aunubaileys 1.0.9 → 1.0.11

package/README.md

@@ -64,6 +64,14 @@ Everything else is pure upstream. When upstream moves, we rebase the patch layer
 
 
 
+### 🆕 What's new in 1.0.11 / Baru di 1.0.11
+
+- 🚑 **Hotfix for broken 1.0.9 / 1.0.10 tarballs** — the published packages exported `./Utils/antiban.js` from `lib/index.js` but the file itself was never committed to the repository, so every install crashed on import with `ERR_MODULE_NOT_FOUND`. The AntiBan module (and its types) is now in the repo, and this release's tarball was verified with a clean install + import test. Also in: RafaelPivots' `INITIAL_PREKEY_COUNT` type correction (30 → 812, matching the runtime) and repository URLs updated to the repo's new home, **AunuCore/AunuBaileys-lib**. If you are on 1.0.9 or 1.0.10, upgrade to 1.0.11.
+
+### 🆕 What's new in 1.0.10 / Baru di 1.0.10
+
+- 🛠️ **Reliability hardening against classic upstream weaknesses** — (1) **Retry receipts now get answered even without a custom `getMessage` store:** a built-in per-socket sent-message cache (last 256 relayed messages, whatsmeow-style) backs up your store, ending the silent "message not available" failures behind stuck unreadable/undelivered messages. Disable with `sentMessagesCacheSize: 0`. (2) **Pairing is now single-flight:** `requestPairingCode` refuses to double-fire (double requests invalidate the first code) and refuses outright on already-registered sessions, with clear errors instead of silent corruption. (3) **Handshake timeout raised:** default `connectTimeoutMs` goes 20s → 60s so pairing no longer times out on slow networks.
+
 ### 🆕 What's new in 1.0.9 / Baru di 1.0.9
 
 - 🪪 **LID identity layer** — WhatsApp is migrating identities from phone numbers to LIDs, and incoming stanzas already carry both forms. AunuBaileys now learns the mapping from live traffic: every socket exposes `sock.aunuLid`, a bidirectional PN <-> LID store with local `getLIDForPN()` / `getPNForLID()` lookups (no extra server queries), LRU capping, and optional JSON persistence. Prefer a standalone store? `makeLIDStore()` is exported from the package root, fully typed.

package/lib/Defaults/index.d.ts

@@ -42,7 +42,7 @@ export declare const MEDIA_HKDF_KEY_MAPPING: {
 };
 export declare const MEDIA_KEYS: MediaType[];
 export declare const MIN_PREKEY_COUNT = 5;
-export declare const INITIAL_PREKEY_COUNT = 30;
+export declare const INITIAL_PREKEY_COUNT = 812;
 export declare const DEFAULT_CACHE_TTLS: {
     SIGNAL_STORE: number;
     MSG_RETRY: number;

package/lib/Defaults/index.js

@@ -30,7 +30,7 @@ export const DEFAULT_CONNECTION_CONFIG = {
     version: version,
     browser: Browsers.ubuntu('Chrome'),
     waWebSocketUrl: 'wss://web.whatsapp.com/ws/chat',
-    connectTimeoutMs: 20000,
+    connectTimeoutMs: 60000,
     keepAliveIntervalMs: 30000,
     logger: logger.child({ class: 'baileys' }),
     emitOwnEvents: true,

package/lib/Socket/messages-recv.js

@@ -7,6 +7,7 @@ import { DEFAULT_CACHE_TTLS, KEY_BUNDLE_TYPE, MIN_PREKEY_COUNT } from '../Defaul
 import { WAMessageStatus, WAMessageStubType } from '../Types/index.js';
 import { aesDecryptCTR, aesEncryptGCM, cleanMessage, Curve, decodeMediaRetryNode, decodeMessageNode, decryptMessageNode, delay, derivePairingCodeKey, encodeBigEndian, encodeSignedDeviceIdentity, getCallStatusFromNode, getHistoryMsg, getNextPreKeys, getStatusFromReceiptType, hkdf, MISSING_KEYS_ERROR_TEXT, NACK_REASONS, NO_MESSAGE_FOUND_ERROR_TEXT, unixTimestampSeconds, xmppPreKey, xmppSignedPreKey } from '../Utils/index.js';
 import { makeMutex } from '../Utils/make-mutex.js';
+import { sentMessageCacheFor } from '../Utils/sent-message-cache.js';
 import { areJidsSameUser, getAllBinaryNodeChildren, getBinaryNodeChild, getBinaryNodeChildBuffer, getBinaryNodeChildren, getBinaryNodeChildString, isJidGroup, isJidStatusBroadcast, isJidUser, isLidUser, jidDecode, jidNormalizedUser, S_WHATSAPP_NET } from '../WABinary/index.js';
 import { extractGroupMetadata } from './groups.js';
 import { makeMessagesSocket } from './messages-send.js';
@@ -465,7 +466,7 @@ export const makeMessagesRecvSocket = (config) => {
     };
     const sendMessagesAgain = async (key, ids, retryNode) => {
         // todo: implement a cache to store the last 256 sent messages (copy whatsmeow)
-        const msgs = await Promise.all(ids.map(id => getMessage({ ...key, id })));
+        const msgs = await Promise.all(ids.map(async (id) => (await getMessage({ ...key, id })) ?? sentMessageCacheFor(config).get(key.remoteJid, id)));
         const remoteJid = key.remoteJid;
         const participant = key.participant || remoteJid;
         // if it's the primary jid sending the request

package/lib/Socket/messages-send.js

@@ -3,6 +3,7 @@ import { Boom } from '@hapi/boom';
 import { proto } from '../../WAProto/index.js';
 import { BIZ_BOT_SUPPORT_PAYLOAD, DEFAULT_CACHE_TTLS, WA_DEFAULT_EPHEMERAL } from '../Defaults/index.js';
 import { aggregateMessageKeysNotFromMe, assertMediaContent, bindWaitForEvent, decryptMediaRetryData, encodeNewsletterMessage, encodeSignedDeviceIdentity, encodeWAMessage, encryptMediaRetryRequest, delay, extractDeviceJids, generateMessageIDV2, generateWAMessage, getStatusCodeForMediaRetry, getUrlFromDirectPath, getWAUploadToServer, normalizeMessageContent, parseAndInjectE2ESessions, unixTimestampSeconds } from '../Utils/index.js';
+import { sentMessageCacheFor } from '../Utils/sent-message-cache.js';
 import { getUrlInfo } from '../Utils/link-preview.js';
 import { areJidsSameUser, getBinaryNodeChild, getBinaryNodeChildren, isJidGroup, isJidNewsletter, isJidUser, isLidUser, jidDecode, jidEncode, jidNormalizedUser, S_WHATSAPP_NET } from '../WABinary/index.js';
 import { USyncQuery, USyncUser } from '../WAUSync/index.js';
@@ -311,6 +312,7 @@ export const makeMessagesSocket = (config) => {
                 };
                 logger.debug({ msgId }, `sending newsletter message to ${jid}`);
                 await sendNode(stanza);
+                sentMessageCacheFor(config).add(jid, msgId, message);
                 return;
             }
             if (normalizeMessageContent(message)?.pinInChatMessage) {
@@ -486,6 +488,7 @@ export const makeMessagesSocket = (config) => {
             logger.debug({ msgId }, `sending message to ${participants.length} devices`);
             await sendNode(stanza);
         });
+        sentMessageCacheFor(config).add(jid, msgId, message);
         return msgId;
     };
     const getMessageType = (message) => {

package/lib/Socket/socket.js

@@ -370,11 +370,20 @@ export const makeSocket = (config) => {
         }
         end(new Boom(msg || 'Intentional Logout', { statusCode: DisconnectReason.loggedOut }));
     };
+    let pairingCodeRequestInFlight = false;
     const requestPairingCode = async (phoneNumber, customPairingCode) => {
+        if (authState.creds.registered) {
+            throw new Error('requestPairingCode: this session is already registered — pairing codes are only for new logins');
+        }
+        if (pairingCodeRequestInFlight) {
+            throw new Error('requestPairingCode: a pairing code request is already in flight — wait for it to finish instead of firing another one (double requests invalidate the first code)');
+        }
         const pairingCode = customPairingCode ?? bytesToCrockford(randomBytes(5));
         if (customPairingCode && customPairingCode?.length !== 8) {
             throw new Error('Custom pairing code must be exactly 8 chars');
         }
+        pairingCodeRequestInFlight = true;
+        try {
         authState.creds.pairingCode = pairingCode;
         authState.creds.me = {
             id: jidEncode(phoneNumber, 's.whatsapp.net'),
@@ -428,6 +437,10 @@ export const makeSocket = (config) => {
             ]
         });
         return authState.creds.pairingCode;
+        }
+        finally {
+            pairingCodeRequestInFlight = false;
+        }
     };
     async function generatePairingKey() {
         const salt = randomBytes(32);

package/lib/Types/Socket.d.ts

@@ -75,6 +75,8 @@ export type SocketConfig = {
      * map to store the retry counts for failed messages;
      * used to determine whether to retry a message or not */
     msgRetryCounterCache?: CacheStore;
+    /** AunuBaileys: capacity of the built-in sent-message cache used to answer retry receipts when `getMessage` has no copy. Default 256; set 0 to disable. */
+    sentMessagesCacheSize?: number;
     /** provide a cache to store a user's device list */
     userDevicesCache?: CacheStore;
     /** cache to store call offers */

package/lib/Utils/antiban.d.ts

@@ -0,0 +1,21 @@
+import type { WASocket } from '../Types';
+export declare const gaussianJitter: (mean?: number, sigma?: number) => number;
+export declare class RateLimiter {
+    constructor(max: number, windowMs: number);
+    acquire(key: string): Promise<number>;
+    tryAcquire(key: string): boolean;
+}
+export interface DisconnectClassification { category: string; action: 'stop' | 'restart' | 'reconnect' | 'backoff'; detail: string; }
+export declare const classifyDisconnect: (error: unknown) => DisconnectClassification;
+export interface AunuAntiBanOptions {
+    perChatPerMinute?: number; globalPerMinute?: number; minDelayMs?: number; jitterMs?: number;
+    warmupDays?: number; warmupStart?: number; typingSimulation?: boolean;
+    groupAddMax?: number; groupAddWindowMs?: number; groupCreateMax?: number; groupCreateWindowMs?: number;
+}
+export declare class AunuAntiBan {
+    constructor(options?: AunuAntiBanOptions);
+    warmupFactor(): number;
+    effectiveLimit(base: number): number;
+    wrap<T extends WASocket>(sock: T): T;
+}
+export declare const wrapAntiBan: (sock: WASocket, options?: AunuAntiBanOptions) => WASocket;

package/lib/Utils/antiban.js

@@ -0,0 +1,170 @@
+/**
+ * AunuAntiBan — lapisan perlindungan akun bawaan AunuBaileys.
+ * Konsep terinspirasi baileys-antiban (kobie3717), diimplementasikan ulang
+ * secara bersih di dalam paket: rate limiting dengan jitter Gaussian,
+ * jadwal warmup akun baru, penjaga operasi grup, simulasi mengetik,
+ * dan klasifikasi disconnect. Tanpa telemetri, tanpa jaringan tambahan.
+ */
+import { Boom } from '@hapi/boom';
+import { DisconnectReason } from '../Types/index.js';
+import { delay } from './generics.js';
+
+/** Jitter Gaussian (Box-Muller), hasil dibatasi >= 0. */
+export const gaussianJitter = (mean = 0, sigma = 1) => {
+    let u = 0;
+    let v = 0;
+    while (u === 0)
+        u = Math.random();
+    while (v === 0)
+        v = Math.random();
+    const n = Math.sqrt(-2.0 * Math.log(u)) * Math.cos(2.0 * Math.PI * v);
+    return Math.max(0, mean + n * sigma);
+};
+
+/** Rate limiter jendela geser per kunci. */
+export class RateLimiter {
+    constructor(max, windowMs) {
+        this.max = max;
+        this.windowMs = windowMs;
+        this.hits = new Map();
+    }
+    /** Tunggu sampai ada slot untuk key; kembalikan waktu tunggu (ms). */
+    async acquire(key) {
+        const now = Date.now();
+        let arr = this.hits.get(key);
+        if (!arr) {
+            arr = [];
+            this.hits.set(key, arr);
+        }
+        while (arr.length && now - arr[0] >= this.windowMs)
+            arr.shift();
+        if (arr.length >= this.max) {
+            const wait = this.windowMs - (now - arr[0]) + 5;
+            await delay(wait);
+            return this.acquire(key);
+        }
+        arr.push(Date.now());
+        return 0;
+    }
+    /** Cek tanpa menunggu; true bila masih boleh. */
+    tryAcquire(key) {
+        const now = Date.now();
+        let arr = this.hits.get(key);
+        if (!arr) {
+            arr = [];
+            this.hits.set(key, arr);
+        }
+        while (arr.length && now - arr[0] >= this.windowMs)
+            arr.shift();
+        if (arr.length >= this.max) {
+            return false;
+        }
+        arr.push(now);
+        return true;
+    }
+}
+
+/** Klasifikasi error disconnect -> kategori + tindakan yang disarankan. */
+export const classifyDisconnect = (error) => {
+    const code = error?.output?.statusCode ?? error?.statusCode ?? error;
+    switch (code) {
+        case DisconnectReason.loggedOut:
+            return { category: 'logged_out', action: 'stop', detail: 'Sesi logout — perlu pairing ulang. Jangan auto-reconnect.' };
+        case DisconnectReason.restartRequired:
+            return { category: 'restart_required', action: 'restart', detail: 'Server meminta restart — hubungkan ulang sekali.' };
+        case DisconnectReason.connectionReplaced:
+            return { category: 'replaced', action: 'stop', detail: 'Sesi digantikan koneksi lain — periksa perangkat tertaut.' };
+        case DisconnectReason.badSession:
+            return { category: 'bad_session', action: 'stop', detail: 'Sesi rusak — hapus auth state dan pairing ulang.' };
+        case DisconnectReason.multideviceMismatch:
+            return { category: 'mismatch', action: 'stop', detail: 'Ketidakcocokan multidevice — pairing ulang.' };
+        case 403:
+            return { category: 'forbidden', action: 'stop', detail: '403 — kemungkinan dibatasi/diblokir. Berhenti dan periksa akun.' };
+        case 429:
+            return { category: 'rate_limited', action: 'backoff', detail: '429 — terlalu cepat. Mundur dan turunkan laju kirim.' };
+        case DisconnectReason.timedOut:
+        case DisconnectReason.connectionLost:
+        case DisconnectReason.connectionClosed:
+        default:
+            return { category: 'transient', action: 'reconnect', detail: 'Gangguan jaringan/server sementara — aman reconnect dengan jeda.' };
+    }
+};
+
+export class AunuAntiBan {
+    constructor(options = {}) {
+        this.options = {
+            perChatPerMinute: 12,
+            globalPerMinute: 60,
+            minDelayMs: 700,
+            jitterMs: 900,
+            warmupDays: 7,
+            warmupStart: Date.now(),
+            typingSimulation: true,
+            groupAddMax: 3,
+            groupAddWindowMs: 600000,
+            groupCreateMax: 2,
+            groupCreateWindowMs: 600000,
+            ...options
+        };
+        const o = this.options;
+        this.perChat = new RateLimiter(o.perChatPerMinute, 60000);
+        this.global = new RateLimiter(o.globalPerMinute, 60000);
+        this.groupAdd = new RateLimiter(o.groupAddMax, o.groupAddWindowMs);
+        this.groupCreate = new RateLimiter(o.groupCreateMax, o.groupCreateWindowMs);
+    }
+    /** Faktor warmup 0.3 -> 1.0 selama warmupDays sejak warmupStart. */
+    warmupFactor() {
+        const days = (Date.now() - this.options.warmupStart) / 86400000;
+        if (days >= this.options.warmupDays) {
+            return 1;
+        }
+        return 0.3 + 0.7 * Math.max(0, days / this.options.warmupDays);
+    }
+    /** Batasi laju efektif mengikuti warmup. */
+    effectiveLimit(base) {
+        return Math.max(1, Math.floor(base * this.warmupFactor()));
+    }
+    /** Terapkan perlindungan ke socket; socket yang sama dikembalikan. */
+    wrap(sock) {
+        const self = this;
+        const origSend = sock.sendMessage.bind(sock);
+        sock.sendMessage = async (jid, content, options) => {
+            await self.global.acquire('__global__');
+            await self.perChat.acquire(jid);
+            if (self.options.typingSimulation && (content?.text || content?.caption) && typeof sock.sendPresenceUpdate === 'function') {
+                try {
+                    await sock.sendPresenceUpdate('composing', jid);
+                }
+                catch { }
+            }
+            const wait = self.options.minDelayMs * self.warmupFactor() + gaussianJitter(0, self.options.jitterMs / 2);
+            if (wait > 0) {
+                await delay(wait);
+            }
+            return origSend(jid, content, options);
+        };
+        if (typeof sock.groupParticipantsUpdate === 'function') {
+            const orig = sock.groupParticipantsUpdate.bind(sock);
+            sock.groupParticipantsUpdate = async (jid, participants, action, inviteMessage) => {
+                if (action === 'add' && !self.groupAdd.tryAcquire(jid)) {
+                    throw new Boom('AunuAntiBan: batas tambah anggota grup tercapai — jeda dulu agar akun aman', { statusCode: 429 });
+                }
+                return orig(jid, participants, action, inviteMessage);
+            };
+        }
+        if (typeof sock.groupCreate === 'function') {
+            const origCreate = sock.groupCreate.bind(sock);
+            sock.groupCreate = async (subject, participants) => {
+                if (!self.groupCreate.tryAcquire('__create__')) {
+                    throw new Boom('AunuAntiBan: batas buat grup tercapai — jeda dulu agar akun aman', { statusCode: 429 });
+                }
+                return origCreate(subject, participants);
+            };
+        }
+        sock.aunuAntiBan = self;
+        return sock;
+    }
+}
+
+/** Bungkus socket dengan AunuAntiBan (jalan pintas). */
+export const wrapAntiBan = (sock, options) => new AunuAntiBan(options).wrap(sock);

package/lib/Utils/sent-message-cache.d.ts

@@ -0,0 +1,15 @@
+import type { WAMessageContent } from '../Types/index.js';
+export interface SentMessageCache {
+    add(remoteJid: string, id: string, message: WAMessageContent): void;
+    get(remoteJid: string, id: string): WAMessageContent | undefined;
+    readonly size: number;
+    clear(): void;
+}
+/**
+ * Create a bounded FIFO cache of recently relayed message contents,
+ * used to answer retry receipts when the app's `getMessage` store
+ * has no copy. Default capacity 256.
+ */
+export declare const makeSentMessageCache: (maxEntries?: number) => SentMessageCache;
+/** Returns the per-socket cache bound to a socket config object (internal plumbing, also handy in tests). */
+export declare const sentMessageCacheFor: (config: object) => SentMessageCache;

package/lib/Utils/sent-message-cache.js

@@ -0,0 +1,59 @@
+/**
+ * AunuBaileys sent-message cache for retry receipts.
+ *
+ * When a peer cannot decrypt a message we sent, WhatsApp asks for a
+ * resend via a retry receipt. Upstream Baileys can only answer when
+ * the app supplied a `getMessage` store; with the default
+ * `getMessage: async () => undefined` every retry dies with
+ * "message not available" and the peer never receives the message
+ * (the classic "read but never delivered / stuck unreadable" bug).
+ *
+ * This cache keeps the last N relayed message contents per socket
+ * (whatsmeow-style, default 256) so `sendMessagesAgain` can fall
+ * back to it when the app's own `getMessage` has nothing. The app's
+ * store always wins; this is only a fallback. Set
+ * `sentMessagesCacheSize: 0` in the socket config to disable.
+ */
+export const makeSentMessageCache = (maxEntries = 256) => {
+    const cache = new Map();
+    const keyOf = (remoteJid, id) => `${remoteJid}:${id}`;
+    return {
+        add: (remoteJid, id, message) => {
+            if (!remoteJid || !id || !message || maxEntries <= 0) {
+                return;
+            }
+            const key = keyOf(remoteJid, id);
+            cache.delete(key);
+            cache.set(key, message);
+            while (cache.size > maxEntries) {
+                cache.delete(cache.keys().next().value);
+            }
+        },
+        get: (remoteJid, id) => {
+            if (!remoteJid || !id) {
+                return undefined;
+            }
+            return cache.get(keyOf(remoteJid, id));
+        },
+        get size() {
+            return cache.size;
+        },
+        clear: () => cache.clear()
+    };
+};
+const cachesByConfig = new WeakMap();
+/**
+ * Returns the per-socket sent-message cache bound to a socket
+ * config object. Send and receive layers of the same socket share
+ * one config object, so a WeakMap keyed by it gives every socket
+ * its own isolated cache without any extra plumbing.
+ */
+export const sentMessageCacheFor = (config) => {
+    let cache = cachesByConfig.get(config);
+    if (!cache) {
+        const size = typeof config?.sentMessagesCacheSize === 'number' ? config.sentMessagesCacheSize : 256;
+        cache = makeSentMessageCache(size);
+        cachesByConfig.set(config, cache);
+    }
+    return cache;
+};

package/lib/index.d.ts

@@ -17,3 +17,4 @@ export * from './Utils/aunu-handler';
 export * from './Utils/builders';
 export * from './Utils/antiban';
 export * from './Utils/lid-store.js';
+export * from './Utils/sent-message-cache.js';

package/lib/index.js

@@ -16,3 +16,4 @@ export * from './Utils/aunu-handler.js';
 export * from './Utils/builders.js';
 export * from './Utils/antiban.js';
 export * from './Utils/lid-store.js';
+export * from './Utils/sent-message-cache.js';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "aunubaileys",
   "type": "module",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "description": "AunuBaileys \u2014 a WhatsApp Web API for bots that never sleep. Full upstream power with the beloved in-memory store restored and pairing that just works. Forged by AunuCore.",
   "keywords": [
     "whatsapp",
@@ -22,7 +22,7 @@
   "homepage": "https://docsjs.aunucore.eu.cc",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/AunuHost/AunuBaileys-lib.git"
+    "url": "git+https://github.com/AunuCore/AunuBaileys-lib.git"
   },
   "license": "MIT",
   "author": "AunuCore Creative Network",
@@ -101,7 +101,7 @@
     "node": ">=20.0.0"
   },
   "bugs": {
-    "url": "https://github.com/AunuHost/AunuBaileys-lib/issues"
+    "url": "https://github.com/AunuCore/AunuBaileys-lib/issues"
   },
   "publishConfig": {
     "access": "public"