plogme 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (154) hide show
  1. package/LICENSE +61 -0
  2. package/README.md +212 -0
  3. package/WAProto/V +1 -0
  4. package/WAProto/WAProto.proto +8051 -0
  5. package/WAProto/index.js +289292 -0
  6. package/engine-requirements.js +51 -0
  7. package/lib/Defaults/ban-checker.js +44 -0
  8. package/lib/Defaults/index.js +158 -0
  9. package/lib/Signal/Group/ciphertext-message.js +11 -0
  10. package/lib/Signal/Group/group-session-builder.js +29 -0
  11. package/lib/Signal/Group/group_cipher.js +81 -0
  12. package/lib/Signal/Group/index.js +11 -0
  13. package/lib/Signal/Group/keyhelper.js +17 -0
  14. package/lib/Signal/Group/sender-chain-key.js +25 -0
  15. package/lib/Signal/Group/sender-key-distribution-message.js +62 -0
  16. package/lib/Signal/Group/sender-key-message.js +65 -0
  17. package/lib/Signal/Group/sender-key-name.js +47 -0
  18. package/lib/Signal/Group/sender-key-record.js +40 -0
  19. package/lib/Signal/Group/sender-key-state.js +83 -0
  20. package/lib/Signal/Group/sender-message-key.js +25 -0
  21. package/lib/Signal/libsignal.js +428 -0
  22. package/lib/Signal/lid-mapping.js +280 -0
  23. package/lib/Socket/Client/index.js +2 -0
  24. package/lib/Socket/Client/types.js +10 -0
  25. package/lib/Socket/Client/websocket.js +53 -0
  26. package/lib/Socket/aigroups.js +315 -0
  27. package/lib/Socket/ban-checker.js +153 -0
  28. package/lib/Socket/business.js +407 -0
  29. package/lib/Socket/chats.js +1831 -0
  30. package/lib/Socket/chats.js[old] +1227 -0
  31. package/lib/Socket/communities.js +431 -0
  32. package/lib/Socket/graphql.js +899 -0
  33. package/lib/Socket/groups.js +549 -0
  34. package/lib/Socket/groups.js[old] +347 -0
  35. package/lib/Socket/index.js +71 -0
  36. package/lib/Socket/interactive-handler.js +600 -0
  37. package/lib/Socket/interop.js +563 -0
  38. package/lib/Socket/managed-account.js +208 -0
  39. package/lib/Socket/messages-recv.js +2144 -0
  40. package/lib/Socket/messages-send.js +2650 -0
  41. package/lib/Socket/messages-send.js[latest working] +1759 -0
  42. package/lib/Socket/mex.js +41 -0
  43. package/lib/Socket/newsletter.js +226 -0
  44. package/lib/Socket/privacy.js +446 -0
  45. package/lib/Socket/registration.js +428 -0
  46. package/lib/Socket/socket.js +1050 -0
  47. package/lib/Socket/username.js +229 -0
  48. package/lib/Store/index.js +4 -0
  49. package/lib/Store/make-cache-manager-store.js +89 -0
  50. package/lib/Store/make-in-memory-store.js +420 -0
  51. package/lib/Store/make-ordered-dictionary.js +78 -0
  52. package/lib/Store/object-repository.js +23 -0
  53. package/lib/Types/Auth.js +1 -0
  54. package/lib/Types/Bussines.js +1 -0
  55. package/lib/Types/Call.js +1 -0
  56. package/lib/Types/Chat.js +7 -0
  57. package/lib/Types/Contact.js +1 -0
  58. package/lib/Types/Events.js +1 -0
  59. package/lib/Types/GroupMetadata.js +1 -0
  60. package/lib/Types/Label.js +24 -0
  61. package/lib/Types/LabelAssociation.js +6 -0
  62. package/lib/Types/Message.js +17 -0
  63. package/lib/Types/Mex.js +39 -0
  64. package/lib/Types/Product.js +1 -0
  65. package/lib/Types/RichType.js +22 -0
  66. package/lib/Types/Signal.js +1 -0
  67. package/lib/Types/Socket.js +2 -0
  68. package/lib/Types/State.js +48 -0
  69. package/lib/Types/USync.js +1 -0
  70. package/lib/Types/index.js +25 -0
  71. package/lib/Utils/auth-utils.js +301 -0
  72. package/lib/Utils/bot-planning-replay.js +169 -0
  73. package/lib/Utils/browser-utils.js +28 -0
  74. package/lib/Utils/business.js +230 -0
  75. package/lib/Utils/channel-policy.js +1 -0
  76. package/lib/Utils/chat-utils.js +885 -0
  77. package/lib/Utils/chat-utils.js[old] +871 -0
  78. package/lib/Utils/companion-reg-client-utils.js +32 -0
  79. package/lib/Utils/consumer-application.js +102 -0
  80. package/lib/Utils/crypto.js +117 -0
  81. package/lib/Utils/decode-wa-message.js +484 -0
  82. package/lib/Utils/event-buffer.js +589 -0
  83. package/lib/Utils/games/slot-machine.js +258 -0
  84. package/lib/Utils/games/website-preview.js +293 -0
  85. package/lib/Utils/generics.js +390 -0
  86. package/lib/Utils/generics.js@old +385 -0
  87. package/lib/Utils/group-history.js +56 -0
  88. package/lib/Utils/history.js +130 -0
  89. package/lib/Utils/identity-change-handler.js +48 -0
  90. package/lib/Utils/index.js +35 -0
  91. package/lib/Utils/integrity.js +296 -0
  92. package/lib/Utils/jid-display-normalization.js +209 -0
  93. package/lib/Utils/link-preview.js +84 -0
  94. package/lib/Utils/logger.js +2 -0
  95. package/lib/Utils/lt-hash.js +7 -0
  96. package/lib/Utils/make-mutex.js +32 -0
  97. package/lib/Utils/message-composer.js +467 -0
  98. package/lib/Utils/message-inspect.js +67 -0
  99. package/lib/Utils/message-retry-manager.js +241 -0
  100. package/lib/Utils/messages-media.js +1006 -0
  101. package/lib/Utils/messages-media.js[old] +916 -0
  102. package/lib/Utils/messages.js +1982 -0
  103. package/lib/Utils/messages.js[old] +1902 -0
  104. package/lib/Utils/meta-ai-msmsg.js +130 -0
  105. package/lib/Utils/meta-compositing.js +202 -0
  106. package/lib/Utils/native-flow.js +100 -0
  107. package/lib/Utils/noise-handler.js +200 -0
  108. package/lib/Utils/offline-node-processor.js +39 -0
  109. package/lib/Utils/pre-key-manager.js +105 -0
  110. package/lib/Utils/process-message.js +582 -0
  111. package/lib/Utils/reporting-utils.js +257 -0
  112. package/lib/Utils/rich-message-utils.js +942 -0
  113. package/lib/Utils/rich-message-utils.js[Old] +387 -0
  114. package/lib/Utils/signal.js +200 -0
  115. package/lib/Utils/stanza-ack.js +37 -0
  116. package/lib/Utils/sync-action-utils.js +47 -0
  117. package/lib/Utils/tc-token-utils.js +162 -0
  118. package/lib/Utils/use-multi-file-auth-state.js +120 -0
  119. package/lib/Utils/use-single-file-auth-state.js +96 -0
  120. package/lib/Utils/use-sqlite-auth-state.js +108 -0
  121. package/lib/Utils/validate-connection.js +206 -0
  122. package/lib/Utils/view-once-utils.js +206 -0
  123. package/lib/Utils/voip-rekey.js +20 -0
  124. package/lib/Utils/welcome-flow.js +220 -0
  125. package/lib/WABinary/constants.js +1463 -0
  126. package/lib/WABinary/decode.js +261 -0
  127. package/lib/WABinary/encode.js +219 -0
  128. package/lib/WABinary/generic-utils.js +227 -0
  129. package/lib/WABinary/index.js +5 -0
  130. package/lib/WABinary/jid-utils.js +95 -0
  131. package/lib/WABinary/types.js +1 -0
  132. package/lib/WAM/BinaryInfo.js +9 -0
  133. package/lib/WAM/constants.js +22852 -0
  134. package/lib/WAM/encode.js +149 -0
  135. package/lib/WAM/index.js +3 -0
  136. package/lib/WAUSync/Protocols/USyncBusinessProtocol.js +96 -0
  137. package/lib/WAUSync/Protocols/USyncContactProtocol.js +56 -0
  138. package/lib/WAUSync/Protocols/USyncDeviceProtocol.js +53 -0
  139. package/lib/WAUSync/Protocols/USyncDisappearingModeProtocol.js +26 -0
  140. package/lib/WAUSync/Protocols/USyncFeatureProtocol.js +70 -0
  141. package/lib/WAUSync/Protocols/USyncPictureProtocol.js +28 -0
  142. package/lib/WAUSync/Protocols/USyncSidelistProtocol.js +25 -0
  143. package/lib/WAUSync/Protocols/USyncStatusProtocol.js +37 -0
  144. package/lib/WAUSync/Protocols/USyncTextStatusProtocol.js +34 -0
  145. package/lib/WAUSync/Protocols/USyncUsernameProtocol.js +24 -0
  146. package/lib/WAUSync/Protocols/UsyncBotProfileProtocol.js +50 -0
  147. package/lib/WAUSync/Protocols/UsyncLIDProtocol.js +28 -0
  148. package/lib/WAUSync/Protocols/index.js +12 -0
  149. package/lib/WAUSync/USyncQuery.js +201 -0
  150. package/lib/WAUSync/USyncUser.js +54 -0
  151. package/lib/WAUSync/index.js +3 -0
  152. package/lib/index.d.ts +406 -0
  153. package/lib/index.js +11 -0
  154. package/package.json +125 -0
@@ -0,0 +1,130 @@
1
+ import { proto } from '../../WAProto/index.js';
2
+ import { aesDecryptGCM, hkdf } from './crypto.js';
3
+
4
+ const BOT_MESSAGE_INFO = 'Bot Message';
5
+ const KEY_LENGTH = 32;
6
+
7
+ const unpadRandomMax16 = (value) => {
8
+ const bytes = new Uint8Array(value);
9
+ if (!bytes.length) {
10
+ throw new Error('unpadPkcs7 given empty bytes');
11
+ }
12
+ const padLength = bytes[bytes.length - 1];
13
+ if (padLength > bytes.length) {
14
+ throw new Error(`unpad given ${bytes.length} bytes, but pad is ${padLength}`);
15
+ }
16
+ return new Uint8Array(bytes.buffer, bytes.byteOffset, bytes.length - padLength);
17
+ };
18
+
19
+ const toBuffer = (value) => {
20
+ if (Buffer.isBuffer(value)) return value;
21
+ if (value instanceof Uint8Array) return Buffer.from(value.buffer, value.byteOffset, value.byteLength);
22
+ return Buffer.from(value);
23
+ };
24
+
25
+ // Strips device suffix from LID JIDs: "user:device@lid" → "user@lid".
26
+ // jidEncode includes ":0" even for device=0 (user/non-AD form), so normalize both meId and meLid.
27
+ const normalizeLidJid = (jid) => {
28
+ if (!jid || !jid.endsWith('@lid') || !jid.includes(':')) return jid;
29
+ return `${jid.split(':')[0]}@lid`;
30
+ };
31
+
32
+ // Ordered msgId candidates per the Rust BotMessageContext:
33
+ // botEditTargetId when editing, stanzaId for the normal full response, metaTargetId as fallback.
34
+ const selectMsgIdCandidates = (messageKey) => {
35
+ const seen = new Set();
36
+ const result = [];
37
+ for (const id of [messageKey?.botEditTargetId, messageKey?.stanzaId, messageKey?.metaTargetId]) {
38
+ const s = id ? String(id) : '';
39
+ if (s && !seen.has(s)) {
40
+ seen.add(s);
41
+ result.push(s);
42
+ }
43
+ }
44
+ return result;
45
+ };
46
+
47
+ // Ordered target_sender_user_jid candidates per Rust spec (non-AD user JID = no device suffix).
48
+ // jidEncode produces "user:0@lid" for device=0 LID JIDs, so normalize both meId and meLid.
49
+ const selectTargetJidCandidates = (messageKey) => {
50
+ const seen = new Set();
51
+ const result = [];
52
+ for (const jid of [normalizeLidJid(messageKey?.meId), normalizeLidJid(messageKey?.meLid)]) {
53
+ const s = jid ? String(jid) : '';
54
+ if (s && !seen.has(s)) {
55
+ seen.add(s);
56
+ result.push(s);
57
+ }
58
+ }
59
+ return result;
60
+ };
61
+
62
+ const decodeDecryptedMsmsgMessage = (decrypted) => {
63
+ const buf = toBuffer(decrypted);
64
+ try {
65
+ const unpadded = Buffer.from(unpadRandomMax16(buf));
66
+ const decoded = proto.Message.decode(unpadded);
67
+ const hasContent = Object.keys(decoded).some(k => k !== 'messageContextInfo' && decoded[k] != null);
68
+ if (hasContent) return decoded;
69
+ }
70
+ catch {}
71
+ return proto.Message.decode(buf);
72
+ };
73
+
74
+ /**
75
+ * Decrypts <enc type="msmsg"> bot messages.
76
+ *
77
+ * Two-pass HKDF — algorithm from bot_message.rs (BotMessageContext):
78
+ * k1 = HKDF(messageSecret, salt=∅, info="Bot Message", 32)
79
+ * k2 = HKDF(k1, salt=∅, info=msgID||target_sender_jid||bot_jid, 32)
80
+ * AAD = msgID || 0x00 || bot_user_jid
81
+ * plain = AES-256-GCM.Decrypt(k2, encIv, encPayload, AAD)
82
+ *
83
+ * k1 is shared across all candidates and derived once.
84
+ * AAD always uses bot_user_jid, never target_sender_jid.
85
+ */
86
+ export const decryptMsmsgBotMessage = async (messageSecret, messageKey, msMsg) => {
87
+ if (!messageSecret || (messageSecret instanceof Uint8Array && !messageSecret.byteLength)) {
88
+ throw new Error('Missing required messageSecret for msmsg decryption');
89
+ }
90
+ if (!messageKey?.participant) throw new Error('Missing required participant for msmsg decryption');
91
+ if (!messageKey?.meId) throw new Error('Missing required meId for msmsg decryption');
92
+ if (!msMsg?.encIv) throw new Error('Missing required encIv for msmsg decryption');
93
+ if (!msMsg?.encPayload) throw new Error('Missing required encPayload for msmsg decryption');
94
+
95
+ const msgIdCandidates = selectMsgIdCandidates(messageKey);
96
+ if (!msgIdCandidates.length) throw new Error('Missing required target message id for msmsg decryption');
97
+
98
+ const targetJidCandidates = selectTargetJidCandidates(messageKey);
99
+ if (!targetJidCandidates.length) throw new Error('Missing required target JID for msmsg decryption');
100
+
101
+ const botJidBuf = Buffer.from(String(messageKey.participant));
102
+ const payload = toBuffer(msMsg.encPayload);
103
+ const iv = toBuffer(msMsg.encIv);
104
+
105
+ // k1 depends only on messageSecret — derive once and reuse across all candidates
106
+ const baseKey = Buffer.from(hkdf(toBuffer(messageSecret), KEY_LENGTH, { info: BOT_MESSAGE_INFO }));
107
+
108
+ let lastError;
109
+ for (const msgId of msgIdCandidates) {
110
+ // msg_id is always passed as ASCII bytes per Rust spec (msg_id.as_bytes())
111
+ const idBuf = Buffer.from(msgId);
112
+ for (const targetJid of targetJidCandidates) {
113
+ const info = Buffer.concat([idBuf, Buffer.from(targetJid), botJidBuf]);
114
+ const key = Buffer.from(hkdf(baseKey, KEY_LENGTH, { info }));
115
+ const aad = Buffer.concat([idBuf, Buffer.from([0x00]), botJidBuf]);
116
+ try {
117
+ return Buffer.from(aesDecryptGCM(payload, key, iv, aad));
118
+ }
119
+ catch (e) {
120
+ lastError = e;
121
+ }
122
+ }
123
+ }
124
+
125
+ const err = new Error('msmsg decryption failed: all key derivation candidates exhausted');
126
+ err.cause = lastError;
127
+ throw err;
128
+ };
129
+
130
+ export { decodeDecryptedMsmsgMessage };
@@ -0,0 +1,202 @@
1
+ /**
2
+ * Lia@Changes [WIP]
3
+ * Meta Compositing — send rich messages with Meta AI-style progress indicator.
4
+ *
5
+ * UNIVERSAL VERSION: Works on ALL WhatsApp clients.
6
+ * - Native Meta AI rendering is opt-in and requires caller-supplied verification metadata
7
+ * - Plain text fallback is used unless the native payload can be authenticated
8
+ *
9
+ * metaTyping() — shows the "typing..." / planning steps indicator.
10
+ * sendMetaComposited() — full flow: typing → delete → final message.
11
+ *
12
+ * If you use or copy this code, please credit @crysnovax/bailey.
13
+ */
14
+
15
+ import { proto } from '../../WAProto/index.js';
16
+ import { BOT_RENDERING_CONFIG_METADATA } from '../Defaults/index.js';
17
+ import { premiumEnabled } from './integrity.js';
18
+ import { delay } from './generics.js';
19
+
20
+ // ─── Step status enum ───
21
+ export const PlanningStepStatus = {
22
+ IN_PROGRESS: 0,
23
+ DONE: 1,
24
+ FAILED: 2
25
+ };
26
+
27
+ /**
28
+ * Check whether the socket explicitly allows native Meta AI progress rendering.
29
+ * WhatsApp validates bot verification metadata on these messages. The library
30
+ * therefore refuses to fabricate certificates or signatures: native rendering
31
+ * requires both an explicit socket opt-in and verification metadata obtained from
32
+ * a compatible, trusted Meta AI message/session.
33
+ */
34
+ export const supportsMetaRendering = (_jid, config = {}) => {
35
+ return config.forceMetaRendering === true &&
36
+ config.metaAiRendering?.verificationMetadata?.proofs?.length > 0;
37
+ };
38
+
39
+ /**
40
+ * Build a BotProgressIndicatorMetadata object.
41
+ */
42
+ export const buildProgressIndicator = (description, steps = [], estimatedMs) => {
43
+ const stepsMetadata = steps.map(step => {
44
+ const s = {
45
+ statusTitle: step.title,
46
+ status: step.status ?? PlanningStepStatus.IN_PROGRESS
47
+ };
48
+ if (step.body) s.statusBody = step.body;
49
+ if (step.isReasoning) s.isReasoning = true;
50
+ if (step.isEnhancedSearch) s.isEnhancedSearch = true;
51
+ return s;
52
+ });
53
+
54
+ const indicator = { stepsMetadata };
55
+ if (description) indicator.progressDescription = description;
56
+ if (estimatedMs != null) indicator.estimatedCompletionTime = estimatedMs;
57
+ return indicator;
58
+ };
59
+
60
+ /**
61
+ * Build the native Meta AI compositing placeholder (for compatible clients only).
62
+ */
63
+ export const buildCompositingPlaceholder = ({
64
+ description = 'Thinking…',
65
+ steps = [],
66
+ estimatedMs,
67
+ placeholderText = '',
68
+ verificationMetadata
69
+ } = {}) => {
70
+ const progressIndicatorMetadata = buildProgressIndicator(description, steps, estimatedMs);
71
+
72
+ const textEncoder = new TextEncoder();
73
+ const unifiedData = textEncoder.encode(JSON.stringify({
74
+ response_id: crypto.randomUUID(),
75
+ sections: placeholderText ? [{
76
+ view_model: {
77
+ primitive: {
78
+ text: placeholderText,
79
+ inline_entities: [],
80
+ __typename: 'GenAIMarkdownTextUXPrimitive'
81
+ },
82
+ __typename: 'GenAISingleLayoutViewModel'
83
+ }
84
+ }] : []
85
+ }));
86
+
87
+ const richResponseMessage = {
88
+ messageType: proto.AIRichResponseMessageType.AI_RICH_RESPONSE_TYPE_STANDARD,
89
+ unifiedResponse: { data: unifiedData },
90
+ submessages: []
91
+ };
92
+
93
+ return {
94
+ messageContextInfo: {
95
+ botMetadata: {
96
+ pluginMetadata: {},
97
+ progressIndicatorMetadata,
98
+ botRenderingConfigMetadata: BOT_RENDERING_CONFIG_METADATA,
99
+ ...(verificationMetadata ? { verificationMetadata } : {})
100
+ }
101
+ },
102
+ botForwardedMessage: {
103
+ message: { richResponseMessage }
104
+ }
105
+ };
106
+ };
107
+
108
+ /**
109
+ * Build a plain-text placeholder that works on ALL WhatsApp clients.
110
+ */
111
+ export const buildPlainPlaceholder = (description = 'Thinking…', steps = [], placeholderText = '') => {
112
+ const stepLines = steps.map(step => {
113
+ const icon = step.status === PlanningStepStatus.DONE ? '✓' :
114
+ step.status === PlanningStepStatus.FAILED ? '✗' : '○';
115
+ return `${icon} ${step.title}`;
116
+ }).join('\n');
117
+
118
+ let text = `_${description}_`;
119
+ if (stepLines) text += `\n\n${stepLines}`;
120
+ if (placeholderText) text += `\n\n${placeholderText}`;
121
+
122
+ return { text };
123
+ };
124
+
125
+ /**
126
+ * metaTyping — sends the progress/compositing indicator.
127
+ * UNIVERSAL: plain text is the default. Native Meta progress is sent only when
128
+ * useNativeMeta is true, forceMetaRendering is enabled, and trusted verification
129
+ * metadata is supplied in socket.config.metaAiRendering.
130
+ */
131
+ export const metaTyping = async (sock, jid, {
132
+ description = 'Thinking…',
133
+ steps = [],
134
+ estimatedMs,
135
+ placeholderText = '',
136
+ useNativeMeta = false
137
+ } = {}) => {
138
+ // Premium feature — on unlicensed copies the progress indicator is skipped
139
+ // entirely (callers already guard deletes with placeholder?.key).
140
+ if (!premiumEnabled(sock.config?.logger)) {
141
+ return { key: undefined };
142
+ }
143
+ // Show typing indicator
144
+ await sock.sendPresenceUpdate('composing', jid);
145
+
146
+ if (useNativeMeta && supportsMetaRendering(jid, sock.config)) {
147
+ const placeholder = buildCompositingPlaceholder({
148
+ description,
149
+ steps,
150
+ estimatedMs,
151
+ placeholderText,
152
+ verificationMetadata: sock.config?.metaAiRendering?.verificationMetadata
153
+ });
154
+ return sock.sendMessage(jid, { raw: true, ...placeholder });
155
+ }
156
+
157
+ // Universal fallback: plain text placeholder
158
+ const plainSteps = steps.map(s => ({ ...s, status: PlanningStepStatus.IN_PROGRESS }));
159
+ const placeholder = buildPlainPlaceholder(description, plainSteps, placeholderText);
160
+ return sock.sendMessage(jid, placeholder);
161
+ };
162
+
163
+ /**
164
+ * sendMetaComposited — full Meta AI flow (UNIVERSAL).
165
+ * 1. Send progress indicator
166
+ * 2. Wait thinkingMs
167
+ * 3. Delete placeholder
168
+ * 4. Send final message fresh
169
+ */
170
+ export const sendMetaComposited = async (sock, jid, content, {
171
+ thinkingMs = 2000,
172
+ description = 'Thinking…',
173
+ steps = [],
174
+ placeholderText = '',
175
+ sendOptions = {},
176
+ useNativeMeta = false
177
+ } = {}) => {
178
+ // Premium feature — on unlicensed copies skip the whole Meta AI flow and
179
+ // just send the final content (the composer downgrades it to plain text).
180
+ if (!premiumEnabled(sock.config?.logger)) {
181
+ return sock.sendMessage(jid, content, sendOptions);
182
+ }
183
+ const placeholder = await metaTyping(sock, jid, {
184
+ description, steps, estimatedMs: thinkingMs, placeholderText, useNativeMeta
185
+ });
186
+
187
+ try {
188
+ await delay(thinkingMs);
189
+ if (placeholder?.key) {
190
+ await sock.sendMessage(jid, { delete: placeholder.key });
191
+ }
192
+ } catch (_) {}
193
+
194
+ await sock.sendPresenceUpdate('paused', jid);
195
+ return sock.sendMessage(jid, content, sendOptions);
196
+ };
197
+
198
+ /**
199
+ * Convenience: build a steps array from plain strings.
200
+ */
201
+ export const buildSteps = (titles, status = PlanningStepStatus.IN_PROGRESS) =>
202
+ titles.map(title => ({ title, status }));
@@ -0,0 +1,100 @@
1
+ const parseJsonObject = (value) => {
2
+ if (!value) {
3
+ return {};
4
+ }
5
+ if (typeof value === 'object') {
6
+ return value;
7
+ }
8
+ try {
9
+ const parsed = JSON.parse(value);
10
+ return parsed && typeof parsed === 'object' ? parsed : {};
11
+ }
12
+ catch {
13
+ return {};
14
+ }
15
+ };
16
+
17
+ /**
18
+ * Extracts a native-flow response from an incoming WhatsApp message.
19
+ * Supports ordinary quick replies, single-select responses, and WhatsApp Flow
20
+ * form responses carried by nativeFlowResponseMessage.paramsJson.
21
+ */
22
+ export const parseNativeFlowResponse = (message) => {
23
+ const content = message?.message || message;
24
+ const response = content?.interactiveResponseMessage?.nativeFlowResponseMessage ||
25
+ content?.nativeFlowResponseMessage;
26
+ if (!response) {
27
+ return null;
28
+ }
29
+ const params = parseJsonObject(response.paramsJson);
30
+ const actionPayload = params.flow_action_payload || params.flowActionPayload || {};
31
+ const data = params.data || params.response || params.form_data || params.formData || actionPayload.data || {};
32
+ return {
33
+ name: response.name || '',
34
+ version: response.version,
35
+ paramsJson: response.paramsJson || '',
36
+ params,
37
+ isFlow: response.name === 'galaxy_message' || response.name === 'flow' ||
38
+ !!(params.flow_id || params.flow_token || params.flow_message_version),
39
+ flowId: params.flow_id || params.flowId,
40
+ flowToken: params.flow_token || params.flowToken,
41
+ screen: params.screen || actionPayload.screen,
42
+ action: params.flow_action || params.flowAction || actionPayload.action,
43
+ actionPayload,
44
+ data,
45
+ buttonId: params.id || params.button_id || params.buttonId,
46
+ displayText: params.display_text || params.displayText,
47
+ raw: response
48
+ };
49
+ };
50
+
51
+ /**
52
+ * Extracts only completed or navigated WhatsApp Flow data from a message.
53
+ * Returns null for ordinary native-flow buttons.
54
+ */
55
+ export const parseWhatsAppFlowResponse = (message) => {
56
+ const response = parseNativeFlowResponse(message);
57
+ if (!response?.isFlow) {
58
+ return null;
59
+ }
60
+ return response;
61
+ };
62
+
63
+ /**
64
+ * Builds the native-flow button payload used to launch a published WhatsApp Flow.
65
+ * The caller must own the Flow ID/token and publish the Flow through Meta's
66
+ * WhatsApp Flows API or Flow Builder.
67
+ */
68
+ export const buildWhatsAppFlowButton = ({
69
+ flowId,
70
+ flowToken,
71
+ cta = 'Open form',
72
+ action = 'navigate',
73
+ actionPayload,
74
+ mode = 'published',
75
+ flowMessageVersion = '3',
76
+ metadata,
77
+ name = 'galaxy_message'
78
+ } = {}) => {
79
+ if (!flowId) {
80
+ throw new TypeError('flowId is required to launch a WhatsApp Flow');
81
+ }
82
+ if (!flowToken) {
83
+ throw new TypeError('flowToken is required to launch a WhatsApp Flow');
84
+ }
85
+ return {
86
+ name,
87
+ flow_message_version: String(flowMessageVersion),
88
+ flow_token: String(flowToken),
89
+ flow_id: String(flowId),
90
+ flow_cta: String(cta),
91
+ flow_action: action,
92
+ ...(actionPayload ? { flow_action_payload: actionPayload } : {}),
93
+ ...(metadata ? { flow_metadata: metadata } : {})
94
+ };
95
+ };
96
+
97
+ export const makeWhatsAppFlowButton = (flow) => ({
98
+ name: flow?.nativeFlowName || 'galaxy_message',
99
+ buttonParamsJson: JSON.stringify(buildWhatsAppFlowButton(flow))
100
+ });
@@ -0,0 +1,200 @@
1
+ import { Boom } from '@hapi/boom';
2
+ import { proto } from '../../WAProto/index.js';
3
+ import { NOISE_MODE, WA_CERT_DETAILS } from '../Defaults/index.js';
4
+ import { decodeBinaryNode } from '../WABinary/index.js';
5
+ import { aesDecryptGCM, aesEncryptGCM, Curve, hkdf, sha256 } from './crypto.js';
6
+ const IV_LENGTH = 12;
7
+ const EMPTY_BUFFER = Buffer.alloc(0);
8
+ const generateIV = (counter) => {
9
+ const iv = new ArrayBuffer(IV_LENGTH);
10
+ new DataView(iv).setUint32(8, counter);
11
+ return new Uint8Array(iv);
12
+ };
13
+ class TransportState {
14
+ constructor(encKey, decKey) {
15
+ this.encKey = encKey;
16
+ this.decKey = decKey;
17
+ this.readCounter = 0;
18
+ this.writeCounter = 0;
19
+ this.iv = new Uint8Array(IV_LENGTH);
20
+ }
21
+ encrypt(plaintext) {
22
+ const c = this.writeCounter++;
23
+ this.iv[8] = (c >>> 24) & 0xff;
24
+ this.iv[9] = (c >>> 16) & 0xff;
25
+ this.iv[10] = (c >>> 8) & 0xff;
26
+ this.iv[11] = c & 0xff;
27
+ return aesEncryptGCM(plaintext, this.encKey, this.iv, EMPTY_BUFFER);
28
+ }
29
+ decrypt(ciphertext) {
30
+ const c = this.readCounter++;
31
+ this.iv[8] = (c >>> 24) & 0xff;
32
+ this.iv[9] = (c >>> 16) & 0xff;
33
+ this.iv[10] = (c >>> 8) & 0xff;
34
+ this.iv[11] = c & 0xff;
35
+ return aesDecryptGCM(ciphertext, this.decKey, this.iv, EMPTY_BUFFER);
36
+ }
37
+ }
38
+ export const makeNoiseHandler = ({ keyPair: { private: privateKey, public: publicKey }, NOISE_HEADER, logger, routingInfo }) => {
39
+ logger = logger.child({ class: 'ns' });
40
+ const data = Buffer.from(NOISE_MODE);
41
+ let hash = data.byteLength === 32 ? data : sha256(data);
42
+ let salt = hash;
43
+ let encKey = hash;
44
+ let decKey = hash;
45
+ let counter = 0;
46
+ let sentIntro = false;
47
+ let inBytes = Buffer.alloc(0);
48
+ let transport = null;
49
+ let isWaitingForTransport = false;
50
+ let pendingOnFrame = null;
51
+ let introHeader;
52
+ if (routingInfo) {
53
+ introHeader = Buffer.alloc(7 + routingInfo.byteLength + NOISE_HEADER.length);
54
+ introHeader.write('ED', 0, 'utf8');
55
+ introHeader.writeUint8(0, 2);
56
+ introHeader.writeUint8(1, 3);
57
+ introHeader.writeUint8(routingInfo.byteLength >> 16, 4);
58
+ introHeader.writeUint16BE(routingInfo.byteLength & 65535, 5);
59
+ introHeader.set(routingInfo, 7);
60
+ introHeader.set(NOISE_HEADER, 7 + routingInfo.byteLength);
61
+ }
62
+ else {
63
+ introHeader = Buffer.from(NOISE_HEADER);
64
+ }
65
+ const authenticate = (data) => {
66
+ if (!transport) {
67
+ hash = sha256(Buffer.concat([hash, data]));
68
+ }
69
+ };
70
+ const encrypt = (plaintext) => {
71
+ if (transport) {
72
+ return transport.encrypt(plaintext);
73
+ }
74
+ const result = aesEncryptGCM(plaintext, encKey, generateIV(counter++), hash);
75
+ authenticate(result);
76
+ return result;
77
+ };
78
+ const decrypt = (ciphertext) => {
79
+ if (transport) {
80
+ return transport.decrypt(ciphertext);
81
+ }
82
+ const result = aesDecryptGCM(ciphertext, decKey, generateIV(counter++), hash);
83
+ authenticate(ciphertext);
84
+ return result;
85
+ };
86
+ const localHKDF = (data) => {
87
+ const key = hkdf(Buffer.from(data), 64, { salt, info: '' });
88
+ return [key.subarray(0, 32), key.subarray(32)];
89
+ };
90
+ const mixIntoKey = (data) => {
91
+ const [write, read] = localHKDF(data);
92
+ salt = write;
93
+ encKey = read;
94
+ decKey = read;
95
+ counter = 0;
96
+ };
97
+ const finishInit = async () => {
98
+ isWaitingForTransport = true;
99
+ const [write, read] = localHKDF(new Uint8Array(0));
100
+ transport = new TransportState(write, read);
101
+ isWaitingForTransport = false;
102
+ logger.trace('Noise handler transitioned to Transport state');
103
+ if (pendingOnFrame) {
104
+ logger.trace({ length: inBytes.length }, 'Flushing buffered frames after transport ready');
105
+ await processData(pendingOnFrame);
106
+ pendingOnFrame = null;
107
+ }
108
+ };
109
+ const processData = async (onFrame) => {
110
+ let size;
111
+ while (true) {
112
+ if (inBytes.length < 3)
113
+ return;
114
+ size = (inBytes[0] << 16) | (inBytes[1] << 8) | inBytes[2];
115
+ if (inBytes.length < size + 3)
116
+ return;
117
+ let frame = inBytes.subarray(3, size + 3);
118
+ inBytes = inBytes.subarray(size + 3);
119
+ if (transport) {
120
+ const result = transport.decrypt(frame);
121
+ frame = await decodeBinaryNode(result);
122
+ }
123
+ if (logger.level === 'trace') {
124
+ logger.trace({ msg: frame?.attrs?.id }, 'recv frame');
125
+ }
126
+ onFrame(frame);
127
+ }
128
+ };
129
+ authenticate(NOISE_HEADER);
130
+ authenticate(publicKey);
131
+ return {
132
+ encrypt,
133
+ decrypt,
134
+ authenticate,
135
+ mixIntoKey,
136
+ finishInit,
137
+ processHandshake: ({ serverHello }, noiseKey) => {
138
+ authenticate(serverHello.ephemeral);
139
+ mixIntoKey(Curve.sharedKey(privateKey, serverHello.ephemeral));
140
+ const decStaticContent = decrypt(serverHello.static);
141
+ mixIntoKey(Curve.sharedKey(privateKey, decStaticContent));
142
+ const certDecoded = decrypt(serverHello.payload);
143
+ const { intermediate: certIntermediate, leaf } = proto.CertChain.decode(certDecoded);
144
+ // leaf
145
+ if (!leaf?.details || !leaf?.signature) {
146
+ throw new Boom('invalid noise leaf certificate', { statusCode: 400 });
147
+ }
148
+ if (!certIntermediate?.details || !certIntermediate?.signature) {
149
+ throw new Boom('invalid noise intermediate certificate', { statusCode: 400 });
150
+ }
151
+ const details = proto.CertChain.NoiseCertificate.Details.decode(certIntermediate.details);
152
+ const { issuerSerial } = details;
153
+ const verify = Curve.verify(details.key, leaf.details, leaf.signature);
154
+ const verifyIntermediate = Curve.verify(WA_CERT_DETAILS.PUBLIC_KEY, certIntermediate.details, certIntermediate.signature);
155
+ if (!verify) {
156
+ throw new Boom('noise certificate signature invalid', { statusCode: 400 });
157
+ }
158
+ if (!verifyIntermediate) {
159
+ throw new Boom('noise intermediate certificate signature invalid', { statusCode: 400 });
160
+ }
161
+ if (issuerSerial !== WA_CERT_DETAILS.SERIAL) {
162
+ throw new Boom('certification match failed', { statusCode: 400 });
163
+ }
164
+ const keyEnc = encrypt(noiseKey.public);
165
+ mixIntoKey(Curve.sharedKey(noiseKey.private, serverHello.ephemeral));
166
+ return keyEnc;
167
+ },
168
+ encodeFrame: (data) => {
169
+ if (transport) {
170
+ data = transport.encrypt(data);
171
+ }
172
+ const dataLen = data.byteLength;
173
+ const introSize = sentIntro ? 0 : introHeader.length;
174
+ const frame = Buffer.allocUnsafe(introSize + 3 + dataLen);
175
+ if (!sentIntro) {
176
+ frame.set(introHeader);
177
+ sentIntro = true;
178
+ }
179
+ frame[introSize] = (dataLen >>> 16) & 0xff;
180
+ frame[introSize + 1] = (dataLen >>> 8) & 0xff;
181
+ frame[introSize + 2] = dataLen & 0xff;
182
+ frame.set(data, introSize + 3);
183
+ return frame;
184
+ },
185
+ decodeFrame: async (newData, onFrame) => {
186
+ if (isWaitingForTransport) {
187
+ inBytes = Buffer.concat([inBytes, newData]);
188
+ pendingOnFrame = onFrame;
189
+ return;
190
+ }
191
+ if (inBytes.length === 0) {
192
+ inBytes = Buffer.from(newData);
193
+ }
194
+ else {
195
+ inBytes = Buffer.concat([inBytes, newData]);
196
+ }
197
+ await processData(onFrame);
198
+ }
199
+ };
200
+ };
@@ -0,0 +1,39 @@
1
+ /**
2
+ * Creates a processor for offline stanza nodes that:
3
+ * - Queues nodes for sequential processing
4
+ * - Yields to the event loop periodically to avoid blocking
5
+ * - Catches handler errors to prevent the processing loop from crashing
6
+ */
7
+ export function makeOfflineNodeProcessor(nodeProcessorMap, deps, batchSize = 10) {
8
+ const nodes = [];
9
+ let isProcessing = false;
10
+ const enqueue = (type, node) => {
11
+ nodes.push({ type, node });
12
+ if (isProcessing) {
13
+ return;
14
+ }
15
+ isProcessing = true;
16
+ const promise = async () => {
17
+ let processedInBatch = 0;
18
+ while (nodes.length && deps.isWsOpen()) {
19
+ const { type, node } = nodes.shift();
20
+ const nodeProcessor = nodeProcessorMap.get(type);
21
+ if (!nodeProcessor) {
22
+ deps.onUnexpectedError(new Error(`unknown offline node type: ${type}`), 'processing offline node');
23
+ continue;
24
+ }
25
+ await nodeProcessor(node).catch(err => deps.onUnexpectedError(err, `processing offline ${type}`));
26
+ processedInBatch++;
27
+ // Yield to event loop after processing a batch
28
+ // This prevents blocking the event loop for too long when there are many offline nodes
29
+ if (processedInBatch >= batchSize) {
30
+ processedInBatch = 0;
31
+ await deps.yieldToEventLoop();
32
+ }
33
+ }
34
+ isProcessing = false;
35
+ };
36
+ promise().catch(error => deps.onUnexpectedError(error, 'processing offline nodes'));
37
+ };
38
+ return { enqueue };
39
+ }