@celestial-community/baileys 0.0.1-security → 1.0.0

package/lib/Utils/messages-media.js

@@ -0,0 +1,899 @@
+'use strict'
+var __createBinding =
+    (this && this.__createBinding) ||
+    (Object.create
+        ? function (o, m, k, k2) {
+              if (k2 === undefined) k2 = k
+              var desc = Object.getOwnPropertyDescriptor(m, k)
+              if (!desc || ('get' in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+                  desc = {
+                      enumerable: true,
+                      get: function () {
+                          return m[k]
+                      }
+                  }
+              }
+              Object.defineProperty(o, k2, desc)
+          }
+        : function (o, m, k, k2) {
+              if (k2 === undefined) k2 = k
+              o[k2] = m[k]
+          })
+var __setModuleDefault =
+    (this && this.__setModuleDefault) ||
+    (Object.create
+        ? function (o, v) {
+              Object.defineProperty(o, 'default', { enumerable: true, value: v })
+          }
+        : function (o, v) {
+              o['default'] = v
+          })
+var __importStar =
+    (this && this.__importStar) ||
+    function (mod) {
+        if (mod && mod.__esModule) return mod
+        var result = {}
+        if (mod != null)
+            for (var k in mod)
+                if (k !== 'default' && Object.prototype.hasOwnProperty.call(mod, k))
+                    __createBinding(result, mod, k)
+        __setModuleDefault(result, mod)
+        return result
+    }
+Object.defineProperty(exports, '__esModule', { value: true })
+exports.getStatusCodeForMediaRetry =
+    exports.decryptMediaRetryData =
+    exports.decodeMediaRetryNode =
+    exports.encryptMediaRetryRequest =
+    exports.getWAUploadToServer =
+    exports.extensionForMediaMessage =
+    exports.downloadEncryptedContent =
+    exports.downloadContentFromMessage =
+    exports.getUrlFromDirectPath =
+    exports.encryptedStream =
+    exports.prepareStream =
+    exports.getHttpStream =
+    exports.generateThumbnail =
+    exports.getStream =
+    exports.toBuffer =
+    exports.toReadable =
+    exports.getAudioWaveform =
+    exports.getAudioDuration =
+    exports.mediaMessageSHA256B64 =
+    exports.generateProfilePicture =
+    exports.encodeBase64EncodedStringForUpload =
+    exports.extractImageThumb =
+    exports.getMediaKeys =
+    exports.hkdfInfoKey =
+        void 0
+const boom_1 = require('@hapi/boom')
+const child_process_1 = require('child_process')
+const Crypto = __importStar(require('crypto'))
+const events_1 = require('events')
+const fs_1 = require('fs')
+const os_1 = require('os')
+const path_1 = require('path')
+const stream_1 = require('stream')
+const WAProto_1 = require('../../WAProto')
+const Defaults_1 = require('../Defaults')
+const WABinary_1 = require('../WABinary')
+const crypto_1 = require('./crypto')
+const generics_1 = require('./generics')
+const getTmpFilesDirectory = () => (0, os_1.tmpdir)()
+const getImageProcessingLibrary = async () => {
+    const [_jimp, sharp] = await Promise.all([
+        (async () => {
+            const jimp = await import('jimp').catch(() => {})
+            return jimp
+        })(),
+        (async () => {
+            const sharp = await import('sharp').catch(() => {})
+            return sharp
+        })()
+    ])
+    if (sharp) {
+        return { sharp }
+    }
+    const jimp = (_jimp === null || _jimp === void 0 ? void 0 : _jimp.default) || _jimp
+    if (jimp) {
+        return { jimp }
+    }
+    throw new boom_1.Boom('No image processing library available')
+}
+const hkdfInfoKey = (type) => {
+    const hkdfInfo = Defaults_1.MEDIA_HKDF_KEY_MAPPING[type]
+    return `WhatsApp ${hkdfInfo} Keys`
+}
+exports.hkdfInfoKey = hkdfInfoKey
+/** generates all the keys required to encrypt/decrypt & sign a media message */
+function getMediaKeys(buffer, mediaType) {
+    if (!buffer) {
+        throw new boom_1.Boom('Cannot derive from empty media key')
+    }
+    if (typeof buffer === 'string') {
+        buffer = Buffer.from(buffer.replace('data:;base64,', ''), 'base64')
+    }
+    // expand using HKDF to 112 bytes, also pass in the relevant app info
+    const expandedMediaKey = (0, crypto_1.hkdf)(buffer, 112, {
+        info: (0, exports.hkdfInfoKey)(mediaType)
+    })
+    return {
+        iv: expandedMediaKey.slice(0, 16),
+        cipherKey: expandedMediaKey.slice(16, 48),
+        macKey: expandedMediaKey.slice(48, 80)
+    }
+}
+exports.getMediaKeys = getMediaKeys
+/** Extracts video thumb using FFMPEG */
+const extractVideoThumb = async (path, destPath, time, size) =>
+    new Promise((resolve, reject) => {
+        const cmd = `ffmpeg -ss ${time} -i ${path} -y -vf scale=${size.width}:-1 -vframes 1 -f image2 ${destPath}`
+        ;(0, child_process_1.exec)(cmd, (err) => {
+            if (err) {
+                reject(err)
+            } else {
+                resolve()
+            }
+        })
+    })
+const extractImageThumb = async (bufferOrFilePath, width = 32) => {
+    var _a, _b
+    if (bufferOrFilePath instanceof stream_1.Readable) {
+        bufferOrFilePath = await (0, exports.toBuffer)(bufferOrFilePath)
+    }
+    const lib = await getImageProcessingLibrary()
+    if (
+        'sharp' in lib &&
+        typeof ((_a = lib.sharp) === null || _a === void 0 ? void 0 : _a.default) === 'function'
+    ) {
+        const img = lib.sharp.default(bufferOrFilePath)
+        const dimensions = await img.metadata()
+        const buffer = await img.resize(width).jpeg({ quality: 50 }).toBuffer()
+        return {
+            buffer,
+            original: {
+                width: dimensions.width,
+                height: dimensions.height
+            }
+        }
+    } else if (
+        'jimp' in lib &&
+        typeof ((_b = lib.jimp) === null || _b === void 0 ? void 0 : _b.read) === 'function'
+    ) {
+        const { read, MIME_JPEG, RESIZE_BILINEAR, AUTO } = lib.jimp
+        const jimp = await read(bufferOrFilePath)
+        const dimensions = {
+            width: jimp.getWidth(),
+            height: jimp.getHeight()
+        }
+        const buffer = await jimp
+            .quality(50)
+            .resize(width, AUTO, RESIZE_BILINEAR)
+            .getBufferAsync(MIME_JPEG)
+        return {
+            buffer,
+            original: dimensions
+        }
+    } else {
+        throw new boom_1.Boom('No image processing library available')
+    }
+}
+exports.extractImageThumb = extractImageThumb
+const encodeBase64EncodedStringForUpload = (b64) =>
+    encodeURIComponent(b64.replace(/\+/g, '-').replace(/\//g, '_').replace(/\=+$/, ''))
+exports.encodeBase64EncodedStringForUpload = encodeBase64EncodedStringForUpload
+const generateProfilePicture = async (mediaUpload) => {
+    var _a, _b
+    let bufferOrFilePath
+    if (Buffer.isBuffer(mediaUpload)) {
+        bufferOrFilePath = mediaUpload
+    } else if ('url' in mediaUpload) {
+        bufferOrFilePath = mediaUpload.url.toString()
+    } else {
+        bufferOrFilePath = await (0, exports.toBuffer)(mediaUpload.stream)
+    }
+    const lib = await getImageProcessingLibrary()
+    let img
+    if (
+        'sharp' in lib &&
+        typeof ((_a = lib.sharp) === null || _a === void 0 ? void 0 : _a.default) === 'function'
+    ) {
+        img = lib.sharp
+            .default(bufferOrFilePath)
+            .resize(640, 640)
+            .jpeg({
+                quality: 50
+            })
+            .toBuffer()
+    } else if (
+        'jimp' in lib &&
+        typeof ((_b = lib.jimp) === null || _b === void 0 ? void 0 : _b.read) === 'function'
+    ) {
+        const { read, MIME_JPEG, RESIZE_BILINEAR } = lib.jimp
+        const jimp = await read(bufferOrFilePath)
+        const min = Math.min(jimp.getWidth(), jimp.getHeight())
+        const cropped = jimp.crop(0, 0, min, min)
+        img = cropped.quality(50).resize(640, 640, RESIZE_BILINEAR).getBufferAsync(MIME_JPEG)
+    } else {
+        throw new boom_1.Boom('No image processing library available')
+    }
+    return {
+        img: await img
+    }
+}
+exports.generateProfilePicture = generateProfilePicture
+/** gets the SHA256 of the given media message */
+const mediaMessageSHA256B64 = (message) => {
+    const media = Object.values(message)[0]
+    return (
+        (media === null || media === void 0 ? void 0 : media.fileSha256) &&
+        Buffer.from(media.fileSha256).toString('base64')
+    )
+}
+exports.mediaMessageSHA256B64 = mediaMessageSHA256B64
+async function getAudioDuration(buffer) {
+    try {
+        const { PassThrough } = require('stream')
+        const ff = require('fluent-ffmpeg')
+
+        return await new Promise((resolve, reject) => {
+            const inputStream = new PassThrough()
+            inputStream.end(buffer)
+
+            ff(inputStream).ffprobe((err, data) => {
+                if (err) reject(err)
+                else resolve(data.format.duration)
+            })
+        })
+    } catch (error) {
+        const musicMetadata = await import('music-metadata')
+        let metadata
+        if (Buffer.isBuffer(buffer)) {
+            metadata = await musicMetadata.parseBuffer(buffer, undefined, {
+                duration: true
+            })
+        } else if (typeof buffer === 'string') {
+            const rStream = (0, fs_1.createReadStream)(buffer)
+            try {
+                metadata = await musicMetadata.parseStream(rStream, undefined, {
+                    duration: true
+                })
+            } finally {
+                rStream.destroy()
+            }
+        } else {
+            metadata = await musicMetadata.parseStream(buffer, undefined, {
+                duration: true
+            })
+        }
+        return metadata.format.duration
+    }
+}
+exports.getAudioDuration = getAudioDuration
+async function getAudioWaveform(buffer, logger) {
+    try {
+        const { PassThrough } = require('stream')
+        const ff = require('fluent-ffmpeg')
+
+        let audioData
+        if (Buffer.isBuffer(buffer)) {
+            audioData = buffer
+        } else if (typeof buffer === 'string') {
+            const rStream = require('fs').createReadStream(buffer)
+            audioData = await exports.toBuffer(rStream)
+        } else {
+            audioData = await exports.toBuffer(buffer)
+        }
+
+        return await new Promise((resolve, reject) => {
+            const inputStream = new PassThrough()
+            inputStream.end(audioData)
+            const chunks = []
+            const bars = 64
+
+            ff(inputStream)
+                .audioChannels(1)
+                .audioFrequency(16000)
+                .format('s16le')
+                .on('error', reject)
+                .on('end', () => {
+                    const rawData = Buffer.concat(chunks)
+                    const samples = rawData.length / 2
+                    const amplitudes = []
+
+                    for (let i = 0; i < samples; i++) {
+                        amplitudes.push(Math.abs(rawData.readInt16LE(i * 2)) / 32768)
+                    }
+
+                    const blockSize = Math.floor(amplitudes.length / bars)
+                    const avg = []
+                    for (let i = 0; i < bars; i++) {
+                        const block = amplitudes.slice(i * blockSize, (i + 1) * blockSize)
+                        avg.push(block.reduce((a, b) => a + b, 0) / block.length)
+                    }
+
+                    const max = Math.max(...avg)
+                    const normalized = avg.map((v) => Math.floor((v / max) * 100))
+                    resolve(new Uint8Array(normalized))
+                })
+                .pipe()
+                .on('data', (chunk) => chunks.push(chunk))
+        })
+    } catch (e) {
+        logger?.debug(e)
+    }
+}
+exports.getAudioWaveform = getAudioWaveform
+async function convertToOpusBuffer(buffer, logger) {
+    try {
+        const { PassThrough } = require('stream')
+        const ff = require('fluent-ffmpeg')
+
+        return await new Promise((resolve, reject) => {
+            const inStream = new PassThrough()
+            const outStream = new PassThrough()
+            const chunks = []
+            inStream.end(buffer)
+
+            ff(inStream)
+                .noVideo()
+                .audioCodec('libopus')
+                .format('ogg')
+                .audioBitrate('48k')
+                .audioChannels(1)
+                .audioFrequency(48000)
+                .outputOptions([
+                    '-vn',
+                    '-b:a 64k',
+                    '-ac 2',
+                    '-ar 48000',
+                    '-map_metadata',
+                    '-1',
+                    '-application',
+                    'voip'
+                ])
+                .on('error', reject)
+                .on('end', () => resolve(Buffer.concat(chunks)))
+                .pipe(outStream, {
+                    end: true
+                })
+            outStream.on('data', (c) => chunks.push(c))
+        })
+    } catch (e) {
+        logger?.debug(e)
+        throw e
+    }
+}
+exports.convertToOpusBuffer = convertToOpusBuffer
+const toReadable = (buffer) => {
+    const readable = new stream_1.Readable({ read: () => {} })
+    readable.push(buffer)
+    readable.push(null)
+    return readable
+}
+exports.toReadable = toReadable
+const toBuffer = async (stream) => {
+    const chunks = []
+    for await (const chunk of stream) {
+        chunks.push(chunk)
+    }
+    stream.destroy()
+    return Buffer.concat(chunks)
+}
+exports.toBuffer = toBuffer
+const getStream = async (item, opts) => {
+    if (Buffer.isBuffer(item)) {
+        return { stream: (0, exports.toReadable)(item), type: 'buffer' }
+    }
+    if ('stream' in item) {
+        return { stream: item.stream, type: 'readable' }
+    }
+    if (item.url.toString().startsWith('http://') || item.url.toString().startsWith('https://')) {
+        return { stream: await (0, exports.getHttpStream)(item.url, opts), type: 'remote' }
+    }
+    return { stream: (0, fs_1.createReadStream)(item.url), type: 'file' }
+}
+exports.getStream = getStream
+/** generates a thumbnail for a given media, if required */
+async function generateThumbnail(file, mediaType, options) {
+    var _a
+    let thumbnail
+    let originalImageDimensions
+    if (mediaType === 'image') {
+        const { buffer, original } = await (0, exports.extractImageThumb)(file)
+        thumbnail = buffer.toString('base64')
+        if (original.width && original.height) {
+            originalImageDimensions = {
+                width: original.width,
+                height: original.height
+            }
+        }
+    } else if (mediaType === 'video') {
+        const imgFilename = (0, path_1.join)(
+            getTmpFilesDirectory(),
+            (0, generics_1.generateMessageID)() + '.jpg'
+        )
+        try {
+            await extractVideoThumb(file, imgFilename, '00:00:00', { width: 32, height: 32 })
+            const buff = await fs_1.promises.readFile(imgFilename)
+            thumbnail = buff.toString('base64')
+            await fs_1.promises.unlink(imgFilename)
+        } catch (err) {
+            ;(_a = options.logger) === null || _a === void 0
+                ? void 0
+                : _a.debug('could not generate video thumb: ' + err)
+        }
+    }
+    return {
+        thumbnail,
+        originalImageDimensions
+    }
+}
+exports.generateThumbnail = generateThumbnail
+const getHttpStream = async (url, options = {}) => {
+    const { default: axios } = await import('axios')
+    const fetched = await axios.get(url.toString(), { ...options, responseType: 'stream' })
+    return fetched.data
+}
+exports.getHttpStream = getHttpStream
+const prepareStream = async (
+    media,
+    mediaType,
+    { logger, saveOriginalFileIfRequired, opts } = {}
+) => {
+    const { stream, type } = await (0, exports.getStream)(media, opts)
+    logger === null || logger === void 0 ? void 0 : logger.debug('fetched media stream')
+    let bodyPath
+    let didSaveToTmpPath = false
+    try {
+        const buffer = await (0, exports.toBuffer)(stream)
+        if (type === 'file') {
+            bodyPath = media.url
+        } else if (saveOriginalFileIfRequired) {
+            bodyPath = (0, path_1.join)(
+                getTmpFilesDirectory(),
+                mediaType + (0, generics_1.generateMessageID)()
+            )
+            ;(0, fs_1.writeFileSync)(bodyPath, buffer)
+            didSaveToTmpPath = true
+        }
+        const fileLength = buffer.length
+        const fileSha256 = Crypto.createHash('sha256').update(buffer).digest()
+        stream === null || stream === void 0 ? void 0 : stream.destroy()
+        logger === null || logger === void 0
+            ? void 0
+            : logger.debug('prepare stream data successfully')
+        return {
+            mediaKey: undefined,
+            encWriteStream: buffer,
+            fileLength,
+            fileSha256,
+            fileEncSha256: undefined,
+            bodyPath,
+            didSaveToTmpPath
+        }
+    } catch (error) {
+        // destroy all streams with error
+        stream.destroy()
+        if (didSaveToTmpPath) {
+            try {
+                await fs_1.promises.unlink(bodyPath)
+            } catch (err) {
+                logger === null || logger === void 0
+                    ? void 0
+                    : logger.error({ err }, 'failed to save to tmp path')
+            }
+        }
+        throw error
+    }
+}
+exports.prepareStream = prepareStream
+const encryptedStream = async (
+    media,
+    mediaType,
+    { logger, saveOriginalFileIfRequired, opts, isPtt, forceOpus } = {}
+) => {
+    const { stream, type } = await (0, exports.getStream)(media, opts)
+
+    let finalStream = stream
+    if (mediaType === 'audio' && (isPtt === true || forceOpus === true)) {
+        try {
+            const buffer = await (0, exports.toBuffer)(stream)
+            const opusBuffer = await exports.convertToOpusBuffer(buffer, logger)
+            finalStream = (0, exports.toReadable)(opusBuffer)
+        } catch (error) {
+            const { stream: newStream } = await (0, exports.getStream)(media, opts)
+            finalStream = newStream
+        }
+    }
+
+    const mediaKey = Crypto.randomBytes(32)
+    const { cipherKey, iv, macKey } = getMediaKeys(mediaKey, mediaType)
+    const encWriteStream = new stream_1.Readable({ read: () => {} })
+    let bodyPath
+    let writeStream
+    let didSaveToTmpPath = false
+
+    if (type === 'file') {
+        bodyPath = media.url
+    } else if (saveOriginalFileIfRequired) {
+        bodyPath = (0, path_1.join)(
+            getTmpFilesDirectory(),
+            mediaType + (0, generics_1.generateMessageID)()
+        )
+        writeStream = (0, fs_1.createWriteStream)(bodyPath)
+        didSaveToTmpPath = true
+    }
+
+    let fileLength = 0
+    const aes = Crypto.createCipheriv('aes-256-cbc', cipherKey, iv)
+    let hmac = Crypto.createHmac('sha256', macKey).update(iv)
+    let sha256Plain = Crypto.createHash('sha256')
+    let sha256Enc = Crypto.createHash('sha256')
+
+    try {
+        for await (const data of finalStream) {
+            fileLength += data.length
+            if (
+                type === 'remote' &&
+                (opts === null || opts === void 0 ? void 0 : opts.maxContentLength) &&
+                fileLength + data.length > opts.maxContentLength
+            ) {
+                throw new boom_1.Boom(`content length exceeded when encrypting "${type}"`, {
+                    data: { media, type }
+                })
+            }
+
+            sha256Plain = sha256Plain.update(data)
+            if (writeStream) {
+                if (!writeStream.write(data)) {
+                    await (0, events_1.once)(writeStream, 'drain')
+                }
+            }
+            onChunk(aes.update(data))
+        }
+
+        onChunk(aes.final())
+        const mac = hmac.digest().slice(0, 10)
+        sha256Enc = sha256Enc.update(mac)
+        const fileSha256 = sha256Plain.digest()
+        const fileEncSha256 = sha256Enc.digest()
+
+        encWriteStream.push(mac)
+        encWriteStream.push(null)
+        writeStream === null || writeStream === void 0 ? void 0 : writeStream.end()
+        finalStream.destroy()
+
+        return {
+            mediaKey,
+            encWriteStream,
+            bodyPath,
+            mac,
+            fileEncSha256,
+            fileSha256,
+            fileLength,
+            didSaveToTmpPath
+        }
+    } catch (error) {
+        encWriteStream.destroy()
+        writeStream === null || writeStream === void 0 ? void 0 : writeStream.destroy()
+        aes.destroy()
+        hmac.destroy()
+        sha256Plain.destroy()
+        sha256Enc.destroy()
+        finalStream.destroy()
+
+        if (didSaveToTmpPath) {
+            try {
+                await fs_1.promises.unlink(bodyPath)
+            } catch (err) {}
+        }
+        throw error
+    }
+
+    function onChunk(buff) {
+        sha256Enc = sha256Enc.update(buff)
+        hmac = hmac.update(buff)
+        encWriteStream.push(buff)
+    }
+}
+exports.encryptedStream = encryptedStream
+const DEF_HOST = 'mmg.whatsapp.net'
+const AES_CHUNK_SIZE = 16
+const toSmallestChunkSize = (num) => {
+    return Math.floor(num / AES_CHUNK_SIZE) * AES_CHUNK_SIZE
+}
+const getUrlFromDirectPath = (directPath) => `https://${DEF_HOST}${directPath}`
+exports.getUrlFromDirectPath = getUrlFromDirectPath
+const downloadContentFromMessage = ({ mediaKey, directPath, url }, type, opts = {}) => {
+    const downloadUrl = url || (0, exports.getUrlFromDirectPath)(directPath)
+    const keys = getMediaKeys(mediaKey, type)
+    return (0, exports.downloadEncryptedContent)(downloadUrl, keys, opts)
+}
+exports.downloadContentFromMessage = downloadContentFromMessage
+/**
+ * Decrypts and downloads an AES256-CBC encrypted file given the keys.
+ * Assumes the SHA256 of the plaintext is appended to the end of the ciphertext
+ * */
+const downloadEncryptedContent = async (
+    downloadUrl,
+    { cipherKey, iv },
+    { startByte, endByte, options } = {}
+) => {
+    let bytesFetched = 0
+    let startChunk = 0
+    let firstBlockIsIV = false
+    // if a start byte is specified -- then we need to fetch the previous chunk as that will form the IV
+    if (startByte) {
+        const chunk = toSmallestChunkSize(startByte || 0)
+        if (chunk) {
+            startChunk = chunk - AES_CHUNK_SIZE
+            bytesFetched = chunk
+            firstBlockIsIV = true
+        }
+    }
+    const endChunk = endByte ? toSmallestChunkSize(endByte || 0) + AES_CHUNK_SIZE : undefined
+    const headers = {
+        ...((options === null || options === void 0 ? void 0 : options.headers) || {}),
+        Origin: Defaults_1.DEFAULT_ORIGIN
+    }
+    if (startChunk || endChunk) {
+        headers.Range = `bytes=${startChunk}-`
+        if (endChunk) {
+            headers.Range += endChunk
+        }
+    }
+    // download the message
+    const fetched = await (0, exports.getHttpStream)(downloadUrl, {
+        ...(options || {}),
+        headers,
+        maxBodyLength: Infinity,
+        maxContentLength: Infinity
+    })
+    let remainingBytes = Buffer.from([])
+    let aes
+    const pushBytes = (bytes, push) => {
+        if (startByte || endByte) {
+            const start =
+                bytesFetched >= startByte ? undefined : Math.max(startByte - bytesFetched, 0)
+            const end =
+                bytesFetched + bytes.length < endByte
+                    ? undefined
+                    : Math.max(endByte - bytesFetched, 0)
+            push(bytes.slice(start, end))
+            bytesFetched += bytes.length
+        } else {
+            push(bytes)
+        }
+    }
+    const output = new stream_1.Transform({
+        transform(chunk, _, callback) {
+            let data = Buffer.concat([remainingBytes, chunk])
+            const decryptLength = toSmallestChunkSize(data.length)
+            remainingBytes = data.slice(decryptLength)
+            data = data.slice(0, decryptLength)
+            if (!aes) {
+                let ivValue = iv
+                if (firstBlockIsIV) {
+                    ivValue = data.slice(0, AES_CHUNK_SIZE)
+                    data = data.slice(AES_CHUNK_SIZE)
+                }
+                aes = Crypto.createDecipheriv('aes-256-cbc', cipherKey, ivValue)
+                // if an end byte that is not EOF is specified
+                // stop auto padding (PKCS7) -- otherwise throws an error for decryption
+                if (endByte) {
+                    aes.setAutoPadding(false)
+                }
+            }
+            try {
+                pushBytes(aes.update(data), (b) => this.push(b))
+                callback()
+            } catch (error) {
+                callback(error)
+            }
+        },
+        final(callback) {
+            try {
+                pushBytes(aes.final(), (b) => this.push(b))
+                callback()
+            } catch (error) {
+                callback(error)
+            }
+        }
+    })
+    return fetched.pipe(output, { end: true })
+}
+exports.downloadEncryptedContent = downloadEncryptedContent
+function extensionForMediaMessage(message) {
+    const getExtension = (mimetype) => mimetype.split(';')[0].split('/')[1]
+    const type = Object.keys(message)[0]
+    let extension
+    if (type === 'locationMessage' || type === 'liveLocationMessage' || type === 'productMessage') {
+        extension = '.jpeg'
+    } else {
+        const messageContent = message[type]
+        extension = getExtension(messageContent.mimetype)
+    }
+    return extension
+}
+exports.extensionForMediaMessage = extensionForMediaMessage
+const getWAUploadToServer = (
+    { customUploadHosts, fetchAgent, logger, options },
+    refreshMediaConn
+) => {
+    return async (stream, { mediaType, fileEncSha256B64, newsletter, timeoutMs }) => {
+        var _a, _b
+        const { default: axios } = await import('axios')
+        // send a query JSON to obtain the url & auth token to upload our media
+        let uploadInfo = await refreshMediaConn(false)
+        let urls
+        const hosts = [...customUploadHosts, ...uploadInfo.hosts]
+        const chunks = []
+        if (!Buffer.isBuffer(stream)) {
+            for await (const chunk of stream) {
+                chunks.push(chunk)
+            }
+        }
+        const reqBody = Buffer.isBuffer(stream) ? stream : Buffer.concat(chunks)
+        fileEncSha256B64 = (0, exports.encodeBase64EncodedStringForUpload)(fileEncSha256B64)
+        let media = Defaults_1.MEDIA_PATH_MAP[mediaType]
+        if (newsletter) {
+            media =
+                media === null || media === void 0
+                    ? void 0
+                    : media.replace('/mms/', '/newsletter/newsletter-')
+        }
+        for (const { hostname, maxContentLengthBytes } of hosts) {
+            logger.debug(`uploading to "${hostname}"`)
+            const auth = encodeURIComponent(uploadInfo.auth) // the auth token
+            const url = `https://${hostname}${media}/${fileEncSha256B64}?auth=${auth}&token=${fileEncSha256B64}`
+            let result
+            try {
+                if (maxContentLengthBytes && reqBody.length > maxContentLengthBytes) {
+                    throw new boom_1.Boom(`Body too large for "${hostname}"`, { statusCode: 413 })
+                }
+                const body = await axios.post(url, reqBody, {
+                    ...options,
+                    headers: {
+                        ...(options.headers || {}),
+                        'Content-Type': 'application/octet-stream',
+                        Origin: Defaults_1.DEFAULT_ORIGIN
+                    },
+                    httpsAgent: fetchAgent,
+                    timeout: timeoutMs,
+                    responseType: 'json',
+                    maxBodyLength: Infinity,
+                    maxContentLength: Infinity
+                })
+                result = body.data
+                if (
+                    (result === null || result === void 0 ? void 0 : result.url) ||
+                    (result === null || result === void 0 ? void 0 : result.directPath)
+                ) {
+                    urls = {
+                        mediaUrl: result.url,
+                        directPath: result.direct_path,
+                        handle: result.handle
+                    }
+                    break
+                } else {
+                    uploadInfo = await refreshMediaConn(true)
+                    throw new Error(`upload failed, reason: ${JSON.stringify(result)}`)
+                }
+            } catch (error) {
+                if (axios.isAxiosError(error)) {
+                    result = (_a = error.response) === null || _a === void 0 ? void 0 : _a.data
+                }
+                const isLast =
+                    hostname ===
+                    ((_b = hosts[uploadInfo.hosts.length - 1]) === null || _b === void 0
+                        ? void 0
+                        : _b.hostname)
+                logger.warn(
+                    { trace: error.stack, uploadResult: result },
+                    `Error in uploading to ${hostname} ${isLast ? '' : ', retrying...'}`
+                )
+            }
+        }
+        if (!urls) {
+            throw new boom_1.Boom('Media upload failed on all hosts', { statusCode: 500 })
+        }
+        return urls
+    }
+}
+exports.getWAUploadToServer = getWAUploadToServer
+const getMediaRetryKey = (mediaKey) => {
+    return (0, crypto_1.hkdf)(mediaKey, 32, { info: 'WhatsApp Media Retry Notification' })
+}
+/**
+ * Generate a binary node that will request the phone to re-upload the media & return the newly uploaded URL
+ */
+const encryptMediaRetryRequest = (key, mediaKey, meId) => {
+    const recp = { stanzaId: key.id }
+    const recpBuffer = WAProto_1.proto.ServerErrorReceipt.encode(recp).finish()
+    const iv = Crypto.randomBytes(12)
+    const retryKey = getMediaRetryKey(mediaKey)
+    const ciphertext = (0, crypto_1.aesEncryptGCM)(recpBuffer, retryKey, iv, Buffer.from(key.id))
+    const req = {
+        tag: 'receipt',
+        attrs: {
+            id: key.id,
+            to: (0, WABinary_1.jidNormalizedUser)(meId),
+            type: 'server-error'
+        },
+        content: [
+            // this encrypt node is actually pretty useless
+            // the media is returned even without this node
+            // keeping it here to maintain parity with WA Web
+            {
+                tag: 'encrypt',
+                attrs: {},
+                content: [
+                    { tag: 'enc_p', attrs: {}, content: ciphertext },
+                    { tag: 'enc_iv', attrs: {}, content: iv }
+                ]
+            },
+            {
+                tag: 'rmr',
+                attrs: {
+                    jid: key.remoteJid,
+                    from_me: (!!key.fromMe).toString(),
+                    // @ts-ignore
+                    participant: key.participant || undefined
+                }
+            }
+        ]
+    }
+    return req
+}
+exports.encryptMediaRetryRequest = encryptMediaRetryRequest
+const decodeMediaRetryNode = (node) => {
+    const rmrNode = (0, WABinary_1.getBinaryNodeChild)(node, 'rmr')
+    const event = {
+        key: {
+            id: node.attrs.id,
+            remoteJid: rmrNode.attrs.jid,
+            fromMe: rmrNode.attrs.from_me === 'true',
+            participant: rmrNode.attrs.participant
+        }
+    }
+    const errorNode = (0, WABinary_1.getBinaryNodeChild)(node, 'error')
+    if (errorNode) {
+        const errorCode = +errorNode.attrs.code
+        event.error = new boom_1.Boom(`Failed to re-upload media (${errorCode})`, {
+            data: errorNode.attrs,
+            statusCode: (0, exports.getStatusCodeForMediaRetry)(errorCode)
+        })
+    } else {
+        const encryptedInfoNode = (0, WABinary_1.getBinaryNodeChild)(node, 'encrypt')
+        const ciphertext = (0, WABinary_1.getBinaryNodeChildBuffer)(encryptedInfoNode, 'enc_p')
+        const iv = (0, WABinary_1.getBinaryNodeChildBuffer)(encryptedInfoNode, 'enc_iv')
+        if (ciphertext && iv) {
+            event.media = { ciphertext, iv }
+        } else {
+            event.error = new boom_1.Boom('Failed to re-upload media (missing ciphertext)', {
+                statusCode: 404
+            })
+        }
+    }
+    return event
+}
+exports.decodeMediaRetryNode = decodeMediaRetryNode
+const decryptMediaRetryData = ({ ciphertext, iv }, mediaKey, msgId) => {
+    const retryKey = getMediaRetryKey(mediaKey)
+    const plaintext = (0, crypto_1.aesDecryptGCM)(ciphertext, retryKey, iv, Buffer.from(msgId))
+    return WAProto_1.proto.MediaRetryNotification.decode(plaintext)
+}
+exports.decryptMediaRetryData = decryptMediaRetryData
+const getStatusCodeForMediaRetry = (code) => MEDIA_RETRY_STATUS_MAP[code]
+exports.getStatusCodeForMediaRetry = getStatusCodeForMediaRetry
+const MEDIA_RETRY_STATUS_MAP = {
+    [WAProto_1.proto.MediaRetryNotification.ResultType.SUCCESS]: 200,
+    [WAProto_1.proto.MediaRetryNotification.ResultType.DECRYPTION_ERROR]: 412,
+    [WAProto_1.proto.MediaRetryNotification.ResultType.NOT_FOUND]: 404,
+    [WAProto_1.proto.MediaRetryNotification.ResultType.GENERAL_ERROR]: 418
+}
+// eslint-disable-next-line @typescript-eslint/no-unused-vars
+function __importStar(arg0) {
+    throw new Error('Function not implemented.')
+}