@celestial-community/baileys 0.0.1-security → 1.0.0

package/lib/Utils/process-message.js

@@ -0,0 +1,423 @@
+'use strict'
+Object.defineProperty(exports, '__esModule', { value: true })
+exports.decryptPollVote =
+    exports.getChatId =
+    exports.shouldIncrementChatUnread =
+    exports.isRealMessage =
+    exports.cleanMessage =
+        void 0
+const WAProto_1 = require('../../WAProto')
+const Types_1 = require('../Types')
+const messages_1 = require('../Utils/messages')
+const WABinary_1 = require('../WABinary')
+const crypto_1 = require('./crypto')
+const generics_1 = require('./generics')
+const history_1 = require('./history')
+const REAL_MSG_STUB_TYPES = new Set([
+    Types_1.WAMessageStubType.CALL_MISSED_GROUP_VIDEO,
+    Types_1.WAMessageStubType.CALL_MISSED_GROUP_VOICE,
+    Types_1.WAMessageStubType.CALL_MISSED_VIDEO,
+    Types_1.WAMessageStubType.CALL_MISSED_VOICE
+])
+const REAL_MSG_REQ_ME_STUB_TYPES = new Set([Types_1.WAMessageStubType.GROUP_PARTICIPANT_ADD])
+/** Cleans a received message to further processing */
+const cleanMessage = (message, meId) => {
+    // ensure remoteJid and participant doesn't have device or agent in it
+    message.key.remoteJid = (0, WABinary_1.jidNormalizedUser)(message.key.remoteJid)
+    message.key.participant = message.key.participant
+        ? (0, WABinary_1.jidNormalizedUser)(message.key.participant)
+        : undefined
+    const content = (0, messages_1.normalizeMessageContent)(message.message)
+    // if the message has a reaction, ensure fromMe & remoteJid are from our perspective
+    if (content === null || content === void 0 ? void 0 : content.reactionMessage) {
+        normaliseKey(content.reactionMessage.key)
+    }
+    if (content === null || content === void 0 ? void 0 : content.pollUpdateMessage) {
+        normaliseKey(content.pollUpdateMessage.pollCreationMessageKey)
+    }
+    function normaliseKey(msgKey) {
+        // if the reaction is from another user
+        // we've to correctly map the key to this user's perspective
+        if (!message.key.fromMe) {
+            // if the sender believed the message being reacted to is not from them
+            // we've to correct the key to be from them, or some other participant
+            msgKey.fromMe = !msgKey.fromMe
+                ? (0, WABinary_1.areJidsSameUser)(msgKey.participant || msgKey.remoteJid, meId)
+                : // if the message being reacted to, was from them
+                  // fromMe automatically becomes false
+                  false
+            // set the remoteJid to being the same as the chat the message came from
+            msgKey.remoteJid = message.key.remoteJid
+            // set participant of the message
+            msgKey.participant = msgKey.participant || message.key.participant
+        }
+    }
+}
+exports.cleanMessage = cleanMessage
+const isRealMessage = (message, meId) => {
+    var _a
+    const normalizedContent = (0, messages_1.normalizeMessageContent)(message.message)
+    const hasSomeContent = !!(0, messages_1.getContentType)(normalizedContent)
+    return (
+        (!!normalizedContent ||
+            REAL_MSG_STUB_TYPES.has(message.messageStubType) ||
+            (REAL_MSG_REQ_ME_STUB_TYPES.has(message.messageStubType) &&
+                ((_a = message.messageStubParameters) === null || _a === void 0
+                    ? void 0
+                    : _a.some((p) => (0, WABinary_1.areJidsSameUser)(meId, p))))) &&
+        hasSomeContent &&
+        !(normalizedContent === null || normalizedContent === void 0
+            ? void 0
+            : normalizedContent.protocolMessage) &&
+        !(normalizedContent === null || normalizedContent === void 0
+            ? void 0
+            : normalizedContent.reactionMessage) &&
+        !(normalizedContent === null || normalizedContent === void 0
+            ? void 0
+            : normalizedContent.pollUpdateMessage)
+    )
+}
+exports.isRealMessage = isRealMessage
+const shouldIncrementChatUnread = (message) => !message.key.fromMe && !message.messageStubType
+exports.shouldIncrementChatUnread = shouldIncrementChatUnread
+/**
+ * Get the ID of the chat from the given key.
+ * Typically -- that'll be the remoteJid, but for broadcasts, it'll be the participant
+ */
+const getChatId = ({ remoteJid, participant, fromMe }) => {
+    if (
+        (0, WABinary_1.isJidBroadcast)(remoteJid) &&
+        !(0, WABinary_1.isJidStatusBroadcast)(remoteJid) &&
+        !fromMe
+    ) {
+        return participant
+    }
+    return remoteJid
+}
+exports.getChatId = getChatId
+/**
+ * Decrypt a poll vote
+ * @param vote encrypted vote
+ * @param ctx additional info about the poll required for decryption
+ * @returns list of SHA256 options
+ */
+function decryptPollVote(
+    { encPayload, encIv },
+    { pollCreatorJid, pollMsgId, pollEncKey, voterJid }
+) {
+    const sign = Buffer.concat([
+        toBinary(pollMsgId),
+        toBinary(pollCreatorJid),
+        toBinary(voterJid),
+        toBinary('Poll Vote'),
+        new Uint8Array([1])
+    ])
+    const key0 = (0, crypto_1.hmacSign)(pollEncKey, new Uint8Array(32), 'sha256')
+    const decKey = (0, crypto_1.hmacSign)(sign, key0, 'sha256')
+    const aad = toBinary(`${pollMsgId}\u0000${voterJid}`)
+    const decrypted = (0, crypto_1.aesDecryptGCM)(encPayload, decKey, encIv, aad)
+    return WAProto_1.proto.Message.PollVoteMessage.decode(decrypted)
+    function toBinary(txt) {
+        return Buffer.from(txt)
+    }
+}
+exports.decryptPollVote = decryptPollVote
+const processMessage = async (
+    message,
+    { shouldProcessHistoryMsg, ev, creds, keyStore, logger, options, getMessage }
+) => {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k
+    const meId = creds.me.id
+    const { accountSettings } = creds
+    const chat = { id: (0, WABinary_1.jidNormalizedUser)((0, exports.getChatId)(message.key)) }
+    const isRealMsg = (0, exports.isRealMessage)(message, meId)
+    if (isRealMsg) {
+        chat.conversationTimestamp = (0, generics_1.toNumber)(message.messageTimestamp)
+        // only increment unread count if not CIPHERTEXT and from another person
+        if ((0, exports.shouldIncrementChatUnread)(message)) {
+            chat.unreadCount = (chat.unreadCount || 0) + 1
+        }
+    }
+    const content = (0, messages_1.normalizeMessageContent)(message.message)
+    // unarchive chat if it's a real message, or someone reacted to our message
+    // and we've the unarchive chats setting on
+    if (
+        (isRealMsg ||
+            ((_b =
+                (_a = content === null || content === void 0 ? void 0 : content.reactionMessage) ===
+                    null || _a === void 0
+                    ? void 0
+                    : _a.key) === null || _b === void 0
+                ? void 0
+                : _b.fromMe)) &&
+        (accountSettings === null || accountSettings === void 0
+            ? void 0
+            : accountSettings.unarchiveChats)
+    ) {
+        chat.archived = false
+        chat.readOnly = false
+    }
+    const protocolMsg = content === null || content === void 0 ? void 0 : content.protocolMessage
+    if (protocolMsg) {
+        switch (protocolMsg.type) {
+            case WAProto_1.proto.Message.ProtocolMessage.Type.HISTORY_SYNC_NOTIFICATION:
+                const histNotification = protocolMsg.historySyncNotification
+                const process = shouldProcessHistoryMsg
+                const isLatest = !((_c = creds.processedHistoryMessages) === null || _c === void 0
+                    ? void 0
+                    : _c.length)
+                logger === null || logger === void 0
+                    ? void 0
+                    : logger.info(
+                          {
+                              histNotification,
+                              process,
+                              id: message.key.id,
+                              isLatest
+                          },
+                          'got history notification'
+                      )
+                if (process) {
+                    // ON_DEMAND (peer data request) must not count as a processed history batch
+                    if (
+                        histNotification.syncType !==
+                        WAProto_1.proto.HistorySync.HistorySyncType.ON_DEMAND
+                    ) {
+                        ev.emit('creds.update', {
+                            processedHistoryMessages: [
+                                ...(creds.processedHistoryMessages || []),
+                                { key: message.key, messageTimestamp: message.messageTimestamp }
+                            ]
+                        })
+                    }
+                    const data = await (0, history_1.downloadAndProcessHistorySyncNotification)(
+                        histNotification,
+                        options
+                    )
+                    ev.emit('messaging-history.set', {
+                        ...data,
+                        isLatest:
+                            histNotification.syncType !==
+                            WAProto_1.proto.HistorySync.HistorySyncType.ON_DEMAND
+                                ? isLatest
+                                : undefined,
+                        chunkOrder: histNotification.chunkOrder,
+                        peerDataRequestSessionId: histNotification.peerDataRequestSessionId
+                    })
+                }
+                break
+            case WAProto_1.proto.Message.ProtocolMessage.Type.APP_STATE_SYNC_KEY_SHARE:
+                const keys = protocolMsg.appStateSyncKeyShare.keys
+                if (keys === null || keys === void 0 ? void 0 : keys.length) {
+                    let newAppStateSyncKeyId = ''
+                    await keyStore.transaction(async () => {
+                        const newKeys = []
+                        for (const { keyData, keyId } of keys) {
+                            const strKeyId = Buffer.from(keyId.keyId).toString('base64')
+                            newKeys.push(strKeyId)
+                            await keyStore.set({ 'app-state-sync-key': { [strKeyId]: keyData } })
+                            newAppStateSyncKeyId = strKeyId
+                        }
+                        logger === null || logger === void 0
+                            ? void 0
+                            : logger.info(
+                                  { newAppStateSyncKeyId, newKeys },
+                                  'injecting new app state sync keys'
+                              )
+                    })
+                    ev.emit('creds.update', { myAppStateKeyId: newAppStateSyncKeyId })
+                } else {
+                    logger === null || logger === void 0
+                        ? void 0
+                        : logger.info({ protocolMsg }, 'recv app state sync with 0 keys')
+                }
+                break
+            case WAProto_1.proto.Message.ProtocolMessage.Type.REVOKE:
+                ev.emit('messages.update', [
+                    {
+                        key: {
+                            ...message.key,
+                            id: protocolMsg.key.id
+                        },
+                        update: {
+                            message: null,
+                            messageStubType: Types_1.WAMessageStubType.REVOKE,
+                            key: message.key
+                        }
+                    }
+                ])
+                break
+            case WAProto_1.proto.Message.ProtocolMessage.Type.EPHEMERAL_SETTING:
+                Object.assign(chat, {
+                    ephemeralSettingTimestamp: (0, generics_1.toNumber)(message.messageTimestamp),
+                    ephemeralExpiration: protocolMsg.ephemeralExpiration || null
+                })
+                break
+            case WAProto_1.proto.Message.ProtocolMessage.Type
+                .PEER_DATA_OPERATION_REQUEST_RESPONSE_MESSAGE:
+                const response = protocolMsg.peerDataOperationRequestResponseMessage
+                if (response) {
+                    const { peerDataOperationResult } = response
+                    for (const result of peerDataOperationResult) {
+                        const { placeholderMessageResendResponse: retryResponse } = result
+                        if (retryResponse) {
+                            const webMessageInfo = WAProto_1.proto.WebMessageInfo.decode(
+                                retryResponse.webMessageInfoBytes
+                            )
+                            ev.emit('messages.update', [
+                                {
+                                    key: webMessageInfo.key,
+                                    update: { message: webMessageInfo.message }
+                                }
+                            ])
+                        }
+                    }
+                }
+                break
+        }
+    } else if (content === null || content === void 0 ? void 0 : content.reactionMessage) {
+        const reaction = {
+            ...content.reactionMessage,
+            key: message.key
+        }
+        ev.emit('messages.reaction', [
+            {
+                reaction,
+                key: content.reactionMessage.key
+            }
+        ])
+    } else if (message.messageStubType) {
+        const jid = message.key.remoteJid
+        //let actor = whatsappID (message.participant)
+        let participants
+        const emitParticipantsUpdate = (action) =>
+            ev.emit('group-participants.update', {
+                id: jid,
+                author: message.participant,
+                participants,
+                action
+            })
+        const emitGroupUpdate = (update) => {
+            var _a
+            ev.emit('groups.update', [
+                {
+                    id: jid,
+                    ...update,
+                    author: (_a = message.participant) !== null && _a !== void 0 ? _a : undefined
+                }
+            ])
+        }
+        const participantsIncludesMe = () =>
+            participants.find((jid) => (0, WABinary_1.areJidsSameUser)(meId, jid))
+        switch (message.messageStubType) {
+            case Types_1.WAMessageStubType.GROUP_PARTICIPANT_LEAVE:
+            case Types_1.WAMessageStubType.GROUP_PARTICIPANT_REMOVE:
+                participants = message.messageStubParameters || []
+                emitParticipantsUpdate('remove')
+                // mark the chat read only if you left the group
+                if (participantsIncludesMe()) {
+                    chat.readOnly = true
+                }
+                break
+            case Types_1.WAMessageStubType.GROUP_PARTICIPANT_ADD:
+            case Types_1.WAMessageStubType.GROUP_PARTICIPANT_INVITE:
+            case Types_1.WAMessageStubType.GROUP_PARTICIPANT_ADD_REQUEST_JOIN:
+                participants = message.messageStubParameters || []
+                if (participantsIncludesMe()) {
+                    chat.readOnly = false
+                }
+                emitParticipantsUpdate('add')
+                break
+            case Types_1.WAMessageStubType.GROUP_PARTICIPANT_DEMOTE:
+                participants = message.messageStubParameters || []
+                emitParticipantsUpdate('demote')
+                break
+            case Types_1.WAMessageStubType.GROUP_PARTICIPANT_PROMOTE:
+                participants = message.messageStubParameters || []
+                emitParticipantsUpdate('promote')
+                break
+            case Types_1.WAMessageStubType.GROUP_CHANGE_ANNOUNCE:
+                const announceValue =
+                    (_d = message.messageStubParameters) === null || _d === void 0 ? void 0 : _d[0]
+                emitGroupUpdate({ announce: announceValue === 'true' || announceValue === 'on' })
+                break
+            case Types_1.WAMessageStubType.GROUP_CHANGE_RESTRICT:
+                const restrictValue =
+                    (_e = message.messageStubParameters) === null || _e === void 0 ? void 0 : _e[0]
+                emitGroupUpdate({ restrict: restrictValue === 'true' || restrictValue === 'on' })
+                break
+            case Types_1.WAMessageStubType.GROUP_CHANGE_SUBJECT:
+                const name =
+                    (_f = message.messageStubParameters) === null || _f === void 0 ? void 0 : _f[0]
+                chat.name = name
+                emitGroupUpdate({ subject: name })
+                break
+            case Types_1.WAMessageStubType.GROUP_CHANGE_INVITE_LINK:
+                const code =
+                    (_g = message.messageStubParameters) === null || _g === void 0 ? void 0 : _g[0]
+                emitGroupUpdate({ inviteCode: code })
+                break
+            case Types_1.WAMessageStubType.GROUP_MEMBER_ADD_MODE:
+                const memberAddValue =
+                    (_h = message.messageStubParameters) === null || _h === void 0 ? void 0 : _h[0]
+                emitGroupUpdate({ memberAddMode: memberAddValue === 'all_member_add' })
+                break
+            case Types_1.WAMessageStubType.GROUP_MEMBERSHIP_JOIN_APPROVAL_MODE:
+                const approvalMode =
+                    (_j = message.messageStubParameters) === null || _j === void 0 ? void 0 : _j[0]
+                emitGroupUpdate({ joinApprovalMode: approvalMode === 'on' })
+                break
+        }
+    } else if (content === null || content === void 0 ? void 0 : content.pollUpdateMessage) {
+        const creationMsgKey = content.pollUpdateMessage.pollCreationMessageKey
+        // we need to fetch the poll creation message to get the poll enc key
+        const pollMsg = await getMessage(creationMsgKey)
+        if (pollMsg) {
+            const meIdNormalised = (0, WABinary_1.jidNormalizedUser)(meId)
+            const pollCreatorJid = (0, generics_1.getKeyAuthor)(creationMsgKey, meIdNormalised)
+            const voterJid = (0, generics_1.getKeyAuthor)(message.key, meIdNormalised)
+            const pollEncKey =
+                (_k = pollMsg.messageContextInfo) === null || _k === void 0
+                    ? void 0
+                    : _k.messageSecret
+            try {
+                const voteMsg = decryptPollVote(content.pollUpdateMessage.vote, {
+                    pollEncKey,
+                    pollCreatorJid,
+                    pollMsgId: creationMsgKey.id,
+                    voterJid
+                })
+                ev.emit('messages.update', [
+                    {
+                        key: creationMsgKey,
+                        update: {
+                            pollUpdates: [
+                                {
+                                    pollUpdateMessageKey: message.key,
+                                    vote: voteMsg,
+                                    senderTimestampMs:
+                                        content.pollUpdateMessage.senderTimestampMs.toNumber()
+                                }
+                            ]
+                        }
+                    }
+                ])
+            } catch (err) {
+                logger === null || logger === void 0
+                    ? void 0
+                    : logger.warn({ err, creationMsgKey }, 'failed to decrypt poll vote')
+            }
+        } else {
+            logger === null || logger === void 0
+                ? void 0
+                : logger.warn(
+                      { creationMsgKey },
+                      'poll creation message not found, cannot decrypt update'
+                  )
+        }
+    }
+    if (Object.keys(chat).length > 1) {
+        ev.emit('chats.update', [chat])
+    }
+}
+exports.default = processMessage

package/lib/Utils/rate-limiter.js

@@ -0,0 +1,232 @@
+'use strict'
+Object.defineProperty(exports, '__esModule', { value: true })
+exports.RateLimiter = void 0
+
+/**
+ * @file rate-limiter.js
+ * @description Human-like rate limiting for WhatsApp message sending.
+ *   Prevents ban by enforcing per-minute/hour/day limits with gaussian jitter.
+ *   Ported from baileys-antiban to CJS for bilis.
+ * @author Denzy ZeroDay (port), Kobus Wentzel (original)
+ */
+
+const MS_PER_MINUTE = 60000
+const MS_PER_HOUR = 3600000
+const MS_PER_DAY = 86400000
+const BURST_RESET_MS = 30000
+const IDENTICAL_WINDOW_MS = 3600000
+
+const DEFAULT_CONFIG = {
+    maxPerMinute: 8,
+    maxPerHour: 200,
+    maxPerDay: 1500,
+    minDelayMs: 1500,
+    maxDelayMs: 5000,
+    newChatDelayMs: 3000,
+    maxIdenticalMessages: 3,
+    burstAllowance: 3,
+    identicalMessageWindowMs: IDENTICAL_WINDOW_MS
+}
+
+class RateLimiter {
+    constructor(config = {}) {
+        this.config = { ...DEFAULT_CONFIG, ...config }
+        this.originalConfig = { ...this.config }
+        this.messages = []
+        this.identicalCount = new Map()
+        this.knownChats = new Set()
+        this.burstCount = 0
+        this.lastMessageTime = 0
+    }
+
+    /**
+     * Calculate delay before next message can be sent.
+     * Returns 0 if ok, -1 if blocked (daily/identical limit).
+     */
+    async getDelay(recipient, content) {
+        const now = Date.now()
+        this._cleanup(now)
+        const contentHash = this._hash(content)
+
+        // Daily limit
+        const dayMessages = this.messages.filter((m) => now - m.timestamp < MS_PER_DAY)
+        if (dayMessages.length >= this.config.maxPerDay) return -1
+
+        // Hourly limit
+        const hourMessages = this.messages.filter((m) => now - m.timestamp < MS_PER_HOUR)
+        if (hourMessages.length >= this.config.maxPerHour) {
+            hourMessages.sort((a, b) => a.timestamp - b.timestamp)
+            const oldest = hourMessages[0]
+            return Math.max(oldest.timestamp + MS_PER_HOUR - now, MS_PER_MINUTE)
+        }
+
+        // Per-minute limit
+        const minuteMessages = this.messages.filter((m) => now - m.timestamp < MS_PER_MINUTE)
+        if (minuteMessages.length >= this.config.maxPerMinute) {
+            minuteMessages.sort((a, b) => a.timestamp - b.timestamp)
+            const oldest = minuteMessages[0]
+            return Math.max(oldest.timestamp + MS_PER_MINUTE - now, 1000)
+        }
+
+        // Identical message spam check
+        const tracker = this.identicalCount.get(contentHash)
+        if (tracker && now - tracker.firstSeen < this.config.identicalMessageWindowMs) {
+            if (tracker.count >= this.config.maxIdenticalMessages) return -1
+        }
+
+        // Human-like delay calculation
+        let delay = 0
+        if (this.burstCount < this.config.burstAllowance) {
+            this.burstCount++
+            delay = this._jitter(this.config.minDelayMs * 0.5, this.config.minDelayMs)
+        } else {
+            delay = this._jitter(this.config.minDelayMs, this.config.maxDelayMs)
+        }
+
+        // Extra delay for new chats
+        if (!this.knownChats.has(recipient)) {
+            delay += this._jitter(this.config.newChatDelayMs * 0.5, this.config.newChatDelayMs)
+        }
+
+        // Minimum time since last message
+        const timeSinceLast = now - this.lastMessageTime
+        if (timeSinceLast < this.config.minDelayMs) {
+            delay = Math.max(delay, this.config.minDelayMs - timeSinceLast)
+        }
+
+        // Typing simulation delay based on content length
+        const typingDelay = Math.min(content.length * 30, 3000)
+        delay += this._jitter(typingDelay * 0.5, typingDelay)
+
+        return Math.round(delay)
+    }
+
+    /**
+     * Record a sent message
+     */
+    record(recipient, content) {
+        const now = Date.now()
+        const contentHash = this._hash(content)
+
+        if (now - this.lastMessageTime > BURST_RESET_MS) this.burstCount = 0
+
+        this.messages.push({ timestamp: now, recipient, contentHash })
+        this.knownChats.add(recipient)
+        this.lastMessageTime = now
+
+        const tracker = this.identicalCount.get(contentHash)
+        if (tracker) {
+            if (now - tracker.firstSeen < this.config.identicalMessageWindowMs) {
+                tracker.count++
+                tracker.lastSeen = now
+            } else {
+                this.identicalCount.set(contentHash, { count: 1, firstSeen: now, lastSeen: now })
+            }
+        } else {
+            this.identicalCount.set(contentHash, { count: 1, firstSeen: now, lastSeen: now })
+        }
+    }
+
+    /**
+     * Get current stats
+     */
+    getStats() {
+        const now = Date.now()
+        this._cleanup(now)
+        return {
+            lastMinute: this.messages.filter((m) => now - m.timestamp < MS_PER_MINUTE).length,
+            lastHour: this.messages.filter((m) => now - m.timestamp < MS_PER_HOUR).length,
+            lastDay: this.messages.filter((m) => now - m.timestamp < MS_PER_DAY).length,
+            limits: {
+                perMinute: this.config.maxPerMinute,
+                perHour: this.config.maxPerHour,
+                perDay: this.config.maxPerDay
+            },
+            knownChats: this.knownChats.size,
+            currentFactor: this.getCurrentFactor()
+        }
+    }
+
+    /**
+     * Scale rate limits by factor (0.1–1.0)
+     */
+    adaptLimits(factor) {
+        const f = Math.max(0.1, Math.min(1.0, factor))
+        this.config.maxPerMinute = Math.max(1, Math.floor(this.originalConfig.maxPerMinute * f))
+        this.config.maxPerHour = Math.max(5, Math.floor(this.originalConfig.maxPerHour * f))
+        this.config.maxPerDay = Math.max(20, Math.floor(this.originalConfig.maxPerDay * f))
+        const delayScale = 1 + (1 - f) * 2
+        this.config.minDelayMs = Math.floor(this.originalConfig.minDelayMs * delayScale)
+        this.config.maxDelayMs = Math.floor(this.originalConfig.maxDelayMs * delayScale)
+    }
+
+    getCurrentFactor() {
+        return this.config.maxPerMinute / this.originalConfig.maxPerMinute
+    }
+
+    getKnownChats() {
+        return this.knownChats
+    }
+
+    restoreKnownChats(chats) {
+        for (const jid of chats) this.knownChats.add(jid)
+    }
+
+    injectTimestamps(timestamps) {
+        const now = Date.now()
+        const recent = timestamps.filter((ts) => now - ts < MS_PER_DAY)
+        const existing = new Set(this.messages.map((m) => m.timestamp))
+        for (const ts of recent) {
+            if (!existing.has(ts)) {
+                this.messages.push({
+                    timestamp: ts,
+                    recipient: '__injected__',
+                    contentHash: '__injected__'
+                })
+            }
+        }
+        const max = Math.max(...recent, 0)
+        if (max > this.lastMessageTime) this.lastMessageTime = max
+        this.messages.sort((a, b) => a.timestamp - b.timestamp)
+    }
+
+    _cleanup(now) {
+        this.messages = this.messages.filter((m) => now - m.timestamp < MS_PER_DAY)
+        for (const [hash, tracker] of this.identicalCount.entries()) {
+            if (now - tracker.lastSeen > this.config.identicalMessageWindowMs) {
+                this.identicalCount.delete(hash)
+            }
+        }
+        if (this.identicalCount.size > 10000) {
+            const sorted = [...this.identicalCount.entries()].sort(
+                ([, a], [, b]) => a.lastSeen - b.lastSeen
+            )
+            const excess = this.identicalCount.size - 10000
+            for (let i = 0; i < excess; i++) this.identicalCount.delete(sorted[i][0])
+        }
+    }
+
+    /** Gaussian-ish jitter for human-like timing */
+    _jitter(min, max) {
+        const u1 = Math.random()
+        const u2 = Math.random()
+        const normal = Math.sqrt(-2 * Math.log(u1)) * Math.cos(2 * Math.PI * u2)
+        const normalized = (normal + 3) / 6
+        const clamped = Math.max(0, Math.min(1, normalized))
+        return Math.round(min + clamped * (max - min))
+    }
+
+    /** Simple hash for content dedup */
+    _hash(content) {
+        let hash = 0
+        for (let i = 0; i < content.length; i++) {
+            const char = content.charCodeAt(i)
+            hash = (hash << 5) - hash + char
+            hash |= 0
+        }
+        return hash.toString(36)
+    }
+}
+
+exports.RateLimiter = RateLimiter
+module.exports = { RateLimiter }