Core Settings

This page is for maintainers configuring settings shared across PRFlow’s local and cloud paths.

Setting	Type and accepted values	Fallback or scaffold	Tier and security note	Example
`$schema`	String path or URL	Scaffold: `./config.schema.json`	Editor only. It is ignored at runtime.	`"$schema": "./config.schema.json"`
`base_branch`	String branch name	Runtime and scaffold: `main`	Review and implementation base. Confirm the branch exists.	`"base_branch": "main"`
`claude_model`	String model identifier	Runtime and scaffold: `claude-opus-5`	Global model. Cloud workflows reject an empty value or one that begins with `-`.	`"claude_model": "claude-opus-5"`
`prflow_version`	String tag, branch or commit SHA	Scaffold: empty; installer normally stamps a commit SHA	Thin cloud installs only. An empty runtime pin fails rather than tracking `main`. Vendored mode ignores it.	`"prflow_version": "v2.30.112"`
`prflow.allowed_bots`	Comma-separated string	`claude,dependabot`	All cloud gates. List only automation identities that may incur runs.	`"allowed_bots": "claude,dependabot,my-app"`
`prflow.allowed_users`	`*` or comma-separated logins	`*`	All cloud gates. Humans must also have write, maintain or admin access.	`"allowed_users": "octocat,maintainer"`
`prflow.workpad_marker`	Nonempty string marker	`<!-- prflow:workpad -->`	Implementation state and self-trigger guard. Changing it can make older workpads undiscoverable.	`"workpad_marker": "<!-- prflow:workpad -->"`
`prflow.effort`	`low`, `medium`, `high`, `xhigh` or `max`	Scaffold: `low`; absent runtime fallback: `high`	General cloud command workflow. Provider routes omit effort unless the provider supports it.	`"effort": "low"`
`workflows.prflow`	Boolean	Scaffold: `true`; absent workflow read resolves disabled	Both fresh-install cloud workflows. Keep config committed or triggers cannot enable.	`"prflow": true`
`workflows.prflow-review`	Boolean	Scaffold: `false`	Retained legacy setting. It enables nothing in a fresh install because the automatic-review files are not shipped. Existing installations that retained those files remain exposed to their documented defects.	`"prflow-review": false`

Valid Core Example

{
  "$schema": "./config.schema.json",
  "base_branch": "main",
  "claude_model": "claude-opus-5",
  "prflow_version": "v2.30.112",
  "prflow": {
    "allowed_bots": "claude,dependabot",
    "allowed_users": "octocat,maintainer",
    "workpad_marker": "<!-- prflow:workpad -->",
    "effort": "low"
  },
  "workflows": {
    "prflow": true,
    "prflow-review": false
  }
}

Use Providers for prflow.provider and prflow.claude_model. Use Tool Permissions for prflow.allowed_tools.

⌘I