fix(runner): refuse remote targets instead of running the command locally

[mrrobot47]

An alias with an ssh: or http: key, --ssh=, --http= and an ssh:/http: key in the config were accepted, but nothing ever sent the command to the remote target: ee @remote site delete example.com --yes deleted the site on the local server.

EasyEngine only manages the server it runs on (it needs root and the local Docker daemon, and runs its migrations before it dispatches a command), so these targets are now refused with a clear error before anything else runs:

• an alias with an ssh/http key, or a group or @all that contains one (aliases without a remote target keep working);
• --ssh and --http in any position, also with EE_STRICT_ARGS_MODE;
• an ssh:/http: key in the global or project config; ee config and ee help keep working, so ee config unset ssh can remove it.

Testing: unit tests run bin/ee with each kind of target (and the local controls) on PHP 7.4 and 8.5; the Behat alias scenarios cover the same cases.

[Copilot]

🟡 Changes recommended

Falsey remote configuration values bypass the new safety guard.

1 open finding

• Check key existence instead of truthiness for unsupported config · New

What changed in this PR

Adds early safeguards preventing unsupported remote targets from accidentally executing commands locally.

Changes:

• Rejects remote aliases, groups, and CLI flags.
• Rejects remote configuration before migrations run.
• Preserves configuration and help commands.

File	Description
php/​EE/​Runner.php	Adds remote-target detection and early refusal.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.