@notiamo/runner 0.2.1 → 0.2.2

package/dist/cli.js

@@ -1045,8 +1045,8 @@ var require_safePathNames = __commonJS({
     })();
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.isSafePathName = isSafePathName;
-    var path13 = __importStar(__require("path"));
-    function isSafePathName(name, localPath = path13) {
+    var path14 = __importStar(__require("path"));
+    function isSafePathName(name, localPath = path14) {
       if (!name || name === "." || name === ".." || name.includes("/")) {
         return false;
       }
@@ -1704,8 +1704,8 @@ var require_Client = __commonJS({
       /**
        * Set the working directory.
        */
-      async cd(path13) {
-        const validPath = await this.protectWhitespace(path13);
+      async cd(path14) {
+        const validPath = await this.protectWhitespace(path14);
         return this.send("CWD " + validPath);
       }
       /**
@@ -1718,8 +1718,8 @@ var require_Client = __commonJS({
        * Get the last modified time of a file. This is not supported by every FTP server, in which case
        * calling this method will throw an exception.
        */
-      async lastMod(path13) {
-        const validPath = await this.protectWhitespace(path13);
+      async lastMod(path14) {
+        const validPath = await this.protectWhitespace(path14);
         const res = await this.send(`MDTM ${validPath}`);
         const date5 = res.message.slice(4);
         return (0, parseListMLSD_1.parseMLSxDate)(date5);
@@ -1727,8 +1727,8 @@ var require_Client = __commonJS({
       /**
        * Get the size of a file.
        */
-      async size(path13) {
-        const validPath = await this.protectWhitespace(path13);
+      async size(path14) {
+        const validPath = await this.protectWhitespace(path14);
         const command = `SIZE ${validPath}`;
         const res = await this.send(command);
         const size = parseInt(res.message.slice(4), 10);
@@ -1755,8 +1755,8 @@ var require_Client = __commonJS({
        * You can ignore FTP error return codes which won't throw an exception if e.g.
        * the file doesn't exist.
        */
-      async remove(path13, ignoreErrorCodes = false) {
-        const validPath = await this.protectWhitespace(path13);
+      async remove(path14, ignoreErrorCodes = false) {
+        const validPath = await this.protectWhitespace(path14);
         if (ignoreErrorCodes) {
           return this.sendIgnoringError(`DELE ${validPath}`);
         }
@@ -1915,8 +1915,8 @@ var require_Client = __commonJS({
        *
        * @param [path]  Path to remote file or directory.
        */
-      async list(path13 = "") {
-        const validPath = await this.protectWhitespace(path13);
+      async list(path14 = "") {
+        const validPath = await this.protectWhitespace(path14);
         let lastError;
         for (const candidate of this.availableListCommands) {
           const command = validPath === "" ? candidate : `${candidate} ${validPath}`;
@@ -2085,21 +2085,21 @@ var require_Client = __commonJS({
       /**
        * Remove an empty directory, will fail if not empty.
        */
-      async removeEmptyDir(path13) {
-        const validPath = await this.protectWhitespace(path13);
+      async removeEmptyDir(path14) {
+        const validPath = await this.protectWhitespace(path14);
         return this.send(`RMD ${validPath}`);
       }
       /**
        * FTP servers can't handle filenames that have leading whitespace. This method transforms
        * a given path to fix that issue for most cases.
        */
-      async protectWhitespace(path13) {
-        if (!path13.startsWith(" ")) {
-          return path13;
+      async protectWhitespace(path14) {
+        if (!path14.startsWith(" ")) {
+          return path14;
         }
         const pwd = await this.pwd();
         const absolutePathPrefix = pwd.endsWith("/") ? pwd : pwd + "/";
-        return absolutePathPrefix + path13;
+        return absolutePathPrefix + path14;
       }
       async _exitAtCurrentDirectory(func) {
         const userDir = await this.pwd();
@@ -2176,11 +2176,11 @@ var require_Client = __commonJS({
       }
     };
     exports.Client = Client3;
-    async function ensureLocalDirectory(path13) {
+    async function ensureLocalDirectory(path14) {
       try {
-        await fsStat(path13);
+        await fsStat(path14);
       } catch (_a3) {
-        await fsMkDir(path13, { recursive: true });
+        await fsMkDir(path14, { recursive: true });
       }
     }
     async function expectedBytesFromLocalFile(fd, options) {
@@ -5088,20 +5088,20 @@ var require_compile = __commonJS({
     var util_1 = require_util();
     var validate_1 = require_validate();
     var SchemaEnv = class {
-      constructor(env) {
+      constructor(env2) {
         var _a3;
         this.refs = {};
         this.dynamicAnchors = {};
         let schema;
-        if (typeof env.schema == "object")
-          schema = env.schema;
-        this.schema = env.schema;
-        this.schemaId = env.schemaId;
-        this.root = env.root || this;
-        this.baseId = (_a3 = env.baseId) !== null && _a3 !== void 0 ? _a3 : (0, resolve_1.normalizeId)(schema === null || schema === void 0 ? void 0 : schema[env.schemaId || "$id"]);
-        this.schemaPath = env.schemaPath;
-        this.localRefs = env.localRefs;
-        this.meta = env.meta;
+        if (typeof env2.schema == "object")
+          schema = env2.schema;
+        this.schema = env2.schema;
+        this.schemaId = env2.schemaId;
+        this.root = env2.root || this;
+        this.baseId = (_a3 = env2.baseId) !== null && _a3 !== void 0 ? _a3 : (0, resolve_1.normalizeId)(schema === null || schema === void 0 ? void 0 : schema[env2.schemaId || "$id"]);
+        this.schemaPath = env2.schemaPath;
+        this.localRefs = env2.localRefs;
+        this.meta = env2.meta;
         this.$async = schema === null || schema === void 0 ? void 0 : schema.$async;
         this.refs = {};
       }
@@ -5285,15 +5285,15 @@ var require_compile = __commonJS({
           baseId = (0, resolve_1.resolveUrl)(this.opts.uriResolver, baseId, schId);
         }
       }
-      let env;
+      let env2;
       if (typeof schema != "boolean" && schema.$ref && !(0, util_1.schemaHasRulesButRef)(schema, this.RULES)) {
         const $ref = (0, resolve_1.resolveUrl)(this.opts.uriResolver, baseId, schema.$ref);
-        env = resolveSchema.call(this, root, $ref);
+        env2 = resolveSchema.call(this, root, $ref);
       }
       const { schemaId } = this.opts;
-      env = env || new SchemaEnv({ schema, schemaId, root, baseId });
-      if (env.schema !== env.root.schema)
-        return env;
+      env2 = env2 || new SchemaEnv({ schema, schemaId, root, baseId });
+      if (env2.schema !== env2.root.schema)
+        return env2;
       return void 0;
     }
   }
@@ -5477,8 +5477,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path13) {
-      let input2 = path13;
+    function removeDotSegments(path14) {
+      let input2 = path14;
       const output2 = [];
       let nextSlash = -1;
       let len = 0;
@@ -5887,8 +5887,8 @@ var require_schemes = __commonJS({
       }
       if (wsComponent.resourceName) {
         const queryIndex = wsComponent.resourceName.indexOf("?");
-        const path13 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
-        wsComponent.path = path13 && path13 !== "/" ? path13 : void 0;
+        const path14 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
+        wsComponent.path = path14 && path14 !== "/" ? path14 : void 0;
         wsComponent.query = queryIndex === -1 ? void 0 : wsComponent.resourceName.slice(queryIndex + 1);
         wsComponent.resourceName = void 0;
       }
@@ -7091,8 +7091,8 @@ var require_ref = __commonJS({
       schemaType: "string",
       code(cxt) {
         const { gen, schema: $ref, it } = cxt;
-        const { baseId, schemaEnv: env, validateName, opts, self: self2 } = it;
-        const { root } = env;
+        const { baseId, schemaEnv: env2, validateName, opts, self: self2 } = it;
+        const { root } = env2;
         if (($ref === "#" || $ref === "#/") && baseId === root.baseId)
           return callRootRef();
         const schOrEnv = compile_1.resolveRef.call(self2, root, baseId, $ref);
@@ -7102,8 +7102,8 @@ var require_ref = __commonJS({
           return callValidate(schOrEnv);
         return inlineRefSchema(schOrEnv);
         function callRootRef() {
-          if (env === root)
-            return callRef(cxt, validateName, env, env.$async);
+          if (env2 === root)
+            return callRef(cxt, validateName, env2, env2.$async);
           const rootName = gen.scopeValue("root", { ref: root });
           return callRef(cxt, (0, codegen_1._)`${rootName}.validate`, root, root.$async);
         }
@@ -7133,14 +7133,14 @@ var require_ref = __commonJS({
     exports.getValidate = getValidate;
     function callRef(cxt, v, sch, $async) {
       const { gen, it } = cxt;
-      const { allErrors, schemaEnv: env, opts } = it;
+      const { allErrors, schemaEnv: env2, opts } = it;
       const passCxt = opts.passContext ? names_1.default.this : codegen_1.nil;
       if ($async)
         callAsyncRef();
       else
         callSyncRef();
       function callAsyncRef() {
-        if (!env.$async)
+        if (!env2.$async)
           throw new Error("async schema referenced by sync schema");
         const valid = gen.let("valid");
         gen.try(() => {
@@ -17567,11 +17567,11 @@ var require_agent = __commonJS({
       };
     })();
     var WINDOWS_PIPE_REGEX = /^[/\\][/\\]\.[/\\]pipe[/\\].+/;
-    function createAgent(path13) {
-      if (process.platform === "win32" && !WINDOWS_PIPE_REGEX.test(path13)) {
-        return path13 === "pageant" ? new PageantAgent() : new CygwinAgent(path13);
+    function createAgent(path14) {
+      if (process.platform === "win32" && !WINDOWS_PIPE_REGEX.test(path14)) {
+        return path14 === "pageant" ? new PageantAgent() : new CygwinAgent(path14);
       }
-      return new OpenSSHAgent(path13);
+      return new OpenSSHAgent(path14);
     }
     var AgentProtocol = (() => {
       const SSH_AGENTC_REQUEST_IDENTITIES = 11;
@@ -22815,17 +22815,17 @@ var require_SFTP = __commonJS({
       // ===========================================================================
       // Client-specific ===========================================================
       // ===========================================================================
-      createReadStream(path13, options) {
+      createReadStream(path14, options) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        return new ReadStream(this, path13, options);
+        return new ReadStream(this, path14, options);
       }
-      createWriteStream(path13, options) {
+      createWriteStream(path14, options) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        return new WriteStream(this, path13, options);
+        return new WriteStream(this, path14, options);
       }
-      open(path13, flags_, attrs, cb) {
+      open(path14, flags_, attrs, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         if (typeof attrs === "function") {
@@ -22844,7 +22844,7 @@ var require_SFTP = __commonJS({
           attrsFlags = attrs.flags;
           attrsLen = attrs.nb;
         }
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen + 4 + 4 + attrsLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -22852,7 +22852,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         writeUInt32BE(buf, flags, p += pathLen);
         writeUInt32BE(buf, attrsFlags, p += 4);
         if (attrsLen) {
@@ -22983,7 +22983,7 @@ var require_SFTP = __commonJS({
           throw new Error("Client-only method called in server mode");
         fastXfer(fs, this, localPath, remotePath, opts, cb);
       }
-      readFile(path13, options, callback_) {
+      readFile(path14, options, callback_) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let callback;
@@ -23056,13 +23056,13 @@ var require_SFTP = __commonJS({
             return callback && callback(er, buffer);
           });
         };
-        this.open(path13, flag, 438, (er, handle_) => {
+        this.open(path14, flag, 438, (er, handle_) => {
           if (er)
             return callback && callback(er);
           handle = handle_;
           const tryStat = (er2, st) => {
             if (er2) {
-              this.stat(path13, (er_, st_) => {
+              this.stat(path14, (er_, st_) => {
                 if (er_) {
                   return this.close(handle, () => {
                     callback && callback(er2);
@@ -23083,7 +23083,7 @@ var require_SFTP = __commonJS({
           this.fstat(handle, tryStat);
         });
       }
-      writeFile(path13, data, options, callback_) {
+      writeFile(path14, data, options, callback_) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let callback;
@@ -23102,7 +23102,7 @@ var require_SFTP = __commonJS({
         if (options.encoding && !Buffer.isEncoding(options.encoding))
           throw new Error(`Unknown encoding: ${options.encoding}`);
         const flag = options.flag || "w";
-        this.open(path13, flag, options.mode, (openErr, handle) => {
+        this.open(path14, flag, options.mode, (openErr, handle) => {
           if (openErr) {
             callback && callback(openErr);
           } else {
@@ -23111,7 +23111,7 @@ var require_SFTP = __commonJS({
             if (position === null) {
               const tryStat = (er, st) => {
                 if (er) {
-                  this.stat(path13, (er_, st_) => {
+                  this.stat(path14, (er_, st_) => {
                     if (er_) {
                       return this.close(handle, () => {
                         callback && callback(er);
@@ -23130,7 +23130,7 @@ var require_SFTP = __commonJS({
           }
         });
       }
-      appendFile(path13, data, options, callback_) {
+      appendFile(path14, data, options, callback_) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let callback;
@@ -23148,12 +23148,12 @@ var require_SFTP = __commonJS({
           throw new TypeError("Bad arguments");
         if (!options.flag)
           options = Object.assign({ flag: "a" }, options);
-        this.writeFile(path13, data, options, callback);
+        this.writeFile(path14, data, options, callback);
       }
-      exists(path13, cb) {
+      exists(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        this.stat(path13, (err) => {
+        this.stat(path14, (err) => {
           cb && cb(err ? false : true);
         });
       }
@@ -23196,7 +23196,7 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} RENAME`
         );
       }
-      mkdir(path13, attrs, cb) {
+      mkdir(path14, attrs, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let flags = 0;
@@ -23210,7 +23210,7 @@ var require_SFTP = __commonJS({
           flags = attrs.flags;
           attrsLen = attrs.nb;
         }
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen + 4 + attrsLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23218,7 +23218,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         writeUInt32BE(buf, flags, p += pathLen);
         if (attrsLen) {
           p += 4;
@@ -23234,10 +23234,10 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} MKDIR`
         );
       }
-      rmdir(path13, cb) {
+      rmdir(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23245,7 +23245,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = { cb };
         const isBuffered = sendOrBuffer(this, buf);
         this._debug && this._debug(
@@ -23335,10 +23335,10 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} FSTAT`
         );
       }
-      stat(path13, cb) {
+      stat(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23346,17 +23346,17 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = { cb };
         const isBuffered = sendOrBuffer(this, buf);
         this._debug && this._debug(
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} STAT`
         );
       }
-      lstat(path13, cb) {
+      lstat(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23364,17 +23364,17 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = { cb };
         const isBuffered = sendOrBuffer(this, buf);
         this._debug && this._debug(
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} LSTAT`
         );
       }
-      opendir(path13, cb) {
+      opendir(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23382,14 +23382,14 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = { cb };
         const isBuffered = sendOrBuffer(this, buf);
         this._debug && this._debug(
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} OPENDIR`
         );
       }
-      setstat(path13, attrs, cb) {
+      setstat(path14, attrs, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let flags = 0;
@@ -23401,7 +23401,7 @@ var require_SFTP = __commonJS({
         } else if (typeof attrs === "function") {
           cb = attrs;
         }
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen + 4 + attrsLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23409,7 +23409,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         writeUInt32BE(buf, flags, p += pathLen);
         if (attrsLen) {
           p += 4;
@@ -23469,8 +23469,8 @@ var require_SFTP = __commonJS({
           mtime: toUnixTimestamp(mtime)
         }, cb);
       }
-      utimes(path13, atime, mtime, cb) {
-        return this.setstat(path13, {
+      utimes(path14, atime, mtime, cb) {
+        return this.setstat(path14, {
           atime: toUnixTimestamp(atime),
           mtime: toUnixTimestamp(mtime)
         }, cb);
@@ -23481,8 +23481,8 @@ var require_SFTP = __commonJS({
           gid
         }, cb);
       }
-      chown(path13, uid, gid, cb) {
-        return this.setstat(path13, {
+      chown(path14, uid, gid, cb) {
+        return this.setstat(path14, {
           uid,
           gid
         }, cb);
@@ -23492,15 +23492,15 @@ var require_SFTP = __commonJS({
           mode
         }, cb);
       }
-      chmod(path13, mode, cb) {
-        return this.setstat(path13, {
+      chmod(path14, mode, cb) {
+        return this.setstat(path14, {
           mode
         }, cb);
       }
-      readlink(path13, cb) {
+      readlink(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23508,7 +23508,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = {
           cb: (err, names) => {
             if (typeof cb !== "function")
@@ -23553,10 +23553,10 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} SYMLINK`
         );
       }
-      realpath(path13, cb) {
+      realpath(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23564,7 +23564,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = {
           cb: (err, names) => {
             if (typeof cb !== "function")
@@ -23609,13 +23609,13 @@ var require_SFTP = __commonJS({
           this._debug(`SFTP: Outbound: ${which} posix-rename@openssh.com`);
         }
       }
-      ext_openssh_statvfs(path13, cb) {
+      ext_openssh_statvfs(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         const ext = this._extensions["statvfs@openssh.com"];
         if (!ext || ext !== "2")
           throw new Error("Server does not support this extended request");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + 19 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23625,7 +23625,7 @@ var require_SFTP = __commonJS({
         writeUInt32BE(buf, 19, p);
         buf.utf8Write("statvfs@openssh.com", p += 4, 19);
         writeUInt32BE(buf, pathLen, p += 19);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = { extended: "statvfs@openssh.com", cb };
         const isBuffered = sendOrBuffer(this, buf);
         if (this._debug) {
@@ -23711,7 +23711,7 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} fsync@openssh.com`
         );
       }
-      ext_openssh_lsetstat(path13, attrs, cb) {
+      ext_openssh_lsetstat(path14, attrs, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         const ext = this._extensions["lsetstat@openssh.com"];
@@ -23726,7 +23726,7 @@ var require_SFTP = __commonJS({
         } else if (typeof attrs === "function") {
           cb = attrs;
         }
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + 20 + 4 + pathLen + 4 + attrsLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23736,7 +23736,7 @@ var require_SFTP = __commonJS({
         writeUInt32BE(buf, 20, p);
         buf.utf8Write("lsetstat@openssh.com", p += 4, 20);
         writeUInt32BE(buf, pathLen, p += 20);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         writeUInt32BE(buf, flags, p += pathLen);
         if (attrsLen) {
           p += 4;
@@ -23753,13 +23753,13 @@ var require_SFTP = __commonJS({
           this._debug(`SFTP: Outbound: ${status5} lsetstat@openssh.com`);
         }
       }
-      ext_openssh_expandPath(path13, cb) {
+      ext_openssh_expandPath(path14, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         const ext = this._extensions["expand-path@openssh.com"];
         if (ext !== "1")
           throw new Error("Server does not support this extended request");
-        const pathLen = Buffer.byteLength(path13);
+        const pathLen = Buffer.byteLength(path14);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + 23 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -23769,7 +23769,7 @@ var require_SFTP = __commonJS({
         writeUInt32BE(buf, 23, p);
         buf.utf8Write("expand-path@openssh.com", p += 4, 23);
         writeUInt32BE(buf, pathLen, p += 20);
-        buf.utf8Write(path13, p += 4, pathLen);
+        buf.utf8Write(path14, p += 4, pathLen);
         this._requests[reqid] = {
           cb: (err, names) => {
             if (typeof cb !== "function")
@@ -25047,12 +25047,12 @@ var require_SFTP = __commonJS({
       [REQUEST.LSTAT]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed LSTAT packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received LSTAT (id:${reqID})`);
-        if (!sftp.emit("LSTAT", reqID, path13)) {
+        if (!sftp.emit("LSTAT", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -25071,13 +25071,13 @@ var require_SFTP = __commonJS({
       [REQUEST.SETSTAT]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         const attrs = readAttrs(sftp._biOpt);
         bufferParser.clear();
         if (attrs === void 0)
           return doFatalSFTPError(sftp, "Malformed SETSTAT packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received SETSTAT (id:${reqID})`);
-        if (!sftp.emit("SETSTAT", reqID, path13, attrs)) {
+        if (!sftp.emit("SETSTAT", reqID, path14, attrs)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -25099,12 +25099,12 @@ var require_SFTP = __commonJS({
       [REQUEST.OPENDIR]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed OPENDIR packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received OPENDIR (id:${reqID})`);
-        if (!sftp.emit("OPENDIR", reqID, path13)) {
+        if (!sftp.emit("OPENDIR", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -25123,63 +25123,63 @@ var require_SFTP = __commonJS({
       [REQUEST.REMOVE]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed REMOVE packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received REMOVE (id:${reqID})`);
-        if (!sftp.emit("REMOVE", reqID, path13)) {
+        if (!sftp.emit("REMOVE", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
       [REQUEST.MKDIR]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         const attrs = readAttrs(sftp._biOpt);
         bufferParser.clear();
         if (attrs === void 0)
           return doFatalSFTPError(sftp, "Malformed MKDIR packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received MKDIR (id:${reqID})`);
-        if (!sftp.emit("MKDIR", reqID, path13, attrs)) {
+        if (!sftp.emit("MKDIR", reqID, path14, attrs)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
       [REQUEST.RMDIR]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed RMDIR packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received RMDIR (id:${reqID})`);
-        if (!sftp.emit("RMDIR", reqID, path13)) {
+        if (!sftp.emit("RMDIR", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
       [REQUEST.REALPATH]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed REALPATH packet");
         sftp._debug && sftp._debug(
           `SFTP: Inbound: Received REALPATH (id:${reqID})`
         );
-        if (!sftp.emit("REALPATH", reqID, path13)) {
+        if (!sftp.emit("REALPATH", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
       [REQUEST.STAT]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed STAT packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received STAT (id:${reqID})`);
-        if (!sftp.emit("STAT", reqID, path13)) {
+        if (!sftp.emit("STAT", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -25199,14 +25199,14 @@ var require_SFTP = __commonJS({
       [REQUEST.READLINK]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path13 = bufferParser.readString(true);
+        const path14 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path13 === void 0)
+        if (path14 === void 0)
           return doFatalSFTPError(sftp, "Malformed READLINK packet");
         sftp._debug && sftp._debug(
           `SFTP: Inbound: Received READLINK (id:${reqID})`
         );
-        if (!sftp.emit("READLINK", reqID, path13)) {
+        if (!sftp.emit("READLINK", reqID, path14)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -25277,7 +25277,7 @@ var require_SFTP = __commonJS({
     function roundUpToMultipleOf8(n) {
       return n + 7 & ~7;
     }
-    function ReadStream(sftp, path13, options) {
+    function ReadStream(sftp, path14, options) {
       if (options === void 0)
         options = {};
       else if (typeof options === "string")
@@ -25291,7 +25291,7 @@ var require_SFTP = __commonJS({
       options.emitClose = false;
       options.autoDestroy = false;
       ReadableStream2.call(this, options);
-      this.path = path13;
+      this.path = path14;
       this.flags = options.flags === void 0 ? "r" : options.flags;
       this.mode = options.mode === void 0 ? 438 : options.mode;
       this.start = options.start;
@@ -25422,7 +25422,7 @@ var require_SFTP = __commonJS({
       },
       configurable: true
     });
-    function WriteStream(sftp, path13, options) {
+    function WriteStream(sftp, path14, options) {
       if (options === void 0)
         options = {};
       else if (typeof options === "string")
@@ -25434,7 +25434,7 @@ var require_SFTP = __commonJS({
       options.emitClose = false;
       options.autoDestroy = false;
       WritableStream.call(this, options);
-      this.path = path13;
+      this.path = path14;
       this.flags = options.flags === void 0 ? "w" : options.flags;
       this.mode = options.mode === void 0 ? 438 : options.mode;
       this.start = options.start;
@@ -27403,12 +27403,12 @@ var require_client = __commonJS({
         );
         return this;
       }
-      sftp(env, cb) {
+      sftp(env2, cb) {
         if (!this._sock || !isWritable(this._sock))
           throw new Error("Not connected");
-        if (typeof env === "function") {
-          cb = env;
-          env = void 0;
+        if (typeof env2 === "function") {
+          cb = env2;
+          env2 = void 0;
         }
         openChannel(this, "sftp", (err, sftp) => {
           if (err) {
@@ -27451,8 +27451,8 @@ var require_client = __commonJS({
             sftp.on("ready", onReady).on("error", onError).on("exit", onExit).on("close", onExit);
             sftp._init();
           };
-          if (typeof env === "object" && env !== null) {
-            reqEnv(sftp, env, (err2) => {
+          if (typeof env2 === "object" && env2 !== null) {
+            reqEnv(sftp, env2, (err2) => {
               if (err2) {
                 cb(err2);
                 return;
@@ -27657,7 +27657,7 @@ var require_client = __commonJS({
       });
       chan._client._protocol.exec(chan.outgoing.id, cmd, true);
     }
-    function reqEnv(chan, env, cb) {
+    function reqEnv(chan, env2, cb) {
       const wantReply = typeof cb === "function";
       if (chan.outgoing.state !== "open") {
         if (wantReply)
@@ -27673,10 +27673,10 @@ var require_client = __commonJS({
           cb();
         });
       }
-      const keys = Object.keys(env || {});
+      const keys = Object.keys(env2 || {});
       for (let i = 0; i < keys.length; ++i) {
         const key = keys[i];
-        const val = env[key];
+        const val = env2[key];
         chan._client._protocol.env(chan.outgoing.id, key, val, wantReply);
       }
     }
@@ -29659,7 +29659,9 @@ function paths(dir) {
     /** Each run's Claude Code settings file, `<runId>.json`, there only while the run lasts. */
     runsDir: path.join(dir, "runs"),
     /** The runner's bare mirrors of the projects' repositories: the only ones that talk to GitHub. */
-    gitDir: path.join(dir, "git")
+    gitDir: path.join(dir, "git"),
+    /** One `<projectId>.env` per project the machine's owner gives variables to (see project-env.ts). */
+    envDir: path.join(dir, "env")
   };
 }
 function loadConfig(dir = defaultDir()) {
@@ -29682,6 +29684,7 @@ function saveConfig(cfg, dir = defaultDir()) {
 }
 
 // src/args.ts
+var WITH_ARG = /* @__PURE__ */ new Set(["env"]);
 function parseArgs(argv) {
   const out = {};
   for (let i = 0; i < argv.length; i++) {
@@ -29691,13 +29694,14 @@ function parseArgs(argv) {
       if (!v || !PROFILE_RE.test(v)) return { error: `--profile needs a name of letters, digits and dashes (1 to 32), not "${v ?? ""}".` };
       out.profile = v;
     } else if (out.cmd === void 0) out.cmd = a;
+    else if (out.arg === void 0 && WITH_ARG.has(out.cmd)) out.arg = a;
     else return { error: `Unexpected argument: ${a}` };
   }
   return out;
 }
 
 // src/commands.ts
-import { readFileSync as readFileSync4 } from "node:fs";
+import { readFileSync as readFileSync5 } from "node:fs";
 import os6 from "node:os";
 import { createInterface } from "node:readline/promises";
 import { Writable as Writable2 } from "node:stream";
@@ -29813,9 +29817,9 @@ var ENV_ALLOW_WINDOWS = [
   "TEMP",
   "TMP"
 ];
-function baseEnv(env, windows) {
+function baseEnv(env2, windows) {
   const out = {};
-  for (const [k, v] of Object.entries(env)) {
+  for (const [k, v] of Object.entries(env2)) {
     if (v === void 0) continue;
     const key = windows ? k.toUpperCase() : k;
     if (!(ENV_ALLOW.includes(key) || ENV_ALLOW_PREFIX.some((p) => key.startsWith(p)) || windows && ENV_ALLOW_WINDOWS.includes(key))) continue;
@@ -29884,8 +29888,9 @@ function claudeEngine(deps = {}) {
     "user"
   ];
   const engineEnv = (o) => ({
-    ...baseEnv(deps.env ?? process.env, windows),
+    // The project's own variables first: the runner's environment (PATH, proxies, CA files…) and its tokens win.
     ...o.env,
+    ...baseEnv(deps.env ?? process.env, windows),
     ...AGENT_GIT_ENV,
     CLAUDE_CONFIG_DIR: o.claudeConfigDir,
     NOTIAMO_RUN_TOKEN: o.mcp.token,
@@ -30156,11 +30161,11 @@ var realExec = async (file2, args, opts) => {
   if (r.code === 127 && process.platform === "win32") return run(file2, args.map(quoteForCmd), opts?.env, true, opts?.timeout);
   return r;
 };
-function run(file2, args, env, shell, timeout) {
+function run(file2, args, env2, shell, timeout) {
   return new Promise((resolve) => {
     let stdout = "";
     let stderr = "";
-    const child = spawn2(file2, args, { env: env ?? process.env, shell, stdio: ["ignore", "pipe", "pipe"], windowsHide: true, ...timeout ? { timeout, killSignal: "SIGKILL" } : {} });
+    const child = spawn2(file2, args, { env: env2 ?? process.env, shell, stdio: ["ignore", "pipe", "pipe"], windowsHide: true, ...timeout ? { timeout, killSignal: "SIGKILL" } : {} });
     child.stdout.on("data", (d) => {
       stdout += d.toString();
     });
@@ -30267,8 +30272,8 @@ function findOnPath(name, dirs, platform) {
   }
   return null;
 }
-function machineToolDirs(env = process.env, argv1 = process.argv[1], execPath = process.execPath, platform = process.platform) {
-  const pathDirs = (env.PATH ?? env.Path ?? "").split(path2.delimiter).filter((d) => d && path2.isAbsolute(d));
+function machineToolDirs(env2 = process.env, argv1 = process.argv[1], execPath = process.execPath, platform = process.platform) {
+  const pathDirs = (env2.PATH ?? env2.Path ?? "").split(path2.delimiter).filter((d) => d && path2.isAbsolute(d));
   const dirs = pathDirs.map(realPath);
   for (const bin of ["git", "claude"]) {
     const found = findOnPath(bin, pathDirs, platform);
@@ -30422,8 +30427,9 @@ function sandboxSettings(o) {
       },
       network: {
         allowedDomains: [...new Set(domains)],
-        // macOS: lets the engine's shell commands reach the run's local helper on 127.0.0.1 (no effect on Linux).
-        ...o.wordpressHost ? { allowLocalBinding: true } : {}
+        // macOS: lets the engine's shell commands reach 127.0.0.1: the run's local helper on a WordPress run, the
+        // owner's own services (Postgres, MinIO…) on a project with an env file (no effect on Linux).
+        ...o.wordpressHost || o.localServices ? { allowLocalBinding: true } : {}
       }
     }
   };
@@ -30444,9 +30450,9 @@ import path3 from "node:path";
 
 // src/service/common.ts
 var startArgs = (profile) => profile ? ["start", "--profile", profile] : ["start"];
-function serviceEnv(env = {}) {
+function serviceEnv(env2 = {}) {
   const out = {};
-  for (const k of ["PATH", "NOTIAMO_RUNNER_HOME"]) if (env[k]) out[k] = env[k];
+  for (const k of ["PATH", "NOTIAMO_RUNNER_HOME"]) if (env2[k]) out[k] = env2[k];
   return out;
 }
 function must(what, r) {
@@ -30461,7 +30467,7 @@ var BOOTSTRAP_TRIES = 5;
 var BOOTSTRAP_RETRY_MS = 500;
 var esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 function renderPlist(o) {
-  const env = Object.entries(serviceEnv(o.env)).map(([k, v]) => `    <key>${esc(k)}</key>
+  const env2 = Object.entries(serviceEnv(o.env)).map(([k, v]) => `    <key>${esc(k)}</key>
     <string>${esc(v)}</string>`).join("\n");
   return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -30487,7 +30493,7 @@ ${startArgs(o.profile).map((a) => `    <string>${esc(a)}</string>`).join("\n")}
   <string>${esc(o.log)}</string>
   <key>EnvironmentVariables</key>
   <dict>
-${env}
+${env2}
   </dict>
 </dict>
 </plist>
@@ -30536,7 +30542,7 @@ var unit = (profile) => profile ? `notiamo-runner-${profile}` : "notiamo-runner"
 var unitPath = (home, profile) => path4.join(home, ".config", "systemd", "user", `${unit(profile)}.service`);
 var q = (s) => `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
 function renderUnit(o) {
-  const env = Object.entries(serviceEnv(o.env)).map(([k, v]) => `Environment=${q(`${k}=${v}`)}`).join("\n");
+  const env2 = Object.entries(serviceEnv(o.env)).map(([k, v]) => `Environment=${q(`${k}=${v}`)}`).join("\n");
   return `[Unit]
 Description=Notiamo runner${o.profile ? ` (${o.profile})` : ""}
 After=network-online.target
@@ -30547,7 +30553,7 @@ Restart=always
 RestartSec=5
 StandardOutput=append:${o.log}
 StandardError=append:${o.log}
-${env}
+${env2}
 
 [Install]
 WantedBy=default.target
@@ -30623,8 +30629,8 @@ var serviceStatus = async (o) => impl(o).status(withUid(o));
 // src/init.ts
 var DEFAULT_HOST = "https://my.notiamo.com";
 var KEYCHAIN_WARNING = "Warning: this user's keychain holds a GitHub login. A run on this machine could reach it. Remove it (Keychain Access, search github.com) or install the runner under a separate macOS user. The runner itself does not need it.";
-var runInteractive = (file2, args, env) => new Promise((resolve, reject) => {
-  const child = spawn3(file2, args, { stdio: "inherit", env, shell: process.platform === "win32" });
+var runInteractive = (file2, args, env2) => new Promise((resolve, reject) => {
+  const child = spawn3(file2, args, { stdio: "inherit", env: env2, shell: process.platform === "win32" });
   child.on("error", reject);
   child.on("exit", (code) => resolve(code ?? 1));
 });
@@ -30636,7 +30642,7 @@ async function runInit(deps) {
   const dir = deps.dir ?? profileDir(deps.profile);
   const platform = deps.platform ?? process.platform;
   const p = paths(dir);
-  const env = deps.env ?? process.env;
+  const env2 = deps.env ?? process.env;
   const print = deps.print ?? ((s) => console.log(s));
   const ask = async (q2, def) => (await deps.prompt(q2, { default: def })).trim() || def;
   const token = (await deps.prompt("Runner token (made in Notiamo under Settings \u203A Agent runs \u203A Runners; nothing shows while you paste it): ", { hidden: true })).trim();
@@ -30644,21 +30650,21 @@ async function runInit(deps) {
   const host = normalizeHost(await ask("Notiamo address: ", DEFAULT_HOST));
   const hostname3 = deps.hostname ?? os4.hostname();
   const name = await ask("Name of this runner: ", hostname3);
-  const engineVersion = await checkMachine(deps, env, platform, print);
+  const engineVersion = await checkMachine(deps, env2, platform, print);
   try {
     await new NotiamoApi({ host, token }, deps.fetch).hello({ version: VERSION, os: platform, engine: "claude", engineVersion });
   } catch (e) {
     if (e instanceof ApiError && e.status === 401) throw new Error("The runner token was not accepted.");
     throw new Error(`Notiamo at ${host} did not answer: ${e instanceof Error ? e.message : String(e)}`);
   }
-  const claudeEnv = { ...env, CLAUDE_CONFIG_DIR: p.claudeConfigDir };
+  const claudeEnv = { ...env2, CLAUDE_CONFIG_DIR: p.claudeConfigDir };
   if (!deps.skipLogin) {
     print("Sign Claude Code in for the runner (its own sign-in, kept apart from yours):");
     await (deps.interactive ?? runInteractive)("claude", ["auth", "login"], claudeEnv);
   }
   const check2 = await deps.exec("claude", ["-p", "say ok"], { env: claudeEnv });
   if (check2.code !== 0) throw new Error("Claude Code is not signed in for the runner.");
-  await warnKeychain(deps, env, platform, print);
+  await warnKeychain(deps, env2, platform, print);
   saveConfig({ host, token, name, dataDir: dir, engine: "claude" }, dir);
   await installService({
     platform,
@@ -30666,26 +30672,26 @@ async function runInit(deps) {
     paths: p,
     exec: deps.exec,
     home: deps.home ?? os4.homedir(),
-    env,
+    env: env2,
     nodePath: deps.nodePath ?? process.execPath,
     cliPath: deps.cliPath ?? process.argv[1]
   });
   print(`Runner ${name}${deps.profile ? ` (profile ${deps.profile})` : ""} is installed and running. Logs: ${p.log}`);
 }
-async function checkMachine(deps, env, platform, print) {
-  const version2 = await deps.exec("claude", ["--version"], { env });
+async function checkMachine(deps, env2, platform, print) {
+  const version2 = await deps.exec("claude", ["--version"], { env: env2 });
   if (version2.code !== 0) throw new Error("Claude Code is not installed. Install it first: https://claude.com/claude-code");
   const engineVersion = version2.stdout.trim().slice(0, 100) || "unknown";
   if (engineTooOld(engineVersion)) throw new Error(`Claude Code 2.1.314 or newer is needed (yours: ${engineVersion}). Update it: claude update`);
-  const git = await deps.exec("git", ["--version"], { env });
+  const git = await deps.exec("git", ["--version"], { env: env2 });
   const gitVersion = git.code === 0 ? /git version (\d+)\.(\d+)/.exec(git.stdout) ?? null : null;
   if (!gitVersion || Number(gitVersion[1]) < 2 || Number(gitVersion[1]) === 2 && Number(gitVersion[2]) < 31) {
     const yours = git.code === 0 ? git.stdout.trim().replace(/^git version /, "").slice(0, 60) || "unknown" : "not installed";
     throw new Error(`git 2.31 or newer is needed (yours: ${yours}). Update git.`);
   }
   if (platform === "linux") {
-    const bwrap = await deps.exec("which", ["bwrap"], { env });
-    const socat = await deps.exec("which", ["socat"], { env });
+    const bwrap = await deps.exec("which", ["bwrap"], { env: env2 });
+    const socat = await deps.exec("which", ["socat"], { env: env2 });
     if (bwrap.code !== 0 || socat.code !== 0) {
       throw new Error("The sandbox needs bubblewrap and socat. Install them (Debian/Ubuntu: sudo apt install bubblewrap socat), then run init again.");
     }
@@ -30694,36 +30700,36 @@ async function checkMachine(deps, env, platform, print) {
   }
   return engineVersion;
 }
-async function warnKeychain(deps, env, platform, print) {
+async function warnKeychain(deps, env2, platform, print) {
   if (platform !== "darwin") return;
-  const git = await deps.exec("security", ["find-internet-password", "-s", "github.com"], { env, timeout: 1e4 });
-  const gh = await deps.exec("security", ["find-generic-password", "-s", "gh:github.com"], { env, timeout: 1e4 });
+  const git = await deps.exec("security", ["find-internet-password", "-s", "github.com"], { env: env2, timeout: 1e4 });
+  const gh = await deps.exec("security", ["find-generic-password", "-s", "gh:github.com"], { env: env2, timeout: 1e4 });
   if (git.code === 0 || gh.code === 0) print(KEYCHAIN_WARNING);
 }
 async function runUpdate(deps) {
   const dir = deps.dir ?? profileDir(deps.profile);
   const platform = deps.platform ?? process.platform;
   const p = paths(dir);
-  const env = deps.env ?? process.env;
+  const env2 = deps.env ?? process.env;
   const print = deps.print ?? ((s) => console.log(s));
   const cfg = loadConfig(dir);
-  const engineVersion = await checkMachine(deps, env, platform, print);
+  const engineVersion = await checkMachine(deps, env2, platform, print);
   try {
     await new NotiamoApi({ host: cfg.host, token: cfg.token }, deps.fetch).hello({ version: VERSION, os: platform, engine: "claude", engineVersion });
   } catch (e) {
     if (e instanceof ApiError && e.status === 401) throw new Error("The saved runner token is not accepted any more (revoked or deleted). Make a new runner in Notiamo and run init.");
     throw new Error(`Notiamo at ${cfg.host} did not answer: ${e instanceof Error ? e.message : String(e)}`);
   }
-  const check2 = await deps.exec("claude", ["-p", "say ok"], { env: { ...env, CLAUDE_CONFIG_DIR: p.claudeConfigDir } });
+  const check2 = await deps.exec("claude", ["-p", "say ok"], { env: { ...env2, CLAUDE_CONFIG_DIR: p.claudeConfigDir } });
   if (check2.code !== 0) throw new Error("Claude Code is not signed in for the runner. Run: notiamo-runner init");
-  await warnKeychain(deps, env, platform, print);
+  await warnKeychain(deps, env2, platform, print);
   await installService({
     platform,
     profile: deps.profile,
     paths: p,
     exec: deps.exec,
     home: deps.home ?? os4.homedir(),
-    env,
+    env: env2,
     nodePath: deps.nodePath ?? process.execPath,
     cliPath: deps.cliPath ?? process.argv[1]
   });
@@ -30748,8 +30754,8 @@ function createLogger(file2) {
 }
 
 // src/loop.ts
-import { mkdirSync as mkdirSync8, readFileSync as readFileSync3, renameSync as renameSync2, rmSync as rmSync6, writeFileSync as writeFileSync7 } from "node:fs";
-import path12 from "node:path";
+import { mkdirSync as mkdirSync9, readFileSync as readFileSync4, renameSync as renameSync2, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "node:fs";
+import path13 from "node:path";
 import { setTimeout as delay2 } from "node:timers/promises";
 
 // src/clones.ts
@@ -30843,8 +30849,8 @@ function removeStaleClones(projectsDir, gitDir, keepDays, busyProjectIds, now, l
 var errorText = (e) => e instanceof Error ? e.message : String(e);
 
 // src/run.ts
-import { chmodSync as chmodSync2, mkdirSync as mkdirSync7, mkdtempSync, rmSync as rmSync5, writeFileSync as writeFileSync6 } from "node:fs";
-import path11 from "node:path";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync8, mkdtempSync, rmSync as rmSync5, writeFileSync as writeFileSync7 } from "node:fs";
+import path12 from "node:path";
 
 // src/project-folder.ts
 import { execFile } from "node:child_process";
@@ -30865,9 +30871,9 @@ var execFileAsync = async (file2, args, opts) => {
 };
 var SAFE_GIT = ["-c", "core.hooksPath=/dev/null", "-c", "core.fsmonitor=false"];
 function gitEnv() {
-  const env = { ...process.env, GIT_TERMINAL_PROMPT: "0", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: os5.devNull };
-  for (const k of Object.keys(env)) if (/^GIT_CONFIG_(COUNT|KEY_\d+|VALUE_\d+|PARAMETERS)$/.test(k) || k === "GIT_ASKPASS") delete env[k];
-  return env;
+  const env2 = { ...process.env, GIT_TERMINAL_PROMPT: "0", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: os5.devNull };
+  for (const k of Object.keys(env2)) if (/^GIT_CONFIG_(COUNT|KEY_\d+|VALUE_\d+|PARAMETERS)$/.test(k) || k === "GIT_ASKPASS") delete env2[k];
+  return env2;
 }
 function githubAuthEnv(token) {
   return {
@@ -30890,8 +30896,8 @@ async function prepareGithubFolder(dirs, projectId, g, token, exec = execFileAsy
   const folder = projectFolder(dirs.projectsDir, slot, projectId);
   const bare = barePath(dirs.gitDir, projectId);
   const saved = savedSnapshotPath(dirs.gitDir, projectId, slot);
-  const env = gitEnv();
-  const gitIn = (dir, args, timeout = GIT_TIMEOUT_MS) => exec("git", [...SAFE_GIT, "-C", dir, ...args], { env, timeout });
+  const env2 = gitEnv();
+  const gitIn = (dir, args, timeout = GIT_TIMEOUT_MS) => exec("git", [...SAFE_GIT, "-C", dir, ...args], { env: env2, timeout });
   if (existsSync4(path7.join(bare, "HEAD"))) {
     await gitIn(bare, ["remote", "set-url", "--", "origin", g.cloneUrl]);
     await exec("git", [...SAFE_GIT, "-C", bare, "fetch", "origin", "--prune", "+refs/heads/*:refs/heads/*"], { env: githubAuthEnv(await token()), timeout: CLONE_TIMEOUT_MS });
@@ -30915,7 +30921,7 @@ async function prepareGithubFolder(dirs, projectId, g, token, exec = execFileAsy
     await gitIn(folder, ["fetch", "origin", "--prune"]);
   } else {
     mkdirSync6(slotDir, { recursive: true, mode: 448 });
-    await exec("git", [...SAFE_GIT, "clone", "--no-hardlinks", "--", bare, folder], { cwd: slotDir, env, timeout: CLONE_TIMEOUT_MS });
+    await exec("git", [...SAFE_GIT, "clone", "--no-hardlinks", "--", bare, folder], { cwd: slotDir, env: env2, timeout: CLONE_TIMEOUT_MS });
   }
   const { stdout } = await gitIn(folder, ["rev-parse", "--abbrev-ref", "HEAD"]);
   if (stdout.trim() !== g.branch) {
@@ -30947,8 +30953,8 @@ function readSavedSnapshot(file2) {
   }
 }
 async function pushBranch(folder, bare, branch, token, exec = execFileAsync) {
-  const env = gitEnv();
-  await exec("git", [...SAFE_GIT, "-C", bare, "fetch", folder, `+refs/heads/${branch}:refs/heads/${branch}`], { env, timeout: GIT_TIMEOUT_MS }).catch(gitError);
+  const env2 = gitEnv();
+  await exec("git", [...SAFE_GIT, "-C", bare, "fetch", folder, `+refs/heads/${branch}:refs/heads/${branch}`], { env: env2, timeout: GIT_TIMEOUT_MS }).catch(gitError);
   const auth = githubAuthEnv(await token());
   await exec("git", [...SAFE_GIT, "-C", bare, "push", "--no-verify", "origin", branch], { env: auth, timeout: GIT_TIMEOUT_MS }).catch(gitError);
 }
@@ -31041,6 +31047,110 @@ function exists(p) {
   }
 }
 
+// src/project-env.ts
+import { chmodSync as chmodSync2, existsSync as existsSync5, mkdirSync as mkdirSync7, readFileSync as readFileSync3, writeFileSync as writeFileSync6 } from "node:fs";
+import path8 from "node:path";
+var PROTECTED_KEYS = /* @__PURE__ */ new Set([
+  "PATH",
+  "HOME",
+  "USER",
+  "LOGNAME",
+  "SHELL",
+  "TMPDIR",
+  "TERM",
+  "LANG",
+  "TZ",
+  "CLAUDE_CONFIG_DIR",
+  "HTTP_PROXY",
+  "HTTPS_PROXY",
+  "NO_PROXY",
+  "NODE_EXTRA_CA_CERTS",
+  "SSL_CERT_FILE",
+  "SSL_CERT_DIR",
+  "NODE_OPTIONS",
+  "NODE_TLS_REJECT_UNAUTHORIZED",
+  "PATHEXT",
+  "SYSTEMROOT",
+  "SYSTEMDRIVE",
+  "WINDIR",
+  "COMSPEC",
+  "USERPROFILE",
+  "USERNAME",
+  "HOMEDRIVE",
+  "HOMEPATH",
+  "APPDATA",
+  "LOCALAPPDATA",
+  "PROGRAMDATA",
+  "PROGRAMFILES",
+  "PROGRAMFILES(X86)",
+  "TEMP",
+  "TMP"
+]);
+var PROTECTED_PREFIXES = ["NOTIAMO_", "GIT_", "CLAUDE_", "ANTHROPIC_", "LC_", "XDG_"];
+var KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+var PROJECT_ID_RE = /^[\w-]+$/;
+var isProtectedKey = (key) => PROTECTED_KEYS.has(key.toUpperCase()) || PROTECTED_PREFIXES.some((p) => key.toUpperCase().startsWith(p));
+var unescape2 = (s) => s.replace(/\\([ntr\\"])/g, (_, c) => ({ n: "\n", t: "	", r: "\r", "\\": "\\", '"': '"' })[c]);
+function parseEnvFile(text) {
+  const env2 = {};
+  const skipped = [];
+  const lines2 = text.split(/\r?\n/);
+  for (let i = 0; i < lines2.length; i++) {
+    const raw = lines2[i].trim();
+    if (raw === "" || raw.startsWith("#")) continue;
+    const line = raw.startsWith("export ") ? raw.slice(7).trimStart() : raw;
+    const eq = line.indexOf("=");
+    const key = eq < 0 ? "" : line.slice(0, eq).trim();
+    if (eq < 0 || !KEY_RE.test(key)) {
+      skipped.push({ line: i + 1, key: KEY_RE.test(key) ? key : key.split(/\s/)[0] ?? "", reason: "bad_line" });
+      continue;
+    }
+    if (isProtectedKey(key)) {
+      skipped.push({ line: i + 1, key, reason: "protected" });
+      continue;
+    }
+    let value = line.slice(eq + 1).trim();
+    if (value.length >= 2 && value.startsWith('"') && value.endsWith('"')) value = unescape2(value.slice(1, -1));
+    else if (value.length >= 2 && value.startsWith("'") && value.endsWith("'")) value = value.slice(1, -1);
+    env2[key] = value;
+  }
+  return { env: env2, skipped };
+}
+function projectEnvPath(envDir, projectId) {
+  if (!PROJECT_ID_RE.test(projectId)) throw new Error(`Not a project id: ${JSON.stringify(projectId)}. It is the last part of the project page's address.`);
+  return path8.join(envDir, `${projectId}.env`);
+}
+function loadProjectEnv(envDir, projectId, log) {
+  const file2 = projectEnvPath(envDir, projectId);
+  if (!existsSync5(file2)) return null;
+  const { env: env2, skipped } = parseEnvFile(readFileSync3(file2, "utf8"));
+  for (const s of skipped) {
+    log.warn(s.reason === "protected" ? `env file ${file2}: line ${s.line} sets ${s.key}, a protected variable: skipped` : `env file ${file2}: line ${s.line} is not KEY=VALUE: skipped`);
+  }
+  return { env: env2, names: Object.keys(env2).sort() };
+}
+var HEADER = `# Environment for the runs of this project on this machine (notiamo-runner).
+# One KEY=VALUE per line. Dev and test values only: the agent can read every variable. Never production keys.
+# With this file present, the run's shell may reach services on 127.0.0.1 (your Postgres, MinIO, Mailpit...) on macOS.
+# PATH, HOME, proxy and certificate variables, NODE_OPTIONS, NOTIAMO_*, GIT_*, CLAUDE_* and ANTHROPIC_* are ignored here.
+`;
+function ensureProjectEnv(envDir, projectId) {
+  const file2 = projectEnvPath(envDir, projectId);
+  mkdirSync7(envDir, { recursive: true, mode: 448 });
+  try {
+    chmodSync2(envDir, 448);
+  } catch {
+  }
+  if (!existsSync5(file2)) {
+    writeFileSync6(file2, HEADER, { mode: 384 });
+    try {
+      chmodSync2(file2, 384);
+    } catch {
+    }
+  }
+  return file2;
+}
+
 // src/scrub.ts
 function scrub(line, secrets) {
   const forms = /* @__PURE__ */ new Set();
@@ -31110,12 +31220,12 @@ function resolveRoute(siteUrl, route) {
     return { error: "route is not a valid URL path" };
   }
   if (url2.origin !== site.origin || !url2.pathname.startsWith(prefix + "/wp/v2/")) return { error: "route must stay under /wp/v2/" };
-  const path13 = url2.pathname.slice(prefix.length);
-  return { path: path13, route: path13 + url2.search, query: url2.searchParams };
+  const path14 = url2.pathname.slice(prefix.length);
+  return { path: path14, route: path14 + url2.search, query: url2.searchParams };
 }
 
 // src/wp/backup.ts
-import path8 from "node:path";
+import path9 from "node:path";
 
 // src/wp/transport.ts
 var shellQuote = (a) => /^[A-Za-z0-9_\-.,/:=@%+]+$/.test(a) ? a : `'${a.replace(/'/g, `'\\''`)}'`;
@@ -31134,7 +31244,7 @@ async function backupBefore(t, root) {
   const wp = await dump(`{ wp db export - --path=${shellQuote(root)} || echo ${FAILED} >&2; } | gzip`);
   if (wp === "overflow") throw new Error("backup_failed: the database dump is over 200 MB");
   if (wp) return { dump: wp, how: "wp-cli" };
-  const config2 = await t.getFile(path8.posix.join(root, "wp-config.php")).catch(() => null);
+  const config2 = await t.getFile(path9.posix.join(root, "wp-config.php")).catch(() => null);
   const db = config2 ? dbCredentials(config2) : null;
   if (!db) throw new Error("backup_failed: no wp-cli export and no database credentials in wp-config.php");
   const [host, port] = splitHost(db.host);
@@ -31266,7 +31376,7 @@ async function ftpTransport(conn) {
 // src/wp/helper.ts
 import { randomBytes, timingSafeEqual } from "node:crypto";
 import http from "node:http";
-import path9 from "node:path";
+import path10 from "node:path";
 
 // ../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v3/helpers/util.js
 var util;
@@ -31642,8 +31752,8 @@ function getErrorMap() {
 
 // ../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path13, errorMaps, issueData } = params;
-  const fullPath = [...path13, ...issueData.path || []];
+  const { data, path: path14, errorMaps, issueData } = params;
+  const fullPath = [...path14, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -31758,11 +31868,11 @@ var errorUtil;
 
 // ../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path13, key) {
+  constructor(parent, value, path14, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path13;
+    this._path = path14;
     this._key = key;
   }
   get path() {
@@ -35717,10 +35827,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path13) {
-  if (!path13)
+function getElementAtPath(obj, path14) {
+  if (!path14)
     return obj;
-  return path13.reduce((acc, key) => acc?.[key], obj);
+  return path14.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -36060,11 +36170,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path13, issues) {
+function prefixIssues(path14, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path13);
+    iss.path.unshift(path14);
     return iss;
   });
 }
@@ -36526,16 +36636,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path13 = []) => {
+  const processError = (error63, path14 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path13, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path14, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path14, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path14, ...issue2.path]);
       } else {
-        const fullpath = [...path13, ...issue2.path];
+        const fullpath = [...path14, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -36574,17 +36684,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path13 = []) => {
+  const processError = (error63, path14 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path13, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path14, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path14, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path14, ...issue2.path]);
       } else {
-        const fullpath = [...path13, ...issue2.path];
+        const fullpath = [...path14, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -36623,8 +36733,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path13 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path13) {
+  const path14 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path14) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -52175,11 +52285,11 @@ function normalizeObjectSchema(schema) {
   }
   return void 0;
 }
-function getDotPath(path13) {
-  if (path13.length === 0) {
+function getDotPath(path14) {
+  if (path14.length === 0) {
     return "object root";
   }
-  return path13.reduce((acc, seg, index) => {
+  return path14.reduce((acc, seg, index) => {
     if (index === 0) {
       return String(seg);
     }
@@ -54406,13 +54516,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path13 = ref.slice(1).split("/").filter(Boolean);
-  if (path13.length === 0) {
+  const path14 = ref.slice(1).split("/").filter(Boolean);
+  if (path14.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path13[0] === defsKey) {
-    const key = path13[1] === void 0 ? void 0 : decodeJSONPointerSegment(path13[1]);
+  if (path14[0] === defsKey) {
+    const key = path14[1] === void 0 ? void 0 : decodeJSONPointerSegment(path14[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -61678,15 +61788,15 @@ var CONNECTION_SYMBOL_KEY = /* @__PURE__ */ Symbol("CONNECTION_SYMBOL_KEY");
 var WAIT_FOR_WEBSOCKET_SYMBOL = /* @__PURE__ */ Symbol("WAIT_FOR_WEBSOCKET_SYMBOL");
 var upgradeWebSocket = defineWebSocketHelper(async (c, events, options) => {
   if (c.req.header("upgrade")?.toLowerCase() !== "websocket") return;
-  const env = c.env;
-  const waitForWebSocket = env[WAIT_FOR_WEBSOCKET_SYMBOL];
-  if (!waitForWebSocket || !env.incoming) return new Response(null, { status: 500 });
+  const env2 = c.env;
+  const waitForWebSocket = env2[WAIT_FOR_WEBSOCKET_SYMBOL];
+  if (!waitForWebSocket || !env2.incoming) return new Response(null, { status: 500 });
   const connectionSymbol = generateConnectionSymbol();
-  env[CONNECTION_SYMBOL_KEY] = connectionSymbol;
+  env2[CONNECTION_SYMBOL_KEY] = connectionSymbol;
   (async () => {
     let ws;
     try {
-      ws = await waitForWebSocket(env.incoming, connectionSymbol);
+      ws = await waitForWebSocket(env2.incoming, connectionSymbol);
     } catch {
       return;
     }
@@ -62860,7 +62970,7 @@ function buildServer(t) {
     if (!t.allow.files && !t.allow.all) return fail("the files group is off for this project");
     if (t.root === null) return fail("wordpress_root_not_found: the WordPress folder was not found on the server");
     const bad = pathRefusal(p, t.allow.all);
-    return bad ? fail(bad) : path9.posix.join(t.root, p);
+    return bad ? fail(bad) : path10.posix.join(t.root, p);
   };
   server.registerTool("wp_get_file", {
     description: "Reads a file of the WordPress site, by its path relative to the WordPress folder (e.g. wp-content/themes/x/style.css).",
@@ -62932,9 +63042,9 @@ function apiRefusal(route, query, method, body, allow) {
 }
 function pathRefusal(p, all) {
   if (p.startsWith("/") || p.includes("\\") || p.includes("\0")) return "path must be relative to the WordPress folder";
-  const norm = path9.posix.normalize(p);
+  const norm = path10.posix.normalize(p);
   if (norm === ".." || norm.startsWith("../") || p.split("/").includes("..")) return "path must stay inside the WordPress folder";
-  if (!all && PROTECTED_FILES.has(path9.posix.basename(norm))) return `refused: ${path9.posix.basename(norm)} is never changed unless "Allow everything" is on`;
+  if (!all && PROTECTED_FILES.has(path10.posix.basename(norm))) return `refused: ${path10.posix.basename(norm)} is never changed unless "Allow everything" is on`;
   return null;
 }
 function publishedLink(json3) {
@@ -62946,7 +63056,7 @@ var cut2 = (s) => s.length > MAX_OUTPUT ? `${s.slice(0, MAX_OUTPUT)}
 [cut at ${MAX_OUTPUT} characters]` : s;
 
 // src/wp/root.ts
-import path10 from "node:path";
+import path11 from "node:path";
 var FTP_CANDIDATES = [".", "public_html", "www", "htdocs", "httpdocs", "html", "web"];
 async function findRoot(t) {
   if (t.run) {
@@ -62954,10 +63064,10 @@ async function findRoot(t) {
     if (home?.code === 0) return ".";
     const found = await t.run(["find", ".", "-maxdepth", "3", "-name", "wp-config.php"]).catch(() => null);
     const first = found?.stdout.toString("utf8").split("\n").map((l) => l.trim()).filter(Boolean).sort((a, b) => a.split("/").length - b.split("/").length)[0];
-    return first ? path10.posix.normalize(path10.posix.dirname(first)) : null;
+    return first ? path11.posix.normalize(path11.posix.dirname(first)) : null;
   }
   for (const dir of FTP_CANDIDATES) {
-    if (await t.getFile(path10.posix.join(dir, "wp-config.php")).catch(() => null) !== null) return dir;
+    if (await t.getFile(path11.posix.join(dir, "wp-config.php")).catch(() => null) !== null) return dir;
   }
   return null;
 }
@@ -63090,17 +63200,23 @@ async function runOne(spec, deps) {
     } else {
       started = true;
       const parent = projectFolder(deps.paths.projectsDir, slot, spec.projectId);
-      mkdirSync7(parent, { recursive: true, mode: 448 });
-      cwd = tempDir = mkdtempSync(path11.join(parent, "run-"));
+      mkdirSync8(parent, { recursive: true, mode: 448 });
+      cwd = tempDir = mkdtempSync(path12.join(parent, "run-"));
       if (deps.helperFactory) helper = await deps.helperFactory(spec);
     }
-    settingsFile = writeSettings(spec, deps, cwd);
+    const projectEnv = loadProjectEnv(deps.paths.envDir, spec.projectId, log);
+    settingsFile = writeSettings(spec, deps, cwd, projectEnv !== null);
+    if (projectEnv) {
+      secrets.push(...Object.values(projectEnv.env));
+      log.info(`run ${spec.runId}: env file with ${projectEnv.names.length} variable(s)`);
+    }
     const base = {
+      // 127.0.0.1 is the machine's only on macOS: Linux's sandbox gives the shell its own network namespace.
       cwd,
-      systemPrompt: spec.systemPrompt,
+      systemPrompt: projectEnv ? withEnvNote(spec.systemPrompt, projectEnv.names, deps.sandbox.platform === "darwin") : spec.systemPrompt,
       mcp: { url: spec.mcp.url, token: spec.mcp.accessToken },
       helper: helper ? { url: helper.url, token: helper.token } : void 0,
-      env: {},
+      env: projectEnv?.env ?? {},
       maxMinutes: spec.maxRunMinutes,
       claudeConfigDir: deps.paths.claudeConfigDir,
       settingsFile
@@ -63224,7 +63340,14 @@ function githubToken(runId, g, api, secrets, now) {
     return token;
   };
 }
-function writeSettings(spec, deps, cwd) {
+function withEnvNote(systemPrompt, names, localServices) {
+  const list = names.length > 0 ? `these environment variables for the project: ${names.join(", ")}` : "an environment file for the project (empty)";
+  const local = localServices ? " Services they point to run on 127.0.0.1 and are reachable from your shell." : "";
+  return `${systemPrompt}
+
+This machine sets ${list}.${local} Use them for tests; do not print their values.`;
+}
+function writeSettings(spec, deps, cwd, localServices) {
   const { sandbox } = deps;
   let wordpressHost;
   if (spec.wordpress) {
@@ -63234,8 +63357,8 @@ function writeSettings(spec, deps, cwd) {
     }
   }
   if (!/^[\w-]+$/.test(spec.runId)) throw new Error("bad run id");
-  const dir = path11.resolve(deps.paths.runsDir);
-  mkdirSync7(dir, { recursive: true, mode: 448 });
+  const dir = path12.resolve(deps.paths.runsDir);
+  mkdirSync8(dir, { recursive: true, mode: 448 });
   const settings = sandboxSettings({
     platform: sandbox.platform,
     runnerRoot: sandbox.runnerRoot,
@@ -63244,13 +63367,14 @@ function writeSettings(spec, deps, cwd) {
     notiamoHost: sandbox.notiamoHost,
     extraDomains: sandbox.allowedDomains(),
     wordpressHost,
+    localServices,
     gitExecPath: sandbox.gitExecPath,
     ghPath: sandbox.ghPath
   });
-  const file2 = path11.join(dir, `${spec.runId}.json`);
-  writeFileSync6(file2, JSON.stringify(settings, null, 2) + "\n", { mode: 384 });
+  const file2 = path12.join(dir, `${spec.runId}.json`);
+  writeFileSync7(file2, JSON.stringify(settings, null, 2) + "\n", { mode: 384 });
   try {
-    chmodSync2(file2, 384);
+    chmodSync3(file2, 384);
   } catch {
   }
   return file2;
@@ -63411,7 +63535,7 @@ async function startLoop(deps) {
   const running = /* @__PURE__ */ new Map();
   for (let i = 0; i < SLOT_FOLDERS; i++) {
     try {
-      mkdirSync8(path12.join(deps.paths.projectsDir, String(i)), { recursive: true, mode: 448 });
+      mkdirSync9(path13.join(deps.paths.projectsDir, String(i)), { recursive: true, mode: 448 });
     } catch (e) {
       log.warn(`slot folder ${i} not made: ${errorText3(e)}`);
     }
@@ -63511,7 +63635,7 @@ async function startLoop(deps) {
 var errorText3 = (e) => e instanceof Error ? e.message : String(e);
 function readState(file2) {
   try {
-    const s = JSON.parse(readFileSync3(file2, "utf8"));
+    const s = JSON.parse(readFileSync4(file2, "utf8"));
     if (Array.isArray(s.busyRunIds)) return s.busyRunIds.filter((x) => typeof x === "string");
     return typeof s.busyRunId === "string" ? [s.busyRunId] : [];
   } catch {
@@ -63523,9 +63647,9 @@ function writeState(file2, busyRunIds) {
     rmSync6(file2, { force: true });
     return;
   }
-  mkdirSync8(path12.dirname(file2), { recursive: true, mode: 448 });
+  mkdirSync9(path13.dirname(file2), { recursive: true, mode: 448 });
   const tmp = `${file2}.tmp`;
-  writeFileSync7(tmp, JSON.stringify({ busyRunIds }) + "\n", { mode: 384 });
+  writeFileSync8(tmp, JSON.stringify({ busyRunIds }) + "\n", { mode: 384 });
   renameSync2(tmp, file2);
 }
 
@@ -63631,6 +63755,13 @@ async function uninstall4({ profile } = {}) {
   await uninstallService(serviceOptions(profile));
   console.log(`The runner service is removed. Its folder ${profileDir(profile)} (config, sign-in, projects) stays; delete it to remove everything.`);
 }
+async function env({ profile, projectId }) {
+  const file2 = ensureProjectEnv(paths(profileDir(profile)).envDir, projectId);
+  console.log(`Env file for project ${projectId}${profile ? ` (profile ${profile})` : ""}: ${file2}`);
+  console.log("One KEY=VALUE per line. Dev and test values only: the agent can read every variable, never production keys.");
+  console.log("With this file present, the runs of this project may reach services on 127.0.0.1 (Postgres, MinIO, Mailpit...) on macOS; on Linux the sandbox keeps 127.0.0.1 apart, use the machine's LAN address.");
+  console.log("The next run of the project reads it; the runner needs no restart. Remove the file to take the variables away.");
+}
 async function status4({ profile } = {}) {
   const st = await serviceStatus(serviceOptions(profile));
   let cfg = null;
@@ -63659,7 +63790,7 @@ function hostOf(url2) {
 function tail(file2, n) {
   let text;
   try {
-    text = readFileSync4(file2, "utf8");
+    text = readFileSync5(file2, "utf8");
   } catch {
     return [];
   }
@@ -63678,12 +63809,13 @@ Usage: notiamo-runner <command> [--profile <name>]
   status     Whether the service is installed and running, and the last log line
   logs       The last 50 lines of the log
   uninstall  Remove the service (the runner's folder stays)
+  env <projectId>  Make or show the env file this machine gives the runs of one project (dev/test values)
   --version  Print the version
 
   --profile <name>  A second runner on this machine (say "staging"): its own folder, sign-in and service.
                     Give it to every command of that runner.`;
 async function main(argv) {
-  const { cmd, profile, error: error62 } = parseArgs(argv);
+  const { cmd, arg, profile, error: error62 } = parseArgs(argv);
   if (error62) {
     console.error(`${error62}
 
@@ -63692,6 +63824,13 @@ ${HELP}`);
     return;
   }
   const o = { profile };
+  if (cmd === "env" && !arg) {
+    console.error(`env needs the project id: the last part of the project page's address.
+
+${HELP}`);
+    process.exitCode = 1;
+    return;
+  }
   switch (cmd) {
     case "init":
       return init(o);
@@ -63707,6 +63846,8 @@ ${HELP}`);
       return logs(o);
     case "uninstall":
       return uninstall4(o);
+    case "env":
+      return env({ ...o, projectId: arg });
     case "--version":
     case "-v":
       console.log(`notiamo-runner ${VERSION}`);