@poolzin/pool-bot 2026.2.21 → 2026.2.23

package/dist/imessage/monitor/runtime.js

@@ -1,12 +1,8 @@
+import { createNonExitingRuntime } from "../../runtime.js";
+import { normalizeStringEntries } from "../../shared/string-normalization.js";
 export function resolveRuntime(opts) {
-    return (opts.runtime ?? {
-        log: console.log,
-        error: console.error,
-        exit: (code) => {
-            throw new Error(`exit ${code}`);
-        },
-    });
+    return opts.runtime ?? createNonExitingRuntime();
 }
 export function normalizeAllowList(list) {
-    return (list ?? []).map((entry) => String(entry).trim()).filter(Boolean);
+    return normalizeStringEntries(list);
 }

package/dist/imessage/send.js

@@ -1,15 +1,56 @@
 import { loadConfig } from "../config/config.js";
 import { resolveMarkdownTableMode } from "../config/markdown-tables.js";
-import { mediaKindFromMime } from "../media/constants.js";
-import { saveMediaBuffer } from "../media/store.js";
-import { loadWebMedia } from "../web/media.js";
 import { convertMarkdownTables } from "../markdown/tables.js";
+import { mediaKindFromMime } from "../media/constants.js";
+import { resolveOutboundAttachmentFromUrl } from "../media/outbound-attachment.js";
 import { resolveIMessageAccount } from "./accounts.js";
 import { createIMessageRpcClient } from "./client.js";
 import { formatIMessageChatTarget, parseIMessageTarget } from "./targets.js";
+const LEADING_REPLY_TAG_RE = /^\s*\[\[\s*reply_to\s*:\s*([^\]\n]+)\s*\]\]\s*/i;
+const MAX_REPLY_TO_ID_LENGTH = 256;
+function stripUnsafeReplyTagChars(value) {
+    let next = "";
+    for (const ch of value) {
+        const code = ch.charCodeAt(0);
+        if ((code >= 0 && code <= 31) || code === 127 || ch === "[" || ch === "]") {
+            continue;
+        }
+        next += ch;
+    }
+    return next;
+}
+function sanitizeReplyToId(rawReplyToId) {
+    const trimmed = rawReplyToId?.trim();
+    if (!trimmed) {
+        return undefined;
+    }
+    const sanitized = stripUnsafeReplyTagChars(trimmed).trim();
+    if (!sanitized) {
+        return undefined;
+    }
+    if (sanitized.length > MAX_REPLY_TO_ID_LENGTH) {
+        return sanitized.slice(0, MAX_REPLY_TO_ID_LENGTH);
+    }
+    return sanitized;
+}
+function prependReplyTagIfNeeded(message, replyToId) {
+    const resolvedReplyToId = sanitizeReplyToId(replyToId);
+    if (!resolvedReplyToId) {
+        return message;
+    }
+    const replyTag = `[[reply_to:${resolvedReplyToId}]]`;
+    const existingLeadingTag = message.match(LEADING_REPLY_TAG_RE);
+    if (existingLeadingTag) {
+        const remainder = message.slice(existingLeadingTag[0].length).trimStart();
+        return remainder ? `${replyTag} ${remainder}` : replyTag;
+    }
+    const trimmedMessage = message.trimStart();
+    return trimmedMessage ? `${replyTag} ${trimmedMessage}` : replyTag;
+}
 function resolveMessageId(result) {
-    if (!result)
+    if (!result) {
         return null;
+    }
     const raw = (typeof result.messageId === "string" && result.messageId.trim()) ||
         (typeof result.message_id === "string" && result.message_id.trim()) ||
         (typeof result.id === "string" && result.id.trim()) ||
@@ -18,17 +59,13 @@ function resolveMessageId(result) {
         (typeof result.id === "number" ? String(result.id) : null);
     return raw ? String(raw).trim() : null;
 }
-async function resolveAttachment(mediaUrl, maxBytes) {
-    const media = await loadWebMedia(mediaUrl, maxBytes);
-    const saved = await saveMediaBuffer(media.buffer, media.contentType ?? undefined, "outbound", maxBytes);
-    return { path: saved.path, contentType: saved.contentType };
-}
 export async function sendMessageIMessage(to, text, opts = {}) {
-    const cfg = loadConfig();
-    const account = resolveIMessageAccount({
-        cfg,
-        accountId: opts.accountId,
-    });
+    const cfg = opts.config ?? loadConfig();
+    const account = opts.account ??
+        resolveIMessageAccount({
+            cfg,
+            accountId: opts.accountId,
+        });
     const cliPath = opts.cliPath?.trim() || account.config.cliPath?.trim() || "imsg";
     const dbPath = opts.dbPath?.trim() || account.config.dbPath?.trim();
     const target = parseIMessageTarget(opts.chatId ? formatIMessageChatTarget(opts.chatId) : to);
@@ -44,12 +81,16 @@ export async function sendMessageIMessage(to, text, opts = {}) {
     let message = text ?? "";
     let filePath;
     if (opts.mediaUrl?.trim()) {
-        const resolved = await resolveAttachment(opts.mediaUrl.trim(), maxBytes);
+        const resolveAttachmentFn = opts.resolveAttachmentImpl ?? resolveOutboundAttachmentFromUrl;
+        const resolved = await resolveAttachmentFn(opts.mediaUrl.trim(), maxBytes, {
+            localRoots: opts.mediaLocalRoots,
+        });
         filePath = resolved.path;
         if (!message.trim()) {
             const kind = mediaKindFromMime(resolved.contentType ?? undefined);
-            if (kind)
+            if (kind) {
                 message = kind === "image" ? "<media:image>" : `<media:${kind}>`;
+            }
         }
     }
     if (!message.trim() && !filePath) {
@@ -63,13 +104,15 @@ export async function sendMessageIMessage(to, text, opts = {}) {
         });
         message = convertMarkdownTables(message, tableMode);
     }
+    message = prependReplyTagIfNeeded(message, opts.replyToId);
     const params = {
         text: message,
-        service: (service || "auto"),
+        service: service || "auto",
         region,
     };
-    if (filePath)
+    if (filePath) {
         params.file = filePath;
+    }
     if (target.kind === "chat_id") {
         params.chat_id = target.chatId;
     }
@@ -82,7 +125,10 @@ export async function sendMessageIMessage(to, text, opts = {}) {
     else {
         params.to = target.to;
     }
-    const client = opts.client ?? (await createIMessageRpcClient({ cliPath, dbPath }));
+    const client = opts.client ??
+        (opts.createClient
+            ? await opts.createClient({ cliPath, dbPath })
+            : await createIMessageRpcClient({ cliPath, dbPath }));
     const shouldClose = !opts.client;
     try {
         const result = await client.request("send", params, {

package/dist/infra/exec-approvals-allowlist.js

@@ -1,6 +1,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import { DEFAULT_SAFE_BINS, analyzeShellCommand, isWindowsPlatform, matchAllowlist, resolveAllowlistCandidatePath, splitCommandChain, } from "./exec-approvals-analysis.js";
+import { isTrustedSafeBinPath } from "./exec-safe-bin-trust.js";
 function isPathLikeToken(value) {
     const trimmed = value.trim();
     if (!trimmed) {
@@ -67,6 +68,12 @@ export function isSafeBinUsage(params) {
     if (!resolution?.resolvedPath) {
         return false;
     }
+    if (!isTrustedSafeBinPath({
+        resolvedPath: resolution.resolvedPath,
+        trustedDirs: params.trustedSafeBinDirs,
+    })) {
+        return false;
+    }
     const cwd = params.cwd ?? process.cwd();
     const exists = params.fileExists ?? defaultFileExists;
     const argv = params.argv.slice(1);