@whanext/core 0.19.7 → 0.19.9

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 0.19.9
+
+- Fixed live `message_addon` edits being discarded when Zapo reports the parent message timestamp instead of the mutation timestamp.
+- Serialized decrypted edit addons through the same protocol-mutation queue used by `message_protocol`, preserving edit/revoke ordering.
+- Offline-resume edit addons remain ignored by default unless `processOfflineMessages` is enabled.
+
+## 0.19.8
+
+### Fixed
+- The Zapo mailbox (`messages`, `threads`, and `contacts`) is now persisted in the shared SQLite store and full history sync is enabled. This lets Zapo retain parent message secrets required to decrypt `secretEncryptedMessage` edit addons after restart/offline resume.
+- History sync now hydrates the trusted-contact/privacy-token state used by Zapo when preparing outgoing messages, including history-derived token metadata and NCT salt that can be required for `tctoken`/`cstoken` generation. Historical/bootstrap messages are still filtered by WhaNext and do not become live command events unless `processOfflineMessages` is explicitly enabled.
+- WhatsApp negative publish ACK `463` is normalized as `MESSAGE_REACHOUT_LOCKED` with `ackCode: 463` instead of surfacing as `UNKNOWN_ERROR`, allowing consumers to avoid retry/error-reply loops while the account is reach-out time-locked.
+
+### Compatibility
+- Public message/edit/delete event shapes are unchanged.
+- Existing shared multi-account stores are reused in place; the mailbox domains are created inside the same `state.sqlite` and remain isolated by `sessionId`.
+- The first connection after this update may perform a larger history sync because mailbox persistence is now enabled deliberately.
+
 ## 0.19.7
 
 ### Fixed

package/dist/index.d.ts

@@ -610,7 +610,7 @@ declare class DeferredReply {
     delete(): Promise<void>;
 }
 
-type WhaNextErrorCode = 'AUTH_INVALID_PHONE' | 'AUTH_EXPIRED' | 'AUTH_PASSKEY_REQUIRED' | 'CONNECTION_CLOSED' | 'CONNECTION_FAILED' | 'GROUP_NOT_FOUND' | 'MEMBER_NOT_FOUND' | 'BOT_NOT_ADMIN' | 'MESSAGE_NOT_FOUND' | 'MEDIA_NOT_AVAILABLE' | 'MUTE_DISABLED' | 'STORAGE_ERROR' | 'ARGUMENT_MISSING' | 'ARGUMENT_INVALID' | 'COMMAND_NOT_ALLOWED' | 'COMMAND_COOLDOWN' | 'COMMAND_BUSY' | 'COMMAND_LOAD_FAILED' | 'PROVIDER_ERROR' | 'UNKNOWN_ERROR';
+type WhaNextErrorCode = 'AUTH_INVALID_PHONE' | 'AUTH_EXPIRED' | 'AUTH_PASSKEY_REQUIRED' | 'CONNECTION_CLOSED' | 'CONNECTION_FAILED' | 'GROUP_NOT_FOUND' | 'MEMBER_NOT_FOUND' | 'BOT_NOT_ADMIN' | 'MESSAGE_NOT_FOUND' | 'MEDIA_NOT_AVAILABLE' | 'MESSAGE_REACHOUT_LOCKED' | 'MUTE_DISABLED' | 'STORAGE_ERROR' | 'ARGUMENT_MISSING' | 'ARGUMENT_INVALID' | 'COMMAND_NOT_ALLOWED' | 'COMMAND_COOLDOWN' | 'COMMAND_BUSY' | 'COMMAND_LOAD_FAILED' | 'PROVIDER_ERROR' | 'UNKNOWN_ERROR';
 interface WhaNextErrorOptions {
     cause?: unknown;
     context?: Readonly<Record<string, unknown>>;

package/dist/index.js

@@ -90,11 +90,40 @@ function toWhaNextError(error, context) {
     return error;
   }
   const message = error instanceof Error ? error.message : "An unknown error occurred.";
+  if (isReachoutTimelockError(error)) {
+    return new WhaNextError(
+      "MESSAGE_REACHOUT_LOCKED",
+      "WhatsApp rejected the outgoing message (ack 463: reach-out time-lock).",
+      {
+        cause: error,
+        context: {
+          ...context ?? {},
+          ackCode: 463
+        },
+        recoverable: false
+      }
+    );
+  }
   return new WhaNextError("UNKNOWN_ERROR", message, {
     cause: error,
     ...context ? { context } : {}
   });
 }
+function isReachoutTimelockError(error) {
+  const seen = /* @__PURE__ */ new Set();
+  let current = error;
+  for (let depth = 0; depth < 8 && current !== void 0 && current !== null; depth += 1) {
+    if (seen.has(current)) return false;
+    seen.add(current);
+    const message = current instanceof Error ? current.message : typeof current === "string" ? current : void 0;
+    if (message && /negative publish ack:.*\berror=463\b/i.test(message)) {
+      return true;
+    }
+    if (typeof current !== "object") return false;
+    current = Reflect.get(current, "cause");
+  }
+  return false;
+}
 
 // src/models/identity.ts
 function normalizeIdentity(identity) {
@@ -3044,7 +3073,7 @@ var ZapoProvider = class {
       markOnlineOnConnect: false,
       deviceBrowser: this.#deviceBrowser(),
       deviceOsDisplayName: this.#deviceOsDisplayName(),
-      history: { enabled: false },
+      history: { enabled: true, requireFullSync: true },
       addons: {
         autoDecrypt: true,
         persistAllSecrets: true
@@ -3170,9 +3199,18 @@ var ZapoProvider = class {
       ...protocolKey?.participant !== void 0 ? { participant: protocolKey.participant } : event.key.participant !== void 0 ? { participant: event.key.participant } : {},
       ...protocolKey?.participantAlt !== void 0 ? { participantAlt: protocolKey.participantAlt } : event.key.participantAlt !== void 0 ? { participantAlt: event.key.participantAlt } : {}
     };
-    void this.#handleProtocolEvent({
+    if (event.offline === true && this.#options.processOfflineMessages !== true) {
+      this.#logger.debug("Ignored offline Zapo edit addon from before the current live connection.", {
+        messageId: event.key.id ?? void 0,
+        targetMessageId,
+        chatId: target.remoteJid ?? event.key.remoteJid ?? void 0
+      });
+      return;
+    }
+    const mutationTimestampSeconds = toSeconds(protocol?.timestampMs) ?? (event.offline === true ? toSeconds(event.timestampSeconds) : void 0) ?? Math.floor(Date.now() / 1e3);
+    this.#enqueueProtocolEvent({
       key: event.key,
-      ...event.timestampSeconds !== void 0 ? { timestampSeconds: event.timestampSeconds } : {},
+      timestampSeconds: mutationTimestampSeconds,
       protocolMessage: {
         type: proto.Message.ProtocolMessage.Type.MESSAGE_EDIT,
         key: target,
@@ -4142,9 +4180,9 @@ function createZapoStoreEntry(storePath) {
       senderKey: "sqlite",
       appState: "sqlite",
       privacyToken: "sqlite",
-      messages: "none",
-      threads: "none",
-      contacts: "none"
+      messages: "sqlite",
+      threads: "sqlite",
+      contacts: "sqlite"
     },
     cacheProviders: {
       messageSecret: "sqlite"