This is the largest release since the project's first crates.io publish. It brings the receive and send pipelines into WhatsApp Web behavioural parity, lands a major performance overhaul (zero-copy node decoding, take-ownership session cache, allocation diet across every hot path), adds first-class support for albums, sticker packs, ephemeral chats, status reactions, message-edit decryption and group call detection, and exposes new extension points for HTTP, transport, and crypto.
Many APIs changed — see Breaking changes below — but the new shape eliminates a long tail of clones, redundant decodes, and stringly-typed parameters that were holding back further optimisation. Downstream crates will need a one-shot migration; in exchange the receive pipeline performs effectively zero deep clones on dispatch.
Highlights
- Message edits via
secret_encrypted_message (#618) — WhatsApp's new E2E envelope for edits (secretEncType = MESSAGE_EDIT) is now decryptable. Ships MessageEdits::decrypt and a generalised secret_enc_addon helper covering the full addon family (PollVote, PollEdit, PollAddOption, EventResponse, EventEdit, EncReaction, EncComment, ReportToken, MessageEdit).
- Album sends (#449) and sticker pack sends (#454).
- Ephemeral messages (#450) — send and receive of disappearing chats.
- Status reactions (#541, #563, #568, #569).
- Pin / unpin (#424),
Client::logout() (#422), per-message message_id in SendOptions (#423).
- Incoming call events + group call detection (#562, #599).
ClientProfile for noise-handshake identity (#596) and Noise_IK + XXfallback (#598).
- Pluggable
SignalCryptoProvider (#561) — bring your own AES-CBC/GCM + HMAC-SHA256 backend.
- Proxy + custom TLS extension points (#536) and a generic
from_websocket transport API (#486).
- Public
refresh_prekeys() (#538) for device-migration flows.
- LID + PN support in
is_on_whatsapp (#453).
- Lazy history sync blob (#533) — history sync events expose a
LazyHistorySync you decode on demand.
- Full
GroupMetadata returned by create_group / community.create (#615).
- MEX notification dispatcher + consolidated doc-id registry (#574).
- 32-bit target support via
portable-atomic (#481).
Performance
This release is built around a sustained allocation-discipline pass on the receive, send, and signal paths. Selected wins:
- Receive pipeline: zero-copy node decoding via yoke (#513),
NodeStr replacing Cow<str> for inline decoded strings (#514), Arc<wa::Message> end-to-end on dispatch (#613), and Arc<MessageInfo> across retry/PDO (#520). Zero-copy receive pipeline + take-ownership session cache (#522).
- Startup: −21% allocations, −31% peak heap (#525).
- Connect time: −23% total allocs, −43% connect-time allocs (#551).
- Hot-path audits: 11 trims from a targeted pass (#570), per-device sender-key tracking cache (#445), parallel group encrypt fan-out (#610).
- Token lookup: PHF + SipHash replaced with hashify PTHash (FNV-1a) (#544); single/double-byte token maps unified into one PHF lookup (#543).
Jid / nodes: CompactString for Jid.user, NodeValue, NodeContent (#512); zero-copy Serialize for the NodeRef family (#539); zero-alloc dedup (#500); eliminated fmt::Write dispatch from JID formatting (#540).
- Cache miss penalty: unified device resolution removed a ~700 ms latency spike on cold lookups (#428).
- Signal store: lightweight PN, cache-first identity, reusable flush buffer (#554);
Bytes for sessions, [u8; 32] for identities, pre-encoded acks (#555).
- Decrypt hot path: LID-PN persist + migrations off-loaded from the decrypt path (#578).
WhatsApp Web compliance
A major theme of 0.6.0. The wire format, addressing, retry, and key-management code paths now match WA Web's reference behaviour:
- Pair + ADV —
companion_platform_id derivation, ADV HMAC enforcement, <prop> round-trip, Android → Chrome mapping (#592, #593, #594, #595, #601).
- DM multi-device fanout with phash validation (#524); single-device DM retry with chat/requester separation + alternate key lookup (#549, #550).
- Group / status session rebuild on retry (#559).
- SKDM — always distribute on first group send, keep tracker on identity change, close forward-secrecy gaps (#603, #604).
- LID / PN / Hosted addressing — Signal address for Hosted JIDs (#605), unified
get_lid_pn_entry(&Jid) (#487), session migration via signal cache (#482), status@broadcast resolves to @lid (#609).
- Identity change handler completed to match WA Web (#489, #490).
- PDO recovery +
UndecryptableMessage dispatch (#585), <unavailable> via PDO (#506).
- Stale device filtering via decoded
key-index-list (#469); sender-key cache invalidation on device changes (#489).
view_once nested-wrapper detection (#602).
- Block IQ includes LID + pn_jid (#600).
- Proto bumped to WhatsApp Web 2.3000.1035617621 (#436).
Breaking changes
API ergonomics
&[Jid] slices replace Vec<Jid> across feature APIs (#457).
#[non_exhaustive] added to event and option enums (#457) — new variants no longer break downstream matches.
- Typed errors preserve sources across the workspace (#597) —
anyhow::Error returns replaced by thiserror enums with #[source], so callers can downcast.
- Stringly-typed parameters → enums for privacy settings (#438) and several other APIs (#440).
- Enum JSON discriminators aligned with wire tags via
StringEnum (#566); wire-tag derives unified under #[derive(WireEnum)] (#567).
Sender key & device registry
- Unified per-device sender-key tracking through the device registry (#444).
key-index-list decoded to filter stale devices (#469).
server_has_prekeys flag persisted to match WA Web (#492).
- Immutable
load_sender_key and auto-reserve marshal (#503).
Device / pair
DevicePropsOverride builder; DEVICE_PROPS aligned with WA Web (#586).
companion_platform_{id,display} now derived from DeviceProps (#592, #593).
PlatformType::Android maps to Chrome; PlatformType::Unknown removed (#601).
Newsletter
- Sends unified through
Client::send_message (#447); newsletter meta node included on every send (#448).
Event bus
Arc<Event> event bus eliminates deep clones on dispatch (#515).
Arc<wa::Message> end-to-end (#613); Arc<MessageInfo> across message/retry/PDO (#520).
History sync
- Events replaced with
LazyHistorySync (#533) — decode on demand instead of eagerly.
Other
- LID + PN supported in
is_on_whatsapp (#453).
- Sticker pack APIs (#454).
- Allocation refactor in upload/send/Jid paths (#471).
- Comprehensive group feature improvements (#527).
- Unified LID-PN lookup via
get_lid_pn_entry(&Jid) (#487).
- Stale PN sessions migrate to LID to fix
NoSession decryption failures (#475).
CompactString for NodeValue / NodeContent / Jid.user (#512); yoke zero-copy node decoding + Jid Server enum (#513); NodeStr replaces Cow<str> (#514).
message_enqueue_locks + message_queues merged into ChatLane (#516).
Reliability
- Graceful shutdown for detached tasks fixes WASM
setTimeout leaks (#560).
- Concurrent disconnect hang resolved via
flush_scope counter and socket teardown (#577).
- In-flight delivery receipts flushed on disconnect (#573).
- Read-loop blocking + keepalive blind spots fixed (#485).
- Silent
pkmsg drop during offline/online transition fixed (#443).
- Audit follow-ups across correctness/safety/perf (#460, #511, #584).
<unavailable> alongside <enc> no longer swallowed (#589).
- LID↔PN zombie path closed for group-prekey 406 latency spikes (#579).
- Centralised timestamps via
wacore::time with clippy enforcement (#588, #611).
Contributors
Thanks to everyone who shipped code into this release:
- @jlucaso1 — the lion's share of receive/send/signal/perf work, group features, pairing, history sync, MEX dispatcher, and the WA Web compliance pass.
- @Salientekill — timestamp centralisation, typed membership-request variants, group call detection, blocklist LID/pn_jid fix,
Arc<wa::Message> sharing.
- @mcaldas —
<unavailable> handling via PDO instead of silent drops.
- @aldoeliacim — public
refresh_prekeys() for device migration.
- @Copilot — targeted single-device DM retry refactor matching WA Web.
- @dependabot — kept dependencies current across the release window (
aes, rand, rustls, compact_str, yoke, libsqlite3-sys).
New contributors
Full changelog: v0.5.0...v0.6.0 — over 200 PRs across the receive/send/signal pipelines, group features, pairing, history sync, performance, and WA Web parity.
All PRs in this release (auto-generated, full attribution)
- perf: optimize e2e CI — release build + skip soak tests by @jlucaso1 in #417
- fix: media stanza type, enc mediatype, thumbnails, and quote remoteJid by @jlucaso1 in #418
- refactor: forward media via CDN reuse, simplify main.rs by @jlucaso1 in #419
- perf: remove upload buffer clone, DRY download params and error patterns by @jlucaso1 in #420
- perf: hot-path allocations, ProductCatalogImage fix, DRY and dead code cleanup by @jlucaso1 in #421
- feat: add Client::logout() by @jlucaso1 in #422
- feat: add message_id to SendOptions by @jlucaso1 in #423
- feat: add pin_message() / unpin_message() by @jlucaso1 in #424
- fix: auto-detect stanza metadata for pin/poll/event messages by @jlucaso1 in #425
- fix: content-based decrypt-fail, poll vote/event response meta, SKDM decrypt-fail by @jlucaso1 in #426
- feat: auto-detect biz node, fix stanza types, serde-snake-case by @jlucaso1 in #427
- perf!: unify device resolution through device_registry, eliminate ~700ms cache miss penalty by @jlucaso1 in #428
- fix: use BadMac (error 7) for MAC failures, treat empty sessions as missing by @jlucaso1 in #429
- refactor: replace DeviceRow positional tuple with named struct by @jlucaso1 in #434
- chore: update proto to WhatsApp Web 2.3000.1035617621 by @jlucaso1 in #436
- Implement end-to-end tests for TC token by @jlucaso1 in #437
- refactor: make privacy settings API type-safe and WA Web compliant by @jlucaso1 in #438
- fix: correct stanza type and meta node mappings to match WA Web by @jlucaso1 in #439
- feat: cstoken (NCT) privacy token fallback + proto update by @jlucaso1 in #433
- refactor: replace stringly-typed APIs with enums across codebase by @jlucaso1 in #440
- fix: parse digest prekey IDs from nodes, not by @jlucaso1 in #441
- feat: add AB props cache and privacy tokens conditional by @jlucaso1 in #442
- fix: prevent silent pkmsg drop during offline-online semaphore transition by @jlucaso1 in #443
- feat!: unified per-device sender key tracking (WA Web parity) by @jlucaso1 in #444
- perf: in-memory cache for sender key device tracking by @jlucaso1 in #445
- fix: audit findings — prekey wrap-around, chain key overflow, log levels by @jlucaso1 in #446
- refactor!: unify newsletter send through Client::send_message by @jlucaso1 in #447
- fix: include meta node in newsletter sends (WA Web parity) by @jlucaso1 in #448
- feat!: album message support by @jlucaso1 in #449
- feat: ephemeral message support for send and receive by @jlucaso1 in #450
- fix: recognize own LID devices as self in DM device partitioning by @jlucaso1 in #451
- refactor: return SendResult from status send methods by @jlucaso1 in #452
- feat!: support LID and PN JIDs in is_on_whatsapp by @jlucaso1 in #453
- feat!: sticker pack sending support by @jlucaso1 in #454
- perf: sync Mutex for pending_retries, remove redundant Arc clone by @jlucaso1 in #455
- fix: add missing context to warning logs by @jlucaso1 in #456
- refactor!: API ergonomics — &[Jid], #[non_exhaustive], PartialEq/Eq by @jlucaso1 in #457
- fix: add #[must_use] to AbortHandle and clear message queues on disconnect by @jlucaso1 in #459
- fix: address 9 audit findings across correctness, safety, and performance by @jlucaso1 in #460
- refactor: simplify Dockerfile with cargo-chef and Alpine by @jlucaso1 in #461
- fix: per-device session locks in DM send path (#462) by @jlucaso1 in #463
- fix: use bare Signal address for 1:1 DM recipients by @jlucaso1 in #464
- fix!: decode key-index-list to filter stale devices from device registry by @jlucaso1 in #469
- perf!: reduce allocations in upload, send, and Jid paths by @jlucaso1 in #471
- feat: complete tctoken/cstoken privacy token lifecycle matching WA Web by @jlucaso1 in #473
- feat: add Signal protocol feature API and consolidate internal helpers by @jlucaso1 in #474
- fix!: migrate stale PN sessions to LID to fix NoSession decryption failures by @jlucaso1 in #475
- feat: buffered download fallback when streaming is unavailable by @jlucaso1 in #476
- fix: reduce log noise during reconnect and offload buffered decrypt by @jlucaso1 in #477
- refactor: architecture audit — cache bounds, circuit breaker, correctness fixes by @jlucaso1 in #478
- fix: sync own device list at login and parse server key-index in usync by @jlucaso1 in #479
- feat: unknown device detection and deferred device sync by @jlucaso1 in #480
- feat: portable-atomic for 32-bit targets and QR rotation safety guard by @jlucaso1 in #481
- fix: route session migration through signal cache instead of backend by @jlucaso1 in #482
- fix: normalize sender key address to bare JID for group messages by @jlucaso1 in #483
- fix: revert DM send to bare recipient JID (server-side fanout) by @jlucaso1 in #484
- fix: eliminate read-loop blocking and keepalive blind spots by @jlucaso1 in #485
- refactor: generic WebSocket transport with from_websocket API by @jlucaso1 in #486
- feat!: unified LID-PN lookup via get_lid_pn_entry(&Jid) by @jlucaso1 in #487
- fix: group description parsing, ephemeral trigger, participating roundtrip, business hour types by @jlucaso1 in #488
- fix: invalidate sender key cache on device changes and handle identity notifications by @jlucaso1 in #489
- fix: complete identity change handler to match WA Web by @jlucaso1 in #490
- chore: update nightly to 2026-04-05 and fix new clippy warnings by @jlucaso1 in #491
- fix!: persist server_has_prekeys flag matching WA Web by @jlucaso1 in #492
- fix: process group messages from unknown devices instead of discarding by @jlucaso1 in #493
- fix: validate phash from server ack to detect stale device lists by @jlucaso1 in #494
- chore: reduce duplication and unnecessary allocations by @jlucaso1 in #495
- chore: add SenderKeyName::from_jid() and avoid clones in parse_message_info by @jlucaso1 in #496
- perf: Reduce duplication and allocation churn by @jlucaso1 in #497
- chore(deps): update sha1, sha2, hkdf, hmac to digest 0.11 ecosystem by @jlucaso1 in #498
- perf: reduce duplication and unnecessary allocations by @jlucaso1 in #499
- perf: zero-alloc Jid dedup and session lock helper by @jlucaso1 in #500
- bench: add full send/receive pipeline benchmarks by @jlucaso1 in #501
- perf: zero-copy ciphertext serialization and DRY send pipeline by @jlucaso1 in #502
- perf!: immutable load_sender_key and auto-reserve marshal by @jlucaso1 in #503
- fix: handle messages via PDO instead of silently dropping by @mcaldas in #506
- fix: PDO cache key mismatch and add response guards by @jlucaso1 in #509
- perf: lazy ciphertext in SignalMessage, eliminate redundant allocation by @jlucaso1 in #510
- fix: codebase audit with bug fixes, race condition mitigations, and perf improvements by @jlucaso1 in #511
- perf!: use CompactString for NodeValue, NodeContent, and Jid.user by @jlucaso1 in #512
- perf!: yoke zero-copy node decoding and Jid Server enum by @jlucaso1 in #513
- perf!: replace Cow with NodeStr for inline decoded strings by @jlucaso1 in #514
- perf!: Arc event bus to eliminate deep clones on dispatch by @jlucaso1 in #515
- perf!: merge message_enqueue_locks + message_queues into ChatLane by @jlucaso1 in #516
- perf: single-buffer ProtocolAddress + reusable hot-loop address construction by @jlucaso1 in #518
- perf!: reduce hot-path allocations in receipt, send, and signal paths by @jlucaso1 in #519
- perf!: Arc across message, retry, and PDO paths by @jlucaso1 in #520
- fix: suppress ack errors for all transport-unavailable conditions by @jlucaso1 in #521
- perf!: zero-copy receive pipeline and take-ownership session cache by @jlucaso1 in #522
- feat!: comprehensive group feature improvements by @jlucaso1 in #527
- perf!: reduce startup allocations by ~21% and peak heap by ~31% by @jlucaso1 in #525
- chore(deps): bump rand from 0.10.0 to 0.10.1 by @dependabot[bot] in #531
- chore(deps): bump rustls from 0.23.37 to 0.23.38 by @dependabot[bot] in #530
- chore(deps): bump compact_str from 0.8.1 to 0.9.0 by @dependabot[bot] in #528
- fix: WA Web-compliant DM multi-device fanout with phash validation by @jlucaso1 in #524
- fix: centralize timestamp handling via wacore::time and fix signed parsing by @Salientekill in #532
- feat!: replace history sync events with lazy blob + perf optimizations by @jlucaso1 in #533
- feat(groups): add typed membership request variants (correct wire format) by @Salientekill in #534
- chore(deps): bump aes from 0.8.4 to 0.9.0 by @dependabot[bot] in #529
- feat: add extension points for proxy and custom TLS support by @jlucaso1 in #536
- chore(deps): bump libsqlite3-sys from 0.35.0 to 0.36.0 by @dependabot[bot] in #431
- fix: replace tokio timeout with runtime-agnostic timeout in phash validation by @jlucaso1 in #537
- feat(wacore-binary): zero-copy Serialize for NodeRef type family by @jlucaso1 in #539
- feat(prekeys): expose public refresh_prekeys() for device migration by @aldoeliacim in #538
- perf: eliminate fmt::Write dispatch from JID string formatting by @jlucaso1 in #540
- feat(status): add send_reaction for status likes by @jlucaso1 in #541
- perf: skip string classification for strings longer than PACKED_MAX by @jlucaso1 in #542
- perf: unify single/double-byte token maps into single PHF lookup by @jlucaso1 in #543
- perf!: replace PHF+SipHash token lookup with hashify PTHash (FNV-1a) by @jlucaso1 in #544
- perf: avoid unnecessary clone and pre-allocate Vecs in hot paths by @jlucaso1 in #545
- perf: trim unused features, deps, and gate prost-build behind feature by @jlucaso1 in #547
- refactor: targeted single-device DM retry (matches WA Web) by @Copilot in #549
- fix: WA Web-compliant DM retry handler (chat/requester separation + alternate key lookup) by @jlucaso1 in #550
- perf: integration benchmarks + allocation optimizations (-23% total, -43% connect allocs) by @jlucaso1 in #551
- perf: zero-copy frame send, direct prekey encoding, covariant AttrsRef by @jlucaso1 in #552
- perf: split notification handler, boxed-slice children, interest-based props by @jlucaso1 in #553
- perf: signal store hot path - lightweight PN, cache-first identity, reusable flush buffer by @jlucaso1 in #554
- perf: pre-encode acks, Bytes for sessions, [u8;32] for identities by @jlucaso1 in #555
- WA Web compliance: retry flow + group/status session rebuild by @jlucaso1 in #559
- Graceful shutdown for detached tasks (fixes WASM setTimeout leaks) by @jlucaso1 in #560
- feat: pluggable SignalCryptoProvider for AES-CBC/GCM + HMAC-SHA256 by @jlucaso1 in #561
- feat: incoming call events + member label update by @jlucaso1 in #562
- fix: status reactions via send_message with correct E2EE wire format by @jlucaso1 in #563
- fix: participant change success check + phone/username mixins by @jlucaso1 in #564
- fix: cache-aside fallback in get_lid_pn_entry by @jlucaso1 in #565
- Align enum JSON discriminators with wire tags via StringEnum by @jlucaso1 in #566
- Unify enum wire-tag derives under #[derive(WireEnum)] by @jlucaso1 in #567
- fix(status): use LID addressing, skip unresolvable recipients by @jlucaso1 in #568
- fix(status): drop on reactions and revokes by @jlucaso1 in #569
- perf: 11 allocation trims from hot-path audit by @jlucaso1 in #570
- fix(receipt): flush in-flight delivery receipts on disconnect by @jlucaso1 in #573
- feat(mex): notification dispatcher + consolidated doc-id registry by @jlucaso1 in #574
- refactor(receipt): extract FlushScope primitive; fix PDO leak via shutdown signal by @jlucaso1 in #576
- fix: concurrent disconnect hang (flush_scope counter leak + cleanup_connection_state socket teardown) by @jlucaso1 in #577
- perf(message): off-load LID-PN persist + migrations from the decrypt hot path by @jlucaso1 in #578
- fix(send): close LID↔PN zombie path for group prekey 406 latency spikes by @jlucaso1 in #579
- chore: audit follow-ups (perf, cleanup, helpers) by @jlucaso1 in #584
- chore(deps): bump yoke from 0.7.5 to 0.8.2 by @dependabot[bot] in #583
- fix(pdo): align PDO recovery + UndecryptableMessage dispatch with WA Web by @jlucaso1 in #585
- feat(device)!: DevicePropsOverride builder, align DEVICE_PROPS with WA Web by @jlucaso1 in #586
- fix(http): raise UreqHttpClient body cap from ureq's 10 MiB default by @jlucaso1 in #587
- fix(time): route all now() calls through wacore::time; enforce via clippy by @jlucaso1 in #588
- fix(decrypt): fall through when comes alongside by @jlucaso1 in #589
- perf: reduce cache and channel pre-allocations by @jlucaso1 in #590
- [codex] fix e2e reconnect and receipt flakes by @jlucaso1 in #591
- fix(pair-code)!: derive companion_platform_{id,display} from DeviceProps by @jlucaso1 in #592
- fix(pair): WA Web compliant pairing QR + companion_platform_{id,display} by @jlucaso1 in #593
- fix(pair,props): enforce ADV HMAC verify and round-trip children by @jlucaso1 in #594
- fix(pair): emit empirically correct companion_platform_id for Android by @jlucaso1 in #595
- feat(client): add ClientProfile for noise-handshake identity by @jlucaso1 in #596
- refactor!: preserve typed error sources across the workspace by @jlucaso1 in #597
- feat(noise): implement Noise_IK + XXfallback for WA-Web parity by @jlucaso1 in #598
- feat(call): detect group calls via offer_notice and group-jid attrs by @Salientekill in #599
- fix(pair)!: map Android PlatformType to Chrome, drop Unknown variant by @jlucaso1 in #601
- fix(blocklist): include LID + pn_jid in block IQ (modern WA) by @Salientekill in #600
- fix(proto_helpers): detect view_once inline flag and nested wrappers by @jlucaso1 in #602
- fix(send): always distribute SKDM on first group send + stop wiping tracker on identity change by @jlucaso1 in #603
- fix(send): close SKDM flow gaps for forward secrecy and cache hygiene by @jlucaso1 in #604
- fix(lid_pn): WA Web compliant signal address for Hosted JIDs by @jlucaso1 in #605
- fix(lid_pn): keep status@broadcast resolving to @lid by @jlucaso1 in #609
- refactor(time): split monotonic clock from wall clock by @jlucaso1 in #611
- fix(portable_cache): add iter() to mirror moka::Cache by @jlucaso1 in #612
- perf(send): parallelize group encrypt fan-out + adjacent wins by @jlucaso1 in #610
- perf(events): share wa::Message via Arc end-to-end (zero deep-clone on dispatch) by @Salientekill in #613
- feat(history_sync): expose peer_data_request_session_id on LazyHistorySync by @jlucaso1 in #614
- feat(groups): return full GroupMetadata from create_group / community.create by @jlucaso1 in #615
- feat(message_edit): decrypt secretEncryptedMessage MESSAGE_EDIT envelope by @jlucaso1 in #618
- chore(release): bump workspace to 0.6.0 by @jlucaso1 in #619
- ci(release): install cargo-release via taiki-e action by @jlucaso1 in #620
