Private maintained build source for WhatsApp integration
  • JavaScript 99.5%
  • Shell 0.5%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Adi1231234 1a9a1b7022
fix: recover ciphertext messages via PLACEHOLDER_MESSAGE_RESEND (PDO type 4) (#182677)
* fix: recover ciphertext messages via PLACEHOLDER_MESSAGE_RESEND

Add automatic recovery for ciphertext messages using WhatsApp's built-in
PLACEHOLDER_MESSAGE_RESEND (PDO type 4). Override the AB test gate and
send recovery requests after a 5s grace period.

Also adds message_ciphertext_failed event at 15s and fixes incorrect
JSDoc on onAddMessageCiphertextEvent.

* fix: skip message event when ciphertext resolves to revoked

when a ciphertext message is revoked before it decrypts, WhatsApp's
internal revoke handler calls model.set({ type: 'revoked', ... }) on
the existing model in place. This triggers change:type on the ciphertext
model, which fired the deferred listener and emitted a spurious message
event with type === 'revoked'.

add an early return in the once('change:type') callback to skip
onaddmessageevent when the resolved type is revoked.

fixes wwebjs/whatsapp-web.js#201668

* fix: use handlePlaceholderMsgsSeen for ciphertext recovery

replace the manual sendPeerDataOperationRequest call with a direct call
to handlePlaceholderMsgsSeen. This adds subtype filtering (skips
bot_unavailable_fanout, hosted_unavailable_fanout,
view_once_unavailable_fanout), an age check (14 day limit via the
placeholder_message_resend_maximum_days_limit AB prop), and internal
deduplication so the same message doesn't get multiple PDO requests.

the true second argument is the 'is visible' flag the function expects.
since the gate override is already in place earlier in the evaluate
block, the function passes its own internal gate check and proceeds
normally.

suggested by @sofi-ans in review.

* fix: batch ciphertext PDO requests instead of sending per-message

handleplaceholdermsgsseen has built-in chunking (batches of 32 per PDO)
but calling it with [msg] per message from Msg.on('add') bypasses that.
collect ciphertext messages into a shared buffer and flush them in a
single call after the 5s grace period.

also guard the failTimer to skip if the message type already changed.

* fix: replace silent catch blocks with established patterns

address reviewer feedback - remove catch (_) { // comment } pattern:
- Gate override now uses injectToFunction (existing utility)
- PDO call uses direct require without silent error swallowing

* fix(types): add on() overload for message_ciphertext_failed event

* fix: skip unavailable fanout placeholders from ciphertext recovery

unavailable fanout placeholders (view_once, hosted, bot) are
unrecoverable - WhatsApp's handlePlaceholderMsgsSeen explicitly
skips them and won't resend via PDO. Without this check, the
15s failTimer fires message_ciphertext_failed as a false positive.
2026-04-01 11:15:54 -03:00
.github chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
.husky chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
docs chore(v1.34.6): bump version and generate docs 2026-01-30 16:40:01 +00:00
src fix: recover ciphertext messages via PLACEHOLDER_MESSAGE_RESEND (PDO type 4) (#182677) 2026-04-01 11:15:54 -03:00
tests chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
tools chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
.editorconfig chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
.env.example chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
.eslintignore chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
.eslintrc.json chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
.gitattributes chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
.gitignore fix: sendMessage with quoted message id (#3260) 2024-09-15 01:44:07 +03:00
.jsdoc.json chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
.lintstagedrc.json chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
.npmignore fix npmignore 2023-08-10 00:53:25 -04:00
.prettierignore chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
.prettierrc.json chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
commitlint.config.js chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
example.js chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
index.d.ts fix: recover ciphertext messages via PLACEHOLDER_MESSAGE_RESEND (PDO type 4) (#182677) 2026-04-01 11:15:54 -03:00
index.js chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
LICENSE Create LICENSE 2019-02-16 22:22:51 -04:00
package.json chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
README.md chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00
shell.js chore: cleanup, ci workflows and formatting (#127064) 2026-03-10 01:45:12 +02:00

About

whatsapp‑web.js is a powerful Node.js library that lets you interact with WhatsApp Web, making it easy to build a dynamic WhatsApp API with nearly all features of the web client. It uses Puppeteer to access WhatsApp Web’s internal functions and runs them in a managed browser instance to reduce the risk of being blocked.

Installation

Node.js v18.0.0 or higher, is required.

npm install whatsapp-web.js
yarn add whatsapp-web.js
pnpm add whatsapp-web.js

Having trouble installing? Take a peak at the Guide for more detailed instructions.

Example usage

const { Client } = require('whatsapp-web.js');
const qrcode = require('qrcode-terminal');

const client = new Client();

client.on('qr', (qr) => {
    qrcode.generate(qr, { small: true });
});

client.on('ready', () => {
    console.log('Client is ready!');
});

client.on('message', (msg) => {
    if (msg.body == '!ping') {
        msg.reply('pong');
    }
});

client.initialize();

Take a look at example.js for additional examples and use cases.
For more details on saving and restoring sessions, check out the Authentication Strategies.

Supported features

Feature Status
Multi Device ✅
Send messages ✅
Receive messages ✅
Send media (images/audio/documents) ✅
Send media (video) ✅ (requires Google Chrome)
Send stickers ✅
Receive media (images/audio/video/documents) ✅
Send contact cards ✅
Send location ✅
Send buttons ❌ (DEPRECATED)
Send lists ❌ (DEPRECATED)
Receive location ✅
Message replies ✅
Join groups by invite ✅
Get invite for group ✅
Modify group info (subject, description) ✅
Modify group settings (send messages, edit info) ✅
Add group participants ✅
Kick group participants ✅
Promote/demote group participants ✅
Mention users ✅
Mention groups ✅
Mute/unmute chats ✅
Block/unblock contacts ✅
Get contact info ✅
Get profile pictures ✅
Set user status message ✅
React to messages ✅
Create polls ✅
Channels ✅
Vote in polls ✅
Communities 🔜

Something missing? Make an issue and let us know!

Supporting the project

You can support the maintainer of this project through the links below:

Contributing

Feel free to open pull requests; we welcome contributions! However, for significant changes, it's best to open an issue beforehand. Make sure to review our contribution guidelines before creating a pull request. Before creating your own issue or pull request, always check to see if one already exists!

Disclaimer

This project is not affiliated, associated, authorized, endorsed by, or in any way officially connected with WhatsApp or any of its subsidiaries or its affiliates. The official WhatsApp website can be found at whatsapp.com. "WhatsApp" as well as related names, marks, emblems and images are registered trademarks of their respective owners. Also it is not guaranteed you will not be blocked by using this method. WhatsApp does not allow bots or unofficial clients on their platform, so this shouldn't be considered totally safe.

License

Copyright 2019 Pedro S Lopez

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this project except in compliance with the License.
You may obtain a copy of the License at https://www.apache.org/licenses/LICENSE-2.0.

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.