@adecore/agents 0.25.4 → 0.25.5

package/dist/chat/backend.d.ts

@@ -14,6 +14,7 @@ export interface BackendLaunch {
     resumeNote: string | null;
     goal?: ChatGoal;
     folders?: readonly string[];
+    projectConfig?: boolean;
     spawn?: SpawnChatProcess;
     saveGeneratedImage?(ref: string, upload: ChatAttachmentUpload): Promise<ChatAttachment>;
 }

package/dist/chat/chat-core.d.ts

@@ -30,6 +30,7 @@ export interface ChatCoreHooks {
     instructionsFor?(chatId: string): string | null;
     resumeNoteFor?(chatId: string): string | null;
     foldersFor?(chatId: string): readonly string[];
+    projectConfigFor?(chatId: string): boolean;
     hiddenFor?(chatId: string): boolean;
     promptNotesFor?(chatId: string): PromptNotes | undefined;
     referencesFor?(chatId: string): ChatReferences | undefined;

package/dist/chat/chat-core.js

@@ -307,6 +307,7 @@ export class ChatCore {
             instructions: () => (this.hooks.instructionsFor ? this.hooks.instructionsFor(payload.chatId) : this.instructions),
             resumeNote: () => this.hooks.resumeNoteFor?.(payload.chatId) ?? null,
             folders: () => this.hooks.foldersFor?.(payload.chatId) ?? [],
+            projectConfig: () => this.hooks.projectConfigFor?.(payload.chatId) ?? true,
             ...(promptNotes ? { promptNotes } : {}),
             ...(references ? { references } : {}),
             ...(this.checkpoints ? { checkpoints: this.checkpoints } : {}),

package/dist/chat/chat-session.d.ts

@@ -42,6 +42,7 @@ export interface ChatSessionOptions {
     instructions?(): string | null;
     resumeNote?(): string | null;
     folders?(): readonly string[];
+    projectConfig?(): boolean;
     promptNotes?: PromptNotes;
     references?: ChatReferences;
     checkpoints?: TurnCheckpoints;
@@ -96,6 +97,7 @@ export declare class ChatSession {
     private relocating;
     private launchedRuntimeMode;
     private launchedFolders;
+    private launchedProjectConfig;
     private turnReady;
     private staleResults;
     private spokenTurnId;
@@ -233,6 +235,7 @@ export declare class ChatSession {
     private watchStart;
     private clearStartWarning;
     private requiresReplacement;
+    private loadsProjectConfig;
     private hasNativeWork;
     private processInUse;
     private replacementWaits;

package/dist/chat/chat-session.js

@@ -60,6 +60,7 @@ export class ChatSession {
     relocating = false;
     launchedRuntimeMode = null;
     launchedFolders = [];
+    launchedProjectConfig = true;
     // The checkpoint of the turn in flight; everything queued for that turn waits for it.
     turnReady = Promise.resolve();
     // Turns we settled ourselves whose `result` is still on its way; it may not close the turn after them.
@@ -1527,7 +1528,11 @@ export class ChatSession {
                 this.info.runtimeMode !== this.launchedRuntimeMode ||
                 this.info.account !== this.launchedAccount ||
                 this.info.cwd !== this.launchedCwd ||
-                !sameFolders(this.options.folders?.() ?? [], this.launchedFolders)));
+                !sameFolders(this.options.folders?.() ?? [], this.launchedFolders) ||
+                this.loadsProjectConfig() !== this.launchedProjectConfig));
+    }
+    loadsProjectConfig() {
+        return this.options.projectConfig?.() !== false;
     }
     hasNativeWork() {
         return runningInBackground(this.thread.list()).length > 0 || (this.info.background?.length ?? 0) > 0;
@@ -1551,6 +1556,10 @@ export class ChatSession {
         if (this.backend && this.starting) {
             return this.starting;
         }
+        const projectConfig = this.loadsProjectConfig();
+        if (!projectConfig && !this.options.provider.ignoresProjectConfig) {
+            return Promise.reject(new ChatError('project-config-unsupported', `${this.options.provider.name} cannot run without the configuration of its folder`));
+        }
         let env;
         try {
             env = this.options.env(this.thread.info.account);
@@ -1567,6 +1576,7 @@ export class ChatSession {
         this.launchedCwd = info.cwd;
         const folders = this.options.folders?.() ?? [];
         this.launchedFolders = folders;
+        this.launchedProjectConfig = projectConfig;
         const launch = {
             command: this.options.command,
             cwd: info.cwd,
@@ -1581,6 +1591,7 @@ export class ChatSession {
             resumeNote: this.options.resumeNote?.() ?? null,
             ...(info.goal === undefined ? {} : { goal: info.goal }),
             ...(folders.length > 0 ? { folders } : {}),
+            ...(projectConfig ? {} : { projectConfig }),
             ...(this.options.spawn ? { spawn: this.options.spawn } : {})
         };
         const made = { backend: null };

package/dist/chat/claude-backend.js

@@ -42,10 +42,17 @@ export class ClaudeBackend {
         if (this.child) {
             return Promise.resolve();
         }
-        const { selection, runtimeMode, resume, folders } = this.launch;
+        const { selection, runtimeMode, resume, folders, projectConfig } = this.launch;
         const args = [
             ...this.launch.command,
-            ...claudeArgs({ selection, runtimeMode, resume, allowedTools: this.allowedTools, ...(folders ? { folders } : {}) })
+            ...claudeArgs({
+                selection,
+                runtimeMode,
+                resume,
+                allowedTools: this.allowedTools,
+                ...(folders ? { folders } : {}),
+                ...(projectConfig === undefined ? {} : { projectConfig })
+            })
         ];
         if (this.launch.instructions !== null) {
             args.push('--append-system-prompt', this.launch.instructions);

package/dist/chat/errors.d.ts

@@ -1,4 +1,4 @@
 import { CodedError } from '../coded-error.ts';
-export type ChatErrorCode = 'refused-query' | 'stale-ui-query' | 'history-expired' | 'chat-not-found' | 'chat-unreadable' | 'chat-busy' | 'request-not-found' | 'chat-unsupported' | 'invalid-attachments' | 'subagent-not-found' | 'subagent-stale' | 'task-not-found' | 'goal-not-found' | 'transcript-missing' | 'transcript-format' | 'fork-failed' | 'turn-not-found' | 'item-not-found' | 'bookmark-not-found' | 'too-many-bookmarks' | 'visual-invalid' | 'visual-too-large';
+export type ChatErrorCode = 'refused-query' | 'stale-ui-query' | 'history-expired' | 'chat-not-found' | 'chat-unreadable' | 'chat-busy' | 'request-not-found' | 'chat-unsupported' | 'project-config-unsupported' | 'invalid-attachments' | 'subagent-not-found' | 'subagent-stale' | 'task-not-found' | 'goal-not-found' | 'transcript-missing' | 'transcript-format' | 'fork-failed' | 'turn-not-found' | 'item-not-found' | 'bookmark-not-found' | 'too-many-bookmarks' | 'visual-invalid' | 'visual-too-large';
 export declare class ChatError<TCode extends string = ChatErrorCode> extends CodedError<TCode> {
 }

package/dist/providers/claude-provider.js

@@ -10,6 +10,7 @@ export function createClaudeProvider(options = {}) {
         capabilities: CLAUDE_CAPABILITIES,
         command: ['claude'],
         resumeCommand: CLAUDE_RESUME_COMMAND,
+        ignoresProjectConfig: true,
         // Read from the strings of Claude Code 2.1.282; never HOME, which moves the keychain lookup along with it.
         home: {
             env: 'CLAUDE_CONFIG_DIR',

package/dist/providers/claude.d.ts

@@ -6,6 +6,7 @@ interface ClaudeLaunch {
     resume: string | null;
     allowedTools?: readonly string[];
     folders?: readonly string[];
+    projectConfig?: boolean;
 }
 export declare function claudeArgs(launch: ClaudeLaunch): string[];
 export declare function claudeEnv(selection: ModelSelection): Record<string, string>;

package/dist/providers/claude.js

@@ -11,6 +11,12 @@ const CLAUDE_CHAT_ARGS = [
     '--permission-prompt-tool',
     'stdio'
 ];
+/*
+ * Only the person's own settings load, and only the MCP servers a caller passes: the project and
+ * local settings files, the project's `.mcp.json` and the project's skills and commands stay out.
+ * The latter flag also drops the person's own MCP servers and connectors (measured on Claude Code 2.1.300).
+ */
+const CLAUDE_WITHOUT_PROJECT_CONFIG_ARGS = ['--setting-sources=user', '--strict-mcp-config'];
 // Effort values the CLI takes on its flag; anything else is asked for in the prompt instead.
 const FLAG_EFFORTS = new Set(['low', 'medium', 'high', 'xhigh', 'max']);
 const PERMISSION_MODE = {
@@ -30,7 +36,8 @@ export function claudeArgs(launch) {
     const args = [
         ...CLAUDE_CHAT_ARGS,
         ...(launch.allowedTools ?? []).map((tool) => `--allowedTools=${tool}`),
-        ...(launch.folders ?? []).map((folder) => `--add-dir=${folder}`)
+        ...(launch.folders ?? []).map((folder) => `--add-dir=${folder}`),
+        ...(launch.projectConfig === false ? CLAUDE_WITHOUT_PROJECT_CONFIG_ARGS : [])
     ];
     const contextWindow = launch.selection.options.contextWindow;
     args.push('--model', `${launch.selection.model}${contextWindow === '1m' ? '[1m]' : ''}`);

package/dist/providers/codex-provider.js

@@ -11,6 +11,9 @@ export function createCodexProvider(options = {}) {
         capabilities: CODEX_CAPABILITIES,
         command: ['codex', ...CODEX_CHAT_ARGS],
         resumeCommand: CODEX_RESUME_COMMAND,
+        // A folder's `.codex` layer loads once the person's own config trusts the folder or its repository, which a worktree inherits;
+        // neither `-c` nor `project_root_markers` turns it off, and `--disable hooks` would take the person's hooks along (Codex 0.162.1).
+        ignoresProjectConfig: false,
         // The auth variables Codex 0.157 names in its own "no Codex credentials were found" advice.
         home: { env: 'CODEX_HOME', fallback: '.codex', loginEnv: ['OPENAI_API_KEY', 'CODEX_API_KEY', 'CODEX_ACCESS_TOKEN'], loginCommand: 'codex login' },
         detect: detectCli,

package/dist/providers/provider.d.ts

@@ -15,6 +15,7 @@ export interface ChatProvider {
     readonly capabilities: ProviderCapabilities;
     readonly command: string[];
     readonly resumeCommand: string;
+    readonly ignoresProjectConfig?: boolean;
     readonly home?: ProviderHome;
     oneShotArgs?(prompt: string): string[];
     readonly oneShotStdinArgs?: readonly string[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adecore/agents",
-  "version": "0.25.4",
+  "version": "0.25.5",
   "description": "Node-compatible agent chat hosts, providers, accounts, usage and durable task coordination.",
   "type": "module",
   "exports": {
@@ -81,8 +81,8 @@
     "test": "bun --conditions=source test"
   },
   "dependencies": {
-    "@adecore/agent-contracts": "0.25.4",
-    "@adecore/intelligent-ui": "0.25.4",
+    "@adecore/agent-contracts": "0.25.5",
+    "@adecore/intelligent-ui": "0.25.5",
     "zod": "^4.6.5"
   },
   "devDependencies": {

package/src/chat/backend.ts

@@ -45,6 +45,8 @@ export interface BackendLaunch {
     // Folders outside `cwd` the agent may reach without asking. Claude Code takes them as `--add-dir`; Codex's
     // sandbox reads the whole disk already and keeps writes to the workspace, so it needs nothing.
     folders?: readonly string[];
+    // False keeps the CLI from loading configuration out of `cwd` (settings, hooks, MCP servers); absent loads it.
+    projectConfig?: boolean;
     // How the CLI is started; a test runs a fake in the same process, everything else spawns it.
     spawn?: SpawnChatProcess;
     saveGeneratedImage?(ref: string, upload: ChatAttachmentUpload): Promise<ChatAttachment>;

package/src/chat/chat-core.ts

@@ -125,6 +125,12 @@ export interface ChatCoreHooks {
      * next turn in a new process that resumes the thread, and never cuts a turn in flight.
      */
     foldersFor?(chatId: string): readonly string[];
+    /*
+     * Whether this chat's CLI loads the configuration of its working folder; false for a folder whose contents
+     * the host does not trust. Asked before every turn, like the folders. A provider with `ignoresProjectConfig`
+     * unset refuses the turn with `project-config-unsupported`, so a host can check the flag first.
+     */
+    projectConfigFor?(chatId: string): boolean;
     /* Whether no list of chats shows this one, which `ChatInfo.hidden` says to every client. */
     hiddenFor?(chatId: string): boolean;
     /* What the host says in front of a chat's next real prompt, beside what the chat keeps itself. */
@@ -490,6 +496,7 @@ export class ChatCore {
             instructions: () => (this.hooks.instructionsFor ? this.hooks.instructionsFor(payload.chatId) : this.instructions),
             resumeNote: () => this.hooks.resumeNoteFor?.(payload.chatId) ?? null,
             folders: () => this.hooks.foldersFor?.(payload.chatId) ?? [],
+            projectConfig: () => this.hooks.projectConfigFor?.(payload.chatId) ?? true,
             ...(promptNotes ? { promptNotes } : {}),
             ...(references ? { references } : {}),
             ...(this.checkpoints ? { checkpoints: this.checkpoints } : {}),

package/src/chat/chat-session.ts

@@ -78,6 +78,8 @@ export interface ChatSessionOptions {
     resumeNote?(): string | null;
     // The folders beside the working directory, asked before every turn; a change starts the next turn in a new process.
     folders?(): readonly string[];
+    // False runs the CLI without the configuration of the working folder; asked before every turn like the folders.
+    projectConfig?(): boolean;
     promptNotes?: PromptNotes;
     references?: ChatReferences;
     // Trees per turn, so a settled turn can show what the working tree holds against its start.
@@ -184,6 +186,7 @@ export class ChatSession {
     private relocating = false;
     private launchedRuntimeMode: RuntimeMode | null = null;
     private launchedFolders: readonly string[] = [];
+    private launchedProjectConfig = true;
     // The checkpoint of the turn in flight; everything queued for that turn waits for it.
     private turnReady: Promise<void> = Promise.resolve();
     // Turns we settled ourselves whose `result` is still on its way; it may not close the turn after them.
@@ -1760,10 +1763,15 @@ export class ChatSession {
                 this.info.runtimeMode !== this.launchedRuntimeMode ||
                 this.info.account !== this.launchedAccount ||
                 this.info.cwd !== this.launchedCwd ||
-                !sameFolders(this.options.folders?.() ?? [], this.launchedFolders))
+                !sameFolders(this.options.folders?.() ?? [], this.launchedFolders) ||
+                this.loadsProjectConfig() !== this.launchedProjectConfig)
         );
     }
 
+    private loadsProjectConfig(): boolean {
+        return this.options.projectConfig?.() !== false;
+    }
+
     private hasNativeWork(): boolean {
         return runningInBackground(this.thread.list()).length > 0 || (this.info.background?.length ?? 0) > 0;
     }
@@ -1789,6 +1797,12 @@ export class ChatSession {
         if (this.backend && this.starting) {
             return this.starting;
         }
+        const projectConfig = this.loadsProjectConfig();
+        if (!projectConfig && !this.options.provider.ignoresProjectConfig) {
+            return Promise.reject(
+                new ChatError('project-config-unsupported', `${this.options.provider.name} cannot run without the configuration of its folder`)
+            );
+        }
         let env: Record<string, string>;
         try {
             env = this.options.env(this.thread.info.account);
@@ -1804,6 +1818,7 @@ export class ChatSession {
         this.launchedCwd = info.cwd;
         const folders = this.options.folders?.() ?? [];
         this.launchedFolders = folders;
+        this.launchedProjectConfig = projectConfig;
         const launch: BackendLaunch = {
             command: this.options.command,
             cwd: info.cwd,
@@ -1818,6 +1833,7 @@ export class ChatSession {
             resumeNote: this.options.resumeNote?.() ?? null,
             ...(info.goal === undefined ? {} : { goal: info.goal }),
             ...(folders.length > 0 ? { folders } : {}),
+            ...(projectConfig ? {} : { projectConfig }),
             ...(this.options.spawn ? { spawn: this.options.spawn } : {})
         };
         const made: { backend: ChatBackend | null } = { backend: null };

package/src/chat/claude-backend.ts

@@ -54,10 +54,17 @@ export class ClaudeBackend implements ChatBackend {
         if (this.child) {
             return Promise.resolve();
         }
-        const { selection, runtimeMode, resume, folders } = this.launch;
+        const { selection, runtimeMode, resume, folders, projectConfig } = this.launch;
         const args = [
             ...this.launch.command,
-            ...claudeArgs({ selection, runtimeMode, resume, allowedTools: this.allowedTools, ...(folders ? { folders } : {}) })
+            ...claudeArgs({
+                selection,
+                runtimeMode,
+                resume,
+                allowedTools: this.allowedTools,
+                ...(folders ? { folders } : {}),
+                ...(projectConfig === undefined ? {} : { projectConfig })
+            })
         ];
         if (this.launch.instructions !== null) {
             args.push('--append-system-prompt', this.launch.instructions);

package/src/chat/errors.ts

@@ -10,6 +10,8 @@ export type ChatErrorCode =
     | 'chat-busy'
     | 'request-not-found'
     | 'chat-unsupported'
+    // The host asked for a chat that ignores the configuration of its folder, and this CLI cannot.
+    | 'project-config-unsupported'
     | 'invalid-attachments'
     | 'subagent-not-found'
     // The sub-agent was started by a CLI process that has ended, so no process here can stop it.

package/src/providers/claude-provider.ts

@@ -12,6 +12,7 @@ export function createClaudeProvider(options: ClaudeBackendOptions = {}): ChatPr
         capabilities: CLAUDE_CAPABILITIES,
         command: ['claude'],
         resumeCommand: CLAUDE_RESUME_COMMAND,
+        ignoresProjectConfig: true,
         // Read from the strings of Claude Code 2.1.282; never HOME, which moves the keychain lookup along with it.
         home: {
             env: 'CLAUDE_CONFIG_DIR',

package/src/providers/claude.ts

@@ -14,6 +14,13 @@ const CLAUDE_CHAT_ARGS = [
     'stdio'
 ];
 
+/*
+ * Only the person's own settings load, and only the MCP servers a caller passes: the project and
+ * local settings files, the project's `.mcp.json` and the project's skills and commands stay out.
+ * The latter flag also drops the person's own MCP servers and connectors (measured on Claude Code 2.1.300).
+ */
+const CLAUDE_WITHOUT_PROJECT_CONFIG_ARGS = ['--setting-sources=user', '--strict-mcp-config'];
+
 // Effort values the CLI takes on its flag; anything else is asked for in the prompt instead.
 const FLAG_EFFORTS = new Set(['low', 'medium', 'high', 'xhigh', 'max']);
 
@@ -37,6 +44,7 @@ interface ClaudeLaunch {
     resume: string | null;
     allowedTools?: readonly string[];
     folders?: readonly string[];
+    projectConfig?: boolean;
 }
 
 export function claudeArgs(launch: ClaudeLaunch): string[] {
@@ -44,7 +52,8 @@ export function claudeArgs(launch: ClaudeLaunch): string[] {
     const args = [
         ...CLAUDE_CHAT_ARGS,
         ...(launch.allowedTools ?? []).map((tool) => `--allowedTools=${tool}`),
-        ...(launch.folders ?? []).map((folder) => `--add-dir=${folder}`)
+        ...(launch.folders ?? []).map((folder) => `--add-dir=${folder}`),
+        ...(launch.projectConfig === false ? CLAUDE_WITHOUT_PROJECT_CONFIG_ARGS : [])
     ];
     const contextWindow = launch.selection.options.contextWindow;
     args.push('--model', `${launch.selection.model}${contextWindow === '1m' ? '[1m]' : ''}`);

package/src/providers/codex-provider.ts

@@ -13,6 +13,9 @@ export function createCodexProvider(options: CodexBackendOptions = {}): ChatProv
         capabilities: CODEX_CAPABILITIES,
         command: ['codex', ...CODEX_CHAT_ARGS],
         resumeCommand: CODEX_RESUME_COMMAND,
+        // A folder's `.codex` layer loads once the person's own config trusts the folder or its repository, which a worktree inherits;
+        // neither `-c` nor `project_root_markers` turns it off, and `--disable hooks` would take the person's hooks along (Codex 0.162.1).
+        ignoresProjectConfig: false,
         // The auth variables Codex 0.157 names in its own "no Codex credentials were found" advice.
         home: { env: 'CODEX_HOME', fallback: '.codex', loginEnv: ['OPENAI_API_KEY', 'CODEX_API_KEY', 'CODEX_ACCESS_TOKEN'], loginCommand: 'codex login' },
         detect: detectCli,

package/src/providers/provider.ts

@@ -28,6 +28,8 @@ export interface ChatProvider {
     readonly command: string[];
     // What a terminal runs to continue one of this CLI's sessions; `{id}` stands for the session id.
     readonly resumeCommand: string;
+    /* Whether `BackendLaunch.projectConfig: false` keeps this CLI from loading configuration out of the working folder; absent is no. */
+    readonly ignoresProjectConfig?: boolean;
     /* Where this CLI keeps its login, settings and transcripts, which is what an account is. Absent on a
        CLI with no variable to move that folder, which then only has its default account. */
     readonly home?: ProviderHome;