@spinabot/brigade 1.7.0 → 1.9.0

package/dist/agents/channels/imessage/plugin.js

@@ -0,0 +1,215 @@
+/**
+ * iMessage `ChannelPlugin` — the multi-ACCOUNT contract surface.
+ *
+ * Mirrors `discord/plugin.ts`: wraps `createIMessageAdapter()` (the
+ * per-connection implementation) with the lifecycle adapters the
+ * `ChannelPluginManager` consumes, so an operator can run MORE THAN ONE iMessage
+ * bridge at once (e.g. two Macs / two chat.db files) via:
+ *
+ *   channels.imessage = {
+ *     enabled: true,
+ *     accounts: [
+ *       { id: "personal", dbPath: "~/Library/Messages/chat.db" },
+ *       { id: "work",     cliPath: "/opt/imsg/bin/imsg" },
+ *     ],
+ *   }
+ *
+ * Per-account state lives in a `Map<accountId, AccountRuntime>` in this closure —
+ * one `imsg rpc` subprocess per account. Inbound dispatch reuses the shared
+ * `runChannelInboundPipeline` so the multi-account path carries the identical
+ * ACL + debounce + abort surface as the legacy single-adapter manager.
+ *
+ * The legacy single-account `createIMessageAdapter` STEPS ASIDE when >1 account
+ * is configured (its `isConfigured` returns false for the default account), so
+ * the two paths never double-start a subprocess. iMessage has no inbound HTTP
+ * route (the `imsg rpc` notification stream is the only inbound transport).
+ */
+// Channel SDK barrel — the single import surface for the multi-account
+// `ChannelPlugin` contract + the shared inbound pipeline + the gateway boot args.
+import { buildBundledCommands, createInboundPipelineContext, createSubsystemLogger, runChannelInboundPipeline, IMESSAGE_CHANNEL_META, } from "../sdk.js";
+import { listIMessageAccountIds, resolveIMessageAccount, resolveIMessageCliPath, resolveIMessageDbPath, resolveIMessageDefaultTo, resolveIMessageProbeTimeoutMs, IMESSAGE_CHANNEL_ID, IMESSAGE_DEFAULT_ACCOUNT_ID, } from "./account-config.js";
+import { createIMessageAdapter, IMESSAGE_CAPABILITIES } from "./adapter.js";
+import { imessageMessagingAdapter } from "./messaging.js";
+import { probeIMessage } from "./probe.js";
+const log = createSubsystemLogger("channels/imessage/plugin");
+const IMESSAGE_META = IMESSAGE_CHANNEL_META;
+/** Construct the plugin instance, capturing per-account runtime state in closure. */
+export function createIMessagePlugin(deps) {
+    const accountRuntimes = new Map();
+    const startAccount = async (ctx) => {
+        const accountId = ctx.accountId || IMESSAGE_DEFAULT_ACCOUNT_ID;
+        const existing = accountRuntimes.get(accountId);
+        if (existing) {
+            try {
+                await existing.adapter.stop();
+            }
+            catch {
+                /* best-effort */
+            }
+            try {
+                existing.abort.abort("restart");
+            }
+            catch {
+                /* best-effort */
+            }
+            accountRuntimes.delete(accountId);
+        }
+        const cfg = deps.loadConfig();
+        const factory = deps.adapterFactory ?? defaultIMessageAdapterFactory;
+        const adapter = factory({ accountId });
+        const accountAbort = new AbortController();
+        const parent = ctx.signal;
+        if (parent) {
+            if (parent.aborted)
+                accountAbort.abort();
+            else
+                parent.addEventListener("abort", () => accountAbort.abort(), { once: true });
+        }
+        const pipelineRunTurn = (turn) => deps.runTurn(turn);
+        const commandMap = new Map();
+        for (const c of buildBundledCommands(adapter))
+            commandMap.set(c.name.toLowerCase(), c);
+        const pipeline = createInboundPipelineContext({
+            adapter,
+            config: cfg,
+            agentId: deps.defaultAgentId,
+            runTurn: pipelineRunTurn,
+            commandMap,
+            parentAbort: accountAbort.signal,
+        });
+        const startCtx = {
+            signal: accountAbort.signal,
+            log: (msg, meta) => log.info(`[${accountId}] ${msg}`, meta),
+            onInbound: async (msg) => {
+                pipeline.config = deps.loadConfig();
+                const stamped = msg.accountId ? msg : { ...msg, accountId };
+                await runChannelInboundPipeline(pipeline, stamped);
+            },
+        };
+        try {
+            await adapter.start(startCtx);
+            accountRuntimes.set(accountId, { adapter, pipeline, abort: accountAbort });
+            log.info("imessage account started", { accountId });
+        }
+        catch (err) {
+            log.warn("imessage account failed to start", {
+                accountId,
+                error: err instanceof Error ? err.message : String(err),
+            });
+            throw err;
+        }
+    };
+    const stopAccount = async (ctx) => {
+        const runtime = accountRuntimes.get(ctx.accountId);
+        if (!runtime)
+            return;
+        accountRuntimes.delete(ctx.accountId);
+        try {
+            runtime.abort.abort("stop-requested");
+        }
+        catch {
+            /* best-effort */
+        }
+        for (const slot of runtime.pipeline.pendingDispatches.values())
+            clearTimeout(slot.timer);
+        runtime.pipeline.pendingDispatches.clear();
+        try {
+            await runtime.adapter.stop();
+        }
+        catch (err) {
+            log.warn("imessage account stop threw", {
+                accountId: ctx.accountId,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    };
+    const logoutAccount = async (ctx) => {
+        try {
+            await stopAccount(ctx);
+            return { ok: true };
+        }
+        catch (err) {
+            return { ok: false, error: err instanceof Error ? err.message : String(err) };
+        }
+    };
+    return {
+        id: IMESSAGE_CHANNEL_ID,
+        meta: IMESSAGE_META,
+        capabilities: IMESSAGE_CAPABILITIES,
+        startedAccountIds: () => [...accountRuntimes.keys()],
+        getAdapter: (accountId) => accountRuntimes.get(accountId)?.adapter,
+        probeAccount: async (accountId, cfg) => {
+            return probeIMessage({
+                cliPath: resolveIMessageCliPath(cfg, accountId),
+                ...(resolveIMessageDbPath(cfg, accountId) ? { dbPath: resolveIMessageDbPath(cfg, accountId) } : {}),
+                timeoutMs: resolveIMessageProbeTimeoutMs(cfg, accountId),
+            });
+        },
+        config: {
+            listAccountIds: (cfg) => listIMessageAccountIds(cfg),
+            resolveAccount: (cfg, accountId) => resolveIMessageAccount(cfg, accountId ?? undefined),
+            defaultAccountId: () => IMESSAGE_DEFAULT_ACCOUNT_ID,
+            isEnabled: (account) => account.enabled,
+        },
+        gateway: {
+            startAccount,
+            stopAccount,
+            logoutAccount,
+        },
+        outbound: {
+            sendText: async (params) => {
+                const accountId = params.target.accountId || IMESSAGE_DEFAULT_ACCOUNT_ID;
+                const runtime = accountRuntimes.get(accountId);
+                if (!runtime)
+                    return { ok: false, error: `imessage account "${accountId}" is not running` };
+                // Fall back to the configured default recipient when no target was given.
+                const to = params.target.to?.trim() || resolveIMessageDefaultTo(deps.loadConfig(), accountId);
+                if (!to)
+                    return { ok: false, error: `imessage send needs a recipient (no target and no defaultTo set)` };
+                try {
+                    const sent = await runtime.adapter.sendText(to, params.text, { accountId });
+                    return {
+                        ok: true,
+                        ...(sent && typeof sent === "object" && sent.messageId !== undefined ? { messageId: sent.messageId } : {}),
+                    };
+                }
+                catch (err) {
+                    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+                }
+            },
+            sendMedia: async (params) => {
+                const accountId = params.target.accountId || IMESSAGE_DEFAULT_ACCOUNT_ID;
+                const runtime = accountRuntimes.get(accountId);
+                if (!runtime || !runtime.adapter.sendMedia) {
+                    return { ok: false, error: `imessage account "${accountId}" cannot send media right now` };
+                }
+                const to = params.target.to?.trim() || resolveIMessageDefaultTo(deps.loadConfig(), accountId);
+                if (!to)
+                    return { ok: false, error: `imessage send needs a recipient (no target and no defaultTo set)` };
+                try {
+                    await runtime.adapter.sendMedia(to, {
+                        kind: params.mediaType ?? "document",
+                        path: params.mediaUrl,
+                        ...(params.caption !== undefined ? { caption: params.caption } : {}),
+                    });
+                    return { ok: true };
+                }
+                catch (err) {
+                    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+                }
+            },
+        },
+        // Outbound addressing: parse/normalize a loose `to` into a concrete target.
+        messaging: imessageMessagingAdapter,
+        secrets: {
+            // iMessage has no token secret; the cliPath isn't a secret-ref, so no
+            // secret-target entries. Declared empty for surface parity.
+            secretTargetRegistryEntries: [],
+        },
+    };
+}
+/** Default adapter factory — threads the per-account scope. */
+function defaultIMessageAdapterFactory(args) {
+    return createIMessageAdapter({ accountId: args.accountId });
+}
+//# sourceMappingURL=plugin.js.map

package/dist/agents/channels/imessage/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../../../src/agents/channels/imessage/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,uEAAuE;AACvE,kFAAkF;AAClF,OAAO,EACN,oBAAoB,EACpB,4BAA4B,EAC5B,qBAAqB,EACrB,yBAAyB,EAazB,qBAAqB,GACrB,MAAM,WAAW,CAAC;AACnB,OAAO,EACN,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,6BAA6B,EAC7B,mBAAmB,EACnB,2BAA2B,GAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAA4B,MAAM,YAAY,CAAC;AAErE,MAAM,GAAG,GAAG,qBAAqB,CAAC,0BAA0B,CAAC,CAAC;AAE9D,MAAM,aAAa,GAAG,qBAAqB,CAAC;AA4B5C,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,IAAwB;IAC5D,MAAM,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE1D,MAAM,YAAY,GAAG,KAAK,EAAE,GAAmD,EAAiB,EAAE;QACjG,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,2BAA2B,CAAC;QAC/D,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC;gBACJ,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACR,iBAAiB;YAClB,CAAC;YACD,IAAI,CAAC;gBACJ,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACR,iBAAiB;YAClB,CAAC;YACD,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,6BAA6B,CAAC;QACrE,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QAEvC,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IAAI,MAAM,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,OAAO;gBAAE,YAAY,CAAC,KAAK,EAAE,CAAC;;gBACpC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,eAAe,GAAqB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,oBAAoB,CAAC,OAAO,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,4BAA4B,CAAC;YAC7C,OAAO;YACP,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,OAAO,EAAE,eAAe;YACxB,UAAU;YACV,WAAW,EAAE,YAAY,CAAC,MAAM;SAChC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAwB;YACrC,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC;YAC3D,SAAS,EAAE,KAAK,EAAE,GAAmB,EAAE,EAAE;gBACxC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAmB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,CAAC;gBAC5E,MAAM,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpD,CAAC;SACD,CAAC;QAEF,IAAI,CAAC;YACJ,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9B,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YAC3E,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC5C,SAAS;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,GAAmD,EAAiB,EAAE;QAChG,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC;YACJ,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACR,iBAAiB;QAClB,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC3C,IAAI,CAAC;YACJ,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBACvC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,GAAkD,EAAgC,EAAE;QAChH,IAAI,CAAC;YACJ,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/E,CAAC;IACF,CAAC,CAAC;IAEF,OAAO;QACN,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,aAAa;QACnB,YAAY,EAAE,qBAAqB;QACnC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;QACpD,UAAU,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO;QAC1E,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAgC,EAAE;YACpE,OAAO,aAAa,CAAC;gBACpB,OAAO,EAAE,sBAAsB,CAAC,GAAG,EAAE,SAAS,CAAC;gBAC/C,GAAG,CAAC,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnG,SAAS,EAAE,6BAA6B,CAAC,GAAG,EAAE,SAAS,CAAC;aACxD,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,EAAE;YACP,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAC;YACpD,cAAc,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,EAAE,SAAS,IAAI,SAAS,CAAC;YACvF,gBAAgB,EAAE,GAAG,EAAE,CAAC,2BAA2B;YACnD,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO;SACvC;QACD,OAAO,EAAE;YACR,YAAY;YACZ,WAAW;YACX,aAAa;SACb;QACD,QAAQ,EAAE;YACT,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,2BAA2B,CAAC;gBACzE,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/C,IAAI,CAAC,OAAO;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,SAAS,kBAAkB,EAAE,CAAC;gBAC5F,0EAA0E;gBAC1E,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,CAAC;gBAC9F,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kEAAkE,EAAE,CAAC;gBACzG,IAAI,CAAC;oBACJ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;oBAC5E,OAAO;wBACN,EAAE,EAAE,IAAI;wBACR,GAAG,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC1G,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/E,CAAC;YACF,CAAC;YACD,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,2BAA2B,CAAC;gBACzE,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;oBAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,SAAS,+BAA+B,EAAE,CAAC;gBAC5F,CAAC;gBACD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,CAAC;gBAC9F,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kEAAkE,EAAE,CAAC;gBACzG,IAAI,CAAC;oBACJ,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE;wBACnC,IAAI,EAAG,MAAM,CAAC,SAAmB,IAAI,UAAU;wBAC/C,IAAI,EAAE,MAAM,CAAC,QAAQ;wBACrB,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACpE,CAAC,CAAC;oBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;gBACrB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/E,CAAC;YACF,CAAC;SACD;QACD,4EAA4E;QAC5E,SAAS,EAAE,wBAAwB;QACnC,OAAO,EAAE;YACR,sEAAsE;YACtE,4DAA4D;YAC5D,2BAA2B,EAAE,EAAE;SAC/B;KACD,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,SAAS,6BAA6B,CAAC,IAA2B;IACjE,OAAO,qBAAqB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;AAC7D,CAAC"}

package/dist/agents/channels/imessage/probe.d.ts

@@ -0,0 +1,68 @@
+/**
+ * iMessage status / doctor probe.
+ *
+ * iMessage has no remote API to ping — the only way to answer "is this channel
+ * actually working?" is to drive the local `imsg` binary. The probe is a
+ * three-stage gate:
+ *   1. the binary exists / is runnable (`imsg rpc --help` succeeds);
+ *   2. the binary supports the `rpc` subcommand (an old build prints
+ *      "unknown command 'rpc'" → a FATAL, non-retriable error);
+ *   3. a live `chats.list {limit:1}` round-trip over the RPC stream succeeds.
+ *
+ * The RPC client factory is INJECTABLE (`opts.createClient`) — that is the test
+ * seam: a unit test passes a fake to exercise the success / failure branches
+ * with NO real `imsg` binary. Likewise the `runHelp` probe of `imsg rpc --help`
+ * is injectable. Never throws — a failure surfaces as `{ ok: false, error }` so
+ * `brigade channels status` / `brigade doctor` degrade gracefully.
+ */
+import { type IMessageRpcLike } from "./client.js";
+/** Structured probe result. `ok` true ⇒ binary present + rpc works + reachable. */
+export interface IMessageProbeResult {
+    ok: boolean;
+    /** Operator-facing error line when `ok` is false. */
+    error?: string;
+    /** True when the failure is non-recoverable without operator action (old binary). */
+    fatal?: boolean;
+    /** Round-trip time in ms. */
+    elapsedMs: number;
+}
+/** Outcome of the `imsg rpc --help` support probe. */
+interface RpcSupportResult {
+    supported: boolean;
+    error?: string;
+    fatal?: boolean;
+}
+export interface IMessageProbeArgs {
+    /** `imsg` binary path. Defaults to `"imsg"`. */
+    cliPath?: string;
+    /** Optional chat.db override. */
+    dbPath?: string;
+    /** Probe timeout in ms (default 10s). */
+    timeoutMs?: number;
+    /**
+     * TEST SEAM: run `imsg rpc --help` and return its combined output + exit code.
+     * Production spawns the binary; tests inject a fake.
+     */
+    runHelp?: (cliPath: string, timeoutMs: number) => Promise<{
+        stdout: string;
+        stderr: string;
+        code: number | null;
+    }>;
+    /**
+     * TEST SEAM: build the RPC client used for the live `chats.list` call.
+     * Production constructs the real one; tests inject a fake.
+     */
+    createClient?: (args: {
+        cliPath: string;
+        dbPath?: string;
+    }) => Promise<IMessageRpcLike>;
+}
+/** Probe whether the binary supports the `rpc` subcommand. */
+export declare function probeRpcSupport(args: IMessageProbeArgs): Promise<RpcSupportResult>;
+/**
+ * Run the full iMessage probe (binary + rpc support + live `chats.list`).
+ * Never throws.
+ */
+export declare function probeIMessage(args?: IMessageProbeArgs): Promise<IMessageProbeResult>;
+export {};
+//# sourceMappingURL=probe.d.ts.map

package/dist/agents/channels/imessage/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/imessage/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,EAA2B,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAE5E,mFAAmF;AACnF,MAAM,WAAW,mBAAmB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,sDAAsD;AACtD,UAAU,gBAAgB;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IACjC,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACnH;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;CACxF;AA8CD,8DAA8D;AAC9D,wBAAsB,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAwBxF;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAgC9F"}

package/dist/agents/channels/imessage/probe.js

@@ -0,0 +1,134 @@
+/**
+ * iMessage status / doctor probe.
+ *
+ * iMessage has no remote API to ping — the only way to answer "is this channel
+ * actually working?" is to drive the local `imsg` binary. The probe is a
+ * three-stage gate:
+ *   1. the binary exists / is runnable (`imsg rpc --help` succeeds);
+ *   2. the binary supports the `rpc` subcommand (an old build prints
+ *      "unknown command 'rpc'" → a FATAL, non-retriable error);
+ *   3. a live `chats.list {limit:1}` round-trip over the RPC stream succeeds.
+ *
+ * The RPC client factory is INJECTABLE (`opts.createClient`) — that is the test
+ * seam: a unit test passes a fake to exercise the success / failure branches
+ * with NO real `imsg` binary. Likewise the `runHelp` probe of `imsg rpc --help`
+ * is injectable. Never throws — a failure surfaces as `{ ok: false, error }` so
+ * `brigade channels status` / `brigade doctor` degrade gracefully.
+ */
+import { spawn } from "node:child_process";
+import { DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS } from "./account-config.js";
+import { createIMessageRpcClient } from "./client.js";
+/** Run `imsg rpc --help` with a timeout, capturing combined output + exit code. */
+function defaultRunHelp(cliPath, timeoutMs) {
+    return new Promise((resolve) => {
+        let stdout = "";
+        let stderr = "";
+        let settled = false;
+        const done = (code) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve({ stdout, stderr, code });
+        };
+        let child;
+        try {
+            child = spawn(cliPath, ["rpc", "--help"], { stdio: ["ignore", "pipe", "pipe"] });
+        }
+        catch (err) {
+            resolve({ stdout: "", stderr: err instanceof Error ? err.message : String(err), code: 1 });
+            return;
+        }
+        const timer = setTimeout(() => {
+            try {
+                child.kill("SIGTERM");
+            }
+            catch {
+                /* best-effort */
+            }
+            done(null);
+        }, timeoutMs);
+        if (typeof timer.unref === "function")
+            timer.unref();
+        child.stdout?.on("data", (c) => {
+            stdout += c.toString("utf8");
+        });
+        child.stderr?.on("data", (c) => {
+            stderr += c.toString("utf8");
+        });
+        child.on("error", (err) => {
+            stderr += err instanceof Error ? err.message : String(err);
+            done(1);
+        });
+        child.on("close", (code) => {
+            clearTimeout(timer);
+            done(code);
+        });
+    });
+}
+/** Probe whether the binary supports the `rpc` subcommand. */
+export async function probeRpcSupport(args) {
+    const cliPath = args.cliPath?.trim() || "imsg";
+    const timeoutMs = args.timeoutMs ?? DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS;
+    const runHelp = args.runHelp ?? defaultRunHelp;
+    let result;
+    try {
+        result = await runHelp(cliPath, timeoutMs);
+    }
+    catch (err) {
+        return { supported: false, error: err instanceof Error ? err.message : String(err) };
+    }
+    const combined = `${result.stdout}\n${result.stderr}`.trim();
+    const normalized = combined.toLowerCase();
+    if (normalized.includes("unknown command") && normalized.includes("rpc")) {
+        return {
+            supported: false,
+            fatal: true,
+            error: 'imsg CLI does not support the "rpc" subcommand (update imsg)',
+        };
+    }
+    if (result.code === 0)
+        return { supported: true };
+    return {
+        supported: false,
+        error: combined || `imsg rpc --help failed (code ${result.code ?? "unknown"})`,
+    };
+}
+/**
+ * Run the full iMessage probe (binary + rpc support + live `chats.list`).
+ * Never throws.
+ */
+export async function probeIMessage(args = {}) {
+    const started = Date.now();
+    const cliPath = args.cliPath?.trim() || "imsg";
+    const dbPath = args.dbPath?.trim() || undefined;
+    const timeoutMs = args.timeoutMs ?? DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS;
+    const support = await probeRpcSupport({ cliPath, timeoutMs, ...(args.runHelp ? { runHelp: args.runHelp } : {}) });
+    if (!support.supported) {
+        return {
+            ok: false,
+            error: support.error ?? "imsg rpc unavailable",
+            elapsedMs: Date.now() - started,
+            ...(support.fatal ? { fatal: true } : {}),
+        };
+    }
+    let client;
+    try {
+        client = args.createClient
+            ? await args.createClient({ cliPath, ...(dbPath ? { dbPath } : {}) })
+            : await createIMessageRpcClient({ cliPath, ...(dbPath ? { dbPath } : {}) });
+    }
+    catch (err) {
+        return { ok: false, error: err instanceof Error ? err.message : String(err), elapsedMs: Date.now() - started };
+    }
+    try {
+        await client.request("chats.list", { limit: 1 }, { timeoutMs });
+        return { ok: true, elapsedMs: Date.now() - started };
+    }
+    catch (err) {
+        return { ok: false, error: err instanceof Error ? err.message : String(err), elapsedMs: Date.now() - started };
+    }
+    finally {
+        await client.stop();
+    }
+}
+//# sourceMappingURL=probe.js.map

package/dist/agents/channels/imessage/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../../../src/agents/channels/imessage/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,iCAAiC,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAwB,MAAM,aAAa,CAAC;AAuC5E,mFAAmF;AACnF,SAAS,cAAc,CAAC,OAAe,EAAE,SAAiB;IACzD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,IAAmB,EAAQ,EAAE;YAC1C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC,CAAC;QACF,IAAI,KAA+B,CAAC;QACpC,IAAI,CAAC;YACJ,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3F,OAAO;QACR,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC;gBACJ,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACR,iBAAiB;YAClB,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,CAAC;QACZ,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,IAAI,OAAQ,KAAgC,CAAC,KAAK,KAAK,UAAU;YAAG,KAA+B,CAAC,KAAK,EAAE,CAAC;QAC5G,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACtC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACtC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,MAAM,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3D,IAAI,CAAC,CAAC,CAAC,CAAC;QACT,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,iCAAiC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC;IAC/C,IAAI,MAA+D,CAAC;IACpE,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7D,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO;YACN,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,8DAA8D;SACrE,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAClD,OAAO;QACN,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,QAAQ,IAAI,gCAAgC,MAAM,CAAC,IAAI,IAAI,SAAS,GAAG;KAC9E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA0B,EAAE;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,iCAAiC,CAAC;IAEtE,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAClH,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACxB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,sBAAsB;YAC9C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAC/B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzC,CAAC;IACH,CAAC;IAED,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,YAAY;YACzB,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACrE,CAAC,CAAC,MAAM,uBAAuB,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAChH,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAChH,CAAC;YAAS,CAAC;QACV,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;AACF,CAAC"}

package/dist/agents/channels/imessage/remote-attachments.d.ts

@@ -0,0 +1,61 @@
+/**
+ * iMessage remote-host attachment fetch.
+ *
+ * The `imsg` bridge can run on a DIFFERENT Mac than the gateway — operators wrap
+ * `cliPath` in an SSH script like `exec ssh -T user@mac-mini imsg "$@"`. In that
+ * setup an inbound attachment's `original_path` is a path on the REMOTE machine,
+ * so resolving it against the local filesystem fails. This module:
+ *
+ *   1. `normalizeScpRemoteHost` — safety-validate a `user@host` / `host` token so
+ *      it can NEVER inject an option/argument into the `scp` command line.
+ *   2. `detectRemoteHostFromCliPath` — parse an SSH-wrapper script at `cliPath`
+ *      to auto-detect the remote host (so `remoteHost` need not be set by hand).
+ *   3. `scpCopyRemoteAttachment` — copy a remote attachment to a local temp file
+ *      (validated against the configured remote roots) before it is resolved.
+ *
+ * `scp`/`readFile`/`spawn` are all INJECTABLE so the unit tests exercise the
+ * remote path with NO real ssh/scp and NO real filesystem. Ported from the
+ * upstream iMessage monitor-provider remote-host support + `scp-host.ts`.
+ */
+/**
+ * Safety-validate + normalise an SCP/SSH remote host. Returns the canonical
+ * `user@host` / `host` string, or `undefined` when the value is unsafe (contains
+ * whitespace/control chars, looks like an option `-…`, embeds a path separator,
+ * has a malformed `user@host`, etc.). Ported from `normalizeScpRemoteHost`.
+ */
+export declare function normalizeScpRemoteHost(value: string | null | undefined): string | undefined;
+/** TEST SEAM: read the wrapper-script file (defaults to fs `readFile`). */
+export type ReadFileLike = (filePath: string) => Promise<string>;
+/**
+ * Try to detect a remote host from an SSH-wrapper script at `cliPath`, e.g.:
+ *   exec ssh -T user@192.168.64.3 /opt/homebrew/bin/imsg "$@"
+ *   exec ssh -T mac-mini imsg "$@"
+ * Returns the `user@host` / `host` portion (unvalidated — the caller normalises)
+ * or undefined when the file is unreadable / has no ssh invocation. Never throws.
+ */
+export declare function detectRemoteHostFromCliPath(cliPath: string, readFileImpl?: ReadFileLike): Promise<string | undefined>;
+/** TEST SEAM: run `scp <remote> <local>` (defaults to spawning real `scp`). */
+export type ScpRunner = (args: {
+    remoteHost: string;
+    remotePath: string;
+    localPath: string;
+}) => Promise<void>;
+/** TEST SEAM: make a temp dir (defaults to fs `mkdtemp` under the OS temp dir). */
+export type MkdtempLike = (prefix: string) => Promise<string>;
+/** Options for {@link scpCopyRemoteAttachment}. */
+export interface ScpCopyArgs {
+    /** Validated remote host (`user@host` / `host`). */
+    remoteHost: string;
+    /** Remote attachment path (already checked against the allowed remote roots). */
+    remotePath: string;
+    /** TEST SEAM: scp runner. */
+    scpRunner?: ScpRunner;
+    /** TEST SEAM: temp-dir factory. */
+    mkdtempImpl?: MkdtempLike;
+}
+/**
+ * Copy a remote attachment to a local temp file and return the local path.
+ * Throws on scp failure (the caller treats it as "attachment unavailable").
+ */
+export declare function scpCopyRemoteAttachment(args: ScpCopyArgs): Promise<string>;
+//# sourceMappingURL=remote-attachments.d.ts.map

package/dist/agents/channels/imessage/remote-attachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-attachments.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/imessage/remote-attachments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAqBH;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAwB3F;AAID,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAUjE;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAChD,OAAO,EAAE,MAAM,EACf,YAAY,GAAE,YAA8B,GAC1C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAY7B;AAID,+EAA+E;AAC/E,MAAM,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAqB/G,mFAAmF;AACnF,MAAM,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAI9D,mDAAmD;AACnD,MAAM,WAAW,WAAW;IAC3B,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,mCAAmC;IACnC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAOhF"}

package/dist/agents/channels/imessage/remote-attachments.js

@@ -0,0 +1,131 @@
+/**
+ * iMessage remote-host attachment fetch.
+ *
+ * The `imsg` bridge can run on a DIFFERENT Mac than the gateway — operators wrap
+ * `cliPath` in an SSH script like `exec ssh -T user@mac-mini imsg "$@"`. In that
+ * setup an inbound attachment's `original_path` is a path on the REMOTE machine,
+ * so resolving it against the local filesystem fails. This module:
+ *
+ *   1. `normalizeScpRemoteHost` — safety-validate a `user@host` / `host` token so
+ *      it can NEVER inject an option/argument into the `scp` command line.
+ *   2. `detectRemoteHostFromCliPath` — parse an SSH-wrapper script at `cliPath`
+ *      to auto-detect the remote host (so `remoteHost` need not be set by hand).
+ *   3. `scpCopyRemoteAttachment` — copy a remote attachment to a local temp file
+ *      (validated against the configured remote roots) before it is resolved.
+ *
+ * `scp`/`readFile`/`spawn` are all INJECTABLE so the unit tests exercise the
+ * remote path with NO real ssh/scp and NO real filesystem. Ported from the
+ * upstream iMessage monitor-provider remote-host support + `scp-host.ts`.
+ */
+import { spawn } from "node:child_process";
+import { mkdtemp, readFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+/* ───────────────────────── host safety ───────────────────────── */
+const SSH_TOKEN = /^[A-Za-z0-9._-]+$/;
+const BRACKETED_IPV6 = /^\[[0-9A-Fa-f:.%]+\]$/;
+const WHITESPACE = /\s/;
+function hasControlOrWhitespace(value) {
+    for (const char of value) {
+        const code = char.charCodeAt(0);
+        if (code <= 0x1f || code === 0x7f || WHITESPACE.test(char))
+            return true;
+    }
+    return false;
+}
+/**
+ * Safety-validate + normalise an SCP/SSH remote host. Returns the canonical
+ * `user@host` / `host` string, or `undefined` when the value is unsafe (contains
+ * whitespace/control chars, looks like an option `-…`, embeds a path separator,
+ * has a malformed `user@host`, etc.). Ported from `normalizeScpRemoteHost`.
+ */
+export function normalizeScpRemoteHost(value) {
+    const trimmed = (value ?? "").trim();
+    if (!trimmed)
+        return undefined;
+    if (hasControlOrWhitespace(trimmed))
+        return undefined;
+    if (trimmed.startsWith("-") || trimmed.includes("/") || trimmed.includes("\\"))
+        return undefined;
+    const firstAt = trimmed.indexOf("@");
+    const lastAt = trimmed.lastIndexOf("@");
+    let user;
+    let host = trimmed;
+    if (firstAt !== -1) {
+        if (firstAt !== lastAt || firstAt === 0 || firstAt === trimmed.length - 1)
+            return undefined;
+        user = trimmed.slice(0, firstAt);
+        host = trimmed.slice(firstAt + 1);
+        if (!SSH_TOKEN.test(user))
+            return undefined;
+    }
+    if (!host || host.startsWith("-") || host.includes("@"))
+        return undefined;
+    if (host.includes(":") && !BRACKETED_IPV6.test(host))
+        return undefined;
+    if (!SSH_TOKEN.test(host) && !BRACKETED_IPV6.test(host))
+        return undefined;
+    return user ? `${user}@${host}` : host;
+}
+const defaultReadFile = (filePath) => readFile(filePath, "utf8");
+/** Expand a leading `~` to the user's home dir. */
+function expandHome(p) {
+    if (p.startsWith("~"))
+        return p.replace(/^~/, os.homedir());
+    return p;
+}
+/**
+ * Try to detect a remote host from an SSH-wrapper script at `cliPath`, e.g.:
+ *   exec ssh -T user@192.168.64.3 /opt/homebrew/bin/imsg "$@"
+ *   exec ssh -T mac-mini imsg "$@"
+ * Returns the `user@host` / `host` portion (unvalidated — the caller normalises)
+ * or undefined when the file is unreadable / has no ssh invocation. Never throws.
+ */
+export async function detectRemoteHostFromCliPath(cliPath, readFileImpl = defaultReadFile) {
+    try {
+        const content = await readFileImpl(expandHome(cliPath));
+        // `user@host` form first (e.g. brigade@192.168.64.3).
+        const userHostMatch = content.match(/\bssh\b[^\n]*?\s+([a-zA-Z0-9._-]+@[a-zA-Z0-9._-]+)/);
+        if (userHostMatch)
+            return userHostMatch[1];
+        // Fallback: host-only token immediately before the imsg command.
+        const hostOnlyMatch = content.match(/\bssh\b[^\n]*?\s+([a-zA-Z][a-zA-Z0-9._-]*)\s+\S*\bimsg\b/);
+        return hostOnlyMatch?.[1];
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Spawn a real `scp` and resolve on exit 0, reject otherwise. */
+const defaultScpRunner = ({ remoteHost, remotePath, localPath }) => new Promise((resolve, reject) => {
+    // `-T` disables pseudo-terminal allocation; `--` ends option parsing so a
+    // crafted path can't be read as a flag. The host is already host-validated.
+    const child = spawn("scp", ["-T", "--", `${remoteHost}:${remotePath}`, localPath], {
+        stdio: ["ignore", "ignore", "pipe"],
+    });
+    let stderr = "";
+    child.stderr?.on("data", (c) => {
+        stderr += c.toString("utf8");
+    });
+    child.on("error", (err) => reject(err instanceof Error ? err : new Error(String(err))));
+    child.on("close", (code) => {
+        if (code === 0)
+            resolve();
+        else
+            reject(new Error(`scp exited (code ${code ?? "unknown"})${stderr ? `: ${stderr.trim()}` : ""}`));
+    });
+});
+const defaultMkdtemp = (prefix) => mkdtemp(prefix);
+/**
+ * Copy a remote attachment to a local temp file and return the local path.
+ * Throws on scp failure (the caller treats it as "attachment unavailable").
+ */
+export async function scpCopyRemoteAttachment(args) {
+    const runner = args.scpRunner ?? defaultScpRunner;
+    const makeTemp = args.mkdtempImpl ?? defaultMkdtemp;
+    const dir = await makeTemp(path.join(os.tmpdir(), "brigade-imsg-"));
+    const localPath = path.join(dir, path.basename(args.remotePath) || "attachment");
+    await runner({ remoteHost: args.remoteHost, remotePath: args.remotePath, localPath });
+    return localPath;
+}
+//# sourceMappingURL=remote-attachments.js.map

package/dist/agents/channels/imessage/remote-attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-attachments.js","sourceRoot":"","sources":["../../../../src/agents/channels/imessage/remote-attachments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,qEAAqE;AAErE,MAAM,SAAS,GAAG,mBAAmB,CAAC;AACtC,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,UAAU,GAAG,IAAI,CAAC;AAExB,SAAS,sBAAsB,CAAC,KAAa;IAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAgC;IACtE,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,sBAAsB,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAEjG,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAExC,IAAI,IAAwB,CAAC;IAC7B,IAAI,IAAI,GAAG,OAAO,CAAC;IAEnB,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5F,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1E,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC;AAOD,MAAM,eAAe,GAAiB,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAE/E,mDAAmD;AACnD,SAAS,UAAU,CAAC,CAAS;IAC5B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,CAAC;AACV,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,OAAe,EACf,eAA6B,eAAe;IAE5C,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACxD,sDAAsD;QACtD,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1F,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;QAC3C,iEAAiE;QACjE,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAChG,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAOD,kEAAkE;AAClE,MAAM,gBAAgB,GAAc,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,CAC7E,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IACrC,0EAA0E;IAC1E,4EAA4E;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,UAAU,IAAI,UAAU,EAAE,EAAE,SAAS,CAAC,EAAE;QAClF,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;KACnC,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;QACtC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QAC1B,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;;YACrB,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,IAAI,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAKJ,MAAM,cAAc,GAAgB,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAchE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAiB;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,IAAI,cAAc,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,CAAC;IACjF,MAAM,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;IACtF,OAAO,SAAS,CAAC;AAClB,CAAC"}