zapo-js 0.1.2 → 0.3.0

package/dist/esm/client/WaClientFactory.js

@@ -1,16 +1,25 @@
 import { WaAppStateSyncClient } from '../appstate/WaAppStateSyncClient.js';
 import { WaAuthClient } from '../auth/WaAuthClient.js';
 import { WaConnectionManager } from './connection/WaConnectionManager.js';
-import { WaKeyShareCoordinator } from './connection/WaKeyShareCoordinator.js';
 import { WaReceiptQueue } from './connection/WaReceiptQueue.js';
+import { WaAbPropsCoordinator } from './coordinators/WaAbPropsCoordinator.js';
 import { WaAppStateMutationCoordinator } from './coordinators/WaAppStateMutationCoordinator.js';
+import { createBusinessCoordinator } from './coordinators/WaBusinessCoordinator.js';
+import { createEmailCoordinator } from './coordinators/WaEmailCoordinator.js';
 import { createGroupCoordinator } from './coordinators/WaGroupCoordinator.js';
 import { WaIncomingNodeCoordinator } from './coordinators/WaIncomingNodeCoordinator.js';
 import { WaMessageDispatchCoordinator } from './coordinators/WaMessageDispatchCoordinator.js';
+import { WaOfflineResumeCoordinator } from './coordinators/WaOfflineResumeCoordinator.js';
 import { WaPassiveTasksCoordinator } from './coordinators/WaPassiveTasksCoordinator.js';
+import { createPrivacyCoordinator } from './coordinators/WaPrivacyCoordinator.js';
+import { createProfileCoordinator } from './coordinators/WaProfileCoordinator.js';
 import { WaRetryCoordinator } from './coordinators/WaRetryCoordinator.js';
 import { createStreamControlHandler } from './coordinators/WaStreamControlCoordinator.js';
+import { WaTrustedContactTokenCoordinator } from './coordinators/WaTrustedContactTokenCoordinator.js';
 import { handleDirtyBits, parseDirtyBits } from './dirty.js';
+import { DEVICE_NOTIFICATION_ACTIONS, parseDeviceNotification } from './events/devices.js';
+import { parseIdentityChangeNotification } from './events/identity.js';
+import { parsePrivacyTokenNotification } from './events/privacy-token.js';
 import { buildMediaMessageContent, getMediaConn as getClientMediaConn } from './messages.js';
 import { createDeviceFanoutResolver } from './messaging/fanout.js';
 import { createAppStateSyncKeyProtocol } from './messaging/key-protocol.js';
@@ -18,7 +27,8 @@ import { createGroupParticipantsCache } from './messaging/participants.js';
 import { WaMediaTransferClient } from '../media/WaMediaTransferClient.js';
 import { handleIncomingMessageAck } from '../message/incoming.js';
 import { WaMessageClient } from '../message/WaMessageClient.js';
-import { getWaCompanionPlatformId, WA_DEFAULTS } from '../protocol/constants.js';
+import { getWaCompanionPlatformId, WA_DEFAULTS, WA_DISCONNECT_REASONS, WA_NODE_TAGS, WA_NOTIFICATION_TYPES, WA_PRIVACY_TOKEN_NOTIFICATION_TYPE } from '../protocol/constants.js';
+import { parseSignalAddressFromJid, toUserJid } from '../protocol/jid.js';
 import { createOutboundRetryTracker } from '../retry/tracker.js';
 import { SignalDeviceSyncApi } from '../signal/api/SignalDeviceSyncApi.js';
 import { SignalDigestSyncApi } from '../signal/api/SignalDigestSyncApi.js';
@@ -30,10 +40,13 @@ import { SenderKeyManager } from '../signal/group/SenderKeyManager.js';
 import { createSignalSessionResolver } from '../signal/session/resolver.js';
 import { SignalProtocol } from '../signal/session/SignalProtocol.js';
 import { WaKeepAlive } from '../transport/keepalive/WaKeepAlive.js';
+import { buildAckNode } from '../transport/node/builders/global.js';
+import { buildPresenceNode } from '../transport/node/builders/presence.js';
+import { getFirstNodeChild } from '../transport/node/helpers.js';
 import { createUsyncSidGenerator } from '../transport/node/usync.js';
 import { WaNodeOrchestrator } from '../transport/node/WaNodeOrchestrator.js';
 import { WaNodeTransport } from '../transport/node/WaNodeTransport.js';
-import { isProxyTransport, toProxyAgent, toProxyDispatcher } from '../transport/proxy.js';
+import { isProxyTransport, toProxyAgent } from '../transport/proxy.js';
 import { toError } from '../util/primitives.js';
 import { getRuntimeOsDisplayName } from '../util/runtime.js';
 function assertProxyTransport(value, path) {
@@ -90,31 +103,6 @@ export function resolveWaClientBase(options, logger) {
         sessionStore
     };
 }
-function createIncomingMessageAckOptions(input) {
-    const { logger, sendNode, emitEvent, handleIncomingMessageEvent, handleError, getCurrentMeJid, signalProtocol, senderKeyManager, retryCoordinator } = input;
-    return {
-        logger,
-        sendNode,
-        getMeJid: getCurrentMeJid,
-        signalProtocol,
-        senderKeyManager,
-        onDecryptFailure: (context, error) => retryCoordinator.onDecryptFailure(context, error),
-        emitIncomingMessage: (event) => {
-            void handleIncomingMessageEvent(event).catch((err) => handleError(toError(err)));
-        },
-        emitUnhandledStanza: (event) => emitEvent('stanza_unhandled', event)
-    };
-}
-function createHandleClientDirtyBits(input) {
-    const { logger, queryWithContext, syncAppState, getCurrentCredentials, generateUsyncSid } = input;
-    return (dirtyBits) => handleDirtyBits({
-        logger,
-        queryWithContext,
-        getCurrentCredentials,
-        syncAppState,
-        generateUsyncSid
-    }, dirtyBits);
-}
 function createIncomingNodeRuntime(input) {
     const { logger, emitEvent, authClient, connectionManager, nodeOrchestrator, streamControl, mediaMessageBuildOptions, retryCoordinator, messageDispatch, sendNode, syncAppState, disconnect, clearStoredCredentials, getCurrentMeJid, handleClientDirtyBits, incomingMessageAckOptions } = input;
     return {
@@ -143,6 +131,8 @@ function createIncomingNodeRuntime(input) {
         emitIncomingFailure: (event) => emitEvent('failure', event),
         emitIncomingErrorStanza: (event) => emitEvent('stanza_error', event),
         emitIncomingNotification: (event) => emitEvent('notification', event),
+        emitRegistrationCode: (event) => emitEvent('registration_code_received', event),
+        emitAccountTakeoverNotice: (event) => emitEvent('account_takeover_notice', event),
         emitGroupEvent: (event) => {
             emitEvent('group_event', event);
             void messageDispatch.mutateParticipantsCacheFromGroupEvent(event).catch((error) => {
@@ -156,6 +146,9 @@ function createIncomingNodeRuntime(input) {
         },
         emitUnhandledIncomingNode: (event) => emitEvent('stanza_unhandled', event),
         syncAppState,
+        stopComms: () => {
+            void connectionManager.getComms()?.stopComms();
+        },
         disconnect,
         clearStoredCredentials,
         parseDirtyBits: (nodes) => parseDirtyBits(nodes, logger),
@@ -163,7 +156,7 @@ function createIncomingNodeRuntime(input) {
     };
 }
 function createPassiveTasksRuntime(input) {
-    const { queryWithContext, authClient, nodeOrchestrator, receiptQueue, getCurrentCredentials } = input;
+    const { queryWithContext, authClient, nodeOrchestrator, receiptQueue, getCurrentCredentials, abPropsCoordinator } = input;
     return {
         queryWithContext,
         getCurrentCredentials,
@@ -171,14 +164,18 @@ function createPassiveTasksRuntime(input) {
         sendNodeDirect: (node) => nodeOrchestrator.sendNode(node),
         takeDanglingReceipts: () => receiptQueue.take(),
         requeueDanglingReceipt: (node) => receiptQueue.enqueue(node),
-        shouldQueueDanglingReceipt: (node, error) => receiptQueue.shouldQueue(node, error)
+        shouldQueueDanglingReceipt: (node, error) => receiptQueue.shouldQueue(node, error),
+        syncAbProps: () => abPropsCoordinator.sync(),
+        sendPresenceAvailable: async () => {
+            const credentials = getCurrentCredentials();
+            await nodeOrchestrator.sendNode(buildPresenceNode({ name: credentials?.meDisplayName ?? undefined }), false);
+        }
     };
 }
 export function buildWaClientDependencies(input) {
     const { base, runtime } = input;
     const { options, logger, sessionStore } = base;
     const receiptQueue = new WaReceiptQueue();
-    const keyShareCoordinator = new WaKeyShareCoordinator();
     let connectionManager = null;
     let passiveTasks = null;
     let mediaConnCacheFallback = null;
@@ -188,23 +185,24 @@ export function buildWaClientDependencies(input) {
         sendNode: async (node) => nodeTransport.sendNode(node),
         logger,
         defaultTimeoutMs: options.nodeQueryTimeoutMs,
-        hostDomain: WA_DEFAULTS.HOST_DOMAIN
+        hostDomain: WA_DEFAULTS.HOST_DOMAIN,
+        mobileIqIdFormat: options.mobileTransport !== undefined
     });
     const keepAlive = new WaKeepAlive({
         logger,
         nodeOrchestrator,
         getComms: () => connectionManager?.getComms() ?? null,
         intervalMs: options.keepAliveIntervalMs,
+        getIntervalMs: () => abPropsCoordinator.getConfigValue('heartbeat_interval_s') * 1000,
         timeoutMs: options.deadSocketTimeoutMs,
         hostDomain: WA_DEFAULTS.HOST_DOMAIN
     });
     const mediaTransfer = new WaMediaTransferClient({
         logger,
         defaultTimeoutMs: options.mediaTimeoutMs,
-        defaultUploadDispatcher: toProxyDispatcher(options.proxy?.mediaUpload),
-        defaultDownloadDispatcher: toProxyDispatcher(options.proxy?.mediaDownload),
         defaultUploadAgent: toProxyAgent(options.proxy?.mediaUpload),
-        defaultDownloadAgent: toProxyAgent(options.proxy?.mediaDownload)
+        defaultDownloadAgent: toProxyAgent(options.proxy?.mediaDownload),
+        skipMacVerification: options.dangerous?.disableMediaMacVerification
     });
     const mediaMessageBuildOptions = {
         logger,
@@ -220,7 +218,8 @@ export function buildWaClientDependencies(input) {
         setMediaConnCache: (mediaConn) => {
             mediaConnCacheFallback = mediaConn;
             connectionManager?.setMediaConnCache(mediaConn);
-        }
+        },
+        media: options.media
     };
     const messageClient = new WaMessageClient({
         logger,
@@ -230,12 +229,22 @@ export function buildWaClientDependencies(input) {
         defaultMaxAttempts: options.messageMaxAttempts,
         defaultRetryDelayMs: options.messageRetryDelayMs
     });
-    const senderKeyManager = new SenderKeyManager(sessionStore.senderKey);
-    const signalProtocol = new SignalProtocol(sessionStore.signal, logger);
+    const senderKeyManager = new SenderKeyManager(sessionStore.senderKey, {
+        getFutureMessagesMax: () => abPropsCoordinator.getConfigValue('web_signal_future_messages_max'),
+        skipSignatureVerification: options.dangerous?.disableSenderKeySignatureVerification
+    });
+    const signalProtocol = new SignalProtocol({
+        signal: sessionStore.signal,
+        preKey: sessionStore.preKey,
+        session: sessionStore.session,
+        identity: sessionStore.identity
+    }, logger);
+    const signalSystemQuery = (node, timeoutMs) => runtime.query(node, timeoutMs, { useSystemId: true });
     const signalDigestSync = new SignalDigestSyncApi({
         logger,
-        query: runtime.query,
+        query: signalSystemQuery,
         signalStore: sessionStore.signal,
+        preKeyStore: sessionStore.preKey,
         defaultTimeoutMs: options.signalFetchKeyBundlesTimeoutMs
     });
     const generateUsyncSid = createUsyncSidGenerator();
@@ -248,35 +257,39 @@ export function buildWaClientDependencies(input) {
     });
     const signalIdentitySync = new SignalIdentitySyncApi({
         logger,
-        query: runtime.query,
-        signalStore: sessionStore.signal,
+        query: signalSystemQuery,
+        identityStore: sessionStore.identity,
         defaultTimeoutMs: options.signalFetchKeyBundlesTimeoutMs
     });
     const signalMissingPreKeysSync = new SignalMissingPreKeysSyncApi({
         logger,
-        query: runtime.query,
+        query: signalSystemQuery,
         defaultTimeoutMs: options.signalFetchKeyBundlesTimeoutMs
     });
     const signalRotateKey = new SignalRotateKeyApi({
         logger,
-        query: runtime.query,
+        query: signalSystemQuery,
         signalStore: sessionStore.signal,
         defaultTimeoutMs: options.signalFetchKeyBundlesTimeoutMs
     });
     const signalSessionSync = new SignalSessionSyncApi({
         logger,
-        query: runtime.query,
+        query: signalSystemQuery,
         defaultTimeoutMs: options.signalFetchKeyBundlesTimeoutMs
     });
     const authClient = new WaAuthClient({
         deviceBrowser: options.deviceBrowser,
         deviceOsDisplayName: options.deviceOsDisplayName,
         devicePlatform: options.devicePlatform,
-        requireFullSync: options.requireFullSync
+        requireFullSync: options.requireFullSync,
+        version: options.version,
+        dangerous: options.dangerous,
+        mobileTransport: options.mobileTransport
     }, {
         logger,
         authStore: sessionStore.auth,
         signalStore: sessionStore.signal,
+        preKeyStore: sessionStore.preKey,
         socket: {
             sendNode: runtime.sendNode,
             query: runtime.query
@@ -299,13 +312,27 @@ export function buildWaClientDependencies(input) {
     const groupCoordinator = createGroupCoordinator({
         queryWithContext: runtime.queryWithContext
     });
+    const privacyCoordinator = createPrivacyCoordinator({
+        queryWithContext: runtime.queryWithContext
+    });
+    const profileCoordinator = createProfileCoordinator({
+        queryWithContext: runtime.queryWithContext,
+        generateSid: generateUsyncSid
+    });
+    const businessCoordinator = createBusinessCoordinator({
+        queryWithContext: runtime.queryWithContext
+    });
+    const emailCoordinator = createEmailCoordinator({
+        queryWithContext: runtime.queryWithContext
+    });
     const retryTracker = createOutboundRetryTracker({
         retryStore: sessionStore.retry,
         logger
     });
     const sessionResolver = createSignalSessionResolver({
         signalProtocol,
-        signalStore: sessionStore.signal,
+        sessionStore: sessionStore.session,
+        identityStore: sessionStore.identity,
         signalIdentitySync,
         signalSessionSync,
         logger
@@ -318,9 +345,42 @@ export function buildWaClientDependencies(input) {
     });
     const participantsCache = createGroupParticipantsCache({
         participantsStore: sessionStore.participants,
-        queryGroupParticipantJids: async (groupJid) => (await groupCoordinator.queryGroupMetadata(groupJid)).participants.map((participant) => participant.jid),
+        queryGroupParticipantJids: async (groupJid) => {
+            const metadata = await groupCoordinator.queryGroupMetadata(groupJid);
+            const participantJids = new Array(metadata.participants.length);
+            for (let index = 0; index < metadata.participants.length; index += 1) {
+                participantJids[index] = metadata.participants[index].jid;
+            }
+            return participantJids;
+        },
         logger
     });
+    const trustedContactToken = new WaTrustedContactTokenCoordinator({
+        logger,
+        store: sessionStore.privacyToken,
+        runtime: {
+            queryWithContext: runtime.queryWithContext,
+            emitEvent: runtime.emitEvent,
+            getCurrentMeLid: () => getCurrentMeLid() ?? null
+        },
+        durationS: options.privacyToken?.tcTokenDurationS,
+        numBuckets: options.privacyToken?.tcTokenNumBuckets,
+        senderDurationS: options.privacyToken?.tcTokenSenderDurationS,
+        senderNumBuckets: options.privacyToken?.tcTokenSenderNumBuckets,
+        maxDurationS: options.privacyToken?.tcTokenMaxDurationS,
+        getConfigOverrides: () => ({
+            durationS: abPropsCoordinator.getConfigValue('tctoken_duration'),
+            numBuckets: abPropsCoordinator.getConfigValue('tctoken_num_buckets'),
+            senderDurationS: abPropsCoordinator.getConfigValue('tctoken_duration_sender'),
+            senderNumBuckets: abPropsCoordinator.getConfigValue('tctoken_num_buckets_sender')
+        })
+    });
+    const abPropsCoordinator = new WaAbPropsCoordinator({
+        logger,
+        runtime: {
+            queryWithContext: runtime.queryWithContext
+        }
+    });
     let messageDispatch;
     const appStateSyncKeyProtocol = createAppStateSyncKeyProtocol({
         publishSignalMessage: (signalInput, publishOptions) => messageDispatch.publishSignalMessage(signalInput, publishOptions),
@@ -340,14 +400,30 @@ export function buildWaClientDependencies(input) {
         buildMessageContent: async (content) => buildMediaMessageContent(mediaMessageBuildOptions, content),
         senderKeyManager,
         signalProtocol,
+        signalStore: sessionStore.signal,
+        sessionStore: sessionStore.session,
+        identityStore: sessionStore.identity,
+        deviceListStore: sessionStore.deviceList,
+        messageSecretStore: sessionStore.messageSecret,
         getCurrentMeJid,
         getCurrentMeLid,
-        getCurrentSignedIdentity
+        getCurrentSignedIdentity,
+        resolvePrivacyTokenNode: (recipientJid) => trustedContactToken.resolveTokenForMessage(recipientJid),
+        onDirectMessageSent: (recipientJid) => {
+            trustedContactToken.maybeIssueSenderToken(recipientJid).catch((err) => logger.warn('sender token issue failed', {
+                to: recipientJid,
+                message: toError(err).message
+            }));
+        },
+        getIcdcHashLength: () => abPropsCoordinator.getConfigValue('md_icdc_hash_length'),
+        mobileMessageIdFormat: options.mobileTransport !== undefined
     });
     const retryCoordinator = new WaRetryCoordinator({
         logger,
         retryStore: sessionStore.retry,
         signalStore: sessionStore.signal,
+        preKeyStore: sessionStore.preKey,
+        sessionStore: sessionStore.session,
         senderKeyStore: sessionStore.senderKey,
         signalProtocol,
         signalDeviceSync,
@@ -366,7 +442,9 @@ export function buildWaClientDependencies(input) {
         store: sessionStore.appState,
         onMissingKeys: async ({ keyIds }) => {
             await messageDispatch.requestAppStateSyncKeys(keyIds);
-        }
+        },
+        skipMacVerification: options.dangerous?.disableAppStateMacVerification,
+        mobilePrimary: options.mobileTransport !== undefined
     });
     const appStateMutations = new WaAppStateMutationCoordinator({
         logger,
@@ -387,14 +465,28 @@ export function buildWaClientDependencies(input) {
         connectionManager.setMediaConnCache(mediaConnCacheFallback);
     }
     scheduleReconnectAfterPairing = () => connectionManager?.scheduleReconnectAfterPairing();
-    const disconnectWithClientSideEffects = async () => {
-        keyShareCoordinator.notifyDisconnected();
+    const disconnectWithClientSideEffects = async (reason, isLogout, code) => {
+        abPropsCoordinator.reset();
+        offlineResume.reset();
         await connectionManager?.disconnect();
-        runtime.emitEvent('connection_close', {});
+        runtime.emitEvent('connection', {
+            status: 'close',
+            reason,
+            code,
+            isLogout,
+            isNewLogin: false
+        });
     };
-    const connectWithClientSideEffects = async () => {
+    const connectWithClientSideEffects = async (reason) => {
+        runtime.resumeIncomingEvents();
         await connectionManager?.connect(runtime.handleIncomingFrame);
-        runtime.emitEvent('connection_open', {});
+        runtime.emitEvent('connection', {
+            status: 'open',
+            reason,
+            code: null,
+            isLogout: false,
+            isNewLogin: connectionManager?.wasNewLogin() ?? false
+        });
     };
     const clearStoredCredentialsWithClientSideEffects = async () => {
         await connectionManager?.clearStoredCredentials();
@@ -411,26 +503,37 @@ export function buildWaClientDependencies(input) {
         clearStoredCredentials: clearStoredCredentialsWithClientSideEffects,
         connect: connectWithClientSideEffects
     });
-    const incomingMessageAckOptions = createIncomingMessageAckOptions({
+    const incomingMessageAckOptions = {
         logger,
         sendNode: runtime.sendNode,
-        emitEvent: runtime.emitEvent,
-        handleIncomingMessageEvent: runtime.handleIncomingMessageEvent,
-        handleError: runtime.handleError,
-        getCurrentMeJid,
+        getMeJid: getCurrentMeJid,
         signalProtocol,
         senderKeyManager,
-        retryCoordinator
-    });
-    const handleClientDirtyBits = createHandleClientDirtyBits({
+        onDecryptFailure: (context, error) => retryCoordinator.onDecryptFailure(context, error),
+        emitIncomingMessage: (event) => {
+            void runtime
+                .handleIncomingMessageEvent(event)
+                .catch((err) => runtime.handleError(toError(err)));
+        },
+        emitUnhandledStanza: (event) => runtime.emitEvent('stanza_unhandled', event)
+    };
+    const handleClientDirtyBits = (dirtyBits) => handleDirtyBits({
         logger,
         queryWithContext: runtime.queryWithContext,
-        syncAppState: runtime.syncAppState,
         getCurrentCredentials,
+        syncAppState: runtime.syncAppState,
         generateUsyncSid
+    }, dirtyBits);
+    const offlineResume = new WaOfflineResumeCoordinator({
+        logger,
+        runtime: {
+            sendNode: (node) => nodeOrchestrator.sendNode(node, false),
+            emitOfflineResume: (event) => runtime.emitEvent('offline_resume', event)
+        }
     });
     const incomingNode = new WaIncomingNodeCoordinator({
         logger,
+        offlineResume,
         runtime: createIncomingNodeRuntime({
             logger,
             emitEvent: runtime.emitEvent,
@@ -450,9 +553,231 @@ export function buildWaClientDependencies(input) {
             incomingMessageAckOptions
         })
     });
+    incomingNode.registerIncomingHandler({
+        tag: WA_NODE_TAGS.NOTIFICATION,
+        subtype: WA_NOTIFICATION_TYPES.ENCRYPT,
+        prepend: true,
+        handler: async (node) => {
+            const firstChild = getFirstNodeChild(node);
+            if (!firstChild) {
+                return false;
+            }
+            const childTag = firstChild.tag;
+            // <count value="N"/> — server prekeys running low
+            if (childTag === 'count') {
+                const ackNode = buildAckNode({
+                    kind: 'notification',
+                    node,
+                    includeType: false
+                });
+                await runtime.sendNode(ackNode);
+                const tasks = passiveTasks;
+                if (!tasks) {
+                    logger.warn('encrypt-count: passive tasks not available');
+                    return true;
+                }
+                await tasks.handlePreKeyLowNotification().catch((error) => {
+                    logger.warn('encrypt-count: prekey upload failed', {
+                        message: toError(error).message
+                    });
+                });
+                return true;
+            }
+            // <digest/> — digest key sync
+            if (childTag === 'digest') {
+                const ackNode = buildAckNode({
+                    kind: 'notification',
+                    node,
+                    includeType: false
+                });
+                await runtime.sendNode(ackNode);
+                const tasks = passiveTasks;
+                if (!tasks) {
+                    logger.warn('encrypt-digest: passive tasks not available');
+                    return true;
+                }
+                await tasks.handleDigestNotification().catch((error) => {
+                    logger.warn('encrypt-digest: digest sync failed', {
+                        message: toError(error).message
+                    });
+                });
+                return true;
+            }
+            // <identity/> — contact identity key changed
+            if (childTag === 'identity') {
+                const parsed = parseIdentityChangeNotification(node);
+                if (!parsed) {
+                    return false;
+                }
+                const ackNode = buildAckNode({
+                    kind: 'notification',
+                    node,
+                    includeType: false
+                });
+                await runtime.sendNode(ackNode);
+                const address = parseSignalAddressFromJid(parsed.fromJid);
+                // ignore companion devices (non-primary)
+                if (address.device !== 0) {
+                    logger.debug('identity-change: ignoring companion device', {
+                        jid: parsed.fromJid
+                    });
+                    return true;
+                }
+                // self-primary identity change → must disconnect
+                const meJid = getCurrentMeJid();
+                if (meJid) {
+                    const meUser = toUserJid(meJid);
+                    const fromUser = toUserJid(parsed.fromJid);
+                    if (meUser === fromUser) {
+                        logger.error('self primary identity changed, disconnecting');
+                        void connectionManager?.getComms()?.stopComms();
+                        await disconnectWithClientSideEffects(WA_DISCONNECT_REASONS.PRIMARY_IDENTITY_KEY_CHANGE, true, null);
+                        await clearStoredCredentialsWithClientSideEffects();
+                        return true;
+                    }
+                }
+                const oldIdentity = await sessionStore.identity.getRemoteIdentity(address);
+                if (oldIdentity) {
+                    logger.info('identity-change: clearing session', {
+                        jid: parsed.fromJid
+                    });
+                    await sessionStore.session.deleteSession(address);
+                    const userJid = toUserJid(parsed.fromJid);
+                    await trustedContactToken.reissueOnIdentityChange(userJid).catch((error) => {
+                        logger.warn('identity-change: reissue tc token failed', {
+                            message: toError(error).message
+                        });
+                    });
+                }
+                runtime.emitEvent('notification', {
+                    rawNode: node,
+                    stanzaId: parsed.stanzaId,
+                    chatJid: parsed.fromJid,
+                    stanzaType: 'encrypt',
+                    notificationType: 'encrypt',
+                    classification: 'core',
+                    details: {
+                        kind: 'identity_change',
+                        displayName: parsed.displayName,
+                        lid: parsed.lid,
+                        hadPreviousIdentity: !!oldIdentity
+                    }
+                });
+                return true;
+            }
+            return false;
+        }
+    });
+    incomingNode.registerIncomingHandler({
+        tag: WA_NODE_TAGS.NOTIFICATION,
+        subtype: WA_NOTIFICATION_TYPES.DEVICES,
+        prepend: true,
+        handler: async (node) => {
+            const parsed = parseDeviceNotification(node);
+            if (!parsed) {
+                return false;
+            }
+            const ackNode = buildAckNode({
+                kind: 'notification',
+                node,
+                includeType: false
+            });
+            await runtime.sendNode(ackNode);
+            const userJid = toUserJid(parsed.fromJid);
+            if (parsed.action === DEVICE_NOTIFICATION_ACTIONS.REMOVE) {
+                const baseAddress = parseSignalAddressFromJid(parsed.fromJid);
+                for (const device of parsed.devices) {
+                    const address = {
+                        user: baseAddress.user,
+                        server: baseAddress.server,
+                        device: device.deviceId
+                    };
+                    await sessionStore.session.deleteSession(address).catch((error) => {
+                        logger.warn('devices-notification: delete session failed', {
+                            message: toError(error).message
+                        });
+                    });
+                }
+            }
+            // invalidate device list cache so next fanout fetches fresh list
+            if (sessionStore.deviceList) {
+                await sessionStore.deviceList.deleteUserDevices(userJid).catch((error) => {
+                    logger.warn('devices-notification: invalidate cache failed', {
+                        message: toError(error).message
+                    });
+                });
+            }
+            // for update notifications, re-sync immediately
+            if (parsed.action === DEVICE_NOTIFICATION_ACTIONS.UPDATE) {
+                signalDeviceSync.syncDeviceList([userJid]).catch((error) => {
+                    logger.warn('devices-notification: sync device list failed', {
+                        message: toError(error).message
+                    });
+                });
+            }
+            runtime.emitEvent('notification', {
+                rawNode: node,
+                stanzaId: parsed.stanzaId,
+                chatJid: parsed.fromJid,
+                stanzaType: 'devices',
+                notificationType: 'devices',
+                classification: 'core',
+                details: {
+                    kind: 'device_list_change',
+                    action: parsed.action,
+                    devices: parsed.devices
+                }
+            });
+            return true;
+        }
+    });
+    incomingNode.registerIncomingHandler({
+        tag: WA_NODE_TAGS.NOTIFICATION,
+        subtype: WA_PRIVACY_TOKEN_NOTIFICATION_TYPE,
+        prepend: true,
+        handler: async (node) => {
+            const fromJid = node.attrs.from ?? node.attrs.sender_lid;
+            if (!fromJid) {
+                return false;
+            }
+            const tokens = parsePrivacyTokenNotification(node);
+            if (tokens.length === 0) {
+                return false;
+            }
+            await trustedContactToken.handleIncomingToken(fromJid, tokens);
+            const ackNode = buildAckNode({
+                kind: 'notification',
+                node,
+                typeOverride: WA_PRIVACY_TOKEN_NOTIFICATION_TYPE
+            });
+            await runtime.sendNode(ackNode);
+            return true;
+        }
+    });
+    // AB Props: sync after successful login and on server notification
+    incomingNode.registerIncomingHandler({
+        tag: WA_NODE_TAGS.NOTIFICATION,
+        subtype: WA_NOTIFICATION_TYPES.SERVER,
+        prepend: true,
+        handler: async (node) => {
+            const firstChild = getFirstNodeChild(node);
+            if (!firstChild || firstChild.tag !== WA_NODE_TAGS.ABPROPS) {
+                return false;
+            }
+            const ackNode = buildAckNode({
+                kind: 'notification',
+                node,
+                includeType: false
+            });
+            await runtime.sendNode(ackNode);
+            abPropsCoordinator.sync();
+            return true;
+        }
+    });
     passiveTasks = new WaPassiveTasksCoordinator({
         logger,
         signalStore: sessionStore.signal,
+        preKeyStore: sessionStore.preKey,
         signalDigestSync,
         signalRotateKey,
         runtime: createPassiveTasksRuntime({
@@ -460,8 +785,11 @@ export function buildWaClientDependencies(input) {
             authClient,
             nodeOrchestrator,
             receiptQueue,
-            getCurrentCredentials
-        })
+            getCurrentCredentials,
+            abPropsCoordinator
+        }),
+        mobilePrimary: options.mobileTransport !== undefined,
+        appStateSync
     });
     return {
         nodeTransport,
@@ -482,13 +810,18 @@ export function buildWaClientDependencies(input) {
         messageDispatch,
         retryCoordinator,
         appStateSync,
-        appStateMutations,
+        chatCoordinator: appStateMutations,
         streamControl,
         incomingNode,
         passiveTasks,
         groupCoordinator,
+        privacyCoordinator,
+        profileCoordinator,
+        businessCoordinator,
+        emailCoordinator,
         receiptQueue,
-        keyShareCoordinator,
-        connectionManager
+        connectionManager,
+        trustedContactToken,
+        abPropsCoordinator
     };
 }