1.8.3

What's Changed

Pandora

Initial Pandora implementation by @ryansalerno and @sjdonado in #76

Improvements

• Centralize scoring logic and improve comparison inputs by @sjdonado in 81ba789
• Add cleanSearchQuery helper by @sjdonado in 86fbb4b
• Switch Qobuz parser from HTML scraping to private API by @sjdonado in 304a3f4

Spotify API Workaround

• Spotify internal GraphQL API for search with anonymous TOTP-based authentication by @sjdonado in d514ade
  • Spotify restricted their Web API (March 2026) to require a Premium developer account. We now use the same internal GraphQL API as the Spotify web player, with TOTP-based anonymous token auth. No developer account needed.

Anti-Bot Detection

• Replace axios with impit for browser TLS fingerprint impersonation by @sjdonado in cf3c737
  • HTTP requests now impersonate real Chrome TLS fingerprints via impit, reducing bot detection from scraped services (Apple Music, SoundCloud, Deezer, etc.)

Rate Limiting & Reliability

• Add service-level rate budget, circuit breaker, and lower API rate limit by @sjdonado in 83ed163
  • Per-service hourly call caps (YouTube: 80/hr, Spotify: 200/hr, others: 300/hr)
  • Circuit breaker: 5 failures in 60s opens circuit for 30s cooldown
  • /api/search rate limit reduced from 10 to 5 req/min per IP

Bug Fixes

• Fix YouTube video ID duplication in URL construction by @sjdonado in 4f94511 closes #77
• Fix cache false positive hits on search result links by @sjdonado in fb44d88
• Fix Qobuz open link no metadata found by @sjdonado in #75
• Fix build config missing initial CSS build by @sjdonado in f17de66

Full Changelog: 1.8.0...1.8.3