tca-js 0.3.1 → 0.4.1

package/dist/api.js

@@ -1,277 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.API = void 0;
-exports.fetchAccount = fetchAccount;
-exports.fetchWebId = fetchWebId;
-const node_crypto_1 = require("node:crypto");
-const constants_1 = require("./constants");
-const errors_1 = require("./errors");
-const listener_1 = require("./listener");
-const media_1 = require("./media");
-const message_1 = require("./message");
-const proto_1 = require("./proto");
-/** "Latest" cursor for reading history — greater than any `index` (µs). */
-const NEWEST = 9999999999999999n;
-/**
- * A logged-in TikTok session — create with `new TikTok().login(credentials)`.
- * All calls go directly over HTTP/WS to TikTok using cookies, no browser needed.
- */
-class API {
-    ctx;
-    account;
-    listener;
-    media;
-    constructor(ctx, account) {
-        this.ctx = ctx;
-        this.account = account;
-        this.listener = new listener_1.Listener(ctx);
-        this.media = new media_1.MediaClient(ctx);
-    }
-    getOwnId() {
-        return this.ctx.ownId;
-    }
-    /** Current cookies — save them so the next `login` needs no QR scan. */
-    getCookies() {
-        return [...this.ctx.cookies].map(([name, value]) => ({ name, value }));
-    }
-    getContext() {
-        return { deviceId: this.ctx.deviceId, userAgent: this.ctx.userAgent };
-    }
-    /** Whether the session is still alive — call periodically to detect expiry early. */
-    async isAlive() {
-        return (await fetchAccount(this.ctx).catch(() => null)) !== null;
-    }
-    // ─── Inbox ─────────────────────────────────────────────────────────────────
-    /** Recent conversations + their latest messages, paginated with `cursor`. */
-    async getConversations(cursor = '0') {
-        const body = await this.ctx.im('/v2/message/get_by_user_init', constants_1.Cmd.GetMessagesByUserInit, new proto_1.Writer().int(1, BigInt(cursor)).finish());
-        return {
-            messages: body.msgs(1).map((m) => (0, message_1.parseMessage)(m, this.ctx.ownId)),
-            conversations: body.msgs(2).map((m) => (0, message_1.parseConversation)(m, this.ctx.ownId)),
-            // Cursor = number of conversations fetched so far (0, 10, 20…) — field 4; field 3 is a timestamp, not used for paging.
-            cursor: body.id(4),
-            hasMore: body.num(5) === 1,
-        };
-    }
-    /** Messages of a conversation, newest first. For older messages: `before = <index of oldest message>`. */
-    async getMessages(conv, opts = {}) {
-        const limit = Math.min(Math.max(opts.limit ?? 20, 1), 50);
-        const body = await this.ctx.im('/v1/message/get_by_conversation', constants_1.Cmd.GetMessagesByConversation, new proto_1.Writer()
-            .bytes(1, conv.conversationId)
-            .int(2, constants_1.ConversationType.OneToOne)
-            .int(3, BigInt(conv.conversationShortId))
-            .int(4, 1) // direction: older than cursor
-            .int(5, opts.before ? BigInt(opts.before) : NEWEST)
-            .int(6, limit)
-            .finish());
-        const messages = body.msgs(1).map((m) => (0, message_1.parseMessage)(m, this.ctx.ownId));
-        return { messages, hasMore: messages.length >= limit };
-    }
-    /** User profiles by uid (display name, @username, avatar). */
-    async getUsers(uids) {
-        if (uids.length === 0)
-            return [];
-        const q = new URLSearchParams({
-            aid: '1988',
-            app_name: 'tiktok_web',
-            device_platform: 'web_pc',
-            source: 'im_chat',
-            from_page: 'message',
-            user_ids: JSON.stringify(uids),
-        });
-        const res = await this.ctx.getJson(`${constants_1.WEB}/tiktok/v1/im/user/profile/?${q}`);
-        if (res.status_code)
-            throw new errors_1.TikTokError('IM_ERROR', `user/profile: ${res.status_code}`, res.status_code);
-        return (res.users ?? []).map(({ im_user_profile: p = {} }) => ({
-            uid: p.user_id_str ?? '',
-            uniqueId: p.unique_id ?? '',
-            nickname: p.nick_name ?? '',
-            ...avatarLinks(p.avatars),
-        }));
-    }
-    /**
-     * Download an avatar (tries each URL in turn, skips heic). No cookie / Referer sent: the image CDN is cross-origin and
-     * URLs are already signed. `null` if no URL could be downloaded.
-     */
-    async downloadAvatar(user) {
-        for (const url of user.avatars) {
-            const res = await fetch(url, {
-                headers: { 'User-Agent': this.ctx.userAgent },
-                referrerPolicy: 'no-referrer',
-                signal: AbortSignal.timeout(this.ctx.options.timeoutMs ?? 20_000),
-            }).catch(() => null);
-            const type = res?.headers.get('content-type') ?? '';
-            if (!res?.ok || !/^image\/(jpeg|png|webp|gif)/.test(type))
-                continue;
-            return { data: Buffer.from(await res.arrayBuffer()), type };
-        }
-        return null;
-    }
-    /** Mark as read up to message `msg`. */
-    async markRead(msg) {
-        await this.ctx.im('/v3/conversation/mark_read', constants_1.Cmd.MarkRead, new proto_1.Writer()
-            .bytes(1, msg.conversationId)
-            .int(2, BigInt(msg.conversationShortId))
-            .int(3, constants_1.ConversationType.OneToOne)
-            .int(4, BigInt(msg.index))
-            .int(11, 4)
-            .finish(), constants_1.MARK_READ_BODY_FIELD);
-    }
-    // ─── Send ─────────────────────────────────────────────────────────────────
-    /** Send a text message to a conversation (usually the just-received `msg` — it carries the conversation ids). */
-    async sendMessage(conv, text) {
-        const cid = (0, node_crypto_1.randomUUID)();
-        await this.send(conv, cid, constants_1.MessageType.Text, JSON.stringify({ aweType: 0, text }), null);
-        return { clientMessageId: cid };
-    }
-    /** Send an image: upload to the private (encrypted) store, then send an image message. */
-    async sendImage(conv, image) {
-        const up = await this.media.upload(image);
-        const cid = (0, node_crypto_1.randomUUID)();
-        const w = String(up.width);
-        const h = String(up.height);
-        const media = new proto_1.Writer()
-            .msg(1, new proto_1.Writer()
-            .bytes(1, up.uri)
-            .msg(5, new proto_1.Writer().int(1, up.width).int(2, up.height))
-            .bytes(6, up.secretKey)
-            .int(7, 0))
-            .msg(3, new proto_1.Writer()
-            .msg(1, new proto_1.Writer().bytes(1, 'You sent a 📷'))
-            .msg(2, new proto_1.Writer().bytes(1, 'sent a 📷'))
-            .msg(3, new proto_1.Writer().bytes(1, '[Photo]')))
-            .msg(200, new proto_1.Writer().msg(1, new proto_1.Writer().bytes(1, up.uri).map(2, {
-            image_width: w,
-            image_height: h,
-            decrypt_key: up.secretKey,
-            quote_preview: 'dm_cam_preview_photo',
-            sender_preview: 'sender_preview',
-        })));
-        const extra = new proto_1.Writer()
-            .msg(13, new proto_1.Writer().msg(4, media))
-            .bytes(14, 'private_image')
-            .msg(17, new proto_1.Writer()
-            .int(1, 1)
-            .bytes(2, up.uri)
-            .bytes(3, up.secretKey)
-            .msg(10, new proto_1.Writer().int(1, up.width).int(2, up.height).int(4, up.size).bytes(5, up.filename)));
-        await this.send(conv, cid, constants_1.MessageType.PrivateImage, '', extra);
-        return { clientMessageId: cid };
-    }
-    /**
-     * Set YOUR reaction on a message — like TikTok Web, one reaction per user: a new `emoji` replaces the old one,
-     * `null` = remove. Pass the whole `msg` just read (current `reactions` are needed to know which key to remove).
-     * Sends `ModifyMessagePropertyRequestBody` (command 705) — see README.
-     */
-    async setReaction(msg, emoji) {
-        const own = this.ctx.ownId;
-        const mine = msg.reactions.filter((r) => r.userIds.includes(own)).map((r) => r.emoji);
-        const ops = [];
-        if (emoji && !mine.includes(emoji))
-            ops.push({ op: constants_1.PropertyOp.Add, key: constants_1.REACTION_PREFIX + emoji });
-        for (const e of mine) {
-            if (e === emoji)
-                continue;
-            ops.push({ op: constants_1.PropertyOp.Remove, key: constants_1.REACTION_PREFIX + e });
-            // ❤️ sent from the mobile app still uses the legacy key `e:love` — remove it too or the app keeps showing the heart.
-            if (e === constants_1.REACTION_HEART)
-                ops.push({ op: constants_1.PropertyOp.Remove, key: constants_1.REACTION_LOVE_KEY });
-        }
-        if (ops.length === 0)
-            return;
-        const target = new proto_1.Writer()
-            .bytes(1, msg.conversationId)
-            .int(2, constants_1.ConversationType.OneToOne)
-            .int(3, BigInt(msg.conversationShortId))
-            .int(4, BigInt(msg.serverMessageId))
-            .bytes(5, msg.clientMessageId);
-        for (const o of ops)
-            target.msg(6, new proto_1.Writer().int(1, o.op).bytes(2, o.key).bytes(4, own));
-        const body = await this.ctx.im('/v1/message/set_property', constants_1.Cmd.SetMessageProperty, new proto_1.Writer().msg(1, target).bytes(2, 'deprecated').finish());
-        // status: 0 success, 1 duplicate (also done); anything else means TikTok rejected it.
-        const status = body.num(1);
-        if (status > 1)
-            throw new errors_1.TikTokError('IM_ERROR', `set_property: status ${status}`, status);
-    }
-    /** Download a sticker image (public CDN, unencrypted, no cookie needed). */
-    async downloadSticker(sticker) {
-        const res = await fetch(sticker.url, {
-            headers: { 'User-Agent': this.ctx.userAgent },
-            referrerPolicy: 'no-referrer',
-            signal: AbortSignal.timeout(this.ctx.options.timeoutMs ?? 20_000),
-        }).catch(() => null);
-        if (!res?.ok)
-            throw new errors_1.TikTokError('DOWNLOAD_FAILED', `Sticker download failed: ${res?.status ?? 'network'}`);
-        return { data: Buffer.from(await res.arrayBuffer()), type: res.headers.get('content-type') ?? 'image/webp' };
-    }
-    /** Download + decrypt a message's image (pass the whole `msg` — listener messages lack the URL, this looks it up). */
-    async downloadImage(source, which = 'origin') {
-        let image = 'serverMessageId' in source ? source.image : source;
-        // Websocket-pushed messages only have uri + key, no download URL → look up history by message id.
-        if ('serverMessageId' in source && image && !image.url) {
-            const { messages } = await this.getMessages(source, { limit: 5, before: (BigInt(source.index) + 1n).toString() });
-            image = messages.find((m) => m.serverMessageId === source.serverMessageId)?.image ?? image;
-        }
-        if (!image)
-            throw new errors_1.TikTokError('DOWNLOAD_FAILED', 'Message has no image');
-        return this.media.download(image, which);
-    }
-    /** `SendMessageRequestBody`: {1 convId, 2 conversation type, 3 shortId, 4 content, 5 ext, 6 message type, 7 ticket, 8 client id, …}. */
-    async send(conv, cid, type, content, extra) {
-        if (!conv.conversationId || !conv.conversationShortId) {
-            throw new errors_1.TikTokError('IM_ERROR', 'Missing conversationId / conversationShortId');
-        }
-        const w = new proto_1.Writer()
-            .bytes(1, conv.conversationId)
-            .int(2, constants_1.ConversationType.OneToOne)
-            .int(3, BigInt(conv.conversationShortId))
-            .bytes(4, content)
-            .map(5, { 's:mentioned_users': '', 's:client_message_id': cid })
-            .int(6, type)
-            .bytes(7, 'deprecated')
-            .bytes(8, cid);
-        const body = extra ? Buffer.concat([w.finish(), extra.finish()]) : w.finish();
-        await this.ctx.im('/v1/message/send', constants_1.Cmd.SendMessage, body);
-    }
-}
-exports.API = API;
-/** Account for the cookie — `null` if the cookie is no longer logged in. */
-async function fetchAccount(ctx) {
-    const res = await ctx.getJson(`${constants_1.WEB}/passport/web/account/info/?aid=${constants_1.AID_FRONTIER}`);
-    if (res.message !== 'success' || !res.data?.user_id_str)
-        return null;
-    return {
-        uid: res.data.user_id_str,
-        username: res.data.username ?? '',
-        screenName: res.data.screen_name ?? '',
-        avatar: res.data.avatar_url ?? '',
-    };
-}
-/**
- * Avatar URLs from the IM profile `avatars` — collects every `https://…` string (thumb → medium → larger, whatever
- * TikTok returns), then puts browser-readable ones (jpeg/webp/png) first and heic last.
- */
-function avatarLinks(avatars) {
-    const urls = [];
-    const walk = (v) => {
-        if (typeof v === 'string') {
-            if (/^https?:\/\//.test(v) && !urls.includes(v))
-                urls.push(v);
-        }
-        else if (Array.isArray(v))
-            v.forEach(walk);
-        else if (v && typeof v === 'object')
-            Object.values(v).forEach(walk);
-    };
-    walk(avatars);
-    const heic = (u) => /\.heic(\?|$)/i.test(u.split('?')[0] + '?');
-    const ranked = [...urls.filter((u) => !heic(u)), ...urls.filter(heic)];
-    return { avatar: ranked[0] ?? '', avatars: ranked };
-}
-/** `wid` — device id TikTok issues per `ttwid` cookie; IM + websocket use it as `device_id`. */
-async function fetchWebId(ctx) {
-    const res = await ctx.fetch(`${constants_1.WEB}/api/v1/web-cookie-privacy/config?locale=vi-VN&appId=1988&theme=default&tea=1`);
-    if (!res.ok)
-        return '';
-    return /"wid":"(\d+)"/.exec(await res.text())?.[1] ?? '';
-}

package/dist/constants.d.ts

@@ -1,86 +0,0 @@
-/**
- * TikTok Web IM protocol constants — reconstructed from `tiktok.com/business-suite/messages` traffic
- * (09/11/2026). If TikTok changes things on their side, fix them here; how they were found is in the README.
- */
-export declare const IM_API = "https://im-api-sg.tiktok.com";
-export declare const IM_WS = "wss://im-ws-sg.tiktok.com/ws/v2";
-export declare const WEB = "https://www.tiktok.com";
-export declare const DEFAULT_USER_AGENT = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36";
-/** TikTok Web app id (HTTP IM). */
-export declare const AID_WEB = "1988";
-/** "frontier" channel app id — websocket pushing new messages. */
-export declare const AID_FRONTIER = "1459";
-export declare const SDK_VERSION = "1.8.5";
-export declare const BUILD_NUMBER = "feffaa1:master";
-/** Websocket `access_key` = md5(FPID + APP_KEY + device_id + SALT). */
-export declare const FRONTIER_FPID = "9";
-export declare const FRONTIER_APP_KEY = "e1bd35ec9db7b8d846de66ed140b1ad9";
-export declare const FRONTIER_SALT = "f8a69f1719916z";
-/** IM command (`Request.cmd`) — also the body's field number in `RequestBody`. */
-export declare const Cmd: {
-    readonly SendMessage: 100;
-    readonly GetMessagesByUserInit: 203;
-    readonly GetMessagesByConversation: 301;
-    /** Websocket push of new messages. */
-    readonly NewMessage: 500;
-    /** Add / remove a reaction (message `property`) — `/v1/message/set_property`. */
-    readonly SetMessageProperty: 705;
-    readonly GetConversationInfo: 610;
-    readonly MarkRead: 2002;
-    readonly UploadConfig: 2059;
-};
-/** MarkRead's body lives in field 604, not the command number. */
-export declare const MARK_READ_BODY_FIELD = 604;
-/** `MessageBody.message_type`. */
-export declare const MessageType: {
-    readonly System: 1;
-    readonly Text: 7;
-    readonly ShareVideo: 8;
-    readonly PrivateImage: 1802;
-    /** Sticker — public image on the sticker CDN, not encrypted. */
-    readonly Sticker: 1805;
-    /** Hidden command (read receipt…) — not shown in the conversation, but still pushed over websocket. */
-    readonly Command: 50001;
-};
-export declare const ConversationType: {
-    readonly OneToOne: 1;
-};
-/** `Response` fields (both HTTP and websocket payload). */
-export declare const Resp: {
-    readonly cmd: 1;
-    readonly seq: 2;
-    readonly status: 3;
-    readonly error: 4;
-    readonly body: 6;
-    readonly logId: 7;
-};
-/** `MessageBody` fields. */
-export declare const MsgF: {
-    readonly conversationId: 1;
-    readonly conversationType: 2;
-    readonly serverMessageId: 3;
-    readonly indexInConversation: 4;
-    readonly conversationShortId: 5;
-    readonly type: 6;
-    readonly sender: 7;
-    readonly content: 8;
-    readonly ext: 9;
-    readonly createTime: 10;
-    /** `property_list` — reaction: `{1 key "e:<emoji>", 2 {1 PropertyItem[]}}`. */
-    readonly propertyList: 15;
-    readonly attachments: 20;
-    readonly tag: 21;
-};
-/** Operation on a message `property` (`ModifyPropertyContent.operation`). */
-export declare const PropertyOp: {
-    readonly Add: 0;
-    readonly Remove: 1;
-};
-/** Reaction key = `e:<emoji>`. The mobile app reacting ❤️ also writes the legacy key `e:love` — treated as ❤️. */
-export declare const REACTION_PREFIX = "e:";
-export declare const REACTION_LOVE_KEY = "e:love";
-export declare const REACTION_HEART = "\u2764\uFE0F";
-/** ImageX — image upload endpoint (AWS SigV4-style signing). */
-export declare const IMAGEX_REGION = "cn-north-1";
-export declare const IMAGEX_SERVICE = "imagex";
-export declare const IMAGEX_VERSION = "2018-08-01";

package/dist/constants.js

@@ -1,77 +0,0 @@
-"use strict";
-/**
- * TikTok Web IM protocol constants — reconstructed from `tiktok.com/business-suite/messages` traffic
- * (09/11/2026). If TikTok changes things on their side, fix them here; how they were found is in the README.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IMAGEX_VERSION = exports.IMAGEX_SERVICE = exports.IMAGEX_REGION = exports.REACTION_HEART = exports.REACTION_LOVE_KEY = exports.REACTION_PREFIX = exports.PropertyOp = exports.MsgF = exports.Resp = exports.ConversationType = exports.MessageType = exports.MARK_READ_BODY_FIELD = exports.Cmd = exports.FRONTIER_SALT = exports.FRONTIER_APP_KEY = exports.FRONTIER_FPID = exports.BUILD_NUMBER = exports.SDK_VERSION = exports.AID_FRONTIER = exports.AID_WEB = exports.DEFAULT_USER_AGENT = exports.WEB = exports.IM_WS = exports.IM_API = void 0;
-exports.IM_API = 'https://im-api-sg.tiktok.com';
-exports.IM_WS = 'wss://im-ws-sg.tiktok.com/ws/v2';
-exports.WEB = 'https://www.tiktok.com';
-exports.DEFAULT_USER_AGENT = 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36';
-/** TikTok Web app id (HTTP IM). */
-exports.AID_WEB = '1988';
-/** "frontier" channel app id — websocket pushing new messages. */
-exports.AID_FRONTIER = '1459';
-exports.SDK_VERSION = '1.8.5';
-exports.BUILD_NUMBER = 'feffaa1:master';
-/** Websocket `access_key` = md5(FPID + APP_KEY + device_id + SALT). */
-exports.FRONTIER_FPID = '9';
-exports.FRONTIER_APP_KEY = 'e1bd35ec9db7b8d846de66ed140b1ad9';
-exports.FRONTIER_SALT = 'f8a69f1719916z';
-/** IM command (`Request.cmd`) — also the body's field number in `RequestBody`. */
-exports.Cmd = {
-    SendMessage: 100,
-    GetMessagesByUserInit: 203,
-    GetMessagesByConversation: 301,
-    /** Websocket push of new messages. */
-    NewMessage: 500,
-    /** Add / remove a reaction (message `property`) — `/v1/message/set_property`. */
-    SetMessageProperty: 705,
-    GetConversationInfo: 610,
-    MarkRead: 2002,
-    UploadConfig: 2059,
-};
-/** MarkRead's body lives in field 604, not the command number. */
-exports.MARK_READ_BODY_FIELD = 604;
-/** `MessageBody.message_type`. */
-exports.MessageType = {
-    System: 1,
-    Text: 7,
-    ShareVideo: 8,
-    PrivateImage: 1802,
-    /** Sticker — public image on the sticker CDN, not encrypted. */
-    Sticker: 1805,
-    /** Hidden command (read receipt…) — not shown in the conversation, but still pushed over websocket. */
-    Command: 50001,
-};
-exports.ConversationType = { OneToOne: 1 };
-/** `Response` fields (both HTTP and websocket payload). */
-exports.Resp = { cmd: 1, seq: 2, status: 3, error: 4, body: 6, logId: 7 };
-/** `MessageBody` fields. */
-exports.MsgF = {
-    conversationId: 1,
-    conversationType: 2,
-    serverMessageId: 3,
-    indexInConversation: 4,
-    conversationShortId: 5,
-    type: 6,
-    sender: 7,
-    content: 8,
-    ext: 9,
-    createTime: 10,
-    /** `property_list` — reaction: `{1 key "e:<emoji>", 2 {1 PropertyItem[]}}`. */
-    propertyList: 15,
-    attachments: 20,
-    tag: 21,
-};
-/** Operation on a message `property` (`ModifyPropertyContent.operation`). */
-exports.PropertyOp = { Add: 0, Remove: 1 };
-/** Reaction key = `e:<emoji>`. The mobile app reacting ❤️ also writes the legacy key `e:love` — treated as ❤️. */
-exports.REACTION_PREFIX = 'e:';
-exports.REACTION_LOVE_KEY = 'e:love';
-exports.REACTION_HEART = '\u2764\uFE0F';
-/** ImageX — image upload endpoint (AWS SigV4-style signing). */
-exports.IMAGEX_REGION = 'cn-north-1';
-exports.IMAGEX_SERVICE = 'imagex';
-exports.IMAGEX_VERSION = '2018-08-01';

package/dist/context.d.ts

@@ -1,32 +0,0 @@
-import { Msg } from './proto';
-import type { Credentials, TikTokOptions } from './types';
-/** `name → value` cookies from any input shape of `Credentials.cookies`. */
-export declare function normalizeCookies(input: Credentials['cookies']): Map<string, string>;
-/** Shared state of a session: cookies, device id, uid, HTTP calls. */
-export declare class Context {
-    readonly options: TikTokOptions;
-    readonly cookies: Map<string, string>;
-    /**
-     * IM device id = the `wid` TikTok issues for the `ttwid` cookie (`login` fetches it). The websocket only
-     * accepts this id — a made-up id gets 400 (HTTP IM isn't picky).
-     */
-    deviceId: string;
-    readonly userAgent: string;
-    ownId: string;
-    private seq;
-    constructor(creds: Credentials, options?: TikTokOptions);
-    cookieHeader(): string;
-    log(level: 'debug' | 'warn', msg: string): void;
-    /** `fetch` with cookies + UA + timeout. */
-    fetch(url: string, init?: RequestInit & {
-        headers?: Record<string, string>;
-    }): Promise<Response>;
-    getJson<T>(url: string): Promise<T>;
-    /** IM `Request` envelope: command + body + common headers. */
-    buildRequest(cmd: number, bodyField: number, body: Buffer): Buffer;
-    /**
-     * Call an IM command over HTTP. Returns the unwrapped body (`ResponseBody[cmd]`).
-     * NO X-Gnarly/X-Bogus/msToken signature needed — the IM server only checks cookies (tested 09/11/2026).
-     */
-    im(path: string, cmd: number, body: Buffer, bodyField?: number): Promise<Msg>;
-}

package/dist/context.js

@@ -1,129 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Context = void 0;
-exports.normalizeCookies = normalizeCookies;
-const constants_1 = require("./constants");
-const errors_1 = require("./errors");
-const proto_1 = require("./proto");
-/** `name → value` cookies from any input shape of `Credentials.cookies`. */
-function normalizeCookies(input) {
-    const jar = new Map();
-    if (typeof input === 'string') {
-        for (const part of input.split(';')) {
-            const i = part.indexOf('=');
-            if (i > 0)
-                jar.set(part.slice(0, i).trim(), part.slice(i + 1).trim());
-        }
-    }
-    else if (Array.isArray(input)) {
-        for (const c of input)
-            if (c?.name)
-                jar.set(c.name, String(c.value ?? ''));
-    }
-    else {
-        for (const [k, v] of Object.entries(input ?? {}))
-            jar.set(k, String(v));
-    }
-    return jar;
-}
-/** Shared state of a session: cookies, device id, uid, HTTP calls. */
-class Context {
-    options;
-    cookies;
-    /**
-     * IM device id = the `wid` TikTok issues for the `ttwid` cookie (`login` fetches it). The websocket only
-     * accepts this id — a made-up id gets 400 (HTTP IM isn't picky).
-     */
-    deviceId;
-    userAgent;
-    ownId = '';
-    seq = 10_000;
-    constructor(creds, options = {}) {
-        this.options = options;
-        this.cookies = normalizeCookies(creds.cookies);
-        this.deviceId = creds.deviceId ?? '';
-        this.userAgent = creds.userAgent || constants_1.DEFAULT_USER_AGENT;
-    }
-    cookieHeader() {
-        return [...this.cookies].map(([k, v]) => `${k}=${v}`).join('; ');
-    }
-    log(level, msg) {
-        this.options.logger?.(level, msg);
-    }
-    /** `fetch` with cookies + UA + timeout. */
-    async fetch(url, init = {}) {
-        try {
-            return await fetch(url, {
-                ...init,
-                headers: {
-                    'User-Agent': this.userAgent,
-                    Referer: `${constants_1.WEB}/`,
-                    Origin: constants_1.WEB,
-                    Cookie: this.cookieHeader(),
-                    ...init.headers,
-                },
-                signal: AbortSignal.timeout(this.options.timeoutMs ?? 20_000),
-            });
-        }
-        catch (err) {
-            throw new errors_1.TikTokError('HTTP_ERROR', `${url.split('?')[0]}: ${err instanceof Error ? err.message : String(err)}`);
-        }
-    }
-    async getJson(url) {
-        const res = await this.fetch(url);
-        if (!res.ok)
-            throw new errors_1.TikTokError('HTTP_ERROR', `${url.split('?')[0]}: HTTP ${res.status}`, res.status);
-        return (await res.json());
-    }
-    /** IM `Request` envelope: command + body + common headers. */
-    buildRequest(cmd, bodyField, body) {
-        return new proto_1.Writer()
-            .int(1, cmd)
-            .int(2, this.seq++)
-            .bytes(3, constants_1.SDK_VERSION)
-            .bytes(4, '')
-            .int(5, 3)
-            .int(6, 0)
-            .bytes(7, constants_1.BUILD_NUMBER)
-            .msg(8, new proto_1.Writer().bytes(bodyField, body))
-            .bytes(9, this.deviceId)
-            .bytes(11, 'web')
-            .map(15, {
-            aid: constants_1.AID_WEB,
-            app_name: 'tiktok_web',
-            channel: 'web',
-            device_platform: 'web_pc',
-            device_id: this.deviceId,
-            user_is_login: 'true',
-            user_agent: this.userAgent,
-        })
-            .int(18, 1)
-            .finish();
-    }
-    /**
-     * Call an IM command over HTTP. Returns the unwrapped body (`ResponseBody[cmd]`).
-     * NO X-Gnarly/X-Bogus/msToken signature needed — the IM server only checks cookies (tested 09/11/2026).
-     */
-    async im(path, cmd, body, bodyField = cmd) {
-        const url = `${constants_1.IM_API}${path}?aid=${constants_1.AID_WEB}&version_code=1.0.0&app_name=tiktok_web&device_platform=web_pc`;
-        const res = await this.fetch(url, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-protobuf', Accept: 'application/x-protobuf' },
-            body: new Uint8Array(this.buildRequest(cmd, bodyField, body)),
-        });
-        if (!res.ok)
-            throw new errors_1.TikTokError('HTTP_ERROR', `${path}: HTTP ${res.status}`, res.status);
-        const resp = proto_1.Msg.tryParse(Buffer.from(await res.arrayBuffer()));
-        if (!resp)
-            throw new errors_1.TikTokError('BAD_RESPONSE', `${path}: response is not protobuf`);
-        const status = resp.num(constants_1.Resp.status);
-        if (status !== 0) {
-            const desc = resp.str(constants_1.Resp.error);
-            // Not logged in: 200005 (tested with a cookieless request).
-            const code = status === 200005 ? 'SESSION_EXPIRED' : 'IM_ERROR';
-            throw new errors_1.TikTokError(code, `${path}: ${status} ${desc}`.trim(), status);
-        }
-        return resp.msg(constants_1.Resp.body)?.msg(cmd) ?? resp.msg(constants_1.Resp.body)?.msg(bodyField) ?? proto_1.Msg.parse(Buffer.alloc(0));
-    }
-}
-exports.Context = Context;

package/dist/errors.d.ts

@@ -1,18 +0,0 @@
-/** Error from TikTok or from the library itself. `code` lets callers branch (e.g. session expired → rescan). */
-export declare class TikTokError extends Error {
-    readonly code: TikTokErrorCode;
-    /** Original TikTok code (status_code / error_code), if any. */
-    readonly upstream?: number | string | undefined;
-    constructor(code: TikTokErrorCode, message: string, 
-    /** Original TikTok code (status_code / error_code), if any. */
-    upstream?: number | string | undefined);
-}
-export type TikTokErrorCode = 
-/** Cookie is no longer logged in — a new session is required. */
-'SESSION_EXPIRED' | 'HTTP_ERROR'
-/** IM returned a non-zero `status_code`. */
- | 'IM_ERROR' | 'UPLOAD_FAILED' | 'DOWNLOAD_FAILED' | 'BAD_RESPONSE'
-/** QR login failed (Chrome failed to launch, QR expired, no cookie found…). */
- | 'LOGIN_FAILED'
-/** Caller aborted QR login (`signal`). */
- | 'LOGIN_ABORTED';

package/dist/errors.js

@@ -1,17 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TikTokError = void 0;
-/** Error from TikTok or from the library itself. `code` lets callers branch (e.g. session expired → rescan). */
-class TikTokError extends Error {
-    code;
-    upstream;
-    constructor(code, message, 
-    /** Original TikTok code (status_code / error_code), if any. */
-    upstream) {
-        super(message);
-        this.code = code;
-        this.upstream = upstream;
-        this.name = 'TikTokError';
-    }
-}
-exports.TikTokError = TikTokError;