fluxy-bot 0.3.2 → 0.3.3

package/dist-fluxy/fluxy.html

@@ -4,7 +4,7 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0, interactive-widget=resizes-content" />
     <title>Fluxy Chat</title>
-    <script type="module" crossorigin src="/fluxy/assets/fluxy-Cejh7HRl.js"></script>
+    <script type="module" crossorigin src="/fluxy/assets/fluxy-C6-vL18Q.js"></script>
     <link rel="modulepreload" crossorigin href="/fluxy/assets/globals-Bu5tVsgN.js">
     <link rel="stylesheet" crossorigin href="/fluxy/assets/globals-DYOj4b0m.css">
   </head>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fluxy-bot",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Self-hosted AI bot — run your own AI assistant from anywhere",
   "type": "module",
   "license": "MIT",

package/supervisor/chat/fluxy-main.tsx

@@ -5,7 +5,7 @@ import { WsClient } from './src/lib/ws-client';
 import { useFluxyChat } from './src/hooks/useFluxyChat';
 import OnboardWizard from './OnboardWizard';
 import LoginScreen from './src/components/LoginScreen';
-import { getAuthToken, setAuthToken, clearAuthToken, authFetch } from './src/lib/auth';
+import { getAuthToken, setAuthToken, clearAuthToken, authFetch, onAuthFailure } from './src/lib/auth';
 import MessageList from './src/components/Chat/MessageList';
 import InputBar from './src/components/Chat/InputBar';
 import './src/styles/globals.css';
@@ -74,6 +74,14 @@ function FluxyApp() {
     setAuthenticated(true);
   };
 
+  // Handle mid-session token expiry (authFetch gets 401)
+  useEffect(() => {
+    onAuthFailure(() => {
+      setAuthenticated(false);
+      setAuthRequired(true);
+    });
+  }, []);
+
   // Connect WebSocket only when authenticated
   useEffect(() => {
     if (!authenticated) return;
@@ -145,7 +153,7 @@ function FluxyApp() {
   }, [menuOpen]);
 
   const { messages, streaming, streamBuffer, tools, sendMessage, stopStreaming, clearContext } =
-    useFluxyChat(clientRef.current, reloadTrigger);
+    useFluxyChat(clientRef.current, reloadTrigger, authenticated);
 
   // Auth gate: show spinner while checking, login screen if needed
   if (!authChecked) {

package/supervisor/chat/src/hooks/useFluxyChat.ts

@@ -8,7 +8,7 @@ import { authFetch } from '../lib/auth';
  * Loads/persists messages via the DB (worker API).
  * Supports cross-device sync via chat:sync WS events.
  */
-export function useFluxyChat(ws: WsClient | null, triggerReload?: number) {
+export function useFluxyChat(ws: WsClient | null, triggerReload?: number, enabled = true) {
   const [messages, setMessages] = useState<ChatMessage[]>([]);
   const [conversationId, setConversationId] = useState<string | null>(null);
   const [streaming, setStreaming] = useState(false);
@@ -62,19 +62,19 @@ export function useFluxyChat(ws: WsClient | null, triggerReload?: number) {
     } catch { /* worker not ready yet */ }
   }, []);
 
-  // Load on mount
+  // Load on mount (only when enabled/authenticated)
   useEffect(() => {
-    if (loaded.current) return;
+    if (!enabled || loaded.current) return;
     loaded.current = true;
     loadFromDb();
-  }, [loadFromDb]);
+  }, [enabled, loadFromDb]);
 
   // Reload on reconnect (triggerReload changes)
   useEffect(() => {
-    if (triggerReload && triggerReload > 0) {
+    if (enabled && triggerReload && triggerReload > 0) {
       loadFromDb();
     }
-  }, [triggerReload, loadFromDb]);
+  }, [enabled, triggerReload, loadFromDb]);
 
   useEffect(() => {
     if (!ws) return;

package/supervisor/chat/src/lib/auth.ts

@@ -1,5 +1,7 @@
 const TOKEN_KEY = 'fluxy_token';
 
+let authFailureCallback: (() => void) | null = null;
+
 export function getAuthToken(): string | null {
   return localStorage.getItem(TOKEN_KEY);
 }
@@ -12,6 +14,11 @@ export function clearAuthToken(): void {
   localStorage.removeItem(TOKEN_KEY);
 }
 
+/** Register a callback for when a 401 is received (token expired mid-session) */
+export function onAuthFailure(cb: () => void): void {
+  authFailureCallback = cb;
+}
+
 export async function authFetch(url: string, options: RequestInit = {}): Promise<Response> {
   const token = getAuthToken();
   const headers = new Headers(options.headers);
@@ -21,9 +28,10 @@ export async function authFetch(url: string, options: RequestInit = {}): Promise
 
   const res = await fetch(url, { ...options, headers });
 
-  if (res.status === 401) {
+  if (res.status === 401 && token) {
+    // Token was present but rejected — it expired
     clearAuthToken();
-    window.location.reload();
+    authFailureCallback?.();
   }
 
   return res;