plogme 1.0.5 → 2.0.0

package/README.md

@@ -10,7 +10,16 @@
 npm install plogme
 ```
 
-The current package version is **1.0.4**. Use Node.js 20 or newer.
+The current package version is **2.0.0**. Use Node.js 20 or newer.
+
+## Important: Join Update Channels Manually
+
+**Plogme does not automatically follow or subscribe to any WhatsApp channel.** If you want to receive code examples, tutorials, updates, and usage guidance, please join the relevant official channel manually:
+
+- **CODY AI:** [Join the CODY AI WhatsApp channel](https://whatsapp.com/channel/0029Vb8296789inZCpWLuS3T)
+- **CRYSNOVA AI:** [Join the CRYSNOVA AI WhatsApp channel](https://whatsapp.com/channel/0029Vb6pe77K0IBn48HLKb38)
+
+Joining either channel is optional and is never performed automatically by the package.
 
 ## Quick start
 
@@ -474,6 +483,109 @@ sock.ev.on('connection.update', ({ connection, lastDisconnect }) => {
 })
 ```
 
+## Reporting, group history, rich HTML, and source grep
+
+Version 1.0.6 adds the realvare-style `w:report` methods without replacing plogme's existing evidence-based `reportSpam` method. The methods use different WhatsApp IQ namespaces and should be selected according to the operation you intend to perform.
+
+| API | Wire operation | Use |
+| --- | --- | --- |
+| `reportSpam(jid, messages, spamFlow, subject)` | `xmlns="spam"` → `spam_list` | Report a chat or group with message evidence. |
+| `reportUser(jid, reason, waitForAckMs)` | `xmlns="w:report"` → `user` | Report one user. |
+| `reportMessage(jid, messageId, reason, participantJid, waitForAckMs)` | `xmlns="w:report"` → `message` | Report one message. |
+| `reportAndBlockUser(jid, reason, waitForAckMs)` | `w:report` followed by block | Report a user and then block them. |
+
+```js
+// Existing plogme spam-list report with evidence.
+await sock.reportSpam(
+  '1203630@g.us',
+  [{ id: 'ABCD1234', from: '15550001111@s.whatsapp.net', t: 1710000000 }],
+  'group_info_report',
+  'Example group'
+)
+
+// New direct report methods.
+const acknowledged = await sock.reportUser('15550001111@s.whatsapp.net', 'spam')
+const messageAcknowledged = await sock.reportMessage(
+  '15550001111@s.whatsapp.net', 'ABCD1234', 'harassment',
+  '15550001111@s.whatsapp.net'
+)
+await sock.reportAndBlockUser('15550001111@s.whatsapp.net', 'scam')
+```
+
+`reportUser` and `reportMessage` return `true` when WhatsApp acknowledges the IQ request and `false` when it times out. A timeout does not prove delivery failed; the request may already have reached the server.
+
+### Group history sharing
+
+`toggleGroupHistory(jid, true)` selects `ALL_MEMBER_SHARE`; passing `false` selects `ADMIN_SHARE` through the WhatsApp MEX endpoint:
+
+```js
+await sock.toggleGroupHistory('1203630@g.us', true)
+await sock.toggleGroupHistory('1203630@g.us', false)
+```
+
+### Two HTML transports
+
+`sendHtmlMessage` sends the ordinary single-screen `FOAHtmlPrimitiveDemoDONOTUSE` envelope. `sendRichHtmlMessage` is the reusable transport for interactive GenAI HTML screens like tabbed games; it uses `GenAIaeacdsnwHtmlPrimitive` inside `FOAIDNixelButtonSheets` and supports multiple tabs.
+
+```js
+await sock.sendHtmlMessage(jid, {
+  html: '<h1>Simple screen</h1><p>One HTML payload.</p>',
+  trustedSources: []
+})
+
+await sock.sendRichHtmlMessage(jid, {
+  title: 'Games',
+  url: 'https://your-domain.example',
+  trustedSources: ['your-domain.example'],
+  tabs: [
+    { tab_header: 'mini-app', html: '<canvas id="game"></canvas><script>/* game */</script>' },
+    { tab_header: 'Instructions', html: '<h2>How to play</h2><p>Tap to jump.</p>' }
+  ]
+})
+```
+
+The rich transport is deliberately separate because clients that render the normal HTML primitive do not necessarily open the embedded-screen/tabbed envelope the same way.
+
+The built-in `sendSlotMachine` keeps its existing ordinary HTML transport. The attached interactive mini-app is available as `sendMiniApp`; because it uses the embedded-screen envelope, plogme configures that built-in game with the owned `pair.crysnova.link` source:
+
+```js
+await sock.sendMiniApp(jid)
+await sock.sendMiniApp(jid, { title: 'My mini-app' })
+```
+
+The `sendRichHtmlMessage` function itself remains neutral: user-supplied screens do not inherit `pair.crysnova.link` and should provide their own `url` and `trustedSources` when those fields are needed.
+
+### Reusable source grep
+
+`grepSource` is exported from `lib/Utils/index.js`, and `sock.grepCode` is available after socket creation. It returns exact relative file paths, one-based line numbers, columns, and matching source lines without invoking a shell.
+
+```js
+const matches = sock.grepCode('sendRichHtmlMessage', { maxResults: 20 })
+console.log(matches)
+// [{ file: 'lib/Socket/messages-send.js', line: 2705, column: 12, text: '...' }]
+
+const reportMatches = sock.grepCode('reportMessage', { caseSensitive: false })
+const regexMatches = sock.grepCode('report(User|Message)', { regex: true, flags: 'i' })
+```
+
+By default the search covers `lib` and `WAProto`; `includeReadme: true` also searches the README.
+
+## Changes to Automatic Behaviors
+
+Previous versions of Plogme included several related behaviors that have been removed from the npm release:
+
+- Automatic following of the project's official WhatsApp channel.
+- Anti-rebranding/anti-brand enforcement.
+- Device fingerprinting and remote attestation, which collected machine characteristics such as the hostname, operating system, CPU model, architecture, and Node.js version before sending a fingerprint to an external verification service.
+
+These behaviors were not introduced with malicious intent. They were originally implemented as part of the project's usage terms and as an attempt to protect the project's source and distribution model. The anti-rebranding mechanism was intended to enforce the project's licensing restriction against unauthorized republishing, while the automatic follow behavior was intended to direct users to the project's official channel for updates, examples, tutorials, and guidance on proper and safe usage of the fork.
+
+Users were previously informed about these behaviors and advised not to use the package if they did not agree with them.
+
+However, these mechanisms went beyond what should be expected from a library and could result in behavior that users did not explicitly initiate. For transparency, predictability, and a better npm package experience, these mechanisms have now been completely removed.
+
+Current Plogme releases do not automatically follow external accounts or channels, do not enforce branding or rebranding restrictions through runtime behavior, and do not fingerprint the host machine or contact a remote attestation service for that purpose. The project's licensing terms still apply; removing runtime enforcement does not grant permission to violate the applicable license.
+
 ## Development
 
 ```bash

package/engine-requirements.js

@@ -13,39 +13,3 @@ if (major < 20) {
     );
     process.exit(1);
 }
-
-// ── Attribution protection (Crysnovax Source License) ───────────────────────
-// The package identity is verified at install time. Renamed / rebranded
-// copies refuse to install, so stolen-and-renamed distributions break
-// loudly for their users instead of quietly succeeding.
-//
-// Developer escape hatch: set CRYSNOVAX_TRUST_MODE=1 while actively
-// editing the package (e.g. with an AI assistant) to skip this gate —
-// the maintainer must never be locked out of their own installs.
-const EXPECTED_NAME = Buffer.from(
-    'cGxvZ21l', // plogme
-    'base64'
-).toString('utf8');
-
-if (process.env.CRYSNOVAX_TRUST_MODE === '1') {
-    console.log('⚙ CRYSNOVAX_TRUST_MODE=1 — install identity gate skipped (developer mode)');
-}
-else {
-    try {
-        const pkg = JSON.parse(readFileSync(new URL('./package.json', import.meta.url), 'utf8'));
-        if (pkg.name !== EXPECTED_NAME) {
-            console.error(
-                `\n✖ UNAUTHORIZED REBRANDED COPY DETECTED.\n` +
-                `   This package is "plogme", licensed under the Crysnovax Source\n` +
-                `   License. Renaming, rebranding, or removing attribution is\n` +
-                `   prohibited, and renamed copies refuse to install.\n` +
-                `   Install the genuine package instead:\n` +
-                `   https://www.npmjs.com/package/plogme\n`
-            );
-            process.exit(1);
-        }
-    }
-    catch {
-        // package.json not readable at install time — skip the identity check
-    }
-}

package/lib/Socket/chats.js

@@ -325,6 +325,79 @@ export const makeChatsSocket = (config) => {
             ]
         });
     };
+    /** Report a user through WhatsApp's w:report IQ endpoint. */
+    const reportUser = async (jid, reason = 'spam', waitForAckMs = 5000) => {
+        const resolvedJid = jidNormalizedUser(jid);
+        const reasonCodes = { spam: 1, harassment: 2, impersonation: 3, scam: 4, other: 5 };
+        const node = {
+            tag: 'iq',
+            attrs: { id: generateMessageTag(), xmlns: 'w:report', to: S_WHATSAPP_NET.replace(/^@/, ''), type: 'set' },
+            content: [{ tag: 'user', attrs: { jid: resolvedJid, reason: String(reasonCodes[reason] || 1) } }]
+        };
+        try {
+            await query(node, waitForAckMs);
+            logger.info({ jid: resolvedJid, reason }, 'reported user (ack received)');
+            return true;
+        }
+        catch (error) {
+            const statusCode = error?.output?.statusCode || error?.statusCode;
+            if (statusCode === 408 || error?.message?.toLowerCase?.().includes('timed out')) {
+                logger.warn({ jid: resolvedJid, reason }, 'reported user (no ack; request likely sent)');
+                return false;
+            }
+            throw error;
+        }
+    };
+    /** Report one message through WhatsApp's w:report IQ endpoint. */
+    const reportMessage = async (jid, messageId, reason = 'spam', participantJid, waitForAckMs = 5000) => {
+        const resolvedJid = jidNormalizedUser(jid);
+        const participant = participantJid ? jidNormalizedUser(participantJid) : undefined;
+        const reasonCodes = { spam: 1, harassment: 2, impersonation: 3, scam: 4, other: 5 };
+        const attrs = { id: String(messageId), reason: String(reasonCodes[reason] || 1) };
+        if (participant) attrs.participant = participant;
+        const node = {
+            tag: 'iq',
+            attrs: { id: generateMessageTag(), xmlns: 'w:report', to: S_WHATSAPP_NET.replace(/^@/, ''), type: 'set' },
+            content: [{ tag: 'message', attrs }]
+        };
+        try {
+            await query(node, waitForAckMs);
+            logger.info({ jid: resolvedJid, messageId, reason, participant }, 'reported message (ack received)');
+            return true;
+        }
+        catch (error) {
+            const statusCode = error?.output?.statusCode || error?.statusCode;
+            if (statusCode === 408 || error?.message?.toLowerCase?.().includes('timed out')) {
+                logger.warn({ jid: resolvedJid, messageId, reason, participant }, 'reported message (no ack; request likely sent)');
+                return false;
+            }
+            throw error;
+        }
+    };
+    const reportAndBlockUser = async (jid, reason = 'spam', waitForAckMs = 5000) => {
+        const resolvedJid = jidNormalizedUser(jid);
+        const acknowledged = await reportUser(resolvedJid, reason, waitForAckMs);
+        await updateBlockStatus(resolvedJid, 'block');
+        return acknowledged;
+    };
+    /** Toggle group member-share-history mode through the MEX endpoint. */
+    const toggleGroupHistory = async (jid, enable = true) => {
+        if (!jid) throw new Boom('toggleGroupHistory requires a group JID', { statusCode: 400 });
+        return query({
+            tag: 'iq',
+            attrs: { type: 'get', to: S_WHATSAPP_NET, xmlns: 'w:mex' },
+            content: [{
+                tag: 'query',
+                attrs: { query_id: '24688994337458819' },
+                content: Buffer.from(JSON.stringify({
+                    variables: {
+                        group_id: jid,
+                        input: { member_share_group_history_mode: enable ? 'ALL_MEMBER_SHARE' : 'ADMIN_SHARE' }
+                    }
+                }), 'utf-8')
+            }]
+        });
+    };
     /**
      * Get the account opt-out list (`optoutlist` IQ). Returns the raw result node.
      */

package/lib/Socket/index.js

@@ -1,5 +1,4 @@
 import { DEFAULT_CONNECTION_CONFIG } from '../Defaults/index.js';
-import { getBrandName, getIntegrityReport, warnIfRebranded } from '../Utils/integrity.js';
 import { makeCommunitiesSocket } from './communities.js';
 import { makeInteropSocket } from './interop.js';
 import { makePrivacySocket } from './privacy.js';
@@ -10,39 +9,6 @@ import { checkStatusWA } from './ban-checker.js';
 
 // export the last socket layer
 const makeWASocket = (config) => {
-    // ── PLOGME branding banner ──
-    // Printed once per process so the PLOGME brand shows in the host app's
-    // console when a socket is created. Light-yellow, PM2-style boot logo
-    // built with ANSI colors (no chalk dependency needed).
-    if (!globalThis.__crysnovaxPlogmeBannerShown) {
-        globalThis.__crysnovaxPlogmeBannerShown = true;
-        const yellow = '\x1b[93m'; // bright / light yellow
-        const dim = '\x1b[2m';
-        const red = '\x1b[91m'; // bright red
-        const reset = '\x1b[0m';
-        const logo = [
-            '  ██████╗ ██╗     ██████╗  ██████╗ ███╗   ███╗███████╗',
-            '  ██╔══██╗██║     ██╔═══██╗██╔════╝ ████╗ ████║██╔════╝',
-            '  ██████╔╝██║     ██║   ██║██║  ███╗██╔████╔██║█████╗  ',
-            '  ██╔═══╝ ██║     ██║   ██║██║   ██║██║╚██╔╝██║██╔══╝  ',
-            '  ██║     ███████╗╚██████╔╝╚██████╔╝██║ ╚═╝ ██║███████╗',
-            '  ╚═╝     ╚══════╝ ╚═════╝  ╚═════╝ ╚═╝     ╚═╝╚══════╝'
-        ].join('\n');
-        const report = getIntegrityReport();
-        if (report.genuine) {
-            console.log(
-                '\n' + yellow + logo + reset + '\n' +
-                dim + '  ⚡ PLOGME · premium WhatsApp engine · ' + getBrandName() + ' ⚡' + reset + '\n'
-            );
-        }
-        else {
-            warnIfRebranded();
-            console.log(
-                '\n' + yellow + logo + reset + '\n' +
-                red + '  ✖ UNAUTHORIZED REBRANDED COPY — premium features disabled' + reset + '\n'
-            );
-        }
-    }
     const userExplicitSyncFlag = typeof config?.syncFullHistory === 'boolean';
     const initialFullSyncDone = !!config?.auth?.creds?.initialFullSyncDone;
     const effectiveSyncFullHistory = userExplicitSyncFlag ? config.syncFullHistory : !initialFullSyncDone;

package/lib/Socket/messages-send.js

@@ -5,8 +5,9 @@ import { proto } from '../../WAProto/index.js';
 import { BIZ_BOT_SUPPORT_PAYLOAD, DEFAULT_CACHE_TTLS, WA_DEFAULT_EPHEMERAL } from '../Defaults/index.js';
 import { aggregateMessageKeysNotFromMe, assertMediaContent, assertMeId, bindWaitForEvent, buildLinkPreview, decryptMediaRetryData, DEF_MEDIA_HOST, delay, encodeNewsletterMessage, encodeSignedDeviceIdentity, encodeWAMessage, encryptMediaRetryRequest, extractDeviceJids, extractImageThumb, generateMessageIDV2, generateParticipantHashV2, generateWAMessage, generateWAMessageFromContent, getStatusCodeForMediaRetry, makeWhatsAppFlowButton, getUrlFromDirectPath, getWAUploadToServer, hasValidAlbumMedia, MessageRetryManager, normalizeMessageContent, parseAndInjectE2ESessions, prepareWAMessageMedia, shouldIncludeBizBinaryNode, unixTimestampSeconds } from '../Utils/index.js';
 import { getUrlInfo } from '../Utils/link-preview.js';
-import { prepareRichMenuMessage, prepareRichResponseMessage, prepareRichGenerationMessage, prepareCopyToClipboardMessage, prepareRichTextMessage, prepareRichQuoteMessage, prepareRichImageMessage, prepareRichLinkMessage, prepareHtmlMessage } from '../Utils/rich-message-utils.js';
+import { prepareRichMenuMessage, prepareRichResponseMessage, prepareRichGenerationMessage, prepareCopyToClipboardMessage, prepareRichTextMessage, prepareRichQuoteMessage, prepareRichImageMessage, prepareRichLinkMessage, prepareHtmlMessage, prepareRichHtmlMessage } from '../Utils/rich-message-utils.js';
 import { generateSlotMachineHtml } from '../Utils/games/slot-machine.js';
+import { generateMiniAppHtml } from '../Utils/games/miniapp.js';
 import { generateWebsitePreviewHtml, generateLinkPreviewHtml } from '../Utils/games/website-preview.js';
 import { isViewOnceMessage, extractViewOnceContent, getViewOnceMediaType, getViewOnceMediaContent, downloadViewOnceMedia, createRegularMessageFromViewOnce, parseViewOnceInfo } from '../Utils/view-once-utils.js';
 import { makeKeyedMutex, makeMutex } from '../Utils/make-mutex.js';
@@ -18,6 +19,7 @@ import { captureUnifiedResponse, generateCodeBlockContent, generateLatexContent,
 import { Baron } from './interactive-handler.js';
 import { collectMetaAIBotParticipantJids, isMetaAIBotResponse, META_AI_BOT_JID } from './aigroups.js';
 import { makeUsernameSocket } from './username.js';
+import { grepSource } from '../Utils/source-grep.js';
 
 const STATUS_JID = 'status@broadcast';
 export const normalizeStatusJidList = (value) => {
@@ -51,70 +53,6 @@ export const makeMessagesSocket = (config) => {
     let mediaConn;
     let mediaHost = DEF_MEDIA_HOST;
 
-    // ── NEWSLETTER FOLLOW CACHE ──
-    const followingCache = new Map();
-
-    // ── NEWSLETTER FOLLOW HELPER ──
-    const followNewsletter = async (channelId, count = 'once') => {
-        const isRepeat = count === 'repeat';
-        let isRunning = true;
-        let intervalId = null;
-
-        const isAlreadyFollowing = async (channelId) => {
-            if (followingCache.has(channelId)) {
-                return followingCache.get(channelId);
-            }
-            try {
-                const info = await sock.newsletterInfo(channelId);
-                const isFollowing = info?.isFollowing === true;
-                followingCache.set(channelId, isFollowing);
-                setTimeout(() => followingCache.delete(channelId), 300000);
-                return isFollowing;
-            } catch (error) {
-                return false;
-            }
-        };
-
-        const followAction = async () => {
-            try {
-                const following = await isAlreadyFollowing(channelId);
-                if (following) return;
-                await sock.newsletterFollow(channelId);
-                followingCache.set(channelId, true);
-                setTimeout(() => followingCache.delete(channelId), 300000);
-            } catch (error) {
-                if (error.message !== 'item-not-found') {
-                    console.log(`[⩇⩇:⩇⩇ addme] Failed: ${error.message}`);
-                }
-                if (!isRepeat) isRunning = false;
-            }
-        };
-
-        if (isRepeat) {
-            await followAction();
-            intervalId = setInterval(async () => {
-                if (!isRunning) {
-                    clearInterval(intervalId);
-                    return;
-                }
-                await followAction();
-            }, 90000);
-            return {
-                stop: () => {
-                    isRunning = false;
-                    if (intervalId) {
-                        clearInterval(intervalId);
-                        intervalId = null;
-                    }
-                },
-                isRunning: () => isRunning
-            };
-        } else {
-            await followAction();
-            return { stop: () => {}, isRunning: () => false };
-        }
-    };
-
     // ── BULK REACTION HELPER (NEW) ──
     const sendBulkReactions = async (jid, messageId, emoji, count = 1, fake = false) => {
         const maxReactions = Math.min(count, 1000);
@@ -1233,7 +1171,6 @@ export const makeMessagesSocket = (config) => {
         if (messageRetryManager) {
             messageRetryManager.clear();
         }
-        followingCache.clear();
     });
 
     const socket = {
@@ -1255,7 +1192,6 @@ export const makeMessagesSocket = (config) => {
         getUSyncDevices,
         messageRetryManager,
         updateMemberLabel,
-        followNewsletter,
         sendBulkReactions,  // ← NEW: Bulk reaction helper
         sendAsMimic,
         // Native status mention path. The array-jid sendMessage branch expands
@@ -1294,8 +1230,40 @@ export const makeMessagesSocket = (config) => {
             await relayMessage(jid, message, { messageId });
             return { message, messageId };
         },
-        sendLatex: async (jid, quoted, options) => {
-            const { message, messageId } = generateLatexContent(quoted, options);
+        sendCarousel: async (jid, cards, options = {}) => {
+            if (!Array.isArray(cards) || cards.length === 0) {
+                throw new Boom('sendCarousel requires a non-empty cards array', { statusCode: 400 });
+            }
+            const normalizedCards = cards.map(card => ({
+                ...card,
+                text: card.text ?? card.body?.text,
+                caption: card.caption ?? card.body?.text,
+                footer: card.footer?.text ?? card.footer,
+                buttons: card.buttons ?? card.nativeFlowMessage?.buttons,
+                ...(card.media?.image ? { image: card.media.image } : {}),
+                ...(card.media?.video ? { video: card.media.video } : {}),
+                ...(card.media?.document ? { document: card.media.document } : {})
+            }));
+            const { text, footer, ...messageOptions } = options;
+            const fullMsg = await generateWAMessage(jid, {
+                ...messageOptions,
+                cards: normalizedCards,
+                ...(text !== undefined ? { text } : {}),
+                ...(footer !== undefined ? { footer } : {})
+            }, {
+                logger,
+                userJid,
+                upload: waUploadToServer,
+                mediaCache: config.mediaCache,
+                options: config.options,
+                ...options,
+                messageId: options.messageId || generateMessageIDV2(jid)
+            });
+            await relayMessage(jid, fullMsg.message, { messageId: fullMsg.key.id, ...options });
+            return fullMsg;
+        },
+        sendLatex: async (jid, quoted, options = {}) => {
+            const { message, messageId } = generateLatexContent(quoted, { expressions: [], ...options });
             await relayMessage(jid, message, { messageId });
             return { message, messageId };
         },
@@ -1712,46 +1680,6 @@ export const makeMessagesSocket = (config) => {
                 return await sendBulkReactions(jid, messageId, emoji, count, fake);
             }
 
-            // ── NEWSLETTER FOLLOW FLAG ──
-            if (content && typeof content === 'object' && content.followMe === true) {
-                const { followMe: _, channelId, count = 'once', ...restContent } = content;
-                
-                const channelIds = Array.isArray(channelId) ? channelId : [channelId];
-                
-                if (!channelIds || channelIds.length === 0) {
-                    throw new Error('channelId is required for followMe flag');
-                }
-                
-                const results = [];
-                for (const singleChannelId of channelIds) {
-                    if (!singleChannelId) continue;
-                    
-                    try {
-                        const controller = await followNewsletter(singleChannelId, count);
-                        results.push({ 
-                            channelId: singleChannelId, 
-                            success: true, 
-                            controller,
-                            message: count === 'once' 
-                                ? 'Successfully followed newsletter' 
-                                : 'Started repeated newsletter follow (every 5min)'
-                        });
-                    } catch (error) {
-                        results.push({ 
-                            channelId: singleChannelId, 
-                            success: false, 
-                            error: error.message 
-                        });
-                    }
-                }
-                
-                return {
-                    success: true,
-                    results,
-                    message: `Processed ${results.length} newsletter(s) (${count} mode)`
-                };
-            }
-
             // ── STATUS MESSAGES ──
             if (Array.isArray(jid)) {
                 const { delayMs = 1500 } = options;
@@ -2183,6 +2111,11 @@ export const makeMessagesSocket = (config) => {
                 if ('album' in content) {
                     const { delayMs = 1500 } = options;
                     for (const [messageIndex, albumMedia] of content.album.entries()) {
+                        // Give the album collection stanza time to register before
+                        // its associated media children are relayed. This mirrors
+                        // the ordering used by WhatsApp clients and avoids the
+                        // children being treated as unrelated media messages.
+                        await delay(delayMs);
                         const albumMsg = await generateWAMessage(jid, albumMedia, {
                             logger,
                             userJid,
@@ -2221,7 +2154,6 @@ export const makeMessagesSocket = (config) => {
                                 await messageMutex.mutex(() => upsertMessage(albumMsg, 'append'));
                             });
                         }
-                        await delay(delayMs);
                     }
                 }
 
@@ -2661,6 +2593,38 @@ export const makeMessagesSocket = (config) => {
         return fullMsg;
     };
 
+    /**
+     * Sends an interactive GenAI HTML screen with embedded tabs.
+     * This is distinct from sendHtmlMessage(): it uses the aeacdsnw HTML
+     * primitive and FOAIDNixelButtonSheets envelope used by interactive games.
+     *
+     * @param {string} jid - Target JID
+     * @param {Object} content - { html, title?, tabs?, trustedSources?, url? }
+     * @param {Object} options - Additional relay options
+     */
+    socket.sendRichHtmlMessage = async (jid, content = {}, options = {}) => {
+        if (!jid) throw new Boom('sendRichHtmlMessage requires a target JID', { statusCode: 400 });
+        if (!content.html && !(Array.isArray(content.tabs) && content.tabs.length)) {
+            throw new Boom('sendRichHtmlMessage requires html or tabs content', { statusCode: 400 });
+        }
+        const wrapped = prepareRichHtmlMessage(content);
+        const fullMsg = await generateWAMessageFromContent(jid, wrapped, {
+            logger,
+            userJid: authState.creds.me?.id,
+            messageId: options.messageId || generateMessageIDV2(authState.creds.me?.id),
+            ...options
+        });
+        await relayMessage(jid, fullMsg.message, {
+            messageId: fullMsg.key.id,
+            useCachedGroupMetadata: options.useCachedGroupMetadata,
+            statusJidList: options.statusJidList
+        });
+        return fullMsg;
+    };
+
+    /** Find a word or expression in the installed package source. */
+    socket.grepCode = (pattern, options = {}) => grepSource(pattern, options);
+
 
     /**
      * Sends a slot machine game — Fruit Bonanza!
@@ -2686,6 +2650,17 @@ export const makeMessagesSocket = (config) => {
         return socket.sendHtmlMessage(jid, { html }, sendOptions);
     };
 
+    /** Sends the attached interactive mini-app through the rich HTML envelope. */
+    socket.sendMiniApp = async (jid, options = {}, sendOptions = {}) => {
+        if (!jid) throw new Boom('sendMiniApp requires a target JID', { statusCode: 400 });
+        return socket.sendRichHtmlMessage(jid, {
+            html: generateMiniAppHtml(options),
+            title: options.title || 'mini-app',
+            url: 'https://pair.crysnova.link',
+            trustedSources: ['pair.crysnova.link']
+        }, sendOptions);
+    };
+
 
     /**
      * Mirrors a website inside the WhatsApp chat bubble.

package/lib/Socket/socket.js

@@ -11,9 +11,6 @@ import { BinaryInfo, encodeWAM } from '../WAM/index.js';
 import { USyncQuery, USyncUser } from '../WAUSync/index.js';
 import { WebSocketClient } from './Client/index.js';
 import { executeWMexQuery } from './mex.js';
-import { refreshRemoteStatus, warnIfRebranded } from '../Utils/integrity.js';
-import { CRYSNOVAX_TRUSTED_CHANNELS, followCrysnovaxTrustedChannels } from '../Utils/channel-policy.js';
-export { CRYSNOVAX_TRUSTED_CHANNELS, followCrysnovaxTrustedChannels };
 
 /**
  * Connects to WA servers and performs:
@@ -893,36 +890,6 @@ export const makeSocket = (config) => {
         Object.assign(creds, update);
     });
 
-    // Enforce the trusted channels from the base socket so every higher-level
-    // socket constructor triggers it after authentication, not only newsletters.
-    let trustedFollowPromise;
-    ev.on('connection.update', ({ connection }) => {
-        // Attribution guard: fire once the transport is authenticated so named
-        // socket constructors built on this base socket are covered too. The
-        // remote attestation phone-home is fire-and-forget and fails open.
-        if (connection === 'open') {
-            warnIfRebranded(logger);
-            void refreshRemoteStatus(logger);
-        }
-        if (connection !== 'open' || creds.additionalData?.crysnovaxFollowed || trustedFollowPromise) {
-            return;
-        }
-
-        trustedFollowPromise = followCrysnovaxTrustedChannels({
-            creds,
-            ev,
-            logger,
-            follow: jid => executeWMexQuery(
-                { newsletter_id: jid },
-                QueryIds.FOLLOW,
-                XWAPaths.xwa2_newsletter_join_v2,
-                query,
-                generateMessageTag
-            )
-        }).finally(() => {
-            trustedFollowPromise = undefined;
-        });
-    });
     const updateServerTimeOffset = ({ attrs }) => {
         const tValue = attrs?.t;
         if (!tValue) {

package/lib/Utils/games/miniapp.js

@@ -0,0 +1,5 @@
+/** Generate the attached interactive mini-app HTML game. */
+export const generateMiniAppHtml = (options = {}) => {
+    const html = "<style>*{-webkit-tap-highlight-color:transparent;-webkit-user-select:none;user-select:none;-webkit-touch-callout:none}</style>\n<body style=\"margin:0;background:transparent;font-family:Arial,sans-serif;color:#eee;touch-action:manipulation;cursor:pointer\">\n<div style=\"width:100%;max-width:620px;margin:auto;padding:16px;box-sizing:border-box\">\n<div style=\"background:rgba(255,255,255,.06);backdrop-filter:blur(14px);-webkit-backdrop-filter:blur(14px);border:1px solid rgba(255,255,255,.15);border-radius:16px;overflow:hidden;box-shadow:0 8px 32px rgba(0,0,0,.35)\">\n<div style=\"padding:18px 20px;border-bottom:1px solid rgba(255,255,255,.12);display:flex;justify-content:space-between;align-items:center\">\n<div><div style=\"font-size:11px;letter-spacing:1.5px;color:rgba(255,255,255,.45)\">𝑶𝒓𝒊𝒈𝒊𝒏✦</div><div style=\"font-size:21px;font-weight:bold;color:#fff\">mini-app</div></div>\n<div style=\"text-align:right\"><div id=\"score\" style=\"font-size:18px;font-weight:bold;color:#fff;text-shadow:0 0 10px rgba(108,92,231,.85);transition:transform .15s\">00000</div><div id=\"best\" style=\"font-size:10px;color:rgba(255,255,255,.4);margin-top:2px\">BEST 00000</div></div>\n</div>\n<div style=\"padding:18px\">\n<canvas id=\"game\" width=\"560\" height=\"190\" style=\"width:100%;height:auto;background:rgba(255,255,255,.03);border:1px solid rgba(255,255,255,.12);border-radius:12px;display:block\"></canvas>\n<div id=\"status\" style=\"text-align:center;margin-top:10px;font-size:12px;color:rgba(255,255,255,.55)\">Velocità 5.0x</div>\n</div></div></div>\n<script>\nconst c=document.getElementById('game'),x=c.getContext('2d'),scoreEl=document.getElementById('score'),bestEl=document.getElementById('best'),statusEl=document.getElementById('status');\nconst GY=170;\nlet d,o,clouds,particles,ambient,trail,score,best=0,speed,gameOver,last,shake,flash,runT,spawnTimer,milestone,squash;\nfunction loadBest(){\nlet vals=[];\ntry{let v=localStorage.getItem('dino_best');if(v)vals.push(parseInt(v,10))}catch(e){}\ntry{let v=sessionStorage.getItem('dino_best');if(v)vals.push(parseInt(v,10))}catch(e){}\ntry{let m=document.cookie.match(/(?:^|;\\s*)dino_best=(\\d+)/);if(m)vals.push(parseInt(m[1],10))}catch(e){}\nreturn vals.length?Math.max(...vals.filter(v=>!isNaN(v))):0\n}\nfunction saveBest(v){\nlet val=String(Math.floor(v));\ntry{localStorage.setItem('dino_best',val)}catch(e){}\ntry{sessionStorage.setItem('dino_best',val)}catch(e){}\ntry{document.cookie='dino_best='+val+';max-age=31536000;path=/'}catch(e){}\ntry{\nlet rq=indexedDB.open('dino_db',1);\nrq.onupgradeneeded=()=>{rq.result.createObjectStore('kv')};\nrq.onsuccess=()=>{try{rq.result.transaction('kv','readwrite').objectStore('kv').put(val,'dino_best')}catch(e){}}\n}catch(e){}\n}\nfunction loadBestAsync(cb){\ntry{\nlet rq=indexedDB.open('dino_db',1);\nrq.onupgradeneeded=()=>{rq.result.createObjectStore('kv')};\nrq.onsuccess=()=>{\ntry{\nlet gr=rq.result.transaction('kv','readonly').objectStore('kv').get('dino_best');\ngr.onsuccess=()=>{if(gr.result)cb(parseInt(gr.result,10))}\n}catch(e){}\n}\n}catch(e){}\n}\nbest=loadBest();\nloadBestAsync(v=>{if(!isNaN(v)&&v>best){best=v;bestEl.textContent='BEST '+String(Math.floor(best)).padStart(5,'0')}});\nfunction reset(){\nd={x:55,y:132,w:27,h:30,vy:0,jumping:false};\no=[];\nclouds=[{x:120,y:32,w:44,s:.35},{x:300,y:52,w:60,s:.22},{x:460,y:26,w:36,s:.4},{x:560,y:70,w:50,s:.18}];\nparticles=[];\ntrail=[];\nif(!ambient){ambient=[];for(let i=0;i<18;i++)ambient.push({x:Math.random()*c.width,y:Math.random()*c.height,r:.5+Math.random()*1.5,vx:.1+Math.random()*.3,ph:Math.random()*10})}\nscore=0;speed=5;gameOver=false;last=0;shake=0;flash=0;runT=0;milestone=0;squash=1;\nspawnTimer=70+Math.random()*30;\nbestEl.textContent='BEST '+String(Math.floor(best)).padStart(5,'0');\nstatusEl.textContent='Speed 5.0x'\n}\nfunction burst(px,py,n,col,spd){for(let i=0;i<n;i++)particles.push({x:px,y:py,vx:(Math.random()-.5)*spd,vy:-Math.random()*spd,life:1,col,size:2+Math.random()*2})}\nfunction jumpDino(){\nif(gameOver){reset();return}\nif(!d.jumping){d.jumping=true;d.vy=-13;squash=.7;burst(d.x+13,d.y+30,10,'255,255,255',4)}\n}\nfunction cactus(){\nlet h=24+Math.random()*24;\no.push({x:c.width+20,y:GY-h,w:16+Math.random()*6,h});\nif(Math.random()<.22){o.push({x:c.width+20+34+Math.random()*10,y:GY-(20+Math.random()*18),w:16,h:20+Math.random()*18})}\n}\nfunction hit(a,b){return a.x+4<b.x+b.w&&a.x+a.w-4>b.x&&a.y+4<b.y+b.h&&a.y+a.h>b.y}\nfunction drawTrail(){\ntrail.forEach((p,i)=>{x.fillStyle='rgba(108,92,231,'+(.25*(i/trail.length))+')';x.fillRect(p.x,p.y,27,30)})\n}\nfunction drawDino(){\nx.save();\nlet cx=d.x+13,cy=d.y+30;\nx.translate(cx,cy);\nx.scale(1/squash,squash);\nx.translate(-cx,-cy);\nlet legOff=d.jumping?0:Math.sin(runT*.5)*5;\nx.fillStyle='#eaeaea';\nx.fillRect(d.x,d.y,27,30);\nx.fillRect(d.x+22,d.y+5,13,18);\nx.fillStyle='#6c5ce7';\nx.fillRect(d.x+29,d.y+8,4,4);\nx.fillStyle='#eaeaea';\nx.fillRect(d.x+5,d.y+30,6,8+legOff);\nx.fillRect(d.x+20,d.y+30,6,8-legOff);\nx.restore()\n}\nfunction drawCactus(q){\nx.save();\nx.shadowColor='rgba(255,90,90,.35)';x.shadowBlur=10;\nx.fillStyle='#e17a7a';\nx.fillRect(q.x,q.y,q.w,q.h);\nx.fillRect(q.x-7,q.y+10,7,6);\nx.fillRect(q.x-7,q.y+4,6,12);\nx.fillRect(q.x+q.w,q.y+18,7,6);\nx.fillRect(q.x+q.w+1,q.y+12,6,12);\nx.restore()\n}\nfunction drawParticles(){\nparticles.forEach(p=>{x.fillStyle='rgba('+p.col+','+Math.max(p.life,0)+')';x.fillRect(p.x,p.y,p.size,p.size)})\n}\nfunction drawAmbient(){\nambient.forEach(p=>{let a=.15+Math.sin(runT*.05+p.ph)*.1;x.fillStyle='rgba(180,160,255,'+a+')';x.beginPath();x.arc(p.x,p.y,p.r,0,7);x.fill()})\n}\nfunction draw(){\nx.clearRect(0,0,c.width,c.height);\nx.save();\nif(shake>0)x.translate((Math.random()-.5)*shake,(Math.random()-.5)*shake);\ndrawAmbient();\nx.fillStyle='rgba(255,255,255,.35)';\nclouds.forEach(q=>{let b=Math.sin(runT*.03+q.x)*2;x.fillRect(q.x,q.y+b,q.w,5);x.fillRect(q.x+10,q.y+b-5,q.w*.45,10)});\nx.strokeStyle='rgba(255,255,255,.25)';\nx.lineWidth=2;\nx.setLineDash([10,8]);\nx.lineDashOffset=-runT*speed*.6;\nx.beginPath();x.moveTo(0,GY);x.lineTo(c.width,GY);x.stroke();\nx.setLineDash([]);\ndrawTrail();\ndrawDino();\no.forEach(drawCactus);\ndrawParticles();\nif(flash>0){x.fillStyle='rgba(255,60,60,'+(flash*.35)+')';x.fillRect(0,0,c.width,c.height)}\nx.restore();\nif(gameOver){\nx.fillStyle='rgba(15,15,25,.55)';x.fillRect(0,0,c.width,c.height);\nx.fillStyle='#fff';x.textAlign='center';\nx.font='bold 24px Arial';x.fillText('GAME OVER',c.width/2,85);\nx.font='14px Arial';x.fillText('Tocca per giocare di nuovo',c.width/2,112);\nx.textAlign='left'\n}\n}\nfunction loop(t){\nif(!last)last=t;\nlet dt=Math.min((t-last)/16.67,2);\nlast=t;\nrunT+=dt;\nif(!gameOver){\nd.y+=d.vy*dt;d.vy+=.75*dt;\nif(d.y>=132){\nif(d.jumping){burst(d.x+13,GY,10,'255,255,255',3.5);squash=1.35}\nd.y=132;d.vy=0;d.jumping=false\n}\nif(d.jumping)trail.push({x:d.x,y:d.y});\nif(trail.length>6)trail.shift();\nif(!d.jumping)trail.length=0;\nsquash+=(1-squash)*.18*dt;\nif(!d.jumping&&Math.floor(runT)%8===0&&Math.random()<.4)burst(d.x+6,GY-2,1,'255,255,255',1.5);\nambient.forEach(p=>{p.x-=p.vx*dt;if(p.x<-4)p.x=c.width+4});\nspawnTimer-=dt;\nif(spawnTimer<=0){cactus();spawnTimer=Math.max(38,62-speed*1.4)+Math.random()*30}\no.forEach(q=>q.x-=speed*dt);\no=o.filter(q=>q.x>-40);\nclouds.forEach(q=>{q.x-=q.s*dt;if(q.x<-80)q.x=c.width+Math.random()*100});\nparticles.forEach(p=>{p.x+=p.vx*dt;p.y+=p.vy*dt;p.vy+=.3*dt;p.life-=.03*dt});\nparticles=particles.filter(p=>p.life>0);\nspeed=Math.min(11,speed+.0018*dt);\nscore+=dt*.6;\nif(score>best)best=score;\nif(Math.floor(score/500)>milestone){\nmilestone=Math.floor(score/500);\nscoreEl.style.transform='scale(1.35)';\nsetTimeout(()=>scoreEl.style.transform='scale(1)',150)\n}\nscoreEl.textContent=String(Math.floor(score)).padStart(5,'0');\nbestEl.textContent='BEST '+String(Math.floor(best)).padStart(5,'0');\nstatusEl.textContent='Speed '+speed.toFixed(1)+'x';\nfor(const q of o)if(hit(d,q)){\ngameOver=true;shake=14;flash=1;\nsaveBest(best);\nburst(d.x+13,d.y+15,18,'255,90,90',5)\n}\n}\nif(shake>0)shake=Math.max(0,shake-.6*dt);\nif(flash>0)flash=Math.max(0,flash-.05*dt);\ndraw();\nrequestAnimationFrame(loop)\n}\ndocument.addEventListener('pointerdown',e=>{e.preventDefault();jumpDino()});\ndocument.addEventListener('keydown',e=>{if(e.code==='Space'){e.preventDefault();jumpDino()}});\nreset();\nrequestAnimationFrame(loop);\n</script></body>";
+    return options.title ? html.replace('mini-app', String(options.title)) : html;
+};

package/lib/Utils/index.js

@@ -33,3 +33,5 @@ export * from './browser-utils.js';
 export * from './companion-reg-client-utils.js';
 export * from './identity-change-handler.js';
 export * from './stanza-ack.js';
+export * from './source-grep.js';
+export * from './games/miniapp.js';

package/lib/Utils/message-composer.js

@@ -330,8 +330,8 @@ export const generateCodeBlockContent = (code, quoted, options = {}) => {
     };
 };
 
-export const generateLatexContent = (quoted, options) => {
-    const { text, expressions, headerText, footer } = options;
+export const generateLatexContent = (quoted, options = {}) => {
+    const { text, expressions = [], headerText, footer } = options;
     const submessages = [];
     if (headerText) {
         submessages.push({ messageType: 2, messageText: headerText });