nodejs-insta-private-api-mqt 1.3.85 → 1.3.87

package/{dist-ts → dist}/dist/repositories/account.repository.js

@@ -1,19 +1,20 @@
 const Repository = require('../core/repository');
 const crypto = require('crypto');
+
 class AccountRepository extends Repository {
     constructor(client) {
         super(client);
         this.maxRetries = 3;
     }
+
     async requestWithRetry(requestFn, retries = 0) {
-        var _a, _b;
         try {
             const result = await requestFn();
             return result;
-        }
-        catch (error) {
-            const shouldRetry = (((_a = error.data) === null || _a === void 0 ? void 0 : _a.error_type) === 'server_error' ||
-                ((_b = error.data) === null || _b === void 0 ? void 0 : _b.error_type) === 'rate_limited') &&
+        } catch (error) {
+            const shouldRetry =
+                (error.data?.error_type === 'server_error' ||
+                    error.data?.error_type === 'rate_limited') &&
                 retries < this.maxRetries;
             if (shouldRetry) {
                 const delay = 1000 * (retries + 1);
@@ -23,6 +24,7 @@ class AccountRepository extends Repository {
             throw error;
         }
     }
+
     /**
      * Helper: try to extract an IGT bearer token from various sources:
      * - response.headers (IG-Set-Authorization or ig-set-authorization)
@@ -33,9 +35,8 @@ class AccountRepository extends Repository {
      * When found, sets this.client.state.authorization and calls updateAuthorization().
      */
     _extractAndSaveAuthorization(response) {
-        var _a;
-        if (!response)
-            return null;
+        if (!response) return null;
+
         // Normalize headers (case-insensitive)
         const headers = {};
         if (response.headers && typeof response.headers === 'object') {
@@ -43,19 +44,19 @@ class AccountRepository extends Repository {
                 headers[k.toLowerCase()] = response.headers[k];
             }
         }
+
         // Simpler: look for any header that contains ig-set-authorization
         for (const key of Object.keys(headers)) {
             const val = headers[key];
-            if (!val)
-                continue;
+            if (!val) continue;
+
             if (key.includes('ig-set-authorization')) {
                 const token = this._normalizeTokenString(val);
                 if (token) {
                     this.client.state.authorization = token;
                     try {
                         this.client.state.updateAuthorization();
-                    }
-                    catch (e) { }
+                    } catch (e) {}
                     return token;
                 }
             }
@@ -66,14 +67,15 @@ class AccountRepository extends Repository {
                     this.client.state.authorization = token;
                     try {
                         this.client.state.updateAuthorization();
-                    }
-                    catch (e) { }
+                    } catch (e) {}
                     return token;
                 }
             }
         }
+
         // Extract IG-U headers (user id, region, claim) when present
-        const dsUserIdHeader = headers['ig-set-ig-u-ds-user-id'] ||
+        const dsUserIdHeader =
+            headers['ig-set-ig-u-ds-user-id'] ||
             headers['ig-u-ds-user-id'] ||
             headers['x-ig-set-ig-u-ds-user-id'];
         if (dsUserIdHeader) {
@@ -84,7 +86,9 @@ class AccountRepository extends Repository {
                 this.client.state._userId = uid;
             }
         }
-        const rurHeader = headers['ig-set-ig-u-rur'] ||
+
+        const rurHeader =
+            headers['ig-set-ig-u-rur'] ||
             headers['ig-u-rur'] ||
             headers['x-ig-set-ig-u-rur'];
         if (rurHeader) {
@@ -93,7 +97,9 @@ class AccountRepository extends Repository {
                 this.client.state.igURur = rur;
             }
         }
-        const wwwClaimHeader = headers['x-ig-set-www-claim'] ||
+
+        const wwwClaimHeader =
+            headers['x-ig-set-www-claim'] ||
             headers['ig-set-www-claim'] ||
             headers['ig-u-www-claim'];
         if (wwwClaimHeader) {
@@ -102,7 +108,9 @@ class AccountRepository extends Repository {
                 this.client.state.igWWWClaim = claim;
             }
         }
-        const midHeader = headers['ig-set-x-mid'] ||
+
+        const midHeader =
+            headers['ig-set-x-mid'] ||
             headers['x-mid'] ||
             headers['ig-set-mid'];
         if (midHeader) {
@@ -111,6 +119,7 @@ class AccountRepository extends Repository {
                 this.client.state.mid = mid;
             }
         }
+
         // 2) Check response.body for common fields
         const body = response.body;
         if (body) {
@@ -121,21 +130,22 @@ class AccountRepository extends Repository {
                     this.client.state.authorization = token;
                     try {
                         this.client.state.updateAuthorization();
-                    }
-                    catch (e) { }
+                    } catch (e) {}
                     return token;
                 }
             }
+
             // If body contains a layout object or string, stringify and search it
             try {
                 let layoutStr = null;
                 if (body.layout) {
-                    layoutStr = typeof body.layout === 'string' ? body.layout : JSON.stringify(body.layout);
-                }
-                else if ((_a = body === null || body === void 0 ? void 0 : body.layout) === null || _a === void 0 ? void 0 : _a.bloks_payload) {
+                    layoutStr =
+                        typeof body.layout === 'string'
+                            ? body.layout
+                            : JSON.stringify(body.layout);
+                } else if (body?.layout?.bloks_payload) {
                     layoutStr = JSON.stringify(body.layout.bloks_payload);
-                }
-                else if (body === null || body === void 0 ? void 0 : body.bloks_payload) {
+                } else if (body?.bloks_payload) {
                     layoutStr = JSON.stringify(body.bloks_payload);
                 }
                 if (!layoutStr && typeof body === 'string') {
@@ -147,49 +157,72 @@ class AccountRepository extends Repository {
                         this.client.state.authorization = token;
                         try {
                             this.client.state.updateAuthorization();
-                        }
-                        catch (e) { }
+                        } catch (e) {}
                         return token;
                     }
+
                     // Some responses embed a login_response JSON string inside layout; try to extract it
-                    const loginResponseMatch = layoutStr.match(/"login_response"\s*:\s*"(\\?{.*?\\?})"/s);
+                    const loginResponseMatch = layoutStr.match(
+                        /"login_response"\s*:\s*"(\\?{.*?\\?})"/s
+                    );
                     if (loginResponseMatch) {
                         // Unescape JSON string
                         let jsonStr = loginResponseMatch[1];
                         try {
-                            jsonStr = jsonStr.replace(/\\"/g, '"').replace(/\\n/g, '');
+                            jsonStr = jsonStr
+                                .replace(/\\"/g, '"')
+                                .replace(/\\n/g, '');
                             const parsed = JSON.parse(jsonStr);
                             if (parsed && parsed.headers) {
-                                const token = this._findBearerInString(parsed.headers);
+                                const token = this._findBearerInString(
+                                    parsed.headers
+                                );
                                 if (token) {
                                     this.client.state.authorization = token;
                                     try {
                                         this.client.state.updateAuthorization();
-                                    }
-                                    catch (e) { }
+                                    } catch (e) {}
                                     return token;
                                 }
                             }
-                        }
-                        catch (e) {
+                        } catch (e) {
                             // ignore parse errors
                         }
                     }
+
                     // Also try to find IG-Set-Password-Encryption headers (not token but useful)
-                    const encKeyIdMatch = layoutStr.match(/IG-Set-Password-Encryption-Key-Id[\\"\s:]+(\d+)/i) ||
-                        layoutStr.match(/password.encryption.key.id[\\"\s:]+(\d+)/i);
+                    const encKeyIdMatch =
+                        layoutStr.match(
+                            /IG-Set-Password-Encryption-Key-Id[\\"\s:]+(\d+)/i
+                        ) ||
+                        layoutStr.match(
+                            /password.encryption.key.id[\\"\s:]+(\d+)/i
+                        );
                     if (encKeyIdMatch) {
-                        this.client.state.passwordEncryptionKeyId = parseInt(encKeyIdMatch[1]);
+                        this.client.state.passwordEncryptionKeyId =
+                            parseInt(encKeyIdMatch[1]);
                     }
-                    const encPubKeyMatch = layoutStr.match(/IG-Set-Password-Encryption-Pub-Key[\\"\s:]+([A-Za-z0-9+\/=]+)/i) ||
-                        layoutStr.match(/password.encryption.pub.key[\\"\s:]+([A-Za-z0-9+\/=]+)/i);
+                    const encPubKeyMatch =
+                        layoutStr.match(
+                            /IG-Set-Password-Encryption-Pub-Key[\\"\s:]+([A-Za-z0-9+\/=]+)/i
+                        ) ||
+                        layoutStr.match(
+                            /password.encryption.pub.key[\\"\s:]+([A-Za-z0-9+\/=]+)/i
+                        );
                     if (encPubKeyMatch) {
-                        this.client.state.passwordEncryptionPubKey = encPubKeyMatch[1];
+                        this.client.state.passwordEncryptionPubKey =
+                            encPubKeyMatch[1];
                     }
+
                     // Extract user/account identifiers from layout string
-                    const dsIdMatch = layoutStr.match(/ig-set-ig-u-ds-user-id[\\"\s:]+(\d+)/i) ||
+                    const dsIdMatch =
+                        layoutStr.match(
+                            /ig-set-ig-u-ds-user-id[\\"\s:]+(\d+)/i
+                        ) ||
                         layoutStr.match(/ig-u-ds-user-id[\\"\s:]+(\d+)/i) ||
-                        layoutStr.match(/"strong_id__"\s*:\s*"(\d+)"/i) ||
+                        layoutStr.match(
+                            /"strong_id__"\s*:\s*"(\d+)"/i
+                        ) ||
                         layoutStr.match(/"pk_id"\s*:\s*"(\d+)"/i) ||
                         layoutStr.match(/"pk"\s*:\s*(\d+)/i);
                     if (dsIdMatch) {
@@ -197,56 +230,71 @@ class AccountRepository extends Repository {
                         this.client.state.cookieUserId = uid;
                         this.client.state._userId = uid;
                     }
-                    const rurMatch = layoutStr.match(/ig-set-ig-u-rur[\\"\s:]+"([^"\\]+)/i) ||
+
+                    const rurMatch =
+                        layoutStr.match(
+                            /ig-set-ig-u-rur[\\"\s:]+"([^"\\]+)/i
+                        ) ||
                         layoutStr.match(/ig-u-rur[\\"\s:]+"([^"\\]+)/i);
                     if (rurMatch) {
                         this.client.state.igURur = rurMatch[1];
                     }
-                    const wwwClaimMatch = layoutStr.match(/x-ig-set-www-claim[\\"\s:]+"([^"\\]+)/i);
+
+                    const wwwClaimMatch = layoutStr.match(
+                        /x-ig-set-www-claim[\\"\s:]+"([^"\\]+)/i
+                    );
                     if (wwwClaimMatch) {
                         this.client.state.igWWWClaim = wwwClaimMatch[1];
                     }
-                    const midMatch = layoutStr.match(/"mid"\s*:\s*"([^"\\]+)"/i);
+
+                    const midMatch = layoutStr.match(
+                        /"mid"\s*:\s*"([^"\\]+)"/i
+                    );
                     if (midMatch) {
                         this.client.state.mid = midMatch[1];
                     }
                 }
-            }
-            catch (e) {
+            } catch (e) {
                 // ignore
             }
+
             // 3) If body.logged_in_user exists and we have authorization already, return it
             if (body.logged_in_user && this.client.state.authorization) {
                 return this.client.state.authorization;
             }
         }
+
         return null;
     }
+
     // Normalize token string: accept either raw token or "Bearer IGT:2:..." and return trimmed token string
     _normalizeTokenString(val) {
-        if (!val || typeof val !== 'string')
-            return null;
+        if (!val || typeof val !== 'string') return null;
+
         // If header already contains "Bearer IGT:2:..."
         const bearer = this._findBearerInString(val);
-        if (bearer)
-            return bearer;
+        if (bearer) return bearer;
+
         // If header contains JSON with IG-Set-Authorization field
         try {
             const maybeJson = JSON.parse(val);
             if (maybeJson['IG-Set-Authorization']) {
-                return this._findBearerInString(maybeJson['IG-Set-Authorization']);
+                return this._findBearerInString(
+                    maybeJson['IG-Set-Authorization']
+                );
             }
-        }
-        catch (e) {
+        } catch (e) {
             // not JSON
         }
+
         // fallback: return trimmed value
         return val.trim();
     }
+
     // Find bearer token in arbitrary string using multiple patterns
     _findBearerInString(str) {
-        if (!str || typeof str !== 'string')
-            return null;
+        if (!str || typeof str !== 'string') return null;
+
         // Patterns to match the Bearer token in many possible encodings/escapes
         const bearerPatterns = [
             /Bearer IGT:2:[A-Za-z0-9+\/=]+/,
@@ -257,98 +305,372 @@ class AccountRepository extends Repository {
             /IG-Set-Authorization[\s:]+(Bearer IGT:2:[A-Za-z0-9+\/=]+)/i,
             /Bearer IGT:2:([A-Za-z0-9+\/=]+)/,
         ];
+
         for (const pattern of bearerPatterns) {
             const m = str.match(pattern);
             if (m) {
                 // If capturing group present, prefer it
                 if (m[1]) {
-                    const token = m[1].includes('Bearer IGT:2:') ? m[1] : `Bearer IGT:2:${m[1]}`;
+                    const token = m[1].includes('Bearer IGT:2:')
+                        ? m[1]
+                        : `Bearer IGT:2:${m[1]}`;
                     return token.replace(/\?"/g, '').trim();
                 }
                 // Otherwise m[0] contains the full token
                 return m[0].replace(/\?"/g, '').trim();
             }
         }
+
         return null;
     }
+
     // Ensure we have a valid csrftoken cookie (and mid) before sensitive endpoints.
     // Instagram typically sets csrftoken via /api/v1/si/fetch_headers/.
     async ensureCsrfToken() {
         const cookieToken = this.client.state.cookieCsrfToken;
-        if (cookieToken && cookieToken !== 'missing' && cookieToken !== 'pending') {
+        if (
+            cookieToken &&
+            cookieToken !== 'missing' &&
+            cookieToken !== 'pending'
+        ) {
             try {
                 this.client.state.csrfToken = cookieToken;
-            }
-            catch { }
+            } catch {}
             return cookieToken;
         }
+
         // Warmup endpoint that returns/set cookies (csrftoken, mid, etc.)
         try {
             await this.client.request.send({
                 method: 'GET',
                 url: `/api/v1/si/fetch_headers/?challenge_type=signup&guid=${this.client.state.uuid}`,
             });
-        }
-        catch (e) {
+        } catch (e) {
             // ignore warmup failures
         }
+
         const token = this.client.state.cookieCsrfToken;
-        if (token && token !== 'missing' && token !== 'pending') {
+        if (
+            token &&
+            token !== 'missing' &&
+            token !== 'pending'
+        ) {
             try {
                 this.client.state.csrfToken = token;
-            }
-            catch { }
+            } catch {}
             return token;
         }
+
         return null;
     }
+
+    /**
+     * Internal: perform the Bloks OAuth token fetch step that the official app does
+     * just before password login (com.bloks.www.caa.login.oauth.token.fetch.async).
+     * This is best-effort only and never throws to the caller.
+     */
+    async _prefetchOauthTokenForLogin(username) {
+        if (!username) return null;
+
+        try {
+            const nowSec = Math.floor(Date.now() / 1000);
+
+            // Device identifiers – keep them consistent with the main login flow
+            const androidDeviceId =
+                this.client.state.androidDeviceId ||
+                this.client.state.deviceId ||
+                `android-${crypto.randomBytes(8).toString('hex')}`;
+
+            const familyDeviceId =
+                this.client.state.phoneId ||
+                this.client.state.familyDeviceId ||
+                (crypto.randomUUID
+                    ? crypto.randomUUID()
+                    : require('uuid').v4());
+
+            const qeDeviceId =
+                this.client.state.deviceId ||
+                this.client.state.qeDeviceId ||
+                (crypto.randomUUID
+                    ? crypto.randomUUID()
+                    : require('uuid').v4());
+
+            const waterfallId = crypto.randomUUID
+                ? crypto.randomUUID()
+                : require('uuid').v4();
+
+            const latencyMarkerId = 36707139;
+            const latencyInstanceId = Number(
+                `${Date.now()}${Math.floor(Math.random() * 1000)}`
+            );
+
+            // AAC object as seen in real traffic: timestamp + UUID + random token
+            const aacInitTimestamp =
+                nowSec - Math.floor(Math.random() * 50);
+            const aacjid = crypto.randomUUID
+                ? crypto.randomUUID()
+                : require('uuid').v4();
+            const aaccs = crypto
+                .randomBytes(32)
+                .toString('base64')
+                .replace(/=/g, '');
+
+            const clientInputParams = {
+                username_input: username,
+                aac: JSON.stringify({
+                    aac_init_timestamp: aacInitTimestamp,
+                    aacjid,
+                    aaccs,
+                }),
+                lois_settings: { lois_token: '' },
+                cloud_trust_token: null,
+                zero_balance_state: '',
+                network_bssid: null,
+            };
+
+            const serverParams = {
+                is_from_logged_out: 0,
+                layered_homepage_experiment_group: null,
+                device_id: androidDeviceId,
+                login_surface: 'switcher',
+                waterfall_id: waterfallId,
+                INTERNAL__latency_qpl_instance_id: latencyInstanceId,
+                is_platform_login: 0,
+                INTERNAL__latency_qpl_marker_id: latencyMarkerId,
+                family_device_id: familyDeviceId,
+                offline_experiment_group: 'caa_iteration_v3_perf_ig_4',
+                access_flow_version: 'pre_mt_behavior',
+                is_from_logged_in_switcher: 1,
+                qe_device_id: qeDeviceId,
+            };
+
+            const paramsJson = JSON.stringify({
+                client_input_params: clientInputParams,
+                server_params: serverParams,
+            });
+
+            const bloksVersionId =
+                this.client.state.bloksVersionId ||
+                '5e47baf35c5a270b44c8906c8b99063564b30ef69779f3dee0b828bee2e4ef5b';
+
+            const bkClientContext = JSON.stringify({
+                bloks_version: bloksVersionId,
+                styles_id: 'instagram',
+            });
+
+            const lang = this.client.state.language || 'ro_RO';
+            const acceptLanguage = `${lang.replace('_', '-')}, en-US`;
+            const userAgent =
+                this.client.state.userAgent ||
+                'Instagram 371.0.0.0.23 Android (30/11; 320dpi; 720x1449; Xiaomi/Redmi; M2006C3MNG; angelican; mt6765; ro_RO; 703217507)';
+
+            const timezoneOffset =
+                typeof this.client.state.timezoneOffset === 'number'
+                    ? this.client.state.timezoneOffset
+                    : 7200;
+
+            const bloksHeaders = {
+                'accept-language': acceptLanguage,
+                'content-type':
+                    'application/x-www-form-urlencoded; charset=UTF-8',
+                'ig-intended-user-id': '0',
+                // Critical: matches the captured request header
+                priority: 'u=3',
+
+                'x-bloks-is-layout-rtl': 'false',
+                'x-bloks-prism-ax-base-colors-enabled': 'false',
+                'x-bloks-prism-button-version': 'CONTROL',
+                'x-bloks-prism-colors-enabled': 'true',
+                'x-bloks-prism-font-enabled': 'false',
+                'x-bloks-prism-indigo-link-version': '0',
+                'x-bloks-version-id': bloksVersionId,
+
+                'x-ig-android-id': androidDeviceId,
+                'x-ig-device-id': qeDeviceId,
+                'x-ig-family-device-id': familyDeviceId,
+                'x-ig-timezone-offset': String(timezoneOffset),
+                'x-ig-app-id': String(
+                    this.client.state.fbAnalyticsApplicationId ||
+                        '567067343352427'
+                ),
+                'x-ig-app-locale': lang,
+                'x-ig-device-locale': lang,
+                'x-ig-mapped-locale': lang,
+
+                'x-ig-client-endpoint':
+                    'com.bloks.www.caa.login.login_homepage',
+                'x-ig-nav-chain':
+                    'com.bloks.www.caa.login.login_homepage:com.bloks.www.caa.login.login_homepage:1:button:0:::0',
+
+                'x-ig-connection-type': 'WIFI',
+                'x-ig-capabilities': '3brTv10=',
+                'x-ig-www-claim': this.client.state.igWWWClaim || '0',
+
+                'x-pigeon-rawclienttime': `${nowSec}.${Math.floor(
+                    Math.random() * 1000
+                )
+                    .toString()
+                    .padStart(3, '0')}`,
+                'x-pigeon-session-id':
+                    this.client.state.pigeonSessionId ||
+                    `UFS-${crypto.randomBytes(16).toString('hex')}-2`,
+
+                'x-mid':
+                    this.client.state.mid ||
+                    `aZ${crypto.randomBytes(8).toString('hex')}`,
+                'x-tigon-is-retry': 'False',
+
+                'x-fb-client-ip': 'True',
+                'x-fb-connection-type': 'WIFI',
+                'x-fb-server-cluster': 'True',
+                'x-fb-network-properties':
+                    'VPN;Validated;LocalAddrs=/10.0.0.2,;',
+                'x-fb-request-analytics-tags': JSON.stringify({
+                    network_tags: {
+                        product: String(
+                            this.client.state.fbAnalyticsApplicationId ||
+                                '567067343352427'
+                        ),
+                        purpose: 'fetch',
+                        surface: 'undefined',
+                        request_category: 'api',
+                        retry_attempt: '0',
+                    },
+                }),
+                'x-fb-friendly-name':
+                    'IgApi: bloks/async_action/com.bloks.www.caa.login.oauth.token.fetch.async/',
+                'x-fb-http-engine': 'MNS/TCP',
+                'x-fb-rmd': 'state=URL_ELIGIBLE',
+
+                'user-agent': userAgent,
+            };
+
+            const response = await this.client.request.send({
+                method: 'POST',
+                url: '/api/v1/bloks/async_action/com.bloks.www.caa.login.oauth.token.fetch.async/',
+                form: {
+                    params: paramsJson,
+                    bk_client_context: bkClientContext,
+                    bloks_versioning_id: bloksVersionId,
+                },
+                headers: bloksHeaders,
+            });
+
+            // Optional debug dump so you can inspect the exact server response.
+            try {
+                const fs = require('fs');
+                const path = require('path');
+                const debugDir = path.join(
+                    process.cwd(),
+                    'authinfo_instagram'
+                );
+                const debugFile = path.join(
+                    debugDir,
+                    'oauth-token-debug.json'
+                );
+                try {
+                    fs.mkdirSync(debugDir, { recursive: true });
+                } catch (e) {}
+
+                const debugPayload = {
+                    at: new Date().toISOString(),
+                    statusCode:
+                        response.statusCode || response.status || null,
+                    headers: response.headers || null,
+                    body: response.body || null,
+                };
+                fs.writeFileSync(
+                    debugFile,
+                    JSON.stringify(debugPayload, null, 2),
+                    'utf8'
+                );
+            } catch (e) {
+                // Never break login on debug error
+            }
+
+            return response.body;
+        } catch (e) {
+            // Completely swallow any errors; this step should never break login.
+            return null;
+        }
+    }
+
     async login(credentialsOrUsername, passwordArg) {
         let username, password;
-        if (typeof credentialsOrUsername === 'object' && credentialsOrUsername !== null) {
+        if (
+            typeof credentialsOrUsername === 'object' &&
+            credentialsOrUsername !== null
+        ) {
             username = credentialsOrUsername.username;
             password = credentialsOrUsername.password;
-        }
-        else {
+        } else {
             username = credentialsOrUsername;
             password = passwordArg;
         }
+
         if (!username || !password) {
             throw new Error('Username and password are required');
         }
+
         if (!this.client.state.passwordEncryptionPubKey) {
             await this.syncLoginExperiments();
         }
+
         const { encrypted, time } = this.encryptPassword(password);
+
         // optional CSRF warmup (like app does before login)
         await this.ensureCsrfToken();
+
+        // Pre-login Bloks OAuth token fetch (mirrors captured request).
+        // This helps the flow look closer to the real app, but is best-effort only.
+        try {
+            await this._prefetchOauthTokenForLogin(username);
+        } catch (e) {
+            // Ignore any errors from the prefetch step.
+        }
+
         return this.requestWithRetry(async () => {
-            // ====== client_input_params (oglindă după traficul real) ======
+            // ====== client_input_params (mirror of real traffic with password) ======
             const nowSec = Math.floor(Date.now() / 1000);
-            const aacInitTimestamp = nowSec - Math.floor(Math.random() * 50);
-            const aacjid = crypto.randomUUID ? crypto.randomUUID() : require('uuid').v4();
-            const aaccs = crypto.randomBytes(32).toString('base64').replace(/=/g, '');
-            const androidDeviceId = this.client.state.androidDeviceId ||
+            const aacInitTimestamp =
+                nowSec - Math.floor(Math.random() * 50);
+            const aacjid = crypto.randomUUID
+                ? crypto.randomUUID()
+                : require('uuid').v4();
+            const aaccs = crypto
+                .randomBytes(32)
+                .toString('base64')
+                .replace(/=/g, '');
+
+            const androidDeviceId =
+                this.client.state.androidDeviceId ||
                 this.client.state.deviceId ||
                 `android-${crypto.randomBytes(8).toString('hex')}`;
-            const machineId = this.client.state.mid ||
+            const machineId =
+                this.client.state.mid ||
                 this.client.state.machineId ||
                 `aZ${crypto.randomBytes(8).toString('hex')}`;
-            const familyDeviceId = this.client.state.phoneId ||
+            const familyDeviceId =
+                this.client.state.phoneId ||
                 this.client.state.familyDeviceId ||
-                crypto.randomUUID
-                ? crypto.randomUUID()
-                : require('uuid').v4();
-            const qeDeviceId = this.client.state.deviceId ||
+                (crypto.randomUUID
+                    ? crypto.randomUUID()
+                    : require('uuid').v4());
+            const qeDeviceId =
+                this.client.state.deviceId ||
                 this.client.state.qeDeviceId ||
-                crypto.randomUUID
-                ? crypto.randomUUID()
-                : require('uuid').v4();
+                (crypto.randomUUID
+                    ? crypto.randomUUID()
+                    : require('uuid').v4());
+
             const accountsList = this.client.state.accountsList || [];
+
             const flashCallPermissionStatus = {
                 READ_PHONE_STATE: 'GRANTED',
                 READ_CALL_LOG: 'GRANTED',
                 ANSWER_PHONE_CALLS: 'GRANTED',
             };
+
             const clientInputParams = {
                 aac: JSON.stringify({
                     aac_init_timestamp: aacInitTimestamp,
@@ -382,7 +704,8 @@ class AccountRepository extends Repository {
                 machine_id: machineId,
                 flash_call_permission_status: flashCallPermissionStatus,
                 accounts_list: accountsList,
-                gms_incoming_call_retriever_eligibility: 'client_not_supported',
+                gms_incoming_call_retriever_eligibility:
+                    'client_not_supported',
                 family_device_id: familyDeviceId,
                 fb_ig_device_id: [],
                 device_emails: [],
@@ -393,10 +716,16 @@ class AccountRepository extends Repository {
                 openid_tokens: {},
                 contact_point: username,
             };
-            // ====== server_params (oglindă după traficul real) ======
-            const waterfallId = crypto.randomUUID ? crypto.randomUUID() : require('uuid').v4();
+
+            // ====== server_params (mirror after reverse engineering) ======
+            const waterfallId = crypto.randomUUID
+                ? crypto.randomUUID()
+                : require('uuid').v4();
             const latencyMarkerId = 36707139;
-            const latencyInstanceId = Number(`${Date.now()}${Math.floor(Math.random() * 1000)}`);
+            const latencyInstanceId = Number(
+                `${Date.now()}${Math.floor(Math.random() * 1000)}`
+            );
+
             const serverParams = {
                 should_trigger_override_login_2fa_action: 0,
                 is_vanilla_password_page_empty_password: 0,
@@ -410,7 +739,8 @@ class AccountRepository extends Repository {
                 is_platform_login: 0,
                 INTERNAL__latency_qpl_marker_id: latencyMarkerId,
                 is_from_aymh: 0,
-                offline_experiment_group: 'caa_iteration_v3_perf_ig_4',
+                offline_experiment_group:
+                    'caa_iteration_v3_perf_ig_4',
                 is_from_landing_page: 0,
                 left_nav_button_action: 'NONE',
                 password_text_input_id: 'z0jejq:194',
@@ -423,7 +753,8 @@ class AccountRepository extends Repository {
                 device_id: androidDeviceId,
                 login_surface: 'switcher',
                 INTERNAL__latency_qpl_instance_id: latencyInstanceId,
-                reg_flow_source: 'login_home_native_integration_point',
+                reg_flow_source:
+                    'login_home_native_integration_point',
                 is_caa_perf_enabled: 1,
                 credential_type: 'password',
                 is_from_password_entry_page: 0,
@@ -433,39 +764,59 @@ class AccountRepository extends Repository {
                 access_flow_version: 'pre_mt_behavior',
                 is_from_logged_in_switcher: 1,
             };
+
             const paramsJson = JSON.stringify({
                 client_input_params: clientInputParams,
                 server_params: serverParams,
             });
-            const attestParams = AccountRepository.generateAttestParams(this.client.state);
+
+            const attestParams =
+                AccountRepository.generateAttestParams(
+                    this.client.state
+                );
+            const bloksVersionId =
+                this.client.state.bloksVersionId ||
+                '5e47baf35c5a270b44c8906c8b99063564b30ef69779f3dee0b828bee2e4ef5b';
+
             const bkClientContext = JSON.stringify({
-                bloks_version: this.client.state.bloksVersionId,
+                bloks_version: bloksVersionId,
                 styles_id: 'instagram',
             });
-            // ====== HEADERS – modelate după request_i.instagram.com_mlwzj8x1.txt ======
-            const lang = (this.client.state.language || 'ro_RO');
+
+            // ====== HEADERS – modelled after real traffic ======
+            const lang = this.client.state.language || 'ro_RO';
             const acceptLanguage = `${lang.replace('_', '-')}, en-US`;
-            const userAgent = this.client.state.userAgent ||
+            const userAgent =
+                this.client.state.userAgent ||
                 'Instagram 371.0.0.0.23 Android (30/11; 320dpi; 720x1449; Xiaomi/Redmi; M2006C3MNG; angelican; mt6765; ro_RO; 703217507)';
+
             const bloksHeaders = {
                 'accept-language': acceptLanguage,
-                'content-type': 'application/x-www-form-urlencoded; charset=UTF-8',
+                'content-type':
+                    'application/x-www-form-urlencoded; charset=UTF-8',
                 'ig-intended-user-id': '0',
-                'priority': 'u=3',
+                priority: 'u=3',
+
                 'x-bloks-is-layout-rtl': 'false',
                 'x-bloks-prism-ax-base-colors-enabled': 'false',
                 'x-bloks-prism-button-version': 'CONTROL',
                 'x-bloks-prism-colors-enabled': 'true',
                 'x-bloks-prism-font-enabled': 'false',
                 'x-bloks-prism-indigo-link-version': '0',
-                'x-bloks-version-id': this.client.state.bloksVersionId,
+                'x-bloks-version-id': bloksVersionId,
+
                 'x-fb-client-ip': 'True',
                 'x-fb-connection-type': 'WIFI',
-                'x-fb-friendly-name': 'IgApi: bloks/async_action/com.bloks.www.bloks.caa.login.async.send_login_request/',
-                'x-fb-network-properties': 'VPN;Validated;LocalAddrs=/10.0.0.2,;',
+                'x-fb-friendly-name':
+                    'IgApi: bloks/async_action/com.bloks.www.bloks.caa.login.async.send_login_request/',
+                'x-fb-network-properties':
+                    'VPN;Validated;LocalAddrs=/10.0.0.2,;',
                 'x-fb-request-analytics-tags': JSON.stringify({
                     network_tags: {
-                        product: String(this.client.state.fbAnalyticsApplicationId || '567067343352427'),
+                        product: String(
+                            this.client.state.fbAnalyticsApplicationId ||
+                                '567067343352427'
+                        ),
                         purpose: 'fetch',
                         surface: 'undefined',
                         request_category: 'api',
@@ -473,78 +824,111 @@ class AccountRepository extends Repository {
                     },
                 }),
                 'x-fb-server-cluster': 'True',
+
                 'x-ig-android-id': androidDeviceId,
-                'x-ig-app-id': String(this.client.state.fbAnalyticsApplicationId || '567067343352427'),
+                'x-ig-app-id': String(
+                    this.client.state.fbAnalyticsApplicationId ||
+                        '567067343352427'
+                ),
                 'x-ig-app-locale': lang,
                 'x-ig-attest-params': JSON.stringify(attestParams),
-                'x-ig-bandwidth-speed-kbps': (Math.random() * 1500 + 800).toFixed(3),
+                'x-ig-bandwidth-speed-kbps': (
+                    Math.random() * 1500 +
+                    800
+                ).toFixed(3),
                 'x-ig-bandwidth-totalbytes-b': '0',
                 'x-ig-bandwidth-totaltime-ms': '0',
-                'x-ig-client-endpoint': 'com.bloks.www.caa.login.aymh_single_profile_screen_entry',
+                'x-ig-client-endpoint':
+                    'com.bloks.www.caa.login.aymh_single_profile_screen_entry',
                 'x-ig-capabilities': '3brTv10=',
                 'x-ig-connection-type': 'WIFI',
                 'x-ig-device-id': qeDeviceId,
                 'x-ig-device-locale': lang,
                 'x-ig-family-device-id': familyDeviceId,
                 'x-ig-mapped-locale': lang,
-                'x-ig-nav-chain': 'LockoutFragment:dogfooding_lockout:1:cold_start:...,' +
-                    'com.bloks.www.caa.login.aymh_single_profile_screen_entry:com.bloks.www.caa.login.aymh_single_profile_screen_entry:14:button:0:::0',
-                'x-ig-timezone-offset': String(typeof this.client.state.timezoneOffset === 'number'
-                    ? this.client.state.timezoneOffset
-                    : 7200),
+                'x-ig-nav-chain':
+                    'LockoutFragment:dogfooding_lockout:1:cold_start:...,com.bloks.www.caa.login.aymh_single_profile_screen_entry:com.bloks.www.caa.login.aymh_single_profile_screen_entry:14:button:0:::0',
+                'x-ig-timezone-offset': String(
+                    typeof this.client.state.timezoneOffset ===
+                        'number'
+                        ? this.client.state.timezoneOffset
+                        : 7200
+                ),
                 'x-ig-www-claim': this.client.state.igWWWClaim || '0',
                 'x-mid': machineId,
-                'x-pigeon-rawclienttime': `${nowSec}.${Math.floor(Math.random() * 1000)
+                'x-pigeon-rawclienttime': `${nowSec}.${Math.floor(
+                    Math.random() * 1000
+                )
                     .toString()
                     .padStart(3, '0')}`,
-                'x-pigeon-session-id': this.client.state.pigeonSessionId ||
-                    `UFS-${crypto.randomBytes(16).toString('hex')}-1`,
+                'x-pigeon-session-id':
+                    this.client.state.pigeonSessionId ||
+                    `UFS-${crypto.randomBytes(16).toString(
+                        'hex'
+                    )}-1`,
                 'x-tigon-is-retry': 'False',
-                // ...
+
                 'accept-encoding': 'gzip, deflate, br',
-                // ...
                 'user-agent': userAgent,
-                'x-fb-conn-uuid-client': crypto.randomBytes(16).toString('hex'),
+                'x-fb-conn-uuid-client':
+                    crypto.randomBytes(16).toString('hex'),
                 'x-fb-http-engine': 'MNS/TCP',
                 'x-fb-rmd': 'state=URL_ELIGIBLE',
             };
+
             const response = await this.client.request.send({
                 method: 'POST',
                 url: '/api/v1/bloks/async_action/com.bloks.www.bloks.caa.login.async.send_login_request/',
                 form: {
                     params: paramsJson,
                     bk_client_context: bkClientContext,
-                    bloks_versioning_id: this.client.state.bloksVersionId,
+                    bloks_versioning_id: bloksVersionId,
                 },
                 headers: bloksHeaders,
             });
-            // === DEBUG LOGIN: salvăm răspunsul pentru analiză ===
+
+            // === DEBUG LOGIN: save response for offline analysis ===
             try {
                 const fs = require('fs');
                 const path = require('path');
-                const debugDir = path.join(process.cwd(), 'authinfo_instagram');
-                const debugFile = path.join(debugDir, 'login-debug.json');
+                const debugDir = path.join(
+                    process.cwd(),
+                    'authinfo_instagram'
+                );
+                const debugFile = path.join(
+                    debugDir,
+                    'login-debug.json'
+                );
                 try {
                     fs.mkdirSync(debugDir, { recursive: true });
-                }
-                catch (e) { }
+                } catch (e) {}
+
                 const debugPayload = {
                     at: new Date().toISOString(),
-                    statusCode: response.statusCode || response.status || null,
+                    statusCode:
+                        response.statusCode || response.status || null,
                     headers: response.headers || null,
                     body: response.body || null,
                 };
-                fs.writeFileSync(debugFile, JSON.stringify(debugPayload, null, 2), 'utf8');
+                fs.writeFileSync(
+                    debugFile,
+                    JSON.stringify(debugPayload, null, 2),
+                    'utf8'
+                );
+            } catch (e) {
+                // don't break login on debug failure
             }
-            catch (e) {
-                // nu stricăm login-ul dacă nu merge debug-ul
-            }
-            // === SFÂRȘIT DEBUG LOGIN ===
+            // === END DEBUG LOGIN ===
+
             const body = response.body;
+
             // Immediately attempt to extract and save authorization token from the response
             this._extractAndSaveAuthorization(response);
+
             if (body && body.two_factor_required) {
-                const err = new Error('Two factor authentication required');
+                const err = new Error(
+                    'Two factor authentication required'
+                );
                 err.name = 'IgLoginTwoFactorRequiredError';
                 err.twoFactorInfo = body.two_factor_info;
                 throw err;
@@ -565,28 +949,46 @@ class AccountRepository extends Repository {
                 err.challengeInfo = body.challenge;
                 throw err;
             }
+
             if (body && body.layout) {
-                const layoutStr = typeof body.layout === 'string' ? body.layout : JSON.stringify(body.layout);
+                const layoutStr =
+                    typeof body.layout === 'string'
+                        ? body.layout
+                        : JSON.stringify(body.layout);
+
                 // If layout contains two-factor markers, parse and throw
-                if (layoutStr.includes('two_factor_required') || layoutStr.includes('"two_factor_info"')) {
+                if (
+                    layoutStr.includes('two_factor_required') ||
+                    layoutStr.includes('"two_factor_info"')
+                ) {
                     let twoFactorInfo = null;
                     try {
-                        const match = layoutStr.match(/"two_factor_info"\s*:\s*(\{[^}]+\})/);
+                        const match = layoutStr.match(
+                            /"two_factor_info"\s*:\s*(\{[^}]+\})/
+                        );
                         if (match)
                             twoFactorInfo = JSON.parse(match[1]);
-                    }
-                    catch (e) { }
-                    const err = new Error('Two factor authentication required');
+                    } catch (e) {}
+                    const err = new Error(
+                        'Two factor authentication required'
+                    );
                     err.name = 'IgLoginTwoFactorRequiredError';
                     err.twoFactorInfo = twoFactorInfo;
                     throw err;
                 }
-                if (layoutStr.includes('bad_password') || layoutStr.includes('incorrect_password')) {
+
+                if (
+                    layoutStr.includes('bad_password') ||
+                    layoutStr.includes('incorrect_password')
+                ) {
                     const err = new Error('Bad password');
                     err.name = 'IgLoginBadPasswordError';
                     throw err;
                 }
-                if (layoutStr.includes('invalid_user') || layoutStr.includes('user_not_found')) {
+                if (
+                    layoutStr.includes('invalid_user') ||
+                    layoutStr.includes('user_not_found')
+                ) {
                     const err = new Error('Invalid user');
                     err.name = 'IgLoginInvalidUserError';
                     throw err;
@@ -597,15 +999,18 @@ class AccountRepository extends Repository {
                     err.challengeInfo = body.challenge || null;
                     throw err;
                 }
-                // Additional attempt to extract token from layout string (redundant but robust)
-                const tokenFromLayout = this._findBearerInString(layoutStr);
+
+                // Additional attempt to extract token from layout string
+                const tokenFromLayout =
+                    this._findBearerInString(layoutStr);
                 if (tokenFromLayout) {
-                    this.client.state.authorization = tokenFromLayout;
+                    this.client.state.authorization =
+                        tokenFromLayout;
                     try {
                         this.client.state.updateAuthorization();
-                    }
-                    catch (e) { }
+                    } catch (e) {}
                 }
+
                 // Extract pk (user id) from layout if present
                 const pkPatterns = [
                     /\\"pk\\":\s*(\d+)/,
@@ -620,11 +1025,13 @@ class AccountRepository extends Repository {
                     const pkMatch = layoutStr.match(pattern);
                     if (pkMatch) {
                         extractedPk = pkMatch[1];
-                        this.client.state.cookieUserId = extractedPk;
+                        this.client.state.cookieUserId =
+                            extractedPk;
                         this.client.state._userId = extractedPk;
                         break;
                     }
                 }
+
                 // Extract IG-Set-WWW-Claim if present
                 const wwwClaimPatterns = [
                     /IG-Set-WWW-Claim[\\"\s:]+([a-f0-9]+)/i,
@@ -635,26 +1042,48 @@ class AccountRepository extends Repository {
                 for (const pattern of wwwClaimPatterns) {
                     const wwwClaimMatch = layoutStr.match(pattern);
                     if (wwwClaimMatch) {
-                        this.client.state.igWWWClaim = wwwClaimMatch[1];
+                        this.client.state.igWWWClaim =
+                            wwwClaimMatch[1];
                         break;
                     }
                 }
-                // Extract encryption key id and pub key (already attempted earlier in _extractAndSaveAuthorization)
-                const encKeyIdMatch = layoutStr.match(/IG-Set-Password-Encryption-Key-Id[\\"\s:]+(\d+)/i) ||
-                    layoutStr.match(/password.encryption.key.id[\\"\s:]+(\d+)/i);
+
+                // Extract encryption key id and pub key (already attempted earlier)
+                const encKeyIdMatch =
+                    layoutStr.match(
+                        /IG-Set-Password-Encryption-Key-Id[\\"\s:]+(\d+)/i
+                    ) ||
+                    layoutStr.match(
+                        /password.encryption.key.id[\\"\s:]+(\d+)/i
+                    );
                 if (encKeyIdMatch) {
-                    this.client.state.passwordEncryptionKeyId = parseInt(encKeyIdMatch[1]);
+                    this.client.state.passwordEncryptionKeyId =
+                        parseInt(encKeyIdMatch[1]);
                 }
-                const encPubKeyMatch = layoutStr.match(/IG-Set-Password-Encryption-Pub-Key[\\"\s:]+([A-Za-z0-9+\/=]+)/i) ||
-                    layoutStr.match(/password.encryption.pub.key[\\"\s:]+([A-Za-z0-9+\/=]+)/i);
+
+                const encPubKeyMatch =
+                    layoutStr.match(
+                        /IG-Set-Password-Encryption-Pub-Key[\\"\s:]+([A-Za-z0-9+\/=]+)/i
+                    ) ||
+                    layoutStr.match(
+                        /password.encryption.pub.key[\\"\s:]+([A-Za-z0-9+\/=]+)/i
+                    );
                 if (encPubKeyMatch) {
-                    this.client.state.passwordEncryptionPubKey = encPubKeyMatch[1];
+                    this.client.state.passwordEncryptionPubKey =
+                        encPubKeyMatch[1];
                 }
-                const midMatch = layoutStr.match(/ig-set-x-mid[\\"\s:]+([A-Za-z0-9+\/=_-]+)/i) ||
-                    layoutStr.match(/\\"x-mid\\"[\\"\s:]+([A-Za-z0-9+\/=_-]+)/i);
+
+                const midMatch =
+                    layoutStr.match(
+                        /ig-set-x-mid[\\"\s:]+([A-Za-z0-9+\/=_-]+)/i
+                    ) ||
+                    layoutStr.match(
+                        /\\"x-mid\\"[\\"\s:]+([A-Za-z0-9+\/=_-]+)/i
+                    );
                 if (midMatch) {
                     this.client.state.mid = midMatch[1];
                 }
+
                 // If layout contains a direct logged_in_user JSON, extract and return it
                 const loginResponsePatterns = [
                     /\\"logged_in_user\\":\{[^}]*\\"pk\\":(\d+)[^}]*\\"username\\":\\"([^"\\]+)\\"/,
@@ -662,10 +1091,13 @@ class AccountRepository extends Repository {
                     /\\"logged_in_user\\".*?\\"pk\\":\s*(\d+).*?\\"username\\":\s*\\"([^"\\]+)\\"/s,
                 ];
                 for (const pattern of loginResponsePatterns) {
-                    const loginResponseMatch = layoutStr.match(pattern);
+                    const loginResponseMatch =
+                        layoutStr.match(pattern);
                     if (loginResponseMatch) {
-                        this.client.state.cookieUserId = loginResponseMatch[1];
-                        this.client.state._userId = loginResponseMatch[1];
+                        this.client.state.cookieUserId =
+                            loginResponseMatch[1];
+                        this.client.state._userId =
+                            loginResponseMatch[1];
                         return {
                             pk: parseInt(loginResponseMatch[1]),
                             pk_id: loginResponseMatch[1],
@@ -673,22 +1105,31 @@ class AccountRepository extends Repository {
                         };
                     }
                 }
+
                 // If we have extracted a pk and we also have authorization, try to fetch current user
-                if (extractedPk && this.client.state.authorization) {
+                if (
+                    extractedPk &&
+                    this.client.state.authorization
+                ) {
                     try {
                         const userInfo = await this.currentUser();
                         const user = userInfo.user || userInfo;
                         if (user && user.pk) {
-                            this.client.state.cookieUserId = String(user.pk);
-                            this.client.state._userId = String(user.pk);
+                            this.client.state.cookieUserId =
+                                String(user.pk);
+                            this.client.state._userId =
+                                String(user.pk);
                         }
                         return user;
-                    }
-                    catch (e) {
-                        return { pk: parseInt(extractedPk), pk_id: extractedPk };
+                    } catch (e) {
+                        return {
+                            pk: parseInt(extractedPk),
+                            pk_id: extractedPk,
+                        };
                     }
                 }
             }
+
             // If server returned logged_in_user directly in body
             if (body && body.logged_in_user) {
                 const lu = body.logged_in_user;
@@ -700,26 +1141,34 @@ class AccountRepository extends Repository {
                 this._extractAndSaveAuthorization(response);
                 return lu;
             }
+
             // If we already have authorization, try to fetch current user to populate state
             if (this.client.state.authorization) {
                 try {
                     const userInfo = await this.currentUser();
                     const user = userInfo.user || userInfo;
                     if (user && user.pk) {
-                        this.client.state.cookieUserId = String(user.pk);
+                        this.client.state.cookieUserId =
+                            String(user.pk);
                         this.client.state._userId = String(user.pk);
                     }
                     return user;
-                }
-                catch (e) {
+                } catch (e) {
                     // fallback: return raw body
                     return body;
                 }
             }
+
             return body;
         });
     }
-    async twoFactorLogin(username, verificationCode, twoFactorIdentifier, verificationMethod = '1') {
+
+    async twoFactorLogin(
+        username,
+        verificationCode,
+        twoFactorIdentifier,
+        verificationMethod = '1'
+    ) {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
                 method: 'POST',
@@ -740,6 +1189,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async logout() {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -752,6 +1202,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async currentUser() {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -762,10 +1213,19 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async accountInfo() {
         return this.currentUser();
     }
-    async editProfile({ externalUrl, phoneNumber, username, fullName, biography, email } = {}) {
+
+    async editProfile({
+        externalUrl,
+        phoneNumber,
+        username,
+        fullName,
+        biography,
+        email,
+    } = {}) {
         return this.requestWithRetry(async () => {
             const current = await this.currentUser();
             const user = current.user || current;
@@ -774,26 +1234,48 @@ class AccountRepository extends Repository {
                 url: '/api/v1/accounts/edit_profile/',
                 form: this.client.request.sign({
                     _uuid: this.client.state.uuid,
-                    external_url: externalUrl !== undefined ? externalUrl : (user.external_url || ''),
-                    phone_number: phoneNumber !== undefined ? phoneNumber : (user.phone_number || ''),
-                    username: username !== undefined ? username : user.username,
-                    full_name: fullName !== undefined ? fullName : (user.full_name || ''),
-                    biography: biography !== undefined ? biography : (user.biography || ''),
-                    email: email !== undefined ? email : (user.email || ''),
+                    external_url:
+                        externalUrl !== undefined
+                            ? externalUrl
+                            : user.external_url || '',
+                    phone_number:
+                        phoneNumber !== undefined
+                            ? phoneNumber
+                            : user.phone_number || '',
+                    username:
+                        username !== undefined
+                            ? username
+                            : user.username,
+                    full_name:
+                        fullName !== undefined
+                            ? fullName
+                            : user.full_name || '',
+                    biography:
+                        biography !== undefined
+                            ? biography
+                            : user.biography || '',
+                    email:
+                        email !== undefined
+                            ? email
+                            : user.email || '',
                 }),
             });
             return response.body;
         });
     }
+
     async setBiography(biography) {
         return this.editProfile({ biography });
     }
+
     async setExternalUrl(url) {
         return this.editProfile({ externalUrl: url });
     }
+
     async removeBioLinks() {
         return this.editProfile({ externalUrl: '' });
     }
+
     async setGender(gender) {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -807,6 +1289,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async setPrivate() {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -819,6 +1302,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async setPublic() {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -831,6 +1315,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async changePassword(oldPassword, newPassword) {
         const oldEnc = this.encryptPassword(oldPassword);
         const newEnc = this.encryptPassword(newPassword);
@@ -848,6 +1333,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async sendConfirmEmail() {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -861,6 +1347,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async sendConfirmPhoneNumber(phoneNumber) {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -874,6 +1361,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async profilePictureChange(uploadId) {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -888,6 +1376,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async profilePictureRemove() {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -900,6 +1389,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async newsInbox() {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -909,6 +1399,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async syncLoginExperiments() {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -917,20 +1408,23 @@ class AccountRepository extends Repository {
                 form: this.client.request.sign({
                     id: this.client.state.uuid,
                     server_config_retrieval: '1',
-                    experiments: this.client.state.constants.LOGIN_EXPERIMENTS,
+                    experiments:
+                        this.client.state.constants
+                            .LOGIN_EXPERIMENTS,
                 }),
             });
             return response.body;
         });
     }
+
     async syncPostLoginExperiments() {
         let userId;
         try {
             userId = this.client.state.cookieUserId;
-        }
-        catch {
+        } catch {
             userId = '0';
         }
+
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
                 method: 'POST',
@@ -940,12 +1434,14 @@ class AccountRepository extends Repository {
                     _uid: userId,
                     _uuid: this.client.state.uuid,
                     server_config_retrieval: '1',
-                    experiments: this.client.state.constants.EXPERIMENTS,
+                    experiments:
+                        this.client.state.constants.EXPERIMENTS,
                 }),
             });
             return response.body;
         });
     }
+
     async syncLauncher(preLogin = true) {
         const data = {
             id: this.client.state.uuid,
@@ -955,9 +1451,9 @@ class AccountRepository extends Repository {
             try {
                 data._uid = this.client.state.cookieUserId;
                 data._uuid = this.client.state.uuid;
-            }
-            catch { }
+            } catch {}
         }
+
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
                 method: 'POST',
@@ -967,6 +1463,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async syncDeviceFeatures() {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -980,6 +1477,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async getPrefillCandidates() {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -995,6 +1493,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async contactPointPrefill(usage = 'prefill') {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -1008,6 +1507,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async getZrToken(params = {}) {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -1024,6 +1524,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async getConsentSignupConfig() {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -1037,6 +1538,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async sendRecoveryFlowEmail(query) {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -1052,6 +1554,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async sendRecoveryFlowSms(query) {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -1067,6 +1570,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     static generateAttestParams(state) {
         // Emulate Instagram's keystore attestation as closely as possible:
         // - version: 2
@@ -1079,28 +1583,65 @@ class AccountRepository extends Repository {
         //
         // NOTE: This is *not* a real hardware-backed attestation chain, but it mirrors
         // the structure of the official app very closely so the server sees the same
-        // shape: a single attestation object with a 4‑certificate chain.
-        const challengeNonce = crypto.randomBytes(24).toString('base64url');
-        const { privateKey, publicKey } = crypto.generateKeyPairSync('ec', {
-            namedCurve: 'prime256v1',
-        });
+        // shape: a single attestation object with a 4-certificate chain.
+        const challengeNonce = crypto
+            .randomBytes(24)
+            .toString('base64url');
+        const { privateKey, publicKey } = crypto.generateKeyPairSync(
+            'ec',
+            {
+                namedCurve: 'prime256v1',
+            }
+        );
         // Sign the challenge nonce with the private key (simulating TEE signing).
-        const signedData = crypto.sign(null, Buffer.from(challengeNonce), privateKey);
+        const signedData = crypto.sign(
+            null,
+            Buffer.from(challengeNonce),
+            privateKey
+        );
         const signedNonce = signedData.toString('base64');
-        const publicKeyDer = publicKey.export({ type: 'spki', format: 'der' });
-        const keyHash = crypto.createHash('sha256').update(publicKeyDer).digest('hex');
-        // Build a 4‑certificate chain (leaf + 2 intermediates + root), just like
-        // what we saw in the captured traffic from the real Instagram app.
-        const leafCertPem = AccountRepository._generateSelfSignedCert(privateKey, publicKey, 'Android Keystore Key');
-        const intermediate1Pem = AccountRepository._generateSelfSignedCert(privateKey, publicKey, 'Android Keystore Key Attestation');
-        const intermediate2Pem = AccountRepository._generateSelfSignedCert(privateKey, publicKey, 'Android Hardware Keystore');
-        const rootCertPem = AccountRepository._generateSelfSignedCert(privateKey, publicKey, 'Android Keystore Root');
+        const publicKeyDer = publicKey.export({
+            type: 'spki',
+            format: 'der',
+        });
+        const keyHash = crypto
+            .createHash('sha256')
+            .update(publicKeyDer)
+            .digest('hex');
+
+        // Build a 4-certificate chain (leaf + 2 intermediates + root)
+        const leafCertPem =
+            AccountRepository._generateSelfSignedCert(
+                privateKey,
+                publicKey,
+                'Android Keystore Key'
+            );
+        const intermediate1Pem =
+            AccountRepository._generateSelfSignedCert(
+                privateKey,
+                publicKey,
+                'Android Keystore Key Attestation'
+            );
+        const intermediate2Pem =
+            AccountRepository._generateSelfSignedCert(
+                privateKey,
+                publicKey,
+                'Android Hardware Keystore'
+            );
+        const rootCertPem =
+            AccountRepository._generateSelfSignedCert(
+                privateKey,
+                publicKey,
+                'Android Keystore Root'
+            );
+
         const certificateChain = [
             leafCertPem,
             intermediate1Pem,
             intermediate2Pem,
             rootCertPem,
         ].join('\n');
+
         return {
             attestation: [
                 {
@@ -1115,12 +1656,20 @@ class AccountRepository extends Repository {
             ],
         };
     }
+
     static _generateSelfSignedCert(privateKey, publicKey, cn) {
-        const publicKeyDer = publicKey.export({ type: 'spki', format: 'der' });
+        const publicKeyDer = publicKey.export({
+            type: 'spki',
+            format: 'der',
+        });
         const serialNumber = crypto.randomBytes(8);
         const now = new Date();
-        const notBefore = new Date(now.getTime() - 365 * 24 * 60 * 60 * 1000);
-        const notAfter = new Date(now.getTime() + 10 * 365 * 24 * 60 * 60 * 1000);
+        const notBefore = new Date(
+            now.getTime() - 365 * 24 * 60 * 60 * 1000
+        );
+        const notAfter = new Date(
+            now.getTime() + 10 * 365 * 24 * 60 * 60 * 1000
+        );
         const cnBytes = Buffer.from(cn, 'utf8');
         const cnSeq = Buffer.concat([
             Buffer.from([0x30, cnBytes.length + 13]),
@@ -1130,39 +1679,75 @@ class AccountRepository extends Repository {
             Buffer.from([0x0c, cnBytes.length]),
             cnBytes,
         ]);
+
         function encodeTime(date) {
-            const str = date.toISOString().replace(/[-:T]/g, '').slice(2, 14) + 'Z';
-            return Buffer.concat([Buffer.from([0x17, str.length]), Buffer.from(str)]);
+            const str =
+                date
+                    .toISOString()
+                    .replace(/[-:T]/g, '')
+                    .slice(2, 14) + 'Z';
+            return Buffer.concat([
+                Buffer.from([0x17, str.length]),
+                Buffer.from(str),
+            ]);
         }
+
         const validityBuf = Buffer.concat([
             encodeTime(notBefore),
             encodeTime(notAfter),
         ]);
-        const validity = Buffer.concat([Buffer.from([0x30, validityBuf.length]), validityBuf]);
+        const validity = Buffer.concat([
+            Buffer.from([0x30, validityBuf.length]),
+            validityBuf,
+        ]);
+
         const tbs = Buffer.concat([
             Buffer.from([0xa0, 0x03, 0x02, 0x01, 0x02]),
-            Buffer.from([0x02, serialNumber.length]), serialNumber,
-            Buffer.from([0x30, 0x0a, 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x04, 0x03, 0x02]),
+            Buffer.from([0x02, serialNumber.length]),
+            serialNumber,
+            Buffer.from([
+                0x30, 0x0a, 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d,
+                0x04, 0x03, 0x02,
+            ]),
             cnSeq,
             validity,
             cnSeq,
             publicKeyDer,
         ]);
-        const tbsSeq = Buffer.concat([Buffer.from([0x30, 0x82]), Buffer.alloc(2), tbs]);
+
+        const tbsSeq = Buffer.concat([
+            Buffer.from([0x30, 0x82]),
+            Buffer.alloc(2),
+            tbs,
+        ]);
         tbsSeq.writeUInt16BE(tbs.length, 2);
+
         const signature = crypto.sign(null, tbsSeq, privateKey);
         const sigBitString = Buffer.concat([
             Buffer.from([0x03, signature.length + 1, 0x00]),
             signature,
         ]);
-        const algId = Buffer.from([0x30, 0x0a, 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x04, 0x03, 0x02]);
+        const algId = Buffer.from([
+            0x30, 0x0a, 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d,
+            0x04, 0x03, 0x02,
+        ]);
         const certBody = Buffer.concat([tbsSeq, algId, sigBitString]);
-        const cert = Buffer.concat([Buffer.from([0x30, 0x82]), Buffer.alloc(2), certBody]);
+        const cert = Buffer.concat([
+            Buffer.from([0x30, 0x82]),
+            Buffer.alloc(2),
+            certBody,
+        ]);
         cert.writeUInt16BE(certBody.length, 2);
+
         const b64 = cert.toString('base64');
         const lines = b64.match(/.{1,76}/g) || [b64];
-        return '-----BEGIN CERTIFICATE-----\n' + lines.join('\n') + '\n-----END CERTIFICATE-----';
+        return (
+            '-----BEGIN CERTIFICATE-----\n' +
+            lines.join('\n') +
+            '\n-----END CERTIFICATE-----'
+        );
     }
+
     static createJazoest(input) {
         const buf = Buffer.from(input || '', 'ascii');
         let sum = 0;
@@ -1171,45 +1756,70 @@ class AccountRepository extends Repository {
         }
         return `2${sum}`;
     }
+
     encryptPassword(password) {
         if (!this.client.state.passwordEncryptionPubKey) {
-            return { time: Math.floor(Date.now() / 1000).toString(), encrypted: password };
+            return {
+                time: Math.floor(Date.now() / 1000).toString(),
+                encrypted: password,
+            };
         }
         const randKey = crypto.randomBytes(32);
         const iv = crypto.randomBytes(12);
-        const rsaEncrypted = crypto.publicEncrypt({
-            key: Buffer.from(this.client.state.passwordEncryptionPubKey, 'base64').toString(),
-            padding: crypto.constants.RSA_PKCS1_PADDING,
-        }, randKey);
-        const cipher = crypto.createCipheriv('aes-256-gcm', randKey, iv);
+        const rsaEncrypted = crypto.publicEncrypt(
+            {
+                key: Buffer.from(
+                    this.client.state.passwordEncryptionPubKey,
+                    'base64'
+                ).toString(),
+                padding: crypto.constants.RSA_PKCS1_PADDING,
+            },
+            randKey
+        );
+        const cipher = crypto.createCipheriv(
+            'aes-256-gcm',
+            randKey,
+            iv
+        );
         const time = Math.floor(Date.now() / 1000).toString();
         cipher.setAAD(Buffer.from(time));
-        const aesEncrypted = Buffer.concat([cipher.update(password, 'utf8'), cipher.final()]);
+        const aesEncrypted = Buffer.concat([
+            cipher.update(password, 'utf8'),
+            cipher.final(),
+        ]);
         const sizeBuffer = Buffer.alloc(2, 0);
         sizeBuffer.writeInt16LE(rsaEncrypted.byteLength, 0);
         const authTag = cipher.getAuthTag();
         return {
             time,
             encrypted: Buffer.concat([
-                Buffer.from([1, this.client.state.passwordEncryptionKeyId || 0]),
+                Buffer.from([
+                    1,
+                    this.client.state.passwordEncryptionKeyId || 0,
+                ]),
                 iv,
                 sizeBuffer,
                 rsaEncrypted,
                 authTag,
-                aesEncrypted
-            ]).toString('base64')
+                aesEncrypted,
+            ]).toString('base64'),
         };
     }
+
     async passwordPublicKeys() {
         const response = await this.client.request.send({
             method: 'GET',
             url: '/api/v1/qe/sync/',
         });
         const headers = response.headers || {};
-        const keyId = parseInt(headers['ig-set-password-encryption-key-id'] || '0');
-        const pubKey = headers['ig-set-password-encryption-pub-key'] || '';
+        const keyId = parseInt(
+            headers['ig-set-password-encryption-key-id'] || '0'
+        );
+        const pubKey =
+            headers['ig-set-password-encryption-pub-key'] || '';
         return { keyId, pubKey };
     }
+
     async setPresenceDisabled(disabled = true) {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -1223,6 +1833,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async getCommentFilter() {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -1232,6 +1843,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async setCommentFilter(configValue = 0) {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -1245,6 +1857,7 @@ class AccountRepository extends Repository {
             return response.body;
         });
     }
+
     async pushPreferences(preferences = 'default') {
         return this.requestWithRetry(async () => {
             const response = await this.client.request.send({
@@ -1264,4 +1877,5 @@ class AccountRepository extends Repository {
         });
     }
 }
+
 module.exports = AccountRepository;