hyperclaw 5.2.5 → 5.2.6

package/dist/run-main.js

@@ -3,19 +3,19 @@ const require_paths = require('./paths-AIyBxIzm.js');
 const require_paths$1 = require('./paths-DPovhojT.js');
 require('./env-resolve-DS92g2fk.js');
 const require_config = require('./config-Br73VMLb.js');
-require('./server-CRqwlLX9.js');
-const require_daemon = require('./daemon-rXG1-sEx.js');
+require('./server-BSCeWSlZ.js');
+const require_daemon = require('./daemon-bJ8IYnkd.js');
 const require_gateway = require('./gateway-CzI8dnlS.js');
 require('./providers-DP8T0QCR.js');
-const require_onboard = require('./onboard-cY-Emhr7.js');
+const require_onboard = require('./onboard-C1RArB82.js');
 require('./theme-CLXvI6Hr.js');
-const require_hub = require('./hub-CI4qcd1b.js');
+const require_hub = require('./hub-DIoASRn6.js');
 const require_update_check = require('./update-check-BeAPt4-f.js');
 const require_manager = require('./manager-Jd0qSzVe.js');
 const require_memory = require('./memory-D-Py-cz5.js');
-const require_loader = require('./loader-Ckvv7vHF.js');
+const require_loader = require('./loader-DRfmh8hU.js');
 const require_agents_routing = require('./agents-routing-Bz3SstlK.js');
-const require_pairing = require('./pairing-BRPzVXzQ.js');
+const require_pairing = require('./pairing-fGaxBlgG.js');
 const require_doctor = require('./doctor-BcfmNAGV.js');
 const require_health = require('./health-CBy1PfzC.js');
 const require_security = require('./security-BhhX8wJx.js');
@@ -400,8 +400,10 @@ var GatewayManager$1 = class {
 	async applyTailscaleExposure(exposure, port) {
 		if (exposure === "off") return;
 		try {
-			if (exposure === "serve") await execAsync$1(`tailscale serve ${port}`);
-			else if (exposure === "funnel") await execAsync$1(`tailscale funnel ${port}`);
+			const safePort = Math.trunc(Number(port));
+			if (!Number.isInteger(safePort) || safePort < 1 || safePort > 65535) throw new Error(`Invalid port: ${port}`);
+			if (exposure === "serve") await execAsync$1(`tailscale serve ${safePort}`);
+			else if (exposure === "funnel") await execAsync$1(`tailscale funnel ${safePort}`);
 		} catch {
 			console.log(chalk.default.yellow("⚠️  Tailscale exposure failed — check tailscale is running"));
 		}
@@ -2532,8 +2534,11 @@ process.on("uncaughtException", (err) => {
 	console.error("[hyperclaw] Uncaught exception:", err?.message ?? String(err));
 	process.exit(1);
 });
+function sanitizeForLog(value) {
+	return String(value ?? "").replace(/[\r\n\t]+/g, " ").replace(/[^\x20-\x7e]+/g, "?").slice(0, 200);
+}
 const program = new commander.Command();
-program.name("hyperclaw").description("⚡ HyperClaw — AI Gateway Platform. The Lobster Evolution 🦅").version("5.2.5").option("--profile <name>", "Use an isolated gateway profile. Auto-scopes HYPERCLAW_STATE_DIR and HYPERCLAW_CONFIG_PATH. Required for multi-gateway setups (rescue bot, staging, etc.). Example: hyperclaw --profile rescue gateway --port 19001").hook("preAction", (thisCommand) => {
+program.name("hyperclaw").description("⚡ HyperClaw — AI Gateway Platform. The Lobster Evolution 🦅").version("5.2.6").option("--profile <name>", "Use an isolated gateway profile. Auto-scopes HYPERCLAW_STATE_DIR and HYPERCLAW_CONFIG_PATH. Required for multi-gateway setups (rescue bot, staging, etc.). Example: hyperclaw --profile rescue gateway --port 19001").hook("preAction", (thisCommand) => {
 	const profile = thisCommand.opts().profile;
 	if (profile) {
 		const os$2 = require("os");
@@ -2678,7 +2683,7 @@ sandboxCmd.command("explain").description("Show effective sandbox mode, tool pol
 	const sandboxMode = cfg?.agents?.defaults?.sandbox?.mode ?? "non-main";
 	const toolsCfg = cfg?.tools ?? {};
 	const { describeToolPolicy, applyToolPolicy } = await Promise.resolve().then(() => require("./tool-policy-TmXx_fpp.js"));
-	const { getBuiltinTools, getSessionsTools, getPCAccessTools, getBrowserTools, getExtractionTools, getWebsiteWatchTools, getVisionTools } = await Promise.resolve().then(() => require("./src-sWcDdkdR.js"));
+	const { getBuiltinTools, getSessionsTools, getPCAccessTools, getBrowserTools, getExtractionTools, getWebsiteWatchTools, getVisionTools } = await Promise.resolve().then(() => require("./src-BVeLalMV.js"));
 	const allTools = [
 		...getBuiltinTools(),
 		...getSessionsTools(() => null),
@@ -3079,7 +3084,7 @@ cfgCmd.command("set-service-key <serviceId> [apiKey]").description("Set API key
 cfgCmd.command("schema").description("Show configuration schema").action(() => {
 	console.log(chalk.default.bold.hex("#06b6d4")("\n  Config schema: ~/.hyperclaw/hyperclaw.json\n"));
 	const schema = {
-		version: "string (e.g. \"5.2.5\")",
+		version: "string (e.g. \"5.2.6\")",
 		workspaceName: "string",
 		provider: {
 			providerId: "string",
@@ -3390,7 +3395,7 @@ secretsCmd.command("credentials").description("List provider credential files (c
 });
 const securityCmd = program.command("security").description("Security tools");
 securityCmd.command("audit").description("Security audit — file permissions, DM policies, embedded secrets").option("--deep", "Full deep scan including token entropy and installed skill risks").option("--fix", "Auto-fix safe findings (file permissions etc.)").option("--json", "Machine-readable JSON output").action(async (opts) => {
-	const { runSecurityAudit } = await Promise.resolve().then(() => require("./audit-CV0gLGaL.js"));
+	const { runSecurityAudit } = await Promise.resolve().then(() => require("./audit-NPINyRh4.js"));
 	await runSecurityAudit({
 		deep: opts.deep,
 		fix: opts.fix,
@@ -3409,7 +3414,7 @@ program.command("osint").description("OSINT / Ethical Hacking mode — configure
 	process.exit(0);
 });
 program.command("chat").description("Interactive terminal chat with the agent").option("--session <id>", "Resume a named session").option("--model <model>", "Override model").option("--thinking <level>", "Thinking level: high|medium|low|none", "none").option("--workspace <dir>", "Override workspace directory").action(async (opts) => {
-	const { runChat } = await Promise.resolve().then(() => require("./chat-CbntPqAD.js"));
+	const { runChat } = await Promise.resolve().then(() => require("./chat-8E4H6nqx.js"));
 	await runChat({
 		sessionId: opts.session,
 		model: opts.model,
@@ -3419,7 +3424,7 @@ program.command("chat").description("Interactive terminal chat with the agent").
 });
 const agentRunCmd = program.command("agent").description("Run agent with thinking control");
 agentRunCmd.requiredOption("-m, --message <text>", "Message to send to the agent").option("--thinking <level>", "Thinking level: high|medium|low|none", "none").option("--model <model>", "Override model").option("--session <id>", "Session/thread ID").option("--multi-step", "Decompose into steps and run each (sequential)").option("--parallel", "Run sub-agents in parallel for independent subtasks").option("--verbose", "Show thinking blocks and request details").option("--workspace <dir>", "Override workspace directory").action(async (opts) => {
-	const { runAgent } = await Promise.resolve().then(() => require("./src-sWcDdkdR.js"));
+	const { runAgent } = await Promise.resolve().then(() => require("./src-BVeLalMV.js"));
 	await runAgent({
 		message: opts.message,
 		thinking: opts.thinking,
@@ -3435,7 +3440,7 @@ agentRunCmd.requiredOption("-m, --message <text>", "Message to send to the agent
 });
 const threadsCmd = program.command("threads").description("ACP thread-bound agent sessions");
 threadsCmd.command("list").description("List agent threads").option("--channel <id>", "Filter by channel").option("--active", "Show only active threads").action(async (opts) => {
-	const { ACPThreadManager } = await Promise.resolve().then(() => require("./src-sWcDdkdR.js"));
+	const { ACPThreadManager } = await Promise.resolve().then(() => require("./src-BVeLalMV.js"));
 	const mgr = new ACPThreadManager();
 	const threads = await mgr.list({
 		channelId: opts.channel,
@@ -3445,7 +3450,7 @@ threadsCmd.command("list").description("List agent threads").option("--channel <
 	process.exit(0);
 });
 threadsCmd.command("terminate <id>").description("Terminate a thread").action(async (id) => {
-	const { ACPThreadManager } = await Promise.resolve().then(() => require("./src-sWcDdkdR.js"));
+	const { ACPThreadManager } = await Promise.resolve().then(() => require("./src-BVeLalMV.js"));
 	await new ACPThreadManager().terminate(id);
 	console.log(require("chalk").green(`\n  ✔  Thread terminated: ${id}\n`));
 	process.exit(0);
@@ -3510,22 +3515,22 @@ mcpCmd.command("probe [id]").description("Test MCP server connection").action(as
 });
 const nodeCmd = program.command("node").description("HyperClaw node management (local, remote, android)");
 nodeCmd.command("list").description("List paired nodes").action(async () => {
-	const { nodeList } = await Promise.resolve().then(() => require("./node-CRaZw_av.js"));
+	const { nodeList } = await Promise.resolve().then(() => require("./node-4_wJsNEN.js"));
 	await nodeList();
 	process.exit(0);
 });
 nodeCmd.command("add").description("Add or pair a node").action(async () => {
-	const { nodeAdd } = await Promise.resolve().then(() => require("./node-CRaZw_av.js"));
+	const { nodeAdd } = await Promise.resolve().then(() => require("./node-4_wJsNEN.js"));
 	await nodeAdd();
 	process.exit(0);
 });
 nodeCmd.command("probe [id]").description("Probe node connection").action(async (id) => {
-	const { nodeProbe } = await Promise.resolve().then(() => require("./node-CRaZw_av.js"));
+	const { nodeProbe } = await Promise.resolve().then(() => require("./node-4_wJsNEN.js"));
 	await nodeProbe(id);
 	process.exit(0);
 });
 nodeCmd.command("remove <id>").description("Remove paired node").action(async (id) => {
-	const { nodeRemove } = await Promise.resolve().then(() => require("./node-CRaZw_av.js"));
+	const { nodeRemove } = await Promise.resolve().then(() => require("./node-4_wJsNEN.js"));
 	await nodeRemove(id);
 	process.exit(0);
 });
@@ -3685,7 +3690,7 @@ const logsCmd = program.command("logs").description("View gateway logs");
 logsCmd.option("-n, --lines <n>", "Number of lines to show", "50");
 logsCmd.option("-f, --follow", "Stream logs in real time");
 logsCmd.action(async (opts) => {
-	const { tailLog, streamLog } = await Promise.resolve().then(() => require("./logger-ry2oCfdf.js"));
+	const { tailLog, streamLog } = await Promise.resolve().then(() => require("./logger-CnxILOPV.js"));
 	if (opts.follow) await streamLog();
 	else {
 		await tailLog(parseInt(opts.lines));
@@ -3693,7 +3698,7 @@ logsCmd.action(async (opts) => {
 	}
 });
 program.command("gateway:serve").description("Start the gateway server in the foreground (used by daemon)").action(async () => {
-	const { startGateway } = await Promise.resolve().then(() => require("./server-DqXe03-t.js"));
+	const { startGateway } = await Promise.resolve().then(() => require("./server-DIwR4tT3.js"));
 	await startGateway();
 	process.on("SIGINT", () => process.exit(0));
 	process.on("SIGTERM", () => process.exit(0));
@@ -3791,7 +3796,8 @@ authCmd.command("add <service_id>").description("Add API key for a service (any
 	let envContent = "";
 	if (await fs$7.pathExists(envPath)) envContent = await fs$7.readFile(envPath, "utf8");
 	const envLine = `${envVar}=${apiKey}`;
-	const re = new RegExp(`^${envVar}=.*$`, "m");
+	const escapedEnvVar = envVar.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+	const re = new RegExp(`^${escapedEnvVar}=.*$`, "m");
 	if (re.test(envContent)) envContent = envContent.replace(re, envLine);
 	else envContent = envContent.trimEnd() + (envContent ? "\n" : "") + envLine + "\n";
 	await fs$7.writeFile(envPath, envContent, { mode: 384 });
@@ -3824,7 +3830,7 @@ authCmd.command("oauth <provider>").description("Run full OAuth flow. Providers:
 	const chalk$11 = require("chalk");
 	const ora$4 = (await import("ora")).default;
 	try {
-		const { runOAuthFlow } = await Promise.resolve().then(() => require("./oauth-flow-B3S4T_SJ.js"));
+		const { runOAuthFlow } = await Promise.resolve().then(() => require("./oauth-flow-CJ7dFXKT.js"));
 		const spinner = ora$4("Starting OAuth flow...").start();
 		spinner.text = "Opening browser — complete the consent and return here.";
 		const tokens = await runOAuthFlow(provider, {
@@ -3842,10 +3848,10 @@ authCmd.command("oauth <provider>").description("Run full OAuth flow. Providers:
 			expires_at,
 			token_url: tokenUrl
 		});
-		console.log(chalk$11.hex("#06b6d4")(`\n  ✔  OAuth tokens saved for: ${provider}`));
-		console.log(chalk$11.gray("  Set in hyperclaw.json: \"provider\": { \"authType\": \"oauth\", \"providerId\": \"" + provider + "\" }\n"));
+		console.log(chalk$11.hex("#06b6d4")(`\n  ✔  OAuth tokens saved for: ${sanitizeForLog(provider)}`));
+		console.log(chalk$11.gray("  Set in hyperclaw.json: \"provider\": { \"authType\": \"oauth\", \"providerId\": \"" + sanitizeForLog(provider) + "\" }\n"));
 	} catch (e) {
-		console.error(chalk$11.red("\n  ✖  OAuth failed: " + e.message + "\n"));
+		console.error(chalk$11.red("\n  ✖  OAuth failed: " + sanitizeForLog(e?.message) + "\n"));
 		process.exit(1);
 	}
 	process.exit(0);
@@ -3891,8 +3897,8 @@ authCmd.command("oauth-set <provider>").description("Save OAuth tokens manually
 		expires_at,
 		token_url: opts.tokenUrl || void 0
 	});
-	console.log(chalk$11.hex("#06b6d4")(`\n  ✔  OAuth tokens saved for provider: ${provider}`));
-	console.log(chalk$11.gray("  Set in hyperclaw.json: \"provider\": { \"authType\": \"oauth\", \"providerId\": \"" + provider + "\" }\n"));
+	console.log(chalk$11.hex("#06b6d4")(`\n  ✔  OAuth tokens saved for provider: ${sanitizeForLog(provider)}`));
+	console.log(chalk$11.gray("  Set in hyperclaw.json: \"provider\": { \"authType\": \"oauth\", \"providerId\": \"" + sanitizeForLog(provider) + "\" }\n"));
 	process.exit(0);
 });
 const workspaceCmd = program.command("workspace").description("Manage agent workspace files");
@@ -3945,13 +3951,13 @@ workspaceCmd.command("show [dir]").description("Show workspace files summary").a
 });
 const botCmd = program.command("bot").description("HyperClaw Bot — companion bot for remote gateway control");
 botCmd.command("status").action(async () => {
-	const { showBotStatus } = await Promise.resolve().then(() => require("./hyperclawbot-CFz_TKkS.js"));
+	const { showBotStatus } = await Promise.resolve().then(() => require("./hyperclawbot-CIvGq2IG.js"));
 	await showBotStatus();
 	process.exit(0);
 });
 botCmd.command("setup").description("Configure HyperClaw Bot (Telegram token, allowed users)").action(async () => {
 	const inquirer$2 = require("inquirer");
-	const { saveBotConfig } = await Promise.resolve().then(() => require("./hyperclawbot-CFz_TKkS.js"));
+	const { saveBotConfig } = await Promise.resolve().then(() => require("./hyperclawbot-CIvGq2IG.js"));
 	const chalk$11 = require("chalk");
 	console.log(chalk$11.bold.hex("#06b6d4")("\n  🦅 HYPERCLAW BOT SETUP\n"));
 	console.log(chalk$11.gray("  Create a bot at t.me/BotFather, then paste the token below.\n"));
@@ -4013,14 +4019,14 @@ botCmd.command("start").description("Start HyperClaw Bot (foreground or backgrou
 			cwd: process.cwd()
 		});
 		child.unref();
-		const { writeBotPid } = await Promise.resolve().then(() => require("./hyperclawbot-CFz_TKkS.js"));
+		const { writeBotPid } = await Promise.resolve().then(() => require("./hyperclawbot-CIvGq2IG.js"));
 		await writeBotPid(child.pid);
 		console.log(require("chalk").green(`\n  ✔  HyperClaw Bot started in background (PID ${child.pid})`));
 		console.log(require("chalk").gray("  Stop with: hyperclaw bot stop\n"));
 		process.exit(0);
 		return;
 	}
-	const { loadBotConfig, TelegramHyperClawBot, DiscordHyperClawBot } = await Promise.resolve().then(() => require("./hyperclawbot-CFz_TKkS.js"));
+	const { loadBotConfig, TelegramHyperClawBot, DiscordHyperClawBot } = await Promise.resolve().then(() => require("./hyperclawbot-CIvGq2IG.js"));
 	const cfg = await loadBotConfig();
 	if (!cfg) {
 		console.log(require("chalk").red("\n  ✖  HyperClaw Bot not configured. Run: hyperclaw bot setup\n"));
@@ -4047,41 +4053,41 @@ botCmd.command("start").description("Start HyperClaw Bot (foreground or backgrou
 });
 botCmd.command("stop").description("Stop HyperClaw Bot (when running in background)").action(async () => {
 	const chalk$11 = require("chalk");
-	const { stopBotProcess } = await Promise.resolve().then(() => require("./hyperclawbot-CFz_TKkS.js"));
+	const { stopBotProcess } = await Promise.resolve().then(() => require("./hyperclawbot-CIvGq2IG.js"));
 	const stopped = await stopBotProcess();
 	if (stopped) console.log(chalk$11.green("\n  ✔  HyperClaw Bot stopped\n"));
 	else console.log(chalk$11.gray("\n  Bot not running in background (no PID file). Use Ctrl+C to stop foreground bot.\n"));
 	process.exit(stopped ? 0 : 1);
 });
 memCmd.command("search <query>").description("Search MEMORY.md").action(async (query) => {
-	const { searchMemory } = await Promise.resolve().then(() => require("./src-sWcDdkdR.js"));
+	const { searchMemory } = await Promise.resolve().then(() => require("./src-BVeLalMV.js"));
 	await searchMemory(query);
 	process.exit(0);
 });
 memCmd.command("auto-show").description("Show auto-extracted memories from MEMORY.md").action(async () => {
-	const { showMemory } = await Promise.resolve().then(() => require("./src-sWcDdkdR.js"));
+	const { showMemory } = await Promise.resolve().then(() => require("./src-BVeLalMV.js"));
 	await showMemory();
 	process.exit(0);
 });
 memCmd.command("clear").description("Clear all auto-extracted memories").action(async () => {
-	const { clearMemory } = await Promise.resolve().then(() => require("./src-sWcDdkdR.js"));
+	const { clearMemory } = await Promise.resolve().then(() => require("./src-BVeLalMV.js"));
 	await clearMemory();
 	process.exit(0);
 });
 memCmd.command("save <text>").description("Manually save a fact to MEMORY.md").action(async (text) => {
-	const { saveMemoryDirect } = await Promise.resolve().then(() => require("./src-sWcDdkdR.js"));
+	const { saveMemoryDirect } = await Promise.resolve().then(() => require("./src-BVeLalMV.js"));
 	await saveMemoryDirect(text);
 	console.log(chalk.default.hex("#06b6d4")(`  ✅ Saved: ${text}\n`));
 	process.exit(0);
 });
 const pcCmd = program.command("pc").description("PC access — give the AI access to your computer");
 pcCmd.command("status").description("Show PC access status and config").action(async () => {
-	const { showPCAccessStatus } = await Promise.resolve().then(() => require("./src-sWcDdkdR.js"));
+	const { showPCAccessStatus } = await Promise.resolve().then(() => require("./src-BVeLalMV.js"));
 	await showPCAccessStatus();
 	process.exit(0);
 });
 pcCmd.command("enable").description("Enable PC access for the AI").option("--level <level>", "Access level: read-only | sandboxed | full", "full").option("--paths <paths>", "Comma-separated allowed paths (sandboxed mode)").action(async (opts) => {
-	const { savePCAccessConfig } = await Promise.resolve().then(() => require("./src-sWcDdkdR.js"));
+	const { savePCAccessConfig } = await Promise.resolve().then(() => require("./src-BVeLalMV.js"));
 	const level = opts.level;
 	const allowed = [
 		"read-only",
@@ -4108,7 +4114,7 @@ pcCmd.command("enable").description("Enable PC access for the AI").option("--lev
 	process.exit(0);
 });
 pcCmd.command("disable").description("Disable PC access").action(async () => {
-	const { savePCAccessConfig } = await Promise.resolve().then(() => require("./src-sWcDdkdR.js"));
+	const { savePCAccessConfig } = await Promise.resolve().then(() => require("./src-BVeLalMV.js"));
 	await savePCAccessConfig({ enabled: false });
 	console.log(chalk.default.hex("#06b6d4")("\n  ✅ PC access disabled\n"));
 	process.exit(0);
@@ -4133,7 +4139,7 @@ pcCmd.command("log").description("Show PC access audit log").option("-n, --lines
 	process.exit(0);
 });
 pcCmd.command("run <command>").description("Run a shell command via PC access (must be enabled)").action(async (command) => {
-	const { loadPCAccessConfig, getPCAccessTools } = await Promise.resolve().then(() => require("./src-sWcDdkdR.js"));
+	const { loadPCAccessConfig, getPCAccessTools } = await Promise.resolve().then(() => require("./src-BVeLalMV.js"));
 	const cfg = await loadPCAccessConfig();
 	if (!cfg.enabled) {
 		console.log(chalk.default.red("\n  ✖  PC access disabled. Run: hyperclaw pc enable\n"));
@@ -4191,7 +4197,7 @@ if (process.argv.length === 2) (async () => {
 		console.log(`  ${t.c("hyperclaw --help")}                     — all commands\n`);
 	} else {
 		await new require_onboard.Banner().showNeonBanner(false);
-		const { HyperClawWizard: HyperClawWizard$1 } = await Promise.resolve().then(() => require("./onboard-CO0j5jJ1.js"));
+		const { HyperClawWizard: HyperClawWizard$1 } = await Promise.resolve().then(() => require("./onboard-CQkUrkNk.js"));
 		await new HyperClawWizard$1().run({ wizard: true });
 	}
 	await runUpdateCheck();
@@ -4201,7 +4207,7 @@ else program.parseAsync(process.argv).then(async () => {
 	await runUpdateCheck();
 	process.exit(0);
 }).catch((e) => {
-	console.error(e.message);
+	console.error(sanitizeForLog(e?.message));
 	process.exit(1);
 });