@mrgoonie/multix 1.0.3 → 1.0.5

package/CHANGELOG.md

@@ -5,6 +5,20 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.5](https://github.com/mrgoonie/multix-cli/compare/v1.0.4...v1.0.5) (2026-10-11)
+
+
+### Fixed
+
+* **core:** only load multix settings from a project .env ([#116](https://github.com/mrgoonie/multix-cli/issues/116)) ([896c0c0](https://github.com/mrgoonie/multix-cli/commit/896c0c00caf46ac46593f67f9a75508a4ac404cd))
+
+## [1.0.4](https://github.com/mrgoonie/multix-cli/compare/v1.0.3...v1.0.4) (2026-10-11)
+
+
+### Fixed
+
+* **core:** do not retry deterministic fetch failures ([#111](https://github.com/mrgoonie/multix-cli/issues/111)) ([8d2aa9b](https://github.com/mrgoonie/multix-cli/commit/8d2aa9baa3533cf199adc038911c9ea485b40083))
+
 ## [1.0.3](https://github.com/mrgoonie/multix-cli/compare/v1.0.2...v1.0.3) (2026-10-11)
 
 

package/README.md

@@ -115,10 +115,11 @@ Set at least one provider key. Add to `.env` in your project root or `~/.multix/
 
 Set extra keys as `GEMINI_API_KEY_2`, `GEMINI_API_KEY_3`, … (any numeric suffix; numbered keys alone are enough). `multix` tries `GEMINI_API_KEY` first, then the numbered keys in ascending order, skipping duplicates. When a key returns HTTP 429 (or 400/403 with `RESOURCE_EXHAUSTED`), it cools down for the server's `Retry-After`/`retryDelay` (default 60s) and the same request is retried with the next ready key; other errors are not rotated. A Files API upload is repeated on the new key if the following generate call is rate-limited. Veo rotates on submit only, so a rate limit while polling or downloading never starts a second billed job. `doc convert` stops its own retries on a rate limit. Cooldowns last for the current process only, and logs name the env var, never the key. `multix check` lists the keys in rotation and pings each one. Quotas are per Google Cloud project: keys from the same project share one quota, so rotation only helps across projects.
 
-Priority: `process.env` > `cwd/.env` > `~/.multix/.env`. Set `MULTIX_LEGACY_CLAUDE_ENV=1` to also read legacy AgentKit files (`.claude/skills/{ai-multimodal,ak-ai-multimodal}/.env`, `.claude/skills/.env`, `.claude/.env`, project first, then home) with the lowest priority (credential names only, never endpoint/proxy settings); `multix check -v` lists the env files that were loaded.
+Priority: `process.env` > `cwd/.env` > `~/.multix/.env`. Set `MULTIX_LEGACY_CLAUDE_ENV=1` (shell or `~/.multix/.env`) to also read legacy AgentKit files (`.claude/skills/{ai-multimodal,ak-ai-multimodal}/.env`, `.claude/skills/.env`, `.claude/.env`, project first, then home) with the lowest priority (credential names only, never endpoint/proxy settings); `multix check -v` lists the env files that were loaded.
 
-`*_BASE_URL`, `CLOUDFLARE_ACCOUNT_ID` and `CLOUDFLARE_AI_GATEWAY_ID` decide where your API key is sent. Values from the shell or `~/.multix/.env` are always used. A value from the project `.env` (or a legacy `.claude` file under it) is used only when every key the provider sends with it comes from that same project file (the repository's own key). That protects your key, not your data: a project `.env` that ships its own key and base URL routes that project's requests, including your prompts and any files you upload, to that host, and its key replaces yours from `~/.multix/.env`, so review a cloned repository's `.env` before running `multix` in it. If a key comes from anywhere else, the project value is ignored: the `~/.multix/.env` value is used with a warning (variable, file and key source named, never the value), or, if there is none, the command stops with an error instead of falling back to the vendor default. `multix check` shows whether each such setting is in effect or ignored. To use a project value for one command, run `MULTIX_ALLOW_PROJECT_BASE_URL=1 multix ...`; do not put the opt-in in `~/.multix/.env`, which disables the check for every directory. Non-default base URLs must be `https://` (plain `http://` only for `localhost`, `127.0.0.1`, `[::1]`), and `multix` warns once per variable on stderr with the provider and hostname only. This covers base URLs and Cloudflare routing IDs only; other variables a project `.env` can set are tracked in [#99](https://github.com/mrgoonie/multix-cli/issues/99).
+A project `.env` may only set variables `multix` reads: provider keys, the provider settings in `.env.example` (`*_BASE_URL`, model overrides, Cloudflare IDs), the documented `MULTIX_*` settings (`MULTIX_OUTPUT_DIR`, so a project can choose where outputs go, `MULTIX_IMAGE_FORMAT`, `MULTIX_MAX_DOWNLOAD_MB`, `MULTIX_UPLOAD_MIN_KBPS`) and `NO_COLOR`. The opt-ins `MULTIX_ALLOW_PROJECT_BASE_URL` and `MULTIX_LEGACY_CLAUDE_ENV` are refused there; set them in the shell or `~/.multix/.env`. Other names, such as `NODE_OPTIONS`, `npm_config_registry`, `LD_PRELOAD` or `HTTPS_PROXY`, are not loaded, so they never reach `multix` or the tools it starts (`npm` in `multix update`, ffmpeg, ImageMagick, cwebp); one warning on stderr lists the ignored names, never their values. The shell and `~/.multix/.env` are not filtered.
 
+`*_BASE_URL`, `CLOUDFLARE_ACCOUNT_ID` and `CLOUDFLARE_AI_GATEWAY_ID` decide where your API key is sent. Values from the shell or `~/.multix/.env` are always used. A value from the project `.env` (or a legacy `.claude` file under it) is used only when every key the provider sends with it comes from that same project file (the repository's own key). That protects your key, not your data: a project `.env` that ships its own key and base URL routes that project's requests, including your prompts and any files you upload, to that host, and its key replaces yours from `~/.multix/.env`, so review a cloned repository's `.env` before running `multix` in it. If a key comes from anywhere else, the project value is ignored: the `~/.multix/.env` value is used with a warning (variable, file and key source named, never the value), or, if there is none, the command stops with an error instead of falling back to the vendor default. `multix check` shows whether each such setting is in effect or ignored. To use a project value for one command, run `MULTIX_ALLOW_PROJECT_BASE_URL=1 multix ...`; do not put the opt-in in `~/.multix/.env`, which disables the check for every directory. Non-default base URLs must be `https://` (plain `http://` only for `localhost`, `127.0.0.1`, `[::1]`), and `multix` warns once per variable on stderr with the provider and hostname only.
 ## Commands
 
 ### `multix check`

package/dist/cli.js

@@ -58,8 +58,8 @@ var init_errors = __esm({
       code;
     };
     ConfigError = class extends MultixError {
-      constructor(message) {
-        super(message, "CONFIG_ERROR");
+      constructor(message, options) {
+        super(message, "CONFIG_ERROR", options);
         this.name = "ConfigError";
       }
     };
@@ -402,11 +402,15 @@ function parseFile(file) {
     return void 0;
   }
 }
-function loadFile(file, source, accept = () => true) {
+function loadFile(file, source, accept = () => true, onRefused) {
   const parsed = parseFile(file);
   if (!parsed) return void 0;
   for (const [name, value] of Object.entries(parsed)) {
-    if (!accept(name) || process.env[name] !== void 0) continue;
+    if (!accept(name)) {
+      onRefused?.(name);
+      continue;
+    }
+    if (process.env[name] !== void 0) continue;
     process.env[name] = value;
     fileOrigins.set(envNameKey(name), { source, file, value });
   }
@@ -421,7 +425,13 @@ function byNameKey(values) {
   }
   return out;
 }
-function loadEnv() {
+var MAX_LISTED_NAMES = 10;
+function listNames(names) {
+  const shown = names.slice(0, MAX_LISTED_NAMES).join(", ");
+  const rest = names.length - MAX_LISTED_NAMES;
+  return rest > 0 ? `${shown} and ${rest} more` : shown;
+}
+function loadEnv({ isProjectEnvName: isProjectEnvName2 }) {
   if (loaded) return;
   loaded = true;
   loadedFiles = [];
@@ -429,12 +439,22 @@ function loadEnv() {
   userFileValues = {};
   const cwd = process.cwd();
   const home = process.env.MULTIX_DISABLE_HOME_ENV ? void 0 : os.homedir();
-  loadFile(path.resolve(cwd, ".env"), "project");
+  const projectFile = path.resolve(cwd, ".env");
+  const refused = [];
+  loadFile(projectFile, "project", isProjectEnvName2, (name) => refused.push(name));
+  if (refused.length > 0) {
+    warnOnce(
+      "project-env-refused",
+      `Ignoring ${refused.length} variable(s) in project env file ${projectFile}: ${listNames(refused)}. A project .env may only set provider keys and documented multix settings; set anything else in your shell.`
+    );
+  }
   if (home) userFileValues = byNameKey(loadFile(path.join(home, ".multix", ".env"), "user"));
   if (legacyClaudeEnvEnabled()) {
     const projectLegacy = new Set(legacyFilesUnder(cwd));
+    const projectLegacyName = (name) => isLegacyAllowedName(name) && isProjectEnvName2(name);
     for (const file of legacyClaudeEnvFiles(cwd, home)) {
-      loadFile(file, projectLegacy.has(file) ? "project" : "legacy", isLegacyAllowedName);
+      if (projectLegacy.has(file)) loadFile(file, "project", projectLegacyName);
+      else loadFile(file, "legacy", isLegacyAllowedName);
     }
   }
 }
@@ -768,7 +788,11 @@ var PollTimeoutError = class extends MultixError {
 function isTransientHttpError(error) {
   if (!(error instanceof HttpError)) return false;
   const { status } = error;
-  return status === 0 || status === 408 || status === 429 || status >= 500;
+  return status === 408 || status === 429 || isRetryableServerStatus(status);
+}
+function isRetryableServerStatus(status) {
+  if (status === 501 || status === 505) return false;
+  return status === 0 || status >= 500;
 }
 var defaultSleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 async function pollUntil(opts) {
@@ -817,6 +841,97 @@ async function pollUntil(opts) {
 // src/providers/atlascloud/client.ts
 init_errors();
 
+// src/core/fetch-error.ts
+init_errors();
+init_redact();
+var MAX_CAUSE_DEPTH = 4;
+var TLS_CODES = /* @__PURE__ */ new Set([
+  "UNABLE_TO_VERIFY_LEAF_SIGNATURE",
+  "SELF_SIGNED_CERT_IN_CHAIN",
+  "DEPTH_ZERO_SELF_SIGNED_CERT",
+  "ERR_TLS_CERT_ALTNAME_INVALID"
+]);
+function kindOfCode(code) {
+  if (typeof code !== "string") return void 0;
+  if (code === "ERR_INVALID_URL") return "url";
+  if (code === "ERR_INVALID_CHAR" || code === "ERR_INVALID_HTTP_TOKEN") return "header";
+  if (TLS_CODES.has(code) || code.startsWith("CERT_") || code.startsWith("UNABLE_TO_")) {
+    return "tls";
+  }
+  if (code === "UND_ERR_INVALID_ARG" || code === "UND_ERR_NOT_SUPPORTED") return "request";
+  return void 0;
+}
+function kindOfMessage(message) {
+  if (typeof message !== "string") return void 0;
+  if (/Invalid URL|Failed to parse URL/i.test(message)) return "url";
+  if (/ByteString|is not a legal HTTP header value|invalid header value|invalid header name/i.test(
+    message
+  )) {
+    return "header";
+  }
+  if (/duplex option is required|cannot have body|unexpected redirect/i.test(message)) {
+    return "request";
+  }
+  return void 0;
+}
+function causeChain(err2) {
+  const out = [];
+  let current = err2;
+  for (let depth = 0; depth <= MAX_CAUSE_DEPTH && current && typeof current === "object"; depth++) {
+    const e = current;
+    out.push(e);
+    if (Array.isArray(e.errors)) {
+      for (const member of e.errors) if (member && typeof member === "object") out.push(member);
+    }
+    current = e.cause;
+  }
+  return out;
+}
+function deterministicKind(err2) {
+  for (const e of causeChain(err2)) {
+    const kind = kindOfCode(e.code) ?? kindOfMessage(e.message);
+    if (kind) return kind;
+  }
+  return void 0;
+}
+function isNetworkFetchFailure(err2) {
+  return deterministicKind(err2) === void 0;
+}
+function scrub(message) {
+  return message.replace(/\b[a-z][a-z0-9+.-]*:\/\/[^\s"'<>]+/gi, (u) => redactUrl(u)).replace(/[?#](?!\[redacted\])[^\s"'<>]*=[^\s"'<>]*/g, "?[redacted]");
+}
+function messageOf(e) {
+  return typeof e?.message === "string" ? scrub(e.message) : "";
+}
+function detailOf(err2) {
+  const chain = causeChain(err2);
+  const parts = [messageOf(chain[0]), messageOf(chain[1])].filter(Boolean);
+  return parts.length > 0 ? parts.join(": ") : scrub(String(err2));
+}
+function toFetchError(err2, url, opts = {}) {
+  const options = { cause: err2 };
+  const prefix = opts.prefix ?? "";
+  const target = opts.target ?? redactUrl(url);
+  switch (deterministicKind(err2)) {
+    case "url":
+      return new ConfigError(`${prefix}Invalid request URL: ${target}`, options);
+    case "header":
+      return new ConfigError(
+        `${prefix}Invalid HTTP header value in the request to ${target}. Check the API key and other header values for non-ASCII characters such as smart quotes, or line breaks.`,
+        options
+      );
+    case "tls":
+    case "request":
+      return new ProviderError(
+        `${prefix}Request to ${target} failed: ${detailOf(err2)}`,
+        opts.provider ?? "http",
+        options
+      );
+    default:
+      return new HttpError(0, `${prefix}${detailOf(err2)}`, url, void 0, options);
+  }
+}
+
 // src/core/fetch-json.ts
 init_errors();
 
@@ -844,8 +959,7 @@ async function fetchFollowingRedirects(url, init = {}, opts = {}) {
       response = await doFetch(current, hopInit);
     } catch (cause) {
       if (!opts.wrapNetworkErrors) throw cause;
-      const msg = cause instanceof Error ? cause.message : String(cause);
-      throw new HttpError(0, msg, current);
+      throw toFetchError(cause, current);
     }
     if (validateUrl && response.url && response.url !== current) {
       try {
@@ -913,8 +1027,7 @@ async function fetchWithValidatedRedirects(url, opts = {}) {
     try {
       return { response: await doFetch(url, init), url };
     } catch (cause) {
-      const msg = cause instanceof Error ? cause.message : String(cause);
-      throw new HttpError(0, msg, url);
+      throw toFetchError(cause, url);
     }
   }
   return fetchFollowingRedirects(url, init, {
@@ -1365,7 +1478,7 @@ var AtlasCloudClient = class {
       );
     } catch (cause) {
       if (cause instanceof HttpError) throw cause;
-      throw new HttpError(0, cause instanceof Error ? cause.message : String(cause), url);
+      throw toFetchError(cause, url, { provider: "atlascloud" });
     }
     if (!response.ok) throw await httpErrorFromResponse(response, url);
     const json = await response.json();
@@ -1455,7 +1568,7 @@ function uploadMimeTypeFor(filename) {
 
 // src/providers/atlascloud/commands/env.ts
 var ATLAS_KEY_URL = "https://www.atlascloud.ai/console/api-keys";
-var MODEL_ENV = {
+var ATLAS_MODEL_ENV = {
   image: "ATLASCLOUD_IMAGE_MODEL",
   imageEdit: "ATLASCLOUD_IMAGE_EDIT_MODEL",
   video: "ATLASCLOUD_VIDEO_MODEL",
@@ -1466,7 +1579,7 @@ var MODEL_ENV = {
   imageTo3d: "ATLASCLOUD_IMAGE_TO_3D_MODEL"
 };
 function atlasDefaultModel(key) {
-  return resolveKey(MODEL_ENV[key])?.trim() || ATLAS_DEFAULT_MODELS[key];
+  return resolveKey(ATLAS_MODEL_ENV[key])?.trim() || ATLAS_DEFAULT_MODELS[key];
 }
 function requireAtlasKey() {
   const apiKey = resolveRoutedKey(ATLAS_ROUTING);
@@ -1688,8 +1801,7 @@ async function fetchBytes(urlOrDataUri) {
       signal: AbortSignal.timeout(DEFAULT_TIMEOUT_MS)
     });
   } catch (cause) {
-    const msg = cause instanceof Error ? cause.message : String(cause);
-    throw new HttpError(0, msg, urlOrDataUri);
+    throw toFetchError(cause, urlOrDataUri);
   }
   if (!response.ok) {
     throw new HttpError(response.status, "(bytes fetch failed)", urlOrDataUri);
@@ -4231,11 +4343,17 @@ function apiPostJson(endpoint2, payload, apiKey, opts = {}) {
 }
 async function apiDelete(endpoint2, apiKey) {
   const url = `${ELEVENLABS_BASE_URL}/${endpoint2.replace(/^\//, "")}`;
-  const res = await fetchSameOrigin(url, {
-    method: "DELETE",
-    headers: authHeaders(apiKey),
-    signal: AbortSignal.timeout(DEFAULT_TIMEOUT_MS2)
-  });
+  let res;
+  try {
+    res = await fetchSameOrigin(url, {
+      method: "DELETE",
+      headers: authHeaders(apiKey),
+      signal: AbortSignal.timeout(DEFAULT_TIMEOUT_MS2)
+    });
+  } catch (cause) {
+    if (cause instanceof HttpError) throw cause;
+    throw toFetchError(cause, url, { provider: "elevenlabs" });
+  }
   if (!res.ok) {
     const text = await res.text().catch(() => "");
     throw new HttpError(res.status, text.slice(0, 500), url);
@@ -4268,8 +4386,7 @@ async function apiPostBinary(endpoint2, body, apiKey, opts = {}) {
     res = await fetchSameOrigin(url.toString(), init);
   } catch (cause) {
     if (cause instanceof HttpError) throw cause;
-    const msg = cause instanceof Error ? cause.message : String(cause);
-    throw new HttpError(0, msg, url.toString());
+    throw toFetchError(cause, url.toString(), { provider: "elevenlabs" });
   }
   if (!res.ok) {
     const text = await res.text().catch(() => "");
@@ -4289,8 +4406,7 @@ async function apiPostMultipart(endpoint2, form, apiKey, opts = {}) {
     });
   } catch (cause) {
     if (cause instanceof HttpError) throw cause;
-    const msg = cause instanceof Error ? cause.message : String(cause);
-    throw new HttpError(0, msg, url);
+    throw toFetchError(cause, url, { provider: "elevenlabs" });
   }
   if (!res.ok) {
     const text = await res.text().catch(() => "");
@@ -4916,9 +5032,9 @@ var FAL_DEFAULTS = {
 };
 
 // src/providers/fal/run-helpers.ts
-init_errors();
 import fs19 from "fs";
 import path22 from "path";
+init_errors();
 init_redact();
 
 // src/providers/fal/client.ts
@@ -5039,7 +5155,7 @@ function parseInputArg(raw) {
   return parseJsonInput(raw);
 }
 function isTransientError(e) {
-  if (e instanceof HttpError) return e.status === 0 || e.status >= 500;
+  if (e instanceof HttpError) return isRetryableServerStatus(e.status);
   return false;
 }
 function sleep(ms, signal) {
@@ -5646,6 +5762,13 @@ async function uploadFetch(url, init, timeoutMs, step) {
     if (redirected || timedOut && step === "upload") {
       throw new ProviderError(message, "gemini", { cause: err2 });
     }
+    if (!isNetworkFetchFailure(err2)) {
+      throw toFetchError(err2, FILES_BASE, {
+        provider: "gemini",
+        prefix: "File upload failed: ",
+        target: step === "start" ? FILES_BASE : "the upload session URL"
+      });
+    }
     throw new HttpError(0, message, FILES_BASE, void 0, { cause: err2 });
   }
   if (!resp.ok) {
@@ -7268,7 +7391,7 @@ var HeygenClient = class {
       return Math.min(error.retryAfterMs, MAX_RETRY_WAIT_MS);
     }
     if (!key) return void 0;
-    if (error.status === 0 || error.status >= 500 || code === "request_in_progress") {
+    if (isRetryableServerStatus(error.status) || code === "request_in_progress") {
       return Math.min(1e3 * 2 ** (attempt - 1), MAX_RETRY_WAIT_MS);
     }
     return void 0;
@@ -7430,8 +7553,9 @@ var HeygenClient = class {
         );
       } catch (cause) {
         if (cause instanceof HttpError) throw toHeygenApiError(cause);
-        const msg = cause instanceof Error ? cause.message : String(cause);
-        const err3 = toHeygenApiError(new HttpError(0, msg, url));
+        const failure = toFetchError(cause, url, { provider: "heygen" });
+        if (!(failure instanceof HttpError)) throw failure;
+        const err3 = toHeygenApiError(failure);
         if (attempt >= this.maxAttempts) throw err3;
         await this.sleep(this.retryDelay(err3, key, attempt) ?? 1e3);
         continue;
@@ -10298,7 +10422,7 @@ async function postOpenAIForm(pathname, form, apiKey, timeoutMs = DEFAULT_TIMEOU
     });
   } catch (cause) {
     if (cause instanceof HttpError) throw cause;
-    throw new HttpError(0, cause instanceof Error ? cause.message : String(cause), url);
+    throw toFetchError(cause, url, { provider: "openai" });
   }
   if (!res.ok) {
     const text = await res.text().catch(() => "");
@@ -10318,7 +10442,7 @@ async function postOpenAIBinary(pathname, body, apiKey, timeoutMs = DEFAULT_TIME
     });
   } catch (cause) {
     if (cause instanceof HttpError) throw cause;
-    throw new HttpError(0, cause instanceof Error ? cause.message : String(cause), url);
+    throw toFetchError(cause, url, { provider: "openai" });
   }
   if (!res.ok) {
     const text = await res.text().catch(() => "");
@@ -11424,8 +11548,8 @@ var CREATE_RETRY_CAP_MS = 3e4;
 var REQUEST_TIMEOUT_MS = 6e4;
 var UPLOAD_TIMEOUT_MS = 3e5;
 var ReplicateApiError = class extends ProviderError {
-  constructor(message, status, retryAfterMs) {
-    super(message, PROVIDER);
+  constructor(message, status, retryAfterMs, options) {
+    super(message, PROVIDER, options);
     this.status = status;
     this.retryAfterMs = retryAfterMs;
     this.name = "ReplicateApiError";
@@ -11485,7 +11609,7 @@ function mapReplicateError(error, subject) {
   } else {
     message = `Replicate request for ${subject} failed (${status})${suffix}`;
   }
-  return new ReplicateApiError(message, status, retryAfterMs);
+  return new ReplicateApiError(message, status, retryAfterMs, { cause: error });
 }
 var ORPHAN_HINT = "The prediction may have been created anyway (Replicate has no idempotency key); check https://replicate.com/predictions before retrying to avoid paying twice";
 function withOrphanHint(error) {
@@ -11493,10 +11617,14 @@ function withOrphanHint(error) {
     const { status } = error;
     const mayExist = status === 0 || status >= 200 && status < 300 || status >= 500;
     if (!mayExist) return error;
-    return new ReplicateApiError(`${error.message}. ${ORPHAN_HINT}`, status, error.retryAfterMs);
+    return new ReplicateApiError(`${error.message}. ${ORPHAN_HINT}`, status, error.retryAfterMs, {
+      cause: error.cause
+    });
   }
   if (error instanceof ProviderError) {
-    return new ProviderError(`${error.message}. ${ORPHAN_HINT}`, error.provider);
+    return new ProviderError(`${error.message}. ${ORPHAN_HINT}`, error.provider, {
+      cause: error.cause
+    });
   }
   return error;
 }
@@ -11650,8 +11778,7 @@ var ReplicateClient = class {
       );
     } catch (cause) {
       if (cause instanceof HttpError) throw mapReplicateError(cause, subject);
-      const msg = cause instanceof Error ? cause.message : String(cause);
-      throw mapReplicateError(new HttpError(0, msg, url), subject);
+      throw mapReplicateError(toFetchError(cause, url, { provider: PROVIDER }), subject);
     }
     if (!response.ok) {
       if (response.status === 413) {
@@ -12355,12 +12482,12 @@ To configure multix, set at least one provider API key:
 var FFMPEG_HINT = "ffmpeg not found \u2014 media optimize/split/batch commands unavailable.\n  Linux: sudo apt-get install ffmpeg\n  macOS: brew install ffmpeg\n  Windows: https://ffmpeg.org/download.html";
 var MAGICK_HINT = "ImageMagick (magick) not found \u2014 image optimization unavailable.\n  Linux: sudo apt-get install imagemagick\n  macOS: brew install imagemagick\n  Windows: https://imagemagick.org/script/download.php";
 
-// src/commands/check.ts
+// src/providers/provider-keys.ts
 function keyNames(routing) {
   const [envPrimary, envFallback] = routing.keyEnvs;
   return envFallback ? { envPrimary, envFallback } : { envPrimary };
 }
-var PROVIDERS = [
+var PROVIDER_KEYS = [
   {
     name: "Gemini",
     envPrimary: "GEMINI_API_KEY",
@@ -12428,6 +12555,8 @@ var PROVIDERS = [
     link: "https://app.heygen.com/developers/api"
   }
 ];
+
+// src/commands/check.ts
 function resolveProviderKey(p) {
   if (p.envPrimary === "GEMINI_API_KEY") {
     const first = listGeminiKeys()[0];
@@ -12536,7 +12665,7 @@ function registerCheckCommand(program2) {
     }
     let anyKey = false;
     const resolved = /* @__PURE__ */ new Map();
-    for (const p of PROVIDERS) {
+    for (const p of PROVIDER_KEYS) {
       const r = resolveProviderKey(p);
       resolved.set(p.name, r);
       if (r.key) anyKey = true;
@@ -13378,8 +13507,79 @@ function registerCommands(program2) {
 init_errors();
 init_redact();
 
+// src/project-env-names.ts
+var OWN_SETTINGS = [
+  "MULTIX_OUTPUT_DIR",
+  "MULTIX_IMAGE_FORMAT",
+  MAX_DOWNLOAD_ENV,
+  UPLOAD_MIN_KBPS_ENV,
+  // Read before the project file loads, so setting it there has no effect.
+  "MULTIX_DISABLE_HOME_ENV"
+];
+var INLINE_SETTINGS = [
+  "GEMINI_MODEL",
+  "MULTIMODAL_MODEL",
+  "IMAGE_GEN_MODEL",
+  "GEMINI_IMAGE_GEN_MODEL",
+  "VIDEO_GEN_MODEL",
+  "GEMINI_TTS_MODEL",
+  "TTS_MODEL",
+  "OPENAI_IMAGE_MODEL",
+  "OPENAI_TTS_MODEL",
+  "OPENAI_STT_MODEL",
+  "OPENROUTER_IMAGE_MODEL",
+  "OPENROUTER_VIDEO_MODEL",
+  "OPENROUTER_FALLBACK_MODELS",
+  "OPENROUTER_SITE_URL",
+  "OPENROUTER_APP_NAME",
+  "MINIMAX_IMAGE_MODEL",
+  "MINIMAX_VIDEO_MODEL",
+  "MINIMAX_SPEECH_MODEL",
+  "MINIMAX_MUSIC_MODEL",
+  "LEONARDO_DEFAULT_MODEL",
+  "LEONARDO_VIDEO_MODEL",
+  "BYTEPLUS_IMAGE_MODEL",
+  "BYTEPLUS_VIDEO_MODEL",
+  "BYTEPLUS_3D_MODEL",
+  "BYTEPLUS_VIDEO_PARAMS_MODE",
+  "FAL_IMAGE_MODEL",
+  "FAL_VIDEO_MODEL",
+  "FAL_VIDEO_IMAGE_MODEL",
+  "REPLICATE_IMAGE_MODEL",
+  "REPLICATE_VIDEO_MODEL",
+  "CLOUDFLARE_AI_IMAGE_MODEL",
+  "CLOUDFLARE_AI_TTS_MODEL",
+  // Read in providers/cloudflare/client.ts (collectPayloadHeader).
+  "CLOUDFLARE_AI_GATEWAY_COLLECT_LOG_PAYLOAD",
+  "NO_COLOR"
+];
+var ROUTING = [
+  ATLAS_ROUTING,
+  BYTEPLUS_ROUTING,
+  FAL_ROUTING,
+  HEYGEN_ROUTING,
+  LEONARDO_ROUTING,
+  REPLICATE_ROUTING
+];
+var PROJECT_ENV_NAMES = /* @__PURE__ */ new Set([
+  ...PROVIDER_KEYS.flatMap((p) => p.envFallback ? [p.envPrimary, p.envFallback] : [p.envPrimary]),
+  ...ROUTING.flatMap((r) => [r.name, ...r.keyEnvs]),
+  CLOUDFLARE_ACCOUNT_ID_ENV,
+  CLOUDFLARE_GATEWAY_ID_ENV,
+  ...CLOUDFLARE_VIDEO_CREDENTIALS,
+  ...Object.values(ATLAS_MODEL_ENV),
+  MAX_UPLOAD_ENV,
+  ...OWN_SETTINGS,
+  ...INLINE_SETTINGS
+]);
+var GEMINI_NUMBERED_KEY = /^GEMINI_API_KEY_\d+$/;
+function isProjectEnvName(name, platform = process.platform) {
+  const key = envNameKey(name, platform);
+  return PROJECT_ENV_NAMES.has(key) || GEMINI_NUMBERED_KEY.test(key);
+}
+
 // src/cli.ts
-loadEnv();
+loadEnv({ isProjectEnvName });
 var require3 = createRequire2(import.meta.url);
 var pkg = require3("../package.json");
 var program = new Command().name("multix").description(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrgoonie/multix",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "AI multimodal CLI — OpenAI, Gemini, MiniMax, OpenRouter, Leonardo, BytePlus, ElevenLabs, fal.ai, Atlas Cloud, Replicate, HeyGen, ffmpeg, ImageMagick, doc-to-md",
   "type": "module",
   "bin": {

package/skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: multix
 description: AI multimodal CLI — generate and edit images (OpenAI, Codex driver, Gemini Nano Banana, Imagen, MiniMax, OpenRouter, Leonardo, BytePlus Seedream, Cloudflare Workers AI FLUX.1 Schnell, fal.ai FLUX, Replicate FLUX), generate video (Gemini Veo, MiniMax Hailuo, OpenRouter via Veo/Seedance/Kling, Leonardo via Motion/Veo/Kling/Hailuo/Seedance/LTX, BytePlus Seedance, Cloudflare AI Gateway via Replicate, fal.ai queue models, Replicate direct API models incl. P-Video, HeyGen Video Agent and scripted avatar videos), video translation and lipsync (HeyGen), TTS/STT/music (OpenAI, Gemini Flash TTS incl. Gemini 3.8 with delivery-style control, MiniMax, Cloudflare Workers AI MeloTTS, ElevenLabs), 3D models (BytePlus Hyper3D/Hitem3d), analyze/transcribe media, convert documents to Markdown, optimize media via ffmpeg/ImageMagick, and self-update the CLI. Use whenever the user wants to create, edit, or transform images/video/audio/3D/documents from a CLI, mentions any of: OpenAI, Codex image driver, image-to-image, i2i, image edit, watercolor/cyberpunk style transfer, reference image, OpenRouter, Nano Banana, Flux, Seedream, Veo, Hailuo, Seedance, Kling, Cloudflare Workers AI, AI Gateway, fal.ai, Atlas Cloud, Replicate, replicate.com models, Replicate predictions, HeyGen, avatar video, talking head, Video Agent, video translation, dubbing, lipsync, video generation, text-to-video, image-to-video, i2v, ElevenLabs voice cloning, updating/upgrading multix, or asks for batch media optimization.
-version: 1.0.3 # x-release-please-version
+version: 1.0.5 # x-release-please-version
 ---
 
 # multix — AI Multimodal CLI
@@ -54,7 +54,7 @@ CLOUDFLARE_API_TOKEN  # Cloudflare Workers AI / AI Gateway token
 # Video additionally requires CLOUDFLARE_AI_GATEWAY_ID and REPLICATE_API_TOKEN.
 ```
 
-Priority: `process.env` > `cwd/.env` > `~/.multix/.env`. Set `MULTIX_LEGACY_CLAUDE_ENV=1` to also read legacy AgentKit `.claude` env files (credential names only, lowest priority); `multix check -v` lists loaded env files.
+Priority: `process.env` > `cwd/.env` > `~/.multix/.env`. Set `MULTIX_LEGACY_CLAUDE_ENV=1` to also read legacy AgentKit `.claude` env files (credential names only, lowest priority); `multix check -v` lists loaded env files. A project `.env` may only set names multix reads (provider keys and settings from `.env.example`, the documented `MULTIX_*` settings such as `MULTIX_OUTPUT_DIR`, `NO_COLOR`; never `MULTIX_ALLOW_PROJECT_BASE_URL` or `MULTIX_LEGACY_CLAUDE_ENV`); anything else there (`NODE_OPTIONS`, `npm_config_*`, `LD_PRELOAD`, proxy/TLS variables) is not loaded, with one stderr warning naming the ignored variables. Put such variables in the shell.
 
 ## Gemini text-output tasks
 
@@ -413,7 +413,7 @@ Requires `cwebp` (libwebp: `brew install webp`, `apt install webp`) on `PATH`.
 | `REPLICATE_IMAGE_MODEL` / `REPLICATE_VIDEO_MODEL` | Replicate default models (default `black-forest-labs/flux-schnell`, `prunaai/p-video`) |
 | `CLOUDFLARE_AI_IMAGE_MODEL` / `CLOUDFLARE_AI_TTS_MODEL` | Fixed-model settings: only `@cf/black-forest-labs/flux-1-schnell` and `@cf/myshell-ai/melotts` respectively are accepted |
 | `MULTIX_DISABLE_HOME_ENV` | `1` to skip every home-directory env file (`~/.multix/.env`, `~/.claude/...`) |
-| `MULTIX_LEGACY_CLAUDE_ENV` | `1` to also read legacy `.claude` env files (credential names only) |
+| `MULTIX_LEGACY_CLAUDE_ENV` | `1` to also read legacy `.claude` env files (credential names only); shell or `~/.multix/.env` only, ignored in a project `.env` |
 | `MULTIX_ALLOW_PROJECT_BASE_URL` | Set `1` for one command (`MULTIX_ALLOW_PROJECT_BASE_URL=1 multix ...`) to honour `*_BASE_URL`, `CLOUDFLARE_ACCOUNT_ID` and `CLOUDFLARE_AI_GATEWAY_ID` from the project `.env` even when the key comes from elsewhere. Without it, a project value is used only when every key sent with it is in the same project file (a project `.env` that ships its own key and base URL then receives that project's prompts and uploaded files, and its key replaces yours, so review a cloned repo's `.env` first); otherwise the `~/.multix/.env` value is used with a warning, or the command stops with a config error. `multix check` shows the effective state. Ignored in a project `.env`; avoid `~/.multix/.env` (it trusts every directory). Non-default base URLs must be `https://` (http only for localhost/127.0.0.1/[::1]) |
 
 ## Quick examples for agents