@vanzxysenpai/baileys 0.0.0-stage → 0.0.2

package/lib/Utils/process-message.js

@@ -0,0 +1,868 @@
+import { Boom } from '@hapi/boom';
+import $protobuf from 'protobufjs/minimal.js';
+const { Reader } = $protobuf;
+import { proto } from '../../WAProto/index.js';
+import { WAMessageStubType } from '../Types/index.js';
+import { getContentType, normalizeMessageContent } from '../Utils/messages.js';
+import { areJidsSameUser, isHostedLidUser, isHostedPnUser, isJidBroadcast, isJidStatusBroadcast, isLidUser, jidDecode, jidEncode, jidNormalizedUser } from '../WABinary/index.js';
+import { aesDecryptGCM, hmacSign } from './crypto.js';
+import { getKeyAuthor, toNumber } from './generics.js';
+import { downloadAndProcessHistorySyncNotification } from './history.js';
+import { buildMergedTcTokenIndexWrite, resolveTcTokenJid } from './tc-token-utils.js';
+const REAL_MSG_STUB_TYPES = new Set([
+    WAMessageStubType.CALL_MISSED_GROUP_VIDEO,
+    WAMessageStubType.CALL_MISSED_GROUP_VOICE,
+    WAMessageStubType.CALL_MISSED_VIDEO,
+    WAMessageStubType.CALL_MISSED_VOICE
+]);
+const REAL_MSG_REQ_ME_STUB_TYPES = new Set([WAMessageStubType.GROUP_PARTICIPANT_ADD]);
+function decodeLidMigrationMappingSyncPayload(buf) {
+    const r = Reader.create(buf);
+    const out = { pnToLidMappings: [], chatDbMigrationTimestamp: undefined };
+    while (r.pos < r.len) {
+        const tag = r.uint32();
+        switch (tag >>> 3) {
+            case 1: {
+                const len = r.uint32();
+                const end = r.pos + len;
+                const entry = { pn: undefined, assignedLid: undefined, latestLid: undefined };
+                while (r.pos < end) {
+                    const t2 = r.uint32();
+                    switch (t2 >>> 3) {
+                        case 1:
+                            entry.pn = r.uint64();
+                            break;
+                        case 2:
+                            entry.assignedLid = r.uint64();
+                            break;
+                        case 3:
+                            entry.latestLid = r.uint64();
+                            break;
+                        default:
+                            r.skipType(t2 & 7);
+                    }
+                }
+                out.pnToLidMappings.push(entry);
+                break;
+            }
+            case 2:
+                out.chatDbMigrationTimestamp = r.uint64();
+                break;
+            default:
+                r.skipType(tag & 7);
+        }
+    }
+    return out;
+}
+async function storeTcTokensFromHistorySync(chats, signalRepository, keyStore, logger) {
+    const getLIDForPN = signalRepository.lidMapping.getLIDForPN.bind(signalRepository.lidMapping);
+    const candidates = [];
+    for (const chat of chats) {
+        const ts = chat.tcTokenTimestamp ? toNumber(chat.tcTokenTimestamp) : 0;
+        if (chat.tcToken?.length && ts > 0) {
+            const jid = jidNormalizedUser(chat.id);
+            const storageJid = await resolveTcTokenJid(jid, getLIDForPN);
+            candidates.push({
+                storageJid,
+                token: Buffer.from(chat.tcToken),
+                ts,
+                senderTs: chat.tcTokenSenderTimestamp ? toNumber(chat.tcTokenSenderTimestamp) : undefined
+            });
+        }
+    }
+    if (!candidates.length) {
+        return;
+    }
+    const jids = candidates.map(c => c.storageJid);
+    const existing = await keyStore.get('tctoken', jids);
+    const entries = {};
+    for (const c of candidates) {
+        const existingEntry = existing[c.storageJid];
+        const existingTs = existingEntry?.timestamp ? Number(existingEntry.timestamp) : 0;
+        if (existingTs > 0 && existingTs >= c.ts) {
+            continue;
+        }
+        entries[c.storageJid] = {
+            ...existingEntry,
+            token: c.token,
+            timestamp: String(c.ts),
+            ...(c.senderTs !== undefined ? { senderTimestamp: c.senderTs } : {})
+        };
+    }
+    if (Object.keys(entries).length) {
+        logger?.debug({ count: Object.keys(entries).length }, 'storing tctokens from history sync');
+        try {
+            // Include updated __index so cross-session pruning picks these JIDs up.
+            const indexWrite = await buildMergedTcTokenIndexWrite(keyStore, Object.keys(entries));
+            await keyStore.set({ tctoken: { ...entries, ...indexWrite } });
+        }
+        catch (err) {
+            logger?.warn({ err }, 'failed to store tctokens from history sync');
+        }
+    }
+}
+/** Cleans a received message to further processing */
+export const cleanMessage = (message, meId, meLid) => {
+    // ensure remoteJid and participant doesn't have device or agent in it
+    if (isHostedPnUser(message.key.remoteJid) || isHostedLidUser(message.key.remoteJid)) {
+        message.key.remoteJid = jidEncode(jidDecode(message.key?.remoteJid)?.user, isHostedPnUser(message.key.remoteJid) ? 's.whatsapp.net' : 'lid');
+    }
+    else {
+        message.key.remoteJid = jidNormalizedUser(message.key.remoteJid);
+    }
+    if (isHostedPnUser(message.key.participant) || isHostedLidUser(message.key.participant)) {
+        message.key.participant = jidEncode(jidDecode(message.key.participant)?.user, isHostedPnUser(message.key.participant) ? 's.whatsapp.net' : 'lid');
+    }
+    else {
+        message.key.participant = jidNormalizedUser(message.key.participant);
+    }
+    const content = normalizeMessageContent(message.message);
+    // if the message has a reaction, ensure fromMe & remoteJid are from our perspective
+    if (content?.reactionMessage) {
+        normaliseKey(content.reactionMessage.key);
+    }
+    if (content?.pollUpdateMessage) {
+        normaliseKey(content.pollUpdateMessage.pollCreationMessageKey);
+    }
+    function normaliseKey(msgKey) {
+        // if the reaction is from another user
+        // we've to correctly map the key to this user's perspective
+        if (!message.key.fromMe) {
+            // if the sender believed the message being reacted to is not from them
+            // we've to correct the key to be from them, or some other participant
+            msgKey.fromMe = !msgKey.fromMe
+                ? areJidsSameUser(msgKey.participant || msgKey.remoteJid, meId) ||
+                    areJidsSameUser(msgKey.participant || msgKey.remoteJid, meLid)
+                : // if the message being reacted to, was from them
+                    // fromMe automatically becomes false
+                    false;
+            // set the remoteJid to being the same as the chat the message came from
+            // TODO: investigate inconsistencies
+            msgKey.remoteJid = message.key.remoteJid;
+            // set participant of the message
+            msgKey.participant = msgKey.participant || message.key.participant;
+        }
+    }
+};
+// TODO: target:audit AUDIT THIS FUNCTION AGAIN
+export const isRealMessage = (message) => {
+    const normalizedContent = normalizeMessageContent(message.message);
+    const hasSomeContent = !!getContentType(normalizedContent);
+    return ((!!normalizedContent ||
+        REAL_MSG_STUB_TYPES.has(message.messageStubType) ||
+        REAL_MSG_REQ_ME_STUB_TYPES.has(message.messageStubType)) &&
+        hasSomeContent &&
+        !normalizedContent?.protocolMessage &&
+        !normalizedContent?.reactionMessage &&
+        !normalizedContent?.pollUpdateMessage);
+};
+export const shouldIncrementChatUnread = (message) => !message.key.fromMe && !message.messageStubType;
+/**
+ * Get the ID of the chat from the given key.
+ * Typically -- that'll be the remoteJid, but for broadcasts, it'll be the participant
+ */
+export const getChatId = ({ remoteJid, participant, fromMe }) => {
+    if (!remoteJid) {
+        throw new Boom('Cannot derive chat id: message key is missing remoteJid', {
+            data: { remoteJid, participant, fromMe }
+        });
+    }
+    if (isJidBroadcast(remoteJid) && !isJidStatusBroadcast(remoteJid) && !fromMe) {
+        if (!participant) {
+            throw new Boom('Cannot derive chat id: broadcast message key is missing participant', {
+                data: { remoteJid, fromMe }
+            });
+        }
+        return participant;
+    }
+    return remoteJid;
+};
+/**
+ * Decrypt a poll vote
+ * @param vote encrypted vote
+ * @param ctx additional info about the poll required for decryption
+ * @returns list of SHA256 options
+ */
+export function decryptPollVote({ encPayload, encIv }, { pollCreatorJid, pollMsgId, pollEncKey, voterJid }) {
+    const sign = Buffer.concat([
+        toBinary(pollMsgId),
+        toBinary(pollCreatorJid),
+        toBinary(voterJid),
+        toBinary('Poll Vote'),
+        new Uint8Array([1])
+    ]);
+    const key0 = hmacSign(pollEncKey, new Uint8Array(32), 'sha256');
+    const decKey = hmacSign(sign, key0, 'sha256');
+    const aad = toBinary(`${pollMsgId}\u0000${voterJid}`);
+    const decrypted = aesDecryptGCM(encPayload, decKey, encIv, aad);
+    return proto.Message.PollVoteMessage.decode(decrypted);
+    function toBinary(txt) {
+        return Buffer.from(txt);
+    }
+}
+/**
+ * Decrypt an event response
+ * @param response encrypted event response
+ * @param ctx additional info about the event required for decryption
+ * @returns event response message
+ */
+export function decryptEventResponse({ encPayload, encIv }, { eventCreatorJid, eventMsgId, eventEncKey, responderJid }) {
+    const sign = Buffer.concat([
+        toBinary(eventMsgId),
+        toBinary(eventCreatorJid),
+        toBinary(responderJid),
+        toBinary('Event Response'),
+        new Uint8Array([1])
+    ]);
+    const key0 = hmacSign(eventEncKey, new Uint8Array(32), 'sha256');
+    const decKey = hmacSign(sign, key0, 'sha256');
+    const aad = toBinary(`${eventMsgId}\u0000${responderJid}`);
+    const decrypted = aesDecryptGCM(encPayload, decKey, encIv, aad);
+    return proto.Message.EventResponseMessage.decode(decrypted);
+    function toBinary(txt) {
+        return Buffer.from(txt);
+    }
+}
+/**
+ * JID that authored the *target* message, as used in the HMAC input of encrypted modifications
+ * (must be a PN). Honours `key.fromMe`: for our own message in a group the old event-response code used
+ * `participant || remoteJid` = the GROUP jid, and for our own message in a DM the OTHER user's jid -- both wrong.
+ */
+const resolveTargetAuthorPn = async (key, meIdNormalised, signalRepository) => {
+    const raw = key.fromMe ? meIdNormalised : (key.participant || key.remoteJid);
+    const pn = isLidUser(raw) ? await signalRepository.lidMapping.getPNForLID(raw) : raw;
+    if (!pn) throw new Boom('cannot resolve target author to a PN', { statusCode: 400, data: { key } });
+    return jidNormalizedUser(pn);
+};
+/**
+ * decrypt an `encReactionMessage` (encrypted reaction).
+ *
+ * Same key-derivation family as Poll Vote / Event Response, use-case string "Enc Reaction" (the constant whatsmeow
+ * uses for EncSecretReaction). EXPERIMENTAL: derived from that sibling scheme, not yet validated against a captured
+ * encrypted reaction from a live account -- a wrong constant just makes this throw (processMessage catches it and
+ * emits `messages.reaction-encrypted` instead).
+ *   info = targetMsgId || targetSenderJid || reactorJid || "Enc Reaction" || 0x01 ; key = HMAC chain over messageSecret
+ *   aad  = targetMsgId \0 reactorJid
+ * @returns {proto.Message.ReactionMessage}
+ */
+export function decryptEncReaction({ encPayload, encIv }, { targetSenderJid, targetMsgId, targetEncKey, reactorJid }) {
+    const sign = Buffer.concat([
+        toBinary(targetMsgId),
+        toBinary(targetSenderJid),
+        toBinary(reactorJid),
+        toBinary('Enc Reaction'),
+        new Uint8Array([1])
+    ]);
+    const key0 = hmacSign(targetEncKey, new Uint8Array(32), 'sha256');
+    const decKey = hmacSign(sign, key0, 'sha256');
+    const aad = toBinary(`${targetMsgId}\u0000${reactorJid}`);
+    const decrypted = aesDecryptGCM(encPayload, decKey, encIv, aad);
+    return proto.Message.ReactionMessage.decode(decrypted);
+    function toBinary(txt) {
+        return Buffer.from(txt);
+    }
+}
+/**
+ * Decrypt a `secretEncryptedMessage` carrying a `MESSAGE_EDIT` payload.
+ *
+ * WhatsApp started wrapping message edits in an E2EE envelope (May 2026).
+ * The new content is encrypted with a key derived from the original
+ * message's `messageContextInfo.messageSecret` using HKDF-SHA256
+ * + AES-256-GCM, same family as polls and event responses but with
+ * different constants (validated against live WhatsApp Android traffic):
+ *
+ *   info = msgId || origSenderJid || editorJid || "Message Edit"
+ *   aad  = (empty)              <-- differs from Poll Vote / Event Response
+ *   key  = HKDF-SHA256(salt=zeros, ikm=messageSecret, info, L=32)
+ *
+ * The decrypted plaintext is a regular `proto.Message` whose
+ * `protocolMessage.editedMessage` field holds the new content — same
+ * shape as the legacy `protocolMessage.editedMessage` edit path, so
+ * consumers can treat the result identically.
+ *
+ * @param edit encrypted edit payload (encPayload + encIv from SecretEncryptedMessage)
+ * @param ctx info about the original message required for decryption
+ * @returns decoded outer `Message` whose `protocolMessage.editedMessage`
+ *   carries the new content (extendedTextMessage / conversation / etc.)
+ */
+export function decryptMessageEdit({ encPayload, encIv }, { originalSenderJid, originalMsgId, editEncKey, editorJid }) {
+    const sign = Buffer.concat([
+        toBinary(originalMsgId),
+        toBinary(originalSenderJid),
+        toBinary(editorJid),
+        toBinary('Message Edit'),
+        new Uint8Array([1])
+    ]);
+    const key0 = hmacSign(editEncKey, new Uint8Array(32), 'sha256');
+    const decKey = hmacSign(sign, key0, 'sha256');
+    // AAD is intentionally empty for MESSAGE_EDIT — unlike Poll Vote and
+    // Event Response, WA does not include `${msgId}\0${editor}` in the AAD here.
+    const aad = Buffer.alloc(0);
+    const decrypted = aesDecryptGCM(encPayload, decKey, encIv, aad);
+    return proto.Message.decode(decrypted);
+    function toBinary(txt) {
+        return Buffer.from(txt);
+    }
+}
+const buildEditUpdate = (args) => {
+    const editedInner = decryptMessageEdit({ encPayload: args.encPayload, encIv: args.encIv }, {
+        editEncKey: args.editEncKey,
+        originalSenderJid: args.originalSenderJid,
+        originalMsgId: args.originalMsgId,
+        editorJid: args.editorJid
+    });
+    const editProtocol = editedInner.protocolMessage;
+    const innerEdited = editProtocol?.editedMessage;
+    if (!innerEdited) {
+        args.logger?.warn({ targetKey: args.targetKey }, 'decrypted MESSAGE_EDIT plaintext had no protocolMessage.editedMessage — skipping update');
+        return null;
+    }
+    return {
+        key: { ...args.messageKey, id: args.targetKeyId },
+        update: {
+            message: {
+                editedMessage: {
+                    message: innerEdited
+                }
+            },
+            messageTimestamp: editProtocol?.timestampMs
+                ? Math.floor(toNumber(editProtocol.timestampMs) / 1000)
+                : args.fallbackTimestamp
+        }
+    };
+};
+const processMessage = async (message, { shouldProcessHistoryMsg, placeholderResendCache, ev, creds, signalRepository, keyStore, logger, options, getMessage }) => {
+    const meId = creds.me.id;
+    const { accountSettings } = creds;
+    const chat = { id: jidNormalizedUser(getChatId(message.key)) };
+    const isRealMsg = isRealMessage(message);
+    if (isRealMsg) {
+        chat.messages = [{ message }];
+        chat.conversationTimestamp = toNumber(message.messageTimestamp);
+        // only increment unread count if not CIPHERTEXT and from another person
+        if (shouldIncrementChatUnread(message)) {
+            chat.unreadCount = (chat.unreadCount || 0) + 1;
+        }
+    }
+    const content = normalizeMessageContent(message.message);
+    // unarchive chat if it's a real message, or someone reacted to our message
+    // and we've the unarchive chats setting on
+    if ((isRealMsg || content?.reactionMessage?.key?.fromMe) && accountSettings?.unarchiveChats) {
+        chat.archived = false;
+        chat.readOnly = false;
+    }
+    const protocolMsg = content?.protocolMessage;
+    if (protocolMsg) {
+        // Mirror whatsmeow's `handleProtocolMessage` guard, but applied only to
+        // the protocol message types that originate from our own device — an
+        // attacker could otherwise spoof any of these to manipulate local state.
+        //
+        // Self-only types (drop if `!fromMe`):
+        //   - HISTORY_SYNC_NOTIFICATION                 (our phone driving history sync)
+        //   - APP_STATE_SYNC_KEY_SHARE                  (key share between our devices)
+        //   - LID_MIGRATION_MAPPING_SYNC                (server-initiated via our phone)
+        //   - PEER_DATA_OPERATION_REQUEST_RESPONSE_MESSAGE (response from our phone to our PDO request)
+        //
+        // Cross-user types (must NOT be dropped — legitimately arrive from others):
+        //   - REVOKE
+        //   - MESSAGE_EDIT
+        //   - EPHEMERAL_SETTING
+        //   - GROUP_MEMBER_LABEL_CHANGE
+        //
+        // See https://github.com/tulir/whatsmeow/blob/8d3700152a/message.go#L842-L845
+        // for the reference architecture — whatsmeow's `handleProtocolMessage`
+        // only contains self-only types because edits are unwrapped from
+        // `EditedMessage` BEFORE this dispatch and revokes aren't routed here.
+        const SELF_ONLY_TYPES = new Set([
+            proto.Message.ProtocolMessage.Type.HISTORY_SYNC_NOTIFICATION,
+            proto.Message.ProtocolMessage.Type.APP_STATE_SYNC_KEY_SHARE,
+            proto.Message.ProtocolMessage.Type.LID_MIGRATION_MAPPING_SYNC,
+            proto.Message.ProtocolMessage.Type.PEER_DATA_OPERATION_REQUEST_RESPONSE_MESSAGE
+        ]);
+        if (protocolMsg.type !== null &&
+            protocolMsg.type !== undefined &&
+            SELF_ONLY_TYPES.has(protocolMsg.type) &&
+            !message.key.fromMe) {
+            logger?.warn({ msgId: message.key.id, type: protocolMsg.type, from: message.key.participant || message.key.remoteJid }, 'dropping spoofed self-only protocolMessage from non-self origin');
+            return;
+        }
+        switch (protocolMsg.type) {
+            case proto.Message.ProtocolMessage.Type.HISTORY_SYNC_NOTIFICATION:
+                const histNotification = protocolMsg.historySyncNotification;
+                const process = shouldProcessHistoryMsg;
+                const isLatest = !creds.processedHistoryMessages?.length;
+                logger?.info({
+                    histNotification,
+                    process,
+                    id: message.key.id,
+                    isLatest
+                }, 'got history notification');
+                if (process) {
+                    // TODO: investigate
+                    if (histNotification.syncType !== proto.HistorySync.HistorySyncType.ON_DEMAND) {
+                        ev.emit('creds.update', {
+                            processedHistoryMessages: [
+                                ...(creds.processedHistoryMessages || []),
+                                { key: message.key, messageTimestamp: message.messageTimestamp }
+                            ]
+                        });
+                    }
+                    const data = await downloadAndProcessHistorySyncNotification(histNotification, options, logger);
+                    if (data.lidPnMappings?.length) {
+                        logger?.debug({ count: data.lidPnMappings.length }, 'processing LID-PN mappings from history sync');
+                        await signalRepository.lidMapping
+                            .storeLIDPNMappings(data.lidPnMappings)
+                            .catch(err => logger?.warn({ err }, 'failed to store LID-PN mappings from history sync'));
+                    }
+                    await storeTcTokensFromHistorySync(data.chats, signalRepository, keyStore, logger);
+                    ev.emit('messaging-history.set', {
+                        ...data,
+                        isLatest: histNotification.syncType !== proto.HistorySync.HistorySyncType.ON_DEMAND ? isLatest : undefined,
+                        chunkOrder: histNotification.chunkOrder,
+                        peerDataRequestSessionId: histNotification.peerDataRequestSessionId
+                    });
+                }
+                break;
+            case proto.Message.ProtocolMessage.Type.APP_STATE_SYNC_KEY_SHARE:
+                const keys = protocolMsg.appStateSyncKeyShare.keys;
+                if (keys?.length) {
+                    let newAppStateSyncKeyId = '';
+                    await keyStore.transaction(async () => {
+                        const newKeys = [];
+                        for (const { keyData, keyId } of keys) {
+                            const strKeyId = Buffer.from(keyId.keyId).toString('base64');
+                            newKeys.push(strKeyId);
+                            await keyStore.set({ 'app-state-sync-key': { [strKeyId]: keyData } });
+                            newAppStateSyncKeyId = strKeyId;
+                        }
+                        logger?.info({ newAppStateSyncKeyId, newKeys }, 'injecting new app state sync keys');
+                    }, meId);
+                    ev.emit('creds.update', { myAppStateKeyId: newAppStateSyncKeyId });
+                }
+                else {
+                    logger?.info({ protocolMsg }, 'recv app state sync with 0 keys');
+                }
+                break;
+            case proto.Message.ProtocolMessage.Type.REVOKE:
+                ev.emit('messages.update', [
+                    {
+                        key: {
+                            ...message.key,
+                            id: protocolMsg.key.id
+                        },
+                        update: { message: null, messageStubType: WAMessageStubType.REVOKE, key: message.key }
+                    }
+                ]);
+                break;
+            case proto.Message.ProtocolMessage.Type.EPHEMERAL_SETTING:
+                Object.assign(chat, {
+                    ephemeralSettingTimestamp: toNumber(message.messageTimestamp),
+                    ephemeralExpiration: protocolMsg.ephemeralExpiration || null
+                });
+                break;
+            case proto.Message.ProtocolMessage.Type.PEER_DATA_OPERATION_REQUEST_RESPONSE_MESSAGE:
+                const response = protocolMsg.peerDataOperationRequestResponseMessage;
+                if (response) {
+                    // TODO: IMPLEMENT HISTORY SYNC ETC (sticker uploads etc.).
+                    const peerDataOperationResult = response.peerDataOperationResult || [];
+                    for (const result of peerDataOperationResult) {
+                        const retryResponse = result?.placeholderMessageResendResponse;
+                        //eslint-disable-next-line max-depth
+                        if (!retryResponse?.webMessageInfoBytes) {
+                            continue;
+                        }
+                        //eslint-disable-next-line max-depth
+                        try {
+                            const webMessageInfo = proto.WebMessageInfo.decode(retryResponse.webMessageInfoBytes);
+                            const msgId = webMessageInfo.key?.id;
+                            // Retrieve cached original message data (preserves LID details,
+                            // timestamps, etc. that the phone may omit in its PDO response)
+                            const cachedData = msgId ? await placeholderResendCache?.get(msgId) : undefined;
+                            //eslint-disable-next-line max-depth
+                            if (msgId) {
+                                await placeholderResendCache?.del(msgId);
+                            }
+                            let finalMsg;
+                            //eslint-disable-next-line max-depth
+                            if (cachedData && typeof cachedData === 'object') {
+                                // Apply decoded message content onto cached metadata (preserves LID etc.)
+                                cachedData.message = webMessageInfo.message;
+                                //eslint-disable-next-line max-depth
+                                if (webMessageInfo.messageTimestamp) {
+                                    cachedData.messageTimestamp = webMessageInfo.messageTimestamp;
+                                }
+                                finalMsg = cachedData;
+                            }
+                            else {
+                                finalMsg = webMessageInfo;
+                            }
+                            logger?.debug({ msgId, requestId: response.stanzaId }, 'received placeholder resend');
+                            ev.emit('messages.upsert', {
+                                messages: [finalMsg],
+                                type: 'notify',
+                                requestId: response.stanzaId
+                            });
+                        }
+                        catch (err) {
+                            logger?.warn({ err, stanzaId: response.stanzaId }, 'failed to decode placeholder resend response');
+                        }
+                    }
+                }
+                break;
+            case proto.Message.ProtocolMessage.Type.MESSAGE_EDIT:
+                ev.emit('messages.update', [
+                    {
+                        // flip the sender / fromMe properties because they're in the perspective of the sender
+                        key: { ...message.key, id: protocolMsg.key?.id },
+                        update: {
+                            message: {
+                                editedMessage: {
+                                    message: protocolMsg.editedMessage
+                                }
+                            },
+                            messageTimestamp: protocolMsg.timestampMs
+                                ? Math.floor(toNumber(protocolMsg.timestampMs) / 1000)
+                                : message.messageTimestamp
+                        }
+                    }
+                ]);
+                break;
+            case proto.Message.ProtocolMessage.Type.GROUP_MEMBER_LABEL_CHANGE:
+                const labelAssociationMsg = protocolMsg.memberLabel;
+                if (labelAssociationMsg?.label) {
+                    ev.emit('group.member-tag.update', {
+                        groupId: chat.id,
+                        label: labelAssociationMsg.label,
+                        participant: message.key.participant,
+                        participantAlt: message.key.participantAlt,
+                        messageTimestamp: Number(message.messageTimestamp)
+                    });
+                }
+                break;
+            case proto.Message.ProtocolMessage.Type.LID_MIGRATION_MAPPING_SYNC:
+                const encodedPayload = protocolMsg.lidMigrationMappingSyncMessage?.encodedMappingPayload;
+                const { pnToLidMappings, chatDbMigrationTimestamp } = decodeLidMigrationMappingSyncPayload(encodedPayload);
+                logger?.debug({ pnToLidMappings, chatDbMigrationTimestamp }, 'got lid mappings and chat db migration timestamp');
+                const pairs = [];
+                for (const { pn, latestLid, assignedLid } of pnToLidMappings) {
+                    const lid = latestLid || assignedLid;
+                    pairs.push({ lid: `${lid}@lid`, pn: `${pn}@s.whatsapp.net` });
+                }
+                await signalRepository.lidMapping.storeLIDPNMappings(pairs);
+                if (pairs.length) {
+                    for (const { pn, lid } of pairs) {
+                        await signalRepository.migrateSession(pn, lid);
+                    }
+                }
+        }
+    }
+    else if (content?.reactionMessage) {
+        const reaction = {
+            ...content.reactionMessage,
+            key: message.key
+        };
+        ev.emit('messages.reaction', [
+            {
+                reaction,
+                key: content.reactionMessage?.key
+            }
+        ]);
+    }
+    else if (content?.encReactionMessage) {
+        const encReaction = content.encReactionMessage;
+        const targetKey = encReaction.targetMessageKey;
+        const fail = (reason) => ev.emit('messages.reaction-encrypted', { key: message.key, targetKey, reason });
+        const targetMsg = targetKey ? await getMessage(targetKey) : undefined;
+        if (!targetMsg) {
+            logger?.warn({ targetKey }, 'encrypted reaction: target message not found, cannot decrypt');
+            fail('target-message-not-found');
+        }
+        else {
+            try {
+                const meIdNormalised = jidNormalizedUser(meId);
+                const targetSenderJid = await resolveTargetAuthorPn(targetKey, meIdNormalised, signalRepository);
+                const reactorJid = getKeyAuthor(message.key, meIdNormalised);
+                const targetEncKey = targetMsg?.messageContextInfo?.messageSecret;
+                if (!targetEncKey) {
+                    logger?.warn({ targetKey }, 'encrypted reaction: missing messageSecret for decryption');
+                    fail('missing-message-secret');
+                }
+                else {
+                    const reactionMsg = decryptEncReaction(encReaction, {
+                        targetEncKey,
+                        targetSenderJid,
+                        targetMsgId: targetKey.id,
+                        reactorJid
+                    });
+                    ev.emit('messages.reaction', [
+                        {
+                            reaction: { ...reactionMsg, key: message.key },
+                            key: targetKey
+                        }
+                    ]);
+                }
+            }
+            catch (err) {
+                logger?.warn({ err, targetKey }, 'failed to decrypt encrypted reaction');
+                fail('decrypt-failed');
+            }
+        }
+    }
+    else if (content?.encEventResponseMessage) {
+        const encEventResponse = content.encEventResponseMessage;
+        const creationMsgKey = encEventResponse.eventCreationMessageKey;
+        // we need to fetch the event creation message to get the event enc key
+        const eventMsg = await getMessage(creationMsgKey);
+        if (eventMsg) {
+            try {
+                const meIdNormalised = jidNormalizedUser(meId);
+                // all jids need to be PN
+                const eventCreatorJid = await resolveTargetAuthorPn(creationMsgKey, meIdNormalised, signalRepository);
+                const responderJid = getKeyAuthor(message.key, meIdNormalised);
+                const eventEncKey = eventMsg?.messageContextInfo?.messageSecret;
+                if (!eventEncKey) {
+                    logger?.warn({ creationMsgKey }, 'event response: missing messageSecret for decryption');
+                }
+                else {
+                    const responseMsg = decryptEventResponse(encEventResponse, {
+                        eventEncKey,
+                        eventCreatorJid,
+                        eventMsgId: creationMsgKey.id,
+                        responderJid
+                    });
+                    const eventResponse = {
+                        eventResponseMessageKey: message.key,
+                        senderTimestampMs: responseMsg.timestampMs,
+                        response: responseMsg
+                    };
+                    ev.emit('messages.update', [
+                        {
+                            key: creationMsgKey,
+                            update: {
+                                eventResponses: [eventResponse]
+                            }
+                        }
+                    ]);
+                }
+            }
+            catch (err) {
+                logger?.warn({ err, creationMsgKey }, 'failed to decrypt event response');
+            }
+        }
+        else {
+            logger?.warn({ creationMsgKey }, 'event creation message not found, cannot decrypt response');
+        }
+    }
+    else if (content?.secretEncryptedMessage &&
+        content.secretEncryptedMessage.secretEncType === proto.Message.SecretEncryptedMessage.SecretEncType.MESSAGE_EDIT) {
+        // E2EE message edit envelope (new in 2026-05). Replaces the older
+        // `protocolMessage.editedMessage` path for direct text edits.
+        // We fetch the target message to obtain its `messageSecret`, derive the
+        // decryption key, and surface the decoded inner Message via the same
+        // `messages.update` event used by the legacy edit path so consumers do
+        // not need a new event type.
+        const secEnc = content.secretEncryptedMessage;
+        const targetKey = secEnc.targetMessageKey;
+        const targetMsg = await getMessage(targetKey);
+        if (targetMsg) {
+            try {
+                const meIdNormalised = jidNormalizedUser(meId);
+                const origSenderRaw = targetKey.participant || targetKey.remoteJid;
+                const origSenderPn = isLidUser(origSenderRaw)
+                    ? await signalRepository.lidMapping.getPNForLID(origSenderRaw)
+                    : origSenderRaw;
+                const originalSenderJid = getKeyAuthor({ remoteJid: jidNormalizedUser(origSenderPn), fromMe: meIdNormalised === origSenderPn }, meIdNormalised);
+                const editorJid = getKeyAuthor(message.key, meIdNormalised);
+                const editEncKey = targetMsg?.messageContextInfo?.messageSecret;
+                if (!editEncKey) {
+                    logger?.warn({ targetKey }, 'message edit: missing messageSecret on original message — cannot decrypt');
+                    return;
+                }
+                const update = buildEditUpdate({
+                    editEncKey,
+                    encPayload: secEnc.encPayload,
+                    encIv: secEnc.encIv,
+                    originalSenderJid,
+                    originalMsgId: targetKey.id,
+                    editorJid,
+                    messageKey: message.key,
+                    targetKeyId: targetKey.id,
+                    fallbackTimestamp: toNumber(message.messageTimestamp),
+                    logger,
+                    targetKey
+                });
+                if (update) {
+                    ev.emit('messages.update', [update]);
+                }
+            }
+            catch (err) {
+                logger?.warn({ err, targetKey }, 'failed to decrypt secretEncryptedMessage MESSAGE_EDIT');
+            }
+        }
+        else {
+            logger?.warn({ targetKey }, 'original message not found in store, cannot decrypt secretEncryptedMessage edit');
+        }
+    }
+    else if (message.messageStubType) {
+        const jid = message.key?.remoteJid;
+        //let actor = whatsappID (message.participant)
+        let participants;
+        const emitParticipantsUpdate = (action) => ev.emit('group-participants.update', {
+            id: jid,
+            author: message.key.participant,
+            authorPn: message.key.participantAlt,
+            authorUsername: message.key.participantUsername,
+            participants,
+            action
+        });
+        const emitGroupUpdate = (update) => {
+            ev.emit('groups.update', [
+                {
+                    id: jid,
+                    ...update,
+                    author: message.key.participant ?? undefined,
+                    authorPn: message.key.participantAlt,
+                    authorUsername: message.key.participantUsername
+                }
+            ]);
+        };
+        const emitGroupRequestJoin = (participant, action, method) => {
+            ev.emit('group.join-request', {
+                id: jid,
+                author: message.key.participant,
+                authorPn: message.key.participantAlt,
+                authorUsername: message.key.participantUsername,
+                participant: participant.lid,
+                participantPn: participant.pn,
+                action,
+                method: method
+            });
+        };
+        const participantsIncludesMe = () => participants.find(jid => areJidsSameUser(meId, jid.phoneNumber)); // ADD SUPPORT FOR LID
+        switch (message.messageStubType) {
+            case WAMessageStubType.GROUP_PARTICIPANT_CHANGE_NUMBER:
+                participants = message.messageStubParameters.map((a) => JSON.parse(a)) || [];
+                emitParticipantsUpdate('modify');
+                break;
+            case WAMessageStubType.GROUP_PARTICIPANT_LEAVE:
+            case WAMessageStubType.GROUP_PARTICIPANT_REMOVE:
+                participants = message.messageStubParameters.map((a) => JSON.parse(a)) || [];
+                emitParticipantsUpdate('remove');
+                // mark the chat read only if you left the group
+                if (participantsIncludesMe()) {
+                    chat.readOnly = true;
+                }
+                break;
+            case WAMessageStubType.GROUP_PARTICIPANT_ADD:
+            case WAMessageStubType.GROUP_PARTICIPANT_INVITE:
+            case WAMessageStubType.GROUP_PARTICIPANT_ADD_REQUEST_JOIN:
+                participants = message.messageStubParameters.map((a) => JSON.parse(a)) || [];
+                if (participantsIncludesMe()) {
+                    chat.readOnly = false;
+                }
+                emitParticipantsUpdate('add');
+                break;
+            case WAMessageStubType.GROUP_PARTICIPANT_DEMOTE:
+                participants = message.messageStubParameters.map((a) => JSON.parse(a)) || [];
+                emitParticipantsUpdate('demote');
+                break;
+            case WAMessageStubType.GROUP_PARTICIPANT_PROMOTE:
+                participants = message.messageStubParameters.map((a) => JSON.parse(a)) || [];
+                emitParticipantsUpdate('promote');
+                break;
+            case WAMessageStubType.GROUP_CHANGE_ANNOUNCE:
+                const announceValue = message.messageStubParameters?.[0];
+                emitGroupUpdate({ announce: announceValue === 'true' || announceValue === 'on' });
+                break;
+            case WAMessageStubType.GROUP_CHANGE_RESTRICT:
+                const restrictValue = message.messageStubParameters?.[0];
+                emitGroupUpdate({ restrict: restrictValue === 'true' || restrictValue === 'on' });
+                break;
+            case WAMessageStubType.GROUP_CHANGE_SUBJECT:
+                const name = message.messageStubParameters?.[0];
+                chat.name = name;
+                emitGroupUpdate({ subject: name });
+                break;
+            case WAMessageStubType.GROUP_CHANGE_DESCRIPTION:
+                const description = message.messageStubParameters?.[0];
+                chat.description = description;
+                emitGroupUpdate({ desc: description });
+                break;
+            case WAMessageStubType.GROUP_CHANGE_INVITE_LINK:
+                const code = message.messageStubParameters?.[0];
+                emitGroupUpdate({ inviteCode: code });
+                break;
+            case WAMessageStubType.GROUP_MEMBER_ADD_MODE:
+                const memberAddValue = message.messageStubParameters?.[0];
+                emitGroupUpdate({ memberAddMode: memberAddValue === 'all_member_add' });
+                break;
+            case WAMessageStubType.GROUP_MEMBERSHIP_JOIN_APPROVAL_MODE:
+                const approvalMode = message.messageStubParameters?.[0];
+                emitGroupUpdate({ joinApprovalMode: approvalMode === 'on' });
+                break;
+            case WAMessageStubType.GROUP_MEMBERSHIP_JOIN_APPROVAL_REQUEST_NON_ADMIN_ADD: // TODO: Add other events
+                const participant = JSON.parse(message.messageStubParameters?.[0]);
+                const action = message.messageStubParameters?.[1];
+                const method = message.messageStubParameters?.[2];
+                emitGroupRequestJoin(participant, action, method);
+                break;
+            case WAMessageStubType.GROUP_CHANGE_ICON:
+                emitGroupUpdate({ icon: message.messageStubParameters?.[0] });
+                break;
+            case WAMessageStubType.GROUP_CHANGE_NO_FREQUENTLY_FORWARDED:
+                emitGroupUpdate({ noFrequentlyForwarded: message.messageStubParameters?.[0] === 'on' });
+                break;
+            case WAMessageStubType.GROUP_V4_ADD_INVITE_SENT:
+                // notification that a v4 invite was sent — no group metadata change, but emit for plugin awareness
+                ev.emit('groups.update', [{ id: jid, v4AddInviteSent: true }]);
+                break;
+            case WAMessageStubType.GROUP_CHANGE_RECENT_HISTORY_SHARING:
+                emitGroupUpdate({ recentHistorySharing: message.messageStubParameters?.[0] === 'on' });
+                break;
+            case WAMessageStubType.GROUP_CREATE:
+                ev.emit('groups.upsert', [{ id: jid, subject: message.messageStubParameters?.[0] || '' }]);
+                break;
+        }
+    } else if (content?.pollUpdateMessage) {
+        const creationMsgKey = content.pollUpdateMessage.pollCreationMessageKey;
+        const pollMsg = await getMessage(creationMsgKey);
+        if (pollMsg) {
+            const meIdNormalised = jidNormalizedUser(meId);
+            const pollCreatorJid = getKeyAuthor(creationMsgKey, meIdNormalised);
+            const voterJid = getKeyAuthor(message.key, meIdNormalised);
+            const pollEncKey = pollMsg.messageContextInfo?.messageSecret;
+            if (pollEncKey) {
+                try {
+                    const voteMsg = decryptPollVote(content.pollUpdateMessage.vote, {
+                        pollEncKey,
+                        pollCreatorJid,
+                        pollMsgId: creationMsgKey.id,
+                        voterJid,
+                    });
+                    ev.emit('messages.update', [{
+                        key: creationMsgKey,
+                        update: {
+                            pollUpdates: [{
+                                pollUpdateMessageKey: message.key,
+                                vote: voteMsg,
+                                senderTimestampMs: typeof content.pollUpdateMessage.senderTimestampMs === 'object'
+                                    ? content.pollUpdateMessage.senderTimestampMs.toNumber()
+                                    : Number(content.pollUpdateMessage.senderTimestampMs),
+                            }]
+                        }
+                    }]);
+                } catch (err) {
+                    logger?.warn({ err, creationMsgKey }, 'failed to decrypt poll vote');
+                }
+            } else {
+                logger?.warn({ creationMsgKey }, 'poll message has no messageSecret — cannot decrypt vote');
+            }
+        } else {
+            logger?.warn({ creationMsgKey }, 'poll creation message not found, cannot decrypt update');
+        }
+    }
+    if (Object.keys(chat).length > 1) {
+        ev.emit('chats.update', [chat]);
+    }
+};
+export default processMessage;