baileys-antiban 3.4.0 → 3.5.0

package/CHANGELOG.md

@@ -5,6 +5,76 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.5.0] — 2026-04-26
+
+### Added
+- **proxyRotator** — Native proxy injection with multi-strategy rotation and health tracking
+  - Closes the datacenter IP ban vector — WhatsApp's ML flags VPS IPs, residential/4G proxies stay alive
+  - Supports SOCKS5, SOCKS5H, HTTP, HTTPS proxies with auth
+  - 4 rotation strategies: round-robin, random, least-recently-used, weighted (by health)
+  - Auto-failover on endpoint failure with configurable dead thresholds (default: 3 failures)
+  - Health tracking: failure counters, dead-marking, auto-resurrection after cooldown (default: 10min)
+  - Per-endpoint cooldown periods to avoid hammering proxy providers
+  - Scheduled rotation for proactive IP rotation (configurable interval)
+  - Rotation triggers: manual, disconnect, ban-warning, scheduled (user-wired)
+  - Lazy-loaded proxy agent dependencies (optional peerDeps: socks-proxy-agent, http-proxy-agent, https-proxy-agent)
+  - Agent caching for performance (avoids re-creating agents on every request)
+  - Comprehensive stats: total rotations, per-trigger breakdowns, endpoint health dashboard
+  - Production-ready error handling: graceful fallback when peer deps missing
+
+### Fixed
+- **proxyRotator**: Fixed ESM `require()` regression by using `createRequire()` from `node:module` for ESM-compatible synchronous module loading (caught by live SOCKS5 smoke test before publish)
+
+### Why v3.5
+Per GapHunter analysis, WhatsApp's ban detection includes IP reputation scoring. Datacenter IPs (VPS) are flagged. Residential/4G proxies stay alive. Every Baileys implementation uses DIY proxy hacks — no library handles native proxy injection. `proxyRotator` closes that gap with production-grade rotation strategies, health tracking, and auto-failover.
+
+### Usage
+```ts
+import { proxyRotator } from 'baileys-antiban';
+import { makeWASocket } from 'baileys';
+
+const rotator = proxyRotator({
+  pool: [
+    { type: 'socks5', host: 'proxy1.example.com', port: 1080, username: 'user', password: 'pass', label: 'Proxy1' },
+    { type: 'socks5', host: 'proxy2.example.com', port: 1080, username: 'user', password: 'pass', label: 'Proxy2', cooldownMs: 300_000 },
+  ],
+  strategy: 'weighted', // Prefer healthier endpoints
+  rotateOn: ['disconnect', 'ban-warning'],
+  maxFailures: 3,
+  deadCooldownMs: 600_000, // 10 minutes
+});
+
+const sock = makeWASocket({
+  auth: state,
+  fetchAgent: rotator.currentAgent(), // Inject proxy into Baileys fetch
+});
+
+// Wire disconnect rotation
+sock.ev.on('connection.update', ({ connection }) => {
+  if (connection === 'close') {
+    rotator.rotate('disconnect');
+  }
+});
+
+// Wire ban-warning rotation (from sessionStability)
+monitor.onDegraded = () => {
+  rotator.rotate('ban-warning');
+};
+
+// Check stats
+console.log(rotator.getStats());
+```
+
+### Technical Details
+- Agent caching: agents are created once per endpoint and reused until rotation
+- Cooldown logic: endpoints are skipped if `Date.now() - lastUsedAt < cooldownMs`
+- Dead resurrection: auto-checks on rotation if `Date.now() - lastUsedAt >= deadCooldownMs`
+- Weighted strategy: `weight = 1 / (failures + 1)` for probabilistic health-biased selection
+- LRU strategy: prioritizes never-used endpoints, then oldest `lastUsedAt`
+- Peer dep handling: uses `require()` with try/catch, logs clear error on missing deps
+- Pool size 1: logs warning once, rotation becomes no-op
+- All endpoints dead: `currentAgent()` returns `null`, user code must handle
+
 ## [3.4.0] — 2026-04-26
 
 ### Added

package/README.md

@@ -203,6 +203,91 @@ console.log(stats.throttledSendCount);   // Sends gated since reconnect
 
 **Why?** When WhatsApp reconnects after a disconnection, sending messages at full rate immediately can trigger rate limit alarms. The reconnect throttle gradually ramps up sending rate over 60 seconds, mimicking how a human would resume messaging after their internet came back.
 
+## Proxy Rotation (v3.5)
+
+WhatsApp's ban detection includes **IP reputation scoring**. Datacenter IPs (VPS) are flagged. Residential/4G proxies stay alive. No Baileys library handles native proxy injection — every implementation uses DIY hacks. `proxyRotator` closes that gap.
+
+### Features
+- Multi-strategy rotation: round-robin, random, least-recently-used, weighted (by health)
+- Auto-failover on endpoint failure
+- Health tracking with auto-resurrection after cooldown
+- Per-endpoint cooldown periods
+- Scheduled rotation for proactive IP rotation
+- Supports SOCKS5, SOCKS5H, HTTP, HTTPS proxies with auth
+
+### Basic Usage
+
+```typescript
+import { proxyRotator } from 'baileys-antiban';
+import { makeWASocket } from 'baileys';
+
+const rotator = proxyRotator({
+  pool: [
+    {
+      type: 'socks5',
+      host: 'proxy1.example.com',
+      port: 1080,
+      username: 'user',
+      password: 'pass',
+      label: 'Proxy1',
+    },
+    {
+      type: 'socks5',
+      host: 'proxy2.example.com',
+      port: 1080,
+      username: 'user',
+      password: 'pass',
+      label: 'Proxy2',
+      cooldownMs: 300_000, // 5-minute cooldown
+    },
+  ],
+  strategy: 'weighted', // Prefer healthier endpoints
+  rotateOn: ['disconnect', 'ban-warning'],
+  maxFailures: 3,
+  deadCooldownMs: 600_000, // 10 minutes
+});
+
+const sock = makeWASocket({
+  auth: state,
+  fetchAgent: rotator.currentAgent(), // Inject proxy
+});
+
+// Wire disconnect rotation
+sock.ev.on('connection.update', ({ connection }) => {
+  if (connection === 'close') {
+    rotator.rotate('disconnect');
+  }
+});
+
+// Check stats
+console.log(rotator.getStats());
+```
+
+### Advanced: Scheduled Rotation
+
+```typescript
+const rotator = proxyRotator({
+  pool: [...proxies],
+  rotateOn: ['scheduled', 'disconnect'],
+  scheduledIntervalMs: 3_600_000, // Rotate every hour
+  strategy: 'least-recently-used',
+});
+
+// Auto-rotates every hour + on disconnects
+```
+
+### Peer Dependencies
+
+Install proxy agent libraries for the protocols you use:
+
+```bash
+npm install socks-proxy-agent      # For SOCKS5/SOCKS5H
+npm install http-proxy-agent       # For HTTP
+npm install https-proxy-agent      # For HTTPS
+```
+
+All are optional peerDeps — only install what you need.
+
 ## LID / Phone Number Canonicalization
 
 WhatsApp migrated to **Linked Identity (LID)** in 2024. A contact now has two JID forms:

package/dist/index.d.ts

@@ -35,3 +35,4 @@ export { messageRecovery, type MessageRecoveryConfig, type MessageRecoveryStats,
 export { generateFingerprint, applyFingerprint, type DeviceFingerprint, type DeviceFingerprintConfig, } from './deviceFingerprint.js';
 export { credsSnapshot, type CredsSnapshot, type CredsSnapshotConfig, } from './credsSnapshot.js';
 export { readReceiptVariance, type ReadReceiptVariance, type ReadReceiptVarianceConfig, } from './readReceiptVariance.js';
+export { proxyRotator, type ProxyEndpoint, type ProxyRotatorConfig, type ProxyRotatorStats, type ProxyRotatorHandle, } from './proxyRotator.js';

package/dist/index.js

@@ -47,3 +47,5 @@ export { messageRecovery } from './messageRecovery.js';
 export { generateFingerprint, applyFingerprint, } from './deviceFingerprint.js';
 export { credsSnapshot, } from './credsSnapshot.js';
 export { readReceiptVariance, } from './readReceiptVariance.js';
+// v3.5 new modules
+export { proxyRotator, } from './proxyRotator.js';

package/dist/proxyRotator.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Proxy Rotation — Native proxy injection for Baileys with health tracking
+ *
+ * WhatsApp's ban detection includes IP reputation scoring. Datacenter IPs (VPS)
+ * are flagged, while residential/4G proxies stay alive. No Baileys library handles
+ * native proxy injection — every implementation is DIY hacks. We close that gap.
+ *
+ * Features:
+ * - Multi-strategy rotation (round-robin, random, LRU, weighted)
+ * - Auto-failover on endpoint failure
+ * - Scheduled rotation for proactive IP rotation
+ * - Cooldown periods between endpoint reuse
+ * - Health tracking and auto-resurrection
+ * - Lazy-loaded proxy agent dependencies (optional peerDeps)
+ *
+ * @author Kobus Wentzel <kobie@pop.co.za>
+ * @license MIT
+ */
+import type { Agent } from 'node:http';
+export interface ProxyEndpoint {
+    type: 'socks5' | 'socks5h' | 'http' | 'https';
+    host: string;
+    port: number;
+    username?: string;
+    password?: string;
+    /** Optional health label — humans use this in logs */
+    label?: string;
+    /** Cooldown after last use, in ms (default: 0) */
+    cooldownMs?: number;
+}
+export interface ProxyRotatorConfig {
+    /** Pool of proxy endpoints. Required. */
+    pool: ProxyEndpoint[];
+    /** Strategy for picking next proxy (default: 'round-robin') */
+    strategy?: 'round-robin' | 'random' | 'least-recently-used' | 'weighted';
+    /** Auto-rotate on these triggers (default: ['disconnect', 'ban-warning']) */
+    rotateOn?: Array<'disconnect' | 'ban-warning' | 'scheduled' | 'manual'>;
+    /** Scheduled rotation interval in ms (only if rotateOn includes 'scheduled') */
+    scheduledIntervalMs?: number;
+    /** Max consecutive failures before marking endpoint dead (default: 3) */
+    maxFailures?: number;
+    /** How long a "dead" endpoint stays out of rotation (default: 600_000 = 10min) */
+    deadCooldownMs?: number;
+    /** Logger */
+    logger?: {
+        info?: Function;
+        warn?: Function;
+        error?: Function;
+    };
+}
+export interface ProxyRotatorStats {
+    totalRotations: number;
+    rotationsByTrigger: Record<string, number>;
+    endpointHealth: Array<{
+        label: string;
+        inUse: boolean;
+        failures: number;
+        lastUsedAt: Date | null;
+        isDead: boolean;
+    }>;
+    currentEndpoint: string | null;
+}
+export interface ProxyRotatorHandle {
+    /** Get an Agent for the current endpoint. Use this in fetchOptions.agent or makeWASocket's options.agent */
+    currentAgent(): Agent | null;
+    /** Get the current endpoint's metadata */
+    current(): ProxyEndpoint | null;
+    /** Force rotate to next endpoint. Reason logged in stats. */
+    rotate(reason?: 'manual' | 'disconnect' | 'ban-warning' | 'scheduled'): ProxyEndpoint | null;
+    /** Mark current endpoint as failed (increments failure counter, may auto-rotate) */
+    markFailure(): void;
+    /** Clear all dead-flags (e.g. for cooldown override) */
+    resurrectAll(): void;
+    /** Stop scheduled rotation timer + dispose */
+    stop(): void;
+    /** Stats */
+    getStats(): ProxyRotatorStats;
+}
+export declare function proxyRotator(config: ProxyRotatorConfig): ProxyRotatorHandle;

package/dist/proxyRotator.js

@@ -0,0 +1,295 @@
+/**
+ * Proxy Rotation — Native proxy injection for Baileys with health tracking
+ *
+ * WhatsApp's ban detection includes IP reputation scoring. Datacenter IPs (VPS)
+ * are flagged, while residential/4G proxies stay alive. No Baileys library handles
+ * native proxy injection — every implementation is DIY hacks. We close that gap.
+ *
+ * Features:
+ * - Multi-strategy rotation (round-robin, random, LRU, weighted)
+ * - Auto-failover on endpoint failure
+ * - Scheduled rotation for proactive IP rotation
+ * - Cooldown periods between endpoint reuse
+ * - Health tracking and auto-resurrection
+ * - Lazy-loaded proxy agent dependencies (optional peerDeps)
+ *
+ * @author Kobus Wentzel <kobie@pop.co.za>
+ * @license MIT
+ */
+import { createRequire } from 'node:module';
+// Create require for optional peer dependency loading in ESM
+const require = createRequire(import.meta.url);
+const NoopLogger = {
+    info: () => { },
+    warn: () => { },
+    error: () => { },
+};
+export function proxyRotator(config) {
+    const { pool, strategy = 'round-robin', rotateOn = ['disconnect', 'ban-warning'], scheduledIntervalMs = 0, maxFailures = 3, deadCooldownMs = 600_000, // 10 minutes
+    logger = NoopLogger, } = config;
+    if (!pool || pool.length === 0) {
+        throw new Error('proxyRotator: pool cannot be empty');
+    }
+    // Warn once for pool size 1
+    if (pool.length === 1) {
+        logger.warn?.('proxyRotator: pool size is 1. Rotation is a no-op.');
+    }
+    // Warn for aggressive scheduled rotation
+    if (scheduledIntervalMs > 0 && scheduledIntervalMs < 60_000) {
+        logger.warn?.(`proxyRotator: scheduledIntervalMs (${scheduledIntervalMs}ms) is < 60s. May hammer proxy provider.`);
+    }
+    // Internal state
+    const states = pool.map((endpoint) => ({
+        endpoint,
+        failures: 0,
+        lastUsedAt: null,
+        isDead: false,
+    }));
+    let currentIndex = 0;
+    let totalRotations = 0;
+    const rotationsByTrigger = {};
+    let scheduledTimer = null;
+    // Agent cache: map endpoint -> Agent (cleared on rotation)
+    const agentCache = new Map();
+    // Module cache for lazy-loaded proxy agents
+    const moduleCache = {};
+    function buildProxyUrl(endpoint) {
+        const { type, host, port, username, password } = endpoint;
+        const auth = username && password ? `${username}:${password}@` : '';
+        return `${type}://${auth}${host}:${port}`;
+    }
+    function createAgentForEndpointSync(endpoint) {
+        // Check cache first
+        if (agentCache.has(endpoint)) {
+            return agentCache.get(endpoint);
+        }
+        const url = buildProxyUrl(endpoint);
+        let agent = null;
+        try {
+            if (endpoint.type === 'socks5' || endpoint.type === 'socks5h') {
+                if (!moduleCache['socks-proxy-agent']) {
+                    try {
+                        moduleCache['socks-proxy-agent'] = require('socks-proxy-agent');
+                    }
+                    catch {
+                        logger.error?.('socks-proxy-agent not installed. Run: npm install socks-proxy-agent');
+                        return null;
+                    }
+                }
+                agent = new moduleCache['socks-proxy-agent'].SocksProxyAgent(url);
+            }
+            else if (endpoint.type === 'http') {
+                if (!moduleCache['http-proxy-agent']) {
+                    try {
+                        moduleCache['http-proxy-agent'] = require('http-proxy-agent');
+                    }
+                    catch {
+                        logger.error?.('http-proxy-agent not installed. Run: npm install http-proxy-agent');
+                        return null;
+                    }
+                }
+                agent = new moduleCache['http-proxy-agent'].HttpProxyAgent(url);
+            }
+            else if (endpoint.type === 'https') {
+                if (!moduleCache['https-proxy-agent']) {
+                    try {
+                        moduleCache['https-proxy-agent'] = require('https-proxy-agent');
+                    }
+                    catch {
+                        logger.error?.('https-proxy-agent not installed. Run: npm install https-proxy-agent');
+                        return null;
+                    }
+                }
+                agent = new moduleCache['https-proxy-agent'].HttpsProxyAgent(url);
+            }
+            else {
+                logger.error?.(`Unknown proxy type: ${endpoint.type}`);
+                return null;
+            }
+            // Cache the agent
+            if (agent) {
+                agentCache.set(endpoint, agent);
+            }
+            return agent;
+        }
+        catch (err) {
+            logger.error?.(`Failed to create agent for ${endpoint.label || endpoint.host}: ${err}`);
+            return null;
+        }
+    }
+    function getAliveEndpoints() {
+        const now = Date.now();
+        return states
+            .map((s, idx) => {
+            // Dead check with auto-resurrection
+            if (s.isDead && s.lastUsedAt) {
+                if (now - s.lastUsedAt.getTime() >= deadCooldownMs) {
+                    s.isDead = false;
+                    s.failures = 0;
+                    logger.info?.(`Resurrected endpoint ${s.endpoint.label || s.endpoint.host} after cooldown`);
+                }
+            }
+            // Cooldown check
+            const cooldown = s.endpoint.cooldownMs || 0;
+            if (cooldown > 0 && s.lastUsedAt) {
+                if (now - s.lastUsedAt.getTime() < cooldown) {
+                    return -1; // Still in cooldown
+                }
+            }
+            return !s.isDead ? idx : -1;
+        })
+            .filter((idx) => idx !== -1);
+    }
+    function selectNextIndex(alive) {
+        if (alive.length === 0)
+            return currentIndex; // All dead, stay on current
+        if (strategy === 'round-robin') {
+            // Pick next after currentIndex in circular fashion
+            const afterCurrent = alive.filter((idx) => idx > currentIndex);
+            if (afterCurrent.length > 0)
+                return afterCurrent[0];
+            return alive[0]; // Wrap around
+        }
+        if (strategy === 'random') {
+            return alive[Math.floor(Math.random() * alive.length)];
+        }
+        if (strategy === 'least-recently-used') {
+            // Pick the one with oldest lastUsedAt (never-used = highest priority)
+            const neverUsed = alive.filter((idx) => states[idx].lastUsedAt === null);
+            if (neverUsed.length > 0) {
+                return neverUsed[0];
+            }
+            let oldestIdx = alive[0];
+            let oldestTime = states[oldestIdx].lastUsedAt.getTime();
+            for (const idx of alive) {
+                const time = states[idx].lastUsedAt.getTime();
+                if (time < oldestTime) {
+                    oldestTime = time;
+                    oldestIdx = idx;
+                }
+            }
+            return oldestIdx;
+        }
+        if (strategy === 'weighted') {
+            // Weighted by inverse failure count (healthier = more likely)
+            const weights = alive.map((idx) => {
+                const failures = states[idx].failures;
+                return 1 / (failures + 1); // Avoid divide-by-zero
+            });
+            const totalWeight = weights.reduce((a, b) => a + b, 0);
+            let rand = Math.random() * totalWeight;
+            for (let i = 0; i < alive.length; i++) {
+                rand -= weights[i];
+                if (rand <= 0)
+                    return alive[i];
+            }
+            return alive[alive.length - 1]; // Fallback
+        }
+        return alive[0]; // Default fallback
+    }
+    function rotateImpl(reason = 'manual') {
+        if (pool.length === 1) {
+            // No-op for single endpoint
+            return states[0].endpoint;
+        }
+        const alive = getAliveEndpoints();
+        if (alive.length === 0) {
+            logger.warn?.('All endpoints are dead. Cannot rotate.');
+            return states[currentIndex].endpoint;
+        }
+        const nextIdx = selectNextIndex(alive);
+        if (nextIdx === currentIndex && alive.length > 1) {
+            // Try to pick a different one if possible
+            const others = alive.filter((idx) => idx !== currentIndex);
+            if (others.length > 0) {
+                currentIndex = others[0];
+            }
+            else {
+                currentIndex = nextIdx;
+            }
+        }
+        else {
+            currentIndex = nextIdx;
+        }
+        states[currentIndex].lastUsedAt = new Date();
+        totalRotations++;
+        rotationsByTrigger[reason] = (rotationsByTrigger[reason] || 0) + 1;
+        const label = states[currentIndex].endpoint.label || states[currentIndex].endpoint.host;
+        logger.info?.(`Rotated to endpoint ${label} (reason: ${reason})`);
+        return states[currentIndex].endpoint;
+    }
+    function markFailureImpl() {
+        const state = states[currentIndex];
+        state.failures++;
+        const label = state.endpoint.label || state.endpoint.host;
+        logger.warn?.(`Endpoint ${label} failed (${state.failures}/${maxFailures})`);
+        if (state.failures >= maxFailures) {
+            state.isDead = true;
+            logger.error?.(`Endpoint ${label} marked DEAD after ${maxFailures} failures`);
+            // Auto-rotate to next alive endpoint
+            const alive = getAliveEndpoints();
+            if (alive.length > 0) {
+                rotateImpl('manual'); // Trigger rotation as recovery
+            }
+        }
+    }
+    function resurrectAllImpl() {
+        let count = 0;
+        for (const state of states) {
+            if (state.isDead) {
+                state.isDead = false;
+                state.failures = 0;
+                count++;
+            }
+        }
+        if (count > 0) {
+            logger.info?.(`Resurrected ${count} dead endpoint(s)`);
+        }
+    }
+    function stopImpl() {
+        if (scheduledTimer) {
+            clearInterval(scheduledTimer);
+            scheduledTimer = null;
+            logger.info?.('Stopped scheduled rotation timer');
+        }
+    }
+    function getStatsImpl() {
+        return {
+            totalRotations,
+            rotationsByTrigger: { ...rotationsByTrigger },
+            endpointHealth: states.map((s) => ({
+                label: s.endpoint.label || s.endpoint.host,
+                inUse: states[currentIndex] === s,
+                failures: s.failures,
+                lastUsedAt: s.lastUsedAt,
+                isDead: s.isDead,
+            })),
+            currentEndpoint: states[currentIndex].endpoint.label || states[currentIndex].endpoint.host,
+        };
+    }
+    function currentAgentImpl() {
+        const endpoint = states[currentIndex].endpoint;
+        return createAgentForEndpointSync(endpoint);
+    }
+    function currentImpl() {
+        return states[currentIndex].endpoint;
+    }
+    // Setup scheduled rotation if enabled
+    if (rotateOn.includes('scheduled') && scheduledIntervalMs > 0) {
+        scheduledTimer = setInterval(() => {
+            rotateImpl('scheduled');
+        }, scheduledIntervalMs);
+        logger.info?.(`Scheduled rotation enabled (every ${scheduledIntervalMs}ms)`);
+    }
+    // Initialize: select first endpoint
+    states[0].lastUsedAt = new Date();
+    return {
+        currentAgent: currentAgentImpl,
+        current: currentImpl,
+        rotate: rotateImpl,
+        markFailure: markFailureImpl,
+        resurrectAll: resurrectAllImpl,
+        stop: stopImpl,
+        getStats: getStatsImpl,
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "baileys-antiban",
-  "version": "3.4.0",
+  "version": "3.5.0",
   "description": "Anti-ban middleware for Baileys WhatsApp bots. Rate limiting, warmup, health monitor, LID resolver, disconnect classifier. Free Whapi.Cloud alternative.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -76,6 +76,15 @@
     },
     "@oxidezap/baileyrs": {
       "optional": true
+    },
+    "socks-proxy-agent": {
+      "optional": true
+    },
+    "http-proxy-agent": {
+      "optional": true
+    },
+    "https-proxy-agent": {
+      "optional": true
     }
   },
   "devDependencies": {
@@ -86,5 +95,10 @@
     "tsx": "^4.21.0",
     "typescript": "^5.0.0",
     "vitest": "^4.1.5"
+  },
+  "dependencies": {
+    "http-proxy-agent": "^9.0.0",
+    "https-proxy-agent": "^9.0.0",
+    "socks-proxy-agent": "^10.0.0"
   }
 }