@spinabot/brigade 1.7.0 → 1.9.0

package/dist/agents/channels/imessage/media.js

@@ -0,0 +1,196 @@
+/**
+ * iMessage media helpers — outbound attachment resolution + inbound kind
+ * inference.
+ *
+ * OUTBOUND: the `imsg` bridge sends an attachment by LOCAL PATH (the `file` RPC
+ * param), so there is no upload step — we just validate the local path through
+ * Brigade's outbound media-path guard (so a prompt-injected "send ~/.ssh/id_rsa"
+ * can't exfiltrate a secret) and enforce the per-account size cap. The resolved
+ * `{ path, kind, mimeType }` is what `send.ts` hands the RPC.
+ *
+ * INBOUND: the bridge has ALREADY saved received attachments to disk under the
+ * macOS Messages Attachments dir (the `attachmentRoots` allow-list). We don't
+ * fetch anything — we just map the bridge's reported `mime_type` to a Brigade
+ * media `kind` and surface the on-disk `path` so the agent can `read` it. The
+ * path is checked against the configured attachment roots so a malicious bridge
+ * payload can't point Brigade at an arbitrary file.
+ */
+import { statSync } from "node:fs";
+import path from "node:path";
+// Channel SDK barrel — the outbound-media exfil guard + the contract types. All
+// contract types come from the channel SDK barrel so the channel is built
+// entirely on `../sdk.js`.
+import { validateOutboundMediaPath } from "../sdk.js";
+import { scpCopyRemoteAttachment } from "./remote-attachments.js";
+/** Map a MIME type to a Brigade media kind (defaults to `document`). */
+export function kindFromMime(mime) {
+    const m = (mime ?? "").trim().toLowerCase();
+    if (m.startsWith("image/"))
+        return "image";
+    if (m.startsWith("video/"))
+        return "video";
+    if (m.startsWith("audio/"))
+        return "audio";
+    return "document";
+}
+/** Map a file extension to a Brigade media kind (defaults to `document`). */
+export function kindFromExt(filePath) {
+    const ext = path.extname(filePath).toLowerCase().replace(/^\./, "");
+    if (["png", "jpg", "jpeg", "gif", "webp", "heic", "bmp", "tiff"].includes(ext))
+        return "image";
+    if (["mp4", "mov", "m4v", "webm", "avi", "mkv"].includes(ext))
+        return "video";
+    if (["mp3", "m4a", "aac", "wav", "ogg", "flac", "caf", "amr"].includes(ext))
+        return "audio";
+    return "document";
+}
+/**
+ * Resolve an outbound media path for the send RPC: run the exfil guard, enforce
+ * the size cap, and infer the kind. Throws an operator-facing error when the
+ * path is refused or too large.
+ */
+export function resolveOutboundAttachment(rawPath, maxBytes) {
+    const filePath = (rawPath ?? "").trim();
+    if (!filePath)
+        throw new Error("iMessage media path is required");
+    const verdict = validateOutboundMediaPath(filePath);
+    if (!verdict.ok) {
+        throw new Error(`iMessage refused to attach "${filePath}": ${verdict.reason}`);
+    }
+    const resolved = path.resolve(filePath);
+    let size = 0;
+    try {
+        size = statSync(resolved).size;
+    }
+    catch {
+        throw new Error(`iMessage media path not found: ${resolved}`);
+    }
+    if (maxBytes > 0 && size > maxBytes) {
+        const mb = (maxBytes / (1024 * 1024)).toFixed(0);
+        throw new Error(`iMessage media is too large (${(size / (1024 * 1024)).toFixed(1)} MB > ${mb} MB cap)`);
+    }
+    return { path: resolved, kind: kindFromExt(resolved) };
+}
+/**
+ * Build an OutboundMedia descriptor's `kind` for a path (used when the caller
+ * already validated the path). Mirrors `kindFromExt` but kept as a named export
+ * so callers read clearly.
+ */
+export function inferOutboundMediaKind(media) {
+    if (media.kind)
+        return media.kind;
+    return kindFromExt(media.path);
+}
+/** Normalise a path's separators to `/` for cross-platform root comparison. */
+function toPosixish(p) {
+    return p.replace(/\\/g, "/");
+}
+/**
+ * True when a resolved on-disk path lives under one of the allowed roots.
+ *
+ * Roots are POSIX-style macOS paths (the bridge reports paths from a Mac), so
+ * matching is done on forward-slash-normalised strings — NOT `path.resolve`,
+ * which on Windows would drive-root a leading-slash path and flip the separators
+ * (breaking the glob-tail check). A wildcard segment in a root (e.g. the user
+ * segment in /Users/<wildcard>/Library/Messages/Attachments) matches any single
+ * path segment.
+ */
+export function isUnderAllowedRoot(filePath, roots) {
+    const target = toPosixish((filePath ?? "").trim());
+    if (!target)
+        return false;
+    const targetSegs = target.split("/").filter(Boolean);
+    for (const root of roots) {
+        const r = toPosixish(root.trim());
+        if (!r)
+            continue;
+        const rootSegs = r.split("/").filter(Boolean);
+        if (rootSegs.length === 0 || targetSegs.length < rootSegs.length)
+            continue;
+        let matched = true;
+        for (let i = 0; i < rootSegs.length; i++) {
+            if (rootSegs[i] === "*")
+                continue;
+            if (rootSegs[i] !== targetSegs[i]) {
+                matched = false;
+                break;
+            }
+        }
+        if (matched)
+            return true;
+    }
+    return false;
+}
+/**
+ * Map the bridge's reported inbound attachments to Brigade `InboundMediaAttachment`s,
+ * dropping any that are missing or whose on-disk path falls outside the allowed
+ * roots. Returns [] when nothing resolved.
+ */
+export function resolveInboundAttachments(raw, allowedRoots) {
+    if (!Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const att of raw) {
+        if (!att || att.missing === true)
+            continue;
+        const p = (att.original_path ?? "").trim();
+        if (!p)
+            continue;
+        if (allowedRoots.length > 0 && !isUnderAllowedRoot(p, allowedRoots))
+            continue;
+        const mimeType = (att.mime_type ?? "").trim() || undefined;
+        out.push({
+            kind: mimeType ? kindFromMime(mimeType) : kindFromExt(p),
+            path: p,
+            ...(mimeType ? { mimeType } : {}),
+            fileName: path.basename(p),
+        });
+    }
+    return out;
+}
+/**
+ * Remote-host variant of {@link resolveInboundAttachments}: the `imsg` bridge runs
+ * on a DIFFERENT machine, so each attachment's `original_path` is a REMOTE path.
+ * For each non-missing attachment whose remote path lives under an allowed remote
+ * root, SCP-copy it to a local temp file, then build the attachment pointing at
+ * the LOCAL copy (so the agent's `read` works). A copy failure drops just that
+ * attachment. Returns [] when nothing resolved.
+ */
+export async function resolveInboundAttachmentsRemote(raw, args) {
+    if (!Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const att of raw) {
+        if (!att || att.missing === true)
+            continue;
+        const remotePath = (att.original_path ?? "").trim();
+        if (!remotePath)
+            continue;
+        if (args.remoteRoots.length > 0 && !isUnderAllowedRoot(remotePath, args.remoteRoots)) {
+            args.log?.(`dropping inbound attachment outside allowed remote roots: ${remotePath}`);
+            continue;
+        }
+        let localPath;
+        try {
+            localPath = await scpCopyRemoteAttachment({
+                remoteHost: args.remoteHost,
+                remotePath,
+                ...(args.scpRunner ? { scpRunner: args.scpRunner } : {}),
+                ...(args.mkdtempImpl ? { mkdtempImpl: args.mkdtempImpl } : {}),
+            });
+        }
+        catch (err) {
+            args.log?.(`failed to fetch remote attachment ${remotePath}: ${err instanceof Error ? err.message : String(err)}`);
+            continue;
+        }
+        const mimeType = (att.mime_type ?? "").trim() || undefined;
+        out.push({
+            kind: mimeType ? kindFromMime(mimeType) : kindFromExt(remotePath),
+            path: localPath,
+            ...(mimeType ? { mimeType } : {}),
+            fileName: path.basename(remotePath),
+        });
+    }
+    return out;
+}
+//# sourceMappingURL=media.js.map

package/dist/agents/channels/imessage/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../../src/agents/channels/imessage/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,gFAAgF;AAChF,0EAA0E;AAC1E,2BAA2B;AAC3B,OAAO,EAAE,yBAAyB,EAAmD,MAAM,WAAW,CAAC;AACvG,OAAO,EAAE,uBAAuB,EAAoB,MAAM,yBAAyB,CAAC;AAKpF,wEAAwE;AACxE,MAAM,UAAU,YAAY,CAAC,IAAa;IACzC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3C,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3C,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3C,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAC/F,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9E,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5F,OAAO,UAAU,CAAC;AACnB,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAe,EAAE,QAAgB;IAC1E,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACJ,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAoB;IAC1D,IAAI,KAAK,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IAClC,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,+EAA+E;AAC/E,SAAS,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,KAAwB;IAC5E,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM;YAAE,SAAS;QAC3E,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,SAAS;YAClC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,OAAO,GAAG,KAAK,CAAC;gBAChB,MAAM;YACP,CAAC;QACF,CAAC;QACD,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACxC,GAA8C,EAC9C,YAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAA6B,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;YAAE,SAAS;QAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,YAAY,CAAC;YAAE,SAAS;QAC9E,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YACxD,IAAI,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;SAC1B,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAeD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,GAA8C,EAC9C,IAAiC;IAEjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAA6B,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;YAAE,SAAS;QAC3C,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACtF,IAAI,CAAC,GAAG,EAAE,CAAC,6DAA6D,UAAU,EAAE,CAAC,CAAC;YACtF,SAAS;QACV,CAAC;QACD,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACJ,SAAS,GAAG,MAAM,uBAAuB,CAAC;gBACzC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,UAAU;gBACV,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,EAAE,CAAC,qCAAqC,UAAU,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnH,SAAS;QACV,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC;YACjE,IAAI,EAAE,SAAS;YACf,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;SACnC,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/agents/channels/imessage/messaging.d.ts

@@ -0,0 +1,14 @@
+/**
+ * iMessage outbound-addressing adapter (the `ChannelPlugin.messaging` slot).
+ *
+ * Turns the loose `to` the agent hands `send_message` ("+1 555 123 4567",
+ * "imessage:user@example.com", "chat_id:42") into a concrete target the runtime
+ * `sendText` understands. iMessage has no contact DIRECTORY (no name→id
+ * resolution), so this implements only the required `parseExplicitTarget` +
+ * `normalizeTarget` (+ advisory `inferTargetChatType`); a bare human name falls
+ * through to the raw id, exactly as before.
+ */
+import type { ChannelMessagingAdapter } from "../sdk.js";
+/** The iMessage messaging adapter. */
+export declare const imessageMessagingAdapter: ChannelMessagingAdapter;
+//# sourceMappingURL=messaging.d.ts.map

package/dist/agents/channels/imessage/messaging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messaging.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/imessage/messaging.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAwB,MAAM,WAAW,CAAC;AAO/E,sCAAsC;AACtC,eAAO,MAAM,wBAAwB,EAAE,uBAmBtC,CAAC"}

package/dist/agents/channels/imessage/messaging.js

@@ -0,0 +1,37 @@
+/**
+ * iMessage outbound-addressing adapter (the `ChannelPlugin.messaging` slot).
+ *
+ * Turns the loose `to` the agent hands `send_message` ("+1 555 123 4567",
+ * "imessage:user@example.com", "chat_id:42") into a concrete target the runtime
+ * `sendText` understands. iMessage has no contact DIRECTORY (no name→id
+ * resolution), so this implements only the required `parseExplicitTarget` +
+ * `normalizeTarget` (+ advisory `inferTargetChatType`); a bare human name falls
+ * through to the raw id, exactly as before.
+ */
+import { inferIMessageTargetChatType, looksLikeIMessageTargetId, normalizeIMessageHandle, } from "./targets.js";
+/** The iMessage messaging adapter. */
+export const imessageMessagingAdapter = {
+    parseExplicitTarget(text) {
+        const trimmed = (text ?? "").trim();
+        if (!trimmed)
+            return null;
+        // An explicit `imessage:<handle>` form names the channel.
+        const m = /^imessage:(.+)$/i.exec(trimmed);
+        if (m && m[1])
+            return { channelId: "imessage", target: m[1].trim() };
+        // A concrete chat/service/handle id (vs a bare name) is an explicit target.
+        if (looksLikeIMessageTargetId(trimmed))
+            return { target: trimmed };
+        return null;
+    },
+    normalizeTarget(raw) {
+        const trimmed = (raw ?? "").trim();
+        if (!trimmed)
+            return trimmed;
+        return normalizeIMessageHandle(trimmed);
+    },
+    inferTargetChatType(target) {
+        return inferIMessageTargetChatType(target);
+    },
+};
+//# sourceMappingURL=messaging.js.map

package/dist/agents/channels/imessage/messaging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messaging.js","sourceRoot":"","sources":["../../../../src/agents/channels/imessage/messaging.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EACN,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,GACvB,MAAM,cAAc,CAAC;AAEtB,sCAAsC;AACtC,MAAM,CAAC,MAAM,wBAAwB,GAA4B;IAChE,mBAAmB,CAAC,IAAY;QAC/B,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,0DAA0D;QAC1D,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACrE,4EAA4E;QAC5E,IAAI,yBAAyB,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC;IACb,CAAC;IACD,eAAe,CAAC,GAAW;QAC1B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC;QAC7B,OAAO,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,mBAAmB,CAAC,MAAc;QACjC,OAAO,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;CACD,CAAC"}

package/dist/agents/channels/imessage/module.d.ts

@@ -0,0 +1,16 @@
+/**
+ * iMessage extension module.
+ *
+ * Registers the iMessage channel adapter through the seam. The loader gates it
+ * by the usual extension config (`extensions.disabled` / `entries`), and the
+ * adapter itself only starts when `channels.imessage.enabled` is true AND a
+ * runnable `imsg` binary resolves — so bundling this module is inert until the
+ * operator opts in.
+ *
+ * Like Discord, iMessage registers NO gateway HTTP route: the `imsg rpc`
+ * notification stream is the only inbound transport (a local subprocess, no
+ * public URL needed). iMessage mirror of `discord/module.ts` (the no-webhook
+ * shape).
+ */
+export declare const imessageModule: import("../sdk.js").BrigadeModule;
+//# sourceMappingURL=module.d.ts.map

package/dist/agents/channels/imessage/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/imessage/module.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,eAAO,MAAM,cAAc,mCAKzB,CAAC"}

package/dist/agents/channels/imessage/module.js

@@ -0,0 +1,23 @@
+/**
+ * iMessage extension module.
+ *
+ * Registers the iMessage channel adapter through the seam. The loader gates it
+ * by the usual extension config (`extensions.disabled` / `entries`), and the
+ * adapter itself only starts when `channels.imessage.enabled` is true AND a
+ * runnable `imsg` binary resolves — so bundling this module is inert until the
+ * operator opts in.
+ *
+ * Like Discord, iMessage registers NO gateway HTTP route: the `imsg rpc`
+ * notification stream is the only inbound transport (a local subprocess, no
+ * public URL needed). iMessage mirror of `discord/module.ts` (the no-webhook
+ * shape).
+ */
+import { defineModule } from "../sdk.js";
+import { createIMessageAdapter } from "./adapter.js";
+export const imessageModule = defineModule({
+    id: "imessage",
+    register(b) {
+        b.channel(createIMessageAdapter());
+    },
+});
+//# sourceMappingURL=module.js.map

package/dist/agents/channels/imessage/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/agents/channels/imessage/module.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC;IAC1C,EAAE,EAAE,UAAU;IACd,QAAQ,CAAC,CAAC;QACT,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACpC,CAAC;CACD,CAAC,CAAC"}

package/dist/agents/channels/imessage/monitor.d.ts

@@ -0,0 +1,207 @@
+/**
+ * iMessage inbound monitor — parse notifications, normalize, and guard against
+ * self-echo / reflection / runaway loops.
+ *
+ * The `imsg rpc` process emits a `message` notification for every new row in the
+ * chat database (including the agent's OWN outbound sends, which come back as
+ * `is_from_me` rows, AND self-chat reflections). This module condenses the
+ * upstream `monitor/` subsystem into the load-bearing pieces:
+ *
+ *   1. `parseIMessageNotification` — validate + shape the notification params,
+ *      stripping the protobuf length-prefix some text rows carry.
+ *   2. `normalizeIMessageMessage`  — turn the payload into a normalized inbound.
+ *   3. `SentMessageCache`          — remember every outbound send; drop the
+ *      inbound echo when it matches (text TTL 4s / id TTL 60s).
+ *   4. `SelfChatCache`             — drop a self-chat message reflected back as a
+ *      second `is_from_me=false` row (TTL 10s, keyed on text + timestamp).
+ *   5. `detectReflectedContent`    — drop inbound carrying assistant-internal
+ *      markers that leaked out and bounced back.
+ *   6. `LoopRateLimiter`           — after 5 loop-drops in 60s, mute a
+ *      conversation entirely (the runaway-loop safety net).
+ *   7. `decideInbound`             — the gating brain that ties them together.
+ *
+ * Constants are kept byte-faithful to the upstream so the dedupe windows behave
+ * identically.
+ */
+/** One raw inbound attachment as reported by the bridge. */
+export interface IMessageRawAttachment {
+    original_path?: string | null;
+    mime_type?: string | null;
+    missing?: boolean | null;
+}
+/** The `message` field carried by an inbound notification (all fields optional). */
+export interface IMessagePayload {
+    id?: number | null;
+    guid?: string | null;
+    chat_id?: number | null;
+    sender?: string | null;
+    destination_caller_id?: string | null;
+    is_from_me?: boolean | null;
+    text?: string | null;
+    reply_to_id?: number | string | null;
+    reply_to_text?: string | null;
+    reply_to_sender?: string | null;
+    created_at?: string | null;
+    attachments?: IMessageRawAttachment[] | null;
+    chat_identifier?: string | null;
+    chat_guid?: string | null;
+    chat_name?: string | null;
+    participants?: string[] | null;
+    is_group?: boolean | null;
+}
+/**
+ * Strip a protobuf field-1 length-prefixed UTF-8 wrapper (tag `0x0a` + varint
+ * length + bytes) when the declared length consumes EXACTLY to the buffer end.
+ * Returns the inner string, or the original text unchanged.
+ */
+export declare function stripLengthPrefixedText(text: string): string;
+/**
+ * Parse an inbound notification's `params` (`{ message: {...} }`) into a typed
+ * payload. Returns null when the shape is malformed (the caller drops it).
+ */
+export declare function parseIMessageNotification(raw: unknown): IMessagePayload | null;
+/** A normalized inbound iMessage (pre-adapter shape). */
+export interface NormalizedIMessage {
+    conversationId: string;
+    messageId?: string;
+    from: string;
+    fromName?: string;
+    text: string;
+    isGroup: boolean;
+    chatId?: number;
+    chatGuid?: string;
+    chatIdentifier?: string;
+    createdAtMs?: number;
+    replyTo?: {
+        messageId?: string;
+        body?: string;
+        from?: string;
+    };
+    attachments?: IMessageRawAttachment[];
+    /**
+     * Handles mentioned in this message. iMessage has no @-mention metadata, so
+     * this is populated only for a GROUP message when the bot's own `selfHandle`
+     * appears in the text — which is what lets the central pipeline's group
+     * requireMention gate fire. Unset when there's no match (or in DMs).
+     */
+    mentions?: string[];
+    raw: IMessagePayload;
+}
+/**
+ * Detect whether the bot's own `selfHandle` is named in `text`. iMessage carries
+ * no @-mention metadata, so "mention" = the handle appearing in the message body.
+ * A phone handle matches on its digit-run inside the text's digits; an email
+ * matches case-insensitively. `selfHandle` is expected pre-normalised (digits for
+ * a phone, lower-case for an email — see `normalizeIMessageSelfHandle`). Returns
+ * the matched self handle in an array, or undefined when there's no match (so the
+ * field stays unset). Mirrors BlueBubbles' `detectBlueBubblesMentions`.
+ */
+export declare function detectIMessageMentions(text: string, selfHandle: string | undefined): string[] | undefined;
+/** Build the stable conversation id for a payload (group → chat scope, DM → sender). */
+export declare function conversationIdFor(payload: IMessagePayload): string;
+/**
+ * Normalize a parsed payload into the inbound shape. When `selfHandle` is given
+ * and this is a GROUP message naming the bot, `mentions[]` is populated so the
+ * central group requireMention gate can fire.
+ */
+export declare function normalizeIMessageMessage(payload: IMessagePayload, selfHandle?: string): NormalizedIMessage;
+/**
+ * Remembers every outbound send so the inbound poll can drop the echo. Keyed by
+ * a per-conversation `scope`; a text match (4s) or an id match (60s) suppresses
+ * the echo. Designed to degrade to a duplicate (noisy) rather than a dropped
+ * real message if an echo arrives after the TTL.
+ */
+export declare class SentMessageCache {
+    private readonly textCache;
+    private readonly idCache;
+    private readonly textBackedById;
+    /** Record an outbound send under `scope`. */
+    remember(scope: string, sent: {
+        text?: string;
+        messageId?: string;
+    }): void;
+    /** True when an inbound matches a remembered outbound (an echo). */
+    has(scope: string, inbound: {
+        text?: string;
+        messageId?: string;
+    }, skipIdShortCircuit?: boolean): boolean;
+    private cleanup;
+}
+/**
+ * Catches a self-chat message that arrives once as `is_from_me=true` and is then
+ * reflected as a second `is_from_me=false` row. Keyed on `scope:createdAt:hash`
+ * so it only fires when BOTH text and a timestamp anchor the same message.
+ */
+export declare class SelfChatCache {
+    private readonly cache;
+    private lastCleanup;
+    private buildKey;
+    remember(scope: string, text: string, createdAtMs?: number): void;
+    has(scope: string, text: string, createdAtMs?: number): boolean;
+    private maybeCleanup;
+}
+/** A `[start, end)` byte-index span of fenced or inline code inside a string. */
+interface CodeRegion {
+    start: number;
+    end: number;
+}
+/**
+ * Find the code regions (fenced ``` / ~~~ blocks + inline backtick spans) in
+ * `text`. A reflection match that falls INSIDE one of these is a legit quoted
+ * sample, not a leaked assistant marker, so the guard ignores it. Ported byte-
+ * faithfully from the upstream `findCodeRegions`.
+ */
+export declare function findCodeRegions(text: string): CodeRegion[];
+/** True when byte-index `pos` falls inside one of the code regions. */
+export declare function isInsideCode(pos: number, regions: CodeRegion[]): boolean;
+/**
+ * Detect inbound text carrying assistant-internal markers (outbound metadata
+ * that leaked into the channel and bounced back). Returns the matched labels.
+ *
+ * A marker that appears INSIDE a fenced/inline code span is a legitimately
+ * quoted code sample (e.g. someone pasting `<final>` inside a ``` fence) and is
+ * NOT treated as a reflection — only matches OUTSIDE code count.
+ */
+export declare function detectReflectedContent(text: string): {
+    isReflection: boolean;
+    matchedLabels: string[];
+};
+/**
+ * Per-conversation sliding-window counter. After {@link LOOP_MAX_HITS} loop
+ * drops within {@link LOOP_WINDOW_MS}, the conversation is rate-limited (muted)
+ * — the runaway-loop safety net.
+ */
+export declare class LoopRateLimiter {
+    private readonly hits;
+    private lastCleanup;
+    record(key: string): void;
+    isRateLimited(key: string): boolean;
+    private cleanup;
+}
+/** The dedupe/gating resources a monitor holds (one set per started account). */
+export interface MonitorState {
+    sentMessageCache: SentMessageCache;
+    selfChatCache: SelfChatCache;
+    loopRateLimiter: LoopRateLimiter;
+}
+/** Build a fresh monitor state. */
+export declare function createMonitorState(): MonitorState;
+/** Build the echo/rate-limit scope for a payload. */
+export declare function echoScope(accountId: string, payload: IMessagePayload): string;
+/** The decision returned by {@link decideInbound}. */
+export type InboundDecision = {
+    kind: "drop";
+    reason: string;
+} | {
+    kind: "dispatch";
+    message: NormalizedIMessage;
+};
+/**
+ * The gating brain: parse → normalize → self-echo / self-chat / reflection
+ * dedupe → loop rate-limit. Pure given the (mutable) {@link MonitorState}.
+ * Loop-related drops feed the rate limiter; a rate-limited conversation drops a
+ * dispatch before it fires.
+ */
+export declare function decideInbound(state: MonitorState, accountId: string, payload: IMessagePayload, selfHandle?: string): InboundDecision;
+export {};
+//# sourceMappingURL=monitor.d.ts.map

package/dist/agents/channels/imessage/monitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"monitor.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/imessage/monitor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAMH,4DAA4D;AAC5D,MAAM,WAAW,qBAAqB;IACrC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB;AAED,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC/B,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,UAAU,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAC;IAC7C,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC1B;AAiBD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAU5D;AAMD;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CA8B9E;AAID,yDAAyD;AACzD,MAAM,WAAW,kBAAkB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,WAAW,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACtC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,GAAG,EAAE,eAAe,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAUzG;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CAKlE;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,kBAAkB,CA+B1G;AAmBD;;;;;GAKG;AACH,qBAAa,gBAAgB;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAE5D,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAU1E,oEAAoE;IACpE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,kBAAkB,UAAQ,GAAG,OAAO;IA0BvG,OAAO,CAAC,OAAO;CAKf;AAQD;;;;GAIG;AACH,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IACnD,OAAO,CAAC,WAAW,CAAK;IAExB,OAAO,CAAC,QAAQ;IAOhB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI;IAOjE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO;IAO/D,OAAO,CAAC,YAAY;CAWpB;AAYD,iFAAiF;AACjF,UAAU,UAAU;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACZ;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,CAmB1D;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAExE;AAaD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,YAAY,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAQvG;AAQD;;;;GAIG;AACH,qBAAa,eAAe;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA+B;IACpD,OAAO,CAAC,WAAW,CAAK;IAExB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAOzB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAOnC,OAAO,CAAC,OAAO;CAUf;AAID,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC5B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,aAAa,EAAE,aAAa,CAAC;IAC7B,eAAe,EAAE,eAAe,CAAC;CACjC;AAED,mCAAmC;AACnC,wBAAgB,kBAAkB,IAAI,YAAY,CAMjD;AAED,qDAAqD;AACrD,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,MAAM,CAG7E;AAED,sDAAsD;AACtD,MAAM,MAAM,eAAe,GACxB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAErD;;;;;GAKG;AACH,wBAAgB,aAAa,CAC5B,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,eAAe,EACxB,UAAU,CAAC,EAAE,MAAM,GACjB,eAAe,CAiFjB"}