
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
@agentick/connector-imessage
Advanced tools
iMessage connector for Agentick — bridge iMessage to agent sessions (macOS only)
iMessage platform adapter for the Agentick connector system. macOS only.
Polls ~/Library/Messages/chat.db for incoming messages and sends responses
via AppleScript through Messages.app.
pnpm add @agentick/connector-imessage
Requires Node 22+ (node:sqlite built-in).
Grant Full Disk Access to your terminal application in System Settings >
Privacy & Security > Full Disk Access. Without this, the agent cannot read
chat.db.
import { createConnector } from "@agentick/connector";
import { IMessagePlatform } from "@agentick/connector-imessage";
const connector = createConnector(
client,
new IMessagePlatform({
handle: "+15551234567",
}),
{
sessionId: "main",
contentPolicy: "summarized",
deliveryStrategy: "on-idle",
},
);
await connector.start();
interface IMessageConnectorOptions {
handle: string;
pollIntervalMs?: number;
sendDelay?: number;
dbPath?: string;
}
handle — Phone number (with country code) or email address to watch.
pollIntervalMs — How often to poll chat.db. Default: 2000ms.
sendDelay — Delay between sending multiple messages to avoid rate
limiting by Messages.app. Default: 500ms.
dbPath — Custom path to chat.db (for testing).
Inbound: Polls chat.db using node:sqlite. Tracks a ROWID watermark so
each poll only returns new messages. Filters by handle and is_from_me = 0.
Poll errors (e.g., SQLITE_BUSY when Messages.app holds a lock) are caught
and retried on the next interval.
Outbound: Sends via osascript driving Messages.app. Text is escaped to
prevent AppleScript injection.
Confirmations: Text-based only. Sends a prompt like "Allow shell to execute? Reply yes/no" and parses the next inbound message as the response. Natural language is supported — "yes but only in /tmp" is approved with the full text as reason.
{
contentPolicy: "summarized", // clean summaries, no raw tool blocks
deliveryStrategy: "on-idle", // one polished message per execution
}
iMessage works best with "on-idle" delivery — one complete, well-composed
message rather than a stream of fragments.
export { IMessagePlatform, type IMessageConnectorOptions } from "./imessage-platform.js";
export { IMessageDB, type IMessageRow } from "./imessage-db.js";
export { sendIMessage, buildAppleScript } from "./imessage-send.js";
FAQs
iMessage connector for Agentick — bridge iMessage to agent sessions (macOS only)
We found that @agentick/connector-imessage demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.