Instruction file imported from ceifeirocv/podcast-app (.github/instructions/podcast-index.instructions.md). Copyright stays with the author.

Podcast Index Integration Rules

• Treat Podcast Index as a service-layer concern under src/services/podcastIndex/.
• Required auth headers per request:
  • User-Agent
  • X-Auth-Key
  • X-Auth-Date
  • Authorization — SHA-1 of apiKey + apiSecret + epochTimestamp
• If EXPO_PUBLIC_PODCAST_INDEX_KEY or EXPO_PUBLIC_PODCAST_INDEX_SECRET is missing, the service must throw a configuration error before making any network request.
• Never expose the Podcast Index API secret in the mobile client bundle in a production app. The current repo uses direct client-side signing intentionally for practice — see env-vars.instructions.md for the security caveat.
• Preferred production approach: call Podcast Index through a trusted backend/proxy that signs requests; the mobile app consumes only proxy endpoints.

Endpoints

Start with endpoints aligned to user goals:

• Search: /search/byterm, /search/bytitle
• Feed details: /podcasts/byfeedid, /podcasts/byfeedurl
• Episodes: /episodes/byfeedid, /episodes/byfeedurl