aunubaileys 1.0.21 → 1.0.23

package/README.md

@@ -64,6 +64,14 @@ Everything else is pure upstream. When upstream moves, we rebase the patch layer
 
 
 
+### 🆕 What's new in 1.0.23 / Baru di 1.0.23
+
+- 🖼️ **Old-media downloads recover from 403** — the phone re-upload recovery path for failed media downloads only triggered on HTTP 404/410, but WhatsApp's media CDN answers **403** when a message's directPath/url auth has expired — the common case for older media. Downloads of old media therefore failed permanently even though the sender's phone could heal them. 403 now triggers the re-upload request; if the media is truly gone, the re-upload fails as well and the original error propagates unchanged.
+
+### 🆕 What's new in 1.0.22 / Baru di 1.0.22
+
+- 🗑️ **Cacheable key store honours deletions** — `makeCacheableSignalKeyStore` cached `null` values verbatim, but null means *deleted*: later gets returned a phantom present-but-null entry, and a value re-created in the store stayed hidden behind the cached null until the 5-minute TTL expired. Deletions now evict the cache entry, so the next get reads the store's authoritative state — which is exactly what makes `deleteSession`/`deleteSenderKey` (1.0.14/1.0.17) behave correctly through the recommended cacheable wiring. Both defects were reproduced before the fix and pass after it.
+
 ### 🆕 What's new in 1.0.21 / Baru di 1.0.21
 
 - 💾 **saveCreds writes are coalesced** — during pairing, `creds.update` fires many times per second and every event used to queue a full atomic creds.json write. Concurrent `saveCreds()` calls now share one in-flight write, and a call landing mid-write schedules exactly one follow-up, so the file always ends with the latest creds — verified: a 30-call burst produced only ~2–3 real writes instead of 30.

package/lib/Utils/auth-utils.js

@@ -49,7 +49,19 @@ export function makeCacheableSignalKeyStore(store, logger, _cache) {
             let keys = 0;
             for (const type in data) {
                 for (const id in data[type]) {
-                    cache.set(getUniqueId(type, id), data[type][id]);
+                    // AunuBaileys: a null/undefined value is a DELETION. Upstream
+                    // cached the null itself, so later gets returned a phantom
+                    // present-but-null entry and — worse — kept shadowing a value
+                    // re-created in the store until the TTL expired. Evict instead,
+                    // so the next get reads the store's authoritative state. This
+                    // is what makes deleteSession/deleteSenderKey (1.0.14/1.0.17)
+                    // behave correctly through the recommended cacheable wiring.
+                    if (data[type][id] === null || typeof data[type][id] === 'undefined') {
+                        cache.del(getUniqueId(type, id));
+                    }
+                    else {
+                        cache.set(getUniqueId(type, id), data[type][id]);
+                    }
                     keys += 1;
                 }
             }

package/lib/Utils/messages.js

@@ -1073,7 +1073,12 @@ export const aggregateMessageKeysNotFromMe = (keys) => {
     }
     return Object.values(keyMap);
 };
-const REUPLOAD_REQUIRED_STATUS = [410, 404];
+// AunuBaileys: 403 added — WhatsApp's media CDN answers 403 (not just 404/410)
+// when a message's directPath/url auth has expired, which is exactly the stale-
+// media case the phone re-upload exists for. Without it, downloads of older
+// media failed permanently even though the sender's phone could re-upload.
+// If the media is truly gone, the re-upload fails too and the error propagates.
+const REUPLOAD_REQUIRED_STATUS = [410, 404, 403];
 /**
  * Downloads the given message. Throws an error if it's not a media message
  */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "aunubaileys",
   "type": "module",
-  "version": "1.0.21",
+  "version": "1.0.23",
   "description": "AunuBaileys \u2014 a WhatsApp Web API for bots that never sleep. Full upstream power with the beloved in-memory store restored and pairing that just works. Forged by AunuCore.",
   "keywords": [
     "whatsapp",