@kangwifi-pro/waliwa 1.0.0

package/src/index.ts

@@ -0,0 +1,274 @@
+/**
+ * Waliwa - Lightweight WhatsApp library dengan hybrid protocol
+ *
+ * Lebih lengkap dari Baileys, lebih ringan dari ZapoJS, lebih hemat RAM.
+ * Menggunakan WhatsApp Web Multi-Device + Mobile API pairing.
+ *
+ * @example Basic usage
+ * ```ts
+ * import { makeWASocket, useFileAuthState } from 'waliwa';
+ *
+ * const { state, saveCreds } = await useFileAuthState('./auth');
+ * const sock = makeWASocket({ authState: state, printQRInTerminal: true });
+ *
+ * sock.ev.on('connection.update', ({ connection }) => {
+ *   if (connection === 'open') console.log('Connected!');
+ * });
+ *
+ * sock.ev.on('message.upsert', async ({ messages }) => {
+ *   for (const msg of messages) {
+ *     if (!msg.key.fromMe && msg.message?.text) {
+ *       await sock.sendMessage(msg.key.remoteJid, { text: 'Hello!' });
+ *     }
+ *   }
+ * });
+ * ```
+ */
+
+// ============== Main Socket ==============
+export { makeWASocket, WASocketImpl, WASocket } from './socket/wa-socket.js';
+export type { WASocket as WASocketType } from './socket/wa-socket.js';
+
+// ============== Hybrid Socket ==============
+export { HybridSocketManager, MobileAPISocket } from './socket/hybrid.js';
+
+// ============== Auth State ==============
+export { FileAuthState, useFileAuthState, createDefaultCreds } from './auth/auth-state.js';
+
+// ============== QR Code ==============
+export {
+  generateQRCodeData,
+  buildQRString,
+  parseQRString,
+  QRRefreshManager
+} from './auth/qr-code.js';
+
+// ============== Pairing Code ==============
+export {
+  generatePairingCode,
+  normalizePairingCode,
+  isValidPairingCodeFormat,
+  normalizePhoneNumber,
+  buildPairingRequestNode,
+  parsePairingResult,
+  PairingCodeExpiry
+} from './auth/pairing-code.js';
+
+// ============== Core Crypto ==============
+export {
+  generateCurveKeyPair,
+  curveSharedSecret,
+  curveSign,
+  curveVerify,
+  sha256Hash,
+  sha512Hash,
+  sha1Hash,
+  hmacSha256,
+  hmacSha512,
+  hkdfDerive,
+  createAESCipher,
+  aesEncryptCBC,
+  aesDecryptCBC,
+  getRandomBytes,
+  concatBytes,
+  areBytesEqual,
+  constantTimeEqual,
+  type KeyPair,
+  type AESCipher
+} from './core/crypto.js';
+
+// ============== Noise Protocol ==============
+export {
+  NoiseHandshake,
+  TrafficCipher,
+  buildClientPayload
+} from './core/noise.js';
+
+// ============== Binary Protocol ==============
+export {
+  BinaryEncoder,
+  BinaryDecoder,
+  encodeBinaryNode,
+  decodeBinaryNode,
+  binaryNodeToString,
+  packNibbles,
+  unpackNibbles,
+  TAG_LIST,
+  type BinaryNode
+} from './core/binary.js';
+
+// ============== WebSocket Layer ==============
+export { WAWebSocket } from './socket/ws-socket.js';
+export type { WAWebSocketOptions, WAWebSocketEvent } from './socket/ws-socket.js';
+
+// ============== Messages ==============
+export {
+  MessageSender,
+  MessageReceiver,
+  PendingMessageTracker,
+  buildReadReceiptNode,
+  buildChatPresenceNode
+} from './messages/send.js';
+export {
+  encodeMessageNode,
+  decodeMessageNode,
+  generateMessageId,
+  generateStanzaId,
+  extractMessageText,
+  hasMedia,
+  getMediaInfo,
+  type ReceiptType,
+  type MessageStatusUpdateType
+} from './messages/message-encoder.js';
+export {
+  MediaUploader,
+  MediaDownloader,
+  encryptMedia,
+  decryptMedia,
+  deriveMediaKeys,
+  streamToBuffer,
+  bufferToStream,
+  type EncryptedMedia
+} from './messages/media.js';
+
+// ============== Groups ==============
+export {
+  GroupManager,
+  buildInviteLink,
+  parseInviteLink
+} from './groups/management.js';
+
+// ============== Calls ==============
+export { CallHandler } from './calls/handler.js';
+export type { VoiceTranscriptionFn, VoiceTranscriptionResult } from './calls/handler.js';
+
+// ============== Advanced Features ==============
+export {
+  PollManager,
+  NewsletterManager,
+  StatusManager,
+  BusinessProfileManager,
+  CatalogManager,
+  LabelsManager,
+  type PollOptions,
+  type PollVote,
+  type NewsletterMetadata,
+  type StatusOptions,
+  type BusinessProfileOptions,
+  type BusinessHours,
+  type CatalogItem,
+  type Label
+} from './advanced/features.js';
+
+// ============== Event Emitter ==============
+export { WAEventEmitter, StrictEventEmitter } from './events/emitter.js';
+
+// ============== Utils ==============
+export {
+  parseJid,
+  jidToString,
+  jidUser,
+  jidServer,
+  isGroupJid,
+  isUserJid,
+  isBroadcastJid,
+  isCallJid,
+  isStatusJid,
+  isNewsletter,
+  isLidJid,
+  isValidJid,
+  jidEqual,
+  jidToPhoneNumber,
+  phoneNumberToJid,
+  userJid,
+  groupJid,
+  broadcastJid
+} from './utils/jid.js';
+
+export {
+  DefaultLogger,
+  SilentLogger,
+  defaultLogger
+} from './utils/logger.js';
+
+export {
+  retry,
+  sleep,
+  RateLimiter,
+  PromiseQueue,
+  debounce,
+  throttle
+} from './utils/retry.js';
+
+// ============== SKDM (Store Key Data Manager) ==============
+export {
+  SKDM,
+  PreKeyManager,
+  SessionManager,
+  IdentityKeyManager,
+  AppStateKeyManager,
+  LRUCache,
+  AtomicFileWriter,
+  type SKDMConfig,
+  type SKDMStats
+} from './skdm/index.js';
+
+// ============== Baileys Fixes ==============
+export {
+  WeakEventEmitter,
+  ConnectionHeartbeat,
+  IdempotencyCache,
+  GroupEventCoalescer,
+  HistorySyncManager,
+  DecryptionRetryQueue,
+  MessageQueue,
+  ChunkedMediaUploader,
+  SmarterReconnector
+} from './fixes/index.js';
+
+// ============== New Features ==============
+export {
+  HealthMonitor,
+  MultiAccountManager,
+  WebhookManager,
+  CircuitBreaker,
+  RateLimitTracker,
+  MessagePersistence,
+  type HealthStatus,
+  type AccountConfig,
+  type AccountStatus,
+  type WebhookConfig
+} from './features/index.js';
+
+// ============== Multi-Branch SKDM Recovery ==============
+export {
+  RecoveryManager,
+  mapCodeToReason,
+  getActionDescription,
+  getReasonDescription,
+  DEFAULT_RECOVERY_BRANCHES,
+  DEFAULT_RECOVERY_CONFIG,
+  type DisconnectReason,
+  type RecoveryAction,
+  type RecoveryBranch,
+  type RecoveryContext,
+  type RecoveryConfig
+} from './recovery/index.js';
+
+// ============== All Types ==============
+export * from './types/index.js';
+
+// ============== Version ==============
+export const VERSION = '1.0.0';
+export const LIBRARY_NAME = 'waliwa';
+
+// ============== Default Config ==============
+export const DEFAULT_CONFIG = {
+  wsURL: 'wss://web.whatsapp.com/ws/chat',
+  browser: ['Waliwa', 'WA', '1.0.0'] as [string, string, string],
+  connectTimeoutMs: 20000,
+  keepAliveIntervalMs: 20000,
+  maxReconnectAttempts: 10,
+  reconnectInterval: 2000,
+  ramOptimizationLevel: 2 as 1 | 2 | 3
+};

package/src/messages/media.ts

@@ -0,0 +1,372 @@
+/**
+ * Waliwa - Media upload/download
+ * Handle upload media ke WhatsApp CDN dan decrypt download
+ *
+ * Media encryption: AES-256-CBC + HMAC-SHA256, then upload ke WA CDN
+ * Download: reverse process - download encrypted blob, decrypt, return plain
+ */
+
+import axios from 'axios';
+import { Readable } from 'stream';
+import {
+  sha256Hash,
+  hmacSha256,
+  aesEncryptCBC,
+  aesDecryptCBC,
+  hkdfDerive,
+  getRandomBytes,
+  concatBytes,
+  areBytesEqual
+} from '../core/crypto.js';
+import type {
+  MediaUploadResult,
+  MediaDownloadResult,
+  WALogger
+} from '../types/index.js';
+import { SilentLogger } from '../utils/logger.js';
+
+// ============== Constants ==============
+
+const WA_MEDIA_UPLOAD_URL = 'https://mmg.whatsapp.net/whatsapp/mmedia/mms';
+const WA_MEDIA_DOWNLOAD_HOSTS = [
+  'mmg.whatsapp.net',
+  'mmg2.whatsapp.net',
+  'mmg3.whatsapp.net'
+];
+
+const MEDIA_KEY_TYPES: Record<string, number> = {
+  image: 1,
+  video: 2,
+  audio: 3,
+  document: 4,
+  sticker: 5,
+  'thumbnail-image': 6,
+  'thumbnail-video': 7,
+  'thumbnail-document': 8,
+  'md-msg-hist': 9,
+  'app-state': 10,
+  'link-thumbnail': 11,
+  'media-msg': 12
+};
+
+const CHUNK_SIZE = 64 * 1024; // 64KB chunks untuk upload
+
+// ============== Media Key Derivation ==============
+
+/**
+ * Derive media encryption keys dari random mediaKey + mediaType
+ *
+ * Spec WA: HKDF-SHA256 dengan salt=length + mediaType-appended
+ * Output: 4 keys - iv, cipherKey, macKey, refKey
+ */
+export function deriveMediaKeys(
+  mediaKey: Uint8Array,
+  mediaType: string
+): {
+  iv: Uint8Array;
+  cipherKey: Uint8Array;
+  macKey: Uint8Array;
+  refKey: Uint8Array;
+} {
+  const mediaTypeNum = MEDIA_KEY_TYPES[mediaType] ?? 1;
+  const salt = new Uint8Array([mediaTypeNum]);
+  const info = new TextEncoder().encode(`WhatsApp ${mediaType} Keys`);
+
+  const derived = hkdfDerive(mediaKey, salt, info, 112); // 112 bytes total
+
+  return {
+    iv: derived.subarray(0, 16),
+    cipherKey: derived.subarray(16, 48),
+    macKey: derived.subarray(48, 80),
+    refKey: derived.subarray(80, 112)
+  };
+}
+
+// ============== Media Encryption ==============
+
+export interface EncryptedMedia {
+  /** Encrypted media data */
+  ciphertext: Uint8Array;
+  /** MAC (HMAC-SHA256 dari encrypted data + IV) */
+  mac: Uint8Array;
+  /** Random mediaKey (32 bytes) */
+  mediaKey: Uint8Array;
+  /** SHA256 hash dari plaintext */
+  fileSha256: Uint8Array;
+  /** SHA256 hash dari encrypted data */
+  encFileSha256: Uint8Array;
+  /** Original file length */
+  fileLength: number;
+}
+
+/**
+ * Encrypt media untuk upload
+ * Spec: AES-256-CBC + HMAC-SHA256 untuk integrity
+ */
+export async function encryptMedia(
+  plaintext: Buffer | Uint8Array,
+  mediaType: string
+): Promise<EncryptedMedia> {
+  // 1. Generate random mediaKey
+  const mediaKey = getRandomBytes(32);
+
+  // 2. Derive keys
+  const { iv, cipherKey, macKey } = deriveMediaKeys(mediaKey, mediaType);
+
+  // 3. Compute plaintext hash
+  const fileSha256 = sha256Hash(plaintext);
+
+  // 4. Encrypt dengan AES-256-CBC
+  const ciphertext = aesEncryptCBC(plaintext, cipherKey, iv);
+
+  // 5. Compute MAC: HMAC-SHA256(macKey, iv + ciphertext)
+  const macInput = concatBytes(iv, ciphertext);
+  const mac = hmacSha256(macKey, macInput);
+
+  // 6. Compute encrypted file hash
+  const encFileSha256 = sha256Hash(concatBytes(ciphertext, mac));
+
+  return {
+    ciphertext,
+    mac,
+    mediaKey,
+    fileSha256,
+    encFileSha256,
+    fileLength: plaintext.length
+  };
+}
+
+// ============== Media Decryption ==============
+
+/**
+ * Decrypt media hasil download
+ */
+export async function decryptMedia(
+  encryptedData: Uint8Array,
+  mediaKey: Uint8Array,
+  mediaType: string
+): Promise<Uint8Array> {
+  if (encryptedData.length < 16) {
+    throw new Error('Encrypted media too short');
+  }
+
+  const { iv, cipherKey, macKey } = deriveMediaKeys(mediaKey, mediaType);
+
+  // Last 10 bytes = MAC (untuk CBC mode WA spec)
+  // Note: WhatsApp uses 10-byte MAC instead of full 32
+  const mac = encryptedData.subarray(encryptedData.length - 10);
+  const ciphertext = encryptedData.subarray(0, encryptedData.length - 10);
+
+  // Verify MAC
+  const expectedMac = hmacSha256(macKey, concatBytes(iv, ciphertext));
+  const expectedMacShort = expectedMac.subarray(0, 10);
+  if (!areBytesEqual(mac, expectedMacShort)) {
+    throw new Error('Media MAC verification failed');
+  }
+
+  // Decrypt
+  const plaintext = aesDecryptCBC(ciphertext, cipherKey, iv);
+  return plaintext;
+}
+
+// ============== Media Uploader ==============
+
+export interface MediaUploaderOptions {
+  logger?: WALogger;
+  /** Custom HTTP agent */
+  httpAgent?: any;
+  /** Timeout ms */
+  timeoutMs?: number;
+}
+
+export class MediaUploader {
+  private logger: WALogger;
+  private httpAgent?: any;
+  private timeoutMs: number;
+
+  constructor(opts: MediaUploaderOptions = {}) {
+    this.logger = opts.logger ?? new SilentLogger();
+    this.httpAgent = opts.httpAgent;
+    this.timeoutMs = opts.timeoutMs ?? 60000;
+  }
+
+  /**
+   * Upload media ke WhatsApp CDN
+   */
+  async upload(
+    media: Buffer | Uint8Array,
+    mediaType: string,
+    mimetype: string,
+    fileName?: string
+  ): Promise<MediaUploadResult> {
+    this.logger.debug(`Encrypting ${media.length} bytes of ${mediaType} (${mimetype})`);
+
+    // Encrypt
+    const encrypted = await encryptMedia(media, mediaType);
+
+    // Build upload URL
+    const uploadUrl = `${WA_MEDIA_UPLOAD_URL}/${mediaType}`;
+    const params: any = {
+      hash: Buffer.from(encrypted.encFileSha256).toString('base64'),
+      type: mimetype,
+      size: encrypted.fileLength,
+      name: fileName
+    };
+
+    this.logger.debug(`Uploading to ${uploadUrl}`);
+
+    // Upload via POST
+    const response = await axios.post(uploadUrl, Buffer.from(encrypted.ciphertext), {
+      params,
+      headers: {
+        'Content-Type': 'application/octet-stream',
+        'Origin': 'https://web.whatsapp.com',
+        'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36'
+      },
+      timeout: this.timeoutMs,
+      maxContentLength: Infinity,
+      maxBodyLength: Infinity
+    });
+
+    if (response.status !== 200 && response.status !== 201) {
+      throw new Error(`Upload failed: ${response.status} ${response.statusText}`);
+    }
+
+    const data = response.data;
+    if (!data || !data.url) {
+      throw new Error('Invalid upload response: missing URL');
+    }
+
+    this.logger.debug(`Upload successful: ${data.url}`);
+
+    return {
+      url: data.url,
+      directPath: data.direct_path || data.directPath || '',
+      mediaKey: encrypted.mediaKey,
+      encFileHash: encrypted.encFileSha256,
+      fileEncSHA256: encrypted.encFileSha256,
+      fileSHA256: encrypted.fileSha256,
+      fileLength: encrypted.fileLength,
+      mimetype
+    };
+  }
+
+  /**
+   * Upload stream media (untuk large files)
+   */
+  async uploadStream(
+    stream: Readable,
+    mediaType: string,
+    mimetype: string,
+    fileLength: number
+  ): Promise<MediaUploadResult> {
+    // Collect stream ke buffer (untuk simplicity)
+    const chunks: Buffer[] = [];
+    for await (const chunk of stream) {
+      chunks.push(Buffer.from(chunk));
+    }
+    const buffer = Buffer.concat(chunks);
+    return this.upload(buffer, mediaType, mimetype);
+  }
+}
+
+// ============== Media Downloader ==============
+
+export interface MediaDownloaderOptions {
+  logger?: WALogger;
+  httpAgent?: any;
+  timeoutMs?: number;
+}
+
+export class MediaDownloader {
+  private logger: WALogger;
+  private httpAgent?: any;
+  private timeoutMs: number;
+
+  constructor(opts: MediaDownloaderOptions = {}) {
+    this.logger = opts.logger ?? new SilentLogger();
+    this.httpAgent = opts.httpAgent;
+    this.timeoutMs = opts.timeoutMs ?? 60000;
+  }
+
+  /**
+   * Download media dari URL dan decrypt
+   */
+  async download(
+    url: string,
+    mediaKey: Uint8Array,
+    mediaType: string,
+    mimetype: string,
+    fileName?: string
+  ): Promise<MediaDownloadResult> {
+    this.logger.debug(`Downloading media from ${url}`);
+
+    // Determine host
+    let downloadUrl = url;
+    if (!url.startsWith('http')) {
+      // Relative path, prepend host
+      const host = WA_MEDIA_DOWNLOAD_HOSTS[0];
+      downloadUrl = `https://${host}${url.startsWith('/') ? '' : '/'}${url}`;
+    }
+
+    const response = await axios.get(downloadUrl, {
+      responseType: 'arraybuffer',
+      timeout: this.timeoutMs,
+      headers: {
+        'Origin': 'https://web.whatsapp.com',
+        'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36'
+      }
+    });
+
+    if (response.status !== 200) {
+      throw new Error(`Download failed: ${response.status}`);
+    }
+
+    const encryptedData = new Uint8Array(response.data);
+
+    // Decrypt
+    const plaintext = await decryptMedia(encryptedData, mediaKey, mediaType);
+
+    this.logger.debug(`Decrypted ${plaintext.length} bytes`);
+
+    return {
+      buffer: Buffer.from(plaintext),
+      mimetype,
+      fileLength: plaintext.length,
+      fileName
+    };
+  }
+
+  /**
+   * Download dari direct path (alternative to URL)
+   */
+  async downloadFromDirectPath(
+    directPath: string,
+    mediaKey: Uint8Array,
+    mediaType: string,
+    mimetype: string,
+    fileName?: string
+  ): Promise<MediaDownloadResult> {
+    return this.download(directPath, mediaKey, mediaType, mimetype, fileName);
+  }
+}
+
+// ============== Helper ==============
+
+/**
+ * Convert Readable stream ke Buffer
+ */
+export async function streamToBuffer(stream: Readable): Promise<Buffer> {
+  const chunks: Buffer[] = [];
+  for await (const chunk of stream) {
+    chunks.push(Buffer.from(chunk));
+  }
+  return Buffer.concat(chunks);
+}
+
+/**
+ * Convert Buffer ke Readable stream
+ */
+export function bufferToStream(buffer: Buffer): Readable {
+  return Readable.from(buffer);
+}