nodejs-insta-private-api-mqtt 1.1.0 → 1.1.2

package/README.md

@@ -8,6 +8,9 @@ The old repository and NPM package were lost and are now associated with a diffe
 Starting from today, this NPM account will be the official and active source where this library will be published and maintained.
 Please make sure you are using this package from this account only to receive future updates, fixes, and support.
 
+You can subscribe to any Instagram topic in this library visit the bookstore code, it would help me a lot if you like this project and if it helps you! 
+
+If you see clones of nodejs-insta-private-api on npm don't download, it could be malicious code and you may have security issues on your Instagram accounts, always use this project or the nodejs-insta-private-api project but that's on the lost account, always use npm install nodejs-insta-private-api-mqtt in your projects 
 
 
 # nodejs-insta-private-api-mqtt
@@ -16,7 +19,7 @@ This project implements a complete and production-ready MQTT protocol client for
 
 By leveraging MQTT instead of Instagram's REST API, this library achieves sub-500ms message latency, bidirectional real-time communication, and native support for notifications, presence tracking, and thread management. The implementation is reverse-engineered from Instagram's mobile app protocol and tested extensively for reliability and compatibility.
 
-## Features (v5.61.11 - iOS + Android Full Support)
+## Features ( - iOS + Android Full Support)
 
 - **NEW: FULL iOS SUPPORT** - iPhone 16/15/14/13/12 + iPad Pro/Air device emulation
 - **NEW: FULL ANDROID SUPPORT** - Samsung, Huawei, Google Pixel, OnePlus, Xiaomi, OPPO
@@ -72,7 +75,7 @@ Requires **Node.js 18 or higher**.
 
 ---
 
-## NEW: Custom Device Emulation (v5.60.7)
+## NEW: Custom Device Emulation ()
 
 **Default Device:** Samsung Galaxy S25 Ultra (Android 15) - used automatically if you don't set a custom device.
 

package/dist/constants/constants.js

@@ -84,8 +84,8 @@ exports.FBNS = {
     PACKAGE: 'com.instagram.android',
     APP_ID: '567310203415052',
     HOST_NAME_V6: 'mqtt-mini.facebook.com',
-    CLIENT_CAPABILITIES: 439,
-    ENDPOINT_CAPABILITIES: 128,
+    CLIENT_CAPABILITIES: 6143,
+    ENDPOINT_CAPABILITIES: 255,
     CLIENT_STACK: 3,
     PUBLISH_FORMAT: 1,
 };

package/dist/core/request.js

@@ -14,7 +14,14 @@ class Request {
       timeout: 30000,
       headers: {
         'Content-Type': 'application/x-www-form-urlencoded; charset=UTF-8'
-      }
+      },
+      // Modern TLS settings to bypass basic fingerprinting (Strict Instagram Fizz mimicry)
+      httpsAgent: new (require('https').Agent)({
+        ciphers: 'TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305',
+        honorCipherOrder: true,
+        minVersion: 'TLSv1.3', // Instagram 2026 enforces TLS 1.3
+        maxVersion: 'TLSv1.3'
+      })
     });
   }
 
@@ -201,6 +208,9 @@ class Request {
       'X-IG-Android-ID': this.client.state.deviceId,
       'Accept-Language': this.client.state.language.replace('_', '-'),
       'X-FB-HTTP-Engine': 'Liger',
+      'X-FB-Client-IP': 'True',
+      'X-FB-Server-Cluster': 'True',
+      'X-IG-Nav-Chain': 'MainFeed:FeedTimelineFragment:1',
       'Authorization': this.client.state.authorization,
       'Host': 'i.instagram.com',
       'Accept-Encoding': 'gzip, deflate',

package/dist/core/state.js

@@ -21,8 +21,10 @@ class State {
     this.language = 'en_US';
     this.timezoneOffset = String(new Date().getTimezoneOffset() * -60);
     this.radioType = 'wifi-none';
-    this.capabilitiesHeader = '3brTv10=';
+    this.capabilitiesHeader = '3brTvw==';
     this.connectionTypeHeader = 'WIFI';
+    this.clientCapabilities = 6143;
+    this.endpointCapabilities = 255;
     this.isLayoutRTL = false;
     this.adsOptOut = false;
     this.thumbnailCacheBustingValue = 1000;
@@ -35,10 +37,14 @@ class State {
 
     // ===== PLATFORM SUPPORT (iOS + Android) =====
     this.platform = 'android'; // 'android' or 'ios'
+    this.androidVersion = '15';
+    this.androidApiLevel = '35';
+    this.appVersion = '380.0.0.40.94';
+    this.appVersionCode = '525123456';
     this.iosVersion = '18.1';
-    this.iosAppVersion = '347.0.0.36.89';
-    this.iosAppVersionCode = '618023787';
-    this.iosDeviceModel = 'iPhone16,2'; // iPhone 15 Pro Max
+    this.iosAppVersion = '411.0.0';
+    this.iosAppVersionCode = '700123456';
+    this.iosDeviceModel = 'iPhone17,1'; // iPhone 16 Pro Max
     this.iosDeviceName = 'iPhone';
     this.iosBundleId = 'com.burbn.instagram';
 

package/dist/mqttot/mqttot.client.js

@@ -23,12 +23,26 @@ class MQTToTClient extends mqtts_1.MqttClient {
                     host: options.url,
                     port: 443,
                     proxyOptions: options.socksOptions,
-                    additionalOptions: options.additionalOptions,
+                    additionalOptions: {
+                        ...options.additionalOptions,
+                        ciphers: 'TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256',
+                        minVersion: 'TLSv1.3',
+                        maxVersion: 'TLSv1.3',
+                        honorCipherOrder: true,
+                        ALPNProtocols: ['h2', 'mqtt']
+                    },
                 })
                 : new mqtts_1.TlsTransport({
                     host: options.url,
                     port: 443,
-                    additionalOptions: options.additionalOptions,
+                    additionalOptions: {
+                        ...options.additionalOptions,
+                        ciphers: 'TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256',
+                        minVersion: 'TLSv1.3',
+                        maxVersion: 'TLSv1.3',
+                        honorCipherOrder: true,
+                        ALPNProtocols: ['h2', 'mqtt']
+                    },
                 }),
         });
         this.mqttotDebug = (msg, ...args) => (0, shared_1.debugChannel)('mqttot')(`${options.url}: ${msg}`, ...args);
@@ -100,7 +114,7 @@ function mqttotConnectFlow(payload, requirePayload) {
             type: mqtts_1.PacketType.Connect,
             options: {
                 payload,
-                keepAlive: 60,
+                keepAlive: 120,
             },
         }),
         accept: mqtts_1.isConnAck,

package/dist/mqttot/mqttot.connection.js

@@ -7,6 +7,8 @@ class MQTToTConnection {
         this.fbnsConnectionData = connectionData;
     }
     toThrift() {
+        this.fbnsConnectionData.clientCapabilities = this.fbnsConnectionData.clientCapabilities || 6143;
+        this.fbnsConnectionData.endpointCapabilities = this.fbnsConnectionData.endpointCapabilities || 255;
         return (0, thrift_1.thriftWriteFromObject)(this.fbnsConnectionData, MQTToTConnection.thriftConfig);
     }
     toString() {

package/dist/shared/shared.js

@@ -21,10 +21,10 @@ function createFbnsUserAgent(ig) {
         FBBD: 'Android',
         FBPN: 'com.instagram.android',
         FBDV: deviceName.trim(),
-        FBSV: androidVersion.split('/')[1],
+        FBSV: ig.state.androidVersion,
         FBLR: '0',
         FBBK: '1',
-        FBCA: 'x86:armeabi-v7a',
+        FBCA: 'arm64-v8a:armeabi-v7a:armeabi',
     };
     return `[${Object.entries(params)
         .map(p => p.join('/'))
@@ -32,7 +32,7 @@ function createFbnsUserAgent(ig) {
 }
 exports.createFbnsUserAgent = createFbnsUserAgent;
 function compressDeflate(data) {
-    return deflatePromise(data, { level: 9 });
+    return deflatePromise(data, { level: 6, windowBits: -15 });
 }
 exports.compressDeflate = compressDeflate;
 function unzipAsync(data) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodejs-insta-private-api-mqtt",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "description": "Complete Instagram MQTT protocol with FULL iOS + Android support. 33 device presets (21 iOS + 12 Android). iPhone 16/15/14/13/12, iPad Pro, Samsung, Pixel, Huawei. Real-time DM messaging, view-once media extraction, sub-500ms latency.",
   "main": "dist/index.js",
   "scripts": {