@softtynet/zca-js 2.1.11 → 2.1.17

package/dist/apis/getGroupChatHistory.d.ts

@@ -1,8 +1,18 @@
 import { GroupMessage } from "../models/index.js";
 export type GetGroupChatHistoryResponse = {
-    lastActionId: string;
-    lastActionIdOther: string;
-    more: number;
+    error?: number;
+    lastMsgId?: number;
+    minMsgId?: number;
+    maxMsgId?: number;
+    msgJumpId?: number;
+    hasMore?: boolean;
+    isOld?: boolean;
+    isFiltered?: boolean;
+    rootMsgId?: number;
+    isRootDel?: boolean;
     groupMsgs: GroupMessage[];
+    tsJoinGroup?: number;
+    isFilteredByPhase?: boolean;
+    isFilteredByTimeJoin?: boolean;
 };
 export declare const getGroupChatHistoryFactory: (ctx: import("../context.js").ContextBase, api: import("../apis.js").API) => (groupId: string, count?: number) => Promise<GetGroupChatHistoryResponse>;

package/dist/apis/getGroupChatHistory.js

@@ -2,35 +2,63 @@ import { ZaloApiError } from "../Errors/ZaloApiError.js";
 import { apiFactory } from "../utils.js";
 import { GroupMessage } from "../models/index.js";
 export const getGroupChatHistoryFactory = apiFactory()((api, ctx, utils) => {
-    const serviceURL = utils.makeURL(`${api.zpwServiceMap.group[0]}/api/group/history`);
+    const serviceURL = utils.makeURL(`${api.zpwServiceMap.group_cloud_message[0]}/api/cm/getrecentv2`);
     /**
-     * Get group chat history
+     * Get group chat history from Zalo Cloud Message (newest first)
      *
      * @param groupId group id
-     * @param count count of messages to return (default: 50)
+     * @param count count of messages to return (default: 50, max safe limit: 200)
      *
      * @throws {ZaloApiError}
      */
     return async function getGroupChatHistory(groupId, count = 50) {
-        const params = {
-            grid: groupId,
-            count: count,
-        };
-        const encryptedParams = utils.encodeAES(JSON.stringify(params));
-        if (!encryptedParams)
-            throw new ZaloApiError("Failed to encrypt params");
-        const response = await utils.request(utils.makeURL(serviceURL, { params: encryptedParams }), {
-            method: "GET",
-        });
-        return utils.resolve(response, (result) => {
-            let data = result.data;
-            if (typeof data === "string") {
-                data = JSON.parse(data);
+        if (!groupId)
+            throw new ZaloApiError("Missing groupId");
+        if (groupId.startsWith("g"))
+            groupId = groupId.slice(1);
+        const safeCount = Math.min(Math.max(count, 1), 200);
+        const messages = [];
+        let cursor = 0;
+        let lastPage = null;
+        let pageCount = 0;
+        while (messages.length < safeCount && pageCount < 10) {
+            pageCount++;
+            const params = {
+                groupId,
+                globalMsgId: cursor,
+                count: Math.min(50, safeCount - messages.length),
+                msgIds: [],
+                imei: ctx.imei,
+                src: 3,
+            };
+            const encryptedParams = utils.encodeAES(JSON.stringify(params));
+            if (!encryptedParams)
+                throw new ZaloApiError("Failed to encrypt params");
+            const response = await utils.request(utils.makeURL(serviceURL, { params: encryptedParams, nretry: 0 }), {
+                method: "GET",
+            });
+            lastPage = await utils.resolve(response, (result) => {
+                let data = result.data;
+                if (typeof data === "string") {
+                    data = JSON.parse(data);
+                }
+                return data;
+            });
+            if (!lastPage || !Array.isArray(lastPage.groupMsgs))
+                break;
+            for (const rawMsg of lastPage.groupMsgs) {
+                if (messages.length >= safeCount)
+                    break;
+                if (messages.some((m) => m.msgId === rawMsg.msgId))
+                    continue;
+                messages.push(rawMsg);
             }
-            for (let i = 0; i < data.groupMsgs.length; i++) {
-                data.groupMsgs[i] = new GroupMessage(ctx.uid, data.groupMsgs[i]);
-            }
-            return data;
-        });
+            const nextCursor = Number(lastPage.lastMsgId);
+            if (!lastPage.hasMore || !nextCursor || nextCursor === cursor)
+                break;
+            cursor = nextCursor;
+        }
+        const groupMsgs = messages.map((data) => new GroupMessage(ctx.uid, data));
+        return Object.assign({}, lastPage || {}, { groupMsgs });
     };
 });

package/dist/apis/listen.d.ts

@@ -28,6 +28,7 @@ export declare enum CloseReason {
 interface ListenerEvents {
     connected: [];
     disconnected: [code: CloseReason, reason: string];
+    reconnecting: [code: CloseReason];
     closed: [code: CloseReason, reason: string];
     error: [error: unknown];
     typing: [typing: Typing];
@@ -62,6 +63,8 @@ export declare class Listener extends EventEmitter<ListenerEvents> {
     private selfListen;
     private pingInterval?;
     private retryTimeout?;
+    private watchdogTimeout?;
+    private consecutive1006Count;
     private id;
     constructor(ctx: ContextSession, urls: string[]);
     /**
@@ -80,7 +83,10 @@ export declare class Listener extends EventEmitter<ListenerEvents> {
      * @deprecated Use `on` method instead
      */
     onMessage(cb: OnMessageCallback): void;
+    private isRetryable;
     private canRetry;
+    private resetRetryCount;
+    private resetWatchdog;
     private shouldRotate;
     private rotateEndpoint;
     start({ retryOnClose }?: {

package/dist/apis/listen.js

@@ -3,7 +3,7 @@ import WebSocket from "ws";
 import { initializeFriendEvent } from "../models/FriendEvent.js";
 import { initializeGroupEvent } from "../models/GroupEvent.js";
 import { GroupMessage, UserMessage, Reaction, Undo, ThreadType, GroupTyping, UserTyping } from "../models/index.js";
-import { decodeEventData, getFriendEventType, getGroupEventType, hasOwn, logger, makeURL } from "../utils.js";
+import { decodeEventData, getBrowserLanguage, getFriendEventType, getGroupEventType, hasOwn, logger, makeURL } from "../utils.js";
 import { ZaloApiError } from "../Errors/ZaloApiError.js";
 import { GroupSeenMessage, UserSeenMessage } from "../models/SeenMessage.js";
 import { UserDeliveredMessage, GroupDeliveredMessage } from "../models/DeliveredMessage.js";
@@ -19,6 +19,7 @@ export class Listener extends EventEmitter {
         super();
         this.ctx = ctx;
         this.urls = urls;
+        this.consecutive1006Count = 0;
         this.id = 0;
         if (!ctx.cookie)
             throw new ZaloApiError("Cookie is not available");
@@ -70,26 +71,71 @@ export class Listener extends EventEmitter {
     onMessage(cb) {
         this.onMessageCallback = cb;
     }
+    isRetryable(code) {
+        return (code === CloseReason.AbnormalClosure ||
+            this.ctx.settings.features.socket.close_and_retry_codes.includes(code));
+    }
     canRetry(code) {
-        if (!this.ctx.settings.features.socket.close_and_retry_codes.includes(code))
+        var _a;
+        if (!this.isRetryable(code))
             return false;
-        if (this.retryCount[code.toString()].count >= this.retryCount[code.toString()].max)
+        const retry = (_a = this.retryCount[code.toString()]) !== null && _a !== void 0 ? _a : this.retryCount["internal"];
+        if (!retry || retry.count >= retry.max)
             return false;
-        this.retryCount[code.toString()].count++;
-        const { count, max, times } = this.retryCount[code.toString()];
-        const retryTime = count - 1 < times.length ? times[count - 1] : times[times.length - 1];
+        retry.count++;
+        const { count, max, times } = retry;
+        let retryTime;
+        if (count - 1 < times.length) {
+            retryTime = times[count - 1];
+        }
+        else {
+            const lastTime = times[times.length - 1] || 1000;
+            const multiplier = Math.min(Math.pow(1.5, count - times.length), 10);
+            const jitter = Math.floor(Math.random() * 1000);
+            retryTime = Math.min(Math.floor(lastTime * multiplier) + jitter, 30000);
+        }
         logger(this.ctx).verbose(`Retry for code ${code} in ${retryTime}ms (${count}/${max})`);
         return retryTime;
     }
+    resetRetryCount() {
+        for (const retry of Object.values(this.retryCount)) {
+            retry.count = 0;
+        }
+    }
+    resetWatchdog() {
+        if (this.watchdogTimeout)
+            clearTimeout(this.watchdogTimeout);
+        this.watchdogTimeout = setTimeout(() => {
+            logger(this.ctx).verbose("Watchdog timeout: no packet/pong received from Zalo WebSocket in 50s. Forcing reconnect...");
+            if (this.ws) {
+                try {
+                    if (typeof this.ws.terminate === "function") {
+                        this.ws.terminate();
+                    }
+                    else if (typeof this.ws.close === "function") {
+                        this.ws.close(CloseReason.AbnormalClosure);
+                    }
+                }
+                catch (_a) {
+                    // Ignore if already terminated
+                }
+            }
+        }, 50000);
+    }
     shouldRotate(code) {
-        if (!this.ctx.settings.features.socket.rotate_error_codes.includes(code))
-            return false;
-        if (this.rotateCount >= this.urls.length - 1)
+        if (code === CloseReason.AbnormalClosure) {
+            this.consecutive1006Count++;
+            if (this.consecutive1006Count >= 2) {
+                this.consecutive1006Count = 0;
+                return true;
+            }
             return false;
-        return true;
+        }
+        this.consecutive1006Count = 0;
+        return this.ctx.settings.features.socket.rotate_error_codes.includes(code);
     }
     rotateEndpoint() {
-        this.rotateCount++;
+        this.rotateCount = (this.rotateCount + 1) % this.urls.length;
         this.wsURL = makeURL(this.ctx, this.urls[this.rotateCount], {
             t: Date.now(),
         });
@@ -98,37 +144,46 @@ export class Listener extends EventEmitter {
     start({ retryOnClose = false } = {}) {
         if (this.ws)
             throw new ZaloApiError("Already started");
+        this.wsURL = makeURL(this.ctx, this.urls[this.rotateCount], {
+            t: Date.now(),
+        });
+        const cookie = this.ctx.cookie.getCookieStringSync("https://chat.zalo.me");
         const ws = new WebSocket(this.wsURL, {
             headers: {
-                "accept-encoding": "gzip, deflate, br, zstd",
-                "accept-language": "en-US,en;q=0.9",
+                "accept-language": getBrowserLanguage(this.ctx.language),
                 "cache-control": "no-cache",
                 connection: "Upgrade",
                 host: new URL(this.wsURL).host,
                 origin: "https://chat.zalo.me",
-                prgama: "no-cache",
+                pragma: "no-cache",
                 "sec-websocket-extensions": "permessage-deflate; client_max_window_bits",
                 "sec-websocket-version": "13",
                 upgrade: "websocket",
                 "user-agent": this.userAgent,
-                cookie: this.cookie,
+                cookie,
             },
-            agent: this.ctx.options.agent
+            agent: this.ctx.options.agent,
         });
         this.ws = ws;
         ws.onopen = () => {
+            this.consecutive1006Count = 0;
+            this.resetRetryCount();
+            this.resetWatchdog();
             this.onConnectedCallback();
             this.emit("connected");
         };
         ws.onclose = (event) => {
             this.reset();
             this.emit("disconnected", event.code, event.reason);
-            const retry = retryOnClose && this.canRetry(event.code);
+            const retry = retryOnClose &&
+                this.isRetryable(event.code) &&
+                this.canRetry(event.code);
             if (retry && retryOnClose) {
                 const shouldRotate = this.shouldRotate(event.code);
                 if (shouldRotate) {
                     this.rotateEndpoint();
                 }
+                this.emit("reconnecting", event.code);
                 this.retryTimeout = setTimeout(() => {
                     this.start({ retryOnClose: true });
                 }, retry);
@@ -143,6 +198,8 @@ export class Listener extends EventEmitter {
             this.emit("error", event);
         };
         ws.onmessage = async (event) => {
+            var _a, _b, _c;
+            this.resetWatchdog();
             this.emit("pong"); // Pulse event to notify watchdog that socket is alive
             const { data } = event;
             if (!(data instanceof Buffer))
@@ -170,9 +227,10 @@ export class Listener extends EventEmitter {
                         this.sendWs(payload, false);
                         this.emit("ping");
                     };
+                    const pingIntervalTime = Math.min(Math.max(((_c = (_b = (_a = this.ctx.settings) === null || _a === void 0 ? void 0 : _a.features) === null || _b === void 0 ? void 0 : _b.socket) === null || _c === void 0 ? void 0 : _c.ping_interval) || 25000, 10000), 25000);
                     this.pingInterval = setInterval(() => {
                         ping();
-                    }, this.ctx.settings.features.socket.ping_interval);
+                    }, pingIntervalTime);
                 }
                 if (version == 1 && cmd == 501 && subCmd == 0) {
                     const parsedData = (await decodeEventData(parsed, this.cipherKey)).data;
@@ -369,6 +427,8 @@ export class Listener extends EventEmitter {
     stop() {
         if (this.retryTimeout)
             clearTimeout(this.retryTimeout);
+        if (this.watchdogTimeout)
+            clearTimeout(this.watchdogTimeout);
         if (this.ws) {
             if (this.ws.readyState !== WebSocket.CLOSED) {
                 this.ws.close(CloseReason.ManualClosure);
@@ -425,6 +485,8 @@ export class Listener extends EventEmitter {
         this.cipherKey = undefined;
         if (this.pingInterval)
             clearInterval(this.pingInterval);
+        if (this.watchdogTimeout)
+            clearTimeout(this.watchdogTimeout);
     }
 }
 function getHeader(buffer) {

package/dist/apis/login.js

@@ -3,7 +3,7 @@ import { decryptResp, getSignKey, logger, makeURL, ParamsEncryptor, request } fr
 export async function login(ctx, encryptParams) {
     const encryptedParams = await getEncryptParam(ctx, encryptParams, "getlogininfo");
     try {
-        const response = await request(ctx, makeURL(ctx, "https://wpa.chat.zalo.me/api/login/getLoginInfo", Object.assign(Object.assign({}, encryptedParams.params), { nretry: 0 })));
+        const response = await request(ctx, makeURL(ctx, "https://wpa.chat.zalo.me/api/login/getLoginInfo", Object.assign(Object.assign({}, encryptedParams.params), { nretry: 0 }), false));
         if (!response.ok)
             throw new ZaloApiError("Failed to fetch login info: " + response.statusText);
         const data = await response.json();

package/dist/apis/loginQR.js

@@ -1,35 +1,20 @@
 import { CookieJar } from "tough-cookie";
 import { writeFile } from "node:fs/promises";
 import { ZaloApiError } from "../Errors/ZaloApiError.js";
-import { logger, request, getPlatformFromUA, getChromeVersionFromUA } from "../utils.js";
+import { logger, request, getBrowserLanguage, getSecChUaHeaders } from "../utils.js";
 import { ZaloApiLoginQRAborted } from "../Errors/ZaloApiLoginQRAborted.js";
 import { ZaloApiLoginQRDeclined } from "../Errors/ZaloApiLoginQRDeclined.js";
 /**
- * Tạo bộ header Sec-CH-UA dùng chung cho toàn bộ các request trong luồng đăng nhập QR.
+ * Tạo bộ header Sec-CH-UA và ngôn ngữ dùng chung cho toàn bộ các request trong luồng đăng nhập QR.
  *
- * Trước đây 8 hàm con trong loginQR đều copy-paste cùng một bộ header với giá trị
- * `sec-ch-ua-platform: "Windows"` bị hardcode cứng. Điều này gây ra mâu thuẫn fingerprint
- * (Browser Mismatch) khi người dùng truyền vào User-Agent của Mac hoặc Linux,
- * khiến hệ thống chống bot của Zalo phát hiện và ban session ngay lập tức.
+ * Tất cả giá trị sec-ch-ua-* đều được suy luận ĐỘNG từ ctx.userAgent (chỉ khi là Chromium)
+ * và accept-language theo ctx.language, đảm bảo nhất quán 100% với môi trường trình duyệt thật.
  *
- * Giải pháp: Tất cả giá trị sec-ch-ua-* đều được suy luận ĐỘNG từ ctx.userAgent,
- * đảm bảo nhất quán 100% giữa User-Agent và các Client Hint headers.
- *
- * @param ctx - Context chứa ctx.userAgent đã được gán trước khi gọi hàm này
+ * @param ctx - Context chứa ctx.userAgent và ctx.language
  * @param extra - Các header bổ sung đặc thù cho từng request (sec-fetch-dest, Referer...)
  */
 function getLoginHeaders(ctx, extra) {
-    // Suy luận platform từ UA: "Windows" | "macOS" | "Linux" (mặc định "Windows" nếu không nhận ra)
-    const platform = getPlatformFromUA(ctx.userAgent);
-    // Trích xuất phiên bản Chrome major từ UA (ví dụ: "130"), fallback về "130" nếu không phải Chrome
-    const chromeVer = getChromeVersionFromUA(ctx.userAgent);
-    return Object.assign({ "accept-language": "vi-VN,vi;q=0.9,fr-FR;q=0.8,fr;q=0.7,en-US;q=0.6,en;q=0.5", 
-        // sec-ch-ua phải khớp với phiên bản Chrome trong User-Agent
-        "sec-ch-ua": `"Chromium";v="${chromeVer}", "Google Chrome";v="${chromeVer}", "Not?A_Brand";v="99"`, 
-        // Luôn là desktop (?0) vì Zalo Web không hỗ trợ mobile
-        "sec-ch-ua-mobile": "?0", 
-        // sec-ch-ua-platform PHẢI nhất quán với User-Agent — đây là nguyên nhân gốc rễ gây ban session
-        "sec-ch-ua-platform": `"${platform}"` }, extra);
+    return Object.assign(Object.assign({ "accept-language": getBrowserLanguage(ctx.language) }, getSecChUaHeaders(ctx.userAgent)), extra);
 }
 export var LoginQRCallbackEventType;
 (function (LoginQRCallbackEventType) {

package/dist/apis/preloadConversations.d.ts

@@ -0,0 +1,10 @@
+export type PreloadConversationsResponse = {
+    conversations?: Array<{
+        conv_id: string;
+        last_msgs?: unknown[];
+        unread_count?: number;
+        [key: string]: unknown;
+    }>;
+    [key: string]: unknown;
+};
+export declare const preloadConversationsFactory: (ctx: import("../context.js").ContextBase, api: import("../apis.js").API) => () => Promise<PreloadConversationsResponse>;

package/dist/apis/preloadConversations.js

@@ -0,0 +1,23 @@
+import { ZaloApiError } from "../Errors/ZaloApiError.js";
+import { apiFactory } from "../utils.js";
+export const preloadConversationsFactory = apiFactory()((api, ctx, utils) => {
+    const serviceURL = utils.makeURL(`${api.zpwServiceMap.conversation[0]}/api/preloadconvers/get-last-msgs`);
+    /**
+     * Preload last messages across all active conversations.
+     * Useful for initial state loading and catching up missed messages after reconnect.
+     *
+     * @throws {ZaloApiError}
+     */
+    return async function preloadConversations() {
+        const params = {
+            imei: ctx.imei,
+        };
+        const encryptedParams = utils.encodeAES(JSON.stringify(params));
+        if (!encryptedParams)
+            throw new ZaloApiError("Failed to encrypt params");
+        const response = await utils.request(utils.makeURL(serviceURL, { params: encryptedParams }), {
+            method: "GET",
+        });
+        return utils.resolve(response);
+    };
+});

package/dist/apis.d.ts

@@ -94,6 +94,7 @@ import { lastOnlineFactory } from "./apis/lastOnline.js";
 import { leaveGroupFactory } from "./apis/leaveGroup.js";
 import { lockPollFactory } from "./apis/lockPoll.js";
 import { parseLinkFactory } from "./apis/parseLink.js";
+import { preloadConversationsFactory } from "./apis/preloadConversations.js";
 import { rejectFriendRequestFactory } from "./apis/rejectFriendRequest.js";
 import { removeFriendFactory } from "./apis/removeFriend.js";
 import { removeFriendAliasFactory } from "./apis/removeFriendAlias.js";
@@ -244,6 +245,7 @@ export declare class API {
     leaveGroup: ReturnType<typeof leaveGroupFactory>;
     lockPoll: ReturnType<typeof lockPollFactory>;
     parseLink: ReturnType<typeof parseLinkFactory>;
+    preloadConversations: ReturnType<typeof preloadConversationsFactory>;
     rejectFriendRequest: ReturnType<typeof rejectFriendRequestFactory>;
     removeFriend: ReturnType<typeof removeFriendFactory>;
     removeFriendAlias: ReturnType<typeof removeFriendAliasFactory>;

package/dist/apis.js

@@ -94,6 +94,7 @@ import { lastOnlineFactory } from "./apis/lastOnline.js";
 import { leaveGroupFactory } from "./apis/leaveGroup.js";
 import { lockPollFactory } from "./apis/lockPoll.js";
 import { parseLinkFactory } from "./apis/parseLink.js";
+import { preloadConversationsFactory } from "./apis/preloadConversations.js";
 import { rejectFriendRequestFactory } from "./apis/rejectFriendRequest.js";
 import { removeFriendFactory } from "./apis/removeFriend.js";
 import { removeFriendAliasFactory } from "./apis/removeFriendAlias.js";
@@ -244,6 +245,7 @@ export class API {
         this.leaveGroup = leaveGroupFactory(ctx, this);
         this.lockPoll = lockPollFactory(ctx, this);
         this.parseLink = parseLinkFactory(ctx, this);
+        this.preloadConversations = preloadConversationsFactory(ctx, this);
         this.rejectFriendRequest = rejectFriendRequestFactory(ctx, this);
         this.removeFriend = removeFriendFactory(ctx, this);
         this.removeFriendAlias = removeFriendAliasFactory(ctx, this);

package/dist/cjs/apis/getGroupChatHistory.cjs

@@ -14,36 +14,64 @@ require('../models/Reminder.cjs');
 require('../models/ZBusiness.cjs');
 
 const getGroupChatHistoryFactory = utils.apiFactory()((api, ctx, utils) => {
-    const serviceURL = utils.makeURL(`${api.zpwServiceMap.group[0]}/api/group/history`);
+    const serviceURL = utils.makeURL(`${api.zpwServiceMap.group_cloud_message[0]}/api/cm/getrecentv2`);
     /**
-     * Get group chat history
+     * Get group chat history from Zalo Cloud Message (newest first)
      *
      * @param groupId group id
-     * @param count count of messages to return (default: 50)
+     * @param count count of messages to return (default: 50, max safe limit: 200)
      *
      * @throws {ZaloApiError}
      */
     return async function getGroupChatHistory(groupId, count = 50) {
-        const params = {
-            grid: groupId,
-            count: count,
-        };
-        const encryptedParams = utils.encodeAES(JSON.stringify(params));
-        if (!encryptedParams)
-            throw new ZaloApiError.ZaloApiError("Failed to encrypt params");
-        const response = await utils.request(utils.makeURL(serviceURL, { params: encryptedParams }), {
-            method: "GET",
-        });
-        return utils.resolve(response, (result) => {
-            let data = result.data;
-            if (typeof data === "string") {
-                data = JSON.parse(data);
+        if (!groupId)
+            throw new ZaloApiError.ZaloApiError("Missing groupId");
+        if (groupId.startsWith("g"))
+            groupId = groupId.slice(1);
+        const safeCount = Math.min(Math.max(count, 1), 200);
+        const messages = [];
+        let cursor = 0;
+        let lastPage = null;
+        let pageCount = 0;
+        while (messages.length < safeCount && pageCount < 10) {
+            pageCount++;
+            const params = {
+                groupId,
+                globalMsgId: cursor,
+                count: Math.min(50, safeCount - messages.length),
+                msgIds: [],
+                imei: ctx.imei,
+                src: 3,
+            };
+            const encryptedParams = utils.encodeAES(JSON.stringify(params));
+            if (!encryptedParams)
+                throw new ZaloApiError.ZaloApiError("Failed to encrypt params");
+            const response = await utils.request(utils.makeURL(serviceURL, { params: encryptedParams, nretry: 0 }), {
+                method: "GET",
+            });
+            lastPage = await utils.resolve(response, (result) => {
+                let data = result.data;
+                if (typeof data === "string") {
+                    data = JSON.parse(data);
+                }
+                return data;
+            });
+            if (!lastPage || !Array.isArray(lastPage.groupMsgs))
+                break;
+            for (const rawMsg of lastPage.groupMsgs) {
+                if (messages.length >= safeCount)
+                    break;
+                if (messages.some((m) => m.msgId === rawMsg.msgId))
+                    continue;
+                messages.push(rawMsg);
             }
-            for (let i = 0; i < data.groupMsgs.length; i++) {
-                data.groupMsgs[i] = new Message.GroupMessage(ctx.uid, data.groupMsgs[i]);
-            }
-            return data;
-        });
+            const nextCursor = Number(lastPage.lastMsgId);
+            if (!lastPage.hasMore || !nextCursor || nextCursor === cursor)
+                break;
+            cursor = nextCursor;
+        }
+        const groupMsgs = messages.map((data) => new Message.GroupMessage(ctx.uid, data));
+        return Object.assign({}, lastPage || {}, { groupMsgs });
     };
 });
 

package/dist/cjs/apis/listen.cjs

@@ -31,6 +31,7 @@ class Listener extends EventEmitter {
         super();
         this.ctx = ctx;
         this.urls = urls;
+        this.consecutive1006Count = 0;
         this.id = 0;
         if (!ctx.cookie)
             throw new ZaloApiError.ZaloApiError("Cookie is not available");
@@ -82,26 +83,71 @@ class Listener extends EventEmitter {
     onMessage(cb) {
         this.onMessageCallback = cb;
     }
+    isRetryable(code) {
+        return (code === exports.CloseReason.AbnormalClosure ||
+            this.ctx.settings.features.socket.close_and_retry_codes.includes(code));
+    }
     canRetry(code) {
-        if (!this.ctx.settings.features.socket.close_and_retry_codes.includes(code))
+        var _a;
+        if (!this.isRetryable(code))
             return false;
-        if (this.retryCount[code.toString()].count >= this.retryCount[code.toString()].max)
+        const retry = (_a = this.retryCount[code.toString()]) !== null && _a !== void 0 ? _a : this.retryCount["internal"];
+        if (!retry || retry.count >= retry.max)
             return false;
-        this.retryCount[code.toString()].count++;
-        const { count, max, times } = this.retryCount[code.toString()];
-        const retryTime = count - 1 < times.length ? times[count - 1] : times[times.length - 1];
+        retry.count++;
+        const { count, max, times } = retry;
+        let retryTime;
+        if (count - 1 < times.length) {
+            retryTime = times[count - 1];
+        }
+        else {
+            const lastTime = times[times.length - 1] || 1000;
+            const multiplier = Math.min(Math.pow(1.5, count - times.length), 10);
+            const jitter = Math.floor(Math.random() * 1000);
+            retryTime = Math.min(Math.floor(lastTime * multiplier) + jitter, 30000);
+        }
         utils.logger(this.ctx).verbose(`Retry for code ${code} in ${retryTime}ms (${count}/${max})`);
         return retryTime;
     }
+    resetRetryCount() {
+        for (const retry of Object.values(this.retryCount)) {
+            retry.count = 0;
+        }
+    }
+    resetWatchdog() {
+        if (this.watchdogTimeout)
+            clearTimeout(this.watchdogTimeout);
+        this.watchdogTimeout = setTimeout(() => {
+            utils.logger(this.ctx).verbose("Watchdog timeout: no packet/pong received from Zalo WebSocket in 50s. Forcing reconnect...");
+            if (this.ws) {
+                try {
+                    if (typeof this.ws.terminate === "function") {
+                        this.ws.terminate();
+                    }
+                    else if (typeof this.ws.close === "function") {
+                        this.ws.close(exports.CloseReason.AbnormalClosure);
+                    }
+                }
+                catch (_a) {
+                    // Ignore if already terminated
+                }
+            }
+        }, 50000);
+    }
     shouldRotate(code) {
-        if (!this.ctx.settings.features.socket.rotate_error_codes.includes(code))
-            return false;
-        if (this.rotateCount >= this.urls.length - 1)
+        if (code === exports.CloseReason.AbnormalClosure) {
+            this.consecutive1006Count++;
+            if (this.consecutive1006Count >= 2) {
+                this.consecutive1006Count = 0;
+                return true;
+            }
             return false;
-        return true;
+        }
+        this.consecutive1006Count = 0;
+        return this.ctx.settings.features.socket.rotate_error_codes.includes(code);
     }
     rotateEndpoint() {
-        this.rotateCount++;
+        this.rotateCount = (this.rotateCount + 1) % this.urls.length;
         this.wsURL = utils.makeURL(this.ctx, this.urls[this.rotateCount], {
             t: Date.now(),
         });
@@ -110,37 +156,46 @@ class Listener extends EventEmitter {
     start({ retryOnClose = false } = {}) {
         if (this.ws)
             throw new ZaloApiError.ZaloApiError("Already started");
+        this.wsURL = utils.makeURL(this.ctx, this.urls[this.rotateCount], {
+            t: Date.now(),
+        });
+        const cookie = this.ctx.cookie.getCookieStringSync("https://chat.zalo.me");
         const ws = new WebSocket(this.wsURL, {
             headers: {
-                "accept-encoding": "gzip, deflate, br, zstd",
-                "accept-language": "en-US,en;q=0.9",
+                "accept-language": utils.getBrowserLanguage(this.ctx.language),
                 "cache-control": "no-cache",
                 connection: "Upgrade",
                 host: new URL(this.wsURL).host,
                 origin: "https://chat.zalo.me",
-                prgama: "no-cache",
+                pragma: "no-cache",
                 "sec-websocket-extensions": "permessage-deflate; client_max_window_bits",
                 "sec-websocket-version": "13",
                 upgrade: "websocket",
                 "user-agent": this.userAgent,
-                cookie: this.cookie,
+                cookie,
             },
-            agent: this.ctx.options.agent
+            agent: this.ctx.options.agent,
         });
         this.ws = ws;
         ws.onopen = () => {
+            this.consecutive1006Count = 0;
+            this.resetRetryCount();
+            this.resetWatchdog();
             this.onConnectedCallback();
             this.emit("connected");
         };
         ws.onclose = (event) => {
             this.reset();
             this.emit("disconnected", event.code, event.reason);
-            const retry = retryOnClose && this.canRetry(event.code);
+            const retry = retryOnClose &&
+                this.isRetryable(event.code) &&
+                this.canRetry(event.code);
             if (retry && retryOnClose) {
                 const shouldRotate = this.shouldRotate(event.code);
                 if (shouldRotate) {
                     this.rotateEndpoint();
                 }
+                this.emit("reconnecting", event.code);
                 this.retryTimeout = setTimeout(() => {
                     this.start({ retryOnClose: true });
                 }, retry);
@@ -155,6 +210,8 @@ class Listener extends EventEmitter {
             this.emit("error", event);
         };
         ws.onmessage = async (event) => {
+            var _a, _b, _c;
+            this.resetWatchdog();
             this.emit("pong"); // Pulse event to notify watchdog that socket is alive
             const { data } = event;
             if (!(data instanceof Buffer))
@@ -182,9 +239,10 @@ class Listener extends EventEmitter {
                         this.sendWs(payload, false);
                         this.emit("ping");
                     };
+                    const pingIntervalTime = Math.min(Math.max(((_c = (_b = (_a = this.ctx.settings) === null || _a === void 0 ? void 0 : _a.features) === null || _b === void 0 ? void 0 : _b.socket) === null || _c === void 0 ? void 0 : _c.ping_interval) || 25000, 10000), 25000);
                     this.pingInterval = setInterval(() => {
                         ping();
-                    }, this.ctx.settings.features.socket.ping_interval);
+                    }, pingIntervalTime);
                 }
                 if (version == 1 && cmd == 501 && subCmd == 0) {
                     const parsedData = (await utils.decodeEventData(parsed, this.cipherKey)).data;
@@ -381,6 +439,8 @@ class Listener extends EventEmitter {
     stop() {
         if (this.retryTimeout)
             clearTimeout(this.retryTimeout);
+        if (this.watchdogTimeout)
+            clearTimeout(this.watchdogTimeout);
         if (this.ws) {
             if (this.ws.readyState !== WebSocket.CLOSED) {
                 this.ws.close(exports.CloseReason.ManualClosure);
@@ -437,6 +497,8 @@ class Listener extends EventEmitter {
         this.cipherKey = undefined;
         if (this.pingInterval)
             clearInterval(this.pingInterval);
+        if (this.watchdogTimeout)
+            clearTimeout(this.watchdogTimeout);
     }
 }
 function getHeader(buffer) {

package/dist/cjs/apis/login.cjs

@@ -6,7 +6,7 @@ var utils = require('../utils.cjs');
 async function login(ctx, encryptParams) {
     const encryptedParams = await getEncryptParam(ctx, encryptParams, "getlogininfo");
     try {
-        const response = await utils.request(ctx, utils.makeURL(ctx, "https://wpa.chat.zalo.me/api/login/getLoginInfo", Object.assign(Object.assign({}, encryptedParams.params), { nretry: 0 })));
+        const response = await utils.request(ctx, utils.makeURL(ctx, "https://wpa.chat.zalo.me/api/login/getLoginInfo", Object.assign(Object.assign({}, encryptedParams.params), { nretry: 0 }), false));
         if (!response.ok)
             throw new ZaloApiError.ZaloApiError("Failed to fetch login info: " + response.statusText);
         const data = await response.json();

package/dist/cjs/apis/loginQR.cjs

@@ -8,31 +8,16 @@ var ZaloApiLoginQRAborted = require('../Errors/ZaloApiLoginQRAborted.cjs');
 var ZaloApiLoginQRDeclined = require('../Errors/ZaloApiLoginQRDeclined.cjs');
 
 /**
- * Tạo bộ header Sec-CH-UA dùng chung cho toàn bộ các request trong luồng đăng nhập QR.
+ * Tạo bộ header Sec-CH-UA và ngôn ngữ dùng chung cho toàn bộ các request trong luồng đăng nhập QR.
  *
- * Trước đây 8 hàm con trong loginQR đều copy-paste cùng một bộ header với giá trị
- * `sec-ch-ua-platform: "Windows"` bị hardcode cứng. Điều này gây ra mâu thuẫn fingerprint
- * (Browser Mismatch) khi người dùng truyền vào User-Agent của Mac hoặc Linux,
- * khiến hệ thống chống bot của Zalo phát hiện và ban session ngay lập tức.
+ * Tất cả giá trị sec-ch-ua-* đều được suy luận ĐỘNG từ ctx.userAgent (chỉ khi là Chromium)
+ * và accept-language theo ctx.language, đảm bảo nhất quán 100% với môi trường trình duyệt thật.
  *
- * Giải pháp: Tất cả giá trị sec-ch-ua-* đều được suy luận ĐỘNG từ ctx.userAgent,
- * đảm bảo nhất quán 100% giữa User-Agent và các Client Hint headers.
- *
- * @param ctx - Context chứa ctx.userAgent đã được gán trước khi gọi hàm này
+ * @param ctx - Context chứa ctx.userAgent và ctx.language
  * @param extra - Các header bổ sung đặc thù cho từng request (sec-fetch-dest, Referer...)
  */
 function getLoginHeaders(ctx, extra) {
-    // Suy luận platform từ UA: "Windows" | "macOS" | "Linux" (mặc định "Windows" nếu không nhận ra)
-    const platform = utils.getPlatformFromUA(ctx.userAgent);
-    // Trích xuất phiên bản Chrome major từ UA (ví dụ: "130"), fallback về "130" nếu không phải Chrome
-    const chromeVer = utils.getChromeVersionFromUA(ctx.userAgent);
-    return Object.assign({ "accept-language": "vi-VN,vi;q=0.9,fr-FR;q=0.8,fr;q=0.7,en-US;q=0.6,en;q=0.5", 
-        // sec-ch-ua phải khớp với phiên bản Chrome trong User-Agent
-        "sec-ch-ua": `"Chromium";v="${chromeVer}", "Google Chrome";v="${chromeVer}", "Not?A_Brand";v="99"`, 
-        // Luôn là desktop (?0) vì Zalo Web không hỗ trợ mobile
-        "sec-ch-ua-mobile": "?0", 
-        // sec-ch-ua-platform PHẢI nhất quán với User-Agent — đây là nguyên nhân gốc rễ gây ban session
-        "sec-ch-ua-platform": `"${platform}"` }, extra);
+    return Object.assign(Object.assign({ "accept-language": utils.getBrowserLanguage(ctx.language) }, utils.getSecChUaHeaders(ctx.userAgent)), extra);
 }
 exports.LoginQRCallbackEventType = void 0;
 (function (LoginQRCallbackEventType) {

package/dist/cjs/apis/preloadConversations.cjs

@@ -0,0 +1,28 @@
+'use strict';
+
+var ZaloApiError = require('../Errors/ZaloApiError.cjs');
+var utils = require('../utils.cjs');
+
+const preloadConversationsFactory = utils.apiFactory()((api, ctx, utils) => {
+    const serviceURL = utils.makeURL(`${api.zpwServiceMap.conversation[0]}/api/preloadconvers/get-last-msgs`);
+    /**
+     * Preload last messages across all active conversations.
+     * Useful for initial state loading and catching up missed messages after reconnect.
+     *
+     * @throws {ZaloApiError}
+     */
+    return async function preloadConversations() {
+        const params = {
+            imei: ctx.imei,
+        };
+        const encryptedParams = utils.encodeAES(JSON.stringify(params));
+        if (!encryptedParams)
+            throw new ZaloApiError.ZaloApiError("Failed to encrypt params");
+        const response = await utils.request(utils.makeURL(serviceURL, { params: encryptedParams }), {
+            method: "GET",
+        });
+        return utils.resolve(response);
+    };
+});
+
+exports.preloadConversationsFactory = preloadConversationsFactory;

package/dist/cjs/apis.cjs

@@ -96,6 +96,7 @@ var lastOnline = require('./apis/lastOnline.cjs');
 var leaveGroup = require('./apis/leaveGroup.cjs');
 var lockPoll = require('./apis/lockPoll.cjs');
 var parseLink = require('./apis/parseLink.cjs');
+var preloadConversations = require('./apis/preloadConversations.cjs');
 var rejectFriendRequest = require('./apis/rejectFriendRequest.cjs');
 var removeFriend = require('./apis/removeFriend.cjs');
 var removeFriendAlias = require('./apis/removeFriendAlias.cjs');
@@ -247,6 +248,7 @@ class API {
         this.leaveGroup = leaveGroup.leaveGroupFactory(ctx, this);
         this.lockPoll = lockPoll.lockPollFactory(ctx, this);
         this.parseLink = parseLink.parseLinkFactory(ctx, this);
+        this.preloadConversations = preloadConversations.preloadConversationsFactory(ctx, this);
         this.rejectFriendRequest = rejectFriendRequest.rejectFriendRequestFactory(ctx, this);
         this.removeFriend = removeFriend.removeFriendFactory(ctx, this);
         this.removeFriendAlias = removeFriendAlias.removeFriendAliasFactory(ctx, this);

package/dist/cjs/context.cjs

@@ -12,7 +12,7 @@ class CallbacksMap extends Map {
         return super.set(key, value);
     }
 }
-const createContext = (apiType = 30, apiVersion = 671) => ({
+const createContext = (apiType = 30, apiVersion = 689) => ({
     API_TYPE: apiType,
     API_VERSION: apiVersion,
     uploadCallbacks: new CallbacksMap(),

package/dist/cjs/utils.cjs

@@ -267,25 +267,49 @@ function getPlatformFromUA(userAgent) {
  */
 function getChromeVersionFromUA(userAgent) {
     if (!userAgent)
-        return "130"; // Không có UA → dùng version ổn định
+        return "133"; // Không có UA → dùng version ổn định hiện đại
     const match = userAgent.match(/Chrome\/(\d+)/);
-    return match ? match[1] : "130"; // Không phải Chrome → fallback về "130"
+    return match ? match[1] : "133"; // Không phải Chrome → fallback về "133"
+}
+/**
+ * Chuẩn hóa chuỗi Accept-Language dựa theo thiết lập ngôn ngữ ngữ cảnh.
+ *
+ * @param language Mã ngôn ngữ ("vi", "en", ...)
+ * @returns Chuỗi Accept-Language chuẩn theo hành vi trình duyệt
+ */
+function getBrowserLanguage(language) {
+    if (language === "en") {
+        return "en-US,en;q=0.9,vi;q=0.8";
+    }
+    return "vi-VN,vi;q=0.9,en-US;q=0.8,en;q=0.7";
+}
+/**
+ * Sinh bộ header Sec-CH-UA nhất quán theo User-Agent (chỉ khi là Chromium/Chrome).
+ *
+ * Nếu User-Agent là Firefox/Safari, hàm sẽ trả về object rỗng nhằm tránh
+ * tạo ra dị thường Browser Mismatch.
+ *
+ * @param userAgent Chuỗi User-Agent của client
+ * @returns Record chứa các header sec-ch-ua-* hoặc object rỗng
+ */
+function getSecChUaHeaders(userAgent) {
+    if (!userAgent || !/Chrome\//i.test(userAgent))
+        return {};
+    const platform = getPlatformFromUA(userAgent);
+    const chromeVer = getChromeVersionFromUA(userAgent);
+    return {
+        "sec-ch-ua": `"Not=A?Brand";v="99", "Google Chrome";v="${chromeVer}", "Chromium";v="${chromeVer}"`,
+        "sec-ch-ua-mobile": "?0",
+        "sec-ch-ua-platform": `"${platform}"`,
+    };
 }
 async function getDefaultHeaders(ctx, origin = "https://chat.zalo.me") {
     if (!ctx.cookie)
         throw new ZaloApiError.ZaloApiError("Cookie is not available");
     if (!ctx.userAgent)
         throw new ZaloApiError.ZaloApiError("User agent is not available");
-    return {
-        Accept: "application/json, text/plain, */*",
-        "Accept-Encoding": "gzip, deflate, br, zstd",
-        "Accept-Language": "en-US,en;q=0.9",
-        "content-type": "application/x-www-form-urlencoded",
-        Cookie: await ctx.cookie.getCookieString(origin),
-        Origin: "https://chat.zalo.me",
-        Referer: "https://chat.zalo.me/",
-        "User-Agent": ctx.userAgent,
-    };
+    const secChUa = getSecChUaHeaders(ctx.userAgent);
+    return Object.assign({ accept: "*/*", "accept-encoding": "gzip, deflate, br, zstd", "accept-language": getBrowserLanguage(ctx.language), "content-type": "application/x-www-form-urlencoded", cookie: await ctx.cookie.getCookieString(origin), origin: "https://chat.zalo.me", priority: "u=1, i", referer: "https://chat.zalo.me/", "user-agent": ctx.userAgent, "sec-fetch-dest": "empty", "sec-fetch-mode": "cors", "sec-fetch-site": "same-site" }, secChUa);
 }
 async function request(ctx, url, options, raw = false) {
     var _a, _b;
@@ -300,11 +324,17 @@ async function request(ctx, url, options, raw = false) {
         else
             options = { headers: defaultHeaders };
     }
-    const _options = Object.assign(Object.assign({}, (options !== null && options !== void 0 ? options : {})), (isBun ? {
-        // eslint-disable-next-line @typescript-eslint/ban-ts-comment
-        // @ts-ignore
-        proxy: (_b = (_a = ctx.options.agent) === null || _a === void 0 ? void 0 : _a.proxy) === null || _b === void 0 ? void 0 : _b.href
-    } : { agent: ctx.options.agent }));
+    const _options = Object.assign(Object.assign({}, (options !== null && options !== void 0 ? options : {})), (isBun
+        ? {
+            // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+            // @ts-ignore
+            proxy: (_b = (_a = ctx.options.agent) === null || _a === void 0 ? void 0 : _a.proxy) === null || _b === void 0 ? void 0 : _b.href,
+        }
+        : {
+            agent: ctx.options.agent,
+            // Hỗ trợ Undici Dispatcher cho Node.js 18+ native fetch
+            dispatcher: ctx.options.agent,
+        }));
     const response = await ctx.options.polyfill(url, _options);
     const setCookieRaw = response.headers.get("set-cookie");
     if (setCookieRaw && !raw) {
@@ -712,6 +742,7 @@ exports.encodeAES = encodeAES;
 exports.encryptPin = encryptPin;
 exports.formatTime = formatTime;
 exports.generateZaloUUID = generateZaloUUID;
+exports.getBrowserLanguage = getBrowserLanguage;
 exports.getChromeVersionFromUA = getChromeVersionFromUA;
 exports.getClientMessageType = getClientMessageType;
 exports.getDefaultHeaders = getDefaultHeaders;
@@ -725,6 +756,7 @@ exports.getGroupEventType = getGroupEventType;
 exports.getImageMetaData = getImageMetaData;
 exports.getMd5LargeFileObject = getMd5LargeFileObject;
 exports.getPlatformFromUA = getPlatformFromUA;
+exports.getSecChUaHeaders = getSecChUaHeaders;
 exports.getSignKey = getSignKey;
 exports.handleZaloResponse = handleZaloResponse;
 exports.hasOwn = hasOwn;

package/dist/cjs/zalo.cjs

@@ -78,7 +78,8 @@ class Zalo {
         if (!options)
             options = {};
         if (!options.userAgent)
-            options.userAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0";
+            options.userAgent =
+                "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36";
         if (!options.language)
             options.language = "vi";
         const ctx = context.createContext(this.options.apiType, this.options.apiVersion);

package/dist/context.js

@@ -10,7 +10,7 @@ class CallbacksMap extends Map {
         return super.set(key, value);
     }
 }
-export const createContext = (apiType = 30, apiVersion = 671) => ({
+export const createContext = (apiType = 30, apiVersion = 689) => ({
     API_TYPE: apiType,
     API_VERSION: apiVersion,
     uploadCallbacks: new CallbacksMap(),

package/dist/utils.d.ts

@@ -81,15 +81,36 @@ export declare function getPlatformFromUA(userAgent: string | undefined): string
  * @returns Phiên bản Chrome major dạng string, ví dụ: "130", "133"
  */
 export declare function getChromeVersionFromUA(userAgent: string | undefined): string;
+/**
+ * Chuẩn hóa chuỗi Accept-Language dựa theo thiết lập ngôn ngữ ngữ cảnh.
+ *
+ * @param language Mã ngôn ngữ ("vi", "en", ...)
+ * @returns Chuỗi Accept-Language chuẩn theo hành vi trình duyệt
+ */
+export declare function getBrowserLanguage(language: string | undefined): string;
+/**
+ * Sinh bộ header Sec-CH-UA nhất quán theo User-Agent (chỉ khi là Chromium/Chrome).
+ *
+ * Nếu User-Agent là Firefox/Safari, hàm sẽ trả về object rỗng nhằm tránh
+ * tạo ra dị thường Browser Mismatch.
+ *
+ * @param userAgent Chuỗi User-Agent của client
+ * @returns Record chứa các header sec-ch-ua-* hoặc object rỗng
+ */
+export declare function getSecChUaHeaders(userAgent: string | undefined): Record<string, string>;
 export declare function getDefaultHeaders(ctx: ContextBase, origin?: string): Promise<{
-    Accept: string;
-    "Accept-Encoding": string;
-    "Accept-Language": string;
+    accept: string;
+    "accept-encoding": string;
+    "accept-language": string;
     "content-type": string;
-    Cookie: string;
-    Origin: string;
-    Referer: string;
-    "User-Agent": string;
+    cookie: string;
+    origin: string;
+    priority: string;
+    referer: string;
+    "user-agent": string;
+    "sec-fetch-dest": string;
+    "sec-fetch-mode": string;
+    "sec-fetch-site": string;
 }>;
 export declare function request(ctx: ContextBase, url: string, options?: RequestInit, raw?: boolean): Promise<Response>;
 export declare function getImageMetaData(ctx: ContextBase, filePath: string): Promise<{

package/dist/utils.js

@@ -263,25 +263,49 @@ export function getPlatformFromUA(userAgent) {
  */
 export function getChromeVersionFromUA(userAgent) {
     if (!userAgent)
-        return "130"; // Không có UA → dùng version ổn định
+        return "133"; // Không có UA → dùng version ổn định hiện đại
     const match = userAgent.match(/Chrome\/(\d+)/);
-    return match ? match[1] : "130"; // Không phải Chrome → fallback về "130"
+    return match ? match[1] : "133"; // Không phải Chrome → fallback về "133"
+}
+/**
+ * Chuẩn hóa chuỗi Accept-Language dựa theo thiết lập ngôn ngữ ngữ cảnh.
+ *
+ * @param language Mã ngôn ngữ ("vi", "en", ...)
+ * @returns Chuỗi Accept-Language chuẩn theo hành vi trình duyệt
+ */
+export function getBrowserLanguage(language) {
+    if (language === "en") {
+        return "en-US,en;q=0.9,vi;q=0.8";
+    }
+    return "vi-VN,vi;q=0.9,en-US;q=0.8,en;q=0.7";
+}
+/**
+ * Sinh bộ header Sec-CH-UA nhất quán theo User-Agent (chỉ khi là Chromium/Chrome).
+ *
+ * Nếu User-Agent là Firefox/Safari, hàm sẽ trả về object rỗng nhằm tránh
+ * tạo ra dị thường Browser Mismatch.
+ *
+ * @param userAgent Chuỗi User-Agent của client
+ * @returns Record chứa các header sec-ch-ua-* hoặc object rỗng
+ */
+export function getSecChUaHeaders(userAgent) {
+    if (!userAgent || !/Chrome\//i.test(userAgent))
+        return {};
+    const platform = getPlatformFromUA(userAgent);
+    const chromeVer = getChromeVersionFromUA(userAgent);
+    return {
+        "sec-ch-ua": `"Not=A?Brand";v="99", "Google Chrome";v="${chromeVer}", "Chromium";v="${chromeVer}"`,
+        "sec-ch-ua-mobile": "?0",
+        "sec-ch-ua-platform": `"${platform}"`,
+    };
 }
 export async function getDefaultHeaders(ctx, origin = "https://chat.zalo.me") {
     if (!ctx.cookie)
         throw new ZaloApiError("Cookie is not available");
     if (!ctx.userAgent)
         throw new ZaloApiError("User agent is not available");
-    return {
-        Accept: "application/json, text/plain, */*",
-        "Accept-Encoding": "gzip, deflate, br, zstd",
-        "Accept-Language": "en-US,en;q=0.9",
-        "content-type": "application/x-www-form-urlencoded",
-        Cookie: await ctx.cookie.getCookieString(origin),
-        Origin: "https://chat.zalo.me",
-        Referer: "https://chat.zalo.me/",
-        "User-Agent": ctx.userAgent,
-    };
+    const secChUa = getSecChUaHeaders(ctx.userAgent);
+    return Object.assign({ accept: "*/*", "accept-encoding": "gzip, deflate, br, zstd", "accept-language": getBrowserLanguage(ctx.language), "content-type": "application/x-www-form-urlencoded", cookie: await ctx.cookie.getCookieString(origin), origin: "https://chat.zalo.me", priority: "u=1, i", referer: "https://chat.zalo.me/", "user-agent": ctx.userAgent, "sec-fetch-dest": "empty", "sec-fetch-mode": "cors", "sec-fetch-site": "same-site" }, secChUa);
 }
 export async function request(ctx, url, options, raw = false) {
     var _a, _b;
@@ -296,11 +320,17 @@ export async function request(ctx, url, options, raw = false) {
         else
             options = { headers: defaultHeaders };
     }
-    const _options = Object.assign(Object.assign({}, (options !== null && options !== void 0 ? options : {})), (isBun ? {
-        // eslint-disable-next-line @typescript-eslint/ban-ts-comment
-        // @ts-ignore
-        proxy: (_b = (_a = ctx.options.agent) === null || _a === void 0 ? void 0 : _a.proxy) === null || _b === void 0 ? void 0 : _b.href
-    } : { agent: ctx.options.agent }));
+    const _options = Object.assign(Object.assign({}, (options !== null && options !== void 0 ? options : {})), (isBun
+        ? {
+            // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+            // @ts-ignore
+            proxy: (_b = (_a = ctx.options.agent) === null || _a === void 0 ? void 0 : _a.proxy) === null || _b === void 0 ? void 0 : _b.href,
+        }
+        : {
+            agent: ctx.options.agent,
+            // Hỗ trợ Undici Dispatcher cho Node.js 18+ native fetch
+            dispatcher: ctx.options.agent,
+        }));
     const response = await ctx.options.polyfill(url, _options);
     const setCookieRaw = response.headers.get("set-cookie");
     if (setCookieRaw && !raw) {

package/dist/zalo.js

@@ -75,7 +75,8 @@ export class Zalo {
         if (!options)
             options = {};
         if (!options.userAgent)
-            options.userAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0";
+            options.userAgent =
+                "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36";
         if (!options.language)
             options.language = "vi";
         const ctx = createContext(this.options.apiType, this.options.apiVersion);

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@softtynet/zca-js",
-    "version": "2.1.11",
+    "version": "2.1.17",
     "description": "Unofficial Zalo API for JavaScript",
     "main": "dist/index.js",
     "type": "module",