hyper

Closes #6153 Summary handle OSC 52 system clipboard writes through the xterm.js parser API decode UTF-8 clipboard data and write it through Electron host clipboard API ignore clipboard reads, non-system selections, and malformed payloads add focused unit coverage Context Herdr and other remote terminal tools use OSC 52 to transfer copied text to the attaching terminal. Hyper currently uses xterm.js 5.3.0 but does not register an OSC 52 handler. xterm.js added the parser and clipboard addon support in xtermjs/xterm.js#4220. This integrates Hyper existing Electron clipboard API directly with the parser hook, without changing Herdr WSL clipboard routing or migrating Hyper existing xterm dependency set. Testing pnpm run test:unit (12 passed) focused ESLint check (pass) focused Prettier check (pass)

First, thank you to everyone who created and maintained Hyper. Hyper proved that a terminal built with web technologies could be beautiful, extensible, cross-platform, and genuinely enjoyable to use. Hyperia exists because that foundation remains worth carrying forward. We are grateful to Hyper's maintainers, contributors, plugin authors, issue reporters, and community members for the years of work that made this possible. That said, Hyper has been functionally inactive for an extended period. Sustained product development largely ended in 2023, the last canary release was published in July 2023, and the repository has been effectively dormant since April 2024. Hundreds of valid bug reports and feature requests remain open without a realistic path to implementation or release. We have therefore created Hyperia, an independent, actively maintained continuation based on Hyper's April 18, 2024 canary history. Hyperia is not affiliated with or endorsed by Vercel. It preserves Hyper's license and attribution while continuing development under a new name and repository. We are carrying forward ten high-value areas drawn directly from Hyper's unresolved backlog: Native tab and split-pane reordering Named workspace save, restore, import, and export Clickable file paths with line and column support Warnings before terminating active processes Keyboard, mouse, tmux, and full-screen TUI compatibility A cross-platform accessibility baseline Find-in-pane improvements and large-scrollback performance Startup, focus, tab-switching, and scaling benchmarks Font, ligature, glyph, cursor, and viewport correctness Declarative CLI-driven windows, tabs, panes, and workspaces Beyond the backlog, Hyperia has already shipped active cross-platform releases, custom shell profiles, workspace-oriented pane management, embedded web panes, live CWD and foreground-process tracking, improved split layouts, searchable terminal history, and optional agent-native orchestration through MCP. We will not advertise Hyperia repeatedly across Hyper's backlog or continue posting updates here. Future development, bug reports, feature requests, releases, and discussion belong in the Hyperia repository. The original Hyper issues remain valuable historical records, and we will continue linking to and crediting them from corresponding Hyperia work. But an open backlog without active triage, implementation, or releases is not a roadmap. Users who want a maintained continuation now have one. Thank you again to the Hyper community for building the foundation. We'll take it from here.

Summary Upgrade cross-spawn from 7.0.3 to 7.0.5, 6.0.6 to fix CVE-2024-21538. Vulnerability Description: cross-spawn: regular expression denial of service Evidence Scanner confirmation: trivy rule flagged this pattern. Production code*: This file is in the production codebase, not test-only code. Threat Model Context This is a web application - XSS and injection vulnerabilities can affect end users. Changes Verification [x] Build passes [x] Scanner re-scan confirms fix [x] LLM code review passed This change addresses a pattern flagged by static analysis. The code path handles user-influenced input and the fix reduces the attack surface against both manual and automated exploitation. Automated security fix by OrbisAI Security*