nodejs-insta-private-api-mqt 1.4.5 → 1.4.7

package/dist/dist/constants/index.js

@@ -13,7 +13,7 @@ const LOGIN_EXPERIMENTS = 'ig_android_fci_onboarding_friend_search,ig_android_de
 const FACEBOOK_ANALYTICS_APPLICATION_ID = '567067343352427';
 const FACEBOOK_OTA_FIELDS = 'update%7Bdownload_uri%2Cdownload_uri_delta_base%2Cversion_code_delta_base%2Cdownload_uri_delta%2Cfallback_to_full_update%2Cfile_size_delta%2Cversion_code%2Cpublished_date%2Cfile_size%2Cota_bundle_type%2Cresources_checksum%2Callowed_networks%2Crelease_id%7D';
 const FACEBOOK_ORCA_APPLICATION_ID = '124024574287414';
-const BLOKS_VERSION_ID = 'ce555e5500576acd8e84a66018f54a05720f2dce29f0bb5a1f97f0c10d6fac48';
+const BLOKS_VERSION_ID = '5e47baf35c5a270b44c8906c8b99063564b30ef69779f3dee0b828bee2e4ef5b';
 const SUPPORTED_CAPABILITIES = [
     {
         value: '119.0,120.0,121.0,122.0,123.0,124.0,125.0,126.0,127.0,128.0,129.0,130.0,131.0,132.0,133.0,134.0,135.0,136.0,137.0,138.0,139.0,140.0,141.0,142.0',

package/dist/dist/repositories/account.repository.js

@@ -295,14 +295,18 @@ class AccountRepository extends Repository {
     }
 
     /**
-     * Resolves a valid User-Agent from state / realistic fallback.
-     * IMPORTANT: IG version, build number and bloksVersionId must be
-     * in sync. Update all three when Instagram updates.
+     * Resolves a valid User-Agent from state / dynamically generated fallback.
+     * Priority:
+     *   1. state.userAgent / state.appUserAgent / request.userAgent / state.deviceString
+     *   2. Built dynamically from state device parameters (androidRelease, manufacturer, model, etc.)
+     *   3. Last-resort realistic static fallback
+     * This way the user-agent always reflects the emulated device set in state.
      */
     _resolveUserAgent() {
         const state = this.client.state || {};
         const req = this.client.request || {};
 
+        // 1) Explicit user-agent already set in state
         const candidates = [
             state.userAgent,
             state.appUserAgent,
@@ -310,17 +314,204 @@ class AccountRepository extends Repository {
             state.deviceString,
         ].filter(Boolean);
 
-        let userAgent = candidates.length > 0 ? candidates[0] : null;
+        if (candidates.length > 0) {
+            this.client.state.userAgent = candidates[0];
+            return candidates[0];
+        }
+
+        // 2) Build dynamically from device parameters stored in state
+        try {
+            const igVersion    = state.appVersion        || state.igVersion        || '415.0.0.36.76';
+            const buildNumber  = state.appVersionCode    || state.buildNumber      || '580610226';
+            const androidApi   = state.androidVersion    || state.androidApiLevel  || '35';
+            const androidRel   = state.androidRelease    || state.androidOsVersion || '15';
+            const dpi          = state.dpi               || state.screenDpi        || '480dpi';
+            const resolution   = state.resolution        || state.screenResolution || '1080x2400';
+            const manufacturer = state.manufacturer      || state.deviceManufacturer || 'Google';
+            const brand        = state.brand             || state.deviceBrand      || manufacturer;
+            const model        = state.model             || state.deviceModel      || 'Pixel 7';
+            const device       = state.device            || state.deviceName       || 'panther';
+            const cpu          = state.cpu               || state.deviceCpu        || 'gs201';
+            const lang         = (state.language         || 'en_US').replace('-', '_');
+
+            const ua = `Instagram ${igVersion} Android (${androidApi}/${androidRel}; ${dpi}; ${resolution}; ${brand}/${manufacturer}; ${model}; ${device}; ${cpu}; ${lang}; ${buildNumber})`;
+            this.client.state.userAgent = ua;
+            return ua;
+        } catch (e) {}
+
+        // 3) Last-resort static fallback
+        const fallback = 'Instagram 415.0.0.36.76 Android (35/15; 480dpi; 1280x2856; Google; Pixel 9 Pro; caiman; google; en_US; 580610226)';
+        this.client.state.userAgent = fallback;
+        return fallback;
+    }
+
+    /**
+     * Fetches the latest bloksVersionId from Instagram's launcher/sync endpoint.
+     * Saves result to bloks-version.json in the session folder (authinfo_instagram/<username>/).
+     * If fetch fails, keeps the existing bloksVersionId from state or falls back to hardcoded.
+     */
+    async _fetchAndSaveBloksVersion(username) {
+        const fs = require('fs');
+        const path = require('path');
+        const FALLBACK_BLOKS = '5e47baf35c5a270b44c8906c8b99063564b30ef69779f3dee0b828bee2e4ef5b';
+
+        // Session folder: authinfo_instagram/<username>/
+        const sessionDir = path.join(
+            process.cwd(),
+            'authinfo_instagram',
+            username ? String(username) : 'default'
+        );
+        const bloksFile = path.join(sessionDir, 'bloks-version.json');
+
+        try { fs.mkdirSync(sessionDir, { recursive: true }); } catch (e) {}
+
+        const state = this.client.state || {};
+        const userAgent = this._resolveUserAgent();
+        const lang = state.language || 'ro_RO';
+        const nowSec = Math.floor(Date.now() / 1000);
+        const androidDeviceId =
+            state.androidDeviceId || state.deviceId ||
+            `android-${crypto.randomBytes(8).toString('hex')}`;
+        const deviceUUID = state.uuid || state.deviceId ||
+            (crypto.randomUUID ? crypto.randomUUID() : require('uuid').v4());
+        const networkProps = buildNetworkProperties();
+
+        // Current bloksVersionId as starting point
+        const currentBloks = state.bloksVersionId || FALLBACK_BLOKS;
+
+        // Helper: extract 64-char hex bloksVersionId from any object/string
+        const extractBloks = (body) => {
+            if (!body) return null;
+            const bodyStr = typeof body === 'string' ? body : JSON.stringify(body);
+            // Direct fields
+            if (body.bloks_version_id && /^[a-f0-9]{64}$/.test(body.bloks_version_id)) return body.bloks_version_id;
+            if (body.bloksVersionId && /^[a-f0-9]{64}$/.test(body.bloksVersionId)) return body.bloksVersionId;
+            // Search in JSON string
+            const m = bodyStr.match(/"bloks_version_id"\s*:\s*"([a-f0-9]{64})"/) ||
+                      bodyStr.match(/"bloksVersionId"\s*:\s*"([a-f0-9]{64})"/) ||
+                      bodyStr.match(/"x-bloks-version-id"\s*:\s*"([a-f0-9]{64})"/) ||
+                      bodyStr.match(/([a-f0-9]{64})/);
+            if (m && m[1] && /^[a-f0-9]{64}$/.test(m[1])) return m[1];
+            return null;
+        };
 
-        if (!userAgent) {
-            // FIX: real existing version — 415.0.0.36.76 (build 580610226)
-            // Keep in sync with bloksVersionId below.
-            userAgent =
-                'Instagram 415.0.0.36.76 Android (35/15; 480dpi; 1280x2856; Google; Pixel 9 Pro; caiman; google; en_US; 580610226)';
+        // Helper: safe state setter for bloksVersionId
+        // state.bloksVersionId may be read-only (getter-only via Object.defineProperty)
+        // so we force-redefine it
+        const setBloksInState = (val) => {
+            try {
+                // Try direct set first
+                this.client.state.bloksVersionId = val;
+                return;
+            } catch (e) {}
+            try {
+                // Force redefine the property as writable
+                Object.defineProperty(this.client.state, 'bloksVersionId', {
+                    value: val,
+                    writable: true,
+                    configurable: true,
+                    enumerable: true,
+                });
+                return;
+            } catch (e) {}
+            try { this.client.state._bloksVersionId = val; } catch (e) {}
+            try {
+                // Last resort: patch constants object if that's where it comes from
+                if (this.client.state.constants) {
+                    this.client.state.constants.BLOKS_VERSION_ID = val;
+                }
+            } catch (e) {}
+        };
+
+        const commonHeaders = {
+            'accept-language': `${lang.replace('_', '-')}, en-US`,
+            'content-type': 'application/x-www-form-urlencoded; charset=UTF-8',
+            'x-bloks-version-id': currentBloks,
+            'x-ig-android-id': androidDeviceId,
+            'x-ig-app-id': String(state.fbAnalyticsApplicationId || '567067343352427'),
+            'x-ig-app-locale': lang,
+            'x-ig-device-locale': lang,
+            'x-ig-mapped-locale': lang,
+            'x-ig-capabilities': '3brTv10=',
+            'x-ig-connection-type': 'MOBILE(UNKNOWN)',
+            'x-fb-connection-type': 'MOBILE.UNKNOWN',
+            'x-fb-client-ip': 'True',
+            'x-fb-server-cluster': 'True',
+            'x-fb-http-engine': 'MNS/TCP',
+            'x-fb-network-properties': networkProps,
+            'x-ig-timezone-offset': String(typeof state.timezoneOffset === 'number' ? state.timezoneOffset : 7200),
+            'x-mid': state.mid || `aZ${crypto.randomBytes(8).toString('hex')}`,
+            'x-pigeon-rawclienttime': `${nowSec}.${Math.floor(Math.random() * 1000).toString().padStart(3, '0')}`,
+            'x-pigeon-session-id': state.pigeonSessionId || `UFS-${crypto.randomBytes(16).toString('hex')}-0`,
+            'x-tigon-is-retry': 'False',
+            'x-ig-www-claim': state.igWWWClaim || '0',
+            'accept-encoding': 'gzip, deflate',
+            'user-agent': userAgent,
+            'x-fb-rmd': 'state=URL_ELIGIBLE',
+        };
+
+        let fetchedBloks = null;
+        let rawBody = null;
+        let endpointUsed = null;
+
+        try {
+            // Endpoint 1: launcher/sync — sometimes returns bloks in config
+            const r1 = await this.client.request.send({
+                method: 'POST',
+                url: '/api/v1/launcher/sync/',
+                form: this.client.request.sign({ id: deviceUUID, server_config_retrieval: '1' }),
+                headers: { ...commonHeaders, 'x-fb-friendly-name': 'IgApi: launcher/sync/' },
+            });
+            rawBody = r1.body;
+            fetchedBloks = extractBloks(r1.body);
+            if (fetchedBloks) endpointUsed = 'launcher/sync';
+        } catch (e) {}
+
+        if (!fetchedBloks) {
+            try {
+                // Endpoint 2: qe/sync — often contains bloks version in headers/body
+                const r2 = await this.client.request.send({
+                    method: 'POST',
+                    url: '/api/v1/qe/sync/',
+                    form: this.client.request.sign({ id: deviceUUID, server_config_retrieval: '1' }),
+                    headers: { ...commonHeaders, 'x-fb-friendly-name': 'IgApi: qe/sync/' },
+                });
+                // Check response headers too
+                const hdrs = r2.headers || {};
+                const bloksHeader = hdrs['x-bloks-version-id'] || hdrs['bloks-version-id'];
+                if (bloksHeader && /^[a-f0-9]{64}$/.test(bloksHeader)) {
+                    fetchedBloks = bloksHeader;
+                    endpointUsed = 'qe/sync (header)';
+                } else {
+                    fetchedBloks = extractBloks(r2.body);
+                    if (fetchedBloks) endpointUsed = 'qe/sync (body)';
+                }
+                if (!rawBody) rawBody = r2.body;
+            } catch (e) {}
         }
 
-        this.client.state.userAgent = userAgent;
-        return userAgent;
+        const gotNew = !!(fetchedBloks && fetchedBloks !== currentBloks);
+        const bloksToUse = fetchedBloks || currentBloks;
+
+        // Update state safely
+        setBloksInState(bloksToUse);
+
+        // Save to bloks-version.json in session folder
+        const saveData = {
+            username: username || 'unknown',
+            bloksVersionId: bloksToUse,
+            previousBloksVersionId: currentBloks,
+            updatedAt: new Date().toISOString(),
+            gotNewVersion: gotNew,
+            fetchSuccess: !!fetchedBloks,
+            endpointUsed: endpointUsed || 'none — kept existing',
+            rawResponse: rawBody || null,
+        };
+        try {
+            fs.writeFileSync(bloksFile, JSON.stringify(saveData, null, 2), 'utf8');
+        } catch (writeErr) {}
+
+        return bloksToUse;
     }
 
     async ensureCsrfToken() {
@@ -861,6 +1052,9 @@ class AccountRepository extends Repository {
 
         if (!username || !password) throw new Error('Username and password are required');
 
+        // Fetch latest bloksVersionId from Instagram and save to session folder
+        try { await this._fetchAndSaveBloksVersion(username); } catch (e) {}
+
         await this.ensureCsrfToken();
 
         try { await this._launcherMobileConfig(true); } catch (e) {}
@@ -885,7 +1079,7 @@ class AccountRepository extends Repository {
         try { await this._phoneNumberPrefill(); } catch (e) {}
         try { await this._prefetchOauthTokenForLogin(username); } catch (e) {}
 
-        return this.requestWithRetry(async () => {
+        const loginResult = await this.requestWithRetry(async () => {
             const nowSec = Math.floor(Date.now() / 1000);
             const aacInitTimestamp = nowSec - Math.floor(Math.random() * 50);
             const aacjid = crypto.randomUUID ? crypto.randomUUID() : require('uuid').v4();
@@ -1261,6 +1455,126 @@ class AccountRepository extends Repository {
 
             return body;
         });
+
+        // Post-login: set E2EE eligibility (as real app does after login)
+        try { await this._setE2eeEligibility(); } catch (e) {}
+
+        return loginResult;
+    }
+
+    async _setE2eeEligibility(eligibility = 4) {
+        const state = this.client.state || {};
+        const lang = state.language || 'ro_RO';
+        const acceptLanguage = `${lang.replace('_', '-')}, en-US`;
+        const userAgent = this._resolveUserAgent();
+        const bloksVersionId =
+            state.bloksVersionId ||
+            '5e47baf35c5a270b44c8906c8b99063564b30ef69779f3dee0b828bee2e4ef5b';
+        const networkProps = buildNetworkProperties();
+        const nowSec = Math.floor(Date.now() / 1000);
+
+        const androidDeviceId =
+            state.androidDeviceId ||
+            state.deviceId ||
+            `android-${crypto.randomBytes(8).toString('hex')}`;
+        const familyDeviceId =
+            state.phoneId ||
+            state.familyDeviceId ||
+            (crypto.randomUUID ? crypto.randomUUID() : require('uuid').v4());
+        const qeDeviceId =
+            state.deviceId ||
+            state.qeDeviceId ||
+            (crypto.randomUUID ? crypto.randomUUID() : require('uuid').v4());
+        const machineId =
+            state.mid ||
+            state.machineId ||
+            `aZ${crypto.randomBytes(8).toString('hex')}`;
+
+        const headers = {
+            'accept-language': acceptLanguage,
+            'authorization': state.authorization || '',
+            'content-type': 'application/x-www-form-urlencoded; charset=UTF-8',
+            'ig-intended-user-id': String(state.cookieUserId || '0'),
+            'ig-u-ds-user-id': String(state.cookieUserId || '0'),
+            'priority': 'u=3',
+            'x-bloks-is-layout-rtl': 'false',
+            'x-bloks-prism-ax-base-colors-enabled': 'false',
+            'x-bloks-prism-button-version': 'CONTROL',
+            'x-bloks-prism-colors-enabled': 'true',
+            'x-bloks-prism-font-enabled': 'false',
+            'x-bloks-prism-indigo-link-version': '0',
+            'x-bloks-version-id': bloksVersionId,
+            'x-fb-client-ip': 'True',
+            'x-fb-connection-type': 'MOBILE.UNKNOWN',
+            'x-fb-friendly-name': 'IgApi: direct_v2/set_e2ee_eligibility/',
+            'x-fb-network-properties': networkProps,
+            'x-fb-request-analytics-tags': JSON.stringify({
+                network_tags: {
+                    product: String(state.fbAnalyticsApplicationId || '567067343352427'),
+                    purpose: 'fetch',
+                    surface: 'undefined',
+                    request_category: 'api',
+                    retry_attempt: '0',
+                },
+            }),
+            'x-fb-server-cluster': 'True',
+            'x-ig-android-id': androidDeviceId,
+            'x-ig-app-id': String(state.fbAnalyticsApplicationId || '567067343352427'),
+            'x-ig-app-locale': lang,
+            'x-ig-bandwidth-speed-kbps': (Math.random() * 1500 + 800).toFixed(3),
+            'x-ig-bandwidth-totalbytes-b': '0',
+            'x-ig-bandwidth-totaltime-ms': '0',
+            'x-ig-capabilities': '3brTv10=',
+            'x-ig-client-endpoint': 'empty',
+            'x-ig-connection-type': 'MOBILE(UNKNOWN)',
+            'x-ig-device-id': qeDeviceId,
+            'x-ig-device-languages': `{"system_languages":"${lang}"}`,
+            'x-ig-device-locale': lang,
+            'x-ig-family-device-id': familyDeviceId,
+            'x-ig-mapped-locale': lang,
+            'x-ig-nav-chain': 'LockoutFragment:dogfooding_lockout:1:cold_start',
+            'x-ig-salt-ids': state.igSaltIds || '220140399,332020310,974466465,974460658',
+            'x-ig-timezone-offset': String(
+                typeof state.timezoneOffset === 'number' ? state.timezoneOffset : 7200
+            ),
+            'x-ig-www-claim': state.igWWWClaim || '0',
+            'x-mid': machineId,
+            'x-pigeon-rawclienttime': `${nowSec}.${Math.floor(Math.random() * 1000).toString().padStart(3, '0')}`,
+            'x-pigeon-session-id':
+                state.pigeonSessionId ||
+                `UFS-${crypto.randomBytes(16).toString('hex')}-3`,
+            'x-tigon-is-retry': 'False',
+            'accept-encoding': 'gzip, deflate',
+            'user-agent': userAgent,
+            'x-fb-conn-uuid-client': crypto.randomBytes(16).toString('hex'),
+            'x-fb-http-engine': 'MNS/TCP',
+            'x-fb-rmd': 'state=URL_ELIGIBLE',
+        };
+
+        if (state.igURur) headers['ig-u-rur'] = state.igURur;
+
+        try {
+            const response = await this.client.request.send({
+                method: 'POST',
+                url: '/api/v1/direct_v2/set_e2ee_eligibility/',
+                form: {
+                    _uuid: qeDeviceId,
+                    e2ee_eligibility: String(eligibility),
+                },
+                headers,
+            });
+
+            debugWrite('e2ee-eligibility-debug.json', {
+                at: new Date().toISOString(),
+                statusCode: response.statusCode || response.status || null,
+                headers: response.headers || null,
+                body: response.body || null,
+            });
+
+            return response.body;
+        } catch (e) {
+            return null;
+        }
     }
 
     async twoFactorLogin(username, verificationCode, twoFactorIdentifier, verificationMethod = '1') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodejs-insta-private-api-mqt",
-  "version": "1.4.5",
+  "version": "1.4.7",
   "description": "Complete Instagram MQTT protocol with full-featured REALTIME and REST API — all in one project.",
 
   "main": "dist/dist/index.js",