[aniaisec]

Commands launched from a nested or unrelated directory previously depended on the process working directory. Add versioned cua.toml configuration and an immutable project context so CLI, HTTP, MCP, workflows, and worker processes consistently use the selected project's paths and environment.

• Discover the nearest ancestor project, or select one with global --root; preserve legacy cwd defaults. Explicit CLI files stay invocation-relative, while configured references are project-relative.
• Read only the selected root's .env, let process values take precedence, and pass environment snapshots to providers and browser launches without changing cwd or process environment.
• Preflight recording family templates before model/UI work, preserve capability seals and relocation-stable benchmark fingerprints, and apply configured review-state paths across services.
• Cover projects with spaces, concurrent service contexts, malformed configuration, and discovery/review/replay from different directories. Isolate the CLI browser regression in subprocesses to coexist with the shared Playwright fixture.

Validation: GitHub CI passed, including quality/type checks, the full browser suite, deterministic benchmark gate, and security benchmark. Local verification also passed 886 non-browser tests and 16 selected browser regressions; an explicit-root benchmark from an unrelated directory completed six correct replays with zero model calls or commits. Live Windows UIA was not exercised.