@oxidezap/whatsapp-rust-bridge 0.20.0 → 0.21.0

package/dist/proto.d.ts

@@ -1,4 +1,4 @@
-import { UnpairedSurrogateError } from "./proto-reader";
+import { UnpairedSurrogateError } from "./proto-reader.js";
 export { UnpairedSurrogateError };
 /**
  * Encode `obj` as `typeName`.

package/dist/whatsapp_rust_bridge.d.ts

@@ -133,7 +133,7 @@ export interface ArchiveUpdate {
     /** The chat being archived or unarchived. */
     jid: Jid;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.IArchiveChatAction;
+    action: import('./proto-types.js').proto.SyncActionValue.IArchiveChatAction;
     from_full_sync: boolean;
 }
 
@@ -210,10 +210,11 @@ export interface CachedNoiseCert {
     not_after: number | string;
 }
 
-/** Cached form of the server's two-cert chain. `leaf.key` is the server static public key consumed by Noise IK; the intermediate is kept solely to mirror WA Web's expiry checks. */
+/** Cached form of the server's two-cert chain. `leaf.key` is the server static public key consumed by Noise IK; the intermediate is kept solely to mirror WA Web's expiry checks.  `signature_verified` records that both XEdDSA signatures were actually checked when this chain was cached. Only such chains may authorize IK. Records written before this field existed deserialize it as `false` and fall back to one XX, which then stores a verified chain. This is upgrade hygiene, not tamper-proofing: the storage backend remains the trust boundary, and a backend that rewrites this flag can already rewrite the keys it guards. */
 export interface CachedServerCertChain {
     intermediate: CachedNoiseCert;
     leaf: CachedNoiseCert;
+    signature_verified: boolean;
 }
 
 /** Fields kept per-variant (not a shared `BasicCallMeta`) so the `serde` shape mirrors the stanza 1:1 for downstream JS consumers. */
@@ -289,7 +290,7 @@ export interface CallLogSync {
     from_me: boolean;
     /** When the mutation was written, not when the call happened — the call's own time is `record.start_time`.  This is the field WA Web measures against the pairing timestamp to decide whether a record predates the device, so it is worth having; it is not a time to file the call under. A mutation that arrives without one falls back to the moment it was received, as every other app-state event does. */
     timestamp: string;
-    record: import('./proto-types').proto.ICallLogRecord;
+    record: import('./proto-types.js').proto.ICallLogRecord;
     from_full_sync: boolean;
 }
 
@@ -330,7 +331,7 @@ export interface ClearChatUpdate {
     /** From the index, not the proto. */
     delete_media: boolean;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.IClearChatAction;
+    action: import('./proto-types.js').proto.SyncActionValue.IClearChatAction;
     from_full_sync: boolean;
 }
 
@@ -396,7 +397,7 @@ export interface ContactUpdate {
     /** The chat/contact this sync action applies to. */
     jid: Jid;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.IContactAction;
+    action: import('./proto-types.js').proto.SyncActionValue.IContactAction;
     from_full_sync: boolean;
 }
 
@@ -432,7 +433,7 @@ export interface DeleteChatUpdate {
     /** From the index, not the proto — DeleteChatAction only has messageRange. */
     delete_media: boolean;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.IDeleteChatAction;
+    action: import('./proto-types.js').proto.SyncActionValue.IDeleteChatAction;
     from_full_sync: boolean;
 }
 
@@ -443,7 +444,7 @@ export interface DeleteMessageForMeUpdate {
     message_id: string;
     from_me: boolean;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.IDeleteMessageForMeAction;
+    action: import('./proto-types.js').proto.SyncActionValue.IDeleteMessageForMeAction;
     from_full_sync: boolean;
 }
 
@@ -457,7 +458,7 @@ export interface Device {
     signed_pre_key_id: number;
     signed_pre_key_signature: Uint8Array;
     adv_secret_key: Uint8Array;
-    account?: import('./proto-types').proto.IADVSignedDeviceIdentity | null;
+    account?: import('./proto-types.js').proto.IADVSignedDeviceIdentity | null;
     push_name: string;
     app_version_primary: number;
     app_version_secondary: number;
@@ -475,7 +476,7 @@ export interface Device {
     server_has_prekeys: boolean;
     /** NCT salt provisioned by the server via app state sync or history sync. */
     nct_salt?: Uint8Array | null;
-    /** Server cert chain cached from the last successful XX (or XX-fallback) handshake. Enables Noise IK on the next connect by exposing `leaf.key` as the server's static public key, and lets us reject stale entries via `not_after` before even attempting IK. `None` forces XX on the next connect. */
+    /** Server cert chain cached from the last successful XX (or XX-fallback) handshake. Enables Noise IK on the next connect by exposing `leaf.key` as the server's static public key, and lets us reject stale entries via `not_after` before even attempting IK. Only chains whose signatures were checked (`signature_verified`) authorize IK; `None` — or an unmarked legacy record — forces XX on the next connect. */
     server_cert_chain?: CachedServerCertChain | null;
     /** Login counter sent as `ClientPayload.lc` on every login. WA Web's `WAWebUserPrefsGeneral.getLoginCounter()` reads (and bumps) this from localStorage on each connect; the server uses it as an anti-abuse signal. Persisted so it survives restarts. */
     login_counter: number;
@@ -595,7 +596,7 @@ export interface DisableLinkPreviewsUpdate {
     /** `true` when link previews are now disabled. Only emitted when the wire carried the flag; WA Web treats an absent one as a malformed mutation. */
     previews_disabled: boolean;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.IPrivacySettingDisableLinkPreviewsAction;
+    action: import('./proto-types.js').proto.SyncActionValue.IPrivacySettingDisableLinkPreviewsAction;
     from_full_sync: boolean;
 }
 
@@ -842,12 +843,12 @@ export interface IdentityChange {
 
 /** One decrypted inbound message. The same items (and order) back both consumer surfaces: the durability hook's batch and [`Event::Messages`]. */
 export interface InboundMessage {
-    message: import('./proto-types').proto.IMessage;
+    message: import('./proto-types.js').proto.IMessage;
     info: MessageInfo;
     /** Ephemeral duration in seconds, from the decrypted message's `contextInfo.expiration`. Lives here rather than on `info` because it is only known after decryption, and `info` is shared with every `<enc>` of the stanza by then: writing it there cost a deep copy of the whole `MessageInfo` on every disappearing-chat message. */
     ephemeral_expiration?: number | null;
     /** Parent post key when `message` is a decrypted CAG channel comment (`enc_comment_message`). The inner `Message` proto has no slot for the threading link, so it surfaces here. Boxed: rare. */
-    comment_target?: import('./proto-types').proto.IMessageKey | null;
+    comment_target?: import('./proto-types.js').proto.IMessageKey | null;
 }
 
 export interface IncomingCall {
@@ -891,7 +892,7 @@ export interface LabelAssociationUpdate {
     /** The chat the label was associated with or removed from. */
     chat_jid: Jid;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.ILabelAssociationAction;
+    action: import('./proto-types.js').proto.SyncActionValue.ILabelAssociationAction;
     from_full_sync: boolean;
 }
 
@@ -900,7 +901,7 @@ export interface LabelEditUpdate {
     /** The label identifier (the index key, not a JID). */
     label_id: string;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.ILabelEditAction;
+    action: import('./proto-types.js').proto.SyncActionValue.ILabelEditAction;
     from_full_sync: boolean;
 }
 
@@ -954,7 +955,7 @@ export interface MarkChatAsReadUpdate {
     /** The chat being marked as read or unread. */
     jid: Jid;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.IMarkChatAsReadAction;
+    action: import('./proto-types.js').proto.SyncActionValue.IMarkChatAsReadAction;
     from_full_sync: boolean;
 }
 
@@ -1024,7 +1025,7 @@ export interface MessageLabelAssociationUpdate {
     /** The labelled message's id. */
     message_id: string;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.ILabelAssociationAction;
+    action: import('./proto-types.js').proto.SyncActionValue.ILabelAssociationAction;
     from_full_sync: boolean;
 }
 
@@ -1130,7 +1131,7 @@ export interface MuteUpdate {
     /** The chat being muted or unmuted. */
     jid: Jid;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.IMuteAction;
+    action: import('./proto-types.js').proto.SyncActionValue.IMuteAction;
     from_full_sync: boolean;
 }
 
@@ -1188,8 +1189,8 @@ export interface OfflineSyncPreview {
 export type PairCodeRejection = number;
 
 export interface PairError {
-    id: Jid;
-    lid: Jid;
+    id: string;
+    lid: string;
     business_name: string;
     platform: string;
     error: string;
@@ -1214,8 +1215,8 @@ export interface PairPasskeyRequest {
 }
 
 export interface PairSuccess {
-    id: Jid;
-    lid: Jid;
+    id: string;
+    lid: string;
     business_name: string;
     platform: string;
 }
@@ -1277,7 +1278,7 @@ export interface PinUpdate {
     /** The chat being pinned or unpinned. */
     jid: Jid;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.IPinAction;
+    action: import('./proto-types.js').proto.SyncActionValue.IPinAction;
     from_full_sync: boolean;
 }
 
@@ -1314,7 +1315,7 @@ export interface QuickReplyUpdate {
     /** The quick reply's identifier (the index key, not a JID). */
     id: string;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.IQuickReplyAction;
+    action: import('./proto-types.js').proto.SyncActionValue.IQuickReplyAction;
     from_full_sync: boolean;
 }
 
@@ -1408,7 +1409,7 @@ export interface StarUpdate {
     message_id: string;
     from_me: boolean;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.IStarAction;
+    action: import('./proto-types.js').proto.SyncActionValue.IStarAction;
     from_full_sync: boolean;
 }
 
@@ -1468,7 +1469,7 @@ export interface UserStatusMuteUpdate {
     /** `true` = status muted, `false` = unmuted. */
     muted: boolean;
     timestamp: string;
-    action: import('./proto-types').proto.SyncActionValue.IUserStatusMuteAction;
+    action: import('./proto-types.js').proto.SyncActionValue.IUserStatusMuteAction;
     from_full_sync: boolean;
 }
 
@@ -1961,6 +1962,11 @@ export function initWasmEngine(logger?: any, crypto?: JsCryptoCallbacks): void;
  * @param wanted_pre_key_count Optional pre-key upload batch size (default 812);
  *   clamped to the protocol-safe range at upload time. Smaller batches reduce
  *   memory pressure on embedded/WASM hosts.
+ * @param danger_skip_cert_chain_verify Optional testing-only bypass for the
+ *   Noise server-cert XEdDSA check, for mock servers that cannot sign a chain
+ *   rooted in WhatsApp's issuer. Absent, null or false keeps strict
+ *   verification; only an explicit `true` opts in. Anything else rejects the
+ *   construction as invalid-argument.
  */
 export function createWhatsAppClient(
 transport_config: JsTransportCallbacks,
@@ -1970,6 +1976,7 @@ store?: JsStoreCallbacks | null,
 cache_config?: CacheConfig | null,
 version?: readonly [number, number, number] | null,
 wanted_pre_key_count?: number | null,
+danger_skip_cert_chain_verify?: boolean | null,
 ): Promise<WasmWhatsAppClient>;
 
 /** Cache entry configuration. */
@@ -3071,6 +3078,12 @@ export interface SignalSignedPreKeyInput {
     signature: Uint8Array;
 }
 
+/**
+ * Terminal protocol cause the reader captured before its expected-disconnect
+ * flag suppressed the transport outcome.
+ */
+export type ProtocolTerminalReasonResult = { kind: "stream-error"; code: number } | { kind: "connect-failure"; reason: string } | { kind: "conflict" } | { kind: "unknown"; detail: string };
+
 /**
  * The bot the server marks as the one to offer by default.
  */
@@ -3121,6 +3134,44 @@ export type UsernameLookupResult = { status: "notFound" } | { status: "keyRequir
  */
 export type Reachability = "reachable" | "reconnecting" | "paused" | "unsupervised" | "finished" | "unknown";
 
+/**
+ * Which core Noise handshake step failed, for a `core` handshake failure.
+ */
+export type NoiseHandshakeFailureResult = { kind: "proto-decode"; message: string } | { kind: "incomplete-response" } | { kind: "crypto"; detail: string } | { kind: "cert-verification"; detail: string } | { kind: "invalid-length"; name: string; expected: number; got: number } | { kind: "invalid-key-length" } | { kind: "noise"; message: string };
+
+/**
+ * Which handshake step failed, for a `handshake` connect error.
+ */
+export type HandshakeFailureResult = { kind: "transport"; message: string } | { kind: "core"; reason: NoiseHandshakeFailureResult } | { kind: "timeout" } | { kind: "stream-closed" } | { kind: "disconnected" } | { kind: "unexpected-event"; detail: string } | { kind: "unknown"; detail: string };
+
+/**
+ * Why a connection attempt failed, as the final attempt reported it.
+ *
+ * `anyhow` causes cross as their rendered message: the detail is diagnostic
+ * text, not a boundary contract.
+ */
+export type ConnectErrorResult = { kind: "already-connected" } | { kind: "not-activated" } | { kind: "shutdown" } | { kind: "paused" } | { kind: "timeout"; stage: string; timeoutMs: number } | { kind: "version"; message: string } | { kind: "transport"; message: string } | { kind: "handshake"; reason: HandshakeFailureResult } | { kind: "unknown"; detail: string };
+
+/**
+ * Why the supervised run loop started by `run()` ended.
+ *
+ * The core's `RunCompletionReason`, carried across unflattened: the
+ * discriminant says which branch ended the run, and only the
+ * `auto-reconnect-disabled` branch carries causes. Every cause is typed at
+ * the boundary (no `Debug` rendering), and every absence is an absent key.
+ * `generation` keys the result to the `run()` call that produced it; a stale
+ * task can never overwrite a newer run's result.
+ *
+ * `unknown` is not one of the core's: the enum is `#[non_exhaustive]`, and a
+ * reason added upstream has no shape here yet.
+ */
+export type RunCompletionResult = { reason: "shutdown-requested"; generation: number } | { reason: "auto-reconnect-disabled"; generation: number; connection?: DisconnectReasonResult; connectError?: ConnectErrorResult; protocolError?: ProtocolTerminalReasonResult } | { reason: "stopped"; generation: number } | { reason: "already-running"; generation: number } | { reason: "unknown"; generation: number; detail: string };
+
+/**
+ * Why the transport connection ended, as the final reader observed it.
+ */
+export type DisconnectReasonResult = { kind: "server-close"; code?: number; reason: string } | { kind: "stream-ended" } | { kind: "read-error"; message: string } | { kind: "unknown" };
+
 export interface AllocationBucketSnapshot {
     allocatedBytes: number;
     allocations: number;
@@ -3511,7 +3562,7 @@ export type WhatsAppEvent =
 | { type: 'qr_scanned_without_multidevice'; data: Record<string, never> }
 | { type: 'client_outdated'; data: Record<string, never> }
 | { type: 'raw_node'; data: { tag: string; attrs: Record<string, string>; content?: unknown } }
-| { type: 'history_sync'; data: import('./proto-types').proto.IHistorySync & { syncType: number; chunkOrder?: number; progress?: number; peerDataRequestSessionId?: string } }
+| { type: 'history_sync'; data: import('./proto-types.js').proto.IHistorySync & { syncType: number; chunkOrder?: number; progress?: number; peerDataRequestSessionId?: string } }
 | { type: 'pairing_code_error'; data: PairingCodeError }
 ;
 
@@ -4534,6 +4585,31 @@ export class WasmWhatsAppClient {
      * connection is fully ready. Rejects with `kind === 'timeout'` on expiry.
      */
     waitForConnected(timeout_ms: number): Promise<void>;
+    /**
+     * Wait for the supervised run loop started by `run()` to end, and report
+     * why it ended.
+     *
+     * Resolves with the core's own completion reason, typed per branch: only
+     * `auto-reconnect-disabled` carries causes, and every absence is an
+     * absent key. The result is stored at termination, so a waiter that
+     * arrives after the run already ended reads the same completion, and any
+     * number of simultaneous waiters each receive it.
+     *
+     * A plain function returning a `Promise`, so the pending wait holds no
+     * borrow on the client: `disconnect()`, `free()` and a second `run()`
+     * all reach the client while it is outstanding.
+     *
+     * Three endings are told apart. A resolved promise is always the
+     * supervision's own completion. The bridge cancelling its waiter is a
+     * rejection on exactly one path: the host freed the client while the
+     * wait was pending, reported as `not-connected`. The host tearing down
+     * after the call returned is not awaited here and is not claimed. A
+     * manual `connect()` drives one connection outside supervision and never
+     * touches this observation.
+     *
+     * Rejects with `invalid-argument` when `run()` was never called.
+     */
+    waitForRunCompletion(): Promise<RunCompletionResult>;
     /**
      * Wait until the socket is connected, or the timeout elapses.
      *
@@ -4668,7 +4744,7 @@ export interface InitOutput {
     readonly beginWasmAllocationProfile: () => void;
     readonly calculateAgreement: (a: number, b: number, c: number, d: number, e: number) => void;
     readonly calculateSignature: (a: number, b: number, c: number, d: number, e: number) => void;
-    readonly createWhatsAppClient: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => number;
+    readonly createWhatsAppClient: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => number;
     readonly decodeSenderKeyRecordComponents: (a: number, b: number, c: number) => void;
     readonly decodeSessionRecordComponents: (a: number, b: number, c: number) => void;
     readonly decryptEventResponsePayload: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => void;
@@ -4866,6 +4942,7 @@ export interface InitOutput {
     readonly wasmwhatsappclient_validateKeyBundle: (a: number) => number;
     readonly wasmwhatsappclient_votePoll: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number) => number;
     readonly wasmwhatsappclient_waitForConnected: (a: number, b: number) => number;
+    readonly wasmwhatsappclient_waitForRunCompletion: (a: number) => number;
     readonly wasmwhatsappclient_waitForSocket: (a: number, b: number) => number;
     readonly wasmwhatsappclient_waitUntilReachable: (a: number) => number;
     readonly wasmwhatsappclient_withdrawParkedCalls: (a: number) => number;
@@ -4883,12 +4960,12 @@ export interface InitOutput {
     readonly intounderlyingsink_write: (a: number, b: number) => number;
     readonly intounderlyingsource_cancel: (a: number) => void;
     readonly intounderlyingsource_pull: (a: number, b: number) => number;
-    readonly __wasm_bindgen_func_elem_4571: (a: number, b: number, c: number) => void;
-    readonly __wasm_bindgen_func_elem_27550: (a: number, b: number, c: number, d: number) => void;
-    readonly __wasm_bindgen_func_elem_27552: (a: number, b: number, c: number, d: number) => void;
-    readonly __wasm_bindgen_func_elem_9675: (a: number, b: number, c: number) => void;
-    readonly __wasm_bindgen_func_elem_4570: (a: number, b: number, c: number) => void;
-    readonly __wasm_bindgen_func_elem_4569: (a: number, b: number) => void;
+    readonly __wasm_bindgen_func_elem_4619: (a: number, b: number, c: number) => void;
+    readonly __wasm_bindgen_func_elem_27691: (a: number, b: number, c: number, d: number) => void;
+    readonly __wasm_bindgen_func_elem_27693: (a: number, b: number, c: number, d: number) => void;
+    readonly __wasm_bindgen_func_elem_9785: (a: number, b: number, c: number) => void;
+    readonly __wasm_bindgen_func_elem_4618: (a: number, b: number, c: number) => void;
+    readonly __wasm_bindgen_func_elem_4617: (a: number, b: number) => void;
     readonly __wbindgen_export: (a: number, b: number) => number;
     readonly __wbindgen_export2: (a: number, b: number, c: number, d: number) => number;
     readonly __wbindgen_export3: (a: number) => void;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@oxidezap/whatsapp-rust-bridge",
-    "version": "0.20.0",
+    "version": "0.21.0",
     "description": "A high-performance utilities for WhatsApp, powered by Rust and WebAssembly.",
     "author": "João Lucas <jlucaso@hotmail.com>",
     "license": "MIT",
@@ -49,19 +49,22 @@
         "build:dev": "bun run gen && bun run build:wasm:dev && bun run build:ts && bun run build:finalize",
         "build:profile": "cargo build --profile profiling --target wasm32-unknown-unknown && wasm-bindgen --target web --out-dir pkg --keep-debug target/wasm32-unknown-unknown/profiling/whatsapp_rust_bridge.wasm && wasm-tools strip pkg/whatsapp_rust_bridge_bg.wasm -o pkg/whatsapp_rust_bridge_bg.wasm && bun run build:ts && bun run build:finalize",
         "build:memory-profile": "cargo build --profile profiling --target wasm32-unknown-unknown --features memory-profiling && wasm-bindgen --target web --out-dir pkg --keep-debug target/wasm32-unknown-unknown/profiling/whatsapp_rust_bridge.wasm && wasm-tools strip pkg/whatsapp_rust_bridge_bg.wasm -o pkg/whatsapp_rust_bridge_bg.wasm && bun run build:ts && bun run build:finalize",
-        "bump:wacore": "cargo update -p whatsapp-rust && bun run build",
+        "bump:wacore": "bun run scripts/bump-wacore.ts",
         "example": "NODE_TLS_REJECT_UNAUTHORIZED=0 bun run examples/connect.ts",
         "test:rust": "wasm-pack test --node",
         "check:size": "bun run scripts/check-size.ts",
         "check:wasm-shape": "node scripts/check-wasm-shape.mjs",
         "check:test-clock": "bun run scripts/check-test-clock.ts",
+        "check:published-tarball": "bun run scripts/check-published-tarball.ts",
         "measure:fn-sizes": "node scripts/wasm-fn-sizes.mjs pkg/whatsapp_rust_bridge_bg.wasm",
         "measure:zone-peak": "node scripts/wasm-zone-peak.mjs pkg/whatsapp_rust_bridge_bg.wasm",
         "prepack": "bun run scripts/check-pack.ts",
         "prepublishOnly": "bun run build"
     },
+    "dependencies": {
+        "@bufbuild/protobuf": "^2.12.0"
+    },
     "devDependencies": {
-        "@bufbuild/protobuf": "^2.12.0",
         "@types/bun": "^1.3.13",
         "@types/node": "^25.6.0",
         "pkg-pr-new": "^0.0.88",