fix(config): decode *bool so trailing-slash redirect binds from yaml/env

backend/core/extpoints/config_resolve.go

@@ -180,6 +180,13 @@ func formatEntryValue(value any, secret bool) string {
 	if value == nil {
 		return ""
 	}
+	rv := reflect.ValueOf(value)
+	if rv.Kind() == reflect.Ptr {
+		if rv.IsNil() {
+			return ""
+		}
+		return fmt.Sprint(rv.Elem().Interface())
+	}
 	return fmt.Sprint(value)
 }
 

backend/core/extpoints/config_test.go

@@ -224,6 +224,54 @@ func TestEntriesRedactSecretsAndReportDefaults(t *testing.T) {
 	assert.Equal(t, "86400", entries["app.session_age"].Value)
 }
 
+type optionalBoolConfig struct {
+	RedirectTrailingSlash *bool `config:"redirect_trailing_slash" env:"APP_REDIRECT_TRAILING_SLASH"`
+}
+
+func TestBindBoolPointerFromFileAndEnv(t *testing.T) {
+	t.Run("absent stays nil", func(t *testing.T) {
+		r := extpoints.NewConfigRegistry(newFakeSource())
+		require.NoError(t, r.Declare("driver_http", extpoints.ConfigBinding{Prefix: "app", Target: &optionalBoolConfig{}}))
+		require.NoError(t, r.Resolve())
+
+		var got optionalBoolConfig
+		require.NoError(t, r.Bind("app", &got))
+		assert.Nil(t, got.RedirectTrailingSlash)
+		assert.Equal(t, "", r.Origin("app.redirect_trailing_slash"))
+	})
+
+	t.Run("file false", func(t *testing.T) {
+		src := newFakeSource()
+		src.values["app.redirect_trailing_slash"] = false
+
+		r := extpoints.NewConfigRegistry(src)
+		require.NoError(t, r.Declare("driver_http", extpoints.ConfigBinding{Prefix: "app", Target: &optionalBoolConfig{}}))
+		require.NoError(t, r.Resolve())
+
+		var got optionalBoolConfig
+		require.NoError(t, r.Bind("app", &got))
+		require.NotNil(t, got.RedirectTrailingSlash)
+		assert.False(t, *got.RedirectTrailingSlash)
+		assert.Equal(t, extpoints.OriginFile, r.Origin("app.redirect_trailing_slash"))
+		assert.False(t, r.Bool("app.redirect_trailing_slash", true))
+	})
+
+	t.Run("env false", func(t *testing.T) {
+		src := newFakeSource()
+		src.env["APP_REDIRECT_TRAILING_SLASH"] = "false"
+
+		r := extpoints.NewConfigRegistry(src)
+		require.NoError(t, r.Declare("driver_http", extpoints.ConfigBinding{Prefix: "app", Target: &optionalBoolConfig{}}))
+		require.NoError(t, r.Resolve())
+
+		var got optionalBoolConfig
+		require.NoError(t, r.Bind("app", &got))
+		require.NotNil(t, got.RedirectTrailingSlash)
+		assert.False(t, *got.RedirectTrailingSlash)
+		assert.Equal(t, extpoints.OriginEnv, r.Origin("app.redirect_trailing_slash"))
+	})
+}
+
 func TestBindRejectsReadsBeforeSourceIsRegistered(t *testing.T) {
 	r := extpoints.NewConfigRegistry(nil)
 	require.NoError(t, r.Declare("cache", extpoints.ConfigBinding{Prefix: "redis", Target: &redisConfig{}}))

backend/core/extpoints/config_value.go

@@ -33,15 +33,38 @@ func convertValue(raw any, typ reflect.Type) (any, error) {
 		return convertSlice(raw, typ)
 	case reflect.Struct:
 		return convertStruct(raw, typ)
+	case reflect.Ptr:
+		return convertPointer(raw, typ)
 	default:
 		return nil, fmt.Errorf("%w: %s is not a supported configuration type", ErrConfigType, typ)
 	}
 }
 
+// convertPointer decodes into the element type and returns a non-nil pointer to it.
+// Nested pointers are rejected so configuration tags stay one level deep.
+func convertPointer(raw any, typ reflect.Type) (any, error) {
+	elemType := typ.Elem()
+	if elemType.Kind() == reflect.Ptr {
+		return nil, fmt.Errorf("%w: %s is not a supported configuration type", ErrConfigType, typ)
+	}
+	elem, err := convertValue(raw, elemType)
+	if err != nil {
+		return nil, err
+	}
+	ptr := reflect.New(elemType)
+	ptr.Elem().Set(reflect.ValueOf(elem))
+	return ptr.Interface(), nil
+}
+
 func convertBool(raw any) (any, error) {
 	switch v := raw.(type) {
 	case bool:
 		return v, nil
+	case *bool:
+		if v == nil {
+			return nil, fmt.Errorf("%w: nil *bool is not a boolean", ErrConfigType)
+		}
+		return *v, nil
 	case string:
 		parsed, err := strconv.ParseBool(strings.TrimSpace(v))
 		if err != nil {