instar 0.26.3 → 0.26.4

package/dist/messaging/imessage/NativeBackend.js

@@ -0,0 +1,353 @@
+/**
+ * NativeBackend — Read-only macOS Messages database integration.
+ *
+ * Provides:
+ * - SQLite reads from ~/Library/Messages/chat.db (via better-sqlite3)
+ * - Polling for new messages (watches max ROWID)
+ * - Conversation context formatting for session bootstrap
+ *
+ * Does NOT send messages. Sending happens from Claude Code sessions
+ * via imessage-reply.sh → imsg send CLI, because AppleScript Automation
+ * permission doesn't propagate through LaunchAgent process trees.
+ *
+ * Requires:
+ * - Full Disk Access for the process reading chat.db
+ */
+import { EventEmitter } from 'node:events';
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+// Apple Cocoa epoch: 2001-01-01T00:00:00Z in Unix epoch seconds
+const APPLE_EPOCH_OFFSET = 978307200;
+const DEFAULT_POLL_INTERVAL_MS = 2_000;
+const DEFAULT_DB_PATH = path.join(os.homedir(), 'Library', 'Messages', 'chat.db');
+export class NativeBackend extends EventEmitter {
+    db = null;
+    pollTimer = null;
+    lastRowId = 0;
+    _state = 'disconnected';
+    dbPath;
+    pollIntervalMs;
+    includeAttachments;
+    offsetPath;
+    authorizedContacts;
+    // Prepared statements (cached for performance)
+    stmtNewMessages = null;
+    stmtChats = null;
+    stmtHistory = null;
+    stmtMaxRowId = null;
+    stmtContextHistory = null;
+    constructor(options = {}) {
+        super();
+        this.dbPath = options.dbPath || DEFAULT_DB_PATH;
+        this.pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+        this.includeAttachments = options.includeAttachments ?? true;
+        this.offsetPath = options.offsetPath ?? null;
+        this.authorizedContacts = options.authorizedContacts ?? [];
+    }
+    get state() {
+        return this._state;
+    }
+    /**
+     * Open the Messages database and start polling for new messages.
+     */
+    async connect() {
+        if (this._state === 'connected')
+            return;
+        this._setState('connecting');
+        try {
+            const Database = (await import('better-sqlite3')).default;
+            // Open without readonly flag — readonly mode cannot read the WAL (write-ahead log).
+            // Messages.app writes to WAL continuously; new messages only appear in WAL until
+            // a checkpoint flushes them to the main db file. query_only pragma prevents writes
+            // while still allowing WAL reads.
+            this.db = new Database(this.dbPath, { fileMustExist: true });
+            this.db.pragma('query_only = ON');
+            // Scope poll query to authorized contacts for defense-in-depth.
+            // Even if the adapter's auth check is bypassed, the SQL itself won't return
+            // unauthorized messages. Falls back to unscoped if no contacts configured.
+            if (this.authorizedContacts.length > 0) {
+                const placeholders = this.authorizedContacts.map(() => '?').join(', ');
+                this.stmtNewMessages = this.db.prepare(`
+          SELECT m.ROWID, m.guid, m.text, m.date, m.is_from_me, m.service,
+                 m.associated_message_type,
+                 h.id AS sender,
+                 c.chat_identifier AS chat_id, c.display_name AS chat_name
+          FROM message m
+          LEFT JOIN handle h ON m.handle_id = h.ROWID
+          LEFT JOIN chat_message_join cmj ON m.ROWID = cmj.message_id
+          LEFT JOIN chat c ON cmj.chat_id = c.ROWID
+          WHERE m.ROWID > ?
+            AND (m.is_from_me = 1 OR h.id IN (${placeholders}))
+          ORDER BY m.ROWID ASC
+        `);
+            }
+            else {
+                this.stmtNewMessages = this.db.prepare(`
+          SELECT m.ROWID, m.guid, m.text, m.date, m.is_from_me, m.service,
+                 m.associated_message_type,
+                 h.id AS sender,
+                 c.chat_identifier AS chat_id, c.display_name AS chat_name
+          FROM message m
+          LEFT JOIN handle h ON m.handle_id = h.ROWID
+          LEFT JOIN chat_message_join cmj ON m.ROWID = cmj.message_id
+          LEFT JOIN chat c ON cmj.chat_id = c.ROWID
+          WHERE m.ROWID > ?
+          ORDER BY m.ROWID ASC
+        `);
+            }
+            // Scope chat listing to authorized contacts
+            if (this.authorizedContacts.length > 0) {
+                const placeholders = this.authorizedContacts.map(() => '?').join(', ');
+                this.stmtChats = this.db.prepare(`
+          SELECT c.ROWID AS id, c.chat_identifier, c.display_name, c.service_name,
+                 c.guid, c.is_archived,
+                 (SELECT MAX(m.date) FROM message m
+                  JOIN chat_message_join cmj ON m.ROWID = cmj.message_id
+                  WHERE cmj.chat_id = c.ROWID) AS last_message_date
+          FROM chat c
+          WHERE c.chat_identifier IN (${placeholders})
+          ORDER BY last_message_date DESC
+          LIMIT ?
+        `);
+            }
+            else {
+                this.stmtChats = this.db.prepare(`
+          SELECT c.ROWID AS id, c.chat_identifier, c.display_name, c.service_name,
+                 c.guid, c.is_archived,
+                 (SELECT MAX(m.date) FROM message m
+                  JOIN chat_message_join cmj ON m.ROWID = cmj.message_id
+                  WHERE cmj.chat_id = c.ROWID) AS last_message_date
+          FROM chat c
+          ORDER BY last_message_date DESC
+          LIMIT ?
+        `);
+            }
+            this.stmtHistory = this.db.prepare(`
+        SELECT m.ROWID, m.guid, m.text, m.date, m.is_from_me, m.service,
+               h.id AS sender
+        FROM message m
+        LEFT JOIN handle h ON m.handle_id = h.ROWID
+        LEFT JOIN chat_message_join cmj ON m.ROWID = cmj.message_id
+        LEFT JOIN chat c ON cmj.chat_id = c.ROWID
+        WHERE c.chat_identifier = ?
+        ORDER BY m.date DESC
+        LIMIT ?
+      `);
+            // Context history query — filters by sender handle (phone/email)
+            this.stmtContextHistory = this.db.prepare(`
+        SELECT m.ROWID, m.text, m.date, m.is_from_me, h.id AS sender
+        FROM message m
+        LEFT JOIN handle h ON m.handle_id = h.ROWID
+        LEFT JOIN chat_message_join cmj ON m.ROWID = cmj.message_id
+        LEFT JOIN chat c ON cmj.chat_id = c.ROWID
+        WHERE (h.id = ? OR c.chat_identifier = ?)
+          AND m.text IS NOT NULL
+          AND m.associated_message_type = 0
+        ORDER BY m.date DESC
+        LIMIT ?
+      `);
+            this.stmtMaxRowId = this.db.prepare('SELECT MAX(ROWID) AS max_id FROM message');
+            // Restore persisted poll offset if available; otherwise use a 50-message
+            // lookback so messages received while the server was down are processed.
+            const persistedOffset = this._loadOffset();
+            if (persistedOffset !== null) {
+                this.lastRowId = persistedOffset;
+            }
+            else {
+                const maxRow = this.stmtMaxRowId.get();
+                const maxId = maxRow?.max_id ?? 0;
+                this.lastRowId = Math.max(0, maxId - 50);
+            }
+            this._setState('connected');
+            this._startPolling();
+        }
+        catch (err) {
+            this._setState('error');
+            throw new Error(`Failed to open Messages database: ${err.message}`);
+        }
+    }
+    /**
+     * Stop polling and close the database.
+     */
+    async disconnect() {
+        this._stopPolling();
+        if (this.db) {
+            try {
+                this.db.close();
+            }
+            catch { /* already closed */ }
+            this.db = null;
+        }
+        this.stmtNewMessages = null;
+        this.stmtChats = null;
+        this.stmtHistory = null;
+        this.stmtContextHistory = null;
+        this.stmtMaxRowId = null;
+        this._setState('disconnected');
+    }
+    /**
+     * List recent chats.
+     */
+    listChats(limit = 20) {
+        if (!this.db || !this.stmtChats) {
+            throw new Error('Database not connected');
+        }
+        const chatBindParams = this.authorizedContacts.length > 0
+            ? [...this.authorizedContacts, limit]
+            : [limit];
+        const rows = this.stmtChats.all(...chatBindParams);
+        return rows.map((row) => ({
+            chatId: row.chat_identifier,
+            displayName: row.display_name || undefined,
+            participants: [row.chat_identifier],
+            lastMessageDate: row.last_message_date
+                ? this._cocoaToIso(row.last_message_date)
+                : undefined,
+            service: row.service_name,
+        }));
+    }
+    /**
+     * Get message history for a chat.
+     */
+    getChatHistory(chatId, limit = 50) {
+        if (!this.db || !this.stmtHistory) {
+            throw new Error('Database not connected');
+        }
+        // Defense-in-depth: only return history for authorized contacts
+        if (this.authorizedContacts.length > 0 && !this.authorizedContacts.includes(chatId)) {
+            return [];
+        }
+        const rows = this.stmtHistory.all(chatId, limit);
+        return rows.map((row) => ({
+            chatId,
+            messageId: row.guid,
+            sender: row.sender || chatId,
+            text: row.text || '',
+            timestamp: this._cocoaToUnix(row.date),
+            isFromMe: row.is_from_me === 1,
+            service: row.service,
+        }));
+    }
+    /**
+     * Format conversation context for session bootstrap.
+     * Returns a formatted string of recent messages suitable for injection
+     * into a Claude Code session as conversation history.
+     */
+    getConversationContext(sender, limit = 20) {
+        if (!this.db || !this.stmtContextHistory) {
+            return '';
+        }
+        try {
+            const rows = this.stmtContextHistory.all(sender, sender, limit);
+            if (rows.length === 0)
+                return '';
+            // Reverse to chronological order (query returns newest first)
+            rows.reverse();
+            const lines = rows.map((row) => {
+                const time = new Date(this._cocoaToUnix(row.date) * 1000);
+                const hh = time.getHours().toString().padStart(2, '0');
+                const mm = time.getMinutes().toString().padStart(2, '0');
+                const who = row.is_from_me ? 'Agent' : (row.sender || sender);
+                const text = row.text || '(attachment)';
+                return `[${hh}:${mm}] ${who}: ${text}`;
+            });
+            return `--- Conversation History (last ${rows.length} messages) ---\n${lines.join('\n')}\n--- End History ---`;
+        }
+        catch {
+            return '';
+        }
+    }
+    // ── Internal ──
+    _startPolling() {
+        if (this.pollTimer)
+            return;
+        this.pollTimer = setInterval(() => this._poll(), this.pollIntervalMs);
+    }
+    _stopPolling() {
+        if (this.pollTimer) {
+            clearInterval(this.pollTimer);
+            this.pollTimer = null;
+        }
+    }
+    _poll() {
+        if (!this.db || !this.stmtNewMessages)
+            return;
+        try {
+            // Pass authorized contacts as bind params when SQL is scoped
+            const bindParams = this.authorizedContacts.length > 0
+                ? [this.lastRowId, ...this.authorizedContacts]
+                : [this.lastRowId];
+            const rows = this.stmtNewMessages.all(...bindParams);
+            const startRowId = this.lastRowId;
+            for (const row of rows) {
+                this.lastRowId = row.ROWID;
+                // Skip non-text messages (reactions, edits, etc.)
+                if (row.associated_message_type !== 0)
+                    continue;
+                // Skip empty messages (typing indicators, read receipts)
+                if (!row.text && !this.includeAttachments)
+                    continue;
+                const msg = {
+                    chatId: row.chat_id || row.sender || 'unknown',
+                    messageId: row.guid,
+                    sender: row.sender || 'unknown',
+                    senderName: row.chat_name || undefined,
+                    text: row.text || '',
+                    timestamp: this._cocoaToUnix(row.date),
+                    isFromMe: row.is_from_me === 1,
+                    service: row.service,
+                };
+                this.emit('message', msg);
+            }
+            // Persist offset if it advanced
+            if (this.lastRowId > startRowId) {
+                this._saveOffset(this.lastRowId);
+            }
+        }
+        catch (err) {
+            const msg = err.message;
+            if (!msg.includes('SQLITE_BUSY') && !msg.includes('database is locked')) {
+                console.error(`[imessage-native] Poll error: ${msg}`);
+            }
+        }
+    }
+    _setState(state) {
+        const prev = this._state;
+        this._state = state;
+        if (prev !== state) {
+            this.emit('stateChange', state, prev);
+        }
+    }
+    /** Convert Apple Cocoa nanosecond timestamp to Unix epoch seconds. */
+    _cocoaToUnix(cocoaNanos) {
+        return Math.floor(cocoaNanos / 1e9) + APPLE_EPOCH_OFFSET;
+    }
+    /** Load persisted poll offset from disk. */
+    _loadOffset() {
+        if (!this.offsetPath)
+            return null;
+        try {
+            const data = JSON.parse(fs.readFileSync(this.offsetPath, 'utf-8'));
+            if (typeof data.lastRowId === 'number' && data.lastRowId > 0) {
+                return data.lastRowId;
+            }
+        }
+        catch { /* first run or corrupted — use lookback */ }
+        return null;
+    }
+    /** Save poll offset to disk. */
+    _saveOffset(rowId) {
+        if (!this.offsetPath)
+            return;
+        try {
+            fs.writeFileSync(this.offsetPath, JSON.stringify({ lastRowId: rowId, savedAt: new Date().toISOString() }) + '\n');
+        }
+        catch { /* non-critical */ }
+    }
+    /** Convert Apple Cocoa nanosecond timestamp to ISO string. */
+    _cocoaToIso(cocoaNanos) {
+        return new Date(this._cocoaToUnix(cocoaNanos) * 1000).toISOString();
+    }
+}
+//# sourceMappingURL=NativeBackend.js.map

package/dist/messaging/imessage/NativeBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NativeBackend.js","sourceRoot":"","sources":["../../../src/messaging/imessage/NativeBackend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,gEAAgE;AAChE,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAErC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;AAelF,MAAM,OAAO,aAAc,SAAQ,YAAY;IACrC,EAAE,GAA6C,IAAI,CAAC;IACpD,SAAS,GAA0C,IAAI,CAAC;IACxD,SAAS,GAAG,CAAC,CAAC;IACd,MAAM,GAAoB,cAAc,CAAC;IAChC,MAAM,CAAS;IACf,cAAc,CAAS;IACvB,kBAAkB,CAAU;IAC5B,UAAU,CAAgB;IAC1B,kBAAkB,CAAW;IAE9C,+CAA+C;IACvC,eAAe,GAA8C,IAAI,CAAC;IAClE,SAAS,GAA8C,IAAI,CAAC;IAC5D,WAAW,GAA8C,IAAI,CAAC;IAC9D,YAAY,GAA8C,IAAI,CAAC;IAC/D,kBAAkB,GAA8C,IAAI,CAAC;IAE7E,YAAY,UAAgC,EAAE;QAC5C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC;QAChD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACzE,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,IAAI,CAAC;QAC7D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;QAC7C,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO;QACxC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAE7B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;YAE1D,oFAAoF;YACpF,iFAAiF;YACjF,mFAAmF;YACnF,kCAAkC;YAClC,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAElC,gEAAgE;YAChE,4EAA4E;YAC5E,2EAA2E;YAC3E,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;gDAUC,YAAY;;SAEnD,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;SAWtC,CAAC,CAAC;YACL,CAAC;YAED,4CAA4C;YAC5C,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;wCAOD,YAAY;;;SAG3C,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;SAShC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;OAUlC,CAAC,CAAC;YAEH,iEAAiE;YACjE,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;OAWzC,CAAC,CAAC;YAEH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC;YAEhF,yEAAyE;YACzE,yEAAyE;YACzE,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;gBAC7B,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAoC,CAAC;gBACzE,MAAM,KAAK,GAAG,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC;gBAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC;YAC3C,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAC5B,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,qCAAsC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC;gBAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YACvD,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,GAAG,EAAE;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;YACvD,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC;YACrC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,cAAc,CAQ/C,CAAC;QAEH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,MAAM,EAAE,GAAG,CAAC,eAAe;YAC3B,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;YAC1C,YAAY,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC;YACnC,eAAe,EAAE,GAAG,CAAC,iBAAiB;gBACpC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBACzC,CAAC,CAAC,SAAS;YACb,OAAO,EAAE,GAAG,CAAC,YAAY;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAc,EAAE,KAAK,GAAG,EAAE;QACvC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,gEAAgE;QAChE,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpF,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAQ7C,CAAC;QAEH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,MAAM;YACN,SAAS,EAAE,GAAG,CAAC,IAAI;YACnB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,MAAM;YAC5B,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;YACpB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YACtC,QAAQ,EAAE,GAAG,CAAC,UAAU,KAAK,CAAC;YAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;OAIG;IACH,sBAAsB,CAAC,MAAc,EAAE,KAAK,GAAG,EAAE;QAC/C,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACzC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAM5D,CAAC;YAEH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAEjC,8DAA8D;YAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;YAEf,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC7B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACvD,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACzD,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;gBAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,cAAc,CAAC;gBACxC,OAAO,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,KAAK,IAAI,EAAE,CAAC;YACzC,CAAC,CAAC,CAAC;YAEH,OAAO,kCAAkC,IAAI,CAAC,MAAM,mBAAmB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC;QACjH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,iBAAiB;IAET,aAAa;QACnB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACxE,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO;QAE9C,IAAI,CAAC;YACH,6DAA6D;YAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;gBACnD,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC;gBAC9C,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrB,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,UAAU,CAWjD,CAAC;YAEH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;YAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC;gBAE3B,kDAAkD;gBAClD,IAAI,GAAG,CAAC,uBAAuB,KAAK,CAAC;oBAAE,SAAS;gBAChD,yDAAyD;gBACzD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,kBAAkB;oBAAE,SAAS;gBAEpD,MAAM,GAAG,GAAqB;oBAC5B,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,SAAS;oBAC9C,SAAS,EAAE,GAAG,CAAC,IAAI;oBACnB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;oBAC/B,UAAU,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;oBACtC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;oBACpB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;oBACtC,QAAQ,EAAE,GAAG,CAAC,UAAU,KAAK,CAAC;oBAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC;gBAEF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAC5B,CAAC;YACD,gCAAgC;YAChC,IAAI,IAAI,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;gBAChC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACxE,OAAO,CAAC,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAAsB;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,YAAY,CAAC,UAAkB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,kBAAkB,CAAC;IAC3D,CAAC;IAED,4CAA4C;IACpC,WAAW;QACjB,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;YACnE,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;gBAC7D,OAAO,IAAI,CAAC,SAAS,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gCAAgC;IACxB,WAAW,CAAC,KAAa;QAC/B,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO;QAC7B,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACpH,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IAED,8DAA8D;IACtD,WAAW,CAAC,UAAkB;QACpC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtE,CAAC;CACF"}

package/dist/messaging/imessage/OutboundAuditLog.d.ts

@@ -0,0 +1,49 @@
+/**
+ * OutboundAuditLog — Append-only JSONL logger for all outbound message attempts.
+ *
+ * Logs every outbound attempt (allowed or blocked) with:
+ * - Masked recipient (PII protection)
+ * - SHA-256 hashes for correlation (recipient + content)
+ * - Which enforcement layer blocked (if blocked)
+ * - Rate limit status at time of attempt
+ * - Send mode (reactive vs proactive)
+ *
+ * No plaintext message content or phone numbers are stored.
+ */
+export interface AuditEntry {
+    timestamp: string;
+    recipient: string;
+    recipientHash: string;
+    textLength: number;
+    textHash: string;
+    allowed: boolean;
+    blockedBy: string | null;
+    sendMode: 'reactive' | 'proactive';
+    sessionName: string | null;
+    sendToken: string | null;
+    rateStatus: {
+        contactHour: number;
+        globalDay: number;
+    };
+}
+export declare class OutboundAuditLog {
+    private readonly logPath;
+    constructor(logPath: string);
+    /**
+     * Record an outbound attempt.
+     */
+    record(entry: {
+        recipient: string;
+        text: string;
+        allowed: boolean;
+        blockedBy?: string;
+        sendMode?: 'reactive' | 'proactive';
+        sessionName?: string;
+        sendToken?: string;
+        rateStatus?: {
+            contactHour: number;
+            globalDay: number;
+        };
+    }): void;
+}
+//# sourceMappingURL=OutboundAuditLog.d.ts.map

package/dist/messaging/imessage/OutboundAuditLog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OutboundAuditLog.d.ts","sourceRoot":"","sources":["../../../src/messaging/imessage/OutboundAuditLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,UAAU,GAAG,WAAW,CAAC;IACnC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACxD;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,OAAO,EAAE,MAAM;IAI3B;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE;QACZ,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,UAAU,GAAG,WAAW,CAAC;QACpC,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;KACzD,GAAG,IAAI;CAqBT"}

package/dist/messaging/imessage/OutboundAuditLog.js

@@ -0,0 +1,58 @@
+/**
+ * OutboundAuditLog — Append-only JSONL logger for all outbound message attempts.
+ *
+ * Logs every outbound attempt (allowed or blocked) with:
+ * - Masked recipient (PII protection)
+ * - SHA-256 hashes for correlation (recipient + content)
+ * - Which enforcement layer blocked (if blocked)
+ * - Rate limit status at time of attempt
+ * - Send mode (reactive vs proactive)
+ *
+ * No plaintext message content or phone numbers are stored.
+ */
+import fs from 'node:fs';
+import crypto from 'node:crypto';
+export class OutboundAuditLog {
+    logPath;
+    constructor(logPath) {
+        this.logPath = logPath;
+    }
+    /**
+     * Record an outbound attempt.
+     */
+    record(entry) {
+        const auditEntry = {
+            timestamp: new Date().toISOString(),
+            recipient: maskIdentifier(entry.recipient),
+            recipientHash: sha256Prefix(entry.recipient),
+            textLength: entry.text.length,
+            textHash: sha256Prefix(entry.text),
+            allowed: entry.allowed,
+            blockedBy: entry.blockedBy || null,
+            sendMode: entry.sendMode || 'reactive',
+            sessionName: entry.sessionName || null,
+            sendToken: entry.sendToken ? entry.sendToken.slice(0, 8) : null,
+            rateStatus: entry.rateStatus || { contactHour: 0, globalDay: 0 },
+        };
+        try {
+            fs.appendFileSync(this.logPath, JSON.stringify(auditEntry) + '\n');
+        }
+        catch (err) {
+            console.error(`[imessage-audit] Failed to write audit log: ${err.message}`);
+        }
+    }
+}
+function sha256Prefix(input) {
+    return crypto.createHash('sha256').update(input).digest('hex').slice(0, 8);
+}
+function maskIdentifier(id) {
+    if (id.startsWith('+') && id.length > 6) {
+        return id.slice(0, 4) + '***' + id.slice(-4);
+    }
+    if (id.includes('@')) {
+        const [local, domain] = id.split('@');
+        return local.slice(0, 2) + '***@' + domain;
+    }
+    return '***';
+}
+//# sourceMappingURL=OutboundAuditLog.js.map

package/dist/messaging/imessage/OutboundAuditLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OutboundAuditLog.js","sourceRoot":"","sources":["../../../src/messaging/imessage/OutboundAuditLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,MAAM,MAAM,aAAa,CAAC;AAgBjC,MAAM,OAAO,gBAAgB;IACV,OAAO,CAAS;IAEjC,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KASN;QACC,MAAM,UAAU,GAAe;YAC7B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;YAC1C,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;YAC5C,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;YAC7B,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,UAAU;YACtC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACtC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAC/D,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;SACjE,CAAC;QAEF,IAAI,CAAC;YACH,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,+CAAgD,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,cAAc,CAAC,EAAU;IAChC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/messaging/imessage/OutboundRateLimiter.d.ts

@@ -0,0 +1,54 @@
+/**
+ * OutboundRateLimiter — In-memory sliding-window rate limiter for outbound messages.
+ *
+ * Two independent limits:
+ *   1. Per-contact: max messages per hour (sliding window)
+ *   2. Global: max messages per day (rolling 24h window)
+ *
+ * Resets on server restart (in-memory only). This is acceptable because
+ * limits are a safety net, not a billing mechanism.
+ */
+export interface RateLimiterConfig {
+    /** Max outbound messages per contact per hour (default: 20) */
+    maxPerHour: number;
+    /** Max outbound messages globally per day (default: 100) */
+    maxPerDay: number;
+}
+export interface RateLimitStatus {
+    /** Per-contact counts for the current hour window */
+    perContact: Map<string, number>;
+    /** Global count for the current day window */
+    globalToday: number;
+}
+export declare class OutboundRateLimiter {
+    private readonly maxPerHour;
+    private readonly maxPerDay;
+    private contactTimestamps;
+    private globalTimestamps;
+    constructor(config?: Partial<RateLimiterConfig>);
+    /**
+     * Check if a send to this recipient is allowed under rate limits.
+     * Does NOT record the send — call record() after successful delivery.
+     */
+    check(recipient: string): {
+        allowed: boolean;
+        reason?: string;
+    };
+    /**
+     * Record a sent message for rate tracking.
+     */
+    record(recipient: string): void;
+    /**
+     * Get current rate limit status.
+     */
+    status(): RateLimitStatus;
+    /**
+     * Get counts for a specific contact (for audit log inclusion).
+     */
+    countsFor(recipient: string): {
+        contactHour: number;
+        globalDay: number;
+    };
+    private _cleanup;
+}
+//# sourceMappingURL=OutboundRateLimiter.d.ts.map

package/dist/messaging/imessage/OutboundRateLimiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OutboundRateLimiter.d.ts","sourceRoot":"","sources":["../../../src/messaging/imessage/OutboundRateLimiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAGnC,OAAO,CAAC,iBAAiB,CAA+B;IAExD,OAAO,CAAC,gBAAgB,CAAgB;gBAE5B,MAAM,GAAE,OAAO,CAAC,iBAAiB,CAAM;IAKnD;;;OAGG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IA2B/D;;OAEG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAgB/B;;OAEG;IACH,MAAM,IAAI,eAAe;IAiBzB;;OAEG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IAYxE,OAAO,CAAC,QAAQ;CAgBjB"}

package/dist/messaging/imessage/OutboundRateLimiter.js

@@ -0,0 +1,111 @@
+/**
+ * OutboundRateLimiter — In-memory sliding-window rate limiter for outbound messages.
+ *
+ * Two independent limits:
+ *   1. Per-contact: max messages per hour (sliding window)
+ *   2. Global: max messages per day (rolling 24h window)
+ *
+ * Resets on server restart (in-memory only). This is acceptable because
+ * limits are a safety net, not a billing mechanism.
+ */
+export class OutboundRateLimiter {
+    maxPerHour;
+    maxPerDay;
+    // Timestamps of sent messages per contact (for sliding window)
+    contactTimestamps = new Map();
+    // Global timestamps
+    globalTimestamps = [];
+    constructor(config = {}) {
+        this.maxPerHour = config.maxPerHour ?? 20;
+        this.maxPerDay = config.maxPerDay ?? 100;
+    }
+    /**
+     * Check if a send to this recipient is allowed under rate limits.
+     * Does NOT record the send — call record() after successful delivery.
+     */
+    check(recipient) {
+        const now = Date.now();
+        const hourAgo = now - 3_600_000;
+        const dayAgo = now - 86_400_000;
+        // Per-contact hourly check
+        const contactTs = this.contactTimestamps.get(recipient) || [];
+        const recentContact = contactTs.filter(t => t > hourAgo);
+        if (recentContact.length >= this.maxPerHour) {
+            return {
+                allowed: false,
+                reason: `per-contact hourly limit reached (${this.maxPerHour}/hr)`,
+            };
+        }
+        // Global daily check
+        const recentGlobal = this.globalTimestamps.filter(t => t > dayAgo);
+        if (recentGlobal.length >= this.maxPerDay) {
+            return {
+                allowed: false,
+                reason: `global daily limit reached (${this.maxPerDay}/day)`,
+            };
+        }
+        return { allowed: true };
+    }
+    /**
+     * Record a sent message for rate tracking.
+     */
+    record(recipient) {
+        const now = Date.now();
+        // Contact timestamps
+        if (!this.contactTimestamps.has(recipient)) {
+            this.contactTimestamps.set(recipient, []);
+        }
+        this.contactTimestamps.get(recipient).push(now);
+        // Global timestamps
+        this.globalTimestamps.push(now);
+        // Periodic cleanup — evict old entries to prevent memory growth
+        this._cleanup();
+    }
+    /**
+     * Get current rate limit status.
+     */
+    status() {
+        const now = Date.now();
+        const hourAgo = now - 3_600_000;
+        const dayAgo = now - 86_400_000;
+        const perContact = new Map();
+        for (const [contact, timestamps] of this.contactTimestamps) {
+            const count = timestamps.filter(t => t > hourAgo).length;
+            if (count > 0)
+                perContact.set(contact, count);
+        }
+        return {
+            perContact,
+            globalToday: this.globalTimestamps.filter(t => t > dayAgo).length,
+        };
+    }
+    /**
+     * Get counts for a specific contact (for audit log inclusion).
+     */
+    countsFor(recipient) {
+        const now = Date.now();
+        const hourAgo = now - 3_600_000;
+        const dayAgo = now - 86_400_000;
+        const contactTs = this.contactTimestamps.get(recipient) || [];
+        return {
+            contactHour: contactTs.filter(t => t > hourAgo).length,
+            globalDay: this.globalTimestamps.filter(t => t > dayAgo).length,
+        };
+    }
+    _cleanup() {
+        const dayAgo = Date.now() - 86_400_000;
+        // Clean global
+        this.globalTimestamps = this.globalTimestamps.filter(t => t > dayAgo);
+        // Clean per-contact
+        for (const [contact, timestamps] of this.contactTimestamps) {
+            const filtered = timestamps.filter(t => t > dayAgo);
+            if (filtered.length === 0) {
+                this.contactTimestamps.delete(contact);
+            }
+            else {
+                this.contactTimestamps.set(contact, filtered);
+            }
+        }
+    }
+}
+//# sourceMappingURL=OutboundRateLimiter.js.map

package/dist/messaging/imessage/OutboundRateLimiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OutboundRateLimiter.js","sourceRoot":"","sources":["../../../src/messaging/imessage/OutboundRateLimiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAgBH,MAAM,OAAO,mBAAmB;IACb,UAAU,CAAS;IACnB,SAAS,CAAS;IAEnC,+DAA+D;IACvD,iBAAiB,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxD,oBAAoB;IACZ,gBAAgB,GAAa,EAAE,CAAC;IAExC,YAAY,SAAqC,EAAE;QACjD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAiB;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,GAAG,SAAS,CAAC;QAChC,MAAM,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC;QAEhC,2BAA2B;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC9D,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;QACzD,IAAI,aAAa,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,qCAAqC,IAAI,CAAC,UAAU,MAAM;aACnE,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QACnE,IAAI,YAAY,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,+BAA+B,IAAI,CAAC,SAAS,OAAO;aAC7D,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,SAAiB;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,qBAAqB;QACrB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEjD,oBAAoB;QACpB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEhC,gEAAgE;QAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,GAAG,SAAS,CAAC;QAChC,MAAM,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC;QAEhC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC7C,KAAK,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC;YACzD,IAAI,KAAK,GAAG,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QAED,OAAO;YACL,UAAU;YACV,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM;SAClE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,SAAiB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,GAAG,SAAS,CAAC;QAChC,MAAM,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC;QAEhC,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC9D,OAAO;YACL,WAAW,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM;YACtD,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM;SAChE,CAAC;IACJ,CAAC;IAEO,QAAQ;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;QAEvC,eAAe;QACf,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QAEtE,oBAAoB;QACpB,KAAK,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;YACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;CACF"}