hridoy-ultimate 9.0.1 → 9.0.2

package/CHANGELOG.md

@@ -6,6 +6,18 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ---
 
+## [9.0.2] - 2026-10-22
+
+### Session stability
+
+- Browser fingerprint (Chrome build) is now saved to `data/session/fca-fingerprint.json` and reused after restarts. Before, every restart picked a new random UA = "new browser" each time.
+- Login no longer swaps the User-Agent to a hardcoded Chrome/125 in the middle of a session; it warns instead.
+- Default `Accept-Language` is `en-US,en;q=0.9` (was `vi`), configurable with the new `acceptLanguage` option; HTTP and MQTT use the same value.
+- Fewer requests: session keeper every ~6h (was ~90 min), lower send caps (warmup 20/h, 120/h, 800/day).
+- `sessionGuard` also saves the cookie jar when the process exits.
+
+---
+
 ## [9.0.1] - 2026-10-17
 
 ### Rebrand

package/module/loginHelper.js

@@ -880,10 +880,10 @@ function loginHelper(appState, Cookie, email, password, globalOptions, callback)
         // inconsistent to Facebook.
         const bodyStr = typeof initial?.data === "string" ? initial.data : String(initial?.data ?? "");
         if (!/MPageLoadClientMetrics/.test(bodyStr)) {
-          logger("Initial page load doesn't match expected UA rendering — retrying with fallback UA", "warn");
-          globalOptions.userAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36";
-          const retryInitial = await get("https://www.facebook.com/", jar, null, globalOptions).then(saveCookies(jar));
-          return (await ctx.bypassAutomation(retryInitial, jar)) || retryInitial;
+          // Do NOT swap the User-Agent mid-session: a session that starts as
+          // one browser and continues as another is exactly what gets
+          // cookies invalidated. Keep one UA and tell the user how to fix it.
+          logger("Initial page load doesn't match the expected rendering for this User-Agent. Set the exact User-Agent of the browser your cookies came from (facebookAccount.userAgent in config.json).", "warn");
         }
         return (await ctx.bypassAutomation(initial, jar)) || initial;
       }

package/module/options.js

@@ -25,6 +25,12 @@ function setOptions(globalOptions, options) {
         globalOptions.userAgent = options.userAgent || getDefaultUserAgent();
         break;
       }
+      case "acceptLanguage": {
+        if (typeof options.acceptLanguage === "string" && options.acceptLanguage.trim()) {
+          globalOptions.acceptLanguage = options.acceptLanguage.trim();
+        }
+        break;
+      }
       case "humanize": {
         globalOptions.humanize = options.humanize;
         break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hridoy-ultimate",
-  "version": "9.0.1",
+  "version": "9.0.2",
   "description": "Facebook Chat API by HR ID OY | Stable • Auto Re-login • Full E2EE Support — send messages, media, reactions & more in encrypted chats, hassle-free",
   "main": "index.js",
   "types": "index.d.ts",

package/src/api/messaging/sessionGuard.js

@@ -86,6 +86,14 @@ module.exports = function (defaultFuncs, api, ctx) {
             return result;
         };
 
+        // Save the freshest cookies when the process exits (restart, crash
+        // handler, Ctrl+C). Facebook rotates cookies while the bot runs; if
+        // the last periodic save is older than that rotation, the next start
+        // would load already-superseded cookies and look "expired".
+        process.once("exit", function () {
+            try { saveToDisk(appStatePath); } catch (_) {}
+        });
+
         // Expose manual save
         api.saveSession = function (customPath) {
             return saveToDisk(customPath || appStatePath);

package/src/api/socket/core/connectMqtt.js

@@ -78,7 +78,7 @@ module.exports = function createListenMqtt(deps) {
           // Must match the HTTP layer's Accept-Language (src/utils/headers.js)
           // — a hardcoded different value here made the WS handshake and the
           // HTTP requests disagree about the same "browser".
-          "Accept-Language": ctx.globalOptions.acceptLanguage || "en-US,en;q=0.9,vi;q=0.8",
+          "Accept-Language": ctx.globalOptions.acceptLanguage || "en-US,en;q=0.9",
           "Sec-WebSocket-Extensions": "permessage-deflate; client_max_window_bits"
         },
         origin: "https://www.facebook.com",

package/src/api/socket/listenMqtt.js

@@ -283,8 +283,8 @@ module.exports = function (defaultFuncs, api, ctx, opts) {
     // Self-rescheduling timeout with ±15 min jitter around 90 min, instead of
     // a clockwork-exact 90:00.000 interval — perfectly periodic traffic is
     // trivial to fingerprint.
-    const BASE_MS = 90 * 60 * 1000;
-    const JITTER_MS = 15 * 60 * 1000;
+    const BASE_MS = 6 * 60 * 60 * 1000;
+    const JITTER_MS = 60 * 60 * 1000;
     const scheduleNext = function () {
       const delay = BASE_MS - JITTER_MS + Math.floor(Math.random() * 2 * JITTER_MS);
       ctx._sessionKeeperInterval = setTimeout(function () {

package/src/utils/antiSuspension.js

@@ -63,9 +63,9 @@ class SendPacer {
 
         this.startedAt = Date.now();
         this.warmupWindowMs = 15 * 60 * 1000;
-        this.warmupHourlyCap = 40;
-        this.normalHourlyCap = 350;
-        this.dailyCap = 2500;
+        this.warmupHourlyCap = 20;
+        this.normalHourlyCap = 120;
+        this.dailyCap = 800;
 
         this.hourWindowStart = Date.now();
         this.hourSendCount = 0;

package/src/utils/fingerprint.js

@@ -35,7 +35,31 @@ function greaseForVersion(major) {
 // to different hardcoded defaults) is itself inconsistent and detectable.
 let cachedFingerprint = null;
 
+// The fingerprint is also saved to disk. Picking a new random Chrome build
+// on every restart made the same account look like a new browser each time
+// the bot restarted, which is a common reason for "session dropped" logouts.
+// Best option of all: pass your real browser's User-Agent (the one the
+// cookies were exported from) via the userAgent option; this file is only
+// the fallback.
+const fs = require("fs");
+const path = require("path");
+function fingerprintFile() {
+  return path.join(process.cwd(), "data", "session", "fca-fingerprint.json");
+}
+
 function getFingerprint() {
+  if (!cachedFingerprint) {
+    try {
+      const saved = JSON.parse(fs.readFileSync(fingerprintFile(), "utf8"));
+      if (saved && CHROME_VERSIONS.includes(saved.version)) {
+        cachedFingerprint = {
+          userAgent: buildUserAgent(saved.version),
+          version: saved.version,
+          major: parseInt(saved.version.split(".")[0], 10)
+        };
+      }
+    } catch (_) { /* first run */ }
+  }
   if (!cachedFingerprint) {
     const version = pickChromeVersion();
     const major = parseInt(version.split(".")[0], 10);
@@ -44,6 +68,10 @@ function getFingerprint() {
       version,
       major
     };
+    try {
+      fs.mkdirSync(path.dirname(fingerprintFile()), { recursive: true });
+      fs.writeFileSync(fingerprintFile(), JSON.stringify({ version }), "utf8");
+    } catch (_) { /* read-only fs: fall back to per-process */ }
   }
   return cachedFingerprint;
 }

package/src/utils/headers.js

@@ -45,7 +45,7 @@ function getHeaders(url, options, ctx, customHeader) {
   const referer = options?.referer || "https://www.facebook.com/";
   const origin = referer.replace(/\/+$/, "");
   const contentType = options?.contentType || "application/x-www-form-urlencoded";
-  const acceptLang = options?.acceptLanguage || "en-US,en;q=0.9,vi;q=0.8";
+  const acceptLang = options?.acceptLanguage || "en-US,en;q=0.9";
   // NOTE: keep the && chain parenthesized — `||` binds looser than `&&`.
   const isNavigation = (u.pathname === "/" &&
     !url.includes("ajax") &&

package/src/api/socket/e2ee/proto/proto-writer.ts

@@ -1,76 +0,0 @@
-/** Minimal protobuf writer - only what we need */
-export class ProtoWriter {
-  private chunks: Buffer[] = [];
-
-  private encodeVarint(value: number): Buffer {
-    const bytes: number[] = [];
-    let v = value >>> 0;
-    while (v > 127) {
-      bytes.push((v & 0x7f) | 0x80);
-      v >>>= 7;
-    }
-    bytes.push(v);
-    return Buffer.from(bytes);
-  }
-
-  private fieldHeader(fieldNum: number, wireType: number): Buffer {
-    return this.encodeVarint((fieldNum << 3) | wireType);
-  }
-
-  /** Wire type 0 (varint) but supports bigint */
-  private encodeVarintBigInt(value: bigint): Buffer {
-    const bytes: number[] = [];
-    let v = value;
-    while (v > 127n) {
-      bytes.push(Number((v & 0x7fn) | 0x80n));
-      v >>= 7n;
-    }
-    bytes.push(Number(v));
-    return Buffer.from(bytes);
-  }
-
-  /** Wire type 0 (varint) for uint64 fields */
-  uint64_varint(fieldNum: number, value: bigint): this {
-    this.chunks.push(this.fieldHeader(fieldNum, 0));
-    this.chunks.push(this.encodeVarintBigInt(value));
-    return this;
-  }
-
-  /** Wire type 2 (length-delimited) - bytes, string, embedded message */
-  bytes(fieldNum: number, data: Uint8Array): this {
-    const d = Buffer.from(data);
-    this.chunks.push(this.fieldHeader(fieldNum, 2));
-    this.chunks.push(this.encodeVarint(d.length));
-    this.chunks.push(d);
-    return this;
-  }
-
-  string(fieldNum: number, value: string): this {
-    return this.bytes(fieldNum, Buffer.from(value, "utf8"));
-  }
-
-  /** Wire type 0 (varint) */
-  varint(fieldNum: number, value: number): this {
-    this.chunks.push(this.fieldHeader(fieldNum, 0));
-    this.chunks.push(this.encodeVarint(value));
-    return this;
-  }
-
-  /** Wire type 0, bool */
-  bool(fieldNum: number, value: boolean): this {
-    return this.varint(fieldNum, value ? 1 : 0);
-  }
-
-  /** Wire type 1 (64-bit fixed) - uint64 */
-  uint64(fieldNum: number, value: bigint): this {
-    const buf = Buffer.alloc(8);
-    buf.writeBigUInt64LE(value);
-    this.chunks.push(this.fieldHeader(fieldNum, 1));
-    this.chunks.push(buf);
-    return this;
-  }
-
-  build(): Buffer {
-    return Buffer.concat(this.chunks);
-  }
-}