@oxidezap/baileyrs 0.0.18 → 0.0.21

package/lib/Utils/use-bridge-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use-bridge-store.d.ts","sourceRoot":"","sources":["../../src/Utils/use-bridge-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAE5D;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CA2HvG"}
+{"version":3,"file":"use-bridge-store.d.ts","sourceRoot":"","sources":["../../src/Utils/use-bridge-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAsC5D;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAsIvG"}

package/lib/Utils/use-bridge-store.js

@@ -1,6 +1,41 @@
 import { Buffer } from 'node:buffer';
 import { mkdir, readFile, unlink, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
+/**
+ * Stores whose loss on SIGKILL produces undecryptable messages or
+ * permanent app-state divergence. Each entry below carries a reason —
+ * promoting a store to "critical" doubles disk I/O, so don't add
+ * anything here that can be re-derived from the network.
+ *
+ *   `session` / `identity` — Signal session ratchet steps. Lose
+ *      one step → next inbound message from peer undecryptable.
+ *   `device` — own device record (noiseKey, signedIdentityKey,
+ *      adv_secret_key). Loss = forced re-pair.
+ *   `prekey` — consumed prekey must be durably consumed; reuse
+ *      on a different peer makes the server reject the bundle.
+ *   `sync_key` — app-state HMAC key. Loss → permanent gap in
+ *      app-state mutations until full re-sync.
+ *   `sender_key` — group-message ratchet (same model as `session`,
+ *      but per group). Lose a step → next inbound message from the
+ *      same group undecryptable.
+ *   `sync_version` — LTHash state per app-state collection
+ *      (regular_high / regular_low / critical_block / etc.). Gates
+ *      every mutation MAC verification — lose it and every
+ *      subsequent app-state action throws "hash mismatch" until
+ *      full re-sync.
+ *   `mutation_mac` — replay-protection cache for app-state
+ *      mutations. Loss can let a replayed mutation re-apply.
+ */
+const CRITICAL_STORES = new Set([
+    'session',
+    'identity',
+    'device',
+    'prekey',
+    'sync_key',
+    'sender_key',
+    'sync_version',
+    'mutation_mac'
+]);
 /**
  * Creates a file-based store for the WASM bridge.
  *
@@ -43,9 +78,21 @@ export async function useBridgeStore(folder) {
             // Ignore — folder may have been deleted during cleanup
         }
     };
+    const FLUSH_MAX_PASSES = 32;
     const flushAll = async () => {
-        const keys = [...pendingWrites.keys()];
-        await Promise.all(keys.map(flushWrite));
+        // Drain in a loop because new sets can land while we're awaiting the
+        // previous batch's writeFile. Bounded so a caller emitting writes in
+        // a tight loop can't lock us forever — `Socket/index.ts.end()` waits
+        // on this and must always return. If the cap is hit with writes
+        // still pending, surface that to the caller — silently dropping
+        // them would lose Signal session steps and corrupt next decrypt.
+        for (let i = 0; i < FLUSH_MAX_PASSES && pendingWrites.size > 0; i++) {
+            const keys = [...pendingWrites.keys()];
+            await Promise.all(keys.map(flushWrite));
+        }
+        if (pendingWrites.size > 0) {
+            throw new Error(`use-bridge-store flushAll did not quiesce after ${FLUSH_MAX_PASSES} passes (${pendingWrites.size} pending writes remain)`);
+        }
     };
     return {
         async get(store, key) {
@@ -75,10 +122,7 @@ export async function useBridgeStore(folder) {
                 return;
             }
             touchCache(cacheKey, value);
-            // Signal sessions and identity keys must be flushed immediately —
-            // losing a ratchet step on crash causes undecryptable messages.
-            const critical = store === 'session' || store === 'identity' || store === 'device';
-            if (critical) {
+            if (CRITICAL_STORES.has(store)) {
                 const existing = pendingWrites.get(cacheKey);
                 if (existing) {
                     clearTimeout(existing.timer);

package/lib/Utils/use-bridge-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"use-bridge-store.js","sourceRoot":"","sources":["../../src/Utils/use-bridge-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAGhC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IAClD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAExC,wDAAwD;IACxD,MAAM,iBAAiB,GAAG,IAAI,CAAA;IAC9B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC3C,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,KAAiB,EAAE,EAAE;QACrD,0DAA0D;QAC1D,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACjB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACrB,qCAAqC;QACrC,IAAI,KAAK,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAA;YACxC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;IACF,CAAC,CAAA;IAED,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAExG,4DAA4D;IAC5D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAqF,CAAA;IAClH,MAAM,cAAc,GAAG,EAAE,CAAA;IAEzB,MAAM,UAAU,GAAG,KAAK,EAAE,QAAgB,EAAE,EAAE;QAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC3B,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC9B,IAAI,CAAC;YACJ,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;QAC7C,CAAC;QAAC,MAAM,CAAC;YACR,uDAAuD;QACxD,CAAC;IACF,CAAC,CAAA;IAED,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC3B,MAAM,IAAI,GAAG,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAA;QACtC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAA;IACxC,CAAC,CAAA;IAED,OAAO;QACN,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,GAAW;YACnC,MAAM,QAAQ,GAAG,GAAG,KAAK,KAAK,GAAG,EAAE,CAAA;YAEnC,oBAAoB;YACpB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAClC,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC3C,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAA;YAEjC,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;gBACjD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;gBACzE,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;gBACzB,OAAO,GAAG,CAAA;YACX,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAA;YACZ,CAAC;QACF,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,GAAW,EAAE,KAAiB;YACtD,MAAM,QAAQ,GAAG,GAAG,KAAK,KAAK,GAAG,EAAE,CAAA;YAEnC,qDAAqD;YACrD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAChC,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1D,OAAM;YACP,CAAC;YAED,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YAE3B,kEAAkE;YAClE,gEAAgE;YAChE,MAAM,QAAQ,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,QAAQ,CAAA;YAClF,IAAI,QAAQ,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAC5C,IAAI,QAAQ,EAAE,CAAC;oBACd,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;oBAC5B,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAC/B,CAAC;gBAED,IAAI,CAAC;oBACJ,MAAM,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;gBAC7C,CAAC;gBAAC,MAAM,CAAC;oBACR,kDAAkD;gBACnD,CAAC;gBAED,OAAM;YACP,CAAC;YAED,6DAA6D;YAC7D,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC5C,IAAI,QAAQ,EAAE,CAAC;gBACd,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC7B,CAAC;YAED,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,UAAU,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAA;YACzE,KAAK,CAAC,KAAK,EAAE,CAAA,CAAC,oDAAoD;YAClE,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QACpD,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,GAAW;YACtC,MAAM,QAAQ,GAAG,GAAG,KAAK,KAAK,GAAG,EAAE,CAAA;YACnC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAEtB,uBAAuB;YACvB,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC5C,IAAI,QAAQ,EAAE,CAAC;gBACd,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAC5B,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC/B,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;YACnC,CAAC;YAAC,MAAM,CAAC;gBACR,+BAA+B;YAChC,CAAC;QACF,CAAC;QAED,KAAK,EAAE,QAAQ;KACf,CAAA;AACF,CAAC"}
+{"version":3,"file":"use-bridge-store.js","sourceRoot":"","sources":["../../src/Utils/use-bridge-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAGhC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACpD,SAAS;IACT,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,YAAY;IACZ,cAAc;IACd,cAAc;CACd,CAAC,CAAA;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IAClD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAExC,wDAAwD;IACxD,MAAM,iBAAiB,GAAG,IAAI,CAAA;IAC9B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC3C,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,KAAiB,EAAE,EAAE;QACrD,0DAA0D;QAC1D,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACjB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACrB,qCAAqC;QACrC,IAAI,KAAK,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAA;YACxC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;IACF,CAAC,CAAA;IAED,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAExG,4DAA4D;IAC5D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAqF,CAAA;IAClH,MAAM,cAAc,GAAG,EAAE,CAAA;IAEzB,MAAM,UAAU,GAAG,KAAK,EAAE,QAAgB,EAAE,EAAE;QAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC3B,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC9B,IAAI,CAAC;YACJ,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;QAC7C,CAAC;QAAC,MAAM,CAAC;YACR,uDAAuD;QACxD,CAAC;IACF,CAAC,CAAA;IAED,MAAM,gBAAgB,GAAG,EAAE,CAAA;IAC3B,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC3B,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,gEAAgE;QAChE,gEAAgE;QAChE,iEAAiE;QACjE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,gBAAgB,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAA;YACtC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAA;QACxC,CAAC;QACD,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACd,mDAAmD,gBAAgB,YAAY,aAAa,CAAC,IAAI,yBAAyB,CAC1H,CAAA;QACF,CAAC;IACF,CAAC,CAAA;IAED,OAAO;QACN,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,GAAW;YACnC,MAAM,QAAQ,GAAG,GAAG,KAAK,KAAK,GAAG,EAAE,CAAA;YAEnC,oBAAoB;YACpB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAClC,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC3C,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAA;YAEjC,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;gBACjD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;gBACzE,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;gBACzB,OAAO,GAAG,CAAA;YACX,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAA;YACZ,CAAC;QACF,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,GAAW,EAAE,KAAiB;YACtD,MAAM,QAAQ,GAAG,GAAG,KAAK,KAAK,GAAG,EAAE,CAAA;YAEnC,qDAAqD;YACrD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAChC,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1D,OAAM;YACP,CAAC;YAED,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YAE3B,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAC5C,IAAI,QAAQ,EAAE,CAAC;oBACd,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;oBAC5B,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAC/B,CAAC;gBAED,IAAI,CAAC;oBACJ,MAAM,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;gBAC7C,CAAC;gBAAC,MAAM,CAAC;oBACR,kDAAkD;gBACnD,CAAC;gBAED,OAAM;YACP,CAAC;YAED,6DAA6D;YAC7D,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC5C,IAAI,QAAQ,EAAE,CAAC;gBACd,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC7B,CAAC;YAED,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,UAAU,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAA;YACzE,KAAK,CAAC,KAAK,EAAE,CAAA,CAAC,oDAAoD;YAClE,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QACpD,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,GAAW;YACtC,MAAM,QAAQ,GAAG,GAAG,KAAK,KAAK,GAAG,EAAE,CAAA;YACnC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAEtB,uBAAuB;YACvB,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC5C,IAAI,QAAQ,EAAE,CAAC;gBACd,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAC5B,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC/B,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;YACnC,CAAC;YAAC,MAAM,CAAC;gBACR,+BAA+B;YAChC,CAAC;QACF,CAAC;QAED,KAAK,EAAE,QAAQ;KACf,CAAA;AACF,CAAC"}

package/lib/Utils/use-multi-file-auth-state.d.ts

@@ -5,9 +5,16 @@ import type { AuthenticationState } from '../Types/index.js';
  * All crypto keys, sessions, and identity are managed by the Rust engine
  * and persisted as `.bin` files via the bridge store. No `creds.json` needed.
  *
+ * Returns a `saveCreds` no-op for upstream-Baileys API parity. Upstream
+ * bots wire `ev.on('creds.update', saveCreds)` as the persistence hook;
+ * in baileyrs the bridge auto-persists everything through the store, so
+ * the function is a stable shim that lets the same call sites keep
+ * working without changes.
+ *
  * @param folder Directory to store bridge state files
  */
 export declare const useMultiFileAuthState: (folder: string) => Promise<{
     state: AuthenticationState;
+    saveCreds: () => Promise<void>;
 }>;
 //# sourceMappingURL=use-multi-file-auth-state.d.ts.map

package/lib/Utils/use-multi-file-auth-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use-multi-file-auth-state.d.ts","sourceRoot":"","sources":["../../src/Utils/use-multi-file-auth-state.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAG5D;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,GAAU,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,KAAK,EAAE,mBAAmB,CAAA;CAAE,CAiBlG,CAAA"}
+{"version":3,"file":"use-multi-file-auth-state.d.ts","sourceRoot":"","sources":["../../src/Utils/use-multi-file-auth-state.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAG5D;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,qBAAqB,GACjC,QAAQ,MAAM,KACZ,OAAO,CAAC;IAAE,KAAK,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAqBxE,CAAA"}

package/lib/Utils/use-multi-file-auth-state.js

@@ -6,6 +6,12 @@ import { useBridgeStore } from "./use-bridge-store.js";
  * All crypto keys, sessions, and identity are managed by the Rust engine
  * and persisted as `.bin` files via the bridge store. No `creds.json` needed.
  *
+ * Returns a `saveCreds` no-op for upstream-Baileys API parity. Upstream
+ * bots wire `ev.on('creds.update', saveCreds)` as the persistence hook;
+ * in baileyrs the bridge auto-persists everything through the store, so
+ * the function is a stable shim that lets the same call sites keep
+ * working without changes.
+ *
  * @param folder Directory to store bridge state files
  */
 export const useMultiFileAuthState = async (folder) => {
@@ -20,7 +26,11 @@ export const useMultiFileAuthState = async (folder) => {
     }
     const store = await useBridgeStore(folder);
     return {
-        state: { store }
+        state: { store },
+        saveCreds: async () => {
+            // no-op: bridge owns creds and writes them through `store.set('device', …)`.
+            // Kept on the surface so upstream-Baileys code paths keep type-checking.
+        }
     };
 };
 //# sourceMappingURL=use-multi-file-auth-state.js.map

package/lib/Utils/use-multi-file-auth-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"use-multi-file-auth-state.js","sourceRoot":"","sources":["../../src/Utils/use-multi-file-auth-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAE9C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAEtD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,MAAc,EAA2C,EAAE;IACtG,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACrD,IAAI,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACd,8CAA8C,MAAM,oDAAoD,CACxG,CAAA;QACF,CAAC;IACF,CAAC;SAAM,CAAC;QACP,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzC,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAA;IAE1C,OAAO;QACN,KAAK,EAAE,EAAE,KAAK,EAAE;KAChB,CAAA;AACF,CAAC,CAAA"}
+{"version":3,"file":"use-multi-file-auth-state.js","sourceRoot":"","sources":["../../src/Utils/use-multi-file-auth-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAE9C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAEtD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACzC,MAAc,EAC4D,EAAE;IAC5E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACrD,IAAI,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACd,8CAA8C,MAAM,oDAAoD,CACxG,CAAA;QACF,CAAC;IACF,CAAC;SAAM,CAAC;QACP,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzC,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAA;IAE1C,OAAO;QACN,KAAK,EAAE,EAAE,KAAK,EAAE;QAChB,SAAS,EAAE,KAAK,IAAI,EAAE;YACrB,6EAA6E;YAC7E,yEAAyE;QAC1E,CAAC;KACD,CAAA;AACF,CAAC,CAAA"}

package/lib/Utils/wrap-legacy-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrap-legacy-store.d.ts","sourceRoot":"","sources":["../../src/Utils/wrap-legacy-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAE5D,OAAO,KAAK,EAAuB,mBAAmB,EAAkC,MAAM,mBAAmB,CAAA;AAqBjH,MAAM,WAAW,kBAAmB,SAAQ,gBAAgB;IAC3D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,OAAO,IAAI,IAAI,CAAA;CACf;AAk+BD,wBAAsB,eAAe,CACpC,KAAK,EAAE,mBAAmB,EAC1B,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC9B,MAAM,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GACrD,OAAO,CAAC,kBAAkB,CAAC,CA4O7B;AAqCD;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,CAChD,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,KAAK,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAoEzE"}
+{"version":3,"file":"wrap-legacy-store.d.ts","sourceRoot":"","sources":["../../src/Utils/wrap-legacy-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAE5D,OAAO,KAAK,EAAuB,mBAAmB,EAAkC,MAAM,mBAAmB,CAAA;AAuBjH,MAAM,WAAW,kBAAmB,SAAQ,gBAAgB;IAC3D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,OAAO,IAAI,IAAI,CAAA;CACf;AAu+BD,wBAAsB,eAAe,CACpC,KAAK,EAAE,mBAAmB,EAC1B,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC9B,MAAM,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GACrD,OAAO,CAAC,kBAAkB,CAAC,CA+P7B;AASD;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,CAChD,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,KAAK,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAoEzE"}

package/lib/Utils/wrap-legacy-store.js

@@ -15,6 +15,8 @@ import { createHmac } from 'node:crypto';
 import { mkdir, readFile, stat, unlink, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { proto } from 'whatsapp-rust-bridge/proto-types';
+import { jidDecode } from "../WABinary/jid-utils.js";
+import { BufferJSON } from "./generics.js";
 const protoLookup = proto;
 const ADVSignedDeviceIdentity = protoLookup.ADVSignedDeviceIdentity ?? protoLookup.AdvSignedDeviceIdentity;
 function warn(msg, err) {
@@ -47,36 +49,32 @@ const STORE_MAP = {
     mutation_mac: 'bridge-mutation-mac',
     meta: 'bridge-meta'
 };
-// Stores where bridge data is passthrough binary (no conversion).
-// All Signal-protocol records (`identity`, `session`, `sender_key`) now
-// route through converters because every one of them either:
-//   • has a different key shape between bridge and upstream, OR
-//   • has a different value-byte encoding (proto / JSON / 32-vs-33-byte
-//     prefix), OR
-//   • both.
-// Keeping the empty set as an extension point — future bridge stores that
-// are byte-compatible with upstream can land here without a converter.
+// Stores that are byte-compatible between bridge and upstream and so can
+// be persisted unchanged. Currently empty — every Signal record needs
+// either a key rewrite or a value-byte conversion, both handled by
+// `converters` below.
 const BINARY_STORES = new Set();
-// Bridge-only stores — raw binary persisted through keys interface.
-// `lid_mapping` is intentionally excluded — it has a converter so the
-// `pn:`/`lid:` prefixed bridge keys translate to upstream's bare-userpart
-// `{pnUser}` + `{lidUser}_reverse` shape, letting both libraries share
-// the same on-disk LID↔PN mapping table.
-const BRIDGE_ONLY_STORES = new Set([
-    'signed_prekey',
-    'sender_key_devices',
-    'base_key',
-    'sent_message',
-    'mutation_mac',
-    'meta'
-]);
+// Bridge-only stores — raw binary persisted through the keys interface.
+// Derived from STORE_MAP: anything mapped to a `bridge-*` upstream type
+// has no peer in upstream Baileys' SignalDataTypeMap and must round-trip
+// as raw bytes. `lid_mapping` is mapped to upstream's `lid-mapping` type
+// instead (its converter rewrites the key prefixes), so it's not
+// bridge-only and is naturally excluded by the prefix filter.
+const BRIDGE_ONLY_STORES = new Set(Object.entries(STORE_MAP)
+    .filter(([, upstreamType]) => upstreamType.startsWith('bridge-'))
+    .map(([bridgeName]) => bridgeName));
 /** Reconstruct a JID string from the bridge's serialized Jid object.
- *  Format: "user:device@server" (device omitted when 0). */
+ *  Format: `user[_<agent>][:<device>]@<server>`. The agent suffix is
+ *  required to round-trip hosted Business accounts (`5511_2@hosted`) —
+ *  `credsToDeviceJson` stores it, so the load path must also emit it.
+ *  Without this, `creds.me.id` would lose the `_<agent>` half on every
+ *  reload and the next `credsToDeviceJson` save would zero `agent`. */
 function bridgeJidToString(j) {
     if (!j?.user || !j?.server)
         return null;
+    const agent = j.agent ?? 0;
     const device = j.device ?? 0;
-    return `${j.user}${device > 0 ? ':' + device : ''}@${j.server}`;
+    return `${j.user}${agent > 0 ? '_' + agent : ''}${device > 0 ? ':' + device : ''}@${j.server}`;
 }
 // ---- Helpers ----
 const toJson = (v) => new TextEncoder().encode(JSON.stringify(v));
@@ -85,6 +83,24 @@ const toBuf = (v) => v instanceof Uint8Array ? v : Buffer.isBuffer(v) ? new Uint
 /** Convert Buffer/Uint8Array to a plain number[] for JSON serialization.
  *  Matches Rust's serde_json Vec<u8> format: [byte, byte, ...] */
 const bufToNumArray = (v) => Array.from(Buffer.from(v));
+/**
+ * `true` when the key bytes are absent or all zeros. Used at the device-read
+ * boundary to detect a partially-hydrated creds object (e.g. migration
+ * remnants where only `me.id` survived) and tell the bridge to bootstrap
+ * fresh material instead of blowing up the noise handshake with `precondition-required`.
+ */
+const isZeroKey = (b) => {
+    if (!b)
+        return true;
+    // Buffer is a Uint8Array subclass at runtime, so this view is always safe.
+    const view = b;
+    if (view.length === 0)
+        return true;
+    for (let i = 0; i < view.length; i++)
+        if (view[i] !== 0)
+            return false;
+    return true;
+};
 /** Bridge uses hex-encoded key IDs for sync_key; upstream uses base64. Convert hex→base64. */
 const hexToBase64 = (hex) => Buffer.from(hex, 'hex').toString('base64');
 const converters = {
@@ -336,21 +352,6 @@ const converters = {
         }
     }
 };
-// BufferJSON-compatible replacer/reviver matching upstream `Utils/generics`.
-const bufferJsonReplacer = (_k, v) => {
-    if (Buffer.isBuffer(v) || v instanceof Uint8Array || v?.type === 'Buffer') {
-        const data = v?.data ?? v;
-        return { type: 'Buffer', data: Buffer.from(data).toString('base64') };
-    }
-    return v;
-};
-const bufferJsonReviver = (_k, v) => {
-    const obj = v;
-    if (obj && typeof obj === 'object' && obj.type === 'Buffer' && typeof obj.data === 'string') {
-        return Buffer.from(obj.data, 'base64');
-    }
-    return v;
-};
 const sk_toBytes = (v) => v ? new Uint8Array(Buffer.from(v)) : new Uint8Array();
 const sk_toBuffer = (v) => Buffer.from(v ?? new Uint8Array());
 function bridgeSenderKeyProtoToJson(protoBytes) {
@@ -367,10 +368,10 @@ function bridgeSenderKeyProtoToJson(protoBytes) {
             seed: sk_toBuffer(mk.seed)
         }))
     }));
-    return Buffer.from(JSON.stringify(states, bufferJsonReplacer), 'utf-8');
+    return Buffer.from(JSON.stringify(states, BufferJSON.replacer), 'utf-8');
 }
 function upstreamSenderKeyJsonToProto(jsonBuf) {
-    const states = JSON.parse(Buffer.from(jsonBuf).toString('utf-8'), bufferJsonReviver);
+    const states = JSON.parse(Buffer.from(jsonBuf).toString('utf-8'), BufferJSON.reviver);
     const senderKeyStates = states.map(s => ({
         senderKeyId: s.senderKeyId ?? 0,
         senderChainKey: { iteration: s.senderChainKey?.iteration ?? 0, seed: sk_toBytes(s.senderChainKey?.seed) },
@@ -607,20 +608,27 @@ function upstreamSessionRecordToProto(record) {
 // session/identity key translation: bridge `{user}[:dev]@{server}.{sig}`
 // → upstream `{signalUser}.{deviceId}` via `bridgeAddrToBaileysAddr`.
 // ---- Device/Creds ----
-/** Parse a JID string into { user, device, server } */
-function parseJid(jid) {
-    if (!jid)
-        return null;
-    const atIdx = jid.indexOf('@');
+/**
+ * Extract the literal `_<n>` agent suffix from a raw JID. `jidDecode`
+ * folds it into `domainType` only for plain `s.whatsapp.net`; for special
+ * servers (`hosted`, `hosted.lid`) it is parsed-then-discarded because
+ * `domainType` is taken from the server. The bridge's `Jid.agent`
+ * field needs the literal number, so recover it here.
+ */
+function jidAgent(rawJid) {
+    if (!rawJid)
+        return 0;
+    const atIdx = rawJid.indexOf('@');
     if (atIdx < 0)
-        return null;
-    const server = jid.slice(atIdx + 1);
-    const userPart = jid.slice(0, atIdx);
-    const colonIdx = userPart.indexOf(':');
-    if (colonIdx >= 0) {
-        return { user: userPart.slice(0, colonIdx), device: parseInt(userPart.slice(colonIdx + 1)) || 0, server };
-    }
-    return { user: userPart, device: 0, server };
+        return 0;
+    const userPart = rawJid.slice(0, atIdx).split(':', 1)[0];
+    if (!userPart)
+        return 0;
+    const sepIdx = userPart.indexOf('_');
+    if (sepIdx < 0)
+        return 0;
+    const n = parseInt(userPart.slice(sepIdx + 1), 10);
+    return Number.isFinite(n) ? n : 0;
 }
 function credsToDeviceJson(creds) {
     /** Serialize a key pair as [private(32) + public(32)] matching Rust key_pair_serde */
@@ -629,15 +637,19 @@ function credsToDeviceJson(creds) {
             return Array(64).fill(0);
         return bufToNumArray(Buffer.from(pair.private)).concat(bufToNumArray(Buffer.from(pair.public)));
     };
-    // Extract device number from me.id (e.g. "559984726662:7@s.whatsapp.net")
-    // or fall back to me.lid (e.g. "236395184570386:10@lid") for the device index
-    const pnJid = parseJid(creds.me?.id);
-    const lidJid = parseJid(creds.me?.lid);
-    // If me.id has no device suffix, use the LID's device number
-    const deviceNum = pnJid && pnJid.device > 0 ? pnJid.device : (lidJid?.device ?? 0);
+    const pnJid = jidDecode(creds.me?.id);
+    const lidJid = jidDecode(creds.me?.lid);
+    const deviceNum = pnJid?.device ?? lidJid?.device ?? 0;
+    const pnAgent = jidAgent(creds.me?.id);
+    const lidAgent = jidAgent(creds.me?.lid);
+    // Preserve `server` and recover the literal `_<n>` agent suffix so
+    // hosted / hosted.lid accounts (e.g. `5511_2@hosted`) survive a
+    // drop-in migration from upstream Baileys.
     return toJson({
-        pn: pnJid ? { user: pnJid.user, server: 's.whatsapp.net', device: deviceNum, agent: 0, integrator: 0 } : null,
-        lid: lidJid ? { user: lidJid.user, server: 'lid', device: lidJid.device, agent: 0, integrator: 0 } : null,
+        pn: pnJid ? { user: pnJid.user, server: pnJid.server, device: deviceNum, agent: pnAgent, integrator: 0 } : null,
+        lid: lidJid
+            ? { user: lidJid.user, server: lidJid.server, device: lidJid.device ?? 0, agent: lidAgent, integrator: 0 }
+            : null,
         registration_id: creds.registrationId ?? 0,
         noise_key: kp(creds.noiseKey),
         identity_key: kp(creds.signedIdentityKey),
@@ -879,7 +891,7 @@ export async function wrapLegacyStore(state, saveCreds, logger) {
             clearTimeout(credsTimer);
         credsTimer = setTimeout(() => {
             credsTimer = null;
-            saveCreds().catch(() => { });
+            saveCreds().catch(err => warn('saveCreds failed', err));
         }, 100);
     };
     /** Route a store to its handler */
@@ -980,6 +992,16 @@ export async function wrapLegacyStore(state, saveCreds, logger) {
                     // through `set('device', 'device', …)` on pair-success.
                     if (!creds.noiseKey && !creds.me?.id)
                         return null;
+                    // Even when `noiseKey` is present as an object, the bytes
+                    // can still be all-zero — happens after a partial migration
+                    // from a legacy creds.json that only persisted `me.id`.
+                    // `credsToDeviceJson` would happily emit zero-filled key
+                    // slots, which the server rejects with the same 428. Treat
+                    // any zero-byte critical key as a bootstrap signal.
+                    if (isZeroKey(creds.noiseKey?.private) || isZeroKey(creds.signedIdentityKey?.private)) {
+                        warn('device read: noiseKey/signedIdentityKey is zero-valued; signaling bootstrap to bridge');
+                        return null;
+                    }
                     return credsToDeviceJson(creds);
                 }
                 if (key === 'account') {
@@ -989,14 +1011,10 @@ export async function wrapLegacyStore(state, saveCreds, logger) {
                 }
                 return readBinary(type, key);
             }
-            if (route === 'signal') {
-                // `BINARY_STORES` is empty as of the move-to-converter
-                // migration — keeping the branch for future passthrough
-                // stores. No identity fallback needed: identity now goes
-                // through the converter, which handles both the address
-                // rewrite and the 32↔33-byte prefix.
+            // `signal` route is currently unreachable (BINARY_STORES is empty);
+            // kept for future byte-compatible stores.
+            if (route === 'signal')
                 return readBinary(type, key);
-            }
             if (route === 'bridge-only')
                 return readBinary(type, key);
             if (route === 'converter') {
@@ -1064,36 +1082,38 @@ export async function wrapLegacyStore(state, saveCreds, logger) {
             }
         },
         async flush() {
-            if (credsTimer) {
+            // Drain in a loop because `set('device', ...)` calls landing
+            // during `await saveCreds()` queue a fresh `credsTimer`. A
+            // single-pass flush would leave the latest creds on the timer
+            // — `dispose()` then fires saveCreds() but the orchestrator
+            // has already moved on (`free()`), so the write is racing
+            // against process exit. Looping until the timer is null after
+            // a save closes the window deterministically. Bounded by a
+            // small max-iterations guard so a saveCreds() that re-emits
+            // credentials in a tight loop can't lock us forever.
+            for (let i = 0; i < 32 && credsTimer; i++) {
                 clearTimeout(credsTimer);
                 credsTimer = null;
                 await saveCreds();
             }
+            if (credsTimer) {
+                warn('flush hit max-iterations cap; pending credsTimer dropped — saveCreds may be re-emitting in a loop');
+                clearTimeout(credsTimer);
+                credsTimer = null;
+            }
         },
         dispose() {
             if (credsTimer) {
                 clearTimeout(credsTimer);
-                saveCreds().catch(() => { });
+                saveCreds().catch(err => warn('saveCreds failed during dispose', err));
             }
         }
     };
 }
-const bufferReviver = (_, value) => {
-    if (value !== null &&
-        value !== undefined &&
-        typeof value === 'object' &&
-        (value.type === 'Buffer' || value.buffer === true)) {
-        const data = value.data ?? value.value;
-        return typeof data === 'string'
-            ? Buffer.from(data, 'base64')
-            : Buffer.from((Array.isArray(data) ? data : []));
-    }
-    return value;
-};
-/** JSON replacer that serializes Buffer/Uint8Array → `{ type: "Buffer", data: "base64" }` */
-const bufferReplacer = (_, value) => value instanceof Uint8Array || Buffer.isBuffer(value)
-    ? { type: 'Buffer', data: Buffer.from(value).toString('base64') }
-    : value;
+// ---- Legacy multi-file auth state loader ----
+// Reads upstream Baileys' creds.json + per-key .json files via the
+// shared `BufferJSON` codec (same as @whiskeysockets/baileys
+// useMultiFileAuthState).
 const fixFileName = (file) => file?.replace(/\//g, '__')?.replace(/:/g, '-');
 /**
  * Loads an upstream Baileys session (creds.json + key .json files) and returns
@@ -1116,14 +1136,14 @@ export async function useLegacyMultiFileAuthState(folder) {
     const readData = async (file) => {
         try {
             const data = await readFile(join(folder, fixFileName(file)), 'utf-8');
-            return JSON.parse(data, bufferReviver);
+            return JSON.parse(data, BufferJSON.reviver);
         }
         catch {
             return null;
         }
     };
     const writeData = async (data, file) => {
-        await writeFile(join(folder, fixFileName(file)), JSON.stringify(data, bufferReplacer));
+        await writeFile(join(folder, fixFileName(file)), JSON.stringify(data, BufferJSON.replacer));
     };
     const removeData = async (file) => {
         try {