Review: the fork against Evolution API 2.3.7 - #2

Open

AlmogCohen wants to merge 157 commits into

release/2.3.7from

fork/2.3.7

Commits on Sep 27, 2026

docs(fork): state that this is an unofficial fork, and how it is changed

AlmogCohen
and
claude
committed
f382b1e
build(deps): pin baileys 7.0.0-rc14

AlmogCohen
and
claude
committed
fadd8bd
test: a vitest harness that runs Evolution's source against the real Baileys

AlmogCohen
and
claude
committed
a52aaf0
ci: run the fork's tests on every commit

AlmogCohen
and
claude
committed
c5d815b
docs(fork): the working rules, test first

AlmogCohen
and
claude
committed
fa3d836
test: app-state sync keys survive a reload in every auth store

AlmogCohen
and
claude
committed
eb94ff7
fix(auth-state): reload app-state sync keys with fromObject

AlmogCohen
and
claude
committed
4ffaf1e
test: a webhook subscribed to GROUP_UPDATE receives group updates

AlmogCohen
and
claude
committed
22b0eda
fix(webhook): accept both spellings of the group update event

AlmogCohen
and
claude
committed
b0edded
test: getMessage answers a miss with nothing, not an empty message

AlmogCohen
and
claude
committed
b588821
fix(baileys): answer a getMessage miss with undefined

AlmogCohen
and
claude
committed
26b9bfa
test: forward every @lid to phone mapping Baileys learns, on contacts.upsert

AlmogCohen
and
claude
committed
e98168a
feat(baileys): forward @lid to phone mappings on contacts.upsert

AlmogCohen
and
claude
committed
71ba3e8
test: say on contacts.upsert whether a name is the one the owner saved

AlmogCohen
and
claude
committed
9e958c1
feat(baileys): mark saved contact names on contacts.upsert, only when certain

AlmogCohen
and
claude
committed
f7b5606
test: nothing a message carries reaches the logs under LOG_LEVEL=ERROR,WARN

AlmogCohen
and
claude
committed
dd11ebe
fix(baileys): keep message content, numbers and names out of the logs

AlmogCohen
and
claude
committed
c52cab4
test: media downloads leave through the instance's proxy

AlmogCohen
and
claude
committed
5e2059e
fix(baileys): download media through the instance's proxy

AlmogCohen
and
claude
committed
2c2193f
test: media uploads work on an instance with a proxy, and leave through it

AlmogCohen
and
claude
committed
37775a9
fix(baileys): give Baileys an http agent for uploads through the proxy

AlmogCohen
and
claude
committed
c5435ef
test: the WhatsApp Web version fetch leaves through the instance's proxy

AlmogCohen
and
claude
committed
5187ea2
fix(baileys): fetch the WhatsApp Web version through the instance's proxy

AlmogCohen
and
claude
committed
7435f41
test: a connect never starts before the instance's proxy is loaded

AlmogCohen
and
claude
committed
bc3567e
fix(baileys): wait for the proxy before connecting

AlmogCohen
and
claude
committed
1876a9b
test: a connect uses the instance's stored settings, not defaults

AlmogCohen
and
claude
committed
6f895ce
fix(baileys): wait for settings before connecting

AlmogCohen
and
claude
committed
452402e
test: a database error never replaces a linked session's credentials

AlmogCohen
and
claude
committed
3ec7c20
fix(auth-state): fail on a database error instead of starting a fresh session

AlmogCohen
and
claude
committed
b3e91ff
test: a failed settings read does not drop an event batch

AlmogCohen
and
claude
committed
aead400
fix(baileys): keep processing a batch when the settings read fails

AlmogCohen
and
claude
committed
3235303
test: unlinking an instance whose connection is down still unlinks it

AlmogCohen
and
claude
committed
fb23a15
fix(instance): wipe the session on logout and delete even when the socket is down

AlmogCohen
and
claude
committed
3355775
test: profile pictures are fetched once per contact, not per event

AlmogCohen
and
claude
committed
7068a11
fix(baileys): cache profile picture lookups and bound their concurrency

AlmogCohen
and
claude
committed
fa79a62
test: one pairing code per connect attempt, and a fresh QR budget per attempt

AlmogCohen
and
claude
committed
0050af5
fix(baileys): request the pairing code once per attempt and reset the QR count

AlmogCohen
and
claude
committed
192605e
test: a group listing does not query every group's metadata again

AlmogCohen
and
claude
committed
053d26d
fix(baileys): fill the group metadata cache from groups.update

AlmogCohen
and
claude
committed
4e34298
test: history and live messages never wait on profile picture lookups

AlmogCohen
and
claude
committed
b1a88c0
fix(baileys): look up history contacts' pictures off the event path

AlmogCohen
and
claude
committed
5b4c3f5
test: reconnects back off instead of spinning

AlmogCohen
and
claude
committed
018d200
fix(baileys): back off between reconnects, and time out the version fetch

AlmogCohen
and
claude
committed
ae8ad21
test: one instance never runs two sockets

AlmogCohen
and
claude
committed
f9e3cfb
fix(baileys): end the old socket and serialise connects

AlmogCohen
and
claude
committed
5434ac4
test: a logout that cannot reach WhatsApp is delivered when the connection returns

AlmogCohen
and
claude
committed
420b9bc
fix(instance): keep the session until WhatsApp accepts the logout

AlmogCohen
and
claude
committed
1d15929
test: a pending logout is never undone by a lost marker file

AlmogCohen
and
claude
committed
0f2a0c4
fix(instance): record a pending logout on the instance row too

AlmogCohen
and
claude
committed
df633ca
docs(fork): list what the fork changes

AlmogCohen
and
claude
committed
0baf1d4
test: pin that sends to @lid chats go through (guard, not a bug)

AlmogCohen
and
claude
committed
2d9aeea
test: getMessage answers nothing when the lookup fails

AlmogCohen
and
claude
committed
2493e11
fix(baileys): answer nothing when the getMessage lookup fails

AlmogCohen
and
claude
committed
078d6c9
docs(fork): correct the issue references

AlmogCohen
and
claude
committed
c559cb1
test: group participant updates carry each participant's jid and phone number

AlmogCohen
and
claude
committed
a559dc4
fix(baileys): read Baileys 7 participant objects in group participant updates

AlmogCohen
and
claude
committed
8fd9004
test: chat updates and the history chat list carry the archive state

AlmogCohen
and
claude
committed
94d76b2
feat(baileys): forward archive state on chat updates and the history chat list

AlmogCohen
and
claude
committed
1e79cf1
test: a media download says whether it asked the phone to re-upload

AlmogCohen
and
claude
committed
c029b76
feat(baileys): record whether a media download asked for a re-upload

AlmogCohen
and
claude
committed
873d901
test: a media download can skip asking the phone to re-upload

AlmogCohen
and
claude
committed
c7e7e3b
feat(chat): let a media download skip the phone re-upload

AlmogCohen
and
claude
committed
c6860fa
test: an expired media download asks the phone to re-upload, once

AlmogCohen
and
claude
committed
8c95840
fix(baileys): re-upload expired media when Baileys' own check misses it

AlmogCohen
and
claude
committed
48bb6f0
test: a message's webhook key keeps its original @lid address

AlmogCohen
and
claude
committed
8cb0049
fix(baileys): keep the original @lid in remoteJidAlt when showing the phone address

AlmogCohen
and
claude
committed
f3d1052
test: a media re-upload names the chat by the address WhatsApp stores it under

AlmogCohen
and
claude
committed
999d2bb
fix(baileys): ask for a re-upload with the message's original address

AlmogCohen
and
claude
committed
257ebde
test: a refused re-upload says why

AlmogCohen
and
claude
committed
dbde828
feat(baileys): record why the phone refused a re-upload

AlmogCohen
and
claude
committed
d12de02
test: a 403 from the media servers also asks the phone to re-upload

AlmogCohen
and
claude
committed
0d4ce58
fix(baileys): ask the phone to re-upload after a 403 from the media servers

AlmogCohen
and
claude
committed
c09c604
docs(fork): list the @lid webhook key and the re-upload address

AlmogCohen
and
claude
committed
c147db1
test: a re-upload works when the media key arrives as text

AlmogCohen
and
claude
committed
cc5241f
fix(baileys): turn the media key back into bytes before asking the phone

AlmogCohen
and
claude
committed
d149189
test: a 403 asks the phone only when the media link has expired

AlmogCohen
and
claude
committed
7b09c47
fix(baileys): ask the phone after a 403 only when the media link has expired

AlmogCohen
and
claude
committed
431ebb8
test: a failed media download never logs the media URL

AlmogCohen
and
claude
committed
3167ff7
fix(baileys): keep media URLs out of the logs

AlmogCohen
and
claude
committed
db182c8
test: a failed reconnect says why

AlmogCohen
and
claude
committed
c8fdc03
fix(baileys): log why a reconnect attempt failed

AlmogCohen
and
claude
committed
7eb95c9
test: a failed incoming media conversion never logs the media URL

AlmogCohen
and
claude
committed
ce65a3f
fix(baileys): keep the media URL out of the base64 conversion log

AlmogCohen
and
claude
committed
6780ae8
test: a failed sent media conversion never logs the media URL

AlmogCohen
and
claude
committed
639ab6e
fix(baileys): keep the media URL out of the sent media conversion log

AlmogCohen
and
claude
committed
6850a9b
test: a failed connect for a pending logout says why

AlmogCohen
and
claude
committed
63c5170
fix(baileys): log why a connect for a pending logout failed

AlmogCohen
and
claude
committed
a24f928
test: a failed connection reload says why, scrubbed

AlmogCohen
and
claude
committed
f20c85b
fix(baileys): log why a connection reload failed, scrubbed

AlmogCohen
and
claude
committed
59a7b82
test: the live-record codec round-trips bytes, Longs, undefined, protobuf classes and Boom errors

AlmogCohen
and
claude
committed
96e45fc
feat(live-record): a tagged JSON codec that keeps bytes, Longs, undefined and protobuf classes

AlmogCohen
and
claude
committed
88c15df
test: a live check records its events, webhooks and a manifest under LIVE_RECORD_DIR

AlmogCohen
and
claude
committed
70a3df9
feat(live-record): record a live check's events, webhooks and manifest when LIVE_RECORD_DIR is set

AlmogCohen
and
claude
committed
ad048e6
test: the live-check scrubber replaces identities consistently and its leak gate aborts on a survivor

AlmogCohen
and
claude
committed
acce1ee
feat(live-record): a scrubber that turns a raw recording into a fixture, behind a fail-closed leak gate

AlmogCohen
and
claude
committed
938ad85
test: a scrubbed live-check fixture replays through the real buffer and service and reproduces its webhooks

AlmogCohen
and
claude
committed
03fc07a
feat(live-record): replay a scrubbed fixture through the real buffer and service, with a golden comparison

AlmogCohen
and
claude
committed
00735ff
test: a guard finds personal data in live fixtures and names only the file, line and kind

AlmogCohen
and
claude
committed
8ccda96
feat(live-record): a guard that scans live fixtures for personal data on every commit

AlmogCohen
and
claude
committed
5372d71
style: lint and prettier on the live-record files

AlmogCohen
and
claude
committed
797e52e
docs: the live-check protocol, catalogue and results log, and the rules for recordings and fixtures

AlmogCohen
and
claude
committed
71b5ae0
test: the scrubber keeps a numeric message id a message id, never a person

AlmogCohen
and
claude
committed
96ab1aa
fix(live-record): the scrubber fakes a numeric message id as an id

AlmogCohen
and
claude
committed
bf53c7c
test: the fixture guard passes identifiers and the scrubber's numeric message ids

AlmogCohen
and
claude
committed
d4d1e29
fix(live-record): the guard passes identifiers and the scrubber's numeric message id

AlmogCohen
and
claude
committed
ec02f6f
test(live): a contact renamed on the phone after a restart, replayed from a live check

AlmogCohen
and
claude
committed
356384e
test(live): archive and unarchive on the phone, replayed from a live check

AlmogCohen
and
claude
committed
584077c
test(live): a group renamed and a member removed and added back, replayed from a live check

AlmogCohen
and
claude
committed
e38b506
test(live): a DM addressed by @lid keeps its @lid, replayed from a live check

AlmogCohen
and
claude
committed
bc6ee78
style(live-record): prettier on the scrubber's numeric id, and a type for the rename test's filter

AlmogCohen
and
claude
committed
c804f38
docs(live-checks): log the 2026-09-27 rig session

AlmogCohen
and
claude
committed
2f1c5a7
test: a 403 is judged by the link that actually failed

AlmogCohen
and
claude
committed
b86b102
fix(baileys): judge a 403 by the link that actually failed

AlmogCohen
and
claude
committed
6e605a4
test: deleting an instance with its logout pending keeps the creds and proxy it needs (real Postgres)

AlmogCohen
and
claude
committed
9e4780c
fix: a deleted instance keeps its row until its pending logout is delivered

AlmogCohen
and
claude
committed
136690d
test: the scrubber, its leak gate and the fixture guard let a username, a stub text, an unknown field and a location through

AlmogCohen
and
claude
committed
837ab36
fix: the scrubber keeps a string only by field and known value, stops on an unknown field, and its gate reads the raw tapes itself

AlmogCohen
and
claude
committed
f63ff5c
test: a recorded link writes the QR payload, its image and the pairing code into the webhook tape

AlmogCohen
and
claude
committed
d82761e
fix: the recorder writes a marker, not the QR, its image or the pairing code, on the webhook tape

AlmogCohen
and
claude
committed
4d5b98a
test: a 202 PENDING logout is undone by losing the instances volume, and answered 202 even when it was not recorded

AlmogCohen
and
claude
committed
529c4b9
fix: a pending logout is recorded on the instance's row before 202, survives a lost instances volume, and a failure to record it is answered

AlmogCohen
and
claude
committed
2d5c296
test: a second logout answers 'logged out' while the first is still in flight

AlmogCohen
and
claude
committed
54a3892
fix: concurrent logouts share one run and answer with its outcome

AlmogCohen
and
claude
committed
dba9bc9
test: a logout WhatsApp never confirmed wipes the session, on the socket's own close

AlmogCohen
and
claude
committed
37f49ba
fix: a logout finishes on WhatsApp's answer, not on the socket closing itself

AlmogCohen
and
claude
committed
a1c69d2
test: a reload, and a socket built across a shutdown, escape the one-socket guard

AlmogCohen
and
claude
committed
a20d2d9
fix: a reload goes through the one-at-a-time connect, and nothing is built after a shutdown

AlmogCohen
and
claude
committed
f147f02
test: batches queued before an instance is shut down still run after it

AlmogCohen
and
claude
committed
166ff8d
fix: an instance shut down runs no queued batch and forwards nothing that finishes late

AlmogCohen
and
claude
committed
4e0c39e
test: a late picture lookup brings back an old name, and a removed picture

AlmogCohen
and
claude
committed
465d874
fix: a late picture lookup carries the contact's newest name, and never outlives a picture notification

AlmogCohen
and
claude
committed
caf5fa4
test: a proxied instance can still reach WhatsApp from the server address

AlmogCohen
and
claude
committed
d2e163c
fix: a proxied instance fails a connect or a download rather than leave from the server address

AlmogCohen
and
claude
committed
d65032f
test: errorFields keeps a quoted text and a formatted phone number from an error message

AlmogCohen
and
claude
committed
88102c7
fix: log scrubbing masks quoted text and phone numbers written with separators

AlmogCohen
and
claude
committed
90041f3
test: a DM addressed by phone whose key carries its @lid is asked for only under the @lid

AlmogCohen
and
claude
committed
3d2907a
fix: a re-upload the phone refuses under the @lid is asked again under the key as given

AlmogCohen
and
claude
committed
e435411
test: an unanswered re-upload leaves Baileys' waiters behind, and a late answer still acts

AlmogCohen
and
claude
committed
9ef82e6
fix: an unanswered re-upload ends Baileys' wait for the answer

AlmogCohen
and
claude
committed
2a86f76
test: a boot connect that fails on a database read leaves the instance out of the API for good

AlmogCohen
and
claude
committed
3fc6f59
fix: a boot connect that fails keeps the instance in the API and retries it

AlmogCohen
and
claude
committed
26622dc
test: a failed creds write reads as saved, unreadable creds are overwritten, and a failed creds.update save is lost

AlmogCohen
and
claude
committed
a69530d
fix: a creds write that fails is reported and retried, and unreadable creds are never replaced

AlmogCohen
and
claude
committed
b8df08a
test: a recording directory that cannot be created fails the connect, with the socket already built

AlmogCohen
and
claude
committed
219e79c
fix: a recording that cannot start or write its manifest costs the recording, never the connection

AlmogCohen
and
claude
committed
2ed4afe
test: a replay splits a batch the live buffer delivered whole

AlmogCohen
and
claude
committed
b3be753
fix(test): a replay flushes the buffer only where the live buffer did

AlmogCohen
and
claude
committed
eb9bc27
docs(fork): state what the fork's guarantees cover, and what they do not

AlmogCohen
and
claude
committed
4931519

Commits on Sep 29, 2026

test: a failed media download answers with the signed media link

AlmogCohen
and
claude
committed
fbd558c
fix: a failed media download answers without the media link

AlmogCohen
and
claude
committed
458226b
test: a signal key file is left torn by a crash, a failed write or a concurrent one

AlmogCohen
and
claude
committed
ac5a424
fix: signal key files are replaced whole, never written in place

AlmogCohen
and
claude
committed
d955eb7
test: a pending-logout marker write that fails partway leaves half a marker

AlmogCohen
and
claude
committed
2ad6311
fix: the pending-logout marker is replaced whole, never written in place

AlmogCohen
and
claude
committed
ddb4e2a
docs(fork): list media errors without the link, and session files replaced whole

AlmogCohen
and
claude
committed
95c844b
docs(fork): the trademark policy lives upstream, not in this tree

AlmogCohen
and
claude
committed
5daf1fa
docs(fork): record the 2026-09-29 live results (logout on an open socket, a pairing-code link)

AlmogCohen
and
claude
committed
34979cd