@moxxy/plugin-channel-imessage 0.29.0

package/dist/channel.js

@@ -0,0 +1,264 @@
+import { newTurnId } from '@moxxy/core';
+import { TurnCoordinator, resolveSecret } from '@moxxy/channel-kit';
+import { IMESSAGE_ALLOWED_HANDLES_KEY, IMESSAGE_OWNER_HANDLES_KEY, IMESSAGE_SERVER_PASSWORD_ENV, IMESSAGE_SERVER_PASSWORD_KEY, IMESSAGE_SERVER_URL_ENV, IMESSAGE_SERVER_URL_KEY, normalizeHandle, parseHandleList, } from './keys.js';
+import { gateInboundMessage } from './message-gate.js';
+import { buildImessagePermissionResolver } from './permission.js';
+import { BlueBubblesClient, } from './bluebubbles-client.js';
+import { runImessageTurn } from './channel/turn-runner.js';
+import { splitForImessage } from './channel/chunker.js';
+/** Bound on remembered own-send ids (guid + tempGuid) for the echo drop. */
+const MAX_SENT_IDS = 256;
+/** Rate limit for "dropped inbound message" warnings. */
+const DROP_WARN_INTERVAL_MS = 5_000;
+/** Message when the server URL / password isn't configured yet. */
+const NOT_CONFIGURED_MESSAGE = 'No BlueBubbles server configured. Run `moxxy channels imessage setup` (or set ' +
+    `${IMESSAGE_SERVER_URL_ENV} + ${IMESSAGE_SERVER_PASSWORD_ENV}).`;
+export class ImessageChannel {
+    name = 'imessage';
+    /**
+     * Installed on the session by the CLI dispatcher. Replaced in `start()` once
+     * the live tool registry is available for `['*']` expansion; until then it
+     * denies everything (safe default before start).
+     */
+    permissionResolver;
+    opts;
+    session = null;
+    model;
+    client = null;
+    allowedHandles = new Set();
+    ownerHandles = new Set();
+    // Single-flight turn state + the bounded own-turn-id set the foreign-turn
+    // mirror gate filters on (invariant #8).
+    turns = new TurnCoordinator();
+    lastChatGuid = null;
+    logUnsub = null;
+    /**
+     * guid + tempGuid of messages WE sent. BlueBubbles emits `new-message` for
+     * the account's own sends too (our replies come back `isFromMe`), so any
+     * inbound whose id is in this set is an echo of ourselves and must be dropped
+     * (loop protection).
+     */
+    sentIds = new Set();
+    handle = null;
+    runningSettled = false;
+    resolveRunning = null;
+    stopping = false;
+    lastDropWarnAt = 0;
+    constructor(opts) {
+        this.opts = opts;
+        // Pre-start: deny-all (replaced with the real allow-list resolver in start()).
+        this.permissionResolver = buildImessagePermissionResolver({
+            allowedTools: [],
+            allToolNames: [],
+            ...(opts.logger ? { logger: opts.logger } : {}),
+        });
+    }
+    async start(startOpts) {
+        if (this.handle)
+            return this.handle;
+        this.session = startOpts.session;
+        this.model = startOpts.model;
+        // Config: explicit option → env → vault (shared channel-kit precedence).
+        const serverUrl = this.opts.serverUrl ??
+            (await resolveSecret(this.opts.vault, {
+                envVar: IMESSAGE_SERVER_URL_ENV,
+                vaultKey: IMESSAGE_SERVER_URL_KEY,
+            }));
+        const password = this.opts.password ??
+            (await resolveSecret(this.opts.vault, {
+                envVar: IMESSAGE_SERVER_PASSWORD_ENV,
+                vaultKey: IMESSAGE_SERVER_PASSWORD_KEY,
+            }));
+        if (!serverUrl || !password)
+            throw new Error(NOT_CONFIGURED_MESSAGE);
+        // Allow-list (OTHER people) + owner handles (self-chat), from vault + options.
+        this.rebuildHandleSet(this.allowedHandles, parseHandleList(await this.opts.vault.get(IMESSAGE_ALLOWED_HANDLES_KEY)), this.opts.allowedHandles);
+        this.rebuildHandleSet(this.ownerHandles, parseHandleList(await this.opts.vault.get(IMESSAGE_OWNER_HANDLES_KEY)), this.opts.ownerHandles);
+        // Swap in the real autonomous allow-list resolver now that the tool registry
+        // is live (mirrors Signal; `['*']` expands here).
+        const allowedTools = startOpts.allowedTools ?? this.opts.allowedTools ?? [];
+        const allToolNames = this.session.tools.list().map((t) => t.name);
+        this.permissionResolver = buildImessagePermissionResolver({
+            allowedTools,
+            allToolNames,
+            ...(this.opts.logger ? { logger: this.opts.logger } : {}),
+        });
+        this.session.setPermissionResolver(this.permissionResolver);
+        // Mirror-to-last-chat: post assistant prose for turns this channel did NOT
+        // initiate (a co-attached surface ran one) into the last chat served.
+        this.logUnsub = this.session.log.subscribe((event) => this.mirrorForeignTurn(event));
+        const running = new Promise((resolve) => {
+            this.resolveRunning = resolve;
+        });
+        const client = this.makeClient({ serverUrl, password });
+        this.client = client;
+        try {
+            // Reachability + auth probe deferred to here (NOT isAvailable): surfaces a
+            // friendly error if the localhost BlueBubbles server isn't up.
+            await client.ping();
+            await client.connect();
+        }
+        catch (err) {
+            this.logUnsub?.();
+            this.logUnsub = null;
+            this.client = null;
+            throw err;
+        }
+        client.onMessage((raw) => this.handleInbound(raw));
+        this.handle = {
+            running,
+            stop: async (reason = 'shutdown') => {
+                this.stopping = true;
+                // Abort the in-flight turn FIRST so the model loop stops the moment the
+                // operator asks to shut down. The autonomous allow-list resolver has no
+                // pending operator prompts, so there is nothing to abortAll.
+                this.turns.abort(reason);
+                this.logUnsub?.();
+                this.logUnsub = null;
+                const client = this.client;
+                this.client = null;
+                client?.close();
+                this.settleRunning();
+            },
+        };
+        this.opts.logger?.info?.('imessage: channel started', {
+            allowedHandles: this.allowedHandles.size,
+            ownerHandles: this.ownerHandles.size,
+        });
+        return this.handle;
+    }
+    // -------------------------------------------------------------------------
+    // Inbound
+    // -------------------------------------------------------------------------
+    /** Every inbound `new-message` funnels through the one gate. */
+    handleInbound(raw) {
+        if (this.stopping)
+            return;
+        const verdict = gateInboundMessage({
+            ownerHandles: this.ownerHandles,
+            allowedHandles: this.allowedHandles,
+            isOwnSend: (id) => this.sentIds.has(id),
+        }, raw);
+        if (!verdict.ok) {
+            this.warnDrop(verdict.reason);
+            return;
+        }
+        this.dispatchInBackground(this.processMessage(verdict.chatGuid, verdict.text), 'new-message');
+    }
+    /** Busy gate, then one coordinated turn. */
+    async processMessage(chatGuid, text) {
+        if (!this.session)
+            return;
+        // Atomic single-flight guard (the coordinator claims the slot BEFORE any
+        // await); the turnId minted here is recorded as an own-turn id — that's what
+        // mirrorForeignTurn filters on (invariant #8).
+        const lease = this.turns.begin(newTurnId());
+        if (!lease) {
+            await this.sendText(chatGuid, 'I am still working on the previous prompt. One moment…');
+            return;
+        }
+        this.lastChatGuid = chatGuid;
+        try {
+            await runImessageTurn({
+                session: this.session,
+                send: (t) => this.sendText(chatGuid, t),
+                ...(this.opts.logger ? { logger: this.opts.logger } : {}),
+            }, {
+                text,
+                ...(this.model ? { model: this.model } : {}),
+                controller: lease.controller,
+                turnId: lease.turnId,
+            });
+        }
+        finally {
+            lease.end();
+        }
+    }
+    // -------------------------------------------------------------------------
+    // Outbound
+    // -------------------------------------------------------------------------
+    /** Send one message and record its ids for the echo drop. */
+    async sendText(chatGuid, text) {
+        const client = this.client;
+        if (!client)
+            throw new Error('imessage client is not connected');
+        const { guid, tempGuid } = await client.sendText(chatGuid, text);
+        this.recordSent(tempGuid);
+        if (guid)
+            this.recordSent(guid);
+    }
+    recordSent(id) {
+        this.sentIds.add(id);
+        if (this.sentIds.size > MAX_SENT_IDS) {
+            const oldest = this.sentIds.values().next().value;
+            if (oldest !== undefined)
+                this.sentIds.delete(oldest);
+        }
+    }
+    /**
+     * Post the assistant's prose for a turn this channel did not initiate.
+     * Skipped for our own turnIds (robust to async ordering / replay, invariant
+     * #8) and while a turn of ours is streaming via the chunked sender.
+     */
+    mirrorForeignTurn(event) {
+        const text = this.turns.mirrorText(event);
+        if (text == null)
+            return;
+        const chatGuid = this.lastChatGuid;
+        if (!chatGuid || !this.client)
+            return;
+        void (async () => {
+            for (const part of splitForImessage(text)) {
+                await this.sendText(chatGuid, part);
+            }
+        })().catch((err) => {
+            this.opts.logger?.warn?.('imessage: mirror failed', { err: String(err) });
+        });
+    }
+    // -------------------------------------------------------------------------
+    // Plumbing
+    // -------------------------------------------------------------------------
+    makeClient(opts) {
+        const clientOpts = {
+            serverUrl: opts.serverUrl,
+            password: opts.password,
+            ...(this.opts.logger ? { logger: this.opts.logger } : {}),
+        };
+        const factory = this.opts.clientFactory ?? ((o) => new BlueBubblesClient(o));
+        return factory(clientOpts);
+    }
+    rebuildHandleSet(target, fromVault, fromOptions) {
+        target.clear();
+        for (const handle of fromVault)
+            target.add(handle);
+        for (const handle of fromOptions ?? []) {
+            const normalized = normalizeHandle(handle);
+            if (normalized.length > 0)
+                target.add(normalized);
+        }
+    }
+    /**
+     * Run a handler detached from the socket read loop (an inbound handler that
+     * awaited a whole turn would park delivery for its duration). Errors are
+     * logged here — nothing upstream awaits this promise.
+     */
+    dispatchInBackground(work, kind) {
+        void work.catch((err) => {
+            this.opts.logger?.warn?.('imessage: handler failed', { kind, err: String(err) });
+        });
+    }
+    warnDrop(reason) {
+        const now = Date.now();
+        if (now - this.lastDropWarnAt < DROP_WARN_INTERVAL_MS)
+            return;
+        this.lastDropWarnAt = now;
+        this.opts.logger?.debug?.('imessage: dropped inbound message', { reason });
+    }
+    settleRunning() {
+        if (this.runningSettled)
+            return;
+        this.runningSettled = true;
+        this.resolveRunning?.();
+    }
+}
+//# sourceMappingURL=channel.js.map

package/dist/channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.js","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAUpE,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,4BAA4B,EAC5B,4BAA4B,EAC5B,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,eAAe,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EACL,iBAAiB,GAGlB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,4EAA4E;AAC5E,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB,yDAAyD;AACzD,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC,mEAAmE;AACnE,MAAM,sBAAsB,GAC1B,gFAAgF;IAChF,GAAG,uBAAuB,MAAM,4BAA4B,IAAI,CAAC;AAgCnE,MAAM,OAAO,eAAe;IACjB,IAAI,GAAG,UAAU,CAAC;IAC3B;;;;OAIG;IACH,kBAAkB,CAAqB;IAEtB,IAAI,CAAyB;IACtC,OAAO,GAAmB,IAAI,CAAC;IAC/B,KAAK,CAAqB;IAE1B,MAAM,GAAiC,IAAI,CAAC;IACnC,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAElD,0EAA0E;IAC1E,yCAAyC;IACxB,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,YAAY,GAAkB,IAAI,CAAC;IACnC,QAAQ,GAAwB,IAAI,CAAC;IAE7C;;;;;OAKG;IACc,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,MAAM,GAAyB,IAAI,CAAC;IACpC,cAAc,GAAG,KAAK,CAAC;IACvB,cAAc,GAAwB,IAAI,CAAC;IAC3C,QAAQ,GAAG,KAAK,CAAC;IACjB,cAAc,GAAG,CAAC,CAAC;IAE3B,YAAY,IAA4B;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,+EAA+E;QAC/E,IAAI,CAAC,kBAAkB,GAAG,+BAA+B,CAAC;YACxD,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,EAAE;YAChB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAA4B;QACtC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QAE7B,yEAAyE;QACzE,MAAM,SAAS,GACb,IAAI,CAAC,IAAI,CAAC,SAAS;YACnB,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;gBACpC,MAAM,EAAE,uBAAuB;gBAC/B,QAAQ,EAAE,uBAAuB;aAClC,CAAC,CAAC,CAAC;QACN,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,CAAC,QAAQ;YAClB,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;gBACpC,MAAM,EAAE,4BAA4B;gBACpC,QAAQ,EAAE,4BAA4B;aACvC,CAAC,CAAC,CAAC;QACN,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAErE,+EAA+E;QAC/E,IAAI,CAAC,gBAAgB,CACnB,IAAI,CAAC,cAAc,EACnB,eAAe,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,EACxE,IAAI,CAAC,IAAI,CAAC,cAAc,CACzB,CAAC;QACF,IAAI,CAAC,gBAAgB,CACnB,IAAI,CAAC,YAAY,EACjB,eAAe,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,EACtE,IAAI,CAAC,IAAI,CAAC,YAAY,CACvB,CAAC;QAEF,6EAA6E;QAC7E,kDAAkD;QAClD,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,kBAAkB,GAAG,+BAA+B,CAAC;YACxD,YAAY;YACZ,YAAY;YACZ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAE5D,2EAA2E;QAC3E,sEAAsE;QACtE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAErF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC;YACH,2EAA2E;YAC3E,+DAA+D;YAC/D,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QAEnD,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO;YACP,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,EAAE;gBAClC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,wEAAwE;gBACxE,wEAAwE;gBACxE,6DAA6D;gBAC7D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACzB,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAClB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,MAAM,EAAE,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,CAAC;SACF,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,2BAA2B,EAAE;YACpD,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI;YACxC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;SACrC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,4EAA4E;IAC5E,UAAU;IACV,4EAA4E;IAE5E,gEAAgE;IACxD,aAAa,CAAC,GAAY;QAChC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,MAAM,OAAO,GAAG,kBAAkB,CAChC;YACE,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;SACxC,EACD,GAAG,CACJ,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC;IAChG,CAAC;IAED,4CAA4C;IACpC,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,IAAY;QACzD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,yEAAyE;QACzE,6EAA6E;QAC7E,+CAA+C;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,wDAAwD,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,eAAe,CACnB;gBACE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACvC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D,EACD;gBACE,IAAI;gBACJ,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CACF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,WAAW;IACX,4EAA4E;IAE5E,6DAA6D;IACrD,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,IAAY;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACjE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC1B,IAAI,IAAI;YAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAEO,UAAU,CAAC,EAAU;QAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAClD,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,iBAAiB,CAAC,KAAiB;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QACnC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACtC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACtC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,yBAAyB,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,WAAW;IACX,4EAA4E;IAEpE,UAAU,CAAC,IAA6C;QAC9D,MAAM,UAAU,GAA6B;YAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;IAEO,gBAAgB,CACtB,MAAmB,EACnB,SAAgC,EAChC,WAA8C;QAE9C,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,MAAM,IAAI,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnD,KAAK,MAAM,MAAM,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,oBAAoB,CAAC,IAAmB,EAAE,IAAY;QAC5D,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACtB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,MAAc;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,cAAc,GAAG,qBAAqB;YAAE,OAAO;QAC9D,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;IAC1B,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,27 @@
+import { type Plugin } from '@moxxy/sdk';
+import type { VaultStore } from '@moxxy/plugin-vault';
+export { ImessageChannel, type ImessageChannelOptions, type ImessageStartOpts, } from './channel.js';
+export { buildImessagePermissionResolver } from './permission.js';
+export { BlueBubblesClient, makeTempGuid, type BlueBubblesClientLike, type BlueBubblesClientOptions, type SocketLike, } from './bluebubbles-client.js';
+export { gateInboundMessage, type GateState, type GateVerdict } from './message-gate.js';
+export { messageSchema, MAX_INBOUND_TEXT_CHARS, type ImessageMessage } from './schema.js';
+export { ChunkedSender, takeChunk, splitForImessage, IMESSAGE_CHUNK_SOFT_LIMIT, IMESSAGE_CHUNK_HARD_LIMIT, } from './channel/chunker.js';
+export { IMESSAGE_SERVER_URL_KEY, IMESSAGE_SERVER_URL_ENV, IMESSAGE_SERVER_PASSWORD_KEY, IMESSAGE_SERVER_PASSWORD_ENV, IMESSAGE_ALLOWED_HANDLES_KEY, IMESSAGE_OWNER_HANDLES_KEY, parseHandleList, parseDmChatGuid, normalizeHandle, isHandle, E164_RE, EMAIL_RE, } from './keys.js';
+export interface BuildImessagePluginOptions {
+    /** Host-injected encrypted secret store (available immediately). */
+    readonly vault: VaultStore;
+}
+/**
+ * Build the iMessage channel plugin with a host-injected vault (mirrors the
+ * Signal/WhatsApp plugins' vault injection).
+ */
+export declare function buildImessagePlugin(opts: BuildImessagePluginOptions): Plugin;
+/**
+ * Discovery-loadable default export: resolves the vault from the inter-plugin
+ * service registry in `onInit` (the vault plugin publishes `'vault'`). Requires
+ * `@moxxy/plugin-vault` to load first (declared in `package.json`
+ * `moxxy.requirements`).
+ */
+export declare const imessagePlugin: Plugin;
+export default imessagePlugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoD,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAatD,OAAO,EACL,eAAe,EACf,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,UAAU,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,0BAA0B,EAC1B,eAAe,EACf,eAAe,EACf,eAAe,EACf,QAAQ,EACR,OAAO,EACP,QAAQ,GACT,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,0BAA0B,GAAG,MAAM,CAE5E;AAED;;;;;GAKG;AACH,eAAO,MAAM,cAAc,EAAE,MAgBzB,CAAC;AAEL,eAAe,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,211 @@
+import { defineChannel, definePlugin } from '@moxxy/sdk';
+import { ImessageChannel } from './channel.js';
+import { IMESSAGE_ALLOWED_HANDLES_KEY, IMESSAGE_OWNER_HANDLES_KEY, IMESSAGE_SERVER_PASSWORD_ENV, IMESSAGE_SERVER_PASSWORD_KEY, IMESSAGE_SERVER_URL_ENV, IMESSAGE_SERVER_URL_KEY, parseHandleList, } from './keys.js';
+import { runImessageWizard } from './setup-wizard.js';
+export { ImessageChannel, } from './channel.js';
+export { buildImessagePermissionResolver } from './permission.js';
+export { BlueBubblesClient, makeTempGuid, } from './bluebubbles-client.js';
+export { gateInboundMessage } from './message-gate.js';
+export { messageSchema, MAX_INBOUND_TEXT_CHARS } from './schema.js';
+export { ChunkedSender, takeChunk, splitForImessage, IMESSAGE_CHUNK_SOFT_LIMIT, IMESSAGE_CHUNK_HARD_LIMIT, } from './channel/chunker.js';
+export { IMESSAGE_SERVER_URL_KEY, IMESSAGE_SERVER_URL_ENV, IMESSAGE_SERVER_PASSWORD_KEY, IMESSAGE_SERVER_PASSWORD_ENV, IMESSAGE_ALLOWED_HANDLES_KEY, IMESSAGE_OWNER_HANDLES_KEY, parseHandleList, parseDmChatGuid, normalizeHandle, isHandle, E164_RE, EMAIL_RE, } from './keys.js';
+/**
+ * Build the iMessage channel plugin with a host-injected vault (mirrors the
+ * Signal/WhatsApp plugins' vault injection).
+ */
+export function buildImessagePlugin(opts) {
+    return makeImessagePlugin(() => opts.vault);
+}
+/**
+ * Discovery-loadable default export: resolves the vault from the inter-plugin
+ * service registry in `onInit` (the vault plugin publishes `'vault'`). Requires
+ * `@moxxy/plugin-vault` to load first (declared in `package.json`
+ * `moxxy.requirements`).
+ */
+export const imessagePlugin = (() => {
+    let resolved = null;
+    const getVault = () => {
+        if (!resolved) {
+            throw new Error('@moxxy/plugin-channel-imessage: the "vault" service is unavailable — @moxxy/plugin-vault must load first');
+        }
+        return resolved;
+    };
+    const hooks = {
+        onInit: (ctx) => {
+            resolved = ctx.services.require('vault');
+        },
+    };
+    return makeImessagePlugin(getVault, hooks);
+})();
+export default imessagePlugin;
+function readStringArray(value) {
+    if (Array.isArray(value))
+        return value.map((x) => String(x));
+    if (typeof value === 'string' && value.trim()) {
+        return value
+            .split(',')
+            .map((s) => s.trim())
+            .filter(Boolean);
+    }
+    return undefined;
+}
+function envConfigured() {
+    const url = process.env[IMESSAGE_SERVER_URL_ENV];
+    const pass = process.env[IMESSAGE_SERVER_PASSWORD_ENV];
+    return typeof url === 'string' && url.trim().length > 0 && typeof pass === 'string' && pass.trim().length > 0;
+}
+function makeImessagePlugin(getVault, hooks) {
+    return definePlugin({
+        name: '@moxxy/plugin-channel-imessage',
+        version: '0.0.0',
+        ...(hooks ? { hooks } : {}),
+        channels: [
+            defineChannel({
+                name: 'imessage',
+                description: 'iMessage channel via a localhost BlueBubbles server (macOS only). Allow-listed handles (and your own self-chat) drive the agent; replies go out as buffered chunked sends.',
+                // A BlueBubbles server sees ALL the account owner's messages, so this
+                // channel runs on its own dedicated, isolated runner (separate socket +
+                // sticky session), like Signal — it keeps its own persistent history
+                // apart from the user's desktop/TUI work.
+                dedicatedRunner: true,
+                sessionSource: 'imessage',
+                config: {
+                    fields: [
+                        {
+                            name: 'serverUrl',
+                            label: 'BlueBubbles server URL',
+                            vaultKey: IMESSAGE_SERVER_URL_KEY,
+                            required: true,
+                            secret: false,
+                            placeholder: 'http://localhost:1234',
+                            help: 'The BlueBubbles server running on this Mac (default port 1234)',
+                        },
+                        {
+                            name: 'password',
+                            label: 'BlueBubbles server password',
+                            vaultKey: IMESSAGE_SERVER_PASSWORD_KEY,
+                            required: true,
+                            secret: true,
+                            help: 'The password set in the BlueBubbles app (sent as a query param on every request)',
+                        },
+                    ],
+                    hasRequestUrl: false,
+                    runHint: 'Install the BlueBubbles server on this Mac, sign in to Messages, set a password, then run `moxxy channels imessage setup` to add allowed handles.',
+                    connect: {
+                        kind: 'instructions',
+                        title: 'Connect BlueBubbles',
+                        steps: [
+                            'Install the BlueBubbles server on this Mac from https://bluebubbles.app and sign in to Messages.',
+                            'In the BlueBubbles app, set a server password and note the port (default 1234).',
+                            'Run `moxxy channels imessage setup` and paste the URL + password, then add the handles allowed to talk to moxxy.',
+                        ],
+                    },
+                },
+                create: (deps) => {
+                    const options = deps.options;
+                    const channelOpts = {
+                        vault: getVault(),
+                        ...(typeof options?.['serverUrl'] === 'string' ? { serverUrl: options['serverUrl'] } : {}),
+                        ...(typeof options?.['password'] === 'string' ? { password: options['password'] } : {}),
+                        ...(() => {
+                            const tools = readStringArray(options?.['allowedTools']);
+                            return tools ? { allowedTools: tools } : {};
+                        })(),
+                        ...(() => {
+                            const handles = readStringArray(options?.['allowedHandles']);
+                            return handles ? { allowedHandles: handles } : {};
+                        })(),
+                        ...(() => {
+                            const handles = readStringArray(options?.['ownerHandles']);
+                            return handles ? { ownerHandles: handles } : {};
+                        })(),
+                        logger: deps.logger,
+                    };
+                    return new ImessageChannel(channelOpts);
+                },
+                isAvailable: async () => {
+                    // Pure check — NO network probe (this runs on every `moxxy channels
+                    // list` / `moxxy doctor`). The reachability ping is deferred to start().
+                    if (process.platform !== 'darwin') {
+                        return {
+                            ok: false,
+                            reason: 'iMessage requires macOS (a BlueBubbles server running on this Mac).',
+                        };
+                    }
+                    // Env pair short-circuit (the vault may not be wired in a probe context).
+                    if (envConfigured())
+                        return { ok: true };
+                    try {
+                        const vault = getVault();
+                        if ((await vault.has(IMESSAGE_SERVER_URL_KEY)) && (await vault.has(IMESSAGE_SERVER_PASSWORD_KEY))) {
+                            return { ok: true };
+                        }
+                    }
+                    catch {
+                        /* vault unavailable in a probe context — fall through */
+                    }
+                    return {
+                        ok: false,
+                        reason: 'No BlueBubbles server configured. Run `moxxy channels imessage setup`.',
+                    };
+                },
+                interactiveCommand: 'setup',
+                subcommands: {
+                    setup: {
+                        description: 'Interactive setup: store the BlueBubbles server URL + password, the handle allow-list and your own self-chat handles, pick the tool allow-list, then start. Shown by default for `moxxy imessage` on a TTY.',
+                        run: async (ctx) => {
+                            if (process.stdin.isTTY !== true) {
+                                // Headless: just start the channel (server must already be configured).
+                                return ctx.startChannel();
+                            }
+                            return runImessageWizard(ctx);
+                        },
+                    },
+                    status: {
+                        description: 'Report platform / server-config / allow-list state as JSON.',
+                        run: async (ctx) => {
+                            const vault = ctx.deps.vault;
+                            if (!vault) {
+                                process.stderr.write('vault unavailable\n');
+                                return 1;
+                            }
+                            const serverUrl = process.env[IMESSAGE_SERVER_URL_ENV]?.trim() || (await vault.get(IMESSAGE_SERVER_URL_KEY));
+                            const passwordSet = (process.env[IMESSAGE_SERVER_PASSWORD_ENV]?.trim() ?? '').length > 0 ||
+                                (await vault.has(IMESSAGE_SERVER_PASSWORD_KEY));
+                            const allowedHandles = parseHandleList(await vault.get(IMESSAGE_ALLOWED_HANDLES_KEY));
+                            const ownerHandles = parseHandleList(await vault.get(IMESSAGE_OWNER_HANDLES_KEY));
+                            process.stdout.write(JSON.stringify({
+                                platform: process.platform,
+                                supported: process.platform === 'darwin',
+                                serverUrl: serverUrl || null,
+                                passwordSet,
+                                allowedHandles,
+                                ownerHandles,
+                            }, null, 2) + '\n');
+                            return 0;
+                        },
+                    },
+                    unpair: {
+                        description: 'Forget the stored BlueBubbles server URL + password and the handle allow-list. (The BlueBubbles app itself is untouched — uninstall or reset it there to fully disconnect.)',
+                        run: async (ctx) => {
+                            const vault = ctx.deps.vault;
+                            if (!vault) {
+                                process.stderr.write('vault unavailable\n');
+                                return 1;
+                            }
+                            const removedUrl = await vault.delete(IMESSAGE_SERVER_URL_KEY);
+                            await vault.delete(IMESSAGE_SERVER_PASSWORD_KEY);
+                            await vault.delete(IMESSAGE_ALLOWED_HANDLES_KEY);
+                            await vault.delete(IMESSAGE_OWNER_HANDLES_KEY);
+                            process.stdout.write(removedUrl
+                                ? 'unpaired (vault cleared). The BlueBubbles server app is untouched — reset it there to fully disconnect.\n'
+                                : 'no BlueBubbles server was configured\n');
+                            return 0;
+                        },
+                    },
+                },
+            }),
+        ],
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAoC,MAAM,YAAY,CAAC;AAE3F,OAAO,EAAE,eAAe,EAA+B,MAAM,cAAc,CAAC;AAC5E,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,4BAA4B,EAC5B,4BAA4B,EAC5B,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EACL,eAAe,GAGhB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EACL,iBAAiB,EACjB,YAAY,GAIb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAoC,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAwB,MAAM,aAAa,CAAC;AAC1F,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,0BAA0B,EAC1B,eAAe,EACf,eAAe,EACf,eAAe,EACf,QAAQ,EACR,OAAO,EACP,QAAQ,GACT,MAAM,WAAW,CAAC;AAOnB;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAgC;IAClE,OAAO,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAW,CAAC,GAAG,EAAE;IAC1C,IAAI,QAAQ,GAAsB,IAAI,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAe,EAAE;QAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,0GAA0G,CAC3G,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,KAAK,GAAmB;QAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YACd,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAa,OAAO,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;IACF,OAAO,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC,CAAC,EAAE,CAAC;AAEL,eAAe,cAAc,CAAC;AAE9B,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,OAAO,KAAK;aACT,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACvD,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA0B,EAAE,KAAsB;IAC5E,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,OAAO;QAChB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,QAAQ,EAAE;YACR,aAAa,CAAC;gBACZ,IAAI,EAAE,UAAU;gBAChB,WAAW,EACT,4KAA4K;gBAC9K,sEAAsE;gBACtE,wEAAwE;gBACxE,qEAAqE;gBACrE,0CAA0C;gBAC1C,eAAe,EAAE,IAAI;gBACrB,aAAa,EAAE,UAAU;gBACzB,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN;4BACE,IAAI,EAAE,WAAW;4BACjB,KAAK,EAAE,wBAAwB;4BAC/B,QAAQ,EAAE,uBAAuB;4BACjC,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,KAAK;4BACb,WAAW,EAAE,uBAAuB;4BACpC,IAAI,EAAE,gEAAgE;yBACvE;wBACD;4BACE,IAAI,EAAE,UAAU;4BAChB,KAAK,EAAE,6BAA6B;4BACpC,QAAQ,EAAE,4BAA4B;4BACtC,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,IAAI;4BACZ,IAAI,EAAE,kFAAkF;yBACzF;qBACF;oBACD,aAAa,EAAE,KAAK;oBACpB,OAAO,EACL,mJAAmJ;oBACrJ,OAAO,EAAE;wBACP,IAAI,EAAE,cAAc;wBACpB,KAAK,EAAE,qBAAqB;wBAC5B,KAAK,EAAE;4BACL,kGAAkG;4BAClG,iFAAiF;4BACjF,kHAAkH;yBACnH;qBACF;iBACF;gBACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBACf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;oBAC7B,MAAM,WAAW,GAA2B;wBAC1C,KAAK,EAAE,QAAQ,EAAE;wBACjB,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC1F,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvF,GAAG,CAAC,GAAG,EAAE;4BACP,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;4BACzD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9C,CAAC,CAAC,EAAE;wBACJ,GAAG,CAAC,GAAG,EAAE;4BACP,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;4BAC7D,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpD,CAAC,CAAC,EAAE;wBACJ,GAAG,CAAC,GAAG,EAAE;4BACP,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;4BAC3D,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClD,CAAC,CAAC,EAAE;wBACJ,MAAM,EAAE,IAAI,CAAC,MAAe;qBAC7B,CAAC;oBACF,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,CAAC;gBAC1C,CAAC;gBACD,WAAW,EAAE,KAAK,IAAI,EAAE;oBACtB,oEAAoE;oBACpE,yEAAyE;oBACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAClC,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,MAAM,EAAE,qEAAqE;yBAC9E,CAAC;oBACJ,CAAC;oBACD,0EAA0E;oBAC1E,IAAI,aAAa,EAAE;wBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;oBACzC,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;wBACzB,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC;4BAClG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;wBACtB,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,yDAAyD;oBAC3D,CAAC;oBACD,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,wEAAwE;qBACjF,CAAC;gBACJ,CAAC;gBACD,kBAAkB,EAAE,OAAO;gBAC3B,WAAW,EAAE;oBACX,KAAK,EAAE;wBACL,WAAW,EACT,6MAA6M;wBAC/M,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gCACjC,wEAAwE;gCACxE,OAAO,GAAG,CAAC,YAAY,EAAE,CAAC;4BAC5B,CAAC;4BACD,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;wBAChC,CAAC;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,6DAA6D;wBAC1E,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAA+B,CAAC;4BACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gCACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gCAC5C,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC;4BAC7F,MAAM,WAAW,GACf,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;gCACpE,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;4BAClD,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;4BACtF,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;4BAClF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CACZ;gCACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,SAAS,EAAE,OAAO,CAAC,QAAQ,KAAK,QAAQ;gCACxC,SAAS,EAAE,SAAS,IAAI,IAAI;gCAC5B,WAAW;gCACX,cAAc;gCACd,YAAY;6BACb,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;4BACF,OAAO,CAAC,CAAC;wBACX,CAAC;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EACT,6KAA6K;wBAC/K,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAA+B,CAAC;4BACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gCACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gCAC5C,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;4BAC/D,MAAM,KAAK,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;4BACjD,MAAM,KAAK,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;4BACjD,MAAM,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;4BAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,UAAU;gCACR,CAAC,CAAC,2GAA2G;gCAC7G,CAAC,CAAC,wCAAwC,CAC7C,CAAC;4BACF,OAAO,CAAC,CAAC;wBACX,CAAC;qBACF;iBACF;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Vault keys + pure handle helpers shared by the channel, its subcommands, and
+ * the interactive setup wizard. Kept in their own module (the signal/whatsapp
+ * `keys.ts` pattern) so wizard helpers can import them without pulling in the
+ * plugin's full index (or, worse, socket.io-client — which stays behind a lazy
+ * import in `bluebubbles-client.ts`).
+ *
+ * Note on custody: the BlueBubbles server (a native macOS app) holds the actual
+ * iMessage identity + message store. The moxxy vault only stores the localhost
+ * server URL, its password, and two JSON handle arrays — the allow-list of OTHER
+ * people who may drive the agent, and the owner's own handle(s) that enable
+ * texting moxxy from your own devices (the "self-chat").
+ */
+/** Vault key for the BlueBubbles server URL (e.g. http://localhost:1234). */
+export declare const IMESSAGE_SERVER_URL_KEY = "imessage_server_url";
+/** Env override for the server URL — beats the vault (shared precedence). */
+export declare const IMESSAGE_SERVER_URL_ENV = "MOXXY_IMESSAGE_SERVER_URL";
+/** Vault key for the BlueBubbles server password. */
+export declare const IMESSAGE_SERVER_PASSWORD_KEY = "imessage_server_password";
+/** Env override for the server password — beats the vault. */
+export declare const IMESSAGE_SERVER_PASSWORD_ENV = "MOXXY_IMESSAGE_SERVER_PASSWORD";
+/**
+ * Vault key for the allow-list: a JSON array of iMessage handles (E.164 phone
+ * numbers and/or Apple-ID emails) that OTHER people may use to drive the
+ * session. The owner's own handle is NOT listed here — it lives in
+ * {@link IMESSAGE_OWNER_HANDLES_KEY} so an inbound from a friend and an outbound
+ * from the owner stay distinguishable (never react to the owner's private
+ * conversations with allow-listed friends).
+ */
+export declare const IMESSAGE_ALLOWED_HANDLES_KEY = "imessage_allowed_handles";
+/**
+ * Vault key for the owner's OWN handle(s): a JSON array of the account owner's
+ * E.164 numbers / Apple-ID emails. A message the account itself sent
+ * (`isFromMe`) drives a turn only when it lands in a 1:1 chat with one of these
+ * handles — i.e. the owner texting their own "self-chat" from any Apple device.
+ * Empty (the default) means self-chat is off and every `isFromMe` message is
+ * dropped (fail closed); the friend allow-list path is unaffected.
+ */
+export declare const IMESSAGE_OWNER_HANDLES_KEY = "imessage_owner_handles";
+/** E.164 shape: `+` then 7–15 digits, no leading zero. */
+export declare const E164_RE: RegExp;
+/** Pragmatic email shape (Apple-ID handles). Deliberately loose but anchored. */
+export declare const EMAIL_RE: RegExp;
+/** Whether a normalized string is a plausible iMessage handle. */
+export declare function isHandle(value: string): boolean;
+/**
+ * Canonical handle for allow-list comparisons: trimmed, and lowercased when it
+ * is an email (Apple-ID handles are case-insensitive). Phone numbers are left
+ * as-is (they are already digits + `+`).
+ */
+export declare function normalizeHandle(raw: string): string;
+/**
+ * Parse a stored handle list. Returns `[]` for a missing OR corrupt value
+ * rather than throwing — a corrupt vault entry must degrade to "nobody extra is
+ * allowed" (fail closed), never crash the channel or silently allow. Non-string
+ * entries and entries that are neither an E.164 number nor an email are dropped.
+ */
+export declare function parseHandleList(raw: string | null | undefined): string[];
+/**
+ * Parse the chat GUID BlueBubbles stamps on every message
+ * (`SERVICE;TYPE;IDENTIFIER`, e.g. `iMessage;-;+15551234567`). TYPE is `-` for a
+ * 1:1 chat and `+` for a group. Returns null for anything that is not a
+ * well-formed 1:1 GUID (groups included) so callers treat it as "not a DM" and
+ * drop it (v1 is direct-message only).
+ */
+export declare function parseDmChatGuid(guid: string | null | undefined): {
+    readonly service: string;
+    readonly handle: string;
+} | null;
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAC7D,6EAA6E;AAC7E,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AACnE,qDAAqD;AACrD,eAAO,MAAM,4BAA4B,6BAA6B,CAAC;AACvE,8DAA8D;AAC9D,eAAO,MAAM,4BAA4B,mCAAmC,CAAC;AAC7E;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,6BAA6B,CAAC;AACvE;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AAEnE,0DAA0D;AAC1D,eAAO,MAAM,OAAO,QAAsB,CAAC;AAE3C,iFAAiF;AACjF,eAAO,MAAM,QAAQ,QAA+B,CAAC;AAErD,kEAAkE;AAClE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/C;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGnD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAgBxE;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9B;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAa9D"}