Spotify

• Every requested account change (follow, playlist build, library read, queue, playback) is one Tools/Spotify.ts call keyed by IDs or URIs, and the account state afterwards matches the request.
• Auth is set up once and never repeated by hand: tokens refresh per invocation, and a dead token or redirect mismatch is traced to its real fix (re-run auth, or fix the dashboard URI).
• Playback is attempted only on a Premium account with an active device, so a Free account still gets search, playlists and library.

This skill reads no files under LIFEOS/USER/. Credentials are env-only: SPOTIFY_CLIENT_ID, SPOTIFY_CLIENT_SECRET and SPOTIFY_REFRESH_TOKEN in ~/.claude/.env (names only here, never values). First-time setup, the Spotify developer app and the proof command are in Setup.md. Tokens auto-refresh per invocation; a missing refresh token means run Intents/Authorize.md. With the credentials missing, the tool exits 1 and points at Setup.md.

• search works before user auth (client-credentials fallback); every other command needs the refresh token.
• 401 on every call → the refresh token died (password change, revoked access); re-run auth (Intents/Authorize.md). The tool persists rotated refresh tokens automatically.
• /me/playlists returns tracks: null on playlist rows (observed) — never assume tracks.total exists; the CLI omits the count when absent.

• "Add this playlist link to my Spotify" → Manage → the playlist is followed with follow-playlist --id <ID> (ID from the URL) and shows in playlists.
• "Make me a focus-music playlist and fill it" → Manage → a new playlist from create-playlist, holding the tracks search resolved, added with add-tracks.
• "What's playing?" → Manage → the now-playing result.
• "Skip this / turn it down" → Manage → next / volume --percent 30 on the active Premium device.