@celestial-community/baileys 0.0.1-security → 1.0.0

package/engine-requirements.js

@@ -0,0 +1,10 @@
+const major = parseInt(process.versions.node.split('.')[0], 10)
+
+if (major < 20) {
+    console.error(
+        `\n❌ This package requires Node.js 20+ to run reliably.\n` +
+            `   You are using Node.js ${process.versions.node}.\n` +
+            `   Please upgrade to Node.js 20+ to proceed.\n`
+    )
+    process.exit(1)
+}

package/lib/Defaults/baileys-version.json

@@ -0,0 +1,7 @@
+{
+    "version": [
+        2,
+        3000,
+        1048819617
+    ]
+}

package/lib/Defaults/index.js

@@ -0,0 +1,157 @@
+var __importDefault =
+    (this && this.__importDefault) ||
+    function (a) {
+        return a && a.__esModule ? a : { default: a }
+    }
+
+Object.defineProperty(exports, '__esModule', { value: !0 })
+
+exports.DEFAULT_CACHE_TTLS =
+    exports.INITIAL_PREKEY_COUNT =
+    exports.MIN_PREKEY_COUNT =
+    exports.MEDIA_KEYS =
+    exports.MEDIA_HKDF_KEY_MAPPING =
+    exports.MEDIA_PATH_MAP =
+    exports.DEFAULT_CONNECTION_CONFIG =
+    exports.PROCESSABLE_HISTORY_TYPES =
+    exports.WA_CERT_DETAILS =
+    exports.URL_REGEX =
+    exports.NOISE_WA_HEADER =
+    exports.KEY_BUNDLE_TYPE =
+    exports.DICT_VERSION =
+    exports.NOISE_MODE =
+    exports.WA_DEFAULT_EPHEMERAL =
+    exports.PHONE_CONNECTION_CB =
+    exports.DEF_TAG_PREFIX =
+    exports.DEF_CALLBACK_PREFIX =
+    exports.DEFAULT_ORIGIN =
+    exports.UNAUTHORIZED_CODES =
+        void 0
+
+const crypto_1 = require('crypto')
+const WAProto_1 = require('../../WAProto'),
+    libsignal_1 = require('../Signal/libsignal'),
+    Utils_1 = require('../Utils'),
+    logger_1 = __importDefault(require('../Utils/logger')),
+    baileys_version_json_1 = require('./baileys-version.json'),
+    phonenumber_mcc_json_1 = __importDefault(require('./phonenumber-mcc.json'))
+
+exports.UNAUTHORIZED_CODES = [401, 403, 419]
+exports.version = [2, 3000, 1027934701]
+exports.PHONENUMBER_MCC = phonenumber_mcc_json_1.default
+exports.DEFAULT_ORIGIN = 'https://web.whatsapp.com'
+exports.MOBILE_ENDPOINT = 'g.whatsapp.net'
+exports.MOBILE_PORT = 443
+exports.DEF_CALLBACK_PREFIX = 'CB:'
+exports.DEF_TAG_PREFIX = 'TAG:'
+exports.PHONE_CONNECTION_CB = 'CB:Pong'
+exports.WA_DEFAULT_EPHEMERAL = 604800
+const WA_VERSION = '2.25.23.24'
+const WA_VERSION_HASH = (0, crypto_1.createHash)('md5').update(WA_VERSION).digest('hex')
+exports.MOBILE_TOKEN = Buffer.from('0a1mLfGUIBVrMKF1RdvLI5lkRBvof6vn0fD2QRSM' + WA_VERSION_HASH)
+exports.MOBILE_REGISTRATION_ENDPOINT = 'https://v.whatsapp.net/v2'
+exports.MOBILE_USERAGENT = `WhatsApp/${WA_VERSION} iOS/17.5.1 Device/Apple-iPhone_13`
+exports.REGISTRATION_PUBLIC_KEY = Buffer.from([
+    5, 142, 140, 15, 116, 195, 235, 197, 215, 166, 134, 92, 108, 60, 132, 56, 86, 176, 97, 33, 204,
+    232, 234, 119, 77, 34, 251, 111, 18, 37, 18, 48, 45
+])
+exports.NOISE_MODE = 'Noise_XX_25519_AESGCM_SHA256\x00\x00\x00\x00'
+exports.DICT_VERSION = 2
+exports.KEY_BUNDLE_TYPE = Buffer.from([5])
+exports.NOISE_WA_HEADER = Buffer.from([87, 65, 6, exports.DICT_VERSION])
+exports.PROTOCOL_VERSION = [5, 2]
+exports.MOBILE_NOISE_HEADER = Buffer.concat([
+    Buffer.from('WA'),
+    Buffer.from(exports.PROTOCOL_VERSION)
+])
+
+exports.URL_REGEX =
+    /https:\/\/(?![^:@\/\s]+:[^:@\/\s]+@)[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}(:\d+)?(\/[^\s]*)?/g
+exports.WA_CERT_DETAILS = { SERIAL: 0 }
+
+exports.PROCESSABLE_HISTORY_TYPES = [
+    WAProto_1.proto.HistorySync.HistorySyncType.INITIAL_BOOTSTRAP,
+    WAProto_1.proto.HistorySync.HistorySyncType.PUSH_NAME,
+    WAProto_1.proto.HistorySync.HistorySyncType.RECENT,
+    WAProto_1.proto.HistorySync.HistorySyncType.FULL,
+    WAProto_1.proto.HistorySync.HistorySyncType.ON_DEMAND,
+    WAProto_1.proto.HistorySync.HistorySyncType.NON_BLOCKING_DATA,
+    WAProto_1.proto.HistorySync.HistorySyncType.INITIAL_STATUS_V3
+]
+
+exports.DEFAULT_CONNECTION_CONFIG = {
+    // LID <-> PN helpers are lazy (only run when called). true = also learn mappings passively from existing events
+    enableLidMapping: false,
+    version: baileys_version_json_1.version,
+    browser: ['Chrome (Linux)', '', 'Chrome'],
+    waWebSocketUrl: 'wss://web.whatsapp.com/ws/chat',
+    connectTimeoutMs: 2e4,
+    keepAliveIntervalMs: 3e4,
+    logger: logger_1.default.child({ class: 'baileys' }),
+    printQRInTerminal: !1,
+    emitOwnEvents: !0,
+    defaultQueryTimeoutMs: 6e4,
+    customUploadHosts: [],
+    retryRequestDelayMs: 250,
+    maxMsgRetryCount: 5,
+    fireInitQueries: !0,
+    auth: void 0,
+    markOnlineOnConnect: !0,
+    syncFullHistory: !1,
+    patchMessageBeforeSending: (a) => a,
+    shouldSyncHistoryMessage: () => !0,
+    shouldIgnoreJid: () => !1,
+    linkPreviewImageThumbnailWidth: 192,
+    transactionOpts: { maxCommitRetries: 10, delayBetweenTriesMs: 3e3 },
+    generateHighQualityLinkPreview: !1,
+    options: {},
+    appStateMacVerification: { patch: !1, snapshot: !1 },
+    countryCode: 'US',
+    getMessage: async () => {},
+    cachedGroupMetadata: async () => {},
+    makeSignalRepository: libsignal_1.makeLibSignalRepository
+}
+
+exports.MEDIA_PATH_MAP = {
+    image: '/mms/image',
+    video: '/mms/video',
+    document: '/mms/document',
+    audio: '/mms/audio',
+    sticker: '/mms/image',
+    'thumbnail-link': '/mms/image',
+    'product-catalog-image': '/product/image',
+    'md-app-state': '',
+    'md-msg-hist': '/mms/md-app-state'
+}
+
+exports.MEDIA_HKDF_KEY_MAPPING = {
+    audio: 'Audio',
+    document: 'Document',
+    gif: 'Video',
+    image: 'Image',
+    ppic: '',
+    product: 'Image',
+    ptt: 'Audio',
+    sticker: 'Image',
+    video: 'Video',
+    'thumbnail-document': 'Document Thumbnail',
+    'thumbnail-image': 'Image Thumbnail',
+    'thumbnail-video': 'Video Thumbnail',
+    'thumbnail-link': 'Link Thumbnail',
+    'md-msg-hist': 'History',
+    'md-app-state': 'App State',
+    'product-catalog-image': '',
+    'payment-bg-image': 'Payment Background',
+    ptv: 'Video'
+}
+
+exports.MEDIA_KEYS = Object.keys(exports.MEDIA_PATH_MAP)
+exports.MIN_PREKEY_COUNT = 5
+exports.INITIAL_PREKEY_COUNT = 30
+
+exports.DEFAULT_CACHE_TTLS = {
+    SIGNAL_STORE: 300,
+    MSG_RETRY: 3600,
+    CALL_OFFER: 300,
+    USER_DEVICES: 300
+}

package/lib/Defaults/phonenumber-mcc.json

@@ -0,0 +1,223 @@
+{
+    "93": 412,
+    "355": 276,
+    "213": 603,
+    "1-684": 544,
+    "376": 213,
+    "244": 631,
+    "1-264": 365,
+    "1-268": 344,
+    "54": 722,
+    "374": 283,
+    "297": 363,
+    "61": 505,
+    "43": 232,
+    "994": 400,
+    "1-242": 364,
+    "973": 426,
+    "880": 470,
+    "1-246": 342,
+    "375": 257,
+    "32": 206,
+    "501": 702,
+    "229": 616,
+    "1-441": 350,
+    "975": 402,
+    "591": 736,
+    "387": 218,
+    "267": 652,
+    "55": 724,
+    "1-284": 348,
+    "673": 528,
+    "359": 284,
+    "226": 613,
+    "257": 642,
+    "855": 456,
+    "237": 624,
+    "238": 625,
+    "1-345": 346,
+    "236": 623,
+    "235": 622,
+    "56": 730,
+    "86": 454,
+    "57": 732,
+    "269": 654,
+    "682": 548,
+    "506": 712,
+    "385": 219,
+    "53": 368,
+    "357": 280,
+    "420": 230,
+    "243": 630,
+    "45": 238,
+    "253": 638,
+    "1-767": 366,
+    "1-809": 370,
+    "1-849": 370,
+    "1-829": 370,
+    "593": 740,
+    "20": 602,
+    "503": 706,
+    "240": 627,
+    "291": 657,
+    "372": 248,
+    "251": 636,
+    "500": 750,
+    "298": 288,
+    "679": 542,
+    "358": 244,
+    "33": 208,
+    "689": 547,
+    "241": 628,
+    "220": 607,
+    "995": 282,
+    "49": 262,
+    "233": 620,
+    "350": 266,
+    "30": 202,
+    "299": 290,
+    "1-473": 352,
+    "1-671": 535,
+    "502": 704,
+    "224": 537,
+    "592": 738,
+    "509": 372,
+    "504": 708,
+    "852": 454,
+    "36": 216,
+    "354": 274,
+    "91": 404,
+    "62": 510,
+    "98": 432,
+    "964": 418,
+    "353": 234,
+    "972": 425,
+    "39": 222,
+    "225": 612,
+    "1-876": 338,
+    "81": 440,
+    "962": 416,
+    "254": 639,
+    "686": 545,
+    "383": 221,
+    "965": 419,
+    "371": 247,
+    "961": 415,
+    "266": 651,
+    "231": 618,
+    "218": 606,
+    "423": 295,
+    "370": 246,
+    "352": 270,
+    "389": 294,
+    "261": 646,
+    "265": 650,
+    "60": 502,
+    "960": 472,
+    "223": 610,
+    "356": 278,
+    "692": 551,
+    "222": 609,
+    "230": 617,
+    "52": 334,
+    "691": 550,
+    "373": 259,
+    "377": 212,
+    "976": 428,
+    "382": 297,
+    "1-664": 354,
+    "212": 604,
+    "258": 643,
+    "95": 414,
+    "264": 649,
+    "674": 536,
+    "977": 429,
+    "31": 204,
+    "687": 546,
+    "64": 530,
+    "505": 710,
+    "227": 614,
+    "234": 621,
+    "683": 555,
+    "1-670": 534,
+    "47": 242,
+    "968": 226,
+    "92": 410,
+    "680": 552,
+    "970": 423,
+    "507": 714,
+    "675": 537,
+    "595": 744,
+    "51": 716,
+    "63": 515,
+    "48": 260,
+    "351": 268,
+    "1-787, 1-939": 330,
+    "974": 427,
+    "242": 630,
+    "40": 226,
+    "7": 250,
+    "250": 635,
+    "290": 658,
+    "1-869": 356,
+    "1-758": 358,
+    "508": 308,
+    "1-784": 360,
+    "685": 544,
+    "378": 292,
+    "239": 626,
+    "966": 420,
+    "221": 608,
+    "381": 220,
+    "248": 633,
+    "232": 619,
+    "65": 525,
+    "386": 293,
+    "677": 540,
+    "27": 655,
+    "211": 659,
+    "34": 214,
+    "94": 413,
+    "249": 634,
+    "597": 746,
+    "268": 653,
+    "46": 240,
+    "41": 228,
+    "963": 417,
+    "886": 466,
+    "992": 436,
+    "255": 640,
+    "66": 520,
+    "228": 615,
+    "690": 554,
+    "676": 539,
+    "1-868": 374,
+    "216": 605,
+    "90": 286,
+    "993": 438,
+    "1-649": 376,
+    "688": 553,
+    "1-340": 332,
+    "256": 641,
+    "380": 255,
+    "971": 424,
+    "44": 234,
+    "1": 310,
+    "598": 748,
+    "998": 434,
+    "678": 541,
+    "379": 225,
+    "58": 734,
+    "681": 543,
+    "967": 421,
+    "260": 645,
+    "263": 648,
+    "670": 514,
+    "245": 632,
+    "856": 457,
+    "599": 362,
+    "850": 467,
+    "262": 647,
+    "82": 450,
+    "84": 452
+}

package/lib/Signal/Group/ciphertext-message.js

@@ -0,0 +1,15 @@
+'use strict'
+Object.defineProperty(exports, '__esModule', { value: true })
+exports.CiphertextMessage = void 0
+class CiphertextMessage {
+    constructor() {
+        this.UNSUPPORTED_VERSION = 1
+        this.CURRENT_VERSION = 3
+        this.WHISPER_TYPE = 2
+        this.PREKEY_TYPE = 3
+        this.SENDERKEY_TYPE = 4
+        this.SENDERKEY_DISTRIBUTION_TYPE = 5
+        this.ENCRYPTED_MESSAGE_OVERHEAD = 53
+    }
+}
+exports.CiphertextMessage = CiphertextMessage

package/lib/Signal/Group/group-session-builder.js

@@ -0,0 +1,94 @@
+'use strict'
+var __createBinding =
+    (this && this.__createBinding) ||
+    (Object.create
+        ? function (o, m, k, k2) {
+              if (k2 === undefined) k2 = k
+              var desc = Object.getOwnPropertyDescriptor(m, k)
+              if (!desc || ('get' in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+                  desc = {
+                      enumerable: true,
+                      get: function () {
+                          return m[k]
+                      }
+                  }
+              }
+              Object.defineProperty(o, k2, desc)
+          }
+        : function (o, m, k, k2) {
+              if (k2 === undefined) k2 = k
+              o[k2] = m[k]
+          })
+var __setModuleDefault =
+    (this && this.__setModuleDefault) ||
+    (Object.create
+        ? function (o, v) {
+              Object.defineProperty(o, 'default', { enumerable: true, value: v })
+          }
+        : function (o, v) {
+              o['default'] = v
+          })
+var __importStar =
+    (this && this.__importStar) ||
+    (function () {
+        var ownKeys = function (o) {
+            ownKeys =
+                Object.getOwnPropertyNames ||
+                function (o) {
+                    var ar = []
+                    for (var k in o)
+                        if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k
+                    return ar
+                }
+            return ownKeys(o)
+        }
+        return function (mod) {
+            if (mod && mod.__esModule) return mod
+            var result = {}
+            if (mod != null)
+                for (var k = ownKeys(mod), i = 0; i < k.length; i++)
+                    if (k[i] !== 'default') __createBinding(result, mod, k[i])
+            __setModuleDefault(result, mod)
+            return result
+        }
+    })()
+Object.defineProperty(exports, '__esModule', { value: true })
+exports.GroupSessionBuilder = void 0
+const keyhelper = __importStar(require('./keyhelper'))
+const sender_key_distribution_message_1 = require('./sender-key-distribution-message')
+class GroupSessionBuilder {
+    constructor(senderKeyStore) {
+        this.senderKeyStore = senderKeyStore
+    }
+    async process(senderKeyName, senderKeyDistributionMessage) {
+        const senderKeyRecord = await this.senderKeyStore.loadSenderKey(senderKeyName)
+        senderKeyRecord.addSenderKeyState(
+            senderKeyDistributionMessage.getId(),
+            senderKeyDistributionMessage.getIteration(),
+            senderKeyDistributionMessage.getChainKey(),
+            senderKeyDistributionMessage.getSignatureKey()
+        )
+        await this.senderKeyStore.storeSenderKey(senderKeyName, senderKeyRecord)
+    }
+    async create(senderKeyName) {
+        const senderKeyRecord = await this.senderKeyStore.loadSenderKey(senderKeyName)
+        if (senderKeyRecord.isEmpty()) {
+            const keyId = keyhelper.generateSenderKeyId()
+            const senderKey = keyhelper.generateSenderKey()
+            const signingKey = keyhelper.generateSenderSigningKey()
+            senderKeyRecord.setSenderKeyState(keyId, 0, senderKey, signingKey)
+            await this.senderKeyStore.storeSenderKey(senderKeyName, senderKeyRecord)
+        }
+        const state = senderKeyRecord.getSenderKeyState()
+        if (!state) {
+            throw new Error('No session state available')
+        }
+        return new sender_key_distribution_message_1.SenderKeyDistributionMessage(
+            state.getKeyId(),
+            state.getSenderChainKey().getIteration(),
+            state.getSenderChainKey().getSeed(),
+            state.getSigningKeyPublic()
+        )
+    }
+}
+exports.GroupSessionBuilder = GroupSessionBuilder

package/lib/Signal/Group/group_cipher.js

@@ -0,0 +1,118 @@
+'use strict'
+var __importDefault =
+    (this && this.__importDefault) ||
+    function (mod) {
+        return mod && mod.__esModule ? mod : { default: mod }
+    }
+Object.defineProperty(exports, '__esModule', { value: true })
+exports.GroupCipher = void 0
+const crypto_1 = require('libsignal/src/crypto')
+const queue_job_1 = __importDefault(require('./queue-job'))
+const sender_key_message_1 = require('./sender-key-message')
+class GroupCipher {
+    constructor(senderKeyStore, senderKeyName) {
+        this.senderKeyStore = senderKeyStore
+        this.senderKeyName = senderKeyName
+    }
+    queueJob(awaitable) {
+        return (0, queue_job_1.default)(this.senderKeyName.toString(), awaitable)
+    }
+    async encrypt(paddedPlaintext) {
+        return await this.queueJob(async () => {
+            const record = await this.senderKeyStore.loadSenderKey(this.senderKeyName)
+            if (!record) {
+                throw new Error('No SenderKeyRecord found for encryption')
+            }
+            const senderKeyState = record.getSenderKeyState()
+            if (!senderKeyState) {
+                throw new Error('No session to encrypt message')
+            }
+            const iteration = senderKeyState.getSenderChainKey().getIteration()
+            const senderKey = this.getSenderKey(senderKeyState, iteration === 0 ? 0 : iteration + 1)
+            const ciphertext = await this.getCipherText(
+                senderKey.getIv(),
+                senderKey.getCipherKey(),
+                paddedPlaintext
+            )
+            const senderKeyMessage = new sender_key_message_1.SenderKeyMessage(
+                senderKeyState.getKeyId(),
+                senderKey.getIteration(),
+                ciphertext,
+                senderKeyState.getSigningKeyPrivate()
+            )
+            await this.senderKeyStore.storeSenderKey(this.senderKeyName, record)
+            return senderKeyMessage.serialize()
+        })
+    }
+    async decrypt(senderKeyMessageBytes) {
+        return await this.queueJob(async () => {
+            const record = await this.senderKeyStore.loadSenderKey(this.senderKeyName)
+            if (!record) {
+                throw new Error('No SenderKeyRecord found for decryption')
+            }
+            const senderKeyMessage = new sender_key_message_1.SenderKeyMessage(
+                null,
+                null,
+                null,
+                null,
+                senderKeyMessageBytes
+            )
+            const senderKeyState = record.getSenderKeyState(senderKeyMessage.getKeyId())
+            if (!senderKeyState) {
+                throw new Error('No session found to decrypt message')
+            }
+            senderKeyMessage.verifySignature(senderKeyState.getSigningKeyPublic())
+            const senderKey = this.getSenderKey(senderKeyState, senderKeyMessage.getIteration())
+            const plaintext = await this.getPlainText(
+                senderKey.getIv(),
+                senderKey.getCipherKey(),
+                senderKeyMessage.getCipherText()
+            )
+            await this.senderKeyStore.storeSenderKey(this.senderKeyName, record)
+            return plaintext
+        })
+    }
+    getSenderKey(senderKeyState, iteration) {
+        let senderChainKey = senderKeyState.getSenderChainKey()
+        if (senderChainKey.getIteration() > iteration) {
+            if (senderKeyState.hasSenderMessageKey(iteration)) {
+                const messageKey = senderKeyState.removeSenderMessageKey(iteration)
+                if (!messageKey) {
+                    throw new Error('No sender message key found for iteration')
+                }
+                return messageKey
+            }
+            throw new Error(
+                `Received message with old counter: ${senderChainKey.getIteration()}, ${iteration}`
+            )
+        }
+        if (iteration - senderChainKey.getIteration() > 2000) {
+            throw new Error('Over 2000 messages into the future!')
+        }
+        while (senderChainKey.getIteration() < iteration) {
+            senderKeyState.addSenderMessageKey(senderChainKey.getSenderMessageKey())
+            senderChainKey = senderChainKey.getNext()
+        }
+        senderKeyState.setSenderChainKey(senderChainKey.getNext())
+        return senderChainKey.getSenderMessageKey()
+    }
+    async getPlainText(iv, key, ciphertext) {
+        try {
+            return (0, crypto_1.decrypt)(key, ciphertext, iv)
+        } catch (e) {
+            throw new Error('InvalidMessageException')
+        }
+    }
+    async getCipherText(iv, key, plaintext) {
+        try {
+            const ivBuffer = typeof iv === 'string' ? Buffer.from(iv, 'base64') : iv
+            const keyBuffer = typeof key === 'string' ? Buffer.from(key, 'base64') : key
+            const plaintextBuffer =
+                typeof plaintext === 'string' ? Buffer.from(plaintext) : plaintext
+            return (0, crypto_1.encrypt)(keyBuffer, plaintextBuffer, ivBuffer)
+        } catch (e) {
+            throw new Error('InvalidMessageException')
+        }
+    }
+}
+exports.GroupCipher = GroupCipher