@zapo-js/fake-server 1.2.0 → 1.3.1

package/dist/api/FakePairingDriver.d.ts

@@ -15,6 +15,7 @@ export interface CompanionPairingMaterial {
 export interface FakePairingDriverDeps {
     readonly pipeline: WaFakeConnectionPipeline;
     readonly waitForPairDeviceAck?: (pairDeviceIqId: string) => Promise<void>;
+    readonly waitForPairSuccessAck?: (pairSuccessIqId: string) => Promise<void>;
     readonly companionMaterialResolver: () => Promise<CompanionPairingMaterial>;
 }
 export declare class FakePairingDriver {

package/dist/api/FakePairingDriver.js

@@ -4,6 +4,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.FakePairingDriver = void 0;
 const fake_primary_device_1 = require("../protocol/auth/fake-primary-device");
 const pair_device_1 = require("../protocol/auth/pair-device");
+const stream_error_1 = require("../protocol/stream/stream-error");
+/** `stream:error` code the server sends once the companion has signed its identity. */
+const FORCE_LOGIN_CODE = 515;
 class FakePairingDriver {
     constructor(options, deps) {
         this.primary = null;
@@ -22,12 +25,17 @@ class FakePairingDriver {
             companionIdentityPublicKey: material.identityPublicKey,
             companionDeviceId: this.options.companionDeviceId ?? 1
         });
-        await this.deps.pipeline.sendStanza((0, pair_device_1.buildPairSuccessIq)({
+        const pairSuccessIq = (0, pair_device_1.buildPairSuccessIq)({
             deviceJid: this.options.deviceJid,
             deviceLid: this.options.deviceLid,
             platform: this.options.platform ?? 'IOS',
             deviceIdentityBytes
-        }));
+        });
+        void this.deps
+            .waitForPairSuccessAck?.(pairSuccessIq.attrs.id)
+            .then(() => this.deps.pipeline.sendStanza((0, stream_error_1.buildStreamErrorCode)(FORCE_LOGIN_CODE)))
+            .catch(() => undefined);
+        await this.deps.pipeline.sendStanza(pairSuccessIq);
     }
 }
 exports.FakePairingDriver = FakePairingDriver;

package/dist/api/FakeWaServer.d.ts

@@ -1,5 +1,6 @@
 import { Agent as HttpsAgent } from 'node:https';
 import { type WaFakeAuthenticatedInfo, WaFakeConnectionPipeline } from '../infra/WaFakeConnectionPipeline';
+import { type FakeNoiseRootCa } from '../protocol/auth/cert-chain';
 import type { ParsedClientPayload } from '../protocol/auth/client-payload-validate';
 import type { BuildSuccessNodeInput } from '../protocol/auth/success-node';
 import type { BuildAbPropsResultInput } from '../protocol/iq/abprops';
@@ -63,6 +64,22 @@ export interface FakeWaServerOptions {
         readonly host?: string;
         readonly port?: number;
     };
+    /**
+     * Root of the Noise certificate chain the server presents. Defaults to a
+     * fresh random CA per {@link FakeWaServer.listen}, read back from
+     * {@link FakeWaServer.noiseRootCa}.
+     *
+     * A client in a separate process cannot read it back: it has to pin the
+     * anchor before it dials, while the server is not listening yet. Pass a CA
+     * both sides derive from a shared seed to make it knowable ahead of time.
+     *
+     * Carries the signing half, unlike the public-only
+     * {@link FakeWaServerNoiseRootCa} this server exposes. It signs a chain no
+     * real client trusts, so it is test material rather than a secret — but a
+     * seed committed beside the tests is the intended source, not one shared
+     * with anything that matters.
+     */
+    readonly noiseRootCa?: FakeNoiseRootCa;
 }
 export interface FakeSessionKeyInfo {
     readonly clientPayload: ParsedClientPayload;

package/dist/api/FakeWaServer.js

@@ -372,6 +372,9 @@ class FakeWaServer {
                 }, {
                     timeoutMs: 15000
                 });
+            },
+            waitForPairSuccessAck: async (pairSuccessIqId) => {
+                await session.expectIq({ id: pairSuccessIqId }, { timeoutMs: 15000 });
             }
         });
         await driver.run();
@@ -432,7 +435,7 @@ class FakeWaServer {
         }
         ;
         [this.rootCa, this.serverStaticKeyPair] = await Promise.all([
-            (0, cert_chain_1.generateFakeNoiseRootCa)(),
+            this.options.noiseRootCa ?? (0, cert_chain_1.generateFakeNoiseRootCa)(),
             crypto_1.X25519.generateKeyPair()
         ]);
         const mediaHandler = this.buildMediaRequestHandler();

package/dist/esm/api/FakePairingDriver.js

@@ -1,6 +1,9 @@
 /** Runs the server side of the QR pairing flow. */
 import { buildAdvSignedDeviceIdentity, generateFakePrimaryDevice } from '../protocol/auth/fake-primary-device.js';
 import { buildPairDeviceIq, buildPairSuccessIq, mintPairingRefs } from '../protocol/auth/pair-device.js';
+import { buildStreamErrorCode } from '../protocol/stream/stream-error.js';
+/** `stream:error` code the server sends once the companion has signed its identity. */
+const FORCE_LOGIN_CODE = 515;
 export class FakePairingDriver {
     constructor(options, deps) {
         this.primary = null;
@@ -19,11 +22,16 @@ export class FakePairingDriver {
             companionIdentityPublicKey: material.identityPublicKey,
             companionDeviceId: this.options.companionDeviceId ?? 1
         });
-        await this.deps.pipeline.sendStanza(buildPairSuccessIq({
+        const pairSuccessIq = buildPairSuccessIq({
             deviceJid: this.options.deviceJid,
             deviceLid: this.options.deviceLid,
             platform: this.options.platform ?? 'IOS',
             deviceIdentityBytes
-        }));
+        });
+        void this.deps
+            .waitForPairSuccessAck?.(pairSuccessIq.attrs.id)
+            .then(() => this.deps.pipeline.sendStanza(buildStreamErrorCode(FORCE_LOGIN_CODE)))
+            .catch(() => undefined);
+        await this.deps.pipeline.sendStanza(pairSuccessIq);
     }
 }

package/dist/esm/api/FakeWaServer.js

@@ -368,6 +368,9 @@ export class FakeWaServer {
                 }, {
                     timeoutMs: 15000
                 });
+            },
+            waitForPairSuccessAck: async (pairSuccessIqId) => {
+                await session.expectIq({ id: pairSuccessIqId }, { timeoutMs: 15000 });
             }
         });
         await driver.run();
@@ -428,7 +431,7 @@ export class FakeWaServer {
         }
         ;
         [this.rootCa, this.serverStaticKeyPair] = await Promise.all([
-            generateFakeNoiseRootCa(),
+            this.options.noiseRootCa ?? generateFakeNoiseRootCa(),
             X25519.generateKeyPair()
         ]);
         const mediaHandler = this.buildMediaRequestHandler();

package/dist/index.d.ts

@@ -6,6 +6,12 @@ export { FakePeer } from './api/FakePeer';
 export type { CreateFakePeerOptions, ExpectGroupMessageOptions, ExpectMessageOptions, ReceivedMessage, SendMessageOptions } from './api/FakePeer';
 export { FakeServerSession, FakeWaServer } from './api/FakeWaServer';
 export type { BinaryNode, ExpectIqOptions, ExpectStanzaOptions, FakeSessionKeyInfo, FakeWaServerNoiseRootCa, FakeWaServerOptions, FakeWaServerPipelineListener, StanzaMatcher, WaFakeAuthenticatedInfo, WaFakeConnectionPipeline } from './api/FakeWaServer';
+/**
+ * Signing half of the Noise root, needed only to pin
+ * {@link FakeWaServerOptions.noiseRootCa}. Readers of `server.noiseRootCa` get
+ * the public-only {@link FakeWaServerNoiseRootCa} instead.
+ */
+export type { FakeNoiseRootCa } from './protocol/auth/cert-chain';
 export { IqExpectation, Scenario } from './api/Scenario';
 export type { AuthenticatedPipelineListener, ScenarioServer } from './api/Scenario';
 export { WaFakeConnection } from './infra/WaFakeConnection';

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@zapo-js/fake-server",
-    "version": "1.2.0",
+    "version": "1.3.1",
     "description": "Fake WhatsApp Web server used to test zapo-js",
     "license": "MIT",
     "author": "vinikjkkj <contact@vinicius.email> (https://github.com/vinikjkkj)",