Feat/spam #5

2026-10-27T18:34:58-05:00

iamdoubz commented

2026-10-27 18:34:58 -05:00

Add ability to lookup numbers for spam from the FTC (USA)
Add ability to lookup numbers for spam from IPQualityScore

- Add ability to lookup numbers for spam from the FTC (USA) - Add ability to lookup numbers for spam from IPQualityScore

iamdoubz added 7 commits 2026-10-27 18:34:58 -05:00

docs: spam check spec a3dfcb6b14

SD1 (spec 14, decision 0006): IPQualityScore first, then the FTC Do Not
Call complaint list, for outside US callers who aren't in anyone's
contacts. Information only, off by default; credits running out pause
IPQualityScore until its credit usage API says they're back.

api: spam check settings, lookups and cache 6f87d6f663

SD1 (14 §9): the spam/lookups tables and calls columns, the
IPQualityScore and FTC lookups with the cache, the spam settings with
write-only keys, the provider Test routes and Settings → Spam check.

api: pause spam check when IPQualityScore credits run out 70f14288ca

SD2 (14 §3): out of credits pauses IPQualityScore (one warning, one
event), the FTC list answers meanwhile, the dashboard shows a dismissable
spam_quota warning, and spamQuotaCheck resumes it every 6 hours once
credits are back. A newly saved key resumes it at once.

Follow-up: confirm with the owner's real key that the Credit Usage API
costs no credit (TODO in 14 §2.1).

api: download the FTC complaint list 49d529e185

SD3 (14 §2.2): spamFtcSync reads the FTC's Do Not Call complaints a day
at a time, 15 pages a minute, saving its place; failures are kept for
Settings → Spam check and retried the next minute. Download now starts
one. Old complaints are dropped after windowDays.

Follow-up: one real download with the owner's api.data.gov key.

web: show the spam check while a call rings e05065599e

SD4 (14 §5): GET /api/me/caller-check for callers ringing my extensions
now, a badge and line in the softphone's ringing dialog and call card,
and the desk phone label in the caller-name lookup when the answer comes
within 1.2 s. Contacts are never checked; low risk shows nothing.

Follow-up: try it on a real call, in the browser and on a desk phone.

web: spam check in call history

ci / check (push) Failing after 1m9s

Details

ci / images (push) Successful in 44s

Details

6b0c5aa827

SD5 (14 §9.5): each incoming call keeps what the spam check knew when it
ended (saved answers and the FTC list only, no new lookup), so the badge
stays in call history after the saved answer expires. Hidden when the
viewer's contacts name the number. New admin guide page, spam-check.md.

Follow-up: the owner's checks with real keys and a real call (14 §9).

api: share a spam check from its start

ci / check (push) Successful in 1m11s

Details

ci / images (push) Successful in 21s

Details

ci / check (pull_request) Successful in 1m9s

Details

ci / images (pull_request) Successful in 33s

Details

70083f8f83

SD5 follow-up (14 §4): checks for the same number were shared only once
they reached the IPQualityScore request, after reading the cache and the
pause state. A check that finished in between cost a second request
(CI: "five at once cost one request" failed). Now shared before anything
is awaited.

iamdoubz merged commit 11b531d5b4 into main

2026-10-27 18:35:05 -05:00

iamdoubz deleted branch feat/spam

2026-10-27 18:35:05 -05:00

iamdoubz referenced this issue from a commit

2026-10-28 16:45:13 -05:00

security: sign-in by email and connecting accounts (08 §7 #1 #2 #5 #8)

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: spng/selfphoneng#5