@mrlegendbot/baileys 1.2.4 → 1.2.6

package/lib/Utils/companion-reg-client-utils.d.ts

@@ -0,0 +1,17 @@
+import type { WABrowserDescription } from '../Types/index.js';
+export declare enum CompanionWebClientType {
+    UNKNOWN = 0,
+    CHROME = 1,
+    EDGE = 2,
+    FIREFOX = 3,
+    IE = 4,
+    OPERA = 5,
+    SAFARI = 6,
+    ELECTRON = 7,
+    UWP = 8,
+    OTHER_WEB_CLIENT = 9
+}
+export declare const getCompanionWebClientType: ([os, browserName]: WABrowserDescription) => CompanionWebClientType;
+export declare const getCompanionPlatformId: (browser: WABrowserDescription) => string;
+export declare const buildPairingQRData: (ref: string, noiseKeyB64: string, identityKeyB64: string, advB64: string, browser: WABrowserDescription) => string;
+//# sourceMappingURL=companion-reg-client-utils.d.ts.map

package/lib/Utils/companion-reg-client-utils.js

@@ -1,33 +1,35 @@
 export var CompanionWebClientType;
 (function (CompanionWebClientType) {
-  CompanionWebClientType[CompanionWebClientType["UNKNOWN"] = 0] = "UNKNOWN";
-  CompanionWebClientType[CompanionWebClientType["CHROME"] = 1] = "CHROME";
-  CompanionWebClientType[CompanionWebClientType["EDGE"] = 2] = "EDGE";
-  CompanionWebClientType[CompanionWebClientType["FIREFOX"] = 3] = "FIREFOX";
-  CompanionWebClientType[CompanionWebClientType["IE"] = 4] = "IE";
-  CompanionWebClientType[CompanionWebClientType["OPERA"] = 5] = "OPERA";
-  CompanionWebClientType[CompanionWebClientType["SAFARI"] = 6] = "SAFARI";
-  CompanionWebClientType[CompanionWebClientType["ELECTRON"] = 7] = "ELECTRON";
-  CompanionWebClientType[CompanionWebClientType["UWP"] = 8] = "UWP";
-  CompanionWebClientType[CompanionWebClientType["OTHER_WEB_CLIENT"] = 9] = "OTHER_WEB_CLIENT";
+    CompanionWebClientType[CompanionWebClientType["UNKNOWN"] = 0] = "UNKNOWN";
+    CompanionWebClientType[CompanionWebClientType["CHROME"] = 1] = "CHROME";
+    CompanionWebClientType[CompanionWebClientType["EDGE"] = 2] = "EDGE";
+    CompanionWebClientType[CompanionWebClientType["FIREFOX"] = 3] = "FIREFOX";
+    CompanionWebClientType[CompanionWebClientType["IE"] = 4] = "IE";
+    CompanionWebClientType[CompanionWebClientType["OPERA"] = 5] = "OPERA";
+    CompanionWebClientType[CompanionWebClientType["SAFARI"] = 6] = "SAFARI";
+    CompanionWebClientType[CompanionWebClientType["ELECTRON"] = 7] = "ELECTRON";
+    CompanionWebClientType[CompanionWebClientType["UWP"] = 8] = "UWP";
+    CompanionWebClientType[CompanionWebClientType["OTHER_WEB_CLIENT"] = 9] = "OTHER_WEB_CLIENT";
 })(CompanionWebClientType || (CompanionWebClientType = {}));
 const BROWSER_TO_COMPANION_WEB_CLIENT = {
-  Chrome: CompanionWebClientType.CHROME,
-  Edge: CompanionWebClientType.EDGE,
-  Firefox: CompanionWebClientType.FIREFOX,
-  IE: CompanionWebClientType.IE,
-  Opera: CompanionWebClientType.OPERA,
-  Safari: CompanionWebClientType.SAFARI
+    Chrome: CompanionWebClientType.CHROME,
+    Edge: CompanionWebClientType.EDGE,
+    Firefox: CompanionWebClientType.FIREFOX,
+    IE: CompanionWebClientType.IE,
+    Opera: CompanionWebClientType.OPERA,
+    Safari: CompanionWebClientType.SAFARI
 };
 export const getCompanionWebClientType = ([os, browserName]) => {
-  if (browserName === 'Desktop') {
-    return os === 'Windows' ? CompanionWebClientType.UWP : CompanionWebClientType.ELECTRON;
-  }
-  return BROWSER_TO_COMPANION_WEB_CLIENT[browserName] || CompanionWebClientType.OTHER_WEB_CLIENT;
+    if (browserName === 'Desktop') {
+        return os === 'Windows' ? CompanionWebClientType.UWP : CompanionWebClientType.ELECTRON;
+    }
+    return BROWSER_TO_COMPANION_WEB_CLIENT[browserName] || CompanionWebClientType.OTHER_WEB_CLIENT;
 };
-export const getCompanionPlatformId = browser => {
-  return getCompanionWebClientType(browser).toString();
+export const getCompanionPlatformId = (browser) => {
+    return getCompanionWebClientType(browser).toString();
 };
 export const buildPairingQRData = (ref, noiseKeyB64, identityKeyB64, advB64, browser) => {
-  return 'https://wa.me/settings/linked_devices#' + [ref, noiseKeyB64, identityKeyB64, advB64, getCompanionPlatformId(browser)].join(',');
+    return ('https://wa.me/settings/linked_devices#' +
+        [ref, noiseKeyB64, identityKeyB64, advB64, getCompanionPlatformId(browser)].join(','));
 };
+//# sourceMappingURL=companion-reg-client-utils.js.map

package/lib/Utils/crypto.d.ts

@@ -0,0 +1,37 @@
+import type { KeyPair } from '../Types/index.js';
+export { md5, hkdf } from 'whatsapp-rust-bridge';
+/** prefix version byte to the pub keys, required for some curve crypto functions */
+export declare const generateSignalPubKey: (pubKey: Uint8Array | Buffer) => Uint8Array<ArrayBufferLike> | Buffer<ArrayBufferLike>;
+export declare const Curve: {
+    generateKeyPair: () => KeyPair;
+    sharedKey: (privateKey: Uint8Array, publicKey: Uint8Array) => Buffer<ArrayBuffer>;
+    sign: (privateKey: Uint8Array, buf: Uint8Array) => Uint8Array<ArrayBufferLike>;
+    verify: (pubKey: Uint8Array, message: Uint8Array, signature: Uint8Array) => boolean;
+};
+export declare const signedKeyPair: (identityKeyPair: KeyPair, keyId: number) => {
+    keyPair: KeyPair;
+    signature: Uint8Array<ArrayBufferLike>;
+    keyId: number;
+};
+/**
+ * encrypt AES 256 GCM;
+ * where the tag tag is suffixed to the ciphertext
+ * */
+export declare function aesEncryptGCM(plaintext: Uint8Array, key: Uint8Array, iv: Uint8Array, additionalData: Uint8Array): Buffer<ArrayBuffer>;
+/**
+ * decrypt AES 256 GCM;
+ * where the auth tag is suffixed to the ciphertext
+ * */
+export declare function aesDecryptGCM(ciphertext: Uint8Array, key: Uint8Array, iv: Uint8Array, additionalData: Uint8Array): Buffer<ArrayBuffer>;
+export declare function aesEncryptCTR(plaintext: Uint8Array, key: Uint8Array, iv: Uint8Array): Buffer<ArrayBuffer>;
+export declare function aesDecryptCTR(ciphertext: Uint8Array, key: Uint8Array, iv: Uint8Array): Buffer<ArrayBuffer>;
+/** decrypt AES 256 CBC; where the IV is prefixed to the buffer */
+export declare function aesDecrypt(buffer: Uint8Array, key: Uint8Array): Buffer<ArrayBuffer>;
+/** decrypt AES 256 CBC */
+export declare function aesDecryptWithIV(buffer: Uint8Array, key: Uint8Array, IV: Uint8Array): Buffer<ArrayBuffer>;
+export declare function aesEncrypt(buffer: Uint8Array, key: Uint8Array): Buffer<ArrayBuffer>;
+export declare function aesEncrypWithIV(buffer: Buffer, key: Buffer, IV: Buffer): Buffer<ArrayBuffer>;
+export declare function hmacSign(buffer: Buffer | Uint8Array, key: Buffer | Uint8Array, variant?: 'sha256' | 'sha512'): Buffer<ArrayBufferLike>;
+export declare function sha256(buffer: Buffer): Buffer<ArrayBufferLike>;
+export declare function derivePairingCodeKey(pairingCode: string, salt: Buffer): Promise<Buffer>;
+//# sourceMappingURL=crypto.d.ts.map

package/lib/Utils/crypto.js

@@ -2,101 +2,117 @@ import { createCipheriv, createDecipheriv, createHash, createHmac, randomBytes }
 import * as curve from 'libsignal/src/curve.js';
 import { KEY_BUNDLE_TYPE } from '../Defaults/index.js';
 export { md5, hkdf } from 'whatsapp-rust-bridge';
-const {
-  subtle
-} = globalThis.crypto;
-export const generateSignalPubKey = pubKey => pubKey.length === 33 ? pubKey : Buffer.concat([KEY_BUNDLE_TYPE, pubKey]);
+// insure browser & node compatibility
+const { subtle } = globalThis.crypto;
+/** prefix version byte to the pub keys, required for some curve crypto functions */
+export const generateSignalPubKey = (pubKey) => pubKey.length === 33 ? pubKey : Buffer.concat([KEY_BUNDLE_TYPE, pubKey]);
 export const Curve = {
-  generateKeyPair: () => {
-    const {
-      pubKey,
-      privKey
-    } = curve.generateKeyPair();
-    return {
-      private: Buffer.from(privKey),
-      public: Buffer.from(pubKey.slice(1))
-    };
-  },
-  sharedKey: (privateKey, publicKey) => {
-    const shared = curve.calculateAgreement(generateSignalPubKey(publicKey), privateKey);
-    return Buffer.from(shared);
-  },
-  sign: (privateKey, buf) => curve.calculateSignature(privateKey, buf),
-  verify: (pubKey, message, signature) => {
-    try {
-      curve.verifySignature(generateSignalPubKey(pubKey), message, signature);
-      return true;
-    } catch (error) {
-      return false;
+    generateKeyPair: () => {
+        const { pubKey, privKey } = curve.generateKeyPair();
+        return {
+            private: Buffer.from(privKey),
+            // remove version byte
+            public: Buffer.from(pubKey.slice(1))
+        };
+    },
+    sharedKey: (privateKey, publicKey) => {
+        const shared = curve.calculateAgreement(generateSignalPubKey(publicKey), privateKey);
+        return Buffer.from(shared);
+    },
+    sign: (privateKey, buf) => curve.calculateSignature(privateKey, buf),
+    verify: (pubKey, message, signature) => {
+        try {
+            curve.verifySignature(generateSignalPubKey(pubKey), message, signature);
+            return true;
+        }
+        catch (error) {
+            return false;
+        }
     }
-  }
 };
 export const signedKeyPair = (identityKeyPair, keyId) => {
-  const preKey = Curve.generateKeyPair();
-  const pubKey = generateSignalPubKey(preKey.public);
-  const signature = Curve.sign(identityKeyPair.private, pubKey);
-  return {
-    keyPair: preKey,
-    signature,
-    keyId
-  };
+    const preKey = Curve.generateKeyPair();
+    const pubKey = generateSignalPubKey(preKey.public);
+    const signature = Curve.sign(identityKeyPair.private, pubKey);
+    return { keyPair: preKey, signature, keyId };
 };
 const GCM_TAG_LENGTH = 128 >> 3;
+/**
+ * encrypt AES 256 GCM;
+ * where the tag tag is suffixed to the ciphertext
+ * */
 export function aesEncryptGCM(plaintext, key, iv, additionalData) {
-  const cipher = createCipheriv('aes-256-gcm', key, iv);
-  cipher.setAAD(additionalData);
-  return Buffer.concat([cipher.update(plaintext), cipher.final(), cipher.getAuthTag()]);
+    const cipher = createCipheriv('aes-256-gcm', key, iv);
+    cipher.setAAD(additionalData);
+    return Buffer.concat([cipher.update(plaintext), cipher.final(), cipher.getAuthTag()]);
 }
+/**
+ * decrypt AES 256 GCM;
+ * where the auth tag is suffixed to the ciphertext
+ * */
 export function aesDecryptGCM(ciphertext, key, iv, additionalData) {
-  const decipher = createDecipheriv('aes-256-gcm', key, iv);
-  const enc = ciphertext.slice(0, ciphertext.length - GCM_TAG_LENGTH);
-  const tag = ciphertext.slice(ciphertext.length - GCM_TAG_LENGTH);
-  decipher.setAAD(additionalData);
-  decipher.setAuthTag(tag);
-  return Buffer.concat([decipher.update(enc), decipher.final()]);
+    const decipher = createDecipheriv('aes-256-gcm', key, iv);
+    // decrypt additional adata
+    const enc = ciphertext.slice(0, ciphertext.length - GCM_TAG_LENGTH);
+    const tag = ciphertext.slice(ciphertext.length - GCM_TAG_LENGTH);
+    // set additional data
+    decipher.setAAD(additionalData);
+    decipher.setAuthTag(tag);
+    return Buffer.concat([decipher.update(enc), decipher.final()]);
 }
 export function aesEncryptCTR(plaintext, key, iv) {
-  const cipher = createCipheriv('aes-256-ctr', key, iv);
-  return Buffer.concat([cipher.update(plaintext), cipher.final()]);
+    const cipher = createCipheriv('aes-256-ctr', key, iv);
+    return Buffer.concat([cipher.update(plaintext), cipher.final()]);
 }
 export function aesDecryptCTR(ciphertext, key, iv) {
-  const decipher = createDecipheriv('aes-256-ctr', key, iv);
-  return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    const decipher = createDecipheriv('aes-256-ctr', key, iv);
+    return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
 }
+/** decrypt AES 256 CBC; where the IV is prefixed to the buffer */
 export function aesDecrypt(buffer, key) {
-  return aesDecryptWithIV(buffer.subarray(16), key, buffer.subarray(0, 16));
+    return aesDecryptWithIV(buffer.subarray(16), key, buffer.subarray(0, 16));
 }
+/** decrypt AES 256 CBC */
 export function aesDecryptWithIV(buffer, key, IV) {
-  const aes = createDecipheriv('aes-256-cbc', key, IV);
-  return Buffer.concat([aes.update(buffer), aes.final()]);
+    const aes = createDecipheriv('aes-256-cbc', key, IV);
+    return Buffer.concat([aes.update(buffer), aes.final()]);
 }
+// encrypt AES 256 CBC; where a random IV is prefixed to the buffer
 export function aesEncrypt(buffer, key) {
-  const IV = randomBytes(16);
-  const aes = createCipheriv('aes-256-cbc', key, IV);
-  return Buffer.concat([IV, aes.update(buffer), aes.final()]);
+    const IV = randomBytes(16);
+    const aes = createCipheriv('aes-256-cbc', key, IV);
+    return Buffer.concat([IV, aes.update(buffer), aes.final()]); // prefix IV to the buffer
 }
+// encrypt AES 256 CBC with a given IV
 export function aesEncrypWithIV(buffer, key, IV) {
-  const aes = createCipheriv('aes-256-cbc', key, IV);
-  return Buffer.concat([aes.update(buffer), aes.final()]);
+    const aes = createCipheriv('aes-256-cbc', key, IV);
+    return Buffer.concat([aes.update(buffer), aes.final()]); // prefix IV to the buffer
 }
+// sign HMAC using SHA 256
 export function hmacSign(buffer, key, variant = 'sha256') {
-  return createHmac(variant, key).update(buffer).digest();
+    return createHmac(variant, key).update(buffer).digest();
 }
 export function sha256(buffer) {
-  return createHash('sha256').update(buffer).digest();
+    return createHash('sha256').update(buffer).digest();
 }
 export async function derivePairingCodeKey(pairingCode, salt) {
-  const encoder = new TextEncoder();
-  const pairingCodeBuffer = encoder.encode(pairingCode);
-  const saltBuffer = new Uint8Array(salt instanceof Uint8Array ? salt : new Uint8Array(salt));
-  const keyMaterial = await subtle.importKey('raw', pairingCodeBuffer, {
-    name: 'PBKDF2'
-  }, false, ['deriveBits']);
-  const derivedBits = await subtle.deriveBits({
-    name: 'PBKDF2',
-    salt: saltBuffer,
-    iterations: 2 << 16,
-    hash: 'SHA-256'
-  }, keyMaterial, 32 * 8);
-  return Buffer.from(derivedBits);
+    // Convert inputs to formats Web Crypto API can work with
+    const encoder = new TextEncoder();
+    const pairingCodeBuffer = encoder.encode(pairingCode);
+    const saltBuffer = new Uint8Array(salt instanceof Uint8Array ? salt : new Uint8Array(salt));
+    // Import the pairing code as key material
+    const keyMaterial = await subtle.importKey('raw', pairingCodeBuffer, { name: 'PBKDF2' }, false, [
+        'deriveBits'
+    ]);
+    // Derive bits using PBKDF2 with the same parameters
+    // 2 << 16 = 131,072 iterations
+    const derivedBits = await subtle.deriveBits({
+        name: 'PBKDF2',
+        salt: saltBuffer,
+        iterations: 2 << 16,
+        hash: 'SHA-256'
+    }, keyMaterial, 32 * 8 // 32 bytes * 8 = 256 bits
+    );
+    return Buffer.from(derivedBits);
 }
+//# sourceMappingURL=crypto.js.map

package/lib/Utils/decode-wa-message.d.ts

@@ -0,0 +1,66 @@
+import type { WAMessage } from '../Types/index.js';
+import type { SignalRepositoryWithLIDStore } from '../Types/Signal.js';
+import { type BinaryNode } from '../WABinary/index.js';
+import type { ILogger } from './logger.js';
+export declare const getDecryptionJid: (sender: string, repository: SignalRepositoryWithLIDStore) => Promise<string>;
+export declare const NO_MESSAGE_FOUND_ERROR_TEXT = "Message absent from node";
+export declare const MISSING_KEYS_ERROR_TEXT = "Key used already or never filled";
+export declare const ACCOUNT_RESTRICTED_TEXT = "Your account has been restricted";
+export declare const DECRYPTION_RETRY_CONFIG: {
+    maxRetries: number;
+    baseDelayMs: number;
+    sessionRecordErrors: string[];
+};
+/** NACK reason codes we send to the server (client → server) */
+export declare const NACK_REASONS: {
+    SenderReachoutTimelocked: number;
+    ParsingError: number;
+    UnrecognizedStanza: number;
+    UnrecognizedStanzaClass: number;
+    UnrecognizedStanzaType: number;
+    InvalidProtobuf: number;
+    InvalidHostedCompanionStanza: number;
+    MissingMessageSecret: number;
+    SignalErrorOldCounter: number;
+    MessageDeletedOnPeer: number;
+    UnhandledError: number;
+    UnsupportedAdminRevoke: number;
+    UnsupportedLIDGroup: number;
+    DBOperationFailed: number;
+};
+/**
+ * Server-side error codes returned in ack stanzas (server → client) that we
+ * currently have dedicated handlers for. Extend as more handlers are added.
+ * Distinct from the client-side NackReason enum (WAWebCreateNackFromStanza).
+ */
+export declare const SERVER_ERROR_CODES: {
+    /**
+     * 1:1 message missing privacy token (tctoken). Usually means the account is
+     * restricted: WhatsApp blocks starting new chats but preserves existing ones,
+     * since established chats already carry a tctoken.
+     */
+    readonly MessageAccountRestriction: "463";
+    /** Stanza validation failure (SMAX_INVALID) — likely stale device session */
+    readonly SmaxInvalid: "479";
+};
+export declare const extractAddressingContext: (stanza: BinaryNode) => {
+    addressingMode: string;
+    senderAlt: string | undefined;
+    recipientAlt: string | undefined;
+};
+/**
+ * Decode the received node as a message.
+ * @note this will only parse the message, not decrypt it
+ */
+export declare function decodeMessageNode(stanza: BinaryNode, meId: string, meLid: string): {
+    fullMessage: WAMessage;
+    author: string;
+    sender: string;
+};
+export declare const decryptMessageNode: (stanza: BinaryNode, meId: string, meLid: string, repository: SignalRepositoryWithLIDStore, logger: ILogger) => {
+    fullMessage: WAMessage;
+    category: string | undefined;
+    author: string;
+    decrypt(): Promise<void>;
+};
+//# sourceMappingURL=decode-wa-message.d.ts.map