What's new
- Auto Cloudflare verification — when a request hits a Cloudflare challenge, Hikari now opens the verify WebView automatically, waits for it to pass, then retries with the clearance cookie. No more hunting for the globe button. Covers extension repo lists, plugin content, Stremio addons and scraper requests. Already-verified hosts skip the challenge entirely, unsolvable hard blocks never pop anything, and there are no ad popups/redirects inside the verify view.
- yt-dlp universal extraction — when every provider/extractor comes up empty, Hikari gives the page one shot with its built-in yt-dlp engine (across all provider types), and surfaces the real failure reason in the player's error panel if that also fails.
- Picture-in-Picture — the player supports PiP: button in the top bar, and it auto-enters when you press Home.
- Movies show an episode list for every extension — if a source provides episodes for a movie (multi-episode collections and melon-list pages included), the app now lists them all, exactly like a series. Any extension can supply them; none is special-cased.
Fixes
- Search thumbnails now load for every extension. Posters that arrive as huge base64
data:URIs used to be dropped from search results, leaving the whole results grid blank. They're now cached as small disk tokens — the same fix that restored the "Show All" catalog thumbnails — so any extension whose thumbnails were blank before now shows them, and memory stays bounded. - Only the first episode of a series list played — the launch guard now resets when the player closes.
- Player probes stream URLs with unknown containers before playing (yt-dlp streams).
- No more
w3.orgnamespace junk showing up as bogus stream sources from CloudStream plugins. - Detail screen header/poster load immediately; faster hero image.
- Repaired mojibake/encoding corruption across screens.
- Thread-safe block toasts.
Build
- CI hardened: handles the >100MB APK limit, retries release uploads, and fixed the workflow YAML.
Signed APK, auto-built from main.