xtrawl 0.1.0

package/README.md

@@ -0,0 +1,232 @@
+<h1 align="center">XTrawl</h1>
+
+<p align="center">
+  Scrape public X posts, profiles, followers, and following.
+</p>
+
+XTrawl collects public data from X without an official API key. Search posts, read profiles and
+timelines, inspect individual posts, collect follower and following lists, and save results as CSV or
+JSON. It splits long searches, rotates authorized accounts when requests fail, and saves resumable
+progress in SQLite. Use it from TypeScript or the command line.
+
+## What XTrawl collects
+
+- Search results with date, account, phrase, hashtag, language, location, media, and engagement filters
+- Individual posts by ID or status URL
+- Public profile details for one or more usernames
+- Posts from public profile timelines
+- Public followers, following, and verified-follower relationships
+- Normalized TypeScript records with optional CSV and JSON output
+
+XTrawl never posts, replies, likes, follows, messages, or changes account settings.
+
+## Quick start
+
+XTrawl requires Node.js 22.5 or newer and npm.
+
+```bash
+npm install xtrawl
+```
+
+Provide session cookies from an X account you own or are authorized to use. Keep them in environment
+variables; never commit them.
+
+```bash
+export X_AUTH_TOKEN="your-auth-token"
+export X_CSRF_TOKEN="your-ct0-token"
+```
+
+Run a search:
+
+```bash
+npx xtrawl search "typescript" \
+  --since 2026-01-01 \
+  --display-type Latest \
+  --limit 100 \
+  --save \
+  --save-format json \
+  --pretty
+```
+
+`--pretty` prints indented JSON to stdout. With `--save`, XTrawl also writes records to `outputs/`
+by default.
+
+## Use the TypeScript API
+
+Import the package from TypeScript or JavaScript:
+
+```ts
+import { XTrawl } from "xtrawl";
+
+const client = await XTrawl.create({
+  authToken: process.env.X_AUTH_TOKEN,
+  csrfToken: process.env.X_CSRF_TOKEN,
+  dbPath: "xtrawl.db",
+});
+
+try {
+  const result = await client.search("typescript", {
+    since: "2026-01-01",
+    fromUsers: ["OpenAI"],
+    minLikes: 10,
+    displayType: "Latest",
+    limit: 100,
+  });
+
+  console.log(result.tweets);
+  console.log(result.stats);
+} finally {
+  client.close();
+}
+```
+
+Use `XTrawl.create()` for normal startup. If an account has `auth_token` but no `ct0` value, this
+factory attempts to bootstrap the missing CSRF cookie before the first request.
+
+## Common tasks
+
+```ts
+// Resolve public profiles.
+const profiles = await client.getUserInfo(["OpenAI", "github"]);
+
+// Inspect one public post.
+const tweet = await client.getTweet("https://x.com/OpenAI/status/1234567890");
+
+// Collect posts from public profile timelines.
+const timeline = await client.getProfileTweets(["OpenAI"], {
+  perProfileLimit: 100,
+  resume: true,
+});
+
+// Collect public relationships.
+const followers = await client.getFollowers(["OpenAI"], { limit: 500 });
+const following = await client.getFollowing(["OpenAI"], { limit: 500 });
+const verified = await client.getVerifiedFollowers(["OpenAI"], { limit: 500 });
+```
+
+Targets may be usernames, `@user` handles, X or Twitter profile URLs, or typed target objects.
+Profile-timeline and relationship methods also accept numeric user IDs and `/i/user/ID` URLs.
+
+## Use the CLI
+
+Global options must appear before the command. Command options come after it.
+
+```bash
+# Inspect profiles
+npx xtrawl user-info OpenAI github --pretty
+
+# Inspect a post
+npx xtrawl tweet 1234567890 --pretty
+
+# Save posts from two profiles as CSV and JSON
+npx xtrawl profile-tweets OpenAI github \
+  --per-profile-limit 100 \
+  --resume \
+  --save \
+  --save-format both
+
+# Use an account file, a proxy, and a separate state database
+npx xtrawl \
+  --cookies-file ./accounts.json \
+  --proxy http://127.0.0.1:8080 \
+  --db-path ./state/xtrawl.db \
+  followers OpenAI \
+  --limit 500
+```
+
+Available commands are `search`, `tweet`, `profile-tweets`, `followers`, `following`,
+`verified-followers`, and `user-info`.
+
+## How XTrawl works
+
+```mermaid
+flowchart LR
+    API["TypeScript API"] --> Client["XTrawl client"]
+    CLI["Command-line interface"] --> Client
+    Client --> Query["Query builder and interval scheduler"]
+    Query --> Pool["Account pool and retries"]
+    Pool --> Session["Authenticated read-only session"]
+    Session --> X["X web GraphQL endpoints"]
+    X --> Parse["Runtime guards and typed extractors"]
+    Parse --> Result["Typed records"]
+    Result --> Output["stdout / CSV / JSON"]
+
+    State[("SQLite state")] <--> Client
+    State <--> Pool
+    State <--> Query
+```
+
+For each operation, XTrawl leases an eligible account from SQLite, verifies its proxy when configured,
+creates an authenticated session, builds a read-only web request, and paginates until the requested
+limit or another stop condition is reached. Searches default to the previous 30 days and divide that
+interval into concurrent tasks. Failed requests use bounded backoff, account switching, and session
+repair. Responses enter the application as unknown data and are narrowed into typed records at the
+engine boundary.
+
+SQLite tracks account health, request usage, leases, run history, resumable cursors, and cached
+operation manifests. It does not store collected posts or profiles unless you explicitly enable file
+output.
+
+## Accounts and proxies
+
+For one account, pass `X_AUTH_TOKEN` and `X_CSRF_TOKEN` directly. For an account pool, provide a JSON,
+Netscape-cookie, or delimited account file with `--cookies-file`, or use the equivalent library
+options. A global proxy can be set with `--proxy`; library account records may also define their own
+HTTP, HTTPS, or SOCKS5 proxy.
+
+XTrawl selects only accounts that have usable authentication, are outside cooldown, are not already
+leased, and remain within configured daily limits. Rate-limit and transient failures trigger a
+cooldown and can switch the current task to another account. Authentication failures attempt a CSRF
+cookie repair before the account remains unusable.
+
+## Resume and save output
+
+Set `resume: true` or pass `--resume` to persist pagination cursors. XTrawl clears a checkpoint after
+that operation finishes successfully and retains it when a run is interrupted.
+
+Set `save: true` or pass `--save` to write records. Supported formats are `csv`, `json`, and `both`.
+The default output directory is `outputs/`; use `saveDir` or `--save-dir` to change it. Repeated saves
+append records, and generated filenames include the query/date range or collection targets.
+
+## Manage local state
+
+The library exposes safe account and run maintenance through `client.db`. It can list redacted
+accounts, import accounts, assign proxies, repair or disable an account, clear expired leases and
+checkpoints, reset local counters, inspect run history, and remove a named account. Destructive
+duplicate cleanup is a dry run unless explicitly enabled.
+
+## Safety and limitations
+
+- Collect only public data with accounts you own or are authorized to use.
+- Keep cookies, tokens, databases, and output files out of version control and secret-sharing paths.
+- XTrawl cannot access private or protected content that the active session cannot already view.
+- X's undocumented web endpoints and operation identifiers can change without notice.
+- Session cookies expire, and account availability or platform rate limits can interrupt a run.
+- Conservative local limits reduce pressure on accounts but do not guarantee uninterrupted access.
+- You are responsible for following platform terms and applicable privacy, data, and automation laws.
+
+## Documentation
+
+- [Complete usage and API guide](DOCUMENTATION.md)
+- [Product specification](docs/product/specification.md)
+- [Architecture overview](docs/architecture/overview.md)
+- [Security and data boundary](docs/security/data-boundary.md)
+- [Architecture decisions](docs/decisions/)
+
+## Development
+
+Run the fast local checks while working:
+
+```bash
+npm run check
+```
+
+Run the complete delivery gate before publishing a change:
+
+```bash
+npm run verify
+```
+
+The full gate checks formatting, linting, strict TypeScript compilation, unit tests, package and CLI
+smoke behavior, harness integrity, and context-budget limits. Live integration tests require
+caller-supplied credentials and are disabled unless explicitly enabled.

package/dist/auth/bootstrap.d.ts

@@ -0,0 +1,4 @@
+import { fetch as undiciFetch } from "undici";
+import type { CookieMap, ProxySettings } from "../domain/accounts.js";
+export declare function bootstrapCookiesFromAuthToken(authToken: string, fetcher?: typeof undiciFetch, proxy?: string | ProxySettings): Promise<CookieMap | undefined>;
+//# sourceMappingURL=bootstrap.d.ts.map

package/dist/auth/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/auth/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAGtE,wBAAsB,6BAA6B,CACjD,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,OAAO,WAAyB,EACzC,KAAK,CAAC,EAAE,MAAM,GAAG,aAAa,GAC7B,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAsBhC"}

package/dist/auth/bootstrap.js

@@ -0,0 +1,29 @@
+import { fetch as undiciFetch } from "undici";
+import { proxyDispatcher } from "../transport/proxy.js";
+export async function bootstrapCookiesFromAuthToken(authToken, fetcher = undiciFetch, proxy) {
+    const dispatcher = proxyDispatcher(proxy);
+    try {
+        const response = await fetcher("https://x.com/home", {
+            headers: { Cookie: `auth_token=${authToken}`, "User-Agent": "Mozilla/5.0" },
+            redirect: "follow",
+            ...(dispatcher ? { dispatcher } : {}),
+        });
+        if (response.status >= 400)
+            return undefined;
+        const cookies = { auth_token: authToken };
+        const setCookies = typeof response.headers.getSetCookie === "function" ? response.headers.getSetCookie() : [];
+        for (const header of setCookies) {
+            const first = header.split(";", 1)[0];
+            if (!first)
+                continue;
+            const separator = first.indexOf("=");
+            if (separator > 0)
+                cookies[first.slice(0, separator)] = first.slice(separator + 1);
+        }
+        return cookies.ct0 ? cookies : undefined;
+    }
+    finally {
+        await dispatcher?.close();
+    }
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/auth/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/auth/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,SAAiB,EACjB,UAA8B,WAAW,EACzC,KAA8B;IAE9B,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,EAAE;YACnD,OAAO,EAAE,EAAE,MAAM,EAAE,cAAc,SAAS,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE;YAC3E,QAAQ,EAAE,QAAQ;YAClB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,SAAS,CAAC;QAC7C,MAAM,OAAO,GAA2B,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAClE,MAAM,UAAU,GACd,OAAO,QAAQ,CAAC,OAAO,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,SAAS,GAAG,CAAC;gBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,MAAM,UAAU,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/auth/cookies.d.ts

@@ -0,0 +1,7 @@
+import type { CookieMap } from "../domain/accounts.js";
+export declare function cookiesToMap(value: unknown): CookieMap;
+export declare function parseCookieHeader(value: string): CookieMap;
+export declare function parseNetscapeCookies(value: string): CookieMap;
+export declare function normalizeCookiesPayload(value: unknown): CookieMap;
+export declare function deriveUsername(username: string | undefined, email: string | undefined, authToken: string | undefined, cookies: CookieMap): string | undefined;
+//# sourceMappingURL=cookies.d.ts.map

package/dist/auth/cookies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/auth/cookies.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGvD,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CActD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAW1D;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAa7D;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CAmBjE;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,OAAO,EAAE,SAAS,GACjB,MAAM,GAAG,SAAS,CAQpB"}

package/dist/auth/cookies.js

@@ -0,0 +1,83 @@
+import { createHash } from "node:crypto";
+import { asString, isRecord } from "../utils/guards.js";
+export function cookiesToMap(value) {
+    if (isRecord(value)) {
+        return Object.fromEntries(Object.entries(value).map(([key, child]) => [key, String(child ?? "")]));
+    }
+    if (Array.isArray(value)) {
+        const pairs = value.flatMap((item) => {
+            if (!isRecord(item))
+                return [];
+            const name = asString(item.name);
+            const child = asString(item.value);
+            return name && child !== undefined ? [[name, child]] : [];
+        });
+        return Object.fromEntries(pairs);
+    }
+    return {};
+}
+export function parseCookieHeader(value) {
+    const raw = value.trim().replace(/^cookie:\s*/iu, "");
+    const entries = [];
+    for (const part of raw.split(";")) {
+        const separator = part.indexOf("=");
+        if (separator <= 0)
+            continue;
+        const name = part.slice(0, separator).trim();
+        const cookie = part.slice(separator + 1).trim();
+        if (name && cookie)
+            entries.push([name, cookie]);
+    }
+    return Object.fromEntries(entries);
+}
+export function parseNetscapeCookies(value) {
+    const out = {};
+    for (const raw of value.split(/\r?\n/u)) {
+        let line = raw.trim();
+        if (!line || (line.startsWith("#") && !line.startsWith("#HttpOnly_")))
+            continue;
+        line = line.replace(/^#HttpOnly_/u, "");
+        const parts = line.split(/\s+/u);
+        if (parts.length < 7)
+            continue;
+        const name = parts[5];
+        const cookie = parts.slice(6).join(" ");
+        if (name && cookie)
+            out[name] = cookie;
+    }
+    return out;
+}
+export function normalizeCookiesPayload(value) {
+    if (value === undefined || value === null)
+        return {};
+    if (typeof value === "string") {
+        const text = value.trim();
+        if (!text)
+            return {};
+        if (text.includes("\t") ||
+            text.includes("#HttpOnly_") ||
+            text.startsWith("# Netscape") ||
+            text.split(/\r?\n/u).some((line) => line.trim().split(/\s+/u).length >= 7))
+            return parseNetscapeCookies(text);
+        try {
+            return normalizeCookiesPayload(JSON.parse(text));
+        }
+        catch {
+            return text.includes("=") ? parseCookieHeader(text) : { auth_token: text };
+        }
+    }
+    return cookiesToMap(value);
+}
+export function deriveUsername(username, email, authToken, cookies) {
+    if (username?.trim())
+        return username.trim();
+    if (email?.includes("@"))
+        return email.split("@", 1)[0]?.trim() || undefined;
+    if (authToken?.trim())
+        return `auth_${createHash("sha1").update(authToken).digest("hex").slice(0, 12)}`;
+    const serialized = JSON.stringify(cookies, Object.keys(cookies).sort());
+    return Object.keys(cookies).length > 0
+        ? `cookie_${createHash("sha1").update(serialized).digest("hex").slice(0, 12)}`
+        : undefined;
+}
+//# sourceMappingURL=cookies.js.map

package/dist/auth/cookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../../src/auth/cookies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,IAAI,CAAC;YAAE,SAAS;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,IAAI,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAAE,SAAS;QAChF,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,IAAI,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,IACE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC3B,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;YAE1E,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAA4B,EAC5B,KAAyB,EACzB,SAA6B,EAC7B,OAAkB;IAElB,IAAI,QAAQ,EAAE,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC7E,IAAI,SAAS,EAAE,IAAI,EAAE;QAAE,OAAO,QAAQ,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACxG,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;QACpC,CAAC,CAAC,UAAU,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QAC9E,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/auth/loaders.d.ts

@@ -0,0 +1,6 @@
+import type { AccountRecord } from "../domain/accounts.js";
+export declare function loadAccountsFile(path: string): Promise<AccountRecord[]>;
+export declare function loadAccountsFileSync(path: string): AccountRecord[];
+export declare function loadAccountsPayload(payload: unknown): AccountRecord[];
+export declare function loadInlineAccounts(payload: unknown): AccountRecord[];
+//# sourceMappingURL=loaders.d.ts.map

package/dist/auth/loaders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loaders.d.ts","sourceRoot":"","sources":["../../src/auth/loaders.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAG7E;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CAElE;AAqCD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,EAAE,CAerE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,EAAE,CAIpE"}

package/dist/auth/loaders.js

@@ -0,0 +1,69 @@
+import { readFile } from "node:fs/promises";
+import { readFileSync } from "node:fs";
+import { isRecord } from "../utils/guards.js";
+import { normalizeCookiesPayload } from "./cookies.js";
+import { accountInputToRecord } from "./records.js";
+export async function loadAccountsFile(path) {
+    const text = await readFile(path, "utf8");
+    return parseAccountsFileText(path, text);
+}
+export function loadAccountsFileSync(path) {
+    return parseAccountsFileText(path, readFileSync(path, "utf8"));
+}
+function parseAccountsFileText(path, text) {
+    if (path.toLowerCase().endsWith(".json")) {
+        return loadAccountsPayload(JSON.parse(text));
+    }
+    if (looksLikeCookieFile(text)) {
+        const cookies = normalizeCookiesPayload(text);
+        return Object.keys(cookies).length > 0 ? [accountInputToRecord({ cookies })] : [];
+    }
+    const records = [];
+    for (const raw of text.split(/\r?\n/u)) {
+        const line = raw.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        const parts = line.includes("|") ? line.split("|").map((item) => item.trim()) : line.split(":");
+        if (parts.length < 2)
+            continue;
+        const [username, password, email, emailPassword, twoFactorSecret, authToken, csrfToken] = parts;
+        records.push(accountInputToRecord({
+            username,
+            password,
+            email,
+            emailPassword,
+            twoFactorSecret,
+            csrfToken,
+            authToken,
+        }));
+    }
+    return records;
+}
+function looksLikeCookieFile(text) {
+    if (text.includes("\t") || text.includes("#HttpOnly_") || /^#\s*Netscape/imu.test(text))
+        return true;
+    return text.split(/\r?\n/u).some((line) => line.trim().split(/\s+/u).length >= 7);
+}
+export function loadAccountsPayload(payload) {
+    const rows = Array.isArray(payload) ? payload : [payload];
+    return rows.flatMap((row) => {
+        if (!isRecord(row))
+            return [];
+        const cookieValue = row.cookies ?? row.cookies_json ?? row.cookieJar;
+        if (cookieValue !== undefined) {
+            return [
+                accountInputToRecord({
+                    ...row,
+                    cookies: normalizeCookiesPayload(cookieValue),
+                }),
+            ];
+        }
+        return [accountInputToRecord(row)];
+    });
+}
+export function loadInlineAccounts(payload) {
+    if (typeof payload === "string")
+        return [accountInputToRecord({ cookies: normalizeCookiesPayload(payload) })];
+    return loadAccountsPayload(payload);
+}
+//# sourceMappingURL=loaders.js.map

package/dist/auth/loaders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loaders.js","sourceRoot":"","sources":["../../src/auth/loaders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGpD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,IAAY;IACvD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,CAAC;IACD,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChG,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QAChG,OAAO,CAAC,IAAI,CACV,oBAAoB,CAAC;YACnB,QAAQ;YACR,QAAQ;YACR,KAAK;YACL,aAAa;YACb,eAAe;YACf,SAAS;YACT,SAAS;SACV,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,IAAI,GAAc,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,SAAS,CAAC;QACrE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO;gBACL,oBAAoB,CAAC;oBACnB,GAAI,GAAoB;oBACxB,OAAO,EAAE,uBAAuB,CAAC,WAAW,CAAC;iBAC9C,CAAC;aACH,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,oBAAoB,CAAC,GAAmB,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAC7B,OAAO,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC"}

package/dist/auth/material.d.ts

@@ -0,0 +1,3 @@
+import type { AccountRecord, AuthMaterial } from "../domain/accounts.js";
+export declare function prepareAuthMaterial(account: AccountRecord, defaultBearerToken: string): AuthMaterial;
+//# sourceMappingURL=material.d.ts.map

package/dist/auth/material.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"material.d.ts","sourceRoot":"","sources":["../../src/auth/material.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAIzE,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,GAAG,YAAY,CAapG"}

package/dist/auth/material.js

@@ -0,0 +1,20 @@
+import { AccountSessionAuthError } from "../domain/errors.js";
+import { asString } from "../utils/guards.js";
+export function prepareAuthMaterial(account, defaultBearerToken) {
+    const authToken = asString(account.authToken) ?? asString(account.cookies.auth_token);
+    const csrfToken = asString(account.csrfToken) ?? asString(account.cookies.ct0);
+    const bearerToken = asString(account.bearerToken) ?? defaultBearerToken;
+    if (!authToken)
+        throw new AccountSessionAuthError("missing_auth_token", "auth token is missing");
+    if (!csrfToken)
+        throw new AccountSessionAuthError("missing_csrf", "CSRF cookie is missing");
+    if (!bearerToken)
+        throw new AccountSessionAuthError("missing_bearer", "web bearer token is missing");
+    return {
+        authToken,
+        csrfToken,
+        bearerToken: bearerToken.replace(/^Bearer\s+/iu, ""),
+        cookies: { ...account.cookies, auth_token: authToken, ct0: csrfToken },
+    };
+}
+//# sourceMappingURL=material.js.map

package/dist/auth/material.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"material.js","sourceRoot":"","sources":["../../src/auth/material.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,UAAU,mBAAmB,CAAC,OAAsB,EAAE,kBAA0B;IACpF,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,kBAAkB,CAAC;IACxE,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,uBAAuB,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;IACjG,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,uBAAuB,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAC5F,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IACrG,OAAO;QACL,SAAS;QACT,SAAS;QACT,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE;KACvE,CAAC;AACJ,CAAC"}

package/dist/auth/records.d.ts

@@ -0,0 +1,4 @@
+import type { AccountInput, AccountRecord } from "../domain/accounts.js";
+export declare function normalizeAccountRecord(input: Record<string, unknown> | AccountInput): AccountRecord;
+export declare function accountInputToRecord(input: AccountInput): AccountRecord;
+//# sourceMappingURL=records.d.ts.map

package/dist/auth/records.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"records.d.ts","sourceRoot":"","sources":["../../src/auth/records.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAa,MAAM,uBAAuB,CAAC;AAIpF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,YAAY,GAAG,aAAa,CAoCnG;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CAEvE"}

package/dist/auth/records.js

@@ -0,0 +1,38 @@
+import { asString, isRecord } from "../utils/guards.js";
+import { deriveUsername, normalizeCookiesPayload } from "./cookies.js";
+export function normalizeAccountRecord(input) {
+    const value = input;
+    const cookies = normalizeCookiesPayload(value.cookies ?? value.cookiesJson ?? value.cookieJar);
+    const authToken = asString(value.authToken ?? value.auth_token ?? value.token) ?? asString(cookies.auth_token);
+    const csrfToken = asString(value.csrfToken ?? value.csrf ?? value.ct0) ?? asString(cookies.ct0);
+    const username = deriveUsername(asString(value.username ?? value.user ?? value.handle), asString(value.email), authToken, cookies);
+    if (!username)
+        throw new Error("Account requires username, email, auth token, or cookies.");
+    const mergedCookies = {
+        ...cookies,
+        ...(authToken ? { auth_token: authToken } : {}),
+        ...(csrfToken ? { ct0: csrfToken } : {}),
+    };
+    return {
+        username,
+        ...(asString(value.password) ? { password: asString(value.password) } : {}),
+        ...(asString(value.email) ? { email: asString(value.email) } : {}),
+        ...(asString(value.emailPassword ?? value.email_password)
+            ? { emailPassword: asString(value.emailPassword ?? value.email_password) }
+            : {}),
+        ...(asString(value.twoFactorSecret ?? value.two_fa ?? value.otp)
+            ? { twoFactorSecret: asString(value.twoFactorSecret ?? value.two_fa ?? value.otp) }
+            : {}),
+        ...(authToken ? { authToken } : {}),
+        ...(csrfToken ? { csrfToken } : {}),
+        cookies: mergedCookies,
+        ...(isRecord(value.proxy) || typeof value.proxy === "string"
+            ? { proxy: value.proxy }
+            : {}),
+        ...(asString(value.bearer) ? { bearerToken: asString(value.bearer) } : {}),
+    };
+}
+export function accountInputToRecord(input) {
+    return normalizeAccountRecord(input);
+}
+//# sourceMappingURL=records.js.map

package/dist/auth/records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"records.js","sourceRoot":"","sources":["../../src/auth/records.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAEvE,MAAM,UAAU,sBAAsB,CAAC,KAA6C;IAClF,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/F,MAAM,SAAS,GACb,QAAQ,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChG,MAAM,QAAQ,GAAG,cAAc,CAC7B,QAAQ,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,EACtD,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EACrB,SAAS,EACT,OAAO,CACR,CAAC;IACF,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC5F,MAAM,aAAa,GAAc;QAC/B,GAAG,OAAO;QACV,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC;IACF,OAAO;QACL,QAAQ;QACR,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,cAAc,CAAC;YACvD,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,cAAc,CAAC,EAAE;YAC1E,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC;YAC9D,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE;YACnF,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,aAAa;QACtB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAC1D,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAA+B,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAmB;IACtD,OAAO,sBAAsB,CAAC,KAA2C,CAAC,CAAC;AAC7E,CAAC"}

package/dist/cli/help.d.ts

@@ -0,0 +1,2 @@
+export declare const HELP = "xtrawl \u2014 read-only X scraper and crawler\n\nUsage:\n  xtrawl [global options] search [query] [options]\n  xtrawl [global options] tweet TWEET_ID [TWEET_ID ...] [options]\n  xtrawl [global options] profile-tweets USER [USER ...] [options]\n  xtrawl [global options] followers USER [USER ...] [options]\n  xtrawl [global options] following USER [USER ...] [options]\n  xtrawl [global options] verified-followers USER [USER ...] [options]\n  xtrawl [global options] user-info USER [USER ...] [options]\n\nGlobal options:\n  --auth-token TOKEN       session auth cookie\n  --csrf-token TOKEN       session CSRF cookie\n  --cookies-file PATH      JSON or delimited account source\n  --env-file PATH          dotenv account source\n  --db-path PATH           SQLite state path\n  --proxy URL              HTTP(S) or SOCKS5 proxy\n  --concurrency N          configured worker count\n  --manifest-scrape-on-init refresh live operation identifiers\n  --verbose, -v            enable redacted diagnostics\n\nCommon options:\n  --limit N                cap returned records\n  --since DATE             lower search bound\n  --until DATE             upper search bound\n  --save --save-format csv|json|both --save-dir PATH\n  --pretty                 print indented JSON\n";
+//# sourceMappingURL=help.d.ts.map

package/dist/cli/help.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../src/cli/help.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,IAAI,svCA4BhB,CAAC"}

package/dist/cli/help.js

@@ -0,0 +1,30 @@
+export const HELP = `xtrawl — read-only X scraper and crawler
+
+Usage:
+  xtrawl [global options] search [query] [options]
+  xtrawl [global options] tweet TWEET_ID [TWEET_ID ...] [options]
+  xtrawl [global options] profile-tweets USER [USER ...] [options]
+  xtrawl [global options] followers USER [USER ...] [options]
+  xtrawl [global options] following USER [USER ...] [options]
+  xtrawl [global options] verified-followers USER [USER ...] [options]
+  xtrawl [global options] user-info USER [USER ...] [options]
+
+Global options:
+  --auth-token TOKEN       session auth cookie
+  --csrf-token TOKEN       session CSRF cookie
+  --cookies-file PATH      JSON or delimited account source
+  --env-file PATH          dotenv account source
+  --db-path PATH           SQLite state path
+  --proxy URL              HTTP(S) or SOCKS5 proxy
+  --concurrency N          configured worker count
+  --manifest-scrape-on-init refresh live operation identifiers
+  --verbose, -v            enable redacted diagnostics
+
+Common options:
+  --limit N                cap returned records
+  --since DATE             lower search bound
+  --until DATE             upper search bound
+  --save --save-format csv|json|both --save-dir PATH
+  --pretty                 print indented JSON
+`;
+//# sourceMappingURL=help.js.map

package/dist/cli/help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../../src/cli/help.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BnB,CAAC"}

package/dist/cli/main.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export declare function runCli(argv?: readonly string[]): Promise<number>;
+//# sourceMappingURL=main.d.ts.map

package/dist/cli/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AAOA,wBAAsB,MAAM,CAAC,IAAI,GAAE,SAAS,MAAM,EAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CA+D7F"}