@the-convocation/twitter-scraper 0.21.1 → 0.22.1

package/dist/node/cjs/index.cjs

@@ -72,13 +72,13 @@ class AuthenticationError extends Error {
   }
 }
 
-const log$6 = debug("twitter-scraper:rate-limit");
+const log$8 = debug("twitter-scraper:rate-limit");
 class WaitingRateLimitStrategy {
   async onRateLimit({ response: res }) {
     const xRateLimitLimit = res.headers.get("x-rate-limit-limit");
     const xRateLimitRemaining = res.headers.get("x-rate-limit-remaining");
     const xRateLimitReset = res.headers.get("x-rate-limit-reset");
-    log$6(
+    log$8(
       `Rate limit event: limit=${xRateLimitLimit}, remaining=${xRateLimitRemaining}, reset=${xRateLimitReset}`
     );
     if (xRateLimitRemaining == "0" && xRateLimitReset) {
@@ -94,7 +94,794 @@ class ErrorRateLimitStrategy {
   }
 }
 
-const log$5 = debug("twitter-scraper:requests");
+const log$7 = debug("twitter-scraper:castle");
+var FieldEncoding = /* @__PURE__ */ ((FieldEncoding2) => {
+  FieldEncoding2[FieldEncoding2["Empty"] = -1] = "Empty";
+  FieldEncoding2[FieldEncoding2["Marker"] = 1] = "Marker";
+  FieldEncoding2[FieldEncoding2["Byte"] = 3] = "Byte";
+  FieldEncoding2[FieldEncoding2["EncryptedBytes"] = 4] = "EncryptedBytes";
+  FieldEncoding2[FieldEncoding2["CompactInt"] = 5] = "CompactInt";
+  FieldEncoding2[FieldEncoding2["RoundedByte"] = 6] = "RoundedByte";
+  FieldEncoding2[FieldEncoding2["RawAppend"] = 7] = "RawAppend";
+  return FieldEncoding2;
+})(FieldEncoding || {});
+const TWITTER_CASTLE_PK = "AvRa79bHyJSYSQHnRpcVtzyxetSvFerx";
+const XXTEA_KEY = [1164413191, 3891440048, 185273099, 2746598870];
+const PER_FIELD_KEY_TAIL = [
+  16373134,
+  643144773,
+  1762804430,
+  1186572681,
+  1164413191
+];
+const TS_EPOCH = 1535e6;
+const SDK_VERSION = 27008;
+const TOKEN_VERSION = 11;
+const FP_PART = {
+  DEVICE: 0,
+  // Part 1: hardware/OS/rendering fingerprint
+  BROWSER: 4,
+  // Part 2: browser environment fingerprint
+  TIMING: 7
+  // Part 3: timing-based fingerprint
+};
+const DEFAULT_PROFILE = {
+  locale: "en-US",
+  language: "en",
+  timezone: "America/New_York",
+  screenWidth: 1920,
+  screenHeight: 1080,
+  availableWidth: 1920,
+  availableHeight: 1032,
+  // 1080 minus Windows taskbar (~48px)
+  gpuRenderer: "ANGLE (NVIDIA, NVIDIA GeForce GTX 1080 Ti Direct3D11 vs_5_0 ps_5_0, D3D11)",
+  deviceMemoryGB: 8,
+  hardwareConcurrency: 24,
+  colorDepth: 24,
+  devicePixelRatio: 1
+};
+const SCREEN_RESOLUTIONS = [
+  { w: 1920, h: 1080, ah: 1032 },
+  { w: 2560, h: 1440, ah: 1392 },
+  { w: 1366, h: 768, ah: 720 },
+  { w: 1536, h: 864, ah: 816 },
+  { w: 1440, h: 900, ah: 852 },
+  { w: 1680, h: 1050, ah: 1002 },
+  { w: 3840, h: 2160, ah: 2112 }
+];
+const DEVICE_MEMORY_VALUES = [4, 8, 8, 16];
+const HARDWARE_CONCURRENCY_VALUES = [4, 8, 8, 12, 16, 24];
+function randomizeBrowserProfile() {
+  const screen = SCREEN_RESOLUTIONS[randInt(0, SCREEN_RESOLUTIONS.length - 1)];
+  return {
+    ...DEFAULT_PROFILE,
+    screenWidth: screen.w,
+    screenHeight: screen.h,
+    availableWidth: screen.w,
+    availableHeight: screen.ah,
+    // gpuRenderer intentionally NOT randomized — see JSDoc above
+    deviceMemoryGB: DEVICE_MEMORY_VALUES[randInt(0, DEVICE_MEMORY_VALUES.length - 1)],
+    hardwareConcurrency: HARDWARE_CONCURRENCY_VALUES[randInt(0, HARDWARE_CONCURRENCY_VALUES.length - 1)]
+  };
+}
+function getRandomBytes(n) {
+  const buf = new Uint8Array(n);
+  if (typeof globalThis.crypto !== "undefined" && globalThis.crypto.getRandomValues) {
+    globalThis.crypto.getRandomValues(buf);
+  } else {
+    for (let i = 0; i < n; i++) buf[i] = Math.floor(Math.random() * 256);
+  }
+  return buf;
+}
+function randInt(min, max) {
+  return min + Math.floor(Math.random() * (max - min + 1));
+}
+function randFloat(min, max) {
+  return min + Math.random() * (max - min);
+}
+function concat(...arrays) {
+  const len = arrays.reduce((s, a) => s + a.length, 0);
+  const out = new Uint8Array(len);
+  let off = 0;
+  for (const a of arrays) {
+    out.set(a, off);
+    off += a.length;
+  }
+  return out;
+}
+function toHex(input) {
+  return Array.from(input).map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+function fromHex(hex) {
+  const out = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < hex.length; i += 2)
+    out[i / 2] = parseInt(hex.substring(i, i + 2), 16);
+  return out;
+}
+function textEnc(s) {
+  return new TextEncoder().encode(s);
+}
+function u8(...vals) {
+  return new Uint8Array(vals);
+}
+function be16(v) {
+  return u8(v >>> 8 & 255, v & 255);
+}
+function be32(v) {
+  return u8(v >>> 24 & 255, v >>> 16 & 255, v >>> 8 & 255, v & 255);
+}
+function xorBytes(data, key) {
+  const out = new Uint8Array(data.length);
+  for (let i = 0; i < data.length; i++) out[i] = data[i] ^ key[i % key.length];
+  return out;
+}
+function xorNibbles(nibbles, keyNibble) {
+  const k = parseInt(keyNibble, 16);
+  return nibbles.split("").map((n) => (parseInt(n, 16) ^ k).toString(16)).join("");
+}
+function base64url(data) {
+  if (typeof Buffer !== "undefined") {
+    return Buffer.from(data).toString("base64url");
+  }
+  let bin = "";
+  for (let i = 0; i < data.length; i++) bin += String.fromCharCode(data[i]);
+  return btoa(bin).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function xxteaEncrypt(data, key) {
+  const padLen = Math.ceil(data.length / 4) * 4;
+  const padded = new Uint8Array(padLen);
+  padded.set(data);
+  const n = padLen / 4;
+  const v = new Uint32Array(n);
+  for (let i = 0; i < n; i++) {
+    v[i] = (padded[i * 4] | padded[i * 4 + 1] << 8 | padded[i * 4 + 2] << 16 | padded[i * 4 + 3] << 24) >>> 0;
+  }
+  if (n <= 1) return padded;
+  const k = new Uint32Array(key.map((x) => x >>> 0));
+  const DELTA = 2654435769;
+  const u = n - 1;
+  let sum = 0;
+  let z = v[u];
+  let y;
+  let rounds = 6 + Math.floor(52 / (u + 1));
+  while (rounds-- > 0) {
+    sum = sum + DELTA >>> 0;
+    const e = sum >>> 2 & 3;
+    for (let p = 0; p < u; p++) {
+      y = v[p + 1];
+      const mx2 = ((z >>> 5 ^ y << 2) >>> 0) + ((y >>> 3 ^ z << 4) >>> 0) ^ ((sum ^ y) >>> 0) + ((k[p & 3 ^ e] ^ z) >>> 0);
+      v[p] = v[p] + mx2 >>> 0;
+      z = v[p];
+    }
+    y = v[0];
+    const mx = ((z >>> 5 ^ y << 2) >>> 0) + ((y >>> 3 ^ z << 4) >>> 0) ^ ((sum ^ y) >>> 0) + ((k[u & 3 ^ e] ^ z) >>> 0);
+    v[u] = v[u] + mx >>> 0;
+    z = v[u];
+  }
+  const out = new Uint8Array(n * 4);
+  for (let i = 0; i < n; i++) {
+    out[i * 4] = v[i] & 255;
+    out[i * 4 + 1] = v[i] >>> 8 & 255;
+    out[i * 4 + 2] = v[i] >>> 16 & 255;
+    out[i * 4 + 3] = v[i] >>> 24 & 255;
+  }
+  return out;
+}
+function fieldEncrypt(data, fieldIndex, initTime) {
+  return xxteaEncrypt(data, [
+    fieldIndex,
+    Math.floor(initTime),
+    ...PER_FIELD_KEY_TAIL
+  ]);
+}
+function encodeTimestampBytes(ms) {
+  let t = Math.floor(ms / 1e3 - TS_EPOCH);
+  t = Math.max(Math.min(t, 268435455), 0);
+  return be32(t);
+}
+function xorAndAppendKey(buf, key) {
+  const hex = toHex(buf);
+  const keyNib = (key & 15).toString(16);
+  return xorNibbles(hex.substring(1), keyNib) + keyNib;
+}
+function encodeTimestampEncrypted(ms) {
+  const tsBytes = encodeTimestampBytes(ms);
+  const slice = Math.floor(ms) % 1e3;
+  const sliceBytes = be16(slice);
+  const k = randInt(0, 15);
+  return xorAndAppendKey(tsBytes, k) + xorAndAppendKey(sliceBytes, k);
+}
+function deriveAndXor(keyHex, sliceLen, rotChar, data) {
+  const sub = keyHex.substring(0, sliceLen).split("");
+  if (sub.length === 0) return data;
+  const rot = parseInt(rotChar, 16) % sub.length;
+  const rotated = sub.slice(rot).concat(sub.slice(0, rot)).join("");
+  return xorBytes(data, fromHex(rotated));
+}
+function customFloatEncode(expBits, manBits, value) {
+  if (value === 0) return 0;
+  let n = Math.abs(value);
+  let exp = 0;
+  while (2 <= n) {
+    n /= 2;
+    exp++;
+  }
+  while (n < 1 && n > 0) {
+    n *= 2;
+    exp--;
+  }
+  exp = Math.min(exp, (1 << expBits) - 1);
+  const frac = n - Math.floor(n);
+  let mantissa = 0;
+  if (frac > 0) {
+    let pos = 1;
+    let tmp = frac;
+    while (tmp !== 0 && pos <= manBits) {
+      tmp *= 2;
+      const bit = Math.floor(tmp);
+      mantissa |= bit << manBits - pos;
+      tmp -= bit;
+      pos++;
+    }
+  }
+  return exp << manBits | mantissa;
+}
+function encodeFloatVal(v) {
+  const n = Math.max(v, 0);
+  if (n <= 15) return 64 | customFloatEncode(2, 4, n + 1);
+  return 128 | customFloatEncode(4, 3, n - 14);
+}
+function encodeField(index, encoding, val, initTime) {
+  const hdr = u8((31 & index) << 3 | 7 & encoding);
+  if (encoding === -1 /* Empty */ || encoding === 1 /* Marker */)
+    return hdr;
+  let body;
+  switch (encoding) {
+    case 3 /* Byte */:
+      body = u8(val);
+      break;
+    case 6 /* RoundedByte */:
+      body = u8(Math.round(val));
+      break;
+    case 5 /* CompactInt */: {
+      const v = val;
+      body = v <= 127 ? u8(v) : be16(1 << 15 | 32767 & v);
+      break;
+    }
+    case 4 /* EncryptedBytes */: {
+      if (initTime == null) {
+        throw new Error("initTime is required for EncryptedBytes encoding");
+      }
+      const enc = fieldEncrypt(val, index, initTime);
+      body = concat(u8(enc.length), enc);
+      break;
+    }
+    case 7 /* RawAppend */:
+      body = val instanceof Uint8Array ? val : u8(val);
+      break;
+    default:
+      body = new Uint8Array(0);
+  }
+  return concat(hdr, body);
+}
+function encodeBits(bits, byteSize) {
+  const numBytes = byteSize / 8;
+  const arr = new Uint8Array(numBytes);
+  for (const bit of bits) {
+    const bi = numBytes - 1 - Math.floor(bit / 8);
+    if (bi >= 0 && bi < numBytes) arr[bi] |= 1 << bit % 8;
+  }
+  return arr;
+}
+function screenDimBytes(screen, avail) {
+  const r = 32767 & screen;
+  const e = 65535 & avail;
+  return r === e ? be16(32768 | r) : concat(be16(r), be16(e));
+}
+function boolsToBin(arr, totalBits) {
+  const e = arr.length > totalBits ? arr.slice(0, totalBits) : arr;
+  const c = e.length;
+  let r = 0;
+  for (let i = c - 1; i >= 0; i--) {
+    if (e[i]) r |= 1 << c - i - 1;
+  }
+  if (c < totalBits) r <<= totalBits - c;
+  return r;
+}
+function encodeCodecPlayability() {
+  const codecs = {
+    webm: 2,
+    // VP8/VP9
+    mp4: 2,
+    // H.264
+    ogg: 0,
+    // Theora (Chrome dropped support)
+    aac: 2,
+    // AAC audio
+    xm4a: 1,
+    // M4A container
+    wav: 2,
+    // PCM audio
+    mpeg: 2,
+    // MP3 audio
+    ogg2: 2
+    // Vorbis audio
+  };
+  const bits = Object.values(codecs).map((c) => c.toString(2).padStart(2, "0")).join("");
+  return be16(parseInt(bits, 2));
+}
+const TIMEZONE_ENUM = {
+  "America/New_York": 0,
+  "America/Sao_Paulo": 1,
+  "America/Chicago": 2,
+  "America/Los_Angeles": 3,
+  "America/Mexico_City": 4,
+  "Asia/Shanghai": 5
+};
+function getTimezoneInfo(tz) {
+  const knownOffsets = {
+    "America/New_York": { offset: 20, dstDiff: 4 },
+    "America/Chicago": { offset: 24, dstDiff: 4 },
+    "America/Los_Angeles": { offset: 32, dstDiff: 4 },
+    "America/Denver": { offset: 28, dstDiff: 4 },
+    "America/Sao_Paulo": { offset: 12, dstDiff: 4 },
+    "America/Mexico_City": { offset: 24, dstDiff: 4 },
+    "Asia/Shanghai": { offset: 246, dstDiff: 0 },
+    "Asia/Tokyo": { offset: 220, dstDiff: 0 },
+    "Europe/London": { offset: 0, dstDiff: 4 },
+    "Europe/Berlin": { offset: 252, dstDiff: 4 },
+    UTC: { offset: 0, dstDiff: 0 }
+  };
+  try {
+    const now = /* @__PURE__ */ new Date();
+    const jan = new Date(now.getFullYear(), 0, 1);
+    const jul = new Date(now.getFullYear(), 6, 1);
+    const getOffset = (date, zone) => {
+      const utc = new Date(date.toLocaleString("en-US", { timeZone: "UTC" }));
+      const local = new Date(date.toLocaleString("en-US", { timeZone: zone }));
+      return (utc.getTime() - local.getTime()) / 6e4;
+    };
+    const currentOffset = getOffset(now, tz);
+    const janOffset = getOffset(jan, tz);
+    const julOffset = getOffset(jul, tz);
+    const dstDifference = Math.abs(janOffset - julOffset);
+    return {
+      offset: Math.floor(currentOffset / 15) & 255,
+      dstDiff: Math.floor(dstDifference / 15) & 255
+    };
+  } catch {
+    return knownOffsets[tz] || { offset: 20, dstDiff: 4 };
+  }
+}
+function buildDeviceFingerprint(initTime, profile, userAgent) {
+  const tz = getTimezoneInfo(profile.timezone);
+  const { Byte, EncryptedBytes, CompactInt, RoundedByte, RawAppend } = FieldEncoding;
+  const encryptedUA = fieldEncrypt(textEnc(userAgent), 12, initTime);
+  const uaPayload = concat(u8(1), u8(encryptedUA.length), encryptedUA);
+  const fields = [
+    encodeField(0, Byte, 1),
+    // Platform: Win32
+    encodeField(1, Byte, 0),
+    // Vendor: Google Inc.
+    encodeField(2, EncryptedBytes, textEnc(profile.locale), initTime),
+    // Locale
+    encodeField(3, RoundedByte, profile.deviceMemoryGB * 10),
+    // Device memory (GB * 10)
+    encodeField(
+      4,
+      RawAppend,
+      concat(
+        // Screen dimensions (width + height)
+        screenDimBytes(profile.screenWidth, profile.availableWidth),
+        screenDimBytes(profile.screenHeight, profile.availableHeight)
+      )
+    ),
+    encodeField(5, CompactInt, profile.colorDepth),
+    // Screen color depth
+    encodeField(6, CompactInt, profile.hardwareConcurrency),
+    // CPU logical cores
+    encodeField(7, RoundedByte, profile.devicePixelRatio * 10),
+    // Pixel ratio (* 10)
+    encodeField(8, RawAppend, u8(tz.offset, tz.dstDiff)),
+    // Timezone offset info
+    // MIME type hash — captured from Chrome 144 on Windows 10.
+    // Source: yubie-re/castleio-gen (Python SDK, MIT license).
+    encodeField(9, RawAppend, u8(2, 125, 95, 201, 167)),
+    // Browser plugins hash — Chrome no longer exposes plugins to navigator.plugins,
+    // so this is a fixed hash. Source: yubie-re/castleio-gen (Python SDK, MIT license).
+    encodeField(10, RawAppend, u8(5, 114, 147, 2, 8)),
+    encodeField(
+      11,
+      RawAppend,
+      // Browser feature flags
+      concat(u8(12), encodeBits([0, 1, 2, 3, 4, 5, 6], 16))
+    ),
+    encodeField(12, RawAppend, uaPayload),
+    // User agent (encrypted)
+    // Canvas font rendering hash — generated by Castle.io SDK's canvas fingerprinting (text rendering).
+    // Captured from Chrome 144 on Windows 10. Source: yubie-re/castleio-gen (Python SDK, MIT license).
+    encodeField(13, EncryptedBytes, textEnc("54b4b5cf"), initTime),
+    encodeField(
+      14,
+      RawAppend,
+      // Media input devices
+      concat(u8(3), encodeBits([0, 1, 2], 8))
+    ),
+    // Fields 15 (DoNotTrack) and 16 (JavaEnabled) intentionally omitted
+    encodeField(17, Byte, 0),
+    // productSub type
+    // Canvas circle rendering hash — generated by Castle.io SDK's canvas fingerprinting (arc drawing).
+    // Captured from Chrome 144 on Windows 10. Source: yubie-re/castleio-gen (Python SDK, MIT license).
+    encodeField(18, EncryptedBytes, textEnc("c6749e76"), initTime),
+    encodeField(19, EncryptedBytes, textEnc(profile.gpuRenderer), initTime),
+    // WebGL renderer
+    encodeField(
+      20,
+      EncryptedBytes,
+      // Epoch locale string
+      textEnc("12/31/1969, 7:00:00 PM"),
+      initTime
+    ),
+    encodeField(
+      21,
+      RawAppend,
+      // WebDriver flags (none set)
+      concat(u8(8), encodeBits([], 8))
+    ),
+    encodeField(22, CompactInt, 33),
+    // eval.toString() length
+    // Field 23 (navigator.buildID) intentionally omitted (Chrome doesn't have it)
+    encodeField(24, CompactInt, 12549),
+    // Max recursion depth
+    encodeField(25, Byte, 0),
+    // Recursion error message type
+    encodeField(26, Byte, 1),
+    // Recursion error name type
+    encodeField(27, CompactInt, 4644),
+    // Stack trace string length
+    encodeField(28, RawAppend, u8(0)),
+    // Touch support metric
+    encodeField(29, Byte, 3),
+    // Undefined call error type
+    // Navigator properties hash — hash of enumerable navigator property names.
+    // Captured from Chrome 144 on Windows 10. Source: yubie-re/castleio-gen (Python SDK, MIT license).
+    encodeField(30, RawAppend, u8(93, 197, 171, 181, 136)),
+    encodeField(31, RawAppend, encodeCodecPlayability())
+    // Codec playability
+  ];
+  const data = concat(...fields);
+  const sizeIdx = (7 & FP_PART.DEVICE) << 5 | 31 & fields.length;
+  return concat(u8(sizeIdx), data);
+}
+function buildBrowserFingerprint(profile, initTime) {
+  const { Byte, EncryptedBytes, CompactInt, Marker, RawAppend } = FieldEncoding;
+  const timezoneField = profile.timezone in TIMEZONE_ENUM ? encodeField(1, Byte, TIMEZONE_ENUM[profile.timezone]) : encodeField(1, EncryptedBytes, textEnc(profile.timezone), initTime);
+  const fields = [
+    encodeField(0, Byte, 0),
+    // Constant marker
+    timezoneField,
+    // Timezone
+    encodeField(
+      2,
+      EncryptedBytes,
+      // Language list
+      textEnc(`${profile.locale},${profile.language}`),
+      initTime
+    ),
+    encodeField(6, CompactInt, 0),
+    // Expected property count
+    encodeField(
+      10,
+      RawAppend,
+      // Castle data bitfield
+      concat(u8(4), encodeBits([1, 2, 3], 8))
+    ),
+    encodeField(12, CompactInt, 80),
+    // Negative error string length
+    encodeField(13, RawAppend, u8(9, 0, 0)),
+    // Driver check values
+    encodeField(
+      17,
+      RawAppend,
+      // Chrome feature flags
+      concat(u8(13), encodeBits([1, 5, 8, 9, 10], 16))
+    ),
+    encodeField(18, Marker, 0),
+    // Device logic expected
+    encodeField(21, RawAppend, u8(0, 0, 0, 0)),
+    // Class properties count
+    encodeField(22, EncryptedBytes, textEnc(profile.locale), initTime),
+    // User locale (secondary)
+    encodeField(
+      23,
+      RawAppend,
+      // Worker capabilities
+      concat(u8(2), encodeBits([0], 8))
+    ),
+    encodeField(
+      24,
+      RawAppend,
+      // Inner/outer dimension diff
+      concat(be16(0), be16(randInt(10, 30)))
+    )
+  ];
+  const data = concat(...fields);
+  const sizeIdx = (7 & FP_PART.BROWSER) << 5 | 31 & fields.length;
+  return concat(u8(sizeIdx), data);
+}
+function buildTimingFingerprint(initTime) {
+  const minute = new Date(initTime).getUTCMinutes();
+  const fields = [
+    encodeField(3, 5 /* CompactInt */, 1),
+    // Time since window.open (ms)
+    encodeField(4, 5 /* CompactInt */, minute)
+    // Castle init time (minutes)
+  ];
+  const data = concat(...fields);
+  const sizeIdx = (7 & FP_PART.TIMING) << 5 | 31 & fields.length;
+  return concat(u8(sizeIdx), data);
+}
+const EventType = {
+  CLICK: 0,
+  FOCUS: 5,
+  BLUR: 6,
+  ANIMATIONSTART: 18,
+  MOUSEMOVE: 21,
+  MOUSELEAVE: 25,
+  MOUSEENTER: 26,
+  RESIZE: 27
+};
+const HAS_TARGET_FLAG = 128;
+const TARGET_UNKNOWN = 63;
+function generateEventLog() {
+  const simpleEvents = [
+    EventType.MOUSEMOVE,
+    EventType.ANIMATIONSTART,
+    EventType.MOUSELEAVE,
+    EventType.MOUSEENTER,
+    EventType.RESIZE
+  ];
+  const targetedEvents = [
+    EventType.CLICK,
+    EventType.BLUR,
+    EventType.FOCUS
+  ];
+  const allEvents = [...simpleEvents, ...targetedEvents];
+  const count = randInt(30, 70);
+  const eventBytes = [];
+  for (let i = 0; i < count; i++) {
+    const eventId = allEvents[randInt(0, allEvents.length - 1)];
+    if (targetedEvents.includes(eventId)) {
+      eventBytes.push(eventId | HAS_TARGET_FLAG);
+      eventBytes.push(TARGET_UNKNOWN);
+    } else {
+      eventBytes.push(eventId);
+    }
+  }
+  const inner = concat(u8(0), be16(count), new Uint8Array(eventBytes));
+  return concat(be16(inner.length), inner);
+}
+function buildBehavioralBitfield() {
+  const flags = new Array(15).fill(false);
+  flags[2] = true;
+  flags[3] = true;
+  flags[5] = true;
+  flags[6] = true;
+  flags[9] = true;
+  flags[11] = true;
+  flags[12] = true;
+  const packedBits = boolsToBin(flags, 16);
+  const encoded = 6 << 20 | 2 << 16 | 65535 & packedBits;
+  return u8(encoded >>> 16 & 255, encoded >>> 8 & 255, encoded & 255);
+}
+const NO_DATA = -1;
+function buildFloatMetrics() {
+  const metrics = [
+    // ── Mouse & key timing ──
+    randFloat(40, 50),
+    //  0: Mouse angle vector mean
+    NO_DATA,
+    //  1: Touch angle vector (no touch device)
+    randFloat(70, 80),
+    //  2: Key same-time difference
+    NO_DATA,
+    //  3: (unused)
+    randFloat(60, 70),
+    //  4: Mouse down-to-up time mean
+    NO_DATA,
+    //  5: (unused)
+    0,
+    //  6: (zero placeholder)
+    0,
+    //  7: Mouse click time difference
+    // ── Duration distributions ──
+    randFloat(60, 80),
+    //  8: Mouse down-up duration median
+    randFloat(5, 10),
+    //  9: Mouse down-up duration std deviation
+    randFloat(30, 40),
+    // 10: Key press duration median
+    randFloat(2, 5),
+    // 11: Key press duration std deviation
+    // ── Touch metrics (all disabled for desktop) ──
+    NO_DATA,
+    NO_DATA,
+    NO_DATA,
+    NO_DATA,
+    // 12-15
+    NO_DATA,
+    NO_DATA,
+    NO_DATA,
+    NO_DATA,
+    // 16-19
+    // ── Mouse trajectory analysis ──
+    randFloat(150, 180),
+    // 20: Mouse movement angle mean
+    randFloat(3, 6),
+    // 21: Mouse movement angle std deviation
+    randFloat(150, 180),
+    // 22: Mouse movement angle mean (500ms window)
+    randFloat(3, 6),
+    // 23: Mouse movement angle std (500ms window)
+    randFloat(0, 2),
+    // 24: Mouse position deviation X
+    randFloat(0, 2),
+    // 25: Mouse position deviation Y
+    0,
+    0,
+    // 26-27: (zero placeholders)
+    // ── Touch sequential/gesture metrics (disabled) ──
+    NO_DATA,
+    NO_DATA,
+    // 28-29
+    NO_DATA,
+    NO_DATA,
+    // 30-31
+    // ── Key pattern analysis ──
+    0,
+    0,
+    // 32-33: Letter-digit transition ratio
+    0,
+    0,
+    // 34-35: Digit-invalid transition ratio
+    0,
+    0,
+    // 36-37: Double-invalid transition ratio
+    // ── Mouse vector differences ──
+    1,
+    0,
+    // 38-39: Mouse vector diff (mean, std)
+    1,
+    0,
+    // 40-41: Mouse vector diff 2 (mean, std)
+    randFloat(0, 4),
+    // 42: Mouse vector diff (500ms mean)
+    randFloat(0, 3),
+    // 43: Mouse vector diff (500ms std)
+    // ── Rounded movement metrics ──
+    randFloat(25, 50),
+    // 44: Mouse time diff (rounded mean)
+    randFloat(25, 50),
+    // 45: Mouse time diff (rounded std)
+    randFloat(25, 50),
+    // 46: Mouse vector diff (rounded mean)
+    randFloat(25, 30),
+    // 47: Mouse vector diff (rounded std)
+    // ── Speed change analysis ──
+    randFloat(0, 2),
+    // 48: Mouse speed change mean
+    randFloat(0, 1),
+    // 49: Mouse speed change std
+    randFloat(0, 1),
+    // 50: Mouse vector 500ms aggregate
+    // ── Trailing ──
+    1,
+    // 51: Universal flag
+    0
+    // 52: Terminator
+  ];
+  const out = new Uint8Array(metrics.length);
+  for (let i = 0; i < metrics.length; i++) {
+    out[i] = metrics[i] === NO_DATA ? 0 : encodeFloatVal(metrics[i]);
+  }
+  return out;
+}
+function buildEventCounts() {
+  const counts = [
+    randInt(100, 200),
+    //  0: mousemove events
+    randInt(1, 5),
+    //  1: keyup events
+    randInt(1, 5),
+    //  2: click events
+    0,
+    //  3: touchstart events (none on desktop)
+    randInt(0, 5),
+    //  4: keydown events
+    0,
+    //  5: touchmove events (none)
+    0,
+    //  6: mousedown-mouseup pairs
+    0,
+    //  7: vector diff samples
+    randInt(0, 5),
+    //  8: wheel events
+    randInt(0, 11),
+    //  9: (internal counter)
+    randInt(0, 1)
+    // 10: (internal counter)
+  ];
+  return concat(new Uint8Array(counts), u8(counts.length));
+}
+function buildBehavioralData() {
+  return concat(
+    buildBehavioralBitfield(),
+    buildFloatMetrics(),
+    buildEventCounts()
+  );
+}
+function buildTokenHeader(uuid, publisherKey, initTime) {
+  const timestamp = fromHex(encodeTimestampEncrypted(initTime));
+  const version = be16(SDK_VERSION);
+  const pkBytes = textEnc(publisherKey);
+  const uuidBytes = fromHex(uuid);
+  return concat(timestamp, version, pkBytes, uuidBytes);
+}
+function generateLocalCastleToken(userAgent, profileOverride) {
+  const now = Date.now();
+  const profile = { ...DEFAULT_PROFILE, ...profileOverride };
+  const initTime = now - randFloat(2 * 60 * 1e3, 30 * 60 * 1e3);
+  log$7("Generating local Castle.io v11 token");
+  const deviceFp = buildDeviceFingerprint(initTime, profile, userAgent);
+  const browserFp = buildBrowserFingerprint(profile, initTime);
+  const timingFp = buildTimingFingerprint(initTime);
+  const eventLog = generateEventLog();
+  const behavioral = buildBehavioralData();
+  const fingerprintData = concat(
+    deviceFp,
+    browserFp,
+    timingFp,
+    eventLog,
+    behavioral,
+    u8(255)
+  );
+  const sendTime = Date.now();
+  const timestampKey = encodeTimestampEncrypted(sendTime);
+  const xorPass1 = deriveAndXor(
+    timestampKey,
+    4,
+    timestampKey[3],
+    fingerprintData
+  );
+  const tokenUuid = toHex(getRandomBytes(16));
+  const withTimestampPrefix = concat(fromHex(timestampKey), xorPass1);
+  const xorPass2 = deriveAndXor(
+    tokenUuid,
+    8,
+    tokenUuid[9],
+    withTimestampPrefix
+  );
+  const header = buildTokenHeader(tokenUuid, TWITTER_CASTLE_PK, initTime);
+  const plaintext = concat(header, xorPass2);
+  const encrypted = xxteaEncrypt(plaintext, XXTEA_KEY);
+  const paddingBytes = encrypted.length - plaintext.length;
+  const versioned = concat(u8(TOKEN_VERSION, paddingBytes), encrypted);
+  const randomByte = getRandomBytes(1)[0];
+  const checksum = versioned.length * 2 & 255;
+  const withChecksum = concat(versioned, u8(checksum));
+  const xored = xorBytes(withChecksum, u8(randomByte));
+  const finalPayload = concat(u8(randomByte), xored);
+  const token = base64url(finalPayload);
+  log$7(
+    `Generated castle token: ${token.length} chars, cuid: ${tokenUuid.substring(
+      0,
+      6
+    )}...`
+  );
+  return { token, cuid: tokenUuid };
+}
+
+const log$6 = debug("twitter-scraper:requests");
 async function updateCookieJar(cookieJar, headers) {
   let setCookieHeaders = [];
   if (typeof headers.getSetCookie === "function") {
@@ -109,12 +896,12 @@ async function updateCookieJar(cookieJar, headers) {
     for (const cookieStr of setCookieHeaders) {
       const cookie = toughCookie.Cookie.parse(cookieStr);
       if (!cookie) {
-        log$5(`Failed to parse cookie: ${cookieStr.substring(0, 100)}`);
+        log$6(`Failed to parse cookie: ${cookieStr.substring(0, 100)}`);
         continue;
       }
       if (cookie.maxAge === 0 || cookie.expires && cookie.expires < /* @__PURE__ */ new Date()) {
         if (cookie.key === "ct0") {
-          log$5(`Skipping deletion of ct0 cookie (Max-Age=0)`);
+          log$6(`Skipping deletion of ct0 cookie (Max-Age=0)`);
         }
         continue;
       }
@@ -122,7 +909,7 @@ async function updateCookieJar(cookieJar, headers) {
         const url = `${cookie.secure ? "https" : "http"}://${cookie.domain}${cookie.path}`;
         await cookieJar.setCookie(cookie, url);
         if (cookie.key === "ct0") {
-          log$5(
+          log$6(
             `Successfully set ct0 cookie with value: ${cookie.value.substring(
               0,
               20
@@ -130,9 +917,9 @@ async function updateCookieJar(cookieJar, headers) {
           );
         }
       } catch (err) {
-        log$5(`Failed to set cookie ${cookie.key}: ${err}`);
+        log$6(`Failed to set cookie ${cookie.key}: ${err}`);
         if (cookie.key === "ct0") {
-          log$5(`FAILED to set ct0 cookie! Error: ${err}`);
+          log$6(`FAILED to set ct0 cookie! Error: ${err}`);
         }
       }
     }
@@ -146,14 +933,14 @@ async function updateCookieJar(cookieJar, headers) {
   }
 }
 
-const log$4 = debug("twitter-scraper:xpff");
+const log$5 = debug("twitter-scraper:xpff");
 let isoCrypto = null;
 async function getCrypto() {
   if (isoCrypto != null) {
     return isoCrypto;
   }
   if (typeof crypto === "undefined") {
-    log$4("Global crypto is undefined, importing from crypto module...");
+    log$5("Global crypto is undefined, importing from crypto module...");
     const { webcrypto } = await import('crypto');
     isoCrypto = webcrypto;
     return webcrypto;
@@ -180,7 +967,7 @@ class XPFFHeaderGenerator {
     return result;
   }
   async generateHeader(plaintext, guestId) {
-    log$4(`Generating XPFF key for guest ID: ${guestId}`);
+    log$5(`Generating XPFF key for guest ID: ${guestId}`);
     const key = await this.deriveKey(guestId);
     const crypto2 = await getCrypto();
     const nonce = crypto2.getRandomValues(new Uint8Array(12));
@@ -203,7 +990,7 @@ class XPFFHeaderGenerator {
     combined.set(nonce);
     combined.set(new Uint8Array(encrypted), nonce.length);
     const result = buf2hex(combined.buffer);
-    log$4(`XPFF header generated for guest ID ${guestId}: ${result}`);
+    log$5(`XPFF header generated for guest ID ${guestId}: ${result}`);
     return result;
   }
 }
@@ -225,7 +1012,7 @@ async function generateXPFFHeader(guestId) {
   return generator.generateHeader(plaintext, guestId);
 }
 
-const log$3 = debug("twitter-scraper:auth");
+const log$4 = debug("twitter-scraper:auth");
 function withTransform(fetchFn, transform) {
   return async (input, init) => {
     const fetchArgs = await transform?.request?.(input, init) ?? [
@@ -275,8 +1062,14 @@ class TwitterGuestAuth {
     }
     return new Date(this.guestCreatedAt);
   }
-  async installTo(headers, _url, bearerTokenOverride) {
+  /**
+   * Install only authentication credentials (bearer token, guest token, cookies)
+   * without browser fingerprint or platform headers. Useful for callers that
+   * build their own header set (e.g. the login flow).
+   */
+  async installAuthCredentials(headers, bearerTokenOverride) {
     const tokenToUse = bearerTokenOverride ?? this.bearerToken;
+    headers.set("authorization", `Bearer ${tokenToUse}`);
     if (!bearerTokenOverride) {
       if (this.shouldUpdate()) {
         await this.updateGuestToken();
@@ -285,11 +1078,27 @@ class TwitterGuestAuth {
         headers.set("x-guest-token", this.guestToken);
       }
     }
-    headers.set("authorization", `Bearer ${tokenToUse}`);
-    headers.set(
-      "user-agent",
-      "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
-    );
+    headers.set("cookie", await this.getCookieString());
+  }
+  async installTo(headers, url, bearerTokenOverride) {
+    await this.installAuthCredentials(headers, bearerTokenOverride);
+    headers.set("user-agent", CHROME_USER_AGENT);
+    if (!headers.has("accept")) {
+      headers.set("accept", "*/*");
+    }
+    headers.set("accept-language", "en-US,en;q=0.9");
+    headers.set("sec-ch-ua", CHROME_SEC_CH_UA);
+    headers.set("sec-ch-ua-mobile", "?0");
+    headers.set("sec-ch-ua-platform", '"Windows"');
+    headers.set("referer", "https://x.com/");
+    headers.set("origin", "https://x.com");
+    headers.set("sec-fetch-site", "same-site");
+    headers.set("sec-fetch-mode", "cors");
+    headers.set("sec-fetch-dest", "empty");
+    headers.set("priority", "u=1, i");
+    if (!headers.has("content-type") && (url.includes("api.x.com/graphql/") || url.includes("x.com/i/api/graphql/"))) {
+      headers.set("content-type", "application/json");
+    }
     await this.installCsrfToken(headers);
     if (this.options?.experimental?.xpff) {
       const guestId = await this.guestId();
@@ -298,7 +1107,6 @@ class TwitterGuestAuth {
         headers.set("x-xp-forwarded-for", xpffHeader);
       }
     }
-    headers.set("cookie", await this.getCookieString());
   }
   async installCsrfToken(headers) {
     const cookies = await this.getCookies();
@@ -329,7 +1137,7 @@ class TwitterGuestAuth {
     const cookies = await this.jar.getCookies(this.getCookieJarUrl());
     for (const cookie of cookies) {
       if (!cookie.domain || !cookie.path) continue;
-      store.removeCookie(cookie.domain, cookie.path, key);
+      await store.removeCookie(cookie.domain, cookie.path, key);
       if (typeof document !== "undefined") {
         document.cookie = `${cookie.key}=; Max-Age=0; path=${cookie.path}; domain=${cookie.domain}`;
       }
@@ -350,20 +1158,31 @@ class TwitterGuestAuth {
     try {
       await this.updateGuestTokenCore();
     } catch (err) {
-      log$3("Failed to update guest token; this may cause issues:", err);
+      log$4("Failed to update guest token; this may cause issues:", err);
     }
   }
   async updateGuestTokenCore() {
     const guestActivateUrl = "https://api.x.com/1.1/guest/activate.json";
     const headers = new headersPolyfill.Headers({
-      Authorization: `Bearer ${this.bearerToken}`,
-      Cookie: await this.getCookieString()
+      authorization: `Bearer ${this.bearerToken}`,
+      "user-agent": CHROME_USER_AGENT,
+      accept: "*/*",
+      "accept-language": "en-US,en;q=0.9",
+      "content-type": "application/x-www-form-urlencoded",
+      "sec-ch-ua": CHROME_SEC_CH_UA,
+      "sec-ch-ua-mobile": "?0",
+      "sec-ch-ua-platform": '"Windows"',
+      origin: "https://x.com",
+      referer: "https://x.com/",
+      "sec-fetch-site": "same-site",
+      "sec-fetch-mode": "cors",
+      "sec-fetch-dest": "empty",
+      cookie: await this.getCookieString()
     });
-    log$3(`Making POST request to ${guestActivateUrl}`);
+    log$4(`Making POST request to ${guestActivateUrl}`);
     const res = await this.fetch(guestActivateUrl, {
       method: "POST",
-      headers,
-      referrerPolicy: "no-referrer"
+      headers
     });
     await updateCookieJar(this.jar, res.headers);
     if (!res.ok) {
@@ -380,7 +1199,7 @@ class TwitterGuestAuth {
     this.guestToken = newGuestToken;
     this.guestCreatedAt = /* @__PURE__ */ new Date();
     await this.setCookie("gt", newGuestToken);
-    log$3(`Updated guest token: ${newGuestToken}`);
+    log$4(`Updated guest token (length: ${newGuestToken.length})`);
   }
   /**
    * Returns if the authentication token needs to be updated or not.
@@ -404,7 +1223,7 @@ class Platform {
   }
 }
 
-const log$2 = debug("twitter-scraper:xctxid");
+const log$3 = debug("twitter-scraper:xctxid");
 let linkedom = null;
 async function linkedomImport() {
   if (!linkedom) {
@@ -433,7 +1252,7 @@ async function handleXMigration(fetchFn) {
     "cache-control": "no-cache",
     pragma: "no-cache",
     priority: "u=0, i",
-    "sec-ch-ua": '"Google Chrome";v="135", "Not-A.Brand";v="8", "Chromium";v="135"',
+    "sec-ch-ua": CHROME_SEC_CH_UA,
     "sec-ch-ua-mobile": "?0",
     "sec-ch-ua-platform": '"Windows"',
     "sec-fetch-dest": "document",
@@ -441,7 +1260,7 @@ async function handleXMigration(fetchFn) {
     "sec-fetch-site": "none",
     "sec-fetch-user": "?1",
     "upgrade-insecure-requests": "1",
-    "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
+    "user-agent": CHROME_USER_AGENT
   };
   const response = await fetchFn("https://x.com", {
     headers
@@ -460,7 +1279,7 @@ async function handleXMigration(fetchFn) {
   const metaContent = metaRefresh ? metaRefresh.getAttribute("content") || "" : "";
   const migrationRedirectionUrl = migrationRedirectionRegex.exec(metaContent) || migrationRedirectionRegex.exec(htmlText);
   if (migrationRedirectionUrl) {
-    const redirectResponse = await fetch(migrationRedirectionUrl[0]);
+    const redirectResponse = await fetchFn(migrationRedirectionUrl[0]);
     if (!redirectResponse.ok) {
       throw new Error(
         `Failed to follow migration redirection: ${redirectResponse.statusText}`
@@ -483,7 +1302,7 @@ async function handleXMigration(fetchFn) {
         requestPayload.append(name, value);
       }
     }
-    const formResponse = await fetch(url, {
+    const formResponse = await fetchFn(url, {
       method,
       body: requestPayload,
       headers
@@ -499,6 +1318,23 @@ async function handleXMigration(fetchFn) {
   }
   return document;
 }
+let cachedDocumentPromise = null;
+let cachedDocumentTimestamp = 0;
+const DOCUMENT_CACHE_TTL = 5 * 60 * 1e3;
+async function getCachedDocument(fetchFn) {
+  const now = Date.now();
+  if (!cachedDocumentPromise || now - cachedDocumentTimestamp > DOCUMENT_CACHE_TTL) {
+    log$3("Fetching fresh x.com document for transaction ID generation");
+    cachedDocumentTimestamp = now;
+    cachedDocumentPromise = handleXMigration(fetchFn).catch((err) => {
+      cachedDocumentPromise = null;
+      throw err;
+    });
+  } else {
+    log$3("Using cached x.com document for transaction ID generation");
+  }
+  return cachedDocumentPromise;
+}
 let ClientTransaction = null;
 async function clientTransaction() {
   if (!ClientTransaction) {
@@ -511,16 +1347,19 @@ async function clientTransaction() {
 async function generateTransactionId(url, fetchFn, method) {
   const parsedUrl = new URL(url);
   const path = parsedUrl.pathname;
-  log$2(`Generating transaction ID for ${method} ${path}`);
-  const document = await handleXMigration(fetchFn);
+  log$3(`Generating transaction ID for ${method} ${path}`);
+  const document = await getCachedDocument(fetchFn);
   const ClientTransactionClass = await clientTransaction();
   const transaction = await ClientTransactionClass.create(document);
   const transactionId = await transaction.generateTransactionId(method, path);
-  log$2(`Transaction ID: ${transactionId}`);
+  log$3(`Transaction ID: ${transactionId}`);
   return transactionId;
 }
 
-const log$1 = debug("twitter-scraper:api");
+const CHROME_USER_AGENT = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36";
+const CHROME_SEC_CH_UA = '"Not(A:Brand";v="8", "Chromium";v="144", "Google Chrome";v="144"';
+
+const log$2 = debug("twitter-scraper:api");
 const bearerToken = "AAAAAAAAAAAAAAAAAAAAAFQODgEAAAAAVHTp76lzh3rFzcHbmHVvQxYYpTw%3DckAlMINMjmCwxUcaXbAN4XqJVdgMJaHqNOFgPMK0zN1qLqLQCF";
 const bearerToken2 = "AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA";
 async function jitter(maxMs) {
@@ -528,7 +1367,7 @@ async function jitter(maxMs) {
   await new Promise((resolve) => setTimeout(resolve, jitter2));
 }
 async function requestApi(url, auth, method = "GET", platform = new Platform(), headers = new headersPolyfill.Headers(), bearerTokenOverride) {
-  log$1(`Making ${method} request to ${url}`);
+  log$2(`Making ${method} request to ${url}`);
   await auth.installTo(headers, url, bearerTokenOverride);
   await platform.randomizeCiphers();
   if (auth instanceof TwitterGuestAuth && auth.options?.experimental?.xClientTransactionId) {
@@ -557,12 +1396,12 @@ async function requestApi(url, auth, method = "GET", platform = new Platform(),
       }
       return {
         success: false,
-        err: new Error("Failed to perform request.")
+        err
       };
     }
     await updateCookieJar(auth.cookieJar(), res.headers);
     if (res.status === 429) {
-      log$1("Rate limit hit, waiting for retry...");
+      log$2("Rate limit hit, waiting for retry...");
       await auth.onRateLimit({
         fetchParameters,
         response: res
@@ -587,9 +1426,9 @@ async function flexParseJson(res) {
   try {
     return await res.json();
   } catch {
-    log$1("Failed to parse response as JSON, trying text parse...");
+    log$2("Failed to parse response as JSON, trying text parse...");
     const text = await res.text();
-    log$1("Response text:", text);
+    log$2("Response text:", text);
     return JSON.parse(text);
   }
 }
@@ -663,12 +1502,12 @@ function addApiParams(params, includeTweetReplies) {
   return params;
 }
 
-const log = debug("twitter-scraper:auth-user");
+const log$1 = debug("twitter-scraper:auth-user");
 const TwitterUserAuthSubtask = typebox.Type.Object({
   subtask_id: typebox.Type.String(),
   enter_text: typebox.Type.Optional(typebox.Type.Object({}))
 });
-class TwitterUserAuth extends TwitterGuestAuth {
+const _TwitterUserAuth = class _TwitterUserAuth extends TwitterGuestAuth {
   constructor(bearerToken, options) {
     super(bearerToken, options);
     this.subtaskHandlers = /* @__PURE__ */ new Map();
@@ -714,11 +1553,14 @@ class TwitterUserAuth extends TwitterGuestAuth {
     );
   }
   async isLoggedIn() {
-    const cookie = await this.getCookieString();
-    return cookie.includes("ct0=");
+    const cookies = await this.getCookies();
+    return cookies.some((c) => c.key === "ct0") && cookies.some((c) => c.key === "auth_token");
   }
   async login(username, password, email, twoFactorSecret) {
-    await this.updateGuestToken();
+    await this.preflight();
+    if (!this.guestToken) {
+      await this.updateGuestToken();
+    }
     const credentials = {
       username,
       password,
@@ -732,6 +1574,12 @@ class TwitterUserAuth extends TwitterGuestAuth {
         throw new Error("flow_token not found.");
       }
       const subtaskId = next.response.subtasks[0].subtask_id;
+      const configuredDelay = this.options?.experimental?.flowStepDelay;
+      const delay = configuredDelay !== void 0 ? configuredDelay : 1e3 + Math.floor(Math.random() * 2e3);
+      if (delay > 0) {
+        log$1(`Waiting ${delay}ms before handling subtask: ${subtaskId}`);
+        await new Promise((resolve) => setTimeout(resolve, delay));
+      }
       const handler = this.subtaskHandlers.get(subtaskId);
       if (handler) {
         next = await handler(subtaskId, next.response, credentials, {
@@ -746,65 +1594,92 @@ class TwitterUserAuth extends TwitterGuestAuth {
       throw next.err;
     }
   }
+  /**
+   * Pre-flight request to establish Cloudflare cookies and session context.
+   * Mimics a real browser visiting x.com before starting the login API flow.
+   */
+  async preflight() {
+    try {
+      const headers = new headersPolyfill.Headers({
+        accept: "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
+        "accept-language": "en-US,en;q=0.9",
+        "sec-ch-ua": CHROME_SEC_CH_UA,
+        "sec-ch-ua-mobile": "?0",
+        "sec-ch-ua-platform": '"Windows"',
+        "sec-fetch-dest": "document",
+        "sec-fetch-mode": "navigate",
+        "sec-fetch-site": "none",
+        "sec-fetch-user": "?1",
+        "upgrade-insecure-requests": "1",
+        "user-agent": CHROME_USER_AGENT
+      });
+      log$1("Pre-flight: fetching https://x.com/i/flow/login");
+      const res = await this.fetch("https://x.com/i/flow/login", {
+        redirect: "follow",
+        headers
+      });
+      await updateCookieJar(this.jar, res.headers);
+      log$1(`Pre-flight response: ${res.status}`);
+      try {
+        const html = await res.text();
+        const gtMatch = html.match(/document\.cookie="gt=(\d+)/);
+        if (gtMatch) {
+          this.guestToken = gtMatch[1];
+          this.guestCreatedAt = /* @__PURE__ */ new Date();
+          await this.setCookie("gt", gtMatch[1]);
+          log$1(`Extracted guest token from HTML (length: ${gtMatch[1].length})`);
+        }
+      } catch (err) {
+        log$1("Failed to extract guest token from HTML (non-fatal):", err);
+      }
+    } catch (err) {
+      log$1("Pre-flight request failed (non-fatal):", err);
+    }
+  }
   async logout() {
     if (!this.hasToken()) {
       return;
     }
     try {
-      await requestApi(
-        "https://api.x.com/1.1/account/logout.json",
-        this,
-        "POST"
-      );
+      const logoutUrl = "https://api.x.com/1.1/account/logout.json";
+      const headers = new headersPolyfill.Headers();
+      await this.installTo(headers, logoutUrl);
+      await this.fetch(logoutUrl, {
+        method: "POST",
+        headers
+      });
     } catch (error) {
-      console.warn("Error during logout:", error);
+      log$1("Error during logout:", error);
     } finally {
       this.deleteToken();
       this.jar = new toughCookie.CookieJar();
     }
   }
-  async installTo(headers, _url, bearerTokenOverride) {
-    const tokenToUse = bearerTokenOverride ?? this.bearerToken;
-    headers.set("authorization", `Bearer ${tokenToUse}`);
-    headers.set(
-      "user-agent",
-      "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
-    );
-    if (this.guestToken) {
-      headers.set("x-guest-token", this.guestToken);
-    }
-    await this.installCsrfToken(headers);
-    if (this.options?.experimental?.xpff) {
-      const guestId = await this.guestId();
-      if (guestId != null) {
-        const xpffHeader = await generateXPFFHeader(guestId);
-        headers.set("x-xp-forwarded-for", xpffHeader);
-      }
-    }
-    const cookie = await this.getCookieString();
-    headers.set("cookie", cookie);
+  async installTo(headers, url, bearerTokenOverride) {
+    await super.installTo(headers, url, bearerTokenOverride);
+    headers.set("x-twitter-auth-type", "OAuth2Session");
+    headers.set("x-twitter-active-user", "yes");
+    headers.set("x-twitter-client-language", "en");
   }
   async initLogin() {
-    this.removeCookie("twitter_ads_id=");
-    this.removeCookie("ads_prefs=");
-    this.removeCookie("_twitter_sess=");
-    this.removeCookie("zipbox_forms_auth_token=");
-    this.removeCookie("lang=");
-    this.removeCookie("bouncer_reset_cookie=");
-    this.removeCookie("twid=");
-    this.removeCookie("twitter_ads_idb=");
-    this.removeCookie("email_uid=");
-    this.removeCookie("external_referer=");
-    this.removeCookie("ct0=");
-    this.removeCookie("aa_u=");
-    this.removeCookie("__cf_bm=");
+    await this.removeCookie("twitter_ads_id");
+    await this.removeCookie("ads_prefs");
+    await this.removeCookie("_twitter_sess");
+    await this.removeCookie("zipbox_forms_auth_token");
+    await this.removeCookie("lang");
+    await this.removeCookie("bouncer_reset_cookie");
+    await this.removeCookie("twid");
+    await this.removeCookie("twitter_ads_idb");
+    await this.removeCookie("email_uid");
+    await this.removeCookie("external_referer");
+    await this.removeCookie("aa_u");
     return await this.executeFlowTask({
       flow_name: "login",
       input_flow_data: {
         flow_context: {
           debug_overrides: {},
           start_location: {
-            location: "unknown"
+            location: "manual_link"
           }
         }
       },
@@ -853,20 +1728,157 @@ class TwitterUserAuth extends TwitterGuestAuth {
       }
     });
   }
-  async handleJsInstrumentationSubtask(subtaskId, _prev, _credentials, api) {
+  async handleJsInstrumentationSubtask(subtaskId, prev, _credentials, api) {
+    const subtasks = prev.subtasks;
+    const jsSubtask = subtasks?.find((s) => s.subtask_id === subtaskId);
+    const jsUrl = jsSubtask?.js_instrumentation?.url;
+    let metricsResponse = "{}";
+    if (jsUrl) {
+      try {
+        metricsResponse = await this.executeJsInstrumentation(jsUrl);
+        log$1(
+          `JS instrumentation executed successfully, response length: ${metricsResponse.length}`
+        );
+      } catch (err) {
+        log$1("Failed to execute JS instrumentation (falling back to {})", err);
+      }
+    }
     return await api.sendFlowRequest({
       flow_token: api.getFlowToken(),
       subtask_inputs: [
         {
           subtask_id: subtaskId,
           js_instrumentation: {
-            response: "{}",
+            response: metricsResponse,
             link: "next_link"
           }
         }
       ]
     });
   }
+  // 512KB
+  /**
+   * Fetches and executes the JS instrumentation script to generate browser
+   * fingerprinting data. The result is written to an input element named
+   * 'ui_metrics'.
+   *
+   * In browser environments, uses a hidden iframe with native DOM APIs.
+   * In Node.js, uses linkedom (for DOM) and the vm module for execution.
+   *
+   * @security This method executes **remote JavaScript** fetched from Twitter's servers.
+   * - In browsers, execution is isolated in a disposable iframe.
+   * - In Node.js, `vm.runInContext` is used for convenience, NOT for security.
+   *   Node's `vm` module provides NO security sandbox — a malicious script can
+   *   trivially escape the context (e.g., via `this.constructor.constructor('return process')()`).
+   *   The only real trust boundary is that scripts are fetched from Twitter's known CDN URLs.
+   *   Setting `process: undefined` etc. in the sandbox context is cosmetic and does not
+   *   prevent escape.
+   * - A maximum script size limit (512KB) and a 5-second timeout provide basic sanity checks.
+   */
+  async executeJsInstrumentation(url) {
+    log$1(`Fetching JS instrumentation from: ${url}`);
+    const response = await this.fetch(url);
+    const scriptContent = await response.text();
+    log$1(`JS instrumentation script fetched, length: ${scriptContent.length}`);
+    if (scriptContent.length > _TwitterUserAuth.JS_INSTRUMENTATION_MAX_SIZE) {
+      log$1(
+        `WARNING: JS instrumentation script exceeds size limit (${scriptContent.length} > ${_TwitterUserAuth.JS_INSTRUMENTATION_MAX_SIZE}), skipping execution`
+      );
+      return "{}";
+    }
+    if (typeof window !== "undefined" && typeof document !== "undefined") {
+      return this.executeJsInstrumentationBrowser(scriptContent);
+    }
+    return this.executeJsInstrumentationNode(scriptContent);
+  }
+  /**
+   * Execute JS instrumentation in a browser environment using a hidden iframe.
+   * The iframe provides natural isolation — the script gets its own document
+   * and window, and we can override setTimeout without affecting the host page.
+   */
+  async executeJsInstrumentationBrowser(scriptContent) {
+    const iframe = document.createElement("iframe");
+    iframe.style.display = "none";
+    document.body.appendChild(iframe);
+    try {
+      const iframeWin = iframe.contentWindow;
+      const iframeDoc = iframe.contentDocument;
+      if (!iframeWin || !iframeDoc) {
+        log$1("WARNING: Could not access iframe document/window");
+        return "{}";
+      }
+      const input = iframeDoc.createElement("input");
+      input.name = "ui_metrics";
+      input.type = "hidden";
+      iframeDoc.body.appendChild(input);
+      iframeWin.setTimeout = (fn) => fn();
+      const script = iframeDoc.createElement("script");
+      script.textContent = scriptContent;
+      iframeDoc.body.appendChild(script);
+      const value = input.value;
+      if (value) {
+        log$1(`JS instrumentation result extracted, length: ${value.length}`);
+        return value;
+      }
+      log$1("WARNING: No ui_metrics value found after script execution");
+      return "{}";
+    } finally {
+      document.body.removeChild(iframe);
+    }
+  }
+  /**
+   * Execute JS instrumentation in Node.js using linkedom for DOM emulation
+   * and the vm module for sandboxed script execution.
+   *
+   * @security Node's `vm` module does NOT provide a security sandbox. A
+   * malicious script can trivially escape the context. The only real trust
+   * boundary is that scripts come from Twitter's CDN. The undefined globals
+   * (process, require, etc.) are cosmetic — they do not prevent sandbox escape.
+   */
+  async executeJsInstrumentationNode(scriptContent) {
+    const { parseHTML } = await import('linkedom');
+    const { document: doc, window: win } = parseHTML(
+      '<html><head></head><body><input name="ui_metrics" type="hidden" value="" /></body></html>'
+    );
+    if (typeof doc.getElementsByName !== "function") {
+      doc.getElementsByName = (name) => doc.querySelectorAll(`[name="${name}"]`);
+    }
+    const vm = await import('vm');
+    const origSetTimeout = win.setTimeout;
+    win.setTimeout = (fn) => fn();
+    try {
+      Object.defineProperty(doc, "readyState", {
+        value: "complete",
+        writable: true,
+        configurable: true
+      });
+    } catch {
+    }
+    const sandbox = {
+      document: doc,
+      window: win,
+      Date,
+      JSON,
+      parseInt,
+      // Deny access to Node.js internals to limit sandbox escape surface
+      process: void 0,
+      require: void 0,
+      global: void 0,
+      globalThis: void 0
+    };
+    vm.runInNewContext(scriptContent, sandbox, { timeout: 5e3 });
+    win.setTimeout = origSetTimeout;
+    const inputs = doc.getElementsByName("ui_metrics");
+    if (inputs && inputs.length > 0) {
+      const value = inputs[0].value || inputs[0].getAttribute("value");
+      if (value) {
+        log$1(`JS instrumentation result extracted, length: ${value.length}`);
+        return value;
+      }
+    }
+    log$1("WARNING: No ui_metrics value found after script execution");
+    return "{}";
+  }
   async handleEnterAlternateIdentifierSubtask(subtaskId, _prev, credentials, api) {
     return await this.executeFlowTask({
       flow_token: api.getFlowToken(),
@@ -882,36 +1894,76 @@ class TwitterUserAuth extends TwitterGuestAuth {
     });
   }
   async handleEnterUserIdentifierSSO(subtaskId, _prev, credentials, api) {
+    let castleToken;
+    try {
+      castleToken = await this.generateCastleToken();
+      log$1(`Castle token generated, length: ${castleToken.length}`);
+    } catch (err) {
+      log$1("Failed to generate castle token (continuing without it):", err);
+    }
+    const settingsList = {
+      setting_responses: [
+        {
+          key: "user_identifier",
+          response_data: {
+            text_data: { result: credentials.username }
+          }
+        }
+      ],
+      link: "next_link"
+    };
+    if (castleToken) {
+      settingsList.castle_token = castleToken;
+    }
     return await this.executeFlowTask({
       flow_token: api.getFlowToken(),
       subtask_inputs: [
         {
           subtask_id: subtaskId,
-          settings_list: {
-            setting_responses: [
-              {
-                key: "user_identifier",
-                response_data: {
-                  text_data: { result: credentials.username }
-                }
-              }
-            ],
-            link: "next_link"
-          }
+          settings_list: settingsList
         }
       ]
     });
   }
+  /**
+   * Generates a Castle.io device fingerprint token for the login flow.
+   * Uses local token generation (Castle.io v11 format) to avoid external
+   * API dependencies and rate limits.
+   */
+  async generateCastleToken() {
+    const userAgent = CHROME_USER_AGENT;
+    const browserProfile = this.options?.experimental?.browserProfile;
+    const { token, cuid } = generateLocalCastleToken(userAgent, browserProfile);
+    await this.setCookie("__cuid", cuid);
+    log$1(
+      `Castle token generated locally, length: ${token.length}, cuid: ${cuid.substring(0, 6)}...`
+    );
+    return token;
+  }
   async handleEnterPassword(subtaskId, _prev, credentials, api) {
+    let castleToken;
+    try {
+      castleToken = await this.generateCastleToken();
+      log$1(`Castle token for password step, length: ${castleToken.length}`);
+    } catch (err) {
+      log$1(
+        "Failed to generate castle token for password (continuing without):",
+        err
+      );
+    }
+    const enterPassword = {
+      password: credentials.password,
+      link: "next_link"
+    };
+    if (castleToken) {
+      enterPassword.castle_token = castleToken;
+    }
     return await this.executeFlowTask({
       flow_token: api.getFlowToken(),
       subtask_inputs: [
         {
           subtask_id: subtaskId,
-          enter_password: {
-            password: credentials.password,
-            link: "next_link"
-          }
+          enter_password: enterPassword
         }
       ]
     });
@@ -939,27 +1991,28 @@ class TwitterUserAuth extends TwitterGuestAuth {
       };
     }
     const totp = new OTPAuth__namespace.TOTP({ secret: credentials.twoFactorSecret });
-    let error;
+    let lastResult;
     for (let attempts = 1; attempts < 4; attempts += 1) {
-      try {
-        return await api.sendFlowRequest({
-          flow_token: api.getFlowToken(),
-          subtask_inputs: [
-            {
-              subtask_id: subtaskId,
-              enter_text: {
-                link: "next_link",
-                text: totp.generate()
-              }
+      const result = await api.sendFlowRequest({
+        flow_token: api.getFlowToken(),
+        subtask_inputs: [
+          {
+            subtask_id: subtaskId,
+            enter_text: {
+              link: "next_link",
+              text: totp.generate()
             }
-          ]
-        });
-      } catch (err) {
-        error = err;
-        await new Promise((resolve) => setTimeout(resolve, 2e3 * attempts));
+          }
+        ]
+      });
+      if (result.status === "success") {
+        return result;
       }
+      lastResult = result;
+      log$1(`2FA attempt ${attempts} failed: ${result.err.message}`);
+      await new Promise((resolve) => setTimeout(resolve, 2e3 * attempts));
     }
-    throw error;
+    return lastResult;
   }
   async handleAcid(subtaskId, _prev, credentials, api) {
     return await this.executeFlowTask({
@@ -976,7 +2029,7 @@ class TwitterUserAuth extends TwitterGuestAuth {
     });
   }
   async handleSuccessSubtask() {
-    log("Successfully logged in with user credentials.");
+    log$1("Successfully logged in with user credentials.");
     return {
       status: "success",
       response: {}
@@ -987,28 +2040,33 @@ class TwitterUserAuth extends TwitterGuestAuth {
     if ("flow_name" in data) {
       onboardingTaskUrl = `https://api.x.com/1.1/onboarding/task.json?flow_name=${data.flow_name}`;
     }
-    log(`Making POST request to ${onboardingTaskUrl}`);
+    log$1(`Making POST request to ${onboardingTaskUrl}`);
+    log$1(
+      "Request data:",
+      JSON.stringify(
+        data,
+        (key, value) => key === "password" ? "[REDACTED]" : value,
+        2
+      )
+    );
     const headers = new headersPolyfill.Headers({
       accept: "*/*",
       "accept-language": "en-US,en;q=0.9",
       "content-type": "application/json",
-      "cache-control": "no-cache",
       origin: "https://x.com",
-      pragma: "no-cache",
       priority: "u=1, i",
       referer: "https://x.com/",
-      "sec-ch-ua": '"Google Chrome";v="135", "Not-A.Brand";v="8", "Chromium";v="135"',
+      "sec-ch-ua": CHROME_SEC_CH_UA,
       "sec-ch-ua-mobile": "?0",
       "sec-ch-ua-platform": '"Windows"',
       "sec-fetch-dest": "empty",
       "sec-fetch-mode": "cors",
-      "sec-fetch-site": "same-origin",
-      "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36",
-      "x-twitter-auth-type": "OAuth2Client",
+      "sec-fetch-site": "same-site",
+      "user-agent": CHROME_USER_AGENT,
       "x-twitter-active-user": "yes",
       "x-twitter-client-language": "en"
     });
-    await this.installTo(headers, onboardingTaskUrl);
+    await this.installAuthCredentials(headers);
     if (this.options?.experimental?.xClientTransactionId) {
       const transactionId = await generateTransactionId(
         onboardingTaskUrl,
@@ -1017,6 +2075,10 @@ class TwitterUserAuth extends TwitterGuestAuth {
       );
       headers.set("x-client-transaction-id", transactionId);
     }
+    const bodyData = { ...data };
+    if ("flow_name" in bodyData) {
+      delete bodyData.flow_name;
+    }
     let res;
     do {
       const fetchParameters = [
@@ -1025,7 +2087,7 @@ class TwitterUserAuth extends TwitterGuestAuth {
           credentials: "include",
           method: "POST",
           headers,
-          body: JSON.stringify(data)
+          body: JSON.stringify(bodyData)
         }
       ];
       try {
@@ -1040,25 +2102,58 @@ class TwitterUserAuth extends TwitterGuestAuth {
         };
       }
       await updateCookieJar(this.jar, res.headers);
+      log$1(`Response status: ${res.status}`);
       if (res.status === 429) {
-        log("Rate limit hit, waiting before retrying...");
+        log$1("Rate limit hit, waiting before retrying...");
         await this.onRateLimit({
           fetchParameters,
           response: res
         });
       }
     } while (res.status === 429);
-    if (!res.ok) {
-      return { status: "error", err: await ApiError.fromResponse(res) };
-    }
-    const flow = await flexParseJson(res);
-    if (flow?.flow_token == null) {
+    let flow;
+    try {
+      flow = await flexParseJson(res);
+    } catch {
+      if (!res.ok) {
+        return {
+          status: "error",
+          err: new ApiError(res, "Failed to parse response body")
+        };
+      }
       return {
         status: "error",
-        err: new AuthenticationError("flow_token not found.")
+        err: new AuthenticationError("Failed to parse flow response.")
       };
     }
+    log$1(
+      "Flow response: status=%s subtasks=%s",
+      flow.status,
+      flow.subtasks?.map((s) => s.subtask_id).join(", ")
+    );
     if (flow.errors?.length) {
+      log$1("Twitter auth flow errors:", JSON.stringify(flow.errors, null, 2));
+      if (flow.errors[0].code === 399) {
+        const message = flow.errors[0].message || "";
+        const challengeMatch = message.match(/g;[^:]+:[^:]+:[0-9]+/);
+        if (challengeMatch) {
+          log$1("Twitter challenge token detected:", challengeMatch[0]);
+        }
+        return {
+          status: "error",
+          err: new AuthenticationError(
+            `Twitter blocked this login attempt due to suspicious activity (error 399). This is not an issue with your credentials - Twitter requires additional authentication.
+
+Solutions:
+1. Use cookie-based authentication (RECOMMENDED): Export cookies from your browser and use scraper.setCookies() - see README for details
+2. Enable Two-Factor Authentication (2FA) on your account and provide totp_secret
+3. Wait 15 minutes before retrying (Twitter rate limit for suspicious logins)
+4. Login via browser first to establish device trust
+
+Original error: ${message}`
+          )
+        };
+      }
       return {
         status: "error",
         err: new AuthenticationError(
@@ -1066,6 +2161,15 @@ class TwitterUserAuth extends TwitterGuestAuth {
         )
       };
     }
+    if (!res.ok) {
+      return { status: "error", err: new ApiError(res, flow) };
+    }
+    if (flow?.flow_token == null) {
+      return {
+        status: "error",
+        err: new AuthenticationError("flow_token not found.")
+      };
+    }
     if (typeof flow.flow_token !== "string") {
       return {
         status: "error",
@@ -1073,7 +2177,12 @@ class TwitterUserAuth extends TwitterGuestAuth {
       };
     }
     const subtask = flow.subtasks?.length ? flow.subtasks[0] : void 0;
-    value.Check(TwitterUserAuthSubtask, subtask);
+    if (subtask && !value.Check(TwitterUserAuthSubtask, subtask)) {
+      log$1(
+        "WARNING: Subtask failed schema validation: %s",
+        subtask.subtask_id ?? "unknown"
+      );
+    }
     if (subtask && subtask.subtask_id === "DenyLoginSubtask") {
       return {
         status: "error",
@@ -1085,19 +2194,26 @@ class TwitterUserAuth extends TwitterGuestAuth {
       response: flow
     };
   }
-}
+};
+/**
+ * Maximum allowed size (in bytes) for the JS instrumentation script.
+ * Twitter's scripts are typically ~50-100KB. Anything significantly larger
+ * may indicate tampering or an unexpected response.
+ */
+_TwitterUserAuth.JS_INSTRUMENTATION_MAX_SIZE = 512 * 1024;
+let TwitterUserAuth = _TwitterUserAuth;
 
 const endpoints = {
-  UserTweets: "https://x.com/i/api/graphql/oRJs8SLCRNRbQzuZG93_oA/UserTweets?variables=%7B%22userId%22%3A%221806359170830172162%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Atrue%2C%22withQuickPromoteEligibilityTweetFields%22%3Atrue%2C%22withVoice%22%3Atrue%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22payments_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D",
-  UserTweetsAndReplies: "https://x.com/i/api/graphql/Hk4KlJ-ONjlJsucqR55P7g/UserTweetsAndReplies?variables=%7B%22userId%22%3A%221806359170830172162%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Atrue%2C%22withCommunity%22%3Atrue%2C%22withVoice%22%3Atrue%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Afalse%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Afalse%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D",
-  UserLikedTweets: "https://x.com/i/api/graphql/XHTMjDbiTGLQ9cP1em-aqQ/Likes?variables=%7B%22userId%22%3A%222244196397%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Afalse%2C%22withClientEventToken%22%3Afalse%2C%22withBirdwatchNotes%22%3Afalse%2C%22withVoice%22%3Atrue%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Afalse%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Afalse%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D",
-  UserByScreenName: "https://api.x.com/graphql/-oaLodhGbbnzJBACb1kk2Q/UserByScreenName?variables=%7B%22screen_name%22%3A%22geminiapp%22%2C%22withGrokTranslatedBio%22%3Afalse%7D&features=%7B%22hidden_profile_subscriptions_enabled%22%3Atrue%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22subscriptions_verification_info_is_identity_verified_enabled%22%3Atrue%2C%22subscriptions_verification_info_verified_since_enabled%22%3Atrue%2C%22highlights_tweets_tab_ui_enabled%22%3Atrue%2C%22responsive_web_twitter_article_notes_tab_enabled%22%3Atrue%2C%22subscriptions_feature_can_gift_premium%22%3Atrue%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%7D&fieldToggles=%7B%22withPayments%22%3Afalse%2C%22withAuxiliaryUserLabels%22%3Atrue%7D",
-  TweetDetail: "https://x.com/i/api/graphql/YVyS4SfwYW7Uw5qwy0mQCA/TweetDetail?variables=%7B%22focalTweetId%22%3A%221985465713096794294%22%2C%22referrer%22%3A%22profile%22%2C%22with_rux_injections%22%3Afalse%2C%22rankingMode%22%3A%22Relevance%22%2C%22includePromotedContent%22%3Atrue%2C%22withCommunity%22%3Atrue%2C%22withQuickPromoteEligibilityTweetFields%22%3Atrue%2C%22withBirdwatchNotes%22%3Atrue%2C%22withVoice%22%3Atrue%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22payments_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticleRichContentState%22%3Atrue%2C%22withArticlePlainText%22%3Afalse%2C%22withGrokAnalyze%22%3Afalse%2C%22withDisallowedReplyControls%22%3Afalse%7D",
-  TweetResultByRestId: "https://api.x.com/graphql/tCVRZ3WCvoj0BVO7BKnL-Q/TweetResultByRestId?variables=%7B%22tweetId%22%3A%221985465713096794294%22%2C%22withCommunity%22%3Afalse%2C%22includePromotedContent%22%3Afalse%2C%22withVoice%22%3Afalse%7D&features=%7B%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Afalse%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Afalse%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22payments_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticleRichContentState%22%3Atrue%2C%22withArticlePlainText%22%3Afalse%2C%22withGrokAnalyze%22%3Afalse%2C%22withDisallowedReplyControls%22%3Afalse%7D",
-  ListTweets: "https://x.com/i/api/graphql/S1Sm3_mNJwa-fnY9htcaAQ/ListLatestTweetsTimeline?variables=%7B%22listId%22%3A%221736495155002106192%22%2C%22count%22%3A20%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Afalse%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Afalse%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D",
-  SearchTimeline: "https://x.com/i/api/graphql/nK1dw4oV3k4w5TdtcAdSww/SearchTimeline?variables=%7B%22rawQuery%22%3A%22twitter%22%2C%22count%22%3A20%2C%22querySource%22%3A%22typed_query%22%2C%22product%22%3A%22Top%22%2C%22withGrokTranslatedBio%22%3Afalse%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22tweetypie_unmention_optimization_enabled%22%3Atrue%2C%22responsive_web_media_download_video_enabled%22%3Afalse%2C%22rweb_lists_timeline_redesign_enabled%22%3Atrue%7D",
-  Followers: "https://x.com/i/api/graphql/SCu9fVIlCUm-BM8-tL5pkQ/Followers?variables=%7B%22userId%22%3A%221806359170830172162%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Afalse%2C%22withGrokTranslatedBio%22%3Afalse%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D",
-  Following: "https://x.com/i/api/graphql/S5xUN9s2v4xk50KWGGvyvQ/Following?variables=%7B%22userId%22%3A%221806359170830172162%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Afalse%2C%22withGrokTranslatedBio%22%3Afalse%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D"
+  UserTweets: "https://api.x.com/graphql/N2tFDY-MlrLxXJ9F_ZxJGA/UserTweets?variables=%7B%22userId%22%3A%2244196397%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Atrue%2C%22withQuickPromoteEligibilityTweetFields%22%3Atrue%2C%22withVoice%22%3Atrue%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Afalse%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22responsive_web_grok_annotations_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22post_ctas_fetch_enabled%22%3Atrue%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D",
+  UserTweetsAndReplies: "https://api.x.com/graphql/2NDLUdBmT_IB5uGwZ3tHRg/UserTweetsAndReplies?variables=%7B%22userId%22%3A%221806359170830172162%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Atrue%2C%22withCommunity%22%3Atrue%2C%22withVoice%22%3Atrue%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Afalse%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22responsive_web_grok_annotations_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22post_ctas_fetch_enabled%22%3Atrue%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D",
+  UserLikedTweets: "https://api.x.com/graphql/Pcw-j9lrSeDMmkgnIejJiQ/Likes?variables=%7B%22userId%22%3A%222244196397%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Afalse%2C%22withClientEventToken%22%3Afalse%2C%22withBirdwatchNotes%22%3Afalse%2C%22withVoice%22%3Atrue%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Afalse%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22responsive_web_grok_annotations_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22post_ctas_fetch_enabled%22%3Atrue%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D",
+  UserByScreenName: "https://api.x.com/graphql/AWbeRIdkLtqTRN7yL_H8yw/UserByScreenName?variables=%7B%22screen_name%22%3A%22elonmusk%22%2C%22withGrokTranslatedBio%22%3Atrue%7D&features=%7B%22hidden_profile_subscriptions_enabled%22%3Atrue%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Afalse%2C%22verified_phone_label_enabled%22%3Afalse%2C%22subscriptions_verification_info_is_identity_verified_enabled%22%3Atrue%2C%22subscriptions_verification_info_verified_since_enabled%22%3Atrue%2C%22highlights_tweets_tab_ui_enabled%22%3Atrue%2C%22responsive_web_twitter_article_notes_tab_enabled%22%3Atrue%2C%22subscriptions_feature_can_gift_premium%22%3Atrue%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%7D&fieldToggles=%7B%22withPayments%22%3Afalse%2C%22withAuxiliaryUserLabels%22%3Atrue%7D",
+  TweetDetail: "https://api.x.com/graphql/YCNdW_ZytXfV9YR3cJK9kw/TweetDetail?variables=%7B%22focalTweetId%22%3A%221985465713096794294%22%2C%22with_rux_injections%22%3Afalse%2C%22rankingMode%22%3A%22Relevance%22%2C%22includePromotedContent%22%3Atrue%2C%22withCommunity%22%3Atrue%2C%22withQuickPromoteEligibilityTweetFields%22%3Atrue%2C%22withBirdwatchNotes%22%3Atrue%2C%22withVoice%22%3Atrue%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Afalse%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22responsive_web_grok_annotations_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22post_ctas_fetch_enabled%22%3Atrue%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticleRichContentState%22%3Atrue%2C%22withArticlePlainText%22%3Afalse%2C%22withGrokAnalyze%22%3Afalse%2C%22withDisallowedReplyControls%22%3Afalse%7D",
+  TweetResultByRestId: "https://api.x.com/graphql/4PdbzTmQ5PTjz9RiureISQ/TweetResultByRestId?variables=%7B%22tweetId%22%3A%221985465713096794294%22%2C%22includePromotedContent%22%3Atrue%2C%22withBirdwatchNotes%22%3Atrue%2C%22withVoice%22%3Atrue%2C%22withCommunity%22%3Atrue%7D&features=%7B%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22responsive_web_grok_annotations_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22post_ctas_fetch_enabled%22%3Atrue%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Afalse%2C%22verified_phone_label_enabled%22%3Afalse%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticleRichContentState%22%3Atrue%2C%22withArticlePlainText%22%3Afalse%7D",
+  ListTweets: "https://api.x.com/graphql/Uv3buKIUElzL3Iuc0L0O5g/ListLatestTweetsTimeline?variables=%7B%22listId%22%3A%221736495155002106192%22%2C%22count%22%3A20%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Afalse%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22responsive_web_grok_annotations_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22post_ctas_fetch_enabled%22%3Atrue%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D",
+  SearchTimeline: "https://api.x.com/graphql/ML-n2SfAxx5S_9QMqNejbg/SearchTimeline?variables=%7B%22rawQuery%22%3A%22twitter%22%2C%22count%22%3A20%2C%22querySource%22%3A%22typed_query%22%2C%22product%22%3A%22Top%22%2C%22withGrokTranslatedBio%22%3Afalse%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Afalse%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22responsive_web_grok_annotations_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22post_ctas_fetch_enabled%22%3Atrue%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D",
+  Followers: "https://api.x.com/graphql/P7m4Qr-rJEB8KUluOenU6A/Followers?variables=%7B%22userId%22%3A%221806359170830172162%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Afalse%2C%22withGrokTranslatedBio%22%3Afalse%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Afalse%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22responsive_web_grok_annotations_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22post_ctas_fetch_enabled%22%3Atrue%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D",
+  Following: "https://api.x.com/graphql/T5wihsMTYHncY7BB4YxHSg/Following?variables=%7B%22userId%22%3A%221806359170830172162%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Afalse%2C%22withGrokTranslatedBio%22%3Afalse%7D&features=%7B%22rweb_video_screen_enabled%22%3Afalse%2C%22profile_label_improvements_pcf_label_in_post_enabled%22%3Atrue%2C%22responsive_web_profile_redirect_enabled%22%3Afalse%2C%22rweb_tipjar_consumption_enabled%22%3Afalse%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22premium_content_api_read_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22responsive_web_grok_analyze_button_fetch_trends_enabled%22%3Afalse%2C%22responsive_web_grok_analyze_post_followups_enabled%22%3Atrue%2C%22responsive_web_jetfuel_frame%22%3Atrue%2C%22responsive_web_grok_share_attachment_enabled%22%3Atrue%2C%22responsive_web_grok_annotations_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22responsive_web_grok_show_grok_translated_post%22%3Atrue%2C%22responsive_web_grok_analysis_button_from_backend%22%3Atrue%2C%22post_ctas_fetch_enabled%22%3Atrue%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_grok_image_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_imagine_annotation_enabled%22%3Atrue%2C%22responsive_web_grok_community_note_auto_translation_is_enabled%22%3Afalse%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D"
 };
 class ApiRequest {
   constructor(info) {
@@ -1896,6 +3012,15 @@ function parseRelationshipTimeline(timeline) {
             if (!profile.userId) {
               profile.userId = userResultRaw.rest_id;
             }
+            if (!profile.username && userResultRaw.core?.screen_name) {
+              profile.username = userResultRaw.core.screen_name;
+              profile.url = `https://x.com/${profile.username}`;
+            }
+            if (!profile.joined && userResultRaw.core?.created_at) {
+              profile.joined = new Date(
+                Date.parse(userResultRaw.core.created_at)
+              );
+            }
             profiles.push(profile);
           }
         } else if (entry.content?.cursorType === "Bottom") {
@@ -2448,6 +3573,7 @@ function findDmConversationsByUserId(inbox, userId) {
   return conversations;
 }
 
+const log = debug("twitter-scraper:scraper");
 const twUrl = "https://x.com";
 class Scraper {
   /**
@@ -2457,6 +3583,7 @@ class Scraper {
    */
   constructor(options) {
     this.options = options;
+    this.subtaskHandlers = /* @__PURE__ */ new Map();
     this.token = bearerToken;
     this.useGuestAuth();
   }
@@ -2467,6 +3594,7 @@ class Scraper {
    * @param subtaskHandler The handler function to register.
    */
   registerAuthSubtaskHandler(subtaskId, subtaskHandler) {
+    this.subtaskHandlers.set(subtaskId, subtaskHandler);
     if (this.auth instanceof TwitterUserAuth) {
       this.auth.registerSubtaskHandler(subtaskId, subtaskHandler);
     }
@@ -2474,6 +3602,15 @@ class Scraper {
       this.authTrends.registerSubtaskHandler(subtaskId, subtaskHandler);
     }
   }
+  /**
+   * Applies all stored subtask handlers to the given auth instance.
+   * @internal
+   */
+  applySubtaskHandlers(auth) {
+    for (const [subtaskId, handler] of this.subtaskHandlers) {
+      auth.registerSubtaskHandler(subtaskId, handler);
+    }
+  }
   /**
    * Initializes auth properties using a guest token.
    * Used when creating a new instance of this class, and when logging out.
@@ -2774,7 +3911,8 @@ class Scraper {
    * @param twoFactorSecret The secret to generate two factor authentication tokens with, if you have two factor authentication enabled.
    */
   async login(username, password, email, twoFactorSecret) {
-    const userAuth = new TwitterUserAuth(this.token, this.getAuthOptions());
+    const userAuth = new TwitterUserAuth(bearerToken2, this.getAuthOptions());
+    this.applySubtaskHandlers(userAuth);
     await userAuth.login(username, password, email, twoFactorSecret);
     this.auth = userAuth;
     this.authTrends = userAuth;
@@ -2801,12 +3939,37 @@ class Scraper {
    * @param cookies The cookies to set for the current session.
    */
   async setCookies(cookies) {
-    const userAuth = new TwitterUserAuth(this.token, this.getAuthOptions());
+    const userAuth = new TwitterUserAuth(bearerToken2, this.getAuthOptions());
+    this.applySubtaskHandlers(userAuth);
     for (const cookie of cookies) {
-      await userAuth.cookieJar().setCookie(cookie, twUrl);
+      if (cookie == null) continue;
+      if (typeof cookie === "string") {
+        try {
+          await userAuth.cookieJar().setCookie(cookie, "https://x.com");
+        } catch (err) {
+          log(`Failed to parse cookie string: ${err.message}`);
+        }
+      } else {
+        if (cookie.domain && cookie.domain.startsWith(".")) {
+          cookie.domain = cookie.domain.substring(1);
+          cookie.hostOnly = false;
+        }
+        const cookieDomain = cookie.domain || "x.com";
+        const cookieUrl = `https://${cookieDomain}`;
+        await userAuth.cookieJar().setCookie(cookie, cookieUrl);
+      }
     }
     this.auth = userAuth;
     this.authTrends = userAuth;
+    const isLoggedIn = await userAuth.isLoggedIn();
+    if (!isLoggedIn) {
+      const cookieString = await userAuth.cookieJar().getCookies(twUrl).then((c) => c.map((cookie) => cookie.key));
+      if (cookieString.includes("ct0") && !cookieString.includes("auth_token")) {
+        log(
+          "auth_token cookie is missing. This is required for authenticated API access. The auth_token is an HttpOnly cookie that cannot be accessed via document.cookie. Export it using a browser extension (e.g., EditThisCookie) or DevTools Application tab."
+        );
+      }
+    }
   }
   /**
    * Clear all cookies for the current session.
@@ -2848,7 +4011,9 @@ class Scraper {
       rateLimitStrategy: this.options?.rateLimitStrategy,
       experimental: {
         xClientTransactionId: this.options?.experimental?.xClientTransactionId,
-        xpff: this.options?.experimental?.xpff
+        xpff: this.options?.experimental?.xpff,
+        flowStepDelay: this.options?.experimental?.flowStepDelay,
+        browserProfile: this.options?.experimental?.browserProfile
       }
     };
   }
@@ -2897,4 +4062,5 @@ exports.ErrorRateLimitStrategy = ErrorRateLimitStrategy;
 exports.Scraper = Scraper;
 exports.SearchMode = SearchMode;
 exports.WaitingRateLimitStrategy = WaitingRateLimitStrategy;
+exports.randomizeBrowserProfile = randomizeBrowserProfile;
 //# sourceMappingURL=index.cjs.map