@floomhq/floom 1.0.30 → 1.0.31

package/dist/config.js

@@ -20,7 +20,7 @@ export async function readConfig() {
         const parsed = JSON.parse(buf);
         if (!parsed.accessToken || !parsed.refreshToken)
             return null;
-        return parsed;
+        return refreshConfigIfNeeded(parsed);
     }
     catch (e) {
         if (e.code === "ENOENT")
@@ -28,6 +28,44 @@ export async function readConfig() {
         throw e;
     }
 }
+export async function refreshConfigIfNeeded(cfg, opts = {}) {
+    const now = Math.floor(Date.now() / 1000);
+    if (!opts.force && (typeof cfg.expiresAt !== "number" || cfg.expiresAt > now + 120))
+        return cfg;
+    try {
+        const refreshed = await refreshConfig(cfg);
+        await writeConfig(refreshed);
+        return refreshed;
+    }
+    catch {
+        return cfg;
+    }
+}
+async function refreshConfig(cfg) {
+    const apiUrl = resolveApiUrl(cfg);
+    const res = await fetch(`${apiUrl}/api/auth/refresh`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ refresh_token: cfg.refreshToken }),
+    });
+    if (!res.ok)
+        throw new Error(`refresh failed with ${res.status}`);
+    const data = (await res.json());
+    if (!data.access_token || !data.refresh_token)
+        throw new Error("refresh response missing tokens");
+    const expiresIn = Number(data.expires_in ?? "3600");
+    return {
+        ...cfg,
+        accessToken: data.access_token,
+        refreshToken: data.refresh_token,
+        expiresAt: Math.floor(Date.now() / 1000) + (Number.isFinite(expiresIn) ? expiresIn : 3600),
+        ...(typeof data.email === "string" || data.email === null
+            ? { email: data.email }
+            : typeof cfg.email === "string" || cfg.email === null
+                ? { email: cfg.email }
+                : {}),
+    };
+}
 export async function writeConfig(cfg) {
     const targetPath = process.env.FLOOM_CONFIG_PATH ?? CONFIG_PATH;
     const targetDir = dirname(targetPath);

package/dist/doctor.js

@@ -4,7 +4,7 @@ import { delimiter } from "node:path";
 import { join } from "node:path";
 import { stat, readFile, access, readdir, constants, realpath } from "node:fs/promises";
 import { promisify } from "node:util";
-import { readConfig, CONFIG_PATH, resolveApiUrl } from "./config.js";
+import { readConfig, refreshConfigIfNeeded, CONFIG_PATH, resolveApiUrl } from "./config.js";
 import { floomFetch } from "./lib/api.js";
 import { c, symbols } from "./ui.js";
 import { CLI_VERSION, compareSemverish, formatVersionLabel } from "./version.js";
@@ -33,6 +33,21 @@ async function checkAuth() {
             checkOk: false,
         });
         if (res.status === 401) {
+            const refreshed = await refreshConfigIfNeeded(cfg, { force: true });
+            if (refreshed.accessToken !== cfg.accessToken) {
+                const retry = await floomFetch(`${apiUrl}/api/me`, "check authentication", {
+                    token: refreshed.accessToken,
+                    checkOk: false,
+                });
+                if (retry.ok) {
+                    const data = (await retry.json());
+                    return {
+                        name: "Auth",
+                        status: "ok",
+                        detail: data.email ? `Signed in as ${data.email} (refreshed)` : "Signed in (refreshed)",
+                    };
+                }
+            }
             return {
                 name: "Auth",
                 status: "fail",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floomhq/floom",
-  "version": "1.0.30",
+  "version": "1.0.31",
   "description": "Sync AI skills across agents and machines.",
   "license": "MIT",
   "type": "module",