History

chahinebrini a24a9c783f feat(mail): IDLE-daemon for real-time Legend mail-protection

Standalone ESM-daemon that:
- Connects via ImapFlow IDLE to all active Legend mailboxes
- Triggers /api/mail/scan-internal on new-mail events (real-time)
- Auto-renew IDLE every 25min (RFC 3501 limit), exponential-backoff reconnect
- DB-refresh every 5min for new/removed connections

Plus deploy-pipeline:
- GH-Actions artifact-upload + scp to /srv/rebreak/backend/imap-idle/
- npm install --production on server (imapflow + pg)
- pm2 startOrReload via ecosystem.config.js
- start-idle-staging.sh wrapper for Infisical secret-injection

Replaces 30min-cron polling for Legend tier -- Casino-mails now blocked
within seconds, fulfilling Legend tier marketing promise.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-09 20:48:33 +02:00

index.mjs

feat(mail): IDLE-daemon for real-time Legend mail-protection

2026-05-09 20:48:33 +02:00

package.json

feat(mail): IDLE-daemon for real-time Legend mail-protection

2026-05-09 20:48:33 +02:00

README.md

feat(mail): IDLE-daemon for real-time Legend mail-protection

2026-05-09 20:48:33 +02:00

start-idle-staging.sh

feat(mail): IDLE-daemon for real-time Legend mail-protection

2026-05-09 20:48:33 +02:00

README.md

rebreak-imap-idle

Standalone IMAP IDLE Daemon für Rebreak.

Was er macht

Hält pro aktiver MailConnection (DB) eine persistente IMAP-IDLE-Session
Reagiert in Echtzeit auf EXISTS-Events (neue Mail im Postfach)
Feuert bei jedem Event POST /api/mail/scan-internal gegen das lokale Backend
Das Backend entscheidet ob und welche Mails gelöscht werden (Gambling-Keywords + Blocklist)
Aktualisiert alle 5 min die Connection-Liste (neue User → neue Sessions, entfernte → geschlossen)
IDLE wird alle 25 min erneuert (RFC 3501 Server-Timeout liegt bei 29 min)

Env-Vars

Variable	Pflicht	Beschreibung
`DATABASE_URL`	ja	Postgres-Connection-String (Supabase Pooler oder direkt)
`ADMIN_SECRET`	ja	Shared Secret für /api/mail/scan-internal Header
`ENCRYPTION_KEY`	ja	AES-256 Key (identisch zum Backend-Key, 32+ Zeichen)
`BACKEND_URL`	nein	Default: http://127.0.0.1:3016 (staging) / 3015 (prod)
`NODE_ENV`	nein	`production` → BACKEND_URL default port 3015

Lokal starten (Entwicklung)

cd backend/imap-idle
npm install
DATABASE_URL=<...> ADMIN_SECRET=<...> ENCRYPTION_KEY=<...> node index.mjs

Via Infisical (analog zu start-staging.sh):

infisical run --env=staging -- node index.mjs

PM2 (Produktion)

Wird via ecosystem.config.js gestartet — siehe docs/internal/MAIL_DAEMON_DEPLOYMENT.md.

Logs (pm2)

[idle/<email>] connected (imap.gmail.com:993)
[idle/<email>] exists-event received (new mail)
[idle/<email>] scan-triggered → scanned=12 blocked=1
[idle/<email>] idle renewing (25min threshold)
[idle/<email>] reconnecting in 5s (attempt 2)
[idle/db] refreshed — 47 active connections, 47 sessions