angelos 1.0.0

package/README.md

@@ -0,0 +1,3 @@
+# Angelos
+
+This is an npm package.

package/dist/index.cjs

@@ -0,0 +1,201 @@
+'use strict';
+
+var QRCode = require('qrcode');
+var crypto2 = require('crypto');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var QRCode__default = /*#__PURE__*/_interopDefault(QRCode);
+var crypto2__default = /*#__PURE__*/_interopDefault(crypto2);
+
+// src/qr/qrGenerator.ts
+var generateQrFromData = async (phoneNumber, token) => {
+  const encodedText = encodeURIComponent(token);
+  const dataLink = `https://wa.me/${phoneNumber}?text=${encodedText}`;
+  const deepLink = `whatsapp://send?phone=${phoneNumber}&text=${encodedText}`;
+  const qrLink = await QRCode__default.default.toDataURL(dataLink, {
+    width: 300,
+    margin: 2,
+    errorCorrectionLevel: "M"
+  });
+  const qrSvg = await QRCode__default.default.toString(dataLink, {
+    type: "svg",
+    margin: 2,
+    errorCorrectionLevel: "M"
+  });
+  return {
+    dataLink,
+    deepLink,
+    qrLink,
+    qrSvg
+  };
+};
+var verifyMetaSignature = (rawPayload, signatureHeader, secretKey) => {
+  if (!rawPayload || !signatureHeader || !secretKey) return false;
+  const [algorithm, signature] = signatureHeader.split("=");
+  const expectedSignature = crypto2__default.default.createHmac("sha256", secretKey).update(rawPayload).digest("hex");
+  const signatureBuffer = Buffer.from(signature, "utf8");
+  const expectedBuffer = Buffer.from(expectedSignature, "utf8");
+  if (signatureBuffer.length !== expectedBuffer.length) {
+    return false;
+  }
+  return crypto2__default.default.timingSafeEqual(signatureBuffer, expectedBuffer);
+};
+
+// src/webhooks/parser.ts
+var parser = (jsonData) => {
+  try {
+    const entry = jsonData?.entry?.[0];
+    const change = entry?.changes?.[0];
+    const value = change?.value;
+    const message = value?.messages?.[0];
+    if (!message || message.type !== "text") return null;
+    return {
+      sendersPhoneNumber: message.from,
+      text: message.text.body,
+      messageId: message.id,
+      timestamp: message.timestamp
+    };
+  } catch (error) {
+    return null;
+  }
+};
+
+// src/keyGenerator/keyGenerator.ts
+function generateKey(phoneNumber) {
+  return `wa_verify:${phoneNumber}`;
+}
+
+// src/whatsappverifier.ts
+var MIN_TTL_SECONDS = 30;
+var MAX_TTL_SECONDS = 3600;
+var whatsappVerifier = class {
+  storage;
+  businessPhoneNumber;
+  waVerificationKey;
+  defaultTtl;
+  constructor(config) {
+    this.storage = config.storage;
+    this.businessPhoneNumber = config.businessPhoneNumber;
+    this.waVerificationKey = config.waVerificationKey;
+    this.defaultTtl = this.validateTtl(config.defaultTtl, "defaultTtl");
+  }
+  validateTtl(ttl, label) {
+    if (!Number.isFinite(ttl) || ttl < MIN_TTL_SECONDS || ttl > MAX_TTL_SECONDS) {
+      throw new RangeError(
+        `${label} must be between ${MIN_TTL_SECONDS} and ${MAX_TTL_SECONDS} seconds, got ${ttl}`
+      );
+    }
+    return ttl;
+  }
+  async createSession(params) {
+    const id = crypto2__default.default.randomUUID();
+    const cleanPhone = params.phoneNumber.replace(/\D/g, "");
+    const ttl = params.ttl ? this.validateTtl(params.ttl, "ttl") : this.defaultTtl;
+    const token = crypto2__default.default.randomInt(1e5, 999999).toString();
+    const expiresAt = ttl * 1e3 + Date.now();
+    const sessionData = {
+      sessionId: id,
+      expectedPhoneNumber: cleanPhone,
+      token,
+      expiresAt
+    };
+    const key = generateKey(cleanPhone);
+    try {
+      await this.storage.set(key, JSON.stringify(sessionData), expiresAt);
+    } catch (error) {
+      throw new Error(
+        `Failed to store session data: ${error instanceof Error ? error.message : error}`
+      );
+    }
+    const message = `VERIFY ${id} ${token} ${expiresAt}`;
+    const { dataLink, deepLink, qrLink, qrSvg } = await generateQrFromData(
+      this.businessPhoneNumber,
+      message
+    );
+    return {
+      id,
+      token,
+      dataLink,
+      deepLink,
+      qrLink,
+      qrSvg
+    };
+  }
+  async verifySession(params) {
+    const rawBody = params.rawBody;
+    const jsonData = params.jsonData;
+    const signature = params.signature;
+    const isSignatureValid = verifyMetaSignature(rawBody, signature, this.waVerificationKey);
+    if (!isSignatureValid) {
+      return {
+        success: false,
+        message: "Invalid webhook signature"
+      };
+    }
+    const parsedData = parser(jsonData);
+    if (!parsedData) {
+      return {
+        success: false,
+        message: "Invalid or unsupported webhook message"
+      };
+    }
+    const key = generateKey(parsedData.sendersPhoneNumber.replace(/\D/g, ""));
+    let userData;
+    try {
+      const data = await this.storage.get(key);
+      if (!data) {
+        return {
+          success: false,
+          message: "Session data not found"
+        };
+      }
+      userData = JSON.parse(data);
+      await this.storage.delete(key);
+    } catch (error) {
+      return {
+        success: false,
+        message: `Failed to get/delete session data: ${error instanceof Error ? error.message : error}`
+      };
+    }
+    const messageKeyword = parsedData.text.trim().split(" ");
+    messageKeyword[1];
+    const token = messageKeyword[2];
+    const expiresAt = messageKeyword[3];
+    const tokenBuffer = Buffer.from(token ?? "", "utf8");
+    const expectedTokenBuffer = Buffer.from(userData.token, "utf8");
+    const senderPhone = parsedData.sendersPhoneNumber.replace(/\D/g, "");
+    const phoneBuffer = Buffer.from(senderPhone, "utf8");
+    const expectedPhoneBuffer = Buffer.from(userData.expectedPhoneNumber, "utf8");
+    const isTokenValid = tokenBuffer.length === expectedTokenBuffer.length && crypto2__default.default.timingSafeEqual(tokenBuffer, expectedTokenBuffer);
+    const isPhoneValid = phoneBuffer.length === expectedPhoneBuffer.length && crypto2__default.default.timingSafeEqual(phoneBuffer, expectedPhoneBuffer);
+    if (!isTokenValid || !isPhoneValid || Number(expiresAt) < Date.now()) {
+      return {
+        success: false,
+        message: "Token is invalid or expired"
+      };
+    }
+    return {
+      success: true,
+      message: "Successfully parsed the data",
+      parsedData
+    };
+  }
+  handleWebhookVerification(query) {
+    const mode = query["hub.mode"];
+    const token = query["hub.verify_token"];
+    const challenge = query["hub.challenge"];
+    if (mode === "subscribe" && token === this.waVerificationKey) {
+      return { success: true, challenge };
+    }
+    return { success: false };
+  }
+};
+var whatsappverifier_default = whatsappVerifier;
+
+// src/index.ts
+var index_default = whatsappverifier_default;
+
+module.exports = index_default;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/qr/qrGenerator.ts","../src/webhooks/signature.ts","../src/webhooks/parser.ts","../src/keyGenerator/keyGenerator.ts","../src/whatsappverifier.ts","../src/index.ts"],"names":["QRCode","crypto"],"mappings":";;;;;;;;;;;AAGO,IAAM,kBAAA,GAAqB,OAC9B,WAAA,EACA,KAAA,KAC2B;AAC3B,EAAA,MAAM,WAAA,GAAc,mBAAmB,KAAK,CAAA;AAC5C,EAAA,MAAM,QAAA,GAAW,CAAA,cAAA,EAAiB,WAAW,CAAA,MAAA,EAAS,WAAW,CAAA,CAAA;AACjE,EAAA,MAAM,QAAA,GAAW,CAAA,sBAAA,EAAyB,WAAW,CAAA,MAAA,EAAS,WAAW,CAAA,CAAA;AAEzE,EAAA,MAAM,MAAA,GAAS,MAAMA,uBAAA,CAAO,SAAA,CAAU,QAAA,EAAU;AAAA,IAC5C,KAAA,EAAO,GAAA;AAAA,IACP,MAAA,EAAQ,CAAA;AAAA,IACR,oBAAA,EAAsB;AAAA,GACzB,CAAA;AAED,EAAA,MAAM,KAAA,GAAQ,MAAMA,uBAAA,CAAO,QAAA,CAAS,QAAA,EAAU;AAAA,IAC1C,IAAA,EAAM,KAAA;AAAA,IACN,MAAA,EAAQ,CAAA;AAAA,IACR,oBAAA,EAAsB;AAAA,GACzB,CAAA;AAED,EAAA,OAAO;AAAA,IACH,QAAA;AAAA,IACA,QAAA;AAAA,IACA,MAAA;AAAA,IACA;AAAA,GACJ;AACJ,CAAA;AC3BO,IAAM,mBAAA,GAAsB,CAC/B,UAAA,EACA,eAAA,EACA,SAAA,KACC;AACD,EAAA,IAAI,CAAC,UAAA,IAAc,CAAC,eAAA,IAAmB,CAAC,WAAW,OAAO,KAAA;AAE1D,EAAA,MAAM,CAAC,SAAA,EAAW,SAAS,CAAA,GAAI,eAAA,CAAgB,MAAM,GAAG,CAAA;AAExD,EAAA,MAAM,iBAAA,GAAoBC,wBAAA,CACrB,UAAA,CAAW,QAAA,EAAU,SAAS,EAC9B,MAAA,CAAO,UAAU,CAAA,CACjB,MAAA,CAAO,KAAK,CAAA;AAEjB,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,IAAA,CAAK,SAAA,EAAW,MAAM,CAAA;AACrD,EAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,IAAA,CAAK,iBAAA,EAAmB,MAAM,CAAA;AAC5D,EAAA,IAAI,eAAA,CAAgB,MAAA,KAAW,cAAA,CAAe,MAAA,EAAQ;AAClD,IAAA,OAAO,KAAA;AAAA,EACX;AAEA,EAAA,OAAOA,wBAAA,CAAO,eAAA,CAAgB,eAAA,EAAiB,cAAc,CAAA;AACjE,CAAA;;;ACpBO,IAAM,MAAA,GAAS,CAAC,QAAA,KAA6C;AAChE,EAAA,IAAI;AACA,IAAA,MAAM,KAAA,GAAQ,QAAA,EAAU,KAAA,GAAQ,CAAC,CAAA;AACjC,IAAA,MAAM,MAAA,GAAS,KAAA,EAAO,OAAA,GAAU,CAAC,CAAA;AACjC,IAAA,MAAM,QAAQ,MAAA,EAAQ,KAAA;AACtB,IAAA,MAAM,OAAA,GAAU,KAAA,EAAO,QAAA,GAAW,CAAC,CAAA;AAEnC,IAAA,IAAI,CAAC,OAAA,IAAW,OAAA,CAAQ,IAAA,KAAS,QAAQ,OAAO,IAAA;AAEhD,IAAA,OAAO;AAAA,MACH,oBAAoB,OAAA,CAAQ,IAAA;AAAA,MAC5B,IAAA,EAAM,QAAQ,IAAA,CAAK,IAAA;AAAA,MACnB,WAAW,OAAA,CAAQ,EAAA;AAAA,MACnB,WAAW,OAAA,CAAQ;AAAA,KACvB;AAAA,EACJ,SAAS,KAAA,EAAO;AACZ,IAAA,OAAO,IAAA;AAAA,EACX;AACJ,CAAA;;;ACrBO,SAAS,YAAY,WAAA,EAA6B;AACrD,EAAA,OAAO,aAAa,WAAW,CAAA,CAAA;AACnC;;;ACeA,IAAM,eAAA,GAAkB,EAAA;AACxB,IAAM,eAAA,GAAkB,IAAA;AAExB,IAAM,mBAAN,MAAuB;AAAA,EACX,OAAA;AAAA,EACA,mBAAA;AAAA,EACA,iBAAA;AAAA,EACA,UAAA;AAAA,EAER,YAAY,MAAA,EAAgB;AACxB,IAAA,IAAA,CAAK,UAAU,MAAA,CAAO,OAAA;AACtB,IAAA,IAAA,CAAK,sBAAsB,MAAA,CAAO,mBAAA;AAClC,IAAA,IAAA,CAAK,oBAAoB,MAAA,CAAO,iBAAA;AAChC,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,WAAA,CAAY,MAAA,CAAO,YAAY,YAAY,CAAA;AAAA,EACtE;AAAA,EAEQ,WAAA,CAAY,KAAa,KAAA,EAAuB;AACpD,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,GAAG,KAAK,GAAA,GAAM,eAAA,IAAmB,MAAM,eAAA,EAAiB;AACzE,MAAA,MAAM,IAAI,UAAA;AAAA,QACN,GAAG,KAAK,CAAA,iBAAA,EAAoB,eAAe,CAAA,KAAA,EAAQ,eAAe,iBAAiB,GAAG,CAAA;AAAA,OAC1F;AAAA,IACJ;AACA,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAa,cAAc,MAAA,EAA2D;AAClF,IAAA,MAAM,EAAA,GAAKA,yBAAO,UAAA,EAAW;AAC7B,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAO,EAAE,CAAA;AACvD,IAAA,MAAM,GAAA,GAAM,OAAO,GAAA,GAAM,IAAA,CAAK,YAAY,MAAA,CAAO,GAAA,EAAK,KAAK,CAAA,GAAI,IAAA,CAAK,UAAA;AACpE,IAAA,MAAM,QAAQA,wBAAAA,CAAO,SAAA,CAAU,GAAA,EAAQ,MAAM,EAAE,QAAA,EAAS;AACxD,IAAA,MAAM,SAAA,GAAY,GAAA,GAAM,GAAA,GAAO,IAAA,CAAK,GAAA,EAAI;AAExC,IAAA,MAAM,WAAA,GAA2B;AAAA,MAC7B,SAAA,EAAW,EAAA;AAAA,MACX,mBAAA,EAAqB,UAAA;AAAA,MACrB,KAAA;AAAA,MACA;AAAA,KACJ;AAEA,IAAA,MAAM,GAAA,GAAM,YAAY,UAAU,CAAA;AAElC,IAAA,IAAI;AACA,MAAA,MAAM,IAAA,CAAK,QAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,SAAA,CAAU,WAAW,GAAG,SAAS,CAAA;AAAA,IACtE,SAAS,KAAA,EAAgB;AACrB,MAAA,MAAM,IAAI,KAAA;AAAA,QACN,CAAA,8BAAA,EAAiC,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,UAAU,KAAK,CAAA;AAAA,OACnF;AAAA,IACJ;AAEA,IAAA,MAAM,UAAU,CAAA,OAAA,EAAU,EAAE,CAAA,CAAA,EAAI,KAAK,IAAI,SAAS,CAAA,CAAA;AAClD,IAAA,MAAM,EAAE,QAAA,EAAU,QAAA,EAAU,MAAA,EAAQ,KAAA,KAAU,MAAM,kBAAA;AAAA,MAChD,IAAA,CAAK,mBAAA;AAAA,MACL;AAAA,KACJ;AAEA,IAAA,OAAO;AAAA,MACH,EAAA;AAAA,MACA,KAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA,MAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAAA,EAEA,MAAa,cAAc,MAAA,EAAgD;AACvE,IAAA,MAAM,UAAU,MAAA,CAAO,OAAA;AACvB,IAAA,MAAM,WAAW,MAAA,CAAO,QAAA;AACxB,IAAA,MAAM,YAAY,MAAA,CAAO,SAAA;AAEzB,IAAA,MAAM,gBAAA,GAAmB,mBAAA,CAAoB,OAAA,EAAS,SAAA,EAAW,KAAK,iBAAiB,CAAA;AACvF,IAAA,IAAI,CAAC,gBAAA,EAAkB;AACnB,MAAA,OAAO;AAAA,QACH,OAAA,EAAS,KAAA;AAAA,QACT,OAAA,EAAS;AAAA,OACb;AAAA,IACJ;AAEA,IAAA,MAAM,UAAA,GAAa,OAAO,QAAQ,CAAA;AAClC,IAAA,IAAI,CAAC,UAAA,EAAY;AACb,MAAA,OAAO;AAAA,QACH,OAAA,EAAS,KAAA;AAAA,QACT,OAAA,EAAS;AAAA,OACb;AAAA,IACJ;AAEA,IAAA,MAAM,MAAM,WAAA,CAAY,UAAA,CAAW,mBAAmB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA;AACxE,IAAA,IAAI,QAAA;AAEJ,IAAA,IAAI;AACA,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,IAAI,GAAG,CAAA;AACvC,MAAA,IAAI,CAAC,IAAA,EAAM;AACP,QAAA,OAAO;AAAA,UACH,OAAA,EAAS,KAAA;AAAA,UACT,OAAA,EAAS;AAAA,SACb;AAAA,MACJ;AAEA,MAAA,QAAA,GAAW,IAAA,CAAK,MAAM,IAAI,CAAA;AAC1B,MAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,GAAG,CAAA;AAAA,IACjC,SAAS,KAAA,EAAgB;AACrB,MAAA,OAAO;AAAA,QACH,OAAA,EAAS,KAAA;AAAA,QACT,SAAS,CAAA,mCAAA,EAAsC,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,UAAU,KAAK,CAAA;AAAA,OACjG;AAAA,IACJ;AAEA,IAAA,MAAM,iBAAiB,UAAA,CAAW,IAAA,CAAK,IAAA,EAAK,CAAE,MAAM,GAAG,CAAA;AACvD,IAAW,eAAe,CAAC;AAC3B,IAAA,MAAM,KAAA,GAAQ,eAAe,CAAC,CAAA;AAC9B,IAAA,MAAM,SAAA,GAAY,eAAe,CAAC,CAAA;AAElC,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,IAAA,CAAK,KAAA,IAAS,IAAI,MAAM,CAAA;AACnD,IAAA,MAAM,mBAAA,GAAsB,MAAA,CAAO,IAAA,CAAK,QAAA,CAAS,OAAO,MAAM,CAAA;AAE9D,IAAA,MAAM,WAAA,GAAc,UAAA,CAAW,kBAAA,CAAmB,OAAA,CAAQ,OAAO,EAAE,CAAA;AACnE,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,IAAA,CAAK,WAAA,EAAa,MAAM,CAAA;AACnD,IAAA,MAAM,mBAAA,GAAsB,MAAA,CAAO,IAAA,CAAK,QAAA,CAAS,qBAAqB,MAAM,CAAA;AAE5E,IAAA,MAAM,YAAA,GACF,YAAY,MAAA,KAAW,mBAAA,CAAoB,UAC3CA,wBAAAA,CAAO,eAAA,CAAgB,aAAa,mBAAmB,CAAA;AAE3D,IAAA,MAAM,YAAA,GACF,YAAY,MAAA,KAAW,mBAAA,CAAoB,UAC3CA,wBAAAA,CAAO,eAAA,CAAgB,aAAa,mBAAmB,CAAA;AAE3D,IAAA,IAAI,CAAC,gBAAgB,CAAC,YAAA,IAAgB,OAAO,SAAS,CAAA,GAAI,IAAA,CAAK,GAAA,EAAI,EAAG;AAClE,MAAA,OAAO;AAAA,QACH,OAAA,EAAS,KAAA;AAAA,QACT,OAAA,EAAS;AAAA,OACb;AAAA,IACJ;AAEA,IAAA,OAAO;AAAA,MACH,OAAA,EAAS,IAAA;AAAA,MACT,OAAA,EAAS,8BAAA;AAAA,MACT;AAAA,KACJ;AAAA,EACJ;AAAA,EAEO,0BAA0B,KAAA,EAA4D;AACzF,IAAA,MAAM,IAAA,GAAO,MAAM,UAAU,CAAA;AAC7B,IAAA,MAAM,KAAA,GAAQ,MAAM,kBAAkB,CAAA;AACtC,IAAA,MAAM,SAAA,GAAY,MAAM,eAAe,CAAA;AAEvC,IAAA,IAAI,IAAA,KAAS,WAAA,IAAe,KAAA,KAAU,IAAA,CAAK,iBAAA,EAAmB;AAC1D,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC;AAEA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC5B;AACJ,CAAA;AAEA,IAAO,wBAAA,GAAQ,gBAAA;;;ACzKf,IAAO,aAAA,GAAQ","file":"index.cjs","sourcesContent":["import QRCode from \"qrcode\";\nimport { GeneratedOrCode } from \"../types/index.js\";\n\nexport const generateQrFromData = async (\n    phoneNumber: string,\n    token: string,\n): Promise<GeneratedOrCode> => {\n    const encodedText = encodeURIComponent(token);\n    const dataLink = `https://wa.me/${phoneNumber}?text=${encodedText}`;\n    const deepLink = `whatsapp://send?phone=${phoneNumber}&text=${encodedText}`;\n\n    const qrLink = await QRCode.toDataURL(dataLink, {\n        width: 300,\n        margin: 2,\n        errorCorrectionLevel: \"M\",\n    });\n\n    const qrSvg = await QRCode.toString(dataLink, {\n        type: \"svg\",\n        margin: 2,\n        errorCorrectionLevel: \"M\",\n    });\n\n    return {\n        dataLink: dataLink,\n        deepLink: deepLink,\n        qrLink: qrLink,\n        qrSvg: qrSvg,\n    } as GeneratedOrCode;\n};\n","import crypto from \"node:crypto\";\n\nexport const verifyMetaSignature = (\n    rawPayload: Buffer,\n    signatureHeader: string,\n    secretKey: string,\n) => {\n    if (!rawPayload || !signatureHeader || !secretKey) return false;\n\n    const [algorithm, signature] = signatureHeader.split(\"=\");\n\n    const expectedSignature = crypto\n        .createHmac(\"sha256\", secretKey)\n        .update(rawPayload)\n        .digest(\"hex\");\n\n    const signatureBuffer = Buffer.from(signature, \"utf8\");\n    const expectedBuffer = Buffer.from(expectedSignature, \"utf8\");\n    if (signatureBuffer.length !== expectedBuffer.length) {\n        return false;\n    }\n\n    return crypto.timingSafeEqual(signatureBuffer, expectedBuffer);\n};\n","import { ParsedData } from \"../types/index.js\";\nimport { MetaWebhookPayload } from \"../types/internal.js\";\n\nexport const parser = (jsonData: MetaWebhookPayload): ParsedData => {\n    try {\n        const entry = jsonData?.entry?.[0];\n        const change = entry?.changes?.[0];\n        const value = change?.value;\n        const message = value?.messages?.[0];\n\n        if (!message || message.type !== \"text\") return null;\n\n        return {\n            sendersPhoneNumber: message.from,\n            text: message.text.body,\n            messageId: message.id,\n            timestamp: message.timestamp,\n        };\n    } catch (error) {\n        return null;\n    }\n};\n","export function generateKey(phoneNumber: string): string {\n    return `wa_verify:${phoneNumber}`;\n}\n","import { generateQrFromData } from \"./qr/qrGenerator.js\";\nimport {\n    Config,\n    CreateSessionConfig,\n    CreateSessionResult,\n    StorageAdapter,\n    StorageData,\n    VerifySession,\n    VerifyWebhooks,\n    WebhookVerificationQuery,\n    WebhookVerificationResult,\n} from \"./types/index.js\";\nimport crypto from \"node:crypto\";\nimport { verifyMetaSignature } from \"./webhooks/signature.js\";\nimport { parser } from \"./webhooks/parser.js\";\nimport { generateKey } from \"./keyGenerator/keyGenerator.js\";\n\nconst MIN_TTL_SECONDS = 30;\nconst MAX_TTL_SECONDS = 3600;\n\nclass whatsappVerifier {\n    private storage: StorageAdapter;\n    private businessPhoneNumber: string;\n    private waVerificationKey: string;\n    private defaultTtl: number;\n\n    constructor(config: Config) {\n        this.storage = config.storage;\n        this.businessPhoneNumber = config.businessPhoneNumber;\n        this.waVerificationKey = config.waVerificationKey;\n        this.defaultTtl = this.validateTtl(config.defaultTtl, \"defaultTtl\");\n    }\n\n    private validateTtl(ttl: number, label: string): number {\n        if (!Number.isFinite(ttl) || ttl < MIN_TTL_SECONDS || ttl > MAX_TTL_SECONDS) {\n            throw new RangeError(\n                `${label} must be between ${MIN_TTL_SECONDS} and ${MAX_TTL_SECONDS} seconds, got ${ttl}`,\n            );\n        }\n        return ttl;\n    }\n\n    public async createSession(params: CreateSessionConfig): Promise<CreateSessionResult> {\n        const id = crypto.randomUUID();\n        const cleanPhone = params.phoneNumber.replace(/\\D/g, \"\");\n        const ttl = params.ttl ? this.validateTtl(params.ttl, \"ttl\") : this.defaultTtl;\n        const token = crypto.randomInt(100000, 999999).toString();\n        const expiresAt = ttl * 1000 + Date.now();\n\n        const sessionData: StorageData = {\n            sessionId: id,\n            expectedPhoneNumber: cleanPhone,\n            token: token,\n            expiresAt: expiresAt,\n        };\n\n        const key = generateKey(cleanPhone);\n\n        try {\n            await this.storage.set(key, JSON.stringify(sessionData), expiresAt);\n        } catch (error: unknown) {\n            throw new Error(\n                `Failed to store session data: ${error instanceof Error ? error.message : error}`,\n            );\n        }\n\n        const message = `VERIFY ${id} ${token} ${expiresAt}`;\n        const { dataLink, deepLink, qrLink, qrSvg } = await generateQrFromData(\n            this.businessPhoneNumber,\n            message,\n        );\n\n        return {\n            id,\n            token,\n            dataLink,\n            deepLink,\n            qrLink,\n            qrSvg,\n        };\n    }\n\n    public async verifySession(params: VerifyWebhooks): Promise<VerifySession> {\n        const rawBody = params.rawBody;\n        const jsonData = params.jsonData;\n        const signature = params.signature;\n\n        const isSignatureValid = verifyMetaSignature(rawBody, signature, this.waVerificationKey);\n        if (!isSignatureValid) {\n            return {\n                success: false,\n                message: \"Invalid webhook signature\",\n            };\n        }\n\n        const parsedData = parser(jsonData);\n        if (!parsedData) {\n            return {\n                success: false,\n                message: \"Invalid or unsupported webhook message\",\n            };\n        }\n\n        const key = generateKey(parsedData.sendersPhoneNumber.replace(/\\D/g, \"\"));\n        let userData;\n\n        try {\n            const data = await this.storage.get(key);\n            if (!data) {\n                return {\n                    success: false,\n                    message: \"Session data not found\",\n                };\n            }\n\n            userData = JSON.parse(data) as StorageData;\n            await this.storage.delete(key);\n        } catch (error: unknown) {\n            return {\n                success: false,\n                message: `Failed to get/delete session data: ${error instanceof Error ? error.message : error}`,\n            };\n        }\n\n        const messageKeyword = parsedData.text.trim().split(\" \");\n        const id = messageKeyword[1];\n        const token = messageKeyword[2];\n        const expiresAt = messageKeyword[3];\n\n        const tokenBuffer = Buffer.from(token ?? \"\", \"utf8\");\n        const expectedTokenBuffer = Buffer.from(userData.token, \"utf8\");\n\n        const senderPhone = parsedData.sendersPhoneNumber.replace(/\\D/g, \"\");\n        const phoneBuffer = Buffer.from(senderPhone, \"utf8\");\n        const expectedPhoneBuffer = Buffer.from(userData.expectedPhoneNumber, \"utf8\");\n\n        const isTokenValid =\n            tokenBuffer.length === expectedTokenBuffer.length &&\n            crypto.timingSafeEqual(tokenBuffer, expectedTokenBuffer);\n\n        const isPhoneValid =\n            phoneBuffer.length === expectedPhoneBuffer.length &&\n            crypto.timingSafeEqual(phoneBuffer, expectedPhoneBuffer);\n\n        if (!isTokenValid || !isPhoneValid || Number(expiresAt) < Date.now()) {\n            return {\n                success: false,\n                message: \"Token is invalid or expired\",\n            };\n        }\n\n        return {\n            success: true,\n            message: \"Successfully parsed the data\",\n            parsedData: parsedData,\n        };\n    }\n\n    public handleWebhookVerification(query: WebhookVerificationQuery): WebhookVerificationResult {\n        const mode = query[\"hub.mode\"];\n        const token = query[\"hub.verify_token\"];\n        const challenge = query[\"hub.challenge\"];\n\n        if (mode === \"subscribe\" && token === this.waVerificationKey) {\n            return { success: true, challenge };\n        }\n\n        return { success: false };\n    }\n}\n\nexport default whatsappVerifier;\n","import whatsappVerifier from \"./whatsappverifier.js\";\n\nexport default whatsappVerifier;\nexport * from \"./types/index.js\";\n"]}

package/dist/index.d.cts

@@ -0,0 +1,128 @@
+interface MetaWebhookTextMessage {
+    from: string;
+    id: string;
+    timestamp: string;
+    type: "text";
+    text: {
+        body: string;
+    };
+}
+interface MetaWebhookOtherMessage {
+    from: string;
+    id: string;
+    timestamp: string;
+    type: "image" | "audio" | "document" | "video" | "sticker" | "button" | "interactive" | "unknown";
+    [key: string]: unknown;
+}
+type MetaWebhookMessage = MetaWebhookTextMessage | MetaWebhookOtherMessage;
+interface MetaWebhookStatus {
+    id: string;
+    status: "sent" | "delivered" | "read" | "failed";
+    timestamp: string;
+    recipient_id: string;
+}
+interface MetaWebhookValue {
+    messaging_product: "whatsapp";
+    metadata: {
+        display_phone_number: string;
+        phone_number_id: string;
+    };
+    contacts?: {
+        profile: {
+            name: string;
+        };
+        wa_id: string;
+    }[];
+    messages?: MetaWebhookMessage[];
+    statuses?: MetaWebhookStatus[];
+}
+interface MetaWebhookChange {
+    field: "messages";
+    value: MetaWebhookValue;
+}
+interface MetaWebhookEntry {
+    id: string;
+    changes: MetaWebhookChange[];
+}
+interface MetaWebhookPayload {
+    object: "whatsapp_business_account";
+    entry?: MetaWebhookEntry[];
+}
+
+/**
+ * Types for configuration of new class
+ */
+interface Config {
+    businessPhoneNumber: string;
+    waVerificationKey: string;
+    storage: any;
+    defaultTtl: number;
+}
+/**
+ * Data stored in external driver provided by adapter
+ */
+interface StorageData {
+    sessionId: string;
+    expectedPhoneNumber: string;
+    token: string;
+    expiresAt: number;
+}
+interface StorageAdapter {
+    get(key: string): Promise<string> | string;
+    set(key: string, value: string, expiresAt: number): Promise<void> | void;
+    delete(key: string): Promise<void> | void;
+}
+interface CreateSessionConfig {
+    phoneNumber: string;
+    ttl?: number;
+}
+interface GeneratedOrCode {
+    dataLink: string;
+    deepLink: string;
+    qrLink: string;
+    qrSvg: string;
+}
+interface CreateSessionResult extends GeneratedOrCode {
+    id: string;
+    token: string;
+}
+interface VerifyWebhooks {
+    rawBody: Buffer;
+    signature: string;
+    jsonData: MetaWebhookPayload;
+}
+interface ParsedDataOutputs {
+    sendersPhoneNumber: string;
+    text: string;
+    messageId: string;
+    timestamp: string;
+}
+type ParsedData = ParsedDataOutputs | null;
+interface VerifySession {
+    success: boolean;
+    message: string;
+    parsedData?: ParsedDataOutputs;
+}
+interface WebhookVerificationQuery {
+    "hub.mode": string;
+    "hub.verify_token": string;
+    "hub.challenge": string;
+}
+interface WebhookVerificationResult {
+    success: boolean;
+    challenge?: string;
+}
+
+declare class whatsappVerifier {
+    private storage;
+    private businessPhoneNumber;
+    private waVerificationKey;
+    private defaultTtl;
+    constructor(config: Config);
+    private validateTtl;
+    createSession(params: CreateSessionConfig): Promise<CreateSessionResult>;
+    verifySession(params: VerifyWebhooks): Promise<VerifySession>;
+    handleWebhookVerification(query: WebhookVerificationQuery): WebhookVerificationResult;
+}
+
+export { type Config, type CreateSessionConfig, type CreateSessionResult, type GeneratedOrCode, type ParsedData, type ParsedDataOutputs, type StorageAdapter, type StorageData, type VerifySession, type VerifyWebhooks, type WebhookVerificationQuery, type WebhookVerificationResult, whatsappVerifier as default };

package/dist/index.d.ts

@@ -0,0 +1,128 @@
+interface MetaWebhookTextMessage {
+    from: string;
+    id: string;
+    timestamp: string;
+    type: "text";
+    text: {
+        body: string;
+    };
+}
+interface MetaWebhookOtherMessage {
+    from: string;
+    id: string;
+    timestamp: string;
+    type: "image" | "audio" | "document" | "video" | "sticker" | "button" | "interactive" | "unknown";
+    [key: string]: unknown;
+}
+type MetaWebhookMessage = MetaWebhookTextMessage | MetaWebhookOtherMessage;
+interface MetaWebhookStatus {
+    id: string;
+    status: "sent" | "delivered" | "read" | "failed";
+    timestamp: string;
+    recipient_id: string;
+}
+interface MetaWebhookValue {
+    messaging_product: "whatsapp";
+    metadata: {
+        display_phone_number: string;
+        phone_number_id: string;
+    };
+    contacts?: {
+        profile: {
+            name: string;
+        };
+        wa_id: string;
+    }[];
+    messages?: MetaWebhookMessage[];
+    statuses?: MetaWebhookStatus[];
+}
+interface MetaWebhookChange {
+    field: "messages";
+    value: MetaWebhookValue;
+}
+interface MetaWebhookEntry {
+    id: string;
+    changes: MetaWebhookChange[];
+}
+interface MetaWebhookPayload {
+    object: "whatsapp_business_account";
+    entry?: MetaWebhookEntry[];
+}
+
+/**
+ * Types for configuration of new class
+ */
+interface Config {
+    businessPhoneNumber: string;
+    waVerificationKey: string;
+    storage: any;
+    defaultTtl: number;
+}
+/**
+ * Data stored in external driver provided by adapter
+ */
+interface StorageData {
+    sessionId: string;
+    expectedPhoneNumber: string;
+    token: string;
+    expiresAt: number;
+}
+interface StorageAdapter {
+    get(key: string): Promise<string> | string;
+    set(key: string, value: string, expiresAt: number): Promise<void> | void;
+    delete(key: string): Promise<void> | void;
+}
+interface CreateSessionConfig {
+    phoneNumber: string;
+    ttl?: number;
+}
+interface GeneratedOrCode {
+    dataLink: string;
+    deepLink: string;
+    qrLink: string;
+    qrSvg: string;
+}
+interface CreateSessionResult extends GeneratedOrCode {
+    id: string;
+    token: string;
+}
+interface VerifyWebhooks {
+    rawBody: Buffer;
+    signature: string;
+    jsonData: MetaWebhookPayload;
+}
+interface ParsedDataOutputs {
+    sendersPhoneNumber: string;
+    text: string;
+    messageId: string;
+    timestamp: string;
+}
+type ParsedData = ParsedDataOutputs | null;
+interface VerifySession {
+    success: boolean;
+    message: string;
+    parsedData?: ParsedDataOutputs;
+}
+interface WebhookVerificationQuery {
+    "hub.mode": string;
+    "hub.verify_token": string;
+    "hub.challenge": string;
+}
+interface WebhookVerificationResult {
+    success: boolean;
+    challenge?: string;
+}
+
+declare class whatsappVerifier {
+    private storage;
+    private businessPhoneNumber;
+    private waVerificationKey;
+    private defaultTtl;
+    constructor(config: Config);
+    private validateTtl;
+    createSession(params: CreateSessionConfig): Promise<CreateSessionResult>;
+    verifySession(params: VerifyWebhooks): Promise<VerifySession>;
+    handleWebhookVerification(query: WebhookVerificationQuery): WebhookVerificationResult;
+}
+
+export { type Config, type CreateSessionConfig, type CreateSessionResult, type GeneratedOrCode, type ParsedData, type ParsedDataOutputs, type StorageAdapter, type StorageData, type VerifySession, type VerifyWebhooks, type WebhookVerificationQuery, type WebhookVerificationResult, whatsappVerifier as default };

package/dist/index.mjs

@@ -0,0 +1,194 @@
+import QRCode from 'qrcode';
+import crypto2 from 'crypto';
+
+// src/qr/qrGenerator.ts
+var generateQrFromData = async (phoneNumber, token) => {
+  const encodedText = encodeURIComponent(token);
+  const dataLink = `https://wa.me/${phoneNumber}?text=${encodedText}`;
+  const deepLink = `whatsapp://send?phone=${phoneNumber}&text=${encodedText}`;
+  const qrLink = await QRCode.toDataURL(dataLink, {
+    width: 300,
+    margin: 2,
+    errorCorrectionLevel: "M"
+  });
+  const qrSvg = await QRCode.toString(dataLink, {
+    type: "svg",
+    margin: 2,
+    errorCorrectionLevel: "M"
+  });
+  return {
+    dataLink,
+    deepLink,
+    qrLink,
+    qrSvg
+  };
+};
+var verifyMetaSignature = (rawPayload, signatureHeader, secretKey) => {
+  if (!rawPayload || !signatureHeader || !secretKey) return false;
+  const [algorithm, signature] = signatureHeader.split("=");
+  const expectedSignature = crypto2.createHmac("sha256", secretKey).update(rawPayload).digest("hex");
+  const signatureBuffer = Buffer.from(signature, "utf8");
+  const expectedBuffer = Buffer.from(expectedSignature, "utf8");
+  if (signatureBuffer.length !== expectedBuffer.length) {
+    return false;
+  }
+  return crypto2.timingSafeEqual(signatureBuffer, expectedBuffer);
+};
+
+// src/webhooks/parser.ts
+var parser = (jsonData) => {
+  try {
+    const entry = jsonData?.entry?.[0];
+    const change = entry?.changes?.[0];
+    const value = change?.value;
+    const message = value?.messages?.[0];
+    if (!message || message.type !== "text") return null;
+    return {
+      sendersPhoneNumber: message.from,
+      text: message.text.body,
+      messageId: message.id,
+      timestamp: message.timestamp
+    };
+  } catch (error) {
+    return null;
+  }
+};
+
+// src/keyGenerator/keyGenerator.ts
+function generateKey(phoneNumber) {
+  return `wa_verify:${phoneNumber}`;
+}
+
+// src/whatsappverifier.ts
+var MIN_TTL_SECONDS = 30;
+var MAX_TTL_SECONDS = 3600;
+var whatsappVerifier = class {
+  storage;
+  businessPhoneNumber;
+  waVerificationKey;
+  defaultTtl;
+  constructor(config) {
+    this.storage = config.storage;
+    this.businessPhoneNumber = config.businessPhoneNumber;
+    this.waVerificationKey = config.waVerificationKey;
+    this.defaultTtl = this.validateTtl(config.defaultTtl, "defaultTtl");
+  }
+  validateTtl(ttl, label) {
+    if (!Number.isFinite(ttl) || ttl < MIN_TTL_SECONDS || ttl > MAX_TTL_SECONDS) {
+      throw new RangeError(
+        `${label} must be between ${MIN_TTL_SECONDS} and ${MAX_TTL_SECONDS} seconds, got ${ttl}`
+      );
+    }
+    return ttl;
+  }
+  async createSession(params) {
+    const id = crypto2.randomUUID();
+    const cleanPhone = params.phoneNumber.replace(/\D/g, "");
+    const ttl = params.ttl ? this.validateTtl(params.ttl, "ttl") : this.defaultTtl;
+    const token = crypto2.randomInt(1e5, 999999).toString();
+    const expiresAt = ttl * 1e3 + Date.now();
+    const sessionData = {
+      sessionId: id,
+      expectedPhoneNumber: cleanPhone,
+      token,
+      expiresAt
+    };
+    const key = generateKey(cleanPhone);
+    try {
+      await this.storage.set(key, JSON.stringify(sessionData), expiresAt);
+    } catch (error) {
+      throw new Error(
+        `Failed to store session data: ${error instanceof Error ? error.message : error}`
+      );
+    }
+    const message = `VERIFY ${id} ${token} ${expiresAt}`;
+    const { dataLink, deepLink, qrLink, qrSvg } = await generateQrFromData(
+      this.businessPhoneNumber,
+      message
+    );
+    return {
+      id,
+      token,
+      dataLink,
+      deepLink,
+      qrLink,
+      qrSvg
+    };
+  }
+  async verifySession(params) {
+    const rawBody = params.rawBody;
+    const jsonData = params.jsonData;
+    const signature = params.signature;
+    const isSignatureValid = verifyMetaSignature(rawBody, signature, this.waVerificationKey);
+    if (!isSignatureValid) {
+      return {
+        success: false,
+        message: "Invalid webhook signature"
+      };
+    }
+    const parsedData = parser(jsonData);
+    if (!parsedData) {
+      return {
+        success: false,
+        message: "Invalid or unsupported webhook message"
+      };
+    }
+    const key = generateKey(parsedData.sendersPhoneNumber.replace(/\D/g, ""));
+    let userData;
+    try {
+      const data = await this.storage.get(key);
+      if (!data) {
+        return {
+          success: false,
+          message: "Session data not found"
+        };
+      }
+      userData = JSON.parse(data);
+      await this.storage.delete(key);
+    } catch (error) {
+      return {
+        success: false,
+        message: `Failed to get/delete session data: ${error instanceof Error ? error.message : error}`
+      };
+    }
+    const messageKeyword = parsedData.text.trim().split(" ");
+    messageKeyword[1];
+    const token = messageKeyword[2];
+    const expiresAt = messageKeyword[3];
+    const tokenBuffer = Buffer.from(token ?? "", "utf8");
+    const expectedTokenBuffer = Buffer.from(userData.token, "utf8");
+    const senderPhone = parsedData.sendersPhoneNumber.replace(/\D/g, "");
+    const phoneBuffer = Buffer.from(senderPhone, "utf8");
+    const expectedPhoneBuffer = Buffer.from(userData.expectedPhoneNumber, "utf8");
+    const isTokenValid = tokenBuffer.length === expectedTokenBuffer.length && crypto2.timingSafeEqual(tokenBuffer, expectedTokenBuffer);
+    const isPhoneValid = phoneBuffer.length === expectedPhoneBuffer.length && crypto2.timingSafeEqual(phoneBuffer, expectedPhoneBuffer);
+    if (!isTokenValid || !isPhoneValid || Number(expiresAt) < Date.now()) {
+      return {
+        success: false,
+        message: "Token is invalid or expired"
+      };
+    }
+    return {
+      success: true,
+      message: "Successfully parsed the data",
+      parsedData
+    };
+  }
+  handleWebhookVerification(query) {
+    const mode = query["hub.mode"];
+    const token = query["hub.verify_token"];
+    const challenge = query["hub.challenge"];
+    if (mode === "subscribe" && token === this.waVerificationKey) {
+      return { success: true, challenge };
+    }
+    return { success: false };
+  }
+};
+var whatsappverifier_default = whatsappVerifier;
+
+// src/index.ts
+var index_default = whatsappverifier_default;
+
+export { index_default as default };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/qr/qrGenerator.ts","../src/webhooks/signature.ts","../src/webhooks/parser.ts","../src/keyGenerator/keyGenerator.ts","../src/whatsappverifier.ts","../src/index.ts"],"names":["crypto"],"mappings":";;;;AAGO,IAAM,kBAAA,GAAqB,OAC9B,WAAA,EACA,KAAA,KAC2B;AAC3B,EAAA,MAAM,WAAA,GAAc,mBAAmB,KAAK,CAAA;AAC5C,EAAA,MAAM,QAAA,GAAW,CAAA,cAAA,EAAiB,WAAW,CAAA,MAAA,EAAS,WAAW,CAAA,CAAA;AACjE,EAAA,MAAM,QAAA,GAAW,CAAA,sBAAA,EAAyB,WAAW,CAAA,MAAA,EAAS,WAAW,CAAA,CAAA;AAEzE,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,SAAA,CAAU,QAAA,EAAU;AAAA,IAC5C,KAAA,EAAO,GAAA;AAAA,IACP,MAAA,EAAQ,CAAA;AAAA,IACR,oBAAA,EAAsB;AAAA,GACzB,CAAA;AAED,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,QAAA,CAAS,QAAA,EAAU;AAAA,IAC1C,IAAA,EAAM,KAAA;AAAA,IACN,MAAA,EAAQ,CAAA;AAAA,IACR,oBAAA,EAAsB;AAAA,GACzB,CAAA;AAED,EAAA,OAAO;AAAA,IACH,QAAA;AAAA,IACA,QAAA;AAAA,IACA,MAAA;AAAA,IACA;AAAA,GACJ;AACJ,CAAA;AC3BO,IAAM,mBAAA,GAAsB,CAC/B,UAAA,EACA,eAAA,EACA,SAAA,KACC;AACD,EAAA,IAAI,CAAC,UAAA,IAAc,CAAC,eAAA,IAAmB,CAAC,WAAW,OAAO,KAAA;AAE1D,EAAA,MAAM,CAAC,SAAA,EAAW,SAAS,CAAA,GAAI,eAAA,CAAgB,MAAM,GAAG,CAAA;AAExD,EAAA,MAAM,iBAAA,GAAoBA,OAAA,CACrB,UAAA,CAAW,QAAA,EAAU,SAAS,EAC9B,MAAA,CAAO,UAAU,CAAA,CACjB,MAAA,CAAO,KAAK,CAAA;AAEjB,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,IAAA,CAAK,SAAA,EAAW,MAAM,CAAA;AACrD,EAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,IAAA,CAAK,iBAAA,EAAmB,MAAM,CAAA;AAC5D,EAAA,IAAI,eAAA,CAAgB,MAAA,KAAW,cAAA,CAAe,MAAA,EAAQ;AAClD,IAAA,OAAO,KAAA;AAAA,EACX;AAEA,EAAA,OAAOA,OAAA,CAAO,eAAA,CAAgB,eAAA,EAAiB,cAAc,CAAA;AACjE,CAAA;;;ACpBO,IAAM,MAAA,GAAS,CAAC,QAAA,KAA6C;AAChE,EAAA,IAAI;AACA,IAAA,MAAM,KAAA,GAAQ,QAAA,EAAU,KAAA,GAAQ,CAAC,CAAA;AACjC,IAAA,MAAM,MAAA,GAAS,KAAA,EAAO,OAAA,GAAU,CAAC,CAAA;AACjC,IAAA,MAAM,QAAQ,MAAA,EAAQ,KAAA;AACtB,IAAA,MAAM,OAAA,GAAU,KAAA,EAAO,QAAA,GAAW,CAAC,CAAA;AAEnC,IAAA,IAAI,CAAC,OAAA,IAAW,OAAA,CAAQ,IAAA,KAAS,QAAQ,OAAO,IAAA;AAEhD,IAAA,OAAO;AAAA,MACH,oBAAoB,OAAA,CAAQ,IAAA;AAAA,MAC5B,IAAA,EAAM,QAAQ,IAAA,CAAK,IAAA;AAAA,MACnB,WAAW,OAAA,CAAQ,EAAA;AAAA,MACnB,WAAW,OAAA,CAAQ;AAAA,KACvB;AAAA,EACJ,SAAS,KAAA,EAAO;AACZ,IAAA,OAAO,IAAA;AAAA,EACX;AACJ,CAAA;;;ACrBO,SAAS,YAAY,WAAA,EAA6B;AACrD,EAAA,OAAO,aAAa,WAAW,CAAA,CAAA;AACnC;;;ACeA,IAAM,eAAA,GAAkB,EAAA;AACxB,IAAM,eAAA,GAAkB,IAAA;AAExB,IAAM,mBAAN,MAAuB;AAAA,EACX,OAAA;AAAA,EACA,mBAAA;AAAA,EACA,iBAAA;AAAA,EACA,UAAA;AAAA,EAER,YAAY,MAAA,EAAgB;AACxB,IAAA,IAAA,CAAK,UAAU,MAAA,CAAO,OAAA;AACtB,IAAA,IAAA,CAAK,sBAAsB,MAAA,CAAO,mBAAA;AAClC,IAAA,IAAA,CAAK,oBAAoB,MAAA,CAAO,iBAAA;AAChC,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,WAAA,CAAY,MAAA,CAAO,YAAY,YAAY,CAAA;AAAA,EACtE;AAAA,EAEQ,WAAA,CAAY,KAAa,KAAA,EAAuB;AACpD,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,GAAG,KAAK,GAAA,GAAM,eAAA,IAAmB,MAAM,eAAA,EAAiB;AACzE,MAAA,MAAM,IAAI,UAAA;AAAA,QACN,GAAG,KAAK,CAAA,iBAAA,EAAoB,eAAe,CAAA,KAAA,EAAQ,eAAe,iBAAiB,GAAG,CAAA;AAAA,OAC1F;AAAA,IACJ;AACA,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAa,cAAc,MAAA,EAA2D;AAClF,IAAA,MAAM,EAAA,GAAKA,QAAO,UAAA,EAAW;AAC7B,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAO,EAAE,CAAA;AACvD,IAAA,MAAM,GAAA,GAAM,OAAO,GAAA,GAAM,IAAA,CAAK,YAAY,MAAA,CAAO,GAAA,EAAK,KAAK,CAAA,GAAI,IAAA,CAAK,UAAA;AACpE,IAAA,MAAM,QAAQA,OAAAA,CAAO,SAAA,CAAU,GAAA,EAAQ,MAAM,EAAE,QAAA,EAAS;AACxD,IAAA,MAAM,SAAA,GAAY,GAAA,GAAM,GAAA,GAAO,IAAA,CAAK,GAAA,EAAI;AAExC,IAAA,MAAM,WAAA,GAA2B;AAAA,MAC7B,SAAA,EAAW,EAAA;AAAA,MACX,mBAAA,EAAqB,UAAA;AAAA,MACrB,KAAA;AAAA,MACA;AAAA,KACJ;AAEA,IAAA,MAAM,GAAA,GAAM,YAAY,UAAU,CAAA;AAElC,IAAA,IAAI;AACA,MAAA,MAAM,IAAA,CAAK,QAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,SAAA,CAAU,WAAW,GAAG,SAAS,CAAA;AAAA,IACtE,SAAS,KAAA,EAAgB;AACrB,MAAA,MAAM,IAAI,KAAA;AAAA,QACN,CAAA,8BAAA,EAAiC,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,UAAU,KAAK,CAAA;AAAA,OACnF;AAAA,IACJ;AAEA,IAAA,MAAM,UAAU,CAAA,OAAA,EAAU,EAAE,CAAA,CAAA,EAAI,KAAK,IAAI,SAAS,CAAA,CAAA;AAClD,IAAA,MAAM,EAAE,QAAA,EAAU,QAAA,EAAU,MAAA,EAAQ,KAAA,KAAU,MAAM,kBAAA;AAAA,MAChD,IAAA,CAAK,mBAAA;AAAA,MACL;AAAA,KACJ;AAEA,IAAA,OAAO;AAAA,MACH,EAAA;AAAA,MACA,KAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA,MAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAAA,EAEA,MAAa,cAAc,MAAA,EAAgD;AACvE,IAAA,MAAM,UAAU,MAAA,CAAO,OAAA;AACvB,IAAA,MAAM,WAAW,MAAA,CAAO,QAAA;AACxB,IAAA,MAAM,YAAY,MAAA,CAAO,SAAA;AAEzB,IAAA,MAAM,gBAAA,GAAmB,mBAAA,CAAoB,OAAA,EAAS,SAAA,EAAW,KAAK,iBAAiB,CAAA;AACvF,IAAA,IAAI,CAAC,gBAAA,EAAkB;AACnB,MAAA,OAAO;AAAA,QACH,OAAA,EAAS,KAAA;AAAA,QACT,OAAA,EAAS;AAAA,OACb;AAAA,IACJ;AAEA,IAAA,MAAM,UAAA,GAAa,OAAO,QAAQ,CAAA;AAClC,IAAA,IAAI,CAAC,UAAA,EAAY;AACb,MAAA,OAAO;AAAA,QACH,OAAA,EAAS,KAAA;AAAA,QACT,OAAA,EAAS;AAAA,OACb;AAAA,IACJ;AAEA,IAAA,MAAM,MAAM,WAAA,CAAY,UAAA,CAAW,mBAAmB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA;AACxE,IAAA,IAAI,QAAA;AAEJ,IAAA,IAAI;AACA,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,IAAI,GAAG,CAAA;AACvC,MAAA,IAAI,CAAC,IAAA,EAAM;AACP,QAAA,OAAO;AAAA,UACH,OAAA,EAAS,KAAA;AAAA,UACT,OAAA,EAAS;AAAA,SACb;AAAA,MACJ;AAEA,MAAA,QAAA,GAAW,IAAA,CAAK,MAAM,IAAI,CAAA;AAC1B,MAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,GAAG,CAAA;AAAA,IACjC,SAAS,KAAA,EAAgB;AACrB,MAAA,OAAO;AAAA,QACH,OAAA,EAAS,KAAA;AAAA,QACT,SAAS,CAAA,mCAAA,EAAsC,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,UAAU,KAAK,CAAA;AAAA,OACjG;AAAA,IACJ;AAEA,IAAA,MAAM,iBAAiB,UAAA,CAAW,IAAA,CAAK,IAAA,EAAK,CAAE,MAAM,GAAG,CAAA;AACvD,IAAW,eAAe,CAAC;AAC3B,IAAA,MAAM,KAAA,GAAQ,eAAe,CAAC,CAAA;AAC9B,IAAA,MAAM,SAAA,GAAY,eAAe,CAAC,CAAA;AAElC,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,IAAA,CAAK,KAAA,IAAS,IAAI,MAAM,CAAA;AACnD,IAAA,MAAM,mBAAA,GAAsB,MAAA,CAAO,IAAA,CAAK,QAAA,CAAS,OAAO,MAAM,CAAA;AAE9D,IAAA,MAAM,WAAA,GAAc,UAAA,CAAW,kBAAA,CAAmB,OAAA,CAAQ,OAAO,EAAE,CAAA;AACnE,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,IAAA,CAAK,WAAA,EAAa,MAAM,CAAA;AACnD,IAAA,MAAM,mBAAA,GAAsB,MAAA,CAAO,IAAA,CAAK,QAAA,CAAS,qBAAqB,MAAM,CAAA;AAE5E,IAAA,MAAM,YAAA,GACF,YAAY,MAAA,KAAW,mBAAA,CAAoB,UAC3CA,OAAAA,CAAO,eAAA,CAAgB,aAAa,mBAAmB,CAAA;AAE3D,IAAA,MAAM,YAAA,GACF,YAAY,MAAA,KAAW,mBAAA,CAAoB,UAC3CA,OAAAA,CAAO,eAAA,CAAgB,aAAa,mBAAmB,CAAA;AAE3D,IAAA,IAAI,CAAC,gBAAgB,CAAC,YAAA,IAAgB,OAAO,SAAS,CAAA,GAAI,IAAA,CAAK,GAAA,EAAI,EAAG;AAClE,MAAA,OAAO;AAAA,QACH,OAAA,EAAS,KAAA;AAAA,QACT,OAAA,EAAS;AAAA,OACb;AAAA,IACJ;AAEA,IAAA,OAAO;AAAA,MACH,OAAA,EAAS,IAAA;AAAA,MACT,OAAA,EAAS,8BAAA;AAAA,MACT;AAAA,KACJ;AAAA,EACJ;AAAA,EAEO,0BAA0B,KAAA,EAA4D;AACzF,IAAA,MAAM,IAAA,GAAO,MAAM,UAAU,CAAA;AAC7B,IAAA,MAAM,KAAA,GAAQ,MAAM,kBAAkB,CAAA;AACtC,IAAA,MAAM,SAAA,GAAY,MAAM,eAAe,CAAA;AAEvC,IAAA,IAAI,IAAA,KAAS,WAAA,IAAe,KAAA,KAAU,IAAA,CAAK,iBAAA,EAAmB;AAC1D,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC;AAEA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC5B;AACJ,CAAA;AAEA,IAAO,wBAAA,GAAQ,gBAAA;;;ACzKf,IAAO,aAAA,GAAQ","file":"index.mjs","sourcesContent":["import QRCode from \"qrcode\";\nimport { GeneratedOrCode } from \"../types/index.js\";\n\nexport const generateQrFromData = async (\n    phoneNumber: string,\n    token: string,\n): Promise<GeneratedOrCode> => {\n    const encodedText = encodeURIComponent(token);\n    const dataLink = `https://wa.me/${phoneNumber}?text=${encodedText}`;\n    const deepLink = `whatsapp://send?phone=${phoneNumber}&text=${encodedText}`;\n\n    const qrLink = await QRCode.toDataURL(dataLink, {\n        width: 300,\n        margin: 2,\n        errorCorrectionLevel: \"M\",\n    });\n\n    const qrSvg = await QRCode.toString(dataLink, {\n        type: \"svg\",\n        margin: 2,\n        errorCorrectionLevel: \"M\",\n    });\n\n    return {\n        dataLink: dataLink,\n        deepLink: deepLink,\n        qrLink: qrLink,\n        qrSvg: qrSvg,\n    } as GeneratedOrCode;\n};\n","import crypto from \"node:crypto\";\n\nexport const verifyMetaSignature = (\n    rawPayload: Buffer,\n    signatureHeader: string,\n    secretKey: string,\n) => {\n    if (!rawPayload || !signatureHeader || !secretKey) return false;\n\n    const [algorithm, signature] = signatureHeader.split(\"=\");\n\n    const expectedSignature = crypto\n        .createHmac(\"sha256\", secretKey)\n        .update(rawPayload)\n        .digest(\"hex\");\n\n    const signatureBuffer = Buffer.from(signature, \"utf8\");\n    const expectedBuffer = Buffer.from(expectedSignature, \"utf8\");\n    if (signatureBuffer.length !== expectedBuffer.length) {\n        return false;\n    }\n\n    return crypto.timingSafeEqual(signatureBuffer, expectedBuffer);\n};\n","import { ParsedData } from \"../types/index.js\";\nimport { MetaWebhookPayload } from \"../types/internal.js\";\n\nexport const parser = (jsonData: MetaWebhookPayload): ParsedData => {\n    try {\n        const entry = jsonData?.entry?.[0];\n        const change = entry?.changes?.[0];\n        const value = change?.value;\n        const message = value?.messages?.[0];\n\n        if (!message || message.type !== \"text\") return null;\n\n        return {\n            sendersPhoneNumber: message.from,\n            text: message.text.body,\n            messageId: message.id,\n            timestamp: message.timestamp,\n        };\n    } catch (error) {\n        return null;\n    }\n};\n","export function generateKey(phoneNumber: string): string {\n    return `wa_verify:${phoneNumber}`;\n}\n","import { generateQrFromData } from \"./qr/qrGenerator.js\";\nimport {\n    Config,\n    CreateSessionConfig,\n    CreateSessionResult,\n    StorageAdapter,\n    StorageData,\n    VerifySession,\n    VerifyWebhooks,\n    WebhookVerificationQuery,\n    WebhookVerificationResult,\n} from \"./types/index.js\";\nimport crypto from \"node:crypto\";\nimport { verifyMetaSignature } from \"./webhooks/signature.js\";\nimport { parser } from \"./webhooks/parser.js\";\nimport { generateKey } from \"./keyGenerator/keyGenerator.js\";\n\nconst MIN_TTL_SECONDS = 30;\nconst MAX_TTL_SECONDS = 3600;\n\nclass whatsappVerifier {\n    private storage: StorageAdapter;\n    private businessPhoneNumber: string;\n    private waVerificationKey: string;\n    private defaultTtl: number;\n\n    constructor(config: Config) {\n        this.storage = config.storage;\n        this.businessPhoneNumber = config.businessPhoneNumber;\n        this.waVerificationKey = config.waVerificationKey;\n        this.defaultTtl = this.validateTtl(config.defaultTtl, \"defaultTtl\");\n    }\n\n    private validateTtl(ttl: number, label: string): number {\n        if (!Number.isFinite(ttl) || ttl < MIN_TTL_SECONDS || ttl > MAX_TTL_SECONDS) {\n            throw new RangeError(\n                `${label} must be between ${MIN_TTL_SECONDS} and ${MAX_TTL_SECONDS} seconds, got ${ttl}`,\n            );\n        }\n        return ttl;\n    }\n\n    public async createSession(params: CreateSessionConfig): Promise<CreateSessionResult> {\n        const id = crypto.randomUUID();\n        const cleanPhone = params.phoneNumber.replace(/\\D/g, \"\");\n        const ttl = params.ttl ? this.validateTtl(params.ttl, \"ttl\") : this.defaultTtl;\n        const token = crypto.randomInt(100000, 999999).toString();\n        const expiresAt = ttl * 1000 + Date.now();\n\n        const sessionData: StorageData = {\n            sessionId: id,\n            expectedPhoneNumber: cleanPhone,\n            token: token,\n            expiresAt: expiresAt,\n        };\n\n        const key = generateKey(cleanPhone);\n\n        try {\n            await this.storage.set(key, JSON.stringify(sessionData), expiresAt);\n        } catch (error: unknown) {\n            throw new Error(\n                `Failed to store session data: ${error instanceof Error ? error.message : error}`,\n            );\n        }\n\n        const message = `VERIFY ${id} ${token} ${expiresAt}`;\n        const { dataLink, deepLink, qrLink, qrSvg } = await generateQrFromData(\n            this.businessPhoneNumber,\n            message,\n        );\n\n        return {\n            id,\n            token,\n            dataLink,\n            deepLink,\n            qrLink,\n            qrSvg,\n        };\n    }\n\n    public async verifySession(params: VerifyWebhooks): Promise<VerifySession> {\n        const rawBody = params.rawBody;\n        const jsonData = params.jsonData;\n        const signature = params.signature;\n\n        const isSignatureValid = verifyMetaSignature(rawBody, signature, this.waVerificationKey);\n        if (!isSignatureValid) {\n            return {\n                success: false,\n                message: \"Invalid webhook signature\",\n            };\n        }\n\n        const parsedData = parser(jsonData);\n        if (!parsedData) {\n            return {\n                success: false,\n                message: \"Invalid or unsupported webhook message\",\n            };\n        }\n\n        const key = generateKey(parsedData.sendersPhoneNumber.replace(/\\D/g, \"\"));\n        let userData;\n\n        try {\n            const data = await this.storage.get(key);\n            if (!data) {\n                return {\n                    success: false,\n                    message: \"Session data not found\",\n                };\n            }\n\n            userData = JSON.parse(data) as StorageData;\n            await this.storage.delete(key);\n        } catch (error: unknown) {\n            return {\n                success: false,\n                message: `Failed to get/delete session data: ${error instanceof Error ? error.message : error}`,\n            };\n        }\n\n        const messageKeyword = parsedData.text.trim().split(\" \");\n        const id = messageKeyword[1];\n        const token = messageKeyword[2];\n        const expiresAt = messageKeyword[3];\n\n        const tokenBuffer = Buffer.from(token ?? \"\", \"utf8\");\n        const expectedTokenBuffer = Buffer.from(userData.token, \"utf8\");\n\n        const senderPhone = parsedData.sendersPhoneNumber.replace(/\\D/g, \"\");\n        const phoneBuffer = Buffer.from(senderPhone, \"utf8\");\n        const expectedPhoneBuffer = Buffer.from(userData.expectedPhoneNumber, \"utf8\");\n\n        const isTokenValid =\n            tokenBuffer.length === expectedTokenBuffer.length &&\n            crypto.timingSafeEqual(tokenBuffer, expectedTokenBuffer);\n\n        const isPhoneValid =\n            phoneBuffer.length === expectedPhoneBuffer.length &&\n            crypto.timingSafeEqual(phoneBuffer, expectedPhoneBuffer);\n\n        if (!isTokenValid || !isPhoneValid || Number(expiresAt) < Date.now()) {\n            return {\n                success: false,\n                message: \"Token is invalid or expired\",\n            };\n        }\n\n        return {\n            success: true,\n            message: \"Successfully parsed the data\",\n            parsedData: parsedData,\n        };\n    }\n\n    public handleWebhookVerification(query: WebhookVerificationQuery): WebhookVerificationResult {\n        const mode = query[\"hub.mode\"];\n        const token = query[\"hub.verify_token\"];\n        const challenge = query[\"hub.challenge\"];\n\n        if (mode === \"subscribe\" && token === this.waVerificationKey) {\n            return { success: true, challenge };\n        }\n\n        return { success: false };\n    }\n}\n\nexport default whatsappVerifier;\n","import whatsappVerifier from \"./whatsappverifier.js\";\n\nexport default whatsappVerifier;\nexport * from \"./types/index.js\";\n"]}

package/package.json

@@ -0,0 +1,41 @@
+{
+    "name": "angelos",
+    "version": "1.0.0",
+    "description": "Frictionless WhatsApp QR-based phone verification engine for Node.js",
+    "type": "module",
+    "main": "./dist/index.cjs",
+    "module": "./dist/index.js",
+    "types": "./dist/index.d.ts",
+    "exports": {
+        ".": {
+            "types": "./dist/index.d.ts",
+            "import": "./dist/index.js",
+            "require": "./dist/index.cjs"
+        }
+    },
+    "files": [
+        "dist",
+        "README.md",
+        "LICENSE"
+    ],
+    "scripts": {
+        "dev": "tsup --watch",
+        "build": "tsup",
+        "typecheck": "tsc --noEmit",
+        "prepublishOnly": "npm run typecheck && npm run build"
+    },
+    "dependencies": {
+        "qrcode": "^1.5.4"
+    },
+    "devDependencies": {
+        "@types/node": "^22.20.5",
+        "@types/qrcode": "^1.5.5",
+        "tsup": "^8.3.0",
+        "typescript": "^5.5.0"
+    },
+    "engines": {
+        "node": ">=18.0.0"
+    },
+    "author": "Hartejsingh Sandhu",
+    "license": "MIT"
+}