Publish redacted ConfigKit effective configuration

internal/core/debugbundle/bundle_test.go

@@ -3,6 +3,8 @@ package debugbundle
 import (
 	"bytes"
 	"encoding/json"
+	"errors"
+	"io"
 	"os"
 	"path/filepath"
 	"strings"
@@ -92,6 +94,9 @@ func TestSummaryWriterWritesEverySummaryArtifact(t *testing.T) {
 	if err := summary.WriteRedactedEffectiveConfig(testRedactedSummaryPayload{}); err != nil {
 		t.Fatal(err)
 	}
+	if err := summary.WriteEffectiveConfig(testEffectiveConfigWriter{content: "version: 5\n"}); err != nil {
+		t.Fatal(err)
+	}
 	if err := summary.WriteResolvedPipeline(testRedactedResolvedPipelinePayload{}); err != nil {
 		t.Fatal(err)
 	}
@@ -120,6 +125,7 @@ func TestSummaryWriterWritesEverySummaryArtifact(t *testing.T) {
 	for _, name := range []string{
 		ArtifactInvocationMetadata,
 		ArtifactEffectiveConfig,
+		ArtifactEffectiveConfigYAML,
 		ArtifactResolvedPipeline,
 		ArtifactResolvedReferences,
 		ArtifactCheckpointEvents,
@@ -139,6 +145,20 @@ func TestSummaryWriterWritesEverySummaryArtifact(t *testing.T) {
 	}
 }
 
+func TestWriteEffectiveConfigDoesNotPublishPartialRendering(t *testing.T) {
+	bundle, err := Allocate(t.TempDir(), testBundleRunID, time.Unix(0, 42))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := bundle.Summary().WriteEffectiveConfig(testEffectiveConfigWriter{err: errors.New("render failed")}); err == nil {
+		t.Fatal("WriteEffectiveConfig() error = nil, want render failure")
+	}
+	path := filepath.Join(bundle.SummaryRoot(), ArtifactEffectiveConfigYAML)
+	if _, err := os.Stat(path); !os.IsNotExist(err) {
+		t.Fatalf("effective configuration artifact exists after rendering failure: %v", err)
+	}
+}
+
 func TestWriteInvocationPreservesReasoningEffortOverrideStates(t *testing.T) {
 	replacement := "focused"
 	cleared := ""
@@ -222,6 +242,19 @@ func (testRedactedSummaryPayload) RedactedSummaryPayload() any {
 	return map[string]any{"redacted": true}
 }
 
+type testEffectiveConfigWriter struct {
+	content string
+	err     error
+}
+
+func (writer testEffectiveConfigWriter) WriteEffective(output io.Writer) error {
+	if writer.err != nil {
+		return writer.err
+	}
+	_, err := io.WriteString(output, writer.content)
+	return err
+}
+
 type testRedactedResolvedPipelinePayload struct{}
 
 func (testRedactedResolvedPipelinePayload) RedactedResolvedPipelinePayload() pipeline.ResolvedPipeline {

internal/core/debugbundle/summary.go

@@ -1,7 +1,9 @@
 package debugbundle
 
 import (
+	"bytes"
 	"fmt"
+	"io"
 	"strings"
 	"time"
 
@@ -12,19 +14,21 @@ import (
 )
 
 const (
-	ArtifactInvocationMetadata = "invocation.json"
-	ArtifactEffectiveConfig    = "effective-config.json"
-	ArtifactResolvedPipeline   = "resolved-pipeline.json"
-	ArtifactResolvedReferences = "resolved-references.json"
-	ArtifactCheckpointEvents   = "checkpoint-events.json"
-	ArtifactRunManifest        = "run-manifest.json"
-	ArtifactChunkPlan          = "chunk-plan.json"
-	ArtifactRunReport          = "run-report.json"
-	ArtifactDiagnostics        = "final-diagnostics.json"
-	ArtifactErrorLog           = "error.log"
+	ArtifactInvocationMetadata  = "invocation.json"
+	ArtifactEffectiveConfig     = "effective-config.json"
+	ArtifactEffectiveConfigYAML = "effective-config.yml"
+	ArtifactResolvedPipeline    = "resolved-pipeline.json"
+	ArtifactResolvedReferences  = "resolved-references.json"
+	ArtifactCheckpointEvents    = "checkpoint-events.json"
+	ArtifactRunManifest         = "run-manifest.json"
+	ArtifactChunkPlan           = "chunk-plan.json"
+	ArtifactRunReport           = "run-report.json"
+	ArtifactDiagnostics         = "final-diagnostics.json"
+	ArtifactErrorLog            = "error.log"
 )
 
 type RedactedSummaryPayload interface{ RedactedSummaryPayload() any }
+type EffectiveConfigWriter interface{ WriteEffective(io.Writer) error }
 type RedactedResolvedPipelinePayload interface {
 	RedactedResolvedPipelinePayload() pipeline.ResolvedPipeline
 }
@@ -86,6 +90,16 @@ func (w *SummaryWriter) WriteRedactedEffectiveConfig(payload RedactedSummaryPayl
 	}
 	return w.writeJSON(ArtifactEffectiveConfig, payload.RedactedSummaryPayload())
 }
+func (w *SummaryWriter) WriteEffectiveConfig(payload EffectiveConfigWriter) error {
+	if payload == nil {
+		return fmt.Errorf("effective configuration writer must not be nil")
+	}
+	var rendered bytes.Buffer
+	if err := payload.WriteEffective(&rendered); err != nil {
+		return fmt.Errorf("render effective configuration: %w", err)
+	}
+	return w.writeBytes(ArtifactEffectiveConfigYAML, rendered.Bytes())
+}
 func (w *SummaryWriter) WriteResolvedPipeline(payload RedactedResolvedPipelinePayload) error {
 	if payload == nil {
 		return fmt.Errorf("redacted resolved pipeline payload must not be nil")