hyperclaw 5.4.0 → 5.4.1

package/dist/osint-CK9xVUUm.js

@@ -0,0 +1,283 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const require_paths = require('./paths-AIyBxIzm.js');
+const require_paths$1 = require('./paths-DPovhojT.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const inquirer = require_chunk.__toESM(require("inquirer"));
+const ora = require_chunk.__toESM(require("ora"));
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+
+//#region src/commands/osint.ts
+require_paths$1.init_paths();
+const getConfigFile = () => require_paths.getConfigPath();
+const getOsintProfileFile = () => path.default.join(require_paths.getHyperClawDir(), "osint-profile.json");
+const MODE_DESCRIPTIONS = {
+	recon: "Passive reconnaissance — WHOIS, DNS, subdomains, public info gathering",
+	bugbounty: "Bug bounty workflow — target scope, vulnerability research, report drafting",
+	pentest: "Penetration testing — active recon, service enumeration, exploit research",
+	footprint: "Digital footprint — social media, email leaks, username tracking",
+	custom: "Custom — configure your own tools and system prompt"
+};
+const MODE_SYSTEM_PROMPTS = {
+	recon: `You are a professional OSINT analyst specializing in passive reconnaissance.
+Your goal is to gather publicly available information about the target without triggering detection.
+Use DNS lookups, WHOIS data, web scraping, and public databases.
+Always cite sources and stay within legal boundaries.
+Never attempt active exploitation — only passive information gathering.`,
+	bugbounty: `You are an experienced bug bounty hunter working within an authorized scope.
+Your goal is to identify security vulnerabilities in web applications and infrastructure.
+Follow responsible disclosure principles. Report findings clearly with reproduction steps.
+Focus on: XSS, SQLi, SSRF, authentication issues, business logic flaws, IDOR.
+Use tools methodically. Document everything for your report.`,
+	pentest: `You are a professional penetration tester with explicit written authorization.
+Conduct a thorough security assessment following the PTES methodology.
+Phases: Intelligence Gathering → Scanning → Exploitation → Post-Exploitation → Reporting.
+Document all findings with CVSS scores. Stay within defined scope at all times.
+Never exfiltrate real data — only demonstrate access.`,
+	footprint: `You are a digital forensics investigator mapping a target's online presence.
+Your goal is to build a comprehensive profile using only public sources.
+Search social media, data breach databases (HaveIBeenPwned, Dehashed), LinkedIn, GitHub.
+Create a timeline of online activity. Identify connected accounts, email patterns, usernames.
+This is for defensive intelligence gathering and authorized investigations only.`,
+	custom: `You are a security researcher with access to OSINT and analysis tools.
+Use available tools to assist with the research task.`
+};
+const MODE_MCP_SERVERS = {
+	recon: ["mcp-browser", "mcp-filesystem"],
+	bugbounty: [
+		"mcp-browser",
+		"mcp-filesystem",
+		"mcp-github"
+	],
+	pentest: [
+		"mcp-browser",
+		"mcp-filesystem",
+		"mcp-terminal",
+		"mcp-github"
+	],
+	footprint: ["mcp-browser", "mcp-filesystem"],
+	custom: ["mcp-browser", "mcp-filesystem"]
+};
+function printBanner() {
+	console.log();
+	console.log(chalk.default.red.bold("  ██████╗ ███████╗██╗███╗   ██╗████████╗"));
+	console.log(chalk.default.red.bold("  ██╔═══██╗██╔════╝██║████╗  ██║╚══██╔══╝"));
+	console.log(chalk.default.yellow.bold("  ██║   ██║███████╗██║██╔██╗ ██║   ██║   "));
+	console.log(chalk.default.yellow.bold("  ██║   ██║╚════██║██║██║╚██╗██║   ██║   "));
+	console.log(chalk.default.red.bold("  ╚██████╔╝███████║██║██║ ╚████║   ██║   "));
+	console.log(chalk.default.red.bold("   ╚═════╝ ╚══════╝╚═╝╚═╝  ╚═══╝   ╚═╝   "));
+	console.log();
+	console.log(chalk.default.gray("  HyperClaw OSINT / Ethical Hacking Mode"));
+	console.log(chalk.default.gray("  ────────────────────────────────────────────"));
+	console.log(chalk.default.yellow("  ⚠️  For authorized security research only."));
+	console.log(chalk.default.yellow("  ⚠️  Always have explicit written permission."));
+	console.log();
+}
+async function osintSetup(options) {
+	printBanner();
+	if (options.show) {
+		try {
+			const profile$1 = await fs_extra.default.readJson(getOsintProfileFile());
+			console.log(chalk.default.cyan.bold("  🔍 Current OSINT Profile:\n"));
+			console.log(`  ⚙️  Mode:    ${chalk.default.yellow(profile$1.mode)}`);
+			console.log(`  🎯 Target:  ${chalk.default.white(profile$1.target || "(not set)")}`);
+			console.log(`  🏷️  Type:    ${profile$1.targetType || "N/A"}`);
+			console.log(`  🔌 MCP:     ${profile$1.mcpServers.join(", ")}`);
+			console.log(`  🕐 Created: ${profile$1.createdAt}`);
+			if (profile$1.notes) console.log(`  📝 Notes:   ${profile$1.notes}`);
+			console.log();
+		} catch {
+			console.log(chalk.default.gray("  ℹ️  No OSINT profile saved yet. Run: hyperclaw osint setup\n"));
+		}
+		return;
+	}
+	if (options.reset) {
+		await fs_extra.default.remove(getOsintProfileFile());
+		const osintActivePath = path.default.join(require_paths.getHyperClawDir(), "OSINT-ACTIVE.md");
+		await fs_extra.default.remove(osintActivePath).catch(() => {});
+		console.log(chalk.default.green("  🧹 OSINT profile cleared.\n"));
+		return;
+	}
+	console.log(chalk.default.bold("  🔍 Select OSINT workflow:\n"));
+	for (const [mode$1, desc] of Object.entries(MODE_DESCRIPTIONS)) console.log(`  ${chalk.default.cyan(mode$1.padEnd(12))} ${chalk.default.gray(desc)}`);
+	console.log();
+	const { mode } = await inquirer.default.prompt([{
+		type: "list",
+		name: "mode",
+		message: "Workflow:",
+		choices: Object.keys(MODE_DESCRIPTIONS).map((m) => ({
+			name: `${m.padEnd(12)} — ${MODE_DESCRIPTIONS[m]}`,
+			value: m
+		})),
+		default: options.mode || "recon"
+	}]);
+	const { hasTarget } = await inquirer.default.prompt([{
+		type: "confirm",
+		name: "hasTarget",
+		message: "Set a target for this session?",
+		default: true
+	}]);
+	let target;
+	let targetType;
+	if (hasTarget) {
+		const resp = await inquirer.default.prompt([{
+			type: "list",
+			name: "targetType",
+			message: "Target type:",
+			choices: [
+				"domain",
+				"ip",
+				"username",
+				"email",
+				"org",
+				"custom"
+			]
+		}, {
+			type: "input",
+			name: "target",
+			message: "Target value (e.g. example.com):",
+			validate: (v) => v.trim().length > 0 || "Required"
+		}]);
+		target = resp.target.trim();
+		targetType = resp.targetType;
+	}
+	const { notes } = await inquirer.default.prompt([{
+		type: "input",
+		name: "notes",
+		message: "Session notes (optional, e.g. \"HackerOne program XYZ\"):"
+	}]);
+	console.log();
+	const { confirmed } = await inquirer.default.prompt([{
+		type: "confirm",
+		name: "confirmed",
+		message: chalk.default.yellow("I confirm I have explicit written authorization to test this target."),
+		default: false
+	}]);
+	if (!confirmed) {
+		console.log(chalk.default.red("\n  🚫 Aborted. OSINT mode requires authorization confirmation.\n"));
+		return;
+	}
+	const spinner = (0, ora.default)("⚙️  Applying OSINT configuration...").start();
+	const mcpServers = MODE_MCP_SERVERS[mode];
+	const systemPrompt = MODE_SYSTEM_PROMPTS[mode];
+	const profile = {
+		mode,
+		target,
+		targetType,
+		notes: notes || void 0,
+		createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+		mcpServers,
+		systemPromptOverride: systemPrompt
+	};
+	await fs_extra.default.ensureDir(require_paths.getHyperClawDir());
+	await fs_extra.default.writeJson(getOsintProfileFile(), profile, { spaces: 2 });
+	let config = {};
+	try {
+		config = await fs_extra.default.readJson(getConfigFile());
+	} catch {}
+	if (!config.agent) config.agent = {};
+	const agent = config.agent;
+	agent.systemPromptOverride = systemPrompt;
+	agent.osintMode = mode;
+	if (target) agent.osintTarget = `${targetType}: ${target}`;
+	const mcpFile = path.default.join(require_paths.getHyperClawDir(), "mcp-servers.json");
+	let mcpServersJson = [];
+	try {
+		mcpServersJson = await fs_extra.default.readJson(mcpFile);
+	} catch {}
+	const extensionsDir = path.default.join(path.default.dirname(getConfigFile()), "..", "..");
+	const serverDefs = {
+		"mcp-filesystem": {
+			command: `node ${path.default.join(process.cwd(), "extensions/mcp-filesystem/server.mjs")}`,
+			label: "Filesystem (OSINT)"
+		},
+		"mcp-browser": {
+			command: `node ${path.default.join(process.cwd(), "extensions/mcp-browser/server.mjs")}`,
+			label: "Browser/Web (OSINT)"
+		},
+		"mcp-terminal": {
+			command: `node ${path.default.join(process.cwd(), "extensions/mcp-terminal/server.mjs")}`,
+			label: "Terminal (OSINT)"
+		},
+		"mcp-github": {
+			command: `node ${path.default.join(process.cwd(), "extensions/mcp-github/server.mjs")}`,
+			label: "GitHub (OSINT)"
+		}
+	};
+	for (const serverId of mcpServers) {
+		const already = mcpServersJson.find((s) => s.id === serverId);
+		if (!already && serverDefs[serverId]) mcpServersJson.push({
+			id: serverId,
+			name: serverDefs[serverId].label,
+			transport: "stdio",
+			command: serverDefs[serverId].command,
+			enabled: true,
+			addedAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+		else if (already) already.enabled = true;
+	}
+	await fs_extra.default.ensureDir(path.default.dirname(mcpFile));
+	await fs_extra.default.writeJson(mcpFile, mcpServersJson, { spaces: 2 });
+	await fs_extra.default.writeJson(getConfigFile(), config, { spaces: 2 });
+	spinner.succeed("✅ OSINT configuration applied");
+	console.log();
+	console.log(chalk.default.bold.red("  🩸 OSINT mode ready:"));
+	console.log(`  ⚙️  Workflow: ${chalk.default.yellow(mode)}`);
+	if (target) console.log(`  🎯 Target:   ${chalk.default.white(target)} ${chalk.default.gray(`(${targetType})`)}`);
+	console.log(`  🔌 MCP:      ${chalk.default.cyan(mcpServers.join(", "))}`);
+	console.log();
+	const { launchNow } = await inquirer.default.prompt([{
+		type: "confirm",
+		name: "launchNow",
+		message: chalk.default.red("🔍 Launch OSINT chat session now?"),
+		default: true
+	}]);
+	if (!launchNow) {
+		console.log(chalk.default.gray("\n  🚀 Run: hyperclaw osint chat  — to start your session later."));
+		console.log(chalk.default.gray("  👁️  To view profile: hyperclaw osint --show"));
+		console.log(chalk.default.gray("  🧹 To reset:        hyperclaw osint --reset\n"));
+		return;
+	}
+	const { runOsintChat } = await Promise.resolve().then(() => require("./osint-chat-BUhiSpf9.js"));
+	await runOsintChat({});
+}
+async function osintQuickStart(mode) {
+	printBanner();
+	console.log(chalk.default.bold("  🔍 Available OSINT workflows:\n"));
+	const workflowEmojis = {
+		recon: "🌐",
+		bugbounty: "🐛",
+		pentest: "🔭",
+		footprint: "👤",
+		custom: "🔧"
+	};
+	for (const [m, desc] of Object.entries(MODE_DESCRIPTIONS)) {
+		const isActive = m === mode;
+		const bullet = isActive ? chalk.default.green("▶") : chalk.default.gray("○");
+		const emoji = workflowEmojis[m] ?? "•";
+		console.log(`  ${bullet} ${emoji} ${chalk.default.cyan(m.padEnd(12))} ${chalk.default.white(desc)}`);
+	}
+	console.log();
+	console.log(chalk.default.bold("  📋 Commands:\n"));
+	console.log(`  ${chalk.default.cyan("hyperclaw osint setup")}           — ⚙️  interactive OSINT session setup`);
+	console.log(`  ${chalk.default.cyan("hyperclaw osint chat")}            — 💬 start OSINT chat session`);
+	console.log(`  ${chalk.default.cyan("hyperclaw osint --show")}          — 👁️  show current profile`);
+	console.log(`  ${chalk.default.cyan("hyperclaw osint --reset")}         — 🧹 clear OSINT profile`);
+	console.log();
+	console.log(chalk.default.bold.red("  🩸 Daemon mode (full shell/tool access):\n"));
+	console.log(`  ${chalk.default.gray("1.")} ${chalk.default.cyan("hyperclaw daemon start")}          — 🩸 start the daemon (keep running)`);
+	console.log(`  ${chalk.default.gray("2.")} ${chalk.default.cyan("hyperclaw osint chat")}            — 🔍 auto-connects to daemon`);
+	console.log(`  ${chalk.default.gray("   ")} ${chalk.default.gray("🔧 Gives: nmap, curl, dig, whois, msfconsole, dirb, nikto, sqlmap...")}`);
+	console.log();
+	console.log(chalk.default.bold("  🔌 MCP servers for OSINT:\n"));
+	console.log(`  ${chalk.default.cyan("mcp-browser")}    — 🌐 web_fetch, web_search, dns_lookup, whois_lookup, extract_links`);
+	console.log(`  ${chalk.default.cyan("mcp-filesystem")} — 📁 read_file, write_file, search_files (for saving reports)`);
+	console.log(`  ${chalk.default.cyan("mcp-github")}     — 🐙 list_repos, search_code, get_file`);
+	console.log(`  ${chalk.default.cyan("mcp-terminal")}   — 💻 run_command (pentest mode only, requires authorization)`);
+	console.log();
+	console.log(chalk.default.yellow("  ⚠️  Always operate within authorized scope and applicable laws.\n"));
+}
+
+//#endregion
+exports.osintQuickStart = osintQuickStart;
+exports.osintSetup = osintSetup;

package/dist/osint-D6vQXCWh.js

@@ -0,0 +1,283 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const require_paths = require('./paths-AIyBxIzm.js');
+const require_paths$1 = require('./paths-DPovhojT.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const inquirer = require_chunk.__toESM(require("inquirer"));
+const ora = require_chunk.__toESM(require("ora"));
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+
+//#region src/commands/osint.ts
+require_paths$1.init_paths();
+const getConfigFile = () => require_paths.getConfigPath();
+const getOsintProfileFile = () => path.default.join(require_paths.getHyperClawDir(), "osint-profile.json");
+const MODE_DESCRIPTIONS = {
+	recon: "Passive reconnaissance — WHOIS, DNS, subdomains, public info gathering",
+	bugbounty: "Bug bounty workflow — target scope, vulnerability research, report drafting",
+	pentest: "Penetration testing — active recon, service enumeration, exploit research",
+	footprint: "Digital footprint — social media, email leaks, username tracking",
+	custom: "Custom — configure your own tools and system prompt"
+};
+const MODE_SYSTEM_PROMPTS = {
+	recon: `You are a professional OSINT analyst specializing in passive reconnaissance.
+Your goal is to gather publicly available information about the target without triggering detection.
+Use DNS lookups, WHOIS data, web scraping, and public databases.
+Always cite sources and stay within legal boundaries.
+Never attempt active exploitation — only passive information gathering.`,
+	bugbounty: `You are an experienced bug bounty hunter working within an authorized scope.
+Your goal is to identify security vulnerabilities in web applications and infrastructure.
+Follow responsible disclosure principles. Report findings clearly with reproduction steps.
+Focus on: XSS, SQLi, SSRF, authentication issues, business logic flaws, IDOR.
+Use tools methodically. Document everything for your report.`,
+	pentest: `You are a professional penetration tester with explicit written authorization.
+Conduct a thorough security assessment following the PTES methodology.
+Phases: Intelligence Gathering → Scanning → Exploitation → Post-Exploitation → Reporting.
+Document all findings with CVSS scores. Stay within defined scope at all times.
+Never exfiltrate real data — only demonstrate access.`,
+	footprint: `You are a digital forensics investigator mapping a target's online presence.
+Your goal is to build a comprehensive profile using only public sources.
+Search social media, data breach databases (HaveIBeenPwned, Dehashed), LinkedIn, GitHub.
+Create a timeline of online activity. Identify connected accounts, email patterns, usernames.
+This is for defensive intelligence gathering and authorized investigations only.`,
+	custom: `You are a security researcher with access to OSINT and analysis tools.
+Use available tools to assist with the research task.`
+};
+const MODE_MCP_SERVERS = {
+	recon: ["mcp-browser", "mcp-filesystem"],
+	bugbounty: [
+		"mcp-browser",
+		"mcp-filesystem",
+		"mcp-github"
+	],
+	pentest: [
+		"mcp-browser",
+		"mcp-filesystem",
+		"mcp-terminal",
+		"mcp-github"
+	],
+	footprint: ["mcp-browser", "mcp-filesystem"],
+	custom: ["mcp-browser", "mcp-filesystem"]
+};
+function printBanner() {
+	console.log();
+	console.log(chalk.default.red.bold("  ██████╗ ███████╗██╗███╗   ██╗████████╗"));
+	console.log(chalk.default.red.bold("  ██╔═══██╗██╔════╝██║████╗  ██║╚══██╔══╝"));
+	console.log(chalk.default.yellow.bold("  ██║   ██║███████╗██║██╔██╗ ██║   ██║   "));
+	console.log(chalk.default.yellow.bold("  ██║   ██║╚════██║██║██║╚██╗██║   ██║   "));
+	console.log(chalk.default.red.bold("  ╚██████╔╝███████║██║██║ ╚████║   ██║   "));
+	console.log(chalk.default.red.bold("   ╚═════╝ ╚══════╝╚═╝╚═╝  ╚═══╝   ╚═╝   "));
+	console.log();
+	console.log(chalk.default.gray("  HyperClaw OSINT / Ethical Hacking Mode"));
+	console.log(chalk.default.gray("  ────────────────────────────────────────────"));
+	console.log(chalk.default.yellow("  ⚠️  For authorized security research only."));
+	console.log(chalk.default.yellow("  ⚠️  Always have explicit written permission."));
+	console.log();
+}
+async function osintSetup(options) {
+	printBanner();
+	if (options.show) {
+		try {
+			const profile$1 = await fs_extra.default.readJson(getOsintProfileFile());
+			console.log(chalk.default.cyan.bold("  🔍 Current OSINT Profile:\n"));
+			console.log(`  ⚙️  Mode:    ${chalk.default.yellow(profile$1.mode)}`);
+			console.log(`  🎯 Target:  ${chalk.default.white(profile$1.target || "(not set)")}`);
+			console.log(`  🏷️  Type:    ${profile$1.targetType || "N/A"}`);
+			console.log(`  🔌 MCP:     ${profile$1.mcpServers.join(", ")}`);
+			console.log(`  🕐 Created: ${profile$1.createdAt}`);
+			if (profile$1.notes) console.log(`  📝 Notes:   ${profile$1.notes}`);
+			console.log();
+		} catch {
+			console.log(chalk.default.gray("  ℹ️  No OSINT profile saved yet. Run: hyperclaw osint setup\n"));
+		}
+		return;
+	}
+	if (options.reset) {
+		await fs_extra.default.remove(getOsintProfileFile());
+		const osintActivePath = path.default.join(require_paths.getHyperClawDir(), "OSINT-ACTIVE.md");
+		await fs_extra.default.remove(osintActivePath).catch(() => {});
+		console.log(chalk.default.green("  🧹 OSINT profile cleared.\n"));
+		return;
+	}
+	console.log(chalk.default.bold("  🔍 Select OSINT workflow:\n"));
+	for (const [mode$1, desc] of Object.entries(MODE_DESCRIPTIONS)) console.log(`  ${chalk.default.cyan(mode$1.padEnd(12))} ${chalk.default.gray(desc)}`);
+	console.log();
+	const { mode } = await inquirer.default.prompt([{
+		type: "list",
+		name: "mode",
+		message: "Workflow:",
+		choices: Object.keys(MODE_DESCRIPTIONS).map((m) => ({
+			name: `${m.padEnd(12)} — ${MODE_DESCRIPTIONS[m]}`,
+			value: m
+		})),
+		default: options.mode || "recon"
+	}]);
+	const { hasTarget } = await inquirer.default.prompt([{
+		type: "confirm",
+		name: "hasTarget",
+		message: "Set a target for this session?",
+		default: true
+	}]);
+	let target;
+	let targetType;
+	if (hasTarget) {
+		const resp = await inquirer.default.prompt([{
+			type: "list",
+			name: "targetType",
+			message: "Target type:",
+			choices: [
+				"domain",
+				"ip",
+				"username",
+				"email",
+				"org",
+				"custom"
+			]
+		}, {
+			type: "input",
+			name: "target",
+			message: "Target value (e.g. example.com):",
+			validate: (v) => v.trim().length > 0 || "Required"
+		}]);
+		target = resp.target.trim();
+		targetType = resp.targetType;
+	}
+	const { notes } = await inquirer.default.prompt([{
+		type: "input",
+		name: "notes",
+		message: "Session notes (optional, e.g. \"HackerOne program XYZ\"):"
+	}]);
+	console.log();
+	const { confirmed } = await inquirer.default.prompt([{
+		type: "confirm",
+		name: "confirmed",
+		message: chalk.default.yellow("I confirm I have explicit written authorization to test this target."),
+		default: false
+	}]);
+	if (!confirmed) {
+		console.log(chalk.default.red("\n  🚫 Aborted. OSINT mode requires authorization confirmation.\n"));
+		return;
+	}
+	const spinner = (0, ora.default)("⚙️  Applying OSINT configuration...").start();
+	const mcpServers = MODE_MCP_SERVERS[mode];
+	const systemPrompt = MODE_SYSTEM_PROMPTS[mode];
+	const profile = {
+		mode,
+		target,
+		targetType,
+		notes: notes || void 0,
+		createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+		mcpServers,
+		systemPromptOverride: systemPrompt
+	};
+	await fs_extra.default.ensureDir(require_paths.getHyperClawDir());
+	await fs_extra.default.writeJson(getOsintProfileFile(), profile, { spaces: 2 });
+	let config = {};
+	try {
+		config = await fs_extra.default.readJson(getConfigFile());
+	} catch {}
+	if (!config.agent) config.agent = {};
+	const agent = config.agent;
+	agent.systemPromptOverride = systemPrompt;
+	agent.osintMode = mode;
+	if (target) agent.osintTarget = `${targetType}: ${target}`;
+	const mcpFile = path.default.join(require_paths.getHyperClawDir(), "mcp-servers.json");
+	let mcpServersJson = [];
+	try {
+		mcpServersJson = await fs_extra.default.readJson(mcpFile);
+	} catch {}
+	const extensionsDir = path.default.join(path.default.dirname(getConfigFile()), "..", "..");
+	const serverDefs = {
+		"mcp-filesystem": {
+			command: `node ${path.default.join(process.cwd(), "extensions/mcp-filesystem/server.mjs")}`,
+			label: "Filesystem (OSINT)"
+		},
+		"mcp-browser": {
+			command: `node ${path.default.join(process.cwd(), "extensions/mcp-browser/server.mjs")}`,
+			label: "Browser/Web (OSINT)"
+		},
+		"mcp-terminal": {
+			command: `node ${path.default.join(process.cwd(), "extensions/mcp-terminal/server.mjs")}`,
+			label: "Terminal (OSINT)"
+		},
+		"mcp-github": {
+			command: `node ${path.default.join(process.cwd(), "extensions/mcp-github/server.mjs")}`,
+			label: "GitHub (OSINT)"
+		}
+	};
+	for (const serverId of mcpServers) {
+		const already = mcpServersJson.find((s) => s.id === serverId);
+		if (!already && serverDefs[serverId]) mcpServersJson.push({
+			id: serverId,
+			name: serverDefs[serverId].label,
+			transport: "stdio",
+			command: serverDefs[serverId].command,
+			enabled: true,
+			addedAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+		else if (already) already.enabled = true;
+	}
+	await fs_extra.default.ensureDir(path.default.dirname(mcpFile));
+	await fs_extra.default.writeJson(mcpFile, mcpServersJson, { spaces: 2 });
+	await fs_extra.default.writeJson(getConfigFile(), config, { spaces: 2 });
+	spinner.succeed("✅ OSINT configuration applied");
+	console.log();
+	console.log(chalk.default.bold.red("  🩸 OSINT mode ready:"));
+	console.log(`  ⚙️  Workflow: ${chalk.default.yellow(mode)}`);
+	if (target) console.log(`  🎯 Target:   ${chalk.default.white(target)} ${chalk.default.gray(`(${targetType})`)}`);
+	console.log(`  🔌 MCP:      ${chalk.default.cyan(mcpServers.join(", "))}`);
+	console.log();
+	const { launchNow } = await inquirer.default.prompt([{
+		type: "confirm",
+		name: "launchNow",
+		message: chalk.default.red("🔍 Launch OSINT chat session now?"),
+		default: true
+	}]);
+	if (!launchNow) {
+		console.log(chalk.default.gray("\n  🚀 Run: hyperclaw osint chat  — to start your session later."));
+		console.log(chalk.default.gray("  👁️  To view profile: hyperclaw osint --show"));
+		console.log(chalk.default.gray("  🧹 To reset:        hyperclaw osint --reset\n"));
+		return;
+	}
+	const { runOsintChat } = await Promise.resolve().then(() => require("./osint-chat-C-9FVAkU.js"));
+	await runOsintChat({});
+}
+async function osintQuickStart(mode) {
+	printBanner();
+	console.log(chalk.default.bold("  🔍 Available OSINT workflows:\n"));
+	const workflowEmojis = {
+		recon: "🌐",
+		bugbounty: "🐛",
+		pentest: "🔭",
+		footprint: "👤",
+		custom: "🔧"
+	};
+	for (const [m, desc] of Object.entries(MODE_DESCRIPTIONS)) {
+		const isActive = m === mode;
+		const bullet = isActive ? chalk.default.green("▶") : chalk.default.gray("○");
+		const emoji = workflowEmojis[m] ?? "•";
+		console.log(`  ${bullet} ${emoji} ${chalk.default.cyan(m.padEnd(12))} ${chalk.default.white(desc)}`);
+	}
+	console.log();
+	console.log(chalk.default.bold("  📋 Commands:\n"));
+	console.log(`  ${chalk.default.cyan("hyperclaw osint setup")}           — ⚙️  interactive OSINT session setup`);
+	console.log(`  ${chalk.default.cyan("hyperclaw osint chat")}            — 💬 start OSINT chat session`);
+	console.log(`  ${chalk.default.cyan("hyperclaw osint --show")}          — 👁️  show current profile`);
+	console.log(`  ${chalk.default.cyan("hyperclaw osint --reset")}         — 🧹 clear OSINT profile`);
+	console.log();
+	console.log(chalk.default.bold.red("  🩸 Daemon mode (full shell/tool access):\n"));
+	console.log(`  ${chalk.default.gray("1.")} ${chalk.default.cyan("hyperclaw daemon start")}          — 🩸 start the daemon (keep running)`);
+	console.log(`  ${chalk.default.gray("2.")} ${chalk.default.cyan("hyperclaw osint chat")}            — 🔍 auto-connects to daemon`);
+	console.log(`  ${chalk.default.gray("   ")} ${chalk.default.gray("🔧 Gives: nmap, curl, dig, whois, msfconsole, dirb, nikto, sqlmap...")}`);
+	console.log();
+	console.log(chalk.default.bold("  🔌 MCP servers for OSINT:\n"));
+	console.log(`  ${chalk.default.cyan("mcp-browser")}    — 🌐 web_fetch, web_search, dns_lookup, whois_lookup, extract_links`);
+	console.log(`  ${chalk.default.cyan("mcp-filesystem")} — 📁 read_file, write_file, search_files (for saving reports)`);
+	console.log(`  ${chalk.default.cyan("mcp-github")}     — 🐙 list_repos, search_code, get_file`);
+	console.log(`  ${chalk.default.cyan("mcp-terminal")}   — 💻 run_command (pentest mode only, requires authorization)`);
+	console.log();
+	console.log(chalk.default.yellow("  ⚠️  Always operate within authorized scope and applicable laws.\n"));
+}
+
+//#endregion
+exports.osintQuickStart = osintQuickStart;
+exports.osintSetup = osintSetup;