nexus-fca 2.1.7 → 2.1.8

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## [2.1.8] - 2025-09-02 - Extended Safe Refresh Window
+### Changed
+- Safe session refresh interval widened to 3–5h (adaptive: 1–1.5h when risk=high) to reduce token churn and mitigate premature cookie expiry heuristics.
+
+### Rationale
+- Frequent refreshes can accelerate cookie rotation patterns → earlier invalidation.
+- Longer, randomized window maintains stealth while heartbeats, ghost detection, and adaptive reconnect still ensure liveness.
+
+### Notes
+- Lightweight mid‑session fb_dtsg poke (≈6h ±40m) retained; heavy refresh cadence now sparser.
+
+---
+
 ## [2.1.7] - 2025-09-01 - Session Stability Patch
 ### Added
 - User-Agent continuity (anchored single UA for entire session via safety module; eliminates mid-session UA drift increasing 20–22h expiry risk).

package/lib/safety/FacebookSafety.js

@@ -268,15 +268,20 @@ class FacebookSafety {
             clearTimeout(this._safeRefreshTimer);
             this._safeRefreshTimer = null;
         }
-        // Stealth+Resilient profile refresh policy:
-        // risk low: 50-60m, medium: 40-50m, high: 25-35m (random inside band)
+        // USER REQUEST: widen refresh window to random 3–5 hours (stealth longevity)
+        // Previous risk-tier windows (25–60m) replaced per instruction.
         const schedule = () => {
             if (this._destroyed) return;
-            let minM, maxM;
-            if (this.sessionMetrics.riskLevel === 'high') { minM = 25; maxM = 35; }
-            else if (this.sessionMetrics.riskLevel === 'medium') { minM = 40; maxM = 50; }
-            else { minM = 50; maxM = 60; }
-            const interval = (minM * 60 * 1000) + Math.random() * ((maxM - minM) * 60 * 1000);
+            // Base window 3h–5h. If risk escalates HIGH, clamp to 1h–1.5h for safety.
+            let minMs, maxMs;
+            if (this.sessionMetrics.riskLevel === 'high') {
+                minMs = 60 * 60 * 1000;          // 1h
+                maxMs = 90 * 60 * 1000;          // 1.5h
+            } else {
+                minMs = 3 * 60 * 60 * 1000;      // 3h
+                maxMs = 5 * 60 * 60 * 1000;      // 5h
+            }
+            const interval = minMs + Math.random() * (maxMs - minMs);
             this._safeRefreshTimer = setTimeout(async () => {
                 await this.refreshSafeSession();
                 schedule();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexus-fca",
-  "version": "2.1.7",
+  "version": "2.1.8",
   "description": "A modern, safe, and advanced Facebook Chat API for Node.js with fully integrated Nexus Login System. NPM-ready with ID/password/2FA support, ultra-low ban rate protection, and zero external dependencies.",
   "main": "index.js",
   "repository": {