aunubaileys 1.0.22 → 1.0.24

package/README.md

@@ -64,6 +64,14 @@ Everything else is pure upstream. When upstream moves, we rebase the patch layer
 
 
 
+### 🆕 What's new in 1.0.24 / Baru di 1.0.24
+
+- 🖼️ **`profilePictureUrl` no longer throws for “no picture”** — a contact with no photo (or one hidden by privacy settings) made the server answer 401/404 and upstream let the Boom crash every caller that forgot a try/catch. Those statuses now resolve to `undefined`, consistent with the existing empty-picture-node case; real failures (timeouts, 5xx) still throw.
+
+### 🆕 What's new in 1.0.23 / Baru di 1.0.23
+
+- 🖼️ **Old-media downloads recover from 403** — the phone re-upload recovery path for failed media downloads only triggered on HTTP 404/410, but WhatsApp's media CDN answers **403** when a message's directPath/url auth has expired — the common case for older media. Downloads of old media therefore failed permanently even though the sender's phone could heal them. 403 now triggers the re-upload request; if the media is truly gone, the re-upload fails as well and the original error propagates unchanged.
+
 ### 🆕 What's new in 1.0.22 / Baru di 1.0.22
 
 - 🗑️ **Cacheable key store honours deletions** — `makeCacheableSignalKeyStore` cached `null` values verbatim, but null means *deleted*: later gets returned a phantom present-but-null entry, and a value re-created in the store stayed hidden behind the cached null until the 5-minute TTL expired. Deletions now evict the cache entry, so the next get reads the store's authoritative state — which is exactly what makes `deleteSession`/`deleteSenderKey` (1.0.14/1.0.17) behave correctly through the recommended cacheable wiring. Both defects were reproduced before the fix and pass after it.

package/lib/Socket/chats.js

@@ -468,6 +468,12 @@ export const makeChatsSocket = (config) => {
      */
     const profilePictureUrl = async (jid, type = 'preview', timeoutMs) => {
         jid = jidNormalizedUser(jid);
+        // AunuBaileys: "no picture / not visible to us" is an expected answer,
+        // not an exception — the server replies 401/404 and upstream let the
+        // Boom crash every caller that forgot a try/catch (menus, welcome
+        // messages, profil commands all fetch avatars). Those statuses now
+        // resolve to undefined, matching the existing no-picture-node case;
+        // real failures (timeouts, 5xx) still throw.
         const result = await query({
             tag: 'iq',
             attrs: {
@@ -477,7 +483,17 @@ export const makeChatsSocket = (config) => {
                 xmlns: 'w:profile:picture'
             },
             content: [{ tag: 'picture', attrs: { type, query: 'url' } }]
-        }, timeoutMs);
+        }, timeoutMs).catch((err) => {
+            // codebase convention (assertNodeErrorFree): IQ error codes ride in err.data as a number
+            const status = typeof err?.data === 'number' ? err.data : (err?.data?.attrs?.status || err?.data?.attrs?.code || err?.output?.statusCode || err?.status);
+            if (status === 401 || status === '401' || status === 404 || status === '404') {
+                return undefined;
+            }
+            throw err;
+        });
+        if (!result) {
+            return undefined;
+        }
         const child = getBinaryNodeChild(result, 'picture');
         return child?.attrs?.url;
     };

package/lib/Utils/messages.js

@@ -1073,7 +1073,12 @@ export const aggregateMessageKeysNotFromMe = (keys) => {
     }
     return Object.values(keyMap);
 };
-const REUPLOAD_REQUIRED_STATUS = [410, 404];
+// AunuBaileys: 403 added — WhatsApp's media CDN answers 403 (not just 404/410)
+// when a message's directPath/url auth has expired, which is exactly the stale-
+// media case the phone re-upload exists for. Without it, downloads of older
+// media failed permanently even though the sender's phone could re-upload.
+// If the media is truly gone, the re-upload fails too and the error propagates.
+const REUPLOAD_REQUIRED_STATUS = [410, 404, 403];
 /**
  * Downloads the given message. Throws an error if it's not a media message
  */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "aunubaileys",
   "type": "module",
-  "version": "1.0.22",
+  "version": "1.0.24",
   "description": "AunuBaileys \u2014 a WhatsApp Web API for bots that never sleep. Full upstream power with the beloved in-memory store restored and pairing that just works. Forged by AunuCore.",
   "keywords": [
     "whatsapp",