@imenam/mcp-messenger 1.0.29 → 1.0.31

package/dist/src/core/store.js

@@ -2,6 +2,7 @@ import Database from "better-sqlite3";
 import { EventEmitter } from "node:events";
 import fs from "node:fs";
 import path from "node:path";
+import { MAX_ATTACHMENTS, MAX_ATTACHMENTS_TOTAL_BYTES, MAX_ATTACHMENT_BYTES, formatBytes } from "./attachments.js";
 import { newId } from "./ids.js";
 import { DELIVERY_ROLES, SYSTEM_FOLDERS, } from "./types.js";
 /** Erreur métier : traduite en 4xx par la couche HTTP, en message d'outil côté MCP. */
@@ -18,14 +19,18 @@ const MAX_LIMIT = 100;
 const FOLDER_NAME_RE = /^[a-z0-9][a-z0-9 _-]{0,39}$/;
 const THREAD_TITLE_MAX = 200;
 const THREAD_DESCRIPTION_MAX = 2000;
+const FILENAME_MAX = 255;
+const MIME_TYPE_RE = /^[a-z0-9][a-z0-9!#$&^_.+-]*\/[a-z0-9][a-z0-9!#$&^_.+-]*$/;
+const DEFAULT_MIME_TYPE = "application/octet-stream";
+const LINK_NOTE_MAX = 500;
 /**
  * Dernière activité d'une boîte : sa dernière connexion, ou le dernier message qui l'a
  * touchée. Une boîte qui ne fait que recevoir reste vivante, alors que `last_seen_at`
  * seul la ferait paraître abandonnée.
  */
-const LAST_ACTIVITY = `MAX(
-  COALESCE(a.last_seen_at, ''),
-  COALESCE((SELECT MAX(d.created_at) FROM deliveries d WHERE d.agent_id = a.id), '')
+const LAST_ACTIVITY = `MAX(
+  COALESCE(a.last_seen_at, ''),
+  COALESCE((SELECT MAX(d.created_at) FROM deliveries d WHERE d.agent_id = a.id), '')
 )`;
 /** Colonnes du fil jointes à tout message : le titre voyage avec chaque livraison. */
 const THREAD_JOIN = "LEFT JOIN threads t ON t.id = m.thread_id";
@@ -38,10 +43,10 @@ const THREAD_JOIN = "LEFT JOIN threads t ON t.id = m.thread_id";
  * pose. Un message n'ayant qu'une copie d'expéditeur (destinataire jamais enregistré) n'a
  * pas de ligne ici : `read_at` reste alors nul, donc non lu.
  */
-const ADMIN_DELIVERY = `'to' AS role,
-                (SELECT dr.read_at FROM deliveries dr WHERE dr.message_id = m.id AND dr.role != 'sender'
-                  ORDER BY dr.agent_id LIMIT 1) AS read_at,
-                COALESCE((SELECT dr.folder FROM deliveries dr WHERE dr.message_id = m.id AND dr.role != 'sender'
+const ADMIN_DELIVERY = `'to' AS role,
+                (SELECT dr.read_at FROM deliveries dr WHERE dr.message_id = m.id AND dr.role != 'sender'
+                  ORDER BY dr.agent_id LIMIT 1) AS read_at,
+                COALESCE((SELECT dr.folder FROM deliveries dr WHERE dr.message_id = m.id AND dr.role != 'sender'
                   ORDER BY dr.agent_id LIMIT 1), 'inbox') AS folder`;
 /**
  * Boîte aux lettres persistée en SQLite.
@@ -64,84 +69,108 @@ export class MessageStore extends EventEmitter {
         this.migrate();
     }
     migrate() {
-        this.db.exec(`
-      CREATE TABLE IF NOT EXISTS agents (
-        id                TEXT PRIMARY KEY,
-        agent_name        TEXT,
-        agent_description TEXT,
-        display_name      TEXT,
-        description       TEXT,
-        created_at   TEXT NOT NULL,
-        last_seen_at TEXT,
-        registered   INTEGER NOT NULL DEFAULT 0
-      );
-
-      CREATE TABLE IF NOT EXISTS messages (
-        id          TEXT PRIMARY KEY,
-        thread_id   TEXT NOT NULL,
-        sender_id   TEXT NOT NULL,
-        subject     TEXT NOT NULL,
-        body        TEXT NOT NULL,
-        priority    TEXT NOT NULL DEFAULT 'normal',
-        in_reply_to TEXT,
-        created_at  TEXT NOT NULL
-      );
-
-      CREATE TABLE IF NOT EXISTS deliveries (
-        id         TEXT PRIMARY KEY,
-        message_id TEXT NOT NULL REFERENCES messages(id) ON DELETE CASCADE,
-        agent_id   TEXT NOT NULL,
-        role       TEXT NOT NULL,
-        folder     TEXT NOT NULL,
-        read_at    TEXT,
-        starred    INTEGER NOT NULL DEFAULT 0,
-        created_at TEXT NOT NULL,
-        UNIQUE (message_id, agent_id, role)
-      );
-
-      CREATE TABLE IF NOT EXISTS threads (
-        id          TEXT PRIMARY KEY,
-        title       TEXT,
-        description TEXT,
-        named_by    TEXT,
-        created_at  TEXT NOT NULL,
-        updated_at  TEXT
-      );
-
-      CREATE TABLE IF NOT EXISTS folders (
-        agent_id   TEXT NOT NULL,
-        name       TEXT NOT NULL,
-        created_at TEXT NOT NULL,
-        PRIMARY KEY (agent_id, name)
-      );
-
-      CREATE INDEX IF NOT EXISTS idx_deliveries_mailbox ON deliveries (agent_id, folder, created_at DESC);
-      CREATE INDEX IF NOT EXISTS idx_deliveries_message ON deliveries (message_id);
-      CREATE INDEX IF NOT EXISTS idx_messages_thread ON messages (thread_id, created_at);
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS agents (
+        id                TEXT PRIMARY KEY,
+        agent_name        TEXT,
+        agent_description TEXT,
+        display_name      TEXT,
+        description       TEXT,
+        created_at   TEXT NOT NULL,
+        last_seen_at TEXT,
+        registered   INTEGER NOT NULL DEFAULT 0
+      );
+
+      CREATE TABLE IF NOT EXISTS messages (
+        id          TEXT PRIMARY KEY,
+        thread_id   TEXT NOT NULL,
+        sender_id   TEXT NOT NULL,
+        subject     TEXT NOT NULL,
+        body        TEXT NOT NULL,
+        priority    TEXT NOT NULL DEFAULT 'normal',
+        in_reply_to TEXT,
+        created_at  TEXT NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS deliveries (
+        id         TEXT PRIMARY KEY,
+        message_id TEXT NOT NULL REFERENCES messages(id) ON DELETE CASCADE,
+        agent_id   TEXT NOT NULL,
+        role       TEXT NOT NULL,
+        folder     TEXT NOT NULL,
+        read_at    TEXT,
+        starred    INTEGER NOT NULL DEFAULT 0,
+        created_at TEXT NOT NULL,
+        UNIQUE (message_id, agent_id, role)
+      );
+
+      CREATE TABLE IF NOT EXISTS threads (
+        id          TEXT PRIMARY KEY,
+        title       TEXT,
+        description TEXT,
+        named_by    TEXT,
+        created_at  TEXT NOT NULL,
+        updated_at  TEXT
+      );
+
+      CREATE TABLE IF NOT EXISTS folders (
+        agent_id   TEXT NOT NULL,
+        name       TEXT NOT NULL,
+        created_at TEXT NOT NULL,
+        PRIMARY KEY (agent_id, name)
+      );
+
+      CREATE TABLE IF NOT EXISTS attachments (
+        id         TEXT PRIMARY KEY,
+        message_id TEXT NOT NULL REFERENCES messages(id) ON DELETE CASCADE,
+        position   INTEGER NOT NULL,
+        filename   TEXT NOT NULL,
+        mime_type  TEXT NOT NULL,
+        size       INTEGER NOT NULL,
+        data       BLOB NOT NULL,
+        created_at TEXT NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS links (
+        id           TEXT PRIMARY KEY,
+        mailbox_a    TEXT NOT NULL,
+        mailbox_b    TEXT NOT NULL,
+        note         TEXT,
+        created_at   TEXT NOT NULL,
+        seen_by_a_at TEXT,
+        seen_by_b_at TEXT,
+        UNIQUE (mailbox_a, mailbox_b)
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_links_b ON links (mailbox_b);
+      CREATE INDEX IF NOT EXISTS idx_attachments_message ON attachments (message_id, position);
+      CREATE INDEX IF NOT EXISTS idx_deliveries_mailbox ON deliveries (agent_id, folder, created_at DESC);
+      CREATE INDEX IF NOT EXISTS idx_deliveries_message ON deliveries (message_id);
+      CREATE INDEX IF NOT EXISTS idx_messages_thread ON messages (thread_id, created_at);
     `);
         // Bases antérieures à la séparation agent / boîte : `display_name` y tenait les deux
         // rôles, et venait presque toujours de la configuration (le nom du projet). On le
         // déplace vers l'identité de l'agent ; la boîte repart sans nom, à poser par l'agent.
         const agentColumns = this.db.prepare("PRAGMA table_info(agents)").all().map((c) => c.name);
         if (!agentColumns.includes("agent_name")) {
-            this.db.exec(`
-        ALTER TABLE agents ADD COLUMN agent_name TEXT;
-        ALTER TABLE agents ADD COLUMN agent_description TEXT;
-        UPDATE agents
-           SET agent_name = display_name,
-               agent_description = description,
-               display_name = NULL,
-               description = NULL;
+            this.db.exec(`
+        ALTER TABLE agents ADD COLUMN agent_name TEXT;
+        ALTER TABLE agents ADD COLUMN agent_description TEXT;
+        UPDATE agents
+           SET agent_name = display_name,
+               agent_description = description,
+               display_name = NULL,
+               description = NULL;
       `);
         }
         // Bases antérieures aux fils nommés : chaque fil déjà présent reçoit sa ligne, sans
         // titre. L'affichage retombe alors sur le sujet d'ouverture, comme avant.
-        this.db.exec(`
-      INSERT INTO threads (id, title, description, named_by, created_at, updated_at)
-      SELECT m.thread_id, NULL, NULL, NULL, MIN(m.created_at), NULL
-        FROM messages m
-       WHERE NOT EXISTS (SELECT 1 FROM threads t WHERE t.id = m.thread_id)
-       GROUP BY m.thread_id;
+        this.db.exec(`
+      INSERT INTO threads (id, title, description, named_by, created_at, updated_at)
+      SELECT m.thread_id, NULL, NULL, NULL, MIN(m.created_at), NULL
+        FROM messages m
+       WHERE NOT EXISTS (SELECT 1 FROM threads t WHERE t.id = m.thread_id)
+       GROUP BY m.thread_id;
     `);
     }
     close() {
@@ -158,19 +187,19 @@ export class MessageStore extends EventEmitter {
         const existing = this.db.prepare("SELECT id FROM agents WHERE id = ?").get(id);
         if (!existing) {
             this.db
-                .prepare(`INSERT INTO agents (id, agent_name, agent_description, display_name, description, created_at, last_seen_at, registered)
+                .prepare(`INSERT INTO agents (id, agent_name, agent_description, display_name, description, created_at, last_seen_at, registered)
            VALUES (?, ?, ?, ?, ?, ?, ?, ?)`)
                 .run(id, opts.agent_name ?? null, opts.agent_description ?? null, opts.display_name ?? null, opts.description ?? null, now, opts.registered ? now : null, opts.registered ? 1 : 0);
         }
         else {
             this.db
-                .prepare(`UPDATE agents
-              SET agent_name        = COALESCE(?, agent_name),
-                  agent_description = COALESCE(?, agent_description),
-                  display_name      = COALESCE(?, display_name),
-                  description       = COALESCE(?, description),
-                  registered        = MAX(registered, ?),
-                  last_seen_at      = CASE WHEN ? = 1 THEN ? ELSE last_seen_at END
+                .prepare(`UPDATE agents
+              SET agent_name        = COALESCE(?, agent_name),
+                  agent_description = COALESCE(?, agent_description),
+                  display_name      = COALESCE(?, display_name),
+                  description       = COALESCE(?, description),
+                  registered        = MAX(registered, ?),
+                  last_seen_at      = CASE WHEN ? = 1 THEN ? ELSE last_seen_at END
             WHERE id = ?`)
                 .run(opts.agent_name ?? null, opts.agent_description ?? null, opts.display_name ?? null, opts.description ?? null, opts.registered ? 1 : 0, opts.registered ? 1 : 0, now, id);
         }
@@ -192,9 +221,9 @@ export class MessageStore extends EventEmitter {
     listAgents(exclude) {
         const excluded = exclude ? normalizeAgentId(exclude) : "";
         const rows = this.db
-            .prepare(`SELECT a.*, ${LAST_ACTIVITY} AS last_activity_at
-           FROM agents a
-          WHERE a.id != ?
+            .prepare(`SELECT a.*, ${LAST_ACTIVITY} AS last_activity_at
+           FROM agents a
+          WHERE a.id != ?
           ORDER BY last_activity_at DESC, a.id`)
             .all(excluded);
         return rows.map((r) => ({
@@ -223,6 +252,7 @@ export class MessageStore extends EventEmitter {
             throw new MessengerError("an agent cannot send a message to itself");
         const title = normalizeLabel(input.thread_title, THREAD_TITLE_MAX, "thread_title");
         const threadDescription = normalizeLabel(input.thread_description, THREAD_DESCRIPTION_MAX, "thread_description");
+        const attachments = normalizeAttachments(input.attachments ?? []);
         let threadId;
         let inReplyTo = null;
         if (input.reply_to) {
@@ -251,18 +281,23 @@ export class MessageStore extends EventEmitter {
             // Le fil naît avec son premier message ; sur une réponse, la ligne existe déjà et
             // n'est touchée que si l'expéditeur fournit un nouveau titre.
             this.db
-                .prepare(`INSERT INTO threads (id, title, description, named_by, created_at, updated_at)
-           VALUES (?, NULL, NULL, NULL, ?, NULL)
+                .prepare(`INSERT INTO threads (id, title, description, named_by, created_at, updated_at)
+           VALUES (?, NULL, NULL, NULL, ?, NULL)
            ON CONFLICT (id) DO NOTHING`)
                 .run(threadId, now);
             if (title !== null || threadDescription !== null) {
                 this.renameThreadRow(threadId, from, title, threadDescription, now);
             }
             this.db
-                .prepare(`INSERT INTO messages (id, thread_id, sender_id, subject, body, priority, in_reply_to, created_at)
+                .prepare(`INSERT INTO messages (id, thread_id, sender_id, subject, body, priority, in_reply_to, created_at)
            VALUES (?, ?, ?, ?, ?, ?, ?, ?)`)
                 .run(messageId, threadId, from, subject, input.body, priority, inReplyTo, now);
-            const insert = this.db.prepare(`INSERT INTO deliveries (id, message_id, agent_id, role, folder, read_at, starred, created_at)
+            const insertAttachment = this.db.prepare(`INSERT INTO attachments (id, message_id, position, filename, mime_type, size, data, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?)`);
+            attachments.forEach((a, position) => {
+                insertAttachment.run(newId("att"), messageId, position, a.filename, a.mime_type, a.data.length, a.data, now);
+            });
+            const insert = this.db.prepare(`INSERT INTO deliveries (id, message_id, agent_id, role, folder, read_at, starred, created_at)
          VALUES (?, ?, ?, ?, ?, ?, 0, ?)`);
             for (const d of deliveries) {
                 insert.run(newId("dlv"), messageId, d.agent_id, d.role, d.folder, d.read_at, now);
@@ -307,27 +342,27 @@ export class MessageStore extends EventEmitter {
             params.push(like, like);
         }
         const rows = this.db
-            .prepare(`SELECT m.id AS message_id, m.thread_id, t.title AS thread_title, m.sender_id, m.subject, m.body,
-                m.priority, m.in_reply_to, m.created_at, d.folder, d.role, d.read_at, d.starred
-           FROM deliveries d
-           JOIN messages m ON m.id = d.message_id
-           ${THREAD_JOIN}
-          WHERE ${where.join(" AND ")}
-          ORDER BY m.created_at DESC, m.id DESC
+            .prepare(`SELECT m.id AS message_id, m.thread_id, t.title AS thread_title, m.sender_id, m.subject, m.body,
+                m.priority, m.in_reply_to, m.created_at, d.folder, d.role, d.read_at, d.starred
+           FROM deliveries d
+           JOIN messages m ON m.id = d.message_id
+           ${THREAD_JOIN}
+          WHERE ${where.join(" AND ")}
+          ORDER BY m.created_at DESC, m.id DESC
           LIMIT ? OFFSET ?`)
             .all(...params, limit, offset);
-        const recipients = this.recipientsFor(rows.map((r) => r.message_id));
-        return rows.map((row) => this.toSummary(row, recipients));
+        const related = this.relatedFor(rows.map((r) => r.message_id));
+        return rows.map((row) => this.toSummary(row, related));
     }
     getMessage(agentId, messageId, markRead = false) {
         const row = this.db
-            .prepare(`SELECT m.id AS message_id, m.thread_id, t.title AS thread_title, m.sender_id, m.subject, m.body,
-                m.priority, m.in_reply_to, m.created_at, d.folder, d.role, d.read_at, d.starred
-           FROM deliveries d
-           JOIN messages m ON m.id = d.message_id
-           ${THREAD_JOIN}
-          WHERE d.agent_id = ? AND d.message_id = ?
-          ORDER BY CASE d.role WHEN 'to' THEN 0 ELSE 1 END
+            .prepare(`SELECT m.id AS message_id, m.thread_id, t.title AS thread_title, m.sender_id, m.subject, m.body,
+                m.priority, m.in_reply_to, m.created_at, d.folder, d.role, d.read_at, d.starred
+           FROM deliveries d
+           JOIN messages m ON m.id = d.message_id
+           ${THREAD_JOIN}
+          WHERE d.agent_id = ? AND d.message_id = ?
+          ORDER BY CASE d.role WHEN 'to' THEN 0 ELSE 1 END
           LIMIT 1`)
             .get(agentId, messageId);
         if (!row)
@@ -339,26 +374,38 @@ export class MessageStore extends EventEmitter {
                 .run(now, agentId, messageId);
             row.read_at = now;
         }
-        const recipients = this.recipientsFor([messageId]);
-        return this.toMessage(row, recipients);
+        const related = this.relatedFor([messageId]);
+        return this.toMessage(row, related);
     }
     /** Tous les messages d'un fil visibles par l'agent, du plus ancien au plus récent. */
     getThread(agentId, threadId) {
         const rows = this.db
-            .prepare(`SELECT m.id AS message_id, m.thread_id, t.title AS thread_title, m.sender_id, m.subject, m.body,
-                m.priority, m.in_reply_to, m.created_at,
-                MIN(d.folder) AS folder, MIN(d.role) AS role, MIN(d.read_at) AS read_at, MAX(d.starred) AS starred
-           FROM deliveries d
-           JOIN messages m ON m.id = d.message_id
-           ${THREAD_JOIN}
-          WHERE d.agent_id = ? AND m.thread_id = ?
-          GROUP BY m.id
+            .prepare(`SELECT m.id AS message_id, m.thread_id, t.title AS thread_title, m.sender_id, m.subject, m.body,
+                m.priority, m.in_reply_to, m.created_at,
+                MIN(d.folder) AS folder, MIN(d.role) AS role, MIN(d.read_at) AS read_at, MAX(d.starred) AS starred
+           FROM deliveries d
+           JOIN messages m ON m.id = d.message_id
+           ${THREAD_JOIN}
+          WHERE d.agent_id = ? AND m.thread_id = ?
+          GROUP BY m.id
           ORDER BY m.created_at ASC`)
             .all(agentId, threadId);
         if (rows.length === 0)
             throw new MessengerError(`thread not found in this mailbox: ${threadId}`, 404);
-        const recipients = this.recipientsFor(rows.map((r) => r.message_id));
-        return rows.map((row) => this.toMessage(row, recipients));
+        const related = this.relatedFor(rows.map((r) => r.message_id));
+        return rows.map((row) => this.toMessage(row, related));
+    }
+    /** Pièce jointe d'un message livré à cet agent, contenu compris. */
+    getAttachment(agentId, attachmentId) {
+        const row = this.db
+            .prepare(`SELECT a.id AS attachment_id, a.message_id, a.filename, a.mime_type, a.size, a.data
+           FROM attachments a
+          WHERE a.id = ?
+            AND EXISTS (SELECT 1 FROM deliveries d WHERE d.message_id = a.message_id AND d.agent_id = ?)`)
+            .get(attachmentId, agentId);
+        if (!row)
+            throw new MessengerError(`attachment not found in this mailbox: ${attachmentId}`, 404);
+        return row;
     }
     // --- Fils ---------------------------------------------------------------
     getThreadInfo(threadId) {
@@ -398,7 +445,7 @@ export class MessageStore extends EventEmitter {
         // qu'elle ait écrit ou seulement reçu. Les paramètres du WHERE se lient avant ceux du
         // HAVING : cette condition doit donc être poussée avant celles de la recherche.
         if (opts.with_agent) {
-            where.push(`EXISTS (SELECT 1 FROM deliveries d2 JOIN messages m2 ON m2.id = d2.message_id
+            where.push(`EXISTS (SELECT 1 FROM deliveries d2 JOIN messages m2 ON m2.id = d2.message_id
                   WHERE m2.thread_id = m.thread_id AND d2.agent_id = ?)`);
             params.push(normalizeAgentId(opts.with_agent));
         }
@@ -411,20 +458,20 @@ export class MessageStore extends EventEmitter {
             params.push(like, like, like);
         }
         const rows = this.db
-            .prepare(`SELECT m.thread_id,
-                t.title, t.description, t.named_by, t.created_at, t.updated_at,
-                (SELECT r.subject FROM messages r WHERE r.thread_id = m.thread_id
-                  ORDER BY r.created_at ASC, r.id ASC LIMIT 1) AS subject,
-                COUNT(DISTINCT m.id) AS messages,
-                COUNT(DISTINCT CASE WHEN d.read_at IS NULL AND d.role != 'sender' THEN m.id END) AS unread,
-                MAX(m.created_at) AS last_message_at
-           FROM deliveries d
-           JOIN messages m ON m.id = d.message_id
-           ${THREAD_JOIN}
-          WHERE ${where.join(" AND ")}
-          GROUP BY m.thread_id
-          ${having.length ? `HAVING ${having.join(" AND ")}` : ""}
-          ORDER BY last_message_at DESC
+            .prepare(`SELECT m.thread_id,
+                t.title, t.description, t.named_by, t.created_at, t.updated_at,
+                (SELECT r.subject FROM messages r WHERE r.thread_id = m.thread_id
+                  ORDER BY r.created_at ASC, r.id ASC LIMIT 1) AS subject,
+                COUNT(DISTINCT m.id) AS messages,
+                COUNT(DISTINCT CASE WHEN d.read_at IS NULL AND d.role != 'sender' THEN m.id END) AS unread,
+                MAX(m.created_at) AS last_message_at
+           FROM deliveries d
+           JOIN messages m ON m.id = d.message_id
+           ${THREAD_JOIN}
+          WHERE ${where.join(" AND ")}
+          GROUP BY m.thread_id
+          ${having.length ? `HAVING ${having.join(" AND ")}` : ""}
+          ORDER BY last_message_at DESC
           LIMIT ? OFFSET ?`)
             .all(...params, limit, offset);
         const participants = this.participantsFor(rows.map((r) => r.thread_id));
@@ -447,18 +494,18 @@ export class MessageStore extends EventEmitter {
     /** Écriture brute du nom : un champ absent (`null`) laisse l'ancienne valeur en place. */
     renameThreadRow(threadId, agentId, title, description, now) {
         this.db
-            .prepare(`INSERT INTO threads (id, title, description, named_by, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?, ?)
-         ON CONFLICT (id) DO UPDATE SET
-           title       = COALESCE(excluded.title, threads.title),
-           description = COALESCE(excluded.description, threads.description),
-           named_by    = excluded.named_by,
+            .prepare(`INSERT INTO threads (id, title, description, named_by, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?)
+         ON CONFLICT (id) DO UPDATE SET
+           title       = COALESCE(excluded.title, threads.title),
+           description = COALESCE(excluded.description, threads.description),
+           named_by    = excluded.named_by,
            updated_at  = excluded.updated_at`)
             .run(threadId, title, description, agentId, now, now);
     }
     assertThreadVisible(agentId, threadId) {
         const row = this.db
-            .prepare(`SELECT 1 FROM deliveries d JOIN messages m ON m.id = d.message_id
+            .prepare(`SELECT 1 FROM deliveries d JOIN messages m ON m.id = d.message_id
           WHERE d.agent_id = ? AND m.thread_id = ? LIMIT 1`)
             .get(agentId, threadId);
         if (!row)
@@ -471,9 +518,9 @@ export class MessageStore extends EventEmitter {
             return map;
         const placeholders = ids.map(() => "?").join(",");
         const rows = this.db
-            .prepare(`SELECT DISTINCT m.thread_id, d.agent_id
-           FROM deliveries d JOIN messages m ON m.id = d.message_id
-          WHERE m.thread_id IN (${placeholders})
+            .prepare(`SELECT DISTINCT m.thread_id, d.agent_id
+           FROM deliveries d JOIN messages m ON m.id = d.message_id
+          WHERE m.thread_id IN (${placeholders})
           ORDER BY d.agent_id`)
             .all(...ids);
         for (const row of rows) {
@@ -519,7 +566,7 @@ export class MessageStore extends EventEmitter {
     listFolders(agentId) {
         const custom = this.db.prepare("SELECT name FROM folders WHERE agent_id = ? ORDER BY name").all(agentId);
         const counts = this.db
-            .prepare(`SELECT folder, COUNT(*) AS total, SUM(CASE WHEN read_at IS NULL THEN 1 ELSE 0 END) AS unread
+            .prepare(`SELECT folder, COUNT(*) AS total, SUM(CASE WHEN read_at IS NULL THEN 1 ELSE 0 END) AS unread
            FROM deliveries WHERE agent_id = ? GROUP BY folder`)
             .all(agentId);
         const byName = new Map(counts.map((c) => [c.folder, c]));
@@ -558,7 +605,7 @@ export class MessageStore extends EventEmitter {
         if (!exists)
             throw new MessengerError(`folder not found: ${folder}`, 404);
         const moved = this.db
-            .prepare(`UPDATE deliveries SET folder = CASE role WHEN 'sender' THEN 'sent' ELSE 'inbox' END
+            .prepare(`UPDATE deliveries SET folder = CASE role WHEN 'sender' THEN 'sent' ELSE 'inbox' END
           WHERE agent_id = ? AND folder = ?`)
             .run(agentId, folder).changes;
         this.db.prepare("DELETE FROM folders WHERE agent_id = ? AND name = ?").run(agentId, folder);
@@ -591,10 +638,10 @@ export class MessageStore extends EventEmitter {
      */
     staleMailboxes(before) {
         const rows = this.db
-            .prepare(`SELECT a.*, ${LAST_ACTIVITY} AS last_activity_at,
-                (SELECT COUNT(*) FROM deliveries d WHERE d.agent_id = a.id) AS messages
-           FROM agents a
-          WHERE MAX(${LAST_ACTIVITY}, a.created_at) < ?
+            .prepare(`SELECT a.*, ${LAST_ACTIVITY} AS last_activity_at,
+                (SELECT COUNT(*) FROM deliveries d WHERE d.agent_id = a.id) AS messages
+           FROM agents a
+          WHERE MAX(${LAST_ACTIVITY}, a.created_at) < ?
           ORDER BY MAX(${LAST_ACTIVITY}, a.created_at) ASC`)
             .all(before);
         return rows.map((row) => ({
@@ -613,10 +660,10 @@ export class MessageStore extends EventEmitter {
      */
     mailboxesCreatedBefore(before) {
         const rows = this.db
-            .prepare(`SELECT a.*, ${LAST_ACTIVITY} AS last_activity_at,
-                (SELECT COUNT(*) FROM deliveries d WHERE d.agent_id = a.id) AS messages
-           FROM agents a
-          WHERE a.created_at < ?
+            .prepare(`SELECT a.*, ${LAST_ACTIVITY} AS last_activity_at,
+                (SELECT COUNT(*) FROM deliveries d WHERE d.agent_id = a.id) AS messages
+           FROM agents a
+          WHERE a.created_at < ?
           ORDER BY a.created_at ASC`)
             .all(before);
         return rows.map((row) => ({
@@ -635,9 +682,9 @@ export class MessageStore extends EventEmitter {
      */
     emptyMailboxes() {
         const rows = this.db
-            .prepare(`SELECT a.*, ${LAST_ACTIVITY} AS last_activity_at, 0 AS messages
-           FROM agents a
-          WHERE NOT EXISTS (SELECT 1 FROM deliveries d WHERE d.agent_id = a.id)
+            .prepare(`SELECT a.*, ${LAST_ACTIVITY} AS last_activity_at, 0 AS messages
+           FROM agents a
+          WHERE NOT EXISTS (SELECT 1 FROM deliveries d WHERE d.agent_id = a.id)
           ORDER BY a.created_at ASC`)
             .all();
         return rows.map((row) => ({
@@ -665,9 +712,11 @@ export class MessageStore extends EventEmitter {
             const dropDeliveries = this.db.prepare("DELETE FROM deliveries WHERE agent_id = ?");
             const dropFolders = this.db.prepare("DELETE FROM folders WHERE agent_id = ?");
             const dropAgent = this.db.prepare("DELETE FROM agents WHERE id = ?");
+            const dropLinks = this.db.prepare("DELETE FROM links WHERE mailbox_a = ? OR mailbox_b = ?");
             for (const id of ids) {
                 deliveries += dropDeliveries.run(id).changes;
                 dropFolders.run(id);
+                dropLinks.run(id, id);
                 mailboxes += dropAgent.run(id).changes;
             }
             this.dropOrphanMessages();
@@ -681,6 +730,74 @@ export class MessageStore extends EventEmitter {
             };
         })();
     }
+    // --- Liaisons -----------------------------------------------------------
+    /**
+     * Lie deux boîtes existantes. La paire est stockée dans l'ordre des adresses : une
+     * liaison n'a pas de direction, et la même paire ne peut être liée deux fois.
+     */
+    createLink(first, second, note) {
+        const ids = [normalizeAgentId(first), normalizeAgentId(second)];
+        if (!ids[0] || !ids[1])
+            throw new MessengerError("two mailbox addresses are required");
+        if (ids[0] === ids[1])
+            throw new MessengerError("a mailbox cannot be linked to itself");
+        for (const id of ids) {
+            if (!this.getAgent(id))
+                throw new MessengerError(`mailbox not found: ${id}`, 404);
+        }
+        const [a, b] = ids.sort();
+        if (this.db.prepare("SELECT 1 FROM links WHERE mailbox_a = ? AND mailbox_b = ?").get(a, b)) {
+            throw new MessengerError(`these mailboxes are already linked: ${a}, ${b}`, 409);
+        }
+        const id = newId("lnk");
+        this.db
+            .prepare("INSERT INTO links (id, mailbox_a, mailbox_b, note, created_at) VALUES (?, ?, ?, ?, ?)")
+            .run(id, a, b, normalizeLabel(note, LINK_NOTE_MAX, "note"), new Date().toISOString());
+        for (const agentId of [a, b])
+            this.emit("link", { agent_id: agentId, link_id: id });
+        return this.getLink(id);
+    }
+    getLink(linkId) {
+        const row = this.db.prepare("SELECT * FROM links WHERE id = ?").get(linkId);
+        return row ? toLink(row) : null;
+    }
+    /** Toutes les liaisons du serveur, la plus récente en tête. */
+    listLinks() {
+        const rows = this.db.prepare("SELECT * FROM links ORDER BY created_at DESC, rowid DESC").all();
+        return rows.map(toLink);
+    }
+    deleteLink(linkId) {
+        const removed = this.db.prepare("DELETE FROM links WHERE id = ?").run(linkId).changes;
+        if (removed === 0)
+            throw new MessengerError(`link not found: ${linkId}`, 404);
+    }
+    /**
+     * Liaisons d'une boîte, la plus récente en tête, chacune avec la fiche de la boîte d'en
+     * face. `markSeen` note que l'agent de cette boîte en a pris connaissance.
+     */
+    linksFor(agentId, opts = {}) {
+        const id = normalizeAgentId(agentId);
+        const where = ["(mailbox_a = ? OR mailbox_b = ?)"];
+        const params = [id, id];
+        if (opts.linkId) {
+            where.push("id = ?");
+            params.push(opts.linkId);
+        }
+        const rows = this.db
+            .prepare(`SELECT * FROM links WHERE ${where.join(" AND ")} ORDER BY created_at DESC, rowid DESC`)
+            .all(...params);
+        if (opts.markSeen && rows.length > 0) {
+            const now = new Date().toISOString();
+            this.db.prepare("UPDATE links SET seen_by_a_at = ? WHERE mailbox_a = ? AND seen_by_a_at IS NULL").run(now, id);
+            this.db.prepare("UPDATE links SET seen_by_b_at = ? WHERE mailbox_b = ? AND seen_by_b_at IS NULL").run(now, id);
+        }
+        return rows.map((row) => ({
+            link_id: row.id,
+            note: row.note,
+            created_at: row.created_at,
+            correspondent: this.getAgent(row.mailbox_a === id ? row.mailbox_b : row.mailbox_a),
+        }));
+    }
     // --- Supervision (interface web, lecture seule sauf purge) ---------------
     /** Vue globale : tous les messages du serveur, indépendamment des boîtes. */
     listAllMessages(opts = {}) {
@@ -702,16 +819,16 @@ export class MessageStore extends EventEmitter {
             params.push(opts.thread_id);
         }
         const rows = this.db
-            .prepare(`SELECT m.id AS message_id, m.thread_id, t.title AS thread_title, m.sender_id, m.subject, m.body,
-                m.priority, m.in_reply_to, m.created_at, 0 AS starred, ${ADMIN_DELIVERY}
-           FROM messages m
-           ${THREAD_JOIN}
-          WHERE ${where.join(" AND ")}
-          ORDER BY m.created_at DESC, m.id DESC
+            .prepare(`SELECT m.id AS message_id, m.thread_id, t.title AS thread_title, m.sender_id, m.subject, m.body,
+                m.priority, m.in_reply_to, m.created_at, 0 AS starred, ${ADMIN_DELIVERY}
+           FROM messages m
+           ${THREAD_JOIN}
+          WHERE ${where.join(" AND ")}
+          ORDER BY m.created_at DESC, m.id DESC
           LIMIT ? OFFSET ?`)
             .all(...params, limit, offset);
-        const recipients = this.recipientsFor(rows.map((r) => r.message_id));
-        return rows.map((row) => this.toSummary(row, recipients));
+        const related = this.relatedFor(rows.map((r) => r.message_id));
+        return rows.map((row) => this.toSummary(row, related));
     }
     /**
      * Fils du serveur entier, le plus récemment actif en tête.
@@ -730,7 +847,7 @@ export class MessageStore extends EventEmitter {
         // reçu : c'est la correspondance qui est filtrée, pas les messages qu'elle a signés.
         const agents = dedupe((opts.agents ?? []).map((id) => normalizeAgentId(id)).filter(Boolean));
         if (agents.length > 0) {
-            where.push(`EXISTS (SELECT 1 FROM deliveries d JOIN messages mp ON mp.id = d.message_id
+            where.push(`EXISTS (SELECT 1 FROM deliveries d JOIN messages mp ON mp.id = d.message_id
                   WHERE mp.thread_id = m.thread_id AND d.agent_id IN (${agents.map(() => "?").join(",")}))`);
             params.push(...agents);
         }
@@ -738,8 +855,8 @@ export class MessageStore extends EventEmitter {
         // n'importe lequel de ses messages. Un fil non nommé reste ainsi trouvable.
         if (opts.search) {
             const like = `%${escapeLike(opts.search)}%`;
-            where.push(`(COALESCE(t.title, '') LIKE ? ESCAPE '\\' OR COALESCE(t.description, '') LIKE ? ESCAPE '\\'
-          OR EXISTS (SELECT 1 FROM messages ms WHERE ms.thread_id = m.thread_id
+            where.push(`(COALESCE(t.title, '') LIKE ? ESCAPE '\\' OR COALESCE(t.description, '') LIKE ? ESCAPE '\\'
+          OR EXISTS (SELECT 1 FROM messages ms WHERE ms.thread_id = m.thread_id
                       AND (ms.subject LIKE ? ESCAPE '\\' OR ms.body LIKE ? ESCAPE '\\')))`);
             params.push(like, like, like, like);
         }
@@ -748,28 +865,28 @@ export class MessageStore extends EventEmitter {
         if (opts.priority)
             having.push("top_priority = ?");
         const rows = this.db
-            .prepare(`SELECT m.thread_id,
-                t.title, t.description, t.named_by, t.created_at, t.updated_at,
-                (SELECT r.subject FROM messages r WHERE r.thread_id = m.thread_id
-                  ORDER BY r.created_at ASC, r.id ASC LIMIT 1) AS subject,
-                COUNT(*) AS messages,
-                MAX(m.created_at) AS last_message_at,
-                (SELECT r.sender_id FROM messages r WHERE r.thread_id = m.thread_id
-                  ORDER BY r.created_at DESC, r.id DESC LIMIT 1) AS last_message_from,
-                (SELECT r.body FROM messages r WHERE r.thread_id = m.thread_id
-                  ORDER BY r.created_at DESC, r.id DESC LIMIT 1) AS last_body,
-                (SELECT COUNT(*) FROM deliveries d JOIN messages mu ON mu.id = d.message_id
-                  WHERE mu.thread_id = m.thread_id AND d.role != 'sender'
-                    AND d.read_at IS NULL AND d.folder != 'trash') AS unread,
-                CASE WHEN SUM(m.priority = 'high') > 0 THEN 'high'
-                     WHEN SUM(m.priority = 'normal') > 0 THEN 'normal'
-                     ELSE 'low' END AS top_priority
-           FROM messages m
-           ${THREAD_JOIN}
-          WHERE ${where.join(" AND ")}
-          GROUP BY m.thread_id
-          ${having.length ? `HAVING ${having.join(" AND ")}` : ""}
-          ORDER BY last_message_at DESC
+            .prepare(`SELECT m.thread_id,
+                t.title, t.description, t.named_by, t.created_at, t.updated_at,
+                (SELECT r.subject FROM messages r WHERE r.thread_id = m.thread_id
+                  ORDER BY r.created_at ASC, r.id ASC LIMIT 1) AS subject,
+                COUNT(*) AS messages,
+                MAX(m.created_at) AS last_message_at,
+                (SELECT r.sender_id FROM messages r WHERE r.thread_id = m.thread_id
+                  ORDER BY r.created_at DESC, r.id DESC LIMIT 1) AS last_message_from,
+                (SELECT r.body FROM messages r WHERE r.thread_id = m.thread_id
+                  ORDER BY r.created_at DESC, r.id DESC LIMIT 1) AS last_body,
+                (SELECT COUNT(*) FROM deliveries d JOIN messages mu ON mu.id = d.message_id
+                  WHERE mu.thread_id = m.thread_id AND d.role != 'sender'
+                    AND d.read_at IS NULL AND d.folder != 'trash') AS unread,
+                CASE WHEN SUM(m.priority = 'high') > 0 THEN 'high'
+                     WHEN SUM(m.priority = 'normal') > 0 THEN 'normal'
+                     ELSE 'low' END AS top_priority
+           FROM messages m
+           ${THREAD_JOIN}
+          WHERE ${where.join(" AND ")}
+          GROUP BY m.thread_id
+          ${having.length ? `HAVING ${having.join(" AND ")}` : ""}
+          ORDER BY last_message_at DESC
           LIMIT ? OFFSET ?`)
             .all(...params, ...(opts.priority ? [opts.priority] : []), limit, offset);
         const participants = this.participantsFor(rows.map((r) => r.thread_id));
@@ -799,31 +916,31 @@ export class MessageStore extends EventEmitter {
      */
     listThreadAdmin(threadId) {
         const rows = this.db
-            .prepare(`SELECT m.id AS message_id, m.thread_id, t.title AS thread_title, m.sender_id, m.subject, m.body,
-                m.priority, m.in_reply_to, m.created_at, 0 AS starred, ${ADMIN_DELIVERY}
-           FROM messages m
-           ${THREAD_JOIN}
-          WHERE m.thread_id = ?
+            .prepare(`SELECT m.id AS message_id, m.thread_id, t.title AS thread_title, m.sender_id, m.subject, m.body,
+                m.priority, m.in_reply_to, m.created_at, 0 AS starred, ${ADMIN_DELIVERY}
+           FROM messages m
+           ${THREAD_JOIN}
+          WHERE m.thread_id = ?
           ORDER BY m.created_at ASC, m.id ASC`)
             .all(threadId);
-        const recipients = this.recipientsFor(rows.map((r) => r.message_id));
-        return rows.map((row) => ({ ...this.toSummary(row, recipients), body: row.body }));
+        const related = this.relatedFor(rows.map((r) => r.message_id));
+        return rows.map((row) => ({ ...this.toSummary(row, related), body: row.body }));
     }
     /** Message complet vu du serveur, avec l'état de lecture de chaque destinataire. */
     getMessageAdmin(messageId) {
         const row = this.db
-            .prepare(`SELECT m.id AS message_id, m.thread_id, t.title AS thread_title, m.sender_id, m.subject, m.body,
-                m.priority, m.in_reply_to, m.created_at, 0 AS starred, ${ADMIN_DELIVERY}
+            .prepare(`SELECT m.id AS message_id, m.thread_id, t.title AS thread_title, m.sender_id, m.subject, m.body,
+                m.priority, m.in_reply_to, m.created_at, 0 AS starred, ${ADMIN_DELIVERY}
            FROM messages m ${THREAD_JOIN} WHERE m.id = ?`)
             .get(messageId);
         if (!row)
             throw new MessengerError(`message not found: ${messageId}`, 404);
-        const recipients = this.recipientsFor([messageId]);
+        const related = this.relatedFor([messageId]);
         const deliveries = this.db
             .prepare("SELECT agent_id, role, folder, read_at FROM deliveries WHERE message_id = ? ORDER BY role, agent_id")
             .all(messageId);
         return {
-            ...this.toMessage(row, recipients),
+            ...this.toMessage(row, related),
             deliveries: deliveries.map((d) => ({
                 agent_id: d.agent_id,
                 role: d.role,
@@ -832,14 +949,24 @@ export class MessageStore extends EventEmitter {
             })),
         };
     }
+    /** Pièce jointe vue du serveur, quelle que soit la boîte. */
+    getAttachmentAdmin(attachmentId) {
+        const row = this.db
+            .prepare(`SELECT id AS attachment_id, message_id, filename, mime_type, size, data
+           FROM attachments WHERE id = ?`)
+            .get(attachmentId);
+        if (!row)
+            throw new MessengerError(`attachment not found: ${attachmentId}`, 404);
+        return row;
+    }
     overview() {
         const messages = this.db.prepare("SELECT COUNT(*) AS n FROM messages").get().n;
         const threads = this.db.prepare("SELECT COUNT(DISTINCT thread_id) AS n FROM messages").get().n;
         const sentByAgent = new Map(this.db.prepare("SELECT sender_id, COUNT(*) AS n FROM messages GROUP BY sender_id").all().map((r) => [r.sender_id, r.n]));
         const receivedByAgent = new Map(this.db
-            .prepare(`SELECT agent_id,
-                    COUNT(*) AS received,
-                    SUM(CASE WHEN read_at IS NULL AND folder != 'trash' THEN 1 ELSE 0 END) AS unread
+            .prepare(`SELECT agent_id,
+                    COUNT(*) AS received,
+                    SUM(CASE WHEN read_at IS NULL AND folder != 'trash' THEN 1 ELSE 0 END) AS unread
                FROM deliveries WHERE role != 'sender' GROUP BY agent_id`)
             .all().map((r) => [r.agent_id, r]));
         const agents = this.listAgents().map((agent) => ({
@@ -878,28 +1005,36 @@ export class MessageStore extends EventEmitter {
         if (!row)
             throw new MessengerError(`unknown folder: ${folder}`, 404);
     }
-    /** Destinataire de chaque message demandé, par identifiant de message. */
-    recipientsFor(messageIds) {
-        const map = new Map();
+    /** Destinataire et pièces jointes de chaque message demandé, par identifiant de message. */
+    relatedFor(messageIds) {
+        const related = { recipients: new Map(), attachments: new Map() };
         const ids = dedupe(messageIds);
         if (ids.length === 0)
-            return map;
+            return related;
         const placeholders = ids.map(() => "?").join(",");
-        const rows = this.db
-            .prepare(`SELECT message_id, agent_id FROM deliveries
+        const recipients = this.db
+            .prepare(`SELECT message_id, agent_id FROM deliveries
           WHERE message_id IN (${placeholders}) AND role = 'to'`)
             .all(...ids);
-        for (const row of rows)
-            map.set(row.message_id, row.agent_id);
-        return map;
+        for (const row of recipients)
+            related.recipients.set(row.message_id, row.agent_id);
+        const attachments = this.db
+            .prepare(`SELECT id AS attachment_id, message_id, filename, mime_type, size FROM attachments
+          WHERE message_id IN (${placeholders})
+          ORDER BY message_id, position`)
+            .all(...ids);
+        for (const { message_id, ...info } of attachments) {
+            related.attachments.set(message_id, [...(related.attachments.get(message_id) ?? []), info]);
+        }
+        return related;
     }
-    toSummary(row, recipients) {
+    toSummary(row, related) {
         return {
             message_id: row.message_id,
             thread_id: row.thread_id,
             thread_title: row.thread_title,
             from: row.sender_id,
-            to: recipients.get(row.message_id) ?? "",
+            to: related.recipients.get(row.message_id) ?? "",
             subject: row.subject,
             preview: preview(row.body),
             priority: row.priority,
@@ -909,10 +1044,11 @@ export class MessageStore extends EventEmitter {
             starred: Boolean(row.starred),
             created_at: row.created_at,
             in_reply_to: row.in_reply_to,
+            attachments: related.attachments.get(row.message_id) ?? [],
         };
     }
-    toMessage(row, recipients) {
-        const { preview: _preview, ...summary } = this.toSummary(row, recipients);
+    toMessage(row, related) {
+        const { preview: _preview, ...summary } = this.toSummary(row, related);
         return { ...summary, body: row.body };
     }
     /** Un message sans aucune livraison n'est plus lisible par personne : on le supprime. */
@@ -922,6 +1058,17 @@ export class MessageStore extends EventEmitter {
         this.db.exec("DELETE FROM threads WHERE NOT EXISTS (SELECT 1 FROM messages m WHERE m.thread_id = threads.id)");
     }
 }
+function toLink(row) {
+    return {
+        link_id: row.id,
+        note: row.note,
+        created_at: row.created_at,
+        mailboxes: [
+            { mailbox: row.mailbox_a, seen_at: row.seen_by_a_at },
+            { mailbox: row.mailbox_b, seen_at: row.seen_by_b_at },
+        ],
+    };
+}
 export function normalizeAgentId(id) {
     return String(id ?? "").trim();
 }
@@ -941,6 +1088,47 @@ function normalizeLabel(value, max, field) {
         throw new MessengerError(`${field} must be at most ${max} characters`);
     return trimmed;
 }
+/**
+ * Valide les pièces jointes d'un envoi : nombre, tailles, nom et type.
+ *
+ * Le nom ne garde que sa dernière composante : il sert à nommer un fichier chez le
+ * destinataire, et ne doit jamais désigner un autre répertoire que celui qu'il choisit.
+ */
+function normalizeAttachments(attachments) {
+    if (attachments.length > MAX_ATTACHMENTS) {
+        throw new MessengerError(`at most ${MAX_ATTACHMENTS} attachments per message`);
+    }
+    let total = 0;
+    const normalized = attachments.map((attachment) => {
+        const filename = sanitizeFilename(attachment.filename);
+        if (attachment.data.length === 0)
+            throw new MessengerError(`attachment is empty: ${filename}`);
+        if (attachment.data.length > MAX_ATTACHMENT_BYTES) {
+            throw new MessengerError(`attachment exceeds ${formatBytes(MAX_ATTACHMENT_BYTES)}: ${filename}`, 413);
+        }
+        total += attachment.data.length;
+        const mimeType = (attachment.mime_type ?? "").trim().toLowerCase() || DEFAULT_MIME_TYPE;
+        if (!MIME_TYPE_RE.test(mimeType))
+            throw new MessengerError(`invalid mime_type for ${filename}: ${mimeType}`);
+        return { filename, mime_type: mimeType, data: attachment.data };
+    });
+    if (total > MAX_ATTACHMENTS_TOTAL_BYTES) {
+        throw new MessengerError(`attachments exceed ${formatBytes(MAX_ATTACHMENTS_TOTAL_BYTES)} in total`, 413);
+    }
+    return normalized;
+}
+function sanitizeFilename(value) {
+    const base = String(value ?? "")
+        .split(/[\\/]/)
+        .pop()
+        .replace(/[\u0000-\u001f\u007f<>:"|?*]/g, "_")
+        .trim();
+    if (!base || base === "." || base === "..")
+        throw new MessengerError("attachment filename cannot be empty");
+    if (base.length > FILENAME_MAX)
+        throw new MessengerError(`attachment filename must be at most ${FILENAME_MAX} characters`);
+    return base;
+}
 function dedupe(values) {
     return [...new Set(values)];
 }