@zapo-js/fake-server 1.2.0 → 1.3.0

package/dist/api/FakeWaServer.d.ts

@@ -1,5 +1,6 @@
 import { Agent as HttpsAgent } from 'node:https';
 import { type WaFakeAuthenticatedInfo, WaFakeConnectionPipeline } from '../infra/WaFakeConnectionPipeline';
+import { type FakeNoiseRootCa } from '../protocol/auth/cert-chain';
 import type { ParsedClientPayload } from '../protocol/auth/client-payload-validate';
 import type { BuildSuccessNodeInput } from '../protocol/auth/success-node';
 import type { BuildAbPropsResultInput } from '../protocol/iq/abprops';
@@ -63,6 +64,22 @@ export interface FakeWaServerOptions {
         readonly host?: string;
         readonly port?: number;
     };
+    /**
+     * Root of the Noise certificate chain the server presents. Defaults to a
+     * fresh random CA per {@link FakeWaServer.listen}, read back from
+     * {@link FakeWaServer.noiseRootCa}.
+     *
+     * A client in a separate process cannot read it back: it has to pin the
+     * anchor before it dials, while the server is not listening yet. Pass a CA
+     * both sides derive from a shared seed to make it knowable ahead of time.
+     *
+     * Carries the signing half, unlike the public-only
+     * {@link FakeWaServerNoiseRootCa} this server exposes. It signs a chain no
+     * real client trusts, so it is test material rather than a secret — but a
+     * seed committed beside the tests is the intended source, not one shared
+     * with anything that matters.
+     */
+    readonly noiseRootCa?: FakeNoiseRootCa;
 }
 export interface FakeSessionKeyInfo {
     readonly clientPayload: ParsedClientPayload;

package/dist/api/FakeWaServer.js

@@ -432,7 +432,7 @@ class FakeWaServer {
         }
         ;
         [this.rootCa, this.serverStaticKeyPair] = await Promise.all([
-            (0, cert_chain_1.generateFakeNoiseRootCa)(),
+            this.options.noiseRootCa ?? (0, cert_chain_1.generateFakeNoiseRootCa)(),
             crypto_1.X25519.generateKeyPair()
         ]);
         const mediaHandler = this.buildMediaRequestHandler();

package/dist/esm/api/FakeWaServer.js

@@ -428,7 +428,7 @@ export class FakeWaServer {
         }
         ;
         [this.rootCa, this.serverStaticKeyPair] = await Promise.all([
-            generateFakeNoiseRootCa(),
+            this.options.noiseRootCa ?? generateFakeNoiseRootCa(),
             X25519.generateKeyPair()
         ]);
         const mediaHandler = this.buildMediaRequestHandler();

package/dist/index.d.ts

@@ -6,6 +6,12 @@ export { FakePeer } from './api/FakePeer';
 export type { CreateFakePeerOptions, ExpectGroupMessageOptions, ExpectMessageOptions, ReceivedMessage, SendMessageOptions } from './api/FakePeer';
 export { FakeServerSession, FakeWaServer } from './api/FakeWaServer';
 export type { BinaryNode, ExpectIqOptions, ExpectStanzaOptions, FakeSessionKeyInfo, FakeWaServerNoiseRootCa, FakeWaServerOptions, FakeWaServerPipelineListener, StanzaMatcher, WaFakeAuthenticatedInfo, WaFakeConnectionPipeline } from './api/FakeWaServer';
+/**
+ * Signing half of the Noise root, needed only to pin
+ * {@link FakeWaServerOptions.noiseRootCa}. Readers of `server.noiseRootCa` get
+ * the public-only {@link FakeWaServerNoiseRootCa} instead.
+ */
+export type { FakeNoiseRootCa } from './protocol/auth/cert-chain';
 export { IqExpectation, Scenario } from './api/Scenario';
 export type { AuthenticatedPipelineListener, ScenarioServer } from './api/Scenario';
 export { WaFakeConnection } from './infra/WaFakeConnection';

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@zapo-js/fake-server",
-    "version": "1.2.0",
+    "version": "1.3.0",
     "description": "Fake WhatsApp Web server used to test zapo-js",
     "license": "MIT",
     "author": "vinikjkkj <contact@vinicius.email> (https://github.com/vinikjkkj)",