instar 0.7.37 → 0.7.38

package/dist/monitoring/AccountSwitcher.js

@@ -6,8 +6,9 @@
  *
  * Ported from Dawn's dawn-server equivalent for general Instar use.
  */
-import { execSync } from 'node:child_process';
+import { execFileSync } from 'node:child_process';
 import fs from 'node:fs';
+import os from 'node:os';
 import path from 'node:path';
 const KEYCHAIN_SERVICE = 'Claude Code-credentials';
 export class AccountSwitcher {
@@ -16,12 +17,7 @@ export class AccountSwitcher {
     constructor(registryPath) {
         this.registryPath = registryPath || path.join(process.env.HOME || '', '.dawn-server/account-registry.json');
         // Get the macOS username for Keychain access
-        try {
-            this.keychainAccount = execSync('whoami', { encoding: 'utf-8' }).trim();
-        }
-        catch {
-            this.keychainAccount = 'justin';
-        }
+        this.keychainAccount = os.userInfo().username;
     }
     /**
      * Switch to a target account. Supports fuzzy matching:
@@ -160,13 +156,19 @@ export class AccountSwitcher {
         return null;
     }
     readFromKeychain() {
-        const result = execSync(`security find-generic-password -s "${KEYCHAIN_SERVICE}" -w 2>/dev/null`, { encoding: 'utf-8', timeout: 10000 });
+        const result = execFileSync('security', ['find-generic-password', '-s', KEYCHAIN_SERVICE, '-w'], { encoding: 'utf-8', timeout: 10000, stdio: ['pipe', 'pipe', 'pipe'] });
         return JSON.parse(result.trim());
     }
     writeToKeychain(data) {
         const jsonStr = JSON.stringify(data);
         const hexStr = Buffer.from(jsonStr).toString('hex');
-        execSync(`security -i <<< 'add-generic-password -U -a "${this.keychainAccount}" -s "${KEYCHAIN_SERVICE}" -X "${hexStr}"'`, { timeout: 10000, shell: '/bin/bash' });
+        // Use execFileSync with stdin input instead of shell heredoc
+        execFileSync('security', ['-i'], {
+            input: `add-generic-password -U -a "${this.keychainAccount}" -s "${KEYCHAIN_SERVICE}" -X "${hexStr}"\n`,
+            encoding: 'utf-8',
+            timeout: 10000,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
     }
     loadRegistry() {
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "0.7.37",
+  "version": "0.7.38",
   "description": "Persistent autonomy infrastructure for AI agents",
   "type": "module",
   "main": "dist/index.js",