@lazyneoaz/metachat 4.0.7 → 4.0.8

package/dist/index.cjs

@@ -25142,13 +25142,15 @@ function getHeaders(url2, options, ctx, customHeader) {
     headers["priority"] = "u=0, i";
   }
   if (isXhr) {
-    headers["X-Requested-With"] = "XMLHttpRequest";
-    headers["Pragma"] = "no-cache";
-    headers["Cache-Control"] = "no-cache";
+    if (!isGraphQl) {
+      headers["X-Requested-With"] = "XMLHttpRequest";
+      headers["Pragma"] = "no-cache";
+      headers["Cache-Control"] = "no-cache";
+    }
     headers["priority"] = "u=1, i";
   }
   if (isGraphQl) {
-    headers["x-asbd-id"] = "129477";
+    headers["x-asbd-id"] = String(ctx?.asbdId || DEFAULT_ASBD_ID);
     const lsd = ctx?.lsd || ctx?.fb_lsd;
     if (lsd) headers["x-fb-lsd"] = sanitizeHeaderValue2(lsd);
     const friendlyName = customHeader?.["x-fb-friendly-name"] || customHeader?.["X-Fb-Friendly-Name"];
@@ -25219,10 +25221,11 @@ function getFingerprintParams(options) {
     dpr: String(profile.devicePixelRatio)
   };
 }
-var meta;
+var DEFAULT_ASBD_ID, meta;
 var init_headers = __esm({
   "src/utils/headers.ts"() {
     init_user_agents();
+    DEFAULT_ASBD_ID = "359341";
     meta = (prop2) => new RegExp(`<meta property="${prop2}" content="([^"]*)"`);
   }
 });
@@ -75560,10 +75563,13 @@ __export(utils_exports2, {
   NUM_TO_MONTH: () => NUM_TO_MONTH,
   NetworkError: () => NetworkError,
   NotFoundError: () => NotFoundError,
+  PING_GRACE_MS: () => PING_GRACE_MS,
   PermissionError: () => PermissionError,
   RateLimitError: () => RateLimitError,
+  RealtimeHealth: () => RealtimeHealth,
   RecoverySupervisor: () => RecoverySupervisor,
   SESSION_COOKIE_NAMES: () => SESSION_COOKIE_NAMES,
+  SILENT_WINDOW_MS: () => SILENT_WINDOW_MS,
   TimeoutError: () => TimeoutError,
   ValidationError: () => ValidationError,
   WINDOW_MS: () => WINDOW_MS,
@@ -75588,6 +75594,7 @@ __export(utils_exports2, {
   delay: () => delay2,
   ensureCometTokens: () => ensureCometTokens,
   error: () => error,
+  extractAsbdId: () => extractAsbdId,
   extractAttachmentIds: () => extractAttachmentIds,
   extractCookies: () => extractCookies,
   extractCookiesFromBody: () => extractCookiesFromBody,
@@ -75638,6 +75645,7 @@ __export(utils_exports2, {
   invalidateCometTokens: () => invalidateCometTokens,
   isAuthFailure: () => isAuthFailure,
   isBreakerOpen: () => isBreakerOpen,
+  isLoggedOutDocument: () => isLoggedOutDocument,
   isReadableStream: () => isReadableStream2,
   isStaleTokenError: () => isStaleTokenError,
   json: () => json2,
@@ -75675,6 +75683,7 @@ __export(utils_exports2, {
   setProxy: () => setProxy2,
   sleep: () => sleep,
   startLiveness: () => startLiveness,
+  startRealtimeSupervisor: () => startRealtimeSupervisor,
   startRecovery: () => startRecovery,
   success: () => success,
   tripBreaker: () => tripBreaker,
@@ -91032,6 +91041,9 @@ function extractLsd(html3) {
 function extractDtsg(html3) {
   return getFrom3(html3, '["DTSGInitialData",[],{"token":"', '"}') || getFrom3(html3, 'name="fb_dtsg" value="', '"') || (html3.match(/"DTSGInitialData",\[\],\{"token":"([^"]+)"/) || [])[1] || "";
 }
+function extractAsbdId(html3) {
+  return (html3.match(/"asbd_id":(\d+)/) || [])[1] || (html3.match(/x-asbd-id["']?\s*[:=]\s*["']?(\d+)/i) || [])[1] || (html3.match(/"ASBD_ID":(\d+)/) || [])[1] || "";
+}
 function extractSpin(html3) {
   const out = {};
   const spinB = (html3.match(/"__spin_b":"([^"]+)"/) || [])[1];
@@ -91098,6 +91110,8 @@ async function ensureCometTokens(ctx, defaultFuncs, force = false) {
     const spin = extractSpin(html3);
     if (Object.keys(spin).length) ctx.__spin = { ...ctx.__spin || {}, ...spin };
     if (spin.__rev) ctx.revision = spin.__rev;
+    const asbd = extractAsbdId(html3);
+    if (asbd) ctx.asbdId = asbd;
     ctx.lsd = lsd;
     ctx.fb_dtsg = dtsg;
     ctx.jazoest = recomputeJazoest(dtsg);
@@ -91368,6 +91382,13 @@ function isAuthFailure(value) {
   }
   return false;
 }
+function isLoggedOutDocument(html3) {
+  if (typeof html3 !== "string" || html3.length < 200) return false;
+  if (!/<html/i.test(html3)) return false;
+  const hasAuthedTokens = /DTSGInitialData|"LSD",\[\]/.test(html3);
+  const looksLikeLogin = /name="(?:email|pass)"|id="email"|"login_form"|LoginForm|login_form/i.test(html3) || /Continue as |Use another profile|Create new account/i.test(html3) || /You must log in to continue|Please log in|log in to continue/i.test(html3);
+  return looksLikeLogin && !hasAuthedTokens;
+}
 async function withSessionRetry(ctx, defaultFuncs, operation, options = {}) {
   const attempts = Math.max(1, options.attempts ?? 2);
   let lastError;
@@ -91474,6 +91495,8 @@ async function warmUpSession(ctx, getter, options = {}) {
           const spin = extractSpin(html3);
           if (Object.keys(spin).length) ctx.__spin = { ...ctx.__spin || {}, ...spin };
           if (spin.__rev) ctx.revision = spin.__rev;
+          const asbd = extractAsbdId(html3);
+          if (asbd) ctx.asbdId = asbd;
           tokensSeeded = true;
         }
       } else if (url2.includes("/messages")) {
@@ -91673,7 +91696,15 @@ var RecoverySupervisor = class {
   async runOnce() {
     this.state.checks += 1;
     this.emit("check", `health check #${this.state.checks}`);
-    if (this.runtime.isAuthenticated()) {
+    let healthy = this.runtime.isAuthenticated();
+    if (healthy && this.runtime.probeLiveness) {
+      try {
+        healthy = await this.runtime.probeLiveness();
+      } catch {
+        healthy = true;
+      }
+    }
+    if (healthy) {
       this.markHealthy("session authenticated");
       return;
     }
@@ -91772,6 +91803,131 @@ function startRecovery(ctx, runtime, options = {}) {
   return supervisor;
 }
 
+// src/utils/realtime-health.ts
+init_pacing();
+var SILENT_WINDOW_MS = 6 * 60 * 1e3;
+var PING_GRACE_MS = 45 * 1e3;
+var RealtimeHealth = class {
+  constructor(now = () => Date.now()) {
+    this.now = now;
+    this.frames = 0;
+    this.lastFrameAt = 0;
+    this.connectedAt = 0;
+    this.probes = 0;
+    this.forcedReconnects = 0;
+    this.lastPingAt = 0;
+    this.startedAt = Date.now();
+    this.startedAt = this.now();
+  }
+  /** Record any inbound frame (message, pong, anything from the broker). */
+  noteFrame() {
+    this.frames += 1;
+    this.lastFrameAt = this.now();
+  }
+  /** Record a successful connect. */
+  noteConnected() {
+    this.connectedAt = this.now();
+    this.lastFrameAt = this.now();
+  }
+  /** Record that the transport reports itself disconnected. */
+  noteDisconnected() {
+    this.lastFrameAt = 0;
+  }
+  /** Record an active ping being sent. */
+  notePing() {
+    this.lastPingAt = this.now();
+  }
+  sinceLastFrame() {
+    const base = this.lastFrameAt || this.connectedAt || this.startedAt;
+    return this.now() - base;
+  }
+  /**
+   * Decide what to do about the current socket.
+   *
+   * - `disconnected` — the transport already knows it is down; reconnect.
+   * - `dead` — connected on paper, silent past the window, and a ping raised no
+   *   traffic within the grace period; reconnect.
+   * - `suspect` — silent past the window but a ping was only just sent; wait.
+   * - `quiet` — silent but inside the window; normal.
+   * - `healthy` — recent traffic.
+   */
+  verdict(connected) {
+    if (!connected) return "disconnected";
+    const silent = this.sinceLastFrame();
+    if (silent < SILENT_WINDOW_MS / 2) return "healthy";
+    if (silent < SILENT_WINDOW_MS) return "quiet";
+    if (this.lastPingAt && this.now() - this.lastPingAt < PING_GRACE_MS) return "suspect";
+    return "dead";
+  }
+  /** A snapshot for diagnostics. */
+  state(connected) {
+    return {
+      connected,
+      sinceLastFrameMs: this.sinceLastFrame(),
+      frames: this.frames,
+      probes: this.probes,
+      forcedReconnects: this.forcedReconnects,
+      verdict: this.verdict(connected)
+    };
+  }
+  noteProbe() {
+    this.probes += 1;
+  }
+  noteForcedReconnect() {
+    this.forcedReconnects += 1;
+  }
+};
+function startRealtimeSupervisor(options) {
+  const health = new RealtimeHealth();
+  const interval = options.intervalMs ?? 3 * 60 * 1e3;
+  let stopped = false;
+  let timer = null;
+  const evaluate = () => {
+    const connected = options.isConnected();
+    const verdict = health.verdict(connected);
+    health.noteProbe();
+    if (verdict === "dead") {
+      const pingSent = options.ping ? options.ping() : false;
+      if (pingSent) {
+        health.notePing();
+      } else {
+        health.noteForcedReconnect();
+        options.reconnect("realtime socket silent and unpinnable");
+      }
+    }
+    const state = health.state(connected);
+    try {
+      options.onVerdict?.(state);
+    } catch {
+    }
+    return state;
+  };
+  const schedule = () => {
+    if (stopped) return;
+    timer = setTimeout(
+      () => {
+        timer = null;
+        evaluate();
+        schedule();
+      },
+      Math.max(1e3, humanDelay(interval, interval * 0.3))
+    );
+    if (timer && typeof timer.unref === "function") timer.unref();
+  };
+  schedule();
+  return {
+    health,
+    checkNow: evaluate,
+    stop: () => {
+      stopped = true;
+      if (timer) {
+        clearTimeout(timer);
+        timer = null;
+      }
+    }
+  };
+}
+
 // src/utils/index.ts
 async function json2(url2, jar2, qs2, options, ctx, customHeader) {
   try {
@@ -91989,6 +92145,7 @@ async function buildAPI(html3, jar2, netData, globalOptions, fbLinkFunc, errorRe
   const lsd = lsdConfig && lsdConfig.token || extractLsd(html3) || void 0;
   const spin = extractSpin(html3);
   const revision = spin.__rev || getFrom(html3, 'revision":', ",").trim();
+  const asbdId = extractAsbdId(html3) || void 0;
   const clientIDData = findConfig("MqttWebDeviceID");
   const clientID = clientIDData ? clientIDData.clientID : void 0;
   const mqttConfigData = findConfig("MqttWebConfig");
@@ -92030,7 +92187,8 @@ async function buildAPI(html3, jar2, netData, globalOptions, fbLinkFunc, errorRe
     ...dtsgResult,
     ...lsd ? { lsd } : {},
     ...Object.keys(spin).length ? { __spin: spin } : {},
-    ...revision ? { revision } : {}
+    ...revision ? { revision } : {},
+    ...asbdId ? { asbdId } : {}
   };
   if (lsd && dtsg) {
     ctx.__cometTokens = { lsd, fb_dtsg: dtsg, fetchedAt: Date.now(), failures: 0 };
@@ -100728,7 +100886,9 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
     attempts: 0,
     delay: MQTT_CONFIG.INITIAL_RETRY_DELAY,
     throttleDelay: MQTT_CONFIG.THROTTLE_DELAY,
-    generation: 0
+    generation: 0,
+    health: null,
+    healthSupervisor: null
   };
   const log2 = (...args) => log(...args);
   function clearReconnectTimer() {
@@ -100742,6 +100902,13 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
       clearInterval(lifecycle.presenceInterval);
       lifecycle.presenceInterval = null;
     }
+    if (lifecycle.healthSupervisor) {
+      try {
+        lifecycle.healthSupervisor.stop();
+      } catch (_3) {
+      }
+      lifecycle.healthSupervisor = null;
+    }
     clearReconnectTimer();
   }
   function destroyClient() {
@@ -100869,6 +101036,8 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
       });
       lifecycle.client = client2;
       ctx.mqttClient = client2;
+      const health = new RealtimeHealth();
+      lifecycle.health = health;
       let connected = false;
       let closing = false;
       let throttled = false;
@@ -100888,12 +101057,14 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
         if (generation !== lifecycle.generation) return;
         connected = false;
         ctx.mqttConnected = false;
+        health.noteDisconnected();
       });
       client2.on("close", () => {
         if (generation !== lifecycle.generation) return;
         if (connected) log2("MQTT connection closed.");
         connected = false;
         ctx.mqttConnected = false;
+        health.noteDisconnected();
         if (closing) return;
         closing = true;
         if (authFailure) {
@@ -100911,6 +101082,7 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
       client2.on("connect", () => {
         if (generation !== lifecycle.generation) return;
         connected = true;
+        health.noteConnected();
         client2.subscribe(MQTT_TOPICS, (subErr) => {
           if (subErr) {
             error("Failed to subscribe to MQTT topics:", subErr);
@@ -100947,6 +101119,49 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
           ctx.mqttConnected = true;
           ctx.lastMqttError = null;
           resetBackoff();
+          if (lifecycle.healthSupervisor) {
+            try {
+              lifecycle.healthSupervisor.stop();
+            } catch (_3) {
+            }
+          }
+          lifecycle.healthSupervisor = startRealtimeSupervisor({
+            isConnected: () => generation === lifecycle.generation && client2.connected,
+            reconnect: (reason) => {
+              if (generation !== lifecycle.generation) return;
+              if (lifecycle.stopped || ctx.loggedIn === false) return;
+              log2(`MQTT ${reason}; recycling the socket`);
+              try {
+                client2.end(true);
+              } catch (_3) {
+              }
+              const gen = generation;
+              setTimeout(() => {
+                if (gen !== lifecycle.generation) return;
+                if (lifecycle.stopped || ctx.loggedIn === false) return;
+                if (lifecycle.client && lifecycle.client.connected) return;
+                if (lifecycle.reconnectTimer) return;
+                scheduleReconnect("realtime socket recycled");
+              }, 5e3).unref?.();
+            },
+            ping: () => {
+              try {
+                client2.ping();
+                return true;
+              } catch {
+                return false;
+              }
+            },
+            onVerdict: (state) => {
+              if (state.verdict === "dead") {
+                warn(
+                  "MQTT health",
+                  `silent for ${Math.round(state.sinceLastFrameMs / 1e3)}s; probing`
+                );
+              }
+            }
+          });
+          ctx.__mqttHealth = () => lifecycle.health ? lifecycle.health.state(generation === lifecycle.generation && !!client2.connected) : null;
           api.getBotInitialData().then((botData) => {
             if (botData) {
               log(`Logged in as: ${botData.name || "Facebook User"} (${botData.uid || ctx.userID})`);
@@ -100957,6 +101172,7 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
       });
       client2.on("message", async (topic, message, _packet) => {
         try {
+          health.noteFrame();
           ctx.lastMessageTime = Date.now();
           ctx.messageCount = (ctx.messageCount || 0) + 1;
           const jsonMessage = JSON.parse(message.toString());
@@ -101042,6 +101258,16 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
         this.stop();
         if (typeof cb === "function") cb();
       }
+      /** Live connection-health snapshot, for diagnostics/alerting. */
+      getHealth() {
+        if (!lifecycle.health) return null;
+        const connected = !lifecycle.stopped && !!lifecycle.client && !!lifecycle.client.connected;
+        return lifecycle.health.state(connected);
+      }
+      /** Is this listener currently stopped? */
+      isStopped() {
+        return lifecycle.stopped;
+      }
     }
     const msgEmitter = new MessageEmitter();
     lifecycle.stopped = false;
@@ -101363,6 +101589,22 @@ async function loginHelper(credentials, globalOptions, callback, setOptionsFunc,
         {
           ctx,
           isAuthenticated: () => hasAuthenticatedSession(ctx.jar),
+          probeLiveness: async () => {
+            try {
+              const res = await defaultFuncs.get(
+                "https://www.facebook.com/",
+                ctx.jar,
+                null,
+                ctx.globalOptions,
+                { noRef: true }
+              );
+              const html3 = typeof res === "string" ? res : res && res.body;
+              if (typeof html3 !== "string" || !html3) return true;
+              return !isLoggedOutDocument(html3);
+            } catch {
+              return true;
+            }
+          },
           refresh: () => repairSession(ctx, defaultFuncs),
           canRelogin: Boolean(credentials.email && credentials.password),
           relogin: async () => {
@@ -101591,7 +101833,10 @@ lodash/lodash.js:
    *)
 */
 
+exports.PING_GRACE_MS = PING_GRACE_MS;
+exports.RealtimeHealth = RealtimeHealth;
 exports.RecoverySupervisor = RecoverySupervisor;
+exports.SILENT_WINDOW_MS = SILENT_WINDOW_MS;
 exports.acquireCookies = acquireCookies;
 exports.applySetCookie = applySetCookie;
 exports.awaitProactiveSlot = awaitProactiveSlot;
@@ -101612,6 +101857,7 @@ exports.humanDelay = humanDelay;
 exports.invalidateCometTokens = invalidateCometTokens;
 exports.isAuthFailure = isAuthFailure;
 exports.isBreakerOpen = isBreakerOpen;
+exports.isLoggedOutDocument = isLoggedOutDocument;
 exports.isStaleTokenError = isStaleTokenError;
 exports.login = login;
 exports.missingSessionCookies = missingSessionCookies;
@@ -101632,6 +101878,7 @@ exports.retryDelay = retryDelay;
 exports.safetySnapshot = safetySnapshot;
 exports.sleep = sleep;
 exports.startLiveness = startLiveness;
+exports.startRealtimeSupervisor = startRealtimeSupervisor;
 exports.startRecovery = startRecovery;
 exports.tripBreaker = tripBreaker;
 exports.warmUpSession = warmUpSession;

package/dist/index.d.mts

@@ -145,6 +145,8 @@ interface ApiContext$1 {
     fb_dtsg?: string;
     jazoest?: string;
     lsd?: string;
+    /** App-scoped abuse id (`x-asbd-id`) scraped from the current document. */
+    asbdId?: string;
     ttstamp?: string;
     threadTypeCache?: Record<string, boolean>;
     lastMessageTime?: number;
@@ -733,6 +735,16 @@ declare function refreshSessionCookies(ctx: any, defaultFuncs: any, options?: {
 }>;
 /** Detect an auth/document-token failure in a thrown or returned payload. */
 declare function isAuthFailure(value: any): boolean;
+/**
+ * Detect a logged-out document.
+ *
+ * When Facebook invalidates a session it does not always answer with an auth
+ * error code: it serves the login page, or (when the browser/device is still
+ * trusted) the one-tap "Continue as <name>" interstitial. Both look like a
+ * normal `200 text/html`, so a session can silently become useless. Recognising
+ * the document lets the caller re-authenticate instead of limping along.
+ */
+declare function isLoggedOutDocument(html: any): boolean;
 /**
  * Wrap a network operation with one repair-and-retry pass.
  *
@@ -1007,6 +1019,13 @@ interface RecoveryRuntime {
     ctx: any;
     /** True when the jar still holds a usable session. Cheap, synchronous. */
     isAuthenticated: () => boolean;
+    /**
+     * Active server-side liveness check. Distinct from {@link isAuthenticated}:
+     * the jar can still look authenticated locally while Facebook has already
+     * invalidated the session server-side (the "Continue as <name>" page). When
+     * provided, the supervisor trusts this over the cheap local check.
+     */
+    probeLiveness?: () => Promise<boolean>;
     /** Refresh cookies/tokens in place; resolves to whether auth survived. */
     refresh: () => Promise<boolean>;
     /**
@@ -1084,6 +1103,107 @@ declare class RecoverySupervisor {
  */
 declare function startRecovery(ctx: any, runtime: RecoveryRuntime, options?: RecoveryOptions): RecoverySupervisor;
 
+/**
+ * MQTT connection health.
+ *
+ * A Messenger realtime socket fails in two ways:
+ *
+ *  1. **Loudly** — TCP drop, broker close, auth error. mqtt.js raises `close`
+ *     and the listener reconnects. Easy.
+ *  2. **Silently** — the socket stays "connected" but Facebook has stopped
+ *     routing events to it (a half-open connection, a broker-side idle reap, a
+ *     revoked session). No error is emitted, `client.connected` stays `true`,
+ *     and from the bot's point of view it is online while receiving nothing.
+ *
+ * Case 2 is why bots are traditionally torn down and restarted on a timer:
+ * there was no way to tell a healthy quiet socket from a dead one. This module
+ * provides that signal, so the socket can stay up indefinitely and only ever be
+ * recycled when it is *actually* broken.
+ *
+ * The detector is deliberately conservative — real accounts genuinely go quiet
+ * for long stretches, so it only acts when the socket has been silent for a
+ * long window AND an active ping fails to elicit any traffic.
+ */
+/** No traffic and no pong for this long => the socket is suspect. */
+declare const SILENT_WINDOW_MS: number;
+/** How long to wait for traffic after an active ping before declaring death. */
+declare const PING_GRACE_MS: number;
+interface RealtimeHealthState {
+    /** Whether the transport currently reports itself connected. */
+    connected: boolean;
+    /** ms since the last inbound frame (or since connect when none seen yet). */
+    sinceLastFrameMs: number;
+    /** Total inbound frames observed. */
+    frames: number;
+    /** Completed health probes. */
+    probes: number;
+    /** Times the health check forced a reconnect. */
+    forcedReconnects: number;
+    /** The last determined verdict. */
+    verdict: "healthy" | "quiet" | "suspect" | "dead" | "disconnected";
+}
+/**
+ * Tracks liveness of one realtime connection. Instances are cheap and are
+ * recreated per connection generation by the listener.
+ */
+declare class RealtimeHealth {
+    private now;
+    private frames;
+    private lastFrameAt;
+    private connectedAt;
+    private probes;
+    private forcedReconnects;
+    private lastPingAt;
+    private startedAt;
+    constructor(now?: () => number);
+    /** Record any inbound frame (message, pong, anything from the broker). */
+    noteFrame(): void;
+    /** Record a successful connect. */
+    noteConnected(): void;
+    /** Record that the transport reports itself disconnected. */
+    noteDisconnected(): void;
+    /** Record an active ping being sent. */
+    notePing(): void;
+    sinceLastFrame(): number;
+    /**
+     * Decide what to do about the current socket.
+     *
+     * - `disconnected` — the transport already knows it is down; reconnect.
+     * - `dead` — connected on paper, silent past the window, and a ping raised no
+     *   traffic within the grace period; reconnect.
+     * - `suspect` — silent past the window but a ping was only just sent; wait.
+     * - `quiet` — silent but inside the window; normal.
+     * - `healthy` — recent traffic.
+     */
+    verdict(connected: boolean): RealtimeHealthState["verdict"];
+    /** A snapshot for diagnostics. */
+    state(connected: boolean): RealtimeHealthState;
+    noteProbe(): void;
+    noteForcedReconnect(): void;
+}
+interface RealtimeSupervisorOptions {
+    /** How often to evaluate the socket. Jittered. Default 3 min. */
+    intervalMs?: number;
+    /** Ask the transport to reconnect (fresh socket) — must be idempotent. */
+    reconnect: (reason: string) => void;
+    /** Send an MQTT ping. Return false if it could not be sent. */
+    ping?: () => boolean;
+    /** Whether the transport currently reports connected. */
+    isConnected: () => boolean;
+    /** Observe verdict changes (logging). */
+    onVerdict?: (state: RealtimeHealthState) => void;
+}
+/**
+ * A lightweight supervisor that keeps ONE realtime socket honest: it pings a
+ * long-quiet socket and recycles only a genuinely dead one. It never restarts a
+ * socket that is simply idle, which is what lets the connection live for days.
+ */
+declare function startRealtimeSupervisor(options: RealtimeSupervisorOptions): {
+    health: RealtimeHealth;
+    stop: () => void;
+    checkNow: () => RealtimeHealthState;
+};
+
 /** Extract the `CurrentUserInitialData` object from a profile HTML document. */
 declare function extractCurrentUser(html: any): Record<string, any> | null;
 
@@ -1125,4 +1245,4 @@ declare const _default: typeof login$1 & {
     default: typeof login$1;
 };
 
-export { type API, type AddedStickerPackInfo, type AiTheme, type AnyAttachment, type ApiContext, type ApiInternal, type Attachment, type AudioAttachment, type BrowserProfile, type Callback, type CommentMessage, type CommentResult, type Coordinates, type DefaultFuncs, type EmojiEvent, type Event, type FileAttachment, type GroupNameEvent, type ListenEvent, type LivenessHandle, type LivenessState, type LoginCredentials, type LoginOptions, type Mention, type Message, type MessageID, type MessageObject, type MessageReply, type MusicTag, type MusicTrack, type NicknameEvent, type PhotoAttachment, type Reaction, type RecoveryEvent, type RecoveryOptions, type RecoveryRuntime, type RecoveryState, RecoverySupervisor, type SearchMusicOptions, type SearchMusicResult, type ShareAttachment, type ShareResult, type StickerAttachment, type StickerInfo, type StickerPackInfo, type ThreadID, type ThreadInfo, type ThreadThemeEvent, type TypingIndicator, type UnsendMessageEvent, type UserID, type UserInfo, type VideoAttachment, type WarmUpResult, acquireCookies, applySetCookie, awaitProactiveSlot, canActProactively, collectSessionCookies, _default as default, defaultBrowserProfile, ensureCometTokens, extractCookies, extractCookiesFromBody, extractCookiesFromJar, extractCookiesFromSetCookie, extractCurrentUser, getFingerprintParams, getHeaders, getWebSocketHeaders, hasAuthenticatedSession, humanDelay, invalidateCometTokens, isAuthFailure, isBreakerOpen, isStaleTokenError, login$1 as login, missingSessionCookies, normalizeBrowserProfile, noteAction, noteAuthFailure, noteCheckpoint, noteRateLimit, paceRequest, publicTypes, randomUserAgent, refreshSessionCookies, repairSession, reserveRequest, resetBreaker, resolveProfile, retryDelay, safetySnapshot, sleep, startLiveness, startRecovery, tripBreaker, warmUpSession, withCometTokens, withSessionRetry };
+export { type API, type AddedStickerPackInfo, type AiTheme, type AnyAttachment, type ApiContext, type ApiInternal, type Attachment, type AudioAttachment, type BrowserProfile, type Callback, type CommentMessage, type CommentResult, type Coordinates, type DefaultFuncs, type EmojiEvent, type Event, type FileAttachment, type GroupNameEvent, type ListenEvent, type LivenessHandle, type LivenessState, type LoginCredentials, type LoginOptions, type Mention, type Message, type MessageID, type MessageObject, type MessageReply, type MusicTag, type MusicTrack, type NicknameEvent, PING_GRACE_MS, type PhotoAttachment, type Reaction, RealtimeHealth, type RealtimeHealthState, type RecoveryEvent, type RecoveryOptions, type RecoveryRuntime, type RecoveryState, RecoverySupervisor, SILENT_WINDOW_MS, type SearchMusicOptions, type SearchMusicResult, type ShareAttachment, type ShareResult, type StickerAttachment, type StickerInfo, type StickerPackInfo, type ThreadID, type ThreadInfo, type ThreadThemeEvent, type TypingIndicator, type UnsendMessageEvent, type UserID, type UserInfo, type VideoAttachment, type WarmUpResult, acquireCookies, applySetCookie, awaitProactiveSlot, canActProactively, collectSessionCookies, _default as default, defaultBrowserProfile, ensureCometTokens, extractCookies, extractCookiesFromBody, extractCookiesFromJar, extractCookiesFromSetCookie, extractCurrentUser, getFingerprintParams, getHeaders, getWebSocketHeaders, hasAuthenticatedSession, humanDelay, invalidateCometTokens, isAuthFailure, isBreakerOpen, isLoggedOutDocument, isStaleTokenError, login$1 as login, missingSessionCookies, normalizeBrowserProfile, noteAction, noteAuthFailure, noteCheckpoint, noteRateLimit, paceRequest, publicTypes, randomUserAgent, refreshSessionCookies, repairSession, reserveRequest, resetBreaker, resolveProfile, retryDelay, safetySnapshot, sleep, startLiveness, startRealtimeSupervisor, startRecovery, tripBreaker, warmUpSession, withCometTokens, withSessionRetry };

package/dist/index.d.ts

@@ -145,6 +145,8 @@ interface ApiContext$1 {
     fb_dtsg?: string;
     jazoest?: string;
     lsd?: string;
+    /** App-scoped abuse id (`x-asbd-id`) scraped from the current document. */
+    asbdId?: string;
     ttstamp?: string;
     threadTypeCache?: Record<string, boolean>;
     lastMessageTime?: number;
@@ -733,6 +735,16 @@ declare function refreshSessionCookies(ctx: any, defaultFuncs: any, options?: {
 }>;
 /** Detect an auth/document-token failure in a thrown or returned payload. */
 declare function isAuthFailure(value: any): boolean;
+/**
+ * Detect a logged-out document.
+ *
+ * When Facebook invalidates a session it does not always answer with an auth
+ * error code: it serves the login page, or (when the browser/device is still
+ * trusted) the one-tap "Continue as <name>" interstitial. Both look like a
+ * normal `200 text/html`, so a session can silently become useless. Recognising
+ * the document lets the caller re-authenticate instead of limping along.
+ */
+declare function isLoggedOutDocument(html: any): boolean;
 /**
  * Wrap a network operation with one repair-and-retry pass.
  *
@@ -1007,6 +1019,13 @@ interface RecoveryRuntime {
     ctx: any;
     /** True when the jar still holds a usable session. Cheap, synchronous. */
     isAuthenticated: () => boolean;
+    /**
+     * Active server-side liveness check. Distinct from {@link isAuthenticated}:
+     * the jar can still look authenticated locally while Facebook has already
+     * invalidated the session server-side (the "Continue as <name>" page). When
+     * provided, the supervisor trusts this over the cheap local check.
+     */
+    probeLiveness?: () => Promise<boolean>;
     /** Refresh cookies/tokens in place; resolves to whether auth survived. */
     refresh: () => Promise<boolean>;
     /**
@@ -1084,6 +1103,107 @@ declare class RecoverySupervisor {
  */
 declare function startRecovery(ctx: any, runtime: RecoveryRuntime, options?: RecoveryOptions): RecoverySupervisor;
 
+/**
+ * MQTT connection health.
+ *
+ * A Messenger realtime socket fails in two ways:
+ *
+ *  1. **Loudly** — TCP drop, broker close, auth error. mqtt.js raises `close`
+ *     and the listener reconnects. Easy.
+ *  2. **Silently** — the socket stays "connected" but Facebook has stopped
+ *     routing events to it (a half-open connection, a broker-side idle reap, a
+ *     revoked session). No error is emitted, `client.connected` stays `true`,
+ *     and from the bot's point of view it is online while receiving nothing.
+ *
+ * Case 2 is why bots are traditionally torn down and restarted on a timer:
+ * there was no way to tell a healthy quiet socket from a dead one. This module
+ * provides that signal, so the socket can stay up indefinitely and only ever be
+ * recycled when it is *actually* broken.
+ *
+ * The detector is deliberately conservative — real accounts genuinely go quiet
+ * for long stretches, so it only acts when the socket has been silent for a
+ * long window AND an active ping fails to elicit any traffic.
+ */
+/** No traffic and no pong for this long => the socket is suspect. */
+declare const SILENT_WINDOW_MS: number;
+/** How long to wait for traffic after an active ping before declaring death. */
+declare const PING_GRACE_MS: number;
+interface RealtimeHealthState {
+    /** Whether the transport currently reports itself connected. */
+    connected: boolean;
+    /** ms since the last inbound frame (or since connect when none seen yet). */
+    sinceLastFrameMs: number;
+    /** Total inbound frames observed. */
+    frames: number;
+    /** Completed health probes. */
+    probes: number;
+    /** Times the health check forced a reconnect. */
+    forcedReconnects: number;
+    /** The last determined verdict. */
+    verdict: "healthy" | "quiet" | "suspect" | "dead" | "disconnected";
+}
+/**
+ * Tracks liveness of one realtime connection. Instances are cheap and are
+ * recreated per connection generation by the listener.
+ */
+declare class RealtimeHealth {
+    private now;
+    private frames;
+    private lastFrameAt;
+    private connectedAt;
+    private probes;
+    private forcedReconnects;
+    private lastPingAt;
+    private startedAt;
+    constructor(now?: () => number);
+    /** Record any inbound frame (message, pong, anything from the broker). */
+    noteFrame(): void;
+    /** Record a successful connect. */
+    noteConnected(): void;
+    /** Record that the transport reports itself disconnected. */
+    noteDisconnected(): void;
+    /** Record an active ping being sent. */
+    notePing(): void;
+    sinceLastFrame(): number;
+    /**
+     * Decide what to do about the current socket.
+     *
+     * - `disconnected` — the transport already knows it is down; reconnect.
+     * - `dead` — connected on paper, silent past the window, and a ping raised no
+     *   traffic within the grace period; reconnect.
+     * - `suspect` — silent past the window but a ping was only just sent; wait.
+     * - `quiet` — silent but inside the window; normal.
+     * - `healthy` — recent traffic.
+     */
+    verdict(connected: boolean): RealtimeHealthState["verdict"];
+    /** A snapshot for diagnostics. */
+    state(connected: boolean): RealtimeHealthState;
+    noteProbe(): void;
+    noteForcedReconnect(): void;
+}
+interface RealtimeSupervisorOptions {
+    /** How often to evaluate the socket. Jittered. Default 3 min. */
+    intervalMs?: number;
+    /** Ask the transport to reconnect (fresh socket) — must be idempotent. */
+    reconnect: (reason: string) => void;
+    /** Send an MQTT ping. Return false if it could not be sent. */
+    ping?: () => boolean;
+    /** Whether the transport currently reports connected. */
+    isConnected: () => boolean;
+    /** Observe verdict changes (logging). */
+    onVerdict?: (state: RealtimeHealthState) => void;
+}
+/**
+ * A lightweight supervisor that keeps ONE realtime socket honest: it pings a
+ * long-quiet socket and recycles only a genuinely dead one. It never restarts a
+ * socket that is simply idle, which is what lets the connection live for days.
+ */
+declare function startRealtimeSupervisor(options: RealtimeSupervisorOptions): {
+    health: RealtimeHealth;
+    stop: () => void;
+    checkNow: () => RealtimeHealthState;
+};
+
 /** Extract the `CurrentUserInitialData` object from a profile HTML document. */
 declare function extractCurrentUser(html: any): Record<string, any> | null;
 
@@ -1125,4 +1245,4 @@ declare const _default: typeof login$1 & {
     default: typeof login$1;
 };
 
-export { type API, type AddedStickerPackInfo, type AiTheme, type AnyAttachment, type ApiContext, type ApiInternal, type Attachment, type AudioAttachment, type BrowserProfile, type Callback, type CommentMessage, type CommentResult, type Coordinates, type DefaultFuncs, type EmojiEvent, type Event, type FileAttachment, type GroupNameEvent, type ListenEvent, type LivenessHandle, type LivenessState, type LoginCredentials, type LoginOptions, type Mention, type Message, type MessageID, type MessageObject, type MessageReply, type MusicTag, type MusicTrack, type NicknameEvent, type PhotoAttachment, type Reaction, type RecoveryEvent, type RecoveryOptions, type RecoveryRuntime, type RecoveryState, RecoverySupervisor, type SearchMusicOptions, type SearchMusicResult, type ShareAttachment, type ShareResult, type StickerAttachment, type StickerInfo, type StickerPackInfo, type ThreadID, type ThreadInfo, type ThreadThemeEvent, type TypingIndicator, type UnsendMessageEvent, type UserID, type UserInfo, type VideoAttachment, type WarmUpResult, acquireCookies, applySetCookie, awaitProactiveSlot, canActProactively, collectSessionCookies, _default as default, defaultBrowserProfile, ensureCometTokens, extractCookies, extractCookiesFromBody, extractCookiesFromJar, extractCookiesFromSetCookie, extractCurrentUser, getFingerprintParams, getHeaders, getWebSocketHeaders, hasAuthenticatedSession, humanDelay, invalidateCometTokens, isAuthFailure, isBreakerOpen, isStaleTokenError, login$1 as login, missingSessionCookies, normalizeBrowserProfile, noteAction, noteAuthFailure, noteCheckpoint, noteRateLimit, paceRequest, publicTypes, randomUserAgent, refreshSessionCookies, repairSession, reserveRequest, resetBreaker, resolveProfile, retryDelay, safetySnapshot, sleep, startLiveness, startRecovery, tripBreaker, warmUpSession, withCometTokens, withSessionRetry };
+export { type API, type AddedStickerPackInfo, type AiTheme, type AnyAttachment, type ApiContext, type ApiInternal, type Attachment, type AudioAttachment, type BrowserProfile, type Callback, type CommentMessage, type CommentResult, type Coordinates, type DefaultFuncs, type EmojiEvent, type Event, type FileAttachment, type GroupNameEvent, type ListenEvent, type LivenessHandle, type LivenessState, type LoginCredentials, type LoginOptions, type Mention, type Message, type MessageID, type MessageObject, type MessageReply, type MusicTag, type MusicTrack, type NicknameEvent, PING_GRACE_MS, type PhotoAttachment, type Reaction, RealtimeHealth, type RealtimeHealthState, type RecoveryEvent, type RecoveryOptions, type RecoveryRuntime, type RecoveryState, RecoverySupervisor, SILENT_WINDOW_MS, type SearchMusicOptions, type SearchMusicResult, type ShareAttachment, type ShareResult, type StickerAttachment, type StickerInfo, type StickerPackInfo, type ThreadID, type ThreadInfo, type ThreadThemeEvent, type TypingIndicator, type UnsendMessageEvent, type UserID, type UserInfo, type VideoAttachment, type WarmUpResult, acquireCookies, applySetCookie, awaitProactiveSlot, canActProactively, collectSessionCookies, _default as default, defaultBrowserProfile, ensureCometTokens, extractCookies, extractCookiesFromBody, extractCookiesFromJar, extractCookiesFromSetCookie, extractCurrentUser, getFingerprintParams, getHeaders, getWebSocketHeaders, hasAuthenticatedSession, humanDelay, invalidateCometTokens, isAuthFailure, isBreakerOpen, isLoggedOutDocument, isStaleTokenError, login$1 as login, missingSessionCookies, normalizeBrowserProfile, noteAction, noteAuthFailure, noteCheckpoint, noteRateLimit, paceRequest, publicTypes, randomUserAgent, refreshSessionCookies, repairSession, reserveRequest, resetBreaker, resolveProfile, retryDelay, safetySnapshot, sleep, startLiveness, startRealtimeSupervisor, startRecovery, tripBreaker, warmUpSession, withCometTokens, withSessionRetry };

package/dist/index.mjs

@@ -25107,13 +25107,15 @@ function getHeaders(url2, options, ctx, customHeader) {
     headers["priority"] = "u=0, i";
   }
   if (isXhr) {
-    headers["X-Requested-With"] = "XMLHttpRequest";
-    headers["Pragma"] = "no-cache";
-    headers["Cache-Control"] = "no-cache";
+    if (!isGraphQl) {
+      headers["X-Requested-With"] = "XMLHttpRequest";
+      headers["Pragma"] = "no-cache";
+      headers["Cache-Control"] = "no-cache";
+    }
     headers["priority"] = "u=1, i";
   }
   if (isGraphQl) {
-    headers["x-asbd-id"] = "129477";
+    headers["x-asbd-id"] = String(ctx?.asbdId || DEFAULT_ASBD_ID);
     const lsd = ctx?.lsd || ctx?.fb_lsd;
     if (lsd) headers["x-fb-lsd"] = sanitizeHeaderValue2(lsd);
     const friendlyName = customHeader?.["x-fb-friendly-name"] || customHeader?.["X-Fb-Friendly-Name"];
@@ -25184,10 +25186,11 @@ function getFingerprintParams(options) {
     dpr: String(profile.devicePixelRatio)
   };
 }
-var meta;
+var DEFAULT_ASBD_ID, meta;
 var init_headers = __esm({
   "src/utils/headers.ts"() {
     init_user_agents();
+    DEFAULT_ASBD_ID = "359341";
     meta = (prop2) => new RegExp(`<meta property="${prop2}" content="([^"]*)"`);
   }
 });
@@ -75525,10 +75528,13 @@ __export(utils_exports2, {
   NUM_TO_MONTH: () => NUM_TO_MONTH,
   NetworkError: () => NetworkError,
   NotFoundError: () => NotFoundError,
+  PING_GRACE_MS: () => PING_GRACE_MS,
   PermissionError: () => PermissionError,
   RateLimitError: () => RateLimitError,
+  RealtimeHealth: () => RealtimeHealth,
   RecoverySupervisor: () => RecoverySupervisor,
   SESSION_COOKIE_NAMES: () => SESSION_COOKIE_NAMES,
+  SILENT_WINDOW_MS: () => SILENT_WINDOW_MS,
   TimeoutError: () => TimeoutError,
   ValidationError: () => ValidationError,
   WINDOW_MS: () => WINDOW_MS,
@@ -75553,6 +75559,7 @@ __export(utils_exports2, {
   delay: () => delay2,
   ensureCometTokens: () => ensureCometTokens,
   error: () => error,
+  extractAsbdId: () => extractAsbdId,
   extractAttachmentIds: () => extractAttachmentIds,
   extractCookies: () => extractCookies,
   extractCookiesFromBody: () => extractCookiesFromBody,
@@ -75603,6 +75610,7 @@ __export(utils_exports2, {
   invalidateCometTokens: () => invalidateCometTokens,
   isAuthFailure: () => isAuthFailure,
   isBreakerOpen: () => isBreakerOpen,
+  isLoggedOutDocument: () => isLoggedOutDocument,
   isReadableStream: () => isReadableStream2,
   isStaleTokenError: () => isStaleTokenError,
   json: () => json2,
@@ -75640,6 +75648,7 @@ __export(utils_exports2, {
   setProxy: () => setProxy2,
   sleep: () => sleep,
   startLiveness: () => startLiveness,
+  startRealtimeSupervisor: () => startRealtimeSupervisor,
   startRecovery: () => startRecovery,
   success: () => success,
   tripBreaker: () => tripBreaker,
@@ -90997,6 +91006,9 @@ function extractLsd(html3) {
 function extractDtsg(html3) {
   return getFrom3(html3, '["DTSGInitialData",[],{"token":"', '"}') || getFrom3(html3, 'name="fb_dtsg" value="', '"') || (html3.match(/"DTSGInitialData",\[\],\{"token":"([^"]+)"/) || [])[1] || "";
 }
+function extractAsbdId(html3) {
+  return (html3.match(/"asbd_id":(\d+)/) || [])[1] || (html3.match(/x-asbd-id["']?\s*[:=]\s*["']?(\d+)/i) || [])[1] || (html3.match(/"ASBD_ID":(\d+)/) || [])[1] || "";
+}
 function extractSpin(html3) {
   const out = {};
   const spinB = (html3.match(/"__spin_b":"([^"]+)"/) || [])[1];
@@ -91063,6 +91075,8 @@ async function ensureCometTokens(ctx, defaultFuncs, force = false) {
     const spin = extractSpin(html3);
     if (Object.keys(spin).length) ctx.__spin = { ...ctx.__spin || {}, ...spin };
     if (spin.__rev) ctx.revision = spin.__rev;
+    const asbd = extractAsbdId(html3);
+    if (asbd) ctx.asbdId = asbd;
     ctx.lsd = lsd;
     ctx.fb_dtsg = dtsg;
     ctx.jazoest = recomputeJazoest(dtsg);
@@ -91333,6 +91347,13 @@ function isAuthFailure(value) {
   }
   return false;
 }
+function isLoggedOutDocument(html3) {
+  if (typeof html3 !== "string" || html3.length < 200) return false;
+  if (!/<html/i.test(html3)) return false;
+  const hasAuthedTokens = /DTSGInitialData|"LSD",\[\]/.test(html3);
+  const looksLikeLogin = /name="(?:email|pass)"|id="email"|"login_form"|LoginForm|login_form/i.test(html3) || /Continue as |Use another profile|Create new account/i.test(html3) || /You must log in to continue|Please log in|log in to continue/i.test(html3);
+  return looksLikeLogin && !hasAuthedTokens;
+}
 async function withSessionRetry(ctx, defaultFuncs, operation, options = {}) {
   const attempts = Math.max(1, options.attempts ?? 2);
   let lastError;
@@ -91439,6 +91460,8 @@ async function warmUpSession(ctx, getter, options = {}) {
           const spin = extractSpin(html3);
           if (Object.keys(spin).length) ctx.__spin = { ...ctx.__spin || {}, ...spin };
           if (spin.__rev) ctx.revision = spin.__rev;
+          const asbd = extractAsbdId(html3);
+          if (asbd) ctx.asbdId = asbd;
           tokensSeeded = true;
         }
       } else if (url2.includes("/messages")) {
@@ -91638,7 +91661,15 @@ var RecoverySupervisor = class {
   async runOnce() {
     this.state.checks += 1;
     this.emit("check", `health check #${this.state.checks}`);
-    if (this.runtime.isAuthenticated()) {
+    let healthy = this.runtime.isAuthenticated();
+    if (healthy && this.runtime.probeLiveness) {
+      try {
+        healthy = await this.runtime.probeLiveness();
+      } catch {
+        healthy = true;
+      }
+    }
+    if (healthy) {
       this.markHealthy("session authenticated");
       return;
     }
@@ -91737,6 +91768,131 @@ function startRecovery(ctx, runtime, options = {}) {
   return supervisor;
 }
 
+// src/utils/realtime-health.ts
+init_pacing();
+var SILENT_WINDOW_MS = 6 * 60 * 1e3;
+var PING_GRACE_MS = 45 * 1e3;
+var RealtimeHealth = class {
+  constructor(now = () => Date.now()) {
+    this.now = now;
+    this.frames = 0;
+    this.lastFrameAt = 0;
+    this.connectedAt = 0;
+    this.probes = 0;
+    this.forcedReconnects = 0;
+    this.lastPingAt = 0;
+    this.startedAt = Date.now();
+    this.startedAt = this.now();
+  }
+  /** Record any inbound frame (message, pong, anything from the broker). */
+  noteFrame() {
+    this.frames += 1;
+    this.lastFrameAt = this.now();
+  }
+  /** Record a successful connect. */
+  noteConnected() {
+    this.connectedAt = this.now();
+    this.lastFrameAt = this.now();
+  }
+  /** Record that the transport reports itself disconnected. */
+  noteDisconnected() {
+    this.lastFrameAt = 0;
+  }
+  /** Record an active ping being sent. */
+  notePing() {
+    this.lastPingAt = this.now();
+  }
+  sinceLastFrame() {
+    const base = this.lastFrameAt || this.connectedAt || this.startedAt;
+    return this.now() - base;
+  }
+  /**
+   * Decide what to do about the current socket.
+   *
+   * - `disconnected` — the transport already knows it is down; reconnect.
+   * - `dead` — connected on paper, silent past the window, and a ping raised no
+   *   traffic within the grace period; reconnect.
+   * - `suspect` — silent past the window but a ping was only just sent; wait.
+   * - `quiet` — silent but inside the window; normal.
+   * - `healthy` — recent traffic.
+   */
+  verdict(connected) {
+    if (!connected) return "disconnected";
+    const silent = this.sinceLastFrame();
+    if (silent < SILENT_WINDOW_MS / 2) return "healthy";
+    if (silent < SILENT_WINDOW_MS) return "quiet";
+    if (this.lastPingAt && this.now() - this.lastPingAt < PING_GRACE_MS) return "suspect";
+    return "dead";
+  }
+  /** A snapshot for diagnostics. */
+  state(connected) {
+    return {
+      connected,
+      sinceLastFrameMs: this.sinceLastFrame(),
+      frames: this.frames,
+      probes: this.probes,
+      forcedReconnects: this.forcedReconnects,
+      verdict: this.verdict(connected)
+    };
+  }
+  noteProbe() {
+    this.probes += 1;
+  }
+  noteForcedReconnect() {
+    this.forcedReconnects += 1;
+  }
+};
+function startRealtimeSupervisor(options) {
+  const health = new RealtimeHealth();
+  const interval = options.intervalMs ?? 3 * 60 * 1e3;
+  let stopped = false;
+  let timer = null;
+  const evaluate = () => {
+    const connected = options.isConnected();
+    const verdict = health.verdict(connected);
+    health.noteProbe();
+    if (verdict === "dead") {
+      const pingSent = options.ping ? options.ping() : false;
+      if (pingSent) {
+        health.notePing();
+      } else {
+        health.noteForcedReconnect();
+        options.reconnect("realtime socket silent and unpinnable");
+      }
+    }
+    const state = health.state(connected);
+    try {
+      options.onVerdict?.(state);
+    } catch {
+    }
+    return state;
+  };
+  const schedule = () => {
+    if (stopped) return;
+    timer = setTimeout(
+      () => {
+        timer = null;
+        evaluate();
+        schedule();
+      },
+      Math.max(1e3, humanDelay(interval, interval * 0.3))
+    );
+    if (timer && typeof timer.unref === "function") timer.unref();
+  };
+  schedule();
+  return {
+    health,
+    checkNow: evaluate,
+    stop: () => {
+      stopped = true;
+      if (timer) {
+        clearTimeout(timer);
+        timer = null;
+      }
+    }
+  };
+}
+
 // src/utils/index.ts
 async function json2(url2, jar2, qs2, options, ctx, customHeader) {
   try {
@@ -91954,6 +92110,7 @@ async function buildAPI(html3, jar2, netData, globalOptions, fbLinkFunc, errorRe
   const lsd = lsdConfig && lsdConfig.token || extractLsd(html3) || void 0;
   const spin = extractSpin(html3);
   const revision = spin.__rev || getFrom(html3, 'revision":', ",").trim();
+  const asbdId = extractAsbdId(html3) || void 0;
   const clientIDData = findConfig("MqttWebDeviceID");
   const clientID = clientIDData ? clientIDData.clientID : void 0;
   const mqttConfigData = findConfig("MqttWebConfig");
@@ -91995,7 +92152,8 @@ async function buildAPI(html3, jar2, netData, globalOptions, fbLinkFunc, errorRe
     ...dtsgResult,
     ...lsd ? { lsd } : {},
     ...Object.keys(spin).length ? { __spin: spin } : {},
-    ...revision ? { revision } : {}
+    ...revision ? { revision } : {},
+    ...asbdId ? { asbdId } : {}
   };
   if (lsd && dtsg) {
     ctx.__cometTokens = { lsd, fb_dtsg: dtsg, fetchedAt: Date.now(), failures: 0 };
@@ -100693,7 +100851,9 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
     attempts: 0,
     delay: MQTT_CONFIG.INITIAL_RETRY_DELAY,
     throttleDelay: MQTT_CONFIG.THROTTLE_DELAY,
-    generation: 0
+    generation: 0,
+    health: null,
+    healthSupervisor: null
   };
   const log2 = (...args) => log(...args);
   function clearReconnectTimer() {
@@ -100707,6 +100867,13 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
       clearInterval(lifecycle.presenceInterval);
       lifecycle.presenceInterval = null;
     }
+    if (lifecycle.healthSupervisor) {
+      try {
+        lifecycle.healthSupervisor.stop();
+      } catch (_3) {
+      }
+      lifecycle.healthSupervisor = null;
+    }
     clearReconnectTimer();
   }
   function destroyClient() {
@@ -100834,6 +101001,8 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
       });
       lifecycle.client = client2;
       ctx.mqttClient = client2;
+      const health = new RealtimeHealth();
+      lifecycle.health = health;
       let connected = false;
       let closing = false;
       let throttled = false;
@@ -100853,12 +101022,14 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
         if (generation !== lifecycle.generation) return;
         connected = false;
         ctx.mqttConnected = false;
+        health.noteDisconnected();
       });
       client2.on("close", () => {
         if (generation !== lifecycle.generation) return;
         if (connected) log2("MQTT connection closed.");
         connected = false;
         ctx.mqttConnected = false;
+        health.noteDisconnected();
         if (closing) return;
         closing = true;
         if (authFailure) {
@@ -100876,6 +101047,7 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
       client2.on("connect", () => {
         if (generation !== lifecycle.generation) return;
         connected = true;
+        health.noteConnected();
         client2.subscribe(MQTT_TOPICS, (subErr) => {
           if (subErr) {
             error("Failed to subscribe to MQTT topics:", subErr);
@@ -100912,6 +101084,49 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
           ctx.mqttConnected = true;
           ctx.lastMqttError = null;
           resetBackoff();
+          if (lifecycle.healthSupervisor) {
+            try {
+              lifecycle.healthSupervisor.stop();
+            } catch (_3) {
+            }
+          }
+          lifecycle.healthSupervisor = startRealtimeSupervisor({
+            isConnected: () => generation === lifecycle.generation && client2.connected,
+            reconnect: (reason) => {
+              if (generation !== lifecycle.generation) return;
+              if (lifecycle.stopped || ctx.loggedIn === false) return;
+              log2(`MQTT ${reason}; recycling the socket`);
+              try {
+                client2.end(true);
+              } catch (_3) {
+              }
+              const gen = generation;
+              setTimeout(() => {
+                if (gen !== lifecycle.generation) return;
+                if (lifecycle.stopped || ctx.loggedIn === false) return;
+                if (lifecycle.client && lifecycle.client.connected) return;
+                if (lifecycle.reconnectTimer) return;
+                scheduleReconnect("realtime socket recycled");
+              }, 5e3).unref?.();
+            },
+            ping: () => {
+              try {
+                client2.ping();
+                return true;
+              } catch {
+                return false;
+              }
+            },
+            onVerdict: (state) => {
+              if (state.verdict === "dead") {
+                warn(
+                  "MQTT health",
+                  `silent for ${Math.round(state.sinceLastFrameMs / 1e3)}s; probing`
+                );
+              }
+            }
+          });
+          ctx.__mqttHealth = () => lifecycle.health ? lifecycle.health.state(generation === lifecycle.generation && !!client2.connected) : null;
           api.getBotInitialData().then((botData) => {
             if (botData) {
               log(`Logged in as: ${botData.name || "Facebook User"} (${botData.uid || ctx.userID})`);
@@ -100922,6 +101137,7 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
       });
       client2.on("message", async (topic, message, _packet) => {
         try {
+          health.noteFrame();
           ctx.lastMessageTime = Date.now();
           ctx.messageCount = (ctx.messageCount || 0) + 1;
           const jsonMessage = JSON.parse(message.toString());
@@ -101007,6 +101223,16 @@ var listenMqtt_default = (defaultFuncs, api, ctx) => {
         this.stop();
         if (typeof cb === "function") cb();
       }
+      /** Live connection-health snapshot, for diagnostics/alerting. */
+      getHealth() {
+        if (!lifecycle.health) return null;
+        const connected = !lifecycle.stopped && !!lifecycle.client && !!lifecycle.client.connected;
+        return lifecycle.health.state(connected);
+      }
+      /** Is this listener currently stopped? */
+      isStopped() {
+        return lifecycle.stopped;
+      }
     }
     const msgEmitter = new MessageEmitter();
     lifecycle.stopped = false;
@@ -101328,6 +101554,22 @@ async function loginHelper(credentials, globalOptions, callback, setOptionsFunc,
         {
           ctx,
           isAuthenticated: () => hasAuthenticatedSession(ctx.jar),
+          probeLiveness: async () => {
+            try {
+              const res = await defaultFuncs.get(
+                "https://www.facebook.com/",
+                ctx.jar,
+                null,
+                ctx.globalOptions,
+                { noRef: true }
+              );
+              const html3 = typeof res === "string" ? res : res && res.body;
+              if (typeof html3 !== "string" || !html3) return true;
+              return !isLoggedOutDocument(html3);
+            } catch {
+              return true;
+            }
+          },
           refresh: () => repairSession(ctx, defaultFuncs),
           canRelogin: Boolean(credentials.email && credentials.password),
           relogin: async () => {
@@ -101556,4 +101798,4 @@ lodash/lodash.js:
    *)
 */
 
-export { RecoverySupervisor, acquireCookies, applySetCookie, awaitProactiveSlot, canActProactively, collectSessionCookies, index_default as default, defaultBrowserProfile, ensureCometTokens, extractCookies, extractCookiesFromBody, extractCookiesFromJar, extractCookiesFromSetCookie, extractCurrentUser, getFingerprintParams, getHeaders, getWebSocketHeaders, hasAuthenticatedSession, humanDelay, invalidateCometTokens, isAuthFailure, isBreakerOpen, isStaleTokenError, login, missingSessionCookies, normalizeBrowserProfile, noteAction, noteAuthFailure, noteCheckpoint, noteRateLimit, paceRequest, public_exports as publicTypes, randomUserAgent, refreshSessionCookies, repairSession, reserveRequest, resetBreaker, resolveProfile, retryDelay, safetySnapshot, sleep, startLiveness, startRecovery, tripBreaker, warmUpSession, withCometTokens, withSessionRetry };
+export { PING_GRACE_MS, RealtimeHealth, RecoverySupervisor, SILENT_WINDOW_MS, acquireCookies, applySetCookie, awaitProactiveSlot, canActProactively, collectSessionCookies, index_default as default, defaultBrowserProfile, ensureCometTokens, extractCookies, extractCookiesFromBody, extractCookiesFromJar, extractCookiesFromSetCookie, extractCurrentUser, getFingerprintParams, getHeaders, getWebSocketHeaders, hasAuthenticatedSession, humanDelay, invalidateCometTokens, isAuthFailure, isBreakerOpen, isLoggedOutDocument, isStaleTokenError, login, missingSessionCookies, normalizeBrowserProfile, noteAction, noteAuthFailure, noteCheckpoint, noteRateLimit, paceRequest, public_exports as publicTypes, randomUserAgent, refreshSessionCookies, repairSession, reserveRequest, resetBreaker, resolveProfile, retryDelay, safetySnapshot, sleep, startLiveness, startRealtimeSupervisor, startRecovery, tripBreaker, warmUpSession, withCometTokens, withSessionRetry };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyneoaz/metachat",
-  "version": "4.0.7",
+  "version": "4.0.8",
   "description": "A modern TypeScript Facebook Chat API client for building reliable Messenger bots, with built-in anti-detection protection, automatic cookie refresh, music search, and AI theme support.",
   "license": "MIT",
   "author": {
@@ -57,7 +57,7 @@
     "prepublishOnly": "npm run build",
     "lint": "npm run typecheck",
     "format": "prettier --write \"src/**/*.ts\" \"index.ts\"",
-    "test": "npm run build && node test/smoke.test.cjs && node test/smoke.test.mjs && node test/music-search.test.cjs && node test/mqtt-lifecycle.test.cjs && node test/session-reliability.test.cjs && node test/anti-detection.test.cjs && node test/account-safety.test.cjs && node test/liveness.test.cjs && node test/recovery.test.cjs && node test/cookie-acquisition.test.cjs",
+    "test": "npm run build && node test/smoke.test.cjs && node test/smoke.test.mjs && node test/music-search.test.cjs && node test/mqtt-lifecycle.test.cjs && node test/session-reliability.test.cjs && node test/anti-detection.test.cjs && node test/account-safety.test.cjs && node test/liveness.test.cjs && node test/recovery.test.cjs && node test/cookie-acquisition.test.cjs && node test/realtime-health.test.cjs",
     "audit": "npm audit",
     "audit:fix": "npm audit fix"
   },