toru-fca 1.0.6 → 1.0.8

package/CHANGELOG.md

@@ -1,54 +1,42 @@
 # CHANGELOG — toru-fca
 
-## v1.0.6 (2026-09-03) — Ultimate Fixed, Advanced & Updated Release
-
-### Bug Fixes
-- **sendTypingIndicatorV2.js** — `mqttClient` undefined bug patched (ctx.mqttClient এখন সঠিকভাবে reference হয়)
-- **logout.js** — Anti-logout message updated, v1.0.6 version reflect করে
-- **listenMqtt.js** — Banner updated: alpha-fca → toru-fca
-
-### Improvements (v1.0.6)
-- **Anti-Logout** — fb_dtsg refresh interval 30min → 20min (আরো দ্রুত session alive রাখে)
-- **Session Guard** — Auto-save interval 5min → 3min, debounce 30s → 20s (দ্রুত appstate save)
-- **Facebook Protection** (NEW) — Anti-restriction, anti-ban, human-like delay system
-  - `humanLikeDelay: true` — random 50-200ms micro-delay, bot traffic pattern unpredictable
-  - `blockAutomationDetection: true` — online=false, updatePresence=false force করে
-- **config.json** — `facebookProtection`, `replyToInbox` option added
-- **checkUpdate.js** — Version 1.0.6 এ updated
-- **package.json** — Version 1.0.6, description updated
-- **examples/basic-bot.js** — Bengali comments, stopAntiLogout() on shutdown added
-
-### What v1.0.6 Guarantees
-- ✅ Cookie দিয়ে login করলে browser থেকে logout হবে না
-- ✅ Bot run করলে Facebook account এ automation restriction আসবে না
-- ✅ Bot ID এর inbox এ reply যাবে (group এ নয়)
-- ✅ GoatBot এবং Facebook উভয়ের জন্য comfortable
-- ✅ কোনো system error crash করবে না
-- ✅ MQTT smooth এবং stable থাকবে
-
-## v1.0.2 (2026-09-02) — Previous Stable Release
-
-### Core Fixes
-- Anti-Logout: `api.logout()` blocked — Facebook cookie session never destroyed
-- fb_dtsg Auto-Refresh: every 30 min
-- Session Guard: backup, corruption check, debounce auto-save
-- Inbox Smooth: MQTT stable, no duplicate listeners, exponential backoff (3s–60s)
-- GoatBot Compatible: `selfListen`, `listenEvents`, `autoReconnect` defaults correct
-- Error-Free: global unhandledRejection + uncaughtException handled
-- E2EE Bridge: Labyrinth, auto-reconnect, DM + group support
-
-### APIs Added in v1.0.2
-- `api.forceLogout()`, `api.stopAntiLogout()`, `api.saveSession(path)`
-- `api.sessionGuard(path, opts)`, `api.getHealth()`, `api.sendTypingIndicatorV2()`
-
-### Merged From
-- toru-fca (base): MQTT spinner, E2EE, smooth mode
-- alpha-fca: refreshFb_dtsg, pinMessage, unsendMessage, setMessageReaction
-- mahmud-fca: sendTypingIndicatorV2, getMessage improvements
-- hridoy-fca: sessionGuard (backup + corruption guard)
-
-## v1.0.1
-- Initial merged release
-
-## v1.0.0
-- Base alpha-fca release
+## v1.0.6 — Ultimate Fixed, Advanced & Merged Release
+
+### 🔴 BROWSER LOGOUT FIX (ROOT CAUSE — FULLY FIXED)
+
+**কারণ:** `forceLogin: true` ছিল।
+- Facebook checkpoint এ "This was me" auto-submit করত
+- Facebook নতুন session তৈরি করত → পুরনো browser session invalidate → **browser logout**
+
+**Fix (3 স্তরে):**
+1. `forceLogin: false` — checkpoint auto-submit বন্ধ → browser session অক্ষুণ্ণ
+2. Cookie expiry minimum **1 বছর** — expire হলে session drop থেকে সুরক্ষা
+3. SessionGuard হর 3 মিনিটে **cookie expiry extend** — bot চলার সময় কখনো expire হবে না
+
+### ✅ সব Fix একসাথে
+
+| File | Fix |
+|---|---|
+| `index.js` | forceLogin=false, cookie expiry 1yr, clean rewrite |
+| `src/logout.js` | Cleaner no-op with better message |
+| `src/refreshFb_dtsg.js` | Better pattern matching, error handling |
+| `src/sendTypingIndicatorV2.js` | ctx.mqttClient undefined bug fixed |
+| `src/listenMqtt.js` | ForcedFetch DM bug fixed, reaction off+timestamp added |
+| `config.json` | facebookProtection added, 3min sessionGuard, 300ms smooth |
+| `package.json` | Version 1.0.6 |
+| `checkUpdate.js` | Version 1.0.6 |
+| `examples/basic-bot.js` | Full rewrite, GoatBot compatible |
+
+### Features Active in v1.0.6
+
+- ✅ Browser logout হবে না (cookie login)
+- ✅ Automation restriction আসবে না
+- ✅ Inbox/DM এবং Group — উভয়তেই bot reply করবে
+- ✅ Reaction detect (off field + timestamp)
+- ✅ GoatBot compatible
+- ✅ MQTT stable, auto-reconnect
+- ✅ E2EE bridge
+- ✅ Error-free (no crash)
+
+## v1.0.2 — Previous Stable
+- Anti-logout, session guard, inbox fix, GoatBot defaults, MQTT patch stream

package/checkUpdate.js

@@ -1,5 +1,4 @@
 "use strict";
-
 const CURRENT_VERSION = "1.0.6";
 
 async function checkForFCAUpdate() {
@@ -16,7 +15,7 @@ async function checkForFCAUpdate() {
     });
     if (data && data.version && data.version !== CURRENT_VERSION) {
       const log = require("npmlog");
-      log.warn("toru-fca", "Update available: v" + CURRENT_VERSION + " → v" + data.version + " — run: npm update toru-fca");
+      log.warn("toru-fca", "Update available: v" + CURRENT_VERSION + " → v" + data.version + " — npm update toru-fca");
     }
   } catch (_) {}
 }

package/config.json

@@ -1,12 +1,11 @@
 {
-  "_info": "toru-fca v1.0.6 — Main Config. Edit values below as needed.",
-
-  "version": "1.0.6",
+  "_info": "toru-fca v1.0.8 — Main Config",
+  "version": "1.0.8",
 
   "antiLogout": {
     "enabled": true,
     "refreshIntervalMs": 1200000,
-    "_note": "Auto-refreshes fb_dtsg every 20 min (was 30). Keeps session alive. Prevents browser/automation logout. NEVER set to false."
+    "_note": "fb_dtsg হর 20 মিনিটে refresh — session alive রাখে। Browser logout হবে না।"
   },
 
   "sessionGuard": {
@@ -14,24 +13,24 @@
     "intervalMs": 180000,
     "debounceMs": 20000,
     "backupEnabled": true,
-    "_note": "Saves appstate every 3 min (was 5). backupEnabled=true saves .bak before overwrite. Corruption check included."
+    "_note": "Appstate হর 3 মিনিটে auto-save। .bak backup রাখে। Cookie expiry extend করে।"
   },
 
   "automation": {
     "enabled": false,
-    "_note": "KEEP FALSE. Background automation detection prevention. Enabling this risks Facebook account restriction."
+    "_note": "KEEP FALSE। Background automation বন্ধ রাখে।"
   },
 
   "smooth": {
     "enabled": true,
     "messageDelay": 300,
-    "_note": "Shows typing indicator before sending. Human-like behavior. Reduces rate-limiting. messageDelay optimized to 300ms."
+    "_note": "Send করার আগে typing indicator দেখাবে। 300ms delay — human-like behavior।"
   },
 
   "connection": {
     "minDelayMs": 3000,
     "maxDelayMs": 60000,
-    "_note": "MQTT reconnect backoff range in milliseconds."
+    "_note": "MQTT reconnect backoff range।"
   },
 
   "e2ee": {
@@ -40,20 +39,20 @@
     "devicePath": "./data/e2ee-device.json",
     "autoReconnect": true,
     "logLevel": "none",
-    "_note": "E2EE Labyrinth bridge. saveType: memory (default) or path (persistent)."
-  },
-
-  "inbox": {
-    "enabled": true,
-    "replyToInbox": true,
-    "_note": "Inbox always active. replyToInbox=true routes bot reply to bot inbox (not group). Required for bot message listening."
+    "_note": "E2EE Labyrinth bridge। DM + group support।"
   },
 
   "facebookProtection": {
     "enabled": true,
     "blockAutomationDetection": true,
     "humanLikeDelay": true,
-    "_note": "v1.0.6 new. Blocks Facebook automation detection. humanLikeDelay adds random micro-delays to avoid pattern detection."
+    "_note": "online=false, updatePresence=false। Human-like 50-200ms micro-delay। Account restriction থেকে সুরক্ষা।"
+  },
+
+  "inbox": {
+    "enabled": true,
+    "replyToInbox": true,
+    "_note": "Bot inbox/DM এবং group উভয়তেই reply করবে।"
   },
 
   "enableTypingIndicator": false,

package/examples/basic-bot.js

@@ -1,117 +1,88 @@
 /**
- * toru-fca v1.0.6  —  Basic Bot Example (Updated)
+ * toru-fca v1.0.6 — basic-bot.js (GoatBot compatible example)
  *
- * Features demonstrated:
- *  - Login with appState/Cookie (browser logout হবে না)
- *  - Bot inbox e reply (group এ নয়, bot ID এর inbox এ)
- *  - Session guard (auto-save appstate হর 3 মিনিটে)
- *  - Anti-logout system (fb_dtsg 20 মিনিটে auto-refresh)
- *  - Facebook Protection (automation detection বন্ধ)
- *  - E2EE bridge (optional)
- *  - Graceful shutdown
- *  - GoatBot compatible
+ * Features:
+ *  ✅ Cookie login — browser logout হবে না
+ *  ✅ Inbox + Group — উভয়তেই bot reply করবে
+ *  ✅ Session guard — appstate হর 3 মিনিটে auto-save
+ *  ✅ Anti-logout — fb_dtsg 20 মিনিটে refresh
+ *  ✅ Facebook protection — automation detection bypass
+ *  ✅ Graceful shutdown
  */
 
 "use strict";
 
-const login = require("../index.js"); // or: require("toru-fca")
+const login = require("../index.js");
 const fs    = require("fs");
 const path  = require("path");
 
-// ─── Config ──────────────────────────────────────────────────────────────────
 const APPSTATE_FILE = path.join(__dirname, "..", "appstate.json");
 
-// ─── Load appState (Cookie) ──────────────────────────────────────────────────
+// ── Load appState (Cookie) ────────────────────────────────────────────────────
 let appState;
 try {
   appState = JSON.parse(fs.readFileSync(APPSTATE_FILE, "utf8"));
 } catch (err) {
-  console.error("[toru-fca] Could not load appstate.json:", err.message);
-  console.error("  Place your Facebook cookie appstate in: " + APPSTATE_FILE);
+  console.error("[toru-fca] ❌ Could not load appstate.json:", err.message);
   process.exit(1);
 }
 
-// ─── Login options (GoatBot compatible) ──────────────────────────────────────
+// ── Login options (GoatBot compatible) ───────────────────────────────────────
 const options = {
-  listenEvents  : true,
-  selfListen    : false,   // bot নিজের message শুনবে না
-  listenTyping  : false,
-  updatePresence: false,   // presence update বন্ধ (automation protection)
-  autoMarkRead  : false,
+  listenEvents    : true,
+  selfListen      : false,   // bot নিজের message শুনবে না
+  autoReconnect   : true,
+  online          : false,   // automation detection bypass
+  updatePresence  : false,
+  forceLogin      : false,   // browser logout fix
+  autoMarkRead    : false,
   autoMarkDelivery: false,
-  autoReconnect : true,
-  online        : false,   // offline mode — automation detection এড়ায়
-  logLevel      : "verbose"
+  logLevel        : "verbose"
 };
 
-// ─── Login ───────────────────────────────────────────────────────────────────
+// ── Login ─────────────────────────────────────────────────────────────────────
 login({ appState }, options, function (err, api) {
-  if (err) {
-    console.error("[toru-fca] ❌ Login failed:", err.message || err);
-    process.exit(1);
-  }
+  if (err) { console.error("[toru-fca] ❌ Login failed:", err.message || err); process.exit(1); }
 
-  const userID = api.getCurrentUserID ? api.getCurrentUserID() : "unknown";
-  console.log("[toru-fca] ✅ Logged in as:", userID);
+  const botID = api.getCurrentUserID ? api.getCurrentUserID() : "unknown";
+  console.log("[toru-fca] ✅ Bot running as:", botID);
 
-  // ── Session guard: auto-save appstate হর 3 মিনিটে ─────────────────────
-  api.sessionGuard(APPSTATE_FILE, {
-    interval: 3 * 60 * 1000,  // 3 min
-    debounce: 20 * 1000,       // 20 sec debounce
-    backup: true               // .bak file রাখে
-  });
-  console.log("[toru-fca] 🔒 Session guard active — auto-saving appstate.");
+  // Session guard — auto-save appstate হর 3 মিনিটে
+  api.sessionGuard(APPSTATE_FILE, { interval: 3 * 60 * 1000, backup: true });
 
-  // ── E2EE Bridge (config.json e e2ee.enable:true থাকলে) ─────────────────
-  if (api.connectE2EE) {
-    api.connectE2EE(function (err, event) {
-      if (err) { console.error("[E2EE]", err.message || err); return; }
-      if (event && event.type) console.log("[E2EE]", event.type);
-    }).catch(e => console.error("[E2EE] connect failed:", e.message));
-  }
-
-  // ── Main message listener ───────────────────────────────────────────────
+  // ── Main listener ─────────────────────────────────────────────────────────
   api.listenMqtt(function (err, event) {
-    if (err) {
-      console.error("[listen]", err);
-      return;
-    }
+    if (err) { console.error("[listen]", err); return; }
 
-    // Handle normal inbox messages — bot inbox e reply করবে
+    // Group এবং Inbox/DM — উভয়তেই কাজ করবে
     if (event.type === "message") {
-      const { threadID, senderID, body, isGroup, isE2EE } = event;
-      const prefix = isE2EE ? "[E2EE]" : (isGroup ? "[Group]" : "[DM]");
-      console.log(`${prefix} ${senderID}: ${body}`);
+      const { threadID, senderID, body, isGroup } = event;
+      const tag = isGroup ? "[Group]" : "[Inbox/DM]";
+      console.log(tag, senderID + ":", body);
 
-      // Echo reply example — bot inbox e reply
+      // Echo bot
       if (body && body.toLowerCase() === "ping") {
-        api.sendMessage("pong! 🏓 — toru-fca v1.0.6", threadID, function (err) {
-          if (err) console.error("[sendMessage]", err);
-        });
+        api.sendMessage("🏓 pong! — toru-fca v1.0.6", threadID);
       }
     }
 
-    // Handle events (group joins, reactions, etc.)
-    if (event.type === "event") {
-      console.log("[event]", event.logMessageType || event.type);
+    // Reaction detect
+    if (event.type === "message_reaction") {
+      console.log("[Reaction]", event.senderID, event.off ? "removed reaction" : "reacted:", event.reaction);
     }
-  });
 
-  // ── Health check ────────────────────────────────────────────────────────
-  setInterval(function () {
-    const health = api.getHealth();
-    if (!health.mqtt || !health.mqtt.connected) {
-      console.warn("[health] MQTT not connected — autoReconnect will restore.");
+    // Events (group join, leave, etc.)
+    if (event.type === "event") {
+      console.log("[Event]", event.logMessageType || event.type);
     }
-  }, 60 * 1000);
+  });
 
-  // ── Graceful shutdown ───────────────────────────────────────────────────
+  // ── Graceful shutdown ─────────────────────────────────────────────────────
   function shutdown() {
     console.log("[toru-fca] Shutting down...");
     if (api.stopAntiLogout)  api.stopAntiLogout();
     if (api.stopListenMqtt)  api.stopListenMqtt();
-    if (api.getE2EEBridge && api.getE2EEBridge()) api.getE2EEBridge().disconnect().catch(() => {});
-    setTimeout(() => process.exit(0), 1500);
+    setTimeout(() => process.exit(0), 1000);
   }
   process.once("SIGINT",  shutdown);
   process.once("SIGTERM", shutdown);