sms

Run the query script with the --recent-codes flag using the project venv Python. It reads ~/Library/Messages/chat.db directly and prints one code-bearing message per line, newest first, with optional phone-suffix and lookback filters.

Pass the --phone-suffix argument with the last digits of the sender's number, for example --phone-suffix 1118. The script matches handles ending with those digits and returns only messages from that sender.

Yes, the calling process needs Full Disk Access granted in System Settings under Privacy & Security. Without it, macOS TCC blocks the read and the script fails fast with a sqlite3 OperationalError rather than falling back.

The script queries only rows where the service is SMS in the Messages database, so it returns SMS texts rather than iMessage-to-iMessage traffic. Verification codes sent as SMS are fully covered.

The error occurs when macOS TCC denies access to chat.db because the calling process lacks Full Disk Access. Grant the permission in System Settings and rerun; there is no fallback path by design.

The regex patterns detect codes in English (verification code, OTP), Chinese (验证码, 校验码), Korean (인증번호), and Japanese (認証コード), plus Google-style G-XXXXXX codes and standalone 4-8 digit sequences.