api.spotify.com/v1 is IP-banned for 24h. Switch to Spotify's internal partner API (api-partner.spotify.com/pathfinder/v1/query) which uses separate infrastructure and rate limits. Persisted query hashes are extracted dynamically from JS bundles alongside the TOTP secret. Falls back to REST only if GQL hash not found or partner API fails. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>