     }
     const file2 = {
@@ -189661,7 +189760,7 @@ function normalizeFindingFiles(value) {
 function normalizeLineNumber(value) {
   return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : undefined;
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -191019,7 +191118,7 @@ function parseJudgeOutput(text, fallbackSummaryText) {
   const parsed = JSON.parse(json2);
   const summaryText = typeof parsed.summaryText === "string" && parsed.summaryText.trim().length > 0 ? sanitizeText(parsed.summaryText) : fallbackSummaryText;
   const disagreementComments = Array.isArray(parsed.disagreementComments) ? parsed.disagreementComments.flatMap((item) => {
-    if (!isRecord6(item) || typeof item.topic !== "string" || typeof item.judgeComment !== "string") {
+    if (!isRecord7(item) || typeof item.topic !== "string" || typeof item.judgeComment !== "string") {
       return [];
     }
     return [
@@ -191035,7 +191134,7 @@ function parseJudgeOutput(text, fallbackSummaryText) {
   return { summaryText, disagreementComments, analysis };
 }
 function parseAnalysis(value) {
-  if (!isRecord6(value))
+  if (!isRecord7(value))
     return;
   if (!Array.isArray(value.blindSpots) || !Array.isArray(value.contradictions) || !Array.isArray(value.partialCoverage)) {
     return;
@@ -191043,7 +191142,7 @@ function parseAnalysis(value) {
   return {
     blindSpots: value.blindSpots.slice(0, ANALYSIS_MAX_ITEMS).flatMap((item) => typeof item === "string" ? [sanitizeAnalysisText(item)] : []),
     contradictions: value.contradictions.slice(0, ANALYSIS_MAX_ITEMS).flatMap((item) => {
-      if (!isRecord6(item) || typeof item.topic !== "string" || typeof item.detail !== "string") {
+      if (!isRecord7(item) || typeof item.topic !== "string" || typeof item.detail !== "string") {
         return [];
       }
       return [
@@ -191054,7 +191153,7 @@ function parseAnalysis(value) {
       ];
     }),
     partialCoverage: value.partialCoverage.slice(0, ANALYSIS_MAX_ITEMS).flatMap((item) => {
-      if (!isRecord6(item) || typeof item.note !== "string")
+      if (!isRecord7(item) || typeof item.note !== "string")
         return [];
       const findingId = typeof item.findingId === "string" ? sanitizeAnalysisText(item.findingId) : undefined;
       return [
@@ -191101,7 +191200,7 @@ function extractFirstJsonObject2(text) {
   }
   return;
 }
-function isRecord6(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -191559,7 +191658,7 @@ function parseVerificationVerdicts(rawText) {
     if (!Array.isArray(parsed.verdicts))
       return;
     return parsed.verdicts.flatMap((item) => {
-      if (!isRecord7(item))
+      if (!isRecord8(item))
         return [];
       if (typeof item.findingId !== "string")
         return [];
@@ -191637,7 +191736,7 @@ function verificationNote(reasoning) {
 function isVerdict(value) {
   return value === "confirmed" || value === "refuted" || value === "uncertain";
 }
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -191686,7 +191785,7 @@ async function runReview(tool, request, options = {}) {
     }
     throw error51;
   }
-  const loaded = options.config !== undefined ? {
+  const baseLoaded = options.config !== undefined ? {
     config: options.config,
     configHash: options.configHash,
     configTrustStatus: "trusted",
@@ -191703,6 +191802,10 @@ async function runReview(tool, request, options = {}) {
     env: options.env,
     trustPrompt: options.trustPrompt
   });
+  const loaded = options.configOverrides && options.configOverrides.length > 0 ? {
+    ...baseLoaded,
+    config: applyConfigOverrides(baseLoaded.config, options.configOverrides)
+  } : baseLoaded;
   const trace = createTraceWriter({
     enabled: loaded.config.audit.enabled,
     directory: loaded.config.audit.directory,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kyo-so/cli",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "description": "Kyo-so: MCP-native, ACP-powered multi-agent review gates for AI coding workflows.",
   "license": "AGPL-3.0-or-later",
   "repository": {