@blackbox_ai/blackbox-cli 0.0.7 → 0.8.1

package/dist/src/encrypt/sessions.js

@@ -0,0 +1,221 @@
+import { toB64, fromB64 } from './crypto-utils.js';
+import { performSecureAttestation } from './attestation.js';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as os from 'node:os';
+/**
+ * Session storage directory for CLI (replaces browser sessionStorage)
+ */
+const getSessionStorageDir = () => {
+    const homeDir = os.homedir();
+    const sessionDir = path.join(homeDir, '.blackboxcli', 'sessions');
+    if (!fs.existsSync(sessionDir)) {
+        fs.mkdirSync(sessionDir, { recursive: true });
+    }
+    return sessionDir;
+};
+/**
+ * Session file prefix for secure sessions
+ */
+const SESSION_FILE_PREFIX = 'blackbox_secure_session_';
+/**
+ * Deserializes session data from storage
+ */
+const deserializeSession = (data) => {
+    try {
+        return JSON.parse(data);
+    }
+    catch {
+        return {};
+    }
+};
+/**
+ * Gets the session file path for a chatId
+ */
+const getSessionFilePath = (chatId) => path.join(getSessionStorageDir(), `${SESSION_FILE_PREFIX}${chatId}.json`);
+/**
+ * Hydrates a session from sessionStorage by reconstructing crypto keys
+ * so that attestation is NOT required again for the same chatId.
+ */
+export const getHydratedSessionByChatId = async (chatId) => {
+    try {
+        const filePath = getSessionFilePath(chatId);
+        if (!fs.existsSync(filePath))
+            return undefined;
+        const stored = fs.readFileSync(filePath, 'utf8');
+        const data = JSON.parse(stored);
+        if (!data['sessionId'] || !data['initialized'])
+            return undefined;
+        if (!data['serverPublicKeys_b64'] || !data['sharedKeys_b64']) {
+            console.warn('⚠️ Session is not attestation format or missing required data');
+            return undefined;
+        }
+        if (!data['ecdsaPrivatePkcs8_b64'] || !data['ecdsaPublicSpki_b64']) {
+            console.warn('⚠️ Attestation session missing crypto key data');
+            return undefined;
+        }
+        const pkcs8Array = fromB64(data['ecdsaPrivatePkcs8_b64']);
+        const spkiArray = fromB64(data['ecdsaPublicSpki_b64']);
+        // Reconstruct local keys
+        const ecdsaPrivate = await crypto.subtle.importKey('pkcs8', pkcs8Array.slice().buffer, { name: 'ECDSA', namedCurve: 'P-384' }, true, ['sign']);
+        const ecdsaPublic = await crypto.subtle.importKey('spki', spkiArray.slice().buffer, { name: 'ECDSA', namedCurve: 'P-384' }, true, ['verify']);
+        const ecdhPrivate = await crypto.subtle.importKey('pkcs8', pkcs8Array.slice().buffer, { name: 'ECDH', namedCurve: 'P-384' }, false, ['deriveBits']);
+        // Reconstruct server public keys
+        const serverPublicKeys = data['serverPublicKeys_b64'].map((keyData) => ({
+            id: keyData.id,
+            publicKeySpki: fromB64(keyData.publicKeySpki_b64),
+            publicKeyPem: keyData.publicKeyPem
+        }));
+        // Reconstruct shared keys
+        const sharedKeys = data['sharedKeys_b64'].map((keyData) => ({
+            id: keyData.id,
+            sharedKey: fromB64(keyData.sharedKey_b64)
+        }));
+        // Create ProcessedAttestationData for attestation sessions
+        const attestationData = {
+            sessionId: data['sessionId'],
+            nonce: data['nonce'],
+            history: data['history'] || [],
+            serverPublicKeys,
+            localKeys: { ecdhPrivate, ecdsaPrivate, ecdsaPublic },
+            sharedKeys
+        };
+        const session = {
+            sessionId: data['sessionId'],
+            initialized: true,
+            nonce: data['nonce'],
+            history: data['history'] || [],
+            serverPublicKeySpki: undefined, // API will select the key
+            localKeys: { ecdhPrivate, ecdsaPrivate, ecdsaPublic },
+            sharedKey: undefined, // API will select the key
+            createdAt: data['createdAt'] || Date.now(),
+        };
+        // Store the full attestation data for use by StreamingClient
+        session.attestationData = attestationData;
+        return session;
+    }
+    catch (error) {
+        console.warn('⚠️ Failed to hydrate session from storage:', error);
+        console.warn('Error details:', error);
+        return undefined;
+    }
+};
+/**
+ * Initializes a secure session for encrypted communication.
+ * Sessions are stored in sessionStorage and keyed by chatId to ensure one session per chat per tab.
+ * Attestation happens only once per chatId - subsequent calls reuse existing crypto keys.
+ */
+export const initializeSecureSession = async (chatId, systemPrompt) => {
+    // First try to hydrate from sessionStorage (includes crypto keys)
+    const hydratedSession = await getHydratedSessionByChatId(chatId);
+    if (hydratedSession && hydratedSession.initialized) {
+        return hydratedSession;
+    }
+    // Perform attestation
+    const attestationData = await performSecureAttestation(systemPrompt);
+    // Create session object
+    const session = {
+        sessionId: attestationData.sessionId,
+        initialized: true,
+        nonce: attestationData.nonce,
+        history: attestationData.history,
+        localKeys: attestationData.localKeys,
+        createdAt: Date.now(),
+    };
+    // Store the full attestation data for use by StreamingClient
+    session.attestationData = attestationData;
+    // Store attestation data in sessionStorage for potential reuse
+    try {
+        // Store complex attestation data
+        const serverPublicKeysB64 = attestationData.serverPublicKeys.map(key => ({
+            id: key.id,
+            publicKeySpki_b64: toB64(key.publicKeySpki),
+            publicKeyPem: key.publicKeyPem
+        }));
+        const sharedKeysB64 = attestationData.sharedKeys.map(key => ({
+            id: key.id,
+            sharedKey_b64: toB64(key.sharedKey)
+        }));
+        const ecdsaPrivPkcs8 = await crypto.subtle.exportKey('pkcs8', attestationData.localKeys.ecdsaPrivate);
+        const ecdsaPrivB64 = toB64(new Uint8Array(ecdsaPrivPkcs8));
+        const ecdsaPubSpki = await crypto.subtle.exportKey('spki', attestationData.localKeys.ecdsaPublic);
+        const ecdsaPubB64 = toB64(new Uint8Array(ecdsaPubSpki));
+        const storedObj = {
+            sessionId: attestationData.sessionId,
+            initialized: true,
+            nonce: attestationData.nonce,
+            history: attestationData.history,
+            createdAt: Date.now(),
+            serverPublicKeys_b64: serverPublicKeysB64,
+            sharedKeys_b64: sharedKeysB64,
+            ecdsaPrivatePkcs8_b64: ecdsaPrivB64,
+            ecdsaPublicSpki_b64: ecdsaPubB64
+        };
+        fs.writeFileSync(getSessionFilePath(chatId), JSON.stringify(storedObj));
+    }
+    catch (error) {
+        console.warn('⚠️ Failed to store session in sessionStorage:', error);
+    }
+    // Cleanup old sessions
+    cleanupOldSessions();
+    return session;
+};
+/**
+ * Internal cleanup for sessions older than one hour
+ */
+const cleanupOldSessions = () => {
+    try {
+        const oneHourAgo = Date.now() - 60 * 60 * 1000;
+        const sessionDir = getSessionStorageDir();
+        const files = fs.readdirSync(sessionDir);
+        for (const file of files) {
+            if (file.startsWith(SESSION_FILE_PREFIX) && file.endsWith('.json')) {
+                const filePath = path.join(sessionDir, file);
+                try {
+                    const stored = fs.readFileSync(filePath, 'utf8');
+                    const session = deserializeSession(stored);
+                    if (session.createdAt && session.createdAt < oneHourAgo) {
+                        fs.unlinkSync(filePath);
+                    }
+                }
+                catch (_fileError) {
+                    // If we can't read the file, delete it
+                    fs.unlinkSync(filePath);
+                }
+            }
+        }
+    }
+    catch (error) {
+        console.warn('⚠️ Failed to cleanup old sessions:', error);
+    }
+};
+/**
+ * Initializes session cleanup on page load and sets up cleanup on page unload
+ * Call this once when the app starts to ensure proper session lifecycle management
+ */
+export const initializeSessionCleanup = () => {
+    // Cleanup old sessions on page load
+    cleanupOldSessions();
+    // Setup cleanup on page unload (when user closes tab or navigates away)
+    const handleBeforeUnload = () => {
+        try {
+            // Optional: You could implement more aggressive cleanup here
+            // For now, we rely on the time-based cleanup
+            console.log('🔄 Page unloading, sessions will be cleaned up on next load');
+        }
+        catch (error) {
+            console.warn('⚠️ Error during page unload cleanup:', error);
+        }
+    };
+    // Add event listener for page unload
+    if (typeof window !== 'undefined') {
+        window.addEventListener('beforeunload', handleBeforeUnload);
+        // Also cleanup when the page becomes hidden (mobile browsers)
+        document.addEventListener('visibilitychange', () => {
+            if (document.hidden) {
+                cleanupOldSessions();
+            }
+        });
+    }
+};
+//# sourceMappingURL=sessions.js.map

package/dist/src/encrypt/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/encrypt/sessions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B;;GAEG;AACH,MAAM,oBAAoB,GAAG,GAAW,EAAE;IACxC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;IAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAEvD;;GAEG;AACH,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAA0B,EAAE;IAClE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,kBAAkB,GAAG,CAAC,MAAc,EAAU,EAAE,CACpD,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,GAAG,mBAAmB,GAAG,MAAM,OAAO,CAAC,CAAC;AAE5E;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,EAC7C,MAAc,EACsB,EAAE;IACtC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QAE/C,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,IAAI,GAA4B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,OAAO,SAAS,CAAC;QAEjE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;YAC9E,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YAC/D,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAW,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAW,CAAC,CAAC;QAEjE,yBAAyB;QACzB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAChD,OAAO,EACP,UAAU,CAAC,KAAK,EAAE,CAAC,MAAqB,EACxC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,MAAM,CAAC,CACT,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC/C,MAAM,EACN,SAAS,CAAC,KAAK,EAAE,CAAC,MAAqB,EACvC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,QAAQ,CAAC,CACX,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC/C,OAAO,EACP,UAAU,CAAC,KAAK,EAAE,CAAC,MAAqB,EACxC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EACrC,KAAK,EACL,CAAC,YAAY,CAAC,CACf,CAAC;QAEF,iCAAiC;QACjC,MAAM,gBAAgB,GAAI,IAAI,CAAC,sBAAsB,CAIlD,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACpB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC;YACjD,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC,CAAC;QAEJ,0BAA0B;QAC1B,MAAM,UAAU,GAAI,IAAI,CAAC,gBAAgB,CAGtC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACpB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;SAC1C,CAAC,CAAC,CAAC;QAEJ,2DAA2D;QAC3D,MAAM,eAAe,GAA6B;YAChD,SAAS,EAAE,IAAI,CAAC,WAAW,CAAW;YACtC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAW;YAC9B,OAAO,EAAG,IAAI,CAAC,SAAS,CAAuE,IAAI,EAAE;YACrG,gBAAgB;YAChB,SAAS,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE;YACrD,UAAU;SACX,CAAC;QAEF,MAAM,OAAO,GAAkB;YAC7B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAW;YACtC,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAW;YAC9B,OAAO,EAAG,IAAI,CAAC,SAAS,CAAuE,IAAI,EAAE;YACrG,mBAAmB,EAAE,SAAS,EAAE,0BAA0B;YAC1D,SAAS,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE;YACrD,SAAS,EAAE,SAAS,EAAE,0BAA0B;YAChD,SAAS,EAAG,IAAI,CAAC,WAAW,CAAY,IAAI,IAAI,CAAC,GAAG,EAAE;SACvD,CAAC;QAEF,6DAA6D;QAC5D,OAAyE,CAAC,eAAe,GAAG,eAAe,CAAC;QAC7G,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAC1C,MAAc,EACd,YAAqB,EACG,EAAE;IAC1B,kEAAkE;IAClE,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,eAAe,IAAI,eAAe,CAAC,WAAW,EAAE,CAAC;QACnD,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,sBAAsB;IACtB,MAAM,eAAe,GAAG,MAAM,wBAAwB,CAAC,YAAY,CAAC,CAAC;IAEnE,wBAAwB;IAC1B,MAAM,OAAO,GAAkB;QAC7B,SAAS,EAAE,eAAe,CAAC,SAAS;QACpC,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,eAAe,CAAC,KAAK;QAC5B,OAAO,EAAE,eAAe,CAAC,OAAO;QAChC,SAAS,EAAE,eAAe,CAAC,SAAS;QACpC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IAEF,6DAA6D;IAC5D,OAAyE,CAAC,eAAe,GAAG,eAAe,CAAC;IAC7G,+DAA+D;IAC/D,IAAI,CAAC;QACH,iCAAiC;QACjC,MAAM,mBAAmB,GAAG,eAAe,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvE,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,iBAAiB,EAAE,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC;YAC3C,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC,CAAC;QAEJ,MAAM,aAAa,GAAG,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3D,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;SACpC,CAAC,CAAC,CAAC;QAEJ,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACtG,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;QAE3D,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAClG,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;QAExD,MAAM,SAAS,GAAG;YAChB,SAAS,EAAE,eAAe,CAAC,SAAS;YACpC,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,eAAe,CAAC,KAAK;YAC5B,OAAO,EAAE,eAAe,CAAC,OAAO;YAChC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,oBAAoB,EAAE,mBAAmB;YACzC,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,YAAY;YACnC,mBAAmB,EAAE,WAAW;SACjC,CAAC;QAEF,EAAE,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,uBAAuB;IACvB,kBAAkB,EAAE,CAAC;IAErB,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAGF;;GAEG;AACH,MAAM,kBAAkB,GAAG,GAAS,EAAE;IACpC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC/C,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAC7C,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBACjD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;oBAC3C,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;wBACxD,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBAC1B,CAAC;gBACH,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,uCAAuC;oBACvC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAS,EAAE;IACjD,oCAAoC;IACpC,kBAAkB,EAAE,CAAC;IAErB,wEAAwE;IACxE,MAAM,kBAAkB,GAAG,GAAG,EAAE;QAC9B,IAAI,CAAC;YACH,6DAA6D;YAC7D,6CAA6C;YAC7C,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC;IAEF,qCAAqC;IACrC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAE5D,8DAA8D;QAC9D,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,EAAE;YACjD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,kBAAkB,EAAE,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC"}

package/dist/src/encrypt/streaming-client.d.ts

@@ -0,0 +1,29 @@
+import { type FileData, type ProcessedAttestationData } from './types.js';
+interface ChatMessage {
+    role: 'system' | 'user' | 'assistant';
+    content: string;
+    image_url?: string;
+}
+/**
+ * StreamingClient handles the complete encrypted streaming protocol
+ */
+export declare class StreamingClient {
+    private baseUrl;
+    private initialized;
+    private nonce;
+    private history;
+    private attestationData?;
+    constructor(baseUrl: string, _attestationUrl: string, systemPrompt?: string);
+    /**
+     * Initialize from existing session data (avoids re-attestation)
+     * Now uses the session management layer
+     */
+    initializeFromSession(sessionData: {
+        sessionId: string;
+        nonce: number;
+        history: ChatMessage[];
+        attestationData: ProcessedAttestationData;
+    }): void;
+    sendMessageStream(userText: string, fileData?: FileData): Promise<ReadableStream<Uint8Array>>;
+}
+export {};

package/dist/src/encrypt/streaming-client.js

@@ -0,0 +1,226 @@
+import { serializePublicKeyPem, encryptAndSign, decryptAndVerify } from './crypto-utils.js';
+import {} from './types.js';
+import { ENCRYPTION_CONFIG } from './config.js';
+import { retryWithBackoff, isRetryableStatusCode } from './retry-utils.js';
+/**
+ * StreamingClient handles the complete encrypted streaming protocol
+ */
+export class StreamingClient {
+    baseUrl;
+    initialized = false;
+    nonce = 1000;
+    history = [];
+    attestationData;
+    constructor(baseUrl, _attestationUrl, systemPrompt) {
+        this.baseUrl = baseUrl;
+        if (systemPrompt) {
+            this.history.push({ role: 'system', content: systemPrompt });
+        }
+    }
+    /**
+     * Initialize from existing session data (avoids re-attestation)
+     * Now uses the session management layer
+     */
+    initializeFromSession(sessionData) {
+        // sessionId is stored in attestationData, no need to store separately
+        this.nonce = sessionData.nonce;
+        this.history = sessionData.history || [];
+        this.attestationData = sessionData.attestationData;
+        this.initialized = true;
+    }
+    async sendMessageStream(userText, fileData) {
+        if (!this.initialized || !this.attestationData) {
+            throw new Error('StreamingClient not initialized with attestation data. Call initializeFromSession() first.');
+        }
+        // Validate user text is not empty
+        if (!userText || userText.trim().length === 0) {
+            throw new Error('User message cannot be empty');
+        }
+        // Process file data and build context
+        let processedMessage = userText;
+        const contextParts = [];
+        // Process file data if provided
+        if (fileData) {
+            // Handle PDF/text content
+            if (fileData.fileText) {
+                contextParts.push(fileData.fileText);
+            }
+            // Build message with context
+            if (contextParts.length > 0) {
+                const contextText = contextParts.join('\n\n');
+                processedMessage = `Context:\n\n${contextText}\n\nQuery: ${userText}`;
+            }
+        }
+        // Create message object
+        const messageObj = {
+            role: 'user',
+            content: processedMessage
+        };
+        // Process image if provided
+        if (fileData?.imagesData && fileData.imagesData.length > 0) {
+            // Use the first image for now (following the sample pattern)
+            const firstImage = fileData.imagesData[0];
+            if (firstImage?.contents) {
+                // Extract base64 data (remove data:image/...;base64, prefix if present)
+                const base64Data = firstImage.contents.includes(',')
+                    ? firstImage.contents.split(',')[1]
+                    : firstImage.contents;
+                messageObj.image_url = base64Data;
+            }
+        }
+        // Ensure we have a valid history array - add the current message to history for encryption
+        const currentHistory = [...this.history, messageObj];
+        // Validate history is not empty
+        if (currentHistory.length === 0) {
+            throw new Error('Message history cannot be empty');
+        }
+        const historyJson = JSON.stringify(currentHistory);
+        const localKeys = this.attestationData.localKeys;
+        // Encrypt with all shared keys for attestation
+        const encryptedPayloads = {};
+        for (const sharedKeyData of this.attestationData.sharedKeys) {
+            // Use the imported encryptAndSign function for each shared key
+            const payload = await encryptAndSign(historyJson, sharedKeyData.sharedKey, localKeys.ecdsaPrivate, this.nonce);
+            const peerPubPem = await serializePublicKeyPem(localKeys.ecdsaPublic);
+            encryptedPayloads[sharedKeyData.id] = {
+                peer_public_key: peerPubPem,
+                payload
+            };
+        }
+        // Build request with all encrypted payloads
+        const request = {
+            payloads: encryptedPayloads
+        };
+        // Send to /message_stream endpoint with retry logic
+        const url = `${this.baseUrl.replace(/\/$/, '')}/message_stream`;
+        const response = await retryWithBackoff(async () => {
+            const res = await fetch(url, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify(request),
+                signal: AbortSignal.timeout(ENCRYPTION_CONFIG.streamingTimeout)
+            });
+            if (!res.ok) {
+                // Provide helpful error messages for common failure cases
+                if (res.status === 401 || res.status === 403) {
+                    throw new Error(`Authentication failed (${res.status}). ` +
+                        `Please ensure BLACKBOX_API_KEY is set correctly. ` +
+                        `Run 'blackbox configure' to set up your API key.`);
+                }
+                throw new Error(`Streaming request failed: ${res.status}`);
+            }
+            return res;
+        }, {
+            maxRetries: ENCRYPTION_CONFIG.retryCount,
+            onRetry: (attempt, error, delay) => {
+                console.error(`⚠️  Streaming request failed (attempt ${attempt}/${ENCRYPTION_CONFIG.retryCount}). ` +
+                    `Retrying in ${delay}ms... Error: ${error instanceof Error ? error.message : String(error)}`);
+            },
+            shouldRetry: (error) => {
+                // Retry on network errors and 5xx server errors
+                if (error instanceof Error) {
+                    const message = error.message;
+                    // Check if it's a retryable status code (500, 502, 503, 504)
+                    const statusMatch = message.match(/Streaming request failed: (\d+)/);
+                    if (statusMatch) {
+                        const statusCode = parseInt(statusMatch[1], 10);
+                        return isRetryableStatusCode(statusCode);
+                    }
+                    // Also retry on network/timeout errors
+                    return (message.includes('network') ||
+                        message.includes('timeout') ||
+                        message.includes('ECONNRESET') ||
+                        message.includes('ECONNREFUSED') ||
+                        message.includes('ETIMEDOUT'));
+                }
+                return false;
+            },
+        });
+        // Process streaming response using ReadableStream (NDJSON format)
+        let buffer = '';
+        let fullResponse = '';
+        const attestationData = this.attestationData;
+        // FIX: Use arrow functions to preserve 'this' context
+        const transformStream = new TransformStream({
+            transform: async (chunk, controller) => {
+                try {
+                    buffer += new TextDecoder().decode(chunk);
+                    // Process complete lines
+                    const lines = buffer.split('\n');
+                    buffer = lines.pop() || ''; // Keep incomplete line in buffer
+                    for (const line of lines) {
+                        const trimmed = line.trim();
+                        if (!trimmed)
+                            continue;
+                        try {
+                            const jsonData = JSON.parse(trimmed);
+                            // Check for end-of-stream marker
+                            if (jsonData.eos === true) {
+                                // Add the complete response to history when stream ends
+                                if (fullResponse.trim().length > 0) {
+                                    // 'this' correctly refers to the class instance here
+                                    this.history.push({ role: 'assistant', content: fullResponse });
+                                    this.nonce = this.nonce + 1;
+                                }
+                                controller.terminate();
+                                return;
+                            }
+                            // The server should indicate which key was used for encryption
+                            // Try to decrypt with the appropriate key based on server response
+                            let decryptedChunk = null;
+                            // If server indicates which key was used
+                            if (jsonData.key_id) {
+                                const keyData = attestationData.sharedKeys.find((k) => k.id === jsonData.key_id);
+                                const serverKey = attestationData.serverPublicKeys.find((k) => k.id === jsonData.key_id);
+                                if (keyData && serverKey) {
+                                    try {
+                                        decryptedChunk = await decryptAndVerify(jsonData, keyData.sharedKey, serverKey.publicKeySpki);
+                                    }
+                                    catch (_error) {
+                                        // Failed to decrypt with specified key, will try all keys
+                                    }
+                                }
+                            }
+                            // If no key_id specified or decryption failed, try all keys
+                            if (!decryptedChunk) {
+                                for (let i = 0; i < attestationData.sharedKeys.length; i++) {
+                                    const keyData = attestationData.sharedKeys[i];
+                                    const serverKey = attestationData.serverPublicKeys[i];
+                                    try {
+                                        decryptedChunk = await decryptAndVerify(jsonData, keyData.sharedKey, serverKey.publicKeySpki);
+                                        break;
+                                    }
+                                    catch (_error) {
+                                        // Try next key
+                                        continue;
+                                    }
+                                }
+                            }
+                            if (!decryptedChunk) {
+                                throw new Error('Failed to decrypt chunk with any available key');
+                            }
+                            fullResponse += decryptedChunk;
+                            // Enqueue the decrypted chunk
+                            controller.enqueue(new TextEncoder().encode(decryptedChunk));
+                        }
+                        catch (_e) {
+                            // Error processing chunk, skip this line
+                        }
+                    }
+                }
+                catch (error) {
+                    controller.error(error);
+                }
+            },
+            flush: () => {
+                // Handle case where stream ends without explicit EOS marker
+                if (fullResponse.trim().length > 0) {
+                    this.history.push({ role: 'assistant', content: fullResponse });
+                    this.nonce = this.nonce + 1;
+                }
+            }
+        });
+        return response.body.pipeThrough(transformStream);
+    }
+}
+//# sourceMappingURL=streaming-client.js.map

package/dist/src/encrypt/streaming-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming-client.js","sourceRoot":"","sources":["../../../src/encrypt/streaming-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAEjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAgD,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAkB3E;;GAEG;AACH,MAAM,OAAO,eAAe;IAClB,OAAO,CAAS;IAChB,WAAW,GAAY,KAAK,CAAC;IAC7B,KAAK,GAAW,IAAI,CAAC;IACrB,OAAO,GAAkB,EAAE,CAAC;IAC5B,eAAe,CAA4B;IAEnD,YAAY,OAAe,EAAE,eAAuB,EAAE,YAAqB;QACzE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,qBAAqB,CAAC,WAKrB;QACC,sEAAsE;QACtE,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC;QACnD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAAgB,EAAE,QAAmB;QAC3D,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;QAChH,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,sCAAsC;QACtC,IAAI,gBAAgB,GAAG,QAAQ,CAAC;QAChC,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,gCAAgC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,0BAA0B;YAC1B,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvC,CAAC;YAED,6BAA6B;YAC7B,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC9C,gBAAgB,GAAG,eAAe,WAAW,cAAc,QAAQ,EAAE,CAAC;YACxE,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,UAAU,GAAgB;YAC9B,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,gBAAgB;SAC1B,CAAC;QAEF,4BAA4B;QAC5B,IAAI,QAAQ,EAAE,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,6DAA6D;YAC7D,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,UAAU,EAAE,QAAQ,EAAE,CAAC;gBACzB,wEAAwE;gBACxE,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAClD,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACnC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACxB,UAAU,CAAC,SAAS,GAAG,UAAU,CAAC;YACpC,CAAC;QACH,CAAC;QAED,2FAA2F;QAC3F,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAErD,gCAAgC;QAChC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC;QAEjD,+CAA+C;QAC/C,MAAM,iBAAiB,GAA4E,EAAE,CAAC;QACtG,KAAK,MAAM,aAAa,IAAI,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC;YAC5D,+DAA+D;YAC/D,MAAM,OAAO,GAAG,MAAM,cAAc,CAClC,WAAW,EAAE,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CACzE,CAAC;YAEF,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACtE,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG;gBACpC,eAAe,EAAE,UAAU;gBAC3B,OAAO;aACR,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,MAAM,OAAO,GAAqB;YAChC,QAAQ,EAAE,iBAAiB;SAC5B,CAAC;QAGF,oDAAoD;QACpD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC;QAEhE,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,KAAK,IAAI,EAAE;YACT,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;aAChE,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,0DAA0D;gBAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC7C,MAAM,IAAI,KAAK,CACb,0BAA0B,GAAG,CAAC,MAAM,KAAK;wBACzC,mDAAmD;wBACnD,kDAAkD,CACnD,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7D,CAAC;YAED,OAAO,GAAG,CAAC;QACb,CAAC,EACD;YACE,UAAU,EAAE,iBAAiB,CAAC,UAAU;YACxC,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACjC,OAAO,CAAC,KAAK,CACX,yCAAyC,OAAO,IAAI,iBAAiB,CAAC,UAAU,KAAK;oBACrF,eAAe,KAAK,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;YACJ,CAAC;YACD,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrB,gDAAgD;gBAChD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;oBAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;oBAC9B,6DAA6D;oBAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;oBACrE,IAAI,WAAW,EAAE,CAAC;wBAChB,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAChD,OAAO,qBAAqB,CAAC,UAAU,CAAC,CAAC;oBAC3C,CAAC;oBACD,uCAAuC;oBACvC,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;wBAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;wBAC3B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;wBAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;wBAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC9B,CAAC;gBACJ,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;SACF,CACF,CAAC;QAGF,kEAAkE;QAClE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,YAAY,GAAG,EAAE,CAAC;QAEtB,MAAM,eAAe,GAAG,IAAI,CAAC,eAAgB,CAAC;QAE9C,sDAAsD;QACtD,MAAM,eAAe,GAAG,IAAI,eAAe,CAAyB;YAClE,SAAS,EAAE,KAAK,EAAE,KAAiB,EAAE,UAAwD,EAAE,EAAE;gBAC/F,IAAI,CAAC;oBACH,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAE1C,yBAAyB;oBACzB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,iCAAiC;oBAE7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;wBAC5B,IAAI,CAAC,OAAO;4BAAE,SAAS;wBAEvB,IAAI,CAAC;4BACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;4BAErC,iCAAiC;4BACjC,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;gCAC1B,wDAAwD;gCACxD,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oCACnC,qDAAqD;oCACrD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;oCAChE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;gCAC9B,CAAC;gCACD,UAAU,CAAC,SAAS,EAAE,CAAC;gCACvB,OAAO;4BACT,CAAC;4BAED,+DAA+D;4BAC/D,mEAAmE;4BACnE,IAAI,cAAc,GAAkB,IAAI,CAAC;4BAEzC,yCAAyC;4BACzC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gCACpB,MAAM,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAwC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC;gCACxH,MAAM,SAAS,GAAG,eAAe,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAA4C,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC;gCAEpI,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;oCACzB,IAAI,CAAC;wCACH,cAAc,GAAG,MAAM,gBAAgB,CACrC,QAA4B,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,aAAa,CACzE,CAAC;oCACJ,CAAC;oCAAC,OAAO,MAAM,EAAE,CAAC;wCAChB,0DAA0D;oCAC5D,CAAC;gCACH,CAAC;4BACH,CAAC;4BAED,4DAA4D;4BAC5D,IAAI,CAAC,cAAc,EAAE,CAAC;gCACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oCAC3D,MAAM,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oCAC9C,MAAM,SAAS,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;oCAEtD,IAAI,CAAC;wCACH,cAAc,GAAG,MAAM,gBAAgB,CACrC,QAA4B,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,aAAa,CACzE,CAAC;wCACF,MAAM;oCACR,CAAC;oCAAC,OAAO,MAAM,EAAE,CAAC;wCAChB,eAAe;wCACf,SAAS;oCACX,CAAC;gCACH,CAAC;4BACH,CAAC;4BAED,IAAI,CAAC,cAAc,EAAE,CAAC;gCACpB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;4BACpE,CAAC;4BAED,YAAY,IAAI,cAAc,CAAC;4BAE/B,8BAA8B;4BAC9B,UAAU,CAAC,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;wBAE/D,CAAC;wBAAC,OAAO,EAAW,EAAE,CAAC;4BACrB,yCAAyC;wBAC3C,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;YAED,KAAK,EAAE,GAAG,EAAE;gBACV,4DAA4D;gBAC5D,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;oBAChE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,IAAK,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;IACrD,CAAC;CACF"}

package/dist/src/encrypt/types.d.ts

@@ -0,0 +1,81 @@
+import type { CryptoKeyPair } from './crypto-utils.js';
+export interface EncryptedMessage {
+    id: string;
+    content: string;
+    role: 'user' | 'assistant' | 'system';
+    encrypted?: boolean;
+    encryptionKey?: string;
+    image_url?: string;
+}
+export interface FileData {
+    imagesData?: Array<{
+        filePath: string;
+        contents: string;
+    }>;
+    fileText?: string;
+    title?: string;
+}
+export interface SecureSession {
+    sessionId: string;
+    initialized: boolean;
+    nonce: number;
+    history: Array<{
+        role: 'user' | 'assistant' | 'system';
+        content: string;
+    }>;
+    serverPublicKeySpki?: Uint8Array;
+    localKeys?: CryptoKeyPair;
+    sharedKey?: Uint8Array;
+    createdAt: number;
+}
+/**
+ * Single attestation result interface
+ */
+export interface AttestationResult {
+    id: string;
+    status: number;
+    body: AttestationResponse;
+}
+/**
+ * Attestation response interface for list-based results
+ */
+export interface AttestationListResponse {
+    broadcast: boolean;
+    successful_servers: number;
+    total_servers: number;
+    results: AttestationResult[];
+}
+/**
+ * Attestation response interface
+ */
+export interface AttestationResponse {
+    public_key?: string;
+    public_key_worker?: string;
+    nonce_b64?: string;
+    nonceB64?: string;
+    nonce?: string;
+    report_json: string;
+    signature: string;
+    gpu_eat: string;
+}
+/**
+ * Processed attestation data
+ */
+export interface ProcessedAttestationData {
+    sessionId: string;
+    nonce: number;
+    history: Array<{
+        role: 'user' | 'assistant' | 'system';
+        content: string;
+    }>;
+    serverPublicKeys: Array<{
+        id: string;
+        publicKeySpki: Uint8Array;
+        publicKeyPem: string;
+    }>;
+    localKeys: CryptoKeyPair;
+    sharedKeys: Array<{
+        id: string;
+        sharedKey: Uint8Array;
+    }>;
+}

package/dist/src/encrypt/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/encrypt/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/encrypt/types.ts"],"names":[],"mappings":""}

package/dist/src/gemini.d.ts

@@ -7,5 +7,5 @@ import type { Config } from '@blackbox_ai/blackbox-cli-core';
 import type { DnsResolutionOrder, LoadedSettings } from './config/settings.js';
 export declare function validateDnsResolutionOrder(order: string | undefined): DnsResolutionOrder;
 export declare function setupUnhandledRejectionHandler(): void;
-export declare function startInteractiveUI(config: Config, settings: LoadedSettings, startupWarnings: string[], workspaceRoot: string): Promise<void>;
+export declare function startInteractiveUI(config: Config, settings: LoadedSettings, startupWarnings: string[], workspaceRoot: string, initialSlashCommand?: string): Promise<void>;
 export declare function main(): Promise<void>;