@probelabs/probe 0.6.0-rc330 → 0.6.0-rc331

package/build/extract.js

@@ -5,7 +5,7 @@
 
 import { exec, spawn } from 'child_process';
 import { promisify } from 'util';
-import { getBinaryPath, buildCliArgs, escapeString } from './utils.js';
+import { getBinaryPath, buildCliArgs, escapeString, getCleanEnv } from './utils.js';
 import { validateCwdPath } from './utils/path-validation.js';
 
 const execAsync = promisify(exec);
@@ -104,7 +104,7 @@ export async function extract(options) {
 	const command = `${binaryPath} extract ${cliArgs.join(' ')}`;
 
 	try {
-		const { stdout, stderr } = await execAsync(command, { cwd });
+		const { stdout, stderr } = await execAsync(command, { cwd, env: getCleanEnv() });
 
 		if (stderr) {
 			console.error(`stderr: ${stderr}`);
@@ -126,7 +126,8 @@ function extractWithStdin(binaryPath, cliArgs, content, options, cwd) {
 	return new Promise((resolve, reject) => {
 		const childProcess = spawn(binaryPath, ['extract', ...cliArgs], {
 			stdio: ['pipe', 'pipe', 'pipe'],
-			cwd
+			cwd,
+			env: getCleanEnv()
 		});
 
 		let stdout = '';

package/build/grep.js

@@ -5,7 +5,7 @@
 
 import { execFile } from 'child_process';
 import { promisify } from 'util';
-import { getBinaryPath } from './utils.js';
+import { getBinaryPath, getCleanEnv } from './utils.js';
 
 const execFileAsync = promisify(execFile);
 
@@ -131,7 +131,7 @@ export async function grep(options) {
 		const { stdout, stderr } = await execFileAsync(binaryPath, cliArgs, {
 			maxBuffer: 10 * 1024 * 1024, // 10MB buffer
 			env: {
-				...process.env,
+				...getCleanEnv(),
 				// Disable colors in stderr for cleaner output
 				NO_COLOR: '1'
 			}

package/build/query.js

@@ -5,7 +5,7 @@
 
 import { exec } from 'child_process';
 import { promisify } from 'util';
-import { getBinaryPath, buildCliArgs, escapeString } from './utils.js';
+import { getBinaryPath, buildCliArgs, escapeString, getCleanEnv } from './utils.js';
 import { validateCwdPath } from './utils/path-validation.js';
 
 const execAsync = promisify(exec);
@@ -84,7 +84,7 @@ export async function query(options) {
 	const command = `${binaryPath} query ${cliArgs.join(' ')}`;
 
 	try {
-		const { stdout, stderr } = await execAsync(command, { cwd });
+		const { stdout, stderr } = await execAsync(command, { cwd, env: getCleanEnv() });
 
 		if (stderr) {
 			console.error(`stderr: ${stderr}`);

package/build/search.js

@@ -5,7 +5,7 @@
 
 import { execFile } from 'child_process';
 import { promisify } from 'util';
-import { getBinaryPath, buildCliArgs } from './utils.js';
+import { getBinaryPath, buildCliArgs, getCleanEnv } from './utils.js';
 import { validateCwdPath } from './utils/path-validation.js';
 import { TimeoutError, categorizeError } from './utils/error-types.js';
 
@@ -164,6 +164,7 @@ export async function search(options) {
 		// Execute with execFile (no shell, prevents command injection)
 		const { stdout, stderr } = await execFileAsync(binaryPath, args, {
 			cwd,
+			env: getCleanEnv(),
 			timeout: options.timeout * 1000, // Convert seconds to milliseconds
 			maxBuffer: 50 * 1024 * 1024 // 50MB buffer for large outputs
 		});

package/build/symbols.js

@@ -4,7 +4,7 @@
  */
 
 import { spawn } from 'child_process';
-import { getBinaryPath, escapeString } from './utils.js';
+import { getBinaryPath, escapeString, getCleanEnv } from './utils.js';
 import { validateCwdPath } from './utils/path-validation.js';
 
 /**
@@ -47,7 +47,8 @@ export async function symbols(options) {
 	return new Promise((resolve, reject) => {
 		const childProcess = spawn(binaryPath, args, {
 			stdio: ['pipe', 'pipe', 'pipe'],
-			cwd
+			cwd,
+			env: getCleanEnv()
 		});
 
 		let stdout = '';

package/build/utils.js

@@ -122,6 +122,29 @@ export function buildCliArgs(options, flagMap) {
 	return cliArgs;
 }
 
+/**
+ * Build a minimal environment for spawning the probe binary.
+ * Prevents E2BIG when the host process accumulates a large process.env.
+ * @returns {Record<string, string>} - Clean environment with only essential vars
+ */
+export function getCleanEnv() {
+  const keep = [
+    'PATH', 'HOME', 'USER', 'SHELL', 'TERM', 'LANG', 'LC_ALL',
+    'TMPDIR', 'TMP', 'TEMP',
+    'SystemRoot', 'SYSTEMROOT', 'COMSPEC', // Windows
+    'PROBE_PATH', 'PROBE_CONFIG_DIR', 'DEBUG',
+    'HTTP_PROXY', 'HTTPS_PROXY', 'NO_PROXY',
+    'http_proxy', 'https_proxy', 'no_proxy',
+  ];
+  const env = {};
+  for (const key of keep) {
+    if (process.env[key] !== undefined) {
+      env[key] = process.env[key];
+    }
+  }
+  return env;
+}
+
 /**
  * Escape a string for use in a command line
  * @param {string} str - String to escape

package/cjs/agent/ProbeAgent.cjs

@@ -16503,6 +16503,7 @@ async function readResponseWithSizeLimit({
   } finally {
     try {
       await reader.cancel();
+    } catch (e) {
     } finally {
       reader.releaseLock();
     }
@@ -17839,7 +17840,7 @@ var init_dist2 = __esm({
       "ETIMEDOUT",
       "EPIPE"
     ];
-    VERSION = true ? "4.0.41" : "0.0.0-test";
+    VERSION = true ? "4.0.45" : "0.0.0-test";
     DEFAULT_SCHEMA_PREFIX = "JSON schema:";
     DEFAULT_SCHEMA_SUFFIX = "You MUST answer with a JSON object that matches the JSON schema above.";
     DEFAULT_GENERIC_SUFFIX = "You MUST answer with JSON.";
@@ -25286,7 +25287,7 @@ var init_dist3 = __esm({
       details: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
       preview: external_exports.unknown().optional()
     });
-    VERSION2 = true ? "4.0.145" : "0.0.0-test";
+    VERSION2 = true ? "4.0.153" : "0.0.0-test";
     bedrockRerankingResponseSchema = lazySchema(
       () => zodSchema(
         external_exports.object({
@@ -29113,6 +29114,40 @@ function buildCliArgs(options, flagMap) {
   }
   return cliArgs;
 }
+function getCleanEnv() {
+  const keep = [
+    "PATH",
+    "HOME",
+    "USER",
+    "SHELL",
+    "TERM",
+    "LANG",
+    "LC_ALL",
+    "TMPDIR",
+    "TMP",
+    "TEMP",
+    "SystemRoot",
+    "SYSTEMROOT",
+    "COMSPEC",
+    // Windows
+    "PROBE_PATH",
+    "PROBE_CONFIG_DIR",
+    "DEBUG",
+    "HTTP_PROXY",
+    "HTTPS_PROXY",
+    "NO_PROXY",
+    "http_proxy",
+    "https_proxy",
+    "no_proxy"
+  ];
+  const env = {};
+  for (const key of keep) {
+    if (process.env[key] !== void 0) {
+      env[key] = process.env[key];
+    }
+  }
+  return env;
+}
 function escapeString(str) {
   if (process.platform === "win32") {
     return `"${str.replace(/"/g, '\\"')}"`;
@@ -29547,6 +29582,7 @@ Search: query="${queries[0]}" path="${options.path}"`;
   try {
     const { stdout, stderr } = await execFileAsync(binaryPath, args, {
       cwd,
+      env: getCleanEnv(),
       timeout: options.timeout * 1e3,
       // Convert seconds to milliseconds
       maxBuffer: 50 * 1024 * 1024
@@ -29677,7 +29713,7 @@ async function query(options) {
   }
   const command = `${binaryPath} query ${cliArgs.join(" ")}`;
   try {
-    const { stdout, stderr } = await execAsync(command, { cwd });
+    const { stdout, stderr } = await execAsync(command, { cwd, env: getCleanEnv() });
     if (stderr) {
       console.error(`stderr: ${stderr}`);
     }
@@ -29771,7 +29807,7 @@ Extract:`;
   }
   const command = `${binaryPath} extract ${cliArgs.join(" ")}`;
   try {
-    const { stdout, stderr } = await execAsync2(command, { cwd });
+    const { stdout, stderr } = await execAsync2(command, { cwd, env: getCleanEnv() });
     if (stderr) {
       console.error(`stderr: ${stderr}`);
     }
@@ -29787,7 +29823,8 @@ function extractWithStdin(binaryPath, cliArgs, content, options, cwd) {
   return new Promise((resolve9, reject2) => {
     const childProcess = (0, import_child_process4.spawn)(binaryPath, ["extract", ...cliArgs], {
       stdio: ["pipe", "pipe", "pipe"],
-      cwd
+      cwd,
+      env: getCleanEnv()
     });
     let stdout = "";
     let stderr = "";
@@ -29914,7 +29951,8 @@ Symbols: files="${options.files.join(", ")}" cwd="${cwd}"`);
   return new Promise((resolve9, reject2) => {
     const childProcess = (0, import_child_process5.spawn)(binaryPath, args, {
       stdio: ["pipe", "pipe", "pipe"],
-      cwd
+      cwd,
+      env: getCleanEnv()
     });
     let stdout = "";
     let stderr = "";
@@ -89053,7 +89091,12 @@ var require_fast_uri = __commonJS({
     }
     function resolve9(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-      const resolved = resolveComponent(parse11(baseURI, schemelessOptions), parse11(relativeURI, schemelessOptions), schemelessOptions, true);
+      const { parsed: baseParsed, malformedAuthorityOrPort: baseMalformed } = parseWithStatus(baseURI, schemelessOptions);
+      const { parsed: relativeParsed, malformedAuthorityOrPort: relativeMalformed } = parseWithStatus(relativeURI, schemelessOptions);
+      if (baseMalformed || relativeMalformed) {
+        throw new Error(baseParsed.error || relativeParsed.error || "URI is malformed.");
+      }
+      const resolved = resolveComponent(baseParsed, relativeParsed, schemelessOptions, true);
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
@@ -89179,6 +89222,7 @@ var require_fast_uri = __commonJS({
     }
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
     var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
+    var AUTHORITY_INTRODUCER_REGION = /^(?:[^#/:?]+:)?([/\\\t\n\r]*)/;
     function getParseError(parsed, matches) {
       if (matches[2] !== void 0 && parsed.path && parsed.path[0] !== "/") {
         return 'URI path must start with "/" when authority is present.';
@@ -89213,6 +89257,20 @@ var require_fast_uri = __commonJS({
         parsed.error = "URI authority must not contain a literal backslash.";
         malformedAuthorityOrPort = true;
       }
+      const introducerMatch = uri.match(AUTHORITY_INTRODUCER_REGION);
+      if (introducerMatch !== null) {
+        const region = introducerMatch[1];
+        const normalizedRegion = region.replace(/[\t\n\r]/g, "");
+        if (normalizedRegion.length >= 2) {
+          if (normalizedRegion.slice(0, 2) !== "//") {
+            parsed.error = parsed.error || "URI authority must not contain a literal backslash.";
+            malformedAuthorityOrPort = true;
+          } else if (region.length !== normalizedRegion.length) {
+            parsed.error = parsed.error || "URI authority introducer must not contain whitespace.";
+            malformedAuthorityOrPort = true;
+          }
+        }
+      }
       const matches = uri.match(URI_PARSE);
       if (matches) {
         parsed.scheme = matches[1];

package/cjs/index.cjs

@@ -1411,6 +1411,40 @@ function buildCliArgs(options, flagMap) {
   }
   return cliArgs;
 }
+function getCleanEnv() {
+  const keep = [
+    "PATH",
+    "HOME",
+    "USER",
+    "SHELL",
+    "TERM",
+    "LANG",
+    "LC_ALL",
+    "TMPDIR",
+    "TMP",
+    "TEMP",
+    "SystemRoot",
+    "SYSTEMROOT",
+    "COMSPEC",
+    // Windows
+    "PROBE_PATH",
+    "PROBE_CONFIG_DIR",
+    "DEBUG",
+    "HTTP_PROXY",
+    "HTTPS_PROXY",
+    "NO_PROXY",
+    "http_proxy",
+    "https_proxy",
+    "no_proxy"
+  ];
+  const env = {};
+  for (const key of keep) {
+    if (process.env[key] !== void 0) {
+      env[key] = process.env[key];
+    }
+  }
+  return env;
+}
 function escapeString(str) {
   if (process.platform === "win32") {
     return `"${str.replace(/"/g, '\\"')}"`;
@@ -1845,6 +1879,7 @@ Search: query="${queries[0]}" path="${options.path}"`;
   try {
     const { stdout, stderr } = await execFileAsync(binaryPath, args, {
       cwd,
+      env: getCleanEnv(),
       timeout: options.timeout * 1e3,
       // Convert seconds to milliseconds
       maxBuffer: 50 * 1024 * 1024
@@ -1975,7 +2010,7 @@ async function query(options) {
   }
   const command = `${binaryPath} query ${cliArgs.join(" ")}`;
   try {
-    const { stdout, stderr } = await execAsync(command, { cwd });
+    const { stdout, stderr } = await execAsync(command, { cwd, env: getCleanEnv() });
     if (stderr) {
       console.error(`stderr: ${stderr}`);
     }
@@ -2069,7 +2104,7 @@ Extract:`;
   }
   const command = `${binaryPath} extract ${cliArgs.join(" ")}`;
   try {
-    const { stdout, stderr } = await execAsync2(command, { cwd });
+    const { stdout, stderr } = await execAsync2(command, { cwd, env: getCleanEnv() });
     if (stderr) {
       console.error(`stderr: ${stderr}`);
     }
@@ -2085,7 +2120,8 @@ function extractWithStdin(binaryPath, cliArgs, content, options, cwd) {
   return new Promise((resolve9, reject2) => {
     const childProcess = (0, import_child_process4.spawn)(binaryPath, ["extract", ...cliArgs], {
       stdio: ["pipe", "pipe", "pipe"],
-      cwd
+      cwd,
+      env: getCleanEnv()
     });
     let stdout = "";
     let stderr = "";
@@ -2212,7 +2248,8 @@ Symbols: files="${options.files.join(", ")}" cwd="${cwd}"`);
   return new Promise((resolve9, reject2) => {
     const childProcess = (0, import_child_process5.spawn)(binaryPath, args, {
       stdio: ["pipe", "pipe", "pipe"],
-      cwd
+      cwd,
+      env: getCleanEnv()
     });
     let stdout = "";
     let stderr = "";
@@ -2281,7 +2318,7 @@ async function grep(options) {
       maxBuffer: 10 * 1024 * 1024,
       // 10MB buffer
       env: {
-        ...process.env,
+        ...getCleanEnv(),
         // Disable colors in stderr for cleaner output
         NO_COLOR: "1"
       }
@@ -18432,6 +18469,7 @@ async function readResponseWithSizeLimit({
   } finally {
     try {
       await reader.cancel();
+    } catch (e) {
     } finally {
       reader.releaseLock();
     }
@@ -19768,7 +19806,7 @@ var init_dist2 = __esm({
       "ETIMEDOUT",
       "EPIPE"
     ];
-    VERSION = true ? "4.0.41" : "0.0.0-test";
+    VERSION = true ? "4.0.45" : "0.0.0-test";
     DEFAULT_SCHEMA_PREFIX = "JSON schema:";
     DEFAULT_SCHEMA_SUFFIX = "You MUST answer with a JSON object that matches the JSON schema above.";
     DEFAULT_GENERIC_SUFFIX = "You MUST answer with JSON.";
@@ -27215,7 +27253,7 @@ var init_dist3 = __esm({
       details: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
       preview: external_exports.unknown().optional()
     });
-    VERSION2 = true ? "4.0.145" : "0.0.0-test";
+    VERSION2 = true ? "4.0.153" : "0.0.0-test";
     bedrockRerankingResponseSchema = lazySchema(
       () => zodSchema(
         external_exports.object({
@@ -73127,7 +73165,12 @@ var require_fast_uri = __commonJS({
     }
     function resolve9(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-      const resolved = resolveComponent(parse11(baseURI, schemelessOptions), parse11(relativeURI, schemelessOptions), schemelessOptions, true);
+      const { parsed: baseParsed, malformedAuthorityOrPort: baseMalformed } = parseWithStatus(baseURI, schemelessOptions);
+      const { parsed: relativeParsed, malformedAuthorityOrPort: relativeMalformed } = parseWithStatus(relativeURI, schemelessOptions);
+      if (baseMalformed || relativeMalformed) {
+        throw new Error(baseParsed.error || relativeParsed.error || "URI is malformed.");
+      }
+      const resolved = resolveComponent(baseParsed, relativeParsed, schemelessOptions, true);
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
@@ -73253,6 +73296,7 @@ var require_fast_uri = __commonJS({
     }
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
     var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
+    var AUTHORITY_INTRODUCER_REGION = /^(?:[^#/:?]+:)?([/\\\t\n\r]*)/;
     function getParseError(parsed, matches) {
       if (matches[2] !== void 0 && parsed.path && parsed.path[0] !== "/") {
         return 'URI path must start with "/" when authority is present.';
@@ -73287,6 +73331,20 @@ var require_fast_uri = __commonJS({
         parsed.error = "URI authority must not contain a literal backslash.";
         malformedAuthorityOrPort = true;
       }
+      const introducerMatch = uri.match(AUTHORITY_INTRODUCER_REGION);
+      if (introducerMatch !== null) {
+        const region = introducerMatch[1];
+        const normalizedRegion = region.replace(/[\t\n\r]/g, "");
+        if (normalizedRegion.length >= 2) {
+          if (normalizedRegion.slice(0, 2) !== "//") {
+            parsed.error = parsed.error || "URI authority must not contain a literal backslash.";
+            malformedAuthorityOrPort = true;
+          } else if (region.length !== normalizedRegion.length) {
+            parsed.error = parsed.error || "URI authority introducer must not contain whitespace.";
+            malformedAuthorityOrPort = true;
+          }
+        }
+      }
       const matches = uri.match(URI_PARSE);
       if (matches) {
         parsed.scheme = matches[1];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@probelabs/probe",
-  "version": "0.6.0-rc330",
+  "version": "0.6.0-rc331",
   "description": "Node.js wrapper for the probe code search tool",
   "main": "src/index.js",
   "module": "src/index.js",

package/src/extract.js

@@ -5,7 +5,7 @@
 
 import { exec, spawn } from 'child_process';
 import { promisify } from 'util';
-import { getBinaryPath, buildCliArgs, escapeString } from './utils.js';
+import { getBinaryPath, buildCliArgs, escapeString, getCleanEnv } from './utils.js';
 import { validateCwdPath } from './utils/path-validation.js';
 
 const execAsync = promisify(exec);
@@ -104,7 +104,7 @@ export async function extract(options) {
 	const command = `${binaryPath} extract ${cliArgs.join(' ')}`;
 
 	try {
-		const { stdout, stderr } = await execAsync(command, { cwd });
+		const { stdout, stderr } = await execAsync(command, { cwd, env: getCleanEnv() });
 
 		if (stderr) {
 			console.error(`stderr: ${stderr}`);
@@ -126,7 +126,8 @@ function extractWithStdin(binaryPath, cliArgs, content, options, cwd) {
 	return new Promise((resolve, reject) => {
 		const childProcess = spawn(binaryPath, ['extract', ...cliArgs], {
 			stdio: ['pipe', 'pipe', 'pipe'],
-			cwd
+			cwd,
+			env: getCleanEnv()
 		});
 
 		let stdout = '';

package/src/grep.js

@@ -5,7 +5,7 @@
 
 import { execFile } from 'child_process';
 import { promisify } from 'util';
-import { getBinaryPath } from './utils.js';
+import { getBinaryPath, getCleanEnv } from './utils.js';
 
 const execFileAsync = promisify(execFile);
 
@@ -131,7 +131,7 @@ export async function grep(options) {
 		const { stdout, stderr } = await execFileAsync(binaryPath, cliArgs, {
 			maxBuffer: 10 * 1024 * 1024, // 10MB buffer
 			env: {
-				...process.env,
+				...getCleanEnv(),
 				// Disable colors in stderr for cleaner output
 				NO_COLOR: '1'
 			}

package/src/query.js

@@ -5,7 +5,7 @@
 
 import { exec } from 'child_process';
 import { promisify } from 'util';
-import { getBinaryPath, buildCliArgs, escapeString } from './utils.js';
+import { getBinaryPath, buildCliArgs, escapeString, getCleanEnv } from './utils.js';
 import { validateCwdPath } from './utils/path-validation.js';
 
 const execAsync = promisify(exec);
@@ -84,7 +84,7 @@ export async function query(options) {
 	const command = `${binaryPath} query ${cliArgs.join(' ')}`;
 
 	try {
-		const { stdout, stderr } = await execAsync(command, { cwd });
+		const { stdout, stderr } = await execAsync(command, { cwd, env: getCleanEnv() });
 
 		if (stderr) {
 			console.error(`stderr: ${stderr}`);

package/src/search.js

@@ -5,7 +5,7 @@
 
 import { execFile } from 'child_process';
 import { promisify } from 'util';
-import { getBinaryPath, buildCliArgs } from './utils.js';
+import { getBinaryPath, buildCliArgs, getCleanEnv } from './utils.js';
 import { validateCwdPath } from './utils/path-validation.js';
 import { TimeoutError, categorizeError } from './utils/error-types.js';
 
@@ -164,6 +164,7 @@ export async function search(options) {
 		// Execute with execFile (no shell, prevents command injection)
 		const { stdout, stderr } = await execFileAsync(binaryPath, args, {
 			cwd,
+			env: getCleanEnv(),
 			timeout: options.timeout * 1000, // Convert seconds to milliseconds
 			maxBuffer: 50 * 1024 * 1024 // 50MB buffer for large outputs
 		});

package/src/symbols.js

@@ -4,7 +4,7 @@
  */
 
 import { spawn } from 'child_process';
-import { getBinaryPath, escapeString } from './utils.js';
+import { getBinaryPath, escapeString, getCleanEnv } from './utils.js';
 import { validateCwdPath } from './utils/path-validation.js';
 
 /**
@@ -47,7 +47,8 @@ export async function symbols(options) {
 	return new Promise((resolve, reject) => {
 		const childProcess = spawn(binaryPath, args, {
 			stdio: ['pipe', 'pipe', 'pipe'],
-			cwd
+			cwd,
+			env: getCleanEnv()
 		});
 
 		let stdout = '';

package/src/utils.js

@@ -122,6 +122,29 @@ export function buildCliArgs(options, flagMap) {
 	return cliArgs;
 }
 
+/**
+ * Build a minimal environment for spawning the probe binary.
+ * Prevents E2BIG when the host process accumulates a large process.env.
+ * @returns {Record<string, string>} - Clean environment with only essential vars
+ */
+export function getCleanEnv() {
+  const keep = [
+    'PATH', 'HOME', 'USER', 'SHELL', 'TERM', 'LANG', 'LC_ALL',
+    'TMPDIR', 'TMP', 'TEMP',
+    'SystemRoot', 'SYSTEMROOT', 'COMSPEC', // Windows
+    'PROBE_PATH', 'PROBE_CONFIG_DIR', 'DEBUG',
+    'HTTP_PROXY', 'HTTPS_PROXY', 'NO_PROXY',
+    'http_proxy', 'https_proxy', 'no_proxy',
+  ];
+  const env = {};
+  for (const key of keep) {
+    if (process.env[key] !== undefined) {
+      env[key] = process.env[key];
+    }
+  }
+  return env;
+}
+
 /**
  * Escape a string for use in a command line
  * @param {string} str - String to escape