24810716348
83%

Ran 23 Apr 2026 12:58AM UTC

Jobs 0

Files 0

Run time –

Badge

Embed ▾

Canceled at 26 Apr 2026 08:16PM UTC via web

Build # 24810716348

Build Type

push

github

Committed by

web-flow

Commit Message

fix(daemon): kill `.mcp.json` auto-load leak (MCP M1) (#1602)

Force `strictMcpConfig: true` and `settingSources: []` on every session
type in `QueryOptionsBuilder.build()` so the Claude Agent SDK no longer
auto-loads project `.mcp.json` or `.claude/settings.local.json` for
Space ad-hoc, `space_task_agent`, or workflow node-agent sub-sessions.
Coordinator sessions (`room_chat`, `space_chat`) were already strict.

Adds the `NEOKAI_LEGACY_MCP_AUTOLOAD=1` env kill switch that restores
the pre-M1 asymmetry (coordinators stay strict; non-coordinators get
`settingSources: ['project', 'local']` back) for one release — to be
removed in M5.

See `docs/plans/unify-mcp-config-model/00-overview.md` milestone M1.

- `QueryOptionsBuilder.build()` now applies strict defaults for every
  session type unless the kill switch is explicitly set to `"1"`.
- Updated existing `settingSources` unit assertions for the new default.
- Added M1 kill-switch test suite covering worker / space_task_agent /
  general / coder / planner defaults plus flag-on behaviour; added a
  spawn-path regression that runs `createTaskAgentInit` /
  `createCustomAgentInit` output through the builder.
- Online Copilot-bridge test: switched `.mcp.json` auto-load to
  programmatic `config.mcpServers` registration, which is the path
  post-M1 sessions use.
- Documented the kill switch in `packages/daemon/.env.example`.

Coverage Stats

Source Files on build 24810716348

Detailed source file information is not available for this build.

lsm / neokai / 24810716348
83%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on build 24810716348

lsm / neokai / 24810716348 83%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on build 24810716348

lsm / neokai / 24810716348
83%

README BADGES
x