@xbibzlibrary/whatsbibz 1.3.0

package/lib/Utils/noise-handler.d.ts

@@ -0,0 +1,19 @@
+import { proto } from '../../WAProto/index.js';
+import type { KeyPair } from '../Types/index.js';
+import type { BinaryNode } from '../WABinary/index.js';
+import type { ILogger } from './logger.js';
+export declare const makeNoiseHandler: ({ keyPair: { private: privateKey, public: publicKey }, NOISE_HEADER, logger, routingInfo }: {
+    keyPair: KeyPair;
+    NOISE_HEADER: Uint8Array;
+    logger: ILogger;
+    routingInfo?: Buffer | undefined;
+}) => {
+    encrypt: (plaintext: Uint8Array) => Uint8Array;
+    decrypt: (ciphertext: Uint8Array) => Uint8Array;
+    authenticate: (data: Uint8Array) => void;
+    mixIntoKey: (data: Uint8Array) => void;
+    finishInit: () => Promise<void>;
+    processHandshake: ({ serverHello }: proto.HandshakeMessage, noiseKey: KeyPair) => Uint8Array<ArrayBufferLike>;
+    encodeFrame: (data: Buffer | Uint8Array) => Buffer;
+    decodeFrame: (newData: Buffer | Uint8Array, onFrame: (buff: Uint8Array | BinaryNode) => void) => Promise<void>;
+};

package/lib/Utils/noise-handler.js

@@ -0,0 +1,200 @@
+import { Boom } from '@hapi/boom';
+import { proto } from '../../WAProto/index.js';
+import { NOISE_MODE, WA_CERT_DETAILS } from '../Defaults/index.js';
+import { decodeBinaryNode } from '../WABinary/index.js';
+import { aesDecryptGCM, aesEncryptGCM, Curve, hkdf, sha256 } from './crypto.js';
+const IV_LENGTH = 12;
+const EMPTY_BUFFER = Buffer.alloc(0);
+const generateIV = (counter) => {
+    const iv = new ArrayBuffer(IV_LENGTH);
+    new DataView(iv).setUint32(8, counter);
+    return new Uint8Array(iv);
+};
+class TransportState {
+    constructor(encKey, decKey) {
+        this.encKey = encKey;
+        this.decKey = decKey;
+        this.readCounter = 0;
+        this.writeCounter = 0;
+        this.iv = new Uint8Array(IV_LENGTH);
+    }
+    encrypt(plaintext) {
+        const c = this.writeCounter++;
+        this.iv[8] = (c >>> 24) & 0xff;
+        this.iv[9] = (c >>> 16) & 0xff;
+        this.iv[10] = (c >>> 8) & 0xff;
+        this.iv[11] = c & 0xff;
+        return aesEncryptGCM(plaintext, this.encKey, this.iv, EMPTY_BUFFER);
+    }
+    decrypt(ciphertext) {
+        const c = this.readCounter++;
+        this.iv[8] = (c >>> 24) & 0xff;
+        this.iv[9] = (c >>> 16) & 0xff;
+        this.iv[10] = (c >>> 8) & 0xff;
+        this.iv[11] = c & 0xff;
+        return aesDecryptGCM(ciphertext, this.decKey, this.iv, EMPTY_BUFFER);
+    }
+}
+export const makeNoiseHandler = ({ keyPair: { private: privateKey, public: publicKey }, NOISE_HEADER, logger, routingInfo }) => {
+    logger = logger.child({ class: 'ns' });
+    const data = Buffer.from(NOISE_MODE);
+    let hash = data.byteLength === 32 ? data : sha256(data);
+    let salt = hash;
+    let encKey = hash;
+    let decKey = hash;
+    let counter = 0;
+    let sentIntro = false;
+    let inBytes = Buffer.alloc(0);
+    let transport = null;
+    let isWaitingForTransport = false;
+    let pendingOnFrame = null;
+    let introHeader;
+    if (routingInfo) {
+        introHeader = Buffer.alloc(7 + routingInfo.byteLength + NOISE_HEADER.length);
+        introHeader.write('ED', 0, 'utf8');
+        introHeader.writeUint8(0, 2);
+        introHeader.writeUint8(1, 3);
+        introHeader.writeUint8(routingInfo.byteLength >> 16, 4);
+        introHeader.writeUint16BE(routingInfo.byteLength & 65535, 5);
+        introHeader.set(routingInfo, 7);
+        introHeader.set(NOISE_HEADER, 7 + routingInfo.byteLength);
+    }
+    else {
+        introHeader = Buffer.from(NOISE_HEADER);
+    }
+    const authenticate = (data) => {
+        if (!transport) {
+            hash = sha256(Buffer.concat([hash, data]));
+        }
+    };
+    const encrypt = (plaintext) => {
+        if (transport) {
+            return transport.encrypt(plaintext);
+        }
+        const result = aesEncryptGCM(plaintext, encKey, generateIV(counter++), hash);
+        authenticate(result);
+        return result;
+    };
+    const decrypt = (ciphertext) => {
+        if (transport) {
+            return transport.decrypt(ciphertext);
+        }
+        const result = aesDecryptGCM(ciphertext, decKey, generateIV(counter++), hash);
+        authenticate(ciphertext);
+        return result;
+    };
+    const localHKDF = (data) => {
+        const key = hkdf(Buffer.from(data), 64, { salt, info: '' });
+        return [key.subarray(0, 32), key.subarray(32)];
+    };
+    const mixIntoKey = (data) => {
+        const [write, read] = localHKDF(data);
+        salt = write;
+        encKey = read;
+        decKey = read;
+        counter = 0;
+    };
+    const finishInit = async () => {
+        isWaitingForTransport = true;
+        const [write, read] = localHKDF(new Uint8Array(0));
+        transport = new TransportState(write, read);
+        isWaitingForTransport = false;
+        logger.trace('Noise handler transitioned to Transport state');
+        if (pendingOnFrame) {
+            logger.trace({ length: inBytes.length }, 'Flushing buffered frames after transport ready');
+            await processData(pendingOnFrame);
+            pendingOnFrame = null;
+        }
+    };
+    const processData = async (onFrame) => {
+        let size;
+        while (true) {
+            if (inBytes.length < 3)
+                return;
+            size = (inBytes[0] << 16) | (inBytes[1] << 8) | inBytes[2];
+            if (inBytes.length < size + 3)
+                return;
+            let frame = inBytes.subarray(3, size + 3);
+            inBytes = inBytes.subarray(size + 3);
+            if (transport) {
+                const result = transport.decrypt(frame);
+                frame = await decodeBinaryNode(result);
+            }
+            if (logger.level === 'trace') {
+                logger.trace({ msg: frame?.attrs?.id }, 'recv frame');
+            }
+            onFrame(frame);
+        }
+    };
+    authenticate(NOISE_HEADER);
+    authenticate(publicKey);
+    return {
+        encrypt,
+        decrypt,
+        authenticate,
+        mixIntoKey,
+        finishInit,
+        processHandshake: ({ serverHello }, noiseKey) => {
+            authenticate(serverHello.ephemeral);
+            mixIntoKey(Curve.sharedKey(privateKey, serverHello.ephemeral));
+            const decStaticContent = decrypt(serverHello.static);
+            mixIntoKey(Curve.sharedKey(privateKey, decStaticContent));
+            const certDecoded = decrypt(serverHello.payload);
+            const { intermediate: certIntermediate, leaf } = proto.CertChain.decode(certDecoded);
+            // leaf
+            if (!leaf?.details || !leaf?.signature) {
+                throw new Boom('invalid noise leaf certificate', { statusCode: 400 });
+            }
+            if (!certIntermediate?.details || !certIntermediate?.signature) {
+                throw new Boom('invalid noise intermediate certificate', { statusCode: 400 });
+            }
+            const details = proto.CertChain.NoiseCertificate.Details.decode(certIntermediate.details);
+            const { issuerSerial } = details;
+            const verify = Curve.verify(details.key, leaf.details, leaf.signature);
+            const verifyIntermediate = Curve.verify(WA_CERT_DETAILS.PUBLIC_KEY, certIntermediate.details, certIntermediate.signature);
+            if (!verify) {
+                throw new Boom('noise certificate signature invalid', { statusCode: 400 });
+            }
+            if (!verifyIntermediate) {
+                throw new Boom('noise intermediate certificate signature invalid', { statusCode: 400 });
+            }
+            if (issuerSerial !== WA_CERT_DETAILS.SERIAL) {
+                throw new Boom('certification match failed', { statusCode: 400 });
+            }
+            const keyEnc = encrypt(noiseKey.public);
+            mixIntoKey(Curve.sharedKey(noiseKey.private, serverHello.ephemeral));
+            return keyEnc;
+        },
+        encodeFrame: (data) => {
+            if (transport) {
+                data = transport.encrypt(data);
+            }
+            const dataLen = data.byteLength;
+            const introSize = sentIntro ? 0 : introHeader.length;
+            const frame = Buffer.allocUnsafe(introSize + 3 + dataLen);
+            if (!sentIntro) {
+                frame.set(introHeader);
+                sentIntro = true;
+            }
+            frame[introSize] = (dataLen >>> 16) & 0xff;
+            frame[introSize + 1] = (dataLen >>> 8) & 0xff;
+            frame[introSize + 2] = dataLen & 0xff;
+            frame.set(data, introSize + 3);
+            return frame;
+        },
+        decodeFrame: async (newData, onFrame) => {
+            if (isWaitingForTransport) {
+                inBytes = Buffer.concat([inBytes, newData]);
+                pendingOnFrame = onFrame;
+                return;
+            }
+            if (inBytes.length === 0) {
+                inBytes = Buffer.from(newData);
+            }
+            else {
+                inBytes = Buffer.concat([inBytes, newData]);
+            }
+            await processData(onFrame);
+        }
+    };
+};

package/lib/Utils/offline-node-processor.d.ts

@@ -0,0 +1,16 @@
+import type { BinaryNode } from '../WABinary/index.js';
+export type MessageType = 'message' | 'call' | 'receipt' | 'notification';
+export type OfflineNodeProcessorDeps = {
+    isWsOpen: () => boolean;
+    onUnexpectedError: (error: Error, msg: string) => void;
+    yieldToEventLoop: () => Promise<void>;
+};
+/**
+ * Creates a processor for offline stanza nodes that:
+ * - Queues nodes for sequential processing
+ * - Yields to the event loop periodically to avoid blocking
+ * - Catches handler errors to prevent the processing loop from crashing
+ */
+export declare function makeOfflineNodeProcessor(nodeProcessorMap: Map<MessageType, (node: BinaryNode) => Promise<void>>, deps: OfflineNodeProcessorDeps, batchSize?: number): {
+    enqueue: (type: MessageType, node: BinaryNode) => void;
+};

package/lib/Utils/offline-node-processor.js

@@ -0,0 +1,39 @@
+/**
+ * Creates a processor for offline stanza nodes that:
+ * - Queues nodes for sequential processing
+ * - Yields to the event loop periodically to avoid blocking
+ * - Catches handler errors to prevent the processing loop from crashing
+ */
+export function makeOfflineNodeProcessor(nodeProcessorMap, deps, batchSize = 10) {
+    const nodes = [];
+    let isProcessing = false;
+    const enqueue = (type, node) => {
+        nodes.push({ type, node });
+        if (isProcessing) {
+            return;
+        }
+        isProcessing = true;
+        const promise = async () => {
+            let processedInBatch = 0;
+            while (nodes.length && deps.isWsOpen()) {
+                const { type, node } = nodes.shift();
+                const nodeProcessor = nodeProcessorMap.get(type);
+                if (!nodeProcessor) {
+                    deps.onUnexpectedError(new Error(`unknown offline node type: ${type}`), 'processing offline node');
+                    continue;
+                }
+                await nodeProcessor(node).catch(err => deps.onUnexpectedError(err, `processing offline ${type}`));
+                processedInBatch++;
+                // Yield to event loop after processing a batch
+                // This prevents blocking the event loop for too long when there are many offline nodes
+                if (processedInBatch >= batchSize) {
+                    processedInBatch = 0;
+                    await deps.yieldToEventLoop();
+                }
+            }
+            isProcessing = false;
+        };
+        promise().catch(error => deps.onUnexpectedError(error, 'processing offline nodes'));
+    };
+    return { enqueue };
+}

package/lib/Utils/platform-identity.d.ts

@@ -0,0 +1,14 @@
+import type { WABrowserDescription } from '../Types/index.js';
+export declare const PAIRING_ACCEPTED_OS: readonly string[];
+export declare const PAIRING_OS_FALLBACK: Readonly<Record<string, string>>;
+export declare const PAIRING_ACCEPTED_BROWSERS: readonly string[];
+/** OS valid untuk companion_platform_display, atau null bila tidak dikenal */
+export declare function resolvePairingOs(os: string | undefined): string | null;
+export declare function resolvePairingBrowser(browser: string | undefined): string;
+/** display yang pasti lolos validasi server, diturunkan dari [os, browser, version] */
+export declare function derivePairingDisplay(browser: WABrowserDescription | readonly string[], hostOs?: string): string;
+export declare function isPairingDisplayAccepted(display: string | undefined): boolean;
+export declare function hostOsLabel(hostOs?: string): string;
+export declare function linuxDistroName(file?: string): string | null;
+export declare function hostOsVersion(): string;
+export declare function lintIdentity(opts?: { browser?: readonly string[]; companionPlatformDisplay?: string | null; syncFullHistory?: boolean }): Array<{ level: 'warn' | 'info'; message: string }>;

package/lib/Utils/platform-identity.js

@@ -0,0 +1,148 @@
+// BibzWhats — identitas platform companion (apa yang WhatsApp "lihat" dari library ini)
+//
+// Tiga tempat identitas dipakai, dan ketiganya berbeda aturannya:
+//
+//  1. DeviceProps.os  (= browser[0])  → teks di daftar "Perangkat tertaut" di HP.
+//     Bebas; server menerima nama apa pun lewat QR.
+//  2. companion_platform_display (pairing kode) → DIVALIDASI server dengan
+//     allow-list. Nilai tidak dikenal = <error code='400' text='bad-request'/>
+//     dan HP tidak pernah dapat notifikasi. Diukur langsung ke server produksi
+//     (2026-09-03, WA Web 2.3000.1046672143):
+//       OS diterima : Mac OS, macOS, Windows, Linux, Ubuntu, Debian, Fedora,
+//                     CentOS, Gentoo, Manjaro, Chromium OS, Android, iOS
+//       OS ditolak  : Arch Linux, Arch, ArchLinux, GNU/Linux, Mac OS X, Linux Mint,
+//                     openSUSE, Kali, NixOS, Pop!_OS, FreeBSD, Chrome OS,
+//                     nama produk (BibzWhats/Foo) — semuanya 400
+//       Browser     : Chrome, Chromium, Firefox, Safari, Edge, Opera, Brave, Vivaldi,
+//                     Arc diterima; "Desktop" DITOLAK (400)
+//     Karena itu library menurunkan display dari OS terdekat yang valid:
+//     Arch Linux → "Chrome (Linux)", Mac OS Desktop → "Chrome (Mac OS)".
+//  3. WebInfo.webSubPlatform (ClientPayload) → hanya relevan untuk identitas
+//     "Desktop" + syncFullHistory. DARWIN (Mac OS Desktop) dan APP_STORE
+//     ditutup server: 428 sebelum QR. WIN_HYBRID (Windows) dan WEB_BROWSER
+//     diterima. Mac OS Desktop otomatis diturunkan ke WEB_BROWSER.
+//
+// Hasil pengukuran lengkap ada di test/identity-live.test.js (opsional, live).
+
+import { platform, release } from 'os';
+import fs from 'fs';
+
+/** OS yang diterima server pada companion_platform_display (huruf besar-kecil bebas) */
+export const PAIRING_ACCEPTED_OS = Object.freeze([
+    'Mac OS', 'macOS', 'Windows', 'Linux', 'Ubuntu', 'Debian', 'Fedora',
+    'CentOS', 'Gentoo', 'Manjaro', 'Chromium OS', 'Android', 'iOS'
+]);
+
+/** OS yang terbukti DITOLAK (400) — dipetakan ke padanan yang valid */
+export const PAIRING_OS_FALLBACK = Object.freeze({
+    'arch linux': 'Linux', 'archlinux': 'Linux', 'arch': 'Linux', 'arch linux arm': 'Linux',
+    'gnu/linux': 'Linux', 'linux mint': 'Linux', 'mint': 'Linux', 'opensuse': 'Linux',
+    'kali': 'Linux', 'nixos': 'Linux', 'pop!_os': 'Linux', 'alpine': 'Linux', 'void': 'Linux',
+    'endeavouros': 'Linux', 'garuda': 'Linux', 'raspbian': 'Linux', 'red hat': 'Linux',
+    'rocky': 'Linux', 'almalinux': 'Linux', 'elementary os': 'Linux', 'zorin': 'Linux',
+    'mac os x': 'Mac OS', 'osx': 'Mac OS', 'os x': 'Mac OS', 'darwin': 'Mac OS',
+    'chrome os': 'Chromium OS', 'chromeos': 'Chromium OS',
+    'freebsd': 'Linux', 'openbsd': 'Linux', 'netbsd': 'Linux', 'solaris': 'Linux', 'aix': 'Linux'
+});
+
+/** Nama browser yang diterima server pada companion_platform_display */
+export const PAIRING_ACCEPTED_BROWSERS = Object.freeze([
+    'Chrome', 'Chromium', 'Firefox', 'Safari', 'Edge', 'Opera', 'Brave', 'Vivaldi', 'Arc'
+]);
+
+const lower = (s) => String(s ?? '').trim().toLowerCase();
+
+/** OS untuk companion_platform_display: kembalikan nama valid, atau null bila tidak dikenal */
+export function resolvePairingOs(os) {
+    const l = lower(os);
+    if (!l) return null;
+    const exact = PAIRING_ACCEPTED_OS.find((o) => o.toLowerCase() === l);
+    if (exact) return exact;
+    if (PAIRING_OS_FALLBACK[l]) return PAIRING_OS_FALLBACK[l];
+    // heuristik: apa pun yang menyebut linux/ubuntu/debian → Linux; mac → Mac OS; win → Windows
+    if (/\blinux\b|ubuntu|debian|fedora|arch/.test(l)) return 'Linux';
+    if (/\bmac|darwin|osx/.test(l)) return 'Mac OS';
+    if (/windows|win\d/.test(l)) return 'Windows';
+    return null;
+}
+
+/** Browser untuk companion_platform_display: "Desktop"/nama tak dikenal → Chrome */
+export function resolvePairingBrowser(browser) {
+    const l = lower(browser);
+    const exact = PAIRING_ACCEPTED_BROWSERS.find((b) => b.toLowerCase() === l);
+    if (exact) return exact;
+    return 'Chrome';
+}
+
+/**
+ * Turunkan companion_platform_display yang PASTI lolos validasi dari deskripsi
+ * browser [os, browser, version]. Contoh:
+ *   ['Arch Linux','Chrome','6.16']     → 'Chrome (Linux)'
+ *   ['Mac OS','Desktop','14.4.1']      → 'Chrome (Mac OS)'
+ *   ['BibzWhats','Chrome','1.2.0']     → 'Chrome (Linux)' (di host Linux) — nama produk tidak valid
+ *   ['Mac OS','Safari','14.4.1']       → 'Safari (Mac OS)'
+ */
+export function derivePairingDisplay(browser, hostOs = platform()) {
+    const [os, name] = browser || [];
+    const resolvedOs = resolvePairingOs(os) ?? resolvePairingOs(hostOsLabel(hostOs)) ?? 'Linux';
+    return `${resolvePairingBrowser(name)} (${resolvedOs})`;
+}
+
+/** Apakah string display ini akan diterima server (berdasarkan tabel di atas)? */
+export function isPairingDisplayAccepted(display) {
+    const m = /^(.+?) \((.+)\)$/.exec(String(display ?? '').trim());
+    if (!m) return false;
+    const browserOk = PAIRING_ACCEPTED_BROWSERS.some((b) => b.toLowerCase() === lower(m[1]));
+    const osOk = PAIRING_ACCEPTED_OS.some((o) => o.toLowerCase() === lower(m[2]));
+    return browserOk && osOk;
+}
+
+/** Label OS host: 'Mac OS' | 'Windows' | 'Arch Linux' | 'Ubuntu' | ... (dibaca dari /etc/os-release) */
+export function hostOsLabel(hostOs = platform()) {
+    if (hostOs === 'darwin') return 'Mac OS';
+    if (hostOs === 'win32') return 'Windows';
+    if (hostOs === 'android') return 'Android';
+    if (hostOs === 'linux') return linuxDistroName() || 'Linux';
+    return 'Linux';
+}
+
+/** Nama distro dari /etc/os-release (NAME=), tanpa embel "GNU/Linux". null bila tak terbaca. */
+export function linuxDistroName(file = '/etc/os-release') {
+    try {
+        const txt = fs.readFileSync(file, 'utf8');
+        const m = /^NAME="?([^"\n]+)"?/m.exec(txt);
+        if (!m) return null;
+        return m[1].replace(/\s+GNU\/Linux/i, '').trim();
+    } catch {
+        return null;
+    }
+}
+
+/** Versi OS host yang layak tampil di browser[2] (mis. '14.4.1' / '6.16.4-arch1-1') */
+export function hostOsVersion() {
+    return release();
+}
+
+/**
+ * Verifikasi sebuah konfigurasi identitas SEBELUM konek. Mengembalikan daftar
+ * catatan {level:'warn'|'info', message}. Dipakai createBibzWhats untuk memberi
+ * peringatan dini, dan bisa dipanggil sendiri oleh pemakai.
+ */
+export function lintIdentity({ browser, companionPlatformDisplay, syncFullHistory } = {}) {
+    const notes = [];
+    if (!Array.isArray(browser) || browser.length < 2) {
+        notes.push({ level: 'warn', message: 'browser harus [os, browser, version]' });
+        return notes;
+    }
+    const [os, name] = browser;
+    if (companionPlatformDisplay && !isPairingDisplayAccepted(companionPlatformDisplay)) {
+        notes.push({ level: 'warn', message: `companionPlatformDisplay '${companionPlatformDisplay}' tidak ada di daftar yang diterima server (pairing kode akan 400). Disarankan: '${derivePairingDisplay(browser)}'.` });
+    }
+    if (!companionPlatformDisplay && !resolvePairingOs(os)) {
+        notes.push({ level: 'info', message: `OS '${os}' tidak dikenal server untuk pairing kode → display otomatis '${derivePairingDisplay(browser)}' (nama di daftar perangkat tetap '${os}').` });
+    }
+    if (name === 'Desktop' && syncFullHistory && os === 'Mac OS') {
+        notes.push({ level: 'info', message: 'Mac OS Desktop + syncFullHistory: webSubPlatform DARWIN ditolak server (428) → diturunkan ke WEB_BROWSER; riwayat penuh tetap diminta lewat requireFullSync.' });
+    }
+    return notes;
+}

package/lib/Utils/pre-key-manager.d.ts

@@ -0,0 +1,27 @@
+import type { SignalDataSet, SignalDataTypeMap, SignalKeyStore } from '../Types/index.js';
+import type { ILogger } from './logger.js';
+/**
+ * Manages pre-key operations with proper concurrency control
+ */
+export declare class PreKeyManager {
+    private readonly store;
+    private readonly logger;
+    private readonly queues;
+    constructor(store: SignalKeyStore, logger: ILogger);
+    /**
+     * Get or create a queue for a specific key type
+     */
+    private getQueue;
+    /**
+     * Process pre-key operations (updates and deletions)
+     */
+    processOperations(data: SignalDataSet, keyType: keyof SignalDataTypeMap, transactionCache: SignalDataSet, mutations: SignalDataSet, isInTransaction: boolean): Promise<void>;
+    /**
+     * Process deletions with validation
+     */
+    private processDeletions;
+    /**
+     * Validate and process pre-key deletions outside transactions
+     */
+    validateDeletions(data: SignalDataSet, keyType: keyof SignalDataTypeMap): Promise<void>;
+}

package/lib/Utils/pre-key-manager.js

@@ -0,0 +1,105 @@
+import PQueue from 'p-queue';
+/**
+ * Manages pre-key operations with proper concurrency control
+ */
+export class PreKeyManager {
+    constructor(store, logger) {
+        this.store = store;
+        this.logger = logger;
+        this.queues = new Map();
+    }
+    /**
+     * Get or create a queue for a specific key type
+     */
+    getQueue(keyType) {
+        if (!this.queues.has(keyType)) {
+            this.queues.set(keyType, new PQueue({ concurrency: 1 }));
+        }
+        return this.queues.get(keyType);
+    }
+    /**
+     * Process pre-key operations (updates and deletions)
+     */
+    async processOperations(data, keyType, transactionCache, mutations, isInTransaction) {
+        const keyData = data[keyType];
+        if (!keyData)
+            return;
+        return this.getQueue(keyType).add(async () => {
+            // Ensure structures exist
+            transactionCache[keyType] = transactionCache[keyType] || {};
+            mutations[keyType] = mutations[keyType] || {};
+            // Separate deletions from updates
+            const deletions = [];
+            const updates = {};
+            for (const keyId in keyData) {
+                if (keyData[keyId] === null) {
+                    deletions.push(keyId);
+                }
+                else {
+                    updates[keyId] = keyData[keyId];
+                }
+            }
+            // Process updates (no validation needed)
+            if (Object.keys(updates).length > 0) {
+                Object.assign(transactionCache[keyType], updates);
+                Object.assign(mutations[keyType], updates);
+            }
+            // Process deletions with validation
+            if (deletions.length > 0) {
+                await this.processDeletions(keyType, deletions, transactionCache, mutations, isInTransaction);
+            }
+        });
+    }
+    /**
+     * Process deletions with validation
+     */
+    async processDeletions(keyType, ids, transactionCache, mutations, isInTransaction) {
+        if (isInTransaction) {
+            // In transaction, only allow deletion if key exists in cache
+            for (const keyId of ids) {
+                if (transactionCache[keyType]?.[keyId]) {
+                    transactionCache[keyType][keyId] = null;
+                    mutations[keyType][keyId] = null;
+                }
+                else {
+                    this.logger.warn(`Skipping deletion of non-existent ${keyType} in transaction: ${keyId}`);
+                }
+            }
+        }
+        else {
+            // Outside transaction, validate against store
+            const existingKeys = await this.store.get(keyType, ids);
+            for (const keyId of ids) {
+                if (existingKeys[keyId]) {
+                    transactionCache[keyType][keyId] = null;
+                    mutations[keyType][keyId] = null;
+                }
+                else {
+                    this.logger.warn(`Skipping deletion of non-existent ${keyType}: ${keyId}`);
+                }
+            }
+        }
+    }
+    /**
+     * Validate and process pre-key deletions outside transactions
+     */
+    async validateDeletions(data, keyType) {
+        const keyData = data[keyType];
+        if (!keyData)
+            return;
+        return this.getQueue(keyType).add(async () => {
+            // Find all deletion requests
+            const deletionIds = Object.keys(keyData).filter(id => keyData[id] === null);
+            if (deletionIds.length === 0)
+                return;
+            // Validate deletions
+            const existingKeys = await this.store.get(keyType, deletionIds);
+            for (const keyId of deletionIds) {
+                if (!existingKeys[keyId]) {
+                    this.logger.warn(`Skipping deletion of non-existent ${keyType}: ${keyId}`);
+                    delete data[keyType][keyId];
+                }
+            }
+        });
+    }
+}

package/lib/Utils/process-message.d.ts

@@ -0,0 +1,59 @@
+import { proto } from '../../WAProto/index.js';
+import type { AuthenticationCreds, BaileysEventEmitter, CacheStore, SignalKeyStoreWithTransaction, SignalRepositoryWithLIDStore, SocketConfig, WAMessage, WAMessageKey } from '../Types/index.js';
+import type { ILogger } from './logger.js';
+type ProcessMessageContext = {
+    shouldProcessHistoryMsg: boolean;
+    placeholderResendCache?: CacheStore;
+    creds: AuthenticationCreds;
+    keyStore: SignalKeyStoreWithTransaction;
+    ev: BaileysEventEmitter;
+    logger?: ILogger;
+    options: RequestInit;
+    signalRepository: SignalRepositoryWithLIDStore;
+    getMessage: SocketConfig['getMessage'];
+};
+/** Cleans a received message to further processing */
+export declare const cleanMessage: (message: WAMessage, meId: string, meLid: string) => void;
+export declare const isRealMessage: (message: WAMessage) => boolean;
+export declare const shouldIncrementChatUnread: (message: WAMessage) => boolean;
+/**
+ * Get the ID of the chat from the given key.
+ * Typically -- that'll be the remoteJid, but for broadcasts, it'll be the participant
+ */
+export declare const getChatId: ({ remoteJid, participant, fromMe }: WAMessageKey) => string;
+type PollContext = {
+    /** normalised jid of the person that created the poll */
+    pollCreatorJid: string;
+    /** ID of the poll creation message */
+    pollMsgId: string;
+    /** poll creation message enc key */
+    pollEncKey: Uint8Array;
+    /** jid of the person that voted */
+    voterJid: string;
+};
+type EventContext = {
+    /** normalised jid of the person that created the event */
+    eventCreatorJid: string;
+    /** ID of the event creation message */
+    eventMsgId: string;
+    /** event creation message enc key */
+    eventEncKey: Uint8Array;
+    /** jid of the person that responded */
+    responderJid: string;
+};
+/**
+ * Decrypt a poll vote
+ * @param vote encrypted vote
+ * @param ctx additional info about the poll required for decryption
+ * @returns list of SHA256 options
+ */
+export declare function decryptPollVote({ encPayload, encIv }: proto.Message.IPollEncValue, { pollCreatorJid, pollMsgId, pollEncKey, voterJid }: PollContext): proto.Message.PollVoteMessage;
+/**
+ * Decrypt an event response
+ * @param response encrypted event response
+ * @param ctx additional info about the event required for decryption
+ * @returns event response message
+ */
+export declare function decryptEventResponse({ encPayload, encIv }: proto.Message.IPollEncValue, { eventCreatorJid, eventMsgId, eventEncKey, responderJid }: EventContext): proto.Message.EventResponseMessage;
+declare const processMessage: (message: WAMessage, { shouldProcessHistoryMsg, placeholderResendCache, ev, creds, signalRepository, keyStore, logger, options, getMessage }: ProcessMessageContext) => Promise<void>;
+export default processMessage;