[Fran6ix-coder]

Summary

Closes #1336 (FE-95).

Replaces ad-hoc localStorage.getItem('access_token') reads and scattered etch calls with a single �uthFetch helper that injects the bearer token, refreshes once on 401, and logs the user out if the retry still returns 401.

Changes

New helper — rontend/lib/api.ts

• AuthFetchDeps interface {getToken, refresh, logout} — keeps the helper hook-free so plain modules (stores, services) can use it too
• �uthFetch(url, options, deps) — wraps etchWithRetry, sets Authorization header, handles the single-refresh-on-401 flow

Migrated call sites

File	Before	After
playerPreferencesService.ts	localStorage.getItem fallback + raw etch	�uthFetch with AuthFetchDeps
hemeService.ts	optional oken?: string param	deps: AuthFetchDeps
ThemeContext.tsx	called service with no token	useAuth → stable useMemo authDeps
GamePreferencesContext.tsx	called service with no args	useAuth → stable useMemo authDeps
�uthContext.tsx (getSessions/revokeSession/revokeAllSessions)	raw etch with stale �ccessToken state	�uthFetch via �ccessTokenRef (always current)

|
epertoireStore.ts | localStorage.getItem('access_token') directly | �uthFetch with passed AuthFetchDeps |
| ournament/page.tsx | manual �uthHeaders memo + raw etch | �uthFetch with useMemo authDeps |
| openings/page.tsx | called store fn with no token | �uthFetch with useMemo authDeps |

Bug fix

�uthDeps was a plain object literal inside component bodies — new reference every render — causing useCallback dependents to fire on every render (infinite refetch loop). Fixed with useMemo.

Test fixes

• BoardThemeProvider and GamePreferencesProvider now call useAuth() internally, so every test that renders them must wrap in AuthProvider — fixed across �ppearance, Chessboard, �lindfoldVoiceMode, piece-set, and �ccessibility test files
• Fixed import-after-const syntax violations in test files
• Fixed �ppearance.test.tsx header assertions: �uthFetch passes a Headers instance to etch, so assertions now use .get() instead of oMatchObject

Testing

• All workflows unaffected except rontend-check.yml which validates these files — CI will confirm
• Backend, contracts, agent-engines, loadtest, and soroban workflows are path-filtered and untouched