Nick Tabeling 510969b2d1 fix(runner): add sanitizedEnv, remove process.env passthrough ... Introduces src/runtime/env.ts with a pure sanitizedEnv() function that strips DISCORD_BOT_TOKEN, DISCORD_CLIENT_SECRET, DISCORD_PUBLIC_KEY, and all keys matching /^(DISCLAW_SECRET_|SECRET_|TOKEN_|API_KEY_?)/i before passing the environment to spawned Claude Code child processes. Adds optional env_blocklist field to DisclawConfig. Runner now passes DISCLAW_AGENT_NAME and respects the blocklist. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-04-09 10:39:06 +02:00
..
unit	fix(runner): add sanitizedEnv, remove process.env passthrough	2026-04-09 10:39:06 +02:00