
Research
/Security News
Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages
Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.
MacBridge is a TypeScript-friendly native macOS automation adapter.
It provides a Swift native runtime plus a TypeScript package for agent systems that need to inspect displays, windows, permissions, screenshots, accessibility state, typed actions, observations, and evidence artifacts.
MacBridge is public-alpha software. It already does useful native work, but the higher-level SDK shape is still evolving before the first stable release.
npx macbridge
npx macbridge --help
npx macbridge permissions check
npx macbridge displays list
MacBridge currently targets Apple Silicon Macs only. Running npx macbridge
uses the packaged signed .pkg installer, then opens
/Applications/MacBridge.app so macOS permission prompts attach to the stable
app identity.
bun add macbridge
Double-clicking the installed app opens the MacBridge shell and permission
surface. After installation, developer workflows can use the macbridge
command.
npx macbridge windows list
npx macbridge capture display main --png -o screenshot.png
TypeScript usage:
import { createControlPlane, runJSON, type Json } from "macbridge";
const displays = runJSON<Json>(["displays", "list"]);
const mac = createControlPlane();
const permissions = mac.permissions({ require: false });
Source-owned TypeScript commands:
macbridge observe window <wid> --display-screenshot main --ax --out tmp/observations/window
macbridge act action.json
macbridge verify expectation.json
macbridge agent models --type text --provider openai --json
macbridge prefs init --preferred-screen left
macbridge terminal start --screen left --session macbridge
macbridge terminal send "echo hello" --session macbridge
Workspace preferences live at ~/MacBridge/preferences.toml. The terminal lane
uses a read-only visible Ghostty client backed by tmux so MacBridge can drive a
dedicated screen while the human keeps working elsewhere.
Architecture and contract decisions live under docs/development/rfcs.
Current RFC index:
Active RFCs:
The current public TypeScript surface includes:
run, runJSONdefaultBin, packagedBin, resolveDefaultBinMacBridge and the ControlPlane protocolagent, observe, act, and verifyMacBridge is useful today for deterministic macOS automation and local agent experiments. The next major product work is to make the TypeScript API more domain-shaped, with stable operations for displays, windows, capture, observation, permissions, and actions.
MIT
FAQs
TypeScript-friendly native macOS automation adapter.
The npm package macbridge receives a total of 2 weekly downloads. As such, macbridge popularity was classified as not popular.
We found that macbridge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.

Security News
Rolldown paused Rust React Compiler integration after a 5MB binary size increase raised concerns about shipping React-specific code to all Vite users.

Security News
/Research
Mini Shai-Hulud expands into the Go ecosystem after hitting LeoPlatform npm packages and targeting GitHub Actions workflows.