@pontalabs/baileys 1.0.4 → 1.0.5

package/lib/Signal/libsignal.js

@@ -116,20 +116,29 @@ function makeLibSignalRepository(auth, onWhatsAppFunc, logger) {
                     }
                 }
             }
-            return auth.keys.transaction(async () => {
-                let result;
-                switch (type) {
-                    case 'pkmsg':
-                        result = await session.decryptPreKeyWhisperMessage(ciphertext);
-                        break;
-                    case 'msg':
-                        result = await session.decryptWhisperMessage(ciphertext);
-                        break;
-                    default:
-                        throw new Error(`Unknown message type: ${type}`);
+            try {
+                return await auth.keys.transaction(async () => {
+                    let result;
+                    switch (type) {
+                        case 'pkmsg':
+                            result = await session.decryptPreKeyWhisperMessage(ciphertext);
+                            break;
+                        case 'msg':
+                            result = await session.decryptWhisperMessage(ciphertext);
+                            break;
+                        default:
+                            throw new Error(`Unknown message type: ${type}`);
+                    }
+                    return result;
+                }, jid);
+            } catch (error) {
+                const errText = String(error?.message || error || '')
+                if (/bad mac|no session|invalid message|duplicate message|cannot decrypt/i.test(errText)) {
+                    await storage.removeSession(addr.toString()).catch(() => null)
+                    logger?.warn?.({ jid, type, errText }, 'reset stale session after decrypt failure')
                 }
-                return result;
-            }, jid);
+                throw error
+            }
         },
         async encryptMessage({ jid, data }) {
             const addr = jidToSignalProtocolAddress(jid);
@@ -203,6 +212,9 @@ function signalStorage({ creds, keys }) {
         storeSession: async (id, session) => {
             await keys.set({ session: { [id]: session.serialize() } });
         },
+        removeSession: async (id) => {
+            await keys.set({ session: { [id]: null } });
+        },
         isTrustedIdentity: () => {
             return true;
         },

package/lib/Utils/auth-utils.js

@@ -14,6 +14,16 @@ const crypto_2 = require("./crypto")
 const generics_1 = require("./generics")
 const mutex_1 = require("async-mutex") 
 
+
+// Cache bypass for signal-sensitive keys so runtime state doesn't keep stale
+// session/pre-key material alive after decrypt failures or identity rotation.
+const NO_CACHE_TYPES = new Set([
+    'pre-key',
+    'session',
+    'signed-pre-key',
+    'identity-key'
+])
+
 /**
  * Adds caching capability to a SignalKeyStore
  * @param store the store to add caching to
@@ -35,6 +45,11 @@ function makeCacheableSignalKeyStore(store, logger, _cache) {
     }
     return {
         async get(type, ids) {
+            if (NO_CACHE_TYPES.has(type)) {
+                logger?.trace({ type, items: ids.length }, 'bypassing cache for sensitive key type')
+                return await store.get(type, ids)
+            }
+
             return cacheMutex.runExclusive(async () => {
                 const data = {}
                 const idsToFetch = []
@@ -65,6 +80,9 @@ function makeCacheableSignalKeyStore(store, logger, _cache) {
             return cacheMutex.runExclusive(async () => {
                 let keys = 0
                 for (const type in data) {
+                    if (NO_CACHE_TYPES.has(type)) {
+                        continue
+                    }
                     for (const id in data[type]) {
                         await cache.set(getUniqueId(type, id), data[type][id])
                         keys += 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pontalabs/baileys",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "PontaLabs Baileys is a lightweight, modern, and customizable WhatsApp Web API library built on Baileys.",
   "keywords": [
     "facebook",