kage-baileys 3.0.6 → 3.2.4

package/lib/Utils/messages-media.js

@@ -871,4 +871,1934 @@ const MEDIA_RETRY_STATUS_MAP = {
 };
 function __importStar(arg0) {
     throw new Error('Function not implemented.');
-}
+}
+// Kage: compatibilidad de API.
+const __kageModule73 = (() => {
+const module = { exports: {} }; const exports = module.exports;
+"use strict"
+
+Object.defineProperty(exports, "__esModule", { value: true })
+
+const { Boom } = require("@hapi/boom")
+const { exec } = require("child_process")
+const { once } = require("events")
+const { 
+  createHash, 
+  randomBytes, 
+  createHmac, 
+  createCipheriv, 
+  createDecipheriv
+} = require("crypto")
+const {
+  promises, 
+  createReadStream, 
+  createWriteStream
+} = require("fs")
+const {
+  parseBuffer, 
+  parseFile, 
+  parseStream
+} = require('music-metadata')
+const { tmpdir } = require("os")
+const { join } = require("path")
+const {
+  Readable, 
+  Transform
+} = require("stream")
+const { proto } = require("../../WAProto")
+const {
+  MEDIA_PATH_MAP, 
+  MEDIA_HKDF_KEY_MAPPING
+} = require("../Defaults/media")
+const { DEFAULT_ORIGIN } = require("../Defaults/constants")
+const { 
+  getBinaryNodeChild,
+  getBinaryNodeChildBuffer, 
+  jidNormalizedUser 
+} = require("../WABinary")
+const {
+  aesDecryptGCM, 
+  aesEncryptGCM,
+  hkdf 
+} = require("./crypto")
+const { generateMessageID } = require("./generics")
+
+const getTmpFilesDirectory = () => tmpdir()
+
+const getImageProcessingLibrary = () => {
+    let sharp, jimp
+
+    try {
+        sharp = require('sharp')
+    } catch {}
+
+    if (sharp) {
+        return { sharp }
+    }
+
+    try {
+        jimp = require('jimp')
+    } catch {}
+
+    if (jimp) {
+        return { jimp }
+    }
+
+    throw new Boom('No image processing library available')
+}
+
+const hkdfInfoKey = (type) => {
+    const hkdfInfo = MEDIA_HKDF_KEY_MAPPING[type]
+    return `WhatsApp ${hkdfInfo} Keys`
+}
+
+const getRawMediaUploadData = async (media, mediaType, logger) => {
+    const { stream } = await getStream(media)
+
+    logger?.debug('got stream for raw upload')
+
+    const hasher = createHash('sha256')
+    const filePath = join(getTmpFilesDirectory(), mediaType + generateMessageID())
+    const fileWriteStream = createWriteStream(filePath)
+
+    let fileLength = 0
+
+    try {
+        for await (const data of stream) {
+            fileLength += data.length
+            hasher.update(data)
+
+            if (!fileWriteStream.write(data)) {
+                await once(fileWriteStream, 'drain')
+            }
+        }
+
+        fileWriteStream.end()
+        await once(fileWriteStream, 'finish')
+        stream.destroy()
+
+        const fileSha256 = hasher.digest()
+
+        logger?.debug('hashed data for raw upload')
+
+        return {
+            filePath: filePath,
+            fileSha256,
+            fileLength
+        }
+    }
+    catch (error) {
+        fileWriteStream.destroy()
+        stream.destroy()
+
+        try {
+            await promises.unlink(filePath)
+        }
+        catch {
+            //
+        }
+        throw error
+    }
+}
+
+/** generates all the keys required to encrypt/decrypt & sign a media message */
+async function getMediaKeys(buffer, mediaType) {
+    if (!buffer) {
+        throw new Boom('Cannot derive from empty media key')
+    }
+    if (typeof buffer === 'string') {
+        buffer = Buffer.from(buffer.replace('data:base64,', ''), 'base64')
+    }
+    // expand using HKDF to 112 bytes, also pass in the relevant app info
+    const expandedMediaKey = await hkdf(buffer, 112, { info: hkdfInfoKey(mediaType) })
+    return {
+        iv: expandedMediaKey.slice(0, 16),
+        cipherKey: expandedMediaKey.slice(16, 48),
+        macKey: expandedMediaKey.slice(48, 80)
+    }
+}
+
+/** Extracts video thumb using FFMPEG */
+const extractVideoThumb = async (path, destPath, time, size) => new Promise((resolve, reject) => {
+    const cmd = `ffmpeg -ss ${time} -i ${path} -y -vf scale=${size.width}:-1 -vframes 1 -f image2 ${destPath}`
+    exec(cmd, err => {
+        if (err) {
+            reject(err)
+        }
+        else {
+            resolve()
+        }
+    })
+})
+
+const extractImageThumb = async (bufferOrFilePath, width = 32, quality = 50) => {
+    // TODO: Move entirely to sharp, removing jimp as it supports readable streams
+    // This will have positive speed and performance impacts as well as minimizing RAM usage.
+    if (bufferOrFilePath instanceof Readable) {
+        bufferOrFilePath = await toBuffer(bufferOrFilePath)
+    }
+
+    const lib = await getImageProcessingLibrary()
+
+    if ('sharp' in lib && typeof lib.sharp === 'function') {
+        const img = lib.sharp(bufferOrFilePath)
+        const dimensions = await img.metadata()
+        const buffer = await img.resize(width).jpeg({ quality: 50 }).toBuffer()
+        return {
+            buffer,
+            original: {
+                width: dimensions.width,
+                height: dimensions.height
+            }
+        }
+    }
+    else if ('jimp' in lib && typeof lib.jimp.read === 'function') {
+            const { read, MIME_JPEG, RESIZE_BEZIER, AUTO } = lib.jimp
+        const jimp = await read(bufferOrFilePath)
+        const dimensions = {
+            width: jimp.getWidth(),
+            height: jimp.getHeight() 
+        }
+        const buffer = await jimp
+         .quality(quality) 
+         .resize(width, AUTO, RESIZE_BEZIER) 
+         .getBufferAsync(MIME_JPEG) 
+        return {
+            buffer,
+            original: dimensions
+        }
+    }
+    else {
+        throw new Boom('No image processing library available')
+    }
+}
+
+const encodeBase64EncodedStringForUpload = (b64) => (encodeURIComponent(b64
+    .replace(/\+/g, '-')
+    .replace(/\//g, '_')
+    .replace(/\=+$/, '')))
+
+const generateProfilePicture = async (mediaUpload, dimensions) => {
+    let buffer
+
+    const { width: w = 640, height: h = 640 } = dimensions || {}
+
+    if (Buffer.isBuffer(mediaUpload)) {
+        buffer = mediaUpload
+    }
+    else {
+        // Use getStream to handle all WAMediaUpload types (Buffer, Stream, URL)
+        const { stream } = await getStream(mediaUpload)
+        // Convert the resulting stream to a buffer
+        buffer = await toBuffer(stream)
+    }
+    const lib = await getImageProcessingLibrary()
+
+    let img
+
+    if ('sharp' in lib && typeof lib.sharp?.default === 'function') {
+        img = lib.sharp
+            .default(buffer)
+            .resize(w, h)
+            .jpeg({
+            quality: 50
+        }).toBuffer()
+    }
+    else if ('jimp' in lib && typeof lib.jimp?.read === 'function') {
+        const jimp = await lib.jimp.read(buffer)
+        const min = Math.min(jimp.width, jimp.height)
+        const cropped = jimp.crop({ x: 0, y: 0, w: min, h: min })
+        img = cropped.resize({ w, h, mode: lib.jimp.ResizeStrategy.BILINEAR }).getBuffer('image/jpeg', { quality: 50 })
+    }
+    else {
+        throw new Boom('No image processing library available');
+    }
+    return {
+        img: await img
+    }
+}
+
+/** gets the SHA256 of the given media message */
+const mediaMessageSHA256B64 = (message) => {
+    const media = Object.values(message)[0]
+    return media?.fileSha256 && Buffer.from(media.fileSha256).toString('base64')
+}
+
+async function getAudioDuration(buffer) {
+    const options = {
+            duration: true
+    }
+
+    let metadata
+
+    if (Buffer.isBuffer(buffer)) {
+        metadata = await parseBuffer(buffer, undefined, options)
+    }
+    else if (typeof buffer === 'string') {
+        metadata = await parseFile(buffer, options) 
+    }
+    else {
+        metadata = await parseStream(buffer, undefined, options) 
+    }
+    return metadata.format?.duration
+}
+
+/**
+  referenced from and modifying https://github.com/wppconnect-team/wa-js/blob/main/src/chat/functions/prepareAudioWaveform.ts
+ */
+async function getAudioWaveform(buffer, logger) {
+    try {
+        const { default: decoder } = await eval('import(\'audio-decode\')')
+        
+        let audioData
+
+        if (Buffer.isBuffer(buffer)) {
+            audioData = buffer
+        }
+        else if (typeof buffer === 'string') {
+            const rStream = createReadStream(buffer)
+            audioData = await toBuffer(rStream)
+        }
+        else {
+            audioData = await toBuffer(buffer)
+        }
+
+        const audioBuffer = await decoder(audioData)
+        const rawData = audioBuffer.getChannelData(0) // We only need to work with one channel of data
+        const samples = 64 // Number of samples we want to have in our final data set
+        const blockSize = Math.floor(rawData.length / samples) // the number of samples in each subdivision
+        const filteredData = []
+
+        for (let i = 0; i < samples; i++) {
+            const blockStart = blockSize * i // the location of the first sample in the block
+            let sum = 0
+            for (let j = 0; j < blockSize; j++) {
+                sum = sum + Math.abs(rawData[blockStart + j]) // find the sum of all the samples in the block
+            }
+            filteredData.push(sum / blockSize) // divide the sum by the block size to get the average
+        }
+
+        // This guarantees that the largest data point will be set to 1, and the rest of the data will scale proportionally.
+        const multiplier = Math.pow(Math.max(...filteredData), -1)
+        const normalizedData = filteredData.map((n) => n * multiplier)
+
+        // Generate waveform like WhatsApp
+        const waveform = new Uint8Array(normalizedData.map((n) => Math.floor(100 * n)))
+        return waveform
+    }
+    catch (e) {
+        logger?.debug('Failed to generate waveform: ' + e)
+    }
+}
+
+const toReadable = (buffer) => {
+    const readable = new Readable({ read: () => { } })
+    readable.push(buffer)
+    readable.push(null)
+    return readable
+}
+
+const toBuffer = async (stream) => {
+    const chunks = []
+    for await (const chunk of stream) {
+        chunks.push(chunk)
+    }
+    stream.destroy()
+    return Buffer.concat(chunks)
+}
+
+const getStream = async (item, opts) => {
+    if (Buffer.isBuffer(item)) {
+        return { stream: toReadable(item), type: 'buffer' }
+    }
+
+    if ('stream' in item) {
+        return { stream: item.stream, type: 'readable' }
+    }
+
+    const urlStr = item.url.toString() 
+
+    if (urlStr.startsWith('data:')) {
+        const buffer = Buffer.from(urlStr.split(',')[1], 'base64') 
+        return { stream: await toReadable(buffer), type: 'buffer' }
+    }
+
+    if (urlStr.startsWith('http://') || urlStr.startsWith('https://')) {
+        return { stream: await getHttpStream(item.url, opts), type: 'remote' }
+    }
+
+    return { stream: createReadStream(item.url), type: 'file' }
+}
+
+/** generates a thumbnail for a given media, if required */
+async function generateThumbnail(file, mediaType, options) {
+    let thumbnail
+    let originalImageDimensions
+
+    if (mediaType === 'image') {
+        const { buffer, original } = await extractImageThumb(file)
+
+        thumbnail = buffer.toString('base64')
+
+        if (original.width && original.height) {
+            originalImageDimensions = {
+                width: original.width,
+                height: original.height
+            }
+        }
+    }
+    else if (mediaType === 'video') {
+        const imgFilename = join(getTmpFilesDirectory(), generateMessageID() + '.jpg')
+        try {
+            await extractVideoThumb(file, imgFilename, '00:00:00', { width: 32, height: 32 })
+            const buff = await promises.readFile(imgFilename)
+
+            thumbnail = buff.toString('base64')
+
+            await promises.unlink(imgFilename)
+        }
+        catch (err) {
+            options.logger?.debug('could not generate video thumb: ' + err)
+        }
+    }
+    return {
+        thumbnail,
+        originalImageDimensions
+    }
+}
+
+const getHttpStream = async (url, options = {}) => {
+    const response = await fetch(url.toString(), {
+        dispatcher: options.dispatcher,
+        method: 'GET',
+        headers: options.headers
+    })
+
+    if (!response.ok) {
+        throw new Boom(`Failed to fetch stream from ${url}`, { statusCode: response.status, data: { url } })
+    }
+
+    return response.body instanceof Readable ? response.body : Readable.fromWeb(response.body)
+}
+
+/*const prepareStream = async (media, mediaType, { logger, saveOriginalFileIfRequired, opts } = {}) => {
+    const { stream, type } = await getStream(media, opts)
+    logger?.debug('fetched media stream')
+
+    const encFilePath = join(tmpdir(), mediaType + generateMessageID() + '-plain')
+    const encFileWriteStream = createWriteStream(encFilePath)
+
+    let originalFilePath
+    let originalFileStream
+
+    if (type === 'file') {
+        originalFilePath = media.url.toString()
+    } else if (saveOriginalFileIfRequired) {
+        originalFilePath = join(tmpdir(), mediaType + generateMessageID() + '-original')
+        originalFileStream = createWriteStream(originalFilePath)
+    }
+
+    let fileLength = 0
+    const sha256 = createHash('sha256')
+
+    try {
+        for await (const data of stream) {
+            fileLength += data.length
+
+            if (type === 'remote'
+                && opts?.maxContentLength
+                && fileLength + data.length > opts.maxContentLength) {
+                throw new Boom(`content length exceeded when preparing "${type}"`, {
+                    data: { media, type }
+                })
+            }
+
+            sha256.update(data)
+            encFileWriteStream.write(data)
+
+            if (originalFileStream && !originalFileStream.write(data)) {
+                await once(originalFileStream, 'drain')
+            }
+        }
+
+        const fileSha256 = sha256.digest()
+        encFileWriteStream.end()
+        originalFileStream?.end?.call(originalFileStream)
+        stream.destroy()
+
+        logger?.debug('prepared plain stream successfully')
+
+        return {
+            mediaKey: undefined,
+            originalFilePath,
+            encFilePath,
+            mac: undefined,
+            fileEncSha256: undefined,
+            fileSha256,
+            fileLength
+        }
+    }
+    catch (error) {
+        encFileWriteStream.destroy()
+        originalFileStream?.destroy?.call(originalFileStream)
+        sha256.destroy()
+        stream.destroy()
+        try {
+            await promises.unlink(encFilePath)
+            if (originalFilePath && didSaveToTmpPath) {
+                await promises.unlink(originalFilePath)
+            }
+        } catch (err) {
+            logger?.error({ err }, 'failed deleting tmp files')
+        }
+        throw error
+    }
+}*/
+
+const encryptedStream = async (media, mediaType, { logger, saveOriginalFileIfRequired, opts } = {}) => {
+    const { stream, type } = await getStream(media, opts)
+
+    logger?.debug('fetched media stream')
+
+    const mediaKey = randomBytes(32)
+    const { cipherKey, iv, macKey } = await getMediaKeys(mediaKey, mediaType)
+    const encFilePath = join(getTmpFilesDirectory(), mediaType + generateMessageID() + '-enc')
+    const encFileWriteStream = createWriteStream(encFilePath)
+
+    let originalFileStream;
+    let originalFilePath
+
+    if (saveOriginalFileIfRequired) {
+        originalFilePath = join(getTmpFilesDirectory(), mediaType + generateMessageID() + '-original')
+        originalFileStream = createWriteStream(originalFilePath)
+    }
+
+    let fileLength = 0
+
+    const aes = createCipheriv('aes-256-cbc', cipherKey, iv) 
+    const hmac = createHmac('sha256', macKey).update(iv)
+    const sha256Plain = createHash('sha256');
+    const sha256Enc = createHash('sha256')
+
+    const onChunk = async (buff) => {
+        sha256Enc.update(buff)
+        hmac.update(buff)
+
+        // Handle backpressure: if write returns false, wait for drain
+        if (!encFileWriteStream.write(buff)) {
+            await once(encFileWriteStream, 'drain')
+        }
+    }
+
+    try {
+        for await (const data of stream) {
+            fileLength += data.length
+
+            if (type === 'remote' &&
+                opts?.maxContentLength &&
+                fileLength + data.length > opts.maxContentLength) {
+                throw new Boom(`content length exceeded when encrypting "${type}"`, {
+                    data: { media, type }
+                })
+            }
+
+            if (originalFileStream) {
+                if (!originalFileStream.write(data)) {
+                    await once(originalFileStream, 'drain')
+                }
+            }
+
+            sha256Plain.update(data)
+
+            await onChunk(aes.update(data))
+        }
+
+        await onChunk(aes.final())
+        const mac = hmac.digest().slice(0, 10)
+
+        sha256Enc.update(mac)
+
+        const fileSha256 = sha256Plain.digest()
+        const fileEncSha256 = sha256Enc.digest()
+
+        encFileWriteStream.write(mac)
+
+        const encFinishPromise = once(encFileWriteStream, 'finish')
+        const originalFinishPromise = originalFileStream ? once(originalFileStream, 'finish') : Promise.resolve()
+
+        encFileWriteStream.end()
+        originalFileStream?.end?.()
+        stream.destroy()
+
+        // Wait for write streams to fully flush to disk
+        // This helps reduce memory pressure by allowing OS to release buffers
+        await encFinishPromise
+        await originalFinishPromise
+
+        logger?.debug('encrypted data successfully')
+
+        return {
+            mediaKey,
+            originalFilePath,
+            encFilePath,
+            mac,
+            fileEncSha256,
+            fileSha256,
+            fileLength
+        }
+    }
+    catch (error) {
+        // destroy all streams with error
+        encFileWriteStream.destroy()
+        originalFileStream?.destroy?.()
+        aes.destroy()
+        hmac.destroy()
+        sha256Plain.destroy()
+        sha256Enc.destroy()
+        stream.destroy()
+
+        try {
+            await promises.unlink(encFilePath)
+
+            if (originalFilePath) {
+                await promises.unlink(originalFilePath)
+            }
+        }
+        catch (err) {
+            logger?.error({ err }, 'failed deleting tmp files')
+        }
+        throw error
+    }
+}
+
+const DEF_HOST = 'mmg.whatsapp.net'
+
+const AES_CHUNK_SIZE = 16
+
+const toSmallestChunkSize = (num) => {
+    return Math.floor(num / AES_CHUNK_SIZE) * AES_CHUNK_SIZE
+}
+const getUrlFromDirectPath = (directPath) => `https://${DEF_HOST}${directPath}`
+
+const downloadContentFromMessage = async ({ mediaKey, directPath, url }, type, opts = {}) => {
+        const isValidMediaUrl = url?.startsWith('https://mmg.whatsapp.net/') 
+    const downloadUrl = isValidMediaUrl ? url : getUrlFromDirectPath(directPath)
+
+    if (!downloadUrl) {
+            throw new Boom('No valid media URL or directPath present in message', { statusCode: 400 }) 
+    }
+
+    const keys = await getMediaKeys(mediaKey, type)
+    return downloadEncryptedContent(downloadUrl, keys, opts)
+}
+
+/**
+ * Decrypts and downloads an AES256-CBC encrypted file given the keys.
+ * Assumes the SHA256 of the plaintext is appended to the end of the ciphertext
+ * */
+const downloadEncryptedContent = async (downloadUrl, { cipherKey, iv }, { startByte, endByte, options } = {}) => {
+    let bytesFetched = 0
+    let startChunk = 0
+    let firstBlockIsIV = false
+
+    // if a start byte is specified -- then we need to fetch the previous chunk as that will form the IV
+    if (startByte) {
+        const chunk = toSmallestChunkSize(startByte || 0)
+
+        if (chunk) {
+            startChunk = chunk - AES_CHUNK_SIZE
+            bytesFetched = chunk
+            firstBlockIsIV = true
+        }
+    }
+
+    const endChunk = endByte ? toSmallestChunkSize(endByte || 0) + AES_CHUNK_SIZE : undefined
+    const headersInit = options?.headers ? options.headers : undefined
+    const headers = {
+        ...(headersInit
+            ? Array.isArray(headersInit)
+                ? Object.fromEntries(headersInit)
+                : headersInit
+            : {}),
+        Origin: DEFAULT_ORIGIN
+    }
+
+    if (startChunk || endChunk) {
+        headers.Range = `bytes=${startChunk}-`
+
+        if (endChunk) {
+            headers.Range += endChunk
+        }
+    }
+
+    // download the message
+    const fetched = await getHttpStream(downloadUrl, {
+        ...(options || {}),
+        headers
+    })
+
+    let remainingBytes = Buffer.from([])
+    let aes
+
+    const pushBytes = (bytes, push) => {
+        if (startByte || endByte) {
+            const start = bytesFetched >= startByte ? undefined : Math.max(startByte - bytesFetched, 0)
+            const end = bytesFetched + bytes.length < endByte ? undefined : Math.max(endByte - bytesFetched, 0)
+
+            push(bytes.slice(start, end))
+            bytesFetched += bytes.length
+        }
+        else {
+            push(bytes)
+        }
+    }
+
+    const output = new Transform({
+        transform(chunk, _, callback) {
+            let data = Buffer.concat([remainingBytes, chunk])
+
+            const decryptLength = toSmallestChunkSize(data.length)
+
+            remainingBytes = data.slice(decryptLength)
+            data = data.slice(0, decryptLength)
+
+            if (!aes) {
+                let ivValue = iv
+
+                if (firstBlockIsIV) {
+                    ivValue = data.slice(0, AES_CHUNK_SIZE)
+                    data = data.slice(AES_CHUNK_SIZE)
+                }
+
+                aes = createDecipheriv('aes-256-cbc', cipherKey, ivValue)
+
+                // if an end byte that is not EOF is specified
+                // stop auto padding (PKCS7) -- otherwise throws an error for decryption
+                if (endByte) {
+                    aes.setAutoPadding(false)
+                }
+            }
+            try {
+                pushBytes(aes.update(data), b => this.push(b))
+                callback()
+            }
+            catch (error) {
+                callback(error)
+            }
+        },
+        final(callback) {
+            try {
+                pushBytes(aes.final(), b => this.push(b))
+                callback()
+            }
+            catch (error) {
+                callback(error)
+            }
+        }
+    })
+
+    return fetched.pipe(output, { end: true })
+}
+
+function extensionForMediaMessage(message) {
+    const getExtension = (mimetype) => mimetype.split('')[0].split('/')[1]
+    const type = Object.keys(message)[0]
+    let extension
+    if (type === 'locationMessage' ||
+        type === 'liveLocationMessage' ||
+        type === 'productMessage') {
+        extension = '.jpeg'
+    }
+    else {
+        const messageContent = message[type]
+        extension = getExtension(messageContent.mimetype)
+    }
+    return extension
+}
+
+const isNodeRuntime = () => {
+    return (typeof process !== 'undefined' &&
+        process.versions?.node !== null &&
+        typeof process.versions.bun === 'undefined' &&
+        typeof globalThis.Deno === 'undefined')
+}
+
+const uploadWithNodeHttp = async ({ url, filePath, headers, timeoutMs, agent }, redirectCount = 0) => {
+    if (redirectCount > 5) {
+        throw new Error('Too many redirects')
+    }
+
+    const parsedUrl = new URL(url)
+    const httpModule = parsedUrl.protocol === 'https:' ? require('https') : require('http')
+
+    // Get file size for Content-Length header (required for Node.js streaming)
+    const fileStats = await promises.stat(filePath)
+    const fileSize = fileStats.size
+
+    return new Promise((resolve, reject) => {
+        const req = httpModule.request({
+            hostname: parsedUrl.hostname,
+            port: parsedUrl.port || (parsedUrl.protocol === 'https:' ? 443 : 80),
+            path: parsedUrl.pathname + parsedUrl.search,
+            method: 'POST',
+            headers: {
+                ...headers,
+                'Content-Length': fileSize
+            },
+            agent,
+            timeout: timeoutMs
+        }, res => {
+            // Handle redirects (3xx)
+            if (res.statusCode && res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+                res.resume() // Consume response to free resources
+
+                const newUrl = new URL(res.headers.location, url).toString()
+
+                resolve(uploadWithNodeHttp({
+                    url: newUrl,
+                    filePath,
+                    headers,
+                    timeoutMs,
+                    agent
+                }, redirectCount + 1))
+                return
+            }
+
+            let body = ''
+
+            res.on('data', chunk => (body += chunk))
+            res.on('end', () => {
+                try {
+                    resolve(JSON.parse(body))
+                }
+                catch {
+                    resolve(undefined)
+                }
+            })
+        })
+
+        req.on('error', reject)
+        req.on('timeout', () => {
+            req.destroy()
+            reject(new Error('Upload timeout'))
+        })
+
+        const stream = createReadStream(filePath)
+
+        stream.pipe(req)
+        stream.on('error', err => {
+            req.destroy()
+            reject(err)
+        })
+    })
+}
+
+const uploadWithFetch = async ({ url, filePath, headers, timeoutMs, agent }) => {
+    // Convert Node.js Readable to Web ReadableStream
+    const nodeStream = createReadStream(filePath)
+    const webStream = Readable.toWeb(nodeStream)
+    const response = await fetch(url, {
+        dispatcher: agent,
+        method: 'POST',
+        body: webStream,
+        headers,
+        duplex: 'half',
+        signal: timeoutMs ? AbortSignal.timeout(timeoutMs) : undefined
+    })
+
+    try {
+        return (await response.json())
+    }
+    catch {
+        return undefined
+    }
+}
+
+/**
+ * Uploads media to WhatsApp servers.
+ *
+ * ## Why we have two upload implementations:
+ *
+ * Node.js's native `fetch` (powered by undici) has a known bug where it buffers
+ * the entire request body in memory before sending, even when using streams.
+ * This causes memory issues with large files (e.g., 1GB file = 1GB+ memory usage).
+ * See: https://github.com/nodejs/undici/issues/4058
+ *
+ * Other runtimes (Bun, Deno, browsers) correctly stream the request body without
+ * buffering, so we can use the web-standard Fetch API there.
+ *
+ * ## Future considerations:
+ * Once the undici bug is fixed, we can simplify this to use only the Fetch API
+ * across all runtimes. Monitor the GitHub issue for updates.
+ */
+const uploadMedia = async (params, logger) => {
+    if (isNodeRuntime()) {
+        logger?.debug('Using Node.js https module for upload (avoids undici buffering bug)')
+        return uploadWithNodeHttp(params)
+    }
+    else {
+        logger?.debug('Using web-standard Fetch API for upload');
+        return uploadWithFetch(params)
+    }
+}
+
+const getWAUploadToServer = ({ customUploadHosts, fetchAgent, logger, options }, refreshMediaConn) => {
+    return async (filePath, { mediaType, fileEncSha256B64, timeoutMs }) => {
+        // send a query JSON to obtain the url & auth token to upload our media
+        let uploadInfo = await refreshMediaConn(false)
+        let urls
+
+        const hosts = [...customUploadHosts, ...uploadInfo.hosts]
+
+        fileEncSha256B64 = encodeBase64EncodedStringForUpload(fileEncSha256B64)
+
+        // Prepare common headers
+        const customHeaders = (() => {
+            const hdrs = options?.headers;
+            if (!hdrs)
+                return {};
+            return Array.isArray(hdrs) ? Object.fromEntries(hdrs) : hdrs
+        })()
+
+        const headers = {
+            ...customHeaders,
+            'Content-Type': 'application/octet-stream',
+            Origin: DEFAULT_ORIGIN
+        }
+
+        for (const { hostname } of hosts) {
+            logger.debug(`uploading to "${hostname}"`)
+
+            const auth = encodeURIComponent(uploadInfo.auth)
+            const url = `https://${hostname}${MEDIA_PATH_MAP[mediaType]}/${fileEncSha256B64}?auth=${auth}&token=${fileEncSha256B64}`
+
+            let result
+
+            try {
+                result = await uploadMedia({
+                    url,
+                    filePath,
+                    headers,
+                    timeoutMs,
+                    agent: fetchAgent
+                }, logger);
+                if (result?.url || result?.direct_path) {
+                    urls = {
+                        mediaUrl: result.url,
+                        directPath: result.direct_path,
+                        meta_hmac: result.meta_hmac,
+                        fbid: result.fbid,
+                        ts: result.ts
+                    }
+                    break
+                }
+                else {
+                    uploadInfo = await refreshMediaConn(true)
+                    throw new Error(`upload failed, reason: ${JSON.stringify(result)}`)
+                }
+            }
+            catch (error) {
+                const isLast = hostname === hosts[uploadInfo.hosts.length - 1]?.hostname
+                logger.warn({ trace: error?.stack, uploadResult: result }, `Error in uploading to ${hostname} ${isLast ? '' : ', retrying...'}`)
+            }
+        }
+
+        if (!urls) {
+            throw new Boom('Media upload failed on all hosts', { statusCode: 500 })
+        }
+
+        return urls
+    }
+}
+
+const getMediaRetryKey = (mediaKey) => {
+    return hkdf(mediaKey, 32, { info: 'WhatsApp Media Retry Notification' })
+}
+/**
+ * Generate a binary node that will request the phone to re-upload the media & return the newly uploaded URL
+ */
+const encryptMediaRetryRequest = async (key, mediaKey, meId) => {
+    const recp = { stanzaId: key.id }
+    const recpBuffer = proto.ServerErrorReceipt.encode(recp).finish()
+    const iv = randomBytes(12)
+    const retryKey = await getMediaRetryKey(mediaKey)
+    const ciphertext = aesEncryptGCM(recpBuffer, retryKey, iv, Buffer.from(key.id))
+    const req = {
+        tag: 'receipt',
+        attrs: {
+            id: key.id,
+            to: jidNormalizedUser(meId),
+            type: 'server-error'
+        },
+        content: [
+            // this encrypt node is actually pretty useless
+            // the media is returned even without this node
+            // keeping it here to maintain parity with WA Web
+            {
+                tag: 'encrypt',
+                attrs: {},
+                content: [
+                    { tag: 'enc_p', attrs: {}, content: ciphertext },
+                    { tag: 'enc_iv', attrs: {}, content: iv }
+                ]
+            },
+            {
+                tag: 'rmr',
+                attrs: {
+                    jid: key.remoteJid,
+                    from_me: (!!key.fromMe).toString(),
+                    participant: key.participant || undefined
+                }
+            }
+        ]
+    }
+    return req
+}
+
+const decodeMediaRetryNode = (node) => {
+    const rmrNode = getBinaryNodeChild(node, 'rmr')
+    const event = {
+        key: {
+            id: node.attrs.id,
+            remoteJid: rmrNode.attrs.jid,
+            fromMe: rmrNode.attrs.from_me === 'true',
+            participant: rmrNode.attrs.participant
+        }
+    }
+    const errorNode = getBinaryNodeChild(node, 'error')
+    if (errorNode) {
+        const errorCode = +errorNode.attrs.code
+        event.error = new Boom(`Failed to re-upload media (${errorCode})`, { data: errorNode.attrs, statusCode: getStatusCodeForMediaRetry(errorCode) })
+    }
+    else {
+        const encryptedInfoNode = getBinaryNodeChild(node, 'encrypt')
+        const ciphertext = getBinaryNodeChildBuffer(encryptedInfoNode, 'enc_p')
+        const iv = getBinaryNodeChildBuffer(encryptedInfoNode, 'enc_iv')
+        if (ciphertext && iv) {
+            event.media = { ciphertext, iv }
+        }
+        else {
+            event.error = new Boom('Failed to re-upload media (missing ciphertext)', { statusCode: 404 })
+        }
+    }
+    return event
+}
+
+const decryptMediaRetryData = async ({ ciphertext, iv }, mediaKey, msgId) => {
+    const retryKey = await getMediaRetryKey(mediaKey)
+    const plaintext = aesDecryptGCM(ciphertext, retryKey, iv, Buffer.from(msgId))
+    return proto.MediaRetryNotification.decode(plaintext)
+}
+
+const getStatusCodeForMediaRetry = (code) => MEDIA_RETRY_STATUS_MAP[code]
+
+const MEDIA_RETRY_STATUS_MAP = {
+    [proto.MediaRetryNotification.ResultType.SUCCESS]: 200,
+    [proto.MediaRetryNotification.ResultType.DECRYPTION_ERROR]: 412,
+    [proto.MediaRetryNotification.ResultType.NOT_FOUND]: 404,
+    [proto.MediaRetryNotification.ResultType.GENERAL_ERROR]: 418,
+}
+
+module.exports = {
+  hkdfInfoKey, 
+  getMediaKeys, 
+  extractVideoThumb, 
+  extractImageThumb, 
+  encodeBase64EncodedStringForUpload, 
+  generateProfilePicture, 
+  mediaMessageSHA256B64, 
+  getAudioDuration, 
+  getAudioWaveform, 
+  toReadable, 
+  toBuffer, 
+  getStream, 
+  generateThumbnail, 
+  getHttpStream, 
+  //prepareStream, 
+  encryptedStream, 
+  getUrlFromDirectPath, 
+  downloadContentFromMessage, 
+  downloadEncryptedContent, 
+  extensionForMediaMessage, 
+  uploadWithNodeHttp, 
+  getRawMediaUploadData, 
+  getWAUploadToServer, 
+  getMediaRetryKey, 
+  encryptMediaRetryRequest, 
+  decodeMediaRetryNode, 
+  decryptMediaRetryData, 
+  getStatusCodeForMediaRetry, 
+  MEDIA_RETRY_STATUS_MAP
+}
+return module.exports;
+})();
+for (const key of Object.keys(__kageModule73)) {
+ if (key !== '__esModule' && !Object.prototype.hasOwnProperty.call(exports,key)) Object.defineProperty(exports,key,{enumerable:true,configurable:true,get:()=>__kageModule73[key]});
+}
+
+// Kage: funciones avanzadas.
+const __kageModule177 = (() => {
+const module = { exports: {} }; const exports = module.exports;
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getStatusCodeForMediaRetry = exports.decryptMediaRetryData = exports.decodeMediaRetryNode = exports.encryptMediaRetryRequest = exports.getWAUploadToServer = exports.uploadWithNodeHttp = exports.downloadEncryptedContent = exports.downloadContentFromMessage = exports.getUrlFromDirectPath = exports.DEF_MEDIA_HOST = exports.encryptedStream = exports.getHttpStream = exports.getStream = exports.toBuffer = exports.toReadable = exports.mediaMessageSHA256B64 = exports.generateProfilePicture = exports.encodeBase64EncodedStringForUpload = exports.extractImageThumb = exports.extractVideoThumb = exports.getRawMediaUploadData = exports.hkdfInfoKey = exports.getImageProcessingLibrary = void 0;
+exports.getMediaKeys = getMediaKeys;
+exports.getAudioData = getAudioData;
+exports.generateThumbnail = generateThumbnail;
+exports.extensionForMediaMessage = extensionForMediaMessage;
+const node_child_process_1 = require("node:child_process");
+const Crypto = __importStar(require("node:crypto"));
+const node_events_1 = require("node:events");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const node_stream_1 = require("node:stream");
+const node_url_1 = require("node:url");
+const index_js_1 = require("../../WAProto/index.js");
+const index_js_2 = require("../Addon/index.js");
+const index_js_3 = require("../Defaults/index.js");
+const index_js_4 = require("../WABinary/index.js");
+const crypto_js_1 = require("./crypto.js");
+const generics_js_1 = require("./generics.js");
+const getTmpFilesDirectory = () => (0, node_os_1.tmpdir)();
+let imageProcessingLibrary;
+const getImageProcessingLibrary = async () => {
+    if (imageProcessingLibrary) {
+        return imageProcessingLibrary;
+    }
+    //@ts-ignore
+    const [sharp, image, jimp] = await Promise.all([
+        Promise.resolve().then(() => __importStar(require('sharp'))).catch(() => { }),
+        Promise.resolve().then(() => __importStar(require('@napi-rs/image'))).catch(() => { }),
+        Promise.resolve().then(() => __importStar(require('jimp'))).catch(() => { })
+    ]);
+    if (sharp) {
+        imageProcessingLibrary = { sharp };
+    }
+    else if (image) {
+        imageProcessingLibrary = { image };
+    }
+    else if (jimp) {
+        imageProcessingLibrary = { jimp };
+    }
+    else {
+        throw new index_js_2.HttpError('No image processing library available');
+    }
+    return imageProcessingLibrary;
+};
+exports.getImageProcessingLibrary = getImageProcessingLibrary;
+const hkdfInfoKey = (type) => {
+    const hkdfInfo = index_js_3.MEDIA_HKDF_KEY_MAPPING[type];
+    return `WhatsApp ${hkdfInfo} Keys`;
+};
+exports.hkdfInfoKey = hkdfInfoKey;
+const getRawMediaUploadData = async (media, mediaType, logger) => {
+    const { stream } = await (0, exports.getStream)(media);
+    logger?.debug('got stream for raw upload');
+    const hasher = Crypto.createHash('sha256');
+    const filePath = (0, node_path_1.join)((0, node_os_1.tmpdir)(), mediaType + (0, generics_js_1.generateMessageIDV2)());
+    const fileWriteStream = (0, node_fs_1.createWriteStream)(filePath);
+    let fileLength = 0;
+    try {
+        for await (const data of stream) {
+            fileLength += data.length;
+            hasher.update(data);
+            if (!fileWriteStream.write(data)) {
+                await (0, node_events_1.once)(fileWriteStream, 'drain');
+            }
+        }
+        fileWriteStream.end();
+        await (0, node_events_1.once)(fileWriteStream, 'finish');
+        stream.destroy();
+        const fileSha256 = hasher.digest();
+        logger?.debug('hashed data for raw upload');
+        return {
+            filePath: filePath,
+            fileSha256,
+            fileLength
+        };
+    }
+    catch (error) {
+        fileWriteStream.destroy();
+        stream.destroy();
+        try {
+            await node_fs_1.promises.unlink(filePath);
+        }
+        catch {
+            //
+        }
+        throw error;
+    }
+};
+exports.getRawMediaUploadData = getRawMediaUploadData;
+/** generates all the keys required to encrypt/decrypt & sign a media message */
+async function getMediaKeys(buffer, mediaType) {
+    if (!buffer) {
+        throw new index_js_2.HttpError('Cannot derive from empty media key');
+    }
+    if (typeof buffer === 'string') {
+        buffer = Buffer.from(buffer.replace('data:;base64,', ''), 'base64');
+    }
+    // expand using HKDF to 112 bytes, also pass in the relevant app info
+    const expandedMediaKey = (0, crypto_js_1.hkdf)(buffer, 112, { info: (0, exports.hkdfInfoKey)(mediaType) });
+    return {
+        iv: expandedMediaKey.slice(0, 16),
+        cipherKey: expandedMediaKey.slice(16, 48),
+        macKey: expandedMediaKey.slice(48, 80)
+    };
+}
+/** Extracts video thumb using FFMPEG */
+const extractVideoThumb = async (path, time, size) => {
+    const ffmpeg = (0, node_child_process_1.spawn)('ffmpeg', [
+        '-loglevel', 'error',
+        '-ss', String(time),
+        '-i', path,
+        '-an', '-sn', '-dn',
+        '-map_metadata', '-1',
+        '-vf', `scale=${size.width}:-1`,
+        '-frames:v', '1',
+        '-c:v', 'mjpeg',
+        '-f', 'image2pipe',
+        'pipe:1'
+    ], {
+        stdio: ['ignore', 'pipe', 'pipe']
+    });
+    let buffer = Buffer.alloc(0);
+    const stderrChunks = [];
+    ffmpeg.stdout.on('data', (chunk) => {
+        buffer = Buffer.concat([buffer, chunk]);
+    });
+    ffmpeg.stderr.on('data', (chunk) => stderrChunks.push(chunk));
+    const [code] = await (0, node_events_1.once)(ffmpeg, 'close');
+    if (code !== 0) {
+        throw new index_js_2.HttpError(`FFmpeg failed (code ${code}):\n` +
+            Buffer.concat(stderrChunks).toString('utf8'));
+    }
+    return buffer;
+};
+exports.extractVideoThumb = extractVideoThumb;
+const extractImageThumb = async (bufferOrFilePath, width = 32) => {
+    // TODO: Move entirely to sharp, removing jimp as it supports readable streams
+    // This will have positive speed and performance impacts as well as minimizing RAM usage.
+    if (bufferOrFilePath instanceof node_stream_1.Readable) {
+        bufferOrFilePath = await (0, exports.toBuffer)(bufferOrFilePath);
+    }
+    const lib = await (0, exports.getImageProcessingLibrary)();
+    if ('sharp' in lib && lib.sharp?.default) {
+        const img = lib.sharp.default(bufferOrFilePath);
+        const dimensions = await img.metadata();
+        const buffer = await img.resize(width).jpeg({ quality: 50 }).toBuffer();
+        return {
+            buffer,
+            original: {
+                width: dimensions.width,
+                height: dimensions.height
+            }
+        };
+    }
+    else if ('image' in lib && lib.image?.Transformer) {
+        if (!Buffer.isBuffer(bufferOrFilePath)) {
+            bufferOrFilePath = await node_fs_1.promises.readFile(bufferOrFilePath);
+        }
+        const img = new lib.image.Transformer(bufferOrFilePath);
+        const dimensions = await img.metadata();
+        const buffer = await img.resize(width, undefined, 0).jpeg(50);
+        return {
+            buffer,
+            original: {
+                width: dimensions.width,
+                height: dimensions.height
+            }
+        };
+    }
+    else if ('jimp' in lib && lib.jimp?.Jimp) {
+        const jimp = await lib.jimp.Jimp.read(bufferOrFilePath);
+        const dimensions = {
+            width: jimp.width,
+            height: jimp.height
+        };
+        const buffer = await jimp
+            .resize({ w: width, mode: lib.jimp.ResizeStrategy.BILINEAR })
+            .getBuffer('image/jpeg', { quality: 50 });
+        return {
+            buffer,
+            original: dimensions
+        };
+    }
+    else {
+        throw new index_js_2.HttpError('No image processing library available');
+    }
+};
+exports.extractImageThumb = extractImageThumb;
+const encodeBase64EncodedStringForUpload = (b64) => encodeURIComponent(b64.replace(/\+/g, '-').replace(/\//g, '_').replace(/\=+$/, ''));
+exports.encodeBase64EncodedStringForUpload = encodeBase64EncodedStringForUpload;
+const generateProfilePicture = async (mediaUpload, dimensions) => {
+    let buffer;
+    const { width: w = 720, height: h = 720 } = dimensions || {};
+    if (Buffer.isBuffer(mediaUpload)) {
+        buffer = mediaUpload;
+    }
+    else {
+        // Use getStream to handle all WAMediaUpload types (Buffer, Stream, URL)
+        const { stream } = await (0, exports.getStream)(mediaUpload);
+        // Convert the resulting stream to a buffer
+        buffer = await (0, exports.toBuffer)(stream);
+    }
+    const lib = await (0, exports.getImageProcessingLibrary)();
+    let img;
+    if ('sharp' in lib && lib.sharp?.default) {
+        img = lib.sharp
+            .default(buffer)
+            .resize(w, h)
+            .jpeg({
+            quality: 80
+        })
+            .toBuffer();
+    }
+    else if ('image' in lib && lib.image?.Transformer) {
+        img = new lib.image
+            .Transformer(buffer)
+            .resize(w, h, 0)
+            .jpeg(80);
+    }
+    else if ('jimp' in lib && lib.jimp?.Jimp) {
+        const jimp = await lib.jimp.Jimp.read(buffer);
+        const min = Math.min(jimp.width, jimp.height);
+        const cropped = jimp.crop({ x: 0, y: 0, w: min, h: min });
+        img = cropped.resize({ w, h, mode: lib.jimp.ResizeStrategy.BILINEAR }).getBuffer('image/jpeg', { quality: 80 });
+    }
+    else {
+        throw new index_js_2.HttpError('No image processing library available');
+    }
+    return {
+        img: await img
+    };
+};
+exports.generateProfilePicture = generateProfilePicture;
+/** gets the SHA256 of the given media message */
+const mediaMessageSHA256B64 = (message) => {
+    const media = Object.values(message)[0];
+    return media?.fileSha256 && Buffer.from(media.fileSha256).toString('base64');
+};
+exports.mediaMessageSHA256B64 = mediaMessageSHA256B64;
+async function getAudioData(buffer, logger) {
+    try {
+        const filePath = await (0, index_js_2.getFile)(buffer);
+        const result = await (0, index_js_2.getAudioWaveform)(filePath);
+        await node_fs_1.promises.unlink(filePath);
+        return result;
+    }
+    catch (e) {
+        logger?.debug('Failed to get audio data: ' + e);
+    }
+}
+const toReadable = (buffer) => {
+    const readable = new node_stream_1.Readable({ read: () => { } });
+    readable.push(buffer);
+    readable.push(null);
+    return readable;
+};
+exports.toReadable = toReadable;
+const toBuffer = async (stream) => {
+    const chunks = [];
+    for await (const chunk of stream) {
+        chunks.push(chunk);
+    }
+    stream.destroy();
+    return Buffer.concat(chunks);
+};
+exports.toBuffer = toBuffer;
+const getStream = async (item, opts) => {
+    if (Buffer.isBuffer(item)) {
+        return { stream: (0, exports.toReadable)(item), type: 'buffer' };
+    }
+    if ('stream' in item) {
+        return { stream: item.stream, type: 'readable' };
+    }
+    const urlStr = item.url.toString();
+    if (urlStr.startsWith('data:')) {
+        const buffer = Buffer.from(urlStr.split(',')[1], 'base64');
+        return { stream: (0, exports.toReadable)(buffer), type: 'buffer' };
+    }
+    if (urlStr.startsWith('http://') || urlStr.startsWith('https://')) {
+        return { stream: await (0, exports.getHttpStream)(item.url, opts), type: 'remote' };
+    }
+    return { stream: (0, node_fs_1.createReadStream)(item.url), type: 'file' };
+};
+exports.getStream = getStream;
+/** generates a thumbnail for a given media, if required */
+async function generateThumbnail(file, mediaType, options) {
+    let thumbnail;
+    let originalImageDimensions;
+    if (mediaType === 'image') {
+        const { buffer, original } = await (0, exports.extractImageThumb)(file);
+        thumbnail = buffer.toString('base64');
+        if (original.width && original.height) {
+            originalImageDimensions = {
+                width: original.width,
+                height: original.height
+            };
+        }
+    }
+    else if (mediaType === 'video') {
+        try {
+            const buff = await (0, exports.extractVideoThumb)(file, '00:00:00', { width: 32, height: 32 });
+            thumbnail = buff.toString('base64');
+        }
+        catch (err) {
+            options.logger?.debug('could not generate video thumb: ' + err);
+        }
+    }
+    return {
+        thumbnail,
+        originalImageDimensions
+    };
+}
+const getHttpStream = async (url, options = {}) => {
+    const response = await fetch(url.toString(), {
+        dispatcher: options.dispatcher,
+        method: 'GET',
+        headers: options.headers
+    });
+    if (!response.ok) {
+        throw new index_js_2.HttpError(`Failed to fetch stream from ${url}`, { statusCode: response.status, data: { url } });
+    }
+    // @ts-ignore Node18+ Readable.fromWeb exists
+    return response.body instanceof node_stream_1.Readable ? response.body : node_stream_1.Readable.fromWeb(response.body);
+};
+exports.getHttpStream = getHttpStream;
+const encryptedStream = async (media, mediaType, { logger, saveOriginalFileIfRequired, opts } = {}) => {
+    const { stream, type } = await (0, exports.getStream)(media, opts);
+    logger?.debug('fetched media stream');
+    const mediaKey = Crypto.randomBytes(32);
+    const { cipherKey, iv, macKey } = await getMediaKeys(mediaKey, mediaType);
+    const encFilePath = (0, node_path_1.join)(getTmpFilesDirectory(), mediaType + (0, generics_js_1.generateMessageIDV2)() + '-enc');
+    const encFileWriteStream = (0, node_fs_1.createWriteStream)(encFilePath);
+    let originalFileStream;
+    let originalFilePath;
+    if (saveOriginalFileIfRequired) {
+        originalFilePath = (0, node_path_1.join)(getTmpFilesDirectory(), mediaType + (0, generics_js_1.generateMessageIDV2)() + '-original');
+        originalFileStream = (0, node_fs_1.createWriteStream)(originalFilePath);
+    }
+    let fileLength = 0;
+    const aes = Crypto.createCipheriv('aes-256-cbc', cipherKey, iv);
+    const hmac = Crypto.createHmac('sha256', macKey).update(iv);
+    const sha256Plain = Crypto.createHash('sha256');
+    const sha256Enc = Crypto.createHash('sha256');
+    const onChunk = async (buff) => {
+        sha256Enc.update(buff);
+        hmac.update(buff);
+        // Handle backpressure: if write returns false, wait for drain
+        if (!encFileWriteStream.write(buff)) {
+            await (0, node_events_1.once)(encFileWriteStream, 'drain');
+        }
+    };
+    try {
+        for await (const data of stream) {
+            fileLength += data.length;
+            if (type === 'remote' &&
+                opts?.maxContentLength &&
+                fileLength + data.length > opts.maxContentLength) {
+                throw new index_js_2.HttpError(`content length exceeded when encrypting "${type}"`, {
+                    data: { media, type }
+                });
+            }
+            if (originalFileStream) {
+                if (!originalFileStream.write(data)) {
+                    await (0, node_events_1.once)(originalFileStream, 'drain');
+                }
+            }
+            sha256Plain.update(data);
+            await onChunk(aes.update(data));
+        }
+        await onChunk(aes.final());
+        const mac = hmac.digest().slice(0, 10);
+        sha256Enc.update(mac);
+        const fileSha256 = sha256Plain.digest();
+        const fileEncSha256 = sha256Enc.digest();
+        encFileWriteStream.write(mac);
+        const encFinishPromise = (0, node_events_1.once)(encFileWriteStream, 'finish');
+        const originalFinishPromise = originalFileStream ? (0, node_events_1.once)(originalFileStream, 'finish') : Promise.resolve();
+        encFileWriteStream.end();
+        originalFileStream?.end?.();
+        stream.destroy();
+        // Wait for write streams to fully flush to disk
+        // This helps reduce memory pressure by allowing OS to release buffers
+        await encFinishPromise;
+        await originalFinishPromise;
+        logger?.debug('encrypted data successfully');
+        return {
+            mediaKey,
+            originalFilePath,
+            encFilePath,
+            mac,
+            fileEncSha256,
+            fileSha256,
+            fileLength
+        };
+    }
+    catch (error) {
+        // destroy all streams with error
+        encFileWriteStream.destroy();
+        originalFileStream?.destroy?.();
+        aes.destroy();
+        hmac.destroy();
+        sha256Plain.destroy();
+        sha256Enc.destroy();
+        stream.destroy();
+        try {
+            await node_fs_1.promises.unlink(encFilePath);
+            if (originalFilePath) {
+                await node_fs_1.promises.unlink(originalFilePath);
+            }
+        }
+        catch (err) {
+            logger?.error({ err }, 'failed deleting tmp files');
+        }
+        throw error;
+    }
+};
+exports.encryptedStream = encryptedStream;
+exports.DEF_MEDIA_HOST = 'mmg.whatsapp.net';
+const AES_CHUNK_SIZE = 16;
+const toSmallestChunkSize = (num) => {
+    return Math.floor(num / AES_CHUNK_SIZE) * AES_CHUNK_SIZE;
+};
+const getUrlFromDirectPath = (directPath, host = exports.DEF_MEDIA_HOST) => `https://${host}${directPath}`;
+exports.getUrlFromDirectPath = getUrlFromDirectPath;
+const extractHost = (url) => {
+    if (!url)
+        return undefined;
+    try {
+        return new node_url_1.URL(url).host;
+    }
+    catch {
+        return undefined;
+    }
+};
+const downloadContentFromMessage = async ({ mediaKey, directPath, url }, type, opts = {}) => {
+    // Fallback host: explicit opt > host parsed from `url` > DEF_MEDIA_HOST.
+    // Lets us honor a non-default host carried by the proto without forcing callers to thread it through.
+    const fallbackHost = opts.host ?? extractHost(url);
+    const downloadUrl = directPath ? (0, exports.getUrlFromDirectPath)(directPath, fallbackHost) : url;
+    if (!downloadUrl) {
+        throw new index_js_2.HttpError('No valid media URL or directPath present in message', { statusCode: 400 });
+    }
+    const keys = await getMediaKeys(mediaKey, type);
+    return (0, exports.downloadEncryptedContent)(downloadUrl, keys, opts);
+};
+exports.downloadContentFromMessage = downloadContentFromMessage;
+/**
+ * Decrypts and downloads an AES256-CBC encrypted file given the keys.
+ * Assumes the SHA256 of the plaintext is appended to the end of the ciphertext
+ * */
+const downloadEncryptedContent = async (downloadUrl, { cipherKey, iv }, { startByte, endByte, options } = {}) => {
+    let bytesFetched = 0;
+    let startChunk = 0;
+    let firstBlockIsIV = false;
+    // if a start byte is specified -- then we need to fetch the previous chunk as that will form the IV
+    if (startByte) {
+        const chunk = toSmallestChunkSize(startByte || 0);
+        if (chunk) {
+            startChunk = chunk - AES_CHUNK_SIZE;
+            bytesFetched = chunk;
+            firstBlockIsIV = true;
+        }
+    }
+    const endChunk = endByte ? toSmallestChunkSize(endByte || 0) + AES_CHUNK_SIZE : undefined;
+    const headersInit = options?.headers ? options.headers : undefined;
+    const headers = {
+        ...(headersInit
+            ? Array.isArray(headersInit)
+                ? Object.fromEntries(headersInit)
+                : headersInit
+            : {}),
+        Origin: index_js_3.DEFAULT_ORIGIN
+    };
+    if (startChunk || endChunk) {
+        headers.Range = `bytes=${startChunk}-`;
+        if (endChunk) {
+            headers.Range += endChunk;
+        }
+    }
+    // download the message
+    const fetched = await (0, exports.getHttpStream)(downloadUrl, {
+        ...(options || {}),
+        headers
+    });
+    let remainingBytes = Buffer.from([]);
+    let aes;
+    const pushBytes = (bytes, push) => {
+        if (startByte || endByte) {
+            const start = bytesFetched >= startByte ? undefined : Math.max(startByte - bytesFetched, 0);
+            const end = bytesFetched + bytes.length < endByte ? undefined : Math.max(endByte - bytesFetched, 0);
+            push(bytes.slice(start, end));
+            bytesFetched += bytes.length;
+        }
+        else {
+            push(bytes);
+        }
+    };
+    const output = new node_stream_1.Transform({
+        transform(chunk, _, callback) {
+            let data = remainingBytes.length ? Buffer.concat([remainingBytes, chunk]) : chunk;
+            const decryptLength = toSmallestChunkSize(data.length);
+            remainingBytes = data.slice(decryptLength);
+            data = data.slice(0, decryptLength);
+            if (!aes) {
+                let ivValue = iv;
+                if (firstBlockIsIV) {
+                    ivValue = data.slice(0, AES_CHUNK_SIZE);
+                    data = data.slice(AES_CHUNK_SIZE);
+                }
+                aes = Crypto.createDecipheriv('aes-256-cbc', cipherKey, ivValue);
+                // if an end byte that is not EOF is specified
+                // stop auto padding (PKCS7) -- otherwise throws an error for decryption
+                if (endByte) {
+                    aes.setAutoPadding(false);
+                }
+            }
+            try {
+                pushBytes(aes.update(data), b => this.push(b));
+                callback();
+            }
+            catch (error) {
+                callback(error);
+            }
+        },
+        final(callback) {
+            try {
+                pushBytes(aes.final(), b => this.push(b));
+                callback();
+            }
+            catch (error) {
+                callback(error);
+            }
+        }
+    });
+    return fetched.pipe(output, { end: true });
+};
+exports.downloadEncryptedContent = downloadEncryptedContent;
+function extensionForMediaMessage(message) {
+    const getExtension = (mimetype) => mimetype.split(';')[0]?.split('/')[1];
+    const type = Object.keys(message)[0];
+    let extension;
+    if (type === 'locationMessage' || type === 'liveLocationMessage' || type === 'productMessage') {
+        extension = '.jpeg';
+    }
+    else {
+        const messageContent = message[type];
+        extension = getExtension(messageContent.mimetype);
+    }
+    return extension;
+}
+const isNodeRuntime = () => {
+    return (typeof process !== 'undefined' &&
+        process.versions?.node !== null &&
+        typeof process.versions.bun === 'undefined' &&
+        typeof globalThis.Deno === 'undefined');
+};
+const uploadWithNodeHttp = async ({ url, filePath, headers, timeoutMs, agent }, redirectCount = 0) => {
+    if (redirectCount > 5) {
+        throw new Error('Too many redirects');
+    }
+    const parsedUrl = new node_url_1.URL(url);
+    const httpModule = parsedUrl.protocol === 'https:' ? await Promise.resolve().then(() => __importStar(require('https'))) : await Promise.resolve().then(() => __importStar(require('http')));
+    // Get file size for Content-Length header (required for Node.js streaming)
+    const fileStats = await node_fs_1.promises.stat(filePath);
+    const fileSize = fileStats.size;
+    return new Promise((resolve, reject) => {
+        const req = httpModule.request({
+            hostname: parsedUrl.hostname,
+            port: parsedUrl.port || (parsedUrl.protocol === 'https:' ? 443 : 80),
+            path: parsedUrl.pathname + parsedUrl.search,
+            method: 'POST',
+            headers: {
+                ...headers,
+                'Content-Length': fileSize
+            },
+            agent,
+            timeout: timeoutMs
+        }, res => {
+            // Handle redirects (3xx)
+            if (res.statusCode && res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+                res.resume(); // Consume response to free resources
+                const newUrl = new node_url_1.URL(res.headers.location, url).toString();
+                resolve((0, exports.uploadWithNodeHttp)({
+                    url: newUrl,
+                    filePath,
+                    headers,
+                    timeoutMs,
+                    agent
+                }, redirectCount + 1));
+                return;
+            }
+            let body = '';
+            res.on('data', chunk => (body += chunk));
+            res.on('end', () => {
+                try {
+                    resolve(JSON.parse(body));
+                }
+                catch {
+                    resolve(undefined);
+                }
+            });
+        });
+        req.on('error', reject);
+        req.on('timeout', () => {
+            req.destroy();
+            reject(new Error('Upload timeout'));
+        });
+        const stream = (0, node_fs_1.createReadStream)(filePath);
+        stream.pipe(req);
+        stream.on('error', err => {
+            req.destroy();
+            reject(err);
+        });
+    });
+};
+exports.uploadWithNodeHttp = uploadWithNodeHttp;
+const uploadWithFetch = async ({ url, filePath, headers, timeoutMs, agent }) => {
+    // Convert Node.js Readable to Web ReadableStream
+    const nodeStream = (0, node_fs_1.createReadStream)(filePath);
+    const webStream = node_stream_1.Readable.toWeb(nodeStream);
+    // Native fetch only accepts Undici-style dispatchers, not generic https Agents.
+    const dispatcher = typeof agent?.dispatch === 'function' ? agent : undefined;
+    const response = await fetch(url, {
+        ...(dispatcher ? { dispatcher } : {}),
+        method: 'POST',
+        body: webStream,
+        headers,
+        duplex: 'half',
+        signal: timeoutMs ? AbortSignal.timeout(timeoutMs) : undefined
+    });
+    try {
+        return (await response.json());
+    }
+    catch {
+        return undefined;
+    }
+};
+/**
+ * Uploads media to WhatsApp servers.
+ *
+ * ## Why we have two upload implementations:
+ *
+ * Node.js's native `fetch` (powered by undici) has a known bug where it buffers
+ * the entire request body in memory before sending, even when using streams.
+ * This causes memory issues with large files (e.g., 1GB file = 1GB+ memory usage).
+ * See: https://github.com/nodejs/undici/issues/4058
+ *
+ * Other runtimes (Bun, Deno, browsers) correctly stream the request body without
+ * buffering, so we can use the web-standard Fetch API there.
+ *
+ * ## Future considerations:
+ * Once the undici bug is fixed, we can simplify this to use only the Fetch API
+ * across all runtimes. Monitor the GitHub issue for updates.
+ */
+const uploadMedia = async (params, logger) => {
+    if (isNodeRuntime()) {
+        logger?.debug('Using Node.js https module for upload (avoids undici buffering bug)');
+        return (0, exports.uploadWithNodeHttp)(params);
+    }
+    else {
+        logger?.debug('Using web-standard Fetch API for upload');
+        return uploadWithFetch(params);
+    }
+};
+const getWAUploadToServer = ({ customUploadHosts, fetchAgent, logger, options }, refreshMediaConn) => {
+    return async (filePath, { mediaType, fileEncSha256B64, timeoutMs, newsletter }) => {
+        // send a query JSON to obtain the url & auth token to upload our media
+        let uploadInfo = await refreshMediaConn(false);
+        let urls;
+        const hosts = [...customUploadHosts, ...uploadInfo.hosts];
+        fileEncSha256B64 = (0, exports.encodeBase64EncodedStringForUpload)(fileEncSha256B64);
+        // Prepare common headers
+        const customHeaders = (() => {
+            const hdrs = options?.headers;
+            if (!hdrs)
+                return {};
+            return Array.isArray(hdrs) ? Object.fromEntries(hdrs) : hdrs;
+        })();
+        const headers = {
+            ...customHeaders,
+            'Content-Type': 'application/octet-stream',
+            Origin: index_js_3.DEFAULT_ORIGIN
+        };
+        for (const { hostname } of hosts) {
+            logger.debug(`uploading to "${hostname}"`);
+            const auth = encodeURIComponent(uploadInfo.auth);
+            // Kage: actualización de compatibilidad.
+            const mediaPathMap = newsletter ? index_js_3.NEWSLETTER_MEDIA_PATH_MAP : index_js_3.MEDIA_PATH_MAP;
+            // Kage: actualización de compatibilidad.
+            const serverThumb = newsletter ? '&server_thumb_gen=1' : '';
+            const url = `https://${hostname}${mediaPathMap[mediaType]}/${fileEncSha256B64}?auth=${auth}&token=${fileEncSha256B64}${serverThumb}`;
+            let result;
+            try {
+                result = await uploadMedia({
+                    url,
+                    filePath,
+                    headers,
+                    timeoutMs,
+                    agent: fetchAgent
+                }, logger);
+                if (result?.url || result?.direct_path) {
+                    urls = {
+                        mediaUrl: result.url,
+                        directPath: result.direct_path,
+                        meta_hmac: result.meta_hmac,
+                        fbid: result.fbid,
+                        ts: result.ts,
+                        thumbnailDirectPath: result.thumbnail_info?.thumbnail_direct_path,
+                        thumbnailSha256: result.thumbnail_info?.thumbnail_sha256
+                    };
+                    break;
+                }
+                else {
+                    uploadInfo = await refreshMediaConn(true);
+                    throw new Error(`upload failed, reason: ${JSON.stringify(result)}`);
+                }
+            }
+            catch (error) {
+                const isLast = hostname === hosts[uploadInfo.hosts.length - 1]?.hostname;
+                logger.warn({ trace: error?.stack, uploadResult: result }, `Error in uploading to ${hostname} ${isLast ? '' : ', retrying...'}`);
+            }
+        }
+        if (!urls) {
+            throw new index_js_2.HttpError('Media upload failed on all hosts', { statusCode: 500 });
+        }
+        return urls;
+    };
+};
+exports.getWAUploadToServer = getWAUploadToServer;
+const getMediaRetryKey = (mediaKey) => {
+    return (0, crypto_js_1.hkdf)(mediaKey, 32, { info: 'WhatsApp Media Retry Notification' });
+};
+/**
+ * Generate a binary node that will request the phone to re-upload the media & return the newly uploaded URL
+ */
+const encryptMediaRetryRequest = (key, mediaKey, meId) => {
+    const recp = { stanzaId: key.id };
+    const recpBuffer = index_js_1.proto.ServerErrorReceipt.encode(recp).finish();
+    const iv = Crypto.randomBytes(12);
+    const retryKey = getMediaRetryKey(mediaKey);
+    const ciphertext = (0, crypto_js_1.aesEncryptGCM)(recpBuffer, retryKey, iv, Buffer.from(key.id));
+    const req = {
+        tag: 'receipt',
+        attrs: {
+            id: key.id,
+            to: (0, index_js_4.jidNormalizedUser)(meId),
+            type: 'server-error'
+        },
+        content: [
+            // this encrypt node is actually pretty useless
+            // the media is returned even without this node
+            // keeping it here to maintain parity with WA Web
+            {
+                tag: 'encrypt',
+                attrs: {},
+                content: [
+                    { tag: 'enc_p', attrs: {}, content: ciphertext },
+                    { tag: 'enc_iv', attrs: {}, content: iv }
+                ]
+            },
+            {
+                tag: 'rmr',
+                attrs: {
+                    jid: key.remoteJid,
+                    from_me: (!!key.fromMe).toString(),
+                    // @ts-ignore
+                    participant: key.participant || undefined
+                }
+            }
+        ]
+    };
+    return req;
+};
+exports.encryptMediaRetryRequest = encryptMediaRetryRequest;
+const decodeMediaRetryNode = (node) => {
+    const rmrNode = (0, index_js_4.getBinaryNodeChild)(node, 'rmr');
+    const event = {
+        key: {
+            id: node.attrs.id,
+            remoteJid: rmrNode.attrs.jid,
+            fromMe: rmrNode.attrs.from_me === 'true',
+            participant: rmrNode.attrs.participant
+        }
+    };
+    const errorNode = (0, index_js_4.getBinaryNodeChild)(node, 'error');
+    if (errorNode) {
+        const errorCode = +errorNode.attrs.code;
+        event.error = new index_js_2.HttpError(`Failed to re-upload media (${errorCode})`, {
+            data: errorNode.attrs,
+            statusCode: (0, exports.getStatusCodeForMediaRetry)(errorCode)
+        });
+    }
+    else {
+        const encryptedInfoNode = (0, index_js_4.getBinaryNodeChild)(node, 'encrypt');
+        const ciphertext = (0, index_js_4.getBinaryNodeChildBuffer)(encryptedInfoNode, 'enc_p');
+        const iv = (0, index_js_4.getBinaryNodeChildBuffer)(encryptedInfoNode, 'enc_iv');
+        if (ciphertext && iv) {
+            event.media = { ciphertext, iv };
+        }
+        else {
+            event.error = new index_js_2.HttpError('Failed to re-upload media (missing ciphertext)', { statusCode: 404 });
+        }
+    }
+    return event;
+};
+exports.decodeMediaRetryNode = decodeMediaRetryNode;
+const decryptMediaRetryData = ({ ciphertext, iv }, mediaKey, msgId) => {
+    const retryKey = getMediaRetryKey(mediaKey);
+    const plaintext = (0, crypto_js_1.aesDecryptGCM)(ciphertext, retryKey, iv, Buffer.from(msgId));
+    return index_js_1.proto.MediaRetryNotification.decode(plaintext);
+};
+exports.decryptMediaRetryData = decryptMediaRetryData;
+const getStatusCodeForMediaRetry = (code) => MEDIA_RETRY_STATUS_MAP[code];
+exports.getStatusCodeForMediaRetry = getStatusCodeForMediaRetry;
+const MEDIA_RETRY_STATUS_MAP = {
+    [index_js_1.proto.MediaRetryNotification.ResultType.SUCCESS]: 200,
+    [index_js_1.proto.MediaRetryNotification.ResultType.DECRYPTION_ERROR]: 412,
+    [index_js_1.proto.MediaRetryNotification.ResultType.NOT_FOUND]: 404,
+    [index_js_1.proto.MediaRetryNotification.ResultType.GENERAL_ERROR]: 418
+};
+
+return module.exports;
+})();
+for (const key of Object.keys(__kageModule177)) {
+ if (key !== '__esModule' && !Object.prototype.hasOwnProperty.call(exports,key)) Object.defineProperty(exports,key,{enumerable:true,configurable:true,get:()=>__kageModule177[key]});
+}
+Object.defineProperty(exports, Symbol.for('kage.advanced'), {value:__kageModule177, configurable:true});