@notiamo/runner 0.2.0 → 0.2.2

package/dist/cli.js

@@ -1045,8 +1045,8 @@ var require_safePathNames = __commonJS({
     })();
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.isSafePathName = isSafePathName;
-    var path13 = __importStar(__require("path"));
-    function isSafePathName(name, localPath = path13) {
+    var path14 = __importStar(__require("path"));
+    function isSafePathName(name, localPath = path14) {
       if (!name || name === "." || name === ".." || name.includes("/")) {
         return false;
       }
@@ -1704,8 +1704,8 @@ var require_Client = __commonJS({
       /**
        * Set the working directory.
        */
-      async cd(path13) {
-        const validPath = await this.protectWhitespace(path13);
+      async cd(path14) {
+        const validPath = await this.protectWhitespace(path14);
         return this.send("CWD " + validPath);
       }
       /**
@@ -1718,8 +1718,8 @@ var require_Client = __commonJS({
        * Get the last modified time of a file. This is not supported by every FTP server, in which case
        * calling this method will throw an exception.
        */
-      async lastMod(path13) {
-        const validPath = await this.protectWhitespace(path13);
+      async lastMod(path14) {
+        const validPath = await this.protectWhitespace(path14);
         const res = await this.send(`MDTM ${validPath}`);
         const date5 = res.message.slice(4);
         return (0, parseListMLSD_1.parseMLSxDate)(date5);
@@ -1727,8 +1727,8 @@ var require_Client = __commonJS({
       /**
        * Get the size of a file.
        */
-      async size(path13) {
-        const validPath = await this.protectWhitespace(path13);
+      async size(path14) {
+        const validPath = await this.protectWhitespace(path14);
         const command = `SIZE ${validPath}`;
         const res = await this.send(command);
         const size = parseInt(res.message.slice(4), 10);
@@ -1755,8 +1755,8 @@ var require_Client = __commonJS({
        * You can ignore FTP error return codes which won't throw an exception if e.g.
        * the file doesn't exist.
        */
-      async remove(path13, ignoreErrorCodes = false) {
-        const validPath = await this.protectWhitespace(path13);
+      async remove(path14, ignoreErrorCodes = false) {
+        const validPath = await this.protectWhitespace(path14);
         if (ignoreErrorCodes) {
           return this.sendIgnoringError(`DELE ${validPath}`);
         }
@@ -1915,8 +1915,8 @@ var require_Client = __commonJS({
        *
        * @param [path]  Path to remote file or directory.
        */
-      async list(path13 = "") {
-        const validPath = await this.protectWhitespace(path13);
+      async list(path14 = "") {
+        const validPath = await this.protectWhitespace(path14);
         let lastError;
         for (const candidate of this.availableListCommands) {
           const command = validPath === "" ? candidate : `${candidate} ${validPath}`;
@@ -2085,21 +2085,21 @@ var require_Client = __commonJS({
       /**
        * Remove an empty directory, will fail if not empty.
        */
-      async removeEmptyDir(path13) {
-        const validPath = await this.protectWhitespace(path13);
+      async removeEmptyDir(path14) {
+        const validPath = await this.protectWhitespace(path14);
         return this.send(`RMD ${validPath}`);
       }
       /**
        * FTP servers can't handle filenames that have leading whitespace. This method transforms
        * a given path to fix that issue for most cases.
        */
-      async protectWhitespace(path13) {
-        if (!path13.startsWith(" ")) {
-          return path13;
+      async protectWhitespace(path14) {
+        if (!path14.startsWith(" ")) {
+          return path14;
         }
         const pwd = await this.pwd();
         const absolutePathPrefix = pwd.endsWith("/") ? pwd : pwd + "/";
-        return absolutePathPrefix + path13;
+        return absolutePathPrefix + path14;
       }
       async _exitAtCurrentDirectory(func) {
         const userDir = await this.pwd();
@@ -2176,11 +2176,11 @@ var require_Client = __commonJS({
       }
     };
     exports.Client = Client3;
-    async function ensureLocalDirectory(path13) {
+    async function ensureLocalDirectory(path14) {
       try {
-        await fsStat(path13);
+        await fsStat(path14);
       } catch (_a3) {
-        await fsMkDir(path13, { recursive: true });
+        await fsMkDir(path14, { recursive: true });
       }
     }
     async function expectedBytesFromLocalFile(fd, options) {
@@ -5088,20 +5088,20 @@ var require_compile = __commonJS({
     var util_1 = require_util();
     var validate_1 = require_validate();
     var SchemaEnv = class {
-      constructor(env) {
+      constructor(env2) {
         var _a3;
         this.refs = {};
         this.dynamicAnchors = {};
         let schema;
-        if (typeof env.schema == "object")
-          schema = env.schema;
-        this.schema = env.schema;
-        this.schemaId = env.schemaId;
-        this.root = env.root || this;
-        this.baseId = (_a3 = env.baseId) !== null && _a3 !== void 0 ? _a3 : (0, resolve_1.normalizeId)(schema === null || schema === void 0 ? void 0 : schema[env.schemaId || "$id"]);
-        this.schemaPath = env.schemaPath;
-        this.localRefs = env.localRefs;
-        this.meta = env.meta;
+        if (typeof env2.schema == "object")
+          schema = env2.schema;
+        this.schema = env2.schema;
+        this.schemaId = env2.schemaId;
+        this.root = env2.root || this;
+        this.baseId = (_a3 = env2.baseId) !== null && _a3 !== void 0 ? _a3 : (0, resolve_1.normalizeId)(schema === null || schema === void 0 ? void 0 : schema[env2.schemaId || "$id"]);
+        this.schemaPath = env2.schemaPath;
+        this.localRefs = env2.localRefs;
+        this.meta = env2.meta;
         this.$async = schema === null || schema === void 0 ? void 0 : schema.$async;
         this.refs = {};
       }
@@ -5285,15 +5285,15 @@ var require_compile = __commonJS({
           baseId = (0, resolve_1.resolveUrl)(this.opts.uriResolver, baseId, schId);
         }
       }
-      let env;
+      let env2;
       if (typeof schema != "boolean" && schema.$ref && !(0, util_1.schemaHasRulesButRef)(schema, this.RULES)) {
         const $ref = (0, resolve_1.resolveUrl)(this.opts.uriResolver, baseId, schema.$ref);
-        env = resolveSchema.call(this, root, $ref);
+        env2 = resolveSchema.call(this, root, $ref);
       }
       const { schemaId } = this.opts;
-      env = env || new SchemaEnv({ schema, schemaId, root, baseId });
-      if (env.schema !== env.root.schema)
-        return env;
+      env2 = env2 || new SchemaEnv({ schema, schemaId, root, baseId });
+      if (env2.schema !== env2.root.schema)
+        return env2;
       return void 0;
     }
   }
@@ -5477,8 +5477,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path13) {
-      let input2 = path13;
+    function removeDotSegments(path14) {
+      let input2 = path14;
       const output2 = [];
       let nextSlash = -1;
       let len = 0;
@@ -5887,8 +5887,8 @@ var require_schemes = __commonJS({
       }
       if (wsComponent.resourceName) {
         const queryIndex = wsComponent.resourceName.indexOf("?");
-        const path13 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
-        wsComponent.path = path13 && path13 !== "/" ? path13 : void 0;
+        const path14 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
+        wsComponent.path = path14 && path14 !== "/" ? path14 : void 0;
         wsComponent.query = queryIndex === -1 ? void 0 : wsComponent.resourceName.slice(queryIndex + 1);
         wsComponent.resourceName = void 0;
       }
@@ -7091,8 +7091,8 @@ var require_ref = __commonJS({
       schemaType: "string",
       code(cxt) {
         const { gen, schema: $ref, it } = cxt;
-        const { baseId, schemaEnv: env, validateName, opts, self: self2 } = it;
-        const { root } = env;
+        const { baseId, schemaEnv: env2, validateName, opts, self: self2 } = it;
+        const { root } = env2;
         if (($ref === "#" || $ref === "#/") && baseId === root.baseId)
           return callRootRef();
         const schOrEnv = compile_1.resolveRef.call(self2, root, baseId, $ref);
@@ -7102,8 +7102,8 @@ var require_ref = __commonJS({
           return callValidate(schOrEnv);
         return inlineRefSchema(schOrEnv);
         function callRootRef() {
-          if (env === root)
-            return callRef(cxt, validateName, env, env.$async);
+          if (env2 === root)
+            return callRef(cxt, validateName, env2, env2.$async);
           const rootName = gen.scopeValue("root", { ref: root });
           return callRef(cxt, (0, codegen_1._)`${rootName}.validate`, root, root.$async);
         }
@@ -7133,14 +7133,14 @@ var require_ref = __commonJS({
     exports.getValidate = getValidate;
     function callRef(cxt, v, sch, $async) {
       const { gen, it } = cxt;
-      const { allErrors, schemaEnv: env, opts } = it;
+      const { allErrors, schemaEnv: env2, opts } = it;
       const passCxt = opts.passContext ? names_1.default.this : codegen_1.nil;
       if ($async)
         callAsyncRef();
       else
         callSyncRef();
       function callAsyncRef() {
-        if (!env.$async)
+        if (!env2.$async)
           throw new Error("async schema referenced by sync schema");
         const valid = gen.let("valid");
         gen.try(() => {
@@ -17567,11 +17567,11 @@ var require_agent = __commonJS({
       };
     })();
     var WINDOWS_PIPE_REGEX = /^[/\\][/\\]\.[/\\]pipe[/\\].+/;
-    function createAgent(path13) {
-      if (process.platform === "win32" && !WINDOWS_PIPE_REGEX.test(path13)) {
-        return path13 === "pageant" ? new PageantAgent() : new CygwinAgent(path13);
+    function createAgent(path14) {
+      if (process.platform === "win32" && !WINDOWS_PIPE_REGEX.test(path14)) {
+        return path14 === "pageant" ? new PageantAgent() : new CygwinAgent(path14);
       }
-      return new OpenSSHAgent(path13);
+      return new OpenSSHAgent(path14);
     }
     var AgentProtocol = (() => {
       const SSH_AGENTC_REQUEST_IDENTITIES = 11;
@@ -22815,17 +22815,17 @@ var require_SFTP = __commonJS({
       // ===========================================================================
       // Client-specific ===========================================================
       // ===========================================================================
-      createReadStream(path13, options) {
+      createReadStream(path14, options) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        return new ReadStream(this, path13, options);
+        return new ReadStream(this, path14, options);
       }
-      createWriteStream(path13, options) {
+      createWriteStream(path14, options) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        return new WriteStream(this, path13, options);
+        return new WriteStream(this, path14, options);
       }
-      open(path13, flags_, attrs, cb) {
+      open(path14, flags_, attrs, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         if (typeof attrs === "function") {
@@ -22844,7 +22844,7 @@ var require_SFTP = __commonJS({
           attrsFlags = attrs.flags;
           attrsLen = attrs.nb;
         }
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen + 4 + 4 + attrsLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -22852,7 +22852,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         writeUInt32BE(buf, flags, p += pathLen);
         writeUInt32BE(buf, attrsFlags, p += 4);
         if (attrsLen) {
@@ -22983,7 +22983,7 @@ var require_SFTP = __commonJS({
           throw new Error("Client-only method called in server mode");
         fastXfer(fs, this, localPath, remotePath, opts, cb);
       }
-      readFile(path13, options, callback_) {
+      readFile(path14, options, callback_) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let callback;
@@ -23056,13 +23056,13 @@ var require_SFTP = __commonJS({
             return callback && callback(er, buffer);
           });
         };
-        this.open(path13, flag, 438, (er, handle_) => {
+        this.open(path14, flag, 438, (er, handle_) => {
           if (er)
             return callback && callback(er);
           handle = handle_;
           const tryStat = (er2, st) => {
             if (er2) {
-              this.stat(path13, (er_, st_) => {
+              this.stat(path14, (er_, st_) => {
                 if (er_) {
                   return this.close(handle, () => {
                     callback && callback(er2);
@@ -23083,7 +23083,7 @@ var require_SFTP = __commonJS({
           this.fstat(handle, tryStat);
         });
       }
-      writeFile(path13, data, options, callback_) {
+      writeFile(path14, data, options, callback_) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let callback;
@@ -23102,7 +23102,7 @@ var require_SFTP = __commonJS({
         if (options.encoding && !Buffer.isEncoding(options.encoding))
           throw new Error(`Unknown encoding: ${options.encoding}`);
         const flag = options.flag || "w";
-        this.open(path13, flag, options.mode, (openErr, handle) => {
+        this.open(path14, flag, options.mode, (openErr, handle) => {
           if (openErr) {
             callback && callback(openErr);
           } else {
@@ -23111,7 +23111,7 @@ var require_SFTP = __commonJS({
             if (position === null) {
               const tryStat = (er, st) => {
                 if (er) {
-                  this.stat(path13, (er_, st_) => {
+                  this.stat(path14, (er_, st_) => {
                     if (er_) {
                       return this.close(handle, () => {
                         callback && callback(er);
@@ -23130,7 +23130,7 @@ var require_SFTP = __commonJS({
           }
         });
       }
-      appendFile(path13, data, options, callback_) {
+      appendFile(path14, data, options, callback_) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let callback;
@@ -23148,12 +23148,12 @@ var require_SFTP = __commonJS({
           throw new TypeError("Bad arguments");
         if (!options.flag)
           options = Object.assign({ flag: "a" }, options);
-        this.writeFile(path13, data, options, callback);
+        this.writeFile(path14, data, options, callback);
       }
-      exists(path13, cb) {
+      exists(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        this.stat(path13, (err) => {
+        this.stat(path14, (err) => {
           cb && cb(err ? false : true);
         });
       }
@@ -23196,7 +23196,7 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} RENAME`
         );
       }
-      mkdir(path13, attrs, cb) {
+      mkdir(path14, attrs, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let flags = 0;
@@ -23210,7 +23210,7 @@ var require_SFTP = __commonJS({
           flags = attrs.flags;
           attrsLen = attrs.nb;
         }
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen + 4 + attrsLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23218,7 +23218,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         writeUInt32BE(buf, flags, p += pathLen);
         if (attrsLen) {
           p += 4;
@@ -23234,10 +23234,10 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} MKDIR`
         );
       }
-      rmdir(path13, cb) {
+      rmdir(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23245,7 +23245,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = { cb };
         const isBuffered = sendOrBuffer(this, buf);
         this._debug && this._debug(
@@ -23335,10 +23335,10 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} FSTAT`
         );
       }
-      stat(path13, cb) {
+      stat(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23346,17 +23346,17 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = { cb };
         const isBuffered = sendOrBuffer(this, buf);
         this._debug && this._debug(
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} STAT`
         );
       }
-      lstat(path13, cb) {
+      lstat(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23364,17 +23364,17 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = { cb };
         const isBuffered = sendOrBuffer(this, buf);
         this._debug && this._debug(
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} LSTAT`
         );
       }
-      opendir(path13, cb) {
+      opendir(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23382,14 +23382,14 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = { cb };
         const isBuffered = sendOrBuffer(this, buf);
         this._debug && this._debug(
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} OPENDIR`
         );
       }
-      setstat(path13, attrs, cb) {
+      setstat(path14, attrs, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let flags = 0;
@@ -23401,7 +23401,7 @@ var require_SFTP = __commonJS({
         } else if (typeof attrs === "function") {
           cb = attrs;
         }
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen + 4 + attrsLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23409,7 +23409,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         writeUInt32BE(buf, flags, p += pathLen);
         if (attrsLen) {
           p += 4;
@@ -23469,8 +23469,8 @@ var require_SFTP = __commonJS({
           mtime: toUnixTimestamp(mtime)
         }, cb);
       }
-      utimes(path13, atime, mtime, cb) {
-        return this.setstat(path13, {
+      utimes(path14, atime, mtime, cb) {
+        return this.setstat(path14, {
           atime: toUnixTimestamp(atime),
           mtime: toUnixTimestamp(mtime)
         }, cb);
@@ -23481,8 +23481,8 @@ var require_SFTP = __commonJS({
           gid
         }, cb);
       }
-      chown(path13, uid, gid, cb) {
-        return this.setstat(path13, {
+      chown(path14, uid, gid, cb) {
+        return this.setstat(path14, {
           uid,
           gid
         }, cb);
@@ -23492,15 +23492,15 @@ var require_SFTP = __commonJS({
           mode
         }, cb);
       }
-      chmod(path13, mode, cb) {
-        return this.setstat(path13, {
+      chmod(path14, mode, cb) {
+        return this.setstat(path14, {
           mode
         }, cb);
       }
-      readlink(path13, cb) {
+      readlink(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23508,7 +23508,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = {
           cb: (err, names) => {
             if (typeof cb !== "function")
@@ -23553,10 +23553,10 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} SYMLINK`
         );
       }
-      realpath(path13, cb) {
+      realpath(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23564,7 +23564,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = {
           cb: (err, names) => {
             if (typeof cb !== "function")
@@ -23609,13 +23609,13 @@ var require_SFTP = __commonJS({
           this._debug(`SFTP: Outbound: ${which} posix-rename@openssh.com`);
         }
       }
-      ext_openssh_statvfs(path13, cb) {
+      ext_openssh_statvfs(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         const ext = this._extensions["statvfs@openssh.com"];
         if (!ext || ext !== "2")
           throw new Error("Server does not support this extended request");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + 19 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23625,7 +23625,7 @@ var require_SFTP = __commonJS({
         writeUInt32BE(buf, 19, p);
         buf.utf8Write("statvfs@openssh.com", p += 4, 19);
         writeUInt32BE(buf, pathLen, p += 19);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = { extended: "statvfs@openssh.com", cb };
         const isBuffered = sendOrBuffer(this, buf);
         if (this._debug) {
@@ -23711,7 +23711,7 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} fsync@openssh.com`
         );
       }
-      ext_openssh_lsetstat(path13, attrs, cb) {
+      ext_openssh_lsetstat(path14, attrs, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         const ext = this._extensions["lsetstat@openssh.com"];
@@ -23726,7 +23726,7 @@ var require_SFTP = __commonJS({
         } else if (typeof attrs === "function") {
           cb = attrs;
         }
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + 20 + 4 + pathLen + 4 + attrsLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23736,7 +23736,7 @@ var require_SFTP = __commonJS({
         writeUInt32BE(buf, 20, p);
         buf.utf8Write("lsetstat@openssh.com", p += 4, 20);
         writeUInt32BE(buf, pathLen, p += 20);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         writeUInt32BE(buf, flags, p += pathLen);
         if (attrsLen) {
           p += 4;
@@ -23753,13 +23753,13 @@ var require_SFTP = __commonJS({
           this._debug(`SFTP: Outbound: ${status5} lsetstat@openssh.com`);
         }
       }
-      ext_openssh_expandPath(path13, cb) {
+      ext_openssh_expandPath(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         const ext = this._extensions["expand-path@openssh.com"];
         if (ext !== "1")
           throw new Error("Server does not support this extended request");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + 23 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23769,7 +23769,7 @@ var require_SFTP = __commonJS({
         writeUInt32BE(buf, 23, p);
         buf.utf8Write("expand-path@openssh.com", p += 4, 23);
         writeUInt32BE(buf, pathLen, p += 20);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = {
           cb: (err, names) => {
             if (typeof cb !== "function")
@@ -25047,12 +25047,12 @@ var require_SFTP = __commonJS({
       [REQUEST.LSTAT]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed LSTAT packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received LSTAT (id:${reqID})`);
-        if (!sftp.emit("LSTAT", reqID, path13)) {
+        if (!sftp.emit("LSTAT", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -25071,13 +25071,13 @@ var require_SFTP = __commonJS({
       [REQUEST.SETSTAT]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         const attrs = readAttrs(sftp._biOpt);
         bufferParser.clear();
         if (attrs === void 0)
           return doFatalSFTPError(sftp, "Malformed SETSTAT packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received SETSTAT (id:${reqID})`);
-        if (!sftp.emit("SETSTAT", reqID, path13, attrs)) {
+        if (!sftp.emit("SETSTAT", reqID, path14, attrs)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -25099,12 +25099,12 @@ var require_SFTP = __commonJS({
       [REQUEST.OPENDIR]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed OPENDIR packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received OPENDIR (id:${reqID})`);
-        if (!sftp.emit("OPENDIR", reqID, path13)) {
+        if (!sftp.emit("OPENDIR", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -25123,63 +25123,63 @@ var require_SFTP = __commonJS({
       [REQUEST.REMOVE]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed REMOVE packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received REMOVE (id:${reqID})`);
-        if (!sftp.emit("REMOVE", reqID, path13)) {
+        if (!sftp.emit("REMOVE", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
       [REQUEST.MKDIR]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         const attrs = readAttrs(sftp._biOpt);
         bufferParser.clear();
         if (attrs === void 0)
           return doFatalSFTPError(sftp, "Malformed MKDIR packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received MKDIR (id:${reqID})`);
-        if (!sftp.emit("MKDIR", reqID, path13, attrs)) {
+        if (!sftp.emit("MKDIR", reqID, path14, attrs)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
       [REQUEST.RMDIR]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed RMDIR packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received RMDIR (id:${reqID})`);
-        if (!sftp.emit("RMDIR", reqID, path13)) {
+        if (!sftp.emit("RMDIR", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
       [REQUEST.REALPATH]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed REALPATH packet");
         sftp._debug && sftp._debug(
           `SFTP: Inbound: Received REALPATH (id:${reqID})`
         );
-        if (!sftp.emit("REALPATH", reqID, path13)) {
+        if (!sftp.emit("REALPATH", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
       [REQUEST.STAT]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed STAT packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received STAT (id:${reqID})`);
-        if (!sftp.emit("STAT", reqID, path13)) {
+        if (!sftp.emit("STAT", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -25199,14 +25199,14 @@ var require_SFTP = __commonJS({
       [REQUEST.READLINK]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed READLINK packet");
         sftp._debug && sftp._debug(
           `SFTP: Inbound: Received READLINK (id:${reqID})`
         );
-        if (!sftp.emit("READLINK", reqID, path13)) {
+        if (!sftp.emit("READLINK", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -25277,7 +25277,7 @@ var require_SFTP = __commonJS({
     function roundUpToMultipleOf8(n) {
       return n + 7 & ~7;
     }
-    function ReadStream(sftp, path13, options) {
+    function ReadStream(sftp, path14, options) {
       if (options === void 0)
         options = {};
       else if (typeof options === "string")
@@ -25291,7 +25291,7 @@ var require_SFTP = __commonJS({
       options.emitClose = false;
       options.autoDestroy = false;
       ReadableStream2.call(this, options);
-      this.path = path13;
+      this.path = path14;
       this.flags = options.flags === void 0 ? "r" : options.flags;
       this.mode = options.mode === void 0 ? 438 : options.mode;
       this.start = options.start;
@@ -25422,7 +25422,7 @@ var require_SFTP = __commonJS({
       },
       configurable: true
     });
-    function WriteStream(sftp, path13, options) {
+    function WriteStream(sftp, path14, options) {
       if (options === void 0)
         options = {};
       else if (typeof options === "string")
@@ -25434,7 +25434,7 @@ var require_SFTP = __commonJS({
       options.emitClose = false;
       options.autoDestroy = false;
       WritableStream.call(this, options);
-      this.path = path13;
+      this.path = path14;
       this.flags = options.flags === void 0 ? "w" : options.flags;
       this.mode = options.mode === void 0 ? 438 : options.mode;
       this.start = options.start;
@@ -27403,12 +27403,12 @@ var require_client = __commonJS({
         );
         return this;
       }
-      sftp(env, cb) {
+      sftp(env2, cb) {
         if (!this._sock || !isWritable(this._sock))
           throw new Error("Not connected");
-        if (typeof env === "function") {
-          cb = env;
-          env = void 0;
+        if (typeof env2 === "function") {
+          cb = env2;
+          env2 = void 0;
         }
         openChannel(this, "sftp", (err, sftp) => {
           if (err) {
@@ -27451,8 +27451,8 @@ var require_client = __commonJS({
             sftp.on("ready", onReady).on("error", onError).on("exit", onExit).on("close", onExit);
             sftp._init();
           };
-          if (typeof env === "object" && env !== null) {
-            reqEnv(sftp, env, (err2) => {
+          if (typeof env2 === "object" && env2 !== null) {
+            reqEnv(sftp, env2, (err2) => {
               if (err2) {
                 cb(err2);
                 return;
@@ -27657,7 +27657,7 @@ var require_client = __commonJS({
       });
       chan._client._protocol.exec(chan.outgoing.id, cmd, true);
     }
-    function reqEnv(chan, env, cb) {
+    function reqEnv(chan, env2, cb) {
       const wantReply = typeof cb === "function";
       if (chan.outgoing.state !== "open") {
         if (wantReply)
@@ -27673,10 +27673,10 @@ var require_client = __commonJS({
           cb();
         });
       }
-      const keys = Object.keys(env || {});
+      const keys = Object.keys(env2 || {});
       for (let i = 0; i < keys.length; ++i) {
         const key = keys[i];
-        const val = env[key];
+        const val = env2[key];
         chan._client._protocol.env(chan.outgoing.id, key, val, wantReply);
       }
     }
@@ -29659,7 +29659,9 @@ function paths(dir) {
     /** Each run's Claude Code settings file, `<runId>.json`, there only while the run lasts. */
     runsDir: path.join(dir, "runs"),
     /** The runner's bare mirrors of the projects' repositories: the only ones that talk to GitHub. */
-    gitDir: path.join(dir, "git")
+    gitDir: path.join(dir, "git"),
+    /** One `<projectId>.env` per project the machine's owner gives variables to (see project-env.ts). */
+    envDir: path.join(dir, "env")
   };
 }
 function loadConfig(dir = defaultDir()) {
@@ -29682,6 +29684,7 @@ function saveConfig(cfg, dir = defaultDir()) {
 }
 
 // src/args.ts
+var WITH_ARG = /* @__PURE__ */ new Set(["env"]);
 function parseArgs(argv) {
   const out = {};
   for (let i = 0; i < argv.length; i++) {
@@ -29691,13 +29694,14 @@ function parseArgs(argv) {
       if (!v || !PROFILE_RE.test(v)) return { error: `--profile needs a name of letters, digits and dashes (1 to 32), not "${v ?? ""}".` };
       out.profile = v;
     } else if (out.cmd === void 0) out.cmd = a;
+    else if (out.arg === void 0 && WITH_ARG.has(out.cmd)) out.arg = a;
     else return { error: `Unexpected argument: ${a}` };
   }
   return out;
 }
 
 // src/commands.ts
-import { readFileSync as readFileSync4 } from "node:fs";
+import { readFileSync as readFileSync5 } from "node:fs";
 import os6 from "node:os";
 import { createInterface } from "node:readline/promises";
 import { Writable as Writable2 } from "node:stream";
@@ -29813,9 +29817,9 @@ var ENV_ALLOW_WINDOWS = [
   "TEMP",
   "TMP"
 ];
-function baseEnv(env, windows) {
+function baseEnv(env2, windows) {
   const out = {};
-  for (const [k, v] of Object.entries(env)) {
+  for (const [k, v] of Object.entries(env2)) {
     if (v === void 0) continue;
     const key = windows ? k.toUpperCase() : k;
     if (!(ENV_ALLOW.includes(key) || ENV_ALLOW_PREFIX.some((p) => key.startsWith(p)) || windows && ENV_ALLOW_WINDOWS.includes(key))) continue;
@@ -29884,8 +29888,9 @@ function claudeEngine(deps = {}) {
     "user"
   ];
   const engineEnv = (o) => ({
-    ...baseEnv(deps.env ?? process.env, windows),
+    // The project's own variables first: the runner's environment (PATH, proxies, CA files…) and its tokens win.
     ...o.env,
+    ...baseEnv(deps.env ?? process.env, windows),
     ...AGENT_GIT_ENV,
     CLAUDE_CONFIG_DIR: o.claudeConfigDir,
     NOTIAMO_RUN_TOKEN: o.mcp.token,
@@ -30156,11 +30161,11 @@ var realExec = async (file2, args, opts) => {
   if (r.code === 127 && process.platform === "win32") return run(file2, args.map(quoteForCmd), opts?.env, true, opts?.timeout);
   return r;
 };
-function run(file2, args, env, shell, timeout) {
+function run(file2, args, env2, shell, timeout) {
   return new Promise((resolve) => {
     let stdout = "";
     let stderr = "";
-    const child = spawn2(file2, args, { env: env ?? process.env, shell, stdio: ["ignore", "pipe", "pipe"], windowsHide: true, ...timeout ? { timeout, killSignal: "SIGKILL" } : {} });
+    const child = spawn2(file2, args, { env: env2 ?? process.env, shell, stdio: ["ignore", "pipe", "pipe"], windowsHide: true, ...timeout ? { timeout, killSignal: "SIGKILL" } : {} });
     child.stdout.on("data", (d) => {
       stdout += d.toString();
     });
@@ -30267,8 +30272,8 @@ function findOnPath(name, dirs, platform) {
   }
   return null;
 }
-function machineToolDirs(env = process.env, argv1 = process.argv[1], execPath = process.execPath, platform = process.platform) {
-  const pathDirs = (env.PATH ?? env.Path ?? "").split(path2.delimiter).filter((d) => d && path2.isAbsolute(d));
+function machineToolDirs(env2 = process.env, argv1 = process.argv[1], execPath = process.execPath, platform = process.platform) {
+  const pathDirs = (env2.PATH ?? env2.Path ?? "").split(path2.delimiter).filter((d) => d && path2.isAbsolute(d));
   const dirs = pathDirs.map(realPath);
   for (const bin of ["git", "claude"]) {
     const found = findOnPath(bin, pathDirs, platform);
@@ -30422,8 +30427,9 @@ function sandboxSettings(o) {
       },
       network: {
         allowedDomains: [...new Set(domains)],
-        // macOS: lets the engine's shell commands reach the run's local helper on 127.0.0.1 (no effect on Linux).
-        ...o.wordpressHost ? { allowLocalBinding: true } : {}
+        // macOS: lets the engine's shell commands reach 127.0.0.1: the run's local helper on a WordPress run, the
+        // owner's own services (Postgres, MinIO…) on a project with an env file (no effect on Linux).
+        ...o.wordpressHost || o.localServices ? { allowLocalBinding: true } : {}
       }
     }
   };
@@ -30444,9 +30450,9 @@ import path3 from "node:path";
 
 // src/service/common.ts
 var startArgs = (profile) => profile ? ["start", "--profile", profile] : ["start"];
-function serviceEnv(env = {}) {
+function serviceEnv(env2 = {}) {
   const out = {};
-  for (const k of ["PATH", "NOTIAMO_RUNNER_HOME"]) if (env[k]) out[k] = env[k];
+  for (const k of ["PATH", "NOTIAMO_RUNNER_HOME"]) if (env2[k]) out[k] = env2[k];
   return out;
 }
 function must(what, r) {
@@ -30461,7 +30467,7 @@ var BOOTSTRAP_TRIES = 5;
 var BOOTSTRAP_RETRY_MS = 500;
 var esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 function renderPlist(o) {
-  const env = Object.entries(serviceEnv(o.env)).map(([k, v]) => `    <key>${esc(k)}</key>
+  const env2 = Object.entries(serviceEnv(o.env)).map(([k, v]) => `    <key>${esc(k)}</key>
     <string>${esc(v)}</string>`).join("\n");
   return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -30487,7 +30493,7 @@ ${startArgs(o.profile).map((a) => `    <string>${esc(a)}</string>`).join("\n")}
   <string>${esc(o.log)}</string>
   <key>EnvironmentVariables</key>
   <dict>
-${env}
+${env2}
   </dict>
 </dict>
 </plist>
@@ -30536,7 +30542,7 @@ var unit = (profile) => profile ? `notiamo-runner-${profile}` : "notiamo-runner"
 var unitPath = (home, profile) => path4.join(home, ".config", "systemd", "user", `${unit(profile)}.service`);
 var q = (s) => `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
 function renderUnit(o) {
-  const env = Object.entries(serviceEnv(o.env)).map(([k, v]) => `Environment=${q(`${k}=${v}`)}`).join("\n");
+  const env2 = Object.entries(serviceEnv(o.env)).map(([k, v]) => `Environment=${q(`${k}=${v}`)}`).join("\n");
   return `[Unit]
 Description=Notiamo runner${o.profile ? ` (${o.profile})` : ""}
 After=network-online.target
@@ -30547,7 +30553,7 @@ Restart=always
 RestartSec=5
 StandardOutput=append:${o.log}
 StandardError=append:${o.log}
-${env}
+${env2}
 
 [Install]
 WantedBy=default.target
@@ -30623,8 +30629,8 @@ var serviceStatus = async (o) => impl(o).status(withUid(o));
 // src/init.ts
 var DEFAULT_HOST = "https://my.notiamo.com";
 var KEYCHAIN_WARNING = "Warning: this user's keychain holds a GitHub login. A run on this machine could reach it. Remove it (Keychain Access, search github.com) or install the runner under a separate macOS user. The runner itself does not need it.";
-var runInteractive = (file2, args, env) => new Promise((resolve, reject) => {
-  const child = spawn3(file2, args, { stdio: "inherit", env, shell: process.platform === "win32" });
+var runInteractive = (file2, args, env2) => new Promise((resolve, reject) => {
+  const child = spawn3(file2, args, { stdio: "inherit", env: env2, shell: process.platform === "win32" });
   child.on("error", reject);
   child.on("exit", (code) => resolve(code ?? 1));
 });
@@ -30636,7 +30642,7 @@ async function runInit(deps) {
   const dir = deps.dir ?? profileDir(deps.profile);
   const platform = deps.platform ?? process.platform;
   const p = paths(dir);
-  const env = deps.env ?? process.env;
+  const env2 = deps.env ?? process.env;
   const print = deps.print ?? ((s) => console.log(s));
   const ask = async (q2, def) => (await deps.prompt(q2, { default: def })).trim() || def;
   const token = (await deps.prompt("Runner token (made in Notiamo under Settings \u203A Agent runs \u203A Runners; nothing shows while you paste it): ", { hidden: true })).trim();
@@ -30644,55 +30650,90 @@ async function runInit(deps) {
   const host = normalizeHost(await ask("Notiamo address: ", DEFAULT_HOST));
   const hostname3 = deps.hostname ?? os4.hostname();
   const name = await ask("Name of this runner: ", hostname3);
-  const version2 = await deps.exec("claude", ["--version"], { env });
+  const engineVersion = await checkMachine(deps, env2, platform, print);
+  try {
+    await new NotiamoApi({ host, token }, deps.fetch).hello({ version: VERSION, os: platform, engine: "claude", engineVersion });
+  } catch (e) {
+    if (e instanceof ApiError && e.status === 401) throw new Error("The runner token was not accepted.");
+    throw new Error(`Notiamo at ${host} did not answer: ${e instanceof Error ? e.message : String(e)}`);
+  }
+  const claudeEnv = { ...env2, CLAUDE_CONFIG_DIR: p.claudeConfigDir };
+  if (!deps.skipLogin) {
+    print("Sign Claude Code in for the runner (its own sign-in, kept apart from yours):");
+    await (deps.interactive ?? runInteractive)("claude", ["auth", "login"], claudeEnv);
+  }
+  const check2 = await deps.exec("claude", ["-p", "say ok"], { env: claudeEnv });
+  if (check2.code !== 0) throw new Error("Claude Code is not signed in for the runner.");
+  await warnKeychain(deps, env2, platform, print);
+  saveConfig({ host, token, name, dataDir: dir, engine: "claude" }, dir);
+  await installService({
+    platform,
+    profile: deps.profile,
+    paths: p,
+    exec: deps.exec,
+    home: deps.home ?? os4.homedir(),
+    env: env2,
+    nodePath: deps.nodePath ?? process.execPath,
+    cliPath: deps.cliPath ?? process.argv[1]
+  });
+  print(`Runner ${name}${deps.profile ? ` (profile ${deps.profile})` : ""} is installed and running. Logs: ${p.log}`);
+}
+async function checkMachine(deps, env2, platform, print) {
+  const version2 = await deps.exec("claude", ["--version"], { env: env2 });
   if (version2.code !== 0) throw new Error("Claude Code is not installed. Install it first: https://claude.com/claude-code");
   const engineVersion = version2.stdout.trim().slice(0, 100) || "unknown";
   if (engineTooOld(engineVersion)) throw new Error(`Claude Code 2.1.314 or newer is needed (yours: ${engineVersion}). Update it: claude update`);
-  const git = await deps.exec("git", ["--version"], { env });
+  const git = await deps.exec("git", ["--version"], { env: env2 });
   const gitVersion = git.code === 0 ? /git version (\d+)\.(\d+)/.exec(git.stdout) ?? null : null;
   if (!gitVersion || Number(gitVersion[1]) < 2 || Number(gitVersion[1]) === 2 && Number(gitVersion[2]) < 31) {
     const yours = git.code === 0 ? git.stdout.trim().replace(/^git version /, "").slice(0, 60) || "unknown" : "not installed";
     throw new Error(`git 2.31 or newer is needed (yours: ${yours}). Update git.`);
   }
   if (platform === "linux") {
-    const bwrap = await deps.exec("which", ["bwrap"], { env });
-    const socat = await deps.exec("which", ["socat"], { env });
+    const bwrap = await deps.exec("which", ["bwrap"], { env: env2 });
+    const socat = await deps.exec("which", ["socat"], { env: env2 });
     if (bwrap.code !== 0 || socat.code !== 0) {
       throw new Error("The sandbox needs bubblewrap and socat. Install them (Debian/Ubuntu: sudo apt install bubblewrap socat), then run init again.");
     }
   } else if (platform === "win32") {
     print("Note: on Windows without WSL2, shell commands of a run are not sandboxed; Claude's own file tools are still limited to the run folder.");
   }
+  return engineVersion;
+}
+async function warnKeychain(deps, env2, platform, print) {
+  if (platform !== "darwin") return;
+  const git = await deps.exec("security", ["find-internet-password", "-s", "github.com"], { env: env2, timeout: 1e4 });
+  const gh = await deps.exec("security", ["find-generic-password", "-s", "gh:github.com"], { env: env2, timeout: 1e4 });
+  if (git.code === 0 || gh.code === 0) print(KEYCHAIN_WARNING);
+}
+async function runUpdate(deps) {
+  const dir = deps.dir ?? profileDir(deps.profile);
+  const platform = deps.platform ?? process.platform;
+  const p = paths(dir);
+  const env2 = deps.env ?? process.env;
+  const print = deps.print ?? ((s) => console.log(s));
+  const cfg = loadConfig(dir);
+  const engineVersion = await checkMachine(deps, env2, platform, print);
   try {
-    await new NotiamoApi({ host, token }, deps.fetch).hello({ version: VERSION, os: platform, engine: "claude", engineVersion });
+    await new NotiamoApi({ host: cfg.host, token: cfg.token }, deps.fetch).hello({ version: VERSION, os: platform, engine: "claude", engineVersion });
   } catch (e) {
-    if (e instanceof ApiError && e.status === 401) throw new Error("The runner token was not accepted.");
-    throw new Error(`Notiamo at ${host} did not answer: ${e instanceof Error ? e.message : String(e)}`);
+    if (e instanceof ApiError && e.status === 401) throw new Error("The saved runner token is not accepted any more (revoked or deleted). Make a new runner in Notiamo and run init.");
+    throw new Error(`Notiamo at ${cfg.host} did not answer: ${e instanceof Error ? e.message : String(e)}`);
   }
-  const claudeEnv = { ...env, CLAUDE_CONFIG_DIR: p.claudeConfigDir };
-  if (!deps.skipLogin) {
-    print("Sign Claude Code in for the runner (its own sign-in, kept apart from yours):");
-    await (deps.interactive ?? runInteractive)("claude", ["auth", "login"], claudeEnv);
-  }
-  const check2 = await deps.exec("claude", ["-p", "say ok"], { env: claudeEnv });
-  if (check2.code !== 0) throw new Error("Claude Code is not signed in for the runner.");
-  if (platform === "darwin") {
-    const git2 = await deps.exec("security", ["find-internet-password", "-s", "github.com"], { env, timeout: 1e4 });
-    const gh = await deps.exec("security", ["find-generic-password", "-s", "gh:github.com"], { env, timeout: 1e4 });
-    if (git2.code === 0 || gh.code === 0) print(KEYCHAIN_WARNING);
-  }
-  saveConfig({ host, token, name, dataDir: dir, engine: "claude" }, dir);
+  const check2 = await deps.exec("claude", ["-p", "say ok"], { env: { ...env2, CLAUDE_CONFIG_DIR: p.claudeConfigDir } });
+  if (check2.code !== 0) throw new Error("Claude Code is not signed in for the runner. Run: notiamo-runner init");
+  await warnKeychain(deps, env2, platform, print);
   await installService({
     platform,
     profile: deps.profile,
     paths: p,
     exec: deps.exec,
     home: deps.home ?? os4.homedir(),
-    env,
+    env: env2,
     nodePath: deps.nodePath ?? process.execPath,
     cliPath: deps.cliPath ?? process.argv[1]
   });
-  print(`Runner ${name}${deps.profile ? ` (profile ${deps.profile})` : ""} is installed and running. Logs: ${p.log}`);
+  print(`Runner ${cfg.name}${deps.profile ? ` (profile ${deps.profile})` : ""} now runs version ${VERSION}. Logs: ${p.log}`);
 }
 
 // src/log.ts
@@ -30713,8 +30754,8 @@ function createLogger(file2) {
 }
 
 // src/loop.ts
-import { mkdirSync as mkdirSync8, readFileSync as readFileSync3, renameSync as renameSync2, rmSync as rmSync6, writeFileSync as writeFileSync7 } from "node:fs";
-import path12 from "node:path";
+import { mkdirSync as mkdirSync9, readFileSync as readFileSync4, renameSync as renameSync2, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "node:fs";
+import path13 from "node:path";
 import { setTimeout as delay2 } from "node:timers/promises";
 
 // src/clones.ts
@@ -30808,8 +30849,8 @@ function removeStaleClones(projectsDir, gitDir, keepDays, busyProjectIds, now, l
 var errorText = (e) => e instanceof Error ? e.message : String(e);
 
 // src/run.ts
-import { chmodSync as chmodSync2, mkdirSync as mkdirSync7, mkdtempSync, rmSync as rmSync5, writeFileSync as writeFileSync6 } from "node:fs";
-import path11 from "node:path";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync8, mkdtempSync, rmSync as rmSync5, writeFileSync as writeFileSync7 } from "node:fs";
+import path12 from "node:path";
 
 // src/project-folder.ts
 import { execFile } from "node:child_process";
@@ -30830,9 +30871,9 @@ var execFileAsync = async (file2, args, opts) => {
 };
 var SAFE_GIT = ["-c", "core.hooksPath=/dev/null", "-c", "core.fsmonitor=false"];
 function gitEnv() {
-  const env = { ...process.env, GIT_TERMINAL_PROMPT: "0", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: os5.devNull };
-  for (const k of Object.keys(env)) if (/^GIT_CONFIG_(COUNT|KEY_\d+|VALUE_\d+|PARAMETERS)$/.test(k) || k === "GIT_ASKPASS") delete env[k];
-  return env;
+  const env2 = { ...process.env, GIT_TERMINAL_PROMPT: "0", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: os5.devNull };
+  for (const k of Object.keys(env2)) if (/^GIT_CONFIG_(COUNT|KEY_\d+|VALUE_\d+|PARAMETERS)$/.test(k) || k === "GIT_ASKPASS") delete env2[k];
+  return env2;
 }
 function githubAuthEnv(token) {
   return {
@@ -30855,8 +30896,8 @@ async function prepareGithubFolder(dirs, projectId, g, token, exec = execFileAsy
   const folder = projectFolder(dirs.projectsDir, slot, projectId);
   const bare = barePath(dirs.gitDir, projectId);
   const saved = savedSnapshotPath(dirs.gitDir, projectId, slot);
-  const env = gitEnv();
-  const gitIn = (dir, args, timeout = GIT_TIMEOUT_MS) => exec("git", [...SAFE_GIT, "-C", dir, ...args], { env, timeout });
+  const env2 = gitEnv();
+  const gitIn = (dir, args, timeout = GIT_TIMEOUT_MS) => exec("git", [...SAFE_GIT, "-C", dir, ...args], { env: env2, timeout });
   if (existsSync4(path7.join(bare, "HEAD"))) {
     await gitIn(bare, ["remote", "set-url", "--", "origin", g.cloneUrl]);
     await exec("git", [...SAFE_GIT, "-C", bare, "fetch", "origin", "--prune", "+refs/heads/*:refs/heads/*"], { env: githubAuthEnv(await token()), timeout: CLONE_TIMEOUT_MS });
@@ -30880,7 +30921,7 @@ async function prepareGithubFolder(dirs, projectId, g, token, exec = execFileAsy
     await gitIn(folder, ["fetch", "origin", "--prune"]);
   } else {
     mkdirSync6(slotDir, { recursive: true, mode: 448 });
-    await exec("git", [...SAFE_GIT, "clone", "--no-hardlinks", "--", bare, folder], { cwd: slotDir, env, timeout: CLONE_TIMEOUT_MS });
+    await exec("git", [...SAFE_GIT, "clone", "--no-hardlinks", "--", bare, folder], { cwd: slotDir, env: env2, timeout: CLONE_TIMEOUT_MS });
   }
   const { stdout } = await gitIn(folder, ["rev-parse", "--abbrev-ref", "HEAD"]);
   if (stdout.trim() !== g.branch) {
@@ -30912,8 +30953,8 @@ function readSavedSnapshot(file2) {
   }
 }
 async function pushBranch(folder, bare, branch, token, exec = execFileAsync) {
-  const env = gitEnv();
-  await exec("git", [...SAFE_GIT, "-C", bare, "fetch", folder, `+refs/heads/${branch}:refs/heads/${branch}`], { env, timeout: GIT_TIMEOUT_MS }).catch(gitError);
+  const env2 = gitEnv();
+  await exec("git", [...SAFE_GIT, "-C", bare, "fetch", folder, `+refs/heads/${branch}:refs/heads/${branch}`], { env: env2, timeout: GIT_TIMEOUT_MS }).catch(gitError);
   const auth = githubAuthEnv(await token());
   await exec("git", [...SAFE_GIT, "-C", bare, "push", "--no-verify", "origin", branch], { env: auth, timeout: GIT_TIMEOUT_MS }).catch(gitError);
 }
@@ -31006,6 +31047,110 @@ function exists(p) {
   }
 }
 
+// src/project-env.ts
+import { chmodSync as chmodSync2, existsSync as existsSync5, mkdirSync as mkdirSync7, readFileSync as readFileSync3, writeFileSync as writeFileSync6 } from "node:fs";
+import path8 from "node:path";
+var PROTECTED_KEYS = /* @__PURE__ */ new Set([
+  "PATH",
+  "HOME",
+  "USER",
+  "LOGNAME",
+  "SHELL",
+  "TMPDIR",
+  "TERM",
+  "LANG",
+  "TZ",
+  "CLAUDE_CONFIG_DIR",
+  "HTTP_PROXY",
+  "HTTPS_PROXY",
+  "NO_PROXY",
+  "NODE_EXTRA_CA_CERTS",
+  "SSL_CERT_FILE",
+  "SSL_CERT_DIR",
+  "NODE_OPTIONS",
+  "NODE_TLS_REJECT_UNAUTHORIZED",
+  "PATHEXT",
+  "SYSTEMROOT",
+  "SYSTEMDRIVE",
+  "WINDIR",
+  "COMSPEC",
+  "USERPROFILE",
+  "USERNAME",
+  "HOMEDRIVE",
+  "HOMEPATH",
+  "APPDATA",
+  "LOCALAPPDATA",
+  "PROGRAMDATA",
+  "PROGRAMFILES",
+  "PROGRAMFILES(X86)",
+  "TEMP",
+  "TMP"
+]);
+var PROTECTED_PREFIXES = ["NOTIAMO_", "GIT_", "CLAUDE_", "ANTHROPIC_", "LC_", "XDG_"];
+var KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+var PROJECT_ID_RE = /^[\w-]+$/;
+var isProtectedKey = (key) => PROTECTED_KEYS.has(key.toUpperCase()) || PROTECTED_PREFIXES.some((p) => key.toUpperCase().startsWith(p));
+var unescape2 = (s) => s.replace(/\\([ntr\\"])/g, (_, c) => ({ n: "\n", t: "	", r: "\r", "\\": "\\", '"': '"' })[c]);
+function parseEnvFile(text) {
+  const env2 = {};
+  const skipped = [];
+  const lines2 = text.split(/\r?\n/);
+  for (let i = 0; i < lines2.length; i++) {
+    const raw = lines2[i].trim();
+    if (raw === "" || raw.startsWith("#")) continue;
+    const line = raw.startsWith("export ") ? raw.slice(7).trimStart() : raw;
+    const eq = line.indexOf("=");
+    const key = eq < 0 ? "" : line.slice(0, eq).trim();
+    if (eq < 0 || !KEY_RE.test(key)) {
+      skipped.push({ line: i + 1, key: KEY_RE.test(key) ? key : key.split(/\s/)[0] ?? "", reason: "bad_line" });
+      continue;
+    }
+    if (isProtectedKey(key)) {
+      skipped.push({ line: i + 1, key, reason: "protected" });
+      continue;
+    }
+    let value = line.slice(eq + 1).trim();
+    if (value.length >= 2 && value.startsWith('"') && value.endsWith('"')) value = unescape2(value.slice(1, -1));
+    else if (value.length >= 2 && value.startsWith("'") && value.endsWith("'")) value = value.slice(1, -1);
+    env2[key] = value;
+  }
+  return { env: env2, skipped };
+}
+function projectEnvPath(envDir, projectId) {
+  if (!PROJECT_ID_RE.test(projectId)) throw new Error(`Not a project id: ${JSON.stringify(projectId)}. It is the last part of the project page's address.`);
+  return path8.join(envDir, `${projectId}.env`);
+}
+function loadProjectEnv(envDir, projectId, log) {
+  const file2 = projectEnvPath(envDir, projectId);
+  if (!existsSync5(file2)) return null;
+  const { env: env2, skipped } = parseEnvFile(readFileSync3(file2, "utf8"));
+  for (const s of skipped) {
+    log.warn(s.reason === "protected" ? `env file ${file2}: line ${s.line} sets ${s.key}, a protected variable: skipped` : `env file ${file2}: line ${s.line} is not KEY=VALUE: skipped`);
+  }
+  return { env: env2, names: Object.keys(env2).sort() };
+}
+var HEADER = `# Environment for the runs of this project on this machine (notiamo-runner).
+# One KEY=VALUE per line. Dev and test values only: the agent can read every variable. Never production keys.
+# With this file present, the run's shell may reach services on 127.0.0.1 (your Postgres, MinIO, Mailpit...) on macOS.
+# PATH, HOME, proxy and certificate variables, NODE_OPTIONS, NOTIAMO_*, GIT_*, CLAUDE_* and ANTHROPIC_* are ignored here.
+`;
+function ensureProjectEnv(envDir, projectId) {
+  const file2 = projectEnvPath(envDir, projectId);
+  mkdirSync7(envDir, { recursive: true, mode: 448 });
+  try {
+    chmodSync2(envDir, 448);
+  } catch {
+  }
+  if (!existsSync5(file2)) {
+    writeFileSync6(file2, HEADER, { mode: 384 });
+    try {
+      chmodSync2(file2, 384);
+    } catch {
+    }
+  }
+  return file2;
+}
+
 // src/scrub.ts
 function scrub(line, secrets) {
   const forms = /* @__PURE__ */ new Set();
@@ -31075,12 +31220,12 @@ function resolveRoute(siteUrl, route) {
     return { error: "route is not a valid URL path" };
   }
   if (url2.origin !== site.origin || !url2.pathname.startsWith(prefix + "/wp/v2/")) return { error: "route must stay under /wp/v2/" };
-  const path13 = url2.pathname.slice(prefix.length);
-  return { path: path13, route: path13 + url2.search, query: url2.searchParams };
+  const path14 = url2.pathname.slice(prefix.length);
+  return { path: path14, route: path14 + url2.search, query: url2.searchParams };
 }
 
 // src/wp/backup.ts
-import path8 from "node:path";
+import path9 from "node:path";
 
 // src/wp/transport.ts
 var shellQuote = (a) => /^[A-Za-z0-9_\-.,/:=@%+]+$/.test(a) ? a : `'${a.replace(/'/g, `'\\''`)}'`;
@@ -31099,7 +31244,7 @@ async function backupBefore(t, root) {
   const wp = await dump(`{ wp db export - --path=${shellQuote(root)} || echo ${FAILED} >&2; } | gzip`);
   if (wp === "overflow") throw new Error("backup_failed: the database dump is over 200 MB");
   if (wp) return { dump: wp, how: "wp-cli" };
-  const config2 = await t.getFile(path8.posix.join(root, "wp-config.php")).catch(() => null);
+  const config2 = await t.getFile(path9.posix.join(root, "wp-config.php")).catch(() => null);
   const db = config2 ? dbCredentials(config2) : null;
   if (!db) throw new Error("backup_failed: no wp-cli export and no database credentials in wp-config.php");
   const [host, port] = splitHost(db.host);
@@ -31231,7 +31376,7 @@ async function ftpTransport(conn) {
 // src/wp/helper.ts
 import { randomBytes, timingSafeEqual } from "node:crypto";
 import http from "node:http";
-import path9 from "node:path";
+import path10 from "node:path";
 
 // ../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v3/helpers/util.js
 var util;
@@ -31607,8 +31752,8 @@ function getErrorMap() {
 
 // ../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path13, errorMaps, issueData } = params;
-  const fullPath = [...path13, ...issueData.path || []];
+  const { data, path: path14, errorMaps, issueData } = params;
+  const fullPath = [...path14, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -31723,11 +31868,11 @@ var errorUtil;
 
 // ../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path13, key) {
+  constructor(parent, value, path14, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path13;
+    this._path = path14;
     this._key = key;
   }
   get path() {
@@ -35682,10 +35827,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path13) {
-  if (!path13)
+function getElementAtPath(obj, path14) {
+  if (!path14)
     return obj;
-  return path13.reduce((acc, key) => acc?.[key], obj);
+  return path14.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -36025,11 +36170,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path13, issues) {
+function prefixIssues(path14, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path13);
+    iss.path.unshift(path14);
     return iss;
   });
 }
@@ -36491,16 +36636,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path13 = []) => {
+  const processError = (error63, path14 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path13, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path14, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path14, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path14, ...issue2.path]);
       } else {
-        const fullpath = [...path13, ...issue2.path];
+        const fullpath = [...path14, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -36539,17 +36684,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path13 = []) => {
+  const processError = (error63, path14 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path13, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path14, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path14, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path14, ...issue2.path]);
       } else {
-        const fullpath = [...path13, ...issue2.path];
+        const fullpath = [...path14, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -36588,8 +36733,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path13 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path13) {
+  const path14 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path14) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -52140,11 +52285,11 @@ function normalizeObjectSchema(schema) {
   }
   return void 0;
 }
-function getDotPath(path13) {
-  if (path13.length === 0) {
+function getDotPath(path14) {
+  if (path14.length === 0) {
     return "object root";
   }
-  return path13.reduce((acc, seg, index) => {
+  return path14.reduce((acc, seg, index) => {
     if (index === 0) {
       return String(seg);
     }
@@ -54371,13 +54516,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path13 = ref.slice(1).split("/").filter(Boolean);
-  if (path13.length === 0) {
+  const path14 = ref.slice(1).split("/").filter(Boolean);
+  if (path14.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path13[0] === defsKey) {
-    const key = path13[1] === void 0 ? void 0 : decodeJSONPointerSegment(path13[1]);
+  if (path14[0] === defsKey) {
+    const key = path14[1] === void 0 ? void 0 : decodeJSONPointerSegment(path14[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -61643,15 +61788,15 @@ var CONNECTION_SYMBOL_KEY = /* @__PURE__ */ Symbol("CONNECTION_SYMBOL_KEY");
 var WAIT_FOR_WEBSOCKET_SYMBOL = /* @__PURE__ */ Symbol("WAIT_FOR_WEBSOCKET_SYMBOL");
 var upgradeWebSocket = defineWebSocketHelper(async (c, events, options) => {
   if (c.req.header("upgrade")?.toLowerCase() !== "websocket") return;
-  const env = c.env;
-  const waitForWebSocket = env[WAIT_FOR_WEBSOCKET_SYMBOL];
-  if (!waitForWebSocket || !env.incoming) return new Response(null, { status: 500 });
+  const env2 = c.env;
+  const waitForWebSocket = env2[WAIT_FOR_WEBSOCKET_SYMBOL];
+  if (!waitForWebSocket || !env2.incoming) return new Response(null, { status: 500 });
   const connectionSymbol = generateConnectionSymbol();
-  env[CONNECTION_SYMBOL_KEY] = connectionSymbol;
+  env2[CONNECTION_SYMBOL_KEY] = connectionSymbol;
   (async () => {
     let ws;
     try {
-      ws = await waitForWebSocket(env.incoming, connectionSymbol);
+      ws = await waitForWebSocket(env2.incoming, connectionSymbol);
     } catch {
       return;
     }
@@ -62825,7 +62970,7 @@ function buildServer(t) {
     if (!t.allow.files && !t.allow.all) return fail("the files group is off for this project");
     if (t.root === null) return fail("wordpress_root_not_found: the WordPress folder was not found on the server");
     const bad = pathRefusal(p, t.allow.all);
-    return bad ? fail(bad) : path9.posix.join(t.root, p);
+    return bad ? fail(bad) : path10.posix.join(t.root, p);
   };
   server.registerTool("wp_get_file", {
     description: "Reads a file of the WordPress site, by its path relative to the WordPress folder (e.g. wp-content/themes/x/style.css).",
@@ -62897,9 +63042,9 @@ function apiRefusal(route, query, method, body, allow) {
 }
 function pathRefusal(p, all) {
   if (p.startsWith("/") || p.includes("\\") || p.includes("\0")) return "path must be relative to the WordPress folder";
-  const norm = path9.posix.normalize(p);
+  const norm = path10.posix.normalize(p);
   if (norm === ".." || norm.startsWith("../") || p.split("/").includes("..")) return "path must stay inside the WordPress folder";
-  if (!all && PROTECTED_FILES.has(path9.posix.basename(norm))) return `refused: ${path9.posix.basename(norm)} is never changed unless "Allow everything" is on`;
+  if (!all && PROTECTED_FILES.has(path10.posix.basename(norm))) return `refused: ${path10.posix.basename(norm)} is never changed unless "Allow everything" is on`;
   return null;
 }
 function publishedLink(json3) {
@@ -62911,7 +63056,7 @@ var cut2 = (s) => s.length > MAX_OUTPUT ? `${s.slice(0, MAX_OUTPUT)}
 [cut at ${MAX_OUTPUT} characters]` : s;
 
 // src/wp/root.ts
-import path10 from "node:path";
+import path11 from "node:path";
 var FTP_CANDIDATES = [".", "public_html", "www", "htdocs", "httpdocs", "html", "web"];
 async function findRoot(t) {
   if (t.run) {
@@ -62919,10 +63064,10 @@ async function findRoot(t) {
     if (home?.code === 0) return ".";
     const found = await t.run(["find", ".", "-maxdepth", "3", "-name", "wp-config.php"]).catch(() => null);
     const first = found?.stdout.toString("utf8").split("\n").map((l) => l.trim()).filter(Boolean).sort((a, b) => a.split("/").length - b.split("/").length)[0];
-    return first ? path10.posix.normalize(path10.posix.dirname(first)) : null;
+    return first ? path11.posix.normalize(path11.posix.dirname(first)) : null;
   }
   for (const dir of FTP_CANDIDATES) {
-    if (await t.getFile(path10.posix.join(dir, "wp-config.php")).catch(() => null) !== null) return dir;
+    if (await t.getFile(path11.posix.join(dir, "wp-config.php")).catch(() => null) !== null) return dir;
   }
   return null;
 }
@@ -63055,17 +63200,23 @@ async function runOne(spec, deps) {
     } else {
       started = true;
       const parent = projectFolder(deps.paths.projectsDir, slot, spec.projectId);
-      mkdirSync7(parent, { recursive: true, mode: 448 });
-      cwd = tempDir = mkdtempSync(path11.join(parent, "run-"));
+      mkdirSync8(parent, { recursive: true, mode: 448 });
+      cwd = tempDir = mkdtempSync(path12.join(parent, "run-"));
       if (deps.helperFactory) helper = await deps.helperFactory(spec);
     }
-    settingsFile = writeSettings(spec, deps, cwd);
+    const projectEnv = loadProjectEnv(deps.paths.envDir, spec.projectId, log);
+    settingsFile = writeSettings(spec, deps, cwd, projectEnv !== null);
+    if (projectEnv) {
+      secrets.push(...Object.values(projectEnv.env));
+      log.info(`run ${spec.runId}: env file with ${projectEnv.names.length} variable(s)`);
+    }
     const base = {
+      // 127.0.0.1 is the machine's only on macOS: Linux's sandbox gives the shell its own network namespace.
       cwd,
-      systemPrompt: spec.systemPrompt,
+      systemPrompt: projectEnv ? withEnvNote(spec.systemPrompt, projectEnv.names, deps.sandbox.platform === "darwin") : spec.systemPrompt,
       mcp: { url: spec.mcp.url, token: spec.mcp.accessToken },
       helper: helper ? { url: helper.url, token: helper.token } : void 0,
-      env: {},
+      env: projectEnv?.env ?? {},
       maxMinutes: spec.maxRunMinutes,
       claudeConfigDir: deps.paths.claudeConfigDir,
       settingsFile
@@ -63189,7 +63340,14 @@ function githubToken(runId, g, api, secrets, now) {
     return token;
   };
 }
-function writeSettings(spec, deps, cwd) {
+function withEnvNote(systemPrompt, names, localServices) {
+  const list = names.length > 0 ? `these environment variables for the project: ${names.join(", ")}` : "an environment file for the project (empty)";
+  const local = localServices ? " Services they point to run on 127.0.0.1 and are reachable from your shell." : "";
+  return `${systemPrompt}
+
+This machine sets ${list}.${local} Use them for tests; do not print their values.`;
+}
+function writeSettings(spec, deps, cwd, localServices) {
   const { sandbox } = deps;
   let wordpressHost;
   if (spec.wordpress) {
@@ -63199,8 +63357,8 @@ function writeSettings(spec, deps, cwd) {
     }
   }
   if (!/^[\w-]+$/.test(spec.runId)) throw new Error("bad run id");
-  const dir = path11.resolve(deps.paths.runsDir);
-  mkdirSync7(dir, { recursive: true, mode: 448 });
+  const dir = path12.resolve(deps.paths.runsDir);
+  mkdirSync8(dir, { recursive: true, mode: 448 });
   const settings = sandboxSettings({
     platform: sandbox.platform,
     runnerRoot: sandbox.runnerRoot,
@@ -63209,13 +63367,14 @@ function writeSettings(spec, deps, cwd) {
     notiamoHost: sandbox.notiamoHost,
     extraDomains: sandbox.allowedDomains(),
     wordpressHost,
+    localServices,
     gitExecPath: sandbox.gitExecPath,
     ghPath: sandbox.ghPath
   });
-  const file2 = path11.join(dir, `${spec.runId}.json`);
-  writeFileSync6(file2, JSON.stringify(settings, null, 2) + "\n", { mode: 384 });
+  const file2 = path12.join(dir, `${spec.runId}.json`);
+  writeFileSync7(file2, JSON.stringify(settings, null, 2) + "\n", { mode: 384 });
   try {
-    chmodSync2(file2, 384);
+    chmodSync3(file2, 384);
   } catch {
   }
   return file2;
@@ -63376,7 +63535,7 @@ async function startLoop(deps) {
   const running = /* @__PURE__ */ new Map();
   for (let i = 0; i < SLOT_FOLDERS; i++) {
     try {
-      mkdirSync8(path12.join(deps.paths.projectsDir, String(i)), { recursive: true, mode: 448 });
+      mkdirSync9(path13.join(deps.paths.projectsDir, String(i)), { recursive: true, mode: 448 });
     } catch (e) {
       log.warn(`slot folder ${i} not made: ${errorText3(e)}`);
     }
@@ -63476,7 +63635,7 @@ async function startLoop(deps) {
 var errorText3 = (e) => e instanceof Error ? e.message : String(e);
 function readState(file2) {
   try {
-    const s = JSON.parse(readFileSync3(file2, "utf8"));
+    const s = JSON.parse(readFileSync4(file2, "utf8"));
     if (Array.isArray(s.busyRunIds)) return s.busyRunIds.filter((x) => typeof x === "string");
     return typeof s.busyRunId === "string" ? [s.busyRunId] : [];
   } catch {
@@ -63488,9 +63647,9 @@ function writeState(file2, busyRunIds) {
     rmSync6(file2, { force: true });
     return;
   }
-  mkdirSync8(path12.dirname(file2), { recursive: true, mode: 448 });
+  mkdirSync9(path13.dirname(file2), { recursive: true, mode: 448 });
   const tmp = `${file2}.tmp`;
-  writeFileSync7(tmp, JSON.stringify({ busyRunIds }) + "\n", { mode: 384 });
+  writeFileSync8(tmp, JSON.stringify({ busyRunIds }) + "\n", { mode: 384 });
   renameSync2(tmp, file2);
 }
 
@@ -63529,6 +63688,9 @@ async function prompt(q2, opts = {}) {
 async function init({ profile } = {}) {
   await runInit({ prompt, exec: realExec, fetch, profile });
 }
+async function update({ profile } = {}) {
+  await runUpdate({ exec: realExec, fetch, profile });
+}
 async function start({ profile } = {}) {
   const dir = profileDir(profile);
   const cfg = loadConfig(dir);
@@ -63593,6 +63755,13 @@ async function uninstall4({ profile } = {}) {
   await uninstallService(serviceOptions(profile));
   console.log(`The runner service is removed. Its folder ${profileDir(profile)} (config, sign-in, projects) stays; delete it to remove everything.`);
 }
+async function env({ profile, projectId }) {
+  const file2 = ensureProjectEnv(paths(profileDir(profile)).envDir, projectId);
+  console.log(`Env file for project ${projectId}${profile ? ` (profile ${profile})` : ""}: ${file2}`);
+  console.log("One KEY=VALUE per line. Dev and test values only: the agent can read every variable, never production keys.");
+  console.log("With this file present, the runs of this project may reach services on 127.0.0.1 (Postgres, MinIO, Mailpit...) on macOS; on Linux the sandbox keeps 127.0.0.1 apart, use the machine's LAN address.");
+  console.log("The next run of the project reads it; the runner needs no restart. Remove the file to take the variables away.");
+}
 async function status4({ profile } = {}) {
   const st = await serviceStatus(serviceOptions(profile));
   let cfg = null;
@@ -63621,7 +63790,7 @@ function hostOf(url2) {
 function tail(file2, n) {
   let text;
   try {
-    text = readFileSync4(file2, "utf8");
+    text = readFileSync5(file2, "utf8");
   } catch {
     return [];
   }
@@ -63634,17 +63803,19 @@ var HELP = `notiamo-runner ${VERSION}: runs Notiamo agent runs on this machine w
 Usage: notiamo-runner <command> [--profile <name>]
 
   init       Set the runner up: token, Claude Code sign-in, start at login or boot
+  update     Move a runner that is set up to this version: keeps its token and sign-in
   start      Run in the foreground (what the service runs)
   stop       Stop the service until the next login or boot
   status     Whether the service is installed and running, and the last log line
   logs       The last 50 lines of the log
   uninstall  Remove the service (the runner's folder stays)
+  env <projectId>  Make or show the env file this machine gives the runs of one project (dev/test values)
   --version  Print the version
 
   --profile <name>  A second runner on this machine (say "staging"): its own folder, sign-in and service.
                     Give it to every command of that runner.`;
 async function main(argv) {
-  const { cmd, profile, error: error62 } = parseArgs(argv);
+  const { cmd, arg, profile, error: error62 } = parseArgs(argv);
   if (error62) {
     console.error(`${error62}
 
@@ -63653,9 +63824,18 @@ ${HELP}`);
     return;
   }
   const o = { profile };
+  if (cmd === "env" && !arg) {
+    console.error(`env needs the project id: the last part of the project page's address.
+
+${HELP}`);
+    process.exitCode = 1;
+    return;
+  }
   switch (cmd) {
     case "init":
       return init(o);
+    case "update":
+      return update(o);
     case "start":
       return start(o);
     case "stop":
@@ -63666,6 +63846,8 @@ ${HELP}`);
       return logs(o);
     case "uninstall":
       return uninstall4(o);
+    case "env":
+      return env({ ...o, projectId: arg });
     case "--version":
     case "-v":
       console.log(`notiamo-runner ${VERSION}`);