feat: add personal playlists and shareable track links

EOF

Co-authored-by: Cursor <cursoragent@cursor.com>

packages/core/src/auth.ts

@@ -93,8 +93,8 @@ export class AuthSession {
   private readonly listeners = new Set<(s: AuthState) => void>();
 
   constructor(opts: AuthSessionOptions) {
-    if (opts.clientType === 'android' && !opts.refreshStore) {
-      throw new Error('AuthSession: android client needs a refreshStore');
+    if (opts.clientType !== 'web' && !opts.refreshStore) {
+      throw new Error(`AuthSession: ${opts.clientType} client needs a refreshStore`);
     }
     this.opts = opts;
     this.baseFetch = opts.fetch ?? ((...args) => globalThis.fetch(...args));

packages/core/src/index.ts

@@ -22,5 +22,6 @@ export {
   type Track,
 } from './player';
 export { normalizeGain, TARGET_LUFS } from './gain';
+export { trackShareUrl } from './share';
 export { checkServer, normalizeServerUrl, type ServerCheck } from './server';
 export { initialWaveState, mix, rgb, rgba, step, WAVE_COLORS, waveScale, type Rgb, type WaveState } from './wave-anim';

packages/core/src/share.test.ts

@@ -0,0 +1,9 @@
+import { describe, expect, it } from 'vitest';
+
+import { trackShareUrl } from './share';
+
+describe('trackShareUrl', () => {
+  it('builds a page URL without stream credentials', () => {
+    expect(trackShareUrl('https://music.example', 'ab/cd')).toBe('https://music.example/track/ab%2Fcd');
+  });
+});

packages/core/src/share.ts

@@ -0,0 +1,4 @@
+/** Public page URL: never includes playback credentials or stream URLs. */
+export function trackShareUrl(server: string, trackId: string): string {
+  return new URL(`/track/${encodeURIComponent(trackId)}`, server).href;
+}