Update stale API client fingerprints from HAR audit (2026-06-27)

Airbnb: update ViaductGetThreadAndDataQuery hash (stale — thread reads
would fail when Airbnb stops honoring old hash); update X-Client-Version.

Booking.com: update apollographql-client-version for availability and
messaging GQL; drop x-envoy-expected-rq-timeout-ms from 60s to 15s to
match current browser behaviour.

EditPanelPricingSettingsMutation and inventory/update body verified
current against price-change HARs. Remaining mutation hashes
(EditPanelAvailability, CreateBulkMessages) not capturable this session.

room_cal/service_api/_airbnb.py

@@ -44,7 +44,7 @@ class AirbnbData:
 
 _BASE = 'https://www.airbnb.com/api/v3'
 _API_KEY = 'd306zoyjsyarp7ifhu67rjxn52tv0t20'
-_CLIENT_VERSION = '1290e625734ec090772f14c380214201d956a304'
+_CLIENT_VERSION = 'ef690fbd6464c4bd9f632ec18087662c4e4f05e1'
 _HASHES = {
   'getDLSHostCalendar':               '048e22675ffa53121628d2d07b519b9b71f5dab342a1ceb75aa72d8814a00ea7',
   'EditPanelPricingSettingsMutation': 'e27fed4f08dd4ab4c0267c5d6c0a7e4920730deadf48f92feba9b0d08befafa4',
@@ -52,7 +52,7 @@ _HASHES = {
   'StayHostingDetailsQuery':          '1e81282ae4de44e05bc8b776456644efd4ebcd676451ce7f6c3c5757a1057e02',
   'getNightlyPriceTips':              '07538bf1a5afc8171f1e7443f0007d7f020142fc7ab60df065e7e1edd1a0b29f',
   'HostCalendarListingEventsQuery':   '8bfe5f5572a25fdaff5b5790604e1de3aec5f37731fc505684022d590d06e0a8',
-  'ViaductGetThreadAndDataQuery':     'dcb05a1212b5bbd6137456ad562915405b97efbb20e466ed0ecba59577f53d49',
+  'ViaductGetThreadAndDataQuery':     'c6aff32757966df45d73811219d4f3a57ae7cc9e047b39bb9ba396cd0c09defa',
   'CreateBulkMessagesMutation':       'b0298188a93a73218fecdd512afb7b47c0df3112a4819c236ecc4c0c10c04bd2',
 }
 

room_cal/service_api/_booking.py

@@ -332,9 +332,9 @@ class _BookingClient:
       'X-Booking-Pageview-ID': _page_view_id(),
       'x-booking-csrf-token': 'undefined',
       'apollographql-client-name': 'b-partner-availability-extranet-mfe',
-      'apollographql-client-version': 'GfHKCJeC',
-      'x-envoy-expected-rq-timeout-ms': '60000',
-      'x-booking-timeout-budget-ms': '60000',
+      'apollographql-client-version': 'EQSXMHMY',
+      'x-envoy-expected-rq-timeout-ms': '15000',
+      'x-booking-timeout-budget-ms': '15000',
       'X-Booking-Topic': 'capla_browser_b-partner-availability-extranet-mfe',
       'Cookie': self._cookies,
     }
@@ -356,7 +356,7 @@ class _BookingClient:
       'x-booking-csrf-token': 'undefined',
       'X-Booking-Topic': 'capla_browser_b-partner-messaging-extranet-mfe',
       'apollographql-client-name': 'b-partner-messaging-extranet-mfe',
-      'apollographql-client-version': 'EQSXBFLD',
+      'apollographql-client-version': 'ABJaNSUc',
       'Cookie': self._cookies,
     }