@lazyneoaz/metachat 1.1.2 → 1.1.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyneoaz/metachat",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "type": "commonjs",
   "types": "src/types/index.d.ts",
   "description": "Advanced Facebook Chat API client for building Messenger bots — real-time messaging, thread management, MQTT, and session stability.",
@@ -37,6 +37,7 @@
     "metachat"
   ],
   "dependencies": {
+    "@dongdev/fca-unofficial": "^4.0.3",
     "axios": "^1.13.5",
     "axios-cookiejar-support": "^4.0.7",
     "bluebird": "^3.7.2",

package/src/apis/changeAdminStatus.js

@@ -67,7 +67,7 @@ module.exports = function (defaultFuncs, api, ctx) {
             });
 
             const form = JSON.stringify({
-                app_id: String(ctx.appID || ctx.mqttAppID || "2220391788200892"),
+                app_id: "2220391788200892",
                 payload: JSON.stringify({
                     epoch_id: epochID,
                     tasks: tasks,
@@ -114,7 +114,7 @@ module.exports = function (defaultFuncs, api, ctx) {
                     epoch_id: epochID,
                     data_trace_id: null
                 }),
-                app_id: String(ctx.appID || ctx.mqttAppID || "772021112871879")
+                app_id: "2220391788200892"
             };
 
             defaultFuncs

package/src/apis/changeGroupImage.js

@@ -110,7 +110,7 @@ module.exports = (defaultFuncs, api, ctx) => {
       };
 
       const request = {
-        app_id: String(ctx.appID || ctx.mqttAppID || "2220391788200892"),
+        app_id: "2220391788200892",
         payload: JSON.stringify(mqttPayload),
         request_id: reqID,
         type: 3

package/src/apis/createPoll.js

@@ -58,7 +58,7 @@ module.exports = (defaultFuncs, api, ctx) => {
       };
 
       const form = JSON.stringify({
-        app_id: "772021112871879",
+        app_id: "2220391788200892",
         payload: JSON.stringify(payload),
         request_id: ++ctx.wsReqNumber,
         type: 3

package/src/apis/deleteMessage.js

@@ -1,9 +1,20 @@
 "use strict";
 
 const utils = require('../utils');
+const { publishLsRequestWithAck } = require('../utils/lsRequest');
 
 module.exports = (defaultFuncs, api, ctx) => {
-  return async function deleteMessage(messageID, callback) {
+  /**
+   * Deletes one or more messages.
+   *
+   * Uses MQTT label "146" (version "25909428212080747") when the MQTT client is
+   * connected — this matches dongdev's deleteMessage implementation.
+   * Falls back to the legacy HTTP delete_messages.php endpoint otherwise.
+   *
+   * @param {string|string[]} messageOrMessages
+   * @param {Function} [callback]
+   */
+  return async function deleteMessage(messageOrMessages, callback) {
     let resolveFunc = () => {};
     let rejectFunc = () => {};
     const returnPromise = new Promise((resolve, reject) => {
@@ -26,17 +37,66 @@ module.exports = (defaultFuncs, api, ctx) => {
     }
 
     try {
-      const res = await defaultFuncs.post(
-        "https://www.facebook.com/ajax/mercury/delete_messages.php",
-        ctx.jar,
-        { message_id: messageID }
-      ).then(utils.parseAndCheckLogin(ctx, defaultFuncs));
+      const messages = Array.isArray(messageOrMessages)
+        ? messageOrMessages
+        : [messageOrMessages];
 
-      if (res && res.error) {
-        throw new Error(String(res.error_msg || res.error || "deleteMessage failed"));
+      if (messages.length === 0 || messages.some(v => v === null || v === undefined || v === "")) {
+        throw new Error("messageOrMessages must contain at least one non-empty message ID");
+      }
+
+      const mqttReady = !!(ctx.mqttClient && ctx.mqttClient.connected);
+
+      if (mqttReady) {
+        // MQTT path: label "146", version "25909428212080747" (dongdev confirmed)
+        if (typeof ctx.wsReqNumber !== "number") ctx.wsReqNumber = 0;
+        if (typeof ctx.wsTaskNumber !== "number") ctx.wsTaskNumber = 0;
+
+        const requestId = ++ctx.wsReqNumber;
+        const tasks = messages.map((messageID) => {
+          const queueName = String(messageID);
+          const taskId = ++ctx.wsTaskNumber;
+          return {
+            failure_count: null,
+            label: "146",
+            payload: JSON.stringify({
+              thread_key: queueName,
+              remove_type: 0,
+              sync_group: 1
+            }),
+            queue_name: queueName,
+            task_id: taskId
+          };
+        });
+
+        publishLsRequestWithAck({
+          client: ctx.mqttClient,
+          requestId,
+          timeoutMs: 20000,
+          content: {
+            app_id: "2220391788200892",
+            payload: JSON.stringify({
+              epoch_id: parseInt(utils.generateOfflineThreadingID()),
+              tasks,
+              version_id: "25909428212080747"
+            }),
+            request_id: requestId,
+            type: 3
+          },
+          extract: (message) => ({ success: true, response: message.payload })
+        }).then((result) => {
+          callback(null, result);
+        }).catch((mqttErr) => {
+          utils.error("deleteMessage/mqtt", mqttErr);
+          // MQTT failed → fall back to HTTP
+          _deleteViaHttp(messages, callback, defaultFuncs, ctx);
+        });
+
+      } else {
+        // HTTP fallback
+        await _deleteViaHttp(messages, callback, defaultFuncs, ctx);
       }
 
-      callback(null, { success: true });
     } catch (err) {
       utils.error("deleteMessage", err);
       callback(err instanceof Error ? err : new Error(String(err && err.message ? err.message : err)));
@@ -45,3 +105,24 @@ module.exports = (defaultFuncs, api, ctx) => {
     return returnPromise;
   };
 };
+
+async function _deleteViaHttp(messages, callback, defaultFuncs, ctx) {
+  try {
+    // The legacy endpoint only accepts one messageID at a time
+    for (const messageID of messages) {
+      const res = await defaultFuncs.post(
+        "https://www.facebook.com/ajax/mercury/delete_messages.php",
+        ctx.jar,
+        { message_id: messageID }
+      ).then(utils.parseAndCheckLogin(ctx, defaultFuncs));
+
+      if (res && res.error) {
+        throw new Error(String(res.error_msg || res.error || "deleteMessage HTTP failed"));
+      }
+    }
+    callback(null, { success: true });
+  } catch (err) {
+    utils.error("deleteMessage/http", err);
+    callback(err instanceof Error ? err : new Error(String(err && err.message ? err.message : err)));
+  }
+}

package/src/apis/emoji.js

@@ -92,11 +92,11 @@ module.exports = function (defaultFuncs, api, ctx) {
     };
 
     const context = {
-      app_id: ctx.appID || '2220391788200892',
+      app_id: '2220391788200892',
       payload: {
         epoch_id: parseInt(utils.generateOfflineThreadingID()),
         tasks: [query],
-        version_id: '24631415369801570',
+        version_id: '8798795233522156',
       },
       request_id: ctx.wsReqNumber,
       type: 3,

package/src/apis/gcmember.js

@@ -1,128 +1,172 @@
 "use strict";
 
 const utils = require('../utils');
+const { publishLsRequestWithAck } = require('../utils/lsRequest');
 
 module.exports = function (defaultFuncs, api, ctx) {
   /**
-   * Made by ChoruOfficial 
-   * Mqtt
-   * Adds or removes members from a group chat with pre-checking.
+   * Adds or removes members from a group chat.
    *
-   * @param {"add" | "remove"} action The action to perform.
-   * @param {string|string[]} userIDs The user ID or array of user IDs.
-   * @param {string} threadID The ID of the group chat.
-   * @param {Function} [callback] Optional callback function.
-   * @returns {Promise<object>} A promise that resolves with information about the action.
+   * Add  uses publishLsRequestWithAck (label "23", app_id "772021112871879",
+   *          version "24502707779384158") — matches dongdev addUserToGroup.
+   * Remove uses fire-and-forget publish     (label "140", app_id "2220391788200892",
+   *          version "25002366262773827")   — matches dongdev removeUserFromGroup.
+   *
+   * @param {"add"|"remove"} action
+   * @param {string|string[]} userIDs
+   * @param {string} threadID
+   * @param {Function} [callback]
    */
   return async function gcmember(action, userIDs, threadID, callback) {
     let _callback;
     if (typeof threadID === 'function') {
-        _callback = threadID;
-        threadID = null;
+      _callback = threadID;
+      threadID = null;
     } else if (typeof callback === 'function') {
-        _callback = callback;
+      _callback = callback;
     }
-    
+
     let resolvePromise, rejectPromise;
     const returnPromise = new Promise((resolve, reject) => {
-        resolvePromise = resolve;
-        rejectPromise = reject;
+      resolvePromise = resolve;
+      rejectPromise = reject;
     });
 
-    if (typeof _callback != "function") {
+    if (typeof _callback !== "function") {
       _callback = (err, data) => {
-        // Note: We will now rarely use the 'err' parameter for validation errors
         if (err) return rejectPromise(err);
         resolvePromise(data);
-      }
+      };
     }
 
     try {
-        const validActions = ["add", "remove"];
-        action = action ? action.toLowerCase() : "";
+      const validActions = ["add", "remove"];
+      action = action ? action.toLowerCase() : "";
 
+      if (!validActions.includes(action)) {
+        _callback(null, { type: "error_gc", error: `Invalid action. Must be one of: ${validActions.join(", ")}` });
+        return returnPromise;
+      }
+      if (!userIDs || (Array.isArray(userIDs) ? userIDs.length === 0 : false)) {
+        _callback(null, { type: "error_gc", error: "userIDs is required." });
+        return returnPromise;
+      }
+      if (!threadID) {
+        _callback(null, { type: "error_gc", error: "threadID is required." });
+        return returnPromise;
+      }
+      if (!ctx.mqttClient || !ctx.mqttClient.connected) {
+        _callback(null, { type: "error_gc", error: "Not connected to MQTT" });
+        return returnPromise;
+      }
 
-        if (!validActions.includes(action)) {
-            _callback(null, { type: "error_gc", error: `Invalid action. Must be one of: ${validActions.join(", ")}` });
-            return returnPromise;
-        }
-        if (!userIDs || userIDs.length === 0) {
-            _callback(null, { type: "error_gc", error: "userIDs is required." });
-            return returnPromise;
-        }
-        if (!threadID) {
-            _callback(null, { type: "error_gc", error: "threadID is required." });
-            return returnPromise;
-        }
-        if (!ctx.mqttClient || !ctx.mqttClient.connected) {
-            _callback(null, { type: "error_gc", error: "Not connected to MQTT" });
-            return returnPromise;
-        }
+      const threadInfo = await api.getThreadInfo(threadID);
+      if (!threadInfo) {
+        _callback(null, { type: "error_gc", error: "Could not retrieve thread information." });
+        return returnPromise;
+      }
+      if (threadInfo.isGroup === false) {
+        _callback(null, { type: "error_gc", error: "This feature is only for group chats, not private messages." });
+        return returnPromise;
+      }
 
-        const threadInfo = await api.getThreadInfo(threadID);
-        if (!threadInfo) {
-            _callback(null, { type: "error_gc", error: "Could not retrieve thread information." });
-            return returnPromise;
-        }
-        if (threadInfo.isGroup === false) {
-            _callback(null, { type: "error_gc", error: "This feature is only for group chats, not private messages." });
-            return returnPromise;
+      const currentMembers = threadInfo.participantIDs || [];
+      const usersToModify = Array.isArray(userIDs) ? userIDs : [userIDs];
+
+      if (typeof ctx.wsReqNumber !== "number") ctx.wsReqNumber = 0;
+      if (typeof ctx.wsTaskNumber !== "number") ctx.wsTaskNumber = 0;
+
+      if (action === 'add') {
+        // Filter out users already in the group
+        const usersToAdd = usersToModify.filter(id => !currentMembers.includes(String(id)));
+        if (usersToAdd.length === 0) {
+          _callback(null, { type: "error_gc", error: "All specified users are already in the group." });
+          return returnPromise;
         }
-        
-        const currentMembers = threadInfo.participantIDs;
-        const usersToModify = Array.isArray(userIDs) ? userIDs : [userIDs];
-        let queryPayload, query;
-        let finalUsers = usersToModify;
-        
-        ctx.wsReqNumber = (ctx.wsReqNumber || 0) + 1;
-        ctx.wsTaskNumber = (ctx.wsTaskNumber || 0) + 1;
-
-        if (action === 'add') {
-            const usersToAdd = usersToModify.filter(id => !currentMembers.includes(id));
-            if (usersToAdd.length === 0) {
-                _callback(null, { type: "error_gc", error: "All specified users are already in the group." });
-                return returnPromise;
-            }
-            finalUsers = usersToAdd;
-            queryPayload = { thread_key: parseInt(threadID), contact_ids: finalUsers.map(id => parseInt(id)), sync_group: 1 };
-            query = { label: "23", payload: JSON.stringify(queryPayload), queue_name: threadID, task_id: ctx.wsTaskNumber };
-        
-        } else { // action is 'remove'
-            const userToRemove = usersToModify[0];
-            if (!currentMembers.includes(userToRemove)) {
-                _callback(null, { type: "error_gc", error: `User with ID ${userToRemove} is not in this group chat.` });
-                return returnPromise;
-            }
-            finalUsers = [userToRemove];
-            queryPayload = { thread_id: threadID, contact_id: userToRemove, sync_group: 1 };
-            query = { label: "140", payload: JSON.stringify(queryPayload), queue_name: "remove_participant_v2", task_id: ctx.wsTaskNumber };
+
+        const requestId = ++ctx.wsReqNumber;
+        const taskId = ++ctx.wsTaskNumber;
+
+        // addUserToGroup: app_id "772021112871879", version "24502707779384158" (dongdev confirmed)
+        publishLsRequestWithAck({
+          client: ctx.mqttClient,
+          requestId,
+          content: {
+            app_id: "772021112871879",
+            payload: JSON.stringify({
+              epoch_id: parseInt(utils.generateOfflineThreadingID()),
+              tasks: [{
+                failure_count: null,
+                label: "23",
+                payload: JSON.stringify({
+                  thread_key: threadID,
+                  contact_ids: usersToAdd.map(id => String(id)),
+                  sync_group: 1
+                }),
+                queue_name: String(threadID),
+                task_id: taskId
+              }],
+              version_id: "24502707779384158"
+            }),
+            request_id: requestId,
+            type: 3
+          },
+          extract: (message) => ({ success: true, response: message.payload })
+        }).then((result) => {
+          _callback(null, {
+            type: "gc_member_update",
+            threadID, userIDs: usersToAdd, action,
+            senderID: ctx.userID, BotID: ctx.userID, timestamp: Date.now()
+          });
+        }).catch((err) => {
+          utils.error("gcmember/add", err);
+          _callback(err instanceof Error ? err : new Error(err.message || "gcmember add failed"));
+        });
+
+      } else {
+        // action === 'remove'
+        const userToRemove = String(usersToModify[0]);
+        if (!currentMembers.includes(userToRemove)) {
+          _callback(null, { type: "error_gc", error: `User ${userToRemove} is not in this group.` });
+          return returnPromise;
         }
 
+        // removeUserFromGroup: app_id "2220391788200892", version "25002366262773827" (dongdev confirmed)
+        // Fire-and-forget (no ACK needed) — matches dongdev's publishRealtimeMessage pattern
         const context = {
-          app_id: ctx.appID || '2220391788200892',
-          payload: { epoch_id: parseInt(utils.generateOfflineThreadingID()), tasks: [query], version_id: "24631415369801570" },
-          request_id: ctx.wsReqNumber,
+          app_id: "2220391788200892",
+          payload: JSON.stringify({
+            epoch_id: parseInt(utils.generateOfflineThreadingID()),
+            tasks: [{
+              failure_count: null,
+              label: "140",
+              payload: JSON.stringify({
+                thread_id: threadID,
+                contact_id: userToRemove,
+                sync_group: 1
+              }),
+              queue_name: "remove_participant_v2",
+              task_id: Math.floor(Math.random() * 1001)
+            }],
+            version_id: "25002366262773827"
+          }),
+          request_id: ++ctx.wsReqNumber,
           type: 3
         };
-        context.payload = JSON.stringify(context.payload);
 
         ctx.mqttClient.publish('/ls_req', JSON.stringify(context), { qos: 1, retain: false }, (err) => {
           if (err) return _callback(err);
-          
-          const gcmemberInfo = {
+          return _callback(null, {
             type: "gc_member_update",
-            threadID: threadID,
-            userIDs: finalUsers,
-            action: action,
-            senderID: ctx.userID,
-            BotID: ctx.userID,
-            timestamp: Date.now(),
-          };
-          return _callback(null, gcmemberInfo);
+            threadID, userIDs: [userToRemove], action,
+            senderID: ctx.userID, BotID: ctx.userID, timestamp: Date.now()
+          });
         });
+      }
+
     } catch (err) {
-        utils.error("gcmember", err);
-        _callback(err instanceof Error ? err : new Error(err.message || "An unknown error occurred."));
+      utils.error("gcmember", err);
+      _callback(err instanceof Error ? err : new Error(err.message || "An unknown error occurred."));
     }
 
     return returnPromise;

package/src/apis/gcname.js

@@ -91,7 +91,7 @@ module.exports = function (defaultFuncs, api, ctx) {
     };
 
     const context = {
-      app_id: ctx.appID || '2220391788200892',
+      app_id: '2220391788200892',
       payload: {
         epoch_id: parseInt(utils.generateOfflineThreadingID()),
         tasks: [query],

package/src/apis/gcrule.js

@@ -74,36 +74,33 @@ module.exports = function (defaultFuncs, api, ctx) {
         }
 
         const isAdminStatus = action === 'admin' ? 1 : 0;
-        ctx.wsReqNumber = (ctx.wsReqNumber || 0) + 1;
-        ctx.wsTaskNumber = (ctx.wsTaskNumber || 0) + 1;
+        if (typeof ctx.wsReqNumber !== "number") ctx.wsReqNumber = 0;
 
-        const queryPayload = {
-            thread_key: parseInt(threadID),
-            contact_id: parseInt(userID),
-            is_admin: isAdminStatus
-        };
-        const query = {
-            failure_count: null,
-            label: "25",
-            payload: JSON.stringify(queryPayload),
-            queue_name: "admin_status",
-            task_id: ctx.wsTaskNumber
-        };
+        // Dongdev pattern: task_id starts at 1 (index + 1), fire-and-forget publish
         const context = {
-            app_id: ctx.appID || '2220391788200892',
-            payload: {
+            app_id: '2220391788200892',
+            payload: JSON.stringify({
                 epoch_id: parseInt(utils.generateOfflineThreadingID()),
-                tasks: [query],
-                version_id: "24631415369801570"
-            },
-            request_id: ctx.wsReqNumber,
+                tasks: [{
+                    failure_count: null,
+                    label: "25",
+                    payload: JSON.stringify({
+                        thread_key: threadID,
+                        contact_id: userID,
+                        is_admin: isAdminStatus
+                    }),
+                    queue_name: "admin_status",
+                    task_id: 1
+                }],
+                version_id: "8798795233522156"
+            }),
+            request_id: ++ctx.wsReqNumber,
             type: 3
         };
-        context.payload = JSON.stringify(context.payload);
 
         ctx.mqttClient.publish('/ls_req', JSON.stringify(context), { qos: 1, retain: false }, (err) => {
             if (err) return _callback(err);
-            const gcruleInfo = {
+            return _callback(null, {
                 type: "gc_rule_update",
                 threadID: threadID,
                 userID: userID,
@@ -111,8 +108,7 @@ module.exports = function (defaultFuncs, api, ctx) {
                 senderID: ctx.userID,
                 BotID: ctx.userID,
                 timestamp: Date.now(),
-            };
-            return _callback(null, gcruleInfo);
+            });
         });
 
     } catch (err) {

package/src/apis/listenMqtt.js

@@ -107,6 +107,12 @@ async function listenMqtt(defaultFuncs, api, ctx, globalCallback, scheduleReconn
     const sessionID = Math.floor(Math.random() * Number.MAX_SAFE_INTEGER) + 1;
     const cid = ctx.clientID;
     const cachedUA = ctx.globalOptions.cachedUserAgent || ctx.globalOptions.userAgent;
+    // Use app_id from Facebook's own page data (populated by buildAPI) when
+    // available. Hard-coded fallback is the Messenger web app ID.
+    const rawAppId = ctx.appID || ctx.mqttAppID || ctx.userAppID;
+    // Coerce to number safely — Number() of a non-numeric string yields NaN which
+    // serialises as null in JSON and breaks the MQTT CONNECT packet.
+    const mqttAid = rawAppId && !isNaN(Number(rawAppId)) ? Number(rawAppId) : 219994525426954;
     const username = {
         u: ctx.userID,
         s: sessionID,
@@ -114,7 +120,7 @@ async function listenMqtt(defaultFuncs, api, ctx, globalCallback, scheduleReconn
         fg: false,
         d: cid,
         ct: 'websocket',
-        aid: 219994525426954,
+        aid: mqttAid,
         aids: null,
         mqtt_sid: '',
         cp: 3,

package/src/apis/nickname.js

@@ -94,7 +94,7 @@ module.exports = function (defaultFuncs, api, ctx) {
     });
 
     const envelope = {
-      app_id: String(ctx.appID || ctx.mqttAppID || "2220391788200892"),
+      app_id: "2220391788200892",
       payload: JSON.stringify({
         epoch_id: generateEpochId(),
         tasks: [task],

package/src/apis/pinMessage.js

@@ -54,7 +54,7 @@ module.exports = function (defaultFuncs, api, ctx) {
 
       const epoch_id = parseInt(utils.generateOfflineThreadingID());
       const version_id = "9523201934447612";
-      const app_id = String(ctx.appID || ctx.mqttAppID || "2220391788200892");
+      const app_id = "2220391788200892";
 
       const createMqttRequest = (tasks, increment = 0) => ({
         app_id,

package/src/apis/sendMessage.js

@@ -166,7 +166,7 @@ module.exports = (defaultFuncs, api, ctx) => {
         const mention = msg.mentions[i];
         const tag = mention.tag;
         if (typeof tag !== "string") throw new Error("Mention tags must be strings.");
-        const offset = msg.body.indexOf(tag, mention.fromIndex || 0);
+        const offset = (msg.body || "").indexOf(tag, mention.fromIndex || 0);
         if (offset < 0) utils.warn("handleMention", 'Mention for "' + tag + '" not found in message string.');
         const id = mention.id || 0;
         const emptyChar = '\u200E';
@@ -286,51 +286,83 @@ module.exports = (defaultFuncs, api, ctx) => {
     }
 
     try {
+      // Apply anti-suspension delay and volume checks for ALL send paths
+      // (both MQTT and HTTP). This must run before transport selection so the
+      // circuit-breaker can block sends on either path.
       try {
-        const mqttReady = ctx.mqttClient && ctx.mqttClient.connected;
-        const isMultiRecipient = Array.isArray(threadID);
-        // Track which transport was used so the catch block can fall back to
-        // the OTHER transport — retrying the same one that just failed is useless.
-        const usedMqtt = mqttReady && !isMultiRecipient && api.sendMessageMqtt;
+        await globalAntiSuspension.prepareBeforeMessage(
+          Array.isArray(threadID) ? threadID[0] : threadID,
+          typeof msg === "string" ? msg : (msg.body || "")
+        );
+      } catch (suspensionErr) {
+        // Surface circuit-breaker and volume-limit errors directly to the caller
+        // instead of silently swallowing them. Bots MUST handle these to avoid
+        // triggering Facebook's automated-behavior detection.
+        return callback(suspensionErr);
+      }
+
+      const mqttReady = !!(ctx.mqttClient && ctx.mqttClient.connected);
+      const isMultiRecipient = Array.isArray(threadID);
+      // Primary transport: MQTT when connected (faster, lower overhead).
+      // Multi-recipient sends always use HTTP (MQTT only handles single thread).
+      const preferMqtt = mqttReady && !isMultiRecipient && !!api.sendMessageMqtt;
 
-        let result;
-        if (usedMqtt) {
+      let result;
+      let primaryErr;
+      let primaryOk = false;
+
+      try {
+        if (preferMqtt) {
           result = await api.sendMessageMqtt(msg, threadID, replyToMessage);
         } else {
           result = await sendViaHttp(msg, threadID, replyToMessage, isGroup);
         }
-        callback(null, result);
-      } catch (sendErr) {
-        // Fall back to the OTHER transport, not the one that just failed.
-        const mqttNowReady = ctx.mqttClient && ctx.mqttClient.connected;
-        const primaryWasMqtt = mqttNowReady && !Array.isArray(threadID) && api.sendMessageMqtt;
+        primaryOk = true;
+      } catch (err) {
+        primaryErr = err;
+      }
+
+      if (primaryOk) {
+        return callback(null, result);
+      }
+
+      // Primary transport failed — fall back to the OTHER transport.
+      let fallbackOk = false;
+      let fallbackErr;
 
-        if (primaryWasMqtt) {
-          // MQTT was used (or is available) — fall back to HTTP
+      if (preferMqtt) {
+        // MQTT was primary → fall back to HTTP
+        try {
+          result = await sendViaHttp(msg, threadID, replyToMessage, isGroup);
+          fallbackOk = true;
+        } catch (e) {
+          fallbackErr = e;
+        }
+      } else {
+        // HTTP was primary → fall back to MQTT if available
+        const mqttNow = !!(ctx.mqttClient && ctx.mqttClient.connected);
+        if (mqttNow && !isMultiRecipient && api.sendMessageMqtt) {
           try {
-            const httpRes = await sendViaHttp(msg, threadID, replyToMessage, isGroup);
-            callback(null, httpRes);
-          } catch (_httpErr) {
-            callback(sendErr);
+            result = await api.sendMessageMqtt(msg, threadID, replyToMessage);
+            fallbackOk = true;
+          } catch (e) {
+            fallbackErr = e;
           }
         } else {
-          // HTTP was used — try MQTT if it has since become available
-          if (mqttNowReady && !Array.isArray(threadID) && api.sendMessageMqtt) {
-            try {
-              const mqttRes = await api.sendMessageMqtt(msg, threadID, replyToMessage);
-              callback(null, mqttRes);
-            } catch (_mqttErr) {
-              callback(sendErr);
-            }
-          } else {
-            callback(sendErr);
-          }
+          fallbackErr = primaryErr;
         }
-      } finally {
-        if (typingTimeout) clearTimeout(typingTimeout);
-        if (typingStarted) {
-          try { await api.sendTypingIndicator(false, threadID); } catch (_) {}
+      }
+
+      if (fallbackOk) {
+        return callback(null, result);
+      } else {
+        // Both transports failed — report the primary error (most informative)
+        // with the fallback error attached for diagnostics.
+        const err = primaryErr;
+        if (err && fallbackErr && fallbackErr !== primaryErr) {
+          err.fallbackError = fallbackErr;
         }
+        return callback(err || fallbackErr);
       }
     } catch (err) {
       callback(err);

package/src/apis/sendMessageMqtt.js

@@ -1,7 +1,6 @@
 "use strict";
 
 const utils = require('../utils');
-const { globalAntiSuspension } = require('../utils/antiSuspension');
 
 module.exports = (defaultFuncs, api, ctx) => {
   function detectAttachmentType(attachment) {
@@ -143,14 +142,22 @@ module.exports = (defaultFuncs, api, ctx) => {
       replyToMessage = null;
     }
 
-    try {
-      await globalAntiSuspension.prepareBeforeMessage(String(threadID), typeof msg === "string" ? msg : (msg.body || ""));
-    } catch (_) {}
+    // Anti-suspension preparation (circuit-breaker check, smart delay, thread
+    // throttling, and daily-stat tracking) is the responsibility of the CALLER.
+    // When invoked through api.sendMessage(), preparation is already done there
+    // for ALL transport paths (both MQTT and HTTP).
+    //
+    // If you call api.sendMessageMqtt() directly (bypassing api.sendMessage()),
+    // call globalAntiSuspension.prepareBeforeMessage() yourself first and handle
+    // the circuit-breaker error it may throw — otherwise your bot has no protection.
 
     const normalized = typeof msg === "string" ? { body: msg } : msg;
     const baseBody = normalized.body != null ? String(normalized.body) : "";
     const epoch = (BigInt(Date.now()) << 22n).toString();
-    const requestId = Math.floor(100 + Math.random() * 900);
+    // Use monotonic ctx.wsReqNumber so concurrent sends never share the same
+    // request_id, which would cause the ACK listener to match the wrong response.
+    if (typeof ctx.wsReqNumber !== "number") ctx.wsReqNumber = 0;
+    const requestId = ++ctx.wsReqNumber;
     const otid = utils.generateOfflineThreadingID();
 
     const payload0 = {
@@ -222,6 +229,12 @@ module.exports = (defaultFuncs, api, ctx) => {
       payload0.attachment_fbids = files.map(f => String(Object.values(f)[0]));
     }
 
+    // Use monotonic task IDs so concurrent sends never reuse the same task_id
+    // within a session, which can confuse Facebook's MQTT deduplication.
+    if (typeof ctx.wsTaskNumber !== "number") ctx.wsTaskNumber = 0;
+    const taskId1 = ++ctx.wsTaskNumber;
+    const taskId2 = ++ctx.wsTaskNumber;
+
     const content = {
       app_id: "2220391788200892",
       payload: {
@@ -230,7 +243,7 @@ module.exports = (defaultFuncs, api, ctx) => {
             label: "46",
             payload: payload0,
             queue_name: String(threadID),
-            task_id: 400,
+            task_id: taskId1,
             failure_count: null,
           },
           {
@@ -241,7 +254,7 @@ module.exports = (defaultFuncs, api, ctx) => {
               sync_group: 1,
             },
             queue_name: String(threadID),
-            task_id: 401,
+            task_id: taskId2,
             failure_count: null,
           },
         ],

package/src/apis/setThreadThemeMqtt.js

@@ -47,16 +47,17 @@ module.exports = function (defaultFuncs, api, ctx) {
       });
 
       const messageDefs = [
-        { label: 1013, queue: ['ai_generated_theme', String(threadID)] },
-        { label: 1037, queue: ['msgr_custom_thread_theme', String(threadID)] },
-        { label: 1028, queue: ['thread_theme_writer', String(threadID)] },
-        { label: 43,   queue: 'thread_theme', extra: { source: null, payload: null } },
+        { label: 1013, queue: ['ai_generated_theme', String(threadID)], app_id: '772021112871879' },
+        { label: 1037, queue: ['msgr_custom_thread_theme', String(threadID)], app_id: '772021112871879' },
+        { label: 1028, queue: ['thread_theme_writer', String(threadID)], app_id: '772021112871879' },
+        // label "43" (thread_theme) is the standard FB operation — app_id "2220391788200892" (dongdev confirmed)
+        { label: 43,   queue: 'thread_theme', extra: { source: null, payload: null }, app_id: '2220391788200892' },
       ];
 
-      const messages = messageDefs.map(({ label, queue, extra }) => {
+      const messages = messageDefs.map(({ label, queue, extra, app_id }) => {
         ctx.wsReqNumber += 1;
         return {
-          app_id: '772021112871879',
+          app_id,
           payload: JSON.stringify({
             epoch_id: parseInt(utils.generateOfflineThreadingID()),
             tasks: [makeTask(label, queue, extra)],

package/src/apis/theme.js

@@ -150,11 +150,11 @@ module.exports = function (defaultFuncs, api, ctx) {
         };
 
         const context = {
-          app_id: ctx.appID,
+          app_id: '2220391788200892',
           payload: {
             epoch_id: currentEpochId,
             tasks: [query],
-            version_id: '24631415369801570',
+            version_id: '8798795233522156',
           },
           request_id: request_id,
           type: 3,

package/src/apis/unsendMessage.js

@@ -33,7 +33,7 @@ module.exports = function (defaultFuncs, api, ctx) {
       const taskId = ++ctx.wsTaskNumber;
 
       const content = {
-        app_id: String(ctx.appID || ctx.mqttAppID || "2220391788200892"),
+        app_id: "2220391788200892",
         payload: JSON.stringify({
           data_trace_id: null,
           epoch_id: parseInt(utils.generateOfflineThreadingID()),

package/src/utils/antiSuspension.js

@@ -461,7 +461,7 @@ class AntiSuspension {
 
     /**
      * Prepare before sending — single delay model.
-     * Enforces thread throttle and volume limits, respects circuit breaker.
+     * Enforces smart delay, thread throttle, and volume limits, respects circuit breaker.
      * If the circuit breaker is tripped (checkpoint/suspension detected) or
      * volume limits are reached, throws to protect the account.
      */

package/src/utils/autoReLogin.js

@@ -205,7 +205,10 @@ class AutoReLoginManager {
 
     async pauseAPIRequests() {
         utils.log("AutoReLogin", "Pausing API requests during re-login...");
-        await new Promise(resolve => setTimeout(resolve, 1000));
+        // Wait long enough for in-flight HTTP requests to drain before we start
+        // re-logging in. A 1s pause was too short — the session cookies could
+        // change mid-request, causing follow-up requests to arrive with stale auth.
+        await new Promise(resolve => setTimeout(resolve, 3000));
     }
 
     resolvePendingRequests(success) {

package/src/utils/headers.js

@@ -28,6 +28,9 @@ function sanitizeHeaders(headers) {
     const out = {};
     for (const [key, value] of Object.entries(headers)) {
         if (!key || typeof key !== 'string') continue;
+        // Skip undefined/null values — these are intentional omissions (e.g.
+        // 'Upgrade-Insecure-Requests' on XHR requests that browsers don't send).
+        if (value === undefined || value === null) continue;
         const cleanKey = key.replace(/[^\x21-\x7E]/g, '').trim();
         if (!cleanKey) continue;
         const cleanVal = sanitizeHeaderValue(value);
@@ -160,7 +163,9 @@ function getHeaders(url, options, ctx, customHeader, requestType = 'navigate') {
     const isLinux = secChUaPlatform === '"Linux"';
 
     const headers = {
-        'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,application/json;q=0.8,*/*;q=0.7',
+        'Accept': isXhr
+            ? 'application/json, text/plain, */*'
+            : 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7',
         'Accept-Language': locales,
         'Accept-Encoding': 'gzip, deflate, br',
         'Cache-Control': 'no-cache',
@@ -178,8 +183,11 @@ function getHeaders(url, options, ctx, customHeader, requestType = 'navigate') {
         'Sec-Fetch-Mode': isXhr ? 'cors' : 'navigate',
         'Sec-Fetch-Site': isXhr ? 'same-origin' : 'none',
         'User-Agent': userAgent,
-        'Upgrade-Insecure-Requests': '1',
-        'X-Requested-With': 'XMLHttpRequest'
+        'Upgrade-Insecure-Requests': isXhr ? undefined : '1',
+        // X-Requested-With is only sent by XHR calls, NOT by page navigations.
+        // Sending it on navigate requests is a clear bot-detection fingerprint
+        // because real browsers never include it for document loads.
+        ...(isXhr ? { 'X-Requested-With': 'XMLHttpRequest' } : {})
     };
 
     if (isWindows || isMac || isLinux) {

package/src/utils/lsRequest.js

@@ -122,7 +122,7 @@ function buildLsEnvelope(ctx, tasks, versionId = "25459622483894963") {
     const requestId = ++ctx.wsReqNumber;
 
     const envelope = {
-        app_id: String(ctx.appID || ctx.mqttAppID || "2220391788200892"),
+        app_id: "2220391788200892",
         payload: JSON.stringify({
             epoch_id: generateEpochId(),
             tasks,

package/src/utils/rateLimiter.js

@@ -14,8 +14,12 @@ class RateLimiter {
 
         this.ERROR_CACHE_TTL = 300000;
         this.COOLDOWN_DURATION = 60000;
-        this.MAX_REQUESTS_PER_MINUTE = 50;
-        this.MAX_CONCURRENT_REQUESTS = 5;
+        // Raised from 50 → 120 req/min. The old limit was too aggressive — it
+        // throttled legitimate API calls (thread info lookups, getSeqID, markAsRead
+        // etc.) and caused unnecessary delays that looked bot-like when many
+        // requests were queued. Facebook's actual rate-limiting kicks in far higher.
+        this.MAX_REQUESTS_PER_MINUTE = 120;
+        this.MAX_CONCURRENT_REQUESTS = 8;
 
         this.activeRequests = 0;
 
@@ -25,7 +29,9 @@ class RateLimiter {
 
         // Per-endpoint sliding windows
         this._endpointWindows = new Map();
-        this._MAX_PER_ENDPOINT_PER_MINUTE = 20;
+        // Raised from 20 → 40 req/min per endpoint. The old value throttled
+        // burst-write scenarios (e.g. thread hydration after reconnect) unnecessarily.
+        this._MAX_PER_ENDPOINT_PER_MINUTE = 40;
     }
 
     configure(opts = {}) {

package/src/utils/user-agents.js

@@ -4,25 +4,44 @@ const { getRandom } = require("./constants");
 const BROWSER_DATA = {
     windows: {
         platform: "Windows NT 10.0; Win64; x64",
-        chromeVersions: ["139.0.0.0", "131.0.6778.86", "130.0.6723.92", "129.0.6668.101", "128.0.6613.120", "127.0.6533.120"],
-        edgeVersions: ["139.0.0.0", "131.0.2903.51", "130.0.2849.68", "129.0.2792.89"],
+        // Ordered from newest to oldest so random selection skews toward current builds
+        chromeVersions: [
+            "137.0.0.0", "136.0.0.0", "135.0.0.0", "134.0.0.0", "133.0.0.0",
+            "132.0.6834.160", "131.0.6778.205", "130.0.6723.119", "129.0.6668.100"
+        ],
+        edgeVersions: [
+            "137.0.0.0", "136.0.0.0", "135.0.0.0", "134.0.0.0",
+            "133.0.3065.92", "132.0.2957.140", "131.0.2903.112"
+        ],
         platformVersion: '"15.0.0"'
     },
     mac: {
         platform: "Macintosh; Intel Mac OS X 10_15_7",
-        chromeVersions: ["139.0.0.0", "131.0.6778.86", "130.0.6723.92", "129.0.6668.101", "128.0.6613.120", "127.0.6533.120"],
-        edgeVersions: ["139.0.0.0", "131.0.2903.51", "130.0.2849.68", "129.0.2792.89"],
-        platformVersion: '"14.7.0"'
+        chromeVersions: [
+            "137.0.0.0", "136.0.0.0", "135.0.0.0", "134.0.0.0", "133.0.0.0",
+            "132.0.6834.160", "131.0.6778.205", "130.0.6723.119", "129.0.6668.100"
+        ],
+        edgeVersions: [
+            "137.0.0.0", "136.0.0.0", "135.0.0.0", "134.0.0.0",
+            "133.0.3065.92", "132.0.2957.140"
+        ],
+        platformVersion: '"14.7.1"'
     },
     linux: {
         platform: "X11; Linux x86_64",
-        chromeVersions: ["139.0.0.0", "131.0.6778.86", "130.0.6723.92", "129.0.6668.101", "128.0.6613.120"],
-        edgeVersions: ["139.0.0.0", "131.0.2903.51", "130.0.2849.68"],
+        chromeVersions: [
+            "137.0.0.0", "136.0.0.0", "135.0.0.0", "134.0.0.0",
+            "133.0.0.0", "132.0.6834.160", "131.0.6778.205"
+        ],
+        edgeVersions: [
+            "137.0.0.0", "136.0.0.0", "135.0.0.0",
+            "134.0.0.0", "133.0.3065.92"
+        ],
         platformVersion: '""'
     }
 };
 
-const defaultUserAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36";
+const defaultUserAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36";
 
 /**
  * Generates a realistic, randomized User-Agent string and related Sec-CH headers.
@@ -105,7 +124,7 @@ function randomFbav() {
 }
 
 function randomOrcaUA() {
-    const androidVersions = ["8.1.0", "9", "10", "11", "12", "13", "14"];
+    const androidVersions = ["10", "11", "12", "13", "14", "15"];
     const devices = [
         { brand: "samsung", model: "SM-G996B" },
         { brand: "samsung", model: "SM-S908E" },