@blackbox_ai/blackbox-cli-core 0.0.7 → 0.8.1

package/dist/src/services/checkpointApiService.js

@@ -0,0 +1,215 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export class CheckpointApiService {
+    apiBaseUrl;
+    apiKey;
+    constructor(apiKey) {
+        // Use environment variable or provided API key
+        this.apiKey = apiKey || process.env['BLACKBOX_API_KEY'];
+        // API base URL - can be overridden with environment variable
+        this.apiBaseUrl = process.env['BLACKBOX_API_URL'] || 'https://cloud.blackbox.ai';
+    }
+    /**
+     * Check if the service is configured with a valid API key
+     */
+    isConfigured() {
+        return !!this.apiKey;
+    }
+    /**
+     * Normalize checkpoint tag to API format
+     * Supports:
+     * - "cloud-task-<taskId>" -> returns as-is
+     * - "<taskId>" -> converts to "cloud-task-<taskId>"
+     *
+     * @param tag - The checkpoint tag
+     * @returns Normalized tag in "cloud-task-<taskId>" format
+     */
+    normalizeTag(tag) {
+        // If already in correct format, return as-is
+        if (tag.startsWith('cloud-task-')) {
+            return tag;
+        }
+        // If starts with just "cloud-", assume it's "cloud-<taskId>" and convert
+        if (tag.startsWith('cloud-')) {
+            const taskId = tag.substring(6); // Remove "cloud-" prefix
+            return `cloud-task-${taskId}`;
+        }
+        // Otherwise, assume it's just the taskId and prepend "cloud-task-"
+        return `cloud-task-${tag}`;
+    }
+    /**
+     * List all tasks with checkpoints for the authenticated user
+     * @param filters - Optional filters (status, limit, offset)
+     * @returns List of tasks with checkpoint summaries
+     */
+    async listTasks(filters) {
+        if (!this.apiKey) {
+            throw new Error('Blackbox API key not configured. Please set BLACKBOX_API_KEY environment variable.');
+        }
+        try {
+            const url = `${this.apiBaseUrl}/api/public/checkpoint`;
+            const response = await fetch(url, {
+                method: 'POST',
+                headers: {
+                    'Authorization': `Bearer ${this.apiKey}`,
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify(filters || {}),
+            });
+            if (!response.ok) {
+                if (response.status === 401) {
+                    throw new Error('Invalid Blackbox API key. Please check your BLACKBOX_API_KEY.');
+                }
+                else {
+                    const errorText = await response.text();
+                    throw new Error(`API request failed (${response.status}): ${errorText}`);
+                }
+            }
+            const data = await response.json();
+            if (!data.success || !data.tasks) {
+                return [];
+            }
+            return data.tasks;
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                // Re-throw known errors
+                if (error.message.includes('API key') || error.message.includes('API request failed')) {
+                    throw error;
+                }
+                // Wrap network errors
+                throw new Error(`Failed to fetch tasks from API: ${error.message}`);
+            }
+            throw error;
+        }
+    }
+    /**
+     * Fetch checkpoint data from the public API
+     * @param tag - The checkpoint tag (e.g., "cloud-task-abc123" or just "abc123")
+     * @returns Checkpoint data or null if not found
+     */
+    async fetchCheckpointByTag(tag) {
+        if (!this.apiKey) {
+            throw new Error('Blackbox API key not configured. Please set BLACKBOX_API_KEY environment variable.');
+        }
+        // Normalize the tag to the format expected by the API
+        const normalizedTag = this.normalizeTag(tag);
+        try {
+            const url = `${this.apiBaseUrl}/api/public/checkpoint?taskId=${encodeURIComponent(normalizedTag)}`;
+            const response = await fetch(url, {
+                method: 'GET',
+                headers: {
+                    'Authorization': `Bearer ${this.apiKey}`,
+                    'Content-Type': 'application/json',
+                },
+            });
+            if (!response.ok) {
+                if (response.status === 401) {
+                    throw new Error('Invalid Blackbox API key. Please check your BLACKBOX_API_KEY.');
+                }
+                else if (response.status === 404) {
+                    return null; // Checkpoint not found
+                }
+                else {
+                    const errorText = await response.text();
+                    throw new Error(`API request failed (${response.status}): ${errorText}`);
+                }
+            }
+            const data = await response.json();
+            if (!data.success || !data.checkpoint) {
+                return null;
+            }
+            return data.checkpoint;
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                // Re-throw known errors
+                if (error.message.includes('API key') || error.message.includes('API request failed')) {
+                    throw error;
+                }
+                // Wrap network errors
+                throw new Error(`Failed to fetch checkpoint from API: ${error.message}`);
+            }
+            throw error;
+        }
+    }
+    /**
+     * Fetch task info by ID (without checkpoint content)
+     * @param taskId - The task ID (e.g., "abc123" or "cloud-task-abc123")
+     * @returns Task summary or null if not found
+     */
+    async fetchTaskById(taskId) {
+        if (!this.apiKey) {
+            throw new Error('Blackbox API key not configured. Please set BLACKBOX_API_KEY environment variable.');
+        }
+        // Normalize the tag to the format expected by the API
+        const normalizedTag = this.normalizeTag(taskId);
+        try {
+            const url = `${this.apiBaseUrl}/api/public/checkpoint?taskId=${encodeURIComponent(normalizedTag)}`;
+            const response = await fetch(url, {
+                method: 'GET',
+                headers: {
+                    'Authorization': `Bearer ${this.apiKey}`,
+                    'Content-Type': 'application/json',
+                },
+            });
+            if (!response.ok) {
+                if (response.status === 401) {
+                    throw new Error('Invalid Blackbox API key. Please check your BLACKBOX_API_KEY.');
+                }
+                else if (response.status === 404) {
+                    return null; // Task not found
+                }
+                else {
+                    const errorText = await response.text();
+                    throw new Error(`API request failed (${response.status}): ${errorText}`);
+                }
+            }
+            const data = await response.json();
+            if (!data.success || !data.task) {
+                return null;
+            }
+            return data.task;
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                // Re-throw known errors
+                if (error.message.includes('API key') || error.message.includes('API request failed')) {
+                    throw error;
+                }
+                // Wrap network errors
+                throw new Error(`Failed to fetch task from API: ${error.message}`);
+            }
+            throw error;
+        }
+    }
+    /**
+     * Test the API connection and authentication
+     * @returns true if connection is successful, false otherwise
+     */
+    async testConnection() {
+        if (!this.apiKey) {
+            return false;
+        }
+        try {
+            // Try to fetch a non-existent checkpoint to test auth
+            const url = `${this.apiBaseUrl}/api/public/checkpoint?taskId=cloud-task-test`;
+            const response = await fetch(url, {
+                method: 'GET',
+                headers: {
+                    'Authorization': `Bearer ${this.apiKey}`,
+                    'Content-Type': 'application/json',
+                },
+            });
+            // 401 means auth failed, 404 means auth worked but checkpoint not found
+            return response.status !== 401;
+        }
+        catch (_error) {
+            return false;
+        }
+    }
+}
+//# sourceMappingURL=checkpointApiService.js.map

package/dist/src/services/checkpointApiService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpointApiService.js","sourceRoot":"","sources":["../../../src/services/checkpointApiService.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAyDH,MAAM,OAAO,oBAAoB;IACd,UAAU,CAAS;IACnB,MAAM,CAAqB;IAE5C,YAAY,MAAe;QACzB,+CAA+C;QAC/C,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAExD,6DAA6D;QAC7D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,2BAA2B,CAAC;IACnF,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;;;OAQG;IACK,YAAY,CAAC,GAAW;QAC9B,6CAA6C;QAC7C,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,OAAO,GAAG,CAAC;QACb,CAAC;QAED,yEAAyE;QACzE,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB;YAC1D,OAAO,cAAc,MAAM,EAAE,CAAC;QAChC,CAAC;QAED,mEAAmE;QACnE,OAAO,cAAc,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,OAIf;QACC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,wBAAwB,CAAC;YAEvD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACxC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC;aACpC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;gBACnF,CAAC;qBAAM,CAAC;oBACN,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAqB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAErD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACjC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,wBAAwB;gBACxB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBACtF,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,sBAAsB;gBACtB,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,oBAAoB,CAAC,GAAW;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;QACJ,CAAC;QAED,sDAAsD;QACtD,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,iCAAiC,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;YAEnG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACxC,cAAc,EAAE,kBAAkB;iBACnC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;gBACnF,CAAC;qBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnC,OAAO,IAAI,CAAC,CAAC,uBAAuB;gBACtC,CAAC;qBAAM,CAAC;oBACN,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAA0B,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE1D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,UAAU,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,wBAAwB;gBACxB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBACtF,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,sBAAsB;gBACtB,MAAM,IAAI,KAAK,CAAC,wCAAwC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;QACJ,CAAC;QAED,sDAAsD;QACtD,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAEhD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,iCAAiC,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;YAEnG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACxC,cAAc,EAAE,kBAAkB;iBACnC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;gBACnF,CAAC;qBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnC,OAAO,IAAI,CAAC,CAAC,iBAAiB;gBAChC,CAAC;qBAAM,CAAC;oBACN,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAA0B,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE1D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,wBAAwB;gBACxB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBACtF,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,sBAAsB;gBACtB,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,sDAAsD;YACtD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,+CAA+C,CAAC;YAE9E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACxC,cAAc,EAAE,kBAAkB;iBACnC;aACF,CAAC,CAAC;YAEH,wEAAwE;YACxE,OAAO,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;QACjC,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF"}

package/dist/src/services/environmentSanitization.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export type EnvironmentSanitizationConfig = {
+    allowedEnvironmentVariables: string[];
+    blockedEnvironmentVariables: string[];
+    enableEnvironmentVariableRedaction: boolean;
+};
+/**
+ * Interpolates environment variable references in a string.
+ * Supports ${VAR_NAME} syntax.
+ *
+ * @param value The string that may contain ${VAR_NAME} references
+ * @param env The environment to use for interpolation
+ * @returns The string with variables interpolated
+ */
+export declare function interpolateEnvVars(value: string, env: NodeJS.ProcessEnv): string;
+export declare function sanitizeEnvironment(processEnv: NodeJS.ProcessEnv, config: EnvironmentSanitizationConfig): NodeJS.ProcessEnv;
+export declare const ALWAYS_ALLOWED_ENVIRONMENT_VARIABLES: ReadonlySet<string>;
+export declare const NEVER_ALLOWED_ENVIRONMENT_VARIABLES: ReadonlySet<string>;
+export declare const NEVER_ALLOWED_NAME_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const NEVER_ALLOWED_VALUE_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];

package/dist/src/services/environmentSanitization.js

@@ -0,0 +1,152 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Interpolates environment variable references in a string.
+ * Supports ${VAR_NAME} syntax.
+ *
+ * @param value The string that may contain ${VAR_NAME} references
+ * @param env The environment to use for interpolation
+ * @returns The string with variables interpolated
+ */
+export function interpolateEnvVars(value, env) {
+    return value.replace(/\$\{([^}]+)\}/g, (_, varName) => env[varName] ?? `\${${varName}}`);
+}
+export function sanitizeEnvironment(processEnv, config) {
+    if (!config.enableEnvironmentVariableRedaction) {
+        return { ...processEnv };
+    }
+    const results = {};
+    const allowedSet = new Set((config.allowedEnvironmentVariables || []).map((k) => k.toUpperCase()));
+    const blockedSet = new Set((config.blockedEnvironmentVariables || []).map((k) => k.toUpperCase()));
+    // Enable strict sanitization in GitHub actions.
+    const isStrictSanitization = !!processEnv['GITHUB_SHA'];
+    for (const key in processEnv) {
+        const value = processEnv[key];
+        if (!shouldRedactEnvironmentVariable(key, value, allowedSet, blockedSet, isStrictSanitization)) {
+            results[key] = value;
+        }
+    }
+    return results;
+}
+export const ALWAYS_ALLOWED_ENVIRONMENT_VARIABLES = new Set([
+    // Cross-platform
+    'PATH',
+    // Windows specific
+    'SYSTEMROOT',
+    'COMSPEC',
+    'PATHEXT',
+    'WINDIR',
+    'TEMP',
+    'TMP',
+    'USERPROFILE',
+    'SYSTEMDRIVE',
+    // Unix/Linux/macOS specific
+    'HOME',
+    'LANG',
+    'SHELL',
+    'TMPDIR',
+    'USER',
+    'LOGNAME',
+    // GitHub Action-related variables
+    'ADDITIONAL_CONTEXT',
+    'AVAILABLE_LABELS',
+    'BRANCH_NAME',
+    'DESCRIPTION',
+    'EVENT_NAME',
+    'GITHUB_ENV',
+    'IS_PULL_REQUEST',
+    'ISSUES_TO_TRIAGE',
+    'ISSUE_BODY',
+    'ISSUE_NUMBER',
+    'ISSUE_TITLE',
+    'PULL_REQUEST_NUMBER',
+    'REPOSITORY',
+    'TITLE',
+    'TRIGGERING_ACTOR',
+]);
+export const NEVER_ALLOWED_ENVIRONMENT_VARIABLES = new Set([
+    'CLIENT_ID',
+    'DB_URI',
+    'CONNECTION_STRING',
+    'AWS_DEFAULT_REGION',
+    'AZURE_CLIENT_ID',
+    'AZURE_TENANT_ID',
+    'SLACK_WEBHOOK_URL',
+    'TWILIO_ACCOUNT_SID',
+    'DATABASE_URL',
+    'GOOGLE_CLOUD_PROJECT',
+    'GOOGLE_CLOUD_ACCOUNT',
+    'FIREBASE_PROJECT_ID',
+]);
+export const NEVER_ALLOWED_NAME_PATTERNS = [
+    /TOKEN/i,
+    /SECRET/i,
+    /PASSWORD/i,
+    /PASSWD/i,
+    /KEY/i,
+    /AUTH/i,
+    /CREDENTIAL/i,
+    /CREDS/i,
+    /PRIVATE/i,
+    /CERT/i,
+];
+export const NEVER_ALLOWED_VALUE_PATTERNS = [
+    /-----BEGIN (RSA|OPENSSH|EC|PGP) PRIVATE KEY-----/i,
+    /-----BEGIN CERTIFICATE-----/i,
+    // Credentials in URL
+    /(https?|ftp|smtp):\/\/[^:]+:[^@]+@/i,
+    // GitHub tokens (classic, fine-grained, OAuth, etc.)
+    /(ghp|gho|ghu|ghs|ghr|github_pat)_[a-zA-Z0-9_]{36,}/i,
+    // Google API keys
+    /AIzaSy[a-zA-Z0-9_\\-]{33}/i,
+    // Amazon AWS Access Key ID
+    /AKIA[A-Z0-9]{16}/i,
+    // Generic OAuth/JWT tokens
+    /eyJ[a-zA-Z0-9_-]*\.[a-zA-Z0-9_-]*\.[a-zA-Z0-9_-]*/i,
+    // Stripe API keys
+    /(s|r)k_(live|test)_[0-9a-zA-Z]{24}/i,
+    // Slack tokens (bot, user, etc.)
+    /xox[abpr]-[a-zA-Z0-9-]+/i,
+];
+function shouldRedactEnvironmentVariable(key, value, allowedSet, blockedSet, isStrictSanitization = false) {
+    key = key.toUpperCase();
+    value = value?.toUpperCase();
+    // User overrides take precedence.
+    if (allowedSet?.has(key)) {
+        return false;
+    }
+    if (blockedSet?.has(key)) {
+        return true;
+    }
+    // These are never redacted.
+    if (ALWAYS_ALLOWED_ENVIRONMENT_VARIABLES.has(key) ||
+        key.startsWith('GEMINI_CLI_')) {
+        return false;
+    }
+    // These are always redacted.
+    if (NEVER_ALLOWED_ENVIRONMENT_VARIABLES.has(key)) {
+        return true;
+    }
+    // If in strict mode (e.g. GitHub Action), and not explicitly allowed, redact it.
+    if (isStrictSanitization) {
+        return true;
+    }
+    for (const pattern of NEVER_ALLOWED_NAME_PATTERNS) {
+        if (pattern.test(key)) {
+            return true;
+        }
+    }
+    // Redact if the value looks like a key/cert.
+    if (value) {
+        for (const pattern of NEVER_ALLOWED_VALUE_PATTERNS) {
+            if (pattern.test(value)) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=environmentSanitization.js.map

package/dist/src/services/environmentSanitization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environmentSanitization.js","sourceRoot":"","sources":["../../../src/services/environmentSanitization.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAa,EACb,GAAsB;IAEtB,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,UAA6B,EAC7B,MAAqC;IAErC,IAAI,CAAC,MAAM,CAAC,kCAAkC,EAAE,CAAC;QAC/C,OAAO,EAAE,GAAG,UAAU,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,CAAC,MAAM,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CACvE,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,CAAC,MAAM,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CACvE,CAAC;IAEF,gDAAgD;IAChD,MAAM,oBAAoB,GAAG,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAExD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAE9B,IACE,CAAC,+BAA+B,CAC9B,GAAG,EACH,KAAK,EACL,UAAU,EACV,UAAU,EACV,oBAAoB,CACrB,EACD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,oCAAoC,GAC/C,IAAI,GAAG,CAAC;IACN,iBAAiB;IACjB,MAAM;IACN,mBAAmB;IACnB,YAAY;IACZ,SAAS;IACT,SAAS;IACT,QAAQ;IACR,MAAM;IACN,KAAK;IACL,aAAa;IACb,aAAa;IACb,4BAA4B;IAC5B,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,SAAS;IACT,kCAAkC;IAClC,oBAAoB;IACpB,kBAAkB;IAClB,aAAa;IACb,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,iBAAiB;IACjB,kBAAkB;IAClB,YAAY;IACZ,cAAc;IACd,aAAa;IACb,qBAAqB;IACrB,YAAY;IACZ,OAAO;IACP,kBAAkB;CACnB,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,mCAAmC,GAAwB,IAAI,GAAG,CAC7E;IACE,WAAW;IACX,QAAQ;IACR,mBAAmB;IACnB,oBAAoB;IACpB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,cAAc;IACd,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;CACtB,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ;IACR,SAAS;IACT,WAAW;IACX,SAAS;IACT,MAAM;IACN,OAAO;IACP,aAAa;IACb,QAAQ;IACR,UAAU;IACV,OAAO;CACC,CAAC;AAEX,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,mDAAmD;IACnD,8BAA8B;IAC9B,qBAAqB;IACrB,qCAAqC;IACrC,qDAAqD;IACrD,qDAAqD;IACrD,kBAAkB;IAClB,4BAA4B;IAC5B,2BAA2B;IAC3B,mBAAmB;IACnB,2BAA2B;IAC3B,oDAAoD;IACpD,kBAAkB;IAClB,qCAAqC;IACrC,iCAAiC;IACjC,0BAA0B;CAClB,CAAC;AAEX,SAAS,+BAA+B,CACtC,GAAW,EACX,KAAyB,EACzB,UAAwB,EACxB,UAAwB,EACxB,oBAAoB,GAAG,KAAK;IAE5B,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACxB,KAAK,GAAG,KAAK,EAAE,WAAW,EAAE,CAAC;IAE7B,kCAAkC;IAClC,IAAI,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4BAA4B;IAC5B,IACE,oCAAoC,CAAC,GAAG,CAAC,GAAG,CAAC;QAC7C,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,EAC7B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6BAA6B;IAC7B,IAAI,mCAAmC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iFAAiF;IACjF,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,OAAO,IAAI,4BAA4B,EAAE,CAAC;YACnD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/src/telemetry/blackbox-logger/blackbox-logger.d.ts

@@ -3,7 +3,6 @@
  * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-import { HttpsProxyAgent } from 'https-proxy-agent';
 import type { StartSessionEvent, UserPromptEvent, ToolCallEvent, ApiRequestEvent, ApiResponseEvent, ApiErrorEvent, FileOperationEvent, FlashFallbackEvent, LoopDetectedEvent, NextSpeakerCheckEvent, SlashCommandEvent, MalformedJsonResponseEvent, IdeConnectionEvent, KittySequenceOverflowEvent, ChatCompressionEvent, InvalidChunkEvent, ContentRetryEvent, ContentRetryFailureEvent, ConversationFinishedEvent, SubagentExecutionEvent } from '../types.js';
 import { EndSessionEvent } from '../types.js';
 import type { RumEvent, RumViewEvent, RumActionEvent, RumResourceEvent, RumExceptionEvent, RumPayload } from './event-types.js';
@@ -16,12 +15,11 @@ export declare class BlackboxLogger {
     private config?;
     private readonly installationManager;
     /**
-     * Queue of pending events that need to be flushed to the server. New events
-     * are added to this queue and then flushed on demand (via `flushToRum`)
+     * Queue of pending events that are stored in memory.
      */
     private readonly events;
     /**
-     * The last time that the events were successfully flushed to the server.
+     * The last time that the events were cleared from memory.
      */
     private lastFlushTime;
     private userId;
@@ -69,9 +67,7 @@ export declare class BlackboxLogger {
     logContentRetryFailureEvent(event: ContentRetryFailureEvent): void;
     logSubagentExecutionEvent(event: SubagentExecutionEvent): void;
     logEndSessionEvent(_event: EndSessionEvent): void;
-    getProxyAgent(): HttpsProxyAgent<string> | undefined;
     shutdown(): void;
-    private requeueFailedEvents;
 }
 export declare const TEST_ONLY: {
     MAX_RETRY_EVENTS: number;