@pontalabs/baileys 1.0.6 → 1.0.7

package/lib/Signal/Group/sender-message-key.js

@@ -1,26 +1,33 @@
-import { deriveSecrets } from 'libsignal/src/crypto.js';
-export class SenderMessageKey {
+"use strict"
+Object.defineProperty(exports, "__esModule", { value: true })
+
+const crypto_1 = require("libsignal/src/crypto")
+
+class SenderMessageKey {
     constructor(iteration, seed) {
-        const derivative = deriveSecrets(seed, Buffer.alloc(32), Buffer.from('WhisperGroup'));
-        const keys = new Uint8Array(32);
-        keys.set(new Uint8Array(derivative[0].slice(16)));
-        keys.set(new Uint8Array(derivative[1].slice(0, 16)), 16);
-        this.iv = Buffer.from(derivative[0].slice(0, 16));
-        this.cipherKey = Buffer.from(keys.buffer);
-        this.iteration = iteration;
-        this.seed = seed;
+        const derivative = (0, crypto_1.deriveSecrets)(seed, Buffer.alloc(32), Buffer.from('WhisperGroup'))
+        const keys = new Uint8Array(32)
+        keys.set(new Uint8Array(derivative[0].slice(16)))
+        keys.set(new Uint8Array(derivative[1].slice(0, 16)), 16)
+        this.iv = Buffer.from(derivative[0].slice(0, 16))
+        this.cipherKey = Buffer.from(keys.buffer)
+        this.iteration = iteration
+        this.seed = seed
     }
     getIteration() {
-        return this.iteration;
+        return this.iteration
     }
     getIv() {
-        return this.iv;
+        return this.iv
     }
     getCipherKey() {
-        return this.cipherKey;
+        return this.cipherKey
     }
     getSeed() {
-        return this.seed;
+        return this.seed
     }
 }
-//# sourceMappingURL=sender-message-key.js.map
+
+module.exports = {
+  SenderMessageKey
+}

package/lib/Signal/libsignal.d.ts

@@ -1,5 +1,8 @@
-import type { LIDMapping, SignalAuthState } from '../Types/index.js';
-import type { SignalRepositoryWithLIDStore } from '../Types/Signal.js';
-import type { ILogger } from '../Utils/logger.js';
-export declare function makeLibSignalRepository(auth: SignalAuthState, logger: ILogger, pnToLIDFunc?: (jids: string[]) => Promise<LIDMapping[] | undefined>): SignalRepositoryWithLIDStore;
-//# sourceMappingURL=libsignal.d.ts.map
+import { SignalAuthState } from '../Types'
+import { SignalRepository } from '../Types/Signal'
+
+export declare function makeLibSignalRepository(auth: SignalAuthState, onWhatsAppFunc?: (...jids: string[]) => Promise<{
+    jid: string
+    exists: boolean
+    lid: string
+}[] | undefined>): SignalRepository

package/lib/Signal/libsignal.js

@@ -1,80 +1,101 @@
-// @ts-ignore
-import * as libsignal from 'libsignal';
-// @ts-ignore
-import { PreKeyWhisperMessage } from 'libsignal/src/protobufs.js';
-import { LRUCache } from 'lru-cache';
-import { generateSignalPubKey } from '../Utils/index.js';
-import { isHostedLidUser, isHostedPnUser, isLidUser, isPnUser, jidDecode, transferDevice, WAJIDDomains } from '../WABinary/index.js';
-import { SenderKeyName } from './Group/sender-key-name.js';
-import { SenderKeyRecord } from './Group/sender-key-record.js';
-import { GroupCipher, GroupSessionBuilder, SenderKeyDistributionMessage } from './Group/index.js';
-import { LIDMappingStore } from './lid-mapping.js';
-/** Extract identity key from PreKeyWhisperMessage for identity change detection */
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeLibSignalRepository = makeLibSignalRepository;
+const libsignal = __importStar(require("libsignal"));
+const { PreKeyWhisperMessage } = require("libsignal/src/protobufs");
+const Utils_1 = require("../Utils");
+const WABinary_1 = require("../WABinary");
+const sender_key_name_1 = require("./Group/sender-key-name");
+const sender_key_record_1 = require("./Group/sender-key-record");
+const Group_1 = require("./Group");
+const LIDMappingStore_1 = require("./lid-mapping") 
+
+// FIX: sebelumnya pontalabs gak punya deteksi perubahan identity key sama
+// sekali. Kalau identity kontak berubah (kontak install ulang WA, atau kena
+// resync multi-device pas ada linked device lain online), sesi lama tetap
+// dipakai terus dan selalu gagal decrypt "Bad MAC" berulang-ulang sampai
+// akhirnya kena threshold retry enableAutoSessionRecreation. Dengan deteksi
+// ini, begitu identity berubah, sesi langsung direset SAAT ITU JUGA - gak
+// perlu nunggu beberapa pesan gagal dulu.
 function extractIdentityFromPkmsg(ciphertext) {
     try {
         if (!ciphertext || ciphertext.length < 2) {
             return undefined;
         }
-        // Version byte check (version 3)
         const version = ciphertext[0];
         if ((version & 0xf) !== 3) {
             return undefined;
         }
-        // Parse protobuf (skip version byte)
         const preKeyProto = PreKeyWhisperMessage.decode(ciphertext.slice(1));
-        if (preKeyProto.identityKey?.length === 33) {
-            return new Uint8Array(preKeyProto.identityKey);
+        if (preKeyProto.identityKey && preKeyProto.identityKey.length === 33) {
+            return Buffer.from(preKeyProto.identityKey);
         }
         return undefined;
-    }
-    catch {
+    } catch {
         return undefined;
     }
 }
-export function makeLibSignalRepository(auth, logger, pnToLIDFunc) {
-    const lidMapping = new LIDMappingStore(auth.keys, logger, pnToLIDFunc);
-    const storage = signalStorage(auth, lidMapping);
-    const parsedKeys = auth.keys;
-    const migratedSessionCache = new LRUCache({
-        ttl: 3 * 24 * 60 * 60 * 1000, // 7 days
-        ttlAutopurge: true,
-        updateAgeOnGet: true
-    });
-    const ensureSenderKeyAndCreateSkdm = async (group, meId) => {
-        const senderName = jidToSignalSenderKeyName(group, meId);
-        const senderNameStr = senderName.toString();
-        const { [senderNameStr]: senderKey } = await auth.keys.get('sender-key', [senderNameStr]);
-        if (!senderKey) {
-            await storage.storeSenderKey(senderName, new SenderKeyRecord());
-        }
-        const skdm = await new GroupSessionBuilder(storage).create(senderName);
-        return { senderName, skdm };
-    };
-    const repository = {
+
+function makeLibSignalRepository(auth, onWhatsAppFunc, logger) {
+	const lidMapping = new LIDMappingStore_1.LIDMappingStore(auth.keys, onWhatsAppFunc, logger)
+    const storage = signalStorage(auth);
+    return {
+        lidMapping,
         decryptGroupMessage({ group, authorJid, msg }) {
             const senderName = jidToSignalSenderKeyName(group, authorJid);
-            const cipher = new GroupCipher(storage, senderName);
-            // Use transaction to ensure atomicity
-            return parsedKeys.transaction(async () => {
+            const cipher = new Group_1.GroupCipher(storage, senderName);
+            // Dibungkus transaction() biar atomic - konsisten sama operasi Signal
+            // lainnya, cegah race condition kalau ada beberapa pesan grup dari
+            // sender yang sama numpuk barengan.
+            return auth.keys.transaction(async () => {
                 return cipher.decrypt(msg);
             }, group);
         },
         async processSenderKeyDistributionMessage({ item, authorJid }) {
-            const builder = new GroupSessionBuilder(storage);
+            const builder = new Group_1.GroupSessionBuilder(storage);
             if (!item.groupId) {
                 throw new Error('Group ID is required for sender key distribution message');
             }
             const senderName = jidToSignalSenderKeyName(item.groupId, authorJid);
-            const senderMsg = new SenderKeyDistributionMessage(null, null, null, null, item.axolotlSenderKeyDistributionMessage);
+            const senderMsg = new Group_1.SenderKeyDistributionMessage(null, null, null, null, item.axolotlSenderKeyDistributionMessage);
             const senderNameStr = senderName.toString();
-            const { [senderNameStr]: senderKey } = await auth.keys.get('sender-key', [senderNameStr]);
-            if (!senderKey) {
-                await storage.storeSenderKey(senderName, new SenderKeyRecord());
-            }
-            return parsedKeys.transaction(async () => {
+            return auth.keys.transaction(async () => {
                 const { [senderNameStr]: senderKey } = await auth.keys.get('sender-key', [senderNameStr]);
                 if (!senderKey) {
-                    await storage.storeSenderKey(senderName, new SenderKeyRecord());
+                    await storage.storeSenderKey(senderName, new sender_key_record_1.SenderKeyRecord());
                 }
                 await builder.process(senderName, senderMsg);
             }, item.groupId);
@@ -82,91 +103,80 @@ export function makeLibSignalRepository(auth, logger, pnToLIDFunc) {
         async decryptMessage({ jid, type, ciphertext }) {
             const addr = jidToSignalProtocolAddress(jid);
             const session = new libsignal.SessionCipher(storage, addr);
-            // Extract and save sender's identity key before decryption for identity change detection
+            // Sebelum decrypt pkmsg (pesan yang buka sesi baru), cek dulu apakah
+            // identity key pengirim berubah dibanding yang tersimpan. Kalau iya,
+            // sesi lama otomatis direset supaya gak nyoba decrypt pakai sesi basi.
             if (type === 'pkmsg') {
                 const identityKey = extractIdentityFromPkmsg(ciphertext);
                 if (identityKey) {
                     const addrStr = addr.toString();
                     const identityChanged = await storage.saveIdentity(addrStr, identityKey);
                     if (identityChanged) {
-                        logger.info({ jid, addr: addrStr }, 'identity key changed or new contact, session will be re-established');
+                        logger?.info?.({ jid, addr: addrStr }, 'identity key changed or new contact, session will be re-established');
                     }
                 }
             }
-            async function doDecrypt() {
-                let result;
-                switch (type) {
-                    case 'pkmsg':
-                        result = await session.decryptPreKeyWhisperMessage(ciphertext);
-                        break;
-                    case 'msg':
-                        result = await session.decryptWhisperMessage(ciphertext);
-                        break;
+            try {
+                return await auth.keys.transaction(async () => {
+                    let result;
+                    switch (type) {
+                        case 'pkmsg':
+                            result = await session.decryptPreKeyWhisperMessage(ciphertext);
+                            break;
+                        case 'msg':
+                            result = await session.decryptWhisperMessage(ciphertext);
+                            break;
+                        default:
+                            throw new Error(`Unknown message type: ${type}`);
+                    }
+                    return result;
+                }, jid);
+            } catch (error) {
+                const errText = String(error?.message || error || '')
+                if (/bad mac|no session|invalid message|duplicate message|cannot decrypt/i.test(errText)) {
+                    await storage.removeSession(addr.toString()).catch(() => null)
+                    logger?.warn?.({ jid, type, errText }, 'reset stale session after decrypt failure')
                 }
-                return result;
+                throw error
             }
-            // If it's not a sync message, we need to ensure atomicity
-            // For regular messages, we use a transaction to ensure atomicity
-            return parsedKeys.transaction(async () => {
-                return await doDecrypt();
-            }, jid);
         },
         async encryptMessage({ jid, data }) {
             const addr = jidToSignalProtocolAddress(jid);
             const cipher = new libsignal.SessionCipher(storage, addr);
-            // Use transaction to ensure atomicity
-            return parsedKeys.transaction(async () => {
+            return auth.keys.transaction(async () => {
                 const { type: sigType, body } = await cipher.encrypt(data);
                 const type = sigType === 3 ? 'pkmsg' : 'msg';
                 return { type, ciphertext: Buffer.from(body, 'binary') };
             }, jid);
         },
         async encryptGroupMessage({ group, meId, data }) {
-            return parsedKeys.transaction(async () => {
-                const { senderName, skdm } = await ensureSenderKeyAndCreateSkdm(group, meId);
-                const ciphertext = await new GroupCipher(storage, senderName).encrypt(data);
-                return { ciphertext, senderKeyDistributionMessage: skdm.serialize() };
-            }, group);
-        },
-        async getSenderKeyDistributionMessage({ group, meId }) {
-            return parsedKeys.transaction(async () => {
-                const { skdm } = await ensureSenderKeyAndCreateSkdm(group, meId);
-                return skdm.serialize();
+            return auth.keys.transaction(async () => {
+                const senderName = jidToSignalSenderKeyName(group, meId);
+                const builder = new Group_1.GroupSessionBuilder(storage);
+                const senderNameStr = senderName.toString();
+                const { [senderNameStr]: senderKey } = await auth.keys.get('sender-key', [senderNameStr]);
+                if (!senderKey) {
+                    await storage.storeSenderKey(senderName, new sender_key_record_1.SenderKeyRecord());
+                }
+                const senderKeyDistributionMessage = await builder.create(senderName);
+                const session = new Group_1.GroupCipher(storage, senderName);
+                const ciphertext = await session.encrypt(data);
+                return {
+                    ciphertext,
+                    senderKeyDistributionMessage: senderKeyDistributionMessage.serialize()
+                };
             }, group);
         },
-        async hasSenderKey({ group, meId }) {
-            const senderName = jidToSignalSenderKeyName(group, meId).toString();
-            const { [senderName]: key } = await auth.keys.get('sender-key', [senderName]);
-            return !!key;
-        },
-        async getSessionInfo(jid) {
-            const addr = jidToSignalProtocolAddress(jid).toString();
-            const session = (await storage.loadSession(addr));
-            if (!session) {
-                return null;
-            }
-            const open = session.getOpenSession?.();
-            const baseKey = open?.indexInfo?.baseKey;
-            const registrationId = open?.registrationId;
-            if (!baseKey || typeof registrationId !== 'number') {
-                return null;
-            }
-            return { baseKey: new Uint8Array(baseKey), registrationId };
-        },
         async injectE2ESession({ jid, session }) {
-            logger.trace({ jid }, 'injecting E2EE session');
             const cipher = new libsignal.SessionBuilder(storage, jidToSignalProtocolAddress(jid));
-            return parsedKeys.transaction(async () => {
-                // libsignal runtime accepts an absent prekey (initOutgoing checks `device.preKey && ...`)
-                // but the bundled .d.ts marks it required.
-                await cipher.initOutgoing(session);
-            }, jid);
+            await cipher.initOutgoing(session);
         },
         jidToSignalProtocolAddress(jid) {
             return jidToSignalProtocolAddress(jid).toString();
         },
-        // Optimized direct access to LID mapping store
-        lidMapping,
+        // Dipakai oleh sendRetryRequest (messages-recv.js) untuk enableAutoSessionRecreation.
+        // Sebelumnya dipanggil tapi tidak pernah diimplementasikan di sini, jadi fitur auto
+        // session recreation diam-diam selalu gagal (ketangkep try/catch, cuma log warning).
         async validateSession(jid) {
             try {
                 const addr = jidToSignalProtocolAddress(jid);
@@ -174,215 +184,60 @@ export function makeLibSignalRepository(auth, logger, pnToLIDFunc) {
                 if (!session) {
                     return { exists: false, reason: 'no session' };
                 }
-                if (!session.haveOpenSession()) {
+                if (typeof session.haveOpenSession === 'function' && !session.haveOpenSession()) {
                     return { exists: false, reason: 'no open session' };
                 }
                 return { exists: true };
-            }
-            catch (error) {
+            } catch (error) {
                 return { exists: false, reason: 'validation error' };
             }
-        },
-        async deleteSession(jids) {
-            if (!jids.length)
-                return;
-            // Convert JIDs to signal addresses and prepare for bulk deletion
-            const sessionUpdates = {};
-            jids.forEach(jid => {
-                const addr = jidToSignalProtocolAddress(jid);
-                sessionUpdates[addr.toString()] = null;
-            });
-            // Single transaction for all deletions
-            return parsedKeys.transaction(async () => {
-                await auth.keys.set({ session: sessionUpdates });
-            }, `delete-${jids.length}-sessions`);
-        },
-        close() {
-            migratedSessionCache.clear();
-            lidMapping.close();
-        },
-        async migrateSession(fromJid, toJid) {
-            // TODO: use usync to handle this entire mess
-            if (!fromJid || (!isLidUser(toJid) && !isHostedLidUser(toJid)))
-                return { migrated: 0, skipped: 0, total: 0 };
-            // Only support PN to LID migration
-            if (!isPnUser(fromJid) && !isHostedPnUser(fromJid)) {
-                return { migrated: 0, skipped: 0, total: 1 };
-            }
-            const { user } = jidDecode(fromJid);
-            logger.debug({ fromJid }, 'bulk device migration - loading all user devices');
-            // Get user's device list from storage
-            const { [user]: userDevices } = await parsedKeys.get('device-list', [user]);
-            if (!userDevices) {
-                return { migrated: 0, skipped: 0, total: 0 };
-            }
-            const { device: fromDevice } = jidDecode(fromJid);
-            const fromDeviceStr = fromDevice?.toString() || '0';
-            if (!userDevices.includes(fromDeviceStr)) {
-                userDevices.push(fromDeviceStr);
-            }
-            // Filter out cached devices before database fetch
-            const uncachedDevices = userDevices.filter(device => {
-                const deviceKey = `${user}.${device}`;
-                return !migratedSessionCache.has(deviceKey);
-            });
-            // Bulk check session existence only for uncached devices
-            const deviceSessionKeys = uncachedDevices.map(device => `${user}.${device}`);
-            const existingSessions = await parsedKeys.get('session', deviceSessionKeys);
-            // Step 3: Convert existing sessions to JIDs (only migrate sessions that exist)
-            const deviceJids = [];
-            for (const [sessionKey, sessionData] of Object.entries(existingSessions)) {
-                if (sessionData) {
-                    // Session exists in storage
-                    const deviceStr = sessionKey.split('.')[1];
-                    if (!deviceStr)
-                        continue;
-                    const deviceNum = parseInt(deviceStr);
-                    let jid = deviceNum === 0 ? `${user}@s.whatsapp.net` : `${user}:${deviceNum}@s.whatsapp.net`;
-                    if (deviceNum === 99) {
-                        jid = `${user}:99@hosted`;
-                    }
-                    deviceJids.push(jid);
-                }
-            }
-            logger.debug({
-                fromJid,
-                totalDevices: userDevices.length,
-                devicesWithSessions: deviceJids.length,
-                devices: deviceJids
-            }, 'bulk device migration complete - all user devices processed');
-            // Single transaction for all migrations
-            return parsedKeys.transaction(async () => {
-                const migrationOps = deviceJids.map(jid => {
-                    const lidWithDevice = transferDevice(jid, toJid);
-                    const fromDecoded = jidDecode(jid);
-                    const toDecoded = jidDecode(lidWithDevice);
-                    return {
-                        fromJid: jid,
-                        toJid: lidWithDevice,
-                        pnUser: fromDecoded.user,
-                        lidUser: toDecoded.user,
-                        deviceId: fromDecoded.device || 0,
-                        fromAddr: jidToSignalProtocolAddress(jid),
-                        toAddr: jidToSignalProtocolAddress(lidWithDevice)
-                    };
-                });
-                const totalOps = migrationOps.length;
-                let migratedCount = 0;
-                // Bulk fetch PN sessions - already exist (verified during device discovery)
-                const pnAddrStrings = Array.from(new Set(migrationOps.map(op => op.fromAddr.toString())));
-                const pnSessions = await parsedKeys.get('session', pnAddrStrings);
-                // Prepare bulk session updates (PN → LID migration + deletion)
-                const sessionUpdates = {};
-                for (const op of migrationOps) {
-                    const pnAddrStr = op.fromAddr.toString();
-                    const lidAddrStr = op.toAddr.toString();
-                    const pnSession = pnSessions[pnAddrStr];
-                    if (pnSession) {
-                        // Session exists (guaranteed from device discovery)
-                        const fromSession = libsignal.SessionRecord.deserialize(pnSession);
-                        if (fromSession.haveOpenSession()) {
-                            // Queue for bulk update: copy to LID, delete from PN
-                            sessionUpdates[lidAddrStr] = fromSession.serialize();
-                            sessionUpdates[pnAddrStr] = null;
-                            migratedCount++;
-                        }
-                    }
-                }
-                // Single bulk session update for all migrations
-                if (Object.keys(sessionUpdates).length > 0) {
-                    await parsedKeys.set({ session: sessionUpdates });
-                    logger.debug({ migratedSessions: migratedCount }, 'bulk session migration complete');
-                    // Cache device-level migrations
-                    for (const op of migrationOps) {
-                        if (sessionUpdates[op.toAddr.toString()]) {
-                            const deviceKey = `${op.pnUser}.${op.deviceId}`;
-                            migratedSessionCache.set(deviceKey, true);
-                        }
-                    }
-                }
-                const skippedCount = totalOps - migratedCount;
-                return { migrated: migratedCount, skipped: skippedCount, total: totalOps };
-            }, `migrate-${deviceJids.length}-sessions-${jidDecode(toJid)?.user}`);
         }
     };
-    return repository;
 }
 const jidToSignalProtocolAddress = (jid) => {
-    const decoded = jidDecode(jid);
-    const { user, device, server, domainType } = decoded;
-    if (!user) {
-        throw new Error(`JID decoded but user is empty: "${jid}" -> user: "${user}", server: "${server}", device: ${device}`);
-    }
-    const signalUser = domainType !== WAJIDDomains.WHATSAPP ? `${user}_${domainType}` : user;
-    const finalDevice = device || 0;
-    if (device === 99 && decoded.server !== 'hosted' && decoded.server !== 'hosted.lid') {
-        throw new Error('Unexpected non-hosted device JID with device 99. This ID seems invalid. ID:' + jid);
-    }
-    return new libsignal.ProtocolAddress(signalUser, finalDevice);
+    const { user, device } = (0, WABinary_1.jidDecode)(jid);
+    return new libsignal.ProtocolAddress(user, device || 0);
 };
 const jidToSignalSenderKeyName = (group, user) => {
-    return new SenderKeyName(group, jidToSignalProtocolAddress(user));
+    return new sender_key_name_1.SenderKeyName(group, jidToSignalProtocolAddress(user));
 };
-function signalStorage({ creds, keys }, lidMapping) {
-    // Shared function to resolve PN signal address to LID if mapping exists
-    const resolveLIDSignalAddress = async (id) => {
-        if (id.includes('.')) {
-            const [deviceId, device] = id.split('.');
-            const [user, domainType_] = deviceId.split('_');
-            const domainType = parseInt(domainType_ || '0');
-            if (domainType === WAJIDDomains.LID || domainType === WAJIDDomains.HOSTED_LID)
-                return id;
-            const pnJid = `${user}${device !== '0' ? `:${device}` : ''}@${domainType === WAJIDDomains.HOSTED ? 'hosted' : 's.whatsapp.net'}`;
-            const lidForPN = await lidMapping.getLIDForPN(pnJid);
-            if (lidForPN) {
-                const lidAddr = jidToSignalProtocolAddress(lidForPN);
-                return lidAddr.toString();
-            }
-        }
-        return id;
-    };
+function signalStorage({ creds, keys }) {
     return {
         loadSession: async (id) => {
-            try {
-                const wireJid = await resolveLIDSignalAddress(id);
-                const { [wireJid]: sess } = await keys.get('session', [wireJid]);
-                if (sess) {
-                    return libsignal.SessionRecord.deserialize(sess);
-                }
-            }
-            catch (e) {
-                return null;
+            const { [id]: sess } = await keys.get('session', [id]);
+            if (sess) {
+                return libsignal.SessionRecord.deserialize(sess);
             }
-            return null;
         },
         storeSession: async (id, session) => {
-            const wireJid = await resolveLIDSignalAddress(id);
-            await keys.set({ session: { [wireJid]: session.serialize() } });
+            await keys.set({ session: { [id]: session.serialize() } });
+        },
+        removeSession: async (id) => {
+            await keys.set({ session: { [id]: null } });
         },
         isTrustedIdentity: () => {
-            return true; // TOFU - Trust on First Use (same as WhatsApp Web)
+            return true;
         },
         loadIdentityKey: async (id) => {
-            const wireJid = await resolveLIDSignalAddress(id);
-            const { [wireJid]: key } = await keys.get('identity-key', [wireJid]);
+            const { [id]: key } = await keys.get('identity-key', [id]);
             return key || undefined;
         },
         saveIdentity: async (id, identityKey) => {
-            const wireJid = await resolveLIDSignalAddress(id);
-            const { [wireJid]: existingKey } = await keys.get('identity-key', [wireJid]);
-            const keysMatch = existingKey?.length === identityKey.length && existingKey.every((byte, i) => byte === identityKey[i]);
+            const { [id]: existingKey } = await keys.get('identity-key', [id]);
+            const keysMatch = existingKey && existingKey.length === identityKey.length &&
+                Buffer.compare(Buffer.from(existingKey), Buffer.from(identityKey)) === 0;
             if (existingKey && !keysMatch) {
-                // Identity changed - clear session and update key
+                // Identity berubah - hapus sesi lama (bakal ke-generate ulang dari
+                // pkmsg yang lagi diproses) dan simpan identity key yang baru.
                 await keys.set({
-                    session: { [wireJid]: null },
-                    'identity-key': { [wireJid]: identityKey }
+                    session: { [id]: null },
+                    'identity-key': { [id]: identityKey }
                 });
                 return true;
             }
             if (!existingKey) {
-                // New contact - Trust on First Use (TOFU)
-                await keys.set({ 'identity-key': { [wireJid]: identityKey } });
+                // Kontak baru - Trust On First Use (TOFU), sama kayak WhatsApp Web.
+                await keys.set({ 'identity-key': { [id]: identityKey } });
                 return true;
             }
             return false;
@@ -409,9 +264,9 @@ function signalStorage({ creds, keys }, lidMapping) {
             const keyId = senderKeyName.toString();
             const { [keyId]: key } = await keys.get('sender-key', [keyId]);
             if (key) {
-                return SenderKeyRecord.deserialize(key);
+                return sender_key_record_1.SenderKeyRecord.deserialize(key);
             }
-            return new SenderKeyRecord();
+            return new sender_key_record_1.SenderKeyRecord();
         },
         storeSenderKey: async (senderKeyName, key) => {
             const keyId = senderKeyName.toString();
@@ -423,9 +278,8 @@ function signalStorage({ creds, keys }, lidMapping) {
             const { signedIdentityKey } = creds;
             return {
                 privKey: Buffer.from(signedIdentityKey.private),
-                pubKey: Buffer.from(generateSignalPubKey(signedIdentityKey.public))
+                pubKey: (0, Utils_1.generateSignalPubKey)(signedIdentityKey.public)
             };
         }
     };
 }
-//# sourceMappingURL=libsignal.js.map