@mrgoonie/multix 1.0.4 → 1.0.5

package/CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.5](https://github.com/mrgoonie/multix-cli/compare/v1.0.4...v1.0.5) (2026-10-11)
+
+
+### Fixed
+
+* **core:** only load multix settings from a project .env ([#116](https://github.com/mrgoonie/multix-cli/issues/116)) ([896c0c0](https://github.com/mrgoonie/multix-cli/commit/896c0c00caf46ac46593f67f9a75508a4ac404cd))
+
 ## [1.0.4](https://github.com/mrgoonie/multix-cli/compare/v1.0.3...v1.0.4) (2026-10-11)
 
 

package/README.md

@@ -115,10 +115,11 @@ Set at least one provider key. Add to `.env` in your project root or `~/.multix/
 
 Set extra keys as `GEMINI_API_KEY_2`, `GEMINI_API_KEY_3`, … (any numeric suffix; numbered keys alone are enough). `multix` tries `GEMINI_API_KEY` first, then the numbered keys in ascending order, skipping duplicates. When a key returns HTTP 429 (or 400/403 with `RESOURCE_EXHAUSTED`), it cools down for the server's `Retry-After`/`retryDelay` (default 60s) and the same request is retried with the next ready key; other errors are not rotated. A Files API upload is repeated on the new key if the following generate call is rate-limited. Veo rotates on submit only, so a rate limit while polling or downloading never starts a second billed job. `doc convert` stops its own retries on a rate limit. Cooldowns last for the current process only, and logs name the env var, never the key. `multix check` lists the keys in rotation and pings each one. Quotas are per Google Cloud project: keys from the same project share one quota, so rotation only helps across projects.
 
-Priority: `process.env` > `cwd/.env` > `~/.multix/.env`. Set `MULTIX_LEGACY_CLAUDE_ENV=1` to also read legacy AgentKit files (`.claude/skills/{ai-multimodal,ak-ai-multimodal}/.env`, `.claude/skills/.env`, `.claude/.env`, project first, then home) with the lowest priority (credential names only, never endpoint/proxy settings); `multix check -v` lists the env files that were loaded.
+Priority: `process.env` > `cwd/.env` > `~/.multix/.env`. Set `MULTIX_LEGACY_CLAUDE_ENV=1` (shell or `~/.multix/.env`) to also read legacy AgentKit files (`.claude/skills/{ai-multimodal,ak-ai-multimodal}/.env`, `.claude/skills/.env`, `.claude/.env`, project first, then home) with the lowest priority (credential names only, never endpoint/proxy settings); `multix check -v` lists the env files that were loaded.
 
-`*_BASE_URL`, `CLOUDFLARE_ACCOUNT_ID` and `CLOUDFLARE_AI_GATEWAY_ID` decide where your API key is sent. Values from the shell or `~/.multix/.env` are always used. A value from the project `.env` (or a legacy `.claude` file under it) is used only when every key the provider sends with it comes from that same project file (the repository's own key). That protects your key, not your data: a project `.env` that ships its own key and base URL routes that project's requests, including your prompts and any files you upload, to that host, and its key replaces yours from `~/.multix/.env`, so review a cloned repository's `.env` before running `multix` in it. If a key comes from anywhere else, the project value is ignored: the `~/.multix/.env` value is used with a warning (variable, file and key source named, never the value), or, if there is none, the command stops with an error instead of falling back to the vendor default. `multix check` shows whether each such setting is in effect or ignored. To use a project value for one command, run `MULTIX_ALLOW_PROJECT_BASE_URL=1 multix ...`; do not put the opt-in in `~/.multix/.env`, which disables the check for every directory. Non-default base URLs must be `https://` (plain `http://` only for `localhost`, `127.0.0.1`, `[::1]`), and `multix` warns once per variable on stderr with the provider and hostname only. This covers base URLs and Cloudflare routing IDs only; other variables a project `.env` can set are tracked in [#99](https://github.com/mrgoonie/multix-cli/issues/99).
+A project `.env` may only set variables `multix` reads: provider keys, the provider settings in `.env.example` (`*_BASE_URL`, model overrides, Cloudflare IDs), the documented `MULTIX_*` settings (`MULTIX_OUTPUT_DIR`, so a project can choose where outputs go, `MULTIX_IMAGE_FORMAT`, `MULTIX_MAX_DOWNLOAD_MB`, `MULTIX_UPLOAD_MIN_KBPS`) and `NO_COLOR`. The opt-ins `MULTIX_ALLOW_PROJECT_BASE_URL` and `MULTIX_LEGACY_CLAUDE_ENV` are refused there; set them in the shell or `~/.multix/.env`. Other names, such as `NODE_OPTIONS`, `npm_config_registry`, `LD_PRELOAD` or `HTTPS_PROXY`, are not loaded, so they never reach `multix` or the tools it starts (`npm` in `multix update`, ffmpeg, ImageMagick, cwebp); one warning on stderr lists the ignored names, never their values. The shell and `~/.multix/.env` are not filtered.
 
+`*_BASE_URL`, `CLOUDFLARE_ACCOUNT_ID` and `CLOUDFLARE_AI_GATEWAY_ID` decide where your API key is sent. Values from the shell or `~/.multix/.env` are always used. A value from the project `.env` (or a legacy `.claude` file under it) is used only when every key the provider sends with it comes from that same project file (the repository's own key). That protects your key, not your data: a project `.env` that ships its own key and base URL routes that project's requests, including your prompts and any files you upload, to that host, and its key replaces yours from `~/.multix/.env`, so review a cloned repository's `.env` before running `multix` in it. If a key comes from anywhere else, the project value is ignored: the `~/.multix/.env` value is used with a warning (variable, file and key source named, never the value), or, if there is none, the command stops with an error instead of falling back to the vendor default. `multix check` shows whether each such setting is in effect or ignored. To use a project value for one command, run `MULTIX_ALLOW_PROJECT_BASE_URL=1 multix ...`; do not put the opt-in in `~/.multix/.env`, which disables the check for every directory. Non-default base URLs must be `https://` (plain `http://` only for `localhost`, `127.0.0.1`, `[::1]`), and `multix` warns once per variable on stderr with the provider and hostname only.
 ## Commands
 
 ### `multix check`

package/dist/cli.js

@@ -402,11 +402,15 @@ function parseFile(file) {
     return void 0;
   }
 }
-function loadFile(file, source, accept = () => true) {
+function loadFile(file, source, accept = () => true, onRefused) {
   const parsed = parseFile(file);
   if (!parsed) return void 0;
   for (const [name, value] of Object.entries(parsed)) {
-    if (!accept(name) || process.env[name] !== void 0) continue;
+    if (!accept(name)) {
+      onRefused?.(name);
+      continue;
+    }
+    if (process.env[name] !== void 0) continue;
     process.env[name] = value;
     fileOrigins.set(envNameKey(name), { source, file, value });
   }
@@ -421,7 +425,13 @@ function byNameKey(values) {
   }
   return out;
 }
-function loadEnv() {
+var MAX_LISTED_NAMES = 10;
+function listNames(names) {
+  const shown = names.slice(0, MAX_LISTED_NAMES).join(", ");
+  const rest = names.length - MAX_LISTED_NAMES;
+  return rest > 0 ? `${shown} and ${rest} more` : shown;
+}
+function loadEnv({ isProjectEnvName: isProjectEnvName2 }) {
   if (loaded) return;
   loaded = true;
   loadedFiles = [];
@@ -429,12 +439,22 @@ function loadEnv() {
   userFileValues = {};
   const cwd = process.cwd();
   const home = process.env.MULTIX_DISABLE_HOME_ENV ? void 0 : os.homedir();
-  loadFile(path.resolve(cwd, ".env"), "project");
+  const projectFile = path.resolve(cwd, ".env");
+  const refused = [];
+  loadFile(projectFile, "project", isProjectEnvName2, (name) => refused.push(name));
+  if (refused.length > 0) {
+    warnOnce(
+      "project-env-refused",
+      `Ignoring ${refused.length} variable(s) in project env file ${projectFile}: ${listNames(refused)}. A project .env may only set provider keys and documented multix settings; set anything else in your shell.`
+    );
+  }
   if (home) userFileValues = byNameKey(loadFile(path.join(home, ".multix", ".env"), "user"));
   if (legacyClaudeEnvEnabled()) {
     const projectLegacy = new Set(legacyFilesUnder(cwd));
+    const projectLegacyName = (name) => isLegacyAllowedName(name) && isProjectEnvName2(name);
     for (const file of legacyClaudeEnvFiles(cwd, home)) {
-      loadFile(file, projectLegacy.has(file) ? "project" : "legacy", isLegacyAllowedName);
+      if (projectLegacy.has(file)) loadFile(file, "project", projectLegacyName);
+      else loadFile(file, "legacy", isLegacyAllowedName);
     }
   }
 }
@@ -1548,7 +1568,7 @@ function uploadMimeTypeFor(filename) {
 
 // src/providers/atlascloud/commands/env.ts
 var ATLAS_KEY_URL = "https://www.atlascloud.ai/console/api-keys";
-var MODEL_ENV = {
+var ATLAS_MODEL_ENV = {
   image: "ATLASCLOUD_IMAGE_MODEL",
   imageEdit: "ATLASCLOUD_IMAGE_EDIT_MODEL",
   video: "ATLASCLOUD_VIDEO_MODEL",
@@ -1559,7 +1579,7 @@ var MODEL_ENV = {
   imageTo3d: "ATLASCLOUD_IMAGE_TO_3D_MODEL"
 };
 function atlasDefaultModel(key) {
-  return resolveKey(MODEL_ENV[key])?.trim() || ATLAS_DEFAULT_MODELS[key];
+  return resolveKey(ATLAS_MODEL_ENV[key])?.trim() || ATLAS_DEFAULT_MODELS[key];
 }
 function requireAtlasKey() {
   const apiKey = resolveRoutedKey(ATLAS_ROUTING);
@@ -12462,12 +12482,12 @@ To configure multix, set at least one provider API key:
 var FFMPEG_HINT = "ffmpeg not found \u2014 media optimize/split/batch commands unavailable.\n  Linux: sudo apt-get install ffmpeg\n  macOS: brew install ffmpeg\n  Windows: https://ffmpeg.org/download.html";
 var MAGICK_HINT = "ImageMagick (magick) not found \u2014 image optimization unavailable.\n  Linux: sudo apt-get install imagemagick\n  macOS: brew install imagemagick\n  Windows: https://imagemagick.org/script/download.php";
 
-// src/commands/check.ts
+// src/providers/provider-keys.ts
 function keyNames(routing) {
   const [envPrimary, envFallback] = routing.keyEnvs;
   return envFallback ? { envPrimary, envFallback } : { envPrimary };
 }
-var PROVIDERS = [
+var PROVIDER_KEYS = [
   {
     name: "Gemini",
     envPrimary: "GEMINI_API_KEY",
@@ -12535,6 +12555,8 @@ var PROVIDERS = [
     link: "https://app.heygen.com/developers/api"
   }
 ];
+
+// src/commands/check.ts
 function resolveProviderKey(p) {
   if (p.envPrimary === "GEMINI_API_KEY") {
     const first = listGeminiKeys()[0];
@@ -12643,7 +12665,7 @@ function registerCheckCommand(program2) {
     }
     let anyKey = false;
     const resolved = /* @__PURE__ */ new Map();
-    for (const p of PROVIDERS) {
+    for (const p of PROVIDER_KEYS) {
       const r = resolveProviderKey(p);
       resolved.set(p.name, r);
       if (r.key) anyKey = true;
@@ -13485,8 +13507,79 @@ function registerCommands(program2) {
 init_errors();
 init_redact();
 
+// src/project-env-names.ts
+var OWN_SETTINGS = [
+  "MULTIX_OUTPUT_DIR",
+  "MULTIX_IMAGE_FORMAT",
+  MAX_DOWNLOAD_ENV,
+  UPLOAD_MIN_KBPS_ENV,
+  // Read before the project file loads, so setting it there has no effect.
+  "MULTIX_DISABLE_HOME_ENV"
+];
+var INLINE_SETTINGS = [
+  "GEMINI_MODEL",
+  "MULTIMODAL_MODEL",
+  "IMAGE_GEN_MODEL",
+  "GEMINI_IMAGE_GEN_MODEL",
+  "VIDEO_GEN_MODEL",
+  "GEMINI_TTS_MODEL",
+  "TTS_MODEL",
+  "OPENAI_IMAGE_MODEL",
+  "OPENAI_TTS_MODEL",
+  "OPENAI_STT_MODEL",
+  "OPENROUTER_IMAGE_MODEL",
+  "OPENROUTER_VIDEO_MODEL",
+  "OPENROUTER_FALLBACK_MODELS",
+  "OPENROUTER_SITE_URL",
+  "OPENROUTER_APP_NAME",
+  "MINIMAX_IMAGE_MODEL",
+  "MINIMAX_VIDEO_MODEL",
+  "MINIMAX_SPEECH_MODEL",
+  "MINIMAX_MUSIC_MODEL",
+  "LEONARDO_DEFAULT_MODEL",
+  "LEONARDO_VIDEO_MODEL",
+  "BYTEPLUS_IMAGE_MODEL",
+  "BYTEPLUS_VIDEO_MODEL",
+  "BYTEPLUS_3D_MODEL",
+  "BYTEPLUS_VIDEO_PARAMS_MODE",
+  "FAL_IMAGE_MODEL",
+  "FAL_VIDEO_MODEL",
+  "FAL_VIDEO_IMAGE_MODEL",
+  "REPLICATE_IMAGE_MODEL",
+  "REPLICATE_VIDEO_MODEL",
+  "CLOUDFLARE_AI_IMAGE_MODEL",
+  "CLOUDFLARE_AI_TTS_MODEL",
+  // Read in providers/cloudflare/client.ts (collectPayloadHeader).
+  "CLOUDFLARE_AI_GATEWAY_COLLECT_LOG_PAYLOAD",
+  "NO_COLOR"
+];
+var ROUTING = [
+  ATLAS_ROUTING,
+  BYTEPLUS_ROUTING,
+  FAL_ROUTING,
+  HEYGEN_ROUTING,
+  LEONARDO_ROUTING,
+  REPLICATE_ROUTING
+];
+var PROJECT_ENV_NAMES = /* @__PURE__ */ new Set([
+  ...PROVIDER_KEYS.flatMap((p) => p.envFallback ? [p.envPrimary, p.envFallback] : [p.envPrimary]),
+  ...ROUTING.flatMap((r) => [r.name, ...r.keyEnvs]),
+  CLOUDFLARE_ACCOUNT_ID_ENV,
+  CLOUDFLARE_GATEWAY_ID_ENV,
+  ...CLOUDFLARE_VIDEO_CREDENTIALS,
+  ...Object.values(ATLAS_MODEL_ENV),
+  MAX_UPLOAD_ENV,
+  ...OWN_SETTINGS,
+  ...INLINE_SETTINGS
+]);
+var GEMINI_NUMBERED_KEY = /^GEMINI_API_KEY_\d+$/;
+function isProjectEnvName(name, platform = process.platform) {
+  const key = envNameKey(name, platform);
+  return PROJECT_ENV_NAMES.has(key) || GEMINI_NUMBERED_KEY.test(key);
+}
+
 // src/cli.ts
-loadEnv();
+loadEnv({ isProjectEnvName });
 var require3 = createRequire2(import.meta.url);
 var pkg = require3("../package.json");
 var program = new Command().name("multix").description(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrgoonie/multix",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "AI multimodal CLI — OpenAI, Gemini, MiniMax, OpenRouter, Leonardo, BytePlus, ElevenLabs, fal.ai, Atlas Cloud, Replicate, HeyGen, ffmpeg, ImageMagick, doc-to-md",
   "type": "module",
   "bin": {

package/skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: multix
 description: AI multimodal CLI — generate and edit images (OpenAI, Codex driver, Gemini Nano Banana, Imagen, MiniMax, OpenRouter, Leonardo, BytePlus Seedream, Cloudflare Workers AI FLUX.1 Schnell, fal.ai FLUX, Replicate FLUX), generate video (Gemini Veo, MiniMax Hailuo, OpenRouter via Veo/Seedance/Kling, Leonardo via Motion/Veo/Kling/Hailuo/Seedance/LTX, BytePlus Seedance, Cloudflare AI Gateway via Replicate, fal.ai queue models, Replicate direct API models incl. P-Video, HeyGen Video Agent and scripted avatar videos), video translation and lipsync (HeyGen), TTS/STT/music (OpenAI, Gemini Flash TTS incl. Gemini 3.8 with delivery-style control, MiniMax, Cloudflare Workers AI MeloTTS, ElevenLabs), 3D models (BytePlus Hyper3D/Hitem3d), analyze/transcribe media, convert documents to Markdown, optimize media via ffmpeg/ImageMagick, and self-update the CLI. Use whenever the user wants to create, edit, or transform images/video/audio/3D/documents from a CLI, mentions any of: OpenAI, Codex image driver, image-to-image, i2i, image edit, watercolor/cyberpunk style transfer, reference image, OpenRouter, Nano Banana, Flux, Seedream, Veo, Hailuo, Seedance, Kling, Cloudflare Workers AI, AI Gateway, fal.ai, Atlas Cloud, Replicate, replicate.com models, Replicate predictions, HeyGen, avatar video, talking head, Video Agent, video translation, dubbing, lipsync, video generation, text-to-video, image-to-video, i2v, ElevenLabs voice cloning, updating/upgrading multix, or asks for batch media optimization.
-version: 1.0.4 # x-release-please-version
+version: 1.0.5 # x-release-please-version
 ---
 
 # multix — AI Multimodal CLI
@@ -54,7 +54,7 @@ CLOUDFLARE_API_TOKEN  # Cloudflare Workers AI / AI Gateway token
 # Video additionally requires CLOUDFLARE_AI_GATEWAY_ID and REPLICATE_API_TOKEN.
 ```
 
-Priority: `process.env` > `cwd/.env` > `~/.multix/.env`. Set `MULTIX_LEGACY_CLAUDE_ENV=1` to also read legacy AgentKit `.claude` env files (credential names only, lowest priority); `multix check -v` lists loaded env files.
+Priority: `process.env` > `cwd/.env` > `~/.multix/.env`. Set `MULTIX_LEGACY_CLAUDE_ENV=1` to also read legacy AgentKit `.claude` env files (credential names only, lowest priority); `multix check -v` lists loaded env files. A project `.env` may only set names multix reads (provider keys and settings from `.env.example`, the documented `MULTIX_*` settings such as `MULTIX_OUTPUT_DIR`, `NO_COLOR`; never `MULTIX_ALLOW_PROJECT_BASE_URL` or `MULTIX_LEGACY_CLAUDE_ENV`); anything else there (`NODE_OPTIONS`, `npm_config_*`, `LD_PRELOAD`, proxy/TLS variables) is not loaded, with one stderr warning naming the ignored variables. Put such variables in the shell.
 
 ## Gemini text-output tasks
 
@@ -413,7 +413,7 @@ Requires `cwebp` (libwebp: `brew install webp`, `apt install webp`) on `PATH`.
 | `REPLICATE_IMAGE_MODEL` / `REPLICATE_VIDEO_MODEL` | Replicate default models (default `black-forest-labs/flux-schnell`, `prunaai/p-video`) |
 | `CLOUDFLARE_AI_IMAGE_MODEL` / `CLOUDFLARE_AI_TTS_MODEL` | Fixed-model settings: only `@cf/black-forest-labs/flux-1-schnell` and `@cf/myshell-ai/melotts` respectively are accepted |
 | `MULTIX_DISABLE_HOME_ENV` | `1` to skip every home-directory env file (`~/.multix/.env`, `~/.claude/...`) |
-| `MULTIX_LEGACY_CLAUDE_ENV` | `1` to also read legacy `.claude` env files (credential names only) |
+| `MULTIX_LEGACY_CLAUDE_ENV` | `1` to also read legacy `.claude` env files (credential names only); shell or `~/.multix/.env` only, ignored in a project `.env` |
 | `MULTIX_ALLOW_PROJECT_BASE_URL` | Set `1` for one command (`MULTIX_ALLOW_PROJECT_BASE_URL=1 multix ...`) to honour `*_BASE_URL`, `CLOUDFLARE_ACCOUNT_ID` and `CLOUDFLARE_AI_GATEWAY_ID` from the project `.env` even when the key comes from elsewhere. Without it, a project value is used only when every key sent with it is in the same project file (a project `.env` that ships its own key and base URL then receives that project's prompts and uploaded files, and its key replaces yours, so review a cloned repo's `.env` first); otherwise the `~/.multix/.env` value is used with a warning, or the command stops with a config error. `multix check` shows the effective state. Ignored in a project `.env`; avoid `~/.multix/.env` (it trusts every directory). Non-default base URLs must be `https://` (http only for localhost/127.0.0.1/[::1]) |
 
 ## Quick examples for agents