Claude HUD inserted untrusted paths and branch values into terminal hyperlinks without sanitizing control characters. The repair sanitizes display text and validates or encodes hyperlink destinations.

@@ -2,6 +4,13 @@ import { getModelName, getProviderLabel } from '../../stdin.js'; import { getOutputSpeed } from '../../speed-tracker.js';-import { git as gitColor, gitBranch as gitBranchColor, label, model as modelColor, project as projectColor, red, custom as customColor } from '../colors.js';+import { git as gitColor, gitBranch as gitBranchColor, label, model as modelColor, project as projectColor, red, green, yellow, dim, custom as customColor } from '../colors.js';++/** Wrap text in an OSC 8 terminal hyperlink (works in iTerm2, WezTerm, Kitty, Ghostty, etc.) */+function hyperlink(uri: string, text: string): string {+  const ESC = '\x1b';+  const ST = '\\';+  return `${ESC}]8;;${uri}${ESC}${ST}${text}${ESC}]8;;${ESC}${ST}`;

+}  export function renderProjectLine(ctx: RenderContext): string | null {   const display = ctx.config?.display;

@@ -16,0 +35,18 @@+  if (relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative))) {+    return resolvedPath;+  }+  return null;+}++function safeHyperlink(uri: string | undefined | null, text: string): string {+  if (!uri) {+    return text;+  }

++  const sanitizedUri = sanitizeDisplayText(uri);+  try {+    const parsed = new URL(sanitizedUri);+    if (parsed.protocol !== 'https:' && parsed.protocol !== 'file:') {+      return text;+    }+    return hyperlink(parsed.toString(), text);