daemora 1.0.0-alpha.0

package/dist/auth/index.js

@@ -0,0 +1,76 @@
+/**
+ * Auth factory — wires AuthStore + LocalAuthProvider + TokenService
+ * together with a signing key derived from the vault.
+ *
+ * Signing key derivation:
+ *   - HKDF-SHA256 from the vault's per-install salt + a fixed label
+ *     ("daemora-auth-sign-v1"). Deterministic per-install, unique
+ *     across installs.
+ *   - Rotating the vault (new passphrase, same data) preserves the
+ *     salt so tokens survive — which is what we want, since
+ *     legitimate passphrase rotation shouldn't log everyone out by
+ *     side-effect of invalidating signatures. Explicit "revoke all
+ *     sessions" handles session invalidation cleanly.
+ *   - If you wanted every passphrase change to invalidate tokens,
+ *     rotate the salt too. Deliberately we don't.
+ */
+import { createHmac, randomBytes } from "node:crypto";
+import { readFileSync, writeFileSync, existsSync, chmodSync, mkdirSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { createLogger } from "../util/logger.js";
+import { AuthStore } from "./AuthStore.js";
+import { LocalAuthProvider } from "./LocalAuthProvider.js";
+import { TokenService } from "./TokenService.js";
+import { getOrCreateFileToken } from "./fileToken.js";
+const log = createLogger("auth");
+export function buildAuth(opts) {
+    const store = new AuthStore(opts.db);
+    const provider = new LocalAuthProvider(opts.vault);
+    const signingKey = resolveSigningKey(opts.dataDir);
+    const tokens = new TokenService(store, { signingKey });
+    const fileToken = getOrCreateFileToken(opts.dataDir);
+    log.info("auth initialized");
+    return { store, provider, tokens, fileToken, signingKey };
+}
+/**
+ * Signing key resolution order:
+ *   1. AUTH_SIGNING_KEY env var (hex-encoded, 32+ bytes) — production override
+ *   2. `{dataDir}/auth-signing-key` file (persisted, 0600) — created on first boot
+ *
+ * The key NEVER lives in the vault. Two reasons:
+ *   - Vault is locked until the user authenticates, but the signing
+ *     key must exist BEFORE that to verify their refresh token flow.
+ *   - Separating concerns: vault compromise leaks secrets; key file
+ *     compromise only lets an attacker mint tokens, which they still
+ *     can't use without a refresh + audit trail.
+ */
+function resolveSigningKey(dataDir) {
+    const envKey = process.env["AUTH_SIGNING_KEY"];
+    if (envKey && envKey.length >= 64) {
+        return Buffer.from(envKey, "hex");
+    }
+    const path = join(dataDir, "auth-signing-key");
+    if (existsSync(path)) {
+        const contents = readFileSync(path, "utf-8").trim();
+        if (contents.length >= 64)
+            return Buffer.from(contents, "hex");
+    }
+    const key = randomBytes(32);
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, key.toString("hex"), "utf-8");
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch { /* windows best effort */ }
+    log.info("auth signing key generated (stored at auth-signing-key, 0600)");
+    return key;
+}
+/**
+ * Utility: derive a sub-key for a specific purpose (HMAC for webhook
+ * tokens, etc.) so we don't reuse the primary signing key for
+ * multiple distinct uses.
+ */
+export function deriveSubKey(primary, label) {
+    return createHmac("sha256", primary).update(`daemora/${label}/v1`).digest();
+}
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAK1C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;AAsBjC,MAAM,UAAU,SAAS,CAAC,IAAmB;IAC3C,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC7B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC/C,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;IACnE,GAAG,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC1E,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,KAAa;IACzD,OAAO,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AAC9E,CAAC"}

package/dist/auth/jwt.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Minimal HS256 JWT — sign + verify, no dependency.
+ *
+ * We only ever issue HS256 tokens (symmetric, server holds the key).
+ * No RS256/ES256 code paths keeps the surface tiny and audit-friendly.
+ *
+ * Format: `<header-b64url>.<payload-b64url>.<sig-b64url>` where the sig
+ * is `HMAC-SHA256(header-b64url + "." + payload-b64url, key)`.
+ */
+export interface JwtClaims {
+    readonly sub: string;
+    readonly iat: number;
+    readonly exp: number;
+    readonly scopes?: readonly string[];
+    readonly deviceName?: string;
+    readonly [key: string]: unknown;
+}
+export declare function signJwt(payload: JwtClaims, key: Buffer | string): string;
+export type VerifyResult = {
+    ok: true;
+    claims: JwtClaims;
+} | {
+    ok: false;
+    reason: "malformed" | "bad-signature" | "expired" | "not-yet-valid";
+};
+export declare function verifyJwt(token: string, key: Buffer | string, now?: number): VerifyResult;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/auth/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/auth/jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAKD,wBAAgB,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAKxE;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GAC/B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,SAAS,GAAG,eAAe,CAAA;CAAE,CAAC;AAEvF,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,GAAE,MAAsC,GAAG,YAAY,CA2BxH"}

package/dist/auth/jwt.js

@@ -0,0 +1,67 @@
+/**
+ * Minimal HS256 JWT — sign + verify, no dependency.
+ *
+ * We only ever issue HS256 tokens (symmetric, server holds the key).
+ * No RS256/ES256 code paths keeps the surface tiny and audit-friendly.
+ *
+ * Format: `<header-b64url>.<payload-b64url>.<sig-b64url>` where the sig
+ * is `HMAC-SHA256(header-b64url + "." + payload-b64url, key)`.
+ */
+import { createHmac, timingSafeEqual } from "node:crypto";
+const HEADER = { alg: "HS256", typ: "JWT" };
+const HEADER_ENCODED = base64urlEncode(Buffer.from(JSON.stringify(HEADER)));
+export function signJwt(payload, key) {
+    const payloadEncoded = base64urlEncode(Buffer.from(JSON.stringify(payload)));
+    const data = `${HEADER_ENCODED}.${payloadEncoded}`;
+    const sig = hmac(data, key);
+    return `${data}.${base64urlEncode(sig)}`;
+}
+export function verifyJwt(token, key, now = Math.floor(Date.now() / 1000)) {
+    const parts = token.split(".");
+    if (parts.length !== 3)
+        return { ok: false, reason: "malformed" };
+    const [headerB64, payloadB64, sigB64] = parts;
+    // We only accept our exact header (alg pinned to HS256). Defends
+    // against the classic "alg: none" / alg-confusion attacks by never
+    // trusting whatever the token says.
+    if (headerB64 !== HEADER_ENCODED)
+        return { ok: false, reason: "malformed" };
+    const expectedSig = hmac(`${headerB64}.${payloadB64}`, key);
+    let actualSig;
+    try {
+        actualSig = Buffer.from(base64urlDecode(sigB64));
+    }
+    catch {
+        return { ok: false, reason: "malformed" };
+    }
+    if (actualSig.length !== expectedSig.length)
+        return { ok: false, reason: "bad-signature" };
+    if (!timingSafeEqual(actualSig, expectedSig))
+        return { ok: false, reason: "bad-signature" };
+    let claims;
+    try {
+        const raw = Buffer.from(base64urlDecode(payloadB64)).toString("utf-8");
+        claims = JSON.parse(raw);
+    }
+    catch {
+        return { ok: false, reason: "malformed" };
+    }
+    if (typeof claims.exp !== "number" || claims.exp <= now)
+        return { ok: false, reason: "expired" };
+    if (typeof claims.iat === "number" && claims.iat > now + 60)
+        return { ok: false, reason: "not-yet-valid" };
+    return { ok: true, claims };
+}
+// ── helpers ─────────────────────────────────────────────────────────────────
+function hmac(data, key) {
+    return createHmac("sha256", key).update(data).digest();
+}
+function base64urlEncode(buf) {
+    return buf.toString("base64").replace(/=+$/, "").replace(/\+/g, "-").replace(/\//g, "_");
+}
+function base64urlDecode(s) {
+    const pad = s.length % 4 === 0 ? 0 : 4 - (s.length % 4);
+    const padded = s + "=".repeat(pad);
+    return Buffer.from(padded.replace(/-/g, "+").replace(/_/g, "/"), "base64");
+}
+//# sourceMappingURL=jwt.js.map

package/dist/auth/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/auth/jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAW1D,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAW,CAAC;AACrD,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAE5E,MAAM,UAAU,OAAO,CAAC,OAAkB,EAAE,GAAoB;IAC9D,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,GAAG,cAAc,IAAI,cAAc,EAAE,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5B,OAAO,GAAG,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;AAC3C,CAAC;AAMD,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,GAAoB,EAAE,MAAc,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACxG,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAClE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,KAAiC,CAAC;IAE1E,iEAAiE;IACjE,mEAAmE;IACnE,oCAAoC;IACpC,IAAI,SAAS,KAAK,cAAc;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAE5E,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5D,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAAC,CAAC;IAC9G,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC3F,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAE5F,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,IAAI,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACjG,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,GAAG,GAAG,GAAG,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC3G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,+EAA+E;AAE/E,SAAS,IAAI,CAAC,IAAY,EAAE,GAAoB;IAC9C,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC7E,CAAC"}

package/dist/channels/BaseChannel.d.ts

@@ -0,0 +1,139 @@
+/**
+ * BaseChannel — abstract base class all channel implementations extend.
+ *
+ * Each channel bridges an external messaging platform (Telegram, Slack,
+ * Discord, etc.) into Daemora's task system. Subclasses implement the
+ * abstract methods; optional hooks have default no-ops so channels only
+ * override what they support.
+ */
+export interface ChannelMeta {
+    channel: string;
+    userId: string;
+    chatId?: string;
+    messageId?: string;
+    threadId?: string;
+    [key: string]: unknown;
+}
+/**
+ * An attachment a user sent with (or instead of) their text. Channels
+ * normalise their platform payloads into this shape so the agent can
+ * treat files uniformly. Either `url` (remote, must be downloadable by
+ * the agent runtime) or `path` (already on the local filesystem — used
+ * by the HTTP uploader) is always set; `mimeType` is used to decide
+ * whether to inline as an image, transcribe as audio, or extract text.
+ */
+export interface InboundAttachment {
+    readonly kind: "image" | "audio" | "video" | "document" | "file";
+    readonly url?: string;
+    readonly path?: string;
+    readonly mimeType: string;
+    readonly filename?: string;
+    readonly size?: number;
+    /**
+     * Optional authorisation header value needed to fetch `url`
+     * (Telegram bot token, Slack bearer, etc.). Channels that expose
+     * unauthenticated URLs leave this undefined.
+     */
+    readonly authHeader?: string;
+}
+export interface IncomingMessage {
+    channel: string;
+    userId: string;
+    text: string;
+    meta: ChannelMeta;
+    timestamp: number;
+    /** Files the user attached. Absent/empty = plain text message. */
+    attachments?: readonly InboundAttachment[];
+}
+export declare abstract class BaseChannel {
+    /** Unique channel identifier (e.g. "telegram", "discord"). */
+    abstract readonly id: string;
+    /** Human-readable display name. */
+    abstract readonly name: string;
+    /**
+     * Whether this channel can deliver streaming text by editing a message
+     * in place. Channels that override this to `true` must also implement
+     * `editMessage()` so the streaming loop can update the draft.
+     */
+    readonly supportsStreaming: boolean;
+    /**
+     * Hard message length cap. Streams that exceed this get chunked
+     * via `splitMessage()` instead of edited in place.
+     */
+    readonly maxMessageLength: number;
+    /** Start receiving messages (webhook, long-poll, or WS). */
+    abstract start(): Promise<void>;
+    /** Gracefully stop the channel and release resources. */
+    abstract stop(): Promise<void>;
+    /** Send a text reply back to the originating conversation. */
+    abstract sendReply(meta: ChannelMeta, text: string): Promise<void>;
+    /**
+     * Whether this channel can upload local files. Subclasses that
+     * override `sendFile()` should also flip this to `true` so the
+     * `send_file` tool can short-circuit with a clear error when the
+     * active channel doesn't support uploads.
+     */
+    readonly supportsFiles: boolean;
+    /**
+     * First-send-or-edit for streaming. The returned `messageId` is passed
+     * back on subsequent calls so we edit in place. Default implementation:
+     * call sendReply every time (no streaming) — override for real support.
+     */
+    sendOrEditStream(meta: ChannelMeta, text: string, prevMessageId: string | null): Promise<string | null>;
+    /** Send a typing indicator. */
+    sendTyping(_meta: ChannelMeta): Promise<void>;
+    /** React with an emoji on a message. */
+    sendReaction(_meta: ChannelMeta, _emoji: string): Promise<void>;
+    /** Edit a previously-sent message. */
+    editMessage(_meta: ChannelMeta, _messageId: string, _text: string): Promise<void>;
+    /** Delete a previously-sent message. */
+    deleteMessage(_meta: ChannelMeta, _messageId: string): Promise<void>;
+    /**
+     * Create a poll in the current chat. Channels that don't support
+     * polls (Slack threads, Line, generic webhooks) leave this default
+     * implementation in place — the `poll` tool turns the fallback into
+     * a clear "channel doesn't support polls" error.
+     */
+    sendPoll(_meta: ChannelMeta, _question: string, _options: readonly string[], _durationHours?: number): Promise<void>;
+    /**
+     * Upload a local file to the chat. Channels that support file
+     * attachments (Telegram, Discord, Slack, WhatsApp via Twilio media
+     * URL, email) override this; other channels leave the default
+     * "not supported" throw in place and the `send_file` tool surfaces a
+     * clean error.
+     */
+    sendFile(_meta: ChannelMeta, _filePath: string, _caption?: string): Promise<void>;
+    /** Override to route this channel to a specific model. */
+    getModel(): string | null;
+    /** Session key for this user on this channel. */
+    getSessionId(userId: string): string;
+    /** Override to enforce allowlists / blocklists. */
+    isAllowed(_userId: string): boolean;
+    /**
+     * If this channel receives messages via HTTP webhook, return the
+     * sub-path (without leading /webhooks/) it wants to receive POSTs on.
+     * The full mount path will be `/webhooks/<id>`. Return null for
+     * gateway/polling channels that don't need a route.
+     */
+    webhookPath(): string | null;
+    /**
+     * Handle an incoming webhook request. `rawBody` is the unparsed string
+     * body — needed for HMAC signature verification on some platforms.
+     * Channels should call `onMessage(msg)` internally when a valid message
+     * is extracted and send `res.status(200).end()` (or their own response).
+     */
+    handleWebhook(_req: WebhookRequest, res: WebhookResponse, _rawBody: string | null): Promise<void>;
+}
+export interface WebhookRequest {
+    readonly headers: Record<string, string | string[] | undefined>;
+    readonly body: unknown;
+    readonly method: string;
+    readonly query: Record<string, unknown>;
+}
+export interface WebhookResponse {
+    status(code: number): WebhookResponse;
+    json(body: unknown): WebhookResponse;
+    send(body: string): WebhookResponse;
+    end(body?: string): void;
+}
+//# sourceMappingURL=BaseChannel.d.ts.map

package/dist/channels/BaseChannel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseChannel.d.ts","sourceRoot":"","sources":["../../src/channels/BaseChannel.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;IACjE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,WAAW,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC5C;AAID,8BAAsB,WAAW;IAC/B,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAE7B,mCAAmC;IACnC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAE/B;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAS;IAE5C;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAQ;IAEzC,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAE/B,yDAAyD;IACzD,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAE9B,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAElE;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAS;IAExC;;;;OAIG;IACG,gBAAgB,CACpB,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GAAG,IAAI,GAC3B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAWzB,+BAA+B;IACzB,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAEnD,wCAAwC;IAClC,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAErE,sCAAsC;IAChC,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAEvF,wCAAwC;IAClC,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1E;;;;;OAKG;IACG,QAAQ,CACZ,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC;IAIhB;;;;;;OAMG;IACG,QAAQ,CACZ,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC;IAMhB,0DAA0D;IAC1D,QAAQ,IAAI,MAAM,GAAG,IAAI;IAIzB,iDAAiD;IACjD,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAIpC,mDAAmD;IACnD,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAMnC;;;;;OAKG;IACH,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B;;;;;OAKG;IACG,aAAa,CACjB,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,IAAI,CAAC;CAGjB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAChE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAAC;IACtC,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,eAAe,CAAC;IACrC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAAC;IACpC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B"}

package/dist/channels/BaseChannel.js

@@ -0,0 +1,103 @@
+/**
+ * BaseChannel — abstract base class all channel implementations extend.
+ *
+ * Each channel bridges an external messaging platform (Telegram, Slack,
+ * Discord, etc.) into Daemora's task system. Subclasses implement the
+ * abstract methods; optional hooks have default no-ops so channels only
+ * override what they support.
+ */
+// ── Base class ────────────────────────────────────────────────────
+export class BaseChannel {
+    /**
+     * Whether this channel can deliver streaming text by editing a message
+     * in place. Channels that override this to `true` must also implement
+     * `editMessage()` so the streaming loop can update the draft.
+     */
+    supportsStreaming = false;
+    /**
+     * Hard message length cap. Streams that exceed this get chunked
+     * via `splitMessage()` instead of edited in place.
+     */
+    maxMessageLength = 4000;
+    /**
+     * Whether this channel can upload local files. Subclasses that
+     * override `sendFile()` should also flip this to `true` so the
+     * `send_file` tool can short-circuit with a clear error when the
+     * active channel doesn't support uploads.
+     */
+    supportsFiles = false;
+    /**
+     * First-send-or-edit for streaming. The returned `messageId` is passed
+     * back on subsequent calls so we edit in place. Default implementation:
+     * call sendReply every time (no streaming) — override for real support.
+     */
+    async sendOrEditStream(meta, text, prevMessageId) {
+        if (prevMessageId && this.supportsStreaming) {
+            await this.editMessage(meta, prevMessageId, text);
+            return prevMessageId;
+        }
+        await this.sendReply(meta, text);
+        return null;
+    }
+    // ── Optional overrides (default no-ops) ───────────────────────
+    /** Send a typing indicator. */
+    async sendTyping(_meta) { }
+    /** React with an emoji on a message. */
+    async sendReaction(_meta, _emoji) { }
+    /** Edit a previously-sent message. */
+    async editMessage(_meta, _messageId, _text) { }
+    /** Delete a previously-sent message. */
+    async deleteMessage(_meta, _messageId) { }
+    /**
+     * Create a poll in the current chat. Channels that don't support
+     * polls (Slack threads, Line, generic webhooks) leave this default
+     * implementation in place — the `poll` tool turns the fallback into
+     * a clear "channel doesn't support polls" error.
+     */
+    async sendPoll(_meta, _question, _options, _durationHours) {
+        throw new Error(`Channel '${this.id}' does not support polls`);
+    }
+    /**
+     * Upload a local file to the chat. Channels that support file
+     * attachments (Telegram, Discord, Slack, WhatsApp via Twilio media
+     * URL, email) override this; other channels leave the default
+     * "not supported" throw in place and the `send_file` tool surfaces a
+     * clean error.
+     */
+    async sendFile(_meta, _filePath, _caption) {
+        throw new Error(`Channel '${this.id}' does not support file uploads`);
+    }
+    // ── Config helpers ────────────────────────────────────────────
+    /** Override to route this channel to a specific model. */
+    getModel() {
+        return null;
+    }
+    /** Session key for this user on this channel. */
+    getSessionId(userId) {
+        return `${this.id}:${userId}`;
+    }
+    /** Override to enforce allowlists / blocklists. */
+    isAllowed(_userId) {
+        return true;
+    }
+    // ── Webhook channels ──────────────────────────────────────────
+    /**
+     * If this channel receives messages via HTTP webhook, return the
+     * sub-path (without leading /webhooks/) it wants to receive POSTs on.
+     * The full mount path will be `/webhooks/<id>`. Return null for
+     * gateway/polling channels that don't need a route.
+     */
+    webhookPath() {
+        return null;
+    }
+    /**
+     * Handle an incoming webhook request. `rawBody` is the unparsed string
+     * body — needed for HMAC signature verification on some platforms.
+     * Channels should call `onMessage(msg)` internally when a valid message
+     * is extracted and send `res.status(200).end()` (or their own response).
+     */
+    async handleWebhook(_req, res, _rawBody) {
+        res.status(404).end();
+    }
+}
+//# sourceMappingURL=BaseChannel.js.map

package/dist/channels/BaseChannel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseChannel.js","sourceRoot":"","sources":["../../src/channels/BaseChannel.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA8CH,qEAAqE;AAErE,MAAM,OAAgB,WAAW;IAO/B;;;;OAIG;IACM,iBAAiB,GAAY,KAAK,CAAC;IAE5C;;;OAGG;IACM,gBAAgB,GAAW,IAAI,CAAC;IAWzC;;;;;OAKG;IACM,aAAa,GAAY,KAAK,CAAC;IAExC;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CACpB,IAAiB,EACjB,IAAY,EACZ,aAA4B;QAE5B,IAAI,aAAa,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5C,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;YAClD,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iEAAiE;IAEjE,+BAA+B;IAC/B,KAAK,CAAC,UAAU,CAAC,KAAkB,IAAkB,CAAC;IAEtD,wCAAwC;IACxC,KAAK,CAAC,YAAY,CAAC,KAAkB,EAAE,MAAc,IAAkB,CAAC;IAExE,sCAAsC;IACtC,KAAK,CAAC,WAAW,CAAC,KAAkB,EAAE,UAAkB,EAAE,KAAa,IAAkB,CAAC;IAE1F,wCAAwC;IACxC,KAAK,CAAC,aAAa,CAAC,KAAkB,EAAE,UAAkB,IAAkB,CAAC;IAE7E;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CACZ,KAAkB,EAClB,SAAiB,EACjB,QAA2B,EAC3B,cAAuB;QAEvB,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CACZ,KAAkB,EAClB,SAAiB,EACjB,QAAiB;QAEjB,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,EAAE,iCAAiC,CAAC,CAAC;IACxE,CAAC;IAED,iEAAiE;IAEjE,0DAA0D;IAC1D,QAAQ;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iDAAiD;IACjD,YAAY,CAAC,MAAc;QACzB,OAAO,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;IAChC,CAAC;IAED,mDAAmD;IACnD,SAAS,CAAC,OAAe;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iEAAiE;IAEjE;;;;;OAKG;IACH,WAAW;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,IAAoB,EACpB,GAAoB,EACpB,QAAuB;QAEvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC;CACF"}

package/dist/channels/BlueBubblesChannel.d.ts

@@ -0,0 +1,37 @@
+/**
+ * BlueBubblesChannel — iMessage relay through a BlueBubbles server.
+ *
+ * BlueBubbles runs on a dedicated Mac and exposes a Socket.IO (WS)
+ * event feed + REST API for iMessage. This channel:
+ *   • subscribes to `new-message` events via WS
+ *   • forwards inbound texts to the agent
+ *   • sends replies via POST /api/v1/message/text
+ *
+ * Setup:
+ *   1. Install BlueBubbles (https://bluebubbles.app) on a Mac.
+ *   2. Configure the server, note its URL and password.
+ *   3. Provide BLUEBUBBLES_URL and BLUEBUBBLES_PASSWORD.
+ */
+import { BaseChannel, type ChannelMeta, type IncomingMessage } from "./BaseChannel.js";
+export interface BlueBubblesChannelOpts {
+    readonly url: string;
+    readonly password: string;
+    readonly allowedUsers?: readonly string[];
+    readonly onMessage: (msg: IncomingMessage) => void;
+}
+export declare class BlueBubblesChannel extends BaseChannel {
+    readonly id: "bluebubbles";
+    readonly name: "BlueBubbles";
+    private readonly baseUrl;
+    private readonly password;
+    private readonly allowedUsers;
+    private readonly onMessage;
+    private ws;
+    constructor(opts: BlueBubblesChannelOpts);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    sendReply(meta: ChannelMeta, text: string): Promise<void>;
+    isAllowed(userId: string): boolean;
+    private handleMessage;
+}
+//# sourceMappingURL=BlueBubblesChannel.d.ts.map

package/dist/channels/BlueBubblesChannel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BlueBubblesChannel.d.ts","sourceRoot":"","sources":["../../src/channels/BlueBubblesChannel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAYvF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,IAAI,CAAC;CACpD;AAcD,qBAAa,kBAAmB,SAAQ,WAAW;IACjD,QAAQ,CAAC,EAAE,EAAG,aAAa,CAAU;IACrC,QAAQ,CAAC,IAAI,EAAG,aAAa,CAAU;IAEvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiC;IAE3D,OAAO,CAAC,EAAE,CAAuB;gBAErB,IAAI,EAAE,sBAAsB;IAQlC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAMZ,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB/D,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAK3C,OAAO,CAAC,aAAa;CA+BtB"}

package/dist/channels/BlueBubblesChannel.js

@@ -0,0 +1,115 @@
+/**
+ * BlueBubblesChannel — iMessage relay through a BlueBubbles server.
+ *
+ * BlueBubbles runs on a dedicated Mac and exposes a Socket.IO (WS)
+ * event feed + REST API for iMessage. This channel:
+ *   • subscribes to `new-message` events via WS
+ *   • forwards inbound texts to the agent
+ *   • sends replies via POST /api/v1/message/text
+ *
+ * Setup:
+ *   1. Install BlueBubbles (https://bluebubbles.app) on a Mac.
+ *   2. Configure the server, note its URL and password.
+ *   3. Provide BLUEBUBBLES_URL and BLUEBUBBLES_PASSWORD.
+ */
+import { createLogger } from "../util/logger.js";
+import { BaseChannel } from "./BaseChannel.js";
+const log = createLogger("channel.bluebubbles");
+export class BlueBubblesChannel extends BaseChannel {
+    id = "bluebubbles";
+    name = "BlueBubbles";
+    baseUrl;
+    password;
+    allowedUsers;
+    onMessage;
+    ws = null;
+    constructor(opts) {
+        super();
+        this.baseUrl = opts.url.replace(/\/$/, "");
+        this.password = opts.password;
+        this.allowedUsers = new Set((opts.allowedUsers ?? []).map((a) => a.toLowerCase()));
+        this.onMessage = opts.onMessage;
+    }
+    async start() {
+        const { WebSocket } = (await import("ws"));
+        const wsUrl = this.baseUrl.replace(/^http/i, "ws") +
+            `/api/v1/socket.io/?password=${encodeURIComponent(this.password)}&transport=websocket`;
+        this.ws = new WebSocket(wsUrl);
+        this.ws.on("open", () => log.info({ url: this.baseUrl }, "bluebubbles connected"));
+        this.ws.on("message", (raw) => this.handleMessage(raw.toString()));
+        this.ws.on("error", (err) => log.error({ err: err.message }, "bluebubbles ws error"));
+        this.ws.on("close", () => {
+            log.info("bluebubbles disconnected");
+        });
+    }
+    async stop() {
+        this.ws?.close();
+        this.ws = null;
+        log.info("bluebubbles channel stopped");
+    }
+    async sendReply(meta, text) {
+        const chatGuid = meta.chatGuid ?? meta.chatId;
+        if (!chatGuid)
+            throw new Error("BlueBubbles reply needs chatGuid in channelMeta");
+        const res = await fetch(`${this.baseUrl}/api/v1/message/text`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Basic ${Buffer.from(`:${this.password}`).toString("base64")}`,
+            },
+            body: JSON.stringify({
+                chatGuid,
+                message: text,
+                method: "private-api",
+            }),
+        });
+        if (!res.ok) {
+            const body = await res.text().catch(() => "");
+            log.error({ status: res.status, body }, "bluebubbles send failed");
+        }
+    }
+    isAllowed(userId) {
+        if (this.allowedUsers.size === 0)
+            return true;
+        return this.allowedUsers.has(userId.toLowerCase());
+    }
+    handleMessage(raw) {
+        let msg;
+        try {
+            msg = JSON.parse(raw);
+        }
+        catch {
+            return;
+        }
+        if (msg.event !== "new-message")
+            return;
+        const data = msg.data;
+        if (!data || data.isFromMe)
+            return;
+        const sender = data.handle?.id ?? data.chats?.[0]?.participants?.[0]?.id;
+        if (!sender)
+            return;
+        if (!this.isAllowed(sender))
+            return;
+        const input = data.text?.trim();
+        if (!input)
+            return;
+        const chatGuid = data.chats?.[0]?.guid;
+        const incoming = {
+            channel: this.id,
+            userId: sender,
+            text: input,
+            meta: {
+                channel: this.id,
+                userId: sender,
+                sender,
+                chatGuid,
+                chatId: chatGuid ?? sender,
+                ...(data.guid ? { messageId: data.guid, messageGuid: data.guid } : {}),
+            },
+            timestamp: Date.now(),
+        };
+        this.onMessage(incoming);
+    }
+}
+//# sourceMappingURL=BlueBubblesChannel.js.map

package/dist/channels/BlueBubblesChannel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BlueBubblesChannel.js","sourceRoot":"","sources":["../../src/channels/BlueBubblesChannel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,WAAW,EAA0C,MAAM,kBAAkB,CAAC;AAEvF,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AA6BhD,MAAM,OAAO,kBAAmB,SAAQ,WAAW;IACxC,EAAE,GAAG,aAAsB,CAAC;IAC5B,IAAI,GAAG,aAAsB,CAAC;IAEtB,OAAO,CAAS;IAChB,QAAQ,CAAS;IACjB,YAAY,CAAsB;IAClC,SAAS,CAAiC;IAEnD,EAAE,GAAkB,IAAI,CAAC;IAEjC,YAAY,IAA4B;QACtC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAExC,CAAC;QACF,MAAM,KAAK,GACT,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;YACpC,+BAA+B,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAEzF,IAAI,CAAC,EAAE,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;QAE/B,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC1C,CAAC;IAEQ,KAAK,CAAC,SAAS,CAAC,IAAiB,EAAE,IAAY;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAA8B,IAAK,IAAI,CAAC,MAA6B,CAAC;QAC5F,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAClF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,sBAAsB,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;aAC9E;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,QAAQ;gBACR,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,aAAa;aACtB,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAEQ,SAAS,CAAC,MAAc;QAC/B,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACrD,CAAC;IAEO,aAAa,CAAC,GAAW;QAC/B,IAAI,GAAyC,CAAC;QAC9C,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QAChD,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa;YAAE,OAAO;QACxC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACzE,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAAE,OAAO;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QAEvC,MAAM,QAAQ,GAAoB;YAChC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,KAAK;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,MAAM,EAAE,MAAM;gBACd,MAAM;gBACN,QAAQ;gBACR,MAAM,EAAE,QAAQ,IAAI,MAAM;gBAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvE;YACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;CACF"}