@botmem/apple-bridge 0.35.25

package/dist/cli.d.ts

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+/**
+ * Botmem Apple Bridge CLI.
+ *
+ * Usage:
+ *   npx @botmem/apple-bridge --token=<token> [--server=wss://botmem.xyz/imsg-tunnel]
+ */
+export {};

package/dist/cli.js

@@ -0,0 +1,90 @@
+#!/usr/bin/env node
+/**
+ * Botmem Apple Bridge CLI.
+ *
+ * Usage:
+ *   npx @botmem/apple-bridge --token=<token> [--server=wss://botmem.xyz/imsg-tunnel]
+ */
+import { Command } from 'commander';
+import { runPreflight, DEFAULT_DB_PATH } from './preflight.js';
+import { ImsgDatabase } from './db.js';
+import { RpcHandler } from './rpc-handler.js';
+import { TunnelClient } from './tunnel.js';
+const DEFAULT_SERVER = 'wss://botmem.xyz/imsg-tunnel';
+const program = new Command();
+function timestamp() {
+    return new Date().toISOString();
+}
+function log(message = '') {
+    console.log(message ? `  ${timestamp()} ${message}` : '');
+}
+function error(message = '') {
+    console.error(message ? `  ${timestamp()} ${message}` : '');
+}
+program
+    .name('apple-bridge')
+    .description('Botmem Apple Bridge — syncs local Apple data securely')
+    .requiredOption('--token <token>', 'Bridge token from your Botmem dashboard')
+    .option('--server <url>', 'Botmem server URL', DEFAULT_SERVER)
+    .option('--db <path>', 'Path to chat.db', DEFAULT_DB_PATH)
+    .action(async (opts) => {
+    console.log('\n  BOTMEM APPLE BRIDGE\n');
+    // ── Preflight ─────────────────────────────────────────────────────────
+    log('Checking prerequisites...');
+    const preflight = runPreflight(opts.db);
+    if (!preflight.ok) {
+        error('PREFLIGHT FAILED:');
+        for (const err of preflight.errors) {
+            for (const line of err.split('\n')) {
+                error(line);
+            }
+        }
+        process.exit(1);
+    }
+    log(`iMessage database: ${preflight.dbPath}`);
+    log(`Chats found: ${preflight.chatCount ?? 'unknown'}`);
+    // ── Open database ─────────────────────────────────────────────────────
+    const db = new ImsgDatabase(opts.db);
+    const rpcHandler = new RpcHandler(db);
+    // ── Connect tunnel ────────────────────────────────────────────────────
+    console.log('');
+    log(`Connecting to ${opts.server}...`);
+    const tunnel = new TunnelClient({
+        serverUrl: opts.server,
+        token: opts.token,
+        rpcHandler,
+    });
+    tunnel.on('status', (status) => {
+        const icon = {
+            connecting: '...',
+            authenticating: '...',
+            connected: 'OK',
+            disconnected: '--',
+            error: '!!',
+        }[status] || '??';
+        log(`[${icon}] ${status}`);
+    });
+    tunnel.on('log', (msg) => {
+        log(msg);
+    });
+    tunnel.on('fatal', (msg) => {
+        console.error('');
+        error(`FATAL: ${msg}`);
+        console.error('');
+        db.close();
+        process.exit(1);
+    });
+    tunnel.connect();
+    // ── Graceful shutdown ─────────────────────────────────────────────────
+    const shutdown = () => {
+        console.log('');
+        log('Shutting down...');
+        tunnel.destroy();
+        db.close();
+        process.exit(0);
+    };
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+});
+program.parse();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,cAAc,GAAG,8BAA8B,CAAC;AAEtD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,SAAS,SAAS;IAChB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,GAAG,CAAC,OAAO,GAAG,EAAE;IACvB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,KAAK,CAAC,OAAO,GAAG,EAAE;IACzB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,OAAO;KACJ,IAAI,CAAC,cAAc,CAAC;KACpB,WAAW,CAAC,uDAAuD,CAAC;KACpE,cAAc,CAAC,iBAAiB,EAAE,yCAAyC,CAAC;KAC5E,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,CAAC;KAC7D,MAAM,CAAC,aAAa,EAAE,iBAAiB,EAAE,eAAe,CAAC;KACzD,MAAM,CAAC,KAAK,EAAE,IAAmD,EAAE,EAAE;IACpE,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAEzC,yEAAyE;IACzE,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAExC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACnC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,GAAG,CAAC,sBAAsB,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,gBAAgB,SAAS,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;IAExD,yEAAyE;IACzE,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAEtC,yEAAyE;IACzE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,GAAG,CAAC,iBAAiB,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC9B,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU;KACX,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAc,EAAE,EAAE;QACrC,MAAM,IAAI,GACR;YACE,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE,KAAK;YACrB,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,IAAI;SACZ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;QACpB,GAAG,CAAC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE;QAC/B,GAAG,CAAC,GAAG,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE;QACjC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,OAAO,EAAE,CAAC;IAEjB,yEAAyE;IACzE,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACxB,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/contacts.d.ts

@@ -0,0 +1,15 @@
+export interface AppleContact {
+    id: string;
+    displayName?: string;
+    givenName?: string;
+    familyName?: string;
+    middleName?: string;
+    nickname?: string;
+    organization?: string;
+    jobTitle?: string;
+    birthday?: string;
+    emails: string[];
+    phones: string[];
+    imageAvailable?: boolean;
+}
+export declare function listAppleContacts(): Promise<AppleContact[]>;

package/dist/contacts.js

@@ -0,0 +1,136 @@
+import { spawn } from 'node:child_process';
+import { mkdir, rm, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+const SWIFT_HELPER = String.raw `
+import Contacts
+import Foundation
+
+struct ContactPayload: Codable {
+  let id: String
+  let displayName: String?
+  let givenName: String?
+  let familyName: String?
+  let middleName: String?
+  let nickname: String?
+  let organization: String?
+  let jobTitle: String?
+  let birthday: String?
+  let emails: [String]
+  let phones: [String]
+  let imageAvailable: Bool
+}
+
+let store = CNContactStore()
+let keys: [CNKeyDescriptor] = [
+  CNContactIdentifierKey as CNKeyDescriptor,
+  CNContactGivenNameKey as CNKeyDescriptor,
+  CNContactFamilyNameKey as CNKeyDescriptor,
+  CNContactMiddleNameKey as CNKeyDescriptor,
+  CNContactNicknameKey as CNKeyDescriptor,
+  CNContactOrganizationNameKey as CNKeyDescriptor,
+  CNContactJobTitleKey as CNKeyDescriptor,
+  CNContactBirthdayKey as CNKeyDescriptor,
+  CNContactEmailAddressesKey as CNKeyDescriptor,
+  CNContactPhoneNumbersKey as CNKeyDescriptor,
+  CNContactImageDataAvailableKey as CNKeyDescriptor
+]
+
+let semaphore = DispatchSemaphore(value: 0)
+var granted = false
+var authError: Error?
+store.requestAccess(for: .contacts) { ok, error in
+  granted = ok
+  authError = error
+  semaphore.signal()
+}
+semaphore.wait()
+
+if !granted {
+  let message = authError?.localizedDescription ?? "Contacts permission was denied"
+  FileHandle.standardError.write(Data(message.utf8))
+  exit(2)
+}
+
+func clean(_ value: String) -> String? {
+  let trimmed = value.trimmingCharacters(in: .whitespacesAndNewlines)
+  return trimmed.isEmpty ? nil : trimmed
+}
+
+func birthdayString(_ date: DateComponents?) -> String? {
+  guard let date else { return nil }
+  var parts: [String] = []
+  if let year = date.year { parts.append(String(format: "%04d", year)) }
+  if let month = date.month { parts.append(String(format: "%02d", month)) }
+  if let day = date.day { parts.append(String(format: "%02d", day)) }
+  return parts.isEmpty ? nil : parts.joined(separator: "-")
+}
+
+let request = CNContactFetchRequest(keysToFetch: keys)
+var contacts: [ContactPayload] = []
+
+try store.enumerateContacts(with: request) { contact, _ in
+  let names = [contact.givenName, contact.middleName, contact.familyName]
+    .compactMap(clean)
+    .joined(separator: " ")
+  let displayName = clean(names) ?? clean(contact.nickname) ?? clean(contact.organizationName)
+  contacts.append(ContactPayload(
+    id: contact.identifier,
+    displayName: displayName,
+    givenName: clean(contact.givenName),
+    familyName: clean(contact.familyName),
+    middleName: clean(contact.middleName),
+    nickname: clean(contact.nickname),
+    organization: clean(contact.organizationName),
+    jobTitle: clean(contact.jobTitle),
+    birthday: birthdayString(contact.birthday),
+    emails: contact.emailAddresses.compactMap { clean(String($0.value)) },
+    phones: contact.phoneNumbers.compactMap { clean($0.value.stringValue) },
+    imageAvailable: contact.imageDataAvailable
+  ))
+}
+
+let data = try JSONEncoder().encode(contacts)
+FileHandle.standardOutput.write(data)
+`;
+export async function listAppleContacts() {
+    const dir = await mkdir(join(tmpdir(), `botmem-apple-contacts-${process.pid}`), {
+        recursive: true,
+    }).then(() => join(tmpdir(), `botmem-apple-contacts-${process.pid}`));
+    const helperPath = join(dir, 'contacts-helper.swift');
+    await writeFile(helperPath, SWIFT_HELPER, 'utf8');
+    try {
+        const stdout = await runSwift(helperPath);
+        const parsed = JSON.parse(stdout);
+        return Array.isArray(parsed) ? parsed : [];
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true });
+    }
+}
+function runSwift(helperPath) {
+    return new Promise((resolve, reject) => {
+        const child = spawn('xcrun', ['swift', helperPath], {
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        let stdout = '';
+        let stderr = '';
+        child.stdout.setEncoding('utf8');
+        child.stderr.setEncoding('utf8');
+        child.stdout.on('data', (chunk) => {
+            stdout += chunk;
+        });
+        child.stderr.on('data', (chunk) => {
+            stderr += chunk;
+        });
+        child.on('error', reject);
+        child.on('close', (code) => {
+            if (code === 0) {
+                resolve(stdout);
+                return;
+            }
+            reject(new Error(stderr.trim() || `Apple Contacts helper exited with code ${code}`));
+        });
+    });
+}
+//# sourceMappingURL=contacts.js.map

package/dist/contacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contacts.js","sourceRoot":"","sources":["../src/contacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAiBjC,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0F9B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE;QAC9E,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC;QAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,UAAkB;IAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE;YAClD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChC,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChC,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,0CAA0C,IAAI,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/crypto.d.ts

@@ -0,0 +1,33 @@
+/**
+ * End-to-end encryption for the Apple bridge tunnel.
+ *
+ * Protocol:
+ *   1. Both sides generate ephemeral X25519 key pairs
+ *   2. Exchange public keys during auth handshake
+ *   3. Derive shared secret via ECDH
+ *   4. Derive AES-256-GCM key via HKDF-SHA256
+ *   5. Every frame encrypted with unique random IV
+ *
+ * Wire format (binary): [12-byte IV][ciphertext][16-byte auth tag]
+ */
+import { type KeyObject } from 'node:crypto';
+export interface KeyPair {
+    publicKey: KeyObject;
+    privateKey: KeyObject;
+}
+/** Generate an ephemeral X25519 key pair for ECDH. */
+export declare function generateKeyPair(): KeyPair;
+/** Export public key to raw 32-byte Buffer for wire transfer. */
+export declare function exportPublicKey(key: KeyObject): Buffer;
+/** Import raw 32-byte public key from wire. */
+export declare function importPublicKey(raw: Buffer): KeyObject;
+/** Derive a shared AES-256 key from local private + remote public via ECDH + HKDF. */
+export declare function deriveSessionKey(localPrivate: KeyObject, remotePublic: KeyObject): Buffer;
+/** Encrypt plaintext with AES-256-GCM. Returns [IV (12) | ciphertext | tag (16)]. */
+export declare function encrypt(key: Buffer, plaintext: string): Buffer;
+/** Decrypt AES-256-GCM payload. Input: [IV (12) | ciphertext | tag (16)]. */
+export declare function decrypt(key: Buffer, payload: Buffer): string;
+/** Encrypt a JSON-serializable object. */
+export declare function encryptJson(key: Buffer, data: unknown): Buffer;
+/** Decrypt a payload and parse as JSON. */
+export declare function decryptJson<T = unknown>(key: Buffer, payload: Buffer): T;

package/dist/crypto.js

@@ -0,0 +1,76 @@
+/**
+ * End-to-end encryption for the Apple bridge tunnel.
+ *
+ * Protocol:
+ *   1. Both sides generate ephemeral X25519 key pairs
+ *   2. Exchange public keys during auth handshake
+ *   3. Derive shared secret via ECDH
+ *   4. Derive AES-256-GCM key via HKDF-SHA256
+ *   5. Every frame encrypted with unique random IV
+ *
+ * Wire format (binary): [12-byte IV][ciphertext][16-byte auth tag]
+ */
+import { generateKeyPairSync, diffieHellman, hkdfSync, randomBytes, createCipheriv, createDecipheriv, createPublicKey, } from 'node:crypto';
+/** Generate an ephemeral X25519 key pair for ECDH. */
+export function generateKeyPair() {
+    const { publicKey, privateKey } = generateKeyPairSync('x25519');
+    return { publicKey, privateKey };
+}
+/** Export public key to raw 32-byte Buffer for wire transfer. */
+export function exportPublicKey(key) {
+    // DER format for X25519 public key: 12-byte header + 32-byte key
+    const der = key.export({ type: 'spki', format: 'der' });
+    return Buffer.from(der.subarray(12));
+}
+/** Import raw 32-byte public key from wire. */
+export function importPublicKey(raw) {
+    // Wrap raw 32 bytes in X25519 SPKI DER header
+    const header = Buffer.from('302a300506032b656e032100', 'hex');
+    const der = Buffer.concat([header, raw]);
+    return createPublicKey({ key: der, format: 'der', type: 'spki' });
+}
+/** Derive a shared AES-256 key from local private + remote public via ECDH + HKDF. */
+export function deriveSessionKey(localPrivate, remotePublic) {
+    const sharedSecret = diffieHellman({
+        privateKey: localPrivate,
+        publicKey: remotePublic,
+    });
+    const salt = Buffer.from('botmem-imsg-tunnel-v1', 'utf-8');
+    const info = Buffer.from('aes-256-gcm-session-key', 'utf-8');
+    const derived = hkdfSync('sha256', sharedSecret, salt, info, 32);
+    return Buffer.from(derived);
+}
+// ── Symmetric Encryption ────────────────────────────────────────────────────
+const IV_LENGTH = 12;
+const TAG_LENGTH = 16;
+/** Encrypt plaintext with AES-256-GCM. Returns [IV (12) | ciphertext | tag (16)]. */
+export function encrypt(key, plaintext) {
+    const iv = randomBytes(IV_LENGTH);
+    const cipher = createCipheriv('aes-256-gcm', key, iv);
+    const encrypted = Buffer.concat([cipher.update(plaintext, 'utf-8'), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    return Buffer.concat([iv, encrypted, tag]);
+}
+/** Decrypt AES-256-GCM payload. Input: [IV (12) | ciphertext | tag (16)]. */
+export function decrypt(key, payload) {
+    if (payload.length < IV_LENGTH + TAG_LENGTH) {
+        throw new Error('Encrypted payload too short');
+    }
+    const iv = payload.subarray(0, IV_LENGTH);
+    const tag = payload.subarray(payload.length - TAG_LENGTH);
+    const ciphertext = payload.subarray(IV_LENGTH, payload.length - TAG_LENGTH);
+    const decipher = createDecipheriv('aes-256-gcm', key, iv);
+    decipher.setAuthTag(tag);
+    const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    return decrypted.toString('utf-8');
+}
+// ── Convenience ─────────────────────────────────────────────────────────────
+/** Encrypt a JSON-serializable object. */
+export function encryptJson(key, data) {
+    return encrypt(key, JSON.stringify(data));
+}
+/** Decrypt a payload and parse as JSON. */
+export function decryptJson(key, payload) {
+    return JSON.parse(decrypt(key, payload));
+}
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,QAAQ,EACR,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,eAAe,GAEhB,MAAM,aAAa,CAAC;AASrB,sDAAsD;AACtD,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAChE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,GAAc;IAC5C,iEAAiE;IACjE,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,8CAA8C;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,YAAuB,EAAE,YAAuB;IAC/E,MAAM,YAAY,GAAG,aAAa,CAAC;QACjC,UAAU,EAAE,YAAY;QACxB,SAAS,EAAE,YAAY;KACxB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,+EAA+E;AAE/E,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,qFAAqF;AACrF,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,SAAiB;IACpD,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAEtD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,OAAe;IAClD,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,GAAG,UAAU,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;IAE5E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAEzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEjF,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,+EAA+E;AAE/E,0CAA0C;AAC1C,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,IAAa;IACpD,OAAO,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,WAAW,CAAc,GAAW,EAAE,OAAe;IACnE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAM,CAAC;AAChD,CAAC"}

package/dist/db.d.ts

@@ -0,0 +1,62 @@
+/**
+ * SQLite query layer for ~/Library/Messages/chat.db.
+ *
+ * Reads the iMessage database in read-only mode and returns data
+ * matching the JSON-RPC types expected by the Botmem iMessage connector.
+ *
+ * Core Data timestamp conversion:
+ *   macOS stores dates as nanoseconds since 2001-01-01T00:00:00Z.
+ *   Unix epoch offset: 978307200 seconds.
+ *   Formula: new Date((date / 1e9 + 978307200) * 1000)
+ */
+export interface Chat {
+    id: number;
+    name: string;
+    identifier: string;
+    guid?: string;
+    service: string;
+    last_message_at: string;
+    participants?: string[];
+    is_group?: boolean;
+}
+export interface Attachment {
+    filename?: string;
+    mime_type?: string;
+    transfer_name?: string;
+}
+export interface Reaction {
+    sender?: string;
+    type?: string;
+}
+export interface Message {
+    id: number;
+    chat_id: number;
+    guid: string;
+    sender: string;
+    is_from_me: boolean;
+    text: string;
+    created_at: string;
+    attachments: Attachment[];
+    reactions: Reaction[];
+    chat_identifier: string;
+    chat_name: string;
+    participants: string[];
+    is_group: boolean;
+    reply_to_guid?: string;
+}
+export declare class ImsgDatabase {
+    private db;
+    constructor(dbPath: string);
+    close(): void;
+    /** List chats sorted by most recent message. */
+    chatsList(limit?: number): Chat[];
+    /** Get message history for a chat with optional time-based pagination. */
+    messagesHistory(chatId: number, opts?: {
+        limit?: number;
+        start?: string;
+        end?: string;
+    }): Message[];
+    private getChatParticipants;
+    private getChatMeta;
+    private getAttachmentsForMessages;
+}

package/dist/db.js

@@ -0,0 +1,270 @@
+/**
+ * SQLite query layer for ~/Library/Messages/chat.db.
+ *
+ * Reads the iMessage database in read-only mode and returns data
+ * matching the JSON-RPC types expected by the Botmem iMessage connector.
+ *
+ * Core Data timestamp conversion:
+ *   macOS stores dates as nanoseconds since 2001-01-01T00:00:00Z.
+ *   Unix epoch offset: 978307200 seconds.
+ *   Formula: new Date((date / 1e9 + 978307200) * 1000)
+ */
+import { createRequire } from 'node:module';
+const require = createRequire(import.meta.url);
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const Database = require('better-sqlite3');
+// ── Constants ───────────────────────────────────────────────────────────────
+/** Seconds between 2001-01-01 and 1970-01-01 (Unix epoch). */
+const CORE_DATA_EPOCH_OFFSET = 978307200;
+/** Convert Core Data nanosecond timestamp to ISO 8601 string. */
+function coreDataToISO(nanos) {
+    if (!nanos || nanos === 0)
+        return new Date(0).toISOString();
+    const unixSeconds = nanos / 1_000_000_000 + CORE_DATA_EPOCH_OFFSET;
+    return new Date(unixSeconds * 1000).toISOString();
+}
+// ── Database ────────────────────────────────────────────────────────────────
+export class ImsgDatabase {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    db;
+    constructor(dbPath) {
+        this.db = new Database(dbPath, { readonly: true, fileMustExist: true });
+        // WAL mode for concurrent reads while Messages.app writes
+        this.db.pragma('journal_mode = WAL');
+    }
+    close() {
+        this.db.close();
+    }
+    /** List chats sorted by most recent message. */
+    chatsList(limit) {
+        const sql = `
+      SELECT
+        c.ROWID as id,
+        COALESCE(c.display_name, '') as name,
+        c.guid as identifier,
+        c.guid,
+        COALESCE(c.service_name, 'iMessage') as service,
+        MAX(m.date) as last_message_date
+      FROM chat c
+      LEFT JOIN chat_message_join cmj ON cmj.chat_id = c.ROWID
+      LEFT JOIN message m ON m.ROWID = cmj.message_id
+      GROUP BY c.ROWID
+      ORDER BY last_message_date DESC
+      ${limit ? 'LIMIT ?' : ''}
+    `;
+        const rows = limit ? this.db.prepare(sql).all(limit) : this.db.prepare(sql).all();
+        return rows.map((row) => {
+            const chatId = row.id;
+            const participants = this.getChatParticipants(chatId);
+            const isGroup = participants.length > 1;
+            return {
+                id: chatId,
+                name: row.name || (isGroup ? 'Group Chat' : participants[0] || 'Unknown'),
+                identifier: row.identifier,
+                guid: row.guid,
+                service: row.service,
+                last_message_at: coreDataToISO(row.last_message_date),
+                participants,
+                is_group: isGroup,
+            };
+        });
+    }
+    /** Get message history for a chat with optional time-based pagination. */
+    messagesHistory(chatId, opts) {
+        // Get chat metadata once
+        const chatMeta = this.getChatMeta(chatId);
+        let sql = `
+      SELECT
+        m.ROWID as id,
+        m.guid,
+        m.text,
+        m.attributedBody,
+        m.date,
+        m.is_from_me,
+        m.cache_roomnames,
+        m.associated_message_guid,
+        m.associated_message_type,
+        h.id as handle_id
+      FROM message m
+      JOIN chat_message_join cmj ON cmj.message_id = m.ROWID
+      LEFT JOIN handle h ON h.ROWID = m.handle_id
+      WHERE cmj.chat_id = ?
+    `;
+        const params = [chatId];
+        if (opts?.start) {
+            const startNanos = isoToCoreData(opts.start);
+            sql += ' AND m.date >= ?';
+            params.push(startNanos);
+        }
+        if (opts?.end) {
+            const endNanos = isoToCoreData(opts.end);
+            sql += ' AND m.date <= ?';
+            params.push(endNanos);
+        }
+        sql += ' ORDER BY m.date ASC';
+        if (opts?.limit) {
+            sql += ' LIMIT ?';
+            params.push(opts.limit);
+        }
+        const rows = this.db.prepare(sql).all(...params);
+        const participants = this.getChatParticipants(chatId);
+        const messageIds = rows.map((row) => row.id);
+        const attachmentsByMessageId = this.getAttachmentsForMessages(messageIds);
+        return rows.map((row) => {
+            const msgId = row.id;
+            const attachments = attachmentsByMessageId.get(msgId) || [];
+            const text = row.text ||
+                extractAttributedBodyText(row.attributedBody) ||
+                '';
+            return {
+                id: msgId,
+                chat_id: chatId,
+                guid: row.guid || `imsg-local-${msgId}`,
+                sender: row.handle_id || '',
+                is_from_me: row.is_from_me === 1,
+                text,
+                created_at: coreDataToISO(row.date),
+                attachments,
+                // Reactions are not used by the Botmem ingestion pipeline. Fetching them
+                // per message requires an unindexed suffix LIKE scan over the message
+                // table, which makes large chats time out.
+                reactions: [],
+                chat_identifier: chatMeta.identifier,
+                chat_name: chatMeta.name,
+                participants,
+                is_group: participants.length > 1,
+                reply_to_guid: row.associated_message_guid || undefined,
+            };
+        });
+    }
+    // ── Private helpers ─────────────────────────────────────────────────────
+    getChatParticipants(chatId) {
+        const sql = `
+      SELECT h.id
+      FROM chat_handle_join chj
+      JOIN handle h ON h.ROWID = chj.handle_id
+      WHERE chj.chat_id = ?
+    `;
+        const rows = this.db.prepare(sql).all(chatId);
+        return rows.map((r) => r.id);
+    }
+    getChatMeta(chatId) {
+        const sql = `
+      SELECT COALESCE(display_name, '') as name, guid as identifier
+      FROM chat WHERE ROWID = ?
+    `;
+        const row = this.db.prepare(sql).get(chatId);
+        return row || { name: 'Unknown', identifier: '' };
+    }
+    getAttachmentsForMessages(messageIds) {
+        const byMessageId = new Map();
+        if (messageIds.length === 0)
+            return byMessageId;
+        const chunkSize = 900;
+        for (let i = 0; i < messageIds.length; i += chunkSize) {
+            const chunk = messageIds.slice(i, i + chunkSize);
+            const placeholders = chunk.map(() => '?').join(',');
+            const sql = `
+        SELECT
+          maj.message_id,
+          a.filename,
+          a.mime_type,
+          a.transfer_name
+        FROM message_attachment_join maj
+        JOIN attachment a ON a.ROWID = maj.attachment_id
+        WHERE maj.message_id IN (${placeholders})
+      `;
+            const rows = this.db.prepare(sql).all(...chunk);
+            for (const row of rows) {
+                const messageId = row.message_id;
+                const attachments = byMessageId.get(messageId) || [];
+                attachments.push({
+                    filename: row.filename || undefined,
+                    mime_type: row.mime_type || undefined,
+                    transfer_name: row.transfer_name || undefined,
+                });
+                byMessageId.set(messageId, attachments);
+            }
+        }
+        return byMessageId;
+    }
+}
+// ── Helpers ─────────────────────────────────────────────────────────────────
+function isoToCoreData(iso) {
+    const unixMs = new Date(iso).getTime();
+    const unixSeconds = unixMs / 1000;
+    return (unixSeconds - CORE_DATA_EPOCH_OFFSET) * 1_000_000_000;
+}
+function extractAttributedBodyText(body) {
+    if (!body?.length)
+        return '';
+    const nsString = Buffer.from('NSString', 'utf8');
+    const marker = Buffer.from([0x95, 0x84, 0x01, 0x2b]);
+    let searchFrom = 0;
+    while (searchFrom < body.length) {
+        const stringClassAt = body.indexOf(nsString, searchFrom);
+        if (stringClassAt === -1)
+            return '';
+        const markerAt = body.indexOf(marker, stringClassAt + nsString.length);
+        if (markerAt === -1)
+            return '';
+        const lengthAt = markerAt + marker.length;
+        const parsed = readArchivedStringLength(body, lengthAt);
+        if (!parsed) {
+            searchFrom = stringClassAt + nsString.length;
+            continue;
+        }
+        const { length, offset } = parsed;
+        const start = lengthAt + offset;
+        const end = start + length;
+        if (length <= 0 || end > body.length) {
+            searchFrom = stringClassAt + nsString.length;
+            continue;
+        }
+        const text = body.subarray(start, end).toString('utf8').trim();
+        if (isLikelyMessageText(text))
+            return text;
+        searchFrom = stringClassAt + nsString.length;
+    }
+    return '';
+}
+function readArchivedStringLength(body, offset) {
+    const first = body[offset];
+    if (first === undefined)
+        return null;
+    if (first < 0x80)
+        return { length: first, offset: 1 };
+    const byteCount = first & 0x7f;
+    if (byteCount <= 0 || byteCount > 4 || offset + byteCount >= body.length)
+        return null;
+    let length = 0;
+    for (let i = 1; i <= byteCount; i++) {
+        length = (length << 8) + body[offset + i];
+    }
+    return { length, offset: 1 + byteCount };
+}
+function isLikelyMessageText(text) {
+    if (!text)
+        return false;
+    if (text.includes('\u0000'))
+        return false;
+    const blocked = new Set([
+        'NSString',
+        'NSMutableString',
+        'NSAttributedString',
+        'NSMutableAttributedString',
+        'NSObject',
+        'NSDictionary',
+        'NSNumber',
+        'NSValue',
+        'NSData',
+        'NSMutableData',
+        'NSKeyedArchiver',
+    ]);
+    if (blocked.has(text))
+        return false;
+    if (text.startsWith('__kIM'))
+        return false;
+    return /[\p{L}\p{N}]/u.test(text);
+}
+//# sourceMappingURL=db.js.map

package/dist/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,8DAA8D;AAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAQ,CAAC;AA2ClD,+EAA+E;AAE/E,8DAA8D;AAC9D,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAEzC,iEAAiE;AACjE,SAAS,aAAa,CAAC,KAAoB;IACzC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,WAAW,GAAG,KAAK,GAAG,aAAa,GAAG,sBAAsB,CAAC;IACnE,OAAO,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AACpD,CAAC;AAED,+EAA+E;AAE/E,MAAM,OAAO,YAAY;IACvB,8DAA8D;IACtD,EAAE,CAAM;IAEhB,YAAY,MAAc;QACxB,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,0DAA0D;QAC1D,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACvC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED,gDAAgD;IAChD,SAAS,CAAC,KAAc;QACtB,MAAM,GAAG,GAAG;;;;;;;;;;;;;QAaR,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;KACzB,CAAC;QAEF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAElF,OAAQ,IAAuC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,EAAY,CAAC;YAChC,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;YAExC,OAAO;gBACL,EAAE,EAAE,MAAM;gBACV,IAAI,EAAG,GAAG,CAAC,IAAe,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;gBACrF,UAAU,EAAE,GAAG,CAAC,UAAoB;gBACpC,IAAI,EAAE,GAAG,CAAC,IAAc;gBACxB,OAAO,EAAE,GAAG,CAAC,OAAiB;gBAC9B,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,iBAAkC,CAAC;gBACtE,YAAY;gBACZ,QAAQ,EAAE,OAAO;aAClB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,eAAe,CACb,MAAc,EACd,IAAuD;QAEvD,yBAAyB;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,GAAG,GAAG;;;;;;;;;;;;;;;;KAgBT,CAAC;QAEF,MAAM,MAAM,GAAc,CAAC,MAAM,CAAC,CAAC;QAEnC,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAChB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7C,GAAG,IAAI,kBAAkB,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,IAAI,EAAE,GAAG,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzC,GAAG,IAAI,kBAAkB,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;QAED,GAAG,IAAI,sBAAsB,CAAC;QAE9B,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAChB,GAAG,IAAI,UAAU,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAmC,CAAC;QACnF,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAY,CAAC,CAAC;QACvD,MAAM,sBAAsB,GAAG,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC;QAE1E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACtB,MAAM,KAAK,GAAG,GAAG,CAAC,EAAY,CAAC;YAC/B,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,IAAI,GACP,GAAG,CAAC,IAAe;gBACpB,yBAAyB,CAAC,GAAG,CAAC,cAA2C,CAAC;gBAC1E,EAAE,CAAC;YAEL,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,MAAM;gBACf,IAAI,EAAG,GAAG,CAAC,IAAe,IAAI,cAAc,KAAK,EAAE;gBACnD,MAAM,EAAG,GAAG,CAAC,SAAoB,IAAI,EAAE;gBACvC,UAAU,EAAG,GAAG,CAAC,UAAqB,KAAK,CAAC;gBAC5C,IAAI;gBACJ,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,IAAqB,CAAC;gBACpD,WAAW;gBACX,yEAAyE;gBACzE,sEAAsE;gBACtE,2CAA2C;gBAC3C,SAAS,EAAE,EAAE;gBACb,eAAe,EAAE,QAAQ,CAAC,UAAU;gBACpC,SAAS,EAAE,QAAQ,CAAC,IAAI;gBACxB,YAAY;gBACZ,QAAQ,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC;gBACjC,aAAa,EAAG,GAAG,CAAC,uBAAkC,IAAI,SAAS;aACpE,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAEnE,mBAAmB,CAAC,MAAc;QACxC,MAAM,GAAG,GAAG;;;;;KAKX,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAA0B,CAAC;QACvE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAEO,WAAW,CAAC,MAAc;QAChC,MAAM,GAAG,GAAG;;;KAGX,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAE9B,CAAC;QACd,OAAO,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;IAEO,yBAAyB,CAAC,UAAoB;QACpD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwB,CAAC;QACpD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,WAAW,CAAC;QAEhD,MAAM,SAAS,GAAG,GAAG,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;YACjD,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG;;;;;;;;mCAQiB,YAAY;OACxC,CAAC;YACF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAmC,CAAC;YAElF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,SAAS,GAAG,GAAG,CAAC,UAAoB,CAAC;gBAC3C,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrD,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAG,GAAG,CAAC,QAAmB,IAAI,SAAS;oBAC/C,SAAS,EAAG,GAAG,CAAC,SAAoB,IAAI,SAAS;oBACjD,aAAa,EAAG,GAAG,CAAC,aAAwB,IAAI,SAAS;iBAC1D,CAAC,CAAC;gBACH,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAED,+EAA+E;AAE/E,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,MAAM,GAAG,IAAI,CAAC;IAClC,OAAO,CAAC,WAAW,GAAG,sBAAsB,CAAC,GAAG,aAAa,CAAC;AAChE,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAoB;IACrD,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,OAAO,EAAE,CAAC;IAE7B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACrD,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,OAAO,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzD,IAAI,aAAa,KAAK,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAE/B,MAAM,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1C,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,UAAU,GAAG,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QAClC,MAAM,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QAChC,MAAM,GAAG,GAAG,KAAK,GAAG,MAAM,CAAC;QAC3B,IAAI,MAAM,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACrC,UAAU,GAAG,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,IAAI,mBAAmB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAE3C,UAAU,GAAG,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/C,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,wBAAwB,CAC/B,IAAY,EACZ,MAAc;IAEd,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAEtD,MAAM,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC;IAC/B,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,MAAM,GAAG,SAAS,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEtF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAE1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,UAAU;QACV,iBAAiB;QACjB,oBAAoB;QACpB,2BAA2B;QAC3B,UAAU;QACV,cAAc;QACd,UAAU;QACV,SAAS;QACT,QAAQ;QACR,eAAe;QACf,iBAAiB;KAClB,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3C,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { ImsgDatabase } from './db.js';
+export type { Chat, Message, Attachment, Reaction } from './db.js';
+export { RpcHandler } from './rpc-handler.js';
+export { TunnelClient } from './tunnel.js';
+export type { TunnelOptions, TunnelStatus } from './tunnel.js';
+export { generateKeyPair, exportPublicKey, importPublicKey, deriveSessionKey, encrypt, decrypt, encryptJson, decryptJson, } from './crypto.js';

package/dist/index.js

@@ -0,0 +1,6 @@
+// Public API for programmatic use
+export { ImsgDatabase } from './db.js';
+export { RpcHandler } from './rpc-handler.js';
+export { TunnelClient } from './tunnel.js';
+export { generateKeyPair, exportPublicKey, importPublicKey, deriveSessionKey, encrypt, decrypt, encryptJson, decryptJson, } from './crypto.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,OAAO,EACP,OAAO,EACP,WAAW,EACX,WAAW,GACZ,MAAM,aAAa,CAAC"}

package/dist/preflight.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Pre-flight checks for the Apple bridge.
+ * Verifies: macOS, chat.db readable, SQLite works.
+ */
+export declare const DEFAULT_DB_PATH: string;
+export interface PreflightResult {
+    ok: boolean;
+    dbPath: string;
+    chatCount?: number;
+    errors: string[];
+}
+export declare function runPreflight(dbPath?: string): PreflightResult;

package/dist/preflight.js

@@ -0,0 +1,62 @@
+/**
+ * Pre-flight checks for the Apple bridge.
+ * Verifies: macOS, chat.db readable, SQLite works.
+ */
+import { accessSync, constants } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { createRequire } from 'node:module';
+const require = createRequire(import.meta.url);
+export const DEFAULT_DB_PATH = join(homedir(), 'Library/Messages/chat.db');
+export function runPreflight(dbPath = DEFAULT_DB_PATH) {
+    const errors = [];
+    // 1. macOS check
+    if (process.platform !== 'darwin') {
+        errors.push(`This tool only runs on macOS (detected: ${process.platform}).` +
+            '\niMessage data is only available on Apple devices.');
+        return { ok: false, dbPath, errors };
+    }
+    // 2. File exists and readable
+    try {
+        accessSync(dbPath, constants.R_OK);
+    }
+    catch {
+        errors.push(`Cannot read ${dbPath}` +
+            '\n\nTo fix this, grant Full Disk Access to your terminal:' +
+            '\n  1. Open System Settings → Privacy & Security → Full Disk Access' +
+            '\n  2. Click the + button and add your terminal app (Terminal, iTerm2, etc.)' +
+            '\n  3. Restart your terminal and try again');
+        return { ok: false, dbPath, errors };
+    }
+    // 3. SQLite can open and query the DB
+    try {
+        // Dynamic import to avoid requiring better-sqlite3 at module level
+        const Database = require('better-sqlite3');
+        const db = new Database(dbPath, { readonly: true, fileMustExist: true });
+        try {
+            const row = db.prepare('SELECT count(*) as cnt FROM chat').get();
+            db.close();
+            return { ok: true, dbPath, chatCount: row.cnt, errors: [] };
+        }
+        finally {
+            try {
+                db.close();
+            }
+            catch {
+                /* already closed */
+            }
+        }
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (msg.includes('SQLITE_CANTOPEN') || msg.includes('unable to open')) {
+            errors.push(`Cannot open ${dbPath} as SQLite database.` +
+                '\nThe file may be locked or corrupted. Try closing Messages.app and retrying.');
+        }
+        else {
+            errors.push(`SQLite error: ${msg}`);
+        }
+        return { ok: false, dbPath, errors };
+    }
+}
+//# sourceMappingURL=preflight.js.map

package/dist/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../src/preflight.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,0BAA0B,CAAC,CAAC;AAS3E,MAAM,UAAU,YAAY,CAAC,SAAiB,eAAe;IAC3D,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,iBAAiB;IACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CACT,2CAA2C,OAAO,CAAC,QAAQ,IAAI;YAC7D,qDAAqD,CACxD,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC;QACH,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CACT,eAAe,MAAM,EAAE;YACrB,2DAA2D;YAC3D,qEAAqE;YACrE,8EAA8E;YAC9E,4CAA4C,CAC/C,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IAED,sCAAsC;IACtC,IAAI,CAAC;QACH,mEAAmE;QAEnE,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,EAE7D,CAAC;YACF,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC9D,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtE,MAAM,CAAC,IAAI,CACT,eAAe,MAAM,sBAAsB;gBACzC,+EAA+E,CAClF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;AACH,CAAC"}

package/dist/rpc-handler.d.ts

@@ -0,0 +1,26 @@
+/**
+ * JSON-RPC 2.0 request handler.
+ * Dispatches incoming requests to the SQLite query layer.
+ */
+import type { ImsgDatabase } from './db.js';
+interface JsonRpcRequest {
+    jsonrpc: '2.0';
+    id: number;
+    method: string;
+    params?: Record<string, unknown>;
+}
+interface JsonRpcResponse {
+    jsonrpc: '2.0';
+    id: number;
+    result?: unknown;
+    error?: {
+        code: number;
+        message: string;
+    };
+}
+export declare class RpcHandler {
+    private db;
+    constructor(db: ImsgDatabase);
+    handle(request: JsonRpcRequest): Promise<JsonRpcResponse>;
+}
+export {};

package/dist/rpc-handler.js

@@ -0,0 +1,62 @@
+/**
+ * JSON-RPC 2.0 request handler.
+ * Dispatches incoming requests to the SQLite query layer.
+ */
+import { listAppleContacts } from './contacts.js';
+export class RpcHandler {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async handle(request) {
+        const { id, method, params } = request;
+        try {
+            switch (method) {
+                case 'chats.list': {
+                    const limit = params?.limit;
+                    const chats = this.db.chatsList(limit);
+                    return { jsonrpc: '2.0', id, result: { chats } };
+                }
+                case 'messages.history': {
+                    const chatId = params?.chat_id;
+                    if (chatId === undefined || chatId === null) {
+                        return {
+                            jsonrpc: '2.0',
+                            id,
+                            error: { code: -32602, message: 'Missing required param: chat_id' },
+                        };
+                    }
+                    const opts = {
+                        limit: params?.limit,
+                        start: params?.start,
+                        end: params?.end,
+                    };
+                    const messages = this.db.messagesHistory(chatId, opts);
+                    return { jsonrpc: '2.0', id, result: { messages } };
+                }
+                case 'contacts.list': {
+                    const contacts = await listAppleContacts();
+                    return { jsonrpc: '2.0', id, result: { contacts } };
+                }
+                case 'ping': {
+                    return { jsonrpc: '2.0', id, result: { pong: true, ts: Date.now() } };
+                }
+                default:
+                    return {
+                        jsonrpc: '2.0',
+                        id,
+                        error: { code: -32601, message: `Method not found: ${method}` },
+                    };
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return {
+                jsonrpc: '2.0',
+                id,
+                error: { code: -32000, message: msg },
+            };
+        }
+    }
+}
+//# sourceMappingURL=rpc-handler.js.map

package/dist/rpc-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-handler.js","sourceRoot":"","sources":["../src/rpc-handler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAgBlD,MAAM,OAAO,UAAU;IACD;IAApB,YAAoB,EAAgB;QAAhB,OAAE,GAAF,EAAE,CAAc;IAAG,CAAC;IAExC,KAAK,CAAC,MAAM,CAAC,OAAuB;QAClC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAEvC,IAAI,CAAC;YACH,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,KAAK,GAAG,MAAM,EAAE,KAA2B,CAAC;oBAClD,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;gBACnD,CAAC;gBAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;oBACxB,MAAM,MAAM,GAAG,MAAM,EAAE,OAAiB,CAAC;oBACzC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;wBAC5C,OAAO;4BACL,OAAO,EAAE,KAAK;4BACd,EAAE;4BACF,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,iCAAiC,EAAE;yBACpE,CAAC;oBACJ,CAAC;oBACD,MAAM,IAAI,GAAG;wBACX,KAAK,EAAE,MAAM,EAAE,KAA2B;wBAC1C,KAAK,EAAE,MAAM,EAAE,KAA2B;wBAC1C,GAAG,EAAE,MAAM,EAAE,GAAyB;qBACvC,CAAC;oBACF,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;gBACtD,CAAC;gBAED,KAAK,eAAe,CAAC,CAAC,CAAC;oBACrB,MAAM,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;oBAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;gBACtD,CAAC;gBAED,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;gBACxE,CAAC;gBAED;oBACE,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,EAAE;wBACF,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,qBAAqB,MAAM,EAAE,EAAE;qBAChE,CAAC;YACN,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,EAAE;gBACF,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE;aACtC,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/tunnel.d.ts

@@ -0,0 +1,38 @@
+/**
+ * WebSocket tunnel client.
+ *
+ * Connects to the Botmem server, performs ECDH key exchange,
+ * then relays encrypted JSON-RPC requests to the local RPC handler.
+ */
+import { EventEmitter } from 'node:events';
+import type { RpcHandler } from './rpc-handler.js';
+export interface TunnelOptions {
+    serverUrl: string;
+    token: string;
+    rpcHandler: RpcHandler;
+}
+export type TunnelStatus = 'connecting' | 'authenticating' | 'connected' | 'disconnected' | 'error';
+export declare class TunnelClient extends EventEmitter {
+    private opts;
+    private ws;
+    private sessionKey;
+    private reconnectAttempt;
+    private reconnectTimer;
+    private heartbeatTimer;
+    private heartbeatTimeout;
+    private destroyed;
+    private _status;
+    constructor(opts: TunnelOptions);
+    get status(): TunnelStatus;
+    /** Start the tunnel connection. */
+    connect(): void;
+    /** Gracefully disconnect. */
+    destroy(): void;
+    private performHandshake;
+    private handleAuthResponse;
+    private handleEncryptedMessage;
+    private startHeartbeat;
+    private scheduleReconnect;
+    private cleanup;
+    private setStatus;
+}

package/dist/tunnel.js

@@ -0,0 +1,203 @@
+/**
+ * WebSocket tunnel client.
+ *
+ * Connects to the Botmem server, performs ECDH key exchange,
+ * then relays encrypted JSON-RPC requests to the local RPC handler.
+ */
+import WebSocket from 'ws';
+import { EventEmitter } from 'node:events';
+import { generateKeyPair, exportPublicKey, importPublicKey, deriveSessionKey, encryptJson, decryptJson, } from './crypto.js';
+const MAX_BACKOFF_MS = 30_000;
+const HEARTBEAT_INTERVAL_MS = 30_000;
+const HEARTBEAT_TIMEOUT_MS = 10_000;
+export class TunnelClient extends EventEmitter {
+    opts;
+    ws = null;
+    sessionKey = null;
+    reconnectAttempt = 0;
+    reconnectTimer = null;
+    heartbeatTimer = null;
+    heartbeatTimeout = null;
+    destroyed = false;
+    _status = 'disconnected';
+    constructor(opts) {
+        super();
+        this.opts = opts;
+    }
+    get status() {
+        return this._status;
+    }
+    /** Start the tunnel connection. */
+    connect() {
+        if (this.destroyed)
+            return;
+        this.setStatus('connecting');
+        const ws = new WebSocket(this.opts.serverUrl, {
+            headers: { 'User-Agent': 'botmem-apple-bridge/0.1' },
+        });
+        this.ws = ws;
+        ws.on('open', () => {
+            this.setStatus('authenticating');
+            this.performHandshake(ws);
+        });
+        ws.on('message', (data, isBinary) => {
+            if (this._status === 'authenticating') {
+                // Auth response is JSON text
+                this.handleAuthResponse(ws, typeof data === 'string' ? data : data.toString('utf-8'));
+            }
+            else if (this._status === 'connected') {
+                // All post-auth messages are encrypted binary
+                if (isBinary || Buffer.isBuffer(data)) {
+                    this.handleEncryptedMessage(ws, Buffer.isBuffer(data) ? data : Buffer.from(data));
+                }
+            }
+        });
+        ws.on('pong', () => {
+            if (this.heartbeatTimeout) {
+                clearTimeout(this.heartbeatTimeout);
+                this.heartbeatTimeout = null;
+            }
+        });
+        ws.on('close', (code, reason) => {
+            this.cleanup();
+            if (!this.destroyed) {
+                this.emit('log', `Disconnected (code=${code}, reason=${reason?.toString() || 'none'})`);
+                this.setStatus('disconnected');
+                this.scheduleReconnect();
+            }
+        });
+        ws.on('error', (err) => {
+            this.emit('log', `WebSocket error: ${err.message}`);
+            // 'close' will fire after this
+        });
+    }
+    /** Gracefully disconnect. */
+    destroy() {
+        this.destroyed = true;
+        this.cleanup();
+        if (this.ws) {
+            this.ws.close(1000, 'Bridge shutting down');
+            this.ws = null;
+        }
+        if (this.reconnectTimer) {
+            clearTimeout(this.reconnectTimer);
+            this.reconnectTimer = null;
+        }
+        this.setStatus('disconnected');
+    }
+    // ── Handshake ───────────────────────────────────────────────────────────
+    performHandshake(ws) {
+        const keyPair = generateKeyPair();
+        const publicKeyRaw = exportPublicKey(keyPair.publicKey);
+        // Store private key for deriving session key after server responds
+        ws._ecdhPrivate =
+            keyPair.privateKey;
+        ws.send(JSON.stringify({
+            event: 'auth',
+            data: {
+                token: this.opts.token,
+                publicKey: publicKeyRaw.toString('base64'),
+            },
+        }));
+    }
+    handleAuthResponse(ws, raw) {
+        try {
+            const msg = JSON.parse(raw);
+            if (msg.event !== 'auth')
+                return;
+            if (!msg.data.ok) {
+                const reason = msg.data.reason || 'unknown';
+                this.emit('log', `Auth failed: ${reason}`);
+                // Permanent auth failures — don't reconnect
+                this.destroyed = true;
+                this.setStatus('error');
+                this.emit('fatal', `Authentication failed: ${reason}. Check your bridge token.`);
+                ws.close(4401, 'Auth failed');
+                return;
+            }
+            if (!msg.data.publicKey || !ws._ecdhPrivate) {
+                this.emit('log', 'Auth response missing public key');
+                this.setStatus('error');
+                ws.close(4400, 'Missing public key');
+                return;
+            }
+            // Derive session key
+            const serverPubRaw = Buffer.from(msg.data.publicKey, 'base64');
+            const serverPub = importPublicKey(serverPubRaw);
+            this.sessionKey = deriveSessionKey(ws._ecdhPrivate, serverPub);
+            // Clean up private key from ws object
+            delete ws._ecdhPrivate;
+            this.reconnectAttempt = 0;
+            this.setStatus('connected');
+            this.startHeartbeat(ws);
+            this.emit('log', 'Tunnel connected — encrypted session established');
+        }
+        catch (err) {
+            this.emit('log', `Auth response parse error: ${err instanceof Error ? err.message : err}`);
+        }
+    }
+    // ── Encrypted message handling ──────────────────────────────────────────
+    async handleEncryptedMessage(ws, encrypted) {
+        if (!this.sessionKey)
+            return;
+        try {
+            const request = decryptJson(this.sessionKey, encrypted);
+            // Dispatch to RPC handler
+            const startedAt = Date.now();
+            const response = await this.opts.rpcHandler.handle(request);
+            const elapsedMs = Date.now() - startedAt;
+            if (elapsedMs >= 1000) {
+                this.emit('log', `RPC ${request.method} (id=${request.id}) completed in ${elapsedMs}ms`);
+            }
+            // Encrypt and send response
+            const encryptedResponse = encryptJson(this.sessionKey, response);
+            if (ws.readyState === WebSocket.OPEN) {
+                ws.send(encryptedResponse);
+            }
+        }
+        catch (err) {
+            this.emit('log', `Failed to handle message: ${err instanceof Error ? err.message : err}`);
+        }
+    }
+    // ── Heartbeat ───────────────────────────────────────────────────────────
+    startHeartbeat(ws) {
+        this.heartbeatTimer = setInterval(() => {
+            if (ws.readyState !== WebSocket.OPEN)
+                return;
+            ws.ping();
+            this.heartbeatTimeout = setTimeout(() => {
+                this.emit('log', 'Heartbeat timeout — closing connection');
+                ws.terminate();
+            }, HEARTBEAT_TIMEOUT_MS);
+        }, HEARTBEAT_INTERVAL_MS);
+    }
+    // ── Reconnection ────────────────────────────────────────────────────────
+    scheduleReconnect() {
+        if (this.destroyed)
+            return;
+        const delay = Math.min(1000 * Math.pow(2, this.reconnectAttempt), MAX_BACKOFF_MS);
+        this.reconnectAttempt++;
+        this.emit('log', `Reconnecting in ${(delay / 1000).toFixed(1)}s (attempt ${this.reconnectAttempt})`);
+        this.reconnectTimer = setTimeout(() => {
+            this.reconnectTimer = null;
+            this.connect();
+        }, delay);
+    }
+    // ── Helpers ─────────────────────────────────────────────────────────────
+    cleanup() {
+        this.sessionKey = null;
+        if (this.heartbeatTimer) {
+            clearInterval(this.heartbeatTimer);
+            this.heartbeatTimer = null;
+        }
+        if (this.heartbeatTimeout) {
+            clearTimeout(this.heartbeatTimeout);
+            this.heartbeatTimeout = null;
+        }
+    }
+    setStatus(status) {
+        this._status = status;
+        this.emit('status', status);
+    }
+}
+//# sourceMappingURL=tunnel.js.map

package/dist/tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.js","sourceRoot":"","sources":["../src/tunnel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,SAAS,MAAM,IAAI,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,WAAW,GACZ,MAAM,aAAa,CAAC;AAWrB,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAEpC,MAAM,OAAO,YAAa,SAAQ,YAAY;IAUxB;IATZ,EAAE,GAAqB,IAAI,CAAC;IAC5B,UAAU,GAAkB,IAAI,CAAC;IACjC,gBAAgB,GAAG,CAAC,CAAC;IACrB,cAAc,GAAyC,IAAI,CAAC;IAC5D,cAAc,GAA0C,IAAI,CAAC;IAC7D,gBAAgB,GAAyC,IAAI,CAAC;IAC9D,SAAS,GAAG,KAAK,CAAC;IAClB,OAAO,GAAiB,cAAc,CAAC;IAE/C,YAAoB,IAAmB;QACrC,KAAK,EAAE,CAAC;QADU,SAAI,GAAJ,IAAI,CAAe;IAEvC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,mCAAmC;IACnC,OAAO;QACL,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAE7B,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAC5C,OAAO,EAAE,EAAE,YAAY,EAAE,yBAAyB,EAAE;SACrD,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QAEb,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACjC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAqB,EAAE,QAAiB,EAAE,EAAE;YAC5D,IAAI,IAAI,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;gBACtC,6BAA6B;gBAC7B,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACxF,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;gBACxC,8CAA8C;gBAC9C,IAAI,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACjB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC1B,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBACpC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC/B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,sBAAsB,IAAI,YAAY,MAAM,EAAE,QAAQ,EAAE,IAAI,MAAM,GAAG,CAAC,CAAC;gBACxF,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;gBAC/B,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACrB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,oBAAoB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACpD,+BAA+B;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,6BAA6B;IAC7B,OAAO;QACL,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;YAC5C,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IAED,2EAA2E;IAEnE,gBAAgB,CAAC,EAAa;QACpC,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAExD,mEAAmE;QAClE,EAA+D,CAAC,YAAY;YAC3E,OAAO,CAAC,UAAU,CAAC;QAErB,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,MAAM;YACb,IAAI,EAAE;gBACJ,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;gBACtB,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAC3C;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,kBAAkB,CACxB,EAAkE,EAClE,GAAW;QAEX,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAGzB,CAAC;YAEF,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM;gBAAE,OAAO;YAEjC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,MAAM,EAAE,CAAC,CAAC;gBAC3C,4CAA4C;gBAC5C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,0BAA0B,MAAM,4BAA4B,CAAC,CAAC;gBACjF,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;gBACrD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACxB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,qBAAqB;YACrB,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC/D,MAAM,SAAS,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAE/D,sCAAsC;YACtC,OAAO,EAAE,CAAC,YAAY,CAAC;YAEvB,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAC5B,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,kDAAkD,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,2EAA2E;IAEnE,KAAK,CAAC,sBAAsB,CAAC,EAAa,EAAE,SAAiB;QACnE,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO;QAE7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,WAAW,CAKxB,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAE/B,0BAA0B;YAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACzC,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,OAAO,CAAC,MAAM,QAAQ,OAAO,CAAC,EAAE,kBAAkB,SAAS,IAAI,CAAC,CAAC;YAC3F,CAAC;YAED,4BAA4B;YAC5B,MAAM,iBAAiB,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACjE,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,2EAA2E;IAEnE,cAAc,CAAC,EAAa;QAClC,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;gBAAE,OAAO;YAE7C,EAAE,CAAC,IAAI,EAAE,CAAC;YAEV,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAC;gBAC3D,EAAE,CAAC,SAAS,EAAE,CAAC;YACjB,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAC3B,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC5B,CAAC;IAED,2EAA2E;IAEnE,iBAAiB;QACvB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAE3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,cAAc,CAAC,CAAC;QAClF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC,IAAI,CACP,KAAK,EACL,mBAAmB,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,gBAAgB,GAAG,CACnF,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAED,2EAA2E;IAEnE,OAAO;QACb,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACpC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC/B,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,MAAoB;QACpC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@botmem/apple-bridge",
+  "version": "0.35.25",
+  "description": "Apple bridge for Botmem — reads local Contacts and iMessages through an encrypted WebSocket tunnel",
+  "type": "module",
+  "bin": {
+    "apple-bridge": "./dist/cli.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "better-sqlite3": "^12.9.0",
+    "commander": "^14.0.3",
+    "ws": "^8.20.0"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.12",
+    "@types/node": "^25.6.0",
+    "@types/ws": "^8.5.13",
+    "typescript": "^5.7.0"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "os": [
+    "darwin"
+  ],
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "MIT"
+}