@openclaw/imessage 2026.9.8 → 2026.10.1-beta.1

package/dist/.setup/{sanitize-outbound-3MLljgtY.mjs → client-12apu4Ip.mjs}

@@ -1,7 +1,7 @@
-import { u as expandIMessageUserPath } from "./accounts-nzcU0cq2.mjs";
-import { i as invalidateCachedIMessagePrivateApiStatus } from "./message-tool-api-D032l82H.mjs";
+import { u as expandIMessageUserPath } from "./accounts-evTpvJMv.mjs";
+import { i as invalidateCachedIMessagePrivateApiStatus } from "./message-tool-api-CqfRxLlT.mjs";
 import { t as getIMessageRuntime } from "./runtime-Cza4CY5T.mjs";
-import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { asNullableRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { normalizeE164 } from "openclaw/plugin-sdk/account-resolution";
 import { logVerbose } from "openclaw/plugin-sdk/runtime-env";
 import { createHash } from "node:crypto";
@@ -10,7 +10,7 @@ import { resolveUserPath } from "openclaw/plugin-sdk/text-utility-runtime";
 import { spawn } from "node:child_process";
 import { StringDecoder } from "node:string_decoder";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
-import { FormatCapabilityProfile, findCodeRegions, isInsideCode, markdownToIR, renderMarkdownWithAttributedRanges, sanitizeAssistantVisibleText, stripMarkdown, tokenizeHtmlTags } from "openclaw/plugin-sdk/text-chunking";
+import { raceWithTimeout } from "openclaw/plugin-sdk/time-runtime";
 //#region extensions/imessage/src/chat-context.ts
 const EMAIL_HANDLE_PATTERN = /^[^\s@]+@[^\s@]+$/u;
 function parseDirectChatIdentity(raw) {
@@ -52,7 +52,7 @@ function chatContextFromIMessageTarget(target, effectiveService) {
 	if (target.kind === "chat_guid") return { chatGuid: target.chatGuid };
 	if (target.kind === "chat_identifier") return { chatIdentifier: target.chatIdentifier };
 	const trimmedHandle = target.to.trim();
-	const canonicalHandle = trimmedHandle.startsWith("+") ? normalizeE164(trimmedHandle) : /^[^\s@]+@[^\s@]+$/u.test(trimmedHandle) ? trimmedHandle.toLowerCase() : void 0;
+	const canonicalHandle = trimmedHandle.startsWith("+") ? normalizeE164(trimmedHandle) : EMAIL_HANDLE_PATTERN.test(trimmedHandle) ? trimmedHandle.toLowerCase() : void 0;
 	if (!canonicalHandle) return {};
 	const service = target.service === "auto" ? effectiveService : target.service;
 	if (service !== "imessage" && service !== "sms") return {};
@@ -75,23 +75,16 @@ function compareChatSelector(cachedRaw, currentRaw, crossKind = false) {
 	return cachedDirect.service === currentDirect.service;
 }
 function resolveIMessageChatMatch(cached, current) {
-	const cachedChatGuid = normalizeOptionalString(cached.chatGuid);
-	const currentChatGuid = normalizeOptionalString(current.chatGuid);
-	const cachedChatIdentifier = normalizeOptionalString(cached.chatIdentifier);
-	const currentChatIdentifier = normalizeOptionalString(current.chatIdentifier);
 	const comparisons = [
-		compareChatSelector(cachedChatGuid, currentChatGuid),
-		compareChatSelector(cachedChatIdentifier, currentChatIdentifier),
+		compareChatSelector(cached.chatGuid, current.chatGuid),
+		compareChatSelector(cached.chatIdentifier, current.chatIdentifier),
 		compareOptional(cached.chatId, current.chatId),
-		compareChatSelector(cachedChatGuid, currentChatIdentifier, true),
-		compareChatSelector(cachedChatIdentifier, currentChatGuid, true)
+		compareChatSelector(cached.chatGuid, current.chatIdentifier, true),
+		compareChatSelector(cached.chatIdentifier, current.chatGuid, true)
 	].filter((comparison) => comparison !== void 0);
 	if (comparisons.length === 0) return "unknown";
 	return comparisons.every(Boolean) ? "match" : "mismatch";
 }
-function isPositiveIMessageChatMatch(cached, current) {
-	return resolveIMessageChatMatch(cached, current) === "match";
-}
 //#endregion
 //#region extensions/imessage/src/constants.ts
 /** Default timeout for iMessage probe/RPC operations (10 seconds). */
@@ -262,10 +255,6 @@ function buildReplyCacheEntry(entry, messageId, shortId) {
 		...typeof entry.isFromMe === "boolean" ? { isFromMe: entry.isFromMe } : {}
 	};
 }
-function generateShortId() {
-	imessageShortIdCounter += 1;
-	return String(imessageShortIdCounter);
-}
 async function rememberIMessageReplyCache(entry) {
 	await hydrateFromStoreOnce();
 	const messageId = entry.messageId.trim();
@@ -276,7 +265,7 @@ async function rememberIMessageReplyCache(entry) {
 	let shortId = imessageReplyCacheByMessageId.get(messageId)?.shortId;
 	const isNewMessage = !shortId;
 	if (!shortId) {
-		shortId = generateShortId();
+		shortId = String(++imessageShortIdCounter);
 		imessageShortIdToUuid.set(shortId, messageId);
 	}
 	const fullEntry = buildReplyCacheEntry(entry, messageId, shortId);
@@ -311,9 +300,6 @@ function hasChatScope(ctx) {
 	if (!ctx) return false;
 	return Boolean(normalizeOptionalString(ctx.chatGuid) || normalizeOptionalString(ctx.chatIdentifier) || typeof ctx.chatId === "number");
 }
-function isCrossChatMismatch(cached, ctx) {
-	return resolveIMessageChatMatch(cached, ctx) === "mismatch";
-}
 function describeChatForError(values) {
 	const parts = [];
 	if (normalizeOptionalString(values.chatGuid)) parts.push("chatGuid=<redacted>");
@@ -333,26 +319,19 @@ async function resolveIMessageMessageId(shortOrUuid, opts) {
 	const trimmed = shortOrUuid.trim();
 	if (!trimmed) return trimmed;
 	await hydrateFromStoreOnce();
-	if (/^\d+$/.test(trimmed)) {
-		const uuid = imessageShortIdToUuid.get(trimmed);
-		if (uuid) {
-			const cached = imessageReplyCacheByMessageId.get(uuid);
-			if (opts?.chatContext && hasChatScope(opts.chatContext)) {
-				if (cached && isCrossChatMismatch(cached, opts.chatContext)) throw buildCrossChatError(trimmed, "short", cached, opts.chatContext);
-			}
-			if (opts?.requireFromMe && cached?.isFromMe !== true) throw buildFromMeError(trimmed, "short");
-			return uuid;
+	const inputKind = /^\d+$/.test(trimmed) ? "short" : "uuid";
+	const messageId = inputKind === "short" ? imessageShortIdToUuid.get(trimmed) : trimmed;
+	if (!messageId) {
+		if (opts?.requireKnownShortId) {
+			if (!hasChatScope(opts.chatContext)) throw new Error(`iMessage short message id ${describeMessageIdForError(trimmed, "short")} requires a chat scope (chatGuid / chatIdentifier / chatId or a target).`);
+			throw new Error(`iMessage short message id ${describeMessageIdForError(trimmed, "short")} is no longer available. Use MessageSidFull.`);
 		}
-		if (opts?.requireKnownShortId && !hasChatScope(opts.chatContext)) throw new Error(`iMessage short message id ${describeMessageIdForError(trimmed, "short")} requires a chat scope (chatGuid / chatIdentifier / chatId or a target).`);
-		if (opts?.requireKnownShortId) throw new Error(`iMessage short message id ${describeMessageIdForError(trimmed, "short")} is no longer available. Use MessageSidFull.`);
 		return trimmed;
 	}
-	const cached = imessageReplyCacheByMessageId.get(trimmed);
-	if (opts?.chatContext) {
-		if (cached && isCrossChatMismatch(cached, opts.chatContext)) throw buildCrossChatError(trimmed, "uuid", cached, opts.chatContext);
-	}
-	if (opts?.requireFromMe && cached?.isFromMe !== true) throw buildFromMeError(trimmed, "uuid");
-	return trimmed;
+	const cached = imessageReplyCacheByMessageId.get(messageId);
+	if (cached && opts?.chatContext && (inputKind === "uuid" || hasChatScope(opts.chatContext)) && resolveIMessageChatMatch(cached, opts.chatContext) === "mismatch") throw buildCrossChatError(trimmed, inputKind, cached, opts.chatContext);
+	if (opts?.requireFromMe && cached?.isFromMe !== true) throw buildFromMeError(trimmed, inputKind);
+	return messageId;
 }
 async function isKnownFromMeIMessageMessageId(messageId, ctx) {
 	const trimmed = normalizeOptionalString(messageId);
@@ -380,33 +359,15 @@ async function isKnownFromMeIMessageTarget(params) {
 function buildFromMeError(inputId, inputKind) {
 	return /* @__PURE__ */ new Error(`iMessage message id ${describeMessageIdForError(inputId, inputKind)} is not one this agent sent. edit and unsend can only target messages the gateway delivered itself; messages received from other participants cannot be modified.`);
 }
-/**
-* Return the most recent cached entry whose chat scope matches the supplied
-* context. Used as a fallback when an agent calls a per-message action (e.g.
-* `react`) without specifying a `messageId` — the natural intent is "react
-* to the message I just received in this chat."
-*
-* Strict semantics for safety:
-*  - Caller must supply a chat scope. We refuse to "guess" the active chat.
-*  - Cached entry must positively match on at least one identifier kind
-*    (chatGuid, chatIdentifier, chatId, or normalized direct-DM fingerprint).
-*    We do NOT fall through on "no overlapping identifier" — that's how a
-*    cached entry from a foreign chat could be returned when the caller's
-*    context didn't share any identifier kind with the cache.
-*  - Caller must supply an accountId; we never cross account boundaries.
-*  - We only consider entries newer than `LATEST_FALLBACK_MS`. The intent
-*    of "react to the latest" is "the message I just received," not
-*    "anything in this chat from any time."
-*/
+/** Latest recent entry with a positive same-account conversation match; never guess a chat. */
 function findLatestIMessageEntryForChat(ctx) {
-	if (!hasChatScope(ctx)) return;
-	if (!ctx.accountId) return;
+	if (!hasChatScope(ctx) || !ctx.accountId) return;
 	const cutoff = Date.now() - LATEST_FALLBACK_MS;
 	let best;
 	for (const entry of imessageReplyCacheByMessageId.values()) {
 		if (entry.accountId !== ctx.accountId) continue;
 		if (entry.timestamp < cutoff) continue;
-		if (!isPositiveIMessageChatMatch(entry, ctx)) continue;
+		if (resolveIMessageChatMatch(entry, ctx) !== "match") continue;
 		if (!best || entry.timestamp > best.timestamp) best = entry;
 	}
 	return best;
@@ -450,8 +411,7 @@ function parseLastJsonObject(stdout) {
 	const last = stdout.split(/\r?\n/u).findLast((line) => line.trim().length > 0)?.trim();
 	if (!last) return null;
 	try {
-		const value = JSON.parse(last);
-		return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+		return asNullableRecord(JSON.parse(last));
 	} catch {
 		return null;
 	}
@@ -702,14 +662,7 @@ var IMessageRpcClient = class {
 	}
 	async waitForReap(timeoutMs) {
 		if (this.isReaped) return true;
-		let timer;
-		try {
-			return await Promise.race([this.reaped.then(() => true), new Promise((resolve) => {
-				timer = setTimeout(() => resolve(false), timeoutMs);
-			})]);
-		} finally {
-			if (timer) clearTimeout(timer);
-		}
+		return await raceWithTimeout(this.reaped.then(() => true), timeoutMs, () => false);
 	}
 	signalChild(child, signal) {
 		try {
@@ -813,566 +766,4 @@ async function createIMessageRpcClient(opts = {}) {
 	return client;
 }
 //#endregion
-//#region extensions/imessage/src/markdown-format.ts
-const IMESSAGE_FORMAT_PROFILE = FormatCapabilityProfile.define({
-	mechanism: "ranges",
-	constructs: {
-		spoiler: "strip",
-		codeInline: "fallback",
-		codeBlock: "fallback",
-		codeLanguage: "strip",
-		linkLabel: "fallback",
-		heading: "fallback",
-		bulletList: "fallback",
-		orderedList: "fallback",
-		taskList: "fallback",
-		table: "fallback",
-		blockquote: "fallback",
-		image: "fallback",
-		mention: "strip"
-	},
-	chunk: {
-		limit: 4e3,
-		unit: "utf16"
-	}
-});
-const IMESSAGE_CODE_PROFILE = FormatCapabilityProfile.define({
-	...IMESSAGE_FORMAT_PROFILE,
-	constructs: {
-		...IMESSAGE_FORMAT_PROFILE.constructs,
-		codeInline: "native"
-	}
-});
-const IMESSAGE_STYLE_MAP = {
-	bold: "bold",
-	italic: "italic",
-	underline: "underline",
-	strikethrough: "strikethrough"
-};
-function codeDelimiter(content) {
-	const longestRun = Math.max(0, ...[...content.matchAll(/`+/gu)].map((match) => match[0].length));
-	return "`".repeat(longestRun + 1);
-}
-function restoreCodeMarkers(text, ranges, codeRanges) {
-	if (codeRanges.length === 0) return {
-		text,
-		ranges
-	};
-	let rendered = "";
-	let cursor = 0;
-	const edits = codeRanges.map((range) => {
-		const end = range.start + range.length;
-		const content = text.slice(range.start, end);
-		const marker = codeDelimiter(content);
-		const padding = content.startsWith("`") || content.endsWith("`") ? " " : "";
-		rendered += text.slice(cursor, range.start) + `${marker}${padding}${content}${padding}${marker}`;
-		cursor = end;
-		return {
-			end,
-			shift: rendered.length - end
-		};
-	});
-	rendered += text.slice(cursor);
-	const mapOffset = (offset) => {
-		let low = 0;
-		let high = edits.length;
-		while (low < high) {
-			const middle = low + Math.floor((high - low) / 2);
-			const edit = edits[middle];
-			if (edit && edit.end <= offset) low = middle + 1;
-			else high = middle;
-		}
-		return offset + (edits[low - 1]?.shift ?? 0);
-	};
-	return {
-		text: rendered,
-		ranges: ranges.map((range) => {
-			const start = mapOffset(range.start);
-			return {
-				...range,
-				start,
-				length: mapOffset(range.start + range.length) - start
-			};
-		})
-	};
-}
-function extractMarkdownFormatRuns(input) {
-	const ir = markdownToIR(input, {
-		autolink: false,
-		enableHtmlUnderline: true,
-		headingStyle: "rich",
-		linkify: false,
-		preserveDunderIdentifiers: true,
-		preserveSourceBlockSpacing: true
-	});
-	const rendered = renderMarkdownWithAttributedRanges(ir, { styleMap: IMESSAGE_STYLE_MAP }, IMESSAGE_FORMAT_PROFILE);
-	const codeRanges = ir.styles.some((span) => span.style === "code") ? renderMarkdownWithAttributedRanges(ir, { styleMap: { code: "code" } }, IMESSAGE_CODE_PROFILE).ranges : [];
-	return restoreCodeMarkers(rendered.text, rendered.ranges.map(({ start, length, style }) => ({
-		start,
-		length,
-		styles: [style]
-	})), codeRanges);
-}
-//#endregion
-//#region extensions/imessage/src/monitor/sanitize-outbound.ts
-/**
-* Patterns that indicate assistant-internal metadata leaked into text.
-* These must never reach a user-facing channel.
-*/
-const INTERNAL_SEPARATOR_RE = /(?:#\+){2,}#?/g;
-const ASSISTANT_ROLE_MARKER_RE = /\bassistant\s+to\s*=\s*\w+/gi;
-const ROLE_TURN_MARKER_RE = /^[ \t]*(?:>[ \t]*)*(?:user|system|assistant)[ \t]*:[ \t]*(?=\r?$)/gim;
-const FENCED_ROLE_MARKER_RE = /^[ \t]*(user|system|assistant)[ \t]*:[ \t]*(?=\r?$)/gim;
-const FINAL_PRIVATE_MARKER_RE = /(?:#\+){2,}#?|\bassistant\s+to\s*=\s*\w+|^[ \t]*(?:user|system|assistant)[ \t]*:[ \t]*(?=\r?$)/gim;
-const PRIVATE_USE_START = 57344;
-const PRIVATE_USE_END = 63743;
-const MAX_PRIVATE_MARKDOWN_UNWRAP_PASSES = 32;
-const PLAIN_TEXT_HTML_TAG_RE = /<\/?[a-z][a-z0-9_.:-]*(?=[\s/>])[^>]*>/gi;
-const PRIVATE_PROVIDER_TAG_NAMES = [
-	"think",
-	"thinking",
-	"thought",
-	"reasoning",
-	"antthinking",
-	"antml:think",
-	"antml:thinking",
-	"antml:thought",
-	"antml:reasoning",
-	"mm:think",
-	"mm:thinking",
-	"mm:thought",
-	"mm:reasoning",
-	"relevant_memories",
-	"relevant-memories",
-	"tool_call",
-	"tool_result",
-	"function_call",
-	"function_calls",
-	"function_response",
-	"function",
-	"tool_calls",
-	"antml:invoke",
-	"antml:parameter",
-	"invoke",
-	"parameter"
-];
-const PRIVATE_PROVIDER_TAG_NAME_SET = new Set(PRIVATE_PROVIDER_TAG_NAMES);
-const OPAQUE_PRIVATE_RUNTIME_CONTEXT_BLOCK_RE = /^<<<BEGIN_OPENCLAW_INTERNAL_CONTEXT>>>(?:(?!<<<BEGIN_OPENCLAW_INTERNAL_CONTEXT>>>)[\s\S])*<<<END_OPENCLAW_INTERNAL_CONTEXT>>>/;
-const PRIVATE_RUNTIME_CONTEXT_BLOCK_RE = /<<<BEGIN_OPENCLAW_INTERNAL_CONTEXT>>>(?:(?!<<<BEGIN_OPENCLAW_INTERNAL_CONTEXT>>>)[\s\S])*<<<END_OPENCLAW_INTERNAL_CONTEXT>>>/g;
-const NESTED_PRIVATE_MARKUP_START_RE = /<<<BEGIN_OPENCLAW_INTERNAL_CONTEXT>>>|<\s*\/?\s*[A-Za-z][A-Za-z0-9_.:-]*(?=\s|\/?>)/g;
-const OUTER_PRIVATE_TAG_FRAGMENT_RE = /^\s*\/?\s*([a-z][a-z0-9_.:-]*)?$/i;
-const OPAQUE_PRIVATE_MARKUP_BLOCK_RE = /^<\s*(system-reminder|previous_response|details|summary)\b[^>]*>[\s\S]*?<\s*\/\s*\1\s*>/i;
-const REMOVABLE_PRIVATE_MARKUP_TAG_RE = /^<\s*\/?\s*[a-z][a-z0-9_.:-]*(?=\s|\/?>)[^>]*>/i;
-const PRIVATE_PROVIDER_TAG_FRAGMENT_RE = /^[a-z0-9_.:-]*/i;
-const PRIVATE_RUNTIME_SCAFFOLDING_TAG_TOKEN_RE = /<\s*(\/?)\s*(system-reminder|previous_response)\b/gi;
-function assertSafeIMessageOutboundMarkup(text) {
-	for (const nested of text.matchAll(NESTED_PRIVATE_MARKUP_START_RE)) {
-		const nestedStart = nested.index ?? 0;
-		const outerStart = text.lastIndexOf("<", nestedStart - 1);
-		if (outerStart < 0) continue;
-		const outer = OUTER_PRIVATE_TAG_FRAGMENT_RE.exec(text.slice(outerStart + 1, nestedStart));
-		if (!outer) continue;
-		let candidate = (outer[1] ?? "").toLowerCase();
-		if (!PRIVATE_PROVIDER_TAG_NAMES.some((name) => name.startsWith(candidate))) continue;
-		let cursor = nestedStart;
-		for (let depth = 0; depth < MAX_PRIVATE_MARKDOWN_UNWRAP_PASSES; depth += 1) {
-			const remaining = text.slice(cursor);
-			const removed = OPAQUE_PRIVATE_RUNTIME_CONTEXT_BLOCK_RE.exec(remaining)?.[0] ?? OPAQUE_PRIVATE_MARKUP_BLOCK_RE.exec(remaining)?.[0] ?? REMOVABLE_PRIVATE_MARKUP_TAG_RE.exec(remaining)?.[0];
-			if (!removed) break;
-			cursor += removed.length;
-			const suffix = PRIVATE_PROVIDER_TAG_FRAGMENT_RE.exec(text.slice(cursor))?.[0] ?? "";
-			candidate += suffix.toLowerCase();
-			cursor += suffix.length;
-			if (PRIVATE_PROVIDER_TAG_NAME_SET.has(candidate) && /[\s/>]/.test(text.charAt(cursor))) throw new Error("iMessage outbound ambiguous nested HTML is not allowed");
-			if (!PRIVATE_PROVIDER_TAG_NAMES.some((name) => name.startsWith(candidate))) break;
-			if (depth + 1 >= MAX_PRIVATE_MARKDOWN_UNWRAP_PASSES && (OPAQUE_PRIVATE_RUNTIME_CONTEXT_BLOCK_RE.test(text.slice(cursor)) || REMOVABLE_PRIVATE_MARKUP_TAG_RE.test(text.slice(cursor)))) throw new Error("iMessage outbound runtime scaffolding exceeded its limit");
-		}
-	}
-}
-function stripIMessageBalancedPrivateRuntimeBlocks(text, verifyProtectedRoles) {
-	const openBlocks = [];
-	const completedBlocks = [];
-	const codeRegions = findCodeRegions(text);
-	const parsedHtmlTags = [...tokenizeHtmlTags(text)];
-	const htmlTags = parsedHtmlTags.map(({ start, end }) => ({
-		start,
-		end,
-		terminated: true
-	}));
-	const rawTextHtml = [];
-	const rawTextTagNames = /* @__PURE__ */ new Set([
-		"script",
-		"style",
-		"textarea",
-		"title",
-		"xmp",
-		"iframe",
-		"noembed",
-		"noframes",
-		"noscript",
-		"plaintext"
-	]);
-	for (const [index, opener] of parsedHtmlTags.entries()) {
-		if (opener.closing || !rawTextTagNames.has(opener.name)) continue;
-		const closing = opener.name === "plaintext" ? void 0 : parsedHtmlTags.slice(index + 1).find((candidate) => {
-			return candidate.closing && candidate.name === opener.name;
-		});
-		rawTextHtml.push({
-			start: opener.start,
-			end: closing?.end ?? text.length,
-			terminated: Boolean(closing)
-		});
-		if (rawTextHtml.length > MAX_PRIVATE_MARKDOWN_UNWRAP_PASSES ** 2) throw new Error("iMessage outbound runtime scaffolding exceeded its limit");
-	}
-	const opaqueHtml = [];
-	for (let cursor = 0; cursor < text.length;) {
-		const start = text.indexOf("<", cursor);
-		if (start < 0) break;
-		const enclosingTag = htmlTags.find((tag) => tag.start < start && start < tag.end);
-		if (enclosingTag) {
-			cursor = enclosingTag.end;
-			continue;
-		}
-		let end = -1;
-		let delimiterLength = 0;
-		if (text.startsWith("<!--", start)) {
-			end = text.indexOf("-->", start + 4);
-			delimiterLength = 3;
-		} else if (/^<!\[CDATA\[/i.test(text.slice(start, start + 9))) {
-			end = text.indexOf("]]>", start + 9);
-			delimiterLength = 3;
-		} else if (text.startsWith("<?", start)) {
-			let quote;
-			for (let index = start + 2; index < text.length - 1; index += 1) {
-				const character = text[index];
-				if (quote) {
-					if (character === quote) quote = void 0;
-				} else if (character === "'" || character === "\"") quote = character;
-				else if (character === "?" && text[index + 1] === ">") {
-					end = index;
-					delimiterLength = 2;
-					break;
-				}
-			}
-		} else if (/^<![a-z][a-z0-9_.:-]*\b/i.test(text.slice(start))) {
-			let quote;
-			let bracketDepth = 0;
-			for (let index = start + 2; index < text.length; index += 1) {
-				const character = text[index];
-				if (quote) {
-					if (character === quote) quote = void 0;
-				} else if (character === "'" || character === "\"") quote = character;
-				else if (character === "[") bracketDepth += 1;
-				else if (character === "]" && bracketDepth > 0) bracketDepth -= 1;
-				else if (character === ">" && bracketDepth === 0) {
-					end = index;
-					delimiterLength = 1;
-					break;
-				}
-			}
-		} else if (text.startsWith("<!", start) || text.startsWith("</", start) && start + 2 < text.length && !/[A-Za-z>]/.test(text[start + 2] ?? "")) {
-			end = text.indexOf(">", start + 2);
-			delimiterLength = 1;
-		} else {
-			cursor = start + 1;
-			continue;
-		}
-		if (opaqueHtml.length >= MAX_PRIVATE_MARKDOWN_UNWRAP_PASSES ** 2) throw new Error("iMessage outbound runtime scaffolding exceeded its limit");
-		const terminated = end >= 0;
-		const regionEnd = terminated ? end + delimiterLength : text.length;
-		opaqueHtml.push({
-			start,
-			end: regionEnd,
-			terminated
-		});
-		cursor = regionEnd;
-	}
-	htmlTags.push(...opaqueHtml);
-	htmlTags.sort((left, right) => left.start - right.start || right.end - left.end);
-	let htmlTagIndex = 0;
-	let scannedTags = 0;
-	let scannedThrough = 0;
-	for (const token of text.matchAll(PRIVATE_RUNTIME_SCAFFOLDING_TAG_TOKEN_RE)) {
-		const start = token.index ?? 0;
-		if (start < scannedThrough) continue;
-		while ((htmlTags[htmlTagIndex]?.end ?? 0) <= start && htmlTagIndex < htmlTags.length) htmlTagIndex += 1;
-		const enclosingHtmlTag = htmlTags[htmlTagIndex];
-		if (enclosingHtmlTag && enclosingHtmlTag.start < start && start < enclosingHtmlTag.end) continue;
-		const codeRegion = codeRegions.find((region) => isInsideCode(start, [region]));
-		const enclosingBlock = openBlocks.at(-1);
-		const enclosingRawText = rawTextHtml.find((region) => {
-			return region.start < start && start < region.end;
-		});
-		if (enclosingBlock && enclosingRawText && enclosingBlock.start < enclosingRawText.start) {
-			enclosingBlock.sawNested = true;
-			continue;
-		}
-		if (enclosingBlock && codeRegion && enclosingBlock.codeRegion !== codeRegion) {
-			enclosingBlock.sawNested = true;
-			continue;
-		}
-		if (enclosingBlock?.codeRegion && enclosingBlock.codeRegion !== codeRegion) throw new Error("iMessage outbound runtime scaffolding is malformed");
-		if (++scannedTags > MAX_PRIVATE_MARKDOWN_UNWRAP_PASSES ** 2) throw new Error("iMessage outbound runtime scaffolding exceeded its limit");
-		let quote;
-		let end = start + token[0].length;
-		for (; end < text.length; end += 1) {
-			if (end - start > MAX_PRIVATE_MARKDOWN_UNWRAP_PASSES ** 2) throw new Error("iMessage outbound runtime scaffolding exceeded its limit");
-			const character = text[end];
-			if (quote) {
-				if (character === quote) quote = void 0;
-			} else if (character === "'" || character === "\"") quote = character;
-			else if (character === "<") throw new Error("iMessage outbound runtime scaffolding is malformed");
-			else if (character === ">") break;
-		}
-		if (end >= text.length || quote) throw new Error("iMessage outbound runtime scaffolding is malformed");
-		end += 1;
-		if (enclosingBlock?.codeRegion && enclosingBlock.codeRegion === codeRegion) {
-			if (!enclosingBlock.nestedCodeRegions) {
-				if (codeRegion.end - enclosingBlock.end > MAX_PRIVATE_MARKDOWN_UNWRAP_PASSES ** 3) throw new Error("iMessage outbound runtime scaffolding exceeded its limit");
-				enclosingBlock.nestedCodeRegions = findCodeRegions(text.slice(enclosingBlock.end, codeRegion.end));
-				if (enclosingBlock.nestedCodeRegions.length > MAX_PRIVATE_MARKDOWN_UNWRAP_PASSES ** 2) throw new Error("iMessage outbound runtime scaffolding exceeded its limit");
-			}
-			if (isInsideCode(start - enclosingBlock.end, enclosingBlock.nestedCodeRegions)) {
-				enclosingBlock.sawNested = true;
-				continue;
-			}
-		}
-		scannedThrough = end;
-		const markup = text.slice(start, end);
-		const closing = token[1] === "/";
-		if (!closing && /\/\s*>$/.test(markup)) {
-			const parent = openBlocks.at(-1);
-			if (parent) parent.sawNested = true;
-			else completedBlocks.push({
-				start,
-				end
-			});
-			continue;
-		}
-		const name = (token[2] ?? "").toLowerCase();
-		if (!closing) {
-			if (openBlocks.length >= MAX_PRIVATE_MARKDOWN_UNWRAP_PASSES) throw new Error("iMessage outbound runtime scaffolding exceeded its limit");
-			const parent = openBlocks.at(-1);
-			if (parent) parent.sawNested = true;
-			openBlocks.push({
-				name,
-				start,
-				end,
-				sawNested: false,
-				codeRegion
-			});
-			continue;
-		}
-		const opening = openBlocks.at(-1);
-		if (!opening) {
-			completedBlocks.push({
-				start,
-				end
-			});
-			continue;
-		}
-		if (opening.name !== name) throw new Error("iMessage outbound runtime scaffolding is malformed");
-		openBlocks.pop();
-		completedBlocks.push({
-			start: opening.start,
-			end
-		});
-	}
-	if (openBlocks.length > 1 || openBlocks[0]?.sawNested || openBlocks[0] && [...opaqueHtml, ...rawTextHtml].some((region) => !region.terminated && openBlocks[0].start < region.start)) throw new Error("iMessage outbound runtime scaffolding is malformed");
-	const orphan = openBlocks[0];
-	if (orphan) completedBlocks.push({
-		start: orphan.start,
-		end: orphan.end
-	});
-	completedBlocks.sort((left, right) => left.start - right.start || right.end - left.end);
-	const outermost = [];
-	for (const block of completedBlocks) {
-		const previous = outermost.at(-1);
-		if (!previous || block.start >= previous.end) outermost.push(block);
-	}
-	let current = text;
-	for (const block of outermost.toReversed()) {
-		verifyProtectedRoles?.(current);
-		const stripped = current.slice(0, block.start) + current.slice(block.end);
-		assertSafeIMessageOutboundMarkup(stripped);
-		verifyProtectedRoles?.(stripped);
-		current = stripped;
-	}
-	return current;
-}
-function stripIMessagePrivateRuntimeScaffolding(text, verifyProtectedRoles) {
-	assertSafeIMessageOutboundMarkup(text);
-	let current = text;
-	for (let depth = 0; depth < MAX_PRIVATE_MARKDOWN_UNWRAP_PASSES; depth += 1) {
-		let changed = false;
-		for (const strip of [(value) => value.replace(PRIVATE_RUNTIME_CONTEXT_BLOCK_RE, ""), (value) => stripIMessageBalancedPrivateRuntimeBlocks(value, verifyProtectedRoles)]) {
-			verifyProtectedRoles?.(current);
-			const stripped = strip(current);
-			assertSafeIMessageOutboundMarkup(stripped);
-			verifyProtectedRoles?.(stripped);
-			if (stripped !== current) {
-				current = stripped;
-				changed = true;
-			}
-		}
-		if (!changed) return current;
-	}
-	throw new Error("iMessage outbound runtime scaffolding exceeded its limit");
-}
-function sanitizeIMessageAssistantVisibleText(text, verifyProtectedRoles) {
-	const cleaned = stripIMessagePrivateRuntimeScaffolding(text, verifyProtectedRoles);
-	if (!text.trim()) return text;
-	const leadingWhitespace = /^\s*/u.exec(text)?.[0] ?? "";
-	const trailingWhitespace = /\s*$/u.exec(text)?.[0] ?? "";
-	verifyProtectedRoles?.(cleaned);
-	const canonical = cleaned.trim();
-	verifyProtectedRoles?.(canonical);
-	const visible = sanitizeAssistantVisibleText(canonical);
-	verifyProtectedRoles?.(visible);
-	return visible ? `${leadingWhitespace}${visible}${trailingWhitespace}` : "";
-}
-function isClosedFencedCodeRegion(text, region) {
-	const lineStart = text.lastIndexOf("\n", region.start - 1) + 1;
-	if (!/^ {0,3}$/.test(text.slice(lineStart, region.start))) return false;
-	const source = text.slice(region.start, region.end);
-	const openingFence = /^ {0,3}(`{3,}|~{3,})[^\r\n]*\r?\n/.exec(source)?.[1];
-	if (!openingFence) return false;
-	const closingFence = new RegExp(`\r?\n {0,3}${openingFence[0]}{${openingFence.length},}[\t ]*(?:\r?\n)?$`);
-	const lineEnd = text.indexOf("\n", region.end);
-	return closingFence.test(source) && /^[\t ]*\r?$/.test(text.slice(region.end, lineEnd < 0 ? text.length : lineEnd));
-}
-/** Preserve authenticated fenced role mappings through the final native-render scrub. */
-function protectIMessageFencedRoleMarkers(text) {
-	const source = stripIMessagePrivateRuntimeScaffolding(text);
-	const closedFencedRegions = findCodeRegions(source).filter((region) => isClosedFencedCodeRegion(source, region));
-	const protectedRoles = /* @__PURE__ */ new Map();
-	let privateUseCodePoint = PRIVATE_USE_START;
-	const protectedText = source.replace(FENCED_ROLE_MARKER_RE, (marker, role, offset) => {
-		if (!isInsideCode(offset, closedFencedRegions)) return marker;
-		while (privateUseCodePoint <= PRIVATE_USE_END) {
-			const protectedGlyph = String.fromCharCode(privateUseCodePoint++);
-			const token = protectedGlyph.repeat(role.length);
-			if (text.includes(protectedGlyph) || protectedRoles.has(token)) continue;
-			protectedRoles.set(token, role);
-			return marker.replace(role, token);
-		}
-		throw new Error("iMessage outbound role protection is unavailable");
-	});
-	const verifyProtectedRoles = (visible) => {
-		assertSafeIMessageOutboundMarkup(visible);
-		let previous = -1;
-		for (const token of protectedRoles.keys()) {
-			const first = visible.indexOf(token);
-			if (first < 0 || first < previous || visible.includes(token, first + token.length)) throw new Error("iMessage outbound role protection failed");
-			for (let offset = visible.indexOf(token[0] ?? ""); offset >= 0;) {
-				if (offset < first || offset >= first + token.length) throw new Error("iMessage outbound role protection failed");
-				offset = visible.indexOf(token[0] ?? "", offset + 1);
-			}
-			previous = first + token.length;
-		}
-	};
-	return {
-		text: protectedText,
-		verifyProtectedRoles,
-		sanitizeFormatted: (formatted) => {
-			verifyProtectedRoles(formatted.text);
-			let visible = formatted.text;
-			let ranges = formatted.ranges;
-			for (let remainingPasses = visible.length;; remainingPasses--) {
-				verifyProtectedRoles(visible);
-				const assistantVisible = sanitizeIMessageAssistantVisibleText(visible, verifyProtectedRoles);
-				const assistantTextChanged = assistantVisible !== visible;
-				if (assistantTextChanged) {
-					visible = assistantVisible;
-					ranges = [];
-					verifyProtectedRoles(visible);
-				}
-				const removed = [];
-				const cleaned = visible.replace(FINAL_PRIVATE_MARKER_RE, (marker, offset) => {
-					removed.push({
-						start: offset,
-						end: offset + marker.length
-					});
-					return "";
-				});
-				if (removed.length > 0) {
-					const mapOffset = (offset) => offset - removed.reduce((total, edit) => total + Math.max(0, Math.min(offset, edit.end) - edit.start), 0);
-					ranges = ranges.flatMap((range) => {
-						const start = mapOffset(range.start);
-						const length = mapOffset(range.start + range.length) - start;
-						return length > 0 ? [{
-							...range,
-							start,
-							length
-						}] : [];
-					});
-					visible = cleaned;
-					verifyProtectedRoles(visible);
-				}
-				if (removed.length === 0) {
-					let projection = visible;
-					for (let depth = 0;; depth += 1) {
-						verifyProtectedRoles(projection);
-						const renderedProjection = extractMarkdownFormatRuns(projection).text;
-						verifyProtectedRoles(renderedProjection);
-						const unwrappedProjection = stripMarkdown(renderedProjection);
-						verifyProtectedRoles(unwrappedProjection);
-						let htmlProjection = unwrappedProjection;
-						for (let htmlDepth = 0;; htmlDepth += 1) {
-							verifyProtectedRoles(htmlProjection);
-							const assistantProjection = sanitizeIMessageAssistantVisibleText(htmlProjection, verifyProtectedRoles);
-							verifyProtectedRoles(assistantProjection);
-							if (assistantProjection !== htmlProjection) throw new Error("iMessage outbound hidden assistant content is not allowed");
-							const htmlRemoved = htmlProjection.replace(PLAIN_TEXT_HTML_TAG_RE, "");
-							verifyProtectedRoles(htmlRemoved);
-							if (htmlRemoved === htmlProjection) break;
-							if (htmlDepth + 1 >= MAX_PRIVATE_MARKDOWN_UNWRAP_PASSES) throw new Error("iMessage outbound HTML security projection exceeded its limit");
-							htmlProjection = htmlRemoved;
-						}
-						if (unwrappedProjection === projection) break;
-						if (depth + 1 >= MAX_PRIVATE_MARKDOWN_UNWRAP_PASSES) throw new Error("iMessage outbound Markdown security projection exceeded its limit");
-						projection = unwrappedProjection;
-					}
-					if (!assistantTextChanged) break;
-				}
-				if (remainingPasses <= 0) throw new Error("iMessage outbound role sanitization failed");
-			}
-			verifyProtectedRoles(visible);
-			for (const [token, role] of protectedRoles) visible = visible.replace(token, role);
-			return {
-				text: visible,
-				ranges
-			};
-		}
-	};
-}
-/** Keep each transport's existing rendered or raw wire contract behind one final security gate. */
-function sanitizeIMessageFinalOutboundText(text, options = {}) {
-	const protection = options.protection ?? protectIMessageFencedRoleMarkers(text);
-	const source = options.protection ? text : protection.text;
-	protection.verifyProtectedRoles(source);
-	const protectedText = sanitizeIMessageAssistantVisibleText(source, protection.verifyProtectedRoles);
-	protection.verifyProtectedRoles(protectedText);
-	const formatted = options.formatMarkdown && protectedText.trim() ? extractMarkdownFormatRuns(protectedText) : {
-		text: protectedText,
-		ranges: []
-	};
-	return protection.sanitizeFormatted(formatted);
-}
-/**
-* Strip all assistant-internal scaffolding from outbound text before delivery.
-* Applies reasoning/thinking tag removal, memory tag removal, and
-* model-specific internal separator stripping.
-*/
-function sanitizeOutboundText(text) {
-	if (!text) return text;
-	let cleaned = sanitizeIMessageAssistantVisibleText(text);
-	cleaned = cleaned.replace(INTERNAL_SEPARATOR_RE, "");
-	cleaned = cleaned.replace(ASSISTANT_ROLE_MARKER_RE, "");
-	const closedFencedRegions = findCodeRegions(cleaned).filter((region) => isClosedFencedCodeRegion(cleaned, region));
-	cleaned = cleaned.replace(ROLE_TURN_MARKER_RE, (marker, offset) => isInsideCode(offset, closedFencedRegions) ? marker : "");
-	cleaned = cleaned.replace(/\n{3,}/g, "\n\n").trim();
-	return cleaned;
-}
-//#endregion
-export { DEFAULT_IMESSAGE_SEND_TIMEOUT_MS as C, resolveIMessageDirectChatService as D, normalizeDirectChatIdentifier as E, DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS as S, isIMessageEmailChatIdentifier as T, IMESSAGE_SENT_ECHOES_TTL_MS as _, IMessageRpcRequestError as a, resolveIMessageEchoMediaKey as b, findLatestIMessageEntryForChat as c, isKnownFromMeIMessageTarget as d, rememberIMessageReplyCache as f, IMESSAGE_SENT_ECHOES_NAMESPACE as g, IMESSAGE_CATCHUP_CURSOR_NAMESPACE as h, extractMarkdownFormatRuns as i, isIMessageCurrentMessageInChat as l, resolveIMessageMessageId as m, sanitizeIMessageFinalOutboundText as n, createIMessageRpcClient as o, resolveIMessageCachedResourceBinding as p, sanitizeOutboundText as r, runIMessageCliJsonCommand as s, protectIMessageFencedRoleMarkers as t, isIMessageCurrentMessageInChatAsync as u, capFailureRetriesMap as v, chatContextFromIMessageTarget as w, resolveIMessageSentEchoEntryKey as x, resolveIMessageCatchupCursorKey as y };
+export { resolveIMessageDirectChatService as C, normalizeDirectChatIdentifier as S, resolveIMessageSentEchoEntryKey as _, isIMessageCurrentMessageInChat as a, chatContextFromIMessageTarget as b, rememberIMessageReplyCache as c, IMESSAGE_CATCHUP_CURSOR_NAMESPACE as d, IMESSAGE_SENT_ECHOES_NAMESPACE as f, resolveIMessageEchoMediaKey as g, resolveIMessageCatchupCursorKey as h, findLatestIMessageEntryForChat as i, resolveIMessageCachedResourceBinding as l, capFailureRetriesMap as m, createIMessageRpcClient as n, isIMessageCurrentMessageInChatAsync as o, IMESSAGE_SENT_ECHOES_TTL_MS as p, runIMessageCliJsonCommand as r, isKnownFromMeIMessageTarget as s, IMessageRpcRequestError as t, resolveIMessageMessageId as u, DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS as v, isIMessageEmailChatIdentifier as x, DEFAULT_IMESSAGE_SEND_TIMEOUT_MS as y };