Automating Messages

Automating Messages (JXA-first with UI/​DB fallbacks)

Contents

• Permissions and scope
• Default workflow
• Quick recipe
• Attachments and UI fallback
• Data access and forensics
• Validation Checklist
• When Not to Use
• What to load

Permissions and scope

• Grants needed: Automation + Accessibility; Full Disk Access for any chat.db reads.
• Keep automation scoped and auditable; avoid unsolicited sends and DB writes.
• Pairs with automating-mac-apps for common setup (permissions, osascript invocation, UI scripting basics).

Default workflow (happy path)

1. Resolve transport: pick serviceType (iMessage or SMS) before targeting a buddy.
2. Identify recipient: filter buddies by handle (phone/​email). Avoid ambiguous names.
3. Send via app-level send: pass Buddy object to Messages.send().
4. Verify window context: activate Messages when mixing with UI steps.
5. Fallbacks: if send/​attachments fail, use UI scripting; for history, use SQL.

Quick recipe (defensive send)

const Messages = Application('Messages');
Messages.includeStandardAdditions = true;

function safeSend(text, handle, svcType = 'iMessage') {
  const svc = Messages.services.whose({ serviceType: svcType })[0];
  if (!svc) throw new Error(`Service ${svcType} missing`);
  const buddy = svc.buddies.whose({ handle })[0];
  if (!buddy) throw new Error(`Buddy ${handle} missing on ${svcType}`);
  Messages.send(text, { to: buddy });
}

• Wrap with try/​catch and log; add small delays when activating UI.
• For groups, target an existing chat by GUID or fall back to UI scripting; array sends are unreliable.

Attachments and UI fallback

• Messages lacks a stable JXA attachment API; use clipboard + System Events paste/​send.
• Ensure Accessibility permission, bring app forward, paste file, press Enter.
• See references/​ui-scripting-attachments.md for the full flow and ObjC pasteboard snippet.

Data access and forensics

Reading messages limitation: The AppleScript/​JXA API for Messages is effectively write-only. While send() works reliably, reading messages via chat.messages() or similar methods is broken/​unsupported in modern macOS. The only reliable way to read message history is via direct SQLite access to ~/​Library/​Messages/​chat.db.

Security consideration: Reading chat.db requires Full Disk Access permission, which grants broad filesystem access beyond just Messages. This is a significant security trade-off - granting Full Disk Access to scripts or applications exposes all user data. Consider whether reading message history is truly necessary before enabling this permission.

• Use SQL against chat.db for history; JXA chat.messages() is unreliable/​non-functional.
• Requires: System Settings > Privacy & Security > Full Disk Access for your terminal/​script.
• Remember Cocoa epoch conversion (nanoseconds since 2001-01-01); use sqlite3 -json for structured results.
• See references/​database-forensics.md for schema notes, typedstream handling, and export tooling.

Example read query (requires Full Disk Access):

sqlite3 ~/​Library/​Messages/​chat.db "SELECT
  CASE WHEN m.is_from_me = 1 THEN 'Me' ELSE 'Them' END as sender,
  m.text,
  datetime(m.date/​1000000000 + 978307200, 'unixepoch', 'localtime') as date
FROM message m
JOIN handle h ON m.handle_id = h.rowid
WHERE h.id LIKE '%PHONE_NUMBER%'
ORDER BY m.date DESC LIMIT 10;"

Bots and monitoring

• Implement polling daemons with launchd now that on-receive handlers are gone.
• Track rowid, query diffs, dispatch actions, and persist state.
• See references/​monitoring-daemons.md for the polling pattern and plist notes.

Validation Checklist

• Automation + Accessibility permissions granted
• Service resolves: Messages.services.whose({ serviceType: 'iMessage' })[0] returns object
• Buddy lookup works: svc.buddies.whose({ handle })[0] returns target
• Test send completes without errors
• Full Disk Access granted if using chat.db reads

When Not to Use

• For reading message history without Full Disk Access (AppleScript/​JXA cannot read messages)
• For cross-platform messaging (use platform APIs or third-party services)
• For business SMS automation (use Twilio or similar APIs)
• When iMessage/​SMS features are not available on the target system
• For bulk messaging (rate limits and security restrictions apply)
• When security policy prohibits Full Disk Access grants (required for any read operations)

What to load

• Control plane and send reliability: references/​control-plane.md
• UI scripting + attachments fallback: references/​ui-scripting-attachments.md
• SQL/​history access: references/​database-forensics.md
• Polling bots/​launchd: references/​monitoring-daemons.md