fix: intermittent media 401 errors after token refresh or SW restart

[Just-Insane]

Description

Fixes a chain of service worker session bugs that caused intermittent 401/404 errors on authenticated media:

• Media requests no longer return 401 after a token refresh or SW restart
• Session cache is now guaranteed to flush before the SW can be killed, fixing intermittent 401s on iOS
• OIDC token refreshes are forwarded to the service worker as they happen
• Fixed unhandled promise rejections from media decrypt failures

Fixes #

Type of change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• This change requires a documentation update

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings

AI disclosure:

• Partially AI assisted (GitHub Copilot)

sw.ts: The setSession/clearSession cache writes are now wrapped in event.waitUntil so the browser keeps the SW alive until the caches.put resolves — preventing stale tokens surviving a mid-write SW kill on iOS. Added a requestSessionWithTimeout fallback in fetchMediaWithRetry for the window between a token refresh completing and the resulting setSession message arriving. index.tsx: Calls pushSessionToSW synchronously before React renders so the SW has a valid token before the first fetch event. ClientRoot.tsx: Wires pushSessionToSW into the SDK's onTokenRefresh callback so OIDC token refreshes propagate to the SW immediately. Decrypt failure and media error async paths now have proper rejection handling to avoid unhandled promise rejections.

[Copilot]

Pull request overview

This PR targets media reliability by addressing token refresh propagation and service-worker handling of authenticated media fetches, plus reducing noisy “Uncaught (in promise)” console errors in media-loading UI flows.

Changes:

• Adjust useAsyncCallback error handling behavior and update its tests.
• Persist OIDC refresh_token/expires_in_ms into session state and wire a tokenRefreshFunction into the Matrix client, propagating refreshed access tokens to the service worker.
• Add a SW media fetch wrapper that retries once on HTTP 401 using the latest in-memory/live session token.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
src/sw.ts	Adds fetchMediaWithRetry() and routes media fetch paths through it to mitigate 401s during token-refresh propagation races.
src/client/initMatrix.ts	Passes refresh-token options into createClient and plumbs an optional onTokenRefresh callback to propagate new tokens outward.
src/app/pages/client/ClientRoot.tsx	Supplies the onTokenRefresh callback to update sessions state and push updated tokens to the SW.
src/app/pages/auth/login/loginUtil.ts	Stores refresh_token and expires_in_ms into the session record on login.
src/app/hooks/useAsyncCallback.ts	Changes error handling in the async wrapper (no longer rejects on error) and documents rationale.
src/app/hooks/useAsyncCallback.test.tsx	Updates error test to no longer expect a rejected promise.
.changeset/fix-media-error-handling.md	Adds a patch changeset describing the combined fixes.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[7w1]

I think there might be some extraneous features in here? The whole new dev tools section, the UrlPreviewCard.tsx normalization changes and the sliding sync probe caching?

I think this should either be split into multiple prs or the description should be updated and there should be more changesets. In general I think the code looks fine.

[7w1]

update changesets or split into multiple prs