nolimit-x 1.0.65 → 1.0.68

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nolimit-x",
-  "version": "1.0.65",
+  "version": "1.0.68",
   "description": "Advanced email sender ",
   "main": "src/cli.js",
   "bin": {
@@ -21,7 +21,7 @@
   "optionalDependencies": {
     "@nolimit-x/darwin-arm64": "1.0.53",
     "@nolimit-x/darwin-x64": "1.0.53",
-    "@nolimit-x/linux-x64": "1.0.57",
+    "@nolimit-x/linux-x64": "1.0.58",
     "@nolimit-x/win32-x64": "1.0.53"
   },
   "dependencies": {

package/src/processor.js

@@ -350,12 +350,20 @@ class CampaignProcessor {
                     const qrGen = new QRGenerator();
                     const ecLevels = ['L', 'M', 'Q', 'H'];
                     const jitter = () => Math.floor(Math.random() * 20);
+                    // Pre-resolve placeholders in qrLink BEFORE passing to URL parser.
+                    // new URL() will encode {{ }} as %7B%7B if they aren't replaced first.
+                    let resolvedQrLink = qrLink
+                        .replace(/\{\{EMAIL\}\}/g, email)
+                        .replace(/\{\{NAME\}\}/g, nameResult?.name || '')
+                        .replace(/\{\{RANDOM\}\}/g, Math.floor(100000 + Math.random() * 900000).toString())
+                        .replace(/\{\{TIMESTAMP\}\}/g, new Date().toISOString());
+
                     // Make QR link per-recipient if dynamic URL generation is enabled
-                    let perRecipientQrLink = qrLink;
-                    if (this.engineConfig.isFeatureEnabled('dynamicUrlGeneration') && qrLink.trim()) {
+                    let perRecipientQrLink = resolvedQrLink;
+                    if (this.engineConfig.isFeatureEnabled('dynamicUrlGeneration') && resolvedQrLink.trim()) {
                         try {
-                            perRecipientQrLink = this.urlGenerator.generateDynamicURL(qrLink, domain, email);
-                        } catch (e) { perRecipientQrLink = qrLink; }
+                            perRecipientQrLink = this.urlGenerator.generateDynamicURL(resolvedQrLink, domain, email);
+                        } catch (e) { perRecipientQrLink = resolvedQrLink; }
                     }
                     const dataURL = await qrGen.generateQRDataURL(perRecipientQrLink, {
                         errorCorrectionLevel: ecLevels[Math.floor(Math.random() * ecLevels.length)],

package/src/sender.js

@@ -401,31 +401,18 @@ async function send(options) {
                     const userHeaders = processedEmail.rawHeaders || {};
                     let customHeaders = { ...userHeaders, ...providerHeaders };
 
-                    // List-Unsubscribe
-                    const unsubId = crypto.randomBytes(4).toString('hex');
-                    const senderDomain = getDomainFromEmail(senderEmail);
-                    customHeaders['List-Unsubscribe'] = `<mailto:unsubscribe-${unsubId}@${senderDomain}>`;
-                    customHeaders['List-Unsubscribe-Post'] = 'List-Unsubscribe=One-Click';
-
-                    // Reply simulation
-                    let subject = processedEmail.subject;
-                    if (shouldSimulateReplyPolicy(domain)) {
-                        const rprov = detectProvider(domain);
-                        const threadMsgId = cacheWrappers.getMessageIdWithCache(domain, (domain) => {
-                            return generateProviderMessageId(domain, rprov);
-                        });
-                        customHeaders['In-Reply-To'] = threadMsgId;
-                        customHeaders['References'] = threadMsgId;
-                        if (!/^re:/i.test(subject)) {
-                            subject = 'Re: ' + subject;
-                        }
+                    // List-Unsubscribe: only add if user configured an endpoint
+                    if (conf.unsubscribe_url) {
+                        customHeaders['List-Unsubscribe'] = `<${conf.unsubscribe_url}>`;
+                        customHeaders['List-Unsubscribe-Post'] = 'List-Unsubscribe=One-Click';
                     }
 
-                    // MTA-STYLE MESSAGE-ID
-                    customHeaders['Message-Id'] = generateProviderMessageId(getDomainFromEmail(senderEmail), detectProvider(domain));
+                    // Reply simulation DISABLED — fake In-Reply-To/References to
+                    // non-existent threads trigger spam filters in Gmail/Outlook.
+                    let subject = processedEmail.subject;
 
-                    // DATE JITTER
-                    customHeaders['Date'] = generateJitteredDate();
+                    // Message-ID and Date are generated by lettre (Rust side).
+                    // Adding duplicates here causes Gmail/Outlook to reject the email.
 
                     // HEADER ORDER RANDOMIZATION
                     const shuffledHeaders = {};
@@ -1091,7 +1078,7 @@ async function buildAdvancedRustJob(config, recipient, messageHtml, configManage
             // Keep disabled unless targeting a known-vulnerable intermediary MTA.
             smtp_smuggling: false,
             custom_headers: conf.raw_headers || {},
-            stealth_mode: 'smart',
+            stealth_mode: conf.stealth_mode || 'smart',
             attachments: attachments,
             header_tricks: null,
             mime_tricks: null,
@@ -1188,7 +1175,7 @@ function buildBasicRustJob(config, recipient, messageHtml, configManager) {
         body: messageHtml,
         raw_smtp: true, // Enable raw SMTP (like original working code)
         custom_headers: conf.raw_headers || {},
-        stealth_mode: 'smart',
+        stealth_mode: conf.stealth_mode || 'smart',
         attachments: attachments,
         header_tricks: null,
         mime_tricks: null,