Persist OAuth session across page reloads

index.html

@@ -1222,21 +1222,50 @@ window.saveVoice = async function() {
 // ── OAuth ──
 
 async function initOAuth() {
+  // Try restoring from OAuth redirect first
   const result = await oauthHandleRedirectIfPresent();
   if (result) {
     accessToken = result.accessToken;
     userInfo = result.userInfo;
-    // Check Pro status
+    // Persist for page reloads
+    sessionStorage.setItem("zl_token", accessToken);
+    sessionStorage.setItem("zl_user", JSON.stringify(userInfo));
+    await checkProAndShow();
+    return;
+  }
+  // Try restoring from sessionStorage
+  const savedToken = sessionStorage.getItem("zl_token");
+  const savedUser = sessionStorage.getItem("zl_user");
+  if (savedToken && savedUser) {
+    accessToken = savedToken;
+    userInfo = JSON.parse(savedUser);
+    // Verify token is still valid
     try {
       const whoami = await fetch("https://huggingface.co/api/whoami-v2", {
         headers: { Authorization: `Bearer ${accessToken}` }
       }).then(r => r.json());
-      isPro = !!whoami.isPro;
-    } catch { isPro = false; }
-    showApp();
+      if (whoami.name) {
+        isPro = !!whoami.isPro;
+        showApp();
+        return;
+      }
+    } catch {}
+    // Token expired, clear it
+    sessionStorage.removeItem("zl_token");
+    sessionStorage.removeItem("zl_user");
   }
 }
 
+async function checkProAndShow() {
+  try {
+    const whoami = await fetch("https://huggingface.co/api/whoami-v2", {
+      headers: { Authorization: `Bearer ${accessToken}` }
+    }).then(r => r.json());
+    isPro = !!whoami.isPro;
+  } catch { isPro = false; }
+  showApp();
+}
+
 window.login = async function() {
   window.location.href = await oauthLoginUrl({ scopes: "openid profile read-billing" });
 };