Vamao Config Guard

Run a local preflight before importing Drupal configuration. Vamao Config Guard compares active configuration, raw sync YAML and effective incoming configuration, then reports changes that need review.

Features

• Browser and Drush reports for protected changes and deletions.
• Missing extensions and configuration dependency diagnostics.
• Config Split setup checks and effective Config Split/Config Ignore transformation assessment.
• Read-only checks: no configuration import, automatic repair, remote API, tracking, license or registration.

Installation and use

Install with Composer: composer require drupal/vamao_config_guard. Enable Vamao Config Guard on Extend. Configure environment and protected patterns at /admin/config/development/vamao-config-guard. Open /admin/reports/vamao-config-guard and choose Run local preflight. Export a complete baseline to the configured sync directory first. Grant the settings and report permissions only to trusted administrators.

Requirements

Drupal 10.6 or Drupal 11.3 and later within those major versions. PHP 8.3 or later, subject to the Drupal version requirements. Config Split and Config Ignore are optional; Drush 13 is optional for command-line use.

Similar projects

• Drupal core Configuration Manager already lets administrators review configuration changes before importing them. Use it for the standard synchronization workflow. Vamao Config Guard adds a separate browser/Drush preflight with protected-name checks and targeted dependency and split diagnostics; it does not replace core import validation.
• Configuration Inspector inspects configuration values, schemas and validation constraints. Vamao Config Guard focuses on incoming import changes and selected deployment risks, not comprehensive schema validation. Use Configuration Inspector when schema correctness is the question.
• Configuration Read-only mode locks configuration changes through the Drupal administration UI. Vamao Config Guard only reports findings; it does not lock edits or prevent an import. Use Config Read-only when you need an enforced UI restriction.

Recommended modules/libraries

• Config Split manages sets of environment-specific configuration during export and import. Vamao Config Guard can assess the effective incoming configuration and selected split setup risks; it does not create or manage splits.
• Config Ignore preserves selected configuration by transforming the configuration considered for synchronization. Vamao Config Guard reports against the effective incoming configuration; it does not set ignore rules or replace Config Ignore.

Config Split and Config Ignore are optional, not required dependencies. Choose the existing tools that match your workflow; install Vamao Config Guard when you need its additional local preflight checks.

Scope

This is a point-in-time diagnostic report, not an import lock or a guarantee that deployment will succeed. Empty or incomplete sync storage, unreadable storage and unsupported extra configuration collections block assessment. Reports show configuration names, not raw values. The module does not replace Config Split or Config Ignore.

Support and maintenance

All features are free under GPL-2.0-or-later. Maintained by Mustafa Sayilan, with development supported by VamaoLabs. Report reproducible issues in this project issue queue; include versions and redact credentials and private configuration values. This initial release does not claim Drupal Security Team advisory coverage.