@xmanrui/dsh-im 4.17.1 → 4.18.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@xmanrui/dsh-im",
-  "version": "4.17.1",
-  "description": "把十种 IM 机器人和公网 AI Office 接入本机 DeepSeek Harness。 Connect ten IM channels and a public AI Office to a local DeepSeek Harness.",
+  "version": "4.18.0",
+  "description": "把十一种 IM 渠道和公网 AI Office 接入本机 DeepSeek Harness。 Connect eleven IM channels and a public AI Office to a local DeepSeek Harness.",
   "keywords": [
     "deepseek-harness",
     "dsh",
@@ -20,6 +20,7 @@
     "telegram",
     "discord",
     "whatsapp",
+    "imessage",
     "ai-office"
   ],
   "author": "xmanrui (https://github.com/xmanrui)",
@@ -43,6 +44,10 @@
     {
       "name": "masucc",
       "url": "https://github.com/masucc"
+    },
+    {
+      "name": "cherryFloris",
+      "url": "https://github.com/cherryFloris"
     }
   ],
   "license": "MIT",

package/plugin-src/client/access-policy-settings.js

@@ -69,6 +69,11 @@ export const ACCESS_CHANNEL_DEFINITIONS = Object.freeze({
     groupUserLabel: '群成员电话号码或 JID',
     groupPlaceholder: '8613800000000 或完整 JID',
   }),
+  imessage: Object.freeze({
+    directUserLabel: 'iMessage Chat GUID',
+    directPlaceholder: 'iMessage;+;chat123',
+    groupSupported: false,
+  }),
 });
 
 function clonePolicy(policy) {

package/plugin-src/client/channel-logos.js

@@ -132,6 +132,16 @@ export function WhatsappLogoGlyph({ size } = {}) {
   }));
 }
 
+export function IMessageLogoGlyph({ size } = {}) {
+  return h('svg', {
+    ...dimensions(size), viewBox: '0 0 24 24', focusable: 'false',
+    'aria-hidden': 'true', 'data-im-channel-logo': 'imessage',
+  }, h('path', {
+    fill: 'currentColor',
+    d: 'M12 2.2c-5.52 0-10 3.75-10 8.38 0 2.63 1.52 4.98 3.9 6.52l-.92 3.43a.5.5 0 0 0 .72.56l3.54-1.96c.87.23 1.8.35 2.76.35 5.52 0 10-3.75 10-8.9S17.52 2.2 12 2.2Zm-3.4 8.2a1.2 1.2 0 1 1 0 2.4 1.2 1.2 0 0 1 0-2.4Zm3.4 0a1.2 1.2 0 1 1 0 2.4 1.2 1.2 0 0 1 0-2.4Zm3.4 0a1.2 1.2 0 1 1 0 2.4 1.2 1.2 0 0 1 0-2.4Z',
+  }));
+}
+
 export function OfficeLogoGlyph({ size } = {}) {
   return h('svg', {
     ...dimensions(size),

package/plugin-src/client/channels/imessage/api.js

@@ -0,0 +1,12 @@
+import { TOKEN_BOT_ENDPOINTS, createTokenChannelApi } from '../shared/token-api.js';
+
+export const IMESSAGE_RPC_CHANNEL = '/imessage';
+export const IMESSAGE_ENDPOINTS = Object.freeze({
+  ...TOKEN_BOT_ENDPOINTS,
+  bindCredentials: 'bot.bind-native',
+});
+const api = createTokenChannelApi('iMessage', ' macOS Messages 连接');
+export { api as imessageClientApi };
+export const unwrapRpcResult = api.unwrapRpcResult;
+export const normalizeSnapshot = api.normalizeSnapshot;
+export const presentError = api.presentError;

package/plugin-src/client/channels/imessage/index.js

@@ -0,0 +1,45 @@
+import * as React from 'react';
+import { IMessageLogoGlyph } from '../../channel-logos.js';
+import { createTokenChannelSettings } from '../shared/token-channel.js';
+import { IMESSAGE_ENDPOINTS, imessageClientApi } from './api.js';
+import { installIMessageStyles } from './styles.js';
+import { h } from '../../i18n.js';
+
+function PermissionPanel({ permissions, busy, error, onSubmit, onCancel }) {
+  const databaseReady = permissions?.database === 'granted';
+  const automationReady = permissions?.automation === 'granted';
+  return h('section', { className: 'ddt-card dim-surfaceCard dim-imessagePermissionPanel' },
+    h('h3', null, '启用 macOS 原生 iMessage'),
+    h('p', null, '支持同账号自聊：在 iPhone 或 Mac 上给自己已登录的 iMessage 邮箱或号码发指令。AI 回复以 🤖 DSH 开头，不会再次触发机器人。'),
+    h('p', null, 'DeepSeek Harness 通过 macOS Messages.app 收发文本消息。首次使用需要授予以下权限：'),
+    h('ol', { className: 'dim-imessagePermissionSteps' },
+      h('li', null,
+        h('strong', null, databaseReady ? '✓ 完全磁盘访问权限已授予' : '1. 授予完全磁盘访问权限'),
+        databaseReady ? null : h('p', null, '在“系统设置 → 隐私与安全性 → 完全磁盘访问权限”中，打开运行 DeepSeek Harness 的终端或应用。'),
+        databaseReady ? null : h('a', { href: 'x-apple.systempreferences:com.apple.preference.security?Privacy_AllFiles' }, '打开完全磁盘访问权限设置')),
+      h('li', null,
+        h('strong', null, automationReady ? '✓ Messages 自动化权限已授予' : '2. 允许自动化控制 Messages'),
+        automationReady ? null : h('p', null, '在“系统设置 → 隐私与安全性 → 自动化”中，允许运行 DeepSeek Harness 的应用控制 Messages。'),
+        automationReady ? null : h('a', { href: 'x-apple.systempreferences:com.apple.preference.security?Privacy_Automation' }, '打开自动化设置'))),
+    error ? h('p', { className: 'dim-inlineError', role: 'alert' }, error.message ?? String(error)) : null,
+    h('div', { className: 'ddt-actions dim-viewActions' },
+      h('button', { type: 'button', className: 'ddt-button', onClick: onCancel, disabled: busy }, '取消'),
+      h('button', { type: 'button', className: 'ddt-button', 'data-kind': 'primary', onClick: () => onSubmit({}), disabled: busy },
+        busy ? '正在检查…' : '检查权限并启用')));
+}
+
+const channel = createTokenChannelSettings({
+  channel: 'iMessage', endpoints: IMESSAGE_ENDPOINTS, api: imessageClientApi,
+  LogoGlyph: IMessageLogoGlyph, installStyles: installIMessageStyles,
+  pageClass: 'dim-pageIMessage', avatarClass: 'dim-avatarIMessage',
+  connectionLabel: ' macOS Messages 连接',
+  tokenPlaceholder: '', emptyTitle: '接入 macOS 原生 iMessage',
+  emptyDescription: '无需安装第三方服务；请按指引授予 macOS Messages 访问权限。',
+  platformLabel: 'macOS Messages', credentialPayload: () => ({}),
+  CredentialPanel: PermissionPanel,
+  credentialAriaLabel: '配置 macOS Messages 权限', credentialOpenLabel: '配置本机权限',
+  credentialNoun: 'macOS Messages 权限', emptyActionLabel: '配置本机权限',
+});
+
+export const IMessageSettingsTab = channel.SettingsTab;
+export const IMessageAccountCard = channel.AccountCard;

package/plugin-src/client/channels/imessage/styles.js

@@ -0,0 +1,19 @@
+export const IMESSAGE_STYLE_ID = 'xmanrui-dsh-im-imessage-settings';
+const CSS = String.raw`
+.dim-pageIMessage { --ddt-accent: #32a852; --ddt-accent-deep: #248a40; --ddt-accent-wash: #edf9f0; }
+.dim-avatarIMessage { color: #fff; background: #32a852; }
+.dim-avatarIMessage svg { display: block; }
+.dim-imessagePermissionPanel { padding: 20px; }
+.dim-imessagePermissionPanel p { color: var(--dsw-alias-label-secondary, #646a73); }
+.dim-imessagePermissionSteps { margin: 16px 0; padding-left: 22px; }
+.dim-imessagePermissionSteps li { margin: 12px 0; }
+.dim-imessagePermissionSteps a { color: var(--ddt-accent-deep); }
+`;
+export function installIMessageStyles() {
+  if (typeof document === 'undefined') return () => {};
+  const existing = document.querySelector(`style[data-plugin-css="${IMESSAGE_STYLE_ID}"]`);
+  if (existing) return () => {};
+  const style = document.createElement('style'); style.dataset.plugin = '@xmanrui/dsh-im';
+  style.dataset.pluginCss = IMESSAGE_STYLE_ID; style.textContent = CSS; document.head.appendChild(style);
+  return () => style.remove();
+}

package/plugin-src/client/channels/shared/token-api.js

@@ -101,6 +101,7 @@ export function createTokenChannelApi(channel, connectionSummary, {
       totals: { configured: bots.length, connected: bots.filter((bot) => bot.connected).length },
       agentPresetCatalog: normalizeAgentPresetCatalog(source.agentPresetCatalog),
       modelCatalog: normalizeModelCatalog(source.modelCatalog),
+      ...(isRecord(source.permissions) ? { permissions: source.permissions } : {}),
     };
   };
 

package/plugin-src/client/channels/shared/token-channel.js

@@ -182,7 +182,7 @@ export function createTokenChannelSettings(definition) {
     const [model, setModel] = React.useState({
       phase: 'loading', bots: [], totals: { configured: 0, connected: 0 }, error: null,
       agentPresetCatalog: EMPTY_AGENT_PRESET_CATALOG,
-      modelCatalog: EMPTY_MODEL_CATALOG,
+      modelCatalog: EMPTY_MODEL_CATALOG, permissions: null,
     });
     const [credentialOpen, setCredentialOpen] = React.useState(false);
     const [credentialError, setCredentialError] = React.useState(null);
@@ -221,6 +221,7 @@ export function createTokenChannelSettings(definition) {
           phase: 'ready', bots: snapshot.bots, totals: snapshot.totals, error: null,
           agentPresetCatalog: snapshot.agentPresetCatalog ?? EMPTY_AGENT_PRESET_CATALOG,
           modelCatalog: snapshot.modelCatalog ?? EMPTY_MODEL_CATALOG,
+          permissions: snapshot.permissions ?? null,
         });
       } catch (error) {
         if (error?.name !== 'AbortError' && mounted.current && !signal?.aborted
@@ -268,6 +269,7 @@ export function createTokenChannelSettings(definition) {
           phase: 'ready', bots: snapshot.bots, totals: snapshot.totals, error: null,
           agentPresetCatalog: snapshot.agentPresetCatalog ?? EMPTY_AGENT_PRESET_CATALOG,
           modelCatalog: snapshot.modelCatalog ?? EMPTY_MODEL_CATALOG,
+          permissions: snapshot.permissions ?? null,
         });
         }
         setCredentialOpen(false);
@@ -418,6 +420,8 @@ export function createTokenChannelSettings(definition) {
         : h(React.Fragment, null,
             credentialOpen ? (CredentialPanel
               ? h(CredentialPanel, {
+                  channel,
+                  permissions: model.permissions,
                   busy,
                   error: credentialError,
                   onSubmit: bindCredentials,

package/plugin-src/client/delivery-settings.js

@@ -115,6 +115,11 @@ const CHANNEL_DEFINITIONS = Object.freeze({
       group: [{ key: 'jid', label: '群 JID', placeholder: '1234567890@g.us' }],
     },
   },
+  imessage: {
+    label: 'iMessage',
+    kinds: [{ value: 'user', label: '私聊' }],
+    fields: { user: [{ key: 'chatGuid', label: 'Chat GUID', placeholder: 'iMessage;+;chat123' }] },
+  },
 });
 
 export const DELIVERY_CHANNEL_DEFINITIONS = CHANNEL_DEFINITIONS;

package/plugin-src/client/i18n.js

@@ -4,6 +4,27 @@ export const IM_LOCALE_NAMESPACE = 'dsh-im';
 
 const EN = Object.freeze({
   '$locale': 'en',
+  ' macOS Messages 连接': ' macOS Messages connection',
+  '接入 iMessage': 'Connect iMessage',
+  '先在 macOS 系统设置中授予 Messages 权限。': 'Grant Messages permissions in macOS System Settings first.',
+  '配置 macOS Messages 权限': 'Configure macOS Messages permissions',
+  '配置本机权限': 'Configure local permissions',
+  '启用 macOS 原生 iMessage': 'Enable native macOS iMessage',
+  '支持同账号自聊：在 iPhone 或 Mac 上给自己已登录的 iMessage 邮箱或号码发指令。AI 回复以 🤖 DSH 开头，不会再次触发机器人。': 'Self-chat is supported: send instructions from your iPhone or Mac to your signed-in iMessage email or phone number. AI replies start with 🤖 DSH and do not trigger the bot again.',
+  '检查权限并启用': 'Check permissions and enable',
+  'DeepSeek Harness 通过 macOS Messages.app 收发文本消息。首次使用需要授予以下权限：': 'DeepSeek Harness sends and receives messages through macOS Messages.app. The following permissions are required the first time:',
+  '✓ 完全磁盘访问权限已授予': '✓ Full Disk Access granted',
+  '1. 授予完全磁盘访问权限': '1. Grant Full Disk Access',
+  '在“系统设置 → 隐私与安全性 → 完全磁盘访问权限”中，打开运行 DeepSeek Harness 的终端或应用。': 'In System Settings → Privacy & Security → Full Disk Access, enable the terminal or app running DeepSeek Harness.',
+  '打开完全磁盘访问权限设置': 'Open Full Disk Access settings',
+  '✓ Messages 自动化权限已授予': '✓ Messages automation granted',
+  '2. 允许自动化控制 Messages': '2. Allow automation control of Messages',
+  '在“系统设置 → 隐私与安全性 → 自动化”中，允许运行 DeepSeek Harness 的应用控制 Messages。': 'In System Settings → Privacy & Security → Automation, allow the app running DeepSeek Harness to control Messages.',
+  '打开自动化设置': 'Open Automation settings',
+  '正在检查…': 'Checking…',
+  '接入 macOS 原生 iMessage': 'Connect native macOS iMessage',
+  '无需安装第三方服务；请按指引授予 macOS Messages 访问权限。': 'No third-party service is required; follow the guide to grant macOS Messages access.',
+  'macOS Messages 权限': 'macOS Messages permissions',
   'IM机器人': 'IM bots',
   'IM机器人设置': 'IM bot settings',
   '更多机器人设置': 'More bot settings',
@@ -1062,7 +1083,8 @@ function translateDynamic(text) {
 
   const phrases = [
     ['企业微信', 'WeCom'], ['DeepSeek Harness', 'DeepSeek Harness'],
-    ['WhatsApp', 'WhatsApp'], ['Telegram', 'Telegram'], ['Discord', 'Discord'],
+    ['WhatsApp', 'WhatsApp'], ['iMessage', 'iMessage'], ['macOS Messages', 'macOS Messages'],
+    ['Telegram', 'Telegram'], ['Discord', 'Discord'],
     ['Slack', 'Slack'], ['飞书', 'Feishu'], ['钉钉', 'DingTalk'], ['微信', 'WeChat'],
     ['机器人', 'bot'], ['账号', 'account'], ['应用', 'app'], ['凭据', 'credentials'],
     ['服务返回了无法识别的响应', 'service returned an unrecognized response'],

package/plugin-src/client/index.js

@@ -13,6 +13,7 @@ import {
   WecomLogoGlyph,
   WeixinLogoGlyph,
   WhatsappLogoGlyph,
+  IMessageLogoGlyph,
 } from './channel-logos.js';
 import { DINGTALK_RPC_CHANNEL } from './channels/dingtalk/api.js';
 import { DingtalkSettingsTab } from './channels/dingtalk/index.js';
@@ -46,6 +47,9 @@ import { installWeixinStyles } from './channels/weixin/styles.js';
 import { WHATSAPP_RPC_CHANNEL } from './channels/whatsapp/api.js';
 import { WhatsappSettingsTab } from './channels/whatsapp/index.js';
 import { installWhatsappStyles } from './channels/whatsapp/styles.js';
+import { IMESSAGE_RPC_CHANNEL } from './channels/imessage/api.js';
+import { IMessageSettingsTab } from './channels/imessage/index.js';
+import { installIMessageStyles } from './channels/imessage/styles.js';
 import { en, h, IM_LOCALE_NAMESPACE, setImTranslator, zh } from './i18n.js';
 import { BotSettingsContext } from './channel-card-meta.js';
 import {
@@ -92,6 +96,7 @@ const CHANNELS = Object.freeze([
   { id: 'discord', label: 'Discord' },
   { id: 'whatsapp', label: 'WhatsApp' },
   { id: 'wecomApp', label: '企业微信应用', note: '（实验功能）' },
+  { id: 'imessage', label: 'iMessage', note: '（实验功能）' },
   { id: 'office', label: 'AI Office', note: '（实验功能）' },
 ]);
 
@@ -142,6 +147,11 @@ function WhatsappLogo() {
     h(WhatsappLogoGlyph));
 }
 
+function IMessageLogo() {
+  return h('span', { className: 'dim-logo dim-logoIMessage', 'aria-hidden': 'true' },
+    h(IMessageLogoGlyph));
+}
+
 function OfficeLogo() {
   return h('span', { className: 'dim-logo dim-logoOffice', 'aria-hidden': 'true' },
     h(OfficeLogoGlyph));
@@ -158,6 +168,7 @@ function ChannelLogo({ channel }) {
   if (channel === 'telegram') return h(TelegramLogo);
   if (channel === 'discord') return h(DiscordLogo);
   if (channel === 'whatsapp') return h(WhatsappLogo);
+  if (channel === 'imessage') return h(IMessageLogo);
   return h(OfficeLogo);
 }
 
@@ -181,6 +192,7 @@ export function IMSettingsTab({
   dingtalkRpcCall,
   discordRpcCall,
   feishuRpcCall,
+  imessageRpcCall,
   qqRpcCall,
   slackRpcCall,
   telegramRpcCall,
@@ -231,6 +243,7 @@ export function IMSettingsTab({
     updateRpcCall,
     deliveryRpcCall,
     globalSettingsRpcCall,
+    imessageRpcCall,
   }, {
     location: browserLocation,
     onRecovery: reportLoopbackRecovery,
@@ -241,6 +254,7 @@ export function IMSettingsTab({
     deliveryRpcCall,
     feishuRpcCall,
     globalSettingsRpcCall,
+    imessageRpcCall,
     officeRpcCall,
     qqRpcCall,
     reportLoopbackRecovery,
@@ -369,6 +383,8 @@ export function IMSettingsTab({
                         ? h(DiscordSettingsTab, { rpcCall: rpcCalls.discordRpcCall })
                         : active.id === 'whatsapp'
                           ? h(WhatsappSettingsTab, { rpcCall: rpcCalls.whatsappRpcCall })
+                          : active.id === 'imessage'
+                            ? h(IMessageSettingsTab, { rpcCall: rpcCalls.imessageRpcCall })
                           : h(OfficeSettingsTab, { rpcCall: rpcCalls.officeRpcCall }))),
     ),
   ));
@@ -395,6 +411,7 @@ export function apply(ctx) {
       installTelegramStyles(),
       installDiscordStyles(),
       installWhatsappStyles(),
+      installIMessageStyles(),
       installOfficeStyles(),
       installImStyles(),
     ];
@@ -421,6 +438,8 @@ export function apply(ctx) {
     callManagementRpc(ctx.connection, DISCORD_RPC_CHANNEL, endpoint, payload, signal);
   const whatsappRpcCall = (endpoint, payload, signal) =>
     callManagementRpc(ctx.connection, WHATSAPP_RPC_CHANNEL, endpoint, payload, signal);
+  const imessageRpcCall = (endpoint, payload, signal) =>
+    callManagementRpc(ctx.connection, IMESSAGE_RPC_CHANNEL, endpoint, payload, signal);
   const slackRpcCall = (endpoint, payload, signal) =>
     callManagementRpc(ctx.connection, SLACK_RPC_CHANNEL, endpoint, payload, signal);
   const officeRpcCall = (endpoint, payload, signal) =>
@@ -454,6 +473,7 @@ export function apply(ctx) {
       wecomAppRpcCall,
       weixinRpcCall,
       whatsappRpcCall,
+      imessageRpcCall,
       officeRpcCall,
       updateRpcCall,
       deliveryRpcCall,

package/plugin-src/client/session-channel-logos.js

@@ -2,6 +2,7 @@ import { parseSessionChannelTitle } from '../../src/channels/shared/session-chan
 import {
   WeixinLogoGlyph, FeishuLogoGlyph, DingtalkLogoGlyph, WecomLogoGlyph, QqLogoGlyph,
   SlackLogoGlyph, TelegramLogoGlyph, DiscordLogoGlyph, WhatsappLogoGlyph, OfficeLogoGlyph,
+  IMessageLogoGlyph,
 } from './channel-logos.js';
 
 const GLYPHS = Object.freeze({
@@ -14,6 +15,7 @@ const GLYPHS = Object.freeze({
   telegram: [TelegramLogoGlyph, '#229ed9'],
   discord: [DiscordLogoGlyph, '#5865f2'],
   whatsapp: [WhatsappLogoGlyph, '#25d366'],
+  imessage: [IMessageLogoGlyph, '#3478f6'],
   office: [OfficeLogoGlyph, '#f97316'],
 });
 const CHANNEL_ATTR = 'data-dsh-im-session-channel';

package/plugin-src/client/styles.js

@@ -97,6 +97,7 @@ const CSS = String.raw`
 .dim-logoSlack { color: white; background: #4a154b; }
 .dim-logoSlack svg { width: 21px; height: 21px; }
 .dim-logoWhatsapp { color: white; background: #25d366; }
+.dim-logoIMessage { color: white; background: #32a852; }
 .dim-logoWhatsapp svg { width: 21px; height: 21px; }
 .dim-channelCopy { min-width: 0; display: grid; }
 .dim-channelCopy strong { overflow: hidden; color: inherit; font-size: 14px; line-height: 20px; font-weight: 680; text-overflow: ellipsis; white-space: nowrap; }

package/plugin-src/host/channels/imessage/index.mjs

@@ -0,0 +1,21 @@
+import { createProductionController } from './production.mjs';
+import { installIMessageRpc } from './rpc.mjs';
+
+export const name = 'dsh-im-imessage-host';
+export const inject = ['connection', 'credentials', 'typertGateway'];
+
+export async function apply(ctx, config = {}) {
+  if (config?.controller) return installIMessageRpc(ctx, config.controller, config.rpcAuthority);
+  const production = await createProductionController(ctx, config, config.internals ?? {});
+  const unregisterDelivery = config.deliveryService && production.deliveryAdapter
+    ? config.deliveryService.registerAdapter(production.deliveryAdapter) : undefined;
+  const disposeRpc = installIMessageRpc(ctx, production.controller, config.rpcAuthority);
+  ctx.effect(() => async () => {
+    await unregisterDelivery?.(); await production.close();
+  }, 'dsh-im: close iMessage connections');
+  return disposeRpc;
+}
+
+export { createProductionController } from './production.mjs';
+export { IMESSAGE_ENDPOINTS, IMESSAGE_RPC_CHANNEL, IMESSAGE_RPC_ENDPOINTS,
+  createIMessageRpcHandler, installIMessageRpc } from './rpc.mjs';

package/plugin-src/host/channels/imessage/production.mjs

@@ -0,0 +1,13 @@
+import { IMessageConfigStore } from '../../../../src/channels/imessage/config-store.mjs';
+import { IMessageController } from '../../../../src/channels/imessage/controller.mjs';
+import { IMessageHarnessClient } from '../../../../src/channels/imessage/harness-client.mjs';
+import { IMessageRuntime } from '../../../../src/channels/imessage/runtime.mjs';
+import { IMessageStateStore } from '../../../../src/channels/imessage/state-store.mjs';
+import { createTokenProductionController } from '../shared/production.mjs';
+
+export function createProductionController(ctx, config = {}, internals = {}) {
+  return createTokenProductionController(ctx, config, internals, {
+    channel: 'imessage', ConfigStore: IMessageConfigStore, StateStore: IMessageStateStore,
+    HarnessClient: IMessageHarnessClient, Controller: IMessageController, Runtime: IMessageRuntime,
+  });
+}

package/plugin-src/host/channels/imessage/rpc.mjs

@@ -0,0 +1,70 @@
+import { createTokenBotRpcHandler } from '../shared/rpc.mjs';
+import { registerManagementRpc } from '../../../management-rpc.mjs';
+import { resolveRpcAuthority } from '../../rpc-authority.mjs';
+
+export const IMESSAGE_RPC_CHANNEL = '/imessage';
+export const IMESSAGE_ENDPOINTS = Object.freeze({
+  status: 'connection.status',
+  bindNative: 'bot.bind-native',
+  bindCredentials: 'bot.bind-native',
+  permissions: 'permissions.status',
+  reconnectBot: 'bot.reconnect',
+  deleteBot: 'bot.delete',
+  setWorkspace: 'bot.workspace.set',
+  setModel: 'bot.model.set',
+  setAgentPreset: 'bot.agent-preset.set',
+  setContextEnhancement: 'bot.context-enhancement.set',
+  setAccessPolicy: 'bot.access-policy.set',
+});
+export const IMESSAGE_RPC_ENDPOINTS = Object.freeze(Object.values(IMESSAGE_ENDPOINTS));
+
+function withRpcDetails(result) {
+  if (result?.ok !== false) return result;
+  return {
+    ...result,
+    error: { ...result.error, details: result.error?.details ?? {} },
+  };
+}
+
+export function createIMessageRpcHandler(controller) {
+  const tokenHandler = createTokenBotRpcHandler(controller, {
+    channel: 'iMessage',
+  });
+  return async (endpoint, payload, signal) => {
+    if (endpoint === IMESSAGE_ENDPOINTS.status) {
+      const value = await controller.status();
+      return { ok: true, value: { ...value, permissions: await controller.permissions() } };
+    }
+    if (endpoint === IMESSAGE_ENDPOINTS.permissions) {
+      try {
+        return { ok: true, value: await controller.permissions() };
+      } catch (error) {
+        return withRpcDetails({
+          ok: false,
+          error: { code: 'permissions-check-failed', message: error.message },
+        });
+      }
+    }
+    if (endpoint === IMESSAGE_ENDPOINTS.bindNative) {
+      try {
+        return { ok: true, value: await controller.bindNative() };
+      } catch (error) {
+        return withRpcDetails({
+          ok: false,
+          error: { code: error.code ?? 'imessage-bind-failed', message: error.message },
+        });
+      }
+    }
+    const translated = endpoint === IMESSAGE_ENDPOINTS.setModel ? 'bot.model.set' : endpoint;
+    return withRpcDetails(await tokenHandler(translated, payload, signal));
+  };
+}
+
+export function installIMessageRpc(ctx, controller, authority) {
+  return registerManagementRpc(
+    ctx,
+    IMESSAGE_RPC_CHANNEL,
+    createIMessageRpcHandler(controller),
+    { authority: resolveRpcAuthority(authority) },
+  );
+}

package/plugin-src/host/channels/shared/access-policy-production.mjs

@@ -91,7 +91,7 @@ export function initialAccessPolicyFor(channel, config = {}) {
       group: allowlistScope(),
     });
   }
-  if (['dingtalk', 'wecom', 'wecom-app', 'slack', 'discord'].includes(key)) {
+  if (['dingtalk', 'wecom', 'wecom-app', 'slack', 'discord', 'imessage'].includes(key)) {
     return createAccessPolicy({ direct: openScope(), group: openScope() });
   }
   throw new TypeError(`Unsupported access-policy channel: ${channel}`);

package/plugin-src/host/delivery-adapter.mjs

@@ -15,6 +15,7 @@ const CHANNELS = new Set([
   'telegram',
   'discord',
   'whatsapp',
+  'imessage',
 ]);
 
 export function supportsDeliveryChannel(channel) {
@@ -122,6 +123,9 @@ function normalizeRoute(channel, kind, route) {
       }
       return normalized;
     }
+    case 'imessage':
+      oneOf(kind, ['user']);
+      return routeWithStrings(route, ['chatGuid']);
     default:
       throw new TypeError(`Unsupported delivery channel: ${channel}`);
   }

package/plugin-src/host/index.mjs

@@ -9,6 +9,7 @@ import { apply as applyWecom } from './channels/wecom/index.mjs';
 import { apply as applyWecomApp } from './channels/wecom-app/index.mjs';
 import { apply as applyWeixin } from './channels/weixin/index.mjs';
 import { apply as applyWhatsapp } from './channels/whatsapp/index.mjs';
+import { apply as applyIMessage } from './channels/imessage/index.mjs';
 import { installOutboundArtifactTool } from '../../src/channels/shared/semantic/artifact.mjs';
 import { setImHostLanguage } from '../../src/channels/shared/i18n.mjs';
 import { installDeliveryRpc } from './delivery-rpc.mjs';
@@ -53,6 +54,7 @@ export function createImHostPlugin(internals = {}) {
   const startDiscord = internals.applyDiscord ?? applyDiscord;
   const startOffice = internals.applyOffice ?? applyOffice;
   const startWhatsapp = internals.applyWhatsapp ?? applyWhatsapp;
+  const startIMessage = internals.applyIMessage ?? applyIMessage;
   const channels = [
     ['feishu', startFeishu],
     ['weixin', startWeixin],
@@ -64,6 +66,7 @@ export function createImHostPlugin(internals = {}) {
     ['telegram', startTelegram],
     ['discord', startDiscord],
     ['whatsapp', startWhatsapp],
+    ['imessage', startIMessage],
     ['office', startOffice],
   ];
   return Object.freeze({

package/plugin-src/host/modern-harness-api.mjs

@@ -5,7 +5,7 @@ import { hasActiveHarnessInteractionOwner } from '../../src/channels/shared/harn
 const modernApis = new WeakMap();
 
 function failureOf(error) {
-  const failure = error?.failure;
+  const failure = error?.failure ?? (error?.isDSHRemoteError === true ? error : undefined);
   if (failure && typeof failure === 'object'
     && typeof failure.code === 'string'
     && typeof failure.message === 'string') {

package/src/channels/imessage/config-store.mjs

@@ -0,0 +1,24 @@
+import {
+  deriveTokenBotIdentity,
+  maskPlatformId,
+  TokenBotConfigStore,
+} from '../shared/token-config-store.mjs';
+
+const IDENTITY_OPTIONS = Object.freeze({
+  botPrefix: 'imessage',
+  tokenRefPrefix: 'DSH_IMESSAGE_PASSWORD',
+});
+
+export function deriveIMessageBotIdentity(platformId) {
+  return deriveTokenBotIdentity(platformId, IDENTITY_OPTIONS);
+}
+
+export function maskIMessageBotId(platformId) {
+  return maskPlatformId(platformId, 'iMessage 网关');
+}
+
+export class IMessageConfigStore extends TokenBotConfigStore {
+  constructor(path) {
+    super(path, { channel: 'iMessage', ...IDENTITY_OPTIONS });
+  }
+}

package/src/channels/imessage/controller.mjs

@@ -0,0 +1,37 @@
+import { TokenBotController } from '../shared/token-bot-controller.mjs';
+import { MacOSMessagesApi } from './imessage-api.mjs';
+import {
+  deriveIMessageBotIdentity,
+  maskIMessageBotId,
+} from './config-store.mjs';
+import { IMESSAGE_DESCRIPTOR } from './imessage-bridge.mjs';
+
+const NATIVE_CREDENTIAL = 'macos-messages-native';
+
+export async function inspectIMessageCredential(value, { api = new MacOSMessagesApi() } = {}) {
+  if (value !== NATIVE_CREDENTIAL) throw new TypeError('Invalid native iMessage credential');
+  const permissions = await api.getPermissions();
+  return { platformId: 'macos-messages', name: 'Mac Messages', permissions };
+}
+
+export class IMessageController extends TokenBotController {
+  constructor(options) {
+    super({
+      ...options,
+      descriptor: IMESSAGE_DESCRIPTOR,
+      inspectToken: options.inspectToken ?? inspectIMessageCredential,
+      deriveIdentity: deriveIMessageBotIdentity,
+      maskPlatformId: maskIMessageBotId,
+    });
+  }
+
+  async bindNative() {
+    return super.bindCredentials({ token: NATIVE_CREDENTIAL });
+  }
+
+  async permissions() {
+    return new MacOSMessagesApi().getPermissions();
+  }
+}
+
+export { NATIVE_CREDENTIAL };

package/src/channels/imessage/harness-client.mjs

@@ -0,0 +1,7 @@
+import { HarnessClient } from '../shared/harness-client.mjs';
+
+export class IMessageHarnessClient extends HarnessClient {
+  constructor(options) {
+    super({ ...options, rpcIdPrefix: 'imessage', logPrefix: 'dsh-imessage' });
+  }
+}