imtoagent 0.3.23 → 0.3.24

package/bin/imtoagent-real

@@ -14,6 +14,7 @@
 
 import * as fs from 'fs';
 import * as path from 'path';
+import * as readline from 'readline';
 import { spawn, execSync } from 'child_process';
 import { getDataDir } from '../modules/utils/paths';
 
@@ -54,6 +55,15 @@ switch (command) {
     await cmdUpdateBackend(backendType);
     break;
   }
+  case 'uninstall':
+    await cmdUninstall();
+    break;
+  case 'health':
+    await cmdHealth();
+    break;
+  case 'autostart':
+    await cmdAutostart();
+    break;
   case undefined: {
     const dataDir = getDataDir();
     const configPath = path.join(dataDir, 'config.json');
@@ -108,6 +118,12 @@ Usage:
   imtoagent update-system       Upgrade imtoagent itself
   imtoagent update-backend      Upgrade current Bot's backend
   imtoagent update-backend TYPE Upgrade specific backend (codex|claude|opencode)
+  imtoagent uninstall           Uninstall imtoagent (keep data by default)
+  imtoagent uninstall --purge   Uninstall and delete all data
+  imtoagent health              Run comprehensive health check
+  imtoagent autostart enable    Enable auto-start on login (launchd)
+  imtoagent autostart disable   Disable auto-start
+  imtoagent autostart status    Check auto-start status
 
 Data directory: ${getDataDir()}
 `);
@@ -223,6 +239,9 @@ echo $PID`;
     process.exit(1);
   }
 
+  // Non-blocking version check
+  checkForUpdates().then(printUpdateHint).catch(() => {});
+
   // Explicitly exit — Bun may keep event loop alive due to inherited stdio
   process.exit(0);
 }
@@ -616,3 +635,534 @@ async function cmdUpdateBackend(backendType?: 'claude' | 'codex' | 'opencode'):
     process.exit(1);
   }
 }
+
+// ================================================================
+// uninstall — remove imtoagent
+// ================================================================
+async function cmdUninstall(): Promise<void> {
+  const dataDir = getDataDir();
+  const purge = process.argv.includes('--purge');
+  const force = process.argv.includes('--force') || process.argv.includes('-f');
+
+  console.log('\n🗑️  imtoagent Uninstall');
+  console.log(`   Data directory: ${dataDir}`);
+
+  if (!purge && !force) {
+    console.log('\n   ⚠️  This will uninstall the imtoagent npm package but KEEP your data.');
+    console.log(`   Your data in ${dataDir} will be preserved.`);
+    console.log('');
+    console.log('   To also delete all data, use: imtoagent uninstall --purge');
+    console.log('');
+    console.log('   Continue? [y/N]');
+  } else if (purge && !force) {
+    console.log('\n   🔴 This will DELETE all imtoagent data and the npm package.');
+    console.log(`   The following will be permanently removed:`);
+    console.log(`   - Data directory: ${dataDir}`);
+    console.log('   - npm global package: imtoagent');
+    console.log('');
+    console.log('   Continue? [y/N]');
+  } else {
+    console.log('   --force: skipping confirmation\n');
+  }
+
+  // Confirmation
+  if (!force) {
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    const answer = await new Promise<string>((resolve) => {
+      rl.question('   > ', resolve);
+    }).finally(() => rl.close());
+    if (answer.trim().toLowerCase() !== 'y' && answer.trim().toLowerCase() !== 'yes') {
+      console.log('❌ Uninstall cancelled.');
+      return;
+    }
+  }
+
+  // Step 1: Stop gateway if running
+  if (fs.existsSync(PID_FILE)) {
+    const pid = parseInt(fs.readFileSync(PID_FILE, 'utf-8').trim());
+    try {
+      process.kill(pid, 0);
+      console.log(`⏹  Stopping gateway (PID=${pid})...`);
+      process.kill(pid, 'SIGTERM');
+      for (let i = 0; i < 10; i++) {
+        try { process.kill(pid, 0); await new Promise(r => setTimeout(r, 500)); } catch { break; }
+      }
+      try { process.kill(pid, 0); process.kill(pid, 'SIGKILL'); } catch {}
+      console.log('✅ Gateway stopped');
+    } catch {}
+    try { fs.unlinkSync(PID_FILE); } catch {}
+  } else {
+    console.log('ℹ️  Gateway is not running');
+  }
+
+  // Step 2: Remove launchd plist
+  const plistPath = path.join(process.env.HOME || '', 'Library', 'LaunchAgents', 'com.imtoagent.gateway.plist');
+  if (fs.existsSync(plistPath)) {
+    try {
+      execSync(`launchctl unload "${plistPath}" 2>/dev/null`, { encoding: 'utf-8' });
+      console.log('⏹  Launchd service unloaded');
+    } catch {}
+    try {
+      fs.unlinkSync(plistPath);
+      console.log('🗑️  Launchd plist removed');
+    } catch {}
+  } else {
+    console.log('ℹ️  No launchd service configured');
+  }
+
+  // Step 3: Uninstall npm package
+  console.log('\n📦 Uninstalling npm package...');
+  try {
+    execSync('npm uninstall -g imtoagent', {
+      encoding: 'utf-8',
+      stdio: 'inherit',
+      timeout: 30000,
+    });
+    console.log('✅ npm package uninstalled');
+  } catch (e: any) {
+    console.error(`⚠️  npm uninstall may have failed: ${e.message}`);
+  }
+
+  // Step 4: Purge data if requested
+  if (purge) {
+    console.log(`\n🔥 Deleting data directory: ${dataDir}`);
+    try {
+      execSync(`rm -rf "${dataDir}"`, { encoding: 'utf-8', timeout: 10000 });
+      console.log('✅ Data directory deleted');
+    } catch (e: any) {
+      console.error(`⚠️  Failed to delete data directory: ${e.message}`);
+      console.error(`   Please remove manually: rm -rf "${dataDir}"`);
+    }
+  } else {
+    console.log(`\n💾 Data preserved at: ${dataDir}`);
+    console.log('   To remove it later: rm -rf ~/.imtoagent');
+  }
+
+  console.log('\n✅ imtoagent uninstalled');
+}
+
+// ================================================================
+// health — comprehensive health check
+// ================================================================
+async function cmdHealth(): Promise<void> {
+  const dataDir = getDataDir();
+  const configPath = path.join(dataDir, 'config.json');
+  const logFile = path.join(dataDir, 'logs', 'imtoagent.log');
+
+  console.log(`\n🔍 imtoagent Health Check`);
+  console.log(`   Data directory: ${dataDir}`);
+  console.log(`   Time: ${new Date().toISOString()}\n`);
+
+  let errorCount = 0;
+  let warnCount = 0;
+
+  // ---- 1. Gateway Process ----
+  console.log('── Gateway Process ──');
+  if (fs.existsSync(PID_FILE)) {
+    const pid = parseInt(fs.readFileSync(PID_FILE, 'utf-8').trim());
+    try {
+      process.kill(pid, 0);
+      console.log(`   ✅ Running (PID=${pid})`);
+    } catch {
+      console.log(`   ❌ PID file exists but process ${pid} is gone (stale)`);
+      errorCount++;
+    }
+  } else {
+    console.log(`   ⏸  Not running`);
+  }
+
+  // ---- 2. Configuration ----
+  console.log('\n── Configuration ──');
+  if (fs.existsSync(configPath)) {
+    try {
+      const cfg = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+      console.log(`   ✅ config.json parse OK`);
+
+      // Check required fields
+      if (!cfg.bots || !Array.isArray(cfg.bots) || cfg.bots.length === 0) {
+        console.log(`   ⚠️  No bots configured`);
+        warnCount++;
+      } else {
+        console.log(`   ✅ ${cfg.bots.length} Bot(s) configured`);
+        for (const bot of cfg.bots) {
+          const issues: string[] = [];
+          if (!bot.name) issues.push('missing name');
+          if (!bot.im) issues.push('missing IM platform');
+          if (!bot.backend) issues.push('missing backend');
+          if (issues.length > 0) {
+            console.log(`   ⚠️  Bot "${bot.name || '?'}": ${issues.join(', ')}`);
+            warnCount++;
+          } else {
+            console.log(`   ✅ ${bot.name} (${bot.im} + ${bot.backend})`);
+          }
+        }
+      }
+
+      // Check providers.json
+      const providersPath = path.join(dataDir, 'providers.json');
+      if (fs.existsSync(providersPath)) {
+        try {
+          const prov = JSON.parse(fs.readFileSync(providersPath, 'utf-8'));
+          console.log(`   ✅ providers.json parse OK`);
+          // Check for placeholder API keys
+          const provStr = JSON.stringify(prov);
+          if (provStr.includes('YOUR_') || provStr.includes('sk-xxx') || provStr.includes('placehold')) {
+            console.log(`   ⚠️  providers.json may contain placeholder API keys`);
+            warnCount++;
+          }
+        } catch {
+          console.log(`   ❌ providers.json parse error`);
+          errorCount++;
+        }
+      } else {
+        console.log(`   ⚠️  providers.json not found`);
+        warnCount++;
+      }
+    } catch {
+      console.log(`   ❌ config.json parse error`);
+      errorCount++;
+    }
+  } else {
+    console.log(`   ❌ config.json not found (run "imtoagent setup")`);
+    errorCount++;
+  }
+
+  // ---- 3. Backend Status ----
+  console.log('\n── Backend Status ──');
+  try {
+    const { checkBackend } = await import('../modules/utils/backend-check');
+    if (fs.existsSync(configPath)) {
+      const cfg = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+      const checkedTypes = new Set<string>();
+      for (const bot of cfg.bots || []) {
+        if (bot.backend && ['claude', 'codex', 'opencode'].includes(bot.backend) && !checkedTypes.has(bot.backend)) {
+          checkedTypes.add(bot.backend);
+          const info = checkBackend(bot.backend as any);
+          if (info.installed) {
+            console.log(`   ✅ ${info.label} v${info.version} (${info.installSource})`);
+          } else {
+            console.log(`   ❌ ${info.label} not installed → ${info.installHint}`);
+            errorCount++;
+          }
+        }
+      }
+      if (checkedTypes.size === 0) {
+        console.log(`   ℹ️  No backends to check`);
+      }
+    }
+  } catch {
+    console.log(`   ⚠️  Backend check skipped`);
+    warnCount++;
+  }
+
+  // ---- 4. Proxy Port ----
+  console.log('\n── Proxy Port (:18899) ──');
+  try {
+    const net = await import('net');
+    const checkPort = (port: number): Promise<boolean> => {
+      return new Promise((resolve) => {
+        const socket = new net.Socket();
+        socket.setTimeout(2000);
+        socket.on('connect', () => { socket.destroy(); resolve(true); });
+        socket.on('error', () => resolve(false));
+        socket.on('timeout', () => { socket.destroy(); resolve(false); });
+        socket.connect(port, '127.0.0.1');
+      });
+    };
+    const reachable = await checkPort(18899);
+    if (reachable) {
+      console.log(`   ✅ Port 18899 is reachable`);
+    } else {
+      // Check if port is in use by another process
+      try {
+        const lsofOut = execSync(`lsof -i :18899 2>/dev/null`, { encoding: 'utf-8', timeout: 3000 }).trim();
+        if (lsofOut) {
+          console.log(`   ❌ Port 18899 is occupied by another process:`);
+          lsofOut.split('\n').forEach(line => console.log(`      ${line}`));
+        } else {
+          console.log(`   ⏸  Port 18899 is free (gateway not running)`);
+        }
+      } catch {
+        console.log(`   ⏸  Port 18899 is free (gateway not running)`);
+      }
+    }
+  } catch {
+    console.log(`   ⚠️  Port check failed`);
+    warnCount++;
+  }
+
+  // ---- 5. Recent Log Errors ----
+  console.log('\n── Recent Log Errors ──');
+  if (fs.existsSync(logFile)) {
+    const stats = fs.statSync(logFile);
+    const size = stats.size > 1024 * 1024
+      ? (stats.size / (1024 * 1024)).toFixed(1) + ' MB'
+      : (stats.size / 1024).toFixed(1) + ' KB';
+    console.log(`   Log: ${size}`);
+
+    // Read last 50 lines looking for ERROR/WARN
+    try {
+      const content = fs.readFileSync(logFile, 'utf-8');
+      const lines = content.split('\n');
+      const recent = lines.slice(-50);
+      const errors = recent.filter(l => l.includes('ERROR') || l.includes('[error]'));
+      const warns = recent.filter(l => l.includes('WARN') || l.includes('[warn]'));
+
+      if (errors.length > 0) {
+        console.log(`   ❌ ${errors.length} recent ERROR(s):`);
+        for (const line of errors.slice(-3)) {
+          console.log(`      ${line.trim().slice(0, 120)}`);
+        }
+        errorCount++;
+      } else {
+        console.log(`   ✅ No recent errors`);
+      }
+      if (warns.length > 0 && errors.length === 0) {
+        console.log(`   ℹ️  ${warns.length} recent warning(s) (non-critical)`);
+      }
+    } catch {
+      console.log(`   ⚠️  Could not read log file`);
+      warnCount++;
+    }
+  } else {
+    console.log(`   ℹ️  No log file yet`);
+  }
+
+  // ---- Summary ----
+  console.log('\n── Summary ──');
+  if (errorCount === 0 && warnCount === 0) {
+    console.log(`   ✅ All checks passed!`);
+  } else {
+    if (errorCount > 0) console.log(`   ❌ ${errorCount} error(s)`);
+    if (warnCount > 0) console.log(`   ⚠️  ${warnCount} warning(s)`);
+  }
+  console.log();
+}
+
+// ================================================================
+// autostart — launchd integration (macOS only)
+// ================================================================
+async function cmdAutostart(): Promise<void> {
+  const subcommand = process.argv[3];
+  const home = process.env.HOME || '';
+  const plistDir = path.join(home, 'Library', 'LaunchAgents');
+  const plistPath = path.join(plistDir, 'com.imtoagent.gateway.plist');
+
+  if (process.platform !== 'darwin') {
+    console.error('❌ autostart is only supported on macOS (launchd)');
+    process.exit(1);
+  }
+
+  switch (subcommand) {
+    case 'enable':
+      await cmdAutostartEnable(plistPath, plistDir, home);
+      break;
+    case 'disable':
+      await cmdAutostartDisable(plistPath);
+      break;
+    case 'status':
+      await cmdAutostartStatus(plistPath);
+      break;
+    default:
+      console.log('Usage:');
+      console.log('  imtoagent autostart enable    Enable auto-start on login');
+      console.log('  imtoagent autostart disable   Disable auto-start');
+      console.log('  imtoagent autostart status    Check auto-start status');
+  }
+}
+
+async function cmdAutostartEnable(plistPath: string, plistDir: string, home: string): Promise<void> {
+  const dataDir = getDataDir();
+  const binPath = execSync('command -v imtoagent', { encoding: 'utf-8', timeout: 3000 }).trim();
+
+  if (!binPath) {
+    console.error('❌ Cannot find imtoagent binary');
+    process.exit(1);
+  }
+
+  // Find node and bun paths for launchd (which has minimal PATH)
+  const nodePath = execSync('which node', { encoding: 'utf-8', timeout: 3000 }).trim();
+  const bunPath = execSync('which bun', { encoding: 'utf-8', timeout: 3000 }).trim();
+  const launchdPATH = `${path.dirname(nodePath)}:${path.dirname(bunPath)}:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/opt/homebrew/bin:/opt/homebrew/opt/node@24/bin`;
+
+  const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>Label</key>
+    <string>com.imtoagent.gateway</string>
+    <key>ProgramArguments</key>
+    <array>
+        <string>${binPath}</string>
+        <string>daemon</string>
+    </array>
+    <key>WorkingDirectory</key>
+    <string>${dataDir}</string>
+    <key>EnvironmentVariables</key>
+    <dict>
+        <key>IMTOAGENT_HOME</key>
+        <string>${dataDir}</string>
+        <key>PATH</key>
+        <string>${launchdPATH}</string>
+    </dict>
+    <key>StandardOutPath</key>
+    <string>${path.join(dataDir, 'logs', 'launchd.log')}</string>
+    <key>StandardErrorPath</key>
+    <string>${path.join(dataDir, 'logs', 'launchd-error.log')}</string>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <dict>
+        <key>SuccessfulExit</key>
+        <false/>
+    </dict>
+    <key>ThrottleInterval</key>
+    <integer>30</integer>
+    <key>ProcessType</key>
+    <string>Background</string>
+</dict>
+</plist>
+`;
+
+  fs.mkdirSync(plistDir, { recursive: true });
+  fs.writeFileSync(plistPath, plist);
+  console.log(`✅ Plist written: ${plistPath}`);
+
+  // Unload existing (if any) then reload
+  try { execSync(`launchctl unload "${plistPath}" 2>/dev/null`, { encoding: 'utf-8' }); } catch {}
+
+  try {
+    execSync(`launchctl load "${plistPath}"`, { encoding: 'utf-8', timeout: 5000 });
+    console.log('✅ launchd service loaded');
+  } catch (e: any) {
+    console.error(`⚠️  launchctl load failed: ${e.message}`);
+    console.error('   Plist written. Manual: launchctl load ' + plistPath);
+  }
+
+  console.log(`\n📌 Auto-start enabled. Gateway starts on login.`);
+  console.log(`   Logs: ${path.join(dataDir, 'logs', 'launchd.log')}`);
+}
+
+async function cmdAutostartDisable(plistPath: string): Promise<void> {
+  if (!fs.existsSync(plistPath)) {
+    console.log('ℹ️  No autostart configured');
+    return;
+  }
+
+  try {
+    execSync(`launchctl unload "${plistPath}" 2>/dev/null`, { encoding: 'utf-8', timeout: 5000 });
+    console.log('✅ launchd service unloaded');
+  } catch {
+    console.log('ℹ️  Service was not loaded');
+  }
+
+  try {
+    fs.unlinkSync(plistPath);
+    console.log('✅ Plist removed');
+  } catch (e: any) {
+    console.error(`⚠️  Failed to remove plist: ${e.message}`);
+  }
+
+  console.log('\n📌 Auto-start disabled');
+}
+
+async function cmdAutostartStatus(plistPath: string): Promise<void> {
+  const exists = fs.existsSync(plistPath);
+  console.log(`\n📌 Autostart Status`);
+  console.log(`   Plist file: ${plistPath}`);
+  console.log(`   Installed: ${exists ? '✅ Yes' : '❌ No'}`);
+
+  if (exists) {
+    try {
+      const out = execSync(`launchctl list | grep com.imtoagent`, { encoding: 'utf-8', timeout: 3000 }).trim();
+      console.log(`   Running: ${out ? '✅ Yes' : '❌ No (plist exists but not loaded)'}`);
+      if (out) console.log(`   ${out}`);
+    } catch {
+      console.log(`   Running: ❌ No`);
+    }
+  }
+  console.log();
+}
+
+// ================================================================
+// version-check — non-blocking npm registry check
+// ================================================================
+
+/**
+ * Check if a newer version is available on npm.
+ * Returns null if check fails or no update available.
+ * Caches result for 24 hours.
+ */
+async function checkForUpdates(): Promise<string | null> {
+  const dataDir = getDataDir();
+  const cacheFile = path.join(dataDir, '.last-version-check');
+  const pkg = JSON.parse(fs.readFileSync(new URL('../package.json', import.meta.url), 'utf-8'));
+  const currentVer = pkg.version;
+
+  // Check cache (24h TTL)
+  try {
+    if (fs.existsSync(cacheFile)) {
+      const cached = JSON.parse(fs.readFileSync(cacheFile, 'utf-8'));
+      const ageMs = Date.now() - cached.timestamp;
+      if (ageMs < 24 * 60 * 60 * 1000) {
+        // Cache hit — return stored result
+        if (cached.latest && cached.latest !== currentVer) {
+          return cached.latest;
+        }
+        return null;
+      }
+    }
+  } catch {}
+
+  // Fetch from npm registry (3s timeout, npmmirror for China)
+  try {
+    const http = await import('http');
+    const https = await import('https');
+
+    const fetchJson = (url: string): Promise<any> => {
+      return new Promise((resolve, reject) => {
+        const client = url.startsWith('https') ? https : http;
+        const req = client.get(url, { timeout: 3000 }, (res) => {
+          let data = '';
+          res.on('data', chunk => data += chunk);
+          res.on('end', () => {
+            try { resolve(JSON.parse(data)); } catch { reject(new Error('parse error')); }
+          });
+        });
+        req.on('error', reject);
+        req.on('timeout', () => { req.destroy(); reject(new Error('timeout')); });
+      });
+    };
+
+    // Try npmmirror first (China-friendly), fallback to npmjs
+    let result: any;
+    try {
+      result = await fetchJson('https://registry.npmmirror.com/imtoagent');
+    } catch {
+      result = await fetchJson('https://registry.npmjs.org/imtoagent');
+    }
+
+    const latest = result['dist-tags']?.latest;
+    if (latest && latest !== currentVer) {
+      // Cache the result
+      fs.writeFileSync(cacheFile, JSON.stringify({ latest, timestamp: Date.now() }));
+      return latest;
+    }
+
+    // Cache "no update" result too
+    fs.writeFileSync(cacheFile, JSON.stringify({ latest: currentVer, timestamp: Date.now() }));
+    return null;
+  } catch {
+    // Silently fail — non-blocking
+    return null;
+  }
+}
+
+/** Print version update hint if available */
+function printUpdateHint(latestVer: string | null): void {
+  if (latestVer) {
+    const pkg = JSON.parse(fs.readFileSync(new URL('../package.json', import.meta.url), 'utf-8'));
+    console.log(`\n⬆️  New version available: ${pkg.version} → ${latestVer}`);
+    console.log(`   Upgrade: imtoagent update-system`);
+  }
+}

package/modules/cli/setup.ts

@@ -91,10 +91,14 @@ async function selectMenu(title: string, options: string[]): Promise<number> {
 }
 
 // ================================================================
-// Text input (Enter confirm, ESC returns -1)
+// Text input (Enter confirm, ESC returns null)
 // ================================================================
 
-async function promptText(label: string, defaultValue = ''): Promise<string> {
+/**
+ * Prompt the user for text input.
+ * @returns The entered string, or `null` if user pressed ESC.
+ */
+async function promptText(label: string, defaultValue = ''): Promise<string | null> {
   const buf: string[] = [];
   const defaultHint = defaultValue ? ` [${defaultValue}]` : '';
 
@@ -110,7 +114,7 @@ async function promptText(label: string, defaultValue = ''): Promise<string> {
         break;
       } else if (key === KEY.ESC) {
         process.stdout.write('\x1B[0K\n');
-        return -1 as unknown as string; // Special return value for ESC
+        return null;
       } else if (key === KEY.BACKSPACE) {
         if (buf.length > 0) {
           buf.pop();
@@ -377,8 +381,18 @@ export async function runSetupWizard(options?: SetupOptions): Promise<void> {
     // 3b: Auto-generate Bot name, customizable
     const defaultName = IM_PLATFORMS[imIdx].label + 'Bot';
     const nameInput = await promptText('Bot name', defaultName);
-    if ((nameInput as any) === -1) { if (bots.length === 0) return; break; } // ESC
-    const botName = nameInput || defaultName; // Use default if empty
+    if (nameInput === null) { if (bots.length === 0) return; break; } // ESC
+    const botName = nameInput || defaultName;
+
+    // Validate Bot name — no whitespace-only, no dangerous characters
+    if (!botName || !/^\S/.test(botName)) {
+      console.log('⚠️  Bot name must not be empty or whitespace-only. Using default.');
+    }
+    // Sanitize: remove characters that would break directory names
+    const sanitized = botName.replace(/[^\w\s.-]/g, '');
+    if (sanitized !== botName) {
+      console.log(`⚠️  Bot name sanitized: "${botName}" → "${sanitized}"`);
+    }
 
     // 3c: Select backend
     const backendLabels = backendStatus.map(b =>
@@ -419,14 +433,24 @@ export async function runSetupWizard(options?: SetupOptions): Promise<void> {
 
     for (const field of fields) {
       const val = await promptText(field.label + (field.required ? '' : ' (optional)'));
-      if ((val as any) === -1) { credentials._escaped = 'true'; break; } // ESC
+      if (val === null) { credentials._escaped = 'true'; break; } // ESC
       credentials[field.key] = val;
     }
     if (credentials._escaped) continue; // ESC go back and re-select backend
 
-    // 3e: Working directory
-    const cwd = await promptText('Working directory', os.homedir());
-    if ((cwd as any) === -1) continue;
+    // 3e: Working directory (validated)
+    let cwd = await promptText('Working directory', os.homedir());
+    if (cwd === null) continue;
+    cwd = cwd.trim() || os.homedir();
+
+    // Validate path — reject obviously invalid / dangerous paths
+    const badPaths = ['/dev/null', '/dev/zero', '/dev/random', '/etc/passwd', '/etc/shadow', '/System'];
+    if (badPaths.some(bp => cwd === bp || cwd.startsWith(bp + '/'))) {
+      console.log(`⚠️  Invalid path "${cwd}". Using home directory instead.`);
+      cwd = os.homedir();
+    }
+    // Resolve to absolute path
+    cwd = path.resolve(cwd);
 
     // Generate unique ID (UUID, for directory isolation, renaming doesn't affect it)
     const botId = randomUUID();
@@ -509,14 +533,22 @@ export async function runSetupWizard(options?: SetupOptions): Promise<void> {
 
     const wsLabels = ['Sandbox mode (isolated per Bot)', 'Global mode (shared root path)'];
     const wsIdx = await selectMenu('Select workspace mode', wsLabels);
-    if (wsIdx === -1) { console.log('\n👋 Cancelled'); process.exit(0); }
+      if (wsIdx === -1) { console.log('\n👋 Cancelled'); process.exit(0); }
     workspaceMode = wsIdx === 1 ? 'global' : 'sandbox';
 
     if (workspaceMode === 'global') {
       const defaultGlobal = os.homedir() + '/imtoagent-workspace';
       const gpInput = await promptText('Global workspace root path', defaultGlobal);
-      if ((gpInput as any) === -1) { console.log('\n👋 Cancelled'); process.exit(0); }
-      workspaceGlobalPath = (gpInput || defaultGlobal).trim();
+      if (gpInput === null) { console.log('\n👋 Cancelled'); process.exit(0); }
+      let resolved = (gpInput || defaultGlobal).trim();
+
+      // Validate path
+      const badPaths = ['/dev/null', '/dev/zero', '/dev/random', '/etc', '/System', '/usr'];
+      if (badPaths.some(bp => resolved === bp || resolved.startsWith(bp + '/'))) {
+        console.log(`⚠️  Invalid path "${resolved}". Using default instead.`);
+        resolved = defaultGlobal;
+      }
+      workspaceGlobalPath = path.resolve(resolved);
     }
 
     const home = process.env.HOME || process.env.USERPROFILE?.replace(/\\/g, '/') || '';
@@ -573,19 +605,27 @@ export async function runSetupWizard(options?: SetupOptions): Promise<void> {
       console.log(`   Format: ${preset.format}`);
       console.log(`   Models: ${preset.models.join(', ')}\n`);
 
-      // Confirm/edit short name
+      // Confirm/edit short name (validate — must be safe JSON key)
       const nameEdit = await promptText('Provider name (leave blank to confirm)', provName);
-      if ((nameEdit as any) === -1) continue;
+      if (nameEdit === null) continue;
       provName = nameEdit || provName;
+      // Sanitize provider name: only alphanumeric, hyphens, underscores
+      const sanitizedProv = provName.replace(/[^a-zA-Z0-9_-]/g, '');
+      if (!sanitizedProv) {
+        console.log('⚠️  Invalid provider name. Using original.');
+      } else if (sanitizedProv !== provName) {
+        console.log(`⚠️  Provider name sanitized: "${provName}" → "${sanitizedProv}"`);
+        provName = sanitizedProv;
+      }
 
       // Confirm/edit Base URL
       const urlEdit = await promptText('Base URL', baseUrl);
-      if ((urlEdit as any) === -1) continue;
+      if (urlEdit === null) continue;
       baseUrl = urlEdit || baseUrl;
 
       // Confirm/edit model list
       const modelsEdit = await promptText('Model list (comma-separated)', models.join(', '));
-      if ((modelsEdit as any) === -1) continue;
+      if (modelsEdit === null) continue;
       if (modelsEdit) models = modelsEdit.split(',').map(s => s.trim()).filter(Boolean);
 
       if (providers[provName]) {
@@ -593,17 +633,18 @@ export async function runSetupWizard(options?: SetupOptions): Promise<void> {
       }
     } else {
       // Custom
-      provName = await promptText('Provider name (e.g. deepseek, dashscope)');
-      if ((provName as any) === -1) { addingProviders = false; continue; }
+      let customName = await promptText('Provider name (e.g. deepseek, dashscope)');
+      if (customName === null) { addingProviders = false; continue; }
+      provName = customName.trim().toLowerCase().replace(/[^a-zA-Z0-9_-]/g, '');
       if (!provName) { addingProviders = false; continue; }
       if (providers[provName]) {
         console.log(`⚠️  Provider "${provName}" already exists, will overwrite\n`);
       }
 
       baseUrl = await promptText('Base URL (e.g. https://api.deepseek.com/v1)');
-      if ((baseUrl as any) === -1) continue;
+      if (baseUrl === null) continue;
       const modelsStr = await promptText('Model list (comma-separated)');
-      if ((modelsStr as any) === -1) continue;
+      if (modelsStr === null) continue;
       models = (modelsStr || '').split(',').map(s => s.trim()).filter(Boolean);
 
       const formatIdx = await selectMenu('API format', ['openai', 'anthropic']);
@@ -613,14 +654,14 @@ export async function runSetupWizard(options?: SetupOptions): Promise<void> {
 
     // API Key (required for all providers)
     const apiKey = await promptText('API Key');
-    if ((apiKey as any) === -1) continue;
+    if (apiKey === null) continue;
     if (!apiKey) {
       console.log('⚠️  API Key is empty, this provider will be temporarily unavailable\n');
     }
 
     // Pricing (optional)
     const priceInput = await promptText('Pricing (in/out per million tokens, e.g. 0.55,2.19, leave blank to skip)');
-    if ((priceInput as any) === -1) continue;
+    if (priceInput === null) continue;
 
     const pricing: any = {};
     if (priceInput) {
@@ -663,10 +704,10 @@ export async function runSetupWizard(options?: SetupOptions): Promise<void> {
   if (allModels.length > 0) {
     const existingDefault = existingConfig?.defaultModel || allModels[0];
     const val = await promptText('Default model', existingDefault);
-    defaultModel = (val as any) === -1 ? existingDefault : (val || existingDefault);
+    defaultModel = val === null ? existingDefault : (val || existingDefault);
   } else {
-    defaultModel = await promptText('Default model (provider/model)') || 'deepseek/deepseek-v4-pro';
-    if ((defaultModel as any) === -1) defaultModel = 'deepseek/deepseek-v4-pro';
+    const val = await promptText('Default model (provider/model)');
+    defaultModel = val === null ? 'deepseek/deepseek-v4-pro' : (val || 'deepseek/deepseek-v4-pro');
   }
 
   // ===== Step 7: Generate soul files =====
@@ -719,6 +760,8 @@ export async function runSetupWizard(options?: SetupOptions): Promise<void> {
 
   fs.mkdirSync(dataDir, { recursive: true });
 
+  // Atomic config write: write to temp file first, then rename.
+  // If the write fails, the original config (if any) is preserved.
   const config: any = {
     system: existingConfig?.system || {
       defaultProjectDir: os.homedir(),
@@ -758,19 +801,42 @@ export async function runSetupWizard(options?: SetupOptions): Promise<void> {
     bots,
   };
 
-  fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n');
-  console.log(`✅ ${configPath}`);
+  // Write to temp file first for atomicity
+  const configTmpPath = configPath + '.tmp';
+  const providersTmpPath = path.join(dataDir, 'providers.json.tmp');
+  let writeOk = true;
 
-  const providersFile: any = { providers, defaultModel, modelAliases: config.modelAliases };
-  const providersPath = path.join(dataDir, 'providers.json');
-  fs.writeFileSync(providersPath, JSON.stringify(providersFile, null, 2) + '\n');
-  console.log(`✅ ${providersPath}`);
+  try {
+    fs.writeFileSync(configTmpPath, JSON.stringify(config, null, 2) + '\n');
+    fs.renameSync(configTmpPath, configPath);
+    console.log(`✅ ${configPath}`);
+  } catch (e: any) {
+    console.error(`❌ Failed to write config.json: ${e.message}`);
+    writeOk = false;
+  }
 
-  const opencodePath = path.join(dataDir, 'opencode.json');
-  const opencodeTemplate = getTemplatePath('opencode.template.json');
-  if (fs.existsSync(opencodeTemplate)) {
-    fs.writeFileSync(opencodePath, fs.readFileSync(opencodeTemplate, 'utf-8'));
-    console.log(`✅ ${opencodePath}`);
+  if (writeOk) {
+    try {
+      const providersFile: any = { providers, defaultModel, modelAliases: config.modelAliases };
+      const providersPath = path.join(dataDir, 'providers.json');
+      fs.writeFileSync(providersTmpPath, JSON.stringify(providersFile, null, 2) + '\n');
+      fs.renameSync(providersTmpPath, providersPath);
+      console.log(`✅ ${providersPath}`);
+    } catch (e: any) {
+      console.error(`❌ Failed to write providers.json: ${e.message}`);
+      console.error('⚠️  config.json was written successfully, but providers.json failed.');
+      console.error('   Please re-run "imtoagent setup" to fix.');
+      writeOk = false;
+    }
+  }
+
+  if (writeOk) {
+    const opencodePath = path.join(dataDir, 'opencode.json');
+    const opencodeTemplate = getTemplatePath('opencode.template.json');
+    if (fs.existsSync(opencodeTemplate)) {
+      fs.writeFileSync(opencodePath, fs.readFileSync(opencodeTemplate, 'utf-8'));
+      console.log(`✅ ${opencodePath}`);
+    }
   }
 
   fs.mkdirSync(path.join(dataDir, 'sessions'), { recursive: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "imtoagent",
-  "version": "0.3.23",
+  "version": "0.3.24",
   "description": "IM ↔ Agent 统一网关 — 飞书/Telegram/微信/企业微信对接 Claude Code/Codex/OpenCode",
   "type": "module",
   "bin": {