@adecore/agents 0.25.3 → 0.25.5

package/dist/chat/backend.d.ts

@@ -14,6 +14,7 @@ export interface BackendLaunch {
     resumeNote: string | null;
     goal?: ChatGoal;
     folders?: readonly string[];
+    projectConfig?: boolean;
     spawn?: SpawnChatProcess;
     saveGeneratedImage?(ref: string, upload: ChatAttachmentUpload): Promise<ChatAttachment>;
 }

package/dist/chat/chat-core.d.ts

@@ -30,6 +30,7 @@ export interface ChatCoreHooks {
     instructionsFor?(chatId: string): string | null;
     resumeNoteFor?(chatId: string): string | null;
     foldersFor?(chatId: string): readonly string[];
+    projectConfigFor?(chatId: string): boolean;
     hiddenFor?(chatId: string): boolean;
     promptNotesFor?(chatId: string): PromptNotes | undefined;
     referencesFor?(chatId: string): ChatReferences | undefined;

package/dist/chat/chat-core.js

@@ -307,6 +307,7 @@ export class ChatCore {
             instructions: () => (this.hooks.instructionsFor ? this.hooks.instructionsFor(payload.chatId) : this.instructions),
             resumeNote: () => this.hooks.resumeNoteFor?.(payload.chatId) ?? null,
             folders: () => this.hooks.foldersFor?.(payload.chatId) ?? [],
+            projectConfig: () => this.hooks.projectConfigFor?.(payload.chatId) ?? true,
             ...(promptNotes ? { promptNotes } : {}),
             ...(references ? { references } : {}),
             ...(this.checkpoints ? { checkpoints: this.checkpoints } : {}),

package/dist/chat/chat-session.d.ts

@@ -42,6 +42,7 @@ export interface ChatSessionOptions {
     instructions?(): string | null;
     resumeNote?(): string | null;
     folders?(): readonly string[];
+    projectConfig?(): boolean;
     promptNotes?: PromptNotes;
     references?: ChatReferences;
     checkpoints?: TurnCheckpoints;
@@ -96,6 +97,7 @@ export declare class ChatSession {
     private relocating;
     private launchedRuntimeMode;
     private launchedFolders;
+    private launchedProjectConfig;
     private turnReady;
     private staleResults;
     private spokenTurnId;
@@ -233,6 +235,7 @@ export declare class ChatSession {
     private watchStart;
     private clearStartWarning;
     private requiresReplacement;
+    private loadsProjectConfig;
     private hasNativeWork;
     private processInUse;
     private replacementWaits;

package/dist/chat/chat-session.js

@@ -60,6 +60,7 @@ export class ChatSession {
     relocating = false;
     launchedRuntimeMode = null;
     launchedFolders = [];
+    launchedProjectConfig = true;
     // The checkpoint of the turn in flight; everything queued for that turn waits for it.
     turnReady = Promise.resolve();
     // Turns we settled ourselves whose `result` is still on its way; it may not close the turn after them.
@@ -1527,7 +1528,11 @@ export class ChatSession {
                 this.info.runtimeMode !== this.launchedRuntimeMode ||
                 this.info.account !== this.launchedAccount ||
                 this.info.cwd !== this.launchedCwd ||
-                !sameFolders(this.options.folders?.() ?? [], this.launchedFolders)));
+                !sameFolders(this.options.folders?.() ?? [], this.launchedFolders) ||
+                this.loadsProjectConfig() !== this.launchedProjectConfig));
+    }
+    loadsProjectConfig() {
+        return this.options.projectConfig?.() !== false;
     }
     hasNativeWork() {
         return runningInBackground(this.thread.list()).length > 0 || (this.info.background?.length ?? 0) > 0;
@@ -1551,6 +1556,10 @@ export class ChatSession {
         if (this.backend && this.starting) {
             return this.starting;
         }
+        const projectConfig = this.loadsProjectConfig();
+        if (!projectConfig && !this.options.provider.ignoresProjectConfig) {
+            return Promise.reject(new ChatError('project-config-unsupported', `${this.options.provider.name} cannot run without the configuration of its folder`));
+        }
         let env;
         try {
             env = this.options.env(this.thread.info.account);
@@ -1567,6 +1576,7 @@ export class ChatSession {
         this.launchedCwd = info.cwd;
         const folders = this.options.folders?.() ?? [];
         this.launchedFolders = folders;
+        this.launchedProjectConfig = projectConfig;
         const launch = {
             command: this.options.command,
             cwd: info.cwd,
@@ -1581,6 +1591,7 @@ export class ChatSession {
             resumeNote: this.options.resumeNote?.() ?? null,
             ...(info.goal === undefined ? {} : { goal: info.goal }),
             ...(folders.length > 0 ? { folders } : {}),
+            ...(projectConfig ? {} : { projectConfig }),
             ...(this.options.spawn ? { spawn: this.options.spawn } : {})
         };
         const made = { backend: null };

package/dist/chat/claude-backend.js

@@ -42,10 +42,17 @@ export class ClaudeBackend {
         if (this.child) {
             return Promise.resolve();
         }
-        const { selection, runtimeMode, resume, folders } = this.launch;
+        const { selection, runtimeMode, resume, folders, projectConfig } = this.launch;
         const args = [
             ...this.launch.command,
-            ...claudeArgs({ selection, runtimeMode, resume, allowedTools: this.allowedTools, ...(folders ? { folders } : {}) })
+            ...claudeArgs({
+                selection,
+                runtimeMode,
+                resume,
+                allowedTools: this.allowedTools,
+                ...(folders ? { folders } : {}),
+                ...(projectConfig === undefined ? {} : { projectConfig })
+            })
         ];
         if (this.launch.instructions !== null) {
             args.push('--append-system-prompt', this.launch.instructions);

package/dist/chat/errors.d.ts

@@ -1,4 +1,4 @@
 import { CodedError } from '../coded-error.ts';
-export type ChatErrorCode = 'refused-query' | 'stale-ui-query' | 'history-expired' | 'chat-not-found' | 'chat-unreadable' | 'chat-busy' | 'request-not-found' | 'chat-unsupported' | 'invalid-attachments' | 'subagent-not-found' | 'subagent-stale' | 'task-not-found' | 'goal-not-found' | 'transcript-missing' | 'transcript-format' | 'fork-failed' | 'turn-not-found' | 'item-not-found' | 'bookmark-not-found' | 'too-many-bookmarks' | 'visual-invalid' | 'visual-too-large';
+export type ChatErrorCode = 'refused-query' | 'stale-ui-query' | 'history-expired' | 'chat-not-found' | 'chat-unreadable' | 'chat-busy' | 'request-not-found' | 'chat-unsupported' | 'project-config-unsupported' | 'invalid-attachments' | 'subagent-not-found' | 'subagent-stale' | 'task-not-found' | 'goal-not-found' | 'transcript-missing' | 'transcript-format' | 'fork-failed' | 'turn-not-found' | 'item-not-found' | 'bookmark-not-found' | 'too-many-bookmarks' | 'visual-invalid' | 'visual-too-large';
 export declare class ChatError<TCode extends string = ChatErrorCode> extends CodedError<TCode> {
 }

package/dist/lineage.d.ts

@@ -15,6 +15,9 @@ declare const LineageSchema: z.ZodObject<{
     }>>;
     createdAt: z.ZodNumber;
     endedAt: z.ZodOptional<z.ZodNumber>;
+    peer: z.ZodOptional<z.ZodObject<{
+        machineId: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 type Lineage = z.infer<typeof LineageSchema>;
 export declare class AgentLineageStore {
@@ -33,6 +36,9 @@ export declare class AgentLineageStore {
         openedBy: string;
     }>;
     ceilingOf(nodeId: string): RuntimeMode | null;
+    peerOf(nodeId: string): {
+        machineId: string;
+    } | null;
     depthOf(nodeId: string): number;
     openedCount(callerId: string, include?: (nodeId: string) => boolean): number;
     madeBy(nodeId: string): string | null;

package/dist/lineage.js

@@ -18,7 +18,9 @@ const LineageSchema = z.object({
     ceiling: RuntimeModeSchema.optional(),
     createdAt: z.number(),
     /* When stopping or deleting the node that opened it ended this one too; a cascade never ends a node twice. */
-    endedAt: z.number().optional()
+    endedAt: z.number().optional(),
+    /* Set when the agent that opened this one runs on another machine; `openedBy` then names it there, not a node here. */
+    peer: z.object({ machineId: z.string().min(1) }).optional()
 });
 /* Opened by the agent it names, which is what every rule about children is about; a fork lives on its own. */
 function openedByAgent(entry) {
@@ -96,6 +98,10 @@ export class AgentLineageStore {
         const entry = this.opened.get(nodeId);
         return entry !== undefined && openedByAgent(entry) ? (entry.ceiling ?? null) : null;
     }
+    /* The machine whose agent opened this node, or null for a node opened on this one. */
+    peerOf(nodeId) {
+        return this.opened.get(nodeId)?.peer ?? null;
+    }
     /* How deep a node sits. A node nobody wrote down is one a person made, which is where a chain starts. */
     depthOf(nodeId) {
         return this.opened.get(nodeId)?.depth ?? 0;

package/dist/providers/claude-provider.js

@@ -10,6 +10,7 @@ export function createClaudeProvider(options = {}) {
         capabilities: CLAUDE_CAPABILITIES,
         command: ['claude'],
         resumeCommand: CLAUDE_RESUME_COMMAND,
+        ignoresProjectConfig: true,
         // Read from the strings of Claude Code 2.1.282; never HOME, which moves the keychain lookup along with it.
         home: {
             env: 'CLAUDE_CONFIG_DIR',

package/dist/providers/claude.d.ts

@@ -6,6 +6,7 @@ interface ClaudeLaunch {
     resume: string | null;
     allowedTools?: readonly string[];
     folders?: readonly string[];
+    projectConfig?: boolean;
 }
 export declare function claudeArgs(launch: ClaudeLaunch): string[];
 export declare function claudeEnv(selection: ModelSelection): Record<string, string>;

package/dist/providers/claude.js

@@ -11,6 +11,12 @@ const CLAUDE_CHAT_ARGS = [
     '--permission-prompt-tool',
     'stdio'
 ];
+/*
+ * Only the person's own settings load, and only the MCP servers a caller passes: the project and
+ * local settings files, the project's `.mcp.json` and the project's skills and commands stay out.
+ * The latter flag also drops the person's own MCP servers and connectors (measured on Claude Code 2.1.300).
+ */
+const CLAUDE_WITHOUT_PROJECT_CONFIG_ARGS = ['--setting-sources=user', '--strict-mcp-config'];
 // Effort values the CLI takes on its flag; anything else is asked for in the prompt instead.
 const FLAG_EFFORTS = new Set(['low', 'medium', 'high', 'xhigh', 'max']);
 const PERMISSION_MODE = {
@@ -30,7 +36,8 @@ export function claudeArgs(launch) {
     const args = [
         ...CLAUDE_CHAT_ARGS,
         ...(launch.allowedTools ?? []).map((tool) => `--allowedTools=${tool}`),
-        ...(launch.folders ?? []).map((folder) => `--add-dir=${folder}`)
+        ...(launch.folders ?? []).map((folder) => `--add-dir=${folder}`),
+        ...(launch.projectConfig === false ? CLAUDE_WITHOUT_PROJECT_CONFIG_ARGS : [])
     ];
     const contextWindow = launch.selection.options.contextWindow;
     args.push('--model', `${launch.selection.model}${contextWindow === '1m' ? '[1m]' : ''}`);

package/dist/providers/codex-provider.js

@@ -11,6 +11,9 @@ export function createCodexProvider(options = {}) {
         capabilities: CODEX_CAPABILITIES,
         command: ['codex', ...CODEX_CHAT_ARGS],
         resumeCommand: CODEX_RESUME_COMMAND,
+        // A folder's `.codex` layer loads once the person's own config trusts the folder or its repository, which a worktree inherits;
+        // neither `-c` nor `project_root_markers` turns it off, and `--disable hooks` would take the person's hooks along (Codex 0.162.1).
+        ignoresProjectConfig: false,
         // The auth variables Codex 0.157 names in its own "no Codex credentials were found" advice.
         home: { env: 'CODEX_HOME', fallback: '.codex', loginEnv: ['OPENAI_API_KEY', 'CODEX_API_KEY', 'CODEX_ACCESS_TOKEN'], loginCommand: 'codex login' },
         detect: detectCli,

package/dist/providers/provider.d.ts

@@ -15,6 +15,7 @@ export interface ChatProvider {
     readonly capabilities: ProviderCapabilities;
     readonly command: string[];
     readonly resumeCommand: string;
+    readonly ignoresProjectConfig?: boolean;
     readonly home?: ProviderHome;
     oneShotArgs?(prompt: string): string[];
     readonly oneShotStdinArgs?: readonly string[];

package/dist/tasks/task-coordinator.d.ts

@@ -34,6 +34,7 @@ export declare class TaskCoordinator {
     constructor(deps: TaskCoordinatorDeps);
     stop(): void;
     settled(): Promise<void>;
+    settleFromElsewhere(taskId: string, result: TaskResult, status?: 'done' | 'failed'): Promise<Task | null>;
     chatEvent(event: AgentEvent): void;
     agentEnded(childId: string, text: string): void;
     startFailed(childId: string, error: unknown): void;
@@ -41,6 +42,7 @@ export declare class TaskCoordinator {
     done(childId: string, text: string): Promise<Task | null>;
     outlasted(childId: string, commands: readonly string[], cause?: 'limit' | 'restart'): Promise<Task | null>;
     cancelled(tasks: readonly Task[]): void;
+    private localTask;
     private failed;
     private answers;
     private turnEnded;

package/dist/tasks/task-coordinator.js

@@ -75,6 +75,18 @@ export class TaskCoordinator {
         }
         await this.deps.tasks.settled();
     }
+    /*
+     * Settles a task whose child runs on another machine, which no chat here observes: the answer comes
+     * from there. Wakes the parent once however often it is told; null when the task is no such task or
+     * was not open any more.
+     */
+    async settleFromElsewhere(taskId, result, status = 'done') {
+        const task = this.deps.tasks.get(taskId);
+        if (task?.machine === undefined || task.status !== 'open') {
+            return null;
+        }
+        return this.settleNow(task, status, result);
+    }
     chatEvent(event) {
         if (this.stopped || event.event !== 'chat.event') {
             return;
@@ -105,7 +117,7 @@ export class TaskCoordinator {
         if (this.stopped) {
             return;
         }
-        const task = this.deps.tasks.openFor(childId);
+        const task = this.localTask(childId);
         if (!task || !this.deps.placed(childId)) {
             return;
         }
@@ -120,7 +132,7 @@ export class TaskCoordinator {
     }
     /* `done` from the child itself, which wins over whatever else was about to settle it. */
     async done(childId, text) {
-        const task = this.deps.tasks.openFor(childId);
+        const task = this.localTask(childId);
         if (!task) {
             return null;
         }
@@ -132,7 +144,7 @@ export class TaskCoordinator {
      * does when the CLI goes within one run.
      */
     async outlasted(childId, commands, cause = 'limit') {
-        const task = this.deps.tasks.openFor(childId);
+        const task = this.localTask(childId);
         const items = this.deps.chatItems(childId);
         if (this.stopped || !task || items === null || this.delegating(childId)) {
             return null;
@@ -153,9 +165,14 @@ export class TaskCoordinator {
             this.recheck(task.parentId);
         }
     }
+    /* The open task a chat here works on; one whose child runs on another machine is settled from there. */
+    localTask(childId) {
+        const task = this.deps.tasks.openFor(childId);
+        return task?.machine === undefined ? task : undefined;
+    }
     /* An open task of this child that nothing can carry any more. */
     failed(childId, text) {
-        const task = this.deps.tasks.openFor(childId);
+        const task = this.localTask(childId);
         if (!task || this.stopped) {
             return;
         }
@@ -179,7 +196,7 @@ export class TaskCoordinator {
         return own === -1 ? task.requiresTaskTurn !== true && turn.createdAt >= task.createdAt : own < items.findIndex((item) => item.id === turn.id);
     }
     turnEnded(chatId, turn) {
-        const task = this.deps.tasks.openFor(chatId);
+        const task = this.localTask(chatId);
         const items = this.deps.chatItems(chatId);
         if (!task || items === null || !this.answers(items, turn, task) || this.delegating(chatId)) {
             return;
@@ -297,7 +314,7 @@ export class TaskCoordinator {
     }
     /* A child that took up work again is no longer waiting out a limit. */
     turnStarted(chatId) {
-        const task = this.deps.tasks.openFor(chatId);
+        const task = this.localTask(chatId);
         if (task?.paused !== undefined) {
             this.hold(task, null);
         }
@@ -306,7 +323,7 @@ export class TaskCoordinator {
         void this.deps.tasks.pause(task.id, paused).catch((e) => console.error(`Pausing task ${task.id} failed:`, errorText(e)));
     }
     recheck(chatId) {
-        const task = this.deps.tasks.openFor(chatId);
+        const task = this.localTask(chatId);
         const items = this.deps.chatItems(chatId);
         if (!task || items === null || this.delegating(chatId)) {
             return;

package/dist/tasks/task-store.d.ts

@@ -25,6 +25,7 @@ export declare class TaskStore {
         prompt: string;
         batchId?: string;
         requiresTaskTurn?: boolean;
+        machine?: string;
     }, now: number): Promise<Task>;
     all(): Task[];
     settled(): Promise<void>;

package/dist/tasks/wiring.d.ts

@@ -12,6 +12,7 @@ export interface TaskRecord {
     childId: string;
     title: string;
     prompt: string;
+    machine?: string;
 }
 export interface TaskVerbs {
     open(record: TaskRecord & {

package/dist/tasks/wiring.js

@@ -56,7 +56,15 @@ export function wireTasks(deps) {
         }
     });
     const requests = chatRequests(chats);
-    const waiting = new WaitingObserver({ openTask: (childId) => deps.tasks.openFor(childId), enqueue, now });
+    const waiting = new WaitingObserver({
+        // A child on another machine asks its questions there.
+        openTask: (childId) => {
+            const task = deps.tasks.openFor(childId);
+            return task?.machine === undefined ? task : undefined;
+        },
+        enqueue,
+        now
+    });
     chats.observe((event) => {
         coordinator.chatEvent(event);
         waiting.chatEvent(event);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adecore/agents",
-  "version": "0.25.3",
+  "version": "0.25.5",
   "description": "Node-compatible agent chat hosts, providers, accounts, usage and durable task coordination.",
   "type": "module",
   "exports": {
@@ -81,8 +81,8 @@
     "test": "bun --conditions=source test"
   },
   "dependencies": {
-    "@adecore/agent-contracts": "0.25.3",
-    "@adecore/intelligent-ui": "0.25.3",
+    "@adecore/agent-contracts": "0.25.5",
+    "@adecore/intelligent-ui": "0.25.5",
     "zod": "^4.6.5"
   },
   "devDependencies": {

package/src/chat/backend.ts

@@ -45,6 +45,8 @@ export interface BackendLaunch {
     // Folders outside `cwd` the agent may reach without asking. Claude Code takes them as `--add-dir`; Codex's
     // sandbox reads the whole disk already and keeps writes to the workspace, so it needs nothing.
     folders?: readonly string[];
+    // False keeps the CLI from loading configuration out of `cwd` (settings, hooks, MCP servers); absent loads it.
+    projectConfig?: boolean;
     // How the CLI is started; a test runs a fake in the same process, everything else spawns it.
     spawn?: SpawnChatProcess;
     saveGeneratedImage?(ref: string, upload: ChatAttachmentUpload): Promise<ChatAttachment>;

package/src/chat/chat-core.ts

@@ -125,6 +125,12 @@ export interface ChatCoreHooks {
      * next turn in a new process that resumes the thread, and never cuts a turn in flight.
      */
     foldersFor?(chatId: string): readonly string[];
+    /*
+     * Whether this chat's CLI loads the configuration of its working folder; false for a folder whose contents
+     * the host does not trust. Asked before every turn, like the folders. A provider with `ignoresProjectConfig`
+     * unset refuses the turn with `project-config-unsupported`, so a host can check the flag first.
+     */
+    projectConfigFor?(chatId: string): boolean;
     /* Whether no list of chats shows this one, which `ChatInfo.hidden` says to every client. */
     hiddenFor?(chatId: string): boolean;
     /* What the host says in front of a chat's next real prompt, beside what the chat keeps itself. */
@@ -490,6 +496,7 @@ export class ChatCore {
             instructions: () => (this.hooks.instructionsFor ? this.hooks.instructionsFor(payload.chatId) : this.instructions),
             resumeNote: () => this.hooks.resumeNoteFor?.(payload.chatId) ?? null,
             folders: () => this.hooks.foldersFor?.(payload.chatId) ?? [],
+            projectConfig: () => this.hooks.projectConfigFor?.(payload.chatId) ?? true,
             ...(promptNotes ? { promptNotes } : {}),
             ...(references ? { references } : {}),
             ...(this.checkpoints ? { checkpoints: this.checkpoints } : {}),

package/src/chat/chat-session.ts

@@ -78,6 +78,8 @@ export interface ChatSessionOptions {
     resumeNote?(): string | null;
     // The folders beside the working directory, asked before every turn; a change starts the next turn in a new process.
     folders?(): readonly string[];
+    // False runs the CLI without the configuration of the working folder; asked before every turn like the folders.
+    projectConfig?(): boolean;
     promptNotes?: PromptNotes;
     references?: ChatReferences;
     // Trees per turn, so a settled turn can show what the working tree holds against its start.
@@ -184,6 +186,7 @@ export class ChatSession {
     private relocating = false;
     private launchedRuntimeMode: RuntimeMode | null = null;
     private launchedFolders: readonly string[] = [];
+    private launchedProjectConfig = true;
     // The checkpoint of the turn in flight; everything queued for that turn waits for it.
     private turnReady: Promise<void> = Promise.resolve();
     // Turns we settled ourselves whose `result` is still on its way; it may not close the turn after them.
@@ -1760,10 +1763,15 @@ export class ChatSession {
                 this.info.runtimeMode !== this.launchedRuntimeMode ||
                 this.info.account !== this.launchedAccount ||
                 this.info.cwd !== this.launchedCwd ||
-                !sameFolders(this.options.folders?.() ?? [], this.launchedFolders))
+                !sameFolders(this.options.folders?.() ?? [], this.launchedFolders) ||
+                this.loadsProjectConfig() !== this.launchedProjectConfig)
         );
     }
 
+    private loadsProjectConfig(): boolean {
+        return this.options.projectConfig?.() !== false;
+    }
+
     private hasNativeWork(): boolean {
         return runningInBackground(this.thread.list()).length > 0 || (this.info.background?.length ?? 0) > 0;
     }
@@ -1789,6 +1797,12 @@ export class ChatSession {
         if (this.backend && this.starting) {
             return this.starting;
         }
+        const projectConfig = this.loadsProjectConfig();
+        if (!projectConfig && !this.options.provider.ignoresProjectConfig) {
+            return Promise.reject(
+                new ChatError('project-config-unsupported', `${this.options.provider.name} cannot run without the configuration of its folder`)
+            );
+        }
         let env: Record<string, string>;
         try {
             env = this.options.env(this.thread.info.account);
@@ -1804,6 +1818,7 @@ export class ChatSession {
         this.launchedCwd = info.cwd;
         const folders = this.options.folders?.() ?? [];
         this.launchedFolders = folders;
+        this.launchedProjectConfig = projectConfig;
         const launch: BackendLaunch = {
             command: this.options.command,
             cwd: info.cwd,
@@ -1818,6 +1833,7 @@ export class ChatSession {
             resumeNote: this.options.resumeNote?.() ?? null,
             ...(info.goal === undefined ? {} : { goal: info.goal }),
             ...(folders.length > 0 ? { folders } : {}),
+            ...(projectConfig ? {} : { projectConfig }),
             ...(this.options.spawn ? { spawn: this.options.spawn } : {})
         };
         const made: { backend: ChatBackend | null } = { backend: null };

package/src/chat/claude-backend.ts

@@ -54,10 +54,17 @@ export class ClaudeBackend implements ChatBackend {
         if (this.child) {
             return Promise.resolve();
         }
-        const { selection, runtimeMode, resume, folders } = this.launch;
+        const { selection, runtimeMode, resume, folders, projectConfig } = this.launch;
         const args = [
             ...this.launch.command,
-            ...claudeArgs({ selection, runtimeMode, resume, allowedTools: this.allowedTools, ...(folders ? { folders } : {}) })
+            ...claudeArgs({
+                selection,
+                runtimeMode,
+                resume,
+                allowedTools: this.allowedTools,
+                ...(folders ? { folders } : {}),
+                ...(projectConfig === undefined ? {} : { projectConfig })
+            })
         ];
         if (this.launch.instructions !== null) {
             args.push('--append-system-prompt', this.launch.instructions);

package/src/chat/errors.ts

@@ -10,6 +10,8 @@ export type ChatErrorCode =
     | 'chat-busy'
     | 'request-not-found'
     | 'chat-unsupported'
+    // The host asked for a chat that ignores the configuration of its folder, and this CLI cannot.
+    | 'project-config-unsupported'
     | 'invalid-attachments'
     | 'subagent-not-found'
     // The sub-agent was started by a CLI process that has ended, so no process here can stop it.

package/src/lineage.ts

@@ -19,7 +19,9 @@ const LineageSchema = z.object({
     ceiling: RuntimeModeSchema.optional(),
     createdAt: z.number(),
     /* When stopping or deleting the node that opened it ended this one too; a cascade never ends a node twice. */
-    endedAt: z.number().optional()
+    endedAt: z.number().optional(),
+    /* Set when the agent that opened this one runs on another machine; `openedBy` then names it there, not a node here. */
+    peer: z.object({ machineId: z.string().min(1) }).optional()
 });
 
 type Lineage = z.infer<typeof LineageSchema>;
@@ -115,6 +117,11 @@ export class AgentLineageStore {
         return entry !== undefined && openedByAgent(entry) ? (entry.ceiling ?? null) : null;
     }
 
+    /* The machine whose agent opened this node, or null for a node opened on this one. */
+    peerOf(nodeId: string): { machineId: string } | null {
+        return this.opened.get(nodeId)?.peer ?? null;
+    }
+
     /* How deep a node sits. A node nobody wrote down is one a person made, which is where a chain starts. */
     depthOf(nodeId: string): number {
         return this.opened.get(nodeId)?.depth ?? 0;

package/src/providers/claude-provider.ts

@@ -12,6 +12,7 @@ export function createClaudeProvider(options: ClaudeBackendOptions = {}): ChatPr
         capabilities: CLAUDE_CAPABILITIES,
         command: ['claude'],
         resumeCommand: CLAUDE_RESUME_COMMAND,
+        ignoresProjectConfig: true,
         // Read from the strings of Claude Code 2.1.282; never HOME, which moves the keychain lookup along with it.
         home: {
             env: 'CLAUDE_CONFIG_DIR',

package/src/providers/claude.ts

@@ -14,6 +14,13 @@ const CLAUDE_CHAT_ARGS = [
     'stdio'
 ];
 
+/*
+ * Only the person's own settings load, and only the MCP servers a caller passes: the project and
+ * local settings files, the project's `.mcp.json` and the project's skills and commands stay out.
+ * The latter flag also drops the person's own MCP servers and connectors (measured on Claude Code 2.1.300).
+ */
+const CLAUDE_WITHOUT_PROJECT_CONFIG_ARGS = ['--setting-sources=user', '--strict-mcp-config'];
+
 // Effort values the CLI takes on its flag; anything else is asked for in the prompt instead.
 const FLAG_EFFORTS = new Set(['low', 'medium', 'high', 'xhigh', 'max']);
 
@@ -37,6 +44,7 @@ interface ClaudeLaunch {
     resume: string | null;
     allowedTools?: readonly string[];
     folders?: readonly string[];
+    projectConfig?: boolean;
 }
 
 export function claudeArgs(launch: ClaudeLaunch): string[] {
@@ -44,7 +52,8 @@ export function claudeArgs(launch: ClaudeLaunch): string[] {
     const args = [
         ...CLAUDE_CHAT_ARGS,
         ...(launch.allowedTools ?? []).map((tool) => `--allowedTools=${tool}`),
-        ...(launch.folders ?? []).map((folder) => `--add-dir=${folder}`)
+        ...(launch.folders ?? []).map((folder) => `--add-dir=${folder}`),
+        ...(launch.projectConfig === false ? CLAUDE_WITHOUT_PROJECT_CONFIG_ARGS : [])
     ];
     const contextWindow = launch.selection.options.contextWindow;
     args.push('--model', `${launch.selection.model}${contextWindow === '1m' ? '[1m]' : ''}`);

package/src/providers/codex-provider.ts

@@ -13,6 +13,9 @@ export function createCodexProvider(options: CodexBackendOptions = {}): ChatProv
         capabilities: CODEX_CAPABILITIES,
         command: ['codex', ...CODEX_CHAT_ARGS],
         resumeCommand: CODEX_RESUME_COMMAND,
+        // A folder's `.codex` layer loads once the person's own config trusts the folder or its repository, which a worktree inherits;
+        // neither `-c` nor `project_root_markers` turns it off, and `--disable hooks` would take the person's hooks along (Codex 0.162.1).
+        ignoresProjectConfig: false,
         // The auth variables Codex 0.157 names in its own "no Codex credentials were found" advice.
         home: { env: 'CODEX_HOME', fallback: '.codex', loginEnv: ['OPENAI_API_KEY', 'CODEX_API_KEY', 'CODEX_ACCESS_TOKEN'], loginCommand: 'codex login' },
         detect: detectCli,

package/src/providers/provider.ts

@@ -28,6 +28,8 @@ export interface ChatProvider {
     readonly command: string[];
     // What a terminal runs to continue one of this CLI's sessions; `{id}` stands for the session id.
     readonly resumeCommand: string;
+    /* Whether `BackendLaunch.projectConfig: false` keeps this CLI from loading configuration out of the working folder; absent is no. */
+    readonly ignoresProjectConfig?: boolean;
     /* Where this CLI keeps its login, settings and transcripts, which is what an account is. Absent on a
        CLI with no variable to move that folder, which then only has its default account. */
     readonly home?: ProviderHome;

package/src/tasks/task-coordinator.ts

@@ -126,6 +126,19 @@ export class TaskCoordinator {
         await this.deps.tasks.settled();
     }
 
+    /*
+     * Settles a task whose child runs on another machine, which no chat here observes: the answer comes
+     * from there. Wakes the parent once however often it is told; null when the task is no such task or
+     * was not open any more.
+     */
+    async settleFromElsewhere(taskId: string, result: TaskResult, status: 'done' | 'failed' = 'done'): Promise<Task | null> {
+        const task = this.deps.tasks.get(taskId);
+        if (task?.machine === undefined || task.status !== 'open') {
+            return null;
+        }
+        return this.settleNow(task, status, result);
+    }
+
     chatEvent(event: AgentEvent): void {
         if (this.stopped || event.event !== 'chat.event') {
             return;
@@ -154,7 +167,7 @@ export class TaskCoordinator {
         if (this.stopped) {
             return;
         }
-        const task = this.deps.tasks.openFor(childId);
+        const task = this.localTask(childId);
         if (!task || !this.deps.placed(childId)) {
             return;
         }
@@ -172,7 +185,7 @@ export class TaskCoordinator {
 
     /* `done` from the child itself, which wins over whatever else was about to settle it. */
     async done(childId: string, text: string): Promise<Task | null> {
-        const task = this.deps.tasks.openFor(childId);
+        const task = this.localTask(childId);
         if (!task) {
             return null;
         }
@@ -185,7 +198,7 @@ export class TaskCoordinator {
      * does when the CLI goes within one run.
      */
     async outlasted(childId: string, commands: readonly string[], cause: 'limit' | 'restart' = 'limit'): Promise<Task | null> {
-        const task = this.deps.tasks.openFor(childId);
+        const task = this.localTask(childId);
         const items = this.deps.chatItems(childId);
         if (this.stopped || !task || items === null || this.delegating(childId)) {
             return null;
@@ -208,9 +221,15 @@ export class TaskCoordinator {
         }
     }
 
+    /* The open task a chat here works on; one whose child runs on another machine is settled from there. */
+    private localTask(childId: string): Task | undefined {
+        const task = this.deps.tasks.openFor(childId);
+        return task?.machine === undefined ? task : undefined;
+    }
+
     /* An open task of this child that nothing can carry any more. */
     private failed(childId: string, text: string): void {
-        const task = this.deps.tasks.openFor(childId);
+        const task = this.localTask(childId);
         if (!task || this.stopped) {
             return;
         }
@@ -236,7 +255,7 @@ export class TaskCoordinator {
     }
 
     private turnEnded(chatId: string, turn: ChatTurnItem): void {
-        const task = this.deps.tasks.openFor(chatId);
+        const task = this.localTask(chatId);
         const items = this.deps.chatItems(chatId);
         if (!task || items === null || !this.answers(items, turn, task) || this.delegating(chatId)) {
             return;
@@ -360,7 +379,7 @@ export class TaskCoordinator {
 
     /* A child that took up work again is no longer waiting out a limit. */
     private turnStarted(chatId: string): void {
-        const task = this.deps.tasks.openFor(chatId);
+        const task = this.localTask(chatId);
         if (task?.paused !== undefined) {
             this.hold(task, null);
         }
@@ -371,7 +390,7 @@ export class TaskCoordinator {
     }
 
     private recheck(chatId: string): void {
-        const task = this.deps.tasks.openFor(chatId);
+        const task = this.localTask(chatId);
         const items = this.deps.chatItems(chatId);
         if (!task || items === null || this.delegating(chatId)) {
             return;

package/src/tasks/task-store.ts

@@ -51,7 +51,16 @@ export class TaskStore {
     }
 
     async open(
-        record: { projectId: string; parentId: string; childId: string; title: string; prompt: string; batchId?: string; requiresTaskTurn?: boolean },
+        record: {
+            projectId: string;
+            parentId: string;
+            childId: string;
+            title: string;
+            prompt: string;
+            batchId?: string;
+            requiresTaskTurn?: boolean;
+            machine?: string;
+        },
         now: number
     ): Promise<Task> {
         const task: Task = {

package/src/tasks/wiring.ts

@@ -22,6 +22,8 @@ export interface TaskRecord {
     childId: string;
     title: string;
     prompt: string;
+    /* The machine the child runs on, when it is not this one. */
+    machine?: string;
 }
 
 /* What the verbs of a context CLI reach of the tasks. */
@@ -127,7 +129,15 @@ export function wireTasks(deps: TaskWiringDeps): TaskWiring {
     });
 
     const requests = chatRequests(chats);
-    const waiting = new WaitingObserver({ openTask: (childId) => deps.tasks.openFor(childId), enqueue, now });
+    const waiting = new WaitingObserver({
+        // A child on another machine asks its questions there.
+        openTask: (childId) => {
+            const task = deps.tasks.openFor(childId);
+            return task?.machine === undefined ? task : undefined;
+        },
+        enqueue,
+        now
+    });
 
     chats.observe((event) => {
         coordinator.chatEvent(event);