@agenticmail/core 0.3.3 → 0.3.4

package/dist/index.d.ts

@@ -230,6 +230,7 @@ declare class StalwartAdmin {
      * Note: stalwart-cli may return a 500 error even when the operation succeeds.
      * We verify by listing the config afterwards.
      */
+    private cliArgs;
     updateSetting(key: string, value: string): Promise<void>;
     /**
      * Set the server hostname used in SMTP EHLO greetings.

package/dist/index.js

@@ -813,24 +813,31 @@ var StalwartAdmin = class {
    * Note: stalwart-cli may return a 500 error even when the operation succeeds.
    * We verify by listing the config afterwards.
    */
-  async updateSetting(key, value) {
-    const { execSync: execSync3 } = await import("child_process");
+  cliArgs() {
     const creds = `${this.options.adminUser}:${this.options.adminPassword}`;
+    return ["exec", "agenticmail-stalwart", "stalwart-cli", "-u", "http://localhost:8080", "-c", creds];
+  }
+  async updateSetting(key, value) {
+    const { execFileSync: execFileSync3 } = await import("child_process");
+    const cli = this.cliArgs();
     try {
-      execSync3(
-        `docker exec agenticmail-stalwart stalwart-cli -u http://localhost:8080 -c ${creds} server delete-config ${key}`,
+      execFileSync3(
+        "docker",
+        [...cli, "server", "delete-config", key],
         { timeout: 15e3, stdio: ["ignore", "pipe", "pipe"] }
       );
     } catch {
     }
     try {
-      execSync3(
-        `docker exec agenticmail-stalwart stalwart-cli -u http://localhost:8080 -c ${creds} server add-config ${key} ${value}`,
+      execFileSync3(
+        "docker",
+        [...cli, "server", "add-config", key, value],
         { timeout: 15e3, stdio: ["ignore", "pipe", "pipe"] }
       );
     } catch {
-      const output = execSync3(
-        `docker exec agenticmail-stalwart stalwart-cli -u http://localhost:8080 -c ${creds} server list-config ${key}`,
+      const output = execFileSync3(
+        "docker",
+        [...cli, "server", "list-config", key],
         { timeout: 15e3, stdio: ["ignore", "pipe", "pipe"] }
       ).toString();
       if (!output.includes(value)) {
@@ -875,16 +882,15 @@ var StalwartAdmin = class {
    * Returns the public key (base64, no headers) for DNS TXT record.
    */
   async createDkimSignature(domain, selector = "agenticmail") {
-    const { execSync: execSync3 } = await import("child_process");
+    const { execFileSync: execFileSync3 } = await import("child_process");
     const signatureId = `agenticmail-${domain.replace(/\./g, "-")}`;
-    const creds = `${this.options.adminUser}:${this.options.adminPassword}`;
-    const cli = `docker exec agenticmail-stalwart stalwart-cli -u http://localhost:8080 -c ${creds}`;
+    const cli = this.cliArgs();
     const existing = await this.getSettings(`signature.${signatureId}`);
     if (existing["private-key"] && existing["domain"]) {
       console.log(`[DKIM] Reusing existing signature "${signatureId}" from Stalwart DB`);
     } else {
       try {
-        execSync3(`${cli} server delete-config "signature.${signatureId}"`, {
+        execFileSync3("docker", [...cli, "server", "delete-config", `signature.${signatureId}`], {
           timeout: 1e4,
           stdio: ["ignore", "pipe", "pipe"]
         });
@@ -892,7 +898,7 @@ var StalwartAdmin = class {
       }
       console.log(`[DKIM] Creating RSA signature for ${domain} via stalwart-cli`);
       try {
-        execSync3(`${cli} dkim create rsa ${domain} ${signatureId} ${selector}`, {
+        execFileSync3("docker", [...cli, "dkim", "create", "rsa", domain, signatureId, selector], {
           timeout: 15e3,
           stdio: ["ignore", "pipe", "pipe"]
         });
@@ -904,12 +910,12 @@ var StalwartAdmin = class {
     if (!Object.keys(signRule).length) {
       console.log(`[DKIM] Configuring DKIM signing rule`);
       const rules = [
-        [`auth.dkim.sign.0000.if`, `listener != 'smtp'`],
-        [`auth.dkim.sign.0000.then`, `['${signatureId}']`],
-        [`auth.dkim.sign.0001.else`, `false`]
+        ["auth.dkim.sign.0000.if", `listener != 'smtp'`],
+        ["auth.dkim.sign.0000.then", `['${signatureId}']`],
+        ["auth.dkim.sign.0001.else", "false"]
       ];
       for (const [key, value] of rules) {
-        execSync3(`${cli} server add-config "${key}" "${value}"`, {
+        execFileSync3("docker", [...cli, "server", "add-config", key, value], {
           timeout: 1e4,
           stdio: ["ignore", "pipe", "pipe"]
         });
@@ -917,7 +923,7 @@ var StalwartAdmin = class {
     }
     let publicKey;
     try {
-      const output = execSync3(`${cli} dkim get-public-key ${signatureId}`, {
+      const output = execFileSync3("docker", [...cli, "dkim", "get-public-key", signatureId], {
         timeout: 1e4,
         stdio: ["ignore", "pipe", "pipe"]
       }).toString();
@@ -928,7 +934,7 @@ var StalwartAdmin = class {
       throw new Error(`Failed to get DKIM public key: ${err.message}`);
     }
     try {
-      execSync3(`${cli} server reload-config`, {
+      execFileSync3("docker", [...cli, "server", "reload-config"], {
         timeout: 1e4,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -941,9 +947,9 @@ var StalwartAdmin = class {
    * Restart the Stalwart Docker container and wait for it to be ready.
    */
   async restartContainer() {
-    const { execSync: execSync3 } = await import("child_process");
+    const { execFileSync: execFileSync3 } = await import("child_process");
     try {
-      execSync3("docker restart agenticmail-stalwart", { timeout: 3e4, stdio: ["ignore", "pipe", "pipe"] });
+      execFileSync3("docker", ["restart", "agenticmail-stalwart"], { timeout: 3e4, stdio: ["ignore", "pipe", "pipe"] });
       for (let i = 0; i < 15; i++) {
         try {
           const res = await fetch(`${this.baseUrl}/health`, { signal: AbortSignal.timeout(2e3) });
@@ -3813,8 +3819,8 @@ var CloudflareClient = class {
     let available = false;
     if (result.supported_tld && !hasRegistration) {
       try {
-        const { execSync: execSync3 } = await import("child_process");
-        const whoisOutput = execSync3(`whois ${domain}`, { timeout: 1e4, stdio: ["ignore", "pipe", "pipe"] }).toString().toLowerCase();
+        const { execFileSync: execFileSync3 } = await import("child_process");
+        const whoisOutput = execFileSync3("whois", [domain], { timeout: 1e4, stdio: ["ignore", "pipe", "pipe"] }).toString().toLowerCase();
         available = whoisOutput.includes("domain not found") || whoisOutput.includes("no match") || whoisOutput.includes("not found") || whoisOutput.includes("no data found") || whoisOutput.includes("status: free") || whoisOutput.includes("no entries found");
       } catch {
         available = false;
@@ -4278,8 +4284,8 @@ var TunnelManager = class {
       return this.binPath;
     }
     try {
-      const { execSync: execSync3 } = await import("child_process");
-      const sysPath = execSync3("which cloudflared", { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
+      const { execFileSync: execFileSync3 } = await import("child_process");
+      const sysPath = execFileSync3("which", ["cloudflared"], { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
       if (sysPath && existsSync2(sysPath)) {
         this.binPath = sysPath;
         return sysPath;
@@ -5351,7 +5357,7 @@ import { join as join7 } from "path";
 import { homedir as homedir6 } from "os";
 
 // src/setup/deps.ts
-import { execSync } from "child_process";
+import { execFileSync } from "child_process";
 import { existsSync as existsSync3 } from "fs";
 import { join as join5 } from "path";
 import { homedir as homedir4 } from "os";
@@ -5365,7 +5371,7 @@ var DependencyChecker = class {
   }
   async checkDocker() {
     try {
-      const output = execSync("docker --version", { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
+      const output = execFileSync("docker", ["--version"], { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
       const match = output.match(/Docker version ([\d.]+)/);
       return {
         name: "docker",
@@ -5383,8 +5389,9 @@ var DependencyChecker = class {
   }
   async checkStalwart() {
     try {
-      const output = execSync(
-        'docker ps --filter name=agenticmail-stalwart --format "{{.Status}}"',
+      const output = execFileSync(
+        "docker",
+        ["ps", "--filter", "name=agenticmail-stalwart", "--format", "{{.Status}}"],
         { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }
       ).toString().trim();
       const running = output.length > 0 && output.toLowerCase().includes("up");
@@ -5407,7 +5414,7 @@ var DependencyChecker = class {
     if (existsSync3(binPath)) {
       let version;
       try {
-        const output = execSync(`"${binPath}" --version`, { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
+        const output = execFileSync(binPath, ["--version"], { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
         const match = output.match(/cloudflared version ([\d.]+)/);
         version = match?.[1];
       } catch {
@@ -5415,7 +5422,7 @@ var DependencyChecker = class {
       return { name: "cloudflared", installed: true, version, description: "Cloudflare Tunnel for custom domain email" };
     }
     try {
-      const output = execSync("cloudflared --version", { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
+      const output = execFileSync("cloudflared", ["--version"], { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
       const match = output.match(/cloudflared version ([\d.]+)/);
       return { name: "cloudflared", installed: true, version: match?.[1], description: "Cloudflare Tunnel for custom domain email" };
     } catch {
@@ -5425,9 +5432,9 @@ var DependencyChecker = class {
 };
 
 // src/setup/installer.ts
-import { execSync as execSync2 } from "child_process";
+import { execFileSync as execFileSync2, execSync } from "child_process";
 import { existsSync as existsSync4 } from "fs";
-import { writeFile, rename, chmod as chmod2, mkdir as mkdir2 } from "fs/promises";
+import { writeFile, rename, chmod as chmod2, mkdir as mkdir2, unlink } from "fs/promises";
 import { join as join6 } from "path";
 import { homedir as homedir5, platform as platform2, arch as arch2 } from "os";
 var DependencyInstaller = class {
@@ -5444,13 +5451,13 @@ var DependencyInstaller = class {
   async installDocker() {
     let cliInstalled = false;
     try {
-      execSync2("docker --version", { timeout: 5e3, stdio: "ignore" });
+      execFileSync2("docker", ["--version"], { timeout: 5e3, stdio: "ignore" });
       cliInstalled = true;
     } catch {
     }
     if (cliInstalled) {
       try {
-        execSync2("docker info", { timeout: 1e4, stdio: "ignore" });
+        execFileSync2("docker", ["info"], { timeout: 1e4, stdio: "ignore" });
         return;
       } catch {
         this.onProgress("Docker found but not running \u2014 starting it now...");
@@ -5463,18 +5470,18 @@ var DependencyInstaller = class {
     if (os === "darwin") {
       this.onProgress("Installing Docker via Homebrew...");
       try {
-        execSync2("brew --version", { timeout: 5e3, stdio: "ignore" });
+        execFileSync2("brew", ["--version"], { timeout: 5e3, stdio: "ignore" });
       } catch {
         throw new Error("Homebrew is required to install Docker on macOS. Install it from https://brew.sh then try again.");
       }
-      execSync2("brew install --cask docker", { timeout: 3e5, stdio: "inherit" });
+      execFileSync2("brew", ["install", "--cask", "docker"], { timeout: 3e5, stdio: "inherit" });
       this.onProgress("Docker installed. Starting Docker Desktop...");
       this.startDockerDaemon();
       await this.waitForDocker();
     } else if (os === "linux") {
       this.onProgress("Installing Docker...");
       try {
-        execSync2("curl -fsSL https://get.docker.com | sh", { timeout: 3e5, stdio: "inherit" });
+        execSync("curl -fsSL https://get.docker.com | sh", { timeout: 3e5, stdio: "inherit" });
       } catch {
         throw new Error("Failed to install Docker. Install it manually: https://docs.docker.com/get-docker/");
       }
@@ -5492,12 +5499,12 @@ var DependencyInstaller = class {
     const os = platform2();
     if (os === "darwin") {
       try {
-        execSync2("open -a Docker", { timeout: 1e4, stdio: "ignore" });
+        execFileSync2("open", ["-a", "Docker"], { timeout: 1e4, stdio: "ignore" });
       } catch {
       }
     } else if (os === "linux") {
       try {
-        execSync2("sudo systemctl start docker", { timeout: 15e3, stdio: "ignore" });
+        execFileSync2("sudo", ["systemctl", "start", "docker"], { timeout: 15e3, stdio: "ignore" });
       } catch {
       }
     }
@@ -5513,7 +5520,7 @@ var DependencyInstaller = class {
     let attempts = 0;
     while (Date.now() - start < maxWait) {
       try {
-        execSync2("docker info", { timeout: 5e3, stdio: "ignore" });
+        execFileSync2("docker", ["info"], { timeout: 5e3, stdio: "ignore" });
         return;
       } catch {
       }
@@ -5536,14 +5543,14 @@ var DependencyInstaller = class {
       throw new Error(`docker-compose.yml not found at: ${composePath}`);
     }
     try {
-      execSync2("docker info", { timeout: 1e4, stdio: "ignore" });
+      execFileSync2("docker", ["info"], { timeout: 1e4, stdio: "ignore" });
     } catch {
       this.onProgress("Starting Docker...");
       this.startDockerDaemon();
       await this.waitForDocker();
     }
     this.onProgress("Starting Stalwart mail server...");
-    execSync2(`docker compose -f "${composePath}" up -d`, {
+    execFileSync2("docker", ["compose", "-f", composePath, "up", "-d"], {
       timeout: 12e4,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -5551,8 +5558,9 @@ var DependencyInstaller = class {
     const start = Date.now();
     while (Date.now() - start < maxWait) {
       try {
-        const output = execSync2(
-          'docker ps --filter name=agenticmail-stalwart --format "{{.Status}}"',
+        const output = execFileSync2(
+          "docker",
+          ["ps", "--filter", "name=agenticmail-stalwart", "--format", "{{.Status}}"],
           { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }
         ).toString().trim();
         if (output.toLowerCase().includes("up")) {
@@ -5575,7 +5583,7 @@ var DependencyInstaller = class {
       return binPath;
     }
     try {
-      const sysPath = execSync2("which cloudflared", { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
+      const sysPath = execFileSync2("which", ["cloudflared"], { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
       if (sysPath && existsSync4(sysPath)) return sysPath;
     } catch {
     }
@@ -5599,11 +5607,11 @@ var DependencyInstaller = class {
       const tgzPath = join6(binDir, "cloudflared.tgz");
       await writeFile(tgzPath, buffer);
       try {
-        execSync2(`tar -xzf "${tgzPath}" -C "${binDir}" cloudflared`, { timeout: 15e3, stdio: "ignore" });
+        execFileSync2("tar", ["-xzf", tgzPath, "-C", binDir, "cloudflared"], { timeout: 15e3, stdio: "ignore" });
         await chmod2(binPath, 493);
       } finally {
         try {
-          execSync2(`rm -f "${tgzPath}"`, { stdio: "ignore" });
+          await unlink(tgzPath);
         } catch {
         }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/core",
-  "version": "0.3.3",
+  "version": "0.3.4",
   "description": "Core SDK for AgenticMail — programmatic email for AI agents",
   "type": "module",
   "main": "dist/index.js",