Use Linux UA (was macOS) so Cloudflare doesn't flag headless mismatch

Browser ran on Linux but advertised a macOS User-Agent, an inconsistency
Cloudflare Turnstile flags -> infinite verify loop on the ChatGPT site.
Switch all UAs to a Linux Chrome string and align the ChatGPT backend to
Chrome 145 to match the in-browser Chrome for Testing build, so the
cf_clearance cookie (bound to UA) stays valid across browser and backend.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

.gitignore

@@ -1,5 +1,8 @@
 # Hugging Face secret token — never commit
 hf-token
 
+# Neon Postgres DB credentials (DATABASE_URL) — never commit
+neon-db
+
 # Pasted screenshots / scratch images
 image.png

chatgpt-free-api/cookies.go

@@ -153,7 +153,7 @@ func DirectHTTPRequest(method, urlStr string, headers map[string]string, body st
 	req.Header.Set("Cookie", GetCachedCookieHeader())
 
 	// Set default headers for ChatGPT
-	req.Header.Set("User-Agent", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
+	req.Header.Set("User-Agent", "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36")
 	req.Header.Set("Accept", "*/*")
 	req.Header.Set("Accept-Language", "en-US,en;q=0.9")
 	req.Header.Set("Origin", "https://chatgpt.com")
@@ -448,7 +448,7 @@ func extractConversationID(raw string) string {
 func SolveFNVPow(seed, difficulty string) string {
 	for nonce := 0; nonce < 500000; nonce++ {
 		// Build a config array matching the browser's format
-		config := fmt.Sprintf(`[3000,"%s",4294705152,%d,"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36",null,"","en-US","en-US",%d,"hardwareConcurrency−8","location","self",0,"%s","",8,%d]`,
+		config := fmt.Sprintf(`[3000,"%s",4294705152,%d,"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36",null,"","en-US","en-US",%d,"hardwareConcurrency−8","location","self",0,"%s","",8,%d]`,
 			time.Now().String(), nonce, nonce, uuid.NewString(), time.Now().UnixMilli())
 
 		encoded := base64.StdEncoding.EncodeToString([]byte(config))

free-gemini-api/gemini/client.go

@@ -147,7 +147,7 @@ func (c *GeminiClient) InitSession() error {
 		return err
 	}
 
-	req.Header.Set("User-Agent", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36")
+	req.Header.Set("User-Agent", "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36")
 	req.Header.Set("Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8")
 	req.Header.Set("sec-ch-ua", `"Not(A:Brand";v="8", "Chromium";v="144", "Google Chrome";v="144"`)
 	req.Header.Set("sec-ch-ua-arch", `"arm"`)
@@ -216,7 +216,7 @@ func (c *GeminiClient) retryInitSession() error {
 		return err
 	}
 
-	req.Header.Set("User-Agent", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36")
+	req.Header.Set("User-Agent", "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36")
 	req.Header.Set("Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8")
 	req.Header.Set("sec-ch-ua", `"Not(A:Brand";v="8", "Chromium";v="144", "Google Chrome";v="144"`)
 	req.Header.Set("sec-ch-ua-arch", `"arm"`)
@@ -359,7 +359,7 @@ func (c *GeminiClient) executeStreamRequest(prompt string, onChunk func(text str
 	req.URL.RawQuery = q.Encode()
 
 	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
-	req.Header.Set("User-Agent", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
+	req.Header.Set("User-Agent", "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
 	req.Header.Set("Origin", "https://gemini.google.com")
 	req.Header.Set("Referer", "https://gemini.google.com/")
 	req.Header.Set("X-Same-Domain", "1")
@@ -458,7 +458,7 @@ func (c *GeminiClient) UploadImage(imageBytes []byte, filename string, mimeType
 	req.Header.Set("x-goog-upload-header-content-length", fmt.Sprintf("%d", len(imageBytes)))
 	req.Header.Set("x-goog-upload-header-content-type", mimeType)
 	req.Header.Set("push-id", "feeds/mcudyrk2a4khkz")
-	req.Header.Set("User-Agent", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
+	req.Header.Set("User-Agent", "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
 	req.Header.Set("Origin", "https://gemini.google.com")
 	req.Header.Set("Referer", "https://gemini.google.com/")
 
@@ -492,7 +492,7 @@ func (c *GeminiClient) UploadImage(imageBytes []byte, filename string, mimeType
 	req2.Header.Set("Content-Type", mimeType)
 	req2.Header.Set("Origin", "https://gemini.google.com")
 	req2.Header.Set("Referer", "https://gemini.google.com/")
-	req2.Header.Set("User-Agent", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
+	req2.Header.Set("User-Agent", "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
 
 	resp2, err := c.client.Do(req2)
 	if err != nil {
@@ -819,7 +819,7 @@ func (c *GeminiClient) CallRPC(rpcID, payload string) (string, error) {
 	req.URL.RawQuery = q.Encode()
 
 	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
-	req.Header.Set("User-Agent", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
+	req.Header.Set("User-Agent", "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
 	req.Header.Set("Origin", "https://gemini.google.com")
 	req.Header.Set("Referer", "https://gemini.google.com/")
 	req.Header.Set("X-Same-Domain", "1")
@@ -881,7 +881,7 @@ func (c *GeminiClient) sendRequest(prompt string, tool string, imageRef []interf
 	req.URL.RawQuery = q.Encode()
 
 	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
-	req.Header.Set("User-Agent", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
+	req.Header.Set("User-Agent", "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
 	req.Header.Set("Origin", "https://gemini.google.com")
 	req.Header.Set("Referer", "https://gemini.google.com/")
 	req.Header.Set("X-Same-Domain", "1")
@@ -1104,7 +1104,7 @@ func (c *GeminiClient) DownloadFile(urlStr, savePath string) error {
 			return err
 		}
 
-		req.Header.Set("User-Agent", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
+		req.Header.Set("User-Agent", "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
 		req.Header.Set("Accept", "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8")
 		req.Header.Set("sec-ch-ua", `"Not(A:Brand";v="8", "Chromium";v="146", "Google Chrome";v="146"`)
 		req.Header.Set("sec-ch-ua-mobile", "?0")

start_hf.sh

@@ -127,7 +127,7 @@ echo "✨ Launching Chrome Headless..."
   --use-mock-keychain \
   --password-store=basic \
   --window-size=980,1070 \
-  --user-agent='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36' \
+  --user-agent='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36' \
   --disable-gpu \
   --disable-software-rasterizer \
   --disable-gpu-compositing \