@xbibzlibrary/whatsbibz 1.3.1 → 1.4.0

package/SECURITY.md

@@ -0,0 +1,91 @@
+# Security Policy
+
+*Bahasa Indonesia di bawah / Indonesian version below.*
+
+## Supported versions
+
+| Version | Supported |
+|---|---|
+| 1.3.x | Yes |
+| < 1.3 | No — please upgrade |
+
+Only the latest minor release receives security fixes.
+
+## Reporting a vulnerability
+
+**Please do not open a public issue for security problems.**
+
+Report privately by one of these channels:
+
+- GitHub: **Security → Report a vulnerability** on this repository (private advisory).
+- Email: **revandoppratama@gmail.com** with the subject `[whatsbibz security]`.
+
+Include:
+
+- A description of the issue and its impact.
+- Steps or a script to reproduce it.
+- The package version (`npm ls @xbibzlibrary/whatsbibz`) and Node.js version.
+- Whether the issue requires a paired session, network position, or a malicious remote peer.
+
+You will get an acknowledgement within **3 business days** and a status update at least every **7 days** until the issue is resolved. When a fix is released you will be credited in the changelog unless you prefer otherwise.
+
+## What counts as a vulnerability here
+
+- Anything that lets a **remote WhatsApp peer** (a contact, a group member, a newsletter) execute code, crash the process, corrupt local state or read data it should not — for example through a crafted `protocolMessage`, media metadata or app-state patch.
+- Leakage of session material (`creds.json`, signal keys, `identity.json`) through logs, error messages or file permissions.
+- Weaknesses in the pairing or Noise handshake handling that were introduced by this fork.
+- Dependency vulnerabilities that are reachable from this package's code paths.
+
+Out of scope: WhatsApp server behaviour, account bans, rate limits, and issues in the upstream Baileys project that are not reachable through WhatsBibz (please report those upstream).
+
+## Handling secrets safely
+
+- Session folders contain long-lived credentials. Keep them outside the repository, with restrictive permissions, and never share them.
+- Rotate your credentials (`client.logout()` and re-pair) if a session folder may have leaked.
+- Do not paste `creds.json`, pairing codes for real numbers, or tokens into issues.
+
+---
+
+# Kebijakan Keamanan
+
+## Versi yang didukung
+
+| Versi | Didukung |
+|---|---|
+| 1.3.x | Ya |
+| < 1.3 | Tidak — silakan perbarui |
+
+Hanya rilis minor terbaru yang menerima perbaikan keamanan.
+
+## Melaporkan kerentanan
+
+**Jangan membuka issue publik untuk masalah keamanan.**
+
+Laporkan secara pribadi lewat salah satu jalur berikut:
+
+- GitHub: **Security → Report a vulnerability** di repositori ini (advisory privat).
+- Email: **revandoppratama@gmail.com** dengan subjek `[whatsbibz security]`.
+
+Sertakan:
+
+- Deskripsi masalah dan dampaknya.
+- Langkah atau skrip untuk mereproduksinya.
+- Versi paket (`npm ls @xbibzlibrary/whatsbibz`) dan versi Node.js.
+- Apakah masalah memerlukan sesi yang sudah tertaut, posisi jaringan tertentu, atau lawan bicara jarak jauh yang berniat jahat.
+
+Kamu akan menerima konfirmasi dalam **3 hari kerja** dan pembaruan status setidaknya setiap **7 hari** sampai masalah selesai. Saat perbaikan dirilis, namamu dicantumkan di changelog kecuali kamu meminta sebaliknya.
+
+## Yang dianggap kerentanan di sini
+
+- Apa pun yang memungkinkan **peer WhatsApp jarak jauh** (kontak, anggota grup, newsletter) mengeksekusi kode, membuat proses crash, merusak state lokal, atau membaca data yang seharusnya tidak bisa — misalnya lewat `protocolMessage`, metadata media, atau patch app-state yang direkayasa.
+- Kebocoran materi sesi (`creds.json`, kunci signal, `identity.json`) lewat log, pesan error, atau izin berkas.
+- Kelemahan dalam penanganan pairing atau handshake Noise yang diperkenalkan oleh fork ini.
+- Kerentanan dependensi yang dapat dijangkau dari jalur kode paket ini.
+
+Di luar cakupan: perilaku server WhatsApp, pemblokiran akun, batas laju, dan masalah di proyek upstream Baileys yang tidak dapat dijangkau lewat WhatsBibz (silakan laporkan ke upstream).
+
+## Menjaga rahasia dengan aman
+
+- Folder sesi berisi kredensial berumur panjang. Simpan di luar repositori, dengan izin terbatas, dan jangan pernah dibagikan.
+- Rotasi kredensialmu (`client.logout()` lalu pairing ulang) bila folder sesi mungkin bocor.
+- Jangan menempelkan `creds.json`, pairing code untuk nomor sungguhan, atau token ke dalam issue.

package/assets/logo/README.md

@@ -1,21 +1,19 @@
 # Logo WhatsBibz
 
-Gelembung pesan hijau (`#0a6958`) dengan buku terbuka di dalamnya, wordmark **WhatsBib'S** dan
-tagline *WHATSAPP LIBRARY*. Sumber utamanya adalah `preview-2048.png` (raster 2048×2048, dari
-pemilik proyek); semua berkas lain diturunkan dari situ.
+Logo utama (banner/logo lebar 1672×940) diberikan oleh pemilik proyek sebagai WebP
+dan disimpan sebagai `preview.webp`; turunan PNG-nya ada di `preview.png`.
+Keduanya dipakai untuk README dan halaman npm.
 
 | Berkas | Pakai untuk |
 |---|---|
-| `preview.png` | lockup lengkap 1024×1024 — README, halaman npm, dokumen |
-| `preview-2048.png` | master resolusi penuh (tidak ikut dipublish ke npm) |
-| `png/logo-1600.png`, `png/logo-800.png` | lockup dipangkas rapi (tanpa margin besar) |
-| `png/mark-1024.png`, `png/mark-512.png` | gelembung saja, **latar transparan** — avatar, watermark |
-| `png/icon-{16…1024}.png` | ikon persegi sudut membulat (tile putih + gelembung) — avatar npm/GitHub, app icon |
+| `preview.webp` | master asli (WebP 1672×940) — README, halaman npm |
+| `preview.png` | versi PNG `preview.webp` (1080×607) |
+| `preview-2048.png` | master persegi 2048×2048 dari rebrand sebelumnya (arsip) |
+| `png/logo-1600.png`, `png/logo-800.png` | lockup lama yang dipangkas rapi |
+| `png/mark-1024.png`, `png/mark-512.png` | gelembung saja, latar transparan — avatar, watermark |
+| `png/icon-{16…1024}.png` | ikon persegi sudut membulat — avatar npm/GitHub, app icon |
 | `png/banner-1200x360.png` | banner README/sosial |
 | `whatsbibz.ico` | favicon multi-ukuran 16–256 |
 
-Warna: hijau utama `#0a6958`, teks `#2b2e33`, latar putih. Ruang kosong minimal di sekeliling
-lockup = tinggi huruf **B**. Jangan dimiringkan, diberi outline, atau diganti fontnya.
-
-Regenerasi turunan (mark transparan, ikon, ICO, banner) dari master: skrip yang dipakai ada di
-riwayat proyek (`scripts/` tidak menyertakannya karena hanya dijalankan sekali saat rebrand).
+Ikon, mark, banner, dan favicon masih turunan dari lockup persegi versi lama.
+Setelah versi final disepakati, turunan tersebut perlu diregenerasi dari `preview.webp`.

package/lib/BibzWhats/banner.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Banner ASCII "WhatsBibz." yang dicetak saat client dibuat.
+ * Huruf: "Small Slant" (figlet). Warna: filter pelangi (Rainbow 2).
+ */
+
+export const BANNER_FONT: string;
+export const BANNER_FILTER: string;
+
+/** Banner polos tanpa kode warna ANSI (4 baris, tanpa newline tambahan). */
+export const BANNER_TEXT: string;
+
+export interface BannerRenderOptions {
+    /** true = selalu berwarna, false = polos, 'auto' (default) = ikuti terminal. */
+    color?: boolean | 'auto';
+    /** Berapa kali spektrum pelangi diulang sepanjang lebar banner (default 1). */
+    cycles?: number;
+    /** Environment untuk deteksi warna (default process.env). */
+    env?: NodeJS.ProcessEnv;
+    /** Stream untuk deteksi TTY (default process.stdout). */
+    stream?: unknown;
+}
+
+export function colorEnabled(opts?: { env?: NodeJS.ProcessEnv; stream?: unknown }): boolean;
+
+/** Render banner menjadi string siap cetak (tanpa newline tambahan). */
+export function renderBanner(options?: BannerRenderOptions): string;
+
+/** Cetak banner ke terminal. */
+export function printBanner(
+    options?: BannerRenderOptions & { write?: (chunk: string) => void },
+): boolean;

package/lib/BibzWhats/banner.js

@@ -0,0 +1,120 @@
+// BibzWhats — banner ASCII "WhatsBibz." yang dicetak ke terminal saat client dibuat.
+//
+// • Huruf   : "Small Slant" (figlet / smslant) — dirender sekali dan disimpan
+//   sebagai string statis, jadi TIDAK butuh dependency figlet saat runtime.
+// • Warna   : filter pelangi (gradien hue mengalir dari kiri ke kanan), gaya
+//   truecolor (24-bit) dengan fallback palet 256 bila terminal tidak
+//   mendukungnya, dan otomatis tanpa warna (plain) bila stdout bukan TTY.
+// • Matikan : NO_COLOR=1, atau opsi client `banner: false`.
+
+// Baris asli hasil figlet.textSync('WhatsBibz.', { font: 'Small Slant' }).
+// Perhatikan: sebagian besar glyph saling berimpit karena font-nya miring rapat —
+// itu memang karakteristik "Small Slant".
+const LINES = [
+    "  _      ____        __      ___  _ __       ",
+    " | | /| / / /  ___ _/ /____ / _ )(_) /  ___  ",
+    " | |/ |/ / _ \\/ _ `/ __(_-</ _  / / _ \\/_ /_ ",
+    " |__/|__/_//_/\\_,_/\\__/___/____/_/_.__//__(_)",
+];
+
+export const BANNER_FONT = 'Small Slant';
+export const BANNER_FILTER = 'Rainbow 2';
+
+const MAX_WIDTH = Math.max(...LINES.map((l) => l.length));
+
+/** Banner polos (tanpa ANSI) — 4 baris, tanpa baris kosong di ujung. */
+export const BANNER_TEXT = LINES.map((l) => l.trimEnd()).join('\n');
+
+const RESET = '\x1b[0m';
+const TRUE_COLOR_TERMS = new Set(['truecolor', '24bit']);
+const TRUECOLOR_TERM_PROGRAMS = ['iterm.app', 'wezterm', 'vscode', 'hyper', 'tabby', 'ghostty', 'kitty', 'alacritty'];
+
+/** Deteksi warna: hormati NO_COLOR / FORCE_COLOR; default hanya saat stdout TTY. */
+export function colorEnabled({ env = process.env, stream = process.stdout } = {}) {
+    const nc = env.NO_COLOR;
+    if (nc !== undefined && nc !== '' && nc !== '0') return false;
+    const fc = env.FORCE_COLOR;
+    if (fc !== undefined && fc !== '' && fc !== '0') return true;
+    return !!(stream && stream.isTTY) && env.TERM !== 'dumb';
+}
+
+function trueColorSupported(env = process.env) {
+    const ct = String(env.COLORTERM || '').toLowerCase();
+    if (ct && TRUE_COLOR_TERMS.has(ct)) return true;
+    const prog = String(env.TERM_PROGRAM || '').toLowerCase();
+    return TRUECOLOR_TERM_PROGRAMS.some((p) => prog.includes(p));
+}
+
+function hslToRgb(h, s, l) {
+    h = ((h % 360) + 360) % 360;
+    const c = (1 - Math.abs(2 * l - 1)) * s;
+    const hp = h / 60;
+    const x = c * (1 - Math.abs((hp % 2) - 1));
+    let r = 0, g = 0, b = 0;
+    if (hp < 1) [r, g, b] = [c, x, 0];
+    else if (hp < 2) [r, g, b] = [x, c, 0];
+    else if (hp < 3) [r, g, b] = [0, c, x];
+    else if (hp < 4) [r, g, b] = [0, x, c];
+    else if (hp < 5) [r, g, b] = [x, 0, c];
+    else [r, g, b] = [c, 0, x];
+    const m = l - c / 2;
+    return [Math.round((r + m) * 255), Math.round((g + m) * 255), Math.round((b + m) * 255)];
+}
+
+// Pendekatan terdekat ke kode palet 256 (cube 6×6×6 atau grayscale).
+const CUBE = [0, 95, 135, 175, 215, 255];
+function nearest256(r, g, b) {
+    const map = (v) => CUBE.reduce((best, x) => (Math.abs(x - v) < Math.abs(best - v) ? x : best), CUBE[0]);
+    const rr = map(r), gg = map(g), bb = map(b);
+    const rgbErr = (rr - r) ** 2 + (gg - g) ** 2 + (bb - b) ** 2;
+    const avg = (r + g + b) / 3;
+    const grayIdx = Math.min(23, Math.max(0, Math.round((avg - 3) / 10)));
+    const grayV = 8 + grayIdx * 10;
+    const grayErr = (grayV - r) ** 2 + (grayV - g) ** 2 + (grayV - b) ** 2;
+    if (grayErr < rgbErr) return `38;5;${232 + grayIdx}`;
+    return `38;5;${16 + 36 * CUBE.indexOf(rr) + 6 * CUBE.indexOf(gg) + CUBE.indexOf(bb)}`;
+}
+
+function colorCode(r, g, b, trueColor) {
+    return trueColor ? `38;2;${r};${g};${b}` : nearest256(r, g, b);
+}
+
+/**
+ * Render banner.
+ * @param {object} [opts]
+ * @param {boolean|'auto'} [opts.color='auto']  true=selalu berwarna, false=polos, 'auto'=ikuti terminal
+ * @param {number} [opts.cycles=1]              berapa kali spektrum pelangi diulang sepanjang lebar banner
+ * @param {object} [opts.env]                   environment (untuk deteksi warna)
+ * @param {object} [opts.stream]                stream untuk deteksi TTY (biasanya process.stdout)
+ * @returns {string} banner siap dicetak (tanpa newline tambahan)
+ */
+export function renderBanner({ color = 'auto', cycles = 1, env = process.env, stream = process.stdout } = {}) {
+    const useColor = color === true || (color === 'auto' && colorEnabled({ env, stream }));
+    if (!useColor) return BANNER_TEXT;
+    const trueColor = trueColorSupported(env);
+    return LINES.map((line) => {
+        let out = '';
+        for (let c = 0; c < line.length; c++) {
+            const ch = line[c];
+            if (ch === ' ') {
+                out += ' ';
+                continue;
+            }
+            const hue = ((c / MAX_WIDTH) * 360 * cycles) % 360;
+            const [r, g, b] = hslToRgb(hue, 1, 0.5);
+            out += `\x1b[${colorCode(r, g, b, trueColor)}m${ch}${RESET}`;
+        }
+        return out.trimEnd();
+    }).join('\n');
+}
+
+/**
+ * Cetak banner ke terminal.
+ * @param {object} [opts]  meneruskan opsi renderBanner + `write`
+ * @param {(s:string)=>void} [opts.write]  penulis output (default process.stdout.write)
+ */
+export function printBanner(opts = {}) {
+    const { write = (s) => process.stdout.write(s), ...rest } = opts;
+    write(renderBanner(rest) + '\n');
+    return true;
+}

package/lib/BibzWhats/client.d.ts

@@ -33,6 +33,12 @@ export interface BibzWhatsOptions {
     logger?: BibzWhatsLogger;
     /** cetak QR ASCII ke console saat fallback (butuh qrcode-terminal) */
     printQR?: boolean;
+    /**
+     * Cetak banner ASCII "WhatsBibz." saat client dibuat.
+     * Default (undefined): hanya di terminal interaktif (stdout TTY).
+     * true = selalu cetak, false = jangan pernah.
+     */
+    banner?: boolean;
     /** opsi tambahan langsung ke makeWASocket (override) */
     socketConfig?: Partial<SocketConfig>;
     maxReconnectAttempts?: number;
@@ -55,7 +61,7 @@ export interface BibzWhatsOptions {
     /** default true: 'ready' dipancarkan untuk setiap socket baru (pertama & tiap reconnect) */
     readyOnEveryConnect?: boolean;
 }
-export declare const BIBZWHATS_DEFAULTS: Readonly<Required<Omit<BibzWhatsOptions, 'phone' | 'pairingCode' | 'logger' | 'printQR' | 'socketConfig'>>>;
+export declare const BIBZWHATS_DEFAULTS: Readonly<Required<Omit<BibzWhatsOptions, 'phone' | 'pairingCode' | 'logger' | 'printQR' | 'socketConfig' | 'banner'>>>;
 export declare function wipeAuthDir(dir: string): boolean;
 export declare function makeSocketNetworkOptions(opts?: { forceIPv4?: boolean }): Partial<SocketConfig>;
 export declare function sessionWipeReason(status: number | undefined, message?: string): string | null;

package/lib/BibzWhats/client.js

@@ -24,6 +24,7 @@ import { Browsers } from '../Utils/browser-utils.js';
 import { lintIdentity, derivePairingDisplay } from '../Utils/platform-identity.js';
 import { resolveDeviceIdentity, createIdentityRotator, isIdentityRejection, describeIdentity, clearIdentityState, loadIdentityState, saveIdentityState } from './device-identity.js';
 import { createPairingController } from './pairing.js';
+import { printBanner } from './banner.js';
 
 export const BIBZWHATS_DEFAULTS = Object.freeze({
     authDir: 'bibzwhats-session',
@@ -106,6 +107,9 @@ function mergeLogger(logger) {
  * @property {[string,string,string]} [browser]  alias lama `identity` (tuple eksplisit)
  * @property {object} [logger]            {info,warn,error,ok,debug}
  * @property {boolean} [printQR]          cetak QR ASCII ke console saat fallback (butuh qrcode-terminal)
+ * @property {boolean} [banner]          cetak banner ASCII 'WhatsBibz.' saat client dibuat.
+ *                                    default: hanya di terminal interaktif (stdout TTY);
+ *                                    true = selalu, false = jangan pernah.
  * @property {object} [socketConfig]      opsi tambahan langsung ke makeWASocket (override)
  * @property {string} [companionPlatformDisplay]  override `companion_platform_display` (WA memvalidasi dgn allow-list; default diturunkan otomatis, mis. "Chrome (Mac OS)" / "Chrome (Linux)")
  * @property {boolean} [readyOnEveryConnect]      default true — 'ready' tiap socket baru; false = hanya sekali
@@ -127,6 +131,14 @@ export async function createBibzWhats(options = {}) {
     const emitter = new EventEmitter();
     const groupMetadataCache = new Map();
 
+    // Banner ASCII 'WhatsBibz.' (Small Slant, pelangi) — hanya terminal interaktif secara
+    // bawaan; `banner: true` memaksa cetak (mis. untuk log/daemon), `banner: false` mematikan.
+    const wantBanner =
+        opts.banner === true || (opts.banner !== false && !!process.stdout.isTTY);
+    if (wantBanner) {
+        try { printBanner(); } catch {}
+    }
+
     // ── Identitas perangkat tertaut: kustom (opsi/env) atau otomatis (paling stabil) ──
     const resolved = resolveDeviceIdentity({ identity: opts.identity === 'auto' ? undefined : opts.identity, browser: opts.browser, authDir: opts.authDir });
     for (const note of resolved.notes) (note.level === 'warn' ? log.warn : log.info)(`BibzWhats: ${note.message}`);

package/lib/BibzWhats/index.d.ts

@@ -4,4 +4,5 @@ export * from './device-identity.js';
 export * from './send.js';
 export * from './extract.js';
 export * from './jid.js';
+export * from './banner.js';
 export { BIBZWHATS_VERSION, BIBZWHATS_NAME, BIBZWHATS_PACKAGE, BIBZWHATS_UPSTREAM, BIBZWHATS_WA_WEB_VERSION } from './version.js';

package/lib/BibzWhats/index.js

@@ -5,4 +5,5 @@ export * from './device-identity.js';
 export * from './send.js';
 export * from './extract.js';
 export * from './jid.js';
+export * from './banner.js';
 export { BIBZWHATS_VERSION, BIBZWHATS_NAME, BIBZWHATS_PACKAGE, BIBZWHATS_UPSTREAM, BIBZWHATS_WA_WEB_VERSION } from './version.js';

package/lib/BibzWhats/version.js

@@ -1,7 +1,7 @@
 export const BIBZWHATS_NAME = 'WhatsBibz';
 /** nama paket di npm */
 export const BIBZWHATS_PACKAGE = '@xbibzlibrary/whatsbibz';
-export const BIBZWHATS_VERSION = '1.3.1';
+export const BIBZWHATS_VERSION = '1.4.0';
 export const BIBZWHATS_UPSTREAM = 'ourin-baileys@9.0.21 (fork WhiskeySockets/Baileys v7) + patch upstream s/d rc14/master 2026-08 & PR #2769/#2776/#2778/#2789; identitas platform diukur ke server 2026-09-03';
 /** versi WA Web bawaan (fallback) — diperbarui 2026-09-03 dari web.whatsapp.com */
-export const BIBZWHATS_WA_WEB_VERSION = [2, 3000, 1046721733];
+export const BIBZWHATS_WA_WEB_VERSION = [2, 3000, 1046874154];

package/lib/Defaults/index.js

@@ -2,7 +2,7 @@ import { proto } from "../../WAProto/index.js";
 import { makeLibSignalRepository } from "../Signal/libsignal.js";
 import { Browsers } from "../Utils/browser-utils.js";
 import logger from "../Utils/logger.js";
-const version = [2, 3000, 1046721733];
+const version = [2, 3000, 1046874154];
 export const UNAUTHORIZED_CODES = [401, 403, 419];
 export const DEFAULT_ORIGIN = "https://web.whatsapp.com";
 export const CALL_VIDEO_PREFIX = "https://call.whatsapp.com/video/";

package/lib/Modded/message_builder.js

@@ -813,18 +813,15 @@ class Button extends BaseBuilder {
     }
 
     async build(jid, { ...options } = {}) {
-        if (this._cardBuilders && this._cardBuilders.length > 0) {
-            for (const builder of this._cardBuilders) {
-                this.addCard(await builder._card.toCard());
-            }
-            this._cardBuilders = [];
-        }
+        // Konten interactive message = hasil toCard() (body/footer/header + nativeFlowMessage).
+        // Sebelumnya memakai variabel `message` yang tidak pernah didefinisikan → ReferenceError.
+        const payload = await this.toCard();
         return generateWAMessageFromContent(
             jid,
             {
                 ...this._extraPayload,
                 interactiveMessage: {
-                    ...message,
+                    ...payload,
                     contextInfo: this._contextInfo,
                 },
             },
@@ -833,6 +830,7 @@ class Button extends BaseBuilder {
     }
 
     async send(jid, { ...options } = {}) {
+        if (this._buttons.length < 1) throw new Error('Button requires at least one button');
         const msg = await this.build(jid, options);
 
         await this.#client.relayMessage(msg.key.remoteJid, msg.message, {
@@ -997,7 +995,17 @@ class Carousel extends BaseBuilder {
         return this;
     }
 
-    build(jid, { ...options } = {}) {
+    async build(jid, { ...options } = {}) {
+        // Konsumsi builder terdaftar lewat .card(cb). Sebelumnya _cardBuilders tidak pernah
+        // dipakai di sini → carousel terkirim dengan 0 kartu (diam-diam rusak).
+        if (this._cardBuilders && this._cardBuilders.length > 0) {
+            const built = [];
+            for (const builder of this._cardBuilders) {
+                built.push(await builder._card.toCard());
+            }
+            this._cardBuilders = [];
+            this.addCard(built);
+        }
         return generateWAMessageFromContent(
             jid,
             {
@@ -1019,6 +1027,15 @@ class Carousel extends BaseBuilder {
     }
 
     async send(jid, { ...options } = {}) {
+        if (this._cardBuilders && this._cardBuilders.length > 0) {
+            const built = [];
+            for (const builder of this._cardBuilders) {
+                built.push(await builder._card.toCard());
+            }
+            this._cardBuilders = [];
+            this.addCard(built);
+        }
+        if (this._cards.length < 1) throw new Error('Carousel requires at least one card');
         const msg = await this.build(jid, options);
 
         await this.#client.relayMessage(msg.key.remoteJid, msg.message, {

package/lib/Utils/browser-utils.js

@@ -28,9 +28,9 @@ export const Browsers = {
     linux: browser => ['Linux', browser, '6.12.44'],
     baileys: browser => ['Baileys', browser, '6.5.0'],
     /** identitas companion BibzWhats (tampil di daftar perangkat tertaut) */
-    whatsbibz: browser => ['WhatsBibz', browser, '1.3.1'],
+    whatsbibz: browser => ['WhatsBibz', browser, '1.4.0'],
     /** alias lama */
-    bibzwhats: browser => ['WhatsBibz', browser, '1.3.1'],
+    bibzwhats: browser => ['WhatsBibz', browser, '1.4.0'],
     windows: browser => ['Windows', browser, '10.0.22631'],
     /** eksperimental (upstream #2201): companion Android — bisa menerima view-once */
     android: browser => [browser, 'Android', ''],

package/lib/Utils/generics.js

@@ -1,7 +1,7 @@
 import { Boom } from '@hapi/boom';
 import { createHash, randomBytes } from 'crypto';
 import { proto } from '../../WAProto/index.js';
-const bibzWhatsVersion = [2, 3000, 1046721733];
+const bibzWhatsVersion = [2, 3000, 1046874154];
 import { DisconnectReason } from '../Types/index.js';
 import { getAllBinaryNodeChildren, jidDecode } from '../WABinary/index.js';
 import { sha256 } from './crypto.js';

package/lib/Utils/rich-messages.js

@@ -544,6 +544,16 @@ export const captureUnifiedResponse = (msg) => {
   };
 };
 export const generateUnifiedResponseContent = (quoted, captured) => {
+  if (
+    !captured ||
+    !Array.isArray(captured.submessages) ||
+    !captured.unifiedResponse?.data
+  ) {
+    throw new TypeError(
+      'captured wajib berupa hasil captureUnifiedResponse(msg) yang berisi ' +
+        'unifiedResponse.data — contoh: sock.sendUnifiedResponse(jid, quoted, captureUnifiedResponse(m.message))',
+    );
+  }
   const ctxInfo = buildRichContextInfo(quoted);
   return {
     message: buildBotForwardedMessage(

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@xbibzlibrary/whatsbibz",
-  "version": "1.3.1",
-  "description": "WhatsBibz — library WhatsApp Web multi-device (fork Baileys v7 / ourin-baileys) untuk ekosistem Xbibz: pairing code custom, identitas perangkat kustom/otomatis, auto-reconnect, self-healing session, handler companion_reg_refresh bawaan, interactive message, album, newsletter, VoIP.",
+  "version": "1.4.0",
+  "description": "WhatsBibz — WhatsApp Web multi-device library for Node.js (maintained Baileys fork): high-level client, custom pairing codes, self-healing sessions, configurable or automatic linked-device identity, complete TypeScript declarations.",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
@@ -20,6 +20,7 @@
     "LICENSE",
     "LICENSE.upstream",
     "README.md",
+    "README.id.md",
     "CHANGELOG.md",
     "assets/logo/preview.png",
     "assets/logo/whatsbibz.ico",
@@ -27,7 +28,8 @@
     "assets/logo/png/mark-512.png",
     "assets/logo/png/banner-1200x360.png",
     "assets/logo/README.md",
-    "VERIFIKASI-IDENTITAS-2026-09-03.md"
+    "VERIFIKASI-IDENTITAS-2026-09-03.md",
+    "SECURITY.md"
   ],
   "scripts": {
     "test": "node --test test/*.test.js",
@@ -50,9 +52,21 @@
     "bot",
     "automation"
   ],
-  "author": "Xbibz Developer",
+  "author": {
+    "name": "Xbibz Developer",
+    "email": "revandoppratama@gmail.com",
+    "url": "https://github.com/XbibzOfficial777"
+  },
   "license": "MIT",
-  "homepage": "https://www.npmjs.com/package/@xbibzlibrary/whatsbibz",
+  "homepage": "https://github.com/XbibzOfficial777/whatsbibz#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/XbibzOfficial777/whatsbibz.git"
+  },
+  "bugs": {
+    "url": "https://github.com/XbibzOfficial777/whatsbibz/issues",
+    "email": "revandoppratama@gmail.com"
+  },
   "engines": {
     "node": ">=20.0.0"
   },
@@ -105,7 +119,7 @@
     }
   },
   "devDependencies": {
-    "typescript": "^5.9.2",
+    "typescript": "^7.0.2",
     "@types/node": "^22.18.0"
   }
 }