- Env.py now reads SPOTIFY_CLIENT_ID/SPOTIFY_CLIENT_SECRET (and optional
path overrides) from the environment instead of hardcoding them.
- Add .env.example and ignore .env / .venv.
- Rewrite README with setup, usage and layout (drops the leaked secret).
Note: secrets are also purged from prior history in this push.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
- fetch() uses a retrying session (connection resets, 5xx, 429 Retry-After)
with backoff, so a transient drop mid-fetch no longer aborts the run.
- tqdm progress bars on all paginated fetches (driven by paging `total`).
- Flow.fetch_spotify(): drop stray `self` from the @staticmethod.
- gui.sh runs the venv's streamlit from the script dir; add requirements.txt.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
- OAuth: URL-encode authorize params (scope spaces were unencoded),
bind loopback redirect server to 127.0.0.1 to match the redirect_uri
per Spotify's 2025 loopback rules, capture refresh_token.
- Search: URL-encode the query and drop the bogus track=1 param.
- Pagination: follow the paging object's `next` field instead of manual
offset/total bookkeeping (Spotify's recommended approach).
- Fix invalid `raise "string"` in save_image_from_url.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
