Vishnu Narayanan c884cdefde feat: add per-account daily rate limit for outbound emails (#13411) ...

Introduce a daily cap on non-channel outbound emails to prevent abuse.

Fixes https://linear.app/chatwoot/issue/CW-6418/ses-incident-jan-28

## Type of change

- [x] New feature (non-breaking change which adds functionality)
- [x] Breaking change (fix or feature that would cause existing
functionality not to work as expected)

## Summary
- Adds a Redis-based daily counter to rate limit outbound emails per
account, preventing email abuse
- Covers continuity emails (WebWidget/API), conversation transcripts,
and agent notifications
  - Email channel replies are excluded (paid feature, not abusable)
- Adds account suspension check in `ConversationReplyMailer` to block
already-queued emails for suspended accounts

  ## Limit Resolution Hierarchy
1. Per-account override (`account.limits['emails']`) — SuperAdmin
configurable
2. Enterprise plan-based (`ACCOUNT_EMAILS_PLAN_LIMITS`
InstallationConfig)
3. Global default (`ACCOUNT_EMAILS_LIMIT` InstallationConfig, default:
100)
  4. Fallback (`ChatwootApp.max_limit` — effectively unlimited)

  ## Enforcement Points
  | Path | Where | Behavior |
  |------|-------|----------|
| WebWidget/API continuity |
`SendEmailNotificationService#should_send_email_notification?` |
Silently skipped |
| Widget transcript | `Widget::ConversationsController#transcript` |
Returns 429 |
| API transcript | `ConversationsController#transcript` | Returns 429 |
| Agent notifications | `Notification::EmailNotificationService#perform`
| Silently skipped |
  | Email channel replies | Not rate limited | Paid feature |
| Suspended accounts | `ConversationReplyMailer` | Blocked at mailer
level |

2026-02-03 02:06:51 +05:30

..

.keep

Initial Commit

2019-08-14 15:18:44 +05:30

access_tokenable.rb

Chore: Replaced dependent destroy with dependent destroy_async in all models (#3249)

2021-11-18 10:32:29 +05:30

account_cache_revalidator.rb

feat: expiry for cache keys [CW-3038] (#8793)

2024-01-29 15:27:26 +05:30

account_email_rate_limitable.rb

feat: add per-account daily rate limit for outbound emails (#13411)

2026-02-03 02:06:51 +05:30

activity_message_handler.rb

fix: I18n::MissingInterpolationArgument for assignee activity messages (#12617)

2025-10-08 18:39:51 +05:30

assignment_handler.rb

feat: Add support for multi-language support for Captain (#11068)

2025-03-19 18:25:33 -07:00

auto_assignment_handler.rb

feat: Assignment service (v2) (#12320)

2025-11-17 10:08:25 +05:30

availability_statusable.rb

chore: Move agent availability to Account level (#3074)

2021-10-07 13:21:46 +05:30

avatarable.rb

chore: Upgrade to Rails 7 (#6719)

2023-05-06 10:44:52 +05:30

cache_keys.rb

feat: expiry for cache keys [CW-3038] (#8793)

2024-01-29 15:27:26 +05:30

captain_featurable.rb

feat: add global config for captain settings (#13141)

2026-01-12 19:54:19 +05:30

channelable.rb

chore: Centralize outgoing message reply restrictions for all the channels (#11279)

2025-04-12 08:52:12 +05:30

content_attribute_validator.rb

chore: Upgrade rails and ruby versions (#2400)

2021-08-03 20:11:52 +05:30

conversation_mute_helpers.rb

fix: prevent NoMethodError in mute helpers when contact is nil (#13277)

2026-01-15 22:00:09 -08:00

featurable.rb

chore: Enable the new Rubocop rules (#7122)

2023-05-19 14:37:10 +05:30

inbox_agent_availability.rb

feat: Assignment service (v2) (#12320)

2025-11-17 10:08:25 +05:30

json_schema_validator.rb

feat: Add support for minutes in auto resolve feature (#11269)

2025-05-07 00:36:15 -07:00

label_activity_message_handler.rb

feat: add activity message for SLA (#9100)

2024-03-13 20:05:34 +05:30

labelable.rb

feat: Add support for labels in automations (#11658)

2025-09-18 14:17:54 +05:30

liquidable.rb

feat: Add liquid template support for WhatsApp template parameters (#12227)

2025-08-21 16:44:51 +05:30

llm_formattable.rb

chore: Update LLM formatter classes to include additional details (#11491)

2025-05-15 17:47:37 -07:00

message_filter_helpers.rb

feat: Enable sending template messages in webhooks (#7252)

2023-06-05 20:27:28 +05:30

out_of_offisable.rb

Fix: add option to choose 24 hour working slot (#4018)

2022-02-22 01:28:49 -08:00

priority_activity_message_handler.rb

chore(i18n): Improvements in automation and macros (#11231)

2025-04-02 15:48:42 -07:00

pubsubable.rb

chore: Rotate pubsub token on password change (#7194)

2023-05-27 13:24:31 +05:30

push_data_helper.rb

feat: UI to show the SLA threshold in chat screen (#9146)

2024-04-04 15:46:46 +05:30

reauthorizable.rb

feat: TikTok channel (#12741)

2025-12-17 07:54:50 -08:00

reportable.rb

Chore: clean up Reporting Events (#4044)

2022-02-28 18:16:12 +05:30

sla_activity_message_handler.rb

feat: add activity message for SLA (#9100)

2024-03-13 20:05:34 +05:30

sort_handler.rb

feat: Add support for ascending and descending options in sort (#8542)

2023-12-12 17:15:48 -08:00

sso_authenticatable.rb

feat: Prevent saving preferences and status when impersonating (#11164)

2025-05-20 17:34:30 -07:00

team_activity_message_handler.rb

feat: add activity message for SLA (#9100)

2024-03-13 20:05:34 +05:30

user_attribute_helpers.rb

chore: Account switching issue in newly added accounts (#12403)

2025-09-10 14:12:22 +05:30