@agenticmail/claudecode 0.2.14 → 0.2.16

package/dist/{chunk-US5FT2UB.js → chunk-7DGWW72Q.js}

@@ -1,7 +1,25 @@
 // src/claude-config.ts
 import { existsSync, mkdirSync, readFileSync, writeFileSync, renameSync } from "fs";
-import { dirname } from "path";
+import { dirname, isAbsolute, resolve, sep } from "path";
+import { homedir, tmpdir } from "os";
+function assertSafeConfigPath(path) {
+  if (!path || typeof path !== "string") {
+    throw new Error("claude config path is required");
+  }
+  if (!isAbsolute(path)) {
+    throw new Error(`refusing relative claude config path: ${path}`);
+  }
+  const resolved = resolve(path);
+  const home = resolve(homedir());
+  const tmp = resolve(tmpdir());
+  const insideHome = resolved === home || resolved.startsWith(home + sep);
+  const insideTmp = resolved === tmp || resolved.startsWith(tmp + sep);
+  if (!insideHome && !insideTmp) {
+    throw new Error(`refusing claude config write outside of HOME or tmp: ${path}`);
+  }
+}
 function readClaudeConfig(path) {
+  assertSafeConfigPath(path);
   if (!existsSync(path)) return {};
   const raw = readFileSync(path, "utf-8");
   if (!raw.trim()) return {};
@@ -16,6 +34,7 @@ function readClaudeConfig(path) {
   }
 }
 function writeClaudeConfig(path, config) {
+  assertSafeConfigPath(path);
   const dir = dirname(path);
   if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
   const text = JSON.stringify(config, null, 2) + "\n";

package/dist/{chunk-IMSFAZWV.js → chunk-IXYJ4O5M.js}

@@ -1,15 +1,15 @@
 import {
   status
-} from "./chunk-PDJOVOWH.js";
+} from "./chunk-XOTADT55.js";
 import {
   uninstall
-} from "./chunk-UGB5UEYX.js";
+} from "./chunk-WNHGDCTG.js";
 import {
   install
-} from "./chunk-KQ3FJTHT.js";
+} from "./chunk-L35WA2XT.js";
 import {
   AgenticMailApiError
-} from "./chunk-GVR4HTBB.js";
+} from "./chunk-V62JPM5R.js";
 
 // src/http-routes.ts
 import { Router } from "express";

package/dist/{chunk-QSOMPN2D.js → chunk-KRB453TM.js}

@@ -4,13 +4,13 @@ import {
   listPendingTasksForAgent,
   renderPersonaBody,
   resolveConfig
-} from "./chunk-GVR4HTBB.js";
+} from "./chunk-V62JPM5R.js";
 
 // src/persona-loader.ts
 import { existsSync, readFileSync } from "fs";
 import { join } from "path";
 function sanitizeSubagentName(name) {
-  return name.toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "");
+  return name.toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^-+/, "").replace(/-+$/, "");
 }
 function stripFrontmatter(raw) {
   const text = raw.replace(/\r\n/g, "\n");

package/dist/{chunk-KQ3FJTHT.js → chunk-L35WA2XT.js}

@@ -1,10 +1,10 @@
 import {
   upsertUserPromptSubmitHook
-} from "./chunk-LO5EQSQA.js";
+} from "./chunk-SWDS64K2.js";
 import {
   startDispatcher,
   upsertMcpServer
-} from "./chunk-US5FT2UB.js";
+} from "./chunk-7DGWW72Q.js";
 import {
   MANAGED_BY_MARKER,
   checkApiHealth,
@@ -14,14 +14,14 @@ import {
   resolveConfig,
   setAccountHost,
   setAccountRole
-} from "./chunk-GVR4HTBB.js";
+} from "./chunk-V62JPM5R.js";
 
 // src/install.ts
 import { existsSync, mkdirSync, readdirSync, writeFileSync, readFileSync, unlinkSync } from "fs";
-import { join } from "path";
+import { safeJoin, tryJoin, PathTraversalError } from "@agenticmail/core";
 import { fileURLToPath } from "url";
 function sanitizeSubagentName(name) {
-  return name.toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "");
+  return name.toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^-+/, "").replace(/-+$/, "");
 }
 function buildMcpEntry(cfg, bridgeKey, accountKeys) {
   const env = {
@@ -71,7 +71,13 @@ function writeSubagentFiles(agentsDir, cfg, agents) {
   const updated = [];
   for (const agent of agents) {
     const baseName = sanitizeSubagentName(`${cfg.subagentPrefix}${agent.name}`);
-    const filePath = join(agentsDir, `${baseName}.md`);
+    let filePath;
+    try {
+      filePath = safeJoin(agentsDir, `${baseName}.md`);
+    } catch (err) {
+      if (err instanceof PathTraversalError) continue;
+      throw err;
+    }
     const content = renderSubagentMarkdown({
       name: baseName,
       agent,
@@ -94,8 +100,8 @@ function pruneStaleSubagentFiles(agentsDir, cfg, liveAgentNames) {
   for (const file of readdirSync(agentsDir)) {
     if (!file.endsWith(".md")) continue;
     if (!file.toLowerCase().startsWith(prefix)) continue;
-    const full = join(agentsDir, file);
-    if (!isOwnedSubagent(full)) continue;
+    const full = tryJoin(agentsDir, file);
+    if (!full || !isOwnedSubagent(full)) continue;
     const stem = file.slice(prefix.length, -3);
     if (liveAgentNames.has(stem.toLowerCase())) continue;
     try {

package/dist/{chunk-LO5EQSQA.js → chunk-SWDS64K2.js}

@@ -1,6 +1,23 @@
 // src/claude-hooks-config.ts
 import { existsSync, mkdirSync, readFileSync, writeFileSync, renameSync } from "fs";
-import { dirname } from "path";
+import { dirname, isAbsolute, resolve, sep } from "path";
+import { homedir, tmpdir } from "os";
+function assertSafeHooksPath(path) {
+  if (!path || typeof path !== "string") {
+    throw new Error("claude hooks path is required");
+  }
+  if (!isAbsolute(path)) {
+    throw new Error(`refusing relative claude hooks path: ${path}`);
+  }
+  const resolved = resolve(path);
+  const home = resolve(homedir());
+  const tmp = resolve(tmpdir());
+  const insideHome = resolved === home || resolved.startsWith(home + sep);
+  const insideTmp = resolved === tmp || resolved.startsWith(tmp + sep);
+  if (!insideHome && !insideTmp) {
+    throw new Error(`refusing claude hooks write outside of HOME or tmp: ${path}`);
+  }
+}
 function isAgenticMailHookCommand(command) {
   if (typeof command !== "string") return false;
   return command.includes("agenticmail-mail-hook") || command.includes("mail-hook.js");
@@ -8,6 +25,7 @@ function isAgenticMailHookCommand(command) {
 var HOOK_EVENTS_TO_REGISTER = ["UserPromptSubmit", "Stop", "SessionStart"];
 var HOOK_EVENTS_TO_REMOVE = ["UserPromptSubmit", "Stop", "PreToolUse", "SessionStart"];
 function readSettings(path) {
+  assertSafeHooksPath(path);
   if (!existsSync(path)) return {};
   const raw = readFileSync(path, "utf-8");
   if (!raw.trim()) return {};
@@ -22,6 +40,7 @@ function readSettings(path) {
   }
 }
 function writeSettings(path, settings) {
+  assertSafeHooksPath(path);
   const dir = dirname(path);
   if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
   const text = JSON.stringify(settings, null, 2) + "\n";

package/dist/{chunk-GVR4HTBB.js → chunk-V62JPM5R.js}

@@ -1,4 +1,5 @@
 // src/api.ts
+import { validateApiUrl, buildApiUrl } from "@agenticmail/core";
 var AgenticMailApiError = class extends Error {
   constructor(status, message) {
     super(message);
@@ -10,7 +11,7 @@ async function request(apiUrl, masterKey, path, opts = {}) {
   if (!masterKey) {
     throw new AgenticMailApiError(0, "AgenticMail master key is required \u2014 could not find one in ~/.agenticmail/config.json.");
   }
-  const url = `${apiUrl.replace(/\/$/, "")}/api/agenticmail${path}`;
+  const url = buildApiUrl(validateApiUrl(apiUrl), `/api/agenticmail${path}`);
   const headers = { "Authorization": `Bearer ${masterKey}` };
   if (opts.body !== void 0) headers["Content-Type"] = "application/json";
   let res;
@@ -40,7 +41,7 @@ async function request(apiUrl, masterKey, path, opts = {}) {
   return await res.json();
 }
 async function checkApiHealth(apiUrl) {
-  const url = `${apiUrl.replace(/\/$/, "")}/api/agenticmail/health`;
+  const url = buildApiUrl(validateApiUrl(apiUrl), "/api/agenticmail/health");
   try {
     const res = await fetch(url, { signal: AbortSignal.timeout(5e3) });
     if (!res.ok) throw new AgenticMailApiError(res.status, `Health check returned HTTP ${res.status}`);

package/dist/{chunk-UGB5UEYX.js → chunk-WNHGDCTG.js}

@@ -1,20 +1,20 @@
 import {
   removeUserPromptSubmitHook
-} from "./chunk-LO5EQSQA.js";
+} from "./chunk-SWDS64K2.js";
 import {
   removeMcpServer,
   stopDispatcher
-} from "./chunk-US5FT2UB.js";
+} from "./chunk-7DGWW72Q.js";
 import {
   MANAGED_BY_MARKER,
   deleteAccount,
   getAccountByName,
   resolveConfig
-} from "./chunk-GVR4HTBB.js";
+} from "./chunk-V62JPM5R.js";
 
 // src/uninstall.ts
 import { existsSync, readdirSync, readFileSync, unlinkSync } from "fs";
-import { join } from "path";
+import { tryJoin } from "@agenticmail/core";
 function removeOwnedSubagents(agentsDir, prefix) {
   if (!existsSync(agentsDir)) return [];
   const safePrefix = prefix.toLowerCase();
@@ -22,7 +22,8 @@ function removeOwnedSubagents(agentsDir, prefix) {
   for (const file of readdirSync(agentsDir)) {
     if (!file.endsWith(".md")) continue;
     if (!file.toLowerCase().startsWith(safePrefix)) continue;
-    const full = join(agentsDir, file);
+    const full = tryJoin(agentsDir, file);
+    if (!full) continue;
     let head;
     try {
       head = readFileSync(full, "utf-8").slice(0, 1024);

package/dist/{chunk-PDJOVOWH.js → chunk-XOTADT55.js}

@@ -1,13 +1,13 @@
 import {
   getDispatcherStatus,
   readClaudeConfig
-} from "./chunk-US5FT2UB.js";
+} from "./chunk-7DGWW72Q.js";
 import {
   AgenticMailApiError,
   MANAGED_BY_MARKER,
   getAccountByName,
   resolveConfig
-} from "./chunk-GVR4HTBB.js";
+} from "./chunk-V62JPM5R.js";
 
 // src/status.ts
 import { existsSync, readFileSync, readdirSync } from "fs";

package/dist/cli.js

@@ -6,21 +6,21 @@ import {
 } from "./chunk-B5JDOV32.js";
 import {
   status
-} from "./chunk-PDJOVOWH.js";
+} from "./chunk-XOTADT55.js";
 import {
   uninstall
-} from "./chunk-UGB5UEYX.js";
+} from "./chunk-WNHGDCTG.js";
 import {
   install
-} from "./chunk-KQ3FJTHT.js";
-import "./chunk-LO5EQSQA.js";
-import "./chunk-US5FT2UB.js";
+} from "./chunk-L35WA2XT.js";
+import "./chunk-SWDS64K2.js";
+import "./chunk-7DGWW72Q.js";
 import {
   AgenticMailApiError,
   listAccounts,
   resolveConfig,
   setAccountHost
-} from "./chunk-GVR4HTBB.js";
+} from "./chunk-V62JPM5R.js";
 
 // src/cli.ts
 var GREEN = (s) => `\x1B[32m${s}\x1B[0m`;

package/dist/dispatcher-bin.js

@@ -4,8 +4,8 @@ import {
 } from "./chunk-B5JDOV32.js";
 import {
   Dispatcher
-} from "./chunk-QSOMPN2D.js";
-import "./chunk-GVR4HTBB.js";
+} from "./chunk-KRB453TM.js";
+import "./chunk-V62JPM5R.js";
 
 // src/dispatcher-bin.ts
 async function main() {

package/dist/dispatcher.js

@@ -1,7 +1,7 @@
 import {
   Dispatcher
-} from "./chunk-QSOMPN2D.js";
-import "./chunk-GVR4HTBB.js";
+} from "./chunk-KRB453TM.js";
+import "./chunk-V62JPM5R.js";
 export {
   Dispatcher
 };

package/dist/http-routes.js

@@ -1,12 +1,12 @@
 import {
   createIntegrationRoutes
-} from "./chunk-IMSFAZWV.js";
-import "./chunk-PDJOVOWH.js";
-import "./chunk-UGB5UEYX.js";
-import "./chunk-KQ3FJTHT.js";
-import "./chunk-LO5EQSQA.js";
-import "./chunk-US5FT2UB.js";
-import "./chunk-GVR4HTBB.js";
+} from "./chunk-IXYJ4O5M.js";
+import "./chunk-XOTADT55.js";
+import "./chunk-WNHGDCTG.js";
+import "./chunk-L35WA2XT.js";
+import "./chunk-SWDS64K2.js";
+import "./chunk-7DGWW72Q.js";
+import "./chunk-V62JPM5R.js";
 export {
   createIntegrationRoutes
 };

package/dist/index.js

@@ -6,21 +6,21 @@ import {
 import {
   Dispatcher,
   loadPersonaForAgent
-} from "./chunk-QSOMPN2D.js";
+} from "./chunk-KRB453TM.js";
 import {
   createIntegrationRoutes
-} from "./chunk-IMSFAZWV.js";
+} from "./chunk-IXYJ4O5M.js";
 import {
   status
-} from "./chunk-PDJOVOWH.js";
+} from "./chunk-XOTADT55.js";
 import {
   uninstall
-} from "./chunk-UGB5UEYX.js";
+} from "./chunk-WNHGDCTG.js";
 import {
   install
-} from "./chunk-KQ3FJTHT.js";
-import "./chunk-LO5EQSQA.js";
-import "./chunk-US5FT2UB.js";
+} from "./chunk-L35WA2XT.js";
+import "./chunk-SWDS64K2.js";
+import "./chunk-7DGWW72Q.js";
 import {
   AgenticMailApiError,
   MANAGED_BY_MARKER,
@@ -32,7 +32,7 @@ import {
   renderPersonaBody,
   renderSubagentMarkdown,
   resolveConfig
-} from "./chunk-GVR4HTBB.js";
+} from "./chunk-V62JPM5R.js";
 export {
   AgenticMailApiError,
   Dispatcher,

package/dist/install.js

@@ -1,10 +1,10 @@
 import {
   install,
   selectExposableAgents
-} from "./chunk-KQ3FJTHT.js";
-import "./chunk-LO5EQSQA.js";
-import "./chunk-US5FT2UB.js";
-import "./chunk-GVR4HTBB.js";
+} from "./chunk-L35WA2XT.js";
+import "./chunk-SWDS64K2.js";
+import "./chunk-7DGWW72Q.js";
+import "./chunk-V62JPM5R.js";
 export {
   install,
   selectExposableAgents

package/dist/status.js

@@ -1,8 +1,8 @@
 import {
   status
-} from "./chunk-PDJOVOWH.js";
-import "./chunk-US5FT2UB.js";
-import "./chunk-GVR4HTBB.js";
+} from "./chunk-XOTADT55.js";
+import "./chunk-7DGWW72Q.js";
+import "./chunk-V62JPM5R.js";
 export {
   status
 };

package/dist/uninstall.js

@@ -1,9 +1,9 @@
 import {
   uninstall
-} from "./chunk-UGB5UEYX.js";
-import "./chunk-LO5EQSQA.js";
-import "./chunk-US5FT2UB.js";
-import "./chunk-GVR4HTBB.js";
+} from "./chunk-WNHGDCTG.js";
+import "./chunk-SWDS64K2.js";
+import "./chunk-7DGWW72Q.js";
+import "./chunk-V62JPM5R.js";
 export {
   uninstall
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/claudecode",
-  "version": "0.2.14",
+  "version": "0.2.16",
   "description": "Claude Code integration for AgenticMail — surfaces every AgenticMail agent as a native Claude Code subagent so any Claude Code session can delegate to them with the Agent tool",
   "type": "module",
   "main": "dist/index.js",
@@ -47,8 +47,8 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@agenticmail/core": "^0.9.4",
-    "@agenticmail/mcp": "^0.9.4",
+    "@agenticmail/core": "^0.9.5",
+    "@agenticmail/mcp": "^0.9.6",
     "@anthropic-ai/claude-agent-sdk": "^0.2.140"
   },
   "peerDependencies": {